This bug was fixed in the package linux-aws - 4.15.0-1057.59
---------------
linux-aws (4.15.0-1057.59) bionic; urgency=medium
* bionic/linux-aws: 4.15.0-1057.59 -proposed tracker (LP: #1854802)
* Bionic update: upstream stable patchset 2019-11-21 (LP: #1853519)
- aws: [Config] CONFIG_SGL_ALLOC=y
* update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
- aws: [Config] CONFIG_DIMLIB=y
[ Ubuntu: 4.15.0-73.82 ]
* bionic/linux: 4.15.0-73.82 -proposed tracker (LP: #1854819)
* CVE-2019-14901
- SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
* CVE-2019-14896 // CVE-2019-14897
- SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor
* CVE-2019-14895
- SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
* CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660
- powerpc/64s: support nospectre_v2 cmdline option
- powerpc/book3s64: Fix link stack flush on context switch
- KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel
* Please add patch fixing RK818 ID detection (LP: #1853192)
- SAUCE: mfd: rk808: Fix RK818 ID template
* [SRU][B/OEM-B/OEM-OSP1/D] Enable new Elan touchpads which are not in current
whitelist (LP: #1853246)
- HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630
- Input: elan_i2c - export the device id whitelist
- HID: quirks: Refactor ELAN 400 and 401 handling
* Lenovo dock MAC Address pass through doesn't work in Ubuntu (LP: #1827961)
- r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2
* s390/dasd: reduce the default queue depth and nr of hardware queues
(LP: #1852257)
- s390/dasd: reduce the default queue depth and nr of hardware queues
* External microphone can't work on some dell machines with the codec alc256
or alc236 (LP: #1853791)
- SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
- SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table
* Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection
(LP: #1853197)
- xfrm: Fix memleak on xfrm state destroy
* CVE-2019-19083
- drm/amd/display: memory leak
* update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation
- net: ena: reimplement set/get_coalesce()
- net: ena: enable the interrupt_moderation in driver_supported_features
- net: ena: remove code duplication in
ena_com_update_nonadaptive_moderation_interval _*()
- net: ena: remove old adaptive interrupt moderation code from ena_netdev
- net: ena: remove ena_restore_ethtool_params() and relevant fields
- net: ena: remove all old adaptive rx interrupt moderation code from
ena_com
- net: ena: fix update of interrupt moderation register
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals
- net: ena: fix incorrect update of intr_delay_resolution
- net: ena: Select DIMLIB for ENA_ETHERNET
- SAUCE: net: ena: fix issues in setting interrupt moderation params in
ethtool
- SAUCE: net: ena: fix too long default tx interrupt moderation interval
* CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222)
- [Config] Enable ROCKCHIP support for arm64
* backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637)
- include/linux/bitops.h: introduce BITS_PER_TYPE
- [Config] enable DIMLIB
- linux/dim: import DIMLIB (lib/dim/)
- SAUCE: linux/dim: avoid library object filename clash
* The alsa hda driver is not loaded due to the missing of PCIID for Comet
Lake-S [8086:a3f0] (LP: #1852070)
- SAUCE: ALSA: hda: Add Cometlake-S PCI ID
* Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877)
- SAUCE: platform/x86: dell-uart-backlight: add missing status command
- SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status
- SAUCE: platform/x86: dell-uart-backlight: add force parameter
- SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms
* Enable framebuffer fonts auto selection for HighDPI screen (LP: #1851623)
- fonts: Fix coding style
- fonts: Prefer a bigger font for high resolution screens
* Disable unreliable HPET on CFL-H system (LP: #1852216)
- SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms
* i40e: Setting VF MAC address causes General Protection Fault (LP: #1852432)
- i40e: Fix crash caused by stress setting of VF MAC addresses
* Bionic update: upstream stable patchset 2019-11-27 (LP: #1854216)
- spi: mediatek: use correct mata->xfer_len when in fifo transfer
- tee: optee: add missing of_node_put after of_device_is_available
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size()
- idr: Fix idr_get_next race with idr_remove
- mm/memory_hotplug: don't access uninitialized memmaps in
shrink_pgdat_span()
- mm/memory_hotplug: fix updating the node span
- arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault
- fbdev: Ditch fb_edid_add_monspecs
- net: ovs: fix return type of ndo_start_xmit function
- net: xen-netback: fix return type of ndo_start_xmit function
- ARM: dts: dra7: Enable workaround for errata i870 in PCIe host mode
- ARM: dts: omap5: enable OTG role for DWC3 controller
- f2fs: return correct errno in f2fs_gc
- ARM: dts: sun8i: h3-h5: ir register size should be the whole memory block
- SUNRPC: Fix priority queue fairness
- IB/hfi1: Ensure ucast_dlid access doesnt exceed bounds
- kvm: arm/arm64: Fix stage2_flush_memslot for 4 level page table
- arm64/numa: Report correct memblock range for the dummy node
- ath10k: fix vdev-start timeout on error
- ata: ahci_brcm: Allow using driver or DSL SoCs
- ath9k: fix reporting calculated new FFT upper max
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in
fotg210_get_status()
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command
- nl80211: Fix a GET_KEY reply attribute
- irqchip/irq-mvebu-icu: Fix wrong private data retrieval
- watchdog: w83627hf_wdt: Support NCT6796D, NCT6797D, NCT6798D
- KVM: PPC: Inform the userspace about TCE update failures
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg
- ext4: fix build error when DX_DEBUG is defined
- clk: keystone: Enable TISCI clocks if K3_ARCH
- sunrpc: Fix connect metrics
- mei: samples: fix a signedness bug in amt_host_if_call()
- cxgb4: Use proper enum in cxgb4_dcb_handle_fw_update
- cxgb4: Use proper enum in IEEE_FAUX_SYNC
- powerpc/pseries: Fix DTL buffer registration
- powerpc/pseries: Fix how we iterate over the DTL entries
- powerpc/xive: Move a dereference below a NULL test
- ARM: dts: at91: sama5d4_xplained: fix addressable nand flash size
- ARM: dts: at91: at91sam9x5cm: fix addressable nand flash size
- mtd: rawnand: sh_flctl: Use proper enum for flctl_dma_fifo0_transfer
- PM / hibernate: Check the success of generating md5 digest before
hibernation
- tools: PCI: Fix compilation warnings
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines
- md: allow metadata updates while suspending an array - fix
- ixgbe: Fix ixgbe TX hangs with XDP_TX beyond queue limit
- i40e: Use proper enum in i40e_ndo_set_vf_link_state
- ixgbe: Fix crash with VFs and flow director on interface flap
- IB/mthca: Fix error return code in __mthca_init_one()
- IB/mlx4: Avoid implicit enumerated type conversion
- ACPICA: Never run _REG on system_memory and system_IO
- powerpc/time: Use clockevents_register_device(), fixing an issue with
large
decrementer
- ata: ep93xx: Use proper enums for directions
- media: rc: ir-rc6-decoder: enable toggle bit for Kathrein RCU-676 remote
- media: pxa_camera: Fix check for pdev->dev.of_node
- media: i2c: adv748x: Support probing a single output
- ALSA: hda/sigmatel - Disable automute for Elo VuPoint
- KVM: PPC: Book3S PR: Exiting split hack mode needs to fixup both PC and LR
- USB: serial: cypress_m8: fix interrupt-out transfer length
- mtd: physmap_of: Release resources on error
- cpu/SMT: State SMT is disabled even with nosmt and without "=force"
- brcmfmac: reduce timeout for action frame scan
- brcmfmac: fix full timeout waiting for action frame on-channel tx
- qtnfmac: pass sgi rate info flag to wireless core
- qtnfmac: drop error reports for out-of-bounds key indexes
- clk: samsung: exynos5420: Define CLK_SECKEY gate clock only or Exynos5420
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers
- i2c: brcmstb: Allow enabling the driver on DSL SoCs
- NFSv4.x: fix lock recovery during delegation recall
- dmaengine: ioat: fix prototype of ioat_enumerate_channels
- media: cec-gpio: select correct Signal Free Time
- Input: st1232 - set INPUT_PROP_DIRECT property
- Input: silead - try firmware reload after unsuccessful resume
- remoteproc: Check for NULL firmwares in sysfs interface
- kexec: Allocate decrypted control pages for kdump if SME is enabled
- x86/olpc: Fix build error with CONFIG_MFD_CS5535=m
- dmaengine: rcar-dmac: set scatter/gather max segment size
- crypto: mxs-dcp - Fix SHA null hashes and output length
- crypto: mxs-dcp - Fix AES issues
- xfrm: use correct size to initialise sp->ovec
- ACPI / SBS: Fix rare oops when removing modules
- iwlwifi: mvm: don't send keys when entering D3
- x86/fsgsbase/64: Fix ptrace() to read the FS/GS base accurately
- mmc: tmio: Fix SCC error detection
- fbdev: sbuslib: use checked version of put_user()
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper()
- reset: Fix potential use-after-free in __of_reset_control_get()
- bcache: recal cached_dev_sectors on detach
- media: dw9714: Fix error handling in probe function
- s390/kasan: avoid vdso instrumentation
- proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted()
- backlight: lm3639: Unconditionally call led_classdev_unregister
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable
- printk: Give error on attempt to set log buffer length to over 2G
- media: isif: fix a NULL pointer dereference bug
- GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads
- media: cx231xx: fix potential sign-extension overflow on large shift
- x86/kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error
- gpio: syscon: Fix possible NULL ptr usage
- spi: fsl-lpspi: Prevent FIFO under/overrun by default
- pinctrl: gemini: Mask and set properly
- spi: spidev: Fix OF tree warning logic
- ARM: 8802/1: Call syscall_trace_exit even when system call skipped
- orangefs: rate limit the client not running info message
- pinctrl: gemini: Fix up TVC clock group
- hwmon: (pwm-fan) Silence error on probe deferral
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros
- netfilter: nft_compat: do not dump private area
- misc: cxl: Fix possible null pointer dereference
- mac80211: minstrel: fix using short preamble CCK rates on HT clients
- mac80211: minstrel: fix CCK rate group streams value
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode
- spi: rockchip: initialize dma_slave_config properly
- mlxsw: spectrum_switchdev: Check notification relevance based on upper
device
- ARM: dts: omap5: Fix dual-role mode on Super-Speed port
- tools: PCI: Fix broken pcitest compilation
- powerpc/time: Fix clockevent_decrementer initalisation for PR KVM
- mmc: tmio: fix SCC error handling to avoid false positive CRC error
- ARM: dts: sun8i: h3: bpi-m2-plus: Fix address for external RGMII Ethernet
PHY
- tcp: up initial rmem to 128KB and SYN rwin to around 64KB
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq
- f2fs: keep lazytime on remount
- IB/hfi1: Error path MAD response size is incorrect
- PM / devfreq: Fix devfreq_add_device() when drivers are built as modules.
- PM / devfreq: Fix handling of min/max_freq == 0
- PM / devfreq: stopping the governor before device_unregister()
- watchdog: core: fix null pointer dereference when releasing cdev
- watchdog: renesas_wdt: stop when unregistering
- watchdog: sama5d4: fix timeout-sec usage
- printk: Do not miss new messages when replaying the log
- printk: CON_PRINTBUFFER console registration is a bit racy
- ALSA: hda: Fix mismatch for register mask and value in ext controller.
- x86/PCI: Apply VMD's AERSID fixup generically
- IB/rxe: avoid srq memory leak
- RDMA/hns: Bugfix for reserved qp number
- RDMA/hns: Submit bad wr when post send wr exception
- RDMA/hns: Bugfix for CM test
- RDMA/hns: Limit the size of extend sge of sq
- rpmsg: glink: smem: Support rx peak for size less than 4 bytes
- qed: Avoid implicit enum conversion in qed_ooo_submit_tx_buffers
- clk: samsung: Use NOIRQ stage for Exynos5433 clocks suspend/resume
- printk: Correct wrong casting
- mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size
- atmel_lcdfb: support native-mode display-timings
- fbdev: fix broken menu dependencies
- bcache: account size of buckets used in uuid write to
ca->meta_sectors_written
- media: cx18: Don't check for address of video_dev
- lightnvm: pblk: fix rqd.error return value in pblk_blk_erase_sync
- scsi: arcmsr: clean up clang warning on extraneous parentheses
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors
- tcp: start receiver buffer autotuning sooner
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for
hibernate
- PM / devfreq: Fix static checker warning in try_then_request_governor
- x86/resctrl: Fix rdt_find_domain() return value and checks
* Bionic update: upstream stable patchset 2019-11-25 (LP: #1853915)
- kvm: mmu: Don't read PDPTEs when paging is not enabled
- KVM: x86: introduce is_pae_paging
- MIPS: BCM63XX: fix switch core reset on BCM6368
- scsi: core: Handle drivers which set sg_tablesize to zero
- Revert "Input: synaptics-rmi4 - avoid processing unknown IRQs"
- ax88172a: fix information leak on short answers
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules
- slip: Fix memory leak in slip_open error path
- ALSA: usb-audio: Fix missing error check at mixer resolution test
- ALSA: usb-audio: not submit urb for stopped endpoint
- Input: ff-memless - kill timer in destroy()
- Input: synaptics-rmi4 - fix video buffer size
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12
driver
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12)
- Input: synaptics-rmi4 - clear IRQ enables for F54
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
- ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable
- ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm()
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()
- mmc: sdhci-of-at91: fix quirk2 overwrite
- iio: adc: max9611: explicitly cast gain_selectors
- tee: optee: take DT status property into account
- ath10k: fix kernel panic by moving pci flush after napi_disable
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw
- arm64: dts: allwinner: a64: Olinuxino: fix DRAM voltage
- arm64: dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc()
- arm64: dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply
- ARM: dts: at91/trivial: Fix USART1 definition for at91sam9g45
- rtc: rv8803: fix the rv8803 id in the OF table
- remoteproc/davinci: Use %zx for formating size_t
- extcon: cht-wc: Return from default case to avoid warnings
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set
- ALSA: seq: Do error checks at creating system ports
- ath9k: fix tx99 with monitor mode interface
- ath10k: limit available channels via DT ieee80211-freq-limit
- gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated
- ASoC: dpcm: Properly initialise hw->rate_max
- pinctrl: ingenic: Probe driver at subsys_initcall
- MIPS: BCM47XX: Enable USB power on Netgear WNDR3400v3
- ARM: dts: exynos: Fix sound in Snow-rev5 Chromebook
- liquidio: fix race condition in instruction completion processing
- ARM: dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks
- i40e: use correct length for strncpy
- i40e: hold the rtnl lock on clearing interrupt scheme
- i40e: Prevent deleting MAC address from VF when set by PF
- IB/rxe: fixes for rdma read retry
- iwlwifi: don't WARN on trying to dump dead firmware
- iwlwifi: mvm: avoid sending too many BARs
- ARM: dts: pxa: fix the rtc controller
- ARM: dts: pxa: fix power i2c base address
- rtl8187: Fix warning generated when strncpy() destination length matches
the
sixe argument
- soc: imx: gpc: fix PDN delay
- ASoC: rsnd: ssi: Fix issue in dma data address assignment
- net: phy: mscc: read 'vsc8531,vddmac' as an u32
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32
- ARM: dts: meson8: fix the clock controller register size
- ARM: dts: meson8b: fix the clock controller register size
- net: lan78xx: Bail out if lan78xx_get_endpoints fails
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero
- ARM: dts: exynos: Disable pull control for S5M8767 PMIC
- ath10k: wmi: disable softirq's while calling ieee80211_rx
- IB/ipoib: Ensure that MTU isn't less than minimum permitted
- RDMA/core: Rate limit MAD error messages
- RDMA/core: Follow correct unregister order between sysfs and cgroup
- mips: txx9: fix iounmap related issue
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation
- of: make PowerMac cache node search conditional on CONFIG_PPC_PMAC
- ARM: dts: omap3-gta04: give spi_lcd node a label so that we can overwrite
in
other DTS files
- ARM: dts: omap3-gta04: fixes for tvout / venc
- ARM: dts: omap3-gta04: tvout: enable as display1 alias
- ARM: dts: omap3-gta04: fix touchscreen tsc2007
- ARM: dts: omap3-gta04: make NAND partitions compatible with recent U-Boot
- ARM: dts: omap3-gta04: keep vpll2 always on
- sched/debug: Use symbolic names for task state constants
- arm64: dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire
- dmaengine: dma-jz4780: Don't depend on MACH_JZ4780
- dmaengine: dma-jz4780: Further residue status fix
- EDAC, sb_edac: Return early on ADDRV bit and address type test
- rtc: mt6397: fix possible race condition
- rtc: pl030: fix possible race condition
- ath9k: add back support for using active monitor interfaces for tx99
- IB/hfi1: Missing return value in error path for user sdma
- signal: Always ignore SIGKILL and SIGSTOP sent to the global init
- signal: Properly deliver SIGILL from uprobes
- signal: Properly deliver SIGSEGV from x86 uprobes
- f2fs: fix memory leak of percpu counter in fill_super()
- scsi: qla2xxx: Fix iIDMA error
- scsi: qla2xxx: Defer chip reset until target mode is enabled
- scsi: qla2xxx: Fix dropped srb resource.
- scsi: lpfc: Fix errors in log messages.
- scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir()
- ARM: imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is
set
- scsi: pm80xx: Corrected dma_unmap_sg() parameter
- scsi: pm80xx: Fixed system hang issue during kexec boot
- kprobes: Don't call BUG_ON() if there is a kprobe in use on free list
- Drivers: hv: vmbus: Fix synic per-cpu context initialization
- nvmem: core: return error code instead of NULL from nvmem_device_get
- media: dt-bindings: adv748x: Fix decimal unit addresses
- media: fix: media: pci: meye: validate offset to avoid arbitrary access
- media: dvb: fix compat ioctl translation
- arm64: dts: meson: libretech: update board model
- ALSA: intel8x0m: Register irq handler after register initializations
- pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map()
- llc: avoid blocking in llc_sap_close()
- ARM: dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value
- soc: qcom: wcnss_ctrl: Avoid string overflow
- ARM: dts: socfpga: Fix I2C bus unit-address error
- pinctrl: at91: don't use the same irqchip with multiple gpiochips
- cxgb4: Fix endianness issue in t4_fwcache()
- blok, bfq: do not plug I/O if all queues are weight-raised
- arm64: dts: meson: Fix erroneous SPI bus warnings
- power: supply: ab8500_fg: silence uninitialized variable warnings
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated
- power: supply: max8998-charger: Fix platform data retrieval
- component: fix loop condition to call unbind() if bind() fails
- kernfs: Fix range checks in kernfs_get_target_path
- ip_gre: fix parsing gre header in ipgre_err
- ARM: dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask
- ath9k: Fix a locking bug in ath9k_add_interface()
- s390/qeth: invoke softirqs after napi_schedule()
- PCI/ACPI: Correct error message for ASPM disabling
- serial: uartps: Fix suspend functionality
- serial: samsung: Enable baud clock for UART reset procedure in resume
- serial: mxs-auart: Fix potential infinite loop
- samples/bpf: fix a compilation failure
- spi: mediatek: Don't modify spi_transfer when transfer.
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address
- net: hns3: fix return type of ndo_start_xmit function
- powerpc/iommu: Avoid derefence before pointer check
- powerpc/64s/hash: Fix stab_rr off by one initialization
- powerpc/pseries: Disable CPU hotplug across migrations
- powerpc: Fix duplicate const clang warning in user access code
- RDMA/i40iw: Fix incorrect iterator type
- libfdt: Ensure INT_MAX is defined in libfdt_env.h
- power: supply: twl4030_charger: fix charging current out-of-bounds
- power: supply: twl4030_charger: disable eoc interrupt on linear charge
- net: toshiba: fix return type of ndo_start_xmit function
- net: xilinx: fix return type of ndo_start_xmit function
- net: broadcom: fix return type of ndo_start_xmit function
- net: amd: fix return type of ndo_start_xmit function
- net: sun: fix return type of ndo_start_xmit function
- nfp: provide a better warning when ring allocation fails
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is
already
started
- usb: chipidea: Fix otg event handler
- mlxsw: spectrum: Init shaper for TCs 8..15
- ARM: dts: am335x-evm: fix number of cpsw
- f2fs: fix to recover inode's uid/gid during POR
- ARM: dts: ux500: Correct SCU unit address
- ARM: dts: ux500: Fix LCDA clock line muxing
- ARM: dts: ste: Fix SPI controller node names
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg
- cpufeature: avoid warning when compiling with clang
- crypto: arm/crc32 - avoid warning when compiling with Clang
- ARM: dts: marvell: Fix SPI and I2C bus warnings
- x86/mce-inject: Reset injection struct after injection
- ARM: dts: clearfog: fix sdhci supply property name
- bnx2x: Ignore bandwidth attention in single function mode
- samples/bpf: fix compilation failure
- net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider
- net: micrel: fix return type of ndo_start_xmit function
- net: freescale: fix return type of ndo_start_xmit function
- x86/CPU: Use correct macros for Cyrix calls
- x86/CPU: Change query logic so CPUID is enabled before testing
- MIPS: kexec: Relax memory restriction
- arm64: dts: rockchip: Fix microSD in rk3399 sapphire board
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init()
- media: au0828: Fix incorrect error messages
- media: davinci: Fix implicit enum conversion warning
- ARM: dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock
- usb: gadget: uvc: configfs: Drop leaked references to config items
- usb: gadget: uvc: configfs: Prevent format changes after linking header
- i2c: aspeed: fix invalid clock parameters for very large divisors
- phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs
- phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs
- phy: phy-twl4030-usb: fix denied runtime access
- usb: gadget: uvc: Factor out video USB request queueing
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode
- coresight: Fix handling of sinks
- coresight: perf: Fix per cpu path management
- coresight: perf: Disable trace path upon source error
- coresight: etm4x: Configure EL2 exception level when kernel is running in
HYP
- coresight: tmc: Fix byte-address alignment for RRP
- misc: kgdbts: Fix restrict error
- misc: genwqe: should return proper error value.
- vfio/pci: Fix potential memory leak in vfio_msi_cap_len
- vfio/pci: Mask buggy SR-IOV VF INTx support
- scsi: libsas: always unregister the old device if going to discover new
- phy: lantiq: Fix compile warning
- ARM: dts: tegra30: fix xcvr-setup-use-fuses
- ARM: tegra: apalis_t30: fix mmc1 cmd pull-up
- ARM: dts: paz00: fix wakeup gpio keycode
- net: smsc: fix return type of ndo_start_xmit function
- net: faraday: fix return type of ndo_start_xmit function
- f2fs: fix to recover inode's project id during POR
- f2fs: mark inode dirty explicitly in recover_inode()
- EDAC: Raise the maximum number of memory controllers
- ARM: dts: realview: Fix SPI controller node names
- firmware: dell_rbu: Make payload memory uncachable
- Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto
races
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS
- x86/hyperv: Suppress "PCI: Fatal: No config space access function found"
- crypto: s5p-sss: Fix Fix argument list alignment
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode
- iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug
dump
- iwlwifi: api: annotate compressed BA notif array sizes
- iwlwifi: mvm: Allow TKIP for AP mode
- scsi: NCR5380: Clear all unissued commands on host reset
- scsi: NCR5380: Have NCR5380_select() return a bool
- scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE
- scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data
- scsi: NCR5380: Check for invalid reselection target
- scsi: NCR5380: Don't clear busy flag when abort fails
- scsi: NCR5380: Don't call dsprintk() following reselection interrupt
- scsi: NCR5380: Handle BUS FREE during reselection
- scsi: NCR5380: Check for bus reset
- arm64: dts: amd: Fix SPI bus warnings
- arm64: dts: lg: Fix SPI controller node names
- ARM: dts: lpc32xx: Fix SPI controller node names
- rtc: armada38x: fix possible race condition
- netfilter: masquerade: don't flush all conntracks if only one address
deleted on device
- usb: xhci-mtk: fix ISOC error when interval is zero
- fuse: use READ_ONCE on congestion_threshold and max_background
- IB/iser: Fix possible NULL deref at iser_inv_desc()
- net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused
- memfd: Use radix_tree_deref_slot_protected to avoid the warning.
- slcan: Fix memory leak in error path
- ipmr: Fix skb headroom in ipmr_get_route().
- IB/hfi1: Use a common pad buffer for 9B and 16B packets
- net: ethernet: dwmac-sun8i: Use the correct function in exit path
- mm: mempolicy: fix the wrong return value and potential pages leak of
mbind
- scsi: bfa: use proper time accessor for stats_reset_time
- y2038: make do_gettimeofday() and get_seconds() inline
- ARM: dts: rcar: Correct SATA device sizes to 2 MiB
- ARM: dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale
- ARM: dts: exynos: Fix HDMI-HPD line handling on Arndale
- i40evf: Validate the number of queues a PF sends
- i40evf: set IFF_UNICAST_FLT flag for the VF
- i40evf: cancel workqueue sync for adminq when a VF is removed
- IB/rxe: avoid back-to-back retries
- brcmfmac: fix wrong strnchr usage
- mtd: rawnand: fsl_ifc: check result of SRAM initialization
- mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions
- rtnetlink: move type calculation out of loop
- udf: Fix crash during mount
- sched/debug: Explicitly cast sched_feat() to bool
- usb: mtu3: disable vbus rise/fall interrupts of ltssm
- dmaengine: at_xdmac: remove a stray bottom half unlock
- scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0
- scsi: qla2xxx: Fix deadlock between ATIO and HW lock
- scsi: qla2xxx: Fix port speed display on chip reset
- scsi: lpfc: Correct invalid EQ doorbell write on if_type=6
- net: aquantia: fix hw_atl_utils_fw_upload_dwords
- ALSA: hda: Fix implicit definition of pci_iomap() on SH
- net: bcmgenet: Fix speed selection for reverse MII
- arm64: dts: broadcom: Fix I2C and SPI bus warnings
- ARM: dts: bcm: Fix SPI bus warnings
- ARM: dts: aspeed: Fix I2C bus warnings
- ARM: dts: sunxi: Fix I2C bus warnings
- ARM: dts: sun9i: Fix I2C bus warnings
- arm64: fix for bad_mode() handler to always result in panic
- netfilter: nf_tables: avoid BUG_ON usage
- media: vsp1: Fix YCbCr planar formats pitch calculation
- PCI: mediatek: Fix unchecked return value
- ARM: dts: xilinx: Fix I2C and SPI bus warnings
- ipmi_si_pci: fix NULL device in ipmi_si error message
- ipmi_si: fix potential integer overflow on large shift
- net: cavium: fix return type of ndo_start_xmit function
- net: ibm: fix return type of ndo_start_xmit function
- selftests/powerpc: Do not fail with reschedule
- usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT
- s390/zcrypt: enable AP bus scan without a valid default domain
- s390/vdso: avoid 64-bit vdso mapping for compat tasks
- brcmsmac: allocate ucode with GFP_KERNEL
- brcmsmac: Use kvmalloc() for ucode allocations
- EDAC: Correct DIMM capacity unit symbol
- gpiolib: Fix gpio_direction_* for single direction GPIOs
- arm64: dts: fsl: Fix I2C and SPI bus warnings
- ARM: dts: imx51-zii-rdu1: Fix the rtc compatible string
- f2fs: update i_size after DIO completion
- RDMA: Fix dependencies for rdma_user_mmap_io
- crypto: s5p-sss: Fix race in error handling
- iwlwifi: pcie: gen2: build A-MSDU only for GSO
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN
- usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear
- s390/vdso: correct vdso mapping for compat tasks
* Bionic update: upstream stable patchset 2019-11-21 (LP: #1853519)
- bonding: fix state transition issue in link monitoring
- CDC-NCM: handle incomplete transfer of MTU
- ipv4: Fix table id reference in fib_sync_down_addr
- net: ethernet: octeon_mgmt: Account for second possible VLAN header
- net: fix data-race in neigh_event_send()
- net: qualcomm: rmnet: Fix potential UAF when unregistering
- net: usb: qmi_wwan: add support for DW5821e with eSIM support
- NFC: fdp: fix incorrect free object
- nfc: netlink: fix double device reference drop
- NFC: st21nfca: fix double free
- qede: fix NULL pointer deref in __qede_remove()
- ALSA: timer: Fix incorrectly assigned timer instance
- ALSA: bebob: fix to detect configured source of sampling clock for
Focusrite
Saffire Pro i/o series
- ALSA: hda/ca0132 - Fix possible workqueue stall
- mm: thp: handle page cache THP correctly in PageTransCompoundMap
- mm, vmstat: hide /proc/pagetypeinfo from normal users
- dump_stack: avoid the livelock of the dump_lock
- tools: gpio: Use !building_out_of_srctree to determine srctree
- perf tools: Fix time sorting
- drm/radeon: fix si_enable_smc_cac() failed issue
- HID: wacom: generic: Treat serial number and related fields as unsigned
- arm64: Do not mask out PTE_RDONLY in pte_same()
- ceph: fix use-after-free in __ceph_remove_cap()
- ceph: add missing check in d_revalidate snapdir handling
- iio: adc: stm32-adc: fix stopping dma
- iio: imu: adis16480: make sure provided frequency is positive
- iio: srf04: fix wrong limitation in distance measuring
- netfilter: nf_tables: Align nft_expr private data to 64-bit
- netfilter: ipset: Fix an error code in ip_set_sockfn_get()
- intel_th: pci: Add Comet Lake PCH support
- intel_th: pci: Add Jasper Lake PCH support
- can: usb_8dev: fix use-after-free on disconnect
- can: c_can: c_can_poll(): only read status register after status IRQ
- can: peak_usb: fix a potential out-of-sync while decoding packets
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid
skb mem leak
- can: gs_usb: gs_can_open(): prevent memory leak
- can: mcba_usb: fix use-after-free on disconnect
- can: peak_usb: fix slab info leak
- configfs: stash the data we need into configfs_buffer at open time
- configfs_register_group() shouldn't be (and isn't) called in rmdirable
parts
- configfs: new object reprsenting tree fragments
- configfs: provide exclusion between IO and removals
- configfs: fix a deadlock in configfs_symlink()
- usb: dwc3: Allow disabling of metastability workaround
- mfd: palmas: Assign the right powerhold mask for tps65917
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes
- ARM: dts: dra7: Disable USB metastability workaround for USB2
- [Config] updateconfigs for SGL_ALLOC
- lib/scatterlist: Introduce sgl_alloc() and sgl_free()
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
- usbip: Implement SG support to vhci-hcd and stub driver
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
- dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
- RDMA/qedr: Fix reported firmware version
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
- scsi: qla2xxx: fixup incorrect usage of host_byte
- RDMA/uverbs: Prevent potential underflow
- net: openvswitch: free vport unless register_netdevice() succeeds
- scsi: lpfc: Honor module parameter lpfc_use_adisc
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure
- ipvs: don't ignore errors in case refcounting ip_vs module fails
- ipvs: move old_secure_tcp into struct netns_ipvs
- bonding: fix unexpected IFF_BONDING bit unset
- macsec: fix refcnt leak in module exit routine
- usb: fsl: Check memory resource before releasing it
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
- usb: gadget: composite: Fix possible double free memory bug
- usb: gadget: configfs: fix concurrent issue between composite APIs
- usb: dwc3: remove the call trace of USBx_GFLADJ
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise
RIP validity
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family
(10h)
- USB: Skip endpoints with 0 maxpacket length
- USB: ldusb: use unsigned size format specifiers
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
- scsi: qla2xxx: stop timer in shutdown path
- fjes: Handle workqueue allocation failure
- net: hisilicon: Fix "Trying to free already-free IRQ"
- hv_netvsc: Fix error handling in netvsc_attach()
- NFSv4: Don't allow a cached open with a revoked delegation
- net: ethernet: arc: add the missed clk_disable_unprepare
- igb: Fix constant media auto sense switching when no cable is connected
- e1000: fix memory leaks
- x86/apic: Move pending interrupt check code into it's own function
- x86/apic: Drop logical_smp_processor_id() inline
- x86/apic/32: Avoid bogus LDR warnings
- can: flexcan: disable completely the ECC mechanism
- mm/filemap.c: don't initiate writeback if mapping has no dirty pages
- cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is
dead
- usbip: Fix free of unallocated memory in vhci tx
- net: prevent load/store tearing on sk->sk_stamp
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
- x86/cpu: Add Tremont to the cpu vulnerability whitelist
- Documentation: Add ITLB_MULTIHIT documentation
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
- mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
- mm, meminit: recalculate pcpu batch and high limits after init completes
- SMB3: Fix persistent handles reconnect
- dmaengine: sprd: Fix the possible memory leak issue
- iw_cxgb4: fix ECN check on the passive accept
- perf/x86/uncore: Fix event group support
- usbip: tools: Fix read_usb_vudc_device() error path handling
- RDMA/hns: Prevent memory leaks of eq->buf_list
- drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
- drm/amd/display: Passive DP->HDMI dongle detection fix
- pinctrl: intel: Initialize GPIO properly when used through irqchip
- pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
- pinctrl: cherryview: Fix irq_valid_mask calculation
- netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
- vsock/virtio: fix sock refcnt holding during the shutdown
* Bionic update: upstream stable patchset 2019-11-19 (LP: #1853208)
- arm64: dts: Fix gpio to pinmux mapping
- regulator: ti-abb: Fix timeout in
ti_abb_wait_txdone/ti_abb_clear_all_txdone
- regulator: pfuze100-regulator: Variable "val" in
pfuze100_regulator_probe()
could be uninitialized
- ASoC: wm_adsp: Don't generate kcontrols without READ flags
- ASoc: rockchip: i2s: Fix RPM imbalance
- ARM: dts: logicpd-torpedo-som: Remove twl_keypad
- pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable()
- ARM: mm: fix alignment handler faults under memory pressure
- scsi: scsi_dh_alua: handle RTPG sense code correctly during state
transitions
- scsi: sni_53c710: fix compilation error
- scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE
- ARM: dts: imx7s: Correct GPT's ipg clock source
- perf c2c: Fix memory leak in build_cl_output()
- perf kmem: Fix memory leak in compact_gfp_flags()
- ARM: davinci: dm365: Fix McBSP dma_slave_map entry
- scsi: target: core: Do not overwrite CDB byte 1
- ARM: 8926/1: v7m: remove register save to stack before svc
- of: unittest: fix memory leak in unittest_data_add
- MIPS: bmips: mark exception vectors as char arrays
- i2c: stm32f7: remove warning when compiling with W=1
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
- nbd: handle racing with error'ed out commands
- cxgb4: fix panic when attaching to ULD fail
- dccp: do not leak jiffies on the wire
- net: annotate accesses to sk->sk_incoming_cpu
- net: annotate lockless accesses to sk->sk_napi_id
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum
- net: fix sk_page_frag() recursion from memory reclaim
- net: hisilicon: Fix ping latency when deal with high throughput
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF
- selftests: net: reuseport_dualstack: fix uninitalized parameter
- udp: fix data-race in udp_set_dev_scratch()
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget
- net: dsa: b53: Do not clear existing mirrored port mask
- net: usb: lan78xx: Connect PHY before registering MAC
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2
- net: dsa: fix switch tree list
- net: bcmgenet: reset 40nm EPHY on energy detect
- net: add skb_queue_empty_lockless()
- udp: use skb_queue_empty_lockless()
- net: use skb_queue_empty_lockless() in poll() handlers
- net: use skb_queue_empty_lockless() in busy poll contexts
- vxlan: check tun_info options_len properly
- erspan: fix the tun_info options_len check for erspan
- inet: stop leaking jiffies on the wire
- net/flow_dissector: switch to siphash
- kbuild: use -fmacro-prefix-map to make __FILE__ a relative path
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI
table
- iio: adc: stm32-adc: move registers definitions
- powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
- selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue
- selftests/powerpc: Fix compile error on tlbie_test due to newer gcc
- arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay
- arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay
- scsi: qla2xxx: fix a potential NULL pointer dereference
- irqchip/gic-v3-its: Use the exact ITSList for VMOVP
- netns: fix GFP flags in rtnl_net_notifyid()
- net: usb: lan78xx: Disable interrupts before calling generic_handle_irq()
- wireless: Skip directory when generating certificates
- ASoC: pcm3168a: The codec does not support S32_LE
- usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending
driver fails
-- Paolo Pisati <paolo.pis...@canonical.com> Tue, 03 Dec 2019 14:14:15
+0100
** Changed in: linux-aws (Ubuntu Bionic)
Status: Confirmed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14895
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14896
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14897
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14901
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-18660
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-19083
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854802
Title:
bionic/linux-aws: 4.15.0-1057.59 -proposed tracker
To manage notifications about this bug go to:
https://bugs.launchpad.net/kernel-sru-workflow/+bug/1854802/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
