This bug was fixed in the package linux-azure - 4.15.0-1066.71 --------------- linux-azure (4.15.0-1066.71) xenial; urgency=medium
* xenial/linux-azure: 4.15.0-1066.71 -proposed tracker (LP: #1856203) * [linux-azure] SAUCE patch to "Fix skb protocol value in tpacket_fill_skb()" (LP: #1855461) - SAUCE: af_packet: Fix skb protocol value in tpacket_fill_skb() linux-azure (4.15.0-1065.70) xenial; urgency=medium * xenial/linux-azure: 4.15.0-1065.70 -proposed tracker (LP: #1854813) * [linux-azure] Patch to prevent possible data corruption (LP: #1848739) - blk-mq: quiesce queue during switching io sched and updating nr_requests - blk-mq: move hctx lock/unlock into a helper - blk-mq: factor out a few helpers from __blk_mq_try_issue_directly - blk-mq: improve DM's blk-mq IO merging via blk_insert_cloned_request feedback - dm mpath: fix missing call of path selector type->end_io - blk-mq-sched: remove unused 'can_block' arg from blk_mq_sched_insert_request - blk-mq: don't dispatch request in blk_mq_request_direct_issue if queue is busy - blk-mq: introduce BLK_STS_DEV_RESOURCE - blk-mq: Rename blk_mq_request_direct_issue() into blk_mq_request_issue_directly() - blk-mq: don't queue more if we get a busy return - blk-mq: dequeue request one by one from sw queue if hctx is busy - blk-mq: issue directly if hw queue isn't busy in case of 'none' - blk-mq: fix corruption with direct issue - blk-mq: fail the request in case issue failure - blk-mq: punt failed direct issue to dispatch list [ Ubuntu: 4.15.0-73.82 ] * bionic/linux: 4.15.0-73.82 -proposed tracker (LP: #1854819) * CVE-2019-14901 - SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() * CVE-2019-14896 // CVE-2019-14897 - SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor * CVE-2019-14895 - SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie() * CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660 - powerpc/64s: support nospectre_v2 cmdline option - powerpc/book3s64: Fix link stack flush on context switch - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel * Please add patch fixing RK818 ID detection (LP: #1853192) - SAUCE: mfd: rk808: Fix RK818 ID template * [SRU][B/OEM-B/OEM-OSP1/D] Enable new Elan touchpads which are not in current whitelist (LP: #1853246) - HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630 - Input: elan_i2c - export the device id whitelist - HID: quirks: Refactor ELAN 400 and 401 handling * Lenovo dock MAC Address pass through doesn't work in Ubuntu (LP: #1827961) - r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2 * s390/dasd: reduce the default queue depth and nr of hardware queues (LP: #1852257) - s390/dasd: reduce the default queue depth and nr of hardware queues * External microphone can't work on some dell machines with the codec alc256 or alc236 (LP: #1853791) - SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table - SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table * Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection (LP: #1853197) - xfrm: Fix memleak on xfrm state destroy * CVE-2019-19083 - drm/amd/display: memory leak * update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180) - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it - net: ena: switch to dim algorithm for rx adaptive interrupt moderation - net: ena: reimplement set/get_coalesce() - net: ena: enable the interrupt_moderation in driver_supported_features - net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() - net: ena: remove old adaptive interrupt moderation code from ena_netdev - net: ena: remove ena_restore_ethtool_params() and relevant fields - net: ena: remove all old adaptive rx interrupt moderation code from ena_com - net: ena: fix update of interrupt moderation register - net: ena: fix retrieval of nonadaptive interrupt moderation intervals - net: ena: fix incorrect update of intr_delay_resolution - net: ena: Select DIMLIB for ENA_ETHERNET - SAUCE: net: ena: fix issues in setting interrupt moderation params in ethtool - SAUCE: net: ena: fix too long default tx interrupt moderation interval * CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222) - [Config] Enable ROCKCHIP support for arm64 * backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637) - include/linux/bitops.h: introduce BITS_PER_TYPE - [Config] enable DIMLIB - linux/dim: import DIMLIB (lib/dim/) - SAUCE: linux/dim: avoid library object filename clash * The alsa hda driver is not loaded due to the missing of PCIID for Comet Lake-S [8086:a3f0] (LP: #1852070) - SAUCE: ALSA: hda: Add Cometlake-S PCI ID * Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877) - SAUCE: platform/x86: dell-uart-backlight: add missing status command - SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status - SAUCE: platform/x86: dell-uart-backlight: add force parameter - SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms * Enable framebuffer fonts auto selection for HighDPI screen (LP: #1851623) - fonts: Fix coding style - fonts: Prefer a bigger font for high resolution screens * Disable unreliable HPET on CFL-H system (LP: #1852216) - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms * i40e: Setting VF MAC address causes General Protection Fault (LP: #1852432) - i40e: Fix crash caused by stress setting of VF MAC addresses * Bionic update: upstream stable patchset 2019-11-27 (LP: #1854216) - spi: mediatek: use correct mata->xfer_len when in fifo transfer - tee: optee: add missing of_node_put after of_device_is_available - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() - idr: Fix idr_get_next race with idr_remove - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() - mm/memory_hotplug: fix updating the node span - arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault - fbdev: Ditch fb_edid_add_monspecs - net: ovs: fix return type of ndo_start_xmit function - net: xen-netback: fix return type of ndo_start_xmit function - ARM: dts: dra7: Enable workaround for errata i870 in PCIe host mode - ARM: dts: omap5: enable OTG role for DWC3 controller - f2fs: return correct errno in f2fs_gc - ARM: dts: sun8i: h3-h5: ir register size should be the whole memory block - SUNRPC: Fix priority queue fairness - IB/hfi1: Ensure ucast_dlid access doesnt exceed bounds - kvm: arm/arm64: Fix stage2_flush_memslot for 4 level page table - arm64/numa: Report correct memblock range for the dummy node - ath10k: fix vdev-start timeout on error - ata: ahci_brcm: Allow using driver or DSL SoCs - ath9k: fix reporting calculated new FFT upper max - usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() - usb: dwc3: gadget: Check ENBLSLPM before sending ep command - nl80211: Fix a GET_KEY reply attribute - irqchip/irq-mvebu-icu: Fix wrong private data retrieval - watchdog: w83627hf_wdt: Support NCT6796D, NCT6797D, NCT6798D - KVM: PPC: Inform the userspace about TCE update failures - dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction - dmaengine: timb_dma: Use proper enum in td_prep_slave_sg - ext4: fix build error when DX_DEBUG is defined - clk: keystone: Enable TISCI clocks if K3_ARCH - sunrpc: Fix connect metrics - mei: samples: fix a signedness bug in amt_host_if_call() - cxgb4: Use proper enum in cxgb4_dcb_handle_fw_update - cxgb4: Use proper enum in IEEE_FAUX_SYNC - powerpc/pseries: Fix DTL buffer registration - powerpc/pseries: Fix how we iterate over the DTL entries - powerpc/xive: Move a dereference below a NULL test - ARM: dts: at91: sama5d4_xplained: fix addressable nand flash size - ARM: dts: at91: at91sam9x5cm: fix addressable nand flash size - mtd: rawnand: sh_flctl: Use proper enum for flctl_dma_fifo0_transfer - PM / hibernate: Check the success of generating md5 digest before hibernation - tools: PCI: Fix compilation warnings - clocksource/drivers/sh_cmt: Fixup for 64-bit machines - clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines - md: allow metadata updates while suspending an array - fix - ixgbe: Fix ixgbe TX hangs with XDP_TX beyond queue limit - i40e: Use proper enum in i40e_ndo_set_vf_link_state - ixgbe: Fix crash with VFs and flow director on interface flap - IB/mthca: Fix error return code in __mthca_init_one() - IB/mlx4: Avoid implicit enumerated type conversion - ACPICA: Never run _REG on system_memory and system_IO - powerpc/time: Use clockevents_register_device(), fixing an issue with large decrementer - ata: ep93xx: Use proper enums for directions - media: rc: ir-rc6-decoder: enable toggle bit for Kathrein RCU-676 remote - media: pxa_camera: Fix check for pdev->dev.of_node - media: i2c: adv748x: Support probing a single output - ALSA: hda/sigmatel - Disable automute for Elo VuPoint - KVM: PPC: Book3S PR: Exiting split hack mode needs to fixup both PC and LR - USB: serial: cypress_m8: fix interrupt-out transfer length - mtd: physmap_of: Release resources on error - cpu/SMT: State SMT is disabled even with nosmt and without "=force" - brcmfmac: reduce timeout for action frame scan - brcmfmac: fix full timeout waiting for action frame on-channel tx - qtnfmac: pass sgi rate info flag to wireless core - qtnfmac: drop error reports for out-of-bounds key indexes - clk: samsung: exynos5420: Define CLK_SECKEY gate clock only or Exynos5420 - clk: samsung: Use clk_hw API for calling clk framework from clk notifiers - i2c: brcmstb: Allow enabling the driver on DSL SoCs - NFSv4.x: fix lock recovery during delegation recall - dmaengine: ioat: fix prototype of ioat_enumerate_channels - media: cec-gpio: select correct Signal Free Time - Input: st1232 - set INPUT_PROP_DIRECT property - Input: silead - try firmware reload after unsuccessful resume - remoteproc: Check for NULL firmwares in sysfs interface - kexec: Allocate decrypted control pages for kdump if SME is enabled - x86/olpc: Fix build error with CONFIG_MFD_CS5535=m - dmaengine: rcar-dmac: set scatter/gather max segment size - crypto: mxs-dcp - Fix SHA null hashes and output length - crypto: mxs-dcp - Fix AES issues - xfrm: use correct size to initialise sp->ovec - ACPI / SBS: Fix rare oops when removing modules - iwlwifi: mvm: don't send keys when entering D3 - x86/fsgsbase/64: Fix ptrace() to read the FS/GS base accurately - mmc: tmio: Fix SCC error detection - fbdev: sbuslib: use checked version of put_user() - fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() - reset: Fix potential use-after-free in __of_reset_control_get() - bcache: recal cached_dev_sectors on detach - media: dw9714: Fix error handling in probe function - s390/kasan: avoid vdso instrumentation - proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() - backlight: lm3639: Unconditionally call led_classdev_unregister - mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable - printk: Give error on attempt to set log buffer length to over 2G - media: isif: fix a NULL pointer dereference bug - GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads - media: cx231xx: fix potential sign-extension overflow on large shift - x86/kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error - gpio: syscon: Fix possible NULL ptr usage - spi: fsl-lpspi: Prevent FIFO under/overrun by default - pinctrl: gemini: Mask and set properly - spi: spidev: Fix OF tree warning logic - ARM: 8802/1: Call syscall_trace_exit even when system call skipped - orangefs: rate limit the client not running info message - pinctrl: gemini: Fix up TVC clock group - hwmon: (pwm-fan) Silence error on probe deferral - hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros - netfilter: nft_compat: do not dump private area - misc: cxl: Fix possible null pointer dereference - mac80211: minstrel: fix using short preamble CCK rates on HT clients - mac80211: minstrel: fix CCK rate group streams value - mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode - spi: rockchip: initialize dma_slave_config properly - mlxsw: spectrum_switchdev: Check notification relevance based on upper device - ARM: dts: omap5: Fix dual-role mode on Super-Speed port - tools: PCI: Fix broken pcitest compilation - powerpc/time: Fix clockevent_decrementer initalisation for PR KVM - mmc: tmio: fix SCC error handling to avoid false positive CRC error - ARM: dts: sun8i: h3: bpi-m2-plus: Fix address for external RGMII Ethernet PHY - tcp: up initial rmem to 128KB and SYN rwin to around 64KB - ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq - f2fs: keep lazytime on remount - IB/hfi1: Error path MAD response size is incorrect - PM / devfreq: Fix devfreq_add_device() when drivers are built as modules. - PM / devfreq: Fix handling of min/max_freq == 0 - PM / devfreq: stopping the governor before device_unregister() - watchdog: core: fix null pointer dereference when releasing cdev - watchdog: renesas_wdt: stop when unregistering - watchdog: sama5d4: fix timeout-sec usage - printk: Do not miss new messages when replaying the log - printk: CON_PRINTBUFFER console registration is a bit racy - ALSA: hda: Fix mismatch for register mask and value in ext controller. - x86/PCI: Apply VMD's AERSID fixup generically - IB/rxe: avoid srq memory leak - RDMA/hns: Bugfix for reserved qp number - RDMA/hns: Submit bad wr when post send wr exception - RDMA/hns: Bugfix for CM test - RDMA/hns: Limit the size of extend sge of sq - rpmsg: glink: smem: Support rx peak for size less than 4 bytes - qed: Avoid implicit enum conversion in qed_ooo_submit_tx_buffers - clk: samsung: Use NOIRQ stage for Exynos5433 clocks suspend/resume - printk: Correct wrong casting - mmc: renesas_sdhi_internal_dmac: set scatter/gather max segment size - atmel_lcdfb: support native-mode display-timings - fbdev: fix broken menu dependencies - bcache: account size of buckets used in uuid write to ca->meta_sectors_written - media: cx18: Don't check for address of video_dev - lightnvm: pblk: fix rqd.error return value in pblk_blk_erase_sync - scsi: arcmsr: clean up clang warning on extraneous parentheses - hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors - tcp: start receiver buffer autotuning sooner - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate - PM / devfreq: Fix static checker warning in try_then_request_governor - x86/resctrl: Fix rdt_find_domain() return value and checks * Bionic update: upstream stable patchset 2019-11-25 (LP: #1853915) - kvm: mmu: Don't read PDPTEs when paging is not enabled - KVM: x86: introduce is_pae_paging - MIPS: BCM63XX: fix switch core reset on BCM6368 - scsi: core: Handle drivers which set sg_tablesize to zero - Revert "Input: synaptics-rmi4 - avoid processing unknown IRQs" - ax88172a: fix information leak on short answers - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules - slip: Fix memory leak in slip_open error path - ALSA: usb-audio: Fix missing error check at mixer resolution test - ALSA: usb-audio: not submit urb for stopped endpoint - Input: ff-memless - kill timer in destroy() - Input: synaptics-rmi4 - fix video buffer size - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) - Input: synaptics-rmi4 - clear IRQ enables for F54 - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing - IB/hfi1: Ensure full Gen3 speed in a Gen4 system - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either - iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() - mmc: sdhci-of-at91: fix quirk2 overwrite - iio: adc: max9611: explicitly cast gain_selectors - tee: optee: take DT status property into account - ath10k: fix kernel panic by moving pci flush after napi_disable - iio: dac: mcp4922: fix error handling in mcp4922_write_raw - arm64: dts: allwinner: a64: Olinuxino: fix DRAM voltage - arm64: dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage - ALSA: pcm: signedness bug in snd_pcm_plug_alloc() - arm64: dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply - ARM: dts: at91/trivial: Fix USART1 definition for at91sam9g45 - rtc: rv8803: fix the rv8803 id in the OF table - remoteproc/davinci: Use %zx for formating size_t - extcon: cht-wc: Return from default case to avoid warnings - cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set - ALSA: seq: Do error checks at creating system ports - ath9k: fix tx99 with monitor mode interface - ath10k: limit available channels via DT ieee80211-freq-limit - gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated - ASoC: dpcm: Properly initialise hw->rate_max - pinctrl: ingenic: Probe driver at subsys_initcall - MIPS: BCM47XX: Enable USB power on Netgear WNDR3400v3 - ARM: dts: exynos: Fix sound in Snow-rev5 Chromebook - liquidio: fix race condition in instruction completion processing - ARM: dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks - i40e: use correct length for strncpy - i40e: hold the rtnl lock on clearing interrupt scheme - i40e: Prevent deleting MAC address from VF when set by PF - IB/rxe: fixes for rdma read retry - iwlwifi: don't WARN on trying to dump dead firmware - iwlwifi: mvm: avoid sending too many BARs - ARM: dts: pxa: fix the rtc controller - ARM: dts: pxa: fix power i2c base address - rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument - soc: imx: gpc: fix PDN delay - ASoC: rsnd: ssi: Fix issue in dma data address assignment - net: phy: mscc: read 'vsc8531,vddmac' as an u32 - net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 - ARM: dts: meson8: fix the clock controller register size - ARM: dts: meson8b: fix the clock controller register size - net: lan78xx: Bail out if lan78xx_get_endpoints fails - ASoC: sgtl5000: avoid division by zero if lo_vag is zero - ARM: dts: exynos: Disable pull control for S5M8767 PMIC - ath10k: wmi: disable softirq's while calling ieee80211_rx - IB/ipoib: Ensure that MTU isn't less than minimum permitted - RDMA/core: Rate limit MAD error messages - RDMA/core: Follow correct unregister order between sysfs and cgroup - mips: txx9: fix iounmap related issue - ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation - of: make PowerMac cache node search conditional on CONFIG_PPC_PMAC - ARM: dts: omap3-gta04: give spi_lcd node a label so that we can overwrite in other DTS files - ARM: dts: omap3-gta04: fixes for tvout / venc - ARM: dts: omap3-gta04: tvout: enable as display1 alias - ARM: dts: omap3-gta04: fix touchscreen tsc2007 - ARM: dts: omap3-gta04: make NAND partitions compatible with recent U-Boot - ARM: dts: omap3-gta04: keep vpll2 always on - sched/debug: Use symbolic names for task state constants - arm64: dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire - dmaengine: dma-jz4780: Don't depend on MACH_JZ4780 - dmaengine: dma-jz4780: Further residue status fix - EDAC, sb_edac: Return early on ADDRV bit and address type test - rtc: mt6397: fix possible race condition - rtc: pl030: fix possible race condition - ath9k: add back support for using active monitor interfaces for tx99 - IB/hfi1: Missing return value in error path for user sdma - signal: Always ignore SIGKILL and SIGSTOP sent to the global init - signal: Properly deliver SIGILL from uprobes - signal: Properly deliver SIGSEGV from x86 uprobes - f2fs: fix memory leak of percpu counter in fill_super() - scsi: qla2xxx: Fix iIDMA error - scsi: qla2xxx: Defer chip reset until target mode is enabled - scsi: qla2xxx: Fix dropped srb resource. - scsi: lpfc: Fix errors in log messages. - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() - ARM: imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is set - scsi: pm80xx: Corrected dma_unmap_sg() parameter - scsi: pm80xx: Fixed system hang issue during kexec boot - kprobes: Don't call BUG_ON() if there is a kprobe in use on free list - Drivers: hv: vmbus: Fix synic per-cpu context initialization - nvmem: core: return error code instead of NULL from nvmem_device_get - media: dt-bindings: adv748x: Fix decimal unit addresses - media: fix: media: pci: meye: validate offset to avoid arbitrary access - media: dvb: fix compat ioctl translation - arm64: dts: meson: libretech: update board model - ALSA: intel8x0m: Register irq handler after register initializations - pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map() - llc: avoid blocking in llc_sap_close() - ARM: dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value - soc: qcom: wcnss_ctrl: Avoid string overflow - ARM: dts: socfpga: Fix I2C bus unit-address error - pinctrl: at91: don't use the same irqchip with multiple gpiochips - cxgb4: Fix endianness issue in t4_fwcache() - blok, bfq: do not plug I/O if all queues are weight-raised - arm64: dts: meson: Fix erroneous SPI bus warnings - power: supply: ab8500_fg: silence uninitialized variable warnings - power: reset: at91-poweroff: do not procede if at91_shdwc is allocated - power: supply: max8998-charger: Fix platform data retrieval - component: fix loop condition to call unbind() if bind() fails - kernfs: Fix range checks in kernfs_get_target_path - ip_gre: fix parsing gre header in ipgre_err - ARM: dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036 - ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask - ath9k: Fix a locking bug in ath9k_add_interface() - s390/qeth: invoke softirqs after napi_schedule() - PCI/ACPI: Correct error message for ASPM disabling - serial: uartps: Fix suspend functionality - serial: samsung: Enable baud clock for UART reset procedure in resume - serial: mxs-auart: Fix potential infinite loop - samples/bpf: fix a compilation failure - spi: mediatek: Don't modify spi_transfer when transfer. - ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address - net: hns3: fix return type of ndo_start_xmit function - powerpc/iommu: Avoid derefence before pointer check - powerpc/64s/hash: Fix stab_rr off by one initialization - powerpc/pseries: Disable CPU hotplug across migrations - powerpc: Fix duplicate const clang warning in user access code - RDMA/i40iw: Fix incorrect iterator type - libfdt: Ensure INT_MAX is defined in libfdt_env.h - power: supply: twl4030_charger: fix charging current out-of-bounds - power: supply: twl4030_charger: disable eoc interrupt on linear charge - net: toshiba: fix return type of ndo_start_xmit function - net: xilinx: fix return type of ndo_start_xmit function - net: broadcom: fix return type of ndo_start_xmit function - net: amd: fix return type of ndo_start_xmit function - net: sun: fix return type of ndo_start_xmit function - nfp: provide a better warning when ring allocation fails - usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started - usb: chipidea: Fix otg event handler - mlxsw: spectrum: Init shaper for TCs 8..15 - ARM: dts: am335x-evm: fix number of cpsw - f2fs: fix to recover inode's uid/gid during POR - ARM: dts: ux500: Correct SCU unit address - ARM: dts: ux500: Fix LCDA clock line muxing - ARM: dts: ste: Fix SPI controller node names - spi: pic32: Use proper enum in dmaengine_prep_slave_rg - cpufeature: avoid warning when compiling with clang - crypto: arm/crc32 - avoid warning when compiling with Clang - ARM: dts: marvell: Fix SPI and I2C bus warnings - x86/mce-inject: Reset injection struct after injection - ARM: dts: clearfog: fix sdhci supply property name - bnx2x: Ignore bandwidth attention in single function mode - samples/bpf: fix compilation failure - net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider - net: micrel: fix return type of ndo_start_xmit function - net: freescale: fix return type of ndo_start_xmit function - x86/CPU: Use correct macros for Cyrix calls - x86/CPU: Change query logic so CPUID is enabled before testing - MIPS: kexec: Relax memory restriction - arm64: dts: rockchip: Fix microSD in rk3399 sapphire board - media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() - media: au0828: Fix incorrect error messages - media: davinci: Fix implicit enum conversion warning - ARM: dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock - usb: gadget: uvc: configfs: Drop leaked references to config items - usb: gadget: uvc: configfs: Prevent format changes after linking header - i2c: aspeed: fix invalid clock parameters for very large divisors - phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs - phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs - phy: phy-twl4030-usb: fix denied runtime access - usb: gadget: uvc: Factor out video USB request queueing - usb: gadget: uvc: Only halt video streaming endpoint in bulk mode - coresight: Fix handling of sinks - coresight: perf: Fix per cpu path management - coresight: perf: Disable trace path upon source error - coresight: etm4x: Configure EL2 exception level when kernel is running in HYP - coresight: tmc: Fix byte-address alignment for RRP - misc: kgdbts: Fix restrict error - misc: genwqe: should return proper error value. - vfio/pci: Fix potential memory leak in vfio_msi_cap_len - vfio/pci: Mask buggy SR-IOV VF INTx support - scsi: libsas: always unregister the old device if going to discover new - phy: lantiq: Fix compile warning - ARM: dts: tegra30: fix xcvr-setup-use-fuses - ARM: tegra: apalis_t30: fix mmc1 cmd pull-up - ARM: dts: paz00: fix wakeup gpio keycode - net: smsc: fix return type of ndo_start_xmit function - net: faraday: fix return type of ndo_start_xmit function - f2fs: fix to recover inode's project id during POR - f2fs: mark inode dirty explicitly in recover_inode() - EDAC: Raise the maximum number of memory controllers - ARM: dts: realview: Fix SPI controller node names - firmware: dell_rbu: Make payload memory uncachable - Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto races - Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS - x86/hyperv: Suppress "PCI: Fatal: No config space access function found" - crypto: s5p-sss: Fix Fix argument list alignment - crypto: fix a memory leak in rsa-kcs1pad's encryption mode - iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug dump - iwlwifi: api: annotate compressed BA notif array sizes - iwlwifi: mvm: Allow TKIP for AP mode - scsi: NCR5380: Clear all unissued commands on host reset - scsi: NCR5380: Have NCR5380_select() return a bool - scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE - scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data - scsi: NCR5380: Check for invalid reselection target - scsi: NCR5380: Don't clear busy flag when abort fails - scsi: NCR5380: Don't call dsprintk() following reselection interrupt - scsi: NCR5380: Handle BUS FREE during reselection - scsi: NCR5380: Check for bus reset - arm64: dts: amd: Fix SPI bus warnings - arm64: dts: lg: Fix SPI controller node names - ARM: dts: lpc32xx: Fix SPI controller node names - rtc: armada38x: fix possible race condition - netfilter: masquerade: don't flush all conntracks if only one address deleted on device - usb: xhci-mtk: fix ISOC error when interval is zero - fuse: use READ_ONCE on congestion_threshold and max_background - IB/iser: Fix possible NULL deref at iser_inv_desc() - net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused - memfd: Use radix_tree_deref_slot_protected to avoid the warning. - slcan: Fix memory leak in error path - ipmr: Fix skb headroom in ipmr_get_route(). - IB/hfi1: Use a common pad buffer for 9B and 16B packets - net: ethernet: dwmac-sun8i: Use the correct function in exit path - mm: mempolicy: fix the wrong return value and potential pages leak of mbind - scsi: bfa: use proper time accessor for stats_reset_time - y2038: make do_gettimeofday() and get_seconds() inline - ARM: dts: rcar: Correct SATA device sizes to 2 MiB - ARM: dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale - ARM: dts: exynos: Fix HDMI-HPD line handling on Arndale - i40evf: Validate the number of queues a PF sends - i40evf: set IFF_UNICAST_FLT flag for the VF - i40evf: cancel workqueue sync for adminq when a VF is removed - IB/rxe: avoid back-to-back retries - brcmfmac: fix wrong strnchr usage - mtd: rawnand: fsl_ifc: check result of SRAM initialization - mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions - rtnetlink: move type calculation out of loop - udf: Fix crash during mount - sched/debug: Explicitly cast sched_feat() to bool - usb: mtu3: disable vbus rise/fall interrupts of ltssm - dmaengine: at_xdmac: remove a stray bottom half unlock - scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 - scsi: qla2xxx: Fix deadlock between ATIO and HW lock - scsi: qla2xxx: Fix port speed display on chip reset - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 - net: aquantia: fix hw_atl_utils_fw_upload_dwords - ALSA: hda: Fix implicit definition of pci_iomap() on SH - net: bcmgenet: Fix speed selection for reverse MII - arm64: dts: broadcom: Fix I2C and SPI bus warnings - ARM: dts: bcm: Fix SPI bus warnings - ARM: dts: aspeed: Fix I2C bus warnings - ARM: dts: sunxi: Fix I2C bus warnings - ARM: dts: sun9i: Fix I2C bus warnings - arm64: fix for bad_mode() handler to always result in panic - netfilter: nf_tables: avoid BUG_ON usage - media: vsp1: Fix YCbCr planar formats pitch calculation - PCI: mediatek: Fix unchecked return value - ARM: dts: xilinx: Fix I2C and SPI bus warnings - ipmi_si_pci: fix NULL device in ipmi_si error message - ipmi_si: fix potential integer overflow on large shift - net: cavium: fix return type of ndo_start_xmit function - net: ibm: fix return type of ndo_start_xmit function - selftests/powerpc: Do not fail with reschedule - usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT - s390/zcrypt: enable AP bus scan without a valid default domain - s390/vdso: avoid 64-bit vdso mapping for compat tasks - brcmsmac: allocate ucode with GFP_KERNEL - brcmsmac: Use kvmalloc() for ucode allocations - EDAC: Correct DIMM capacity unit symbol - gpiolib: Fix gpio_direction_* for single direction GPIOs - arm64: dts: fsl: Fix I2C and SPI bus warnings - ARM: dts: imx51-zii-rdu1: Fix the rtc compatible string - f2fs: update i_size after DIO completion - RDMA: Fix dependencies for rdma_user_mmap_io - crypto: s5p-sss: Fix race in error handling - iwlwifi: pcie: gen2: build A-MSDU only for GSO - iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN - usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear - s390/vdso: correct vdso mapping for compat tasks * Bionic update: upstream stable patchset 2019-11-21 (LP: #1853519) - bonding: fix state transition issue in link monitoring - CDC-NCM: handle incomplete transfer of MTU - ipv4: Fix table id reference in fib_sync_down_addr - net: ethernet: octeon_mgmt: Account for second possible VLAN header - net: fix data-race in neigh_event_send() - net: qualcomm: rmnet: Fix potential UAF when unregistering - net: usb: qmi_wwan: add support for DW5821e with eSIM support - NFC: fdp: fix incorrect free object - nfc: netlink: fix double device reference drop - NFC: st21nfca: fix double free - qede: fix NULL pointer deref in __qede_remove() - ALSA: timer: Fix incorrectly assigned timer instance - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series - ALSA: hda/ca0132 - Fix possible workqueue stall - mm: thp: handle page cache THP correctly in PageTransCompoundMap - mm, vmstat: hide /proc/pagetypeinfo from normal users - dump_stack: avoid the livelock of the dump_lock - tools: gpio: Use !building_out_of_srctree to determine srctree - perf tools: Fix time sorting - drm/radeon: fix si_enable_smc_cac() failed issue - HID: wacom: generic: Treat serial number and related fields as unsigned - arm64: Do not mask out PTE_RDONLY in pte_same() - ceph: fix use-after-free in __ceph_remove_cap() - ceph: add missing check in d_revalidate snapdir handling - iio: adc: stm32-adc: fix stopping dma - iio: imu: adis16480: make sure provided frequency is positive - iio: srf04: fix wrong limitation in distance measuring - netfilter: nf_tables: Align nft_expr private data to 64-bit - netfilter: ipset: Fix an error code in ip_set_sockfn_get() - intel_th: pci: Add Comet Lake PCH support - intel_th: pci: Add Jasper Lake PCH support - can: usb_8dev: fix use-after-free on disconnect - can: c_can: c_can_poll(): only read status register after status IRQ - can: peak_usb: fix a potential out-of-sync while decoding packets - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak - can: gs_usb: gs_can_open(): prevent memory leak - can: mcba_usb: fix use-after-free on disconnect - can: peak_usb: fix slab info leak - configfs: stash the data we need into configfs_buffer at open time - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts - configfs: new object reprsenting tree fragments - configfs: provide exclusion between IO and removals - configfs: fix a deadlock in configfs_symlink() - usb: dwc3: Allow disabling of metastability workaround - mfd: palmas: Assign the right powerhold mask for tps65917 - ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes - ARM: dts: dra7: Disable USB metastability workaround for USB2 - [Config] updateconfigs for SGL_ALLOC - lib/scatterlist: Introduce sgl_alloc() and sgl_free() - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path - usbip: Implement SG support to vhci-hcd and stub driver - PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30 - dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config - HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() - RDMA/qedr: Fix reported firmware version - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq - scsi: qla2xxx: fixup incorrect usage of host_byte - RDMA/uverbs: Prevent potential underflow - net: openvswitch: free vport unless register_netdevice() succeeds - scsi: lpfc: Honor module parameter lpfc_use_adisc - scsi: qla2xxx: Initialized mailbox to prevent driver load failure - ipvs: don't ignore errors in case refcounting ip_vs module fails - ipvs: move old_secure_tcp into struct netns_ipvs - bonding: fix unexpected IFF_BONDING bit unset - macsec: fix refcnt leak in module exit routine - usb: fsl: Check memory resource before releasing it - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode. - usb: gadget: composite: Fix possible double free memory bug - usb: gadget: configfs: fix concurrent issue between composite APIs - usb: dwc3: remove the call trace of USBx_GFLADJ - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) - USB: Skip endpoints with 0 maxpacket length - USB: ldusb: use unsigned size format specifiers - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case - scsi: qla2xxx: stop timer in shutdown path - fjes: Handle workqueue allocation failure - net: hisilicon: Fix "Trying to free already-free IRQ" - hv_netvsc: Fix error handling in netvsc_attach() - NFSv4: Don't allow a cached open with a revoked delegation - net: ethernet: arc: add the missed clk_disable_unprepare - igb: Fix constant media auto sense switching when no cable is connected - e1000: fix memory leaks - x86/apic: Move pending interrupt check code into it's own function - x86/apic: Drop logical_smp_processor_id() inline - x86/apic/32: Avoid bogus LDR warnings - can: flexcan: disable completely the ECC mechanism - mm/filemap.c: don't initiate writeback if mapping has no dirty pages - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead - usbip: Fix free of unallocated memory in vhci tx - net: prevent load/store tearing on sk->sk_stamp - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs - x86/cpu: Add Tremont to the cpu vulnerability whitelist - Documentation: Add ITLB_MULTIHIT documentation - net: hns: Fix the stray netpoll locks causing deadlock in NAPI path - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges - mm, meminit: recalculate pcpu batch and high limits after init completes - SMB3: Fix persistent handles reconnect - dmaengine: sprd: Fix the possible memory leak issue - iw_cxgb4: fix ECN check on the passive accept - perf/x86/uncore: Fix event group support - usbip: tools: Fix read_usb_vudc_device() error path handling - RDMA/hns: Prevent memory leaks of eq->buf_list - drm/amdgpu: If amdgpu_ib_schedule fails return back the error. - drm/amd/display: Passive DP->HDMI dongle detection fix - pinctrl: intel: Initialize GPIO properly when used through irqchip - pinctrl: intel: Avoid potential glitches if pin is in GPIO mode - pinctrl: cherryview: Fix irq_valid_mask calculation - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets - vsock/virtio: fix sock refcnt holding during the shutdown * Bionic update: upstream stable patchset 2019-11-19 (LP: #1853208) - arm64: dts: Fix gpio to pinmux mapping - regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone - regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized - ASoC: wm_adsp: Don't generate kcontrols without READ flags - ASoc: rockchip: i2s: Fix RPM imbalance - ARM: dts: logicpd-torpedo-som: Remove twl_keypad - pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable() - ARM: mm: fix alignment handler faults under memory pressure - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions - scsi: sni_53c710: fix compilation error - scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE - ARM: dts: imx7s: Correct GPT's ipg clock source - perf c2c: Fix memory leak in build_cl_output() - perf kmem: Fix memory leak in compact_gfp_flags() - ARM: davinci: dm365: Fix McBSP dma_slave_map entry - scsi: target: core: Do not overwrite CDB byte 1 - ARM: 8926/1: v7m: remove register save to stack before svc - of: unittest: fix memory leak in unittest_data_add - MIPS: bmips: mark exception vectors as char arrays - i2c: stm32f7: remove warning when compiling with W=1 - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs - nbd: handle racing with error'ed out commands - cxgb4: fix panic when attaching to ULD fail - dccp: do not leak jiffies on the wire - net: annotate accesses to sk->sk_incoming_cpu - net: annotate lockless accesses to sk->sk_napi_id - net: dsa: bcm_sf2: Fix IMP setup for port different than 8 - net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum - net: fix sk_page_frag() recursion from memory reclaim - net: hisilicon: Fix ping latency when deal with high throughput - net/mlx4_core: Dynamically set guaranteed amount of counters per VF - selftests: net: reuseport_dualstack: fix uninitalized parameter - udp: fix data-race in udp_set_dev_scratch() - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget - net: dsa: b53: Do not clear existing mirrored port mask - net: usb: lan78xx: Connect PHY before registering MAC - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 - net: dsa: fix switch tree list - net: bcmgenet: reset 40nm EPHY on energy detect - net: add skb_queue_empty_lockless() - udp: use skb_queue_empty_lockless() - net: use skb_queue_empty_lockless() in poll() handlers - net: use skb_queue_empty_lockless() in busy poll contexts - vxlan: check tun_info options_len properly - erspan: fix the tun_info options_len check for erspan - inet: stop leaking jiffies on the wire - net/flow_dissector: switch to siphash - kbuild: use -fmacro-prefix-map to make __FILE__ a relative path - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table - iio: adc: stm32-adc: move registers definitions - powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag - selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue - selftests/powerpc: Fix compile error on tlbie_test due to newer gcc - arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay - arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay - scsi: qla2xxx: fix a potential NULL pointer dereference - irqchip/gic-v3-its: Use the exact ITSList for VMOVP - netns: fix GFP flags in rtnl_net_notifyid() - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() - wireless: Skip directory when generating certificates - ASoC: pcm3168a: The codec does not support S32_LE - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails [ Ubuntu: 4.15.0-72.81 ] * bionic/linux: 4.15.0-72.81 -proposed tracker (LP: #1854027) * [Regression] Bionic kernel 4.15.0-71.80 can not boot on ThunderX (LP: #1853326) - Revert "arm64: Use firmware to detect CPUs that are not affected by Spectre-v2" - Revert "arm64: Get rid of __smccc_workaround_1_hvc_*" * [Regression] Bionic kernel 4.15.0-71.80 can not boot on ThunderX2 and Kunpeng920 (LP: #1852723) - SAUCE: arm64: capabilities: Move setup_boot_cpu_capabilities() call to correct place -- Marcelo Henrique Cerri <marcelo.ce...@canonical.com> Thu, 12 Dec 2019 16:15:46 -0300 ** Changed in: linux-azure (Ubuntu Xenial) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14895 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14896 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14897 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14901 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-18660 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-19083 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1855461 Title: [linux-azure] SAUCE patch to "Fix skb protocol value in tpacket_fill_skb()" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-azure/+bug/1855461/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs