Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2019-12-03

                Ported from the following upstream stable releases:
                        v4.14.157, v4.19.87

       from git://git.kernel.org/

net/mlx4_en: fix mlx4 ethtool -N insertion
net: rtnetlink: prevent underflows in do_setvfinfo()
sfc: Only cancel the PPS workqueue if it exists
net/mlx5e: Fix set vf link state error flow
net/mlxfw: Verify FSM error code translation doesn't exceed array size
net/sched: act_pedit: fix WARN() in the traffic path
vhost/vsock: split packets to send using multiple buffers
gpio: max77620: Fixup debounce delays
tools: gpio: Correctly add make dependencies for gpio_utils
nbd:fix memory leak in nbd_get_socket()
virtio_console: allocate inbufs in add_port() only if it is needed
Revert "fs: ocfs2: fix possible null-pointer dereferences in 
ocfs2_xa_prepare_entry()"
mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ
mwifiex: Fix NL80211_TX_POWER_LIMITED
ALSA: isight: fix leak of reference to firewire unit in error path of .probe 
callback
printk: fix integer overflow in setup_log_buf()
gfs2: Fix marking bitmaps non-full
pty: fix compat ioctls
synclink_gt(): fix compat_ioctl()
powerpc: Fix signedness bug in update_flash_db()
powerpc/boot: Disable vector instructions
powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field
EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr()
brcmsmac: AP mode: update beacon when TIM changes
ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem
skd: fixup usage of legacy IO API
cdrom: don't attempt to fiddle with cdo->capability
spi: sh-msiof: fix deferred probing
mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail
btrfs: handle error of get_old_root
gsmi: Fix bug in append_to_eventlog sysfs handler
misc: mic: fix a DMA pool free failure
w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for 
unsigned, count for max size).
m68k: fix command-line parsing when passed from u-boot
RDMA/bnxt_re: Fix qp async event reporting
pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()'
pwm: lpss: Only set update bit if we are actually changing the settings
amiflop: clean up on errors during setup
qed: Align local and global PTT to propagate through the APIs.
scsi: ips: fix missing break in switch
KVM: nVMX: reset cache/shadows when switching loaded VMCS
KVM/x86: Fix invvpid and invept register operand size in 64-bit mode
scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler
scsi: isci: Change sci_controller_start_task's return type to sci_status
scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param
crypto: ccree - avoid implicit enum conversion
nvmet-fcloop: suppress a compiler warning
clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk
clk: at91: audio-pll: fix audio pmc type
ASoC: tegra_sgtl5000: fix device_node refcounting
scsi: dc395x: fix dma API usage in srb_done
scsi: dc395x: fix DMA API usage in sg_update_list
net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed
net: fix warning in af_unix
xfs: fix use-after-free race in xfs_buf_rele
kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack
PM / Domains: Deal with multiple states but no governor in genpd
ALSA: i2c/cs8427: Fix int to char conversion
macintosh/windfarm_smu_sat: Fix debug output
PCI: vmd: Detach resources after stopping root bus
USB: misc: appledisplay: fix backlight update_status return code
usbip: tools: fix atoi() on non-null terminated string
dm raid: avoid bitmap with raid4/5/6 journal device
SUNRPC: Fix a compile warning for cmpxchg64()
sunrpc: safely reallow resvport min/max inversion
atm: zatm: Fix empty body Clang warnings
s390/perf: Return error when debug_register fails
spi: omap2-mcspi: Set FIFO DMA trigger level to word length
sparc: Fix parport build warnings.
powerpc/pseries: Export raw per-CPU VPA data via debugfs
ceph: fix dentry leak in ceph_readdir_prepopulate
rtc: s35390a: Change buf's type to u8 in s35390a_init
f2fs: fix to spread clear_cold_data()
mISDN: Fix type of switch control variable in ctrl_teimanager
qlcnic: fix a return in qlcnic_dcb_get_capability()
net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode
mfd: arizona: Correct calling of runtime_put_sync
mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values
mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well
mfd: max8997: Enale irq-wakeup unconditionally
selftests/ftrace: Fix to test kprobe $comm arg only if available
selftests: watchdog: fix message when /dev/watchdog open fails
selftests: watchdog: Fix error message.
thermal: rcar_thermal: Prevent hardware access during system suspend
bpf: devmap: fix wrong interface selection in notifier_call
powerpc/process: Fix flush_all_to_thread for SPE
sparc64: Rework xchg() definition to avoid warnings.
arm64: lib: use C string functions with KASAN enabled
fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in 
dlm_print_one_mle()
mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock
macsec: update operstate when lower device changes
macsec: let the administrator set UP state even if lowerdev is down
block: fix the DISCARD request merge
i2c: uniphier-f: make driver robust against concurrency
i2c: uniphier-f: fix occasional timeout error
i2c: uniphier-f: fix race condition when IRQ is cleared
um: Make line/tty semantics use true write IRQ
vfs: avoid problematic remapping requests into partial EOF block
powerpc/xmon: Relax frame size for clang
selftests/powerpc/signal: Fix out-of-tree build
selftests/powerpc/switch_endian: Fix out-of-tree build
selftests/powerpc/cache_shape: Fix out-of-tree build
linux/bitmap.h: handle constant zero-size bitmaps correctly
linux/bitmap.h: fix type of nbits in bitmap_shift_right()
hfsplus: fix BUG on bnode parent update
hfs: fix BUG on bnode parent update
hfsplus: prevent btree data loss on ENOSPC
hfs: prevent btree data loss on ENOSPC
hfsplus: fix return value of hfsplus_get_block()
hfs: fix return value of hfs_get_block()
hfsplus: update timestamps on truncate()
hfs: update timestamp on truncate()
fs/hfs/extent.c: fix array out of bounds read of array extent
mm/memory_hotplug: make add_memory() take the device_hotplug_lock
igb: shorten maximum PHC timecounter update interval
ntb_netdev: fix sleep time mismatch
ntb: intel: fix return value for ndev_vec_mask()
arm64: makefile fix build of .i file in external module case
ocfs2: don't put and assigning null to bh allocated outside
ocfs2: fix clusters leak in ocfs2_defrag_extent()
net: do not abort bulk send on BQL status
sched/topology: Fix off by one bug
sched/fair: Don't increase sd->balance_interval on newidle balance
openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS
clk: sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock
audit: print empty EXECVE args
btrfs: avoid link error with CONFIG_NO_AUTO_INLINE
wil6210: fix locking in wmi_call
wlcore: Fix the return value in case of error in 
'wlcore_vendor_cmd_smart_config_start()'
rtl8xxxu: Fix missing break in switch
brcmsmac: never log "tid x is not agg'able" by default
wireless: airo: potential buffer overflow in sprintf()
rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information
net: dsa: bcm_sf2: Turn on PHY to allow successful registration
scsi: mpt3sas: Fix Sync cache command failure during driver unload
scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices
scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11
scsi: megaraid_sas: Fix msleep granularity
scsi: megaraid_sas: Fix goto labels in error handling
scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces
scsi: lpfc: Correct loss of fc4 type on remote port address change
dlm: fix invalid free
dlm: don't leak kernel pointer to userspace
vrf: mark skb for multicast or link-local as enslaved to VRF
ACPICA: Use %d for signed int print formatting instead of %u
net: bcmgenet: return correct value 'ret' from bcmgenet_power_down
of: unittest: allow base devicetree to have symbol metadata
cfg80211: Prevent regulatory restore during STA disconnect in concurrent 
interfaces
pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues
pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT
pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD
PCI: keystone: Use quirk to limit MRRS for K2G
spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
i2c: uniphier-f: fix timeout error after reading 8 bytes
mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock
ipv6: Fix handling of LLA with VRF and sockets bound to VRF
cfg80211: call disconnect_wk when AP stops
Bluetooth: Fix invalid-free in bcsp_close()
KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
ath9k_hw: fix uninitialized variable data
md/raid10: prevent access of uninitialized resync_pages offset
mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
net: phy: dp83867: fix speed 10 in sgmii mode
net: phy: dp83867: increase SGMII autoneg timer duration
cpufreq: Skip cpufreq resume if it's not suspended
ocfs2: remove ocfs2_is_o2cb_active()
ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
ARC: perf: Accommodate big-endian CPU
x86/insn: Fix awk regexp warnings
x86/speculation: Fix incorrect MDS/TAA mitigation status
x86/speculation: Fix redundant MDS mitigation message
nbd: prevent memory leak
nfc: port100: handle command failure cleanly
media: vivid: Set vid_cap_streaming and vid_out_streaming to true
media: vivid: Fix wrong locking that causes race conditions on streaming stop
media: usbvision: Fix races among open, close, and disconnect
cpufreq: Add NULL checks to show() and store() methods of cpufreq
media: uvcvideo: Fix error path in control parsing failure
media: b2c2-flexcop-usb: add sanity checking
media: cxusb: detect cxusb_ctrl_msg error in query
media: imon: invalid dereference in imon_touch_event
virtio_ring: fix return code on DMA mapping fails
usbip: tools: fix fd leakage in the function of read_attr_usbip_status
usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
usb-serial: cp201x: support Mark-10 digital force gauge
USB: chaoskey: fix error case of a timeout
appledisplay: fix error handling in the scheduled work
USB: serial: mos7840: add USB ID to support Moxa UPort 2210
USB: serial: mos7720: fix remote wakeup
USB: serial: mos7840: fix remote wakeup
USB: serial: option: add support for DW5821e with eSIM support
USB: serial: option: add support for Foxconn T77W968 LTE modules
staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
x86/hyperv: mark hyperv_init as __init function
mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
net/mlx4_en: Fix wrong limitation for number of TX rings
net/mlx5: Fix auto group size calculation
printk: lock/unlock console only for new logbuf entries
powerpc/boot: Fix opal console in boot wrapper
mmc: mediatek: fill the actual clock for mmc debugfs
btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag
nvme-pci: fix hot removal during error handling
PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks
swiotlb: do not panic on mapping failures
powerpc/mm/radix: Fix off-by-one in split mapping logic
powerpc/mm/radix: Fix overuse of small pages in splitting logic
powerpc/mm/radix: Fix small page at boundary when splitting
tools: bpftool: fix completion for "bpftool map update"
ceph: only allow punch hole mode in fallocate
RISC-V: Avoid corrupting the upper 32-bit of phys_addr_t in ioremap
f2fs: spread f2fs_set_inode_flags()
net: socionext: Stop PHY before resetting netsec
tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage
mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition
ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12
mm/gup_benchmark.c: prevent integer overflow in ioctl
lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf
kernel/panic.c: do not append newline to the stack protector panic string
mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock
fm10k: ensure completer aborts are marked as non-fatal after a resume
irq/matrix: Fix memory overallocation
nvme-pci: fix conflicting p2p resource adds
mm: handle no memcg case in memcg_kmem_charge() properly
ocfs2: without quota support, avoid calling quota recovery
soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL
media: ov13858: Check for possible null pointer
wil6210: fix debugfs memory access alignment
scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point
usb: typec: tcpm: charge current handling for sink during hard reset
clk: tegra20: Turn EMC clock gate into divider
of: unittest: initialize args before calling of_*parse_*()
tools: bpftool: pass an argument to silence open_obj_pinned()
nvme-pci: fix surprise removal
mm/page_io.c: do not free shared swap slots
PM / devfreq: Fix kernel oops on governor module load
UBUNTU: upstream stable to v4.14.157, v4.19.87

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux (Ubuntu Bionic)
     Importance: Undecided
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu Bionic)
       Status: New => In Progress

** Changed in: linux (Ubuntu Bionic)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

** Description changed:

- 
-     SRU Justification
- 
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
- 
-        upstream stable patchset 2019-12-03
-        from git://git.kernel.org/
+ SRU Justification
+ 
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
+ 
+        upstream stable patchset 2019-12-03
+ 
+                 Ported from the following upstream stable releases:
+                         v4.14.157, v4.19.87
+ 
+        from git://git.kernel.org/
+ 
+ net/mlx4_en: fix mlx4 ethtool -N insertion
+ net: rtnetlink: prevent underflows in do_setvfinfo()
+ sfc: Only cancel the PPS workqueue if it exists
+ net/mlx5e: Fix set vf link state error flow
+ net/mlxfw: Verify FSM error code translation doesn't exceed array size
+ net/sched: act_pedit: fix WARN() in the traffic path
+ vhost/vsock: split packets to send using multiple buffers
+ gpio: max77620: Fixup debounce delays
+ tools: gpio: Correctly add make dependencies for gpio_utils
+ nbd:fix memory leak in nbd_get_socket()
+ virtio_console: allocate inbufs in add_port() only if it is needed
+ Revert "fs: ocfs2: fix possible null-pointer dereferences in 
ocfs2_xa_prepare_entry()"
+ mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
+ drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
+ platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ
+ mwifiex: Fix NL80211_TX_POWER_LIMITED
+ ALSA: isight: fix leak of reference to firewire unit in error path of .probe 
callback
+ printk: fix integer overflow in setup_log_buf()
+ gfs2: Fix marking bitmaps non-full
+ pty: fix compat ioctls
+ synclink_gt(): fix compat_ioctl()
+ powerpc: Fix signedness bug in update_flash_db()
+ powerpc/boot: Disable vector instructions
+ powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field
+ EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr()
+ brcmsmac: AP mode: update beacon when TIM changes
+ ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem
+ skd: fixup usage of legacy IO API
+ cdrom: don't attempt to fiddle with cdo->capability
+ spi: sh-msiof: fix deferred probing
+ mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail
+ btrfs: handle error of get_old_root
+ gsmi: Fix bug in append_to_eventlog sysfs handler
+ misc: mic: fix a DMA pool free failure
+ w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for 
unsigned, count for max size).
+ m68k: fix command-line parsing when passed from u-boot
+ RDMA/bnxt_re: Fix qp async event reporting
+ pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()'
+ pwm: lpss: Only set update bit if we are actually changing the settings
+ amiflop: clean up on errors during setup
+ qed: Align local and global PTT to propagate through the APIs.
+ scsi: ips: fix missing break in switch
+ KVM: nVMX: reset cache/shadows when switching loaded VMCS
+ KVM/x86: Fix invvpid and invept register operand size in 64-bit mode
+ scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler
+ scsi: isci: Change sci_controller_start_task's return type to sci_status
+ scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param
+ crypto: ccree - avoid implicit enum conversion
+ nvmet-fcloop: suppress a compiler warning
+ clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk
+ clk: at91: audio-pll: fix audio pmc type
+ ASoC: tegra_sgtl5000: fix device_node refcounting
+ scsi: dc395x: fix dma API usage in srb_done
+ scsi: dc395x: fix DMA API usage in sg_update_list
+ net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed
+ net: fix warning in af_unix
+ xfs: fix use-after-free race in xfs_buf_rele
+ kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack
+ PM / Domains: Deal with multiple states but no governor in genpd
+ ALSA: i2c/cs8427: Fix int to char conversion
+ macintosh/windfarm_smu_sat: Fix debug output
+ PCI: vmd: Detach resources after stopping root bus
+ USB: misc: appledisplay: fix backlight update_status return code
+ usbip: tools: fix atoi() on non-null terminated string
+ dm raid: avoid bitmap with raid4/5/6 journal device
+ SUNRPC: Fix a compile warning for cmpxchg64()
+ sunrpc: safely reallow resvport min/max inversion
+ atm: zatm: Fix empty body Clang warnings
+ s390/perf: Return error when debug_register fails
+ spi: omap2-mcspi: Set FIFO DMA trigger level to word length
+ sparc: Fix parport build warnings.
+ powerpc/pseries: Export raw per-CPU VPA data via debugfs
+ ceph: fix dentry leak in ceph_readdir_prepopulate
+ rtc: s35390a: Change buf's type to u8 in s35390a_init
+ f2fs: fix to spread clear_cold_data()
+ mISDN: Fix type of switch control variable in ctrl_teimanager
+ qlcnic: fix a return in qlcnic_dcb_get_capability()
+ net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode
+ mfd: arizona: Correct calling of runtime_put_sync
+ mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values
+ mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well
+ mfd: max8997: Enale irq-wakeup unconditionally
+ selftests/ftrace: Fix to test kprobe $comm arg only if available
+ selftests: watchdog: fix message when /dev/watchdog open fails
+ selftests: watchdog: Fix error message.
+ thermal: rcar_thermal: Prevent hardware access during system suspend
+ bpf: devmap: fix wrong interface selection in notifier_call
+ powerpc/process: Fix flush_all_to_thread for SPE
+ sparc64: Rework xchg() definition to avoid warnings.
+ arm64: lib: use C string functions with KASAN enabled
+ fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in 
dlm_print_one_mle()
+ mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock
+ macsec: update operstate when lower device changes
+ macsec: let the administrator set UP state even if lowerdev is down
+ block: fix the DISCARD request merge
+ i2c: uniphier-f: make driver robust against concurrency
+ i2c: uniphier-f: fix occasional timeout error
+ i2c: uniphier-f: fix race condition when IRQ is cleared
+ um: Make line/tty semantics use true write IRQ
+ vfs: avoid problematic remapping requests into partial EOF block
+ powerpc/xmon: Relax frame size for clang
+ selftests/powerpc/signal: Fix out-of-tree build
+ selftests/powerpc/switch_endian: Fix out-of-tree build
+ selftests/powerpc/cache_shape: Fix out-of-tree build
+ linux/bitmap.h: handle constant zero-size bitmaps correctly
+ linux/bitmap.h: fix type of nbits in bitmap_shift_right()
+ hfsplus: fix BUG on bnode parent update
+ hfs: fix BUG on bnode parent update
+ hfsplus: prevent btree data loss on ENOSPC
+ hfs: prevent btree data loss on ENOSPC
+ hfsplus: fix return value of hfsplus_get_block()
+ hfs: fix return value of hfs_get_block()
+ hfsplus: update timestamps on truncate()
+ hfs: update timestamp on truncate()
+ fs/hfs/extent.c: fix array out of bounds read of array extent
+ mm/memory_hotplug: make add_memory() take the device_hotplug_lock
+ igb: shorten maximum PHC timecounter update interval
+ ntb_netdev: fix sleep time mismatch
+ ntb: intel: fix return value for ndev_vec_mask()
+ arm64: makefile fix build of .i file in external module case
+ ocfs2: don't put and assigning null to bh allocated outside
+ ocfs2: fix clusters leak in ocfs2_defrag_extent()
+ net: do not abort bulk send on BQL status
+ sched/topology: Fix off by one bug
+ sched/fair: Don't increase sd->balance_interval on newidle balance
+ openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS
+ clk: sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock
+ audit: print empty EXECVE args
+ btrfs: avoid link error with CONFIG_NO_AUTO_INLINE
+ wil6210: fix locking in wmi_call
+ wlcore: Fix the return value in case of error in 
'wlcore_vendor_cmd_smart_config_start()'
+ rtl8xxxu: Fix missing break in switch
+ brcmsmac: never log "tid x is not agg'able" by default
+ wireless: airo: potential buffer overflow in sprintf()
+ rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information
+ net: dsa: bcm_sf2: Turn on PHY to allow successful registration
+ scsi: mpt3sas: Fix Sync cache command failure during driver unload
+ scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices
+ scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11
+ scsi: megaraid_sas: Fix msleep granularity
+ scsi: megaraid_sas: Fix goto labels in error handling
+ scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces
+ scsi: lpfc: Correct loss of fc4 type on remote port address change
+ dlm: fix invalid free
+ dlm: don't leak kernel pointer to userspace
+ vrf: mark skb for multicast or link-local as enslaved to VRF
+ ACPICA: Use %d for signed int print formatting instead of %u
+ net: bcmgenet: return correct value 'ret' from bcmgenet_power_down
+ of: unittest: allow base devicetree to have symbol metadata
+ cfg80211: Prevent regulatory restore during STA disconnect in concurrent 
interfaces
+ pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues
+ pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT
+ pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD
+ PCI: keystone: Use quirk to limit MRRS for K2G
+ spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
+ i2c: uniphier-f: fix timeout error after reading 8 bytes
+ mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock
+ ipv6: Fix handling of LLA with VRF and sockets bound to VRF
+ cfg80211: call disconnect_wk when AP stops
+ Bluetooth: Fix invalid-free in bcsp_close()
+ KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
+ ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
+ ath9k_hw: fix uninitialized variable data
+ md/raid10: prevent access of uninitialized resync_pages offset
+ mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
+ net: phy: dp83867: fix speed 10 in sgmii mode
+ net: phy: dp83867: increase SGMII autoneg timer duration
+ cpufreq: Skip cpufreq resume if it's not suspended
+ ocfs2: remove ocfs2_is_o2cb_active()
+ ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
+ ARC: perf: Accommodate big-endian CPU
+ x86/insn: Fix awk regexp warnings
+ x86/speculation: Fix incorrect MDS/TAA mitigation status
+ x86/speculation: Fix redundant MDS mitigation message
+ nbd: prevent memory leak
+ nfc: port100: handle command failure cleanly
+ media: vivid: Set vid_cap_streaming and vid_out_streaming to true
+ media: vivid: Fix wrong locking that causes race conditions on streaming stop
+ media: usbvision: Fix races among open, close, and disconnect
+ cpufreq: Add NULL checks to show() and store() methods of cpufreq
+ media: uvcvideo: Fix error path in control parsing failure
+ media: b2c2-flexcop-usb: add sanity checking
+ media: cxusb: detect cxusb_ctrl_msg error in query
+ media: imon: invalid dereference in imon_touch_event
+ virtio_ring: fix return code on DMA mapping fails
+ usbip: tools: fix fd leakage in the function of read_attr_usbip_status
+ usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
+ usb-serial: cp201x: support Mark-10 digital force gauge
+ USB: chaoskey: fix error case of a timeout
+ appledisplay: fix error handling in the scheduled work
+ USB: serial: mos7840: add USB ID to support Moxa UPort 2210
+ USB: serial: mos7720: fix remote wakeup
+ USB: serial: mos7840: fix remote wakeup
+ USB: serial: option: add support for DW5821e with eSIM support
+ USB: serial: option: add support for Foxconn T77W968 LTE modules
+ staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
+ x86/hyperv: mark hyperv_init as __init function
+ mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
+ net/mlx4_en: Fix wrong limitation for number of TX rings
+ net/mlx5: Fix auto group size calculation
+ printk: lock/unlock console only for new logbuf entries
+ powerpc/boot: Fix opal console in boot wrapper
+ mmc: mediatek: fill the actual clock for mmc debugfs
+ btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag
+ nvme-pci: fix hot removal during error handling
+ PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks
+ swiotlb: do not panic on mapping failures
+ powerpc/mm/radix: Fix off-by-one in split mapping logic
+ powerpc/mm/radix: Fix overuse of small pages in splitting logic
+ powerpc/mm/radix: Fix small page at boundary when splitting
+ tools: bpftool: fix completion for "bpftool map update"
+ ceph: only allow punch hole mode in fallocate
+ RISC-V: Avoid corrupting the upper 32-bit of phys_addr_t in ioremap
+ f2fs: spread f2fs_set_inode_flags()
+ net: socionext: Stop PHY before resetting netsec
+ tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage
+ mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition
+ ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12
+ mm/gup_benchmark.c: prevent integer overflow in ioctl
+ lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf
+ kernel/panic.c: do not append newline to the stack protector panic string
+ mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock
+ fm10k: ensure completer aborts are marked as non-fatal after a resume
+ irq/matrix: Fix memory overallocation
+ nvme-pci: fix conflicting p2p resource adds
+ mm: handle no memcg case in memcg_kmem_charge() properly
+ ocfs2: without quota support, avoid calling quota recovery
+ soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL
+ media: ov13858: Check for possible null pointer
+ wil6210: fix debugfs memory access alignment
+ scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point
+ usb: typec: tcpm: charge current handling for sink during hard reset
+ clk: tegra20: Turn EMC clock gate into divider
+ of: unittest: initialize args before calling of_*parse_*()
+ tools: bpftool: pass an argument to silence open_obj_pinned()
+ nvme-pci: fix surprise removal
+ mm/page_io.c: do not free shared swap slots
+ PM / devfreq: Fix kernel oops on governor module load
+ UBUNTU: upstream stable to v4.14.157, v4.19.87

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1854975

Title:
  Bionic update: upstream stable patchset 2019-12-03

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Bionic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2019-12-03

                  Ported from the following upstream stable releases:
                          v4.14.157, v4.19.87

         from git://git.kernel.org/

  net/mlx4_en: fix mlx4 ethtool -N insertion
  net: rtnetlink: prevent underflows in do_setvfinfo()
  sfc: Only cancel the PPS workqueue if it exists
  net/mlx5e: Fix set vf link state error flow
  net/mlxfw: Verify FSM error code translation doesn't exceed array size
  net/sched: act_pedit: fix WARN() in the traffic path
  vhost/vsock: split packets to send using multiple buffers
  gpio: max77620: Fixup debounce delays
  tools: gpio: Correctly add make dependencies for gpio_utils
  nbd:fix memory leak in nbd_get_socket()
  virtio_console: allocate inbufs in add_port() only if it is needed
  Revert "fs: ocfs2: fix possible null-pointer dereferences in 
ocfs2_xa_prepare_entry()"
  mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
  drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
  platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ
  mwifiex: Fix NL80211_TX_POWER_LIMITED
  ALSA: isight: fix leak of reference to firewire unit in error path of .probe 
callback
  printk: fix integer overflow in setup_log_buf()
  gfs2: Fix marking bitmaps non-full
  pty: fix compat ioctls
  synclink_gt(): fix compat_ioctl()
  powerpc: Fix signedness bug in update_flash_db()
  powerpc/boot: Disable vector instructions
  powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field
  EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr()
  brcmsmac: AP mode: update beacon when TIM changes
  ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem
  skd: fixup usage of legacy IO API
  cdrom: don't attempt to fiddle with cdo->capability
  spi: sh-msiof: fix deferred probing
  mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail
  btrfs: handle error of get_old_root
  gsmi: Fix bug in append_to_eventlog sysfs handler
  misc: mic: fix a DMA pool free failure
  w1: IAD Register is yet readable trough iad sys file. Fix snprintf (%u for 
unsigned, count for max size).
  m68k: fix command-line parsing when passed from u-boot
  RDMA/bnxt_re: Fix qp async event reporting
  pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()'
  pwm: lpss: Only set update bit if we are actually changing the settings
  amiflop: clean up on errors during setup
  qed: Align local and global PTT to propagate through the APIs.
  scsi: ips: fix missing break in switch
  KVM: nVMX: reset cache/shadows when switching loaded VMCS
  KVM/x86: Fix invvpid and invept register operand size in 64-bit mode
  scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler
  scsi: isci: Change sci_controller_start_task's return type to sci_status
  scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param
  crypto: ccree - avoid implicit enum conversion
  nvmet-fcloop: suppress a compiler warning
  clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk
  clk: at91: audio-pll: fix audio pmc type
  ASoC: tegra_sgtl5000: fix device_node refcounting
  scsi: dc395x: fix dma API usage in srb_done
  scsi: dc395x: fix DMA API usage in sg_update_list
  net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed
  net: fix warning in af_unix
  xfs: fix use-after-free race in xfs_buf_rele
  kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack
  PM / Domains: Deal with multiple states but no governor in genpd
  ALSA: i2c/cs8427: Fix int to char conversion
  macintosh/windfarm_smu_sat: Fix debug output
  PCI: vmd: Detach resources after stopping root bus
  USB: misc: appledisplay: fix backlight update_status return code
  usbip: tools: fix atoi() on non-null terminated string
  dm raid: avoid bitmap with raid4/5/6 journal device
  SUNRPC: Fix a compile warning for cmpxchg64()
  sunrpc: safely reallow resvport min/max inversion
  atm: zatm: Fix empty body Clang warnings
  s390/perf: Return error when debug_register fails
  spi: omap2-mcspi: Set FIFO DMA trigger level to word length
  sparc: Fix parport build warnings.
  powerpc/pseries: Export raw per-CPU VPA data via debugfs
  ceph: fix dentry leak in ceph_readdir_prepopulate
  rtc: s35390a: Change buf's type to u8 in s35390a_init
  f2fs: fix to spread clear_cold_data()
  mISDN: Fix type of switch control variable in ctrl_teimanager
  qlcnic: fix a return in qlcnic_dcb_get_capability()
  net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode
  mfd: arizona: Correct calling of runtime_put_sync
  mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values
  mfd: intel_soc_pmic_bxtwc: Chain power button IRQs as well
  mfd: max8997: Enale irq-wakeup unconditionally
  selftests/ftrace: Fix to test kprobe $comm arg only if available
  selftests: watchdog: fix message when /dev/watchdog open fails
  selftests: watchdog: Fix error message.
  thermal: rcar_thermal: Prevent hardware access during system suspend
  bpf: devmap: fix wrong interface selection in notifier_call
  powerpc/process: Fix flush_all_to_thread for SPE
  sparc64: Rework xchg() definition to avoid warnings.
  arm64: lib: use C string functions with KASAN enabled
  fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in 
dlm_print_one_mle()
  mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock
  macsec: update operstate when lower device changes
  macsec: let the administrator set UP state even if lowerdev is down
  block: fix the DISCARD request merge
  i2c: uniphier-f: make driver robust against concurrency
  i2c: uniphier-f: fix occasional timeout error
  i2c: uniphier-f: fix race condition when IRQ is cleared
  um: Make line/tty semantics use true write IRQ
  vfs: avoid problematic remapping requests into partial EOF block
  powerpc/xmon: Relax frame size for clang
  selftests/powerpc/signal: Fix out-of-tree build
  selftests/powerpc/switch_endian: Fix out-of-tree build
  selftests/powerpc/cache_shape: Fix out-of-tree build
  linux/bitmap.h: handle constant zero-size bitmaps correctly
  linux/bitmap.h: fix type of nbits in bitmap_shift_right()
  hfsplus: fix BUG on bnode parent update
  hfs: fix BUG on bnode parent update
  hfsplus: prevent btree data loss on ENOSPC
  hfs: prevent btree data loss on ENOSPC
  hfsplus: fix return value of hfsplus_get_block()
  hfs: fix return value of hfs_get_block()
  hfsplus: update timestamps on truncate()
  hfs: update timestamp on truncate()
  fs/hfs/extent.c: fix array out of bounds read of array extent
  mm/memory_hotplug: make add_memory() take the device_hotplug_lock
  igb: shorten maximum PHC timecounter update interval
  ntb_netdev: fix sleep time mismatch
  ntb: intel: fix return value for ndev_vec_mask()
  arm64: makefile fix build of .i file in external module case
  ocfs2: don't put and assigning null to bh allocated outside
  ocfs2: fix clusters leak in ocfs2_defrag_extent()
  net: do not abort bulk send on BQL status
  sched/topology: Fix off by one bug
  sched/fair: Don't increase sd->balance_interval on newidle balance
  openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS
  clk: sunxi-ng: enable so-said LDOs for A64 SoC's pll-mipi clock
  audit: print empty EXECVE args
  btrfs: avoid link error with CONFIG_NO_AUTO_INLINE
  wil6210: fix locking in wmi_call
  wlcore: Fix the return value in case of error in 
'wlcore_vendor_cmd_smart_config_start()'
  rtl8xxxu: Fix missing break in switch
  brcmsmac: never log "tid x is not agg'able" by default
  wireless: airo: potential buffer overflow in sprintf()
  rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information
  net: dsa: bcm_sf2: Turn on PHY to allow successful registration
  scsi: mpt3sas: Fix Sync cache command failure during driver unload
  scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices
  scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11
  scsi: megaraid_sas: Fix msleep granularity
  scsi: megaraid_sas: Fix goto labels in error handling
  scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces
  scsi: lpfc: Correct loss of fc4 type on remote port address change
  dlm: fix invalid free
  dlm: don't leak kernel pointer to userspace
  vrf: mark skb for multicast or link-local as enslaved to VRF
  ACPICA: Use %d for signed int print formatting instead of %u
  net: bcmgenet: return correct value 'ret' from bcmgenet_power_down
  of: unittest: allow base devicetree to have symbol metadata
  cfg80211: Prevent regulatory restore during STA disconnect in concurrent 
interfaces
  pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues
  pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT
  pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD
  PCI: keystone: Use quirk to limit MRRS for K2G
  spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
  i2c: uniphier-f: fix timeout error after reading 8 bytes
  mm/memory_hotplug: Do not unlock when fails to take the device_hotplug_lock
  ipv6: Fix handling of LLA with VRF and sockets bound to VRF
  cfg80211: call disconnect_wk when AP stops
  Bluetooth: Fix invalid-free in bcsp_close()
  KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
  ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
  ath9k_hw: fix uninitialized variable data
  md/raid10: prevent access of uninitialized resync_pages offset
  mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
  net: phy: dp83867: fix speed 10 in sgmii mode
  net: phy: dp83867: increase SGMII autoneg timer duration
  cpufreq: Skip cpufreq resume if it's not suspended
  ocfs2: remove ocfs2_is_o2cb_active()
  ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
  ARC: perf: Accommodate big-endian CPU
  x86/insn: Fix awk regexp warnings
  x86/speculation: Fix incorrect MDS/TAA mitigation status
  x86/speculation: Fix redundant MDS mitigation message
  nbd: prevent memory leak
  nfc: port100: handle command failure cleanly
  media: vivid: Set vid_cap_streaming and vid_out_streaming to true
  media: vivid: Fix wrong locking that causes race conditions on streaming stop
  media: usbvision: Fix races among open, close, and disconnect
  cpufreq: Add NULL checks to show() and store() methods of cpufreq
  media: uvcvideo: Fix error path in control parsing failure
  media: b2c2-flexcop-usb: add sanity checking
  media: cxusb: detect cxusb_ctrl_msg error in query
  media: imon: invalid dereference in imon_touch_event
  virtio_ring: fix return code on DMA mapping fails
  usbip: tools: fix fd leakage in the function of read_attr_usbip_status
  usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
  usb-serial: cp201x: support Mark-10 digital force gauge
  USB: chaoskey: fix error case of a timeout
  appledisplay: fix error handling in the scheduled work
  USB: serial: mos7840: add USB ID to support Moxa UPort 2210
  USB: serial: mos7720: fix remote wakeup
  USB: serial: mos7840: fix remote wakeup
  USB: serial: option: add support for DW5821e with eSIM support
  USB: serial: option: add support for Foxconn T77W968 LTE modules
  staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
  x86/hyperv: mark hyperv_init as __init function
  mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
  net/mlx4_en: Fix wrong limitation for number of TX rings
  net/mlx5: Fix auto group size calculation
  printk: lock/unlock console only for new logbuf entries
  powerpc/boot: Fix opal console in boot wrapper
  mmc: mediatek: fill the actual clock for mmc debugfs
  btrfs: defrag: use btrfs_mod_outstanding_extents in cluster_pages_for_defrag
  nvme-pci: fix hot removal during error handling
  PCI: mediatek: Fixup MSI enablement logic by enabling MSI before clocks
  swiotlb: do not panic on mapping failures
  powerpc/mm/radix: Fix off-by-one in split mapping logic
  powerpc/mm/radix: Fix overuse of small pages in splitting logic
  powerpc/mm/radix: Fix small page at boundary when splitting
  tools: bpftool: fix completion for "bpftool map update"
  ceph: only allow punch hole mode in fallocate
  RISC-V: Avoid corrupting the upper 32-bit of phys_addr_t in ioremap
  f2fs: spread f2fs_set_inode_flags()
  net: socionext: Stop PHY before resetting netsec
  tools/testing/selftests/vm/gup_benchmark.c: fix 'write' flag usage
  mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition
  ipv4/igmp: fix v1/v2 switchback timeout based on rfc3376, 8.12
  mm/gup_benchmark.c: prevent integer overflow in ioctl
  lib/bitmap.c: fix remaining space computation in bitmap_print_to_pagebuf
  kernel/panic.c: do not append newline to the stack protector panic string
  mm/memory_hotplug: fix online/offline_pages called w.o. mem_hotplug_lock
  fm10k: ensure completer aborts are marked as non-fatal after a resume
  irq/matrix: Fix memory overallocation
  nvme-pci: fix conflicting p2p resource adds
  mm: handle no memcg case in memcg_kmem_charge() properly
  ocfs2: without quota support, avoid calling quota recovery
  soc: bcm: brcmstb: Fix re-entry point with a THUMB2_KERNEL
  media: ov13858: Check for possible null pointer
  wil6210: fix debugfs memory access alignment
  scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point
  usb: typec: tcpm: charge current handling for sink during hard reset
  clk: tegra20: Turn EMC clock gate into divider
  of: unittest: initialize args before calling of_*parse_*()
  tools: bpftool: pass an argument to silence open_obj_pinned()
  nvme-pci: fix surprise removal
  mm/page_io.c: do not free shared swap slots
  PM / devfreq: Fix kernel oops on governor module load
  UBUNTU: upstream stable to v4.14.157, v4.19.87

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1854975/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to