Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-12-09 Ported from the following upstream stable releases: v4.14.158, v4.19.88 from git://git.kernel.org/ Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS" clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX ASoC: compress: fix unsigned integer overflow check reset: Fix memory leak in reset_control_array_put() ASoC: kirkwood: fix external clock probe defer clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume reset: fix reset_control_ops kerneldoc comment clk: at91: avoid sleeping early clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 idr: Fix idr_alloc_u32 on 32-bit systems x86/resctrl: Prevent NULL pointer dereference when reading mondata clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call net: fec: add missed clk_disable_unprepare in remove bridge: ebtables: don't crash when using dnat target in output chains can: peak_usb: report bus recovery as well can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error watchdog: meson: Fix the wrong value of left time scripts/gdb: fix debugging modules compiled with hot/cold partitioning net: bcmgenet: reapply manual settings to the PHY ceph: return -EINVAL if given fsc mount option on kernel w/o support mac80211: fix station inactive_time shortly after boot block: drbd: remove a stray unlock in __drbd_send_protocol() pwm: bcm-iproc: Prevent unloading the driver module while in use scsi: lpfc: Fix kernel Oops due to null pring pointers scsi: lpfc: Fix dif and first burst use in write commands ARM: dts: Fix up SQ201 flash access ARM: debug-imx: only define DEBUG_IMX_UART_PORT if needed UBUNTU: [Config] updateconfigs for DEBUG_IMX_UART_PORT ARM: dts: imx53-voipac-dmm-668: Fix memory node duplication parisc: Fix serio address output parisc: Fix HP SDC hpa address output arm64: mm: Prevent mismatched 52-bit VA support arm64: smp: Handle errors reported by the firmware ARM: OMAP1: fix USB configuration for device-only setups RDMA/vmw_pvrdma: Use atomic memory allocation in create AH PM / AVS: SmartReflex: NULL check before some freeing functions is not needed ARM: ks8695: fix section mismatch warning ACPI / LPSS: Ignore acpi_device_fix_up_power() return value scsi: lpfc: Enable Management features for IF_TYPE=6 crypto: user - support incremental algorithm dumps mwifiex: fix potential NULL dereference and use after free mwifiex: debugfs: correct histogram spacing, formatting rtl818x: fix potential use after free xfs: require both realtime inodes to mount ubi: Put MTD device after it is not used ubi: Do not drop UBI device reference before using microblaze: adjust the help to the real behavior microblaze: move "... is ready" messages to arch/microblaze/Makefile iwlwifi: move iwl_nvm_check_version() into dvm gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB kvm: vmx: Set IA32_TSC_AUX for legacy mode guests VSOCK: bind to random port for VMADDR_PORT_ANY mmc: meson-gx: make sure the descriptor is stopped on errors mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET btrfs: only track ref_heads in delayed_ref_updates HID: intel-ish-hid: fixes incorrect error handling serial: 8250: Rate limit serial port rx interrupts during input overruns kprobes/x86/xen: blacklist non-attachable xen interrupt functions xen/pciback: Check dev_data before using it vfio-mdev/samples: Use u8 instead of char for handle functions pinctrl: xway: fix gpio-hog related boot issues net/mlx5: Continue driver initialization despite debugfs failure exofs_mount(): fix leaks on failure exits bnxt_en: Return linux standard errors in bnxt_ethtool.c bnxt_en: query force speeds before disabling autoneg mode. KVM: s390: unregister debug feature on failing arch init pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10 HID: doc: fix wrong data structure reference for UHID_OUTPUT dm flakey: Properly corrupt multi-page bios. gfs2: take jdata unstuff into account in do_grow xfs: Align compat attrlist_by_handle with native implementation. xfs: Fix bulkstat compat ioctls on x32 userspace. IB/qib: Fix an error code in qib_sdma_verbs_send() clocksource/drivers/fttmr010: Fix invalid interrupt register access vxlan: Fix error path in __vxlan_dev_create() powerpc/book3s/32: fix number of bats in p/v_block_mapped() powerpc/xmon: fix dump_segments() drivers/regulator: fix a missing check of return value Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading serial: max310x: Fix tx_empty() callback openrisc: Fix broken paths to arch/or32 RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer scsi: qla2xxx: deadlock by configfs_depend_item scsi: csiostor: fix incorrect dma device in case of vport ath6kl: Only use match sets when firmware supports it ath6kl: Fix off by one error in scan completion powerpc/perf: Fix unit_sel/cache_sel checks powerpc/prom: fix early DEBUG messages powerpc/mm: Make NULL pointer deferences explicit on bad page faults. powerpc/44x/bamboo: Fix PCI range vfio/spapr_tce: Get rid of possible infinite loop powerpc/powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status drbd: ignore "all zero" peer volume sizes in handshake drbd: reject attach of unsuitable uuids even if connected drbd: do not block when adjusting "disk-options" while IO is frozen drbd: fix print_st_err()'s prototype to match the definition IB/rxe: Make counters thread safe regulator: tps65910: fix a missing check of return value powerpc/83xx: handle machine check caused by watchdog timer powerpc/pseries: Fix node leak in update_lmb_associativity_index() crypto: mxc-scc - fix build warnings on ARM64 pwm: clps711x: Fix period calculation net/netlink_compat: Fix a missing check of nla_parse_nested net/net_namespace: Check the return value of register_pernet_subsys() f2fs: fix to dirty inode synchronously um: Make GCOV depend on !KCOV net: (cpts) fix a missing check of clk_prepare net: stmicro: fix a missing check of clk_prepare net: dsa: bcm_sf2: Propagate error value from mdio_write atl1e: checking the status of atl1e_write_phy_reg tipc: fix a missing check of genlmsg_put net/wan/fsl_ucc_hdlc: Avoid double free in ucc_hdlc_probe() ocfs2: clear journal dirty flag after shutdown journal vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk lib/genalloc.c: use vzalloc_node() to allocate the bitmap fork: fix some -Wmissing-prototypes warnings drivers/base/platform.c: kmemleak ignore a known leak lib/genalloc.c: include vmalloc.h mtd: Check add_mtd_device() ret code tipc: fix memory leak in tipc_nl_compat_publ_dump net/core/neighbour: tell kmemleak about hash tables PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() net/core/neighbour: fix kmemleak minimal reference count for hash tables serial: 8250: Fix serial8250 initialization crash gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel decnet: fix DN_IFREQ_SIZE net/smc: prevent races between smc_lgr_terminate() and smc_conn_free() blktrace: Show requests without sector tipc: fix skb may be leaky in tipc_link_input sfc: initialise found bitmap in efx_ef10_mtd_probe net: fix possible overflow in __sk_mem_raise_allocated() sctp: don't compare hb_timer expire date before starting it bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() net: dev: Use unsigned integer as an argument to left-shift kvm: properly check debugfs dentry before using it bpf: drop refcount if bpf_map_new_fd() fails in map_create() net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED apparmor: delete the dentry in aafs_remove() to avoid a leak scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery ACPI / APEI: Don't wait to serialise with oops messages when panic()ing ACPI / APEI: Switch estatus pool to use vmalloc memory scsi: libsas: Check SMP PHY control function result mtd: Remove a debug trace in mtdpart.c mm, gup: add missing refcount overflow checks on s390 clk: at91: fix update bit maps on CFG_MOR write clk: at91: generated: set audio_pll_allowed in at91_clk_register_generated() staging: rtl8192e: fix potential use after free staging: rtl8723bs: Drop ACPI device ids staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P mei: bus: prefix device names on bus with the bus name media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE net: macb: fix error format in dev_err() pwm: Clear chip_data in pwm_put() media: atmel: atmel-isc: fix asd memory allocation media: atmel: atmel-isc: fix INIT_WORK misplacement macvlan: schedule bc_work even if error net: psample: fix skb_over_panic openvswitch: fix flow command message size slip: Fix use-after-free Read in slip_open openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() openvswitch: remove another BUG_ON() tipc: fix link name length check sctp: cache netns in sctp_ep_common net: sched: fix `tc -s class show` no bstats on class with nolock subqueues ext4: add more paranoia checking in ext4_expand_extra_isize handling watchdog: sama5d4: fix WDD value to be always set to max net: macb: Fix SUBNS increment and increase resolution net: macb driver, check for SKBTX_HW_TSTAMP mtd: rawnand: atmel: Fix spelling mistake in error message mtd: rawnand: atmel: fix possible object reference leak mtd: spi-nor: cast to u64 to avoid uint overflows y2038: futex: Move compat implementation into futex.c futex: Prevent robust futex exit race futex: Move futex exit handling into futex code futex: Replace PF_EXITPIDONE with a state exit/exec: Seperate mm_release() futex: Split futex_mm_release() for exit/exec futex: Set task::futex_state to DEAD right after handling futex exit futex: Mark the begin of futex exit explicitly futex: Sanitize exit state handling futex: Provide state handling for exec() as well futex: Add mutex around futex exit futex: Provide distinct return value when owner is exiting futex: Prevent exit livelock HID: core: check whether Usage Page item is after Usage ID items crypto: stm32/hash - Fix hmac issue more than 256 bytes media: stm32-dcmi: fix DMA corruption when stopping streaming hwrng: stm32 - fix unbalanced pm_runtime_enable mailbox: mailbox-test: fix null pointer if no mmio pinctrl: stm32: fix memory leak issue ASoC: stm32: i2s: fix dma configuration ASoC: stm32: i2s: fix 16 bit format support ASoC: stm32: i2s: fix IRQ clearing platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size net: fec: fix clock count mis-match clk: samsung: exynos5433: Fix error paths pinctrl: cherryview: Allocate IRQ chip dynamic ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend samples/bpf: fix build by setting HAVE_ATTR_TEST to zero idr: Fix integer overflow in idr_for_each_entry can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race condition net: bcmgenet: use RGMII loopback for MAC reset RDMA/hns: Fix the bug while use multi-hop of pbl s390/zcrypt: make sysfs reset attribute trigger queue reset bcache: do not check if debug dentry is ERR or NULL explicitly on remove bcache: do not mark writeback_running too early microblaze: fix multiple bugs in arch/microblaze/boot/Makefile iwlwifi: pcie: fix erroneous print usb: ehci-omap: Fix deferred probe for phy handling btrfs: fix ncopies raid_attr for RAID56 Btrfs: allow clear_extent_dirty() to receive a cached extent state record serial: sh-sci: Fix crash in rx_timer_fn() on PIO fallback kprobes: Blacklist symbols in arch-defined prohibited area kprobes/x86: Show x86-64 specific blacklisted symbols correctly memory: omap-gpmc: Get the header of the enum netfilter: nf_nat_sip: fix RTP/RTCP source port translations bnxt_en: Save ring statistics before reset. brcmfmac: Fix access point mode powerpc/32: Avoid unsupported flags with clang powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y mm/page_alloc.c: free order-0 pages through PCP in page_frag_free() mm/page_alloc.c: use a single function to free page mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free() infiniband: bnxt_re: qplib: Check the return value of send_message infiniband/qedr: Potential null ptr dereference of qp firmware: arm_sdei: fix wrong of_node_put() in init function firmware: arm_sdei: Fix DT platform device creation ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs net/smc: don't wait for send buffer space when data was already sent mm/hotplug: invalid PFNs from pfn_to_online_page() ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI geneve: change NET_UDP_TUNNEL dependency to select mmc: core: align max segment size with logical block size net: hns3: fix PFC not setting problem for DCB module net: hns3: fix an issue for hclgevf_ae_get_hdev net: hns3: fix an issue for hns3_update_new_int_gl scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned RDMA/hns: Bugfix for the scene without receiver queue RDMA/hns: Fix the state of rereg mr thunderbolt: Power cycle the router if NVM authentication fails tcp: exit if nothing to retransmit on RTO timeout UBUNTU: upstream stable to v4.14.158, v4.19.88 ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Bionic) Importance: Undecided Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Bionic) Status: New => In Progress ** Changed in: linux (Ubuntu Bionic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + upstream stable patchset 2019-12-09 - upstream stable patchset 2019-12-09 - from git://git.kernel.org/ + Ported from the following upstream stable releases: + v4.14.158, v4.19.88 + + from git://git.kernel.org/ ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-12-09 - Ported from the following upstream stable releases: - v4.14.158, v4.19.88 + Ported from the following upstream stable releases: + v4.14.158, v4.19.88 from git://git.kernel.org/ + + Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS" + clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate + ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX + ASoC: compress: fix unsigned integer overflow check + reset: Fix memory leak in reset_control_array_put() + ASoC: kirkwood: fix external clock probe defer + clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume + reset: fix reset_control_ops kerneldoc comment + clk: at91: avoid sleeping early + clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 + idr: Fix idr_alloc_u32 on 32-bit systems + x86/resctrl: Prevent NULL pointer dereference when reading mondata + clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call + net: fec: add missed clk_disable_unprepare in remove + bridge: ebtables: don't crash when using dnat target in output chains + can: peak_usb: report bus recovery as well + can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open + can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak + can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max + can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM + can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors + can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error + can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error + watchdog: meson: Fix the wrong value of left time + scripts/gdb: fix debugging modules compiled with hot/cold partitioning + net: bcmgenet: reapply manual settings to the PHY + ceph: return -EINVAL if given fsc mount option on kernel w/o support + mac80211: fix station inactive_time shortly after boot + block: drbd: remove a stray unlock in __drbd_send_protocol() + pwm: bcm-iproc: Prevent unloading the driver module while in use + scsi: lpfc: Fix kernel Oops due to null pring pointers + scsi: lpfc: Fix dif and first burst use in write commands + ARM: dts: Fix up SQ201 flash access + ARM: debug-imx: only define DEBUG_IMX_UART_PORT if needed + UBUNTU: [Config] updateconfigs for DEBUG_IMX_UART_PORT + ARM: dts: imx53-voipac-dmm-668: Fix memory node duplication + parisc: Fix serio address output + parisc: Fix HP SDC hpa address output + arm64: mm: Prevent mismatched 52-bit VA support + arm64: smp: Handle errors reported by the firmware + ARM: OMAP1: fix USB configuration for device-only setups + RDMA/vmw_pvrdma: Use atomic memory allocation in create AH + PM / AVS: SmartReflex: NULL check before some freeing functions is not needed + ARM: ks8695: fix section mismatch warning + ACPI / LPSS: Ignore acpi_device_fix_up_power() return value + scsi: lpfc: Enable Management features for IF_TYPE=6 + crypto: user - support incremental algorithm dumps + mwifiex: fix potential NULL dereference and use after free + mwifiex: debugfs: correct histogram spacing, formatting + rtl818x: fix potential use after free + xfs: require both realtime inodes to mount + ubi: Put MTD device after it is not used + ubi: Do not drop UBI device reference before using + microblaze: adjust the help to the real behavior + microblaze: move "... is ready" messages to arch/microblaze/Makefile + iwlwifi: move iwl_nvm_check_version() into dvm + gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB + kvm: vmx: Set IA32_TSC_AUX for legacy mode guests + VSOCK: bind to random port for VMADDR_PORT_ANY + mmc: meson-gx: make sure the descriptor is stopped on errors + mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET + btrfs: only track ref_heads in delayed_ref_updates + HID: intel-ish-hid: fixes incorrect error handling + serial: 8250: Rate limit serial port rx interrupts during input overruns + kprobes/x86/xen: blacklist non-attachable xen interrupt functions + xen/pciback: Check dev_data before using it + vfio-mdev/samples: Use u8 instead of char for handle functions + pinctrl: xway: fix gpio-hog related boot issues + net/mlx5: Continue driver initialization despite debugfs failure + exofs_mount(): fix leaks on failure exits + bnxt_en: Return linux standard errors in bnxt_ethtool.c + bnxt_en: query force speeds before disabling autoneg mode. + KVM: s390: unregister debug feature on failing arch init + pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration + pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10 + HID: doc: fix wrong data structure reference for UHID_OUTPUT + dm flakey: Properly corrupt multi-page bios. + gfs2: take jdata unstuff into account in do_grow + xfs: Align compat attrlist_by_handle with native implementation. + xfs: Fix bulkstat compat ioctls on x32 userspace. + IB/qib: Fix an error code in qib_sdma_verbs_send() + clocksource/drivers/fttmr010: Fix invalid interrupt register access + vxlan: Fix error path in __vxlan_dev_create() + powerpc/book3s/32: fix number of bats in p/v_block_mapped() + powerpc/xmon: fix dump_segments() + drivers/regulator: fix a missing check of return value + Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading + serial: max310x: Fix tx_empty() callback + openrisc: Fix broken paths to arch/or32 + RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer + scsi: qla2xxx: deadlock by configfs_depend_item + scsi: csiostor: fix incorrect dma device in case of vport + ath6kl: Only use match sets when firmware supports it + ath6kl: Fix off by one error in scan completion + powerpc/perf: Fix unit_sel/cache_sel checks + powerpc/prom: fix early DEBUG messages + powerpc/mm: Make NULL pointer deferences explicit on bad page faults. + powerpc/44x/bamboo: Fix PCI range + vfio/spapr_tce: Get rid of possible infinite loop + powerpc/powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status + drbd: ignore "all zero" peer volume sizes in handshake + drbd: reject attach of unsuitable uuids even if connected + drbd: do not block when adjusting "disk-options" while IO is frozen + drbd: fix print_st_err()'s prototype to match the definition + IB/rxe: Make counters thread safe + regulator: tps65910: fix a missing check of return value + powerpc/83xx: handle machine check caused by watchdog timer + powerpc/pseries: Fix node leak in update_lmb_associativity_index() + crypto: mxc-scc - fix build warnings on ARM64 + pwm: clps711x: Fix period calculation + net/netlink_compat: Fix a missing check of nla_parse_nested + net/net_namespace: Check the return value of register_pernet_subsys() + f2fs: fix to dirty inode synchronously + um: Make GCOV depend on !KCOV + net: (cpts) fix a missing check of clk_prepare + net: stmicro: fix a missing check of clk_prepare + net: dsa: bcm_sf2: Propagate error value from mdio_write + atl1e: checking the status of atl1e_write_phy_reg + tipc: fix a missing check of genlmsg_put + net/wan/fsl_ucc_hdlc: Avoid double free in ucc_hdlc_probe() + ocfs2: clear journal dirty flag after shutdown journal + vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n + lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk + lib/genalloc.c: use vzalloc_node() to allocate the bitmap + fork: fix some -Wmissing-prototypes warnings + drivers/base/platform.c: kmemleak ignore a known leak + lib/genalloc.c: include vmalloc.h + mtd: Check add_mtd_device() ret code + tipc: fix memory leak in tipc_nl_compat_publ_dump + net/core/neighbour: tell kmemleak about hash tables + PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() + net/core/neighbour: fix kmemleak minimal reference count for hash tables + serial: 8250: Fix serial8250 initialization crash + gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change + sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe + ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel + decnet: fix DN_IFREQ_SIZE + net/smc: prevent races between smc_lgr_terminate() and smc_conn_free() + blktrace: Show requests without sector + tipc: fix skb may be leaky in tipc_link_input + sfc: initialise found bitmap in efx_ef10_mtd_probe + net: fix possible overflow in __sk_mem_raise_allocated() + sctp: don't compare hb_timer expire date before starting it + bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() + net: dev: Use unsigned integer as an argument to left-shift + kvm: properly check debugfs dentry before using it + bpf: drop refcount if bpf_map_new_fd() fails in map_create() + net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED + apparmor: delete the dentry in aafs_remove() to avoid a leak + scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery + ACPI / APEI: Don't wait to serialise with oops messages when panic()ing + ACPI / APEI: Switch estatus pool to use vmalloc memory + scsi: libsas: Check SMP PHY control function result + mtd: Remove a debug trace in mtdpart.c + mm, gup: add missing refcount overflow checks on s390 + clk: at91: fix update bit maps on CFG_MOR write + clk: at91: generated: set audio_pll_allowed in at91_clk_register_generated() + staging: rtl8192e: fix potential use after free + staging: rtl8723bs: Drop ACPI device ids + staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids + USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P + mei: bus: prefix device names on bus with the bus name + media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE + net: macb: fix error format in dev_err() + pwm: Clear chip_data in pwm_put() + media: atmel: atmel-isc: fix asd memory allocation + media: atmel: atmel-isc: fix INIT_WORK misplacement + macvlan: schedule bc_work even if error + net: psample: fix skb_over_panic + openvswitch: fix flow command message size + slip: Fix use-after-free Read in slip_open + openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() + openvswitch: remove another BUG_ON() + tipc: fix link name length check + sctp: cache netns in sctp_ep_common + net: sched: fix `tc -s class show` no bstats on class with nolock subqueues + ext4: add more paranoia checking in ext4_expand_extra_isize handling + watchdog: sama5d4: fix WDD value to be always set to max + net: macb: Fix SUBNS increment and increase resolution + net: macb driver, check for SKBTX_HW_TSTAMP + mtd: rawnand: atmel: Fix spelling mistake in error message + mtd: rawnand: atmel: fix possible object reference leak + mtd: spi-nor: cast to u64 to avoid uint overflows + y2038: futex: Move compat implementation into futex.c + futex: Prevent robust futex exit race + futex: Move futex exit handling into futex code + futex: Replace PF_EXITPIDONE with a state + exit/exec: Seperate mm_release() + futex: Split futex_mm_release() for exit/exec + futex: Set task::futex_state to DEAD right after handling futex exit + futex: Mark the begin of futex exit explicitly + futex: Sanitize exit state handling + futex: Provide state handling for exec() as well + futex: Add mutex around futex exit + futex: Provide distinct return value when owner is exiting + futex: Prevent exit livelock + HID: core: check whether Usage Page item is after Usage ID items + crypto: stm32/hash - Fix hmac issue more than 256 bytes + media: stm32-dcmi: fix DMA corruption when stopping streaming + hwrng: stm32 - fix unbalanced pm_runtime_enable + mailbox: mailbox-test: fix null pointer if no mmio + pinctrl: stm32: fix memory leak issue + ASoC: stm32: i2s: fix dma configuration + ASoC: stm32: i2s: fix 16 bit format support + ASoC: stm32: i2s: fix IRQ clearing + platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer + platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size + net: fec: fix clock count mis-match + clk: samsung: exynos5433: Fix error paths + pinctrl: cherryview: Allocate IRQ chip dynamic + ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend + samples/bpf: fix build by setting HAVE_ATTR_TEST to zero + idr: Fix integer overflow in idr_for_each_entry + can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race condition + net: bcmgenet: use RGMII loopback for MAC reset + RDMA/hns: Fix the bug while use multi-hop of pbl + s390/zcrypt: make sysfs reset attribute trigger queue reset + bcache: do not check if debug dentry is ERR or NULL explicitly on remove + bcache: do not mark writeback_running too early + microblaze: fix multiple bugs in arch/microblaze/boot/Makefile + iwlwifi: pcie: fix erroneous print + usb: ehci-omap: Fix deferred probe for phy handling + btrfs: fix ncopies raid_attr for RAID56 + Btrfs: allow clear_extent_dirty() to receive a cached extent state record + serial: sh-sci: Fix crash in rx_timer_fn() on PIO fallback + kprobes: Blacklist symbols in arch-defined prohibited area + kprobes/x86: Show x86-64 specific blacklisted symbols correctly + memory: omap-gpmc: Get the header of the enum + netfilter: nf_nat_sip: fix RTP/RTCP source port translations + bnxt_en: Save ring statistics before reset. + brcmfmac: Fix access point mode + powerpc/32: Avoid unsupported flags with clang + powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y + mm/page_alloc.c: free order-0 pages through PCP in page_frag_free() + mm/page_alloc.c: use a single function to free page + mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free() + infiniband: bnxt_re: qplib: Check the return value of send_message + infiniband/qedr: Potential null ptr dereference of qp + firmware: arm_sdei: fix wrong of_node_put() in init function + firmware: arm_sdei: Fix DT platform device creation + ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs + net/smc: don't wait for send buffer space when data was already sent + mm/hotplug: invalid PFNs from pfn_to_online_page() + ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI + geneve: change NET_UDP_TUNNEL dependency to select + mmc: core: align max segment size with logical block size + net: hns3: fix PFC not setting problem for DCB module + net: hns3: fix an issue for hclgevf_ae_get_hdev + net: hns3: fix an issue for hns3_update_new_int_gl + scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned + RDMA/hns: Bugfix for the scene without receiver queue + RDMA/hns: Fix the state of rereg mr + thunderbolt: Power cycle the router if NVM authentication fails + tcp: exit if nothing to retransmit on RTO timeout + UBUNTU: upstream stable to v4.14.158, v4.19.88 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1855787 Title: Bionic update: upstream stable patchset 2019-12-09 Status in linux package in Ubuntu: Confirmed Status in linux source package in Bionic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-12-09 Ported from the following upstream stable releases: v4.14.158, v4.19.88 from git://git.kernel.org/ Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS" clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX ASoC: compress: fix unsigned integer overflow check reset: Fix memory leak in reset_control_array_put() ASoC: kirkwood: fix external clock probe defer clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume reset: fix reset_control_ops kerneldoc comment clk: at91: avoid sleeping early clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 idr: Fix idr_alloc_u32 on 32-bit systems x86/resctrl: Prevent NULL pointer dereference when reading mondata clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call net: fec: add missed clk_disable_unprepare in remove bridge: ebtables: don't crash when using dnat target in output chains can: peak_usb: report bus recovery as well can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error watchdog: meson: Fix the wrong value of left time scripts/gdb: fix debugging modules compiled with hot/cold partitioning net: bcmgenet: reapply manual settings to the PHY ceph: return -EINVAL if given fsc mount option on kernel w/o support mac80211: fix station inactive_time shortly after boot block: drbd: remove a stray unlock in __drbd_send_protocol() pwm: bcm-iproc: Prevent unloading the driver module while in use scsi: lpfc: Fix kernel Oops due to null pring pointers scsi: lpfc: Fix dif and first burst use in write commands ARM: dts: Fix up SQ201 flash access ARM: debug-imx: only define DEBUG_IMX_UART_PORT if needed UBUNTU: [Config] updateconfigs for DEBUG_IMX_UART_PORT ARM: dts: imx53-voipac-dmm-668: Fix memory node duplication parisc: Fix serio address output parisc: Fix HP SDC hpa address output arm64: mm: Prevent mismatched 52-bit VA support arm64: smp: Handle errors reported by the firmware ARM: OMAP1: fix USB configuration for device-only setups RDMA/vmw_pvrdma: Use atomic memory allocation in create AH PM / AVS: SmartReflex: NULL check before some freeing functions is not needed ARM: ks8695: fix section mismatch warning ACPI / LPSS: Ignore acpi_device_fix_up_power() return value scsi: lpfc: Enable Management features for IF_TYPE=6 crypto: user - support incremental algorithm dumps mwifiex: fix potential NULL dereference and use after free mwifiex: debugfs: correct histogram spacing, formatting rtl818x: fix potential use after free xfs: require both realtime inodes to mount ubi: Put MTD device after it is not used ubi: Do not drop UBI device reference before using microblaze: adjust the help to the real behavior microblaze: move "... is ready" messages to arch/microblaze/Makefile iwlwifi: move iwl_nvm_check_version() into dvm gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB kvm: vmx: Set IA32_TSC_AUX for legacy mode guests VSOCK: bind to random port for VMADDR_PORT_ANY mmc: meson-gx: make sure the descriptor is stopped on errors mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET btrfs: only track ref_heads in delayed_ref_updates HID: intel-ish-hid: fixes incorrect error handling serial: 8250: Rate limit serial port rx interrupts during input overruns kprobes/x86/xen: blacklist non-attachable xen interrupt functions xen/pciback: Check dev_data before using it vfio-mdev/samples: Use u8 instead of char for handle functions pinctrl: xway: fix gpio-hog related boot issues net/mlx5: Continue driver initialization despite debugfs failure exofs_mount(): fix leaks on failure exits bnxt_en: Return linux standard errors in bnxt_ethtool.c bnxt_en: query force speeds before disabling autoneg mode. KVM: s390: unregister debug feature on failing arch init pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10 HID: doc: fix wrong data structure reference for UHID_OUTPUT dm flakey: Properly corrupt multi-page bios. gfs2: take jdata unstuff into account in do_grow xfs: Align compat attrlist_by_handle with native implementation. xfs: Fix bulkstat compat ioctls on x32 userspace. IB/qib: Fix an error code in qib_sdma_verbs_send() clocksource/drivers/fttmr010: Fix invalid interrupt register access vxlan: Fix error path in __vxlan_dev_create() powerpc/book3s/32: fix number of bats in p/v_block_mapped() powerpc/xmon: fix dump_segments() drivers/regulator: fix a missing check of return value Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading serial: max310x: Fix tx_empty() callback openrisc: Fix broken paths to arch/or32 RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer scsi: qla2xxx: deadlock by configfs_depend_item scsi: csiostor: fix incorrect dma device in case of vport ath6kl: Only use match sets when firmware supports it ath6kl: Fix off by one error in scan completion powerpc/perf: Fix unit_sel/cache_sel checks powerpc/prom: fix early DEBUG messages powerpc/mm: Make NULL pointer deferences explicit on bad page faults. powerpc/44x/bamboo: Fix PCI range vfio/spapr_tce: Get rid of possible infinite loop powerpc/powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status drbd: ignore "all zero" peer volume sizes in handshake drbd: reject attach of unsuitable uuids even if connected drbd: do not block when adjusting "disk-options" while IO is frozen drbd: fix print_st_err()'s prototype to match the definition IB/rxe: Make counters thread safe regulator: tps65910: fix a missing check of return value powerpc/83xx: handle machine check caused by watchdog timer powerpc/pseries: Fix node leak in update_lmb_associativity_index() crypto: mxc-scc - fix build warnings on ARM64 pwm: clps711x: Fix period calculation net/netlink_compat: Fix a missing check of nla_parse_nested net/net_namespace: Check the return value of register_pernet_subsys() f2fs: fix to dirty inode synchronously um: Make GCOV depend on !KCOV net: (cpts) fix a missing check of clk_prepare net: stmicro: fix a missing check of clk_prepare net: dsa: bcm_sf2: Propagate error value from mdio_write atl1e: checking the status of atl1e_write_phy_reg tipc: fix a missing check of genlmsg_put net/wan/fsl_ucc_hdlc: Avoid double free in ucc_hdlc_probe() ocfs2: clear journal dirty flag after shutdown journal vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is n lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk lib/genalloc.c: use vzalloc_node() to allocate the bitmap fork: fix some -Wmissing-prototypes warnings drivers/base/platform.c: kmemleak ignore a known leak lib/genalloc.c: include vmalloc.h mtd: Check add_mtd_device() ret code tipc: fix memory leak in tipc_nl_compat_publ_dump net/core/neighbour: tell kmemleak about hash tables PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() net/core/neighbour: fix kmemleak minimal reference count for hash tables serial: 8250: Fix serial8250 initialization crash gpu: ipu-v3: pre: don't trigger update if buffer address doesn't change sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel decnet: fix DN_IFREQ_SIZE net/smc: prevent races between smc_lgr_terminate() and smc_conn_free() blktrace: Show requests without sector tipc: fix skb may be leaky in tipc_link_input sfc: initialise found bitmap in efx_ef10_mtd_probe net: fix possible overflow in __sk_mem_raise_allocated() sctp: don't compare hb_timer expire date before starting it bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() net: dev: Use unsigned integer as an argument to left-shift kvm: properly check debugfs dentry before using it bpf: drop refcount if bpf_map_new_fd() fails in map_create() net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED apparmor: delete the dentry in aafs_remove() to avoid a leak scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery ACPI / APEI: Don't wait to serialise with oops messages when panic()ing ACPI / APEI: Switch estatus pool to use vmalloc memory scsi: libsas: Check SMP PHY control function result mtd: Remove a debug trace in mtdpart.c mm, gup: add missing refcount overflow checks on s390 clk: at91: fix update bit maps on CFG_MOR write clk: at91: generated: set audio_pll_allowed in at91_clk_register_generated() staging: rtl8192e: fix potential use after free staging: rtl8723bs: Drop ACPI device ids staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P mei: bus: prefix device names on bus with the bus name media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE net: macb: fix error format in dev_err() pwm: Clear chip_data in pwm_put() media: atmel: atmel-isc: fix asd memory allocation media: atmel: atmel-isc: fix INIT_WORK misplacement macvlan: schedule bc_work even if error net: psample: fix skb_over_panic openvswitch: fix flow command message size slip: Fix use-after-free Read in slip_open openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() openvswitch: remove another BUG_ON() tipc: fix link name length check sctp: cache netns in sctp_ep_common net: sched: fix `tc -s class show` no bstats on class with nolock subqueues ext4: add more paranoia checking in ext4_expand_extra_isize handling watchdog: sama5d4: fix WDD value to be always set to max net: macb: Fix SUBNS increment and increase resolution net: macb driver, check for SKBTX_HW_TSTAMP mtd: rawnand: atmel: Fix spelling mistake in error message mtd: rawnand: atmel: fix possible object reference leak mtd: spi-nor: cast to u64 to avoid uint overflows y2038: futex: Move compat implementation into futex.c futex: Prevent robust futex exit race futex: Move futex exit handling into futex code futex: Replace PF_EXITPIDONE with a state exit/exec: Seperate mm_release() futex: Split futex_mm_release() for exit/exec futex: Set task::futex_state to DEAD right after handling futex exit futex: Mark the begin of futex exit explicitly futex: Sanitize exit state handling futex: Provide state handling for exec() as well futex: Add mutex around futex exit futex: Provide distinct return value when owner is exiting futex: Prevent exit livelock HID: core: check whether Usage Page item is after Usage ID items crypto: stm32/hash - Fix hmac issue more than 256 bytes media: stm32-dcmi: fix DMA corruption when stopping streaming hwrng: stm32 - fix unbalanced pm_runtime_enable mailbox: mailbox-test: fix null pointer if no mmio pinctrl: stm32: fix memory leak issue ASoC: stm32: i2s: fix dma configuration ASoC: stm32: i2s: fix 16 bit format support ASoC: stm32: i2s: fix IRQ clearing platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size net: fec: fix clock count mis-match clk: samsung: exynos5433: Fix error paths pinctrl: cherryview: Allocate IRQ chip dynamic ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend samples/bpf: fix build by setting HAVE_ATTR_TEST to zero idr: Fix integer overflow in idr_for_each_entry can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race condition net: bcmgenet: use RGMII loopback for MAC reset RDMA/hns: Fix the bug while use multi-hop of pbl s390/zcrypt: make sysfs reset attribute trigger queue reset bcache: do not check if debug dentry is ERR or NULL explicitly on remove bcache: do not mark writeback_running too early microblaze: fix multiple bugs in arch/microblaze/boot/Makefile iwlwifi: pcie: fix erroneous print usb: ehci-omap: Fix deferred probe for phy handling btrfs: fix ncopies raid_attr for RAID56 Btrfs: allow clear_extent_dirty() to receive a cached extent state record serial: sh-sci: Fix crash in rx_timer_fn() on PIO fallback kprobes: Blacklist symbols in arch-defined prohibited area kprobes/x86: Show x86-64 specific blacklisted symbols correctly memory: omap-gpmc: Get the header of the enum netfilter: nf_nat_sip: fix RTP/RTCP source port translations bnxt_en: Save ring statistics before reset. brcmfmac: Fix access point mode powerpc/32: Avoid unsupported flags with clang powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y mm/page_alloc.c: free order-0 pages through PCP in page_frag_free() mm/page_alloc.c: use a single function to free page mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free() infiniband: bnxt_re: qplib: Check the return value of send_message infiniband/qedr: Potential null ptr dereference of qp firmware: arm_sdei: fix wrong of_node_put() in init function firmware: arm_sdei: Fix DT platform device creation ata: ahci: mvebu: do Armada 38x configuration only on relevant SoCs net/smc: don't wait for send buffer space when data was already sent mm/hotplug: invalid PFNs from pfn_to_online_page() ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI geneve: change NET_UDP_TUNNEL dependency to select mmc: core: align max segment size with logical block size net: hns3: fix PFC not setting problem for DCB module net: hns3: fix an issue for hclgevf_ae_get_hdev net: hns3: fix an issue for hns3_update_new_int_gl scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned RDMA/hns: Bugfix for the scene without receiver queue RDMA/hns: Fix the state of rereg mr thunderbolt: Power cycle the router if NVM authentication fails tcp: exit if nothing to retransmit on RTO timeout UBUNTU: upstream stable to v4.14.158, v4.19.88 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1855787/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp