Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-08-19
Ported from the following upstream stable releases:
v4.19.58, v5.1.17,
v4.19.59, v5.1.18
from git://git.kernel.org/
Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
Bluetooth: Fix regression with minimum encryption key size alignment
Bluetooth: Fix faulty expression for minimum encryption key size check
netfilter: nf_flow_table: ignore DF bit setting
netfilter: nft_flow_offload: set liberal tracking mode for tcp
netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment
netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
ASoC : cs4265 : readable register too low
ASoC: ak4458: add return value for ak4458_probe
ASoC: soc-pcm: BE dai needs prepare when pause release after resume
ASoC: ak4458: rstn_control - return a non-zero on error only
spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
drm/mediatek: fix unbind functions
drm/mediatek: unbind components in mtk_drm_unbind()
drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
drm/mediatek: clear num_pipes when unbind driver
drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
ASoC: max98090: remove 24-bit format support if RJ is 0
ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
ASoC: sun4i-i2s: Add offset to RX channel select
x86/CPU: Add more Icelake model numbers
usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
ALSA: hdac: fix memory release for SST and SOF drivers
SoC: rt274: Fix internal jack assignment in set_jack callback
scsi: hpsa: correct ioaccel2 chaining
drm: panel-orientation-quirks: Add quirk for GPD pocket2
drm: panel-orientation-quirks: Add quirk for GPD MicroPC
platform/x86: intel-vbtn: Report switch events when event wakes device
platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration
platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow
i2c: pca-platform: Fix GPIO lookup code
cpuset: restore sanity to cpuset_cpus_allowed_fallback()
scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
mm/mlock.c: change count_mm_mlocked_page_nr return type
tracing: avoid build warning with HAVE_NOP_MCOUNT
module: Fix livepatch/ftrace module text permissions race
ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
crypto: user - prevent operating on larval algorithms
crypto: cryptd - Fix skcipher instance memory leak
ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
ALSA: line6: Fix write on zero-sized buffer
ALSA: usb-audio: fix sign unintended sign extension on left shifts
ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
ALSA: hda/realtek - Change front mic location for Lenovo M710q
lib/mpi: Fix karactx leak in mpi_powm
fs/userfaultfd.c: disable irqs for fault_pending and event locks
tracing/snapshot: Resize spare buffer if size changed
ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
arm64: kaslr: keep modules inside module region when KASAN is enabled
drm/amd/powerplay: use hardware fan control if no powerplay fan table
drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
drm/etnaviv: add missing failure path to destroy suballoc
drm/imx: notify drm core before sending event during crtc disable
drm/imx: only send event on crtc disable if kept disabled
ftrace/x86: Remove possible deadlock between register_kprobe() and
ftrace_run_update_code()
mm/vmscan.c: prevent useless kswapd loops
btrfs: Ensure replaced device doesn't have pending chunk allocation
tty: rocket: fix incorrect forward declaration of 'rp_init()'
net/smc: move unhash before release of clcsock
media: s5p-mfc: fix incorrect bus assignment in virtual child device
drm/fb-helper: generic: Don't take module ref for fbcon
f2fs: don't access node/meta inode mapping after iput
ALSA: hda: Initialize power_state field properly
ip6: fix skb leak in ip6frag_expire_frag_queue()
net: IP defrag: encapsulate rbtree defrag code into callable functions
net: IP6 defrag: use rbtrees for IPv6 defrag
net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
sc16is7xx: move label 'err_spi' to correct section
netfilter: ipv6: nf_defrag: accept duplicate fragments again
KVM: x86: degrade WARN to pr_warn_ratelimited
KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
nfsd: Fix overflow causing non-working mounts on 1 TB machines
svcrdma: Ignore source port when computing DRC hash
MIPS: Fix bounds check virt_addr_valid
MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
MIPS: have "plain" make calls build dtbs for selected platforms
dmaengine: qcom: bam_dma: Fix completed descriptors count
dmaengine: imx-sdma: remove BD_INTR for channel0
signal: remove the wrong signal_pending() check in restore_user_sigmask()
idr: Fix idr_get_next race with idr_remove
HID: i2c-hid: add iBall Aer3 to descriptor override
ASoC: core: lock client_mutex while removing link components
iommu/vt-d: Set the right field for Page Walk Snoop
HID: a4tech: fix horizontal scrolling
ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC
gpio: pca953x: hack to fix 24 bit gpio expanders
ASoC: Intel: sst: fix kmalloc call with wrong flags
arm64: tlbflush: Ensure start/end of address range are aligned to stride
dax: Fix xarray entry association for mixed mappings
swap_readpage(): avoid blk_wake_io_task() if !synchronous
drm/virtio: move drm_connector_update_edid_property() call
s390/mm: fix pxd_bad with folded page tables
dmaengine: jz4780: Fix an endian bug in IRQ handler
scsi: target/iblock: Fix overrun in WRITE SAME emulation
UBUNTU: upstream stable to v4.19.58, v5.1.17
crypto: talitos - rename alternative AEAD algos.
soc: brcmstb: Fix error path for unsupported CPUs
soc: bcm: brcmstb: biuctrl: Register writes require a barrier
samples, bpf: fix to change the buffer size for read()
samples, bpf: suppress compiler warning
mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
bpf: sockmap, fix use after free from sleep in psock backlog workqueue
soundwire: stream: fix out of boundary access on port properties
staging:iio:ad7150: fix threshold mode config bit
mac80211: mesh: fix RCU warning
mac80211: free peer keys before vif down in mesh
iwlwifi: Fix double-free problems in iwl_req_fw_callback()
soundwire: intel: set dai min and max channels correctly
dt-bindings: can: mcp251x: add mcp25625 support
can: mcp251x: add support for mcp25625
can: m_can: implement errata "Needless activation of MRAF irq"
can: af_can: Fix error path of can_init()
ibmvnic: Do not close unopened driver during reset
ibmvnic: Refresh device multicast list after reset
ibmvnic: Fix unchecked return codes of memory allocations
ARM: dts: am335x phytec boards: Fix cd-gpios active level
s390/boot: disable address-of-packed-member warning
drm/vmwgfx: Honor the sg list segment size limitation
drm/vmwgfx: fix a warning due to missing dma_parms
riscv: Fix udelay in RV32.
Input: imx_keypad - make sure keyboard can always wake up system
KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
ARM: davinci: da850-evm: call regulator_has_full_constraints()
ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
mac80211: only warn once on chanctx_conf being NULL
mac80211: do not start any work during reconfigure flow
bpf, devmap: Fix premature entry free on destroying map
bpf, devmap: Add missing bulk queue free
bpf, devmap: Add missing RCU read lock on flush
bpf, x64: fix stack layout of JITed bpf code
qmi_wwan: add support for QMAP padding in the RX path
qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
qmi_wwan: extend permitted QMAP mux_id value range
mmc: core: complete HS400 before checking status
md: fix for divide error in status_resync
bnx2x: Check if transceiver implements DDM before access
drm: return -EFAULT if copy_to_user() fails
ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
net: lio_core: fix potential sign-extension overflow on large shift
scsi: qedi: Check targetname while finding boot target information
quota: fix a problem about transfer quota
net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
NFS4: Only set creation opendata if O_CREAT
net :sunrpc :clnt :Fix xps refcount imbalance on the error path
fscrypt: don't set policy for a dead directory
udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
media: stv0297: fix frequency range limit
ALSA: usb-audio: Fix parse of UAC2 Extension Units
ALSA: hda/realtek - Headphone Mic can't record after S3
block, bfq: NULL out the bic when it's no longer valid
perf pmu: Fix uncore PMU alias list for ARM64
x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
x86/tls: Fix possible spectre-v1 in do_get_thread_area()
Documentation: Add section about CPU vulnerabilities for Spectre
Documentation/admin: Remove the vsyscall=native documentation
mwifiex: Abort at too short BSS descriptor element
mwifiex: Don't abort on small, spec-compliant vendor IEs
USB: serial: ftdi_sio: add ID for isodebug v1
USB: serial: option: add support for GosunCn ME3630 RNDIS mode
Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
p54usb: Fix race between disconnect and firmware loading
usb: gadget: ether: Fix race between gether_disconnect and rx_submit
usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
usb: renesas_usbhs: add a workaround for a race condition of workqueue
drivers/usb/typec/tps6598x.c: fix portinfo width
drivers/usb/typec/tps6598x.c: fix 4CC cmd write
staging: comedi: dt282x: fix a null pointer deref on interrupt
staging: comedi: amplc_pci230: fix null pointer deref on interrupt
HID: Add another Primax PIXART OEM mouse quirk
lkdtm: support llvm-objcopy
binder: fix memory leak in error path
carl9170: fix misuse of device driver API
VMCI: Fix integer overflow in VMCI handle arrays
staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
staging: bcm2835-camera: Ensure all buffers are returned on disable
staging: bcm2835-camera: Remove check of the number of buffers supplied
staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
staging: rtl8712: reduce stack usage, again
crypto: lrw - use correct alignmask
bpf: sockmap, restore sk_write_space when psock gets dropped
ARM: dts: Drop bogus CLKSEL for timer12 on dra7
iwlwifi: fix load in rfkill flow for unified firmware
tools: bpftool: Fix JSON output when lookup fails
soundwire: stream: fix bad unlock balance
can: flexcan: Remove unneeded registration message
RISC-V: defconfig: enable clocks, serial console
xdp: check device pointer before clearing
KVM: nVMX: use correct clean fields when copying from eVMCS
gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
gpu: ipu-v3: image-convert: Fix image downsize coefficients
cfg80211: util: fix bit count off by one
cfg80211: report measurement start TSF correctly
IB/hfi1: Create inline to get extended headers
IB/hfi1: Wakeup QPs orphaned on wait list after flush
IB/hfi1: Handle wakeup of orphaned QPs for pio
IB/hfi1: Handle port down properly in pio
powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
tpm: Actually fail on TPM errors during "get random"
tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
perf intel-pt: Fix itrace defaults for perf script
perf auxtrace: Fix itrace defaults for perf script
perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
perf header: Assign proper ff->ph in perf_event__synthesize_features()
usb: gadget: f_fs: data_len used before properly set
p54: fix crash during initialization
staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
iio: adc: stm32-adc: add missing vdda-supply
staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
staging: vchiq: revert "switch to wait_for_completion_killable"
staging: vchiq: make wait events interruptible
UBUNTU: upstream stable to v4.19.59, v5.1.18
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Disco)
Importance: Undecided
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Disco)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Disco)
Status: New => In Progress
** Changed in: linux (Ubuntu Disco)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
-
- SRU Justification
-
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
-
- upstream stable patchset 2019-08-19
- from git://git.kernel.org/
+ SRU Justification
+
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
+
+ upstream stable patchset 2019-08-19
+
+ Ported from the following upstream stable releases:
+ v4.19.58, v5.1.17,
+ v4.19.59, v5.1.18
+
+ from git://git.kernel.org/
+
+ Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
+ Bluetooth: Fix regression with minimum encryption key size alignment
+ Bluetooth: Fix faulty expression for minimum encryption key size check
+ netfilter: nf_flow_table: ignore DF bit setting
+ netfilter: nft_flow_offload: set liberal tracking mode for tcp
+ netfilter: nft_flow_offload: don't offload when sequence numbers need
adjustment
+ netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
+ ASoC : cs4265 : readable register too low
+ ASoC: ak4458: add return value for ak4458_probe
+ ASoC: soc-pcm: BE dai needs prepare when pause release after resume
+ ASoC: ak4458: rstn_control - return a non-zero on error only
+ spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
+ drm/mediatek: fix unbind functions
+ drm/mediatek: unbind components in mtk_drm_unbind()
+ drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
+ drm/mediatek: clear num_pipes when unbind driver
+ drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
+ ASoC: max98090: remove 24-bit format support if RJ is 0
+ ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
+ ASoC: sun4i-i2s: Add offset to RX channel select
+ x86/CPU: Add more Icelake model numbers
+ usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
+ usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
+ ALSA: hdac: fix memory release for SST and SOF drivers
+ SoC: rt274: Fix internal jack assignment in set_jack callback
+ scsi: hpsa: correct ioaccel2 chaining
+ drm: panel-orientation-quirks: Add quirk for GPD pocket2
+ drm: panel-orientation-quirks: Add quirk for GPD MicroPC
+ platform/x86: intel-vbtn: Report switch events when event wakes device
+ platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
registration
+ platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow
+ i2c: pca-platform: Fix GPIO lookup code
+ cpuset: restore sanity to cpuset_cpus_allowed_fallback()
+ scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
+ mm/mlock.c: change count_mm_mlocked_page_nr return type
+ tracing: avoid build warning with HAVE_NOP_MCOUNT
+ module: Fix livepatch/ftrace module text permissions race
+ ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
+ crypto: user - prevent operating on larval algorithms
+ crypto: cryptd - Fix skcipher instance memory leak
+ ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
+ ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
+ ALSA: line6: Fix write on zero-sized buffer
+ ALSA: usb-audio: fix sign unintended sign extension on left shifts
+ ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
+ ALSA: hda/realtek - Change front mic location for Lenovo M710q
+ lib/mpi: Fix karactx leak in mpi_powm
+ fs/userfaultfd.c: disable irqs for fault_pending and event locks
+ tracing/snapshot: Resize spare buffer if size changed
+ ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
+ arm64: kaslr: keep modules inside module region when KASAN is enabled
+ drm/amd/powerplay: use hardware fan control if no powerplay fan table
+ drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
+ drm/etnaviv: add missing failure path to destroy suballoc
+ drm/imx: notify drm core before sending event during crtc disable
+ drm/imx: only send event on crtc disable if kept disabled
+ ftrace/x86: Remove possible deadlock between register_kprobe() and
ftrace_run_update_code()
+ mm/vmscan.c: prevent useless kswapd loops
+ btrfs: Ensure replaced device doesn't have pending chunk allocation
+ tty: rocket: fix incorrect forward declaration of 'rp_init()'
+ net/smc: move unhash before release of clcsock
+ media: s5p-mfc: fix incorrect bus assignment in virtual child device
+ drm/fb-helper: generic: Don't take module ref for fbcon
+ f2fs: don't access node/meta inode mapping after iput
+ ALSA: hda: Initialize power_state field properly
+ ip6: fix skb leak in ip6frag_expire_frag_queue()
+ net: IP defrag: encapsulate rbtree defrag code into callable functions
+ net: IP6 defrag: use rbtrees for IPv6 defrag
+ net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
+ netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
+ sc16is7xx: move label 'err_spi' to correct section
+ netfilter: ipv6: nf_defrag: accept duplicate fragments again
+ KVM: x86: degrade WARN to pr_warn_ratelimited
+ KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
+ nfsd: Fix overflow causing non-working mounts on 1 TB machines
+ svcrdma: Ignore source port when computing DRC hash
+ MIPS: Fix bounds check virt_addr_valid
+ MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
+ MIPS: have "plain" make calls build dtbs for selected platforms
+ dmaengine: qcom: bam_dma: Fix completed descriptors count
+ dmaengine: imx-sdma: remove BD_INTR for channel0
+ signal: remove the wrong signal_pending() check in restore_user_sigmask()
+ idr: Fix idr_get_next race with idr_remove
+ HID: i2c-hid: add iBall Aer3 to descriptor override
+ ASoC: core: lock client_mutex while removing link components
+ iommu/vt-d: Set the right field for Page Walk Snoop
+ HID: a4tech: fix horizontal scrolling
+ ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC
+ gpio: pca953x: hack to fix 24 bit gpio expanders
+ ASoC: Intel: sst: fix kmalloc call with wrong flags
+ arm64: tlbflush: Ensure start/end of address range are aligned to stride
+ dax: Fix xarray entry association for mixed mappings
+ swap_readpage(): avoid blk_wake_io_task() if !synchronous
+ drm/virtio: move drm_connector_update_edid_property() call
+ s390/mm: fix pxd_bad with folded page tables
+ dmaengine: jz4780: Fix an endian bug in IRQ handler
+ scsi: target/iblock: Fix overrun in WRITE SAME emulation
+ UBUNTU: upstream stable to v4.19.58, v5.1.17
+ crypto: talitos - rename alternative AEAD algos.
+ soc: brcmstb: Fix error path for unsupported CPUs
+ soc: bcm: brcmstb: biuctrl: Register writes require a barrier
+ samples, bpf: fix to change the buffer size for read()
+ samples, bpf: suppress compiler warning
+ mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
+ bpf: sockmap, fix use after free from sleep in psock backlog workqueue
+ soundwire: stream: fix out of boundary access on port properties
+ staging:iio:ad7150: fix threshold mode config bit
+ mac80211: mesh: fix RCU warning
+ mac80211: free peer keys before vif down in mesh
+ iwlwifi: Fix double-free problems in iwl_req_fw_callback()
+ soundwire: intel: set dai min and max channels correctly
+ dt-bindings: can: mcp251x: add mcp25625 support
+ can: mcp251x: add support for mcp25625
+ can: m_can: implement errata "Needless activation of MRAF irq"
+ can: af_can: Fix error path of can_init()
+ ibmvnic: Do not close unopened driver during reset
+ ibmvnic: Refresh device multicast list after reset
+ ibmvnic: Fix unchecked return codes of memory allocations
+ ARM: dts: am335x phytec boards: Fix cd-gpios active level
+ s390/boot: disable address-of-packed-member warning
+ drm/vmwgfx: Honor the sg list segment size limitation
+ drm/vmwgfx: fix a warning due to missing dma_parms
+ riscv: Fix udelay in RV32.
+ Input: imx_keypad - make sure keyboard can always wake up system
+ KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
+ mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
+ ARM: davinci: da850-evm: call regulator_has_full_constraints()
+ ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
+ mac80211: only warn once on chanctx_conf being NULL
+ mac80211: do not start any work during reconfigure flow
+ bpf, devmap: Fix premature entry free on destroying map
+ bpf, devmap: Add missing bulk queue free
+ bpf, devmap: Add missing RCU read lock on flush
+ bpf, x64: fix stack layout of JITed bpf code
+ qmi_wwan: add support for QMAP padding in the RX path
+ qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
+ qmi_wwan: extend permitted QMAP mux_id value range
+ mmc: core: complete HS400 before checking status
+ md: fix for divide error in status_resync
+ bnx2x: Check if transceiver implements DDM before access
+ drm: return -EFAULT if copy_to_user() fails
+ ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
+ net: lio_core: fix potential sign-extension overflow on large shift
+ scsi: qedi: Check targetname while finding boot target information
+ quota: fix a problem about transfer quota
+ net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
+ NFS4: Only set creation opendata if O_CREAT
+ net :sunrpc :clnt :Fix xps refcount imbalance on the error path
+ fscrypt: don't set policy for a dead directory
+ udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
+ media: stv0297: fix frequency range limit
+ ALSA: usb-audio: Fix parse of UAC2 Extension Units
+ ALSA: hda/realtek - Headphone Mic can't record after S3
+ block, bfq: NULL out the bic when it's no longer valid
+ perf pmu: Fix uncore PMU alias list for ARM64
+ x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
+ x86/tls: Fix possible spectre-v1 in do_get_thread_area()
+ Documentation: Add section about CPU vulnerabilities for Spectre
+ Documentation/admin: Remove the vsyscall=native documentation
+ mwifiex: Abort at too short BSS descriptor element
+ mwifiex: Don't abort on small, spec-compliant vendor IEs
+ USB: serial: ftdi_sio: add ID for isodebug v1
+ USB: serial: option: add support for GosunCn ME3630 RNDIS mode
+ Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
+ p54usb: Fix race between disconnect and firmware loading
+ usb: gadget: ether: Fix race between gether_disconnect and rx_submit
+ usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
+ usb: renesas_usbhs: add a workaround for a race condition of workqueue
+ drivers/usb/typec/tps6598x.c: fix portinfo width
+ drivers/usb/typec/tps6598x.c: fix 4CC cmd write
+ staging: comedi: dt282x: fix a null pointer deref on interrupt
+ staging: comedi: amplc_pci230: fix null pointer deref on interrupt
+ HID: Add another Primax PIXART OEM mouse quirk
+ lkdtm: support llvm-objcopy
+ binder: fix memory leak in error path
+ carl9170: fix misuse of device driver API
+ VMCI: Fix integer overflow in VMCI handle arrays
+ staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
+ staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
+ staging: bcm2835-camera: Ensure all buffers are returned on disable
+ staging: bcm2835-camera: Remove check of the number of buffers supplied
+ staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
+ staging: rtl8712: reduce stack usage, again
+ crypto: lrw - use correct alignmask
+ bpf: sockmap, restore sk_write_space when psock gets dropped
+ ARM: dts: Drop bogus CLKSEL for timer12 on dra7
+ iwlwifi: fix load in rfkill flow for unified firmware
+ tools: bpftool: Fix JSON output when lookup fails
+ soundwire: stream: fix bad unlock balance
+ can: flexcan: Remove unneeded registration message
+ RISC-V: defconfig: enable clocks, serial console
+ xdp: check device pointer before clearing
+ KVM: nVMX: use correct clean fields when copying from eVMCS
+ gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
+ gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
+ gpu: ipu-v3: image-convert: Fix image downsize coefficients
+ cfg80211: util: fix bit count off by one
+ cfg80211: report measurement start TSF correctly
+ IB/hfi1: Create inline to get extended headers
+ IB/hfi1: Wakeup QPs orphaned on wait list after flush
+ IB/hfi1: Handle wakeup of orphaned QPs for pio
+ IB/hfi1: Handle port down properly in pio
+ powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
+ tpm: Actually fail on TPM errors during "get random"
+ tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
+ perf intel-pt: Fix itrace defaults for perf script
+ perf auxtrace: Fix itrace defaults for perf script
+ perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
+ perf header: Assign proper ff->ph in perf_event__synthesize_features()
+ usb: gadget: f_fs: data_len used before properly set
+ p54: fix crash during initialization
+ staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
+ staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
+ iio: adc: stm32-adc: add missing vdda-supply
+ staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
+ staging: vchiq: revert "switch to wait_for_completion_killable"
+ staging: vchiq: make wait events interruptible
+ UBUNTU: upstream stable to v4.19.59, v5.1.18
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1840718
Title:
Disco update: upstream stable patchset 2019-08-19
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Disco:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-08-19
Ported from the following upstream stable releases:
v4.19.58, v5.1.17,
v4.19.59, v5.1.18
from git://git.kernel.org/
Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
Bluetooth: Fix regression with minimum encryption key size alignment
Bluetooth: Fix faulty expression for minimum encryption key size check
netfilter: nf_flow_table: ignore DF bit setting
netfilter: nft_flow_offload: set liberal tracking mode for tcp
netfilter: nft_flow_offload: don't offload when sequence numbers need
adjustment
netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
ASoC : cs4265 : readable register too low
ASoC: ak4458: add return value for ak4458_probe
ASoC: soc-pcm: BE dai needs prepare when pause release after resume
ASoC: ak4458: rstn_control - return a non-zero on error only
spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
drm/mediatek: fix unbind functions
drm/mediatek: unbind components in mtk_drm_unbind()
drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
drm/mediatek: clear num_pipes when unbind driver
drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
ASoC: max98090: remove 24-bit format support if RJ is 0
ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
ASoC: sun4i-i2s: Add offset to RX channel select
x86/CPU: Add more Icelake model numbers
usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
ALSA: hdac: fix memory release for SST and SOF drivers
SoC: rt274: Fix internal jack assignment in set_jack callback
scsi: hpsa: correct ioaccel2 chaining
drm: panel-orientation-quirks: Add quirk for GPD pocket2
drm: panel-orientation-quirks: Add quirk for GPD MicroPC
platform/x86: intel-vbtn: Report switch events when event wakes device
platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
registration
platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow
i2c: pca-platform: Fix GPIO lookup code
cpuset: restore sanity to cpuset_cpus_allowed_fallback()
scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
mm/mlock.c: change count_mm_mlocked_page_nr return type
tracing: avoid build warning with HAVE_NOP_MCOUNT
module: Fix livepatch/ftrace module text permissions race
ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
crypto: user - prevent operating on larval algorithms
crypto: cryptd - Fix skcipher instance memory leak
ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
ALSA: line6: Fix write on zero-sized buffer
ALSA: usb-audio: fix sign unintended sign extension on left shifts
ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
ALSA: hda/realtek - Change front mic location for Lenovo M710q
lib/mpi: Fix karactx leak in mpi_powm
fs/userfaultfd.c: disable irqs for fault_pending and event locks
tracing/snapshot: Resize spare buffer if size changed
ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
arm64: kaslr: keep modules inside module region when KASAN is enabled
drm/amd/powerplay: use hardware fan control if no powerplay fan table
drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
drm/etnaviv: add missing failure path to destroy suballoc
drm/imx: notify drm core before sending event during crtc disable
drm/imx: only send event on crtc disable if kept disabled
ftrace/x86: Remove possible deadlock between register_kprobe() and
ftrace_run_update_code()
mm/vmscan.c: prevent useless kswapd loops
btrfs: Ensure replaced device doesn't have pending chunk allocation
tty: rocket: fix incorrect forward declaration of 'rp_init()'
net/smc: move unhash before release of clcsock
media: s5p-mfc: fix incorrect bus assignment in virtual child device
drm/fb-helper: generic: Don't take module ref for fbcon
f2fs: don't access node/meta inode mapping after iput
ALSA: hda: Initialize power_state field properly
ip6: fix skb leak in ip6frag_expire_frag_queue()
net: IP defrag: encapsulate rbtree defrag code into callable functions
net: IP6 defrag: use rbtrees for IPv6 defrag
net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
sc16is7xx: move label 'err_spi' to correct section
netfilter: ipv6: nf_defrag: accept duplicate fragments again
KVM: x86: degrade WARN to pr_warn_ratelimited
KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
nfsd: Fix overflow causing non-working mounts on 1 TB machines
svcrdma: Ignore source port when computing DRC hash
MIPS: Fix bounds check virt_addr_valid
MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
MIPS: have "plain" make calls build dtbs for selected platforms
dmaengine: qcom: bam_dma: Fix completed descriptors count
dmaengine: imx-sdma: remove BD_INTR for channel0
signal: remove the wrong signal_pending() check in restore_user_sigmask()
idr: Fix idr_get_next race with idr_remove
HID: i2c-hid: add iBall Aer3 to descriptor override
ASoC: core: lock client_mutex while removing link components
iommu/vt-d: Set the right field for Page Walk Snoop
HID: a4tech: fix horizontal scrolling
ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC
gpio: pca953x: hack to fix 24 bit gpio expanders
ASoC: Intel: sst: fix kmalloc call with wrong flags
arm64: tlbflush: Ensure start/end of address range are aligned to stride
dax: Fix xarray entry association for mixed mappings
swap_readpage(): avoid blk_wake_io_task() if !synchronous
drm/virtio: move drm_connector_update_edid_property() call
s390/mm: fix pxd_bad with folded page tables
dmaengine: jz4780: Fix an endian bug in IRQ handler
scsi: target/iblock: Fix overrun in WRITE SAME emulation
UBUNTU: upstream stable to v4.19.58, v5.1.17
crypto: talitos - rename alternative AEAD algos.
soc: brcmstb: Fix error path for unsupported CPUs
soc: bcm: brcmstb: biuctrl: Register writes require a barrier
samples, bpf: fix to change the buffer size for read()
samples, bpf: suppress compiler warning
mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
bpf: sockmap, fix use after free from sleep in psock backlog workqueue
soundwire: stream: fix out of boundary access on port properties
staging:iio:ad7150: fix threshold mode config bit
mac80211: mesh: fix RCU warning
mac80211: free peer keys before vif down in mesh
iwlwifi: Fix double-free problems in iwl_req_fw_callback()
soundwire: intel: set dai min and max channels correctly
dt-bindings: can: mcp251x: add mcp25625 support
can: mcp251x: add support for mcp25625
can: m_can: implement errata "Needless activation of MRAF irq"
can: af_can: Fix error path of can_init()
ibmvnic: Do not close unopened driver during reset
ibmvnic: Refresh device multicast list after reset
ibmvnic: Fix unchecked return codes of memory allocations
ARM: dts: am335x phytec boards: Fix cd-gpios active level
s390/boot: disable address-of-packed-member warning
drm/vmwgfx: Honor the sg list segment size limitation
drm/vmwgfx: fix a warning due to missing dma_parms
riscv: Fix udelay in RV32.
Input: imx_keypad - make sure keyboard can always wake up system
KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
ARM: davinci: da850-evm: call regulator_has_full_constraints()
ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
mac80211: only warn once on chanctx_conf being NULL
mac80211: do not start any work during reconfigure flow
bpf, devmap: Fix premature entry free on destroying map
bpf, devmap: Add missing bulk queue free
bpf, devmap: Add missing RCU read lock on flush
bpf, x64: fix stack layout of JITed bpf code
qmi_wwan: add support for QMAP padding in the RX path
qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
qmi_wwan: extend permitted QMAP mux_id value range
mmc: core: complete HS400 before checking status
md: fix for divide error in status_resync
bnx2x: Check if transceiver implements DDM before access
drm: return -EFAULT if copy_to_user() fails
ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
net: lio_core: fix potential sign-extension overflow on large shift
scsi: qedi: Check targetname while finding boot target information
quota: fix a problem about transfer quota
net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
NFS4: Only set creation opendata if O_CREAT
net :sunrpc :clnt :Fix xps refcount imbalance on the error path
fscrypt: don't set policy for a dead directory
udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
media: stv0297: fix frequency range limit
ALSA: usb-audio: Fix parse of UAC2 Extension Units
ALSA: hda/realtek - Headphone Mic can't record after S3
block, bfq: NULL out the bic when it's no longer valid
perf pmu: Fix uncore PMU alias list for ARM64
x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
x86/tls: Fix possible spectre-v1 in do_get_thread_area()
Documentation: Add section about CPU vulnerabilities for Spectre
Documentation/admin: Remove the vsyscall=native documentation
mwifiex: Abort at too short BSS descriptor element
mwifiex: Don't abort on small, spec-compliant vendor IEs
USB: serial: ftdi_sio: add ID for isodebug v1
USB: serial: option: add support for GosunCn ME3630 RNDIS mode
Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
p54usb: Fix race between disconnect and firmware loading
usb: gadget: ether: Fix race between gether_disconnect and rx_submit
usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
usb: renesas_usbhs: add a workaround for a race condition of workqueue
drivers/usb/typec/tps6598x.c: fix portinfo width
drivers/usb/typec/tps6598x.c: fix 4CC cmd write
staging: comedi: dt282x: fix a null pointer deref on interrupt
staging: comedi: amplc_pci230: fix null pointer deref on interrupt
HID: Add another Primax PIXART OEM mouse quirk
lkdtm: support llvm-objcopy
binder: fix memory leak in error path
carl9170: fix misuse of device driver API
VMCI: Fix integer overflow in VMCI handle arrays
staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
staging: bcm2835-camera: Ensure all buffers are returned on disable
staging: bcm2835-camera: Remove check of the number of buffers supplied
staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
staging: rtl8712: reduce stack usage, again
crypto: lrw - use correct alignmask
bpf: sockmap, restore sk_write_space when psock gets dropped
ARM: dts: Drop bogus CLKSEL for timer12 on dra7
iwlwifi: fix load in rfkill flow for unified firmware
tools: bpftool: Fix JSON output when lookup fails
soundwire: stream: fix bad unlock balance
can: flexcan: Remove unneeded registration message
RISC-V: defconfig: enable clocks, serial console
xdp: check device pointer before clearing
KVM: nVMX: use correct clean fields when copying from eVMCS
gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
gpu: ipu-v3: image-convert: Fix image downsize coefficients
cfg80211: util: fix bit count off by one
cfg80211: report measurement start TSF correctly
IB/hfi1: Create inline to get extended headers
IB/hfi1: Wakeup QPs orphaned on wait list after flush
IB/hfi1: Handle wakeup of orphaned QPs for pio
IB/hfi1: Handle port down properly in pio
powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
tpm: Actually fail on TPM errors during "get random"
tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
perf intel-pt: Fix itrace defaults for perf script
perf auxtrace: Fix itrace defaults for perf script
perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
perf header: Assign proper ff->ph in perf_event__synthesize_features()
usb: gadget: f_fs: data_len used before properly set
p54: fix crash during initialization
staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
iio: adc: stm32-adc: add missing vdda-supply
staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
staging: vchiq: revert "switch to wait_for_completion_killable"
staging: vchiq: make wait events interruptible
UBUNTU: upstream stable to v4.19.59, v5.1.18
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1840718/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
