Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       4.18.19 upstream stable release
       from git://git.kernel.org/

mtd: rawnand: marvell: fix the IRQ handler complete() condition
mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB
mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash
mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus
spi: spi-mem: Adjust op len based on message/transfer size limitations
spi: bcm-qspi: switch back to reading flash using smaller chunks
spi: bcm-qspi: fix calculation of address length
bcache: trace missed reading by cache_missed
bcache: correct dirty data statistics
bcache: fix miss key refill->end in writeback
hwmon: (pmbus) Fix page count auto-detection.
jffs2: free jffs2_sb_info through jffs2_kill_sb()
block: setup bounce bio_sets properly
block: don't deal with discard limit in blkdev_issue_discard()
block: make sure discard bio is aligned with logical block size
block: make sure writesame bio is aligned with logical block size
cpufreq: conservative: Take limits changes into account properly
dma-mapping: fix panic caused by passing empty cma command line argument
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended opcodes
kprobes/x86: Use preempt_enable() in optimized_callback()
mailbox: PCC: handle parse error
acpi, nfit: Fix Address Range Scrub completion tracking
parisc: Fix address in HPMC IVA
parisc: Fix map_pages() to not overwrite existing pte entries
parisc: Fix exported address of os_hpmc handler
ALSA: hda - Add quirk for ASUS G751 laptop
ALSA: hda - Fix headphone pin config for ASUS G751
ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
ALSA: hda: Add 2 more models to the power_save blacklist
ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
x86/xen: Fix boot loader version reported for PVH guests
x86/corruption-check: Fix panic in memory_corruption_check() when boot option 
without value is provided
x86/mm/pat: Disable preemption around __flush_tlb_all()
ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen
drm: fix use of freed memory in drm_mode_setcrtc
bpf: do not blindly change rlimit in reuseport net selftest
nvme: remove ns sibling before clearing path
Revert "perf tools: Fix PMU term format max value calculation"
selftests: usbip: add wait after attach and before checking port status
xsk: do not call synchronize_net() under RCU read lock
xfrm: policy: use hlist rcu variants on insert
perf vendor events intel: Fix wrong filter_band* values for uncore events
r8169: Enable MSI-X on RTL8106e
nfp: flower: fix pedit set actions for multiple partial masks
nfp: flower: use offsets provided by pedit instead of index for ipv6
sched/fair: Fix the min_vruntime update logic in dequeue_entity()
perf evsel: Store ids for events with their own cpus 
perf_event__synthesize_event_update_cpus
perf tools: Fix use of alternatives to find JDIR
perf cpu_map: Align cpu map synthesized events properly.
perf report: Don't crash on invalid inline debug information
x86/fpu: Remove second definition of fpu in __fpu__restore_sig()
net: qla3xxx: Remove overflowing shift statement
r8169: re-enable MSI-X on RTL8168g
drm: Get ref on CRTC commit object when waiting for flip_done
selftests: ftrace: Add synthetic event syntax testcase
i2c: rcar: cleanup DMA for all kinds of failure
net: socionext: Reset tx queue in ndo_stop
locking/lockdep: Fix debug_locks off performance problem
netfilter: xt_nat: fix DNAT target for shifted portmap ranges
ataflop: fix error handling during setup
swim: fix cleanup on setup error
arm64: cpufeature: ctr: Fix cpu capability check for late CPUs
nfp: devlink port split support for 1x100G CXP NIC
tun: Consistently configure generic netdev params via rtnetlink
s390/sthyi: Fix machine name validity indication
hwmon: (pwm-fan) Set fan speed to 0 on suspend
lightnvm: pblk: fix race on sysfs line state
lightnvm: pblk: fix two sleep-in-atomic-context bugs
lightnvm: pblk: fix race condition on metadata I/O
spi: spi-ep93xx: Use dma_data_direction for ep93xx_spi_dma_{finish,prepare}
perf tools: Free temporary 'sys' string in read_event_files()
perf tools: Cleanup trace-event-info 'tdata' leak
perf strbuf: Match va_{add,copy} with va_end
cpupower: Fix coredump on VMWare
bcache: Populate writeback_rate_minimum attribute
mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
sdhci: acpi: add free_slot callback
mtd: rawnand: denali: set SPARE_AREA_SKIP_BYTES register to 8 if unset
iwlwifi: pcie: avoid empty free RB queue
iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC
ACPI/PPTT: Handle architecturally unknown cache types
ACPI / PM: LPIT: Register sysfs attributes based on FADT
ACPI / processor: Fix the return value of acpi_processor_ids_walk()
cpufreq: dt: Try freeing static OPPs only if we have added them
x86/intel_rdt: Show missing resctrl mount options
mtd: rawnand: atmel: Fix potential NULL pointer dereference
signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_sys_sigaltstack
ice: fix changing of ring descriptor size (ethtool -G)
ice: update fw version check logic
net: hns3: Fix for packet buffer setting bug
Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth
x86: boot: Fix EFI stub alignment
net: hns3: Add nic state check before calling netif_tx_wake_queue
net: hns3: Fix ets validate issue
pinctrl: sunxi: fix 'pctrl->functions' allocation in sunxi_pinctrl_build_state
pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
brcmfmac: fix for proper support of 160MHz bandwidth
net: hns3: Check hdev state when getting link status
net: hns3: Set STATE_DOWN bit of hdev state when stopping net
net: phy: phylink: ensure the carrier is off when starting phylink
block, bfq: correctly charge and reset entity service in all cases
arm64: entry: Allow handling of undefined instructions from EL1
kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
spi: gpio: No MISO does not imply no RX
ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
pinctrl: qcom: spmi-mpp: Fix drive strength setting
bpf/verifier: fix verifier instability
failover: Add missing check to validate 'slave_dev' in 
net_failover_slave_unregister
perf tests: Fix record+probe_libc_inet_pton.sh without ping's debuginfo
pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
net: hns3: Preserve vlan 0 in hardware table
net: hns3: Fix ping exited problem when doing lp selftest
net: hns3: Fix for vf vlan delete failed problem
net: dsa: mv88e6xxx: Fix writing to a PHY page.
rsi: fix memory alignment issue in ARM32 platforms
iwlwifi: mvm: fix BAR seq ctrl reporting
gpio: brcmstb: allow 0 width GPIO banks
ixgbe: disallow IPsec Tx offload when in SR-IOV mode
ixgbevf: VF2VF TCP RSS
ath10k: schedule hardware restart if WMI command times out
libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
thermal: rcar_thermal: Prevent doing work after unbind
thermal: da9062/61: Prevent hardware access during system suspend
cgroup, netclassid: add a preemption point to write_classid
net: stmmac: dwmac-sun8i: fix OF child-node lookup
f2fs: fix to account IO correctly for cgroup writeback
MD: Memory leak when flush bio size is zero
md: fix memleak for mempool
scsi: esp_scsi: Track residual for PIO transfers
scsi: ufs: Schedule clk gating work on correct queue
UAPI: ndctl: Fix g++-unsupported initialisation in headers
KVM: nVMX: Clear reserved bits of #DB exit qualification
scsi: megaraid_sas: fix a missing-check bug
RDMA/core: Do not expose unsupported counters
IB/ipoib: Clear IPCB before icmp_send
RDMA/bnxt_re: Avoid accessing nq->bar_reg_iomem in failure case
RDMA/bnxt_re: Fix recursive lock warning in debug kernel
usb: host: ohci-at91: fix request of irq for optional gpio
PCI: mediatek: Fix mtk_pcie_find_port() endpoint/port matching logic
PCI: cadence: Use AXI region 0 to signal interrupts from EP
usb: typec: tcpm: Report back negotiated PPS voltage and current
tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated
f2fs: clear PageError on the read path
Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
VMCI: Resource wildcard match fixed
PCI / ACPI: Enable wake automatically for power managed bridges
xprtrdma: Reset credit grant properly after a disconnect
irqchip/pdc: Setup all edge interrupts as rising edge at GIC
usb: dwc2: fix a race with external vbus supply
usb: gadget: udc: atmel: handle at91sam9rl PMC
ext4: fix argument checking in EXT4_IOC_MOVE_EXT
MD: fix invalid stored role for a disk
nvmem: check the return value of nvmem_add_cells()
xhci: Avoid USB autosuspend when resuming USB2 ports.
f2fs: fix to recover inode's crtime during POR
f2fs: fix to recover inode's i_flags during POR
PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
coresight: etb10: Fix handling of perf mode
PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode
crypto: caam - fix implicit casts in endianness helpers
usb: chipidea: Prevent unbalanced IRQ disable
Smack: ptrace capability use fixes
driver/dma/ioat: Call del_timer_sync() without holding prep_lock
firmware: coreboot: Unmap ioregion after device population
IB/mlx5: Allow transition of DCI QP to reset
uio: ensure class is registered before devices
scsi: lpfc: Correct soft lockup when running mds diagnostics
scsi: lpfc: Correct race with abort on completion path
f2fs: avoid sleeping under spin_lock
f2fs: report error if quota off error during umount
signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init
mfd: menelaus: Fix possible race condition and leak
dmaengine: dma-jz4780: Return error if not probed from DT
IB/rxe: fix for duplicate request processing and ack psns
ALSA: hda: Check the non-cached stream buffers more explicitly
cpupower: Fix AMD Family 0x17 msr_pstate size
Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()"
f2fs: fix to recover cold bit of inode block during POR
f2fs: fix to account IO correctly
OPP: Free OPP table properly on performance state irregularities
arm: dts: exynos: Add missing cooling device properties for CPUs
ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
xen-swiotlb: use actually allocated size on check physical continuous
tpm: Restore functionality to xen vtpm driver.
xen/blkfront: avoid NULL blkfront_info dereference on device removal
xen/balloon: Support xend-based toolstack
xen: fix race in xen_qlock_wait()
xen: make xen_qlock_wait() nestable
xen/pvh: increase early stack size
xen/pvh: don't try to unplug emulated devices
libertas: don't set URB_ZERO_PACKET on IN USB transfer
usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage
usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround"
mt76: mt76x2: fix multi-interface beacon configuration
iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
net/ipv4: defensive cipso option parsing
dmaengine: ppc4xx: fix off-by-one build failure
libnvdimm: Hold reference on parent while scheduling async init
libnvdimm, region: Fail badblocks listing for inactive regions
libnvdimm, pmem: Fix badblocks population for 'raw' namespaces
ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
ASoC: sta32x: set ->component pointer in private struct
IB/mlx5: Fix MR cache initialization
IB/rxe: Revise the ib_wr_opcode enum
jbd2: fix use after free in jbd2_log_do_checkpoint()
gfs2_meta: ->mount() can get NULL dev_name
ext4: fix EXT4_IOC_SWAP_BOOT
ext4: initialize retries variable in ext4_da_write_inline_data_begin()
ext4: fix setattr project check in fssetxattr ioctl
ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
ext4: fix use-after-free race in ext4_remount()'s error path
selinux: fix mounting of cgroup2 under older policies
HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452
HID: hiddev: fix potential Spectre v1
EDAC, amd64: Add Family 17h, models 10h-2fh support
EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
EDAC, skx_edac: Fix logical channel intermediate decoding
ARM: dts: dra7: Fix up unaligned access setting for PCIe EP
PCI/ASPM: Fix link_state teardown on device removal
PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk
PCI: vmd: White list for fast interrupt handlers
signal/GenWQE: Fix sending of SIGKILL
signal: Guard against negative signal numbers in copy_siginfo_from_user32
crypto: lrw - Fix out-of bounds access on counter overflow
crypto: tcrypt - fix ghash-generic speed test
crypto: aesni - don't use GFP_ATOMIC allocation if the request doesn't cross a 
page in gcm
crypto: morus/generic - fix for big endian systems
crypto: aegis/generic - fix for big endian systems
crypto: speck - remove Speck
mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
ima: fix showing large 'violations' or 'runtime_measurements_count'
hugetlbfs: dirty pages as they are added to pagecache
mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback
KVM: arm/arm64: Ensure only THP is candidate for adjustment
KVM: arm64: Fix caching of host MDCR_EL2 value
kbuild: fix kernel/bounds.c 'W=1' warning
iio: ad5064: Fix regulator handling
iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs()
iio: adc: at91: fix acking DRDY irq on simple conversions
iio: adc: at91: fix wrong channel number in triggered buffer mode
w1: omap-hdq: fix missing bus unregister at removal
smb3: allow stats which track session and share reconnects to be reset
smb3: do not attempt cifs operation in smb3 query info error path
smb3: on kerberos mount if server doesn't specify auth type use krb5
printk: Fix panic caused by passing log_buf_len to command line
genirq: Fix race on spurious interrupt detection
NFC: nfcmrvl_uart: fix OF child-node lookup
NFSv4.1: Fix the r/wsize checking
nfs: Fix a missed page unlock after pg_doio()
nfsd: correctly decrement odstate refcount in error path
nfsd: Fix an Oops in free_session()
lockd: fix access beyond unterminated strings in prints
dm ioctl: harden copy_params()'s copy_from_user() from malicious users
dm zoned: fix metadata block ref counting
dm zoned: fix various dmz_get_mblock() issues
media: ov7670: make "xclk" clock optional
fsnotify: Fix busy inodes during unmount
powerpc/msi: Fix compile error on mpc83xx
powerpc/tm: Fix HFSCR bit for no suspend case
powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
MIPS: memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
MIPS: OCTEON: fix out of bounds array access on CN68XX
rtc: ds1307: fix ds1339 wakealarm support
rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt'
rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI
power: supply: twl4030-charger: fix OF sibling-node lookup
ocxl: Fix access to the AFU Descriptor Data
iommu/arm-smmu: Ensure that page-table updates are visible before TLBI
TC: Set DMA masks for devices
net: bcmgenet: fix OF child-node lookup
media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
Revert "media: dvbsky: use just one mutex for serializing device R/W ops"
kgdboc: Passing ekgdboc to command line causes panic
media: cec: make cec_get_edid_spa_location() an inline function
media: cec: integrate cec_validate_phys_addr() in cec-api.c
xen: fix xen_qlock_wait()
xen: remove size limit of privcmd-buf mapping interface
xen-blkfront: fix kernel panic with negotiate_mq error path
media: cec: add new tx/rx status bits to detect aborts/timeouts
media: cec: fix the Signal Free Time calculation
media: cec: forgot to cancel delayed work
media: em28xx: use a default format if TRY_FMT fails
media: tvp5150: avoid going past array on v4l2_querymenu()
media: em28xx: fix input name for Terratec AV 350
media: em28xx: make v4l2-compliance happier by starting sequence on zero
media: em28xx: fix handler for vidioc_s_input()
media: adv7604: when the EDID is cleared, unconfigure CEC as well
media: adv7842: when the EDID is cleared, unconfigure CEC as well
drm/mediatek: fix OF sibling-node lookup
media: media colorspaces*.rst: rename AdobeRGB to opRGB
media: replace ADOBERGB by OPRGB
media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
arm64: lse: remove -fcall-used-x0 flag
rpmsg: smd: fix memory leak on channel create
Cramfs: fix abad comparison when wrap-arounds occur
ARM: dts: socfpga: Fix SDRAM node address for Arria10
arm64: dts: stratix10: Correct System Manager register size
soc: qcom: rmtfs-mem: Validate that scm is available
soc/tegra: pmc: Fix child-node lookup
selftests/ftrace: Fix synthetic event test to delete event correctly
selftests/powerpc: Fix ptrace tm failure
tracing: Return -ENOENT if there is no target synthetic event
btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
btrfs: Handle owner mismatch gracefully when walking up tree
btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock
btrfs: fix error handling in free_log_tree
btrfs: fix error handling in btrfs_dev_replace_start
btrfs: Enhance btrfs_trim_fs function to handle error better
btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
btrfs: don't attempt to trim devices that don't support it
btrfs: keep trim from interfering with transaction commits
btrfs: wait on caching when putting the bg cache
Btrfs: don't clean dirty pages during buffered writes
btrfs: release metadata before running delayed refs
btrfs: protect space cache inode alloc with GFP_NOFS
btrfs: reset max_extent_size on clear in a bitmap
btrfs: make sure we create all new block groups
Btrfs: fix warning when replaying log after fsync of a tmpfile
Btrfs: fix wrong dentries after fsync of file that got its parent replaced
btrfs: qgroup: Dirty all qgroups before rescan
Btrfs: fix null pointer dereference on compressed write path error
Btrfs: fix assertion on fsync of regular file when using no-holes feature
Btrfs: fix deadlock when writing out free space caches
btrfs: reset max_extent_size properly
btrfs: set max_extent_size properly
btrfs: don't use ctl->free_space for max_extent_size
btrfs: only free reserved extent if we didn't insert it
btrfs: fix insert_reserved error handling
btrfs: don't run delayed_iputs in commit
btrfs: move the dio_sem higher up the callchain
Btrfs: fix use-after-free during inode eviction
Btrfs: fix use-after-free when dumping free space
net: sched: Remove TCA_OPTIONS from policy
bpf: wait for running BPF programs when updating map-in-map
MD: fix invalid stored role for a disk - try2
Linux 4.18.19

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: linux (Ubuntu Cosmic)
     Importance: Undecided
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Cosmic)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu Cosmic)
       Status: New => In Progress

** Changed in: linux (Ubuntu Cosmic)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1810820

Title:
  Cosmic update: 4.18.19 upstream stable release

Status in linux package in Ubuntu:
  New
Status in linux source package in Cosmic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         4.18.19 upstream stable release
         from git://git.kernel.org/

  mtd: rawnand: marvell: fix the IRQ handler complete() condition
  mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB
  mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash
  mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus
  spi: spi-mem: Adjust op len based on message/transfer size limitations
  spi: bcm-qspi: switch back to reading flash using smaller chunks
  spi: bcm-qspi: fix calculation of address length
  bcache: trace missed reading by cache_missed
  bcache: correct dirty data statistics
  bcache: fix miss key refill->end in writeback
  hwmon: (pmbus) Fix page count auto-detection.
  jffs2: free jffs2_sb_info through jffs2_kill_sb()
  block: setup bounce bio_sets properly
  block: don't deal with discard limit in blkdev_issue_discard()
  block: make sure discard bio is aligned with logical block size
  block: make sure writesame bio is aligned with logical block size
  cpufreq: conservative: Take limits changes into account properly
  dma-mapping: fix panic caused by passing empty cma command line argument
  pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
  ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
  ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended 
opcodes
  kprobes/x86: Use preempt_enable() in optimized_callback()
  mailbox: PCC: handle parse error
  acpi, nfit: Fix Address Range Scrub completion tracking
  parisc: Fix address in HPMC IVA
  parisc: Fix map_pages() to not overwrite existing pte entries
  parisc: Fix exported address of os_hpmc handler
  ALSA: hda - Add quirk for ASUS G751 laptop
  ALSA: hda - Fix headphone pin config for ASUS G751
  ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
  ALSA: hda: Add 2 more models to the power_save blacklist
  ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
  x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
  x86/xen: Fix boot loader version reported for PVH guests
  x86/corruption-check: Fix panic in memory_corruption_check() when boot option 
without value is provided
  x86/mm/pat: Disable preemption around __flush_tlb_all()
  ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen
  drm: fix use of freed memory in drm_mode_setcrtc
  bpf: do not blindly change rlimit in reuseport net selftest
  nvme: remove ns sibling before clearing path
  Revert "perf tools: Fix PMU term format max value calculation"
  selftests: usbip: add wait after attach and before checking port status
  xsk: do not call synchronize_net() under RCU read lock
  xfrm: policy: use hlist rcu variants on insert
  perf vendor events intel: Fix wrong filter_band* values for uncore events
  r8169: Enable MSI-X on RTL8106e
  nfp: flower: fix pedit set actions for multiple partial masks
  nfp: flower: use offsets provided by pedit instead of index for ipv6
  sched/fair: Fix the min_vruntime update logic in dequeue_entity()
  perf evsel: Store ids for events with their own cpus 
perf_event__synthesize_event_update_cpus
  perf tools: Fix use of alternatives to find JDIR
  perf cpu_map: Align cpu map synthesized events properly.
  perf report: Don't crash on invalid inline debug information
  x86/fpu: Remove second definition of fpu in __fpu__restore_sig()
  net: qla3xxx: Remove overflowing shift statement
  r8169: re-enable MSI-X on RTL8168g
  drm: Get ref on CRTC commit object when waiting for flip_done
  selftests: ftrace: Add synthetic event syntax testcase
  i2c: rcar: cleanup DMA for all kinds of failure
  net: socionext: Reset tx queue in ndo_stop
  locking/lockdep: Fix debug_locks off performance problem
  netfilter: xt_nat: fix DNAT target for shifted portmap ranges
  ataflop: fix error handling during setup
  swim: fix cleanup on setup error
  arm64: cpufeature: ctr: Fix cpu capability check for late CPUs
  nfp: devlink port split support for 1x100G CXP NIC
  tun: Consistently configure generic netdev params via rtnetlink
  s390/sthyi: Fix machine name validity indication
  hwmon: (pwm-fan) Set fan speed to 0 on suspend
  lightnvm: pblk: fix race on sysfs line state
  lightnvm: pblk: fix two sleep-in-atomic-context bugs
  lightnvm: pblk: fix race condition on metadata I/O
  spi: spi-ep93xx: Use dma_data_direction for ep93xx_spi_dma_{finish,prepare}
  perf tools: Free temporary 'sys' string in read_event_files()
  perf tools: Cleanup trace-event-info 'tdata' leak
  perf strbuf: Match va_{add,copy} with va_end
  cpupower: Fix coredump on VMWare
  bcache: Populate writeback_rate_minimum attribute
  mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
  sdhci: acpi: add free_slot callback
  mtd: rawnand: denali: set SPARE_AREA_SKIP_BYTES register to 8 if unset
  iwlwifi: pcie: avoid empty free RB queue
  iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
  iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
  x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC
  ACPI/PPTT: Handle architecturally unknown cache types
  ACPI / PM: LPIT: Register sysfs attributes based on FADT
  ACPI / processor: Fix the return value of acpi_processor_ids_walk()
  cpufreq: dt: Try freeing static OPPs only if we have added them
  x86/intel_rdt: Show missing resctrl mount options
  mtd: rawnand: atmel: Fix potential NULL pointer dereference
  signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_sys_sigaltstack
  ice: fix changing of ring descriptor size (ethtool -G)
  ice: update fw version check logic
  net: hns3: Fix for packet buffer setting bug
  Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth
  x86: boot: Fix EFI stub alignment
  net: hns3: Add nic state check before calling netif_tx_wake_queue
  net: hns3: Fix ets validate issue
  pinctrl: sunxi: fix 'pctrl->functions' allocation in sunxi_pinctrl_build_state
  pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
  brcmfmac: fix for proper support of 160MHz bandwidth
  net: hns3: Check hdev state when getting link status
  net: hns3: Set STATE_DOWN bit of hdev state when stopping net
  net: phy: phylink: ensure the carrier is off when starting phylink
  block, bfq: correctly charge and reset entity service in all cases
  arm64: entry: Allow handling of undefined instructions from EL1
  kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
  spi: gpio: No MISO does not imply no RX
  ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
  pinctrl: qcom: spmi-mpp: Fix drive strength setting
  bpf/verifier: fix verifier instability
  failover: Add missing check to validate 'slave_dev' in 
net_failover_slave_unregister
  perf tests: Fix record+probe_libc_inet_pton.sh without ping's debuginfo
  pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
  pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
  net: hns3: Preserve vlan 0 in hardware table
  net: hns3: Fix ping exited problem when doing lp selftest
  net: hns3: Fix for vf vlan delete failed problem
  net: dsa: mv88e6xxx: Fix writing to a PHY page.
  rsi: fix memory alignment issue in ARM32 platforms
  iwlwifi: mvm: fix BAR seq ctrl reporting
  gpio: brcmstb: allow 0 width GPIO banks
  ixgbe: disallow IPsec Tx offload when in SR-IOV mode
  ixgbevf: VF2VF TCP RSS
  ath10k: schedule hardware restart if WMI command times out
  libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
  thermal: rcar_thermal: Prevent doing work after unbind
  thermal: da9062/61: Prevent hardware access during system suspend
  cgroup, netclassid: add a preemption point to write_classid
  net: stmmac: dwmac-sun8i: fix OF child-node lookup
  f2fs: fix to account IO correctly for cgroup writeback
  MD: Memory leak when flush bio size is zero
  md: fix memleak for mempool
  scsi: esp_scsi: Track residual for PIO transfers
  scsi: ufs: Schedule clk gating work on correct queue
  UAPI: ndctl: Fix g++-unsupported initialisation in headers
  KVM: nVMX: Clear reserved bits of #DB exit qualification
  scsi: megaraid_sas: fix a missing-check bug
  RDMA/core: Do not expose unsupported counters
  IB/ipoib: Clear IPCB before icmp_send
  RDMA/bnxt_re: Avoid accessing nq->bar_reg_iomem in failure case
  RDMA/bnxt_re: Fix recursive lock warning in debug kernel
  usb: host: ohci-at91: fix request of irq for optional gpio
  PCI: mediatek: Fix mtk_pcie_find_port() endpoint/port matching logic
  PCI: cadence: Use AXI region 0 to signal interrupts from EP
  usb: typec: tcpm: Report back negotiated PPS voltage and current
  tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated
  f2fs: clear PageError on the read path
  Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
  VMCI: Resource wildcard match fixed
  PCI / ACPI: Enable wake automatically for power managed bridges
  xprtrdma: Reset credit grant properly after a disconnect
  irqchip/pdc: Setup all edge interrupts as rising edge at GIC
  usb: dwc2: fix a race with external vbus supply
  usb: gadget: udc: atmel: handle at91sam9rl PMC
  ext4: fix argument checking in EXT4_IOC_MOVE_EXT
  MD: fix invalid stored role for a disk
  nvmem: check the return value of nvmem_add_cells()
  xhci: Avoid USB autosuspend when resuming USB2 ports.
  f2fs: fix to recover inode's crtime during POR
  f2fs: fix to recover inode's i_flags during POR
  PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
  coresight: etb10: Fix handling of perf mode
  PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode
  crypto: caam - fix implicit casts in endianness helpers
  usb: chipidea: Prevent unbalanced IRQ disable
  Smack: ptrace capability use fixes
  driver/dma/ioat: Call del_timer_sync() without holding prep_lock
  firmware: coreboot: Unmap ioregion after device population
  IB/mlx5: Allow transition of DCI QP to reset
  uio: ensure class is registered before devices
  scsi: lpfc: Correct soft lockup when running mds diagnostics
  scsi: lpfc: Correct race with abort on completion path
  f2fs: avoid sleeping under spin_lock
  f2fs: report error if quota off error during umount
  signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace 
init
  mfd: menelaus: Fix possible race condition and leak
  dmaengine: dma-jz4780: Return error if not probed from DT
  IB/rxe: fix for duplicate request processing and ack psns
  ALSA: hda: Check the non-cached stream buffers more explicitly
  cpupower: Fix AMD Family 0x17 msr_pstate size
  Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()"
  f2fs: fix to recover cold bit of inode block during POR
  f2fs: fix to account IO correctly
  OPP: Free OPP table properly on performance state irregularities
  arm: dts: exynos: Add missing cooling device properties for CPUs
  ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
  ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
  xen-swiotlb: use actually allocated size on check physical continuous
  tpm: Restore functionality to xen vtpm driver.
  xen/blkfront: avoid NULL blkfront_info dereference on device removal
  xen/balloon: Support xend-based toolstack
  xen: fix race in xen_qlock_wait()
  xen: make xen_qlock_wait() nestable
  xen/pvh: increase early stack size
  xen/pvh: don't try to unplug emulated devices
  libertas: don't set URB_ZERO_PACKET on IN USB transfer
  usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
  usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage
  usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround"
  mt76: mt76x2: fix multi-interface beacon configuration
  iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
  net/ipv4: defensive cipso option parsing
  dmaengine: ppc4xx: fix off-by-one build failure
  libnvdimm: Hold reference on parent while scheduling async init
  libnvdimm, region: Fail badblocks listing for inactive regions
  libnvdimm, pmem: Fix badblocks population for 'raw' namespaces
  ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
  ASoC: sta32x: set ->component pointer in private struct
  IB/mlx5: Fix MR cache initialization
  IB/rxe: Revise the ib_wr_opcode enum
  jbd2: fix use after free in jbd2_log_do_checkpoint()
  gfs2_meta: ->mount() can get NULL dev_name
  ext4: fix EXT4_IOC_SWAP_BOOT
  ext4: initialize retries variable in ext4_da_write_inline_data_begin()
  ext4: fix setattr project check in fssetxattr ioctl
  ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
  ext4: fix use-after-free race in ext4_remount()'s error path
  selinux: fix mounting of cgroup2 under older policies
  HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452
  HID: hiddev: fix potential Spectre v1
  EDAC, amd64: Add Family 17h, models 10h-2fh support
  EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
  EDAC, skx_edac: Fix logical channel intermediate decoding
  ARM: dts: dra7: Fix up unaligned access setting for PCIe EP
  PCI/ASPM: Fix link_state teardown on device removal
  PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk
  PCI: vmd: White list for fast interrupt handlers
  signal/GenWQE: Fix sending of SIGKILL
  signal: Guard against negative signal numbers in copy_siginfo_from_user32
  crypto: lrw - Fix out-of bounds access on counter overflow
  crypto: tcrypt - fix ghash-generic speed test
  crypto: aesni - don't use GFP_ATOMIC allocation if the request doesn't cross 
a page in gcm
  crypto: morus/generic - fix for big endian systems
  crypto: aegis/generic - fix for big endian systems
  crypto: speck - remove Speck
  mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
  ima: fix showing large 'violations' or 'runtime_measurements_count'
  hugetlbfs: dirty pages as they are added to pagecache
  mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
  mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback
  KVM: arm/arm64: Ensure only THP is candidate for adjustment
  KVM: arm64: Fix caching of host MDCR_EL2 value
  kbuild: fix kernel/bounds.c 'W=1' warning
  iio: ad5064: Fix regulator handling
  iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs()
  iio: adc: at91: fix acking DRDY irq on simple conversions
  iio: adc: at91: fix wrong channel number in triggered buffer mode
  w1: omap-hdq: fix missing bus unregister at removal
  smb3: allow stats which track session and share reconnects to be reset
  smb3: do not attempt cifs operation in smb3 query info error path
  smb3: on kerberos mount if server doesn't specify auth type use krb5
  printk: Fix panic caused by passing log_buf_len to command line
  genirq: Fix race on spurious interrupt detection
  NFC: nfcmrvl_uart: fix OF child-node lookup
  NFSv4.1: Fix the r/wsize checking
  nfs: Fix a missed page unlock after pg_doio()
  nfsd: correctly decrement odstate refcount in error path
  nfsd: Fix an Oops in free_session()
  lockd: fix access beyond unterminated strings in prints
  dm ioctl: harden copy_params()'s copy_from_user() from malicious users
  dm zoned: fix metadata block ref counting
  dm zoned: fix various dmz_get_mblock() issues
  media: ov7670: make "xclk" clock optional
  fsnotify: Fix busy inodes during unmount
  powerpc/msi: Fix compile error on mpc83xx
  powerpc/tm: Fix HFSCR bit for no suspend case
  powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
  MIPS: memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
  MIPS: OCTEON: fix out of bounds array access on CN68XX
  rtc: ds1307: fix ds1339 wakealarm support
  rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt'
  rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI
  power: supply: twl4030-charger: fix OF sibling-node lookup
  ocxl: Fix access to the AFU Descriptor Data
  iommu/arm-smmu: Ensure that page-table updates are visible before TLBI
  TC: Set DMA masks for devices
  net: bcmgenet: fix OF child-node lookup
  media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
  Revert "media: dvbsky: use just one mutex for serializing device R/W ops"
  kgdboc: Passing ekgdboc to command line causes panic
  media: cec: make cec_get_edid_spa_location() an inline function
  media: cec: integrate cec_validate_phys_addr() in cec-api.c
  xen: fix xen_qlock_wait()
  xen: remove size limit of privcmd-buf mapping interface
  xen-blkfront: fix kernel panic with negotiate_mq error path
  media: cec: add new tx/rx status bits to detect aborts/timeouts
  media: cec: fix the Signal Free Time calculation
  media: cec: forgot to cancel delayed work
  media: em28xx: use a default format if TRY_FMT fails
  media: tvp5150: avoid going past array on v4l2_querymenu()
  media: em28xx: fix input name for Terratec AV 350
  media: em28xx: make v4l2-compliance happier by starting sequence on zero
  media: em28xx: fix handler for vidioc_s_input()
  media: adv7604: when the EDID is cleared, unconfigure CEC as well
  media: adv7842: when the EDID is cleared, unconfigure CEC as well
  drm/mediatek: fix OF sibling-node lookup
  media: media colorspaces*.rst: rename AdobeRGB to opRGB
  media: replace ADOBERGB by OPRGB
  media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
  arm64: lse: remove -fcall-used-x0 flag
  rpmsg: smd: fix memory leak on channel create
  Cramfs: fix abad comparison when wrap-arounds occur
  ARM: dts: socfpga: Fix SDRAM node address for Arria10
  arm64: dts: stratix10: Correct System Manager register size
  soc: qcom: rmtfs-mem: Validate that scm is available
  soc/tegra: pmc: Fix child-node lookup
  selftests/ftrace: Fix synthetic event test to delete event correctly
  selftests/powerpc: Fix ptrace tm failure
  tracing: Return -ENOENT if there is no target synthetic event
  btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
  btrfs: Handle owner mismatch gracefully when walking up tree
  btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock
  btrfs: fix error handling in free_log_tree
  btrfs: fix error handling in btrfs_dev_replace_start
  btrfs: Enhance btrfs_trim_fs function to handle error better
  btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
  btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
  btrfs: don't attempt to trim devices that don't support it
  btrfs: keep trim from interfering with transaction commits
  btrfs: wait on caching when putting the bg cache
  Btrfs: don't clean dirty pages during buffered writes
  btrfs: release metadata before running delayed refs
  btrfs: protect space cache inode alloc with GFP_NOFS
  btrfs: reset max_extent_size on clear in a bitmap
  btrfs: make sure we create all new block groups
  Btrfs: fix warning when replaying log after fsync of a tmpfile
  Btrfs: fix wrong dentries after fsync of file that got its parent replaced
  btrfs: qgroup: Dirty all qgroups before rescan
  Btrfs: fix null pointer dereference on compressed write path error
  Btrfs: fix assertion on fsync of regular file when using no-holes feature
  Btrfs: fix deadlock when writing out free space caches
  btrfs: reset max_extent_size properly
  btrfs: set max_extent_size properly
  btrfs: don't use ctl->free_space for max_extent_size
  btrfs: only free reserved extent if we didn't insert it
  btrfs: fix insert_reserved error handling
  btrfs: don't run delayed_iputs in commit
  btrfs: move the dio_sem higher up the callchain
  Btrfs: fix use-after-free during inode eviction
  Btrfs: fix use-after-free when dumping free space
  net: sched: Remove TCA_OPTIONS from policy
  bpf: wait for running BPF programs when updating map-in-map
  MD: fix invalid stored role for a disk - try2
  Linux 4.18.19

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810820/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to