Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2020-02-12

                Ported from the following upstream stable releases:
                        v4.14.168, v4.19.99

       from git://git.kernel.org/

xfs: Sanity check flags of Q_XQUOTARM call
mfd: intel-lpss: Add default I2C device properties for Gemini Lake
powerpc/archrandom: fix arch_get_random_seed_int()
tipc: fix wrong timeout input for tipc_wait_for_cond()
mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
crypto: sun4i-ss - fix big endian issues
drm/sti: do not remove the drm_bridge that was never added
drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
ALSA: hda: fix unused variable warning
apparmor: don't try to replace stale label in ptrace access check
PCI: iproc: Remove PAXC slot check to allow VF support
drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
IB/rxe: replace kvfree with vfree
IB/hfi1: Add mtu check for operational data VLs
ALSA: usb-audio: update quirk for B&W PX to remove microphone
staging: comedi: ni_mio_common: protect register write overflow
pwm: lpss: Release runtime-pm reference from the driver's remove callback
drm/sun4i: hdmi: Fix double flag assignation
mlxsw: reg: QEEC: Add minimum shaper fields
NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
pcrypt: use format specifier in kobject_add
exportfs: fix 'passing zero to ERR_PTR()' warning
drm/dp_mst: Skip validating ports during destruction, just ref
net: phy: Fix not to call phy_resume() if PHY is not attached
IB/rxe: Fix incorrect cache cleanup in error flow
staging: bcm2835-camera: Abort probe if there is no camera
switchtec: Remove immediate status check after submitting MRPC command
pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field
pinctrl: sh-pfc: sh7734: Add missing IPSR11 field
pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations
pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field
pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value
vxlan: changelink: Fix handling of default remotes
Input: nomadik-ske-keypad - fix a loop timeout test
clk: highbank: fix refcount leak in hb_clk_init()
clk: qoriq: fix refcount leak in clockgen_init()
clk: socfpga: fix refcount leak
clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
clk: imx6q: fix refcount leak in imx6q_clocks_init()
clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
clk: imx7d: fix refcount leak in imx7d_clocks_init()
clk: vf610: fix refcount leak in vf610_clocks_init()
clk: armada-370: fix refcount leak in a370_clk_init()
clk: kirkwood: fix refcount leak in kirkwood_clk_init()
clk: armada-xp: fix refcount leak in axp_clk_init()
clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
clk: dove: fix refcount leak in dove_clk_init()
MIPS: BCM63XX: drop unused and broken DSP platform device
IB/usnic: Fix out of bounds index check in query pkey
RDMA/ocrdma: Fix out of bounds index check in query pkey
RDMA/qedr: Fix out of bounds index check in query pkey
drm/shmob: Fix return value check in shmob_drm_probe
arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
spi: cadence: Correct initialisation of runtime PM
RDMA/iw_cxgb4: Fix the unchecked ep dereference
drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
media: s5p-jpeg: Correct step and max values for V4L2_CID_JPEG_RESTART_INTERVAL
kbuild: mark prepare0 as PHONY to fix external module build
crypto: brcm - Fix some set-but-not-used warning
crypto: tgr192 - fix unaligned memory access
ASoC: imx-sgtl5000: put of nodes if finding codec fails
IB/iser: Pass the correct number of entries for dma mapped SGL
rtc: cmos: ignore bogus century byte
spi/topcliff_pch: Fix potential NULL dereference on allocation error
clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
iwlwifi: mvm: avoid possible access out of array.
net/mlx5: Take lock with IRQs disabled to avoid deadlock
iwlwifi: mvm: fix A-MPDU reference assignment
tty: ipwireless: Fix potential NULL pointer dereference
driver: uio: fix possible memory leak in __uio_register_device
driver: uio: fix possible use-after-free in __uio_register_device
crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove() arguments
driver core: Do not resume suppliers under device_links_write_lock()
ARM: dts: lpc32xx: add required clocks property to keypad device node
ARM: dts: lpc32xx: reparent keypad controller to SIC1
ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
iwlwifi: mvm: fix RSS config command
staging: most: cdev: add missing check for cdev_add failure
rtc: ds1672: fix unintended sign extension
thermal: mediatek: fix register index error
net: phy: fixed_phy: Fix fixed_phy not checking GPIO
rtc: ds1307: rx8130: Fix alarm handling
rtc: 88pm860x: fix unintended sign extension
rtc: 88pm80x: fix unintended sign extension
rtc: pm8xxx: fix unintended sign extension
fbdev: chipsfb: remove set but not used variable 'size'
iw_cxgb4: use tos when importing the endpoint
iw_cxgb4: use tos when finding ipv6 routes
drm/etnaviv: potential NULL dereference
pinctrl: sh-pfc: emev2: Add missing pinmux functions
pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
usb: phy: twl6030-usb: fix possible use-after-free on remove
block: don't use bio->bi_vcnt to figure out segment number
keys: Timestamp new keys
vfio_pci: Enable memory accesses before calling pci_map_rom
hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
KVM: PPC: Release all hardware TCE tables attached to a group
staging: r8822be: check kzalloc return or bail
dmaengine: mv_xor: Use correct device for DMA API
cdc-wdm: pass return value of recover_from_urb_loss
regulator: pv88060: Fix array out-of-bounds access
regulator: pv88080: Fix array out-of-bounds access
regulator: pv88090: Fix array out-of-bounds access
net: dsa: qca8k: Enable delay for RGMII_ID mode
drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
drm/nouveau/pmu: don't print reply values if exec is false
ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
fs/nfs: Fix nfs_parse_devname to not modify it's argument
staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
powerpc/64s: Fix logic when handling unknown CPU features
NFS: Fix a soft lockup in the delegation recovery code
clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
clocksource/drivers/exynos_mct: Fix error path in timer resources initialization
platform/x86: wmi: fix potential null pointer dereference
NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
net: aquantia: fixed instack structure overflow
powerpc/mm: Check secondary hash page table
nios2: ksyms: Add missing symbol exports
x86/mm: Remove unused variable 'cpu'
scsi: megaraid_sas: reduce module load time
drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
xen, cpu_hotplug: Prevent an out of bounds access
net: sh_eth: fix a missing check of of_get_phy_mode
regulator: lp87565: Fix missing register for LP87565_BUCK_0
media: ivtv: update *pos correctly in ivtv_read_pos()
media: cx18: update *pos correctly in cx18_read_pos()
media: wl128x: Fix an error code in fm_download_firmware()
media: cx23885: check allocation return
regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
jfs: fix bogus variable self-initialization
tipc: tipc clang warning
m68k: mac: Fix VIA timer counter accesses
arm64: dts: allwinner: a64: Add missing PIO clocks
ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
media: davinci-isif: avoid uninitialized variable use
media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
spi: tegra114: clear packed bit for unpacked mode
spi: tegra114: fix for unpacked mode transfers
spi: tegra114: terminate dma and reset on transfer timeout
spi: tegra114: flush fifos
spi: tegra114: configure dma burst size to fifo trig level
soc/fsl/qe: Fix an error code in qe_pin_request()
spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
ehea: Fix a copy-paste err in ehea_init_port_res
scsi: qla2xxx: Unregister chrdev if module initialization fails
scsi: target/core: Fix a race condition in the LUN lookup code
ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
net: hns3: fix for vport->bw_limit overflow problem
hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
tipc: set sysctl_tipc_rmem and named_timeout right range
selftests/ipc: Fix msgque compiler warnings
powerpc: vdso: Make vdso32 installation conditional in vdso_install
ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
media: ov2659: fix unbalanced mutex_lock/unlock
6lowpan: Off by one handling ->nexthdr
dmaengine: axi-dmac: Don't check the number of frames for alignment
ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
NFS: Don't interrupt file writeout due to fatal errors
irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
scsi: qla2xxx: Fix a format specifier
scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
packet: in recvmsg msg_name return at least sizeof sockaddr_ll
ASoC: fix valid stream condition
usb: gadget: fsl: fix link error against usb-gadget module
dwc2: gadget: Fix completed transfer size calculation in DDMA
IB/mlx5: Add missing XRC options to QP optional params mask
iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
dmaengine: tegra210-adma: restore channel status
mmc: core: fix possible use after free of host
lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
afs: Fix the afs.cell and afs.volume xattr handlers
vfio/mdev: Avoid release parent reference during error path
vfio/mdev: Fix aborting mdev child device removal if one fails
l2tp: Fix possible NULL pointer dereference
media: omap_vout: potential buffer overflow in vidioc_dqbuf()
media: davinci/vpbe: array underflow in vpbe_enum_outputs()
platform/x86: alienware-wmi: printing the wrong error code
crypto: caam - fix caam_dump_sg that iterates through scatterlist
netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
pwm: meson: Consider 128 a valid pre-divider
pwm: meson: Don't disable PWM when setting duty repeatedly
ARM: riscpc: fix lack of keyboard interrupts after irq conversion
kdb: do a sanity check on the cpu in kdb_per_cpu()
backlight: lm3630a: Return 0 on success in update_status functions
thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
EDAC/mc: Fix edac_mc_find() in case no device is found
ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
dmaengine: tegra210-adma: Fix crash during probe
arm64: dts: meson: libretech-cc: set eMMC as removable
RDMA/qedr: Fix incorrect device rate.
spi: spi-fsl-spi: call spi_finalize_current_message() at the end
crypto: ccp - fix AES CFB error exposed by new test vectors
crypto: ccp - Fix 3DES complaint from ccp-crypto module
serial: stm32: fix rx error handling
serial: stm32: fix transmit_chars when tx is stopped
serial: stm32: Add support of TC bit status check
serial: stm32: fix wakeup source initialization
misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
iommu: Use right function to get group for device
signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
netvsc: unshare skb in VF rx handler
cpufreq: brcmstb-avs-cpufreq: Fix initial command check
cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
media: vivid: fix incorrect assignment operation when setting video mode
mpls: fix warning with multi-label encap
iommu/vt-d: Duplicate iommu_resv_region objects per device list
qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
drm/msm/mdp5: Fix mdp5_cfg_init error return
net: netem: fix backlog accounting for corrupted GSO frames
net/af_iucv: always register net_device notifier
ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
rtc: pcf8563: Fix interrupt trigger method
rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
drm/msm/a3xx: remove TPL1 regs from snapshot
perf/ioctl: Add check for the sample_period value
dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
clk: qcom: Fix -Wunused-const-variable
nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
bnxt_en: Fix ethtool selftest crash under error conditions.
iommu/amd: Make iommu_disable safer
mfd: intel-lpss: Release IDA resources
rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
devres: allow const resource arguments
net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
scsi: libfc: fix null pointer dereference on a null lport
clk: sunxi-ng: v3s: add the missing PLL_DDR1
PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
libertas_tf: Use correct channel range in lbtf_geo_init
qed: reduce maximum stack frame size
usb: host: xhci-hub: fix extra endianness conversion
mic: avoid statically declaring a 'struct device'.
x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
crypto: ccp - Reduce maximum stack usage
ALSA: aoa: onyx: always initialize register read value
tipc: reduce risk of wakeup queue starvation
ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
net/mlx5: Fix mlx5_ifc_query_lag_out_bits
cifs: fix rmmod regression in cifs.ko caused by force_sig changes
crypto: caam - free resources in case caam_rng registration failed
ext4: set error return correctly when ext4_htree_store_dirent fails
ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
net/rds: Add a few missing rds_stat_names entries
bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
signal: Allow cifs and drbd to receive their terminating signals
ASoC: sun4i-i2s: RX and TX counter registers are swapped
dmaengine: dw: platform: Switch to acpi_dma_controller_register()
mac80211: minstrel_ht: fix per-group max throughput rate initialization
media: atmel: atmel-isi: fix timeout value for stop streaming
rtc: pcf2127: bugfix: read rtc disables watchdog
mips: avoid explicit UB in assignment of mips_io_port_base
iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
ahci: Do not export local variable ahci_em_messages
Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
hwmon: (lm75) Fix write operations for negative temperatures
power: supply: Init device wakeup after device_add()
x86, perf: Fix the dependency of the x86 insn decoder selftest
staging: greybus: light: fix a couple double frees
irqdomain: Add the missing assignment of domain->fwnode for named fwnode
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
iio: dac: ad5380: fix incorrect assignment to val
ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
net: sonic: return NETDEV_TX_OK if failed to map buffer
scsi: fnic: fix msix interrupt allocation
Btrfs: fix hang when loading existing inode cache off disk
Btrfs: fix inode cache waiters hanging on failure to start caching thread
Btrfs: fix inode cache waiters hanging on path allocation failure
btrfs: use correct count in btrfs_file_write_iter()
ixgbe: sync the first fragment unconditionally
hwmon: (shtc1) fix shtc1 and shtw1 id mask
net: sonic: replace dev_kfree_skb in sonic_send_packet
pinctrl: iproc-gpio: Fix incorrect pinconf configurations
ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
RDMA/cma: Fix false error message
net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
iommu/amd: Wait for completion of IOTLB flush in attach_device
net: aquantia: Fix aq_vec_isr_legacy() return value
net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
net: stmmac: dwmac-meson8b: Fix signedness bug in probe
net: axienet: fix a signedness bug in probe
of: mdio: Fix a signedness bug in of_phy_get_and_connect()
net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
nvme: retain split access workaround for capability reads
net: stmmac: gmac4+: Not all Unicast addresses may be available
mac80211: accept deauth frames in IBSS mode
llc: fix another potential sk_buff leak in llc_ui_sendmsg()
llc: fix sk_buff refcounting in llc_conn_state_process()
net: stmmac: fix length of PTP clock's name string
act_mirred: Fix mirred_init_module error handling
net: avoid possible false sharing in sk_leave_memory_pressure()
net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
tcp: annotate lockless access to tcp_memory_pressure
drm/msm/dsi: Implement reset correctly
dmaengine: imx-sdma: fix size check for sdma script_number
net: netem: fix error path for corrupted GSO frames
net: netem: correct the parent's backlog when corrupted packet was dropped
net: qca_spi: Move reset_count to struct qcaspi
afs: Fix large file support
MIPS: Loongson: Fix return value of loongson_hwmon_init
hv_netvsc: flag software created hash value
net: neigh: use long type to store jiffies delta
packet: fix data-race in fanout_flow_is_huge()
mmc: sdio: fix wl1251 vendor id
mmc: core: fix wl1251 sdio quirks
affs: fix a memory leak in affs_remount
dmaengine: ti: edma: fix missed failure handling
drm/radeon: fix bad DMA from INTERRUPT_CNTL2
arm64: dts: juno: Fix UART frequency
IB/iser: Fix dma_nents type definition
serial: stm32: fix clearing interrupt error flags
m68k: Call timer_interrupt() with interrupts disabled
SUNRPC: Fix svcauth_gss_proxy_init()
perf map: No need to adjust the long name of modules
ipmi: Fix memory leak in __ipmi_bmc_register
apparmor: Fix network performance issue in aa_label_sk_perm
firmware: coreboot: Let OF core populate platform device
bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
signal/ia64: Use the generic force_sigsegv in setup_frame
ASoC: wm9712: fix unused variable warning
genirq/debugfs: Reinstate full OF path for domain name
usb: gadget: fsl_udc_core: check allocation return value and cleanup on failure
cfg80211: regulatory: make initialization more robust
net: socionext: Add dummy PHY register read in phy_write()
mlxsw: spectrum: Set minimum shaper on MC TCs
pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
drm: rcar-du: Fix vblank initialization
arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply
IB/hfi1: Correctly process FECN and BECN in packets
OPP: Fix missing debugfs supply directory for OPPs
staging: bcm2835-camera: fix module autoloading
fork,memcg: fix crash in free_thread_stack on memcg charge fail
arm64: defconfig: Re-enable bcm2835-thermal driver
remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
drm: Fix error handling in drm_legacy_addctx
ARM: dts: r8a7743: Remove generic compatible string from iic3
drm/etnaviv: fix some off by one bugs
fork, memcg: fix cached_stacks case
net: hns3: fix wrong combined count returned by ethtool -l
net: hns3: fix bug of ethtool_ops.get_channels for VF
ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
clk: ingenic: jz4740: Fix gating of UDC clock
ntb_hw_switchtec: NT req id mapping table register entry number should be 512
net: dsa: b53: Fix default VLAN ID
net: dsa: b53: Properly account for VLAN filtering
net: dsa: b53: Do not program CPU port's PVID
drm/nouveau: fix missing break in switch statement
net: dsa: fix unintended change of bridge interface STP state
perf: Copy parent's address filter offsets on clone
netfilter: nft_set_hash: bogus element self comparison from deactivation path
iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
ARM: dts: sun9i: optimus: Fix fixed-regulators
bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
arm64/vdso: don't leak kernel addresses
rtc: mt6397: Don't call irq_dispose_mapping.
bpf: Add missed newline in verifier verbose log
ACPI: button: reinitialize button state upon resume
soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
afs: Fix AFS file locking to allow fine grained locks
afs: Further fix file locking
scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
vfio/mdev: Follow correct remove sequence
ALSA: aica: Fix a long-time build breakage
nfp: bpf: fix static check error through tightening shift amount adjustment
thermal: rcar_gen3_thermal: fix interrupt type
afs: Fix lock-wait/callback-break double locking
afs: Fix double inc of vnode->cb_break
clk: meson: gxbb: no spread spectrum on mpll0
serial: stm32: fix word length configuration
serial: stm32: fix rx data length when parity enabled
net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
crypto: talitos - fix AEAD processing.
net: don't clear sock->sk early to avoid trouble in strparser
crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
qed: iWARP - fix uninitialized callback
IB/hfi1: Handle port down properly in pio
net/af_iucv: build proper skbs for HiperTransport
ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
ip6_fib: Don't discard nodes with valid routing information in fib6_locate_1()
nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
fork,memcg: alloc_thread_stack_node needs to set tsk->stack
PM: ACPI/PCI: Resume all devices during hibernation
ACPI: PM: Simplify and fix PM domain hibernation callbacks
ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
drm/panel: make drm_panel.h self-contained
cxgb4: smt: Add lock for atomic_dec_and_test
powerpc/64s/radix: Fix memory hot-unplug page table split
rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
i40e: reduce stack usage in i40e_set_fc
ARM: 8896/1: VDSO: Don't leak kernel addresses
rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
bcache: Fix an error code in bch_dump_read()
ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
net: hns3: fix error VF index when setting VLAN offload
mailbox: qcom-apcs: fix max_register value
powerpc/mm/mce: Keep irqs disabled during lockless page table walk
net: netsec: Fix signedness bug in netsec_probe()
s390/qeth: Fix error handling during VNICC initialization
s390/qeth: Fix initialization of vnicc cmd masks during set online
vhost/test: stop device before reset
arm64: hibernate: check pgd table allocation
afs: Fix missing timeout reset
hwrng: omap3-rom - Fix missing clock by probing with device tree
arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
UBUNTU: upstream stable to v4.14.168, v4.19.99

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux (Ubuntu Bionic)
     Importance: Undecided
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu Bionic)
       Status: New => In Progress

** Changed in: linux (Ubuntu Bionic)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        upstream stable patchset 2020-02-12
  
-        upstream stable patchset 2020-02-12
-        from git://git.kernel.org/
+                 Ported from the following upstream stable releases:
+                         v4.14.168, v4.19.99
+ 
+        from git://git.kernel.org/
+ 
+ xfs: Sanity check flags of Q_XQUOTARM call
+ mfd: intel-lpss: Add default I2C device properties for Gemini Lake
+ powerpc/archrandom: fix arch_get_random_seed_int()
+ tipc: fix wrong timeout input for tipc_wait_for_cond()
+ mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
+ crypto: sun4i-ss - fix big endian issues
+ drm/sti: do not remove the drm_bridge that was never added
+ drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
+ ALSA: hda: fix unused variable warning
+ apparmor: don't try to replace stale label in ptrace access check
+ PCI: iproc: Remove PAXC slot check to allow VF support
+ drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
+ IB/rxe: replace kvfree with vfree
+ IB/hfi1: Add mtu check for operational data VLs
+ ALSA: usb-audio: update quirk for B&W PX to remove microphone
+ staging: comedi: ni_mio_common: protect register write overflow
+ pwm: lpss: Release runtime-pm reference from the driver's remove callback
+ drm/sun4i: hdmi: Fix double flag assignation
+ mlxsw: reg: QEEC: Add minimum shaper fields
+ NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
+ pcrypt: use format specifier in kobject_add
+ exportfs: fix 'passing zero to ERR_PTR()' warning
+ drm/dp_mst: Skip validating ports during destruction, just ref
+ net: phy: Fix not to call phy_resume() if PHY is not attached
+ IB/rxe: Fix incorrect cache cleanup in error flow
+ staging: bcm2835-camera: Abort probe if there is no camera
+ switchtec: Remove immediate status check after submitting MRPC command
+ pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
+ pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
+ pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
+ pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
+ pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
+ pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field
+ pinctrl: sh-pfc: sh7734: Add missing IPSR11 field
+ pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations
+ pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field
+ pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value
+ vxlan: changelink: Fix handling of default remotes
+ Input: nomadik-ske-keypad - fix a loop timeout test
+ clk: highbank: fix refcount leak in hb_clk_init()
+ clk: qoriq: fix refcount leak in clockgen_init()
+ clk: socfpga: fix refcount leak
+ clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
+ clk: imx6q: fix refcount leak in imx6q_clocks_init()
+ clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
+ clk: imx7d: fix refcount leak in imx7d_clocks_init()
+ clk: vf610: fix refcount leak in vf610_clocks_init()
+ clk: armada-370: fix refcount leak in a370_clk_init()
+ clk: kirkwood: fix refcount leak in kirkwood_clk_init()
+ clk: armada-xp: fix refcount leak in axp_clk_init()
+ clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
+ clk: dove: fix refcount leak in dove_clk_init()
+ MIPS: BCM63XX: drop unused and broken DSP platform device
+ IB/usnic: Fix out of bounds index check in query pkey
+ RDMA/ocrdma: Fix out of bounds index check in query pkey
+ RDMA/qedr: Fix out of bounds index check in query pkey
+ drm/shmob: Fix return value check in shmob_drm_probe
+ arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
+ spi: cadence: Correct initialisation of runtime PM
+ RDMA/iw_cxgb4: Fix the unchecked ep dereference
+ drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
+ media: s5p-jpeg: Correct step and max values for 
V4L2_CID_JPEG_RESTART_INTERVAL
+ kbuild: mark prepare0 as PHONY to fix external module build
+ crypto: brcm - Fix some set-but-not-used warning
+ crypto: tgr192 - fix unaligned memory access
+ ASoC: imx-sgtl5000: put of nodes if finding codec fails
+ IB/iser: Pass the correct number of entries for dma mapped SGL
+ rtc: cmos: ignore bogus century byte
+ spi/topcliff_pch: Fix potential NULL dereference on allocation error
+ clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
+ iwlwifi: mvm: avoid possible access out of array.
+ net/mlx5: Take lock with IRQs disabled to avoid deadlock
+ iwlwifi: mvm: fix A-MPDU reference assignment
+ tty: ipwireless: Fix potential NULL pointer dereference
+ driver: uio: fix possible memory leak in __uio_register_device
+ driver: uio: fix possible use-after-free in __uio_register_device
+ crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove() 
arguments
+ driver core: Do not resume suppliers under device_links_write_lock()
+ ARM: dts: lpc32xx: add required clocks property to keypad device node
+ ARM: dts: lpc32xx: reparent keypad controller to SIC1
+ ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
+ ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
+ ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
+ iwlwifi: mvm: fix RSS config command
+ staging: most: cdev: add missing check for cdev_add failure
+ rtc: ds1672: fix unintended sign extension
+ thermal: mediatek: fix register index error
+ net: phy: fixed_phy: Fix fixed_phy not checking GPIO
+ rtc: ds1307: rx8130: Fix alarm handling
+ rtc: 88pm860x: fix unintended sign extension
+ rtc: 88pm80x: fix unintended sign extension
+ rtc: pm8xxx: fix unintended sign extension
+ fbdev: chipsfb: remove set but not used variable 'size'
+ iw_cxgb4: use tos when importing the endpoint
+ iw_cxgb4: use tos when finding ipv6 routes
+ drm/etnaviv: potential NULL dereference
+ pinctrl: sh-pfc: emev2: Add missing pinmux functions
+ pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
+ pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
+ pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
+ PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
+ usb: phy: twl6030-usb: fix possible use-after-free on remove
+ block: don't use bio->bi_vcnt to figure out segment number
+ keys: Timestamp new keys
+ vfio_pci: Enable memory accesses before calling pci_map_rom
+ hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
+ KVM: PPC: Release all hardware TCE tables attached to a group
+ staging: r8822be: check kzalloc return or bail
+ dmaengine: mv_xor: Use correct device for DMA API
+ cdc-wdm: pass return value of recover_from_urb_loss
+ regulator: pv88060: Fix array out-of-bounds access
+ regulator: pv88080: Fix array out-of-bounds access
+ regulator: pv88090: Fix array out-of-bounds access
+ net: dsa: qca8k: Enable delay for RGMII_ID mode
+ drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
+ drm/nouveau/pmu: don't print reply values if exec is false
+ ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
+ fs/nfs: Fix nfs_parse_devname to not modify it's argument
+ staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
+ powerpc/64s: Fix logic when handling unknown CPU features
+ NFS: Fix a soft lockup in the delegation recovery code
+ clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
+ clocksource/drivers/exynos_mct: Fix error path in timer resources 
initialization
+ platform/x86: wmi: fix potential null pointer dereference
+ NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
+ mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
+ ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
+ ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
+ regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
+ netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
+ NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
+ net: aquantia: fixed instack structure overflow
+ powerpc/mm: Check secondary hash page table
+ nios2: ksyms: Add missing symbol exports
+ x86/mm: Remove unused variable 'cpu'
+ scsi: megaraid_sas: reduce module load time
+ drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
+ xen, cpu_hotplug: Prevent an out of bounds access
+ net: sh_eth: fix a missing check of of_get_phy_mode
+ regulator: lp87565: Fix missing register for LP87565_BUCK_0
+ media: ivtv: update *pos correctly in ivtv_read_pos()
+ media: cx18: update *pos correctly in cx18_read_pos()
+ media: wl128x: Fix an error code in fm_download_firmware()
+ media: cx23885: check allocation return
+ regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
+ jfs: fix bogus variable self-initialization
+ tipc: tipc clang warning
+ m68k: mac: Fix VIA timer counter accesses
+ arm64: dts: allwinner: a64: Add missing PIO clocks
+ ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
+ media: davinci-isif: avoid uninitialized variable use
+ media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
+ spi: tegra114: clear packed bit for unpacked mode
+ spi: tegra114: fix for unpacked mode transfers
+ spi: tegra114: terminate dma and reset on transfer timeout
+ spi: tegra114: flush fifos
+ spi: tegra114: configure dma burst size to fifo trig level
+ soc/fsl/qe: Fix an error code in qe_pin_request()
+ spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
+ ehea: Fix a copy-paste err in ehea_init_port_res
+ scsi: qla2xxx: Unregister chrdev if module initialization fails
+ scsi: target/core: Fix a race condition in the LUN lookup code
+ ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
+ net: hns3: fix for vport->bw_limit overflow problem
+ hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
+ platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
+ tipc: set sysctl_tipc_rmem and named_timeout right range
+ selftests/ipc: Fix msgque compiler warnings
+ powerpc: vdso: Make vdso32 installation conditional in vdso_install
+ ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
+ media: ov2659: fix unbalanced mutex_lock/unlock
+ 6lowpan: Off by one handling ->nexthdr
+ dmaengine: axi-dmac: Don't check the number of frames for alignment
+ ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
+ NFS: Don't interrupt file writeout due to fatal errors
+ irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
+ scsi: qla2xxx: Fix a format specifier
+ scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
+ packet: in recvmsg msg_name return at least sizeof sockaddr_ll
+ ASoC: fix valid stream condition
+ usb: gadget: fsl: fix link error against usb-gadget module
+ dwc2: gadget: Fix completed transfer size calculation in DDMA
+ IB/mlx5: Add missing XRC options to QP optional params mask
+ iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
+ dmaengine: tegra210-adma: restore channel status
+ mmc: core: fix possible use after free of host
+ lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
+ afs: Fix the afs.cell and afs.volume xattr handlers
+ vfio/mdev: Avoid release parent reference during error path
+ vfio/mdev: Fix aborting mdev child device removal if one fails
+ l2tp: Fix possible NULL pointer dereference
+ media: omap_vout: potential buffer overflow in vidioc_dqbuf()
+ media: davinci/vpbe: array underflow in vpbe_enum_outputs()
+ platform/x86: alienware-wmi: printing the wrong error code
+ crypto: caam - fix caam_dump_sg that iterates through scatterlist
+ netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
+ pwm: meson: Consider 128 a valid pre-divider
+ pwm: meson: Don't disable PWM when setting duty repeatedly
+ ARM: riscpc: fix lack of keyboard interrupts after irq conversion
+ kdb: do a sanity check on the cpu in kdb_per_cpu()
+ backlight: lm3630a: Return 0 on success in update_status functions
+ thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
+ EDAC/mc: Fix edac_mc_find() in case no device is found
+ ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
+ dmaengine: tegra210-adma: Fix crash during probe
+ arm64: dts: meson: libretech-cc: set eMMC as removable
+ RDMA/qedr: Fix incorrect device rate.
+ spi: spi-fsl-spi: call spi_finalize_current_message() at the end
+ crypto: ccp - fix AES CFB error exposed by new test vectors
+ crypto: ccp - Fix 3DES complaint from ccp-crypto module
+ serial: stm32: fix rx error handling
+ serial: stm32: fix transmit_chars when tx is stopped
+ serial: stm32: Add support of TC bit status check
+ serial: stm32: fix wakeup source initialization
+ misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
+ iommu: Use right function to get group for device
+ signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
+ inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
+ netvsc: unshare skb in VF rx handler
+ cpufreq: brcmstb-avs-cpufreq: Fix initial command check
+ cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
+ media: vivid: fix incorrect assignment operation when setting video mode
+ mpls: fix warning with multi-label encap
+ iommu/vt-d: Duplicate iommu_resv_region objects per device list
+ qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
+ powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
+ powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
+ drm/msm/mdp5: Fix mdp5_cfg_init error return
+ net: netem: fix backlog accounting for corrupted GSO frames
+ net/af_iucv: always register net_device notifier
+ ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
+ rtc: pcf8563: Fix interrupt trigger method
+ rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
+ drm/msm/a3xx: remove TPL1 regs from snapshot
+ perf/ioctl: Add check for the sample_period value
+ dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
+ clk: qcom: Fix -Wunused-const-variable
+ nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
+ bnxt_en: Fix ethtool selftest crash under error conditions.
+ iommu/amd: Make iommu_disable safer
+ mfd: intel-lpss: Release IDA resources
+ rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
+ devres: allow const resource arguments
+ net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
+ scsi: libfc: fix null pointer dereference on a null lport
+ clk: sunxi-ng: v3s: add the missing PLL_DDR1
+ PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
+ libertas_tf: Use correct channel range in lbtf_geo_init
+ qed: reduce maximum stack frame size
+ usb: host: xhci-hub: fix extra endianness conversion
+ mic: avoid statically declaring a 'struct device'.
+ x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
+ crypto: ccp - Reduce maximum stack usage
+ ALSA: aoa: onyx: always initialize register read value
+ tipc: reduce risk of wakeup queue starvation
+ ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
+ net/mlx5: Fix mlx5_ifc_query_lag_out_bits
+ cifs: fix rmmod regression in cifs.ko caused by force_sig changes
+ crypto: caam - free resources in case caam_rng registration failed
+ ext4: set error return correctly when ext4_htree_store_dirent fails
+ ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
+ ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
+ ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
+ net/rds: Add a few missing rds_stat_names entries
+ bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
+ signal: Allow cifs and drbd to receive their terminating signals
+ ASoC: sun4i-i2s: RX and TX counter registers are swapped
+ dmaengine: dw: platform: Switch to acpi_dma_controller_register()
+ mac80211: minstrel_ht: fix per-group max throughput rate initialization
+ media: atmel: atmel-isi: fix timeout value for stop streaming
+ rtc: pcf2127: bugfix: read rtc disables watchdog
+ mips: avoid explicit UB in assignment of mips_io_port_base
+ iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
+ ahci: Do not export local variable ahci_em_messages
+ Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
+ hwmon: (lm75) Fix write operations for negative temperatures
+ power: supply: Init device wakeup after device_add()
+ x86, perf: Fix the dependency of the x86 insn decoder selftest
+ staging: greybus: light: fix a couple double frees
+ irqdomain: Add the missing assignment of domain->fwnode for named fwnode
+ bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
+ iio: dac: ad5380: fix incorrect assignment to val
+ ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
+ tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
+ net: sonic: return NETDEV_TX_OK if failed to map buffer
+ scsi: fnic: fix msix interrupt allocation
+ Btrfs: fix hang when loading existing inode cache off disk
+ Btrfs: fix inode cache waiters hanging on failure to start caching thread
+ Btrfs: fix inode cache waiters hanging on path allocation failure
+ btrfs: use correct count in btrfs_file_write_iter()
+ ixgbe: sync the first fragment unconditionally
+ hwmon: (shtc1) fix shtc1 and shtw1 id mask
+ net: sonic: replace dev_kfree_skb in sonic_send_packet
+ pinctrl: iproc-gpio: Fix incorrect pinconf configurations
+ ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
+ RDMA/cma: Fix false error message
+ net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
+ iommu/amd: Wait for completion of IOTLB flush in attach_device
+ net: aquantia: Fix aq_vec_isr_legacy() return value
+ net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
+ net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
+ net: stmmac: dwmac-meson8b: Fix signedness bug in probe
+ net: axienet: fix a signedness bug in probe
+ of: mdio: Fix a signedness bug in of_phy_get_and_connect()
+ net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
+ nvme: retain split access workaround for capability reads
+ net: stmmac: gmac4+: Not all Unicast addresses may be available
+ mac80211: accept deauth frames in IBSS mode
+ llc: fix another potential sk_buff leak in llc_ui_sendmsg()
+ llc: fix sk_buff refcounting in llc_conn_state_process()
+ net: stmmac: fix length of PTP clock's name string
+ act_mirred: Fix mirred_init_module error handling
+ net: avoid possible false sharing in sk_leave_memory_pressure()
+ net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
+ tcp: annotate lockless access to tcp_memory_pressure
+ drm/msm/dsi: Implement reset correctly
+ dmaengine: imx-sdma: fix size check for sdma script_number
+ net: netem: fix error path for corrupted GSO frames
+ net: netem: correct the parent's backlog when corrupted packet was dropped
+ net: qca_spi: Move reset_count to struct qcaspi
+ afs: Fix large file support
+ MIPS: Loongson: Fix return value of loongson_hwmon_init
+ hv_netvsc: flag software created hash value
+ net: neigh: use long type to store jiffies delta
+ packet: fix data-race in fanout_flow_is_huge()
+ mmc: sdio: fix wl1251 vendor id
+ mmc: core: fix wl1251 sdio quirks
+ affs: fix a memory leak in affs_remount
+ dmaengine: ti: edma: fix missed failure handling
+ drm/radeon: fix bad DMA from INTERRUPT_CNTL2
+ arm64: dts: juno: Fix UART frequency
+ IB/iser: Fix dma_nents type definition
+ serial: stm32: fix clearing interrupt error flags
+ m68k: Call timer_interrupt() with interrupts disabled
+ SUNRPC: Fix svcauth_gss_proxy_init()
+ perf map: No need to adjust the long name of modules
+ ipmi: Fix memory leak in __ipmi_bmc_register
+ apparmor: Fix network performance issue in aa_label_sk_perm
+ firmware: coreboot: Let OF core populate platform device
+ bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
+ signal/ia64: Use the generic force_sigsegv in setup_frame
+ ASoC: wm9712: fix unused variable warning
+ genirq/debugfs: Reinstate full OF path for domain name
+ usb: gadget: fsl_udc_core: check allocation return value and cleanup on 
failure
+ cfg80211: regulatory: make initialization more robust
+ net: socionext: Add dummy PHY register read in phy_write()
+ mlxsw: spectrum: Set minimum shaper on MC TCs
+ pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
+ drm: rcar-du: Fix vblank initialization
+ arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply
+ IB/hfi1: Correctly process FECN and BECN in packets
+ OPP: Fix missing debugfs supply directory for OPPs
+ staging: bcm2835-camera: fix module autoloading
+ fork,memcg: fix crash in free_thread_stack on memcg charge fail
+ arm64: defconfig: Re-enable bcm2835-thermal driver
+ remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
+ remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
+ drm: Fix error handling in drm_legacy_addctx
+ ARM: dts: r8a7743: Remove generic compatible string from iic3
+ drm/etnaviv: fix some off by one bugs
+ fork, memcg: fix cached_stacks case
+ net: hns3: fix wrong combined count returned by ethtool -l
+ net: hns3: fix bug of ethtool_ops.get_channels for VF
+ ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
+ clk: ingenic: jz4740: Fix gating of UDC clock
+ ntb_hw_switchtec: NT req id mapping table register entry number should be 512
+ net: dsa: b53: Fix default VLAN ID
+ net: dsa: b53: Properly account for VLAN filtering
+ net: dsa: b53: Do not program CPU port's PVID
+ drm/nouveau: fix missing break in switch statement
+ net: dsa: fix unintended change of bridge interface STP state
+ perf: Copy parent's address filter offsets on clone
+ netfilter: nft_set_hash: bogus element self comparison from deactivation path
+ iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
+ NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
+ ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
+ ARM: dts: sun9i: optimus: Fix fixed-regulators
+ bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
+ arm64/vdso: don't leak kernel addresses
+ rtc: mt6397: Don't call irq_dispose_mapping.
+ bpf: Add missed newline in verifier verbose log
+ ACPI: button: reinitialize button state upon resume
+ soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
+ net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
+ afs: Fix AFS file locking to allow fine grained locks
+ afs: Further fix file locking
+ scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
+ KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
+ vfio/mdev: Follow correct remove sequence
+ ALSA: aica: Fix a long-time build breakage
+ nfp: bpf: fix static check error through tightening shift amount adjustment
+ thermal: rcar_gen3_thermal: fix interrupt type
+ afs: Fix lock-wait/callback-break double locking
+ afs: Fix double inc of vnode->cb_break
+ clk: meson: gxbb: no spread spectrum on mpll0
+ serial: stm32: fix word length configuration
+ serial: stm32: fix rx data length when parity enabled
+ net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
+ crypto: talitos - fix AEAD processing.
+ net: don't clear sock->sk early to avoid trouble in strparser
+ crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
+ arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
+ arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
+ phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
+ qed: iWARP - fix uninitialized callback
+ IB/hfi1: Handle port down properly in pio
+ net/af_iucv: build proper skbs for HiperTransport
+ ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
+ ip6_fib: Don't discard nodes with valid routing information in fib6_locate_1()
+ nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
+ fork,memcg: alloc_thread_stack_node needs to set tsk->stack
+ PM: ACPI/PCI: Resume all devices during hibernation
+ ACPI: PM: Simplify and fix PM domain hibernation callbacks
+ ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
+ drm/panel: make drm_panel.h self-contained
+ cxgb4: smt: Add lock for atomic_dec_and_test
+ powerpc/64s/radix: Fix memory hot-unplug page table split
+ rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
+ i40e: reduce stack usage in i40e_set_fc
+ ARM: 8896/1: VDSO: Don't leak kernel addresses
+ rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
+ usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
+ bcache: Fix an error code in bch_dump_read()
+ ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
+ net: hns3: fix error VF index when setting VLAN offload
+ mailbox: qcom-apcs: fix max_register value
+ powerpc/mm/mce: Keep irqs disabled during lockless page table walk
+ net: netsec: Fix signedness bug in netsec_probe()
+ s390/qeth: Fix error handling during VNICC initialization
+ s390/qeth: Fix initialization of vnicc cmd masks during set online
+ vhost/test: stop device before reset
+ arm64: hibernate: check pgd table allocation
+ afs: Fix missing timeout reset
+ hwrng: omap3-rom - Fix missing clock by probing with device tree
+ arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
+ UBUNTU: upstream stable to v4.14.168, v4.19.99

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1863019

Title:
  Bionic update: upstream stable patchset 2020-02-12

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Bionic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2020-02-12

                  Ported from the following upstream stable releases:
                          v4.14.168, v4.19.99

         from git://git.kernel.org/

  xfs: Sanity check flags of Q_XQUOTARM call
  mfd: intel-lpss: Add default I2C device properties for Gemini Lake
  powerpc/archrandom: fix arch_get_random_seed_int()
  tipc: fix wrong timeout input for tipc_wait_for_cond()
  mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
  crypto: sun4i-ss - fix big endian issues
  drm/sti: do not remove the drm_bridge that was never added
  drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
  ALSA: hda: fix unused variable warning
  apparmor: don't try to replace stale label in ptrace access check
  PCI: iproc: Remove PAXC slot check to allow VF support
  drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
  IB/rxe: replace kvfree with vfree
  IB/hfi1: Add mtu check for operational data VLs
  ALSA: usb-audio: update quirk for B&W PX to remove microphone
  staging: comedi: ni_mio_common: protect register write overflow
  pwm: lpss: Release runtime-pm reference from the driver's remove callback
  drm/sun4i: hdmi: Fix double flag assignation
  mlxsw: reg: QEEC: Add minimum shaper fields
  NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
  pcrypt: use format specifier in kobject_add
  exportfs: fix 'passing zero to ERR_PTR()' warning
  drm/dp_mst: Skip validating ports during destruction, just ref
  net: phy: Fix not to call phy_resume() if PHY is not attached
  IB/rxe: Fix incorrect cache cleanup in error flow
  staging: bcm2835-camera: Abort probe if there is no camera
  switchtec: Remove immediate status check after submitting MRPC command
  pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
  pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
  pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
  pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
  pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
  pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field
  pinctrl: sh-pfc: sh7734: Add missing IPSR11 field
  pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations
  pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field
  pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value
  vxlan: changelink: Fix handling of default remotes
  Input: nomadik-ske-keypad - fix a loop timeout test
  clk: highbank: fix refcount leak in hb_clk_init()
  clk: qoriq: fix refcount leak in clockgen_init()
  clk: socfpga: fix refcount leak
  clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
  clk: imx6q: fix refcount leak in imx6q_clocks_init()
  clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
  clk: imx7d: fix refcount leak in imx7d_clocks_init()
  clk: vf610: fix refcount leak in vf610_clocks_init()
  clk: armada-370: fix refcount leak in a370_clk_init()
  clk: kirkwood: fix refcount leak in kirkwood_clk_init()
  clk: armada-xp: fix refcount leak in axp_clk_init()
  clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
  clk: dove: fix refcount leak in dove_clk_init()
  MIPS: BCM63XX: drop unused and broken DSP platform device
  IB/usnic: Fix out of bounds index check in query pkey
  RDMA/ocrdma: Fix out of bounds index check in query pkey
  RDMA/qedr: Fix out of bounds index check in query pkey
  drm/shmob: Fix return value check in shmob_drm_probe
  arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
  spi: cadence: Correct initialisation of runtime PM
  RDMA/iw_cxgb4: Fix the unchecked ep dereference
  drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
  media: s5p-jpeg: Correct step and max values for 
V4L2_CID_JPEG_RESTART_INTERVAL
  kbuild: mark prepare0 as PHONY to fix external module build
  crypto: brcm - Fix some set-but-not-used warning
  crypto: tgr192 - fix unaligned memory access
  ASoC: imx-sgtl5000: put of nodes if finding codec fails
  IB/iser: Pass the correct number of entries for dma mapped SGL
  rtc: cmos: ignore bogus century byte
  spi/topcliff_pch: Fix potential NULL dereference on allocation error
  clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
  iwlwifi: mvm: avoid possible access out of array.
  net/mlx5: Take lock with IRQs disabled to avoid deadlock
  iwlwifi: mvm: fix A-MPDU reference assignment
  tty: ipwireless: Fix potential NULL pointer dereference
  driver: uio: fix possible memory leak in __uio_register_device
  driver: uio: fix possible use-after-free in __uio_register_device
  crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove() 
arguments
  driver core: Do not resume suppliers under device_links_write_lock()
  ARM: dts: lpc32xx: add required clocks property to keypad device node
  ARM: dts: lpc32xx: reparent keypad controller to SIC1
  ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
  ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
  ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
  iwlwifi: mvm: fix RSS config command
  staging: most: cdev: add missing check for cdev_add failure
  rtc: ds1672: fix unintended sign extension
  thermal: mediatek: fix register index error
  net: phy: fixed_phy: Fix fixed_phy not checking GPIO
  rtc: ds1307: rx8130: Fix alarm handling
  rtc: 88pm860x: fix unintended sign extension
  rtc: 88pm80x: fix unintended sign extension
  rtc: pm8xxx: fix unintended sign extension
  fbdev: chipsfb: remove set but not used variable 'size'
  iw_cxgb4: use tos when importing the endpoint
  iw_cxgb4: use tos when finding ipv6 routes
  drm/etnaviv: potential NULL dereference
  pinctrl: sh-pfc: emev2: Add missing pinmux functions
  pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
  pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
  pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
  PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
  usb: phy: twl6030-usb: fix possible use-after-free on remove
  block: don't use bio->bi_vcnt to figure out segment number
  keys: Timestamp new keys
  vfio_pci: Enable memory accesses before calling pci_map_rom
  hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
  KVM: PPC: Release all hardware TCE tables attached to a group
  staging: r8822be: check kzalloc return or bail
  dmaengine: mv_xor: Use correct device for DMA API
  cdc-wdm: pass return value of recover_from_urb_loss
  regulator: pv88060: Fix array out-of-bounds access
  regulator: pv88080: Fix array out-of-bounds access
  regulator: pv88090: Fix array out-of-bounds access
  net: dsa: qca8k: Enable delay for RGMII_ID mode
  drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
  drm/nouveau/pmu: don't print reply values if exec is false
  ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
  fs/nfs: Fix nfs_parse_devname to not modify it's argument
  staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
  powerpc/64s: Fix logic when handling unknown CPU features
  NFS: Fix a soft lockup in the delegation recovery code
  clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
  clocksource/drivers/exynos_mct: Fix error path in timer resources 
initialization
  platform/x86: wmi: fix potential null pointer dereference
  NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
  mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
  ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
  ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
  regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
  netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
  NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
  net: aquantia: fixed instack structure overflow
  powerpc/mm: Check secondary hash page table
  nios2: ksyms: Add missing symbol exports
  x86/mm: Remove unused variable 'cpu'
  scsi: megaraid_sas: reduce module load time
  drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
  xen, cpu_hotplug: Prevent an out of bounds access
  net: sh_eth: fix a missing check of of_get_phy_mode
  regulator: lp87565: Fix missing register for LP87565_BUCK_0
  media: ivtv: update *pos correctly in ivtv_read_pos()
  media: cx18: update *pos correctly in cx18_read_pos()
  media: wl128x: Fix an error code in fm_download_firmware()
  media: cx23885: check allocation return
  regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
  jfs: fix bogus variable self-initialization
  tipc: tipc clang warning
  m68k: mac: Fix VIA timer counter accesses
  arm64: dts: allwinner: a64: Add missing PIO clocks
  ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
  media: davinci-isif: avoid uninitialized variable use
  media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
  spi: tegra114: clear packed bit for unpacked mode
  spi: tegra114: fix for unpacked mode transfers
  spi: tegra114: terminate dma and reset on transfer timeout
  spi: tegra114: flush fifos
  spi: tegra114: configure dma burst size to fifo trig level
  soc/fsl/qe: Fix an error code in qe_pin_request()
  spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
  ehea: Fix a copy-paste err in ehea_init_port_res
  scsi: qla2xxx: Unregister chrdev if module initialization fails
  scsi: target/core: Fix a race condition in the LUN lookup code
  ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
  net: hns3: fix for vport->bw_limit overflow problem
  hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
  platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
  tipc: set sysctl_tipc_rmem and named_timeout right range
  selftests/ipc: Fix msgque compiler warnings
  powerpc: vdso: Make vdso32 installation conditional in vdso_install
  ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
  media: ov2659: fix unbalanced mutex_lock/unlock
  6lowpan: Off by one handling ->nexthdr
  dmaengine: axi-dmac: Don't check the number of frames for alignment
  ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
  NFS: Don't interrupt file writeout due to fatal errors
  irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
  scsi: qla2xxx: Fix a format specifier
  scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
  packet: in recvmsg msg_name return at least sizeof sockaddr_ll
  ASoC: fix valid stream condition
  usb: gadget: fsl: fix link error against usb-gadget module
  dwc2: gadget: Fix completed transfer size calculation in DDMA
  IB/mlx5: Add missing XRC options to QP optional params mask
  iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
  dmaengine: tegra210-adma: restore channel status
  mmc: core: fix possible use after free of host
  lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
  afs: Fix the afs.cell and afs.volume xattr handlers
  vfio/mdev: Avoid release parent reference during error path
  vfio/mdev: Fix aborting mdev child device removal if one fails
  l2tp: Fix possible NULL pointer dereference
  media: omap_vout: potential buffer overflow in vidioc_dqbuf()
  media: davinci/vpbe: array underflow in vpbe_enum_outputs()
  platform/x86: alienware-wmi: printing the wrong error code
  crypto: caam - fix caam_dump_sg that iterates through scatterlist
  netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  pwm: meson: Consider 128 a valid pre-divider
  pwm: meson: Don't disable PWM when setting duty repeatedly
  ARM: riscpc: fix lack of keyboard interrupts after irq conversion
  kdb: do a sanity check on the cpu in kdb_per_cpu()
  backlight: lm3630a: Return 0 on success in update_status functions
  thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
  EDAC/mc: Fix edac_mc_find() in case no device is found
  ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
  dmaengine: tegra210-adma: Fix crash during probe
  arm64: dts: meson: libretech-cc: set eMMC as removable
  RDMA/qedr: Fix incorrect device rate.
  spi: spi-fsl-spi: call spi_finalize_current_message() at the end
  crypto: ccp - fix AES CFB error exposed by new test vectors
  crypto: ccp - Fix 3DES complaint from ccp-crypto module
  serial: stm32: fix rx error handling
  serial: stm32: fix transmit_chars when tx is stopped
  serial: stm32: Add support of TC bit status check
  serial: stm32: fix wakeup source initialization
  misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
  iommu: Use right function to get group for device
  signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
  inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
  netvsc: unshare skb in VF rx handler
  cpufreq: brcmstb-avs-cpufreq: Fix initial command check
  cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
  media: vivid: fix incorrect assignment operation when setting video mode
  mpls: fix warning with multi-label encap
  iommu/vt-d: Duplicate iommu_resv_region objects per device list
  qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
  powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
  powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
  drm/msm/mdp5: Fix mdp5_cfg_init error return
  net: netem: fix backlog accounting for corrupted GSO frames
  net/af_iucv: always register net_device notifier
  ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
  rtc: pcf8563: Fix interrupt trigger method
  rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
  drm/msm/a3xx: remove TPL1 regs from snapshot
  perf/ioctl: Add check for the sample_period value
  dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
  clk: qcom: Fix -Wunused-const-variable
  nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
  bnxt_en: Fix ethtool selftest crash under error conditions.
  iommu/amd: Make iommu_disable safer
  mfd: intel-lpss: Release IDA resources
  rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
  devres: allow const resource arguments
  net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
  scsi: libfc: fix null pointer dereference on a null lport
  clk: sunxi-ng: v3s: add the missing PLL_DDR1
  PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
  libertas_tf: Use correct channel range in lbtf_geo_init
  qed: reduce maximum stack frame size
  usb: host: xhci-hub: fix extra endianness conversion
  mic: avoid statically declaring a 'struct device'.
  x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
  crypto: ccp - Reduce maximum stack usage
  ALSA: aoa: onyx: always initialize register read value
  tipc: reduce risk of wakeup queue starvation
  ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
  net/mlx5: Fix mlx5_ifc_query_lag_out_bits
  cifs: fix rmmod regression in cifs.ko caused by force_sig changes
  crypto: caam - free resources in case caam_rng registration failed
  ext4: set error return correctly when ext4_htree_store_dirent fails
  ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
  ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
  ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
  net/rds: Add a few missing rds_stat_names entries
  bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
  signal: Allow cifs and drbd to receive their terminating signals
  ASoC: sun4i-i2s: RX and TX counter registers are swapped
  dmaengine: dw: platform: Switch to acpi_dma_controller_register()
  mac80211: minstrel_ht: fix per-group max throughput rate initialization
  media: atmel: atmel-isi: fix timeout value for stop streaming
  rtc: pcf2127: bugfix: read rtc disables watchdog
  mips: avoid explicit UB in assignment of mips_io_port_base
  iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
  ahci: Do not export local variable ahci_em_messages
  Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
  hwmon: (lm75) Fix write operations for negative temperatures
  power: supply: Init device wakeup after device_add()
  x86, perf: Fix the dependency of the x86 insn decoder selftest
  staging: greybus: light: fix a couple double frees
  irqdomain: Add the missing assignment of domain->fwnode for named fwnode
  bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
  iio: dac: ad5380: fix incorrect assignment to val
  ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
  tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
  net: sonic: return NETDEV_TX_OK if failed to map buffer
  scsi: fnic: fix msix interrupt allocation
  Btrfs: fix hang when loading existing inode cache off disk
  Btrfs: fix inode cache waiters hanging on failure to start caching thread
  Btrfs: fix inode cache waiters hanging on path allocation failure
  btrfs: use correct count in btrfs_file_write_iter()
  ixgbe: sync the first fragment unconditionally
  hwmon: (shtc1) fix shtc1 and shtw1 id mask
  net: sonic: replace dev_kfree_skb in sonic_send_packet
  pinctrl: iproc-gpio: Fix incorrect pinconf configurations
  ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
  RDMA/cma: Fix false error message
  net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
  iommu/amd: Wait for completion of IOTLB flush in attach_device
  net: aquantia: Fix aq_vec_isr_legacy() return value
  net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
  net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
  net: stmmac: dwmac-meson8b: Fix signedness bug in probe
  net: axienet: fix a signedness bug in probe
  of: mdio: Fix a signedness bug in of_phy_get_and_connect()
  net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
  nvme: retain split access workaround for capability reads
  net: stmmac: gmac4+: Not all Unicast addresses may be available
  mac80211: accept deauth frames in IBSS mode
  llc: fix another potential sk_buff leak in llc_ui_sendmsg()
  llc: fix sk_buff refcounting in llc_conn_state_process()
  net: stmmac: fix length of PTP clock's name string
  act_mirred: Fix mirred_init_module error handling
  net: avoid possible false sharing in sk_leave_memory_pressure()
  net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
  tcp: annotate lockless access to tcp_memory_pressure
  drm/msm/dsi: Implement reset correctly
  dmaengine: imx-sdma: fix size check for sdma script_number
  net: netem: fix error path for corrupted GSO frames
  net: netem: correct the parent's backlog when corrupted packet was dropped
  net: qca_spi: Move reset_count to struct qcaspi
  afs: Fix large file support
  MIPS: Loongson: Fix return value of loongson_hwmon_init
  hv_netvsc: flag software created hash value
  net: neigh: use long type to store jiffies delta
  packet: fix data-race in fanout_flow_is_huge()
  mmc: sdio: fix wl1251 vendor id
  mmc: core: fix wl1251 sdio quirks
  affs: fix a memory leak in affs_remount
  dmaengine: ti: edma: fix missed failure handling
  drm/radeon: fix bad DMA from INTERRUPT_CNTL2
  arm64: dts: juno: Fix UART frequency
  IB/iser: Fix dma_nents type definition
  serial: stm32: fix clearing interrupt error flags
  m68k: Call timer_interrupt() with interrupts disabled
  SUNRPC: Fix svcauth_gss_proxy_init()
  perf map: No need to adjust the long name of modules
  ipmi: Fix memory leak in __ipmi_bmc_register
  apparmor: Fix network performance issue in aa_label_sk_perm
  firmware: coreboot: Let OF core populate platform device
  bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
  signal/ia64: Use the generic force_sigsegv in setup_frame
  ASoC: wm9712: fix unused variable warning
  genirq/debugfs: Reinstate full OF path for domain name
  usb: gadget: fsl_udc_core: check allocation return value and cleanup on 
failure
  cfg80211: regulatory: make initialization more robust
  net: socionext: Add dummy PHY register read in phy_write()
  mlxsw: spectrum: Set minimum shaper on MC TCs
  pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
  drm: rcar-du: Fix vblank initialization
  arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply
  IB/hfi1: Correctly process FECN and BECN in packets
  OPP: Fix missing debugfs supply directory for OPPs
  staging: bcm2835-camera: fix module autoloading
  fork,memcg: fix crash in free_thread_stack on memcg charge fail
  arm64: defconfig: Re-enable bcm2835-thermal driver
  remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
  remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
  drm: Fix error handling in drm_legacy_addctx
  ARM: dts: r8a7743: Remove generic compatible string from iic3
  drm/etnaviv: fix some off by one bugs
  fork, memcg: fix cached_stacks case
  net: hns3: fix wrong combined count returned by ethtool -l
  net: hns3: fix bug of ethtool_ops.get_channels for VF
  ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
  clk: ingenic: jz4740: Fix gating of UDC clock
  ntb_hw_switchtec: NT req id mapping table register entry number should be 512
  net: dsa: b53: Fix default VLAN ID
  net: dsa: b53: Properly account for VLAN filtering
  net: dsa: b53: Do not program CPU port's PVID
  drm/nouveau: fix missing break in switch statement
  net: dsa: fix unintended change of bridge interface STP state
  perf: Copy parent's address filter offsets on clone
  netfilter: nft_set_hash: bogus element self comparison from deactivation path
  iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
  NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
  ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
  ARM: dts: sun9i: optimus: Fix fixed-regulators
  bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
  arm64/vdso: don't leak kernel addresses
  rtc: mt6397: Don't call irq_dispose_mapping.
  bpf: Add missed newline in verifier verbose log
  ACPI: button: reinitialize button state upon resume
  soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
  net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
  afs: Fix AFS file locking to allow fine grained locks
  afs: Further fix file locking
  scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
  KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  vfio/mdev: Follow correct remove sequence
  ALSA: aica: Fix a long-time build breakage
  nfp: bpf: fix static check error through tightening shift amount adjustment
  thermal: rcar_gen3_thermal: fix interrupt type
  afs: Fix lock-wait/callback-break double locking
  afs: Fix double inc of vnode->cb_break
  clk: meson: gxbb: no spread spectrum on mpll0
  serial: stm32: fix word length configuration
  serial: stm32: fix rx data length when parity enabled
  net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
  crypto: talitos - fix AEAD processing.
  net: don't clear sock->sk early to avoid trouble in strparser
  crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
  arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
  arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
  phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
  qed: iWARP - fix uninitialized callback
  IB/hfi1: Handle port down properly in pio
  net/af_iucv: build proper skbs for HiperTransport
  ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
  ip6_fib: Don't discard nodes with valid routing information in fib6_locate_1()
  nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
  fork,memcg: alloc_thread_stack_node needs to set tsk->stack
  PM: ACPI/PCI: Resume all devices during hibernation
  ACPI: PM: Simplify and fix PM domain hibernation callbacks
  ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
  drm/panel: make drm_panel.h self-contained
  cxgb4: smt: Add lock for atomic_dec_and_test
  powerpc/64s/radix: Fix memory hot-unplug page table split
  rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
  i40e: reduce stack usage in i40e_set_fc
  ARM: 8896/1: VDSO: Don't leak kernel addresses
  rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
  usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
  bcache: Fix an error code in bch_dump_read()
  ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
  net: hns3: fix error VF index when setting VLAN offload
  mailbox: qcom-apcs: fix max_register value
  powerpc/mm/mce: Keep irqs disabled during lockless page table walk
  net: netsec: Fix signedness bug in netsec_probe()
  s390/qeth: Fix error handling during VNICC initialization
  s390/qeth: Fix initialization of vnicc cmd masks during set online
  vhost/test: stop device before reset
  arm64: hibernate: check pgd table allocation
  afs: Fix missing timeout reset
  hwrng: omap3-rom - Fix missing clock by probing with device tree
  arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
  UBUNTU: upstream stable to v4.14.168, v4.19.99

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1863019/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to