** Description changed:

  SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2019-08-01
  
-             Ported from the following upstream stable releases:
-                 v4.14.123, v4.19.47,
-                            v4.19.48,
-                 v4.14.124, v4.19.49,
-                 v4.14.125, v4.19.50
+             Ported from the following upstream stable releases:
+                 v4.14.123, v4.19.47,
+                            v4.19.48,
+                 v4.14.124, v4.19.49,
+                 v4.14.125, v4.19.50
  
         from git://git.kernel.org/
+ 
+ x86: Hide the int3_emulate_call/jmp functions from UML
+ ext4: do not delete unlinked inode from orphan list on failed truncate
+ f2fs: Fix use of number of devices
+ KVM: x86: fix return value for reserved EFER
+ bio: fix improper use of smp_mb__before_atomic()
+ sbitmap: fix improper use of smp_mb__before_atomic()
+ Revert "scsi: sd: Keep disk read-only when re-reading partition"
+ crypto: vmx - CTR: always increment IV as quadword
+ mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem
+ mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem
+ kvm: svm/avic: fix off-by-one in checking host APIC ID
+ libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
+ arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
+ gfs2: Fix sign extension bug in gfs2_update_stats
+ Btrfs: do not abort transaction at btrfs_update_root() after failure to COW 
path
+ Btrfs: avoid fallback to transaction commit during fsync of files with holes
+ Btrfs: fix race between ranged fsync and writeback of adjacent ranges
+ btrfs: sysfs: Fix error path kobject memory leak
+ btrfs: sysfs: don't leak memory when failing add fsid
+ fbdev: fix divide error in fb_var_to_videomode
+ btrfs: honor path->skip_locking in backref code
+ fbdev: fix WARNING in __alloc_pages_nodemask bug
+ media: cpia2: Fix use-after-free in cpia2_exit
+ media: serial_ir: Fix use-after-free in serial_ir_init_module
+ media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
+ ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
+ bpf: devmap: fix use-after-free Read in __dev_map_entry_free
+ batman-adv: mcast: fix multicast tt/tvlv worker locking
+ at76c50x-usb: Don't register led_trigger if usb_register_driver failed
+ net: erspan: fix use-after-free
+ gfs2: Fix lru_count going negative
+ cxgb4: Fix error path in cxgb4_init_module
+ NFS: make nfs_match_client killable
+ IB/hfi1: Fix WQ_MEM_RECLAIM warning
+ gfs2: Fix occasional glock use-after-free
+ mmc: core: Verify SD bus width
+ tools/bpf: fix perf build error with uClibc (seen on ARC)
+ dmaengine: tegra210-dma: free dma controller in remove()
+ net: ena: gcc 8: fix compilation warning
+ pinctrl: zte: fix leaked of_node references
+ ASoC: hdmi-codec: unlock the device on startup errors
+ powerpc/perf: Return accordingly on invalid chip-id in
+ powerpc/boot: Fix missing check of lseek() return value
+ ASoC: imx: fix fiq dependencies
+ spi: pxa2xx: fix SCR (divisor) calculation
+ brcm80211: potential NULL dereference in 
brcmf_cfg80211_vndr_cmds_dcmd_handler()
+ ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
+ ARM: vdso: Remove dependency with the arch_timer driver internals
+ arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable
+ sched/cpufreq: Fix kobject memleak
+ scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
+ scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
+ scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in 
tcm_qla2xxx_close_session()
+ Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota 
reserve
+ btrfs: fix panic during relocation after ENOSPC before writeback happens
+ btrfs: Don't panic when we can't find a root key
+ iwlwifi: pcie: don't crash on invalid RX interrupt
+ rtc: 88pm860x: prevent use-after-free on device remove
+ scsi: qedi: Abort ep termination if offload not scheduled
+ w1: fix the resume command API
+ dmaengine: pl330: _stop: clear interrupt status
+ mac80211/cfg80211: update bss channel on channel switch
+ libbpf: fix samples/bpf build failure due to undefined UINT32_MAX
+ ASoC: fsl_sai: Update is_slave_mode with correct value
+ mwifiex: prevent an array overflow
+ net: cw1200: fix a NULL pointer dereference
+ crypto: sun4i-ss - Fix invalid calculation of hash end
+ bcache: return error immediately in bch_journal_replay()
+ bcache: fix failure in journal relplay
+ bcache: add failure check to run_cache_set() for journal replay
+ bcache: avoid clang -Wunintialized warning
+ vfio-ccw: Do not call flush_workqueue while holding the spinlock
+ vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev
+ smpboot: Place the __percpu annotation correctly
+ x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault()
+ mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC 
versions
+ HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
+ pinctrl: pistachio: fix leaked of_node references
+ pinctrl: samsung: fix leaked of_node references
+ clk: rockchip: undo several noc and special clocks as critical on rk3288
+ dmaengine: at_xdmac: remove BUG_ON macro in tasklet
+ media: coda: clear error return value before picture run
+ media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
+ media: au0828: stop video streaming only when last user stops
+ media: ov2659: make S_FMT succeed even if requested format doesn't match
+ audit: fix a memory leak bug
+ media: stm32-dcmi: fix crash when subdev do not expose any formats
+ media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
+ media: pvrusb2: Prevent a buffer overflow
+ powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX
+ random: add a spinlock_t to struct batched_entropy
+ cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
+ sched/core: Check quota and period overflow at usec to nsec conversion
+ sched/rt: Check integer overflow at usec to nsec conversion
+ sched/core: Handle overflow in cpu_shares_write_u64
+ drm/msm: a5xx: fix possible object reference leak
+ USB: core: Don't unbind interfaces following device reset failure
+ x86/irq/64: Limit IST stack overflow check to #DB stack
+ phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
+ i40e: Able to add up to 16 MAC filters on an untrusted VF
+ i40e: don't allow changes to HW VLAN stripping on active port VLANs
+ arm64: vdso: Fix clock_getres() for CLOCK_REALTIME
+ RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
+ hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
+ hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
+ hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
+ hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
+ hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
+ scsi: libsas: Do discovery on empty PHY to update PHY info
+ mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
+ mmc_spi: add a status check for spi_sync_locked
+ mmc: sdhci-of-esdhc: add erratum eSDHC5 support
+ mmc: sdhci-of-esdhc: add erratum A-009204 support
+ mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
+ drm/amdgpu: fix old fence check in amdgpu_fence_emit
+ PM / core: Propagate dev->power.wakeup_path when no callbacks
+ clk: rockchip: Fix video codec clocks on rk3288
+ extcon: arizona: Disable mic detect if running when driver is removed
+ clk: rockchip: Make rkpwm a critical clock on rk3288
+ s390: zcrypt: initialize variables before_use
+ x86/microcode: Fix the ancient deprecated microcode loading method
+ s390: cio: fix cio_irb declaration
+ cpufreq: ppc_cbe: fix possible object reference leak
+ cpufreq/pasemi: fix possible object reference leak
+ cpufreq: pmac32: fix possible object reference leak
+ cpufreq: kirkwood: fix possible object reference leak
+ block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
+ x86/build: Keep local relocations with ld.lld
+ iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
+ iio: hmc5843: fix potential NULL pointer dereferences
+ iio: common: ssp_sensors: Initialize calculated_time in 
ssp_common_process_data
+ rtlwifi: fix a potential NULL pointer dereference
+ mwifiex: Fix mem leak in mwifiex_tm_cmd
+ brcmfmac: fix missing checks for kmemdup
+ b43: shut up clang -Wuninitialized variable warning
+ brcmfmac: convert dev_init_lock mutex to completion
+ brcmfmac: fix WARNING during USB disconnect in case of unempty psq
+ brcmfmac: fix race during disconnect when USB completion is in progress
+ brcmfmac: fix Oops when bringing up interface during USB disconnect
+ rtc: xgene: fix possible race condition
+ rtlwifi: fix potential NULL pointer dereference
+ scsi: ufs: Fix regulator load and icc-level configuration
+ scsi: ufs: Avoid configuring regulator with undefined voltage range
+ arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
+ x86/uaccess, signal: Fix AC=1 bloat
+ x86/ia32: Fix ia32_restore_sigcontext() AC leak
+ chardev: add additional check for minor range overlap
+ RDMA/hns: Fix bad endianess of port_pd variable
+ HID: core: move Usage Page concatenation to Main item
+ ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
+ ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
+ cxgb3/l2t: Fix undefined behaviour
+ HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent
+ spi: tegra114: reset controller on probe
+ kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
+ media: video-mux: fix null pointer dereferences
+ media: wl128x: prevent two potential buffer overflows
+ scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload 
check
+ virtio_console: initialize vtermno value for ports
+ tty: ipwireless: fix missing checks for ioremap
+ x86/mce: Fix machine_check_poll() tests for error types
+ rcutorture: Fix cleanup path for invalid torture_type strings
+ rcuperf: Fix cleanup path for invalid perf_type strings
+ usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
+ scsi: qla4xxx: avoid freeing unallocated dma memory
+ batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
+ dmaengine: tegra210-adma: use devm_clk_*() helpers
+ hwrng: omap - Set default quality
+ thunderbolt: Fix to check for kmemdup failure
+ media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
+ media: vimc: stream: fix thread state before sleep
+ media: go7007: avoid clang frame overflow warning with KASAN
+ media: vimc: zero the media_device on probe
+ scsi: lpfc: Fix FDMI manufacturer attribute value
+ scsi: lpfc: Fix fc4type information for FDMI
+ media: saa7146: avoid high stack usage with clang
+ scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
+ spi : spi-topcliff-pch: Fix to handle empty DMA buffers
+ spi: rspi: Fix sequencer reset during initialization
+ spi: Fix zero length xfer bug
+ ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
+ drm/drv: Hold ref on parent device during drm_device lifetime
+ drm: Wake up next in drm_read() chain if we are forced to putback the event
+ vfio-ccw: Prevent quiesce function going into an infinite loop
+ NFS: Fix a double unlock from nfs_match,get_client
+ ext4: wait for outstanding dio during truncate in nojournal mode
+ NFSv4.1 fix incorrect return value in copy_file_range
+ media: vb2: add waiting_in_dqbuf flag
+ acct_on(): don't mess with freeze protection
+ hv_netvsc: fix race that may miss tx queue wakeup
+ Bluetooth: Ignore CC events not matching the last HCI command
+ powerpc/perf: Fix loop exit condition in nest_imc_event_init
+ drm/nouveau/bar/nv50: ensure BAR is mapped
+ media: stm32-dcmi: return appropriate error codes during probe
+ powerpc/watchdog: Use hrtimers for per-CPU heartbeat
+ scsi: qla2xxx: Fix hardirq-unsafe locking
+ x86/modules: Avoid breaking W^X while loading modules
+ sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs
+ s390: qeth: address type mismatch warning
+ rsi: Fix NULL pointer dereference in kmalloc
+ nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE
+ bcache: avoid potential memleak of list of journal_replay(s) in the 
CACHE_SYNC branch of run_cache_set
+ RDMA/cma: Consider scope_id while binding to ipv6 ll address
+ block: fix use-after-free on gendisk
+ staging: vc04_services: handle kzalloc failure
+ irq_work: Do not raise an IPI when queueing work on the local CPU
+ thunderbolt: Take domain lock in switch sysfs attribute callbacks
+ drm: etnaviv: avoid DMA API warning when importing buffers
+ ACPI/IORT: Reject platform device creation on NUMA node mapping failure
+ perf/x86/msr: Add Icelake support
+ perf/x86/intel/rapl: Add Icelake support
+ perf/x86/intel/cstate: Add Icelake support
+ drm/panel: otm8009a: Add delay at the end of initialization
+ thunderbolt: property: Fix a missing check of kzalloc
+ thunderbolt: Fix to check the return value of kmemdup
+ x86/mce: Handle varying MCA bank counts
+ scsi: lpfc: avoid uninitialized variable warning
+ thunderbolt: Fix to check return value of ida_simple_get
+ drm/amd/display: fix releasing planes when exiting odm
+ thunderbolt: property: Fix a NULL pointer dereference
+ e1000e: Disable runtime PM on CNP+
+ igb: Exclude device from suspend direct complete optimization
+ media: si2165: fix a missing check of return value
+ drm/amd/display: Fix Divide by 0 in memory calculations
+ spi: imx: stop buffer overflow in RX FIFO flush
+ bonding/802.3ad: fix slave link initialization transition states
+ cxgb4: offload VLAN flows regardless of VLAN ethtype
+ inet: switch IP ID generator to siphash
+ ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
+ ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
+ ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
+ llc: fix skb leak in llc_build_and_send_ui_pkt()
+ net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT
+ net: fec: fix the clk mismatch in failed_reset path
+ net-gro: fix use-after-free read in napi_gro_frags()
+ net: mvneta: Fix err code path of probe
+ net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
+ net: phy: marvell10g: report if the PHY fails to boot firmware
+ net: stmmac: fix reset gpio free missing
+ usbnet: fix kernel crash after disconnect
+ tipc: Avoid copying bytes beyond the supplied data
+ net/mlx5: Allocate root ns memory using kzalloc to match kfree
+ bnxt_en: Fix aggregation buffer leak under OOM condition.
+ crypto: vmx - ghash: do nosimd fallback manually
+ include/linux/compiler*.h: define asm_volatile_goto
+ compiler.h: give up __compiletime_assert_fallback()
+ xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
+ tipc: fix modprobe tipc failed after switch order of device registration
+ sparc64: Fix regression in non-hypervisor TLB flush xcall
+ include/linux/bitops.h: sanitize rotate primitives
+ xhci: update bounce buffer with correct sg num
+ xhci: Use %zu for printing size_t type
+ xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
+ usb: xhci: avoid null pointer deref when bos field is NULL
+ usbip: usbip_host: fix BUG: sleeping function called from invalid context
+ usbip: usbip_host: fix stub_dev lock context imbalance regression
+ USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
+ USB: sisusbvga: fix oops in error path of sisusb_probe
+ USB: Add LPM quirk for Surface Dock GigE adapter
+ USB: rio500: refuse more than one device at a time
+ USB: rio500: fix memory leak in close after disconnect
+ media: usb: siano: Fix general protection fault in smsusb
+ media: usb: siano: Fix false-positive "uninitialized variable" warning
+ media: smsusb: better handle optional alignment
+ scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
+ scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
+ Btrfs: fix wrong ctime and mtime of a directory after log replay
+ Btrfs: fix race updating log root item during fsync
+ Btrfs: fix fsync not persisting changed attributes of a directory
+ Btrfs: incremental send, fix file corruption when no-holes feature is enabled
+ KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
+ powerpc/perf: Fix MMCRA corruption by bhrb_filter
+ ALSA: hda/realtek - Set default power save node to 0
+ KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
+ drm/nouveau/i2c: Disable i2c bus access after ->fini()
+ tty: serial: msm_serial: Fix XON/XOFF
+ tty: max310x: Fix external crystal register setup
+ memcg: make it work on sparse non-0-node systems
+ kernel/signal.c: trace_signal_deliver when signal_group_exit
+ docs: Fix conf.py for Sphinx 2.0
+ doc: Cope with the deprecation of AutoReporter
+ doc: Cope with Sphinx logging deprecations
+ ima: show rules with IMA_INMASK correctly
+ serial: sh-sci: disable DMA for uart_console
+ staging: vc04_services: prevent integer overflow in create_pagelist()
+ staging: wlan-ng: fix adapter initialization failure
+ CIFS: cifs_read_allocate_pages: don't iterate through whole page array on 
ENOMEM
+ gcc-plugins: Fix build failures under Darwin host
+ drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
+ drm/rockchip: shutdown drm subsystem on shutdown
+ Compiler Attributes: add support for __copy (gcc >= 9)
+ include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
+ binder: fix race between munmap() and direct reclaim
+ media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
+ brcmfmac: fix NULL pointer derefence during USB disconnect
+ iio: dac: ds4422/ds4424 fix chip verification
+ s390/crypto: fix possible sleep during spinlock aquired
+ ALSA: line6: Assure canceling delayed work at disconnection
+ vt/fbcon: deinitialize resources in visual_init() after failed memory 
allocation
+ cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
+ x86/ftrace: Do not call function graph from dynamic trampolines
+ x86/ftrace: Set trampoline pages as executable
+ x86/kprobes: Set instruction page as executable
+ of: overlay: validate overlay properties #address-cells and #size-cells
+ of: overlay: set node fields from properties when add new overlay node
+ ethtool: fix potential userspace buffer overflow
+ Fix memory leak in sctp_process_init
+ neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
+ net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
+ net: rds: fix memory leak in rds_ib_flush_mr_pool
+ pktgen: do not sleep with the thread lock held.
+ ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
+ ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
+ net: sfp: read eeprom in maximum 16 byte increments
+ ipv6: fix the check before getting the cookie in rt6_get_cookie
+ rcu: locking and unlocking need to always be at least barriers
+ parisc: Use implicit space register selection for loading the coherence index 
of I/O pdirs
+ fuse: fallocate: fix return with locked inode
+ pstore: Remove needless lock during console writes
+ pstore: Convert buf_lock to semaphore
+ pstore/ram: Run without kernel crash dump region
+ x86/power: Fix 'nosmt' vs hibernation triple fault during resume
+ i2c: xiic: Add max_read_len quirk
+ MIPS: Bounds check virt_addr_valid
+ MIPS: pistachio: Build uImage.gz by default
+ genwqe: Prevent an integer overflow in the ioctl
+ test_firmware: Use correct snprintf() limit
+ drm/gma500/cdv: Check vbt config bits when detecting lvds panels
+ drm/amdgpu/psp: move psp version specific function pointers to early_init
+ drm/i915: Fix I915_EXEC_RING_MASK
+ drm/i915/fbc: disable framebuffer compression on GeminiLake
+ TTY: serial_core, add ->install
+ qmi_wwan: Add quirk for Quectel dynamic config
+ ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
+ ethtool: check the return value of get_regs_len
+ net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
+ net: mvpp2: Use strscpy to handle stat strings
+ packet: unconditionally free po->rollover
+ NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
+ NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
+ s390/mm: fix address space detection in exception handling
+ drm/msm: fix fb references in async update
+ drm: add non-desktop quirk for Valve HMDs
+ drm: add non-desktop quirks to Sensics and OSVR headsets.
+ drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
+ UBUNTU: upstream stable to v4.14.125, v4.19.50

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1838700

Title:
  Bionic update: upstream stable patchset 2019-08-01

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1838700/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to