1. 06 Jan, 2020 2 commits
    • Salvatore Bonaccorso's avatar
      Import Debian changes 5.4.8-1 · 7900ace2
      Salvatore Bonaccorso authored
      linux (5.4.8-1) unstable; urgency=medium
        * New upstream stable update:
          - af_packet: set defaule value for tmo
          - [amd64] fjes: fix missed check in fjes_acpi_add
          - mod_devicetable: fix PHY module format
          - net: dst: Force 4-byte alignment of dst_metrics
          - [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl
          - net: phy: ensure that phy IDs are correctly typed
          - net: qlogic: Fix error paths in ql_alloc_large_buffers()
          - net-sysfs: Call dev_hold always in rx_queue_add_kobject
          - net: usb: lan78xx: Fix suspend/resume PHY register access error
          - [arm64,armhf] nfp: flower: fix stats id allocation
          - qede: Disable hardware gro when xdp prog is installed
          - qede: Fix multicast mac configuration
          - sctp: fix memleak on err handling of stream initialization
          - sctp: fully initialize v4 addr in some functions
          - neighbour: remove neigh_cleanup() method
          - bonding: fix bond_neigh_init()
          - net: ena: fix default tx interrupt moderation interval
          - net: ena: fix issues in setting interrupt moderation params in ethtool
          - [armhf] net: ethernet: ti: davinci_cpdma: fix warning "device driver
            frees DMA memory with different size"
          - [arm64,armhf] net: stmmac: platform: Fix MDIO init for platforms without
          - [armhf] net: dsa: b53: Fix egress flooding settings
          - btrfs: don't double lock the subvol_sem for rename exchange
          - btrfs: do not call synchronize_srcu() in inode_tree_del
          - Btrfs: make tree checker detect checksum items with overlapping ranges
          - btrfs: return error pointer from alloc_test_extent_buffer
          - Btrfs: fix missing data checksums after replaying a log tree
          - btrfs: send: remove WARN_ON for readonly mount
          - btrfs: abort transaction after failed inode updates in create_subvol
          - btrfs: skip log replay on orphaned roots
          - btrfs: do not leak reloc root if we fail to read the fs root
          - btrfs: handle ENOENT in btrfs_uuid_tree_iterate
          - Btrfs: fix removal logic of the tree mod log that leads to
            use-after-free issues
          - ALSA: pcm: Avoid possible info leaks from PCM stream buffers
          - ALSA: hda/ca0132 - Keep power on during processing DSP response
          - ALSA: hda/ca0132 - Avoid endless loop
          - ALSA: hda/ca0132 - Fix work handling in delayed HP detection
          - [arm*] drm/vc4/vc4_hdmi: fill in connector info
          - drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper.
          - drm: mst: Fix query_payload ack reply struct
          - [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers
          - [armhf] drm: exynos: exynos_hdmi: use cec_notifier_conn_(un)register
          - drm: Use EOPNOTSUPP, not ENOTSUPP
          - drm/amdgpu/sriov: add ring_stop before ring_create in psp v11 code
          - drm/amdgpu: grab the id mgr lock while accessing passid_mapping
          - drm/ttm: return -EBUSY on pipelining with no_gpu_wait (v2)
          - ath10k: add cleanup in ath10k_sta_state()
          - ath10k: Check if station exists before forwarding tx airtime report
          - spi: Add call to spi_slave_abort() function when spidev driver is
          - [arm64] drm/meson: vclk: use the correct G12A frac max value
          - [x86] staging: rtl8192u: fix multiple memory leaks on error path
          - staging: rtl8188eu: fix possible null dereference
          - rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063)
          - libertas: fix a potential NULL pointer dereference
          - ath10k: fix backtrace on coredump
          - IB/iser: bound protection_sg size by data_sg size
          - [armhf] spi: gpio: prevent memory leak in spi_gpio_probe
          - media: max2175: Fix build error without CONFIG_REGMAP_I2C
          - [arm64] media: venus: core: Fix msm8996 frequency table
          - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq
          - pinctrl: devicetree: Avoid taking direct reference to device name string
          - [armhf] drm/sun4i: dsi: Fix TCON DRQ set bits
          - [arm64] media: venus: Fix occasionally failures to suspend
          - rtw88: fix NSS of hw_cap
          - [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if
            not idled
          - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
          - [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the
            internal I2C controller
          - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
          - drm/drm_vblank: Change EINVAL by the correct errno
          - libbpf: Fix struct end padding in btf_dump
          - libbpf: Fix passing uninitialized bytes to setsockopt
          - net/smc: increase device refcount for added link group
          - team: call RCU read lock when walking the port_list
          - media: cx88: Fix some error handling path in 'cx8800_initdev()'
          - [arm64] crypto: inside-secure - Fix a maybe-uninitialized warning
          - [arm64] crypto: aegis128/simd - build 32-bit ARM for v8 architecture
          - [x86] ASoC: SOF: enable sync_write in hdac_bus
          - [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride
          - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid
            pixel format
          - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame
            sequence number
          - [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format
          - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a
            kernel panic
          - [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in
            abort cases
          - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid
          - [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0
          - [x86] mm: Use the correct function type for native_set_fixmap()
          - ath10k: Correct error handling of dma_map_single()
          - rtw88: coex: Set 4 slot mode for A2DP
          - [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode
          - perf vendor events arm64: Fix Hisi hip08 DDRC PMU eventname
          - usb: usbfs: Suppress problematic bind and unbind uevents.
          - Bluetooth: btusb: avoid unused function warning
          - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req
          - Bluetooth: Workaround directed advertising bug in Broadcom controllers
          - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
          - bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack()
          - [x86] mce: Lower throttling MCE messages' priority to warning
          - [arm64] net: hns3: log and clear hardware error after reset complete
          - [arm64] RDMA/hns: Fix wrong parameters when initial mtt of srq->idx_que
          - [x86] drm/gma500: fix memory disclosures due to uninitialized bytes
          - ASoC: soc-pcm: fixup dpcm_prune_paths() loop continue
          - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot
          - ipmi: Don't allow device module unload when in use
          - [x86] ioapic: Prevent inconsistent state when moving an interrupt
          - media: cedrus: Fix undefined shift with a SHIFT_AND_MASK_BITS macro
          - drm/nouveau: Don't grab runtime PM refs for HPD IRQs
          - md: no longer compare spare disk superblock events in super_load
          - md/bitmap: avoid race window between md_bitmap_resize and
          - drm: Don't free jobs in wait_event_interruptible()
          - EDAC/amd64: Set grain per DIMM
          - [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill()
          - i40e: initialize ITRN registers with correct values
          - i40e: Wrong 'Advertised FEC modes' after set FEC to AUTO
          - net: phy: dp83867: enable robust auto-mdix
          - [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210
          - regulator: core: Release coupled_rdevs on regulator_init_coupling()
          - ubsan, x86: Annotate and allow __ubsan_handle_shift_out_of_bounds() in
            uaccess regions
          - ACPI: button: Add DMI quirk for Medion Akoya E2215T
          - RDMA/qedr: Fix memory leak in user qp and mr
          - [arm64] RDMA/hns: Fix memory leak on 'context' on error return path
          - RDMA/qedr: Fix srqs xarray initialization
          - RDMA/core: Set DMA parameters correctly
          - [arm64,armhf] gpu: host1x: Allocate gather copy for host1x
          - [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable
          - [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle
          - [s390x] time: ensure get_clock_monotonic() returns monotonic values
          - [s390x] add error handling to perf_callchain_kernel
          - [s390x] mm: add mm_pxd_folded() checks to pxd_free()
          - [arm64] net: hns3: add struct netdev_queue debug info for TX timeout
          - libata: Ensure ata_port probe has completed before detach
          - loop: fix no-unmap write-zeroes request behavior
          - [arm64,armhf] net/mlx5e: Verify that rule has at least one fwd/drop
          - ALSA: bebob: expand sleep just after breaking connections for protocol
            version 1
          - libbpf: Fix error handling in bpf_map__reuse_fd()
          - Bluetooth: Fix advertising duplicated flags
          - ALSA: pcm: Fix missing check of the new non-cached buffer type
          - [riscv64] spi: sifive: disable clk when probe fails and remove
          - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler()
          - ixgbe: protect TX timestamping from API misuse
          - media: rcar_drif: fix a memory disclosure (CVE-2019-18786)
          - media: v4l2-core: fix touch support in v4l_g_fmt
          - nvme: introduce "Command Aborted By host" status code
          - nvmem: core: fix nvmem_cell_write inline function
          - ASoC: SOF: topology: set trigger order for FE DAI link
          - media: vivid: media_device_cleanup was called too early
          - bnx2x: Fix PF-VF communication over multi-cos queues.
          - ALSA: timer: Limit max amount of slave instances
          - RDMA/core: Fix return code when modify_port isn't supported
          - [arm64] drm: msm: a6xx: fix debug bus register configuration
          - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
          - perf probe: Fix to find range-only function instance
          - perf cs-etm: Fix definition of macro TO_CS_QUEUE_NR
          - perf probe: Fix to list probe event with correct line number
          - perf jevents: Fix resource leak in process_mapfile() and main()
          - perf probe: Walk function lines in lexical blocks
          - perf probe: Fix to probe an inline function which has no entry pc
          - perf probe: Fix to show ranges of variables in functions without
          - perf probe: Fix to show inlined function callsite without entry_pc
          - perf probe: Fix to probe a function which has no entry pc
          - perf tools: Fix cross compile for ARM64
          - perf tools: Splice events onto evlist even on error
          - ice: Check for null pointer dereference when setting rings
          - perf parse: If pmu configuration fails free terms
          - perf probe: Skip overlapped location on searching variables
          - net: avoid potential false sharing in neighbor related code
          - perf probe: Return a better scope DIE if there is no best scope
          - perf probe: Fix to show calling lines of inlined functions
          - perf probe: Skip end-of-sequence and non statement lines
          - perf probe: Filter out instances except for inlined subroutine and
          - libbpf: Fix negative FD close() in xsk_setup_xdp_prog()
          - [s390x] bpf: Use kvcalloc for addrs array
          - cgroup: freezer: don't change task and cgroups status unnecessarily
          - ath10k: fix get invalid tx rate for Mesh metric
          - media: pvrusb2: Fix oops on tear-down when radio support is not present
          - ice: delay less
          - media: cedrus: Use helpers to access capture queue
          - [arm64,armhf] spi: pxa2xx: Add missed security checks
          - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
          - iio: dac: ad5446: Add support for new AD5600 DAC
          - [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format
          - r8169: respect EEE user setting when restarting network
          - [s390x] disassembler: don't hide instruction addresses
          - [armhf] net: ethernet: ti: Add dependency for TI_DAVINCI_EMAC
          - nvme: Discard workaround for non-conformant devices
          - parport: load lowlevel driver if ports not found
          - bcache: fix static checker warning in bcache_device_free()
          - cpufreq: Register drivers only after CPU devices have been registered
          - [x86] crash: Add a forward declaration of struct kimage
          - tracing: use kvcalloc for tgid_map array allocation
          - tracing/kprobe: Check whether the non-suffixed symbol is notrace
          - bcache: fix deadlock in bcache_allocator
          - iwlwifi: mvm: fix unaligned read of rx_pkt_status
          - regulator: core: Let boot-on regulators be powered off
          - [arm64] spi: tegra20-slink: add missed clk_unprepare
          - tun: fix data-race in gro_normal_list()
          - xhci-pci: Allow host runtime PM as default also for Intel Ice Lake xHCI
          - crypto: virtio - deal with unsupported input sizes
          - btrfs: don't prematurely free work in end_workqueue_fn()
          - btrfs: don't prematurely free work in run_ordered_work()
          - sched/uclamp: Fix overzealous type replacement
          - perf/core: Fix the mlock accounting, again
          - bnxt_en: Return proper error code for non-existent NVM variable
          - net: phy: avoid matching all-ones clause 45 PHY IDs
          - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012
          - [x86] insn: Add some Intel instructions to the opcode map
          - brcmfmac: remove monitor interface when detaching
          - perf session: Fix decompression of PERF_RECORD_COMPRESSED records
          - perf probe: Fix to show function entry line as probe-able
          - [s390x] crypto: Fix unsigned variable compared with zero
          - [s390x] kasan: support memcpy_real with TRACE_IRQFLAGS
          - bnxt_en: Improve RX buffer error handling.
          - iwlwifi: check kasprintf() return value
          - ASoC: soc-pcm: check symmetry before hw_params
          - [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart
          - [s390x] cpumf: Adjust registration of s390 PMU device drivers
          - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings
          - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
          - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED
          - libtraceevent: Fix memory leakage in copy_filter_type
          - ice: Only disable VF state when freeing each VF resources
          - ice: Fix setting coalesce to handle DCB configuration
          - net: phy: initialise phydev speed and duplex sanely
          - tools, bpf: Fix build for 'make -s tools/bpf O=<dir>'
          - bpf: Provide better register bounds after jmp32 instructions
          - net: wireless: intel: iwlwifi: fix GRO_NORMAL packet stalling
          - btrfs: don't prematurely free work in reada_start_machine_worker()
          - btrfs: don't prematurely free work in scrub_missing_raid56_worker()
          - Revert "mmc: sdhci: Fix incorrect switch to HS mode"
          - tpm_tis: reserve chip for duration of tpm_tis_core_init
          - tpm: fix invalid locking in NONBLOCKING mode
          - iommu: fix KASAN use-after-free in iommu_insert_resv_region
          - iommu: set group default domain before creating direct mappings
          - iommu/vt-d: Fix dmar pte read access not set error
          - iommu/vt-d: Set ISA bridge reserved region as relaxable
          - iommu/vt-d: Allocate reserved region for ISA with correct permission
          - [armhf] can: flexcan: fix possible deadlock and out-of-order reception
            after wakeup
          - [armhf] can: flexcan: poll MCR_LPM_ACK instead of GPR ACK for stop mode
          - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices
          - usb: xhci: Fix build warning seen with CONFIG_PM=n
          - ath10k: Revert "ath10k: add cleanup in ath10k_sta_state()"
          - md: avoid invalid memory access for array sb->dev_roles
          - [s390x] ftrace: fix endless recursion in function_graph tracer
          - [armhf] can: flexcan: add low power enter/exit acknowledgment helper
          - usbip: Fix receive error in vhci-hcd when using scatter-gather
          - usbip: Fix error path of vhci_recv_ret_submit()
          - cpufreq: Avoid leaving stale IRQ work items during CPU offline
          - mm: vmscan: protect shrinker idr replace with CONFIG_MEMCG
          - [x86] intel_th: pci: Add Comet Lake PCH-V support
          - [x86] intel_th: pci: Add Elkhart Lake SOC support
          - [x86] intel_th: Fix freeing IRQs
          - [x86] intel_th: msu: Fix window switching without windows
          - [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128
          - [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
          - [x86] pinctrl: baytrail: Really serialize all register accesses
          - ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037)
          - ext4: check for directory entries too close to block end
          - ext4: unlock on error in ext4_expand_extra_isize()
          - ext4: validate the debug_want_extra_isize mount option at parse time
          - [powerpc*] KVM: PPC: Book3S HV: Fix regression on big endian hosts
          - [x86] kvm: x86: Host feature SSBD doesn't imply guest feature
          - [x86] kvm: x86: Host feature SSBD doesn't imply guest feature AMD_SSBD
          - [arm64,armhf] KVM: arm/arm64: Properly handle faulting of device
          - [arm64] KVM: arm64: Ensure 'params' is initialised when looking up sys
          - [x86] intel: Disable HPET on Intel Coffee Lake H platforms
          - [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure()
          - [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[]
          - [x86] mce: Fix possibly incorrect severity calculation on AMD
          - [powerpc*] irq: fix stack overflow verification
          - [powerpc*] ocxl: Fix concurrent AFU open and device removal
          - [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG
          - mmc: sdhci: Update the tuning failed messages to pr_debug level
          - mmc: sdhci: Workaround broken command queuing on Intel GLK
          - mmc: sdhci: Add a quirk for broken command queuing
          - nbd: fix shutdown and recv work deadlock v2
          - iwlwifi: pcie: move power gating workaround earlier in the flow
          - Revert "MIPS: futex: Restore \n after sync instructions"
          - Revert "MIPS: futex: Emit Loongson3 sync workarounds within asm"
          - scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd()
          - scsi: lpfc: Fix discovery failures when target device connectivity
          - scsi: mpt3sas: Fix clear pending bit in ioctl status
          - scsi: lpfc: Fix locking on mailbox command completion
          - scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA
          - [armhf] gpio: mxc: Only get the second IRQ when there is more than one
          - scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq
          - Input: atmel_mxt_ts - disable IRQ across suspend
          - f2fs: fix to update time in lazytime mode
          - [x86] platform/x86: peaq-wmi: switch to using polled mode of input
          - [arm64,armhf] iommu: rockchip: Free domain on .domain_free
          - [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory
          - scsi: target: compare full CHAP_A Algorithm strings
          - scsi: lpfc: Fix hardlockup in lpfc_abort_handler
          - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
          - scsi: csiostor: Don't enable IRQs too early
          - [arm64] scsi: hisi_sas: Replace in_softirq() check in
          - [arm64] scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the
            probe fails
          - [powerpc*] pseries: Mark accumulate_stolen_time() as notrace
          - [powerpc*] pseries: Don't fail hash page table insert for bolted mapping
          - dma-mapping: Add vmap checks to dma_map_single()
          - dma-mapping: fix handling of dma-ranges for reserved memory (again)
          - clocksource/drivers/timer-of: Use unique device name instead of timer
          - [powerpc*] security/book3s64: Report L1TF status in sysfs
          - [powerpc*] book3s64/hash: Add cond_resched to avoid soft lockup warning
          - ext4: update direct I/O read lock pattern for IOCB_NOWAIT
          - ext4: iomap that extends beyond EOF should be marked dirty
          - jbd2: Fix statistics for the number of logged blocks
          - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and
          - scsi: lpfc: Fix unexpected error messages during RSCN handling
          - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
          - f2fs: fix to update dir's i_pino during cross_rename
          - [arm64] clk: qcom: smd: Add missing pnoc clock
          - [arm64] clk: qcom: Allow constant ratio freq tables for rcg
          - clk: clk-gpio: propagate rate change to parent
          - dma-direct: check for overflows on 32 bit DMA addresses
          - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned
          - [arm64] iommu/arm-smmu-v3: Don't display an error when IRQ lines are
          - [armhf] i2c: stm32f7: fix & reorder remove & probe error handling
          - iomap: fix return value of iomap_dio_bio_actor on 32bit systems
          - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer
          - [m68k] scsi: zorro_esp: Limit DMA transfers to 65536 bytes (except on
          - [powerpc*] PCI: rpaphp: Fix up pointer to first drc-info entry
          - scsi: ufs: fix potential bug which ends in system hang
          - [powerpc*] PCI: rpaphp: Don't rely on firmware feature to imply drc-info
          - [powerpc*] PCI: rpaphp: Annotate and correctly byte swap DRC properties
          - [powerpc*] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name
            when using drc-info
          - [powerpc*] security: Fix wrong message when RFI Flush is disable
          - [powerpc*] eeh: differentiate duplicate detection message
          - [powerpc*] book3s/mm: Update Oops message to print the correct
            translation in use
          - bcache: at least try to shrink 1 node in bch_mca_scan()
          - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse
          - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors
          - HID: i2c-hid: fix no irq after reset on raydium 3118
          - [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening
          - libnvdimm/btt: fix variable 'rc' set but not used
          - HID: Improve Windows Precision Touchpad detection.
          - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the
            RMI transport device
          - watchdog: prevent deferral of watchdogd wakeup on RT
          - watchdog: Fix the race between the release of watchdog_core_data and
          - scsi: pm80xx: Fix for SATA device discovery
          - scsi: ufs: Fix error handing during hibern8 enter
          - scsi: scsi_debug: num_tgts must be >= 0
          - scsi: target: core: Release SPC-2 reservations when closing a session
          - scsi: ufs: Fix up auto hibern8 enablement
          - scsi: iscsi: Don't send data to unbound connection
          - scsi: target: iscsi: Wait for all commands to finish before freeing a
          - f2fs: Fix deadlock in f2fs_gc() context during atomic files handling
          - [x86] Drivers: hv: vmbus: Fix crash handler reset of Hyper-V synic
          - apparmor: fix unsigned len comparison with less than zero
          - drm/amdgpu: Call find_vma under mmap_sem
          - cifs: Fix use-after-free bug in cifs_reconnect()
          - io_uring: io_allocate_scq_urings() should return a sane state
          - cdrom: respect device capabilities during opening action
          - cifs: move cifsFileInfo_put logic into a work-queue
          - perf diff: Use llabs() with 64-bit values
          - perf script: Fix brstackinsn for AUXTRACE
          - perf regs: Make perf_reg_name() return "unknown" instead of NULL
          - [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR
          - [s390x] unwind: filter out unreliable bogus %r14
          - [s390x] cpum_sf: Check for SDBT and SDB consistency
          - ocfs2: fix passing zero to 'PTR_ERR' warning
          - [s390x] disable preemption when switching to nodat stack with
          - mm/hugetlbfs: fix error handling when setting up mounts
          - kernel: sysctl: make drop_caches write-only
          - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK
          - sctp: fix err handling of stream initialization
          - md: make sure desc_nr less than MD_SB_DISKS
          - Revert "iwlwifi: assign directly to iwl_trans->cfg in QuZ detection"
          - netfilter: ebtables: compat: reject all padding in matches/watchers
          - 6pack,mkiss: fix possible deadlock
          - [powerpc*] Fix __clear_user() with KUAP enabled
          - net/smc: add fallback check to connect()
          - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
          - inetpeer: fix data-race in inet_putpeer / inet_putpeer
          - net: add a READ_ONCE() in skb_peek_tail()
          - net: icmp: fix data-race in cmp_global_allow()
          - hrtimer: Annotate lockless access to timer->state
          - tomoyo: Don't use nifty names on sockets.
          - uaccess: disallow > INT_MAX copy sizes
          - drm: limit to INT_MAX in create_blob ioctl
          - xfs: fix mount failure crash on invalid iclog memory access
          - cxgb4/cxgb4vf: fix flow control display for auto negotiation
          - [armhf] net: dsa: bcm_sf2: Fix IP fragment location and behavior
          - net/mlxfw: Fix out-of-memory error in mfa2 flash burning
          - net: phy: aquantia: add suspend / resume ops for AQR105
          - net/sched: act_mirred: Pull mac prior redir to non mac_header_xmit
          - net/sched: add delete_empty() to filters and use it in cls_flower
          - net_sched: sch_fq: properly set sk->sk_pacing_status
          - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on
            Meson8b/8m2 SoCs
          - ptp: fix the race between the release of ptp_clock and cdev
          - tcp: Fix highest_sack and highest_sack_seq
          - udp: fix integer overflow while computing available space in sk_rcvbuf
          - bnxt_en: Fix MSIX request logic for RDMA driver.
          - bnxt_en: Free context memory in the open path if firmware has been
          - bnxt_en: Return error if FW returns more data than dump length
          - bnxt_en: Fix bp->fw_health allocation and free logic.
          - bnxt_en: Remove unnecessary NULL checks for fw_health
          - bnxt_en: Fix the logic that creates the health reporters.
          - bnxt_en: Add missing devlink health reporters for VFs.
          - net: add bool confirm_neigh parameter for dst_ops.update_pmtu
          - ip6_gre: do not confirm neighbor when do pmtu update
          - gtp: do not confirm neighbor when do pmtu update
          - net/dst: add new function skb_dst_update_pmtu_no_confirm
          - tunnel: do not confirm neighbor when do pmtu update
          - vti: do not confirm neighbor when do pmtu update
          - sit: do not confirm neighbor when do pmtu update
          - net/dst: do not confirm neighbor for vxlan and geneve pmtu update
          - [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt
          - gtp: fix wrong condition in gtp_genl_dump_pdp()
          - gtp: avoid zero size hashtable
          - bonding: fix active-backup transition after link failure
          - tcp: do not send empty skb from tcp_write_xmit()
          - tcp/dccp: fix possible race __inet_lookup_established()
          - [x86] hv_netvsc: Fix tx_table init in rndis_set_subchannel()
          - gtp: fix an use-after-free in ipv4_pdp_find()
          - gtp: do not allow adding duplicate tid and ms_addr pdp context
          - bnxt: apply computed clamp value for coalece parameter
          - ipv6/addrconf: only check invalid header values when
            NETLINK_F_STRICT_CHK is set
          - [arm64,armhf] net: phylink: fix interface passed to mac_link_up
          - net: ena: fix napi handler misbehavior when the napi budget is zero
          - vhost/vsock: accept only packets with the right dst_cid
          - mm/hugetlbfs: fix for_each_hstate() loop in init_hugetlbfs_fs()
        [ Salvatore Bonaccorso ]
        * debian/lib/python/debian_linux/abi.py: Add one missing string replacement.
        * debian/lib/python/debian_linux/abi.py: strip whitespace characters in
        * [rt] Refresh lib-ubsan-Don-t-seralize-UBSAN-report.patch for context
          changes in 5.4.7
        * [rt] Drop x86-ioapic-Prevent-inconsistent-state-when-moving-an.patch
        * Enable EROFS filesystem support as module.
          Enable EROFS_FS as module, enable EROFS_FS_XATTR, EROFS_FS_POSIX_ACL,
          Thanks to Gao Xiang <gaoxiang25@huawei.com> (Closes: #946569)
        * Enable additional netfilter modules.
          and NFT_SYNPROXY as modules.
          Thanks to Arturo Borrero Gonzalez (Closes: #948031)
        * [rt] Drop watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch
        * [rt] Refresh Use-CONFIG_PREEMPTION.patch (Context changes in 5.4.8)
        * Bump ABI to 2
        [ YunQiang Su ]
        * [mips*/octeon] Fix ftbfs on mips* due to octeon image-file:
              move "image-file: linux" to octeon_build from octeon_image.
    • Sophie Brun's avatar
      Import Upstream version 5.4.8 · 3f312a15
      Sophie Brun authored
  2. 30 Dec, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 5.4.6-1 · 2567ab60
      Ben Hutchings authored
      linux (5.4.6-1) unstable; urgency=medium
        * New upstream stable update:
          - rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071)
          - lp: fix sparc64 LPSETTIMEOUT ioctl
          - time: Zero the upper 32-bits in __kernel_timespec on 32-bit
          - usb: gadget: u_serial: add missing port entry locking
          - [arm64] tty: serial: msm_serial: Fix flow control
          - [arm64,armel,armhf] serial: pl011: Fix DMA ->flush_buffer()
          - serial: serial_core: Perform NULL checks for break_ctl ops
          - [armhf] serial: stm32: fix clearing interrupt error flags
          - serial: 8250_dw: Avoid double error messaging when IRQ absent
          - mwifiex: Re-work support for SDIO HW reset
          - io_uring: fix dead-hung for non-iter fixed rw
          - io_uring: transform send/recvmsg() -ERESTARTSYS to -EINTR
          - fuse: fix leak of fuse_io_priv
          - fuse: verify nlink
          - fuse: verify write return
          - fuse: verify attributes
          - io_uring: fix missing kmap() declaration on powerpc
          - io_uring: ensure req->submit is copied when req is deferred
          - SUNRPC: Avoid RPC delays when exiting suspend
          - ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC
          - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
          - ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
          - ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G
          - ALSA: pcm: oss: Avoid potential buffer overflows
          - ALSA: hda - Add mute led support for HP ProBook 645 G4
          - ALSA: hda: Modify stream stripe mask only when needed
          - Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
          - Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
          - [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus
          - Input: goodix - add upside-down quirk for Teclast X89 tablet
          - media: rc: mark input device as pointing stick
          - [i386] x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
          - [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
          - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
          - CIFS: Fix SMB2 oplock break processing
          - tty: vt: keyboard: reject invalid keycodes
          - can: slcan: Fix use-after-free Read in slcan_open
          - nfsd: Ensure CLONE persists data and metadata changes to the target file
          - nfsd: restore NFSv3 ACL support
          - kernfs: fix ino wrap-around detection
          - jbd2: Fix possible overflow in jbd2_log_space_left()
          - [arm64] drm/msm: fix memleak on release
          - drm: damage_helper: Fix race checking plane->state->fb
          - [i386] drm/i810: Prevent underflow in ioctl
          - [arm64] Validate tagged addresses in access_ok() called from kernel
          - [powerpc*] KVM: PPC: Book3S HV: XIVE: Free previous EQ page when setting
            up a new one
          - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix potential page leak on error
          - [powerpc*] KVM: PPC: Book3S HV: XIVE: Set kvm->arch.xive when VPs are
          - [x86] KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter
          - [arm64,armhf] KVM: vgic: Don't rely on the wrong pending table
          - [x86] KVM: do not modify masked bits of shared MSRs
          - [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES
          - [x86] KVM: Remove a spurious export of a static function
          - [x86] KVM: Grab KVM's srcu lock when setting nested state
          - crypto: af_alg - cast ki_complete ternary op to int
          - [i386] crypto: geode-aes - switch to skcipher for cbc(aes) fallback
          - [x86] crypto: ccp - fix uninitialized list head
          - crypto: ecdh - fix big endian bug in ECC library
          - crypto: user - fix memory leak in crypto_report (CVE-2019-19062)
          - [armhf] spi: stm32-qspi: Fix kernel oops when unbinding driver
          - spi: Fix SPI_CS_HIGH setting when using native and GPIO CS
          - spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS
          - can: ucan: fix non-atomic allocation in completion handler
          - [amd64] RDMA/qib: Validate ->show()/store() callbacks before calling
          - rfkill: allocate static minor
          - bdev: Factor out bdev revalidation into a common helper
          - bdev: Refresh bdev size for disks without partitioning
          - iomap: Fix pipe page leakage during splicing
          - thermal: Fix deadlock in thermal thermal_zone_device_check
          - vcs: prevent write access to vcsu devices
          - Revert "serial/8250: Add support for NI-Serial PXI/PXIe+485 devices"
          - binder: Fix race between mmap() and binder_alloc_print_pages()
          - binder: Prevent repeated use of ->mmap() via NULL mapping
          - binder: Handle start==NULL in binder_update_page_range()
          - [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
          - ALSA: hda - Fix pending unsol events at shutdown
          - md/raid0: Fix an error message in raid0_make_request()
          - drm/mcde: Fix an error handling path in 'mcde_probe()'
          - perf script: Fix invalid LBR/binary mismatch error
          - usb: gadget: configfs: Fix missing spin_lock_init()
          - [x86] usb: gadget: pch_udc: fix use after free
          - nvme: Namepace identification descriptor list is optional
          - Revert "nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T"
          - scsi: lpfc: Fix bad ndlp ptr in xri aborted handling
          - [s390x] scsi: zfcp: trace channel log even for FCP command responses
          - scsi: qla2xxx: Do command completion on abort timeout
          - scsi: qla2xxx: Fix driver unload hang
          - scsi: qla2xxx: Fix double scsi_done for abort path
          - scsi: qla2xxx: Fix memory leak when sending I/O fails
          - compat_ioctl: add compat_ptr_ioctl()
          - ceph: fix compat_ioctl for ceph_dir_operations
          - [arm64] media: venus: remove invalid compat_ioctl32 handler
          - USB: uas: honor flag to avoid CAPACITY16
          - USB: uas: heed CAPACITY_HEURISTICS
          - USB: documentation: flags on usb-storage versus UAS
          - usb: Allow USB device to be warm reset in suspended state
          - [arm64,armhf] usb: host: xhci-tegra: Correct phy enable sequence
          - binder: fix incorrect calculation for num_valid
          - staging: rtl8188eu: fix interface sanity check
          - staging: rtl8712: fix interface sanity check
          - [arm*] staging: vchiq: call unregister_chrdev_region() when driver
            registration fails
          - staging: gigaset: fix general protection fault on probe
          - staging: gigaset: fix illegal free on probe errors
          - staging: gigaset: add endpoint-type sanity check
          - usb: xhci: only set D3hot for pci device
          - xhci: Fix memory leak in xhci_add_in_port()
          - xhci: fix USB3 device initiated resume race with roothub autosuspend
          - xhci: Increase STS_HALT timeout in xhci_suspend()
          - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default
          - xhci: make sure interrupts are restored to correct state
          - [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit
          - USB: atm: ueagle-atm: add missing endpoint check
          - USB: idmouse: fix interface sanity checks
          - USB: serial: io_edgeport: fix epic endpoint lookup
          - usb: roles: fix a potential use after free
          - USB: adutux: fix interface sanity check
          - usb: core: urb: fix URB structure initialization function
          - usb: mon: Fix a deadlock in usbmon between mmap and read
          - [arm64,amd64,i386] tpm: add check after commands attribs tab allocation
          - [arm64,amd64,i386] tpm: Switch to platform_get_irq_optional()
          - brcmfmac: disable PCIe interrupts before bus reset
          - mtd: rawnand: Change calculating of position page containing BBM
          - virtio-balloon: fix managed page counts when migrating pages between
          - usb: dwc3: pci: add ID for the Intel Comet Lake -H variant
          - [arm64,armhf] usb: dwc3: gadget: Fix logical condition
          - [arm64,armhf] usb: dwc3: gadget: Clear started flag for non-IOC
          - [arm64,armhf] usb: dwc3: ep0: Clear started flag on completion
          - [x86] usb: typec: fix use after free in typec_register_port()
          - iwlwifi: pcie: fix support for transmitting SKBs with fraglist
          - btrfs: check page->mapping when loading free space cache
          - btrfs: use btrfs_block_group_cache_done in update_block_group
          - btrfs: use refcount_inc_not_zero in kill_all_nodes
          - Btrfs: fix metadata space leak on fixup worker failure to set range as
          - Btrfs: fix negative subv_writers counter and data space leak after
            buffered write
          - btrfs: Avoid getting stuck during cyclic writebacks
          - btrfs: Remove btrfs_bio::flags member
          - Btrfs: send, skip backreference walking for extents with many references
          - btrfs: record all roots for rename exchange on a subvol
          - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address
          - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of
          - rtlwifi: rtl8192de: Fix missing enable interrupt flag
          - ovl: fix lookup failure on multi lower squashfs
          - ovl: fix corner case of non-unique st_dev;st_ino
          - ovl: relax WARN_ON() on rename to self
          - [arm*] hwrng: omap - Fix RNG wait loop timeout
          - dm writecache: handle REQ_FUA
          - dm zoned: reduce overhead of backing device checks
          - workqueue: Fix spurious sanity check failures in destroy_workqueue()
          - workqueue: Fix pwq ref leak in rescuer_thread()
          - ASoC: rt5645: Fixed buddy jack support.
          - ASoC: rt5645: Fixed typo for buddy jack support.
          - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report
          - md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
          - blk-mq: avoid sysfs buffer overflow with too many CPU cores
          - cgroup: pids: use atomic64_t for pids->limit
          - wil6210: check len before memcpy() calls
          - ar5523: check NULL before memcpy() in ar5523_cmd()
          - [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported
          - cpuidle: Do not unset the driver if it is there already
          - cpuidle: use first valid target residency as poll time
          - [arm64,armhf] drm/panfrost: Open/close the perfcnt BO
          - [powerpc*] perf: Disable trace_imc pmu
          - [x86] intel_th: Fix a double put_device() in error path
          - [x86] intel_th: pci: Add Ice Lake CPU support
          - [x86] intel_th: pci: Add Tiger Lake CPU support
          - PM / devfreq: Lock devfreq in trans_stat_show
          - [powerpc*] cpufreq: powernv: fix stack bloat and hard limit on number of
          - ALSA: fireface: fix return value in error path of isochronous resources
          - ALSA: oxfw: fix return value in error path of isochronous resources
          - ALSA: hda/realtek - Line-out jack doesn't work on a Dell AIO
          - ACPI / utils: Move acpi_dev_get_first_match_dev() under CONFIG_ACPI
          - ACPI: LPSS: Add LNXVIDEO -> BYT I2C7 to lpss_device_links
          - ACPI: LPSS: Add LNXVIDEO -> BYT I2C1 to lpss_device_links
          - ACPI: LPSS: Add dmi quirk for skipping _DEP check for some device-links
          - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug
          - ACPI: OSL: only free map once in osl.c
          - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
          - ACPI: EC: Rework flushing of pending work
          - ACPI: PM: Avoid attaching ACPI PM domain to certain devices
          - [arm64] pinctrl: armada-37xx: Fix irq mask access in
          - [armhf] pinctrl: samsung: Add of_node_put() before return in error path
          - [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos
            wakeup controller init
          - [armhf] pinctrl: samsung: Fix device node refcount leaks in init code
          - [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to
            get rid of pandora_wl1251_init_card
          - RDMA/core: Fix ib_dma_max_seg_size()
          - ppdev: fix PPGETTIME/PPSETTIME ioctls
          - [powerpc*] Allow 64bit VDSO __kernel_sync_dicache to work across ranges
          - [powerpc*] xive: Prevent page fault issues in the machine crash handler
          - [powerpc*] Allow flush_icache_range to work across ranges >4GB
          - [powerpc*] xive: Skip ioremap() of ESB pages for LSI interrupts
          - video/hdmi: Fix AVI bar unpack
          - quota: Check that quota is not dirty before release
          - ext2: check err when partial != NULL
          - seccomp: avoid overflow in implicit constant conversion
          - quota: fix livelock in dquot_writeback_dquots
          - ext4: Fix credit estimate for final inode freeing
          - reiserfs: fix extended attributes on the root directory
          - scsi: qla2xxx: Fix SRB leak on switch command timeout
          - scsi: qla2xxx: Fix a dma_pool_free() call
          - Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails"
          - [armhf] omap: pdata-quirks: revert pandora specific gpiod additions
          - [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and
          - [powerpc*] Avoid clang warnings around setjmp and longjmp
          - [powerpc*] Fix vDSO clock_getres()
          - mm, memfd: fix COW issue on MAP_PRIVATE and F_SEAL_FUTURE_WRITE mappings
          - mm: memcg/slab: wait for !root kmem_cache refcnt killing on root
            kmem_cache destruction
          - ext4: work around deleting a file with i_nlink == 0 safely
          - [arm64] firmware: qcom: scm: Ensure 'a0' status code is treated as
          - [s390x] smp,vdso: fix ASCE handling
          - [s390x] kaslr: store KASLR offset for early dumps
          - mm/shmem.c: cast the type of unmap_start to u64
          - [powerpc*] Define arch_is_kernel_initmem_freed() for lockdep
          - rtc: disable uie before setting time and enable after
          - splice: only read in as much information as there is pipe buffer space
          - ext4: fix a bug in ext4_wait_for_tail_page_commit
          - ext4: fix leak of quota reservations
          - blk-mq: make sure that line break can be printed
          - workqueue: Fix missing kfree(rescuer) in destroy_workqueue()
          - r8169: fix rtl_hw_jumbo_disable for RTL8168evl
          - inet: protect against too small mtu values.
          - mqprio: Fix out-of-bounds access in mqprio_dump
          - net: bridge: deny dev_set_mac_address() when unregistering
          - net: dsa: fix flow dissection on Tx path
          - [armhf] net: ethernet: ti: cpsw: fix extra rx interrupt
          - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues
          - net_sched: validate TCA_KIND attribute in tc_chain_tmplt_add()
          - [arm64] net: thunderx: start phy before starting autonegotiation
          - openvswitch: support asymmetric conntrack
          - tcp: md5: fix potential overestimation of TCP option space
          - tipc: fix ordering of tipc module init and exit routine
          - net/mlx5e: Query global pause state before setting prio2buffer
          - net: ipv6: add net argument to ip6_dst_lookup_flow
          - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
          - tcp: fix rejected syncookies due to stale timestamps
          - tcp: tighten acceptance of ACKs not matching a child socket
          - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE()
          - net: core: rename indirect block ingress cb function
          - net: sched: allow indirect blocks to bind to clsact in TC
          - cls_flower: Fix the behavior using port ranges with hw-offload
          - gre: refetch erspan header from skb->data after pskb_may_pull()
          - Fixed updating of ethertype in function skb_mpls_pop
          - net: Fixed updating of ethertype in skb_mpls_push()
          - net/mlx5e: Fix TXQ indices to be sequential
          - net/mlx5e: Fix SFF 8472 eeprom length
          - net/mlx5e: Fix freeing flow with kfree() and not kvfree()
          - net/mlx5e: Fix translation of link mode into speed
          - net/mlx5e: ethtool, Fix analysis of speed setting
          - page_pool: do not release pool until inflight == 0.
          - xdp: obtain the mem_id mutex before trying to remove an entry.
          - r8169: add missing RX enabling for WoL on RTL8125
          - USB: Fix incorrect DMA allocations for local memory pool drivers
          - mmc: block: Make card_busy_detect() a bit more generic
          - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response
          - mmc: core: Drop check for mmc_card_is_removable() in mmc_rescan()
          - mmc: core: Re-work HW reset for SDIO cards
          - PCI/PM: Always return devices to D0 when thawing
          - PCI: pciehp: Avoid returning prematurely from sysfs requests
          - PCI: Fix Intel ACS quirk UPDCR register address
          - PCI/MSI: Fix incorrect MSI-X masking on resume
          - PCI: Do not use bus number zero from EA capability
          - PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3
          - PM / QoS: Redefine FREQ_QOS_MAX_DEFAULT_VALUE to S32_MAX
          - block: fix "check bi_size overflow before merge"
          - gfs2: Multi-block allocations in gfs2_page_mkwrite
          - gfs2: fix glock reference problem in gfs2_trans_remove_revoke
          - [arm64] rpmsg: glink: Fix reuse intents memory leak issue
          - [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case
          - [arm64] rpmsg: glink: Put an extra reference during cleanup
          - [arm64] rpmsg: glink: Fix rpmsg_register_device err handling
          - [arm64] rpmsg: glink: Don't send pending rx_done during remove
          - [arm64] rpmsg: glink: Free pending deferred work on remove
          - cifs: smbd: Return -EAGAIN when transport is reconnecting
          - cifs: smbd: Only queue work for error recovery on memory registration
          - cifs: smbd: Add messages on RDMA session destroy and reconnection
          - cifs: smbd: Return -EINVAL when the number of iovs exceeds
          - cifs: smbd: Return -ECONNABORTED when trasnport is not in connected
          - cifs: Don't display RDMA transport on reconnect
          - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect
          - CIFS: Close open handle after interrupted close
          - CIFS: Do not miss cancelled OPEN responses
          - CIFS: Fix NULL pointer dereference in mid callback
          - cifs: Fix retrieval of DFS referrals in cifs_mount()
          - [armhf] ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by
          - vfio/pci: call irq_bypass_unregister_producer() before freeing irq
          - dma-buf: Fix memory leak in sync_file_merge()
          - [arm64,armhf] drm/panfrost: Fix a race in panfrost_ioctl_madvise()
          - [arm64,armhf] drm/panfrost: Fix a BO leak in panfrost_ioctl_mmap_bo()
          - [arm64,armhf] drm/panfrost: Fix a race in panfrost_gem_free_object()
          - [x86] drm/mgag200: Extract device type from flags
          - [x86] drm/mgag200: Store flags from PCI driver data in device structure
          - [x86] drm/mgag200: Add workaround for HW that does not support
          - [x86] drm/mgag200: Flag all G200 SE A machines as broken wrt <startadd>
          - [arm64] drm: meson: venc: cvbs: fix CVBS mode matching
          - dm mpath: remove harmful bio-based optimization
          - dm btree: increase rebalance threshold in __rebalance2()
          - dm clone metadata: Track exact changes per transaction
          - dm clone metadata: Use a two phase commit
          - dm clone: Flush destination device before committing metadata
          - dm thin metadata: Add support for a pre-commit callback
          - dm thin: Flush data device before committing metadata
          - scsi: ufs: Disable autohibern8 feature in Cadence UFS
          - scsi: iscsi: Fix a potential deadlock in the timeout handler
          - scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd
          - scsi: qla2xxx: Initialize free_work before flushing it
          - scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX
          - scsi: qla2xxx: Change discovery state before PLOGI
          - scsi: qla2xxx: Correctly retrieve and interpret active flash region
          - scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB
          - drm/nouveau/kms/nv50-: Call outp_atomic_check_view() before handling PBN
          - drm/nouveau/kms/nv50-: Store the bpc we're using in nv50_head_atom
          - drm/nouveau/kms/nv50-: Limit MST BPC to 8
          - [x86] drm/i915/fbc: Disable fbc by default on all glk+
          - drm/radeon: fix r1xx/r2xx register checker for POT textures
          - drm/dp_mst: Correct the bug in drm_dp_update_payload_part1()
          - drm/amdgpu: initialize vm_inv_eng0_sem for gfxhub and mmhub
          - drm/amdgpu: invalidate mmhub semaphore workaround in gmc9/gmc10
          - drm/amdgpu/gfx10: explicitly wait for cp idle after halt/unhalt
          - drm/amdgpu/gfx10: re-init clear state buffer after gpu reset
          - drm/amdgpu: avoid using invalidate semaphore for picasso
          - drm/amdgpu: add invalidate semaphore limit for SRIOV and picasso in gmc9
          - ALSA: hda: Fix regression by strip mask fix
        [ Joe Richey ]
        * [amd64/cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237)
        [ Ben Hutchings ]
        * [armel/rpi,armhf,arm64] Enable DEBUG_WX
        * linux-cpupower: Fix grammar error in package description
        * debian/control: Make library package descriptions more consistent
        * Set ABI to 1
        * tracing: Do not create directories if lockdown is in affect
        [ Aurelien Jarno ]
        * [armhf,arm64] Fix critical trip point on RPI 3.
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.4.3-rt1 and re-enable
        * [rt] Enable PREEMPT_RT (instead of PREEMPT_RT_FULL) which is part of 5.4
        * [rt] Update to 5.4.5-rt3
        [ YunQiang Su ]
        * [mipsel,mips64el/loongson-3] Enable AMDGPU.
        * [mips*] switch to vmlinuz from vmlinux except octeon.
        * [mips*] enable CONFIG_MIPS_O32_FP64_SUPPORT.
        * [mips*] enable CONFIG_CPU_HAS_MSA except octeon.
        [ Vagrant Cascadian ]
        * [arm64] drivers/gpu/drm/sun4i: Enable DRM_SUN8I_MIXER as a module.
          (Closes: #946510). Thanks to Andrei POPESCU.
        [ Sudip Mukherjee ]
        * Add libtraceevent packages (Closes: #944138)
      linux (5.4.2-1~exp1) experimental; urgency=medium
        * New upstream stable update:
          - Bluetooth: Fix invalid-free in bcsp_close()
          - ath9k_hw: fix uninitialized variable data
          - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
          - ath10k: Fix HOST capability QMI incompatibility
          - ath10k: restore QCA9880-AR1A (v1) detection
          - Revert "Bluetooth: hci_ll: set operational frequency earlier"
          - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
          - md/raid10: prevent access of uninitialized resync_pages offset
          - [x86] insn: Fix awk regexp warnings
          - [x86] speculation: Fix incorrect MDS/TAA mitigation status
          - [x86] speculation: Fix redundant MDS mitigation message
          - nbd: prevent memory leak
          - [i386] x86/stackframe/32: Repair 32-bit Xen PV
          - [i386] x86/xen/32: Make xen_iret_crit_fixup() independent of frame
          - [i386] x86/xen/32: Simplify ring check in xen_iret_crit_fixup()
          - [i386] x86/doublefault/32: Fix stack canaries in the double fault
          - [i386] x86/pti/32: Size initial_page_table correctly
          - [i386] x86/cpu_entry_area: Add guard page for entry stack on 32bit
          - [i386] x86/entry/32: Fix IRET exception
          - [i386] x86/entry/32: Use %ss segment where required
          - [i386] x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL
          - [i386] x86/entry/32: Unwind the ESPFIX stack earlier on exception entry
          - [i386] x86/entry/32: Fix NMI vs ESPFIX
          - [i386] x86/pti/32: Calculate the various PTI cpu_entry_area sizes
            correctly, make the CPU_ENTRY_AREA_PAGES assert precise
          - [i386] x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3
          - futex: Prevent robust futex exit race
          - ALSA: usb-audio: Fix NULL dereference at parsing BADD
          - ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data
          - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
          - media: vivid: Fix wrong locking that causes race conditions on streaming
            stop (CVE-2019-18683)
          - media: usbvision: Fix invalid accesses after device disconnect
          - media: usbvision: Fix races among open, close, and disconnect
          - cpufreq: Add NULL checks to show() and store() methods of cpufreq
          - futex: Move futex exit handling into futex code
          - futex: Replace PF_EXITPIDONE with a state
          - exit/exec: Seperate mm_release()
          - futex: Split futex_mm_release() for exit/exec
          - futex: Set task::futex_state to DEAD right after handling futex exit
          - futex: Mark the begin of futex exit explicitly
          - futex: Sanitize exit state handling
          - futex: Provide state handling for exec() as well
          - futex: Add mutex around futex exit
          - futex: Provide distinct return value when owner is exiting
          - futex: Prevent exit livelock
          - media: uvcvideo: Fix error path in control parsing failure
          - media: b2c2-flexcop-usb: add sanity checking (CVE-2019-15291)
          - media: cxusb: detect cxusb_ctrl_msg error in query
          - media: imon: invalid dereference in imon_touch_event
          - media: mceusb: fix out of bounds read in MCE receiver buffer
          - ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs
          - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
          - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
          - usb-serial: cp201x: support Mark-10 digital force gauge
          - USB: chaoskey: fix error case of a timeout
          - appledisplay: fix error handling in the scheduled work
          - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
          - USB: serial: mos7720: fix remote wakeup
          - USB: serial: mos7840: fix remote wakeup
          - USB: serial: option: add support for DW5821e with eSIM support
          - USB: serial: option: add support for Foxconn T77W968 LTE modules
          - [x86] staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
          - [powerpc*] powerpc/book3s64: Fix link stack flush on context switch
          - [powerpc*] KVM: PPC: Book3S HV: Flush link stack on guest exit to host
          - io_uring: async workers should inherit the user creds
          - net: separate out the msghdr copy from ___sys_{send,recv}msg()
          - net: disallow ancillary data for __sys_{send,recv}msg_file()
          - [arm64] crypto: inside-secure - Fix stability issue with Macchiatobin
          - driver core: platform: use the correct callback type for bus_find_device
          - [arm64,armel,armhf] usb: dwc2: use a longer core rest timeout in
          - [x86] staging: rtl8192e: fix potential use after free
          - staging: rtl8723bs: Drop ACPI device ids
          - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
          - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
          - [x86] mei: bus: prefix device names on bus with the bus name
          - [x86] mei: me: add comet point V device id
          - [x86] thunderbolt: Power cycle the router if NVM authentication fails
          - [x86] fpu: Don't cache access to fpu_fpregs_owner_ctx
          - macvlan: schedule bc_work even if error
          - mdio_bus: don't use managed reset-controller
          - net: macb: add missed tasklet_kill
          - net: psample: fix skb_over_panic
          - net: sched: fix `tc -s class show` no bstats on class with nolock
          - openvswitch: fix flow command message size
          - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
          - slip: Fix use-after-free Read in slip_open
          - sctp: cache netns in sctp_ep_common
          - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
          - openvswitch: remove another BUG_ON()
          - net: skmsg: fix TLS 1.3 crash with full sk_msg
          - tipc: fix link name length check
          - r8169: fix jumbo configuration for RTL8168evl
          - r8169: fix resume on cable plug-in
          - ext4: add more paranoia checking in ext4_expand_extra_isize handling
          - Revert "jffs2: Fix possible null-pointer dereferences in
          - HID: core: check whether Usage Page item is after Usage ID items
          - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
          - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input
        [ Ben Hutchings ]
        * [armel] udeb: Replace m25p80 with spi-nor in mtd-modules (fixes FTBFS)
        * [ia64] udeb: Remove SGI SN2 modules (fixes FTBFS)
        * iio: Enable TI_ADS1015 as module, replacing SENSORS_ADS1015
        * [armhf] regulator: Really enable REGULATOR_STM32_PWR
        * [armhf] drm/panel: Enable DRM_PANEL_{SONY_ACX565AKM,TPO_TD028TTEC1,
          TPO_TD043MTEA1} as modules, replacing the corresponding omapdrm options
        * [armhf,arm64] platform/chrome: Change chromeos drivers back to modules
        * Build-Depend on kernel-wedge 2.102; remove workaround in debian/rules.real
        * debian/bin: Add script to update taint list for bug reporting script
        * linux-image: bug: Update taint list and use upstream descriptions
        * btrfs,fanotify: Use TAINT_AUX instead of TAINT_USER for unsupported
        [ Romain Perier ]
        * Enable VIRTIO_FS and VIRTIO_PMEM (Closes: #945853)
        [ Aurelien Jarno]
        * [ppc64el] Fix building libbpf with recent binutils versions (fixes FTBFS).
        [ Luca Boccassi ]
        * verity: enable DM_VERITY_VERIFY_ROOTHASH_SIG
      linux (5.4-1~exp1) experimental; urgency=medium
        * New upstream release: https://kernelnewbies.org/Linux_5.4
        [ Ben Hutchings ]
        * lockdown: Rebase on upstream Lockdown LSM:
          - Refresh "efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode"
          - Update "efi: Lock down the kernel if booted in secure boot mode"
          - Update "Add a SysRq option to lift kernel lockdown"
          - Update "mtd: Disable slram and phram when locked down"
          - Update "arm64: add kernel config option to lock down when in Secure Boot
          - Refresh "lockdown: Refer to Debian wiki until manual page exists"
          - Drop all other lockdown patches
        * [armel/marvell] lockdown: Disable Lockdown as it now selects MODULE_SIG
        * [amd64] Update "x86: Make x32 syscall support conditional …" for 5.4
        * debian/lib/python/debian_linux/abi.py: Add support for symbol namespaces
        * debian/bin/genpatch-rt: Fix series generation from git
        [ Romain Perier ]
        * Rebased the following patches onto 5.4.x:
          - debian/version.patch
          - debian/ia64-hardcode-arch-script-output.patch
          - bugfix/all/
          - features/all/aufs5/aufs5-mmap.patch
          - features/all/aufs5/aufs5-standalone.patch
          - features/x86/
          - bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
          - debian/revert-objtool-fix-config_stack_validation-y-warning.patch
          - features/all/db-mok-keyring/
          - bugfix/all/tools-perf-man-date.patch
          - bugfix/all/usbip-fix-misuse-of-strncpy.patch
          - bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch
        [ John Paul Adrian Glaubitz ]
        * [m68k] Enable CONFIG_PATA_BUDDHA as module
        [ Aurelien Jarno ]
        * [armhf] Add support for STM32MP1 SoC: enable ARCH_STM32,
        * [arm64] Re-enable BT_HCIUART_{BCM,LL} (arm64 version of #906048).
        * [arm64,armhf] Enable CLK_RASPBERRYPI and RASPBERRYPI_CPUFREQ.
        [ Salvatore Bonaccorso ]
        * md: Enable MD_CLUSTER as module (Closes: #927026)
    • Sophie Brun's avatar
      Import Upstream version 5.4.6 · dd97de85
      Sophie Brun authored
  3. 09 Dec, 2019 2 commits
    • Salvatore Bonaccorso's avatar
      Import Debian changes 5.3.15-1 · aca6f6ca
      Salvatore Bonaccorso authored
      linux (5.3.15-1) unstable; urgency=medium
        * New upstream stable update:
          - regulator: of: fix suspend-min/max-voltage parsing
          - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create()
          - [arm64] dts: allwinner: a64: pine64-plus: Add PHY regulator delay
          - [arm64] dts: allwinner: a64: Drop PMU node
          - [arm64] dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay
          - [arm64] dts: Fix gpio to pinmux mapping
          - [x86] pinctrl: intel: Allocate IRQ chip dynamic
          - [amd64] ASoC: SOF: loader: fix kernel oops on firmware boot failure
          - [amd64] ASoC: SOF: topology: fix parse fail issue for byte/bool tuple
          - [amd64] ASoC: SOF: Intel: hda: fix warnings during FW load
          - [amd64] ASoC: SOF: Intel: initialise and verify FW crash dump data.
          - [amd64] ASoC: SOF: Intel: hda: Disable DMI L1 entry during capture
          - [amd64] ASoC: rt5682: add NULL handler to set_jack function
          - [amd64] ASoC: intel: sof_rt5682: add remove function to disable jack
          - [x86] ASoC: intel: bytcr_rt5651: add null check to support_button_press
          - [armhf] regulator: pfuze100-regulator: Variable "val" in
            pfuze100_regulator_probe() could be uninitialized
          - [armhf,arm64] ASoc: rockchip: i2s: Fix RPM imbalance
          - [arm64] dts: rockchip: fix Rockpro64 RK808 interrupt line
          - [armhf] dts: logicpd-torpedo-som: Remove twl_keypad
          - [arm64] dts: rockchip: fix RockPro64 vdd-log regulator settings
          - [arm64] dts: rockchip: fix RockPro64 sdhci settings
          - [arm64] dts: zii-ultra: fix ARM regulator states
          - [armhf] dts: am3874-iceboard: Fix 'i2c-mux-idle-disconnect' usage
          - [armhf] dts: Use level interrupt for omap4 & 5 wlcore
          - [armel,armhf] mm: fix alignment handler faults under memory pressure
          - scsi: qla2xxx: fix a potential NULL pointer dereference
          - scsi: scsi_dh_alua: handle RTPG sense code correctly during state
          - [armel,armhf] 8908/1: add __always_inline to functions called from
          - [arm64] dts: rockchip: fix RockPro64 sdmmc settings
          - [arm64] dts: rockchip: Fix usb-c on Hugsun X99 TV Box
          - [armhf] dts: imx6q-logicpd: Re-Enable SNVS power key
          - perf tools: Fix resource leak of closedir() on the error paths
          - perf c2c: Fix memory leak in build_cl_output()
          - perf kmem: Fix memory leak in compact_gfp_flags()
          - drm/amdgpu: fix potential VM faults
          - drm/amdgpu: fix error handling in amdgpu_bo_list_create
          - scsi: target: core: Do not overwrite CDB byte 1
          - scsi: hpsa: add missing hunks in reset-patch
          - [x86] ASoC: Intel: sof-rt5682: add a check for devm_clk_get
          - [x86] ASoC: SOF: control: return true when kcontrol values change
          - tracing: Fix "gfp_t" format for synthetic events
          - [arm64] dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue
          - [x86] ALSA: hda: Add Tigerlake/Jasperlake PCI ID
          - [armhf,arm64] irqchip/gic-v3-its: Use the exact ITSList for VMOVP
          - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
          - [riscv64] irqchip/sifive-plic: Skip contexts except supervisor in
          - nbd: protect cmd->status with cmd->lock
          - nbd: handle racing with error'ed out commands
          - cxgb4: fix panic when attaching to ULD fail
          - cxgb4: request the TX CIDX updates to status page
          - dccp: do not leak jiffies on the wire
          - erspan: fix the tun_info options_len check for erspan
          - inet: stop leaking jiffies on the wire
          - net: annotate accesses to sk->sk_incoming_cpu
          - net: annotate lockless accesses to sk->sk_napi_id
          - [armhf] net: dsa: bcm_sf2: Fix IMP setup for port different than 8
          - net: fix sk_page_frag() recursion from memory reclaim
          - [arm64] net: hisilicon: Fix ping latency when deal with high throughput
          - net/mlx4_core: Dynamically set guaranteed amount of counters per VF
          - netns: fix GFP flags in rtnl_net_notifyid()
          - net: rtnetlink: fix a typo fbd -> fdb
          - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq()
          - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()
          - udp: fix data-race in udp_set_dev_scratch()
          - vxlan: check tun_info options_len properly
          - net: add skb_queue_empty_lockless()
          - udp: use skb_queue_empty_lockless()
          - net: use skb_queue_empty_lockless() in poll() handlers
          - net: use skb_queue_empty_lockless() in busy poll contexts
          - net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
          - ipv4: fix route update on metric change.
          - net/smc: fix closing of fallback SMC sockets
          - net/smc: keep vlan_id for SMC-R in smc_listen_work()
          - keys: Fix memory leak in copy_net_ns
          - net: phylink: Fix phylink_dbg() macro
          - rxrpc: Fix handling of last subpacket of jumbo packet
          - net/mlx5e: Determine source port properly for vlan push action
          - net/mlx5e: Remove incorrect match criteria assignment line
          - net/mlx5e: Initialize on stack link modes bitmap
          - net/mlx5: Fix flow counter list auto bits struct
          - net/smc: fix refcounting for non-blocking connect()
          - net/mlx5: Fix rtable reference leak
          - r8169: fix wrong PHY ID issue with RTL8168dp
          - net/mlx5e: Fix ethtool self test: link speed
          - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget
          - ipv4: fix IPSKB_FRAG_PMTU handling with fragmentation
          - [armhf] net: dsa: b53: Do not clear existing mirrored port mask
          - net: dsa: fix switch tree list
          - net: ensure correct skb->tstamp in various fragmenters
          - [arm64] net: hns3: fix mis-counting IRQ vector numbers issue
          - net: netem: fix error path for corrupted GSO frames
          - net: reorder 'struct net' fields to avoid false sharing
          - net: usb: lan78xx: Connect PHY before registering MAC
          - [x86] r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2
          - net: netem: correct the parent's backlog when corrupted packet was
          - net/flow_dissector: switch to siphash
          - CIFS: Fix retry mid list corruption on reconnects
          - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending
            driver fails
          - bonding: fix state transition issue in link monitoring
          - CDC-NCM: handle incomplete transfer of MTU
          - ipv4: Fix table id reference in fib_sync_down_addr
          - [mips*/octeon] net: ethernet: octeon_mgmt: Account for second possible
            VLAN header
          - net: fix data-race in neigh_event_send()
          - net: usb: qmi_wwan: add support for DW5821e with eSIM support
          - nfc: netlink: fix double device reference drop
          - qede: fix NULL pointer deref in __qede_remove()
          - ipv6: fixes rt6_probe() and fib6_nh->last_probe init
          - [arm64] net: hns: Fix the stray netpoll locks causing deadlock in NAPI
          - net: prevent load/store tearing on sk->sk_stamp
          - net: sched: prevent duplicate flower rules from tcf_proto destroy race
          - net/smc: fix ethernet interface refcounting
          - vsock/virtio: fix sock refcnt holding during the shutdown
          - r8169: fix page read in r8168g_mdio_read
          - ALSA: timer: Fix incorrectly assigned timer instance
          - ALSA: bebob: fix to detect configured source of sampling clock for
            Focusrite Saffire Pro i/o series
          - ALSA: hda/ca0132 - Fix possible workqueue stall
          - mm: memcontrol: fix NULL-ptr deref in percpu stats flush
          - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
          - mm, meminit: recalculate pcpu batch and high limits after init completes
          - mm: thp: handle page cache THP correctly in PageTransCompoundMap
          - mm, vmstat: hide /proc/pagetypeinfo from normal users
          - dump_stack: avoid the livelock of the dump_lock
          - mm: slab: make page_cgroup_ino() to recognize non-compound slab pages
          - btrfs: Consider system chunk array size for new SYSTEM chunks
          - btrfs: tree-checker: Fix wrong check on max devid
          - btrfs: save i_size to avoid double evaluation of i_size_read in
          - [x86] pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
          - perf tools: Fix time sorting
          - perf map: Use zalloc for map_groups
          - drm/radeon: fix si_enable_smc_cac() failed issue
          - HID: wacom: generic: Treat serial number and related fields as unsigned
          - mm/khugepaged: fix might_sleep() warn with CONFIG_HIGHPTE=y
          - blkcg: make blkcg_print_stat() print stats only for online blkgs
          - [arm64] Do not mask out PTE_RDONLY in pte_same()
          - ceph: fix use-after-free in __ceph_remove_cap()
          - ceph: fix RCU case handling in ceph_d_revalidate()
          - ceph: add missing check in d_revalidate snapdir handling
          - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
          - ceph: don't allow copy_file_range when stripe_count != 1
          - [x86] iio: imu: inv_mpu6050: fix no data on MPU6050
          - [armhf] sunxi: Fix CPU powerdown on A83T
          - [armhf] dts: imx6-logicpd: Re-enable SNVS power key
          - cpufreq: intel_pstate: Fix invalid EPB setting
          - clone3: validate stack arguments
          - netfilter: nf_tables: Align nft_expr private data to 64-bit
          - netfilter: ipset: Fix an error code in ip_set_sockfn_get()
          - [x86] intel_th: gth: Fix the window switching sequence
          - [x86] intel_th: pci: Add Comet Lake PCH support
          - [x86] intel_th: pci: Add Jasper Lake PCH support
          - [amd64] dumpstack: Don't evaluate exception stacks before setup
          - [i386] apic: Avoid bogus LDR warnings
          - SMB3: Fix persistent handles reconnect
          - can: usb_8dev: fix use-after-free on disconnect
          - [armhf] can: flexcan: disable completely the ECC mechanism
          - [armhf] can: c_can: c_can_poll(): only read status register after status
          - can: peak_usb: fix a potential out-of-sync while decoding packets
          - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid
            skb mem leak
          - can: gs_usb: gs_can_open(): prevent memory leak (CVE-2019-19052)
          - can: dev: add missing of_node_put() after calling of_get_child_by_name()
          - can: mcba_usb: fix use-after-free on disconnect (CVE-2019-19529)
          - can: peak_usb: fix slab info leak (CVE-2019-19534)
          - configfs: fix a deadlock in configfs_symlink()
          - ALSA: usb-audio: More validations of descriptor units
          - ALSA: usb-audio: Simplify parse_audio_unit()
          - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
          - ALSA: usb-audio: Remove superfluous bLength checks
          - ALSA: usb-audio: Clean up check_input_term()
          - ALSA: usb-audio: Fix possible NULL dereference at
          - ALSA: usb-audio: remove some dead code
          - ALSA: usb-audio: Fix copy&paste error in the validator
          - usbip: Implement SG support to vhci-hcd and stub driver
          - HID: google: add magnemite/masterball USB ids
          - bpf: lwtunnel: Fix reroute supplying invalid dst
          - [x86] HID: intel-ish-hid: fix wrong error handling in
          - [powerpc] fix allow/prevent_user_access() when crossing segment
          - RDMA/mlx5: Clear old rate limit when closing QP
          - iw_cxgb4: fix ECN check on the passive accept
          - RDMA/siw: free siw_base_qp in kref release routine
          - RDMA/qedr: Fix reported firmware version
          - IB/core: Use rdma_read_gid_l2_fields to compare GID L2 fields
          - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
          - net/mlx5e: TX, Fix consumer index of error cqe dump
          - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
          - net/mlx5: fix memory leak in mlx5_fw_fatal_reporter_dump (CVE-2019-19047)
          - scsi: qla2xxx: fixup incorrect usage of host_byte
          - scsi: lpfc: Check queue pointer before use
          - scsi: ufs-bsg: Wake the device before sending raw upiu commands
          - RDMA/uverbs: Prevent potential underflow
          - bpf: Fix use after free in subprog's jited symbol removal
          - [armhf,arm64] net: stmmac: Fix the problem of tso_xmit
          - net: openvswitch: free vport unless register_netdevice() succeeds
          - scsi: lpfc: Honor module parameter lpfc_use_adisc
          - scsi: qla2xxx: Initialized mailbox to prevent driver load failure
          - bpf: Fix use after free in bpf_get_prog_name
          - iwlwifi: pcie: fix PCI ID 0x2720 configs that should be soc
          - iwlwifi: pcie: fix all 9460 entries for qnj
          - iwlwifi: pcie: 0x2720 is qu and 0x30DC is not
          - netfilter: nf_flow_table: set timeout before insertion into hashes
          - xsk: Fix registration of Rx-only sockets
          - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag
          - ipvs: don't ignore errors in case refcounting ip_vs module fails
          - ipvs: move old_secure_tcp into struct netns_ipvs
          - netfilter: nft_payload: fix missing check for matching length in offloads
          - RDMA/nldev: Skip counter if port doesn't match
          - bonding: fix unexpected IFF_BONDING bit unset
          - bonding: use dynamic lockdep key instead of subclass
          - macsec: fix refcnt leak in module exit routine
          - virt_wifi: fix refcnt leak in module exit routine
          - scsi: sd: define variable dif as unsigned int instead of bool
          - usb: gadget: composite: Fix possible double free memory bug
          - usb: gadget: configfs: fix concurrent issue between composite APIs
          - [armhf,arm64] usb: dwc3: remove the call trace of USBx_GFLADJ
          - [x86] perf/amd/ibs: Fix reading of the IBS OpData register and thus
            precise RIP validity
          - [x86] perf/amd/ibs: Handle erratum #420 only on the affected CPU family
          - [x86] perf/uncore: Fix event group support
          - USB: Skip endpoints with 0 maxpacket length
          - USB: ldusb: use unsigned size format specifiers
          - usbip: tools: Fix read_usb_vudc_device() error path handling
          - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
          - [arm64] RDMA/hns: Prevent memory leaks of eq->buf_list
          - scsi: qla2xxx: stop timer in shutdown path
          - sched/topology: Don't try to build empty sched domains
          - sched/topology: Allow sched_asym_cpucapacity to be disabled
          - nvme-multipath: fix possible io hang after ctrl reconnect
          - [amd64] fjes: Handle workqueue allocation failure
          - [arm64] net: hisilicon: Fix "Trying to free already-free IRQ"
          - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
          - [x86] iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire
          - mt76: dma: fix buffer unmap with non-linear skbs
          - drm/amdgpu/sdma5: do not execute 0-sized IBs (v2)
          - drm/sched: Set error to s_fence if HW job submission failed.
          - drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
          - drm/amd/display: do not synchronize "drr" displays
          - drm/amd/display: add 50us buffer as WA for pstate switch in active
          - drm/amd/display: Passive DP->HDMI dongle detection fix
          - drm/amd/display: dc.c:use kzalloc without test
          - SUNRPC: The TCP back channel mustn't disappear while requests are
          - SUNRPC: The RDMA back channel mustn't disappear while requests are
          - SUNRPC: Destroy the back channel when we destroy the host transport
          - [x86] hv_netvsc: Fix error handling in netvsc_attach()
          - efi/tpm: Return -EINVAL when determining tpm final events log size fails
          - efi: libstub/arm: Account for firmware reserved memory at the base of RAM
          - [x86] efi: Never relocate kernel below lowest acceptable address
          - [arm64] cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
          - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
          - [arm64] apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core
          - [arm64] Brahma-B53 is SSB and spectre v2 safe
          - [arm64] apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core
          - NFSv4: Don't allow a cached open with a revoked delegation
          - igb: Fix constant media auto sense switching when no cable is connected
          - e1000: fix memory leaks
          - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write()
          - [x86] pinctrl: cherryview: Fix irq_valid_mask calculation
          - timekeeping/vsyscall: Update VDSO data unconditionally
          - mm/filemap.c: don't initiate writeback if mapping has no dirty pages
          - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg
            is dead
          - [x86] ASoC: SOF: Intel: hda-stream: fix the CONFIG_ prefix missing
          - usbip: Fix free of unallocated memory in vhci tx
          - bonding: fix using uninitialized mode_lock
          - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
          - scsi: core: Handle drivers which set sg_tablesize to zero
          - ax88172a: fix information leak on short answers
          - devlink: disallow reload operation during device cleanup
          - ipmr: Fix skb headroom in ipmr_get_route().
          - net/smc: fix fastopen for non-blocking connect()
          - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules
          - slip: Fix memory leak in slip_open error path
          - tcp: remove redundant new line from tcp_event_sk_skb
          - devlink: Add method for time-stamp on reporter's dump
          - net/smc: fix refcount non-blocking connect() -part 2
          - ALSA: usb-audio: Fix missing error check at mixer resolution test
          - ALSA: usb-audio: not submit urb for stopped endpoint
          - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk()
          - ALSA: usb-audio: Fix incorrect size check for processing/extension units
          - Btrfs: fix log context list corruption after rename exchange operation
          - cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in
          - Input: ff-memless - kill timer in destroy() (CVE-2019-19524)
          - Input: synaptics-rmi4 - fix video buffer size
          - Input: synaptics-rmi4 - disable the relative position IRQ in the F12
          - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12)
          - Input: synaptics-rmi4 - clear IRQ enables for F54
          - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
          - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
          - IB/hfi1: Ensure r_tid_ack is valid before building TID RDMA ACK packet
          - IB/hfi1: Calculate flow weight based on QP MTU for TID RDMA
          - IB/hfi1: TID RDMA WRITE should not return IB_WC_RNR_RETRY_EXC_ERR
          - IB/hfi1: Ensure full Gen3 speed in a Gen4 system
          - IB/hfi1: Use a common pad buffer for 9B and 16B packets
          - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
          - [x86] quirks: Disable HPET on Intel Coffe Lake platforms
          - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable
          - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either
          - io_uring: ensure registered buffer import returns the IO length
          - [x86] drm/i915: update rawclk also on resume
          - [x86] Revert "drm/i915/ehl: Update MOCS table for EHL"
          - ntp/y2038: Remove incorrect time_t truncation
          - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros
          - mm: mempolicy: fix the wrong return value and potential pages leak of
          - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm()
          - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()
          - mm: slub: really fix slab walking for init_on_free
          - mm/memory_hotplug: fix try_offline_node()
          - mm/page_io.c: do not free shared swap slots
          - mmc: sdhci-of-at91: fix quirk2 overwrite
          - slcan: Fix memory leak in error path
          - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size()
          - block, bfq: deschedule empty bfq_queues not referred by any process
          - mm/memory_hotplug: don't access uninitialized memmaps in
          - mm/memory_hotplug: fix updating the node span
          - [arm64] uaccess: Ensure PAN is re-enabled after unhandled uaccess fault
          - fbdev: Ditch fb_edid_add_monspecs
          - net/mlx4_en: fix mlx4 ethtool -N insertion
          - net/mlx4_en: Fix wrong limitation for number of TX rings
          - net: rtnetlink: prevent underflows in do_setvfinfo()
          - net/sched: act_pedit: fix WARN() in the traffic path
          - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key
          - sfc: Only cancel the PPS workqueue if it exists
          - net/mlxfw: Verify FSM error code translation doesn't exceed array size
          - net/mlx5e: Fix set vf link state error flow
          - net/mlx5: Fix auto group size calculation
          - ipv6/route: return if there is no fib_nh_gw_family
          - taprio: don't reject same mqprio settings
          - net/ipv4: fix sysctl max for fib_multipath_hash_policy
          - net/mlx5e: Fix error flow cleanup in mlx5e_tc_tun_create_header_ipv4/6
          - net/mlx5e: Do not use non-EXT link modes in EXT mode
          - net/mlx5: Update the list of the PCI supported devices
          - vhost/vsock: split packets to send using multiple buffers
          - [arm64] gpio: max77620: Fixup debounce delays
          - fork: fix pidfd_poll()'s return type
          - nbd:fix memory leak in nbd_get_socket()
          - virtio_console: allocate inbufs in add_port() only if it is needed
          - virtio_ring: fix return code on DMA mapping fails
          - virtio_balloon: fix shrinker count
          - Revert "fs: ocfs2: fix possible null-pointer dereferences in
          - mm/memory_hotplug: don't access uninitialized memmaps in
          - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
          - drm/amdgpu: disable gfxoff when using register read interface
          - drm/amdgpu: disable gfxoff on original raven
          - drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs
          - [x86] drm/i915: Don't oops in dumb_create ioctl if we have no crtcs
          - [x86] drm/i915/pmu: "Frequency" is reported as accumulated cycles
          - [x86] drm/i915/userptr: Try to acquire the page lock around
          - Bluetooth: Fix invalid-free in bcsp_close()
          - ath10k: restore QCA9880-AR1A (v1) detection
          - ath10k: Fix HOST capability QMI incompatibility
          - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
          - ath9k_hw: fix uninitialized variable data
          - Revert "Bluetooth: hci_ll: set operational frequency earlier"
          - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
          - md/raid10: prevent access of uninitialized resync_pages offset
          - mdio_bus: Fix init if CONFIG_RESET_CONTROLLER=n
          - [armel,armhf] 8904/1: skip nomap memblocks while finding the lowmem/
            highmem boundary
          - [x86] insn: Fix awk regexp warnings
          - [x86] speculation: Fix incorrect MDS/TAA mitigation status
          - [x86] speculation: Fix redundant MDS mitigation message
          - nbd: prevent memory leak
          - [i386] stackframe: Repair 32-bit Xen PV
          - [i386] xen: Make xen_iret_crit_fixup() independent of frame layout
          - [i386] xen: Simplify ring check in xen_iret_crit_fixup()
          - [i386] doublefault: Fix stack canaries in the double fault handler
          - [i386] pti: Size initial_page_table correctly
          - [i386] cpu_entry_area: Add guard page for entry stack on 32bit
          - [i386] entry: Fix IRET exception
          - [i386] entry: Use %ss segment where required
          - [i386] entry: Move FIXUP_FRAME after pushing %fs in SAVE_ALL
          - [i386] entry: Unwind the ESPFIX stack earlier on exception entry
          - [i386] entry: Fix NMI vs ESPFIX
          - [i386] pti: Calculate the various PTI cpu_entry_area sizes correctly,
            make the CPU_ENTRY_AREA_PAGES assert precise
          - [i386] entry: Fix FIXUP_ESPFIX_STACK with user CR3
          - futex: Prevent robust futex exit race
          - ALSA: usb-audio: Fix NULL dereference at parsing BADD
          - nfc: port100: handle command failure cleanly
          - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
          - media: vivid: Fix wrong locking that causes race conditions on streaming
            stop (CVE-2019-18683)
          - media: usbvision: Fix invalid accesses after device disconnect
          - media: usbvision: Fix races among open, close, and disconnect
          - cpufreq: Add NULL checks to show() and store() methods of cpufreq
          - media: uvcvideo: Fix error path in control parsing failure
          - media: b2c2-flexcop-usb: add sanity checking (CVE-2019-15291)
          - media: cxusb: detect cxusb_ctrl_msg error in query
          - media: imon: invalid dereference in imon_touch_event
          - media: mceusb: fix out of bounds read in MCE receiver buffer
          - mm/slub.c: init_on_free=1 should wipe freelist ptr for bulk allocations
          - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
          - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
          - usb-serial: cp201x: support Mark-10 digital force gauge
          - USB: chaoskey: fix error case of a timeout
          - appledisplay: fix error handling in the scheduled work
          - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
          - USB: serial: mos7720: fix remote wakeup
          - USB: serial: mos7840: fix remote wakeup
          - USB: serial: option: add support for DW5821e with eSIM support
          - USB: serial: option: add support for Foxconn T77W968 LTE modules
          - [x86] staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
          - [powerpc*] 64s: support nospectre_v2 cmdline option
          - [powerpc*] book3s64: Fix link stack flush on context switch
          - [powerpc*] KVM: Book3S HV: Flush link stack on guest exit to host kernel
          - io_uring: async workers should inherit the user creds
          - net: separate out the msghdr copy from ___sys_{send,recv}msg()
          - net: disallow ancillary data for __sys_{send,recv}msg_file()
          - XArray: Fix xas_next() with a single entry at 0
          - [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
          - [x86] thunderbolt: Read DP IN adapter first two dwords in one go
          - [x86] thunderbolt: Fix lockdep circular locking depedency warning
          - [x86] ASoC: compress: fix unsigned integer overflow check
          - [arm64,armel,armhf] reset: Fix memory leak in reset_control_array_put()
          - [armhf] clk: samsung: exynos542x: Move G3D subsystem clocks to its
          - [armel,armhf] ASoC: kirkwood: fix external clock probe defer
          - [armel,armhf] ASoC: kirkwood: fix device remove ordering
          - [armhf] clk: samsung: exynos5420: Preserve PLL configuration during
          - [x86] pinctrl: cherryview: Allocate IRQ chip dynamic
          - [armhf] soc: imx: gpc: fix initialiser format
          - ASoC: SOF: ipc: Fix memory leak in sof_set_get_large_ctrl_data
          - [armhf] ASoC: ti: sdma-pcm: Add back the flags parameter for non
            standard dma names
          - [armhf] ASoC: rockchip: rockchip_max98090: Enable SHDN to fix headset
          - [arm64,armhf] clk: sunxi: Fix operator precedence in
          - [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
          - [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
          - bpf: Allow narrow loads of bpf_sysctl fields with offset > 0
          - bpf: Change size to u64 for bpf_map_{area_alloc, charge_init}()
          - [powerpc*] bpf: Fix tail call implementation
          - idr: Fix idr_get_next_ul race with idr_remove
          - idr: Fix integer overflow in idr_for_each_entry
          - idr: Fix idr_alloc_u32 on 32-bit systems
          - [amd64] ASoC: hdac_hda: fix race in device removal
          - [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
          - [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay
          - [armhf] net: fec: add missed clk_disable_unprepare in remove
          - netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICT
          - bridge: ebtables: don't crash when using dnat target in output chains
          - netfilter: nf_tables: bogus EOPNOTSUPP on basechain update
          - netfilter: nf_tables_offload: skip EBUSY on chain update
          - stacktrace: Don't skip first entry on noncurrent tasks
          - can: peak_usb: report bus recovery as well
          - [armhf] can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset
            on open
          - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid
            skb mem leak
          - can: rx-offload: can_rx_offload_offload_one(): do not increase the
            skb_queue beyond skb_queue_len_max
          - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors
            on queue overflow or OOM
          - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to
            propagate error value in case of errors
          - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on
          - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
          - [armhf] can: flexcan: increase error counters if skb enqueueing via
            can_rx_offload_queue_sorted() fails
          - [x86] tsc: Respect tsc command line paraemeter for clocksource_tsc_early
          - nvme-rdma: fix a segmentation fault during module unload
          - nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths
          - [arm64] watchdog: meson: Fix the wrong value of left time
          - ALSA: hda: hdmi - add Tigerlake support
          - [amd64] ASoC: SOF: topology: Fix bytes control size checks
          - drm/amdgpu: dont schedule jobs while in reset
          - [arm64,armhf] net/mlx5e: Fix eswitch debug print of max fdb flow
          - net/mlx5e: Use correct enum to determine uplink port
          - drm/amdgpu: register gpu instance before fan boost feature enablment
          - drm/amdgpu: add warning for GRBM 1-cycle delay issue in gfx9
          - [arm64,armhf] net: stmmac: gmac4: bitrev32 returns u32
          - [arm64,armhf] net: stmmac: xgmac: bitrev32 returns u32
          - [arm64,armhf] net: stmmac: xgmac: Fix TSA selection
          - [arm64,armhf] net: stmmac: xgmac: Disable Flow Control when 1 or more
            queues are in AV
          - ceph: return -EINVAL if given fsc mount option on kernel w/o support
          - mac80211: fix ieee80211_txq_setup_flows() failure path
          - mac80211: fix station inactive_time shortly after boot
          - block: drbd: remove a stray unlock in __drbd_send_protocol()
          - ice: fix potential infinite loop because loop counter being too small
          - iavf: initialize ITRN registers with correct values
          - [arm64,armel,armhf] usb: dwc2: use a longer core rest timeout in
          - [x86] staging: rtl8192e: fix potential use after free
          - staging: rtl8723bs: Drop ACPI device ids
          - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
          - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
          - [x86] mei: bus: prefix device names on bus with the bus name
          - [x86] mei: me: add comet point V device id
          - [x86] thunderbolt: Power cycle the router if NVM authentication fails
          - xfrm: Fix memleak on xfrm state destroy
          - [x86] fpu: Don't cache access to fpu_fpregs_owner_ctx (CVE-2019-19602)
          - macvlan: schedule bc_work even if error
          - mdio_bus: don't use managed reset-controller
          - net: macb: add missed tasklet_kill
          - net: psample: fix skb_over_panic
          - net: sched: fix `tc -s class show` no bstats on class with nolock
          - openvswitch: fix flow command message size
          - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
          - slip: Fix use-after-free Read in slip_open
          - sctp: cache netns in sctp_ep_common
          - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
          - openvswitch: remove another BUG_ON()
          - net/tls: take into account that bpf_exec_tx_verdict() may free the
          - net: skmsg: fix TLS 1.3 crash with full sk_msg
          - tipc: fix link name length check
          - ext4: add more paranoia checking in ext4_expand_extra_isize handling
          - HID: core: check whether Usage Page item is after Usage ID items
          - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
          - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input
          - [armhf] net: fec: fix clock count mis-match
        [ Ben Hutchings ]
        * [amd64] sound/soc/sof: Disable SND_SOC_SOF_ACPI,
          SND_SOC_SOF_{BAYTRAIL,BROADWELL}_SUPPORT (Closes: #945914)
        * [amd64] sound/soc/intel/boarss: Disable Broxton drivers again
        * [i386] sound/soc: Enable same SOF drivers as on amd64
        * Bump ABI to 3
    • Sophie Brun's avatar
      Import Upstream version 5.3.15 · 5aa227b4
      Sophie Brun authored
  4. 20 Nov, 2019 1 commit
    • Ben Hutchings's avatar
      Import Debian changes 5.3.9-3 · fa1f3e12
      Ben Hutchings authored
      linux (5.3.9-3) unstable; urgency=medium
        * [arm64,armhf,powerpc*,s390x] KVM: Add more exports to ABI ignore list
          (fixes FTBFS)
      linux (5.3.9-2) unstable; urgency=medium
        * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135):
          - x86/msr: Add the IA32_TSX_CTRL MSR
          - x86/cpu: Add a helper function x86_read_arch_cap_msr()
          - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
          - x86/speculation/taa: Add mitigation for TSX Async Abort
          - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
          - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
          - x86/tsx: Add "auto" option to the tsx= cmdline parameter
          - x86/speculation/taa: Add documentation for TSX Async Abort
          - x86/tsx: Add config options to set tsx=on|off|auto
          - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
          TSX is now disabled by default; see
        * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change
          (aka iTLB multi-hit, CVE-2018-12207):
          - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
          - x86/bugs: Add ITLB_MULTIHIT bug infrastructure
          - x86/cpu: Add Tremont to the cpu vulnerability whitelist
          - cpu/speculation: Uninline and export CPU mitigations helpers
          - kvm: mmu: ITLB_MULTIHIT mitigation
          - kvm: Add helper function for creating VM worker threads
          - kvm: x86: mmu: Recovery of shattered NX large pages
          - Documentation: Add ITLB_MULTIHIT documentation
        * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155):
          - drm/i915: Rename gen7 cmdparser tables
          - drm/i915: Disable Secure Batches for gen6+
          - drm/i915: Remove Master tables from cmdparser
          - drm/i915: Add support for mandatory cmdparsing
          - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
          - drm/i915: Allow parsing of unsized batches
          - drm/i915: Add gen9 BCS cmdparsing
          - drm/i915/cmdparser: Use explicit goto for error paths
          - drm/i915/cmdparser: Add support for backward jumps
          - drm/i915/cmdparser: Ignore Length operands during command matching
          - drm/i915/cmdparser: Fix jump whitelist clearing
        * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154):
          - drm/i915: Lower RM timeout to avoid DSI hard hangs
          - drm/i915/gen8+: Add RC6 CTX corruption WA
  5. 11 Nov, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 5.3.9-1 · d87c2208
      Ben Hutchings authored
      linux (5.3.9-1) unstable; urgency=medium
        * New version hopefully closes: #942881
        * New upstream stable update:
          - drm: Free the writeback_job when it with an empty fb
          - drm: Clear the fence pointer when writeback job signaled
          - [armhf] clk: ti: dra7: Fix mcasp8 clock bits
          - [armhf] dts: Fix wrong clocks for dra7 mcasp
          - nvme-pci: Fix a race in controller removal
          - scsi: ufs: skip shutdown if hba is not powered
          - scsi: megaraid: disable device when probe failed after enabled device
          - scsi: qla2xxx: Silence fwdump template message
          - scsi: qla2xxx: Fix unbound sleep in fcport delete path.
          - scsi: qla2xxx: Fix stale mem access on driver unload
          - scsi: qla2xxx: Fix N2N link reset
          - scsi: qla2xxx: Fix N2N link up fail
          - [armhf] dts: Fix gpio0 flags for am335x-icev2
          - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43
          - [armhf] OMAP2+: Add missing LCDC midlemode for am335x
          - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage()
          - nvme-tcp: fix wrong stop condition in io_work
          - nvme-pci: Save PCI state before putting drive into deepest state
          - nvme: fix an error code in nvme_init_subsystem()
          - nvme-rdma: Fix max_hw_sectors calculation
          - nvme: Added QUIRKs for ADATA XPG SX8200 Pro 512GB
          - nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T
          - nvme-rdma: fix possible use-after-free in connect timeout
          - blk-mq: honor IO scheduler for multiqueue devices
          - xen/efi: Set nonblocking callbacks
          - loop: change queue block size to match when using DIO
          - nl80211: fix null pointer dereference
          - mac80211: fix txq null pointer dereference
          - netfilter: nft_connlimit: disable bh on garbage collection
          - [armhf,arm64] net: stmmac: xgmac: Not all Unicast addresses may be
          - [armhf,arm64] net: stmmac: dwmac4: Always update the MAC Hash Filter
          - [armhf,arm64] net: stmmac: Correctly take timestamp for PTPv2
          - [armhf,arm64] net: stmmac: Do not stop PHY if WoL is enabled
          - drm/amdgpu: fix multiple memory leaks in acp_hw_init
          - drm/amd/display: memory leak
          - [mips*el/loongson-*] Fix the link time qualifier of 'serial_exit()'
          - [arm64] net: hisilicon: Fix usage of uninitialized variable in function
          - [armhf,arm64] net: stmmac: Avoid deadlock on suspend/resume
          - [s390x] mm: fix -Wunused-but-set-variable warnings
          - r8152: Set macpassthru in reset_resume callback
          - net: phy: allow for reset line to be tied to a sleepy GPIO controller
          - net: phy: fix write to mii-ctrl1000 register
          - vfs: Convert filldir[64]() from __put_user() to unsafe_put_user()
          - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
            (regression in 4.17)
          - vfs: Make filldir[64]() verify the directory entry filename is valid
          - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over
            to it
          - vfs: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
          - net_sched: fix backward compatibility for TCA_KIND (regression in 5.3.4)
          - net_sched: fix backward compatibility for TCA_ACT_KIND (regression in
          - libata/ahci: Fix PCS quirk application (regression in 5.3.4)
          - md/raid0: fix warning message for parameter default_layout
          - Revert "drm/radeon: Fix EEH during kexec" (regression in 5.3.5)
          - ocfs2: fix panic due to ocfs2_wq is null
          - nvme-pci: Set the prp2 correctly when using more than 4k page
          - ipv4: fix race condition between route lookup and invalidation
          - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
          - net: avoid potential infinite loop in tc_ctl_action()
          - [hppa,m68k] net: i82596: fix dma_alloc_attr for sni_82596
          - net: ipv6: fix listify ip6_rcv_finish in case of forwarding
          - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume
          - rxrpc: Fix possible NULL pointer access in ICMP handling
          - sched: etf: Fix ordering of packets with same txtime
          - sctp: change sctp_prot .no_autobind with true
          - net: aquantia: temperature retrieval fix
          - net: aquantia: when cleaning hw cache it should be toggled
          - net: aquantia: do not pass lro session with invalid tcp checksum
          - net: aquantia: correctly handle macvlan and multicast coexistence
          - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
          - net: phy: micrel: Update KSZ87xx PHY name
          - net: avoid errors when trying to pop MLPS header on non-MPLS packets
          - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions
          - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
          - net: ethernet: broadcom: have drivers select DIMLIB as needed
          - net: phy: Fix "link partner" information disappear issue
          - rxrpc: use rcu protection while reading sk->sk_user_data
          - io_uring: fix bad inflight accounting for SETUP_IOPOLL|SETUP_SQTHREAD
          - io_uring: Fix corrupted user_data
          - USB: legousbtower: fix memleak on disconnect
          - ALSA: hda/realtek - Add support for ALC711
          - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
          - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
          - ALSA: hda - Force runtime PM on Nvidia HDMI codecs
          - USB: serial: ti_usb_3410_5052: fix port-close races
          - USB: ldusb: fix memleak on disconnect
          - USB: usblp: fix use-after-free on disconnect
          - USB: ldusb: fix read info leaks
          - binder: Don't modify VMA bounds in ->mmap handler
          - [mips*] tlbex: Fix build_restore_pagemask KScratch restore
          - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
          - [s390x] scsi: zfcp: fix reaction on bit error threshold notification
          - scsi: sd: Ignore a failure to sync cache due to lack of authorization
          - scsi: core: save/restore command resid for error handling
          - scsi: core: try to get module before removing device
          - scsi: ch: Make it possible to open a ch device multiple times again
          - Revert "Input: elantech - enable SMBus on new (2018+) systems"
            (regression in 5.3)
          - Input: synaptics-rmi4 - avoid processing unknown IRQs
          - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
          - ACPI: NFIT: Fix unlock on error in scrub_show()
          - iwlwifi: pcie: change qu with jf devices to use qu configuration
          - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133)
          - mac80211: Reject malformed SSID elements
          - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
          - drm/ttm: Restore ttm prefaulting
          - [armhf,arm64] drm/panfrost: Handle resetting on timeout better
          - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
          - drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for pipe sync
          - [x86] drm/i915/userptr: Never allow userptr into the mappable GGTT
          - [x86] drm/i915: Favor last VBT child device with conflicting AUX ch/DDC
          - drm/amdgpu/vce: fix allocation size in enc ring test
          - drm/amdgpu/vcn: fix allocation size in enc ring test
          - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
          - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
          - drm/amdgpu: user pages array memory leak fix
          - drivers/base/memory.c: don't access uninitialized memmaps in
          - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
          - io_uring: Fix broken links with offloading
          - io_uring: Fix race for sqes with userspace
          - io_uring: used cached copies of sq->dropped and cq->overflow
          - [armhf] mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
          - mm/memory-failure.c: don't access uninitialized memmaps in
          - mm/slub: fix a deadlock in show_slab_objects()
          - mm/page_owner: don't access uninitialized memmaps when reading
          - mm/memunmap: don't access uninitialized memmap in memunmap_pages()
          - mm: memcg/slab: fix panic in __free_slab() caused by premature memcg
            pointer release
          - mm, compaction: fix wrong pfn handling in __reset_isolation_pfn()
          - mm: memcg: get number of pages on the LRU list in memcgroup base on
          - mm: memblock: do not enforce current limit for memblock_phys* family
          - hugetlbfs: don't access uninitialized memmaps in
          - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if
            mmaped more than once
          - zram: fix race between backing_dev_show and backing_dev_store
          - [s390x] zcrypt: fix memleak at release
          - [s390x] kaslr: add support for R_390_GLOB_DAT relocation type
          - lib/vdso: Make clock_getres() POSIX compliant again
          - [hppa] Fix vmap memory leak in ioremap()/iounmap()
          - [arm64] KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM is set
          - [arm64] Avoid Cavium TX2 erratum 219 when switching TTBR
          - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT
          - [arm64] Allow CAVIUM_TX2_ERRATUM_219 to be selected
          - CIFS: avoid using MID 0xFFFF
          - cifs: Fix missed free operations
          - CIFS: Fix use after free of file info structures
          - perf/aux: Fix AUX output stopping
          - tracing: Fix race in perf_trace_buf initialization
          - fs/dax: Fix pmd vs pte conflict detection
          - dm cache: fix bugs when a GFP_NOWAIT allocation fails
          - [riscv64] irqchip/sifive-plic: Switch to fasteoi flow
          - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area
          - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
          - [x86] hyperv: Make vapic support x2apic mode
          - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions
          - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up
          - [arm64] pinctrl: armada-37xx: swap polarity on LED group
          - btrfs: block-group: Fix a memory leak due to missing
          - Btrfs: add missing extents release on file extent cluster relocation
          - btrfs: don't needlessly create extent-refs kernel thread
          - Btrfs: fix qgroup double free after failure to reserve metadata for
          - Btrfs: check for the full sync flag while holding the inode lock during
          - btrfs: tracepoints: Fix wrong parameter order for qgroup events
          - btrfs: tracepoints: Fix bad entry members of qgroup events
          - [ppc64*] KVM: Book3S HV: XIVE: Ensure VP isn't already in use
          - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
          - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
          - ceph: just skip unrecognized info in ceph_reply_info_extra
          - xen/netback: fix error path of xenvif_connect_data()
          - PCI: PM: Fix pci_power_up()
          - opp: of: drop incorrect lockdep_assert_held()
          - of: reserved_mem: add missing of_node_put() for proper ref-counting
          - blk-rq-qos: fix first node deletion of rq_qos_del()
          - io_uring: fix up O_NONBLOCK handling for sockets
          - dm snapshot: introduce account_start_copy() and account_end_copy()
          - dm snapshot: rework COW throttling to fix deadlock
          - Btrfs: fix inode cache block reserve leak on failure to allocate data
          - btrfs: qgroup: Always free PREALLOC META reserve in
          - iio: fix center temperature of bmc150-accel-core
          - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
          - perf tests: Avoid raising SEGV using an obvious NULL dereference
          - perf map: Fix overlapped map handling
          - perf script brstackinsn: Fix recovery from LBR/binary mismatch
          - perf jevents: Fix period for Intel fixed counters
          - perf tools: Propagate get_cpuid() error
          - perf annotate: Propagate perf_env__arch() error
          - perf annotate: Fix the signedness of failure returns
          - perf annotate: Propagate the symbol__annotate() error return
          - perf annotate: Fix arch specific ->init() failure errors
          - perf annotate: Return appropriate error code for allocation failures
          - perf annotate: Don't return -1 for error when doing BPF disassembly
          - staging: rtl8188eu: fix null dereference when kzalloc fails
          - RDMA/hfi1: Prevent memory leak in sdma_init
          - RDMA/iw_cxgb4: fix SRQ access from dump_qp()
          - RDMA/iwcm: Fix a lock inversion issue
          - [x86] HID: hyperv: Use in-place iterator API in the channel callback
          - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
          - [arm64] cpufeature: Effectively expose FRINT capability to userspace
          - [arm64] Fix incorrect irqflag restore for priority masking for compat
          - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1
          - [riscv64] serial/sifive: select SERIAL_EARLYCON
          - RDMA/core: Fix an error handling path in 'res_get_common_doit()'
          - RDMA/cm: Fix memory leak in cm_add/remove_one
          - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path
          - RDMA/mlx5: Do not allow rereg of a ODP MR
          - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu
          - RDMA/mlx5: Add missing synchronize_srcu() for MW cases
          - [arm64] gpio: max77620: Use correct unit for debounce times
          - fs: cifs: mute -Wunused-const-variable message
          - [arm64] vdso32: Fix broken compat vDSO build warnings
          - [arm64] vdso32: Detect binutils support for dmb ishld
          - serial: mctrl_gpio: Check for NULL pointer
          - [armhf] serial: 8250_omap: Fix gpio check for auto RTS/CTS
          - [arm64] vdso32: Don't use KBUILD_CPPFLAGS unconditionally
          - efi/cper: Fix endianness of PCIe class code
          - [x86] efi: Do not clean dummy variable in kexec path
          - [mips*] include: Mark __cmpxchg as __always_inline
          - [riscv64] avoid kernel hangs when trapped in BUG()
          - [riscv64] avoid sending a SIGTRAP to a user thread trapped in WARN()
          - [riscv64] Correct the handling of unexpected ebreak in do_trap_break()
          - [x86] xen: Return from panic notifier
          - ocfs2: clear zero in unaligned direct IO
          - fs: ocfs2: fix possible null-pointer dereferences in
          - fs: ocfs2: fix a possible null-pointer dereference in
          - fs: ocfs2: fix a possible null-pointer dereference in
          - btrfs: silence maybe-uninitialized warning in clone_range
          - [arm64] armv8_deprecated: Checking return value for memory allocation
          - [x86] cpu: Add Comet Lake to the Intel CPU models header
          - sched/fair: Scale bandwidth quota and period without losing quota/period
            ratio precision
          - sched/vtime: Fix guest/system mis-accounting on task switch
          - perf/core: Rework memory accounting in perf_mmap()
          - perf/core: Fix corner case in perf_rotate_context()
          - [x86] perf/amd: Change/fix NMI latency mitigation to use a timestamp
          - drm/amdgpu: fix memory leak
          - [mips*] include: Mark __xchg as __always_inline
          - [mips*] fw: sni: Fix out of bounds init of o32 stack
          - [s390x] cio: fix virtio-ccw DMA without PV
          - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
          - nbd: fix possible sysfs duplicate warning
          - NFSv4: Fix leak of clp->cl_acceptor string
          - SUNRPC: fix race to sk_err after xs_error_report
          - [s390x] uaccess: avoid (false positive) compiler warnings
          - tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
          - perf annotate: Fix multiple memory and file descriptor leaks
          - perf/aux: Fix tracking of auxiliary trace buffer allocation
          - USB: legousbtower: fix a signedness bug in tower_probe()
          - nbd: verify socket is supported during setup
          - [arm64] dts: qcom: Add Lenovo Miix 630
          - [arm64] dts: qcom: Add HP Envy x2
          - [arm64] dts: qcom: Add Asus NovaGo TP370QL
          - rtw88: Fix misuse of GENMASK macro
          - [s390x] pci: fix MSI message data
          - thunderbolt: Correct path indices for PCIe tunnel
          - thunderbolt: Use 32-bit writes when writing ring producer/consumer
          - fuse: flush dirty data/metadata before non-truncate setattr
          - fuse: truncate pending writes on O_TRUNC
          - ALSA: bebob: Fix prototype of helper function to return negative value
          - ALSA: timer: Fix mutex deadlock at releasing card
          - ALSA: hda/realtek - Fix 2 front mics of codec 0x623
          - ALSA: hda/realtek - Add support for ALC623
          - ath10k: fix latency issue for QCA988x
          - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
            segments") (regression in 5.2)
          - nl80211: fix validation of mesh path nexthop
          - USB: gadget: Reject endpoints with 0 maxpacket value
          - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
            virt_boundary_mask to avoid SG overflows") (regression in 5.2)
          - USB: ldusb: fix ring-buffer locking
          - USB: ldusb: fix control-message timeout
          - usb: xhci: fix Immediate Data Transfer endianness
          - USB: serial: whiteheat: fix potential slab corruption
          - USB: serial: whiteheat: fix line-speed endianness
          - xhci: Fix use-after-free regression in xhci clear hub TT implementation
          - scsi: qla2xxx: Fix partial flash write of MBI
          - scsi: target: cxgbit: Fix cxgbit_fw4_ack()
          - [x86] HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
          - HID: Fix assumption that devices have inputs
          - HID: fix error message in hid_open_report()
          - HID: logitech-hidpp: split g920_get_config()
          - HID: logitech-hidpp: rework device validation
          - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
          - [s390x] unwind: fix mixing regs and sp
          - [s390x] cmm: fix information leak in cmm_timeout_handler()
          - [s390x] idle: fix cpu idle time calculation
          - IB/hfi1: Avoid excessive retry for TID RDMA READ request
          - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default
          - [arm64] cpufeature: Enable Qualcomm Falkor/Kryo errata 1003
          - virtio_ring: fix stalls for packed rings
          - rtlwifi: rtl_pci: Fix problem of too small skb->len
          - rtlwifi: Fix potential overflow on P2P code
          - [x86] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
          - [arm64] dmaengine: qcom: bam_dma: Fix resource leak
          - [arm64] dmaengine: tegra210-adma: fix transfer failure
          - [armhf] dmaengine: imx-sdma: fix size check for sdma script_number
          - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
          - drm/amdgpu/gmc10: properly set BANK_SELECT and FRAGMENT_SIZE
          - [x86] drm/i915: Fix PCH reference clock for FDI on HSW/BDW
          - drm/amdgpu/gfx10: update gfx golden settings
          - drm/amdgpu/powerplay/vega10: allow undervolting in p7
          - drm/amdgpu: Fix SDMA hang when performing VKexample test
          - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
          - io_uring: ensure we clear io_kiocb->result before each issue
          - [x86] iommu/vt-d: Fix panic after kexec -p for kdump
          - batman-adv: Avoid free/alloc race when handling OGM buffer
          - llc: fix sk_buff leak in llc_sap_state_process()
          - llc: fix sk_buff leak in llc_conn_service()
          - rxrpc: Fix call ref leak
          - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
          - rxrpc: Fix trace-after-put looking at the put peer record
          - NFC: pn533: fix use-after-free and memleaks
          - bonding: fix potential NULL deref in bond_update_slave_arr
          - netfilter: conntrack: avoid possible false sharing
          - net: usb: sr9800: fix uninitialized local variable
          - sch_netem: fix rcu splat in netem_enqueue()
          - net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
          - iwlwifi: exclude GEO SAR support for 3168
          - sched/fair: Fix low cpu usage with high throttling by removing expiration
            of cpu-local slices
          - ALSA: usb-audio: DSD auto-detection for Playback Designs
          - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel
          - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface
          - RDMA/mlx5: Use irq xarray locking for mkey_table
          - sched/fair: Fix -Wunused-but-set-variable warnings
          - [powerpc*] powernv: Fix CPU idle to be called with IRQs disabled
          - Revert "ALSA: hda: Flush interrupts on disabling" (regression in 5.3.4)
        [ Ben Hutchings ]
        * debian/bin/gencontrol_signed.py: Fix code style error
        * debian/bin/gencontrol.py: Skip linux-perf lintian-overrides if we won't
          build it
        * debian/bin/gencontrol{,_signed}.py: Use vars parameter instead of self.vars
        * debian/bin/gencontrol{,_signed}.py: Use %(name)s to format template vars
        * debian/.gitignore, debian/rules: Generalise patterns for generated files
        * gencontrol: Generalise substitution of debhelper config template
        * Add maint scripts to meta-packages to convert doc directories to symlinks
          (Closes: #942861)
        * debian/lib/python/debian_linux/utils.py: Use 'with' to manage file handles
        * debian/lib/python/debian_linux/utils.py: Store file mode for templates
        * Copy template file permissions to output files
        * debian/templates/headers.postinst.in: Set executable for consistency
        * debian/README.source: Document code signing and how to test it
        * debian/tests/control: Mark python test as superficial
        * [arm64] linux-headers: Disable check for a 32-bit compiler
          (Closes: #943953):
          - arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option
          - debian/bin/gencontrol.py: Optionally define $(CROSS_COMPILE_COMPAT) make
          - Enable COMPAT_VDSO and set $(CROSS_COMPILE_COMPAT) instead of setting
        * crypto: Enable PKCS8_PRIVATE_KEY_PARSER as module (Closes: #924705)
        * Bump ABI to 2
        * [arm64] atmel_mxt_ts: Disable TOUCHSCREEN_ATMEL_MXT_T37 to avoid V4L
        * random: try to actively add entropy rather than passively wait for it
        [ Bastian Blank ]
        * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341)
        [ Thomas W ]
        * [x86] Enable missing modules and setting:
        [ Alper Nebi Yasak ]
        * [arm64] udeb: Add i2c-rk3x to i2c-modules
        * [arm64,armhf] udeb: Add rockchip-io-domain to kernel-image
        * udeb: Add atmel_mxt_ts to input-modules
        [ Noah Meyerhans ]
        * drivers/net/ethernet/amazon: Backport driver fixes from v5.4-rc5
        [ Niv Sardi ]
        * KEYS: Make use of platform keyring for module signature verify
          (closes: #935945)
    • Sophie Brun's avatar
      Import Upstream version 5.3.9 · ec0c7b18
      Sophie Brun authored
  6. 21 Oct, 2019 2 commits
    • Salvatore Bonaccorso's avatar
      Import Debian changes 5.3.7-1 · 7cc2496b
      Salvatore Bonaccorso authored
      linux (5.3.7-1) unstable; urgency=medium
        * New upstream stable update:
          - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055)
          - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054)
          - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052)
          - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053)
          - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056)
          - nl80211: validate beacon head (CVE-2019-16746)
        [ Aurelien Jarno ]
        * [riscv64] Enable SOC_SIFIVE. Do not select CLK_SIFIVE,
          SERIAL_SIFIVE_CONSOLE as they are selected by SOC_SIFIVE.
        * [riscv64] Install DTBS using dtbs_install target.
        * [riscv64] Enable SPI_SIFIVE.
        * [riscv64] Enable SERIAL_EARLYCON_RISCV_SBI.
        * [riscv64] Enable MMC, MMC_SPI.
        * [riscv64] udeb: Add mmc-core-modules and mmc-modules.
        * [riscv64] Fix memblock reservation for device tree blob.
        * [riscv64] Clear load reservations while restoring hart contexts.
        [ Ben Hutchings ]
        * [mips*] Revert "Only define MAX_PHYSMEM_BITS on Loongson-3"
        * KEYS: Re-enable SECONDARY_TRUSTED_KEYRING, dropped in 5.2.6-1 by
          mis-merge (Closes: #935945)
        [ John Paul Adrian Glaubitz ]
        [ Salvatore Bonaccorso ]
        * RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075)
        * ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
        [ Romain Perier ]
        * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530)
        [ Héctor Orón Martínez ]
        * [x86] Enable ASoC: SOF sound driver (Closes: #940726)
      linux (5.3.2-1~exp1) experimental; urgency=medium
        * New upstream release: https://kernelnewbies.org/Linux_5.3
          - [armhf] select the dma-noncoherent symbols for all swiotlb builds
            (fixes FTBFS)
        * New upstream stable update:
        [ Ben Hutchings ]
        * [hppa,sparc64] udeb: Delete osst from scsi-modules (fixes FTBFS)
        * Compile with gcc-9 on all architectures
        * Set KCFLAGS make variable instead of CFLAGS_{KERNEL,MODULE}
        * linux-image-dbg: Delete ./ from source file names in debug info
        * debian/rules: Make maintainerclean delete (almost) everything clean does
        * debian/rules: Make maintainerclean delete everything gencontrol.py creates
        * debian/.gitignore: Synchronise some patterns with clean target
        * Add the metapackages previously built by src:linux-latest:
          - Add template and NEWS files from linux-latest
          - Rename added templates to be consistent with existing templates
          - Fix some inconsistencies in metapackage templates
          - Define pkg.linux.nometa build profile to exclude the metapackages
          - Build the metapackages by default (Closes: #583849, #941042)
          - Make linux-perf an arch-dependent package
          - Require metapackage dependencies to be the same version, and link doc
        [ Uwe Kleine-König ]
        * [arm64] enable I2C_QCOM_GENI for Lenovo C630
      linux (5.3~rc5-1~exp2) experimental; urgency=medium
        * tools/perf: pmu-events: Fix reproducibility
        * Fix FTBFS:
          - Update "kbuild: Make the toolchain variables easily overwritable" for 5.3
          - udeb: Make nic-wireless-modules depend on crypto-modules
        * debian/control: Remove build profile qual for rsync, needed for
        * debian/changelog: Move older entries to changelog.old
      linux (5.3~rc5-1~exp1) experimental; urgency=medium
        * New upstream release candidate
        [ Ben Hutchings ]
        * aufs: Update support patchset to aufs5.x-rcN 20190805
        * [rt] Disable until it is updated for 5.3 or later
        * [powerpcspe] Remove all support for powerpcspe, which is dead upstream
        * linux-headers: Change per-flavour Makefile to match upstream out-of-tree
        * debian/bin/genorig.py: Import debian.deb822 instead of deprecated deb822
        * [arm64] Use armhf cross-compiler for building compat vDSO
        * Documentation: Fix broken link to CIPSO draft
        [ Lubomir Rintel ]
        * udeb: input-modules: Add OLPC AP-SP keyboard
        * [armhf] Add camera, EC and battery drivers for OLPC XO-1.75 laptop.
    • Sophie Brun's avatar
      Import Upstream version 5.3.7 · fbc747c7
      Sophie Brun authored
  7. 27 Sep, 2019 2 commits
    • Salvatore Bonaccorso's avatar
      Import Debian changes 5.2.17-1 · e14e3dbf
      Salvatore Bonaccorso authored
      linux (5.2.17-1) unstable; urgency=medium
        * New upstream stable update:
          - KEYS: trusted: allow module init if TPM is inactive or deactivated
          - seq_file: fix problem when seeking mid-record
          - mm/hmm: fix bad subpage pointer in try_to_unmap_one
          - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
            MPOL_MF_STRICT were specified
          - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
          - mm/z3fold.c: fix z3fold_destroy_pool() ordering
          - mm/z3fold.c: fix z3fold_destroy_pool() race condition
          - mm/memcontrol.c: fix use after free in mem_cgroup_iter()
          - mm/usercopy: use memory range to be accessed for wraparound check
          - mm, vmscan: do not special-case slab reclaim when watermarks are boosted
          - [armhf,arm64] cpufreq: schedutil: Don't skip freq update when limits
          - drm/amdgpu: fix gfx9 soft recovery
          - drm/nouveau: Only recalculate PBN/VCPI on mode/connector changes
          - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side
          - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360
          - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
          - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
          - [x86] ALSA: hda - Apply workaround for another AMD chip 1022:1487
          - ALSA: hda - Fix a memory leak bug
          - ALSA: hda - Add a generic reboot_notify
          - ALSA: hda - Let all conexant codec enter D3 when rebooting
          - HID: holtek: test for sanity of intfdata
          - HID: hiddev: avoid opening a disconnected device
          - HID: hiddev: do cleanup in failure of opening a device
          - Input: kbtab - sanity check for endpoint type
          - Input: iforce - add sanity checks
          - net: usb: pegasus: fix improper read if get_registers() fail
          - bpf: fix access to skb_shared_info->gso_segs
          - netfilter: ebtables: also count base chain policies
          - [riscv64] Correct the initialized flow of FP register
          - [riscv64] Make __fstate_clean() work correctly.
          - [armhf] Revert "i2c: imx: improve the error handling in
          - blk-mq: move cancel of requeue_work to the front of blk_exit_queue
          - io_uring: fix manual setup of iov_iter for fixed buffers
          - [arm64] RDMA/hns: Fix sg offset non-zero issue
          - IB/mlx5: Replace kfree with kvfree
          - dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable}
          - [x87] platform: intel_pmc_core: Add ICL-NNPI support to PMC Core
          - mm/hmm: always return EBUSY for invalid ranges in
          - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe
            table fail
          - [armhf] irqchip/irq-imx-gpcv2: Forward irq type to parent
          - f2fs: fix to read source block before invalidating it
          - tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC()
          - perf header: Fix divide by zero error if f_header.attr_size==0
          - perf header: Fix use of unitialized value warning
          - RDMA/qedr: Fix the hca_type and hca_rev returned in device attributes
          - ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
          - libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
          - Btrfs: fix deadlock between fiemap and transaction commits
          - scsi: hpsa: correct scsi command status issue after reset
          - scsi: qla2xxx: Fix possible fcport null-pointer dereferences
          - drm/amdkfd: Fix byte align on VegaM
          - drm/amd/powerplay: fix null pointer dereference around dpm state relates
          - drm/amdgpu: fix error handling in amdgpu_cs_process_fence_dep
          - drm/amdgpu: fix a potential information leaking bug
          - ata: libahci: do not complain in case of deferred probe
          - [riscv64] Fix perf record without libelf support
          - [arm64] Lower priority mask for GIC_PRIO_IRQON
          - [arm64] unwind: Prohibit probing on return_address()
          - IB/core: Add mitigation for Spectre V1 (CVE-2017-5753)
          - IB/mlx5: Fix MR registration flow to use UMR properly
          - RDMA/restrack: Track driver QP types in resource tracker
          - IB/mad: Fix use-after-free in ib mad completion handling
          - RDMA/mlx5: Release locks during notifier unregister
          - [arm64] drm: msm: Fix add_gpu_components
          - [arm64] RDMA/hns: Fix error return code in hns_roce_v1_rsv_lp_qp()
          - [armhf] drm/exynos: fix missing decrement of retry counter
          - [arm64] kprobes: Recover pstate.D in single-step exception handler
          - [arm64] Make debug exception handlers visible from RCU
          - Revert "kmemleak: allow to coexist with fault injection"
          - ocfs2: remove set but not used variable 'last_hash'
          - page flags: prioritize kasan bits over last-cpuid
          - asm-generic: fix -Wtype-limits compiler warnings
          - tpm: tpm_ibm_vtpm: Fix unallocated banks
          - [arm64] KVM: regmap: Fix unexpected switch fall-through
          - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider *
          - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor
          - USB: core: Fix races in character device registration and deregistraion
          - usb: cdc-acm: make sure a refcount is taken early enough
          - USB: CDC: fix sanity checks in CDC union parser
          - USB: serial: option: add D-Link DWM-222 device ID
          - USB: serial: option: Add support for ZTE MF871A
          - USB: serial: option: add the BroadMobi BM818 card
          - USB: serial: option: Add Motorola modem UARTs
          - usb: setup authorized_default attributes using usb_bus_notify
          - netfilter: conntrack: Use consistent ct id hash calculation
          - iwlwifi: Add support for SAR South Korea limitation
          - Input: psmouse - fix build error of multiple definition
          - bnx2x: Fix VF's VLAN reconfiguration in reload.
          - bonding: Add vlan tx offload to hw_enc_features
          - [armhf,arm64] net: dsa: Check existence of .port_mdb_add callback before
            calling it
          - net/mlx4_en: fix a memory leak bug
          - net/packet: fix race in tpacket_snd()
          - net: sched: sch_taprio: fix memleak in error path for sched list parse
          - sctp: fix memleak in sctp_send_reset_streams
          - sctp: fix the transport error_count check
          - team: Add vlan tx offload to hw_enc_features
          - tipc: initialise addr_trail_end when setting node addresses
          - xen/netback: Reset nr_frags before freeing skb
          - net/mlx5e: Only support tx/rx pause setting for port owner
          - bnxt_en: Fix VNIC clearing logic for 57500 chips.
          - bnxt_en: Improve RX doorbell sequence.
          - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
          - bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command
          - bnxt_en: Use correct src_fid to determine direction of the flow
          - bnxt_en: Fix to include flow direction in L2 key
          - net sched: update skbedit action for batched events operations
          - netdevsim: Restore per-network namespace accounting for fib entries
          - net/mlx5e: ethtool, Avoid setting speed to 56GBASE when autoneg off
          - net/mlx5e: Fix false negative indication on tx reporter CQE recovery
          - net/mlx5e: Remove redundant check in CQE recovery flow of tx reporter
          - net/mlx5e: Use flow keys dissector to parse packets for ARFS
          - net/tls: prevent skb_orphan() from leaking TLS plain text with offload
          - net: phy: consider AN_RESTART status when reading link status
          - netlink: Fix nlmsg_parse as a wrapper for strict message parsing
          - ASoC: simple_card_utils.h: care NULL dai at asoc_simple_debug_dai()
          - ASoC: simple-card: fix an use-after-free in simple_dai_link_of_dpcm()
          - ASoC: simple-card: fix an use-after-free in simple_for_each_link()
          - ASoC: audio-graph-card: fix use-after-free in graph_dai_link_of_dpcm()
          - ASoC: audio-graph-card: fix an use-after-free in graph_get_dai_id()
          - ASoC: audio-graph-card: add missing const at graph_get_dai_id()
          - regulator: axp20x: fix DCDCA and DCDCD for AXP806
          - regulator: axp20x: fix DCDC5 and DCDC6 for AXP803
          - [armhf] ASoC: samsung: odroid: fix an use-after-free issue for codec
          - [armhf] ASoC: samsung: odroid: fix a double-free issue for cpu_dai
          - [x86] ASoC: Intel: bytcht_es8316: Add quirk for Irbis NB41 netbook
          - HID: logitech-hidpp: add USB PID for a few more supported mice
          - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
          - [mips*] kernel: only use i8253 clocksource with periodic clockevent
          - [mips*] fix cacheinfo
          - libbpf: sanitize VAR to conservative 1-byte INT
          - netfilter: ebtables: fix a memory leak bug in compat
          - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
          - [amd64] spi: pxa2xx: Balance runtime PM enable/disable on error
          - bpf: sockmap, sock_map_delete needs to use xchg
          - bpf: sockmap, synchronize_rcu before free'ing map
          - bpf: sockmap, only create entry if ulp is not already enabled
          - ASoC: dapm: fix a memory leak bug
          - bonding: Force slave speed check after link state recovery for 802.3ad
          - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for
            10G links
          - libbpf: fix using uninitialized ioctl results
          - can: dev: call netif_carrier_off() in register_candev()
          - can: gw: Fix error path of cgw_module_init
          - libbpf: silence GCC8 warning about string truncation
          - {nl,mac}80211: fix interface combinations on crypto controlled devices
          - [armhf] ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master
          - [armhf,arm64] ASoC: rockchip: Fix mono capture
          - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
          - net: usb: qmi_wwan: Add the BroadMobi BM818 card
          - qed: RDMA - Fix the hw_ver returned in device attributes
          - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
          - mac80211_hwsim: Fix possible null-pointer dereferences in
          - [armhf,arm64] net: stmmac: manage errors returned by of_get_mac_address()
          - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
            sets too
          - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
            hash:ip,mac sets
          - netfilter: ipset: Fix rename concurrency with listing
          - rxrpc: Fix potential deadlock
          - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
          - nvmem: Use the same permissions for eeprom as for nvmem
          - iwlwifi: mvm: avoid races in rate init and rate perform
          - iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef
          - iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
          - iwlwifi: fix locking in delayed GTK setting
          - iwlwifi: mvm: send LQ command always ASYNC
          - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the
          - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
          - perf bench numa: Fix cpu0 binding
          - [arm64] spi: pxa2xx: Add support for Intel Tiger Lake
          - can: sja1000: force the string buffer NULL-terminated
          - can: peak_usb: force the string buffer NULL-terminated
          - [x86] ASoC: amd: acp3x: use dma_ops of parent device for acp3x dma driver
          - net/ethernet/qlogic/qed: force the string buffer NULL-terminated
          - NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid
          - NFSv4: When recovering state fails with EAGAIN, retry the same recovery
          - NFSv4.1: Fix open stateid recovery
          - NFSv4.1: Only reap expired delegations
          - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
          - NFS: Fix regression whereby fscache errors are appearing on 'nofsc'
          - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52
          - HID: input: fix a4tech horizontal wheel custom usage
          - [armhf,arm64] drm/rockchip: Suspend DP late
          - SMB3: Fix potential memory leak when processing compound chain
          - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
          - sched/deadline: Fix double accounting of rq/running bw in push & pull
          - sched/psi: Reduce psimon FIFO priority
          - sched/psi: Do not require setsched permission from the trigger creator
          - [s390x] protvirt: avoid memory sharing for diag 308 set/store
          - [s390x] mm: fix dump_pagetables top level page table walking
          - [s390x] put _stext and _etext into .text section
          - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
          - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4
          - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry
          - drm/amdgpu: pin the csb buffer on hw init for gfx v8
          - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant
          - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY
          - [arm64] net: hisilicon: Fix dma_map_single failed on arm64
          - NFSv4: Ensure state recovery handles ETIMEDOUT correctly
          - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
          - libata: add SG safety checks in SFF pio transfers
          - [x86] lib/cpu: Address missing prototypes warning
          - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred
          - block: aoe: Fix kernel crash due to atomic sleep when exiting
          - block, bfq: handle NULL return value by bfq_init_rq()
          - perf ftrace: Fix failure to set cpumask when only one cpu is present
          - perf cpumap: Fix writing to illegal memory in handling cpumap mask
          - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
          - [riscv64] dt-bindings: fix the schema compatible string for the HiFive
            Unleashed board
          - [arm64] KVM: Don't write junk to sysregs on reset
          - [armhf] KVM: Don't write junk to CP15 registers on reset
          - iwlwifi: mvm: disable TX-AMSDU on older NICs (Closes: #939853)
          - HID: wacom: correct misreported EKR ring values
          - HID: wacom: Correct distance scale for 2nd-gen Intuos devices
          - [x86] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a
            memslot" (regression in 5.1)
          - Revert "dm bufio: fix deadlock with loop device" (regression in 5.2.3)
          - [armhf] clk: socfpga: stratix10: fix rate caclulationg for cnt_clks
          - ceph: clear page dirty before invalidate page
          - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
          - libceph: fix PG split vs OSD (re)connect race
          - drm/amdgpu/gfx9: update pg_flags after determining if gfx off is possible
          - drm/nouveau: Don't retry infinitely when receiving no data on i2c over
          - scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm()
          - gpiolib: never report open-drain/source lines as 'input' to user-space
          - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE
          - userfaultfd_release: always remove uffd flags and clear
          - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
          - [x86] apic: Handle missing global clockevent gracefully
          - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
          - [x86] boot: Save fields explicitly, zero out everything else
          - [x86] boot: Fix boot regression caused by bootparam sanitizing
          - IB/hfi1: Unsafe PSN checking for TID RDMA READ Resp packet
          - IB/hfi1: Add additional checks when handling TID RDMA READ RESP packet
          - IB/hfi1: Add additional checks when handling TID RDMA WRITE DATA packet
          - IB/hfi1: Drop stale TID RDMA packets that cause TIDErr
          - psi: get poll_work to run when calling poll syscall next time
          - dm kcopyd: always complete failed jobs
          - dm btree: fix order of block initialization in btree_split_beneath
          - dm integrity: fix a crash due to BUG_ON in __journal_read_write()
          - dm raid: add missing cleanup in raid_ctr()
          - dm space map metadata: fix missing store of apply_bops() return value
          - dm table: fix invalid memory accesses with too high sector number
          - dm zoned: improve error handling in reclaim
          - dm zoned: improve error handling in i/o map code
          - dm zoned: properly handle backing device failure
          - genirq: Properly pair kobject_del() with kobject_add()
          - mm/z3fold.c: fix race between migration and destruction
          - mm, page_alloc: move_freepages should not examine struct page of reserved
          - mm: memcontrol: flush percpu vmstats before releasing memcg
          - mm: memcontrol: flush percpu vmevents before releasing memcg
          - mm, page_owner: handle THP splits correctly
          - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
          - mm/zsmalloc.c: fix race condition in zs_destroy_pool
          - IB/hfi1: Drop stale TID RDMA packets
          - dm zoned: fix potential NULL dereference in dmz_do_reclaim()
          - io_uring: fix potential hang with polled IO
          - io_uring: don't enter poll loop if we have CQEs pending
          - io_uring: add need_resched() check in inner poll loop
          - [powerpc*] Allow flush_(inval_)dcache_range to work across ranges >4GB
          - rxrpc: Fix local endpoint refcounting
          - rxrpc: Fix read-after-free in rxrpc_queue_local()
          - rxrpc: Fix local endpoint replacement
          - rxrpc: Fix local refcounting
          - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns
          - afs: Fix the CB.ProbeUuid service handler to reply correctly
          - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u()
          - fs: afs: Fix a possible null-pointer dereference in afs_put_read()
          - afs: Fix off-by-one in afs_rename() expected data version calculation
          - afs: Only update d_fsdata if different in afs_d_revalidate()
          - afs: Fix missing dentry data version updating
          - nvmet: Fix use-after-free bug when a port is removed
          - nvmet-loop: Flush nvme_delete_wq when removing the port
          - nvmet-file: fix nvmet_file_flush() always returning an error
          - nvme-core: Fix extra device_put() call on error path
          - nvme: fix a possible deadlock when passthru commands sent to a multipath
          - nvme-rdma: fix possible use-after-free in connect error flow
          - nvme: fix controller removal race with scan work
          - nvme-pci: Fix async probe remove race
          - btrfs: trim: Check the range passed into to prevent overflow
          - IB/mlx5: Fix implicit MR release flow
          - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value
          - iommu/dma: Handle SG length overflow better
          - dma-direct: don't truncate dma_required_mask to bus addressing
          - usb: gadget: composite: Clear "suspended" on reset/disconnect
          - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt
          - xen/blkback: fix memory leaks
          - [arm64] cpufeature: Don't treat granule sizes as strict
          - [riscv64] fix flush_tlb_range() end address for flush_tlb_page()
          - drm/scheduler: use job count instead of peek
          - drm/ast: Fixed reboot test may cause system hanged
          - [x86] tools: hv: fix KVP and VSS daemons exit code
          - locking/rwsem: Add missing ACQUIRE to read_slowpath exit when queue is
          - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop
          - [arm*] watchdog: bcm2835_wdt: Fix module autoload
          - mt76: usb: fix rx A-MSDU support
          - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set
          - ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets
            (regression in 5.1)
          - [armhf] net: cpsw: fix NULL pointer exception in the probe error path
          - net: fix __ip_mc_inc_group usage
          - net/smc: make sure EPOLLOUT is raised
          - tcp: make sure EPOLLOUT wont be missed
          - ipv4: mpls: fix mpls_xmit for iptunnel
          - openvswitch: Fix conntrack cache with timeout
          - ipv4/icmp: fix rt dst dev null pointer dereference
          - xfrm/xfrm_policy: fix dst dev null pointer dereference in collect_md mode
          - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n
          - ALSA: usb-audio: Check mixer unit bitmap yet more strictly
          - ALSA: hda/ca0132 - Add new SBZ quirk
          - ALSA: line6: Fix memory leak at line6_init_pcm() error path
          - ALSA: hda - Fixes inverted Conexant GPIO mic mute led
          - ALSA: seq: Fix potential concurrent access to the deleted pool
          - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate()
          - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604
          - [x86] kvm: skip populating logical dest map if apic is not sw enabled
          - [x86] KVM: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when
            kvm_intel.nested is disabled
          - [x86] KVM: Don't update RIP or do single-step on faulting emulation
          - [x86] uprobes: Fix detection of 32-bit user mode
          - [x86] mm/cpa: Prevent large page split when ftrace flips RW on kernel text
          - [x86] apic: Do not initialize LDR and DFR for bigsmp
          - [x86] apic: Include the LDR when clearing out APIC registers
          - HID: logitech-hidpp: remove support for the G700 over USB
          - ftrace: Fix NULL pointer dereference in t_probe_next()
          - ftrace: Check for successful allocation of hash
          - ftrace: Check for empty hash and comment the race with registering probes
          - usbtmc: more sanity checking for packet size
          - usb-storage: Add new JMS567 revision to unusual_devs
          - USB: cdc-wdm: fix race between write and disconnect due to flag abuse
          - usb: hcd: use managed device resources
          - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has
          - usb: host: ohci: fix a race condition between shutdown and irq
          - USB: storage: ums-realtek: Whitelist auto-delink support
          - [x86] tools/power turbostat: Fix caller parameter of get_tdp_amd()
          - [powerpc*] KVM: Book3S: Fix incorrect guest-to-user-translation error
          - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long
          - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI
          - [x86] mei: me: add Tiger Lake point LP device ID
          - [armhf,arm64] Revert "mmc: sdhci-tegra: drop ->get_ro() implementation"
            (regression in 5.1)
          - mmc: core: Fix init of SD cards reporting an invalid VDD range
          - [x86] intel_th: pci: Add support for another Lewisburg PCH
          - [x86] intel_th: pci: Add Tiger Lake support
          - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage
          - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend()
          - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0
          - Revert "NFSv4/flexfiles: Abort I/O early if the layout segment was
            invalidated" (regression in 5.1)
          - lib: logic_pio: Fix RCU usage
          - lib: logic_pio: Avoid possible overlap for unregistering regions
          - lib: logic_pio: Add logic_pio_unregister_range()
          - drm/amdgpu: Add APTX quirk for Dell Latitude 5495
          - drm/amdgpu: fix GFXOFF on Picasso and Raven2
          - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest
          - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe()
          - i2c: piix4: Fix port selection for AMD Family 16h Model 30h
          - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential
          - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash
          - [x86] VMCI: Release resource if the work is already queued
          - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume
          - SUNRPC: Don't handle errors if the bind/connect succeeded
          - mt76: mt76x0u: do not reset radio on resume
          - mm, memcg: partially revert "mm/memcontrol.c: keep local VM counters in
            sync with the hierarchical ones" (regression in 5.2.7)
          - mm: memcontrol: fix percpu vmstats and vmevents flush
          - mac80211: fix possible sta leak
          - cfg80211: Fix Extended Key ID key install checks
          - mac80211: Don't memset RXCB prior to PAE intercept
          - mac80211: Correctly set noencrypt for PAE frames
          - iwlwifi: add new cards for 22000 and fix struct name
          - iwlwifi: add new cards for 22000 and change wrong structs
          - iwlwifi: add new cards for 9000 and 20000 series
          - iwlwifi: change 0x02F0 fw from qu to quz
          - iwlwifi: pcie: add support for qu c-step devices
          - iwlwifi: pcie: don't switch FW to qnj when ax201 is detected
          - iwlwifi: pcie: handle switching killer Qu B0 NICs to C0
          - [x86] drm/i915: Do not create a new max_bpc prop for MST connectors
          - [x86] drm/i915/dp: Fix DSC enable code to use cpu_transcoder instead of
          - [x86] ptrace: fix up botched merge of spectrev1 fix
          - bpf: fix use after free in prog symbol exposure
          - hsr: implement dellink to clean up resources
          - hsr: fix a NULL pointer deref in hsr_dev_xmit()
          - hsr: switch ->dellink() to ->ndo_uninit()
          - Revert "Input: elantech - enable SMBus on new (2018+) systems"
            (regression in 5.2.9)
          - mld: fix memory leak in mld_del_delrec()
          - net: fix skb use after free in netpoll
          - net: sched: act_sample: fix psample group handling on overwrite
          - net_sched: fix a NULL pointer deref in ipt action
          - [arm64, armhf] net: stmmac: dwmac-rk: Don't fail if phy regulator is
          - tcp: inherit timestamp on mtu probe
          - tcp: remove empty skb from write queue in error cases
          - Revert "r8152: napi hangup fix after disconnect"
          - r8152: remove calling netif_napi_del
          - net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
          - Add genphy_c45_config_aneg() function to phy-c45.c
          - net/sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue
          - net/sched: pfifo_fast: fix wrong dereference when qdisc is reset
          - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714)
          - batman-adv: Fix netlink dumping of all mcast_flags buckets
          - libbpf: fix erroneous multi-closing of BTF FD
          - libbpf: set BTF FD for prog only when there is supported .BTF.ext data
          - netfilter: nf_flow_table: fix offload for flows that are subject to xfrm
          - net/mlx5e: Fix error flow of CQE recovery on tx reporter
          - [armhf] clk: samsung: Change signature of exynos5_subcmus_init() function
          - [armhf] clk: samsung: exynos5800: Move MAU subsystem clocks to MAU sub-CMU
          - [armhf] clk: samsung: exynos542x: Move MSCL subsystem clocks to its
          - netfilter: nf_tables: use-after-free in failing rule with bound set
          - netfilter: nf_flow_table: conntrack picks up expired flows
          - netfilter: nf_flow_table: teardown flow timeout race
          - tools: bpftool: fix error message (prog -> object)
          - ixgbe: fix possible deadlock in ixgbe_service_task()
          - [x86] hv_netvsc: Fix a warning of suspicious RCU usage
          - net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx
          - Bluetooth: btqca: Add a short delay before downloading the NVM
          - Bluetooth: hci_qca: Send VS pre shutdown command.
          - [s390x] qeth: serialize cmd reply with concurrent timeout
          - ibmveth: Convert multicast list size for little-endian system
          - gpio: Fix build error of function redefinition
          - netfilter: nft_flow_offload: skip tcp rst and fin packets
          - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure
          - scsi: target: tcmu: avoid use-after-free after command timeout
          - cxgb4: fix a memory leak bug
          - liquidio: add cleanup in octeon_setup_iq()
          - net: myri10ge: fix memory leaks
          - clk: Fix falling back to legacy parent string matching
          - clk: Fix potential NULL dereference in clk_fetch_parent_index()
          - lan78xx: Fix memory leaks
          - vfs: fix page locking deadlocks when deduping files
          - cx82310_eth: fix a memory leak bug
          - net: kalmia: fix memory leaks
          - net: cavium: fix driver name
          - wimax/i2400m: fix a memory leak bug
          - sched/core: Schedule new worker even if PI-blocked
          - kprobes: Fix potential deadlock in kprobe_optimizer()
          - [x86] HID: intel-ish-hid: ipc: add EHL device id
          - HID: cp2112: prevent sleeping function called from invalid context
          - [x86] boot/compressed/64: Fix boot on machines with broken E820 table
          - scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ
          - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel
          - Tools: hv: kvp: eliminate 'may be used uninitialized' warning
          - nvme-multipath: fix possible I/O hang when paths are updated
          - nvme: Fix cntlid validation when not using NVMEoF
          - RDMA/cma: fix null-ptr-deref Read in cma_cleanup
          - IB/mlx4: Fix memory leaks
          - [x86] infiniband: hfi1: fix a memory leak bug
          - [x86] infiniband: hfi1: fix memory leaks
          - drm/amdgpu: prevent memory leaks in AMDGPU_CS ioctl
          - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr()
          - ceph: fix buffer free while holding i_ceph_lock in
          - ceph: fix buffer free while holding i_ceph_lock in fill_inode()
          - [arm64, armhf] KVM: Only skip MMIO insn once
          - afs: Fix leak in afs_lookup_cell_rcu()
          - afs: Fix possible oops in afs_lookup trace event
          - afs: use correct afs_call_type in yfs_fs_store_opaque_acl2
          - RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message
          - gpio: Fix irqchip initialization order
          - [arm64, armhf] KVM: VGIC: Properly initialise private IRQ affinity
          - [x86] boot/compressed/64: Fix missing initialization in
          - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer
          - [x86] Revert "x86/apic: Include the LDR when clearing out APIC registers"
          - [x86] boot: Preserve boot_params.secure_boot from sanitizing
          - Revert "mmc: core: do not retry CMD6 in __mmc_switch()"
          - gpio: pca953x: correct type of reg_direction
          - gpio: pca953x: use pca953x_read_regs instead of regmap_bulk_read
          - ALSA: hda - Fix potential endless loop at applying quirks
          - ALSA: hda/realtek - Fix overridden device-specific initialization
          - ALSA: hda/realtek - Add quirk for HP Pavilion 15
          - ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL
          - ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre
          - sched/fair: Don't assign runtime for throttled cfs_rq
          - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg()
          - drm/nouveau/sec2/gp102: add missing MODULE_FIRMWAREs
          - [powerpc*] 64e: Drop stale call to smp_processor_id() which hangs SMP
          - [powerpc*] tm: Fix restoring FP/VMX facility incorrectly on interrupts
          - batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
          - batman-adv: Only read OGM tvlv_len after buffer len check
          - bcache: only clear BTREE_NODE_dirty bit when it is set
          - bcache: add comments for mutex_lock(&b->write_lock)
          - bcache: fix race in btree_flush_write()
          - IB/rdmavt: Add new completion inline
          - IB/{rdmavt, qib, hfi1}: Convert to new completion API
          - IB/hfi1: Unreserve a flushed OPFN request
          - [x86] drm/i915: Disable SAMPLER_STATE prefetching on all Gen11 steppings.
          - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV
          - mmc: sdhci-sprd: Fix the incorrect soft reset operation when runtime
          - usb: chipidea: imx: add imx7ulp support
          - usb: chipidea: imx: fix EPROBE_DEFER support during driver probe
          - [s390x] virtio: fix race on airq_areas[]
          - [x86] drm/i915: Support flags in whitlist WAs
          - [x86] drm/i915: Support whitelist workarounds on all engines
          - [x86] drm/i915: whitelist PS_(DEPTH|INVOCATION)_COUNT
          - [x86] drm/i915: Add whitelist workarounds for ICL
          - [x86] drm/i915/icl: whitelist PS_(DEPTH|INVOCATION)_COUNT
          - Btrfs: fix unwritten extent buffers and hangs on future writeback
            attempts (Closes: #940105)
          - vhost: make sure log_num < in_num (CVE-2019-14835)
          - bridge/mdb: remove wrong use of NLM_F_MULTI
          - cdc_ether: fix rndis support for Mediatek based smartphones
          - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'
          - isdn/capi: check message length in capi_write()
          - ixgbe: Fix secpath usage for IPsec TX offload.
          - ixgbevf: Fix secpath usage for IPsec Tx offload
          - net: Fix null de-reference of device refcount
          - net: gso: Fix skb_segment splat when splitting gso_size mangled skb
            having linear-headed frag_list
          - net: phylink: Fix flow control resolution
          - net: sched: fix reordering issues
          - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
          - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()'
          - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike
          - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
          - tipc: add NULL pointer check before calling kfree_rcu
          - tun: fix use-after-free when register netdev failed
          - net-ipv6: fix excessive RTF_ADDRCONF flag on ::1/128 local route (and
          - ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
          - net: fixed_phy: Add forward declaration for struct gpio_desc;
          - sctp: fix the missing put_user when dumping transport thresholds
          - net: sock_map, fix missing ulp check in sock hash case
          - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and
          - gpio: mockup: add missing single_release()
          - gpio: fix line flag validation in linehandle_create
          - gpio: fix line flag validation in lineevent_create
          - Btrfs: fix assertion failure during fsync and use of stale transaction
          - cgroup: freezer: fix frozen state inheritance
          - Revert "mmc: bcm2835: Terminate timeout work synchronously"
          - Revert "mmc: sdhci: Remove unneeded quirk2 flag of O2 SD host controller"
          - mmc: tmio: Fixup runtime PM management during probe
          - mmc: tmio: Fixup runtime PM management during remove
          - drm/lima: fix lima_gem_wait() return value
          - [x86] drm/i915: Limit MST to <= 8bpc once again
          - [x86] drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+
          - ipc: fix semtimedop for generic 32-bit architectures
          - ipc: fix sparc64 ipc() wrapper
          - ixgbe: fix double clean of Tx descriptors with xdp
          - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us
          - Revert "rt2800: enable TX_PIN_CFG_LNA_PE_ bits per band"
          - mt76: mt76x0e: disable 5GHz band for MT7630E
          - genirq: Prevent NULL pointer dereference in resend_irqs()
          - regulator: twl: voltage lists for vdd1/2 on twl4030
          - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using
            it as target for memset()
          - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl
          - [x86] KVM: work around leak of uninitialized stack contents
          - [x86] KVM: mmu: Reintroduce fast invalidate/zap for flushing memslot
          - [x86] KVM: nVMX: handle page fault in vmread
          - [x86] purgatory: Change compiler flags from -mcmodel=kernel to
            -mcmodel=large to fix kexec relocation errors
          - powerpc: Add barrier_nospec to raw_copy_in_user()
          - kernel/module: Fix mem leak in module_add_modinfo_attrs
          - x86/boot: Use efi_setup_data for searching RSDP on kexec-ed kernels
          - x86/ima: check EFI SetupMode too
          - drm/meson: Add support for XBGR8888 & ABGR8888 formats
          - clk: Fix debugfs clk_possible_parents for clks without parent string names
          - clk: Simplify debugfs printing and add a newline
          - mt76: Fix a signedness bug in mt7615_add_interface()
          - mt76: mt7615: Use after free in mt7615_mcu_set_bcn()
          - clk: rockchip: Don't yell about bad mmc phases when getting
          - mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue
          - PCI: Always allow probing with driver_override
          - ubifs: Correctly use tnc_next() in search_dh_cookie()
          - driver core: Fix use-after-free and double free on glue directory
          - crypto: talitos - check AES key size
          - crypto: talitos - fix CTR alg blocksize
          - crypto: talitos - check data blocksize in ablkcipher.
          - crypto: talitos - fix ECB algs ivsize
          - crypto: talitos - Do not modify req->cryptlen on decryption.
          - crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking.
          - firmware: ti_sci: Always request response from firmware
          - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC
          - drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto
          - mm/z3fold.c: remove z3fold_migration trylock
          - mm/z3fold.c: fix lock/unlock imbalance in z3fold_page_isolate
          - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
          - modules: fix BUG when load module with rodata=n
          - modules: fix compile error if don't have strict module rwx
          - modules: always page-align module section allocations
          - [x86] kvm: nVMX: Remove unnecessary sync_roots from handle_invept
          - [x86] KVM: SVM: Fix detection of AMD Errata 1096
          - [x86] platform: pmc_atom: Add CB4063 Beckhoff Automation board to
            critclk_systems DMI table
          - [x86] platform: pcengines-apuv2: use KEY_RESTART for front button
          - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504)
          - USB: usbcore: Fix slab-out-of-bounds bug during device reset
          - media: tm6000: double free if usb disconnect while streaming
          - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
          - net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit()
          - netfilter: nf_flow_table: set default timeout after successful insertion
          - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
          - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
          - SUNRPC: Handle connection breakages correctly in call_status()
          - nfs: disable client side deduplication
          - [powerpc*] mm/radix: Use the right page size for vmemmap mapping
          - net: hns: fix LED configuration for marvell phy
          - net: aquantia: fix limit of vlan filters
          - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
          - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc
          - net_sched: let qdisc_put() accept NULL pointer
          - udp: correct reuseport selection with connected sockets
          - xen-netfront: do not assume sk_buff_head list is empty in error handling
          - net: dsa: Fix load order between DSA drivers and taggers
          - KVM: coalesced_mmio: add bounds checking (CVE-2019-14821)
          - firmware: google: check if size is valid when decoding VPD data
          - serial: sprd: correct the wrong sequence of arguments
          - tty/serial: atmel: reschedule TX after RX was started
          - mwifiex: Fix three heap overflow at parsing element in
            cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816)
          - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
          - ieee802154: hwsim: Fix error handle path in hwsim_init_module
          - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
          - [armhf] dts: am57xx: Disable voltage switching for SD card
          - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
          - bus: ti-sysc: Fix handling of forced idle
          - bus: ti-sysc: Fix using configured sysc mask value
          - [armhf] dts: Fix flags for gpio7
          - [armhf] dts: Fix incorrect dcan register mapping for am3, am4 and dra7
          - [arm64] dts: meson-g12a: add missing dwc2 phy-names
          - [s390x] bpf: fix lcgr instruction encoding
          - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs
          - [armhf] dts: am335x: Fix UARTs length
          - [armhf] dts: dra74x: Fix iodelay configuration for mmc3
          - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
          - [armhf] dts: Fix incomplete dts data for am3 and am4 mmc
          - [s390x] bpf: use 32-bit index for tail calls
          - fpga: altera-ps-spi: Fix getting of optional confd gpio
          - netfilter: ebtables: Fix argument order to ADD_COUNTER
          - netfilter: nft_flow_offload: missing netlink attribute policy
          - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
          - NFSv4: Fix return values for nfs4_file_open()
          - NFSv4: Fix return value in nfs_finish_open()
          - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
          - NFS: On fatal writeback errors, we need to call
          - xdp: unpin xdp umem pages in error path
          - selftests/bpf: fix test_cgroup_storage on s390
          - selftests/bpf: add config fragment BPF_JIT
          - qed: Add cleanup in qed_slowpath_start()
          - drm/omap: Fix port lookup for SDI output
          - drm/virtio: use virtio_max_dma_size
          - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures
          - batman-adv: Only read OGM2 tvlv_len after buffer len check
          - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
          - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
          - r8152: Set memory to all 0xFFs on failed reg reads
          - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
          - pNFS/flexfiles: Don't time out requests on hard mounts
          - NFS: Fix spurious EIO read errors
          - NFS: Fix writepage(s) error handling to not report errors twice
          - drm/amdgpu: fix dma_fence_wait without reference
          - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
          - netfilter: nf_conntrack_ftp: Fix debug output
          - NFSv2: Fix eof handling
          - NFSv2: Fix write regression
          - NFS: remove set but not used variable 'mapping'
          - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
            first symbol
          - netfilter: conntrack: make sysctls per-namespace again
          - drm/amd/powerplay: correct Vega20 dpm level related settings
          - cifs: set domainName when a domain-key is used in multiuser
          - cifs: Use kzfree() to zero out the password
          - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
          - usb: host: xhci-tegra: Set DMA mask correctly
          - RISC-V: Fix FIXMAP area corruption on RV32 systems
          - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm
          - ibmvnic: Do not process reset during or after device removal
          - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
          - i2c: designware: Synchronize IRQs when unregistering slave client
          - perf/x86/intel: Restrict period on Nehalem
          - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
          - i2c: iproc: Stop advertising support of SMBUS quick cmd
          - i2c: mediatek: disable zero-length transfers for mt8183
          - amd-xgbe: Fix error path in xgbe_mod_init()
          - netfilter: nf_flow_table: clear skb tstamp before xmit
          - [x86] tools/power x86_energy_perf_policy: Fix argument parsing
          - [x86] tools/power turbostat: fix leak of file descriptor on error return
          - [x86] tools/power turbostat: fix file descriptor leaks
          - [x86] tools/power turbostat: fix buffer overrun
          - [x86] tools/power turbostat: Fix Haswell Core systems
          - [x86] tools/power turbostat: Add Ice Lake NNPI support
          - [x86] tools/power turbostat: Fix CPU%C1 display value
          - net: aquantia: fix removal of vlan 0
          - net: aquantia: reapply vlan filters on up
          - net: aquantia: linkstate irq should be oneshot
          - net: aquantia: fix out of memory condition on rx side
          - net: dsa: microchip: add KSZ8563 compatibility string
          - enetc: Add missing call to 'pci_free_irq_vectors()' in probe and remove
          - net: seeq: Fix the function used to release some memory in an error
            handling path
          - dmaengine: ti: dma-crossbar: Fix a memory leak bug
          - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
          - [x86] uaccess: Don't leak the AC flags into __get_user() argument
          - [x86] hyper-v: Fix overflow bug in fill_gva_list()
          - [x86] iommu/vt-d: Remove global page flush support
          - dmaengine: sprd: Fix the DMA link-list configuration
          - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
          - keys: Fix missing null pointer check in request_key_auth_describe()
          - [x86] iommu/amd: Flush old domains in kdump kernel
          - [x86] iommu/amd: Fix race in increase_address_space()
          - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
          - ovl: fix regression caused by overlapping layers detection
          - floppy: fix usercopy direction
          - media: technisat-usb2: break out of loop at end of buffer
          - vfs: Fix refcounting of filenames in fs_parser
        [ Salvatore Bonaccorso ]
        * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
        [ Romain Perier ]
        * [rt] Update to 5.2.14-rt7
        [ Ben Hutchings ]
        * Bump ABI to 3
    • Sophie Brun's avatar
      Import Upstream version 5.2.17 · 7126d6b1
      Sophie Brun authored
  8. 22 Aug, 2019 1 commit
    • Ben Hutchings's avatar
      Import Debian changes 5.2.9-2 · 362c553d
      Ben Hutchings authored
      linux (5.2.9-2) unstable; urgency=medium
        [ Ben Hutchings ]
        * Partially revert "net: socket: implement 64-bit timestamps"
          (fixes build/test regressions for glibc, qemu, suricata)
        * [x86] intel-iommu: Exclude integrated GPUs by default (Closes: #935270):
          - intel-iommu: Add option to exclude integrated GPU only
          - intel-iommu: Add Kconfig option to exclude iGPU by default
          - Enable INTEL_IOMMU_DEFAULT_ON_INTGPU_OFF instead of
        [ Thomas W ]
        * [x86] Add various laptop modules. (Closes: #932086)
  9. 19 Aug, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 5.2.9-1 · a17bad0d
      Ben Hutchings authored
      linux (5.2.9-1) unstable; urgency=medium
        * New upstream stable update:
          - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
          - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
          - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
          - ALSA: usb-audio: Sanity checks for each pipe and EP types
          - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
          - HID: wacom: fix bit shift for Cintiq Companion 2
          - HID: Add quirk for HP X1200 PIXART OEM mouse
          - atm: iphase: Fix Spectre v1 vulnerability (CVE-2017-5753)
          - bnx2x: Disable multi-cos feature.
          - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (Closes: #908712)
          - ife: error out when nla attributes are empty
          - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
          - ip6_tunnel: fix possible use-after-free on xmit
          - ipip: validate header length in ipip_tunnel_xmit
          - [armhf,arm64] mvpp2: fix panic on module removal
          - [armhf,arm64] mvpp2: refactor MTU change code
          - net: bridge: delete local fdb on device init failure
          - net: bridge: mcast: don't delete permanent entries when fast leave is
          - net: bridge: move default pvid init/deinit to NETDEV_REGISTER/UNREGISTER
          - net: fix ifindex collision during namespace removal
          - net/mlx5e: always initialize frag->last_in_page
          - net/mlx5: Use reversed order when unregister devices
          - net: phy: fixed_phy: print gpio error only if gpio node is present
          - net: phy: mscc: initialize stats array
          - net: sched: Fix a possible null-pointer dereference in dequeue_func()
          - net sched: update vlan action for batched events operations
          - net: sched: use temporary variable for actions indexes
          - net/smc: do not schedule tx_work in SMC_CLOSED state
          - [armhf,arm64] net: stmmac: Use netif_tx_napi_add() for TX polling
          - tipc: compat: allow tipc commands without arguments
          - tipc: fix unitilized skb list crash
          - tun: mark small packets as owned by the tap sock
          - net/mlx5: Fix modify_cq_in alignment
          - net/mlx5e: Prevent encap flow counter update async to user query
          - r8169: don't use MSI before RTL8168d
          - net: fix bpf_xdp_adjust_head regression for generic-XDP
          - [x86] hv_sock: Fix hang when a connection is closed
          - net: phy: fix race in genphy_update_link
          - net/smc: avoid fallback in case of non-blocking connect
          - rocker: fix memory leaks of fib_work on two error return paths
          - net/mlx5: Add missing RDMA_RX capabilities
          - net/mlx5e: Fix matching of speed to PRM link modes
          - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
          - [x86] drm/i915/vbt: Fix VBT parsing for the PSR section
          - Revert "mac80211: set NETIF_F_LLTX when using intermediate tx queues"
          - [armhf,arm64] spi: bcm2835: Fix 3-wire mode if DMA is enabled
          - Revert "PCI: Add missing link delays required by the PCIe spec"
          - [arm64] iio: cros_ec_accel_legacy: Fix incorrect channel setting
          - [x86] iio: imu: mpu6050: add missing available scan masks
          - [x86] crypto: ccp - Fix oops by properly managing allocated structures
          - [x86] crypto: ccp - Add support for valid authsize values less than 16
          - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext
          - driver core: platform: return -ENXIO for missing GpioInt
          - usb: usbfs: fix double-free of usb memory upon submiturb error
          - Revert "USB: rio500: simplify locking"
          - usb: iowarrior: fix deadlock on disconnect
          - sound: fix a memory leak bug
          - [arm64,mips/octeon] mmc: cavium: Set the correct dma max segment size for
          - [arm64,mips/octeon] mmc: cavium: Add the missing dma unmap when the dma
            has finished.
          - loop: set PF_MEMALLOC_NOIO for the worker thread
          - bdev: Fixup error handling in blkdev_get() (Closes: #934378)
          - Input: usbtouchscreen - initialize PM mutex before using it
          - Input: elantech - enable SMBus on new (2018+) systems
          - [x86] Input: synaptics - enable RMI mode for HP Spectre X360
          - [x86] mm: Check for pfn instead of page in vmalloc_sync_one()
          - [x86] mm: Sync also unmappings in vmalloc_sync_all()
          - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
          - [s390x] perf annotate: Fix s390 gap between kernel end and module start
          - perf db-export: Fix thread__exec_comm()
          - [s390x] perf record: Fix module size on s390
          - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset
          - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
          - genirq/affinity: Create affinity mask for single vector
          - gfs2: gfs2_walk_metadata fix
          - usb: yurex: Fix use-after-free in yurex_delete
          - usb: typec: ucsi: ccg: Fix uninitilized symbol error
          - usb: typec: tcpm: free log buf memory when remove debug file
          - usb: typec: tcpm: remove tcpm dir if no children
          - usb: typec: tcpm: Add NULL check before dereferencing config
          - usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
          - [armhf] can: flexcan: fix stop mode acknowledgment
          - [armhf] can: flexcan: fix an use-after-free in flexcan_setup_stop_mode()
          - can: peak_usb: fix potential double kfree_skb()
          - [powerpc*] fix off by one in max_zone_pfn initialization for ZONE_DMA
          - netfilter: nfnetlink: avoid deadlock due to synchronous request_module
          - netfilter: Fix rpfilter dropping vrf packets by mistake
          - netfilter: nf_tables: fix module autoload for redir
          - netfilter: conntrack: always store window size un-scaled
          - netfilter: nft_hash: fix symhash with modulus one
          - rq-qos: don't reset has_sleepers on spurious wakeups
          - rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule
          - rq-qos: use a mb for got_token
          - netfilter: nf_tables: Support auto-loading for inet nat
          - drm/amd/display: No audio endpoint for Dell MST display
          - drm/amd/display: Clock does not lower in Updateplanes
          - drm/amd/display: Wait for backlight programming completion in set
            backlight level
          - drm/amd/display: fix DMCU hang when going into Modern Standby
          - drm/amd/display: use encoder's engine id to find matched free audio
          - drm/amd/display: put back front end initialization sequence
          - drm/amd/display: allocate 4 ddc engines for RV2
          - drm/amd/display: Fix dc_create failure handling and 666 color depths
          - drm/amd/display: Only enable audio if speaker allocation exists
          - drm/amd/display: Increase size of audios array
          - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
          - mac80211: fix possible memory leak in ieee80211_assign_beacon
          - mac80211: don't warn about CW params when not using them
          - allocate_flower_entry: should check for null deref
          - hwmon: (nct6775) Fix register address and added missed tolerance for
          - [armhf] dts: imx6ul: fix clock frequency property name of I2C buses
          - [powerpc*] papr_scm: Force a scm-unbind if initial scm-bind fails
          - [arm64] Force SSBS on context switch
          - [arm64] entry: SP Alignment Fault doesn't write to FAR_EL1
          - [x86] iommu/vt-d: Check if domain->pgd was allocated
          - [arm64] drm/msm/dpu: Correct dpu encoder spinlock initialization
          - [ppc64] cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
          - [s390x] qdio: add sanity checks to the fast-requeue path
          - ALSA: compress: Fix regression on compressed capture streams
          - ALSA: compress: Prevent bypasses of set_params
          - ALSA: compress: Don't allow paritial drain operations on capture streams
          - ALSA: compress: Be more restrictive about when a drain is allowed
          - perf script: Fix off by one in brstackinsn IPC computation
          - perf tools: Fix proper buffer size for feature processing
          - perf stat: Fix segfault for event group in repeat mode
          - perf session: Fix loading of compressed data split across adjacent
          - perf probe: Avoid calling freeing routine multiple times for same pointer
          - drbd: dynamically allocate shash descriptor
          - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
          - nvme: ignore subnqn for ADATA SX6000LNP
          - nvme: fix memory leak caused by incorrect subsystem free
          - scsi: megaraid_sas: fix panic on loading firmware crashdump
          - scsi: ibmvfc: fix WARN_ON during event pool release
          - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
          - test_firmware: fix a memory leak bug
          - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
          - [x86] perf/intel: Fix SLOTS PEBS event constraint
          - [x86] perf/intel: Fix invalid Bit 13 for Icelake MSR_OFFCORE_RSP_x
          - [x86] perf: Apply more accurate check on hypervisor platform
          - perf/core: Fix creating kernel counters for PMUs that override event->cpu
          - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value
          - HID: sony: Fix race condition between rumble and device remove.
          - ALSA: usb-audio: fix a memory leak bug
          - [x86] KVM/nSVM: properly map nested VMCB
          - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
          - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
          - hwmon: (nct7802) Fix wrong detection of in4 presence
          - hwmon: (lm75) Fixup tmp75b clr_mask
          - [x86] drm/i915: Fix wrong escape clock divisor init for GLK
          - ALSA: firewire: fix a memory leak bug
          - ALSA: hiface: fix multiple memory leak bugs
          - ALSA: hda - Don't override global PCM hw info flag
          - [x86] ALSA: hda - Workaround for crackled sound on AMD controller
          - mac80211: don't WARN on short WMM parameters from AP
          - dax: dax_layout_busy_page() should not unmap cow pages
          - SMB3: Fix deadlock in validate negotiate hits reconnect
          - smb3: send CAP_DFS capability during session setup
          - NFSv4: Fix delegation state recovery
          - NFSv4: Check the return value of update_open_stateid()
          - NFSv4: Fix an Oops in nfs4_do_setattr
          - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU
          - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block
          - mwifiex: fix 802.11n/WPA detection
          - iwlwifi: don't unmap as page memory that was mapped as single
          - iwlwifi: mvm: fix an out-of-bound access
          - iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment
          - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
          - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
        [ Salvatore Bonaccorso ]
        * Enable Realtek 802.11ac wireless chips support (Closes: #933963)
        [ Ben Hutchings ]
        * [armel] fb-modules: Remove xgifb, which was removed upstream (fixes FTBFS)
        * tracefs: Fix potential null dereference in default_file_open()
          (Closes: #934304)
        * [arm64] hwrandom: Re-enable HW_RANDOM_OMAP as module (Closes: #931707)
        * ptp: Change CAVIUM_PTP from built-in to modular (Closes: #934848)
        * bug script: Check whether /e/n/interfaces exists (Closes: #934824)
        * bug script: Include network configuration from /e/n/interfaces.d
        * bug script: Check for unreadable /e/n/interfaces files
        * [x86] iommu: Enable INTEL_IOMMU_DEFAULT_ON (Closes: #934309)
          HID_VIEWSONIC, HID_MALTRON, HID_U2FZERO as modules (Closes: #934091)
        * usbip: network: Fix unaligned member access (Closes: #925766)
        * libbpf: Fix cross-build
        * [rt] Update to 5.2.9-rt3:
          - i2c: exynos5: Remove IRQF_ONESHOT
          - i2c: hix5hd2: Remove IRQF_ONESHOT
          - sched/deadline: Ensure inactive_timer runs in hardirq context
          - thermal/x86_pkg_temp: make pkg_temp_lock a raw spinlock
          - dma-buf: Use seqlock_t instread disabling preemption
          - KVM: arm/arm64: Let the timer expire in hardirq context on RT
          - x86: preempt: Check preemption level before looking at lazy-preempt
          - arm64: preempt: Fixup lazy preempt
          - arm64: preempt: Check preemption level before looking at lazy-preempt
        [ Alper Nebi Yasak ]
        * [arm64] udeb: Add pl330 to kernel-image
    • Sophie Brun's avatar
      Import Upstream version 5.2.9 · 29e0900a
      Sophie Brun authored
  10. 14 Aug, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 5.2.7-1 · b083870b
      Ben Hutchings authored
      linux (5.2.7-1) unstable; urgency=medium
        * New upstream stable update:
          - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200
          - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again
          - [arm64] clk: meson: mpll: properly handle spread spectrum
          - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend
          - ftrace: Enable trampoline when rec count returns back to one
          - [arm64] dts: qcom: qcs404-evb: fix l3 min voltage
          - [arm64] dts: marvell: mcbin: enlarge PCI memory window
          - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag
            is unset
          - [arm64] dts: rockchip: fix isp iommu clocks and power domain
          - kernel/module.c: Only return -EEXIST for modules that have finished
          - PCI: OF: Initialize dev->fwnode appropriately
          - [armhf,arm64] firmware/psci: psci_checker: Park kthreads before stopping
          - [arm64] qcom: qcs404: Add reset-cells to GCC node
          - swiotlb: fix phys_addr_t overflow warning
          - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1
          - fs/adfs: super: fix use-after-free bug
          - [arm64] dts: rockchip: Fix USB3 Type-C on rk3399-sapphire
          - btrfs: tree-checker: Check if the file extent end overflows
          - btrfs: fix minimum number of chunk errors for DUP
          - btrfs: Flush before reflinking any extent to prevent NOCOW write falling
            back to COW without data reservation
          - [arm64] remoteproc: copy parent dma_pfn_offset for vdev
          - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
          - cifs: Fix a race condition with cifs_echo_request
          - ceph: fix improper use of smp_mb__before_atomic()
          - ceph: fix dir_lease_is_valid()
          - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
          - virtio-mmio: add error check for platform_get_irq
          - drm/amd/display: Expose audio inst from DC to DM
          - cifs: fix crash in cifs_dfs_do_automount
          - perf version: Fix segfault due to missing OPT_END()
          - [x86] kvm: avoid constant-conversion warning
          - ACPI: fix false-positive -Wuninitialized warning
          - [x86] KVM: nVMX: Ignore segment base for VMX memory operand when segment
            not FS or GS
          - bpf: fix BTF verifier size resolution logic
          - be2net: Signal that the device cannot transmit during reconfiguration
          - mm/z3fold: don't try to use buddy slots after free
          - mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones
          - mm/z3fold.c: reinitialize zhdr structs after migration
          - [x86] apic: Silence -Wtype-limits compiler warnings
          - [arm*] mm/cma.c: fail if fixed declaration can't be honored
          - mm/ioremap: check virtual address alignment while creating huge mappings
          - coda: add error handling for fget
          - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
          - ipc/mqueue.c: only perform resource calculation if user valid
          - device-dax: fix memory and resource leak if hotplug fails
          - mm/hotplug: make remove_memory() interface usable
          - stacktrace: Force USER_DS for stack_trace_save_user()
          - [x86] crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
          - xen/pv: Fix a boot up hang revealed by int3 self test
          - [x86] kvm: Don't call kvm_spurious_fault() from .fixup
          - [x86] paravirt: Fix callee-saved function ELF sizes
          - [x86] boot: Remove multiple copy of static function sanitize_boot_params()
          - bpf: Disable GCC -fgcse optimization for ___bpf_prog_run()
          - drm/nouveau: fix memory leak in nouveau_conn_reset()
          - drm/nouveau/dmem: missing mutex_lock in error path
          - kconfig: Clear "written" flag to avoid data loss
          - tpm: Fix null pointer dereference on chip register error path
          - Btrfs: fix incremental send failure after deduplication
          - Btrfs: fix race leading to fs corruption after transaction abort
          - dax: Fix missed wakeup in put_unlocked_entry()
          - fgraph: Remove redundant ftrace_graph_notrace_addr() test
          - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC
          - [armhf] mmc: meson-mx-sdio: Fix misuse of GENMASK macro
          - mmc: mmc_spi: Enable stable writes
          - gpiolib: Preserve desc->flags when setting state
          - gpio: don't WARN() on NULL descs if gpiolib is disabled
          - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
          - IB/hfi1: Fix Spectre v1 vulnerability
          - drm/nouveau: Only release VCPI slots on mode changes
          - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
          - eeprom: at24: make spd world-readable again
          - [arm*] i2c: iproc: Fix i2c master read more than 63 bytes
          - selinux: fix memory leak in policydb_init()
          - [x86] ALSA: hda: Fix 1-minute detection delay when i915 module is not
            available (see #931507)
          - mm: vmscan: check if mem cgroup is disabled or not before calling memcg
            slab shrinker
          - mm: migrate: fix reference check race between __find_get_block() and
          - mm: compaction: avoid 100% CPU usage during compaction when a task is
          - mm/migrate.c: initialize pud_entry in migrate_vma()
          - loop: Fix mount(2) failure due to race with LOOP_SET_FD
          - [s390x] dasd: fix endless loop after read unit address configuration
          - cgroup: kselftest: relax fs_spec checks
          - [hppa] Add archclean Makefile target
          - [hppa] Strip debug info from kernel before creating compressed vmlinuz
          - [hppa] Fix build of compressed kernel even with debug enabled
          - drivers/perf: arm_pmu: Fix failure path in PM notifier
          - [arm64] compat: Allow single-byte watchpoints on all addresses
          - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
          - io_uring: fix KASAN use after free in io_sq_wq_submit_work
          - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
          - nbd: replace kill_bdev() with __invalidate_device() again
          - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
          - xen/gntdev.c: Replace vm_map_pages() with vm_map_pages_zero()
          - RDMA/devices: Do not deadlock during client removal
          - IB/mlx5: Fix unreg_umr to ignore the mkey state
          - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
          - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
          - IB/mlx5: Fix clean_mr() to work in the expected order
          - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
          - IB/hfi1: Check for error on call to alloc_rsm_map_table
          - IB/hfi1: Drop all TID RDMA READ RESP packets after r_next_psn
          - IB/hfi1: Field not zero-ed when allocating TID flow memory
          - [x86] drm/i915/perf: fix ICL perf register offsets
          - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping
          - [x86] cpufeatures: Carve out CQM features retrieval
          - [x86] cpufeatures: Combine word 11 and 12 into a new scattered features
          - [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations
          - [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125)
          - [amd64] entry: Use JMP instead of JMPQ
          - [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
          - Documentation: Add swapgs description to the Spectre v1 documentation
        [ Ben Hutchings ]
        * [armhf] udeb: Remove davinci_cpdma from nic-modules (fixes FTBFS)
        * Bump ABI to 2
        * [armel/marvell] Increase maximum image size (fixes FTBFS):
          - This removes support for QNAP TS-109, TS-119, TS-209, TS-219, TS-409,
            and HP Media Vault mv2120
          - This may be reverted if we can disable or modularise some features
        [ Julien Cristau ]
        * Fix libcpupower-dev's Depends field to account for SONAME bump.
      linux (5.2.6-1) unstable; urgency=medium
        * New upstream release:
        * New upstream stable update:
        [ Bastian Germann ]
        * [armhf] Enable C_CAN as a module. (Closes: #929968)
        [ Ben Hutchings ]
        * Drop "x86/boot: Add ACPI RSDP address to setup_header", which should
          not have been applied to 4.20 or later
        * Drop redundant part of "Install perf scripts non-executable"
        * Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed
        * debian/rules.d/scripts/kconfig: Update for upstream file renaming
        * debian/rules.d/scripts/mod: Add uuid_t and UUID_STRING_LEN definitions
        * liblockdep: Disable until it can be built again
        * libcpupower: Bump soversion since 2 exported functions have been removed
        * libbpf: Stop overriding upstream soname; rename shlib package to libbpf0
        * vfs: Enable FS_ENCRYPTION as built-in; disable on armel/marvell
        * net: Enable NET_DEVLINK as built-in; disable on armel/marvell
        * aufs: Update support patchset to aufs5.2 20190805
        * lockdown: Update for 5.2:
          - Update "acpi: Ignore acpi_rsdp kernel param when the kernel ..."
          - Add "tracefs: Restrict tracefs when the kernel is locked down"
          - Add "efi: Restrict efivar_ssdt_load when the kernel is locked down"
          - Drop "MODSIGN: Import certificates from UEFI Secure Boot"
        * [rt] Rebase onto 5.2.6, and re-enable
        * [armhf,arm64] gpu: Enable DRM_LIMA, DRM_PANFROST as modules
        * sched: Enable PSI (Closes: #931247)
        * [armhf,arm64] power: Enable ENERGY_MODEL
        * [armhf,arm64] cpufreq: Enable CPU_FREQ_DEFAULT_GOV_SCHEDUTIL (instead of
        * hamradio: Disable auto-loading as mitigation against local exploits
        * hamradio: Enable most options in top-level config:
          - [arm64,ia64,mips*,riscv64,s390x,sh4,sparc64] Enable AX25, NETROM, ROSE,
            and all possible drivers (Closes: #920651)
          - [alpha,amd64,armel] ax25: Enable AX25_DAMA_SLAVE
            BAYCOM_EPP, YAM as modules
        * [armel/rpi,armhf] media: Enable VIDEO_BCM2835 as module
        * usb/typec: Enable TYPEC_DP_ALTMODE, TYPEC_NVIDIA_ALTMODE as modules
          (Closes: #931752)
        * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511)
        * [ppc64*] crypto: Enable CRYPTO_DEV_NX, and CRYPTO_DEV_NX_ENCRYPT,
          CRYPTO_DEV_NX_COMPRESS_POWERNV as modules (Closes: #931374)
        * [ppc64*] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122)
        [ Vagrant Cascadian ]
        * [arm64] Enable modules to support audio on pinebook: SND_SUN4I_I2S,
          SND_SOC_SIMPLE_AMPLIFIER. (Closes: #921019)
        [ Romain Perier ]
        * Refreshed patches:
          - debian/revert-objtool-fix-config_stack_validation-y-warning.patch
          - debian/dfsg/video-remove-nvidiafb-and-rivafb.patch
          - debian/gitignore.patch
          - debian/mips-disable-werror.patch
          - bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
          - bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch
          - bugfix/powerpc/powerpc-lib-makefile-don-t-pull-in-quad.o-for-32-bit.patch
          - bugfix/all/
          - bugfix/all/disable-some-marvell-phys.patch
          - debian/overlayfs-permit-mounts-in-userns.patch
          - bugfix/all/tools-perf-remove-shebangs.patch
          - debian/ntfs-mark-it-as-broken.patch
          - features/all/db-mok-keyring/
          - features/all/db-mok-keyring/
          - debian/android-enable-building-ashmem-and-binder-as-modules.patch
          - features/all/aufs5/aufs5-mmap.patch
          - features/all/aufs5/aufs5-standalone.patch
          - features/all/lockdown/
        * Enable coreboot memconsole (Closes: #872069)
        * [rt] Update to 5.2-rt1
        [ Karsten Merker ]
        * [riscv64] Change the kernel image format from ELF to flat Image.
          (Closes: #928451)
        * [riscv64] Update config and image format (Closes: #933603):
          - Enable SiFive UART and UART console support
          - Enable clock drivers for the SiFive FU540
          - Backport kernel image header support from kernel 5.3
        [ Uwe Kleine-König ]
        * [armhf] Add support for all i.MX6 variants.
        * enable XFRM_STATISTICS (Closes: #929938)
        * [arm64] Add support for Raspberry Pi 3 camera host interface (Closes:
        * Enable CRYPTO_ZSTD for ZRAM with ZSTD compression (Closes: #932722)
        [ Lubomir Rintel ]
        * [armhf] Enable config items for OLPC XO-1.75 (Closes: #927791)
      linux (5.0.2-1~exp1) experimental; urgency=medium
        * New upstream stable update:
        [ Vagrant Cascadian ]
        * [arm64,armhf] Enable PHY_ROCKCHIP_INNO_HDMI as modules.
        [ Ben Hutchings ]
        * [amd64] kexec: Enable KEXEC_SIG, replacing KEXEC_VERIFY_SIG
        * [armel] MTD: Enable MTD_PHYSMAP as module and set MTD_PHYSMAP_OF=y
          - udeb: Include physmap instead of physmap_of in mtd-modules (fixes FTBFS)
        * [armhf] sound/soc/ti: Enable SND_SOC_DAVINCI_MCASP, SND_SOC_NOKIA_RX51,
          as modules; replacing SND_DAVINCI_SOC_MCASP, SND_OMAP_SOC_RX51,
          SND_OMAP_SOC_OMAP_ABE_TWL6040 respectively
        * udeb: Add thermal_sys to kernel-image (fixes FTBFS on mips*, ppc64*,
        * [powerpc*] mm: Only define MAX_PHYSMEM_BITS in SPARSEMEM configurations
          (fixes FTBFS on powerpc, powerpcspe)
        * debian/source/lintian-overrides: Override license-problem-gfdl-invariants
          in more files
        * debian/rules: Remove debian/*.substvars in clean target
        * debian/source/lintian-overrides: Override
      linux (5.0.1-1~exp1) experimental; urgency=medium
        * New upstream release: https://kernelnewbies.org/Linux_5.0
        * New upstream stable update:
        [ YunQiang Su ]
        * [mipsel, mips64el] Enable DRM_AST and FB_SM750 for loongson-3
          install ast and sm750fb to loongson-3's fb-modules
        * [mips r6] Disable JUMP_LABEL for now: it will cause Reserved Instruction.
          Enable SERIAL_OF_PLATFORM, if not, userland shows nothing.
          Enable CPU_HAS_MSA, HIGHMEM, CRYPTO_CRC32_MIPS, and NR_CPUS to 16.
          Support some boston drivers: IMG_ASCII_LCD, I2C_EG20T, PCH_PHUB, MMC,
        [ Hideki Yamane ]
        * [x86] Enable Touchpad support on Gemini Lake (Closes: #917388)
        [ Helge Deller ]
        * [hppa] Build only 32- and 64-bit SMP-kernel: Alternative
          live-patching code will patch kernel for UP at boot if necessary.
        [ Romain Perier ]
        * Refreshed debian/export-symbols-needed-by-android-drivers.patch to export
          __close_fd_get_file() and task_work_add(), both required by binder.
        * Refreshed debian/revert-objtool-fix-config_stack_validation-y-warning.patch,
          so this can be applied against 4.20.4
        * Refreshed patch for lockdown
          0028-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-b.patch, so this
          can be applied against >= 4.20.13
        [ Marcin Juszkiewicz ]
        * udeb: Add virtio-gpu into d-i to get graphical output in VM instances.
        [ Ben Hutchings ]
        * SCSI: Enable SCSI_MYRB, SCSI_MYRS as modules, replacing BLK_DEV_DAC960
        * [arm64] remoteproc: Enable QCOM_Q6V5_MSS, renamed version of
        * [x86] drivers/gpu/drm/amd: Re-enable HSA_AMD (Closes: #920454)
        * genpatch-aufs: Update to use aufs5-standalone
        * aufs: Update support patchset to aufs5.0 20190311
        * lockdown: Update patchset to 2019-02-18 version
      linux (4.20-1~exp1) experimental; urgency=medium
        * New upstream release: https://kernelnewbies.org/Linux_4.20
        [ Ben Hutchings ]
        * aufs: Update support patchset to aufs4.x-rcN 20181217
        * [rt] Disable until it is updated for 4.20 or later
        * [x86] udeb: Move rfkill to new rfkill-modules package to avoid duplication
        * debian/source/lintian-overrides: Update overrides for GFDL notices
    • Sophie Brun's avatar
      Import Upstream version 5.2.7 · 9bf14b09
      Sophie Brun authored
  11. 22 Jul, 2019 1 commit
    • Salvatore Bonaccorso's avatar
      Import Debian changes 4.19.37-6 · 62b9e3e2
      Salvatore Bonaccorso authored
      linux (4.19.37-6) unstable; urgency=high
        [ John Paul Adrian Glaubitz ]
        * [sh4]: Check for kprobe trap number before trying to handle a kprobe trap
        [ Salvatore Bonaccorso ]
        * tcp: refine memory limit test in tcp_fragment() (Closes: #930904)
        * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272)
        [ Steve McIntyre ]
        * [arm64] Improve support for the Huawei TaiShan server platform
          (Closes: #930554):
          - Enable the HNS/ROCE Infiniband driver
          - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS
            and HNS/ROCE Infiniband
          - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list
        [ Cyril Brulebois ]
        * [arm] Backport DTB support for Rasperry Pi Compute Module 3.
        * [arm64] Backport DTB support for Rasperry Pi Compute Module 3.
  12. 20 Jun, 2019 1 commit
    • Ben Hutchings's avatar
      Import Debian changes 4.19.37-5 · 073fe6c9
      Ben Hutchings authored
      linux (4.19.37-5) unstable; urgency=medium
        [ Romain Perier ]
        * [sparc64] Fix device naming inconsistency between sunhv_console and
          sunhv_reg (Closes: #926539)
        [ Ben Hutchings ]
        * tcp: Avoid ABI change for DoS fixes (Closes: #930743)
        * Add ABI reference for 4.19.0-5
  13. 19 Jun, 2019 1 commit
    • Ben Hutchings's avatar
      Import Debian changes 4.19.37-4 · 48e1d6fe
      Ben Hutchings authored
      linux (4.19.37-4) unstable; urgency=high
        [ Ben Hutchings ]
        * libbpf: Fix various build bugs:
          - Drop unnecessary changes from "libbpf: add SONAME to shared object"
          - libbpf: Use only 2 components in soversion, matching package name
            (Closes: #929187)
          - libbpf: Build out-of-tree
        * README.source: Document the various makefiles and use of out-of-tree builds
        * [x86] lockdown,sysrq: Enable ALLOW_LOCKDOWN_LIFT_BY_SYSRQ (Closes: #929583)
        * mwifiex: Fix possible buffer overflows at parsing bss descriptor
        * mwifiex: Abort at too short BSS descriptor element
        * mwifiex: Don't abort on small, spec-compliant vendor IEs
        * mm/mincore.c: make mincore() more conservative (CVE-2019-5489)
        * mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
        * tcp: limit payload size of sacked skbs (CVE-2019-11477)
        * tcp: tcp_fragment() should apply sane memory limits (CVE-2019-11478)
        * tcp: add tcp_min_snd_mss sysctl (CVE-2019-11479)
        * tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
        [ Romain Perier ]
        * [rt] Update to 4.19.37-rt20:
          - powerpc/pseries/iommu: Use a locallock instead local_irq_save()
          - powerpc: reshuffle TIF bits
          - tty/sysrq: Convert show_lock to raw_spinlock_t
          - drm/i915: Don't disable interrupts independently of the lock
          - sched/completion: Fix a lockup in wait_for_completion()
        [ Salvatore Bonaccorso ]
        * brcmfmac: assure SSID length from firmware is limited (CVE-2019-9500)
        * brcmfmac: add subtype check for event handling in data path
        * ext4: zero out the unused memory region in the extent tree block
        * Bluetooth: hidp: fix buffer overflow (CVE-2019-11884)
        [ Aurelien Jarno ]
        * [mips] Correctly bounds check virt_addr_valid (Closes: #929366)
        [ John Paul Adrian Glaubitz ]
        * [sparc64] udeb: Disable suffix for kernel-image
        [ Alper Nebi Yasak ]
        * udeb: input-modules: Include all keyboard driver modules
        * [arm64] udeb: kernel-image: Include cros_ec_spi and SPI drivers
        * [arm64] udeb: kernel-image: Include phy-rockchip-pcie
        * [arm64] udeb: usb-modules: Include phy-rockchip-typec, extcon-usbc-cros-ec
        * [arm64] udeb: mmc-modules: Include phy-rockchip-emmc
        * [arm64] udeb: fb-modules: Include rockchipdrm, panel-simple, pwm_bl and
      linux (4.19.37-3) unstable; urgency=medium
        * [powerpc*] 64s: Include cpu header (fixes FTBFS)
  14. 15 May, 2019 1 commit
    • Ben Hutchings's avatar
      Import Debian changes 4.19.37-2 · 56f9a686
      Ben Hutchings authored
      linux (4.19.37-2) unstable; urgency=high
        * debian/bin: Fix Python static checker regressions (Closes: #928618)
        * Clean up speculation mitigations:
          - Documentation/l1tf: Fix small spelling typo
          - x86/cpu: Sanitize FAM6_ATOM naming
          - kvm: x86: Report STIBP on GET_SUPPORTED_CPUID
          - x86/msr-index: Cleanup bit defines
          - x86/speculation: Consolidate CPU whitelists
          - Documentation: Move L1TF to separate directory
          - cpu/speculation: Add 'mitigations=' cmdline option
          - x86/speculation: Support 'mitigations=' cmdline option
          - powerpc/speculation: Support 'mitigations=' cmdline option
          - s390/speculation: Support 'mitigations=' cmdline option
          - x86/speculation/mds: Add 'mitigations=' support for MDS
        * [x86] Mitigate Microarchitectural Data Sampling (MDS) vulnerabilities
          (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091):
          - x86/speculation/mds: Add basic bug infrastructure for MDS
          - x86/speculation/mds: Add BUG_MSBDS_ONLY
          - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests
          - x86/speculation/mds: Add mds_clear_cpu_buffers()
          - x86/speculation/mds: Clear CPU buffers on exit to user
          - x86/kvm/vmx: Add MDS protection when L1D Flush is not active
          - x86/speculation/mds: Conditionally clear CPU buffers on idle entry
          - x86/speculation/mds: Add mitigation control for MDS
          - x86/speculation/mds: Add sysfs reporting for MDS
          - x86/speculation/mds: Add mitigation mode VMWERV
          - Documentation: Add MDS vulnerability documentation
          - x86/speculation/mds: Add mds=full,nosmt cmdline option
          - x86/speculation: Move arch_smt_update() call to after mitigation decisions
          - x86/speculation/mds: Add SMT warning message
          - x86/speculation/mds: Fix comment
          - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off
          - x86/mds: Add MDSUM variant to the MDS documentation
          - Documentation: Correct the possible MDS sysfs values
          - x86/speculation/mds: Fix documentation typo
        * [x86] linux-cpupower: Update CPPFLAGS for change in <asm/msr-index.h>
  15. 09 May, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 4.19.37-1 · 4e6875c2
      Ben Hutchings authored
      linux (4.19.37-1) unstable; urgency=medium
        * New upstream stable update:
          - media: uvcvideo: Fix 'type' check leading to overflow
          - vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel
          - perf script: Fix crash with printing mixed trace point and other events
          - perf core: Fix perf_proc_update_handler() bug
          - perf tools: Handle TOPOLOGY headers with no CPU
          - perf script: Fix crash when processing recorded stat data
          - IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM
          - [amd64] iommu/amd: Call free_iova_fast with pfn in map_sg
          - [amd64] iommu/amd: Unmap all mapped pages in error path of map_sg
          - [riscv64] fixup max_low_pfn with PFN_DOWN.
          - ipvs: Fix signed integer overflow when setsockopt timeout
          - [amd64] iommu/amd: Fix IOMMU page flush when detach device from a domain
          - [armhf] clk: ti: Fix error handling in ti_clk_parse_divider_data()
          - [arm64] clk: qcom: gcc: Use active only source for CPUSS clocks
          - [riscv64] Adjust mmap base address at a third of task size
          - IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start
          - iomap: get/put the page in iomap_page_create/release()
          - iomap: fix a use after free in iomap_dio_rw
          - [arm64] net: hns: Fix for missing of_node_put() after of_parse_phandle()
          - [arm64] net: hns: Restart autoneg need return failed when autoneg off
          - [arm64] net: hns: Fix wrong read accesses via Clause 45 MDIO protocol
          - [armhf,arm64] net: stmmac: dwmac-rk: fix error handling in
          - netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are
          - nfs: Fix NULL pointer dereference of dev_name
          - qed: Fix bug in tx promiscuous mode settings
          - qed: Fix LACP pdu drops for VFs
          - qed: Fix VF probe failure while FLR
          - qed: Fix system crash in ll2 xmit
          - qed: Fix stack out of bounds bug
          - scsi: libfc: free skb when receiving invalid flogi resp
          - scsi: scsi_debug: fix write_same with virtual_gb problem
          - scsi: bnx2fc: Fix error handling in probe()
          - scsi: 53c700: pass correct "dev" to dma_alloc_attrs()
          - net: macb: Apply RXUBR workaround only to versions with errata
          - [amd64] boot/compressed/64: Set EFER.LME=1 in 32-bit trampoline before
            returning to long mode
          - cifs: fix computation for MAX_SMB2_HDR_SIZE
          - [x86] microcode/amd: Don't falsely trick the late loading mechanism
          - [arm64] kprobe: Always blacklist the KVM world-switch code
          - apparmor: Fix aa_label_build() error handling for failed merges
          - [x86] kexec: Don't setup EFI info if EFI runtime is not enabled
          - proc: fix /proc/net/* after setns(2)
          - mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone
          - mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone
          - fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
          - autofs: drop dentry reference only when it is never used
          - autofs: fix error return in autofs_fill_super()
          - mm, memory_hotplug: fix off-by-one in is_pageblock_removable
          - [armhf] OMAP: dts: N950/N9: fix onenand timings
          - [armhf] dts: omap4-droid4: Fix typo in cpcap IRQ flags
          - [armhf] dts: sun8i: h3: Add ethernet0 alias to Beelink X2
          - [arm64] dts: meson: Fix IRQ trigger type for macirq
          - [arm64] dts: meson8b: odroidc1: mark the SD card detection GPIO
          - [arm64] dts: meson8m2: mxiii-plus: mark the SD card detection GPIO
          - [arm64] dts: imx6sx: correct backward compatible of gpt
          - [armhf] pinctrl: mcp23s08: spi: Fix regmap allocation for mcp23s18
          - wlcore: sdio: Fixup power on/off sequence
          - bpf: sock recvbuff must be limited by rmem_max in bpf_setsockopt()
          - [arm64] dts: add msm8996 compatible to gicv3
          - batman-adv: release station info tidstats
          - [armhf,arm64] irqchip/gic-v4: Fix occasional VLPI drop
          - [armhf,arm64] irqchip/gic-v3-its: Gracefully fail on LPI exhaustion
          - drm/amdgpu: Add missing power attribute to APU check
          - drm/radeon: check if device is root before getting pci speed caps
          - drm/amdgpu: Transfer fences to dmabuf importer
          - [armhf,arm64] net: stmmac: Fallback to Platform Data clock in Watchdog
          - [armhf,arm64] net: stmmac: Disable EEE mode earlier in XMIT callback
          - [armhf,arm64] irqchip/gic-v3-its: Fix ITT_entry_size accessor
          - relay: check return of create_buf_file() properly
          - bpf: fix potential deadlock in bpf_prog_register
          - bpf: Fix syscall's stackmap lookup potential deadlock
          - [armhf,arm64] drm/sun4i: tcon: Prepare and enable TCON channel 0 clock at
          - vsock/virtio: fix kernel panic after device hot-unplug
          - vsock/virtio: reset connected sockets on device removal
          - netfilter: nf_nat: skip nat clash resolution for same-origin entries
          - [s390x] qeth: release cmd buffer in error paths
          - [s390x] qeth: fix use-after-free in error path
          - [s390x] qeth: cancel close_dev work before removing a card
          - perf symbols: Filter out hidden symbols from labels
          - perf trace: Support multiple "vfs_getname" probes
          - [mips*] Remove function size check in get_frame_info()
          - Revert "scsi: libfc: Add WARN_ON() when deleting rports"
          - [armhf] i2c: omap: Use noirq system sleep pm ops to idle device for
          - drm/amdgpu: use spin_lock_irqsave to protect vm_manager.pasid_idr
          - nvme: lock NS list changes while handling command effects
          - nvme-pci: fix rapid add remove sequence
          - fs: ratelimit __find_get_block_slow() failure message.
          - qed: Fix EQ full firmware assert.
          - qed: Consider TX tcs while deriving the max num_queues for PF.
          - qede: Fix system crash on configuring channels.
          - blk-iolatency: fix IO hang due to negative inflight counter
          - nvme-pci: add missing unlock for reset error
          - Input: wacom_serial4 - add support for Wacom ArtPad II tablet
          - Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
          - [x86] iscsi_ibft: Fix missing break in switch statement
          - scsi: aacraid: Fix missing break in switch statement
          - [x86] PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub
          - [arm64] dts: zcu100-revC: Give wifi some time after power-on
          - [arm64] dts: hikey: Give wifi some time after power-on
          - [arm64] dts: hikey: Revert "Enable HS200 mode on eMMC"
          - [armhf] dts: exynos: Fix pinctrl definition for eMMC RTSN line on Odroid
          - [armhf] dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
          - [armhf] dts: exynos: Fix max voltage for buck8 regulator on Odroid
          - drm: disable uncached DMA optimization for ARM and arm64
            (Closes: #923723)
          - netfilter: xt_TEE: fix wrong interface selection
          - netfilter: xt_TEE: add missing code to get interface index in checkentry.
          - gfs2: Fix missed wakeups in find_insert_glock
          - cifs: allow calling SMB2_xxx_free(NULL) (Closes: #919290)
          - ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom
          - driver core: Postpone DMA tear-down until after devres release
          - [x86] perf/intel: Make cpuc allocations consistent
          - [x86] perf/intel: Generalize dynamic constraint creation
          - [x86] Add TSX Force Abort CPUID/MSR
          - [x86] perf/intel: Implement support for TSX Force Abort
          - connector: fix unsafe usage of ->real_parent
          - gro_cells: make sure device is up in gro_cells_receive()
          - ipv4/route: fail early when inet dev is missing
          - l2tp: fix infoleak in l2tp_ip6_recvmsg()
          - lan743x: Fix RX Kernel Panic
          - lan743x: Fix TX Stall Issue
          - net: sit: fix UBSAN Undefined behaviour in check_6rd
          - net/x25: fix use-after-free in x25_device_event()
          - net/x25: reset state in x25_connect()
          - pptp: dst_release sk_dst_cache in pptp_sock_destruct
          - route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
          - rxrpc: Fix client call queueing, waiting for channel
          - sctp: remove sched init from sctp_stream_init
          - tcp: do not report TCP_CM_INQ of 0 for closed connections
          - tcp: Don't access TCP_SKB_CB before initializing it
          - tcp: handle inet_csk_reqsk_queue_add() failures
          - vxlan: Fix GRO cells race condition between receive and link delete
          - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
          - net/mlx4_core: Fix reset flow when in command polling mode
          - net/mlx4_core: Fix locking in SRIOV mode when switching between events
            and polling
          - net/mlx4_core: Fix qp mtt size calculation
          - net/x25: fix a race in x25_bind()
          - mdio_bus: Fix use-after-free on device_register fails
          - net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
          - ipv6: route: purge exception on removal
          - team: use operstate consistently for linkup
          - ipvlan: disallow userns cap_net_admin to change global mode/flags
          - ipv6: route: enforce RCU protection in rt6_update_exception_stamp_rt()
          - ipv6: route: enforce RCU protection in ip6_route_check_nh_onlink()
          - bonding: fix PACKET_ORIGDEV regression
          - net/smc: fix smc_poll in SMC_INIT state
          - af_unix: missing barriers in some of unix_sock ->addr and ->path accesses
          - net: sched: flower: insert new filter to idr after setting its mask
          - f2fs: wait on atomic writes to count F2FS_CP_WB_DATA
          - ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against
            Liquid Saffire 56
          - ALSA: firewire-motu: fix construction of PCM frame for capture direction
          - [x86] ALSA: hda: Extend i915 component bind timeout
          - [x86] ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
          - ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
          - ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone
          - ALSA: hda/realtek: Enable headset MIC of Acer TravelMate X514-51T with
          - [x86] perf/intel: Fix memory corruption
          - [x86] perf/intel: Make dev_attr_allow_tsx_force_abort static
          - md: It's wrong to add len to sector_nr in raid10 reshape twice
          - drm: Block fb changes for async plane updates
          - i40e: report correct statistics when XDP is enabled
          - vhost/vsock: fix vhost vsock cid hashing inconsistent
          - media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
          - 9p: use inode->i_lock to protect i_size_write() under 32-bit
          - 9p/net: fix memory leak in p9_client_create
          - [armhf] iio: adc: exynos-adc: Fix NULL pointer exception on unbind
          - [x86] mei: hbm: clean the feature flags on link reset
          - [x86] mei: bus: move hw module get/put to probe/release
          - crypto: cfb - add missing 'chunksize' property
          - crypto: cfb - remove bogus memcpy() with src == dest
          - crypto: ahash - fix another early termination in hash walk
          - [armhf] drm/imx: ignore plane updates on disabled crtcs
          - [armhf] drm/imx: imx-ldb: add missing of_node_puts
          - [x86] ASoC: rt5682: Correct the setting while select ASRC clk for AD/DA
          - [armhf] clocksource: timer-ti-dm: Fix pwm dmtimer usage of fck
          - [armhf,arm64] KVM: vgic: Make vgic_dist->lpi_list_lock a raw_spinlock
          - [arm64] dts: rockchip: fix graph_port warning on rk3399 bob kevin and
          - [s390x] dasd: fix using offset into zero size array error
          - Input: pwm-vibra - prevent unbalanced regulator
          - Input: pwm-vibra - stop regulator after disabling pwm, not before
          - [armhf] dts: Configure clock parent for pwm vibra
          - [armhf] OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be
          - ASoC: dapm: fix out-of-bounds accesses to DAPM lookup tables
          - [armhf,arm64] KVM: Reset the VCPU without preemption and vcpu state
          - [armhf,arm64] KVM: Allow a VCPU to fully reset itself
          - [armhf,arm64] KVM: Don't panic on failure to properly reset system
          - [armhf,arm64] KVM: vgic: Always initialize the group of private IRQs
          - [arm64] KVM: Forbid kprobing of the VHE world-switch code
          - [armhf] OMAP2+: fix lack of timer interrupts on CPU1 after hotplug
          - mac80211: call drv_ibss_join() on restart
          - mac80211: Fix Tx aggregation session tear down with ITXQs
          - netfilter: compat: initialize all fields in xt_init
          - blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue
          - ipvs: fix dependency on nf_defrag_ipv6
          - floppy: check_events callback should not return a negative number
          - xprtrdma: Make sure Send CQ is allocated on an existing compvec
          - NFS: Don't use page_file_mapping after removing the page
          - mm/gup: fix gup_pmd_range() for dax
          - Revert "mm: use early_pfn_to_nid in page_ext_init"
          - scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd
          - [armhf] net: dsa: bcm_sf2: potential array overflow in
          - [x86] CPU: Add Icelake model number
          - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs
          - [arm64] net: hns: Fix object reference leaks in hns_dsaf_roce_reset()
          - [arm*] i2c: bcm2835: Clear current buffer pointers and counts after a
          - [armhf] clk: sunxi-ng: v3s: Fix TCON reset de-assert bit
          - kallsyms: Handle too long symbols in kallsyms.c
          - [armhf] clk: sunxi: A31: Fix wrong AHB gate number
          - esp: Skip TX bytes accounting when sending from a request socket
          - [armhf] 8824/1: fix a migrating irq bug when hotplug cpu
          - bpf: only adjust gso_size on bytestream protocols
          - bpf: fix lockdep false positive in stackmap
          - af_key: unconditionally clone on broadcast
          - [armhf] 8835/1: dma-mapping: Clear DMA ops on teardown
          - assoc_array: Fix shortcut creation
          - keys: Fix dependency loop between construction record and auth key
          - scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
          - [armhf] net: dsa: bcm_sf2: Do not assume DSA master supports WoL
          - [arm64] pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
          - qmi_wwan: apply SET_DTR quirk to Sierra WP7607
          - net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
          - xfrm: Fix inbound traffic via XFRM interfaces across network namespaces
          - ASoC: topology: free created components in tplg load error
          - qed: Fix iWARP buffer size provided for syn packet processing.
          - qed: Fix iWARP syn packet mac address validation.
          - [armhf] dts: armada-xp: fix Armada XP boards NAND description
          - [arm64] Relax GIC version check during early boot
          - [armhf] tegra: Restore DT ABI on Tegra124 Chromebooks
          - [armhf,arm64] net: marvell: mvneta: fix DMA debug warning
          - mm: handle lru_add_drain_all for UP properly
          - tmpfs: fix link accounting when a tmpfile is linked in
          - ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN
          - phonet: fix building with clang
          - mac80211_hwsim: propagate genlmsg_reply return code
          - bpf, lpm: fix lookup bug in map_delete_elem
          - [arm64] net: thunderx: make CFG_DONE message to run through generic
            send-ack sequence
          - [arm64] net: thunderx: add nicvf_send_msg_to_pf result check for
          - nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K
          - nfp: bpf: fix ALU32 high bits clearance bug
          - bnxt_en: Fix typo in firmware message timeout logic.
          - bnxt_en: Wait longer for the firmware message response to complete.
          - net: set static variable an initial value in atl2_probe()
          - tmpfs: fix uninitialized return value in shmem_link
          - stm class: Prevent division by zero
          - nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
          - acpi/nfit: Fix bus command validation
          - nfit/ars: Attempt a short-ARS whenever the ARS state is idle at boot
          - nfit/ars: Attempt short-ARS even in the no_init_ars case
          - [amd64] libnvdimm/label: Clear 'updating' flag after label-set update
          - [amd64] libnvdimm, pfn: Fix over-trim in trim_pfn_device()
          - [amd64] libnvdimm/pmem: Honor force_raw for legacy pmem regions
          - [amd64] libnvdimm: Fix altmap reservation size calculation
          - cgroupfs: fix cgroup_do_mount() handling of failure exits
          - crypto: aead - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
          - crypto: aegis - fix handling chunked inputs
          - [arm64] crypto: aes-neonbs - fix returning final keystream block
          - crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
          - crypto: morus - fix handling chunked inputs
          - crypto: pcbc - remove bogus memcpy()s with src == dest
          - crypto: skcipher - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
          - crypto: testmgr - skip crc32c context test for ahash algorithms
          - [x86] crypto: aegis - fix handling chunked inputs and MAY_SLEEP
          - [x86] crypto: aesni-gcm - fix crash on empty plaintext
          - [x86] crypto: morus - fix handling chunked inputs and MAY_SLEEP
          - [arm64] crypto: aes-ccm - fix logical bug in AAD MAC handling
          - [arm64] crypto: aes-ccm - fix bugs in non-NEON fallback routine
          - CIFS: Do not reset lease state to NONE on lease break
          - CIFS: Do not skip SMB2 message IDs on send failures
          - CIFS: Fix read after write for files with read caching
          - tracing: Use strncpy instead of memcpy for string keys in hist triggers
          - tracing: Do not free iter->trace in fail path of tracing_open_pipe()
          - tracing/perf: Use strndup_user() instead of buggy open-coded version
          - xen: fix dom0 boot on huge systems
          - ACPI / device_sysfs: Avoid OF modalias creation for removed device
          - [armhf] mmc: sdhci-esdhc-imx: fix HS400 timing issue
          - mmc:fix a bug when max_discard is 0
          - netfilter: ipt_CLUSTERIP: fix warning unused variable cn
          - [armhf] spi: ti-qspi: Fix mmap read when more than one CS in use
          - [amd64] spi: pxa2xx: Setup maximum supported DMA transfer length
          - [armhf] regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
          - [arm64] regulator: max77620: Initialize values for DT properties
          - [armhf] regulator: s2mpa01: Fix step values for some LDOs
          - [armhf] clocksource/drivers/exynos_mct: Move one-shot check from tick
            clear to ISR
          - [armhf] clocksource/drivers/exynos_mct: Clear timer interrupt when
          - [arm64] clocksource/drivers/arch_timer: Workaround for Allwinner A64
            timer instability (Closes: #928457)
          - [s390x] setup: fix early warning messages
          - [s390x] virtio: handle find on invalid queue gracefully
          - scsi: virtio_scsi: don't send sc payload with tmfs
          - scsi: aacraid: Fix performance issue on logical drives
          - scsi: sd: Optimal I/O size should be a multiple of physical block size
          - scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
          - scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by
          - fs/devpts: always delete dcache dentry-s in dput()
          - splice: don't merge into linked buffers
          - ovl: During copy up, first copy up data and then xattrs
          - ovl: Do not lose security.capability xattr over metadata file copy-up
          - Btrfs: setup a nofs context for memory allocation at btrfs_create_tree()
          - Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
          - btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
          - Btrfs: fix corruption reading shared and compressed extents after hole
          - libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
          - [armhf,arm64] irqchip/gic-v3-its: Avoid parsing _indirect_ twice for
            Device table
          - [x86] kprobes: Prohibit probing on optprobe template code
          - [armhf,arm64] cpufreq: tegra124: add missing of_node_put()
          - ext4: fix check of inode in swap_inode_boot_loader
          - ext4: cleanup pagecache before swap i_data
          - ext4: update quota information while swapping boot loader inode
          - ext4: add mask of ext4 flags to swap
          - ext4: fix crash during online resizing
          - PCI/ASPM: Use LTR if already enabled by platform
          - PCI/DPC: Fix print AER status in DPC event handling
          - [armhf,arm64] PCI: dwc: skip MSI init if MSIs have been explicitly
          - IB/hfi1: Close race condition on user context disable and close
          - [armhf] clk: clk-twl6040: Fix imprecise external abort for pdmclk
          - [armhf] clk: samsung: exynos5: Fix possible NULL pointer exception on
            platform_device_alloc() failure
          - [armhf] clk: samsung: exynos5: Fix kfree() of const memory on setting
          - [armhf,arm64] usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
          - [x86] usb: typec: tps6598x: handle block writes separately with plain-I2C
          - mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
          - mm/vmalloc: fix size check for remap_vmalloc_range_partial()
          - mm/memory.c: do_fault: avoid usage of stale vm_area_struct
          - kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
          - device property: Fix the length used in PROPERTY_ENTRY_STRING()
          - [x86] intel_th: Don't reference unassigned outputs
          - parport_pc: fix find_superio io compare code, should use equal test.
          - [armhf,arm64] i2c: tegra: fix maximum transfer size
          - [armhf,arm64] gpio: pca953x: Fix dereference of irq data in shutdown
          - [armhf] can: flexcan: FLEXCAN_IFLAG_MB: add () around macro argument
          - [x86] drm/i915: Relax mmap VMA check
          - bpf: only test gso type on gso packets
          - [arm64] serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
          - serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
          - serial: 8250_pci: Fix number of ports for ACCES serial cards
          - serial: 8250_pci: Have ACCES cards that use the four port Pericom
            PI7C9X7954 chip use the pci_pericom_setup()
          - jbd2: clear dirty flag when revoking a buffer from an older transaction
          - jbd2: fix compile warning when using JBUFFER_TRACE
          - selinux: add the missing walk_size + len check in
          - security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
          - [powerpc*] powerpc/32: Clear on-stack exception marker upon exception
          - [powerpc*] powernv: Make opal log only readable by root
          - [powerpc*] powernv: Don't reprogram SLW image on every KVM guest
          - [powerpc*] Fix 32-bit KVM-PR lockup and host crash with MacOS guest
          - [powerpc*] ptrace: Simplify vr_get/set() to avoid GCC warning
          - [powerpc*] hugetlb: Don't do runtime allocation of 16G pages in LPAR
          - [powerpc*] traps: fix recoverability of machine check handling on
          - [powerpc*] traps: Fix the message printed when stack overflows
          - [arm64] Fix HCR.TGE status for NMI contexts
          - [arm64] debug: Ensure debug handlers check triggering exception level
          - [arm64] KVM: Fix architecturally invalid reset value for FPEXC32_EL2
          - ipmi_si: fix use-after-free of resource->name
          - dm: fix to_sector() for 32bit
          - dm integrity: limit the rate of error messages
          - mfd: sm501: Fix potential NULL pointer dereference
          - NFS: Fix I/O request leakages
          - NFS: Fix an I/O request leakage in nfs_do_recoalesce
          - NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
          - nfsd: fix performance-limiting session calculation
          - nfsd: fix memory corruption caused by readdir
          - nfsd: fix wrong check in write_v4_end_grace()
          - NFSv4.1: Reinitialise sequence results before retransmitting a request
          - svcrpc: fix UDP on servers with lots of threads
          - PM / wakeup: Rework wakeup source timer cancellation
          - bcache: never writeback a discard operation
          - vt: perform safe console erase in the right order
          - [x86] unwind/orc: Fix ORC unwind table alignment
          - [x86] perf intel-pt: Fix CYC timestamp calculation after OVF
          - perf tools: Fix split_kallsyms_for_kcore() for trampoline symbols
          - perf auxtrace: Define auxtrace record alignment
          - [x86] perf intel-pt: Fix overlap calculation for padding
          - [x86] perf/intel/uncore: Fix client IMC events return huge result
          - [x86] perf intel-pt: Fix divide by zero when TSC is not available
          - md: Fix failed allocation of md_register_thread
          - [x86] tpm/tpm_crb: Avoid unaligned reads in crb_recv()
          - tpm: Unify the send callback behaviour
          - rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
          - media: lgdt330x: fix lock status reporting
          - media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
          - drm/fb-helper: generic: Fix drm_fbdev_client_restore()
          - drm/radeon/evergreen_cs: fix missing break in switch statement
          - drm/amd/powerplay: correct power reading on fiji
          - drm/amd/display: don't call dm_pp_ function from an fpu block
          - KVM: Call kvm_arch_memslots_updated() before updating memslots
          - [x86] KVM: mmu: Detect MMIO generation wrap in any address space
          - [x86] KVM: mmu: Do not cache MMIO accesses while memslots are in flux
          - [x86] KVM: nVMX: Sign extend displacements of VMX instr's mem operands
          - [x86] KVM: nVMX: Apply addr size mask to effective address for VMX
          - [x86] KVM: nVMX: Ignore limit checks on VMX instructions using flat
          - bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
          - [s390x] setup: fix boot crash for machine without EDAT-1
          - [x86] ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist
          - ALSA: firewire-motu: use 'version' field of unit directory to identify
          - [x86] drm/vmwgfx: Don't double-free the mode stored in par->set_mode
          - [x86] drm/vmwgfx: Return 0 when gmrid::get_node runs out of ID's
          - [amd64] iommu/amd: fix sg->dma_address for sg->offset bigger than
          - libceph: wait for latest osdmap in ceph_monc_blacklist_add()
          - udf: Fix crash on IO error during truncate
          - [mips64*/loongson-3] lemote-2f: Add IRQF_NO_SUSPEND to "cascade"
          - [mips*] Ensure ELF appended dtb is relocated
          - [mips*r6] Fix kernel crash for R6 in jump label branch function
          - [powerpc*] vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038
          - [powerpc*] scsi: ibmvscsi: Protect ibmvscsi_head from concurrent
          - [powerpc*] scsi: ibmvscsi: Fix empty event pool access during host
          - futex: Ensure that futex address is aligned in handle_futex_death()
          - cifs: allow guest mounts to work for smb3.11
          - perf probe: Fix getting the kernel map
          - [x86] objtool: Move objtool_file struct off the stack
          - [armhf,arm64] irqchip/gic-v3-its: Fix comparison logic in lpi_range_cmp
          - SMB3: Fix SMB3.1.1 guest mounts to Samba
          - [x86] ALSA: Fix runtime PM for hdmi-lpe-audio
          - ALSA: hda/ca0132 - make pci_iounmap() call conditional
          - ALSA: ac97: Fix of-node refcount unbalance
          - ext4: fix NULL pointer dereference while journal is aborted
          - ext4: fix data corruption caused by unaligned direct AIO
          - ext4: brelse all indirect buffer in ext4_ind_remove_space()
          - media: v4l2-ctrls.c/uvc: zero v4l2_event
          - Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
          - Bluetooth: Fix decrementing reference count twice in releasing socket
          - Bluetooth: hci_ldisc: Initialize hci_dev before open()
          - Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in
          - drm: Reorder set_property_atomic to avoid returning with an active ww_ctx
          - RDMA/cma: Rollback source IP address if failing to acquire device
          - f2fs: fix to avoid deadlock of atomic file operations
          - netfilter: ebtables: remove BUGPRINT messages
          - loop: access lo_backing_file only when the loop device is Lo_bound
          - [x86] unwind: Handle NULL pointer calls better in frame unwinder
          - [x86] unwind: Add hardcoded ORC entry for NULL
          - ALSA: hda - Record the current power state before suspend/resume calls
          - ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
          - power: supply: charger-manager: Fix incorrect return value
          - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt
          - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer
          - ipmi_si: Fix crash when using hard-coded device
          - dccp: do not use ipv6 header for ipv4 flow
          - genetlink: Fix a memory leak on error path
          - ipv6: make ip6_create_rt_rcu return ip6_null_entry instead of NULL
          - mac8390: Fix mmio access size probe
          - mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
          - net: aquantia: fix rx checksum offload for UDP/TCP over IPv6
          - net: datagram: fix unbounded loop in __skb_try_recv_datagram()
          - net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
          - [arm64] net: phy: meson-gxl: fix interrupt support
          - net: rose: fix a possible stack overflow
          - [armhf,arm64] net: stmmac: fix memory corruption with large MTUs
          - net-sysfs: call dev_hold if kobject_init_and_add success
          - packets: Always register packet sk in the same order
          - rhashtable: Still do rehash when we get EEXIST
          - sctp: get sctphdr by offset in sctp_compute_cksum
          - sctp: use memdup_user instead of vmemdup_user
          - tcp: do not use ipv6 header for ipv4 flow
          - tipc: allow service ranges to be connect()'ed on RDM/DGRAM
          - tipc: change to check tipc_own_id to return in tipc_net_stop
          - tipc: fix cancellation of topology subscriptions
          - tun: properly test for IFF_UP
          - vrf: prevent adding upper devices
          - vxlan: Don't call gro_cells_destroy() before device is unregistered
          - ila: Fix rhashtable walker list corruption
          - net: sched: fix cleanup NULL pointer exception in act_mirr
          - [arm64] thunderx: enable page recycling for non-XDP case
          - [arm64] thunderx: eliminate extra calls to put_page() for pages held for
          - tun: add a missing rcu_read_unlock() in error path
          - [powerpcspe] fsl: Add infrastructure to fixup branch predictor flush
          - [powerpcspe] fsl: Add macro to flush the branch predictor
          - [powerpcspe] fsl: Emulate SPRN_BUCSR register
          - [powerpcspe] fsl: Add nospectre_v2 command line argument
          - [powerpcspe] fsl: Flush the branch predictor at each kernel entry (32 bit)
          - [powerpcspe] fsl: Enable runtime patching if nospectre_v2 boot arg is used
          - [powerpcspe] fsl: Update Spectre v2 reporting
          - [powerpcspe] fsl: Fixed warning: orphan section `__btb_flush_fixup'
          - [powerpc*] security: Fix spectre_v2 reporting
          - Btrfs: fix incorrect file size after shrinking truncate and fsync
          - btrfs: remove WARN_ON in log_dir_items
          - btrfs: don't report readahead errors and don't update statistics
          - btrfs: raid56: properly unmap parity page in finish_parity_scrub()
          - btrfs: Avoid possible qgroup_rsv_size overflow in
          - Btrfs: fix assertion failure on fsync with NO_HOLES enabled
          - [armhf] imx6q: cpuidle: fix bug that CPU might not wake up at expected
          - [powerpc*] bpf: Fix generation of load/store DW instructions
          - [s390x] vfio: ccw: only free cp on final interrupt
          - NFS: fix mount/umount race in nlmclnt.
          - NFSv4.1 don't free interrupted slot on open
          - ALSA: rawmidi: Fix potential Spectre v1 vulnerability
          - ALSA: seq: oss: Fix Spectre v1 vulnerability
          - ALSA: pcm: Fix possible OOB access in PCM oss plugins
          - ALSA: pcm: Don't suspend stream in unrecoverable PCM state
          - [x86] ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO
          - [x86] ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB
          - [x86] ALSA: hda/realtek: Enable headset MIC of Acer AIO with ALC286
          - [x86] ALSA: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with
          - [x86] ALSA: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432
            headset mic
          - [x86] ALSA: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with
          - [x86] ALSA: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256
          - [x86] ALSA: hda/realtek: Enable headset MIC of ASUS X430UN and X512DK
            with ALC256
          - [x86] ALSA: hda/realtek - Fix speakers on Acer Predator Helios 500 Ryzen
          - kbuild: modversions: Fix relative CRC byte order interpretation
          - fs/open.c: allow opening only regular files during execve()
          - ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock
          - scsi: sd: Fix a race between closing an sd device and sd I/O
          - scsi: sd: Quiesce warning if device does not report optimal I/O size
          - [s390x] scsi: zfcp: fix rport unblock if deleted SCSI devices on
          - [s390x] scsi: zfcp: fix scsi_eh host reset with port_forced ERP for
            non-NPIV FCP devices
          - [armhf,arm64] drm/rockchip: vop: reset scale mode when win is disabled
          - [x86] staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest
          - staging: speakup_soft: Fix alternate speech with other synths
          - staging: vt6655: Remove vif check from vnt_interrupt
          - staging: vt6655: Fix interrupt race condition on device start up.
          - [arm64] serial: mvebu-uart: Fix to avoid a potential NULL pointer
          - [sh4] serial: sh-sci: Fix setting SCSCR_TIE while transferring data
          - USB: serial: cp210x: add new device id
          - USB: serial: ftdi_sio: add additional NovaTech products
          - USB: serial: mos7720: fix mos_parport refcount imbalance on error path
          - USB: serial: option: set driver_info for SIM5218 and compatibles
          - USB: serial: option: add support for Quectel EM12
          - USB: serial: option: add Olicard 600
          - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
          - drm/vgem: fix use-after-free when drm_gem_handle_create() fails
          - [x86] drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
          - gpio: exar: add a check for the return value of ida_simple_get fails
          - [armhf,arm64] phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG
          - USB: gadget: f_hid: fix deadlock in f_hidg_write()
          - usb: common: Consider only available nodes for dr_mode
          - xhci: Fix port resume done detection for SS ports with LPM enabled
          - usb: xhci: dbc: Don't free all memory with spinlock held
          - xhci: Don't let USB3 ports stuck in polling state prevent suspend
          - usb: cdc-acm: fix race during wakeup blocking TX traffic
          - mm: add support for kmem caches in DMA32 zone
          - [armhf,arm64] iommu/io-pgtable-arm-v7s: request DMA32 memory, and improve
          - mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
          - mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
          - perf pmu: Fix parser error for uncore event alias
          - [x86] perf intel-pt: Fix TSC slip
          - [x86] objtool: Query pkg-config for libelf location
          - [powerpc*] pseries/energy: Use OF accessor functions to read
          - [powerpc*] powerpc/64: Fix memcmp reading past the end of src/dest
          - watchdog: Respect watchdog cpumask on CPU hotplug
          - cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
          - KVM: Reject device ioctls from processes other than the VM's creator
          - [x86] KVM: update %rip after emulating IO
          - [x86] KVM: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
          - bpf: do not restore dst_reg when cur_state is freed
          - [x86] platform: intel_cht_int33fe: Register all connections at once
          - [x86] platform: intel_cht_int33fe: Add connection for the DP alt mode
          - [x86] platform: intel_cht_int33fe: Add connections for the USB Type-C port
          - usb: typec: class: Don't use port parent for getting mux handles
          - [x86] platform: intel_cht_int33fe: Remove the old connections for the
          - [arm64] debug: Don't propagate UNKNOWN FAR into si_code for debug signals
          - ext4: cleanup bh release code in ext4_ind_remove_space()
          - CIFS: fix POSIX lock leak and invalid ptr deref
          - f2fs: fix to adapt small inline xattr space in __find_inline_xattr()
          - f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
          - tracing: kdb: Fix ftdump to not sleep
          - net/mlx5: Avoid panic when setting vport rate
          - net/mlx5: Avoid panic when setting vport mac, getting vport config
          - [armhf] gpio: gpio-omap: fix level interrupt idling
          - sysctl: handle overflow for file-max
          - [armhf,arm64] net: stmmac: Avoid sometimes uninitialized Clang warnings
          - enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
          - [arm64] scsi: hisi_sas: Set PHY linkrate when disconnected
          - [arm64] scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
          - iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver
          - [x86] hyperv: Fix kernel panic when kexec on HyperV
          - perf c2c: Fix c2c report for empty numa node
          - mm/sparse: fix a bad comparison
          - mm/cma.c: cma_declare_contiguous: correct err handling
          - mm/page_ext.c: fix an imbalance with kmemleak
          - mm, swap: bounds check swap_info array accesses to avoid NULL derefs
          - mm,oom: don't kill global init via memory.oom.group
          - memcg: killed threads should not invoke memcg OOM killer
          - mm, mempolicy: fix uninit memory access
          - mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
          - mm/slab.c: kmemleak no scan alien caches
          - ocfs2: fix a panic problem caused by o2cb_ctl
          - f2fs: do not use mutex lock in atomic context
          - fs/file.c: initialize init_files.resize_wait
          - page_poison: play nicely with KASAN
          - cifs: use correct format characters
          - dm thin: add sanity checks to thin-pool and external snapshot creation
          - f2fs: fix to check inline_xattr_size boundary correctly
          - cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED
          - cifs: Fix NULL pointer dereference of devname
          - netfilter: nf_tables: check the result of dereferencing base_chain->stats
          - netfilter: conntrack: tcp: only close if RST matches exact sequence
          - jbd2: fix invalid descriptor block checksum
          - fs: fix guard_bio_eod to check for real EOD errors
          - tools lib traceevent: Fix buffer overflow in arg_eval
          - PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove()
          - wil6210: check null pointer in _wil_cfg80211_merge_extra_ies
          - mt76: fix a leaked reference by adding a missing of_node_put
          - [armhf,arm64] usb: chipidea: Grab the (legacy) USB PHY by phandle first
          - [powerpc*] powernv/ioda: Fix locked_vm counting for memory used by IOMMU
          - scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
          - [powerpc*] xmon: Fix opcode being uninitialized in print_insn_powerpc
          - [armhf,arm64] coresight: etm4x: Add support to enable ETMv4.2
          - [armhf] 8840/1: use a raw_spinlock_t in unwind
          - [armhf,arm64] iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables
          - [powerpc*] hugetlb: Handle mmap_min_addr correctly in get_unmapped_area
          - btrfs: qgroup: Make qgroup async transaction commit more aggressive
          - [armhf] mmc: omap: fix the maximum timeout setting
          - [armhf.arm64] net: dsa: mv88e6xxx: Add lockdep classes to fix false
            positive splat
          - e1000e: Fix -Wformat-truncation warnings
          - [x86] platform: ideapad-laptop: Fix no_hw_rfkill_list for Lenovo RESCUER
          - loop: set GENHD_FL_NO_PART_SCAN after blkdev_reread_part()
          - IB/mlx4: Increase the timeout for CM cache
          - clk: fractional-divider: check parent rate only if flag is set
          - perf annotate: Fix getting source line failure
          - [arm64] ASoC: qcom: Fix of-node refcount unbalance in qcom_snd_parse_of()
          - cpufreq: acpi-cpufreq: Report if CPU doesn't support boost technologies
          - efi: cper: Fix possible out-of-bounds access
          - [s390x] ism: ignore some errors during deregistration
          - scsi: megaraid_sas: return error when create DMA pool failed
          - scsi: fcoe: make use of fip_mode enum complete
          - drm/amd/display: Clear stream->mode_changed after commit
          - [s390x] perf test: Fix failure of 'evsel-tp-sched' test on s390
          - mwifiex: don't advertise IBSS features without FW support
          - perf report: Don't shadow inlined symbol with different addr range
          - [armhf] SoC: imx-sgtl5000: add missing put_device()
          - mt76: usb: do not run mt76u_queues_deinit twice
          - xen/gntdev: Do not destroy context while dma-bufs are in use
          - vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1
          - [x86] HID: intel-ish-hid: avoid binding wrong ishtp_cl_device
          - cgroup, rstat: Don't flush subtree root unless necessary
          - jbd2: fix race when writing superblock
          - [s390x] perf report: Add s390 diagnosic sampling descriptor size
          - iwlwifi: pcie: fix emergency path
          - ACPI / video: Refactor and fix dmi_is_desktop()
          - kprobes: Prohibit probing on bsearch()
          - kprobes: Prohibit probing on RCU debug routine
          - netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in
          - [armhf] 8833/1: Ensure that NEON code always compiles with Clang
          - ALSA: PCM: check if ops are defined before suspending PCM
          - ath10k: fix shadow register implementation for WCN3990
          - usb: f_fs: Avoid crash due to out-of-scope stack ptr access
          - sched/topology: Fix percpu data types in struct sd_data & struct s_data
          - bcache: fix input overflow to cache set sysfs file io_error_halflife
          - bcache: fix input overflow to sequential_cutoff
          - bcache: fix potential div-zero error of writeback_rate_i_term_inverse
          - bcache: improve sysfs_strtoul_clamp()
          - genirq: Avoid summation loops for /proc/stat
          - [armhf,arm64] net: marvell: mvpp2: fix stuck in-band SGMII negotiation
          - iw_cxgb4: fix srqidx leak during connection abort
          - net: phy: consider latched link-down status in polling mode
          - fbdev: fbmem: fix memory access if logo is bigger than the screen
          - cdrom: Fix race condition in cdrom_sysctl_register
          - drm: rcar-du: add missing of_node_put
          - drm/amd/display: Don't re-program planes for DPMS changes
          - drm/amd/display: Disconnect mpcc when changing tg
          - perf/aux: Make perf_event accessible to setup_aux()
          - e1000e: fix cyclic resets at link up with active tx
          - e1000e: Exclude device from suspend direct complete optimization
          - [x86] platform: intel_pmc_core: Fix PCH IP sts reading
          - i2c: of: Try to find an I2C adapter matching the parent
          - iwlwifi: mvm: fix RFH config command with >=10 CPUs
          - sched/debug: Initialize sd_sysctl_cpus if !CONFIG_CPUMASK_OFFSTACK
          - efi/memattr: Don't bail on zero VA if it equals the region's PA
          - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/
          - drm/vkms: Bugfix extra vblank frame
          - [armhf] dts: lpc32xx: Remove leading 0x and 0s from bindings notation
          - [armhf,arm64] efi: Allow SetVirtualAddressMap() to be omitted
          - [arm64] soc: qcom: gsbi: Fix error handling in gsbi_probe()
          - mt7601u: bump supported EEPROM version
          - [armhf] 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are really care
          - [armhf] avoid Cortex-A9 livelock on tight dmb loops
          - block, bfq: fix in-service-queue check for queue merging
          - [powerpc*] 64s: Clear on-stack exception marker upon exception return
          - cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to
            fix the accounting
          - [armhf,arm64] backlight: pwm_bl: Use gpiod_get_value_cansleep() to get
            initial state
          - tty: increase the default flip buffer limit to 2*640K
          - [powerpc*] pseries: Perform full re-add of CPU for topology update
          - drm/amd/display: Enable vblank interrupt during CRC capture
          - ALSA: dice: add support for Solid State Logic Duende Classic/Mini
          - [armhf,arm64] usb: dwc3: gadget: Fix OTG events when gadget driver isn't
          - [x86] platform: intel-hid: Missing power button release on some Dell
          - perf script python: Use PyBytes for attr in trace-event-python
          - perf script python: Add trace_context extension module to sys.modules
          - hwrng: virtio - Avoid repeated init of completion
          - [armhf,arm64] soc/tegra: fuse: Fix illegal free of IO base address
          - [x86] HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR
            busy_clear bit
          - f2fs: UBSAN: set boolean value iostat_enable correctly
          - hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
          - [armhf] dmaengine: imx-dma: fix warning comparison of distinct pointer
          - [arm64] dmaengine: qcom_hidma: assign channel cookie correctly
          - [arm64] dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_*
          - netfilter: physdev: relax br_netfilter dependency
          - [armhf] regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
          - [arm64] pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
          - drm: Auto-set allow_fb_modifiers when given modifiers at plane init
          - drm/nouveau: Stop using drm_crtc_force_disable
          - selinux: do not override context on context mounts
          - brcmfmac: Use firmware_request_nowarn for the clm_blob
          - [armhf,arm64] wlcore: Fix memory leak in case wl12xx_fetch_firmware
          - drm/fb-helper: fix leaks in error path of drm_fb_helper_fbdev_setup
          - [arm64] clk: rockchip: fix frac settings of GPLL clock for rk3328
          - [armhf,arm64] dmaengine: tegra: avoid overflow of byte tracking
          - [x86] Input: soc_button_array - fix mapping of the 5th GPIO in a PNP0C40
          - drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
          - ACPI / video: Extend chassis-type detection with a "Lunch Box" check
          - bcache: fix potential div-zero error of writeback_rate_p_term_inverse
          - [x86] kprobes: Blacklist non-attachable interrupt functions
          - [x86] kvm: nVMX: NMI-window and interrupt-window exiting should wake L2
            from HLT
          - [powerpc*] tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
          - [x86] hv_netvsc: Fix unwanted wakeup after tx_disable
          - ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
          - ipv6: Fix dangling pointer when ipv6 fragment
          - ipv6: sit: reset ip header pointer in ipip6_rcv
          - net: ethtool: not call vzalloc for zero sized memory request
          - net-gro: Fix GRO flush when receiving a GSO packet.
          - net/mlx5: Decrease default mr cache size
          - netns: provide pure entropy for net_hash_mix()
          - net: rds: force to destroy connection if t_sock is NULL in
          - net/sched: act_sample: fix divide by zero in the traffic path
          - net/sched: fix ->get helper of the matchall cls
          - openvswitch: fix flow actions reallocation
          - qmi_wwan: add Olicard 600
          - r8169: disable ASPM again
          - sctp: initialize _pad of sockaddr_in before copying to user memory
          - tcp: Ensure DCTCP reacts to losses
          - tcp: fix a potential NULL pointer dereference in tcp_sk_exit
          - vrf: check accept_source_route on the original netdevice
          - net/mlx5e: Fix error handling when refreshing TIRs
          - net/mlx5e: Add a lock on tir list
          - nfp: validate the return code from dev_queue_xmit()
          - nfp: disable netpoll on representors
          - bnxt_en: Improve RX consumer index validity check.
          - bnxt_en: Reset device on RX buffer errors.
          - net: ip_gre: fix possible use-after-free in erspan_rcv
          - net: ip6_gre: fix possible use-after-free in ip6erspan_rcv
          - net: core: netif_receive_skb_list: unlist skb before passing to pt->func
          - r8169: disable default rx interrupt coalescing on RTL8168
            (Closes: #925496)
          - net: mlx5: Add a missing check on idr_find, free buf
          - net/mlx5e: Update xoff formula
          - net/mlx5e: Update xon formula
          - kbuild: deb-pkg: fix bindeb-pkg breakage when O= is used
          - netfilter: nfnetlink_cttimeout: pass default timeout policy to
          - netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
          - [arm64] kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
          - [x86] tty: mark Siemens R3964 line discipline as BROKEN (CVE-2019-11486)
          - tty: ldisc: add sysctl to prevent autoloading of ldiscs
          - ACPICA: Clear status of GPEs before enabling them
          - ACPICA: Namespace: remove address node from global list after method
          - ALSA: seq: Fix OOB-reads from strlcpy
          - [x86] ALSA: hda/realtek: Enable headset MIC of Acer TravelMate B114-21
            with ALC233
          - [x86] ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
          - [x86] ALSA: hda - Add two more machines to the power_save_blacklist
          - mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
          - [arm64] dts: rockchip: fix rk3328 sdmmc0 write errors
          - [hppa] Detect QEMU earlier in boot process
          - [hppa] regs_return_value() should return gpr28
          - [hppa] also set iaoq_b in instruction_pointer_set()
          - alarmtimer: Return correct remaining time
          - drm/udl: add a release method and delay modeset teardown
          - [x86] kvm: svm: fix potential get_num_contig_pages overflow
          - include/linux/bitrev.h: fix constant bitrev
          - mm: writeback: use exact memcg dirty counts
          - [x86] ASoC: intel: Fix crash at suspend/resume after failed codec
          - Btrfs: do not allow trimming when a fs is mounted with the nologreplay
          - btrfs: prop: fix zstd compression parameter validation
          - btrfs: prop: fix vanished compression property after failed set
          - [riscv64] Fix syscall_get_arguments() and syscall_set_arguments()
          - block: do not leak memory in bio_copy_user_iov()
          - block: fix the return errno for direct IO
          - genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
          - genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
          - virtio: Honour 'may_reduce_num' in vring_create_virtqueue
          - [armhf] dts: rockchip: fix rk3288 cpu opp node reference
          - [armhf] dts: am335x-evmsk: Correct the regulators for the audio codec
          - [armhf] dts: am335x-evm: Correct the regulators for the audio codec
          - [arm64] futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
          - [arm64] dts: rockchip: fix rk3328 rgmii high tx error rate
          - [arm64] backtrace: Don't bother trying to unwind the userspace stack
          - xen: Prevent buffer overflow in privcmd ioctl
          - sched/fair: Do not re-read ->h_load_next during hierarchical load
          - [x86] asm: Use stricter assembly constraints in bitops
          - [x86] perf/amd: Resolve race condition when disabling PMC
          - [x86] perf/amd: Resolve NMI latency issues for active PMCs
          - [x86] perf/amd: Remove need to check "running" bit in NMI handler
          - PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
          - PCI: pciehp: Ignore Link State Changes after powering off a slot
          - dm integrity: change memcmp to strncmp in dm_integrity_ctr
          - dm: revert 8f50e358153d ("dm: limit the max bio size as BIO_MAX_PAGES *
          - dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
          - dm integrity: fix deadlock with overlapping I/O
          - [arm64] dts: rockchip: fix vcc_host1_5v pin assign on rk3328-rock64
          - [arm64] dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
          - ACPICA: AML interpreter: add region addresses in global list during
          - [x86] KVM: nVMX: close leak of L0's x2APIC MSRs (CVE-2019-3887)
          - [x86] KVM: nVMX: fix x2APIC VTPR read intercept
          - inotify: Fix fsnotify_mark refcount leak in
            inotify_update_existing_watch() (CVE-2019-9857)
          - perf/core: Restore mmap record type correctly
          - ext4: avoid panic during forced reboot
          - ext4: add missing brelse() in add_new_gdb_meta_bg()
          - ext4: report real fs size after failed resize
          - ALSA: echoaudio: add a check for ioremap_nocache
          - [i386,alpha] ALSA: sb8: add a check for request_region
          - drm/udl: use drm_gem_object_put_unlocked.
          - IB/mlx4: Fix race condition between catas error reset and aliasguid flows
          - i40iw: Avoid panic when handling the inetdev event
          - [i386,alpha] ALSA: opl3: fix mismatch between snd_opl3_drum_switch
            definition and declaration
          - [x86] thermal/intel_powerclamp: fix __percpu declaration of worker_data
          - [arm*] thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
          - [x86] thermal/int340x_thermal: Add additional UUIDs
          - [x86] thermal/int340x_thermal: fix mode setting
          - [x86] thermal/intel_powerclamp: fix truncated kthread name
          - scsi: iscsi: flush running unbind operations when removing a session
          - sched/cpufreq: Fix 32-bit math overflow
          - sched/core: Fix buffer overflow in cgroup2 property cpu.max
          - [x86] mm: Don't leak kernel addresses
          - [x86] tools/power turbostat: return the exit status of a command
          - perf list: Don't forget to drop the reference to the allocated thread_map
          - perf config: Fix an error in the config template documentation
          - perf config: Fix a memory leak in collect_config()
          - perf build-id: Fix memory leak in print_sdt_events()
          - perf top: Fix error handling in cmd_top()
          - perf hist: Add missing map__put() in error case
          - perf evsel: Free evsel->counts in perf_evsel__exit()
          - ACPI / utils: Drop reference in test for device presence
          - PM / Domains: Avoid a potential deadlock
          - [armhf] drm/exynos/mixer: fix MIXER shadow registry synchronisation code
          - [arm64] irqchip/mbigen: Don't clear eventid when freeing an MSI
          - [x86] hpet: Prevent potential NULL pointer dereference
          - [x86] hyperv: Prevent potential NULL pointer dereference
          - [i386] cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
          - drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
          - [x86] iommu/vt-d: Check capability before disabling protected memory
          - [x86] hw_breakpoints: Make default case in hw_breakpoint_arch_parse()
            return an error
          - fix incorrect error code mapping for OBJECTID_NOT_FOUND
          - [x86] gart: Exclude GART aperture from kcore
          - ext4: prohibit fstrim in norecovery mode
          - drm/cirrus: Use drm_framebuffer_put to avoid kernel oops in clean-up
          - rsi: improve kernel thread handling to fix kernel panic
          - f2fs: fix to avoid NULL pointer dereference on se->discard_map
          - 9p: do not trust pdu content for stat item size
          - 9p locks: add mount option for lock retry interval
          - ASoC: Fix UBSAN warning at snd_soc_get/put_volsw_sx()
          - f2fs: fix to do sanity check with current segment number
          - netfilter: xt_cgroup: shrink size of v2 path
          - [arm64] serial: uartps: console_setup() can't be placed to init section
          - [powerpc*] pseries: Remove prrn_work workqueue
          - media: au0828: cannot kfree dev before usb disconnect
          - Bluetooth: Fix debugfs NULL pointer dereference
          - HID: i2c-hid: override HID descriptors for certain devices
          - pinctrl: core: make sure strcmp() doesn't get a null parameter
          - usbip: fix vhci_hcd controller counting
          - [x86] ACPI / SBS: Fix GPE storm on recent MacBookPro's
          - HID: usbhid: Add quirk for Redragon/Dragonrise Seymur 2
          - [x86] KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail
          - netfilter: nf_flow_table: remove flowtable hook flush routine in netns
            exit routine
          - f2fs: cleanup dirty pages if recover failed
          - [armhf,arm64] net: stmmac: Set OWN bit for jumbo frames
          - cifs: fallback to older infolevels on findfirst queryinfo retry
          - kernel: hung_task.c: disable on suspend
          - drm/ttm: Fix bo_global and mem_global kfree error
          - [x86] ALSA: hda: fix front speakers on Huawei MBXP
          - ACPI: EC / PM: Disable non-wakeup GPEs for suspend-to-idle
          - net/rds: fix warn in rds_message_alloc_sgs
          - xfrm: destroy xfrm_state synchronously on net exit path
          - net: ip6_gre: fix possible NULL pointer dereference in
          - [x86] iommu/dmar: Fix buffer overflow during PCI bus notification
          - scsi: core: Avoid that system resume triggers a kernel warning
          - [armhf,arm64] soc/tegra: pmc: Drop locking from
          - Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
          - [arm64] coresight: cpu-debug: Support for CA73 CPUs
          - [x86] PCI: Blacklist power management of Gigabyte X299 DESIGNARE EX PCIe
          - drm/nouveau/volt/gf117: fix speedo readout register
          - [armel,armhf] 8839/1: kprobe: make patch_lock a raw_spinlock_t
          - [x86] drm/amdkfd: use init_mqd function to allocate object for hid_mqd
          - appletalk: Fix use-after-free in atalk_proc_exit
          - lib/div64.c: off by one in shift
          - rxrpc: Fix client call connect/disconnect race
          - f2fs: fix to dirty inode for i_mode recovery
          - include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
          - bpf: fix use after free in bpf_evict_inode
          - IB/hfi1: Failed to drain send queue when QP is put into error state
          - mm: hide incomplete nr_indirectly_reclaimable in /proc/zoneinfo
          - mm: hide incomplete nr_indirectly_reclaimable in sysfs
          - bonding: fix event handling for stacked bonds
          - failover: allow name change on IFF_UP slave interfaces
          - net: atm: Fix potential Spectre v1 vulnerabilities (CVE-2017-5715)
          - net: bridge: fix per-port af_packet sockets
          - net: bridge: multicast: use rcu to access port list from
          - net: Fix missing meta data in skb with vlan packet
          - net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
          - tcp: tcp_grow_window() needs to respect tcp_space()
          - team: set slave to promisc if team is already in promisc mode
          - tipc: missing entries in name table of publications
          - vhost: reject zero size iova range
          - ipv4: recompile ip options in ipv4_link_failure
          - ipv4: ensure rcu_read_lock() in ipv4_link_failure()
          - [arm64] net: thunderx: raise XDP MTU to 1508
          - [arm64] net: thunderx: don't allow jumbo frames with XDP
          - net/mlx5: FPGA, tls, hold rcu read lock a bit longer
          - net/mlx5: FPGA, tls, idr remove on flow delete
          - route: Avoid crash from dereferencing NULL rt->from
          - sch_cake: Use tc_skb_protocol() helper for getting packet protocol
          - sch_cake: Make sure we can write the IP header before changing DSCP bits
          - nfp: flower: replace CFI with vlan present
          - nfp: flower: remove vlan CFI bit from push vlan action
          - sch_cake: Simplify logic in cake_select_tin()
          - net: IP defrag: encapsulate rbtree defrag code into callable functions
          - net: IP6 defrag: use rbtrees for IPv6 defrag
          - net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
          - CIFS: keep FileInfo handle live during oplock break
          - cifs: Fix use-after-free in SMB2_write
          - cifs: Fix use-after-free in SMB2_read
          - cifs: fix handle leak in smb2_query_symlink()
          - [x86] KVM: Don't clear EFER during SMM transitions for 32-bit vCPU
          - [x86] KVM: svm: make sure NMI is injected after nmi_singlestep
          - [x86] iio/gyro/bmg160: Use millidegrees for temperature scale
          - iio: Fix scan mask selection
          - iio: core: fix a possible circular locking dependency
          - [x86] iio: accel: kxcjk-1013: restore the range after resume.
          - [x86] staging: comedi: vmk80xx: Fix use of uninitialized semaphore
          - [x86] staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
          - [x86] staging: comedi: ni_usb6501: Fix use of uninitialized mutex
          - [x86] staging: comedi: ni_usb6501: Fix possible double-free of
          - [x86] ALSA: hda/realtek - add two more pin configuration sets to quirk
          - ALSA: core: Fix card races between register and disconnect
          - [x86] Input: elan_i2c - add hardware ID for multiple Lenovo laptops
          - vt: fix cursor when clearing the screen
          - scsi: core: set result when the command cannot be dispatched
          - Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
          - [x86] Revert "svm: Fix AVIC incomplete IPI emulation"
          - coredump: fix race condition between mmget_not_zero()/get_task_mm() and
            core dumping (CVE-2019-11599)
          - ipmi: fix sleep-in-atomic in free_user at cleanup SRCU
          - [x86] crypto: poly1305 - fix overflow during partial reduction
          - drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
          - [arm64] futex: Restore oldval initialization to work around buggy
          - [x86] kprobes: Verify stack frame on kretprobe
          - kprobes: Mark ftrace mcount handler functions nokprobe
          - kprobes: Fix error check when reusing optimized probes
          - rt2x00: do not increment sequence number while re-transmitting
          - mac80211: do not call driver wake_tx_queue op during reconfig
          - drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming
          - [x86] perf/amd: Add event map for AMD Family 17h
          - [x86] cpu/bugs: Use __initconst for 'const' init data
          - [x86] perf: Fix incorrect PEBS_REGS
          - [x86] speculation: Prevent deadlock on ssb_state::lock
          - timers/sched_clock: Prevent generic sched_clock wrap caused by
          - nfit/ars: Remove ars_start_flags
          - nfit/ars: Introduce scrub_flags
          - nfit/ars: Allow root to busy-poll the ARS state machine
          - nfit/ars: Avoid stale ARS results
          - mmc: sdhci: Fix data command CRC error handling
          - mmc: sdhci: Handle auto-command errors
          - modpost: file2alias: go back to simple devtable lookup
          - modpost: file2alias: check prototype of handler
          - [x86] tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
          - tpm: Fix the type of the return value in calc_tpm2_event_size()
          - sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
          - device_cgroup: fix RCU imbalance in error case
          - ALSA: info: Fix racy addition/deletion of nodes
          - [armhf] ASoC: rockchip: add missing INTERLEAVED PCM attribute
          - i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
          - kernel/sysctl.c: fix out-of-bounds access when setting file-max
        [ Ben Hutchings ]
        * debian/bin/abiupdate.py: Automatically select the correct archive to fetch
        * debian/bin/abiupdate.py: Change default URLs to use https: scheme
        * [powerpc*] vdso: Make vdso32 installation conditional in vdso_install
          (Closes: #785065)
        * Bump ABI to 5
        * [rt] Add new signing subkey for Steven Rostedt
        * [rt] Update to 4.19.31-rt18 (no functional change)
        * [armhf,arm64] Revert "net: stmmac: Send TSO packets always from Queue 0"
        * [riscv64] linux-image-dbg: Include vdso debug symbols
        * [ia64] linux-image: Recommend grub-efi-ia64 instead of (removed) elilo
        * [armel/marvell] Disable HW_RANDOM as no HWRNG drivers are usable here
        * udeb: Add all HWRNG drivers to kernel-image (see #923675)
        * lockdown: Refer to Debian wiki until manual page exists
        * [sparc64] linux-image: Recommend grub-ieee1275 instead of (removed) silo
        * [sparc64] linux-image: Install uncompressed kernel image
        * [powerpc,ppc64,ppc64el] linux-image: Recommend grub-ieee1275
        * [i386] Add grub-efi-ia32 as an alternate recommended bootloader
        * linux-source: Recommend bison and flex, always needed to build the kernel
        * [armel/marvell,sh4] linux-image: Recommend apparmor, like all other configs
        * udeb: Drop unused ntfs-modules packages
        * ntfs: Disable NTFS_FS due to lack of upstream security support
          (CVE-2018-12929, CVE-2018-12930, CVE-2018-12931)
        * [x86] platform: Enable INTEL_ATOMISP2_PM as module
        * drivers/firmware/google: Adjust configuration for 4.19
        * MODSIGN: Make shash allocation failure fatal
        * aio: Apply fixes from 4.19.38:
          - aio: clear IOCB_HIPRI
          - aio: use assigned completion handler
          - aio: separate out ring reservation from req allocation
          - aio: don't zero entire aio_kiocb aio_get_req()
          - aio: use iocb_put() instead of open coding it
          - aio: split out iocb copy from io_submit_one()
          - aio: abstract out io_event filler helper
          - aio: initialize kiocb private in case any filesystems expect it.
          - aio: simplify - and fix - fget/fput for io_submit() (CVE-2019-10125)
          - pin iocb through aio.
          - aio: fold lookup_kiocb() into its sole caller
          - aio: keep io_event in aio_kiocb
          - aio: store event at final iocb_put()
          - Fix aio_poll() races
        * tracing: Fix buffer_ref pipe ops
        * mm,fs: Prevent page refcount overflow (CVE-2019-11487):
          - mm: make page ref count overflow check tighter and more explicit
          - mm: add 'try_get_page()' helper function
          - mm: prevent get_user_pages() from overflowing page refcount
          - fs: prevent page refcount overflow in pipe_buf_get
        [ YunQiang Su ]
        * [mips*r6] Re-enable CONFIG_JUMP_LABEL, which has been fixed in upstream.
        [ Stefan Fritsch ]
        * [armhf] Enable SND_SOC_SPDIF for Cubietruck (Closes: #884562)
        [ Luca Boccassi ]
        * libbpf-dev: generate pkg-config file for libbpf by backporting
          libbpf-generate-pkg-config.patch from bpf-next.
        * Import patches to enable loading keys from UEFI db and MOK from
          http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git to
          allow kernel modules built by users (eg: by dkms) to be verified, and
          to load dbx and MOKX for the equivalent blacklisting functionality.
        [ Bastian Blank ]
        * Don't longer recommend irqbalance. (closes: #926967)
        [ Salvatore Bonaccorso ]
        * xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
        * [x86] Disable R3964 due to lack of security support
        * [amd64,arm64] vfio/type1: Limit DMA mappings per container (CVE-2019-3882)
        [ Aurelien Jarno ]
        * [mips] Fix indirect syscall tracing & seccomp filtering for big endian
          MIPS64 kernels with 32-bit userland.
        [ Romain Perier ]
        * [rt] Update to 4.19.37-rt19
        * Enable coreboot memconsole (Closes: #872069)
        [ Uwe Kleine-König ]
        * [armhf] Disable MVNETA_BM_ENABLE again as it break networking on
          DB-MV784MP-GP. Thanks to Steve McIntyre for providing access such a
          machine for testing. (Closes: #927825)
        [ Alper Nebi Yasak ]
        * [arm64] Enable configs for Samsung Chromebook Plus (v1) and other
          rk3399-gru based devices:
          - Enable PL330_DMA, CROS_EC_SPI, SPI_ROCKCHIP as modules.
          - Enable KEYBOARD_CROS_EC as module.
          - Enable PWM_CROS_EC, PHY_ROCKCHIP_DP as modules and enable ROCKCHIP_CDN_DP
          SND_SOC_ROCKCHIP_RT5645, SND_SOC_RK3399_GRU_SOUND as modules.
          - Enable INPUT_TOUCHSCREEN, enable TOUCHSCREEN_ATMEL_MXT as module, and
          enable TOUCHSCREEN_ATMEL_MXT_T37.
          - Enable TOUCHSCREEN_ELAN, MOUSE_ELAN_I2C as modules.
          - Enable I2C_HID as module.
          - Enable MWIFIEX, MWIFIEX_PCIE as modules.
          - Enable TCG_TPM, TCG_TIS_I2C_INFINEON as modules.
          ARM_RK3399_DMC_DEVFREQ as modules.
          - Enable REGULATOR_VCTRL as module.
          IIO_CROS_EC_BARO, RTC_DRV_CROS_EC as modules.
          - Enable BATTERY_SBS, CHARGER_CROS_USBPD as modules.
        [ Vagrant Cascadian ]
        * debian/bin/gencontrol_signed.py: Sort list of modules before adding to
          .json file, fixing reproducibility issues.
    • Sophie Brun's avatar
      Import Upstream version 4.19.37 · 8f6615c5
      Sophie Brun authored
  16. 18 Mar, 2019 1 commit
    • Ben Hutchings's avatar
      Import Debian changes 4.19.28-2 · 2eaa0cee
      Ben Hutchings authored
      linux (4.19.28-2) unstable; urgency=medium
        [ Ben Hutchings ]
        * [x86,alpha,m68k] binfmt: Disable BINFMT_AOUT, IA32_AOUT, OSF4_COMPAT
        * [x86] Drop fix for #865303, which no longer affects Debian's OpenJDK
        * udeb: Make serial_cs optional in serial-modules
        * [ppc64el] Disable PCMCIA (fixes FTBFS)
        [ Vagrant Cascadian ]
        * [arm64] Enable DRM_SUN4I and DRM_SUN8I_DW_HDMI as modules.
        * [arm64] Enable I2C_GPIO as a module.
        * [arm64] Enable MESON_EFUSE as a module.
        [ Yves-Alexis Perez ]
        * certs: include both root CA and direct signing certificate.
          closes: #924545
  17. 13 Mar, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 4.19.28-1 · c32a6e37
      Ben Hutchings authored
      linux (4.19.28-1) unstable; urgency=medium
        * New upstream stable update:
          - devres: Align data[] to ARCH_KMALLOC_MINALIGN
          - drm/bufs: Fix Spectre v1 vulnerability
          - drm/vgem: Fix vgem_init to get drm device available.
          - [arm*] pinctrl: bcm2835: Use raw spinlock for RT compatibility
          - [x86] ASoC: Intel: mrfld: fix uninitialized variable access
          - gpiolib: Fix possible use after free on label
          - [armhf] drm/sun4i: Initialize registers in tcon-top driver
          - genirq/affinity: Spread IRQs to all available NUMA nodes
          - [armhf] gpu: ipu-v3: image-convert: Prevent race between run and
          - wil6210: fix reset flow for Talyn-mb
          - wil6210: fix memory leak in wil_find_tx_bcast_2
          - ath10k: assign 'n_cipher_suites' for WCN3990
          - ath9k: dynack: use authentication messages for 'late' ack
          - scsi: lpfc: Correct LCB RJT handling
          - scsi: mpt3sas: Call sas_remove_host before removing the target devices
          - scsi: lpfc: Fix LOGO/PLOGI handling when triggerd by ABTS Timeout event
          - [armhf] 8808/1: kexec:offline panic_smp_self_stop CPU
          - [mips] clk: boston: fix possible memory leak in clk_boston_setup()
          - dlm: Don't swamp the CPU with callbacks queued during recovery
          - [x86] PCI: Fix Broadcom CNB20LE unintended sign extension (redux)
          - [powerpc] pseries: add of_node_put() in dlpar_detach_node()
          - [arm*] drm/vc4: ->x_scaling[1] should never be set to VC4_SCALING_NONE
          - ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
          - [mips] Boston: Disable EG20T prefetch
          - iwlwifi: fw: do not set sgi bits for HE connection
          - fpga: altera-cvp: Fix registration for CvP incapable devices
          - [x86] fpga: altera-cvp: fix 'bad IO access' on x86_64
          - [x86] vbox: fix link error with 'gcc -Og'
          - platform/chrome: don't report EC_MKBP_EVENT_SENSOR_FIFO as wakeup
          - i40e: prevent overlapping tx_timeout recover
          - scsi: hisi_sas: change the time of SAS SSP connection
          - usbnet: smsc95xx: fix rx packet alignment
          - [armhf,arm64] drm/rockchip: fix for mailbox read size
          - [arm*] OMAP2+: hwmod: Fix some section annotations
          - drm/amd/display: fix gamma not being applied correctly
          - drm/amd/display: calculate stream->phy_pix_clk before clock mapping
          - bpf: libbpf: retry map creation without the name
          - net/mlx5: EQ, Use the right place to store/read IRQ affinity hint
          - modpost: validate symbol names also in find_elf_symbol
          - perf tools: Add Hygon Dhyana support
          - [armhf] soc/tegra: Don't leak device tree node reference
          - media: rc: ensure close() is called on rc_unregister_device
          - media: video-i2c: avoid accessing released memory area when removing
          - [armhf] media: mtk-vcodec: Release device nodes in
          - ptp: Fix pass zero to ERR_PTR() in ptp_clock_register
          - dmaengine: xilinx_dma: Remove __aligned attribute on zynqmp_dma_desc_ll
          - [powerpc] 32: Add .data..Lubsan_data*/.data..Lubsan_type* sections
          - media: adv*/tc358743/ths8200: fill in min width/height/pixelclock
          - ACPI: SPCR: Consider baud rate 0 as preconfigured state
          - f2fs: move dir data flush to write checkpoint process
          - f2fs: fix race between write_checkpoint and write_begin
          - f2fs: fix wrong return value of f2fs_acl_create
          - [arm64] io: Ensure calls to delay routines are ordered against prior
          - net: aquantia: return 'err' if set MPI_DEINIT state fails
          - [sparc*] sunvdc: Do not spin in an infinite loop when vio_ldc_send()
            returns EAGAIN
          - nfsd4: fix crash on writing v4_end_grace before nfsd startup
          - drm: Clear state->acquire_ctx before leaving
          - [arm64] io: Ensure value passed to __iormb() is held in a 64-bit register
          - Thermal: do not clear passive state during system sleep
          - thermal: Fix locking in cooling device sysfs update cur_state
          - firmware/efi: Add NULL pointer checks in efivars API functions
          - [s390] zcrypt: improve special ap message cmd handling
          - [arm64] ftrace: don't adjust the LR value
          - [x86] fpu: Add might_fault() to user_insn()
          - usb: dwc3: Correct the logic for checking TRB full in
          - usb: dwc2: Disable power down feature on Samsung SoCs
          - usb: hub: delay hub autosuspend if USB3 port is still link training
          - timekeeping: Use proper seqcount initializer
          - usb: mtu3: fix the issue about SetFeature(U1/U2_Enable)
          - [armhf] clk: sunxi-ng: a33: Set CLK_SET_RATE_PARENT for all audio module
          - media: imx274: select REGMAP_I2C
          - drm/amdgpu/powerplay: fix clock stretcher limits on polaris (v2)
          - tipc: fix node keep alive interval calculation
          - driver core: Move async_synchronize_full call
          - kobject: return error code if writing /sys/.../uevent fails
          - IB/hfi1: Unreserve a reserved request when it is completed
          - usb: dwc3: trace: add missing break statement to make compiler happy
          - [mips] gpio: mt7621: report failure of devm_kasprintf()
          - [mips] gpio: mt7621: pass mediatek_gpio_bank_probe() failure up the stack
          - [x86] iommu/amd: Fix amd_iommu=force_isolation
          - [armhf] dts: Fix OMAP4430 SDP Ethernet startup
          - [mips] bpf: fix encoding bug for mm_srlv32_op
          - media: coda: fix H.264 deblocking filter controls
          - [armel] dts: Fix up the D-Link DIR-685 MTD partition info
          - watchdog: renesas_wdt: don't set divider while watchdog is running
          - [armhf] dts: imx51-zii-rdu1: Do not specify "power-gpio" for hpa1
          - usb: dwc3: gadget: Disable CSP for stream OUT ep
          - [arm64] iommu/arm-smmu-v3: Avoid memory corruption from Hisilicon MSI
          - [arm64] iommu/arm-smmu: Add support for qcom,smmu-v2 variant
          - [arm64] iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
          - [armhf] clk: imx6sl: ensure MMDC CH0 handshake is bypassed
          - OPP: Use opp_table->regulators to verify no regulator case
          - [arm64] tee: optee: avoid possible double list_del()
          - [arm64] drm/msm/dsi: fix dsi clock names in DSI 10nm PLL driver
          - [arm64] drm/msm: dpu: Only check flush register against pending flushes
          - lightnvm: pblk: fix resubmission of overwritten write err lbas
          - lightnvm: pblk: add lock protection to list operations
          - i2c-axxia: check for error conditions first
          - [armhf] phy: sun4i-usb: add support for missing USB PHY index
          - udf: Fix BUG on corrupted inode
          - selftests/bpf: use __bpf_constant_htons in test_prog.c
          - [armel] pxa: avoid section mismatch warning
          - [armhf] ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M
          - [powerpc] KVM: Book3S: Only report KVM_CAP_SPAPR_TCE_VFIO on powernv
          - [arm*] mmc: bcm2835: Recover from MMC_SEND_EXT_CSD
          - [arm*] mmc: bcm2835: reset host on timeout
          - memstick: Prevent memstick host from getting runtime suspended during
            card detection
          - [arm64] mmc: sdhci-xenon: Fix timeout checks
          - btrfs: harden agaist duplicate fsid on scanned devices
          - serial: sh-sci: Fix locking in sci_submit_rx()
          - serial: sh-sci: Resume PIO in sci_rx_interrupt() on DMA failure
          - tty: serial: samsung: Properly set flags in autoCTS mode
          - perf test: Fix perf_event_attr test failure
          - perf dso: Fix unchecked usage of strncpy()
          - perf header: Fix unchecked usage of strncpy()
          - btrfs: use tagged writepage to mitigate livelock of snapshot
          - perf probe: Fix unchecked usage of strncpy()
          - i2c: sh_mobile: Add support for r8a774c0 (RZ/G2E)
          - bnxt_en: Disable MSIX before re-reserving NQs/CMPL rings.
          - [x86] tools/power/x86/intel_pstate_tracer: Fix non root execution for
            post processing a trace file
          - livepatch: check kzalloc return values
          - [arm64] KVM: Skip MMIO insn after emulation
          - usb: musb: dsps: fix otg state machine
          - usb: musb: dsps: fix runtime pm for peripheral mode
          - perf header: Fix up argument to ctime()
          - perf tools: Cast off_t to s64 to avoid warning on bionic libc
          - percpu: convert spin_lock_irq to spin_lock_irqsave.
          - [arm64] net: hns3: fix incomplete uninitialization of IRQ in the
          - drm/amd/display: Add retry to read ddc_clock pin
          - Bluetooth: hci_bcm: Handle deferred probing for the clock supply
          - drm/amd/display: fix YCbCr420 blank color
          - [powerpc] uaccess: fix warning/error with access_ok()
          - mac80211: fix radiotap vendor presence bitmap handling
          - xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi
          - scsi: smartpqi: correct host serial num for ssa
          - scsi: smartpqi: correct volume status
          - scsi: smartpqi: increase fw status register read timeout
          - cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan()
          - [arm64] net: hns3: add max vector number check for pf
          - [powerpc] perf: Fix thresholding counter data for unknown type
          - iwlwifi: mvm: fix setting HE ppe FW config
          - [powerpc] powernv/ioda: Allocate indirect TCE levels of cached userspace
            addresses on demand
          - mlx5: update timecounter at least twice per counter overflow
          - drbd: narrow rcu_read_lock in drbd_sync_handshake
          - drbd: disconnect, if the wrong UUIDs are attached on a connected peer
          - drbd: skip spurious timeout (ping-timeo) when failing promote
          - drbd: Avoid Clang warning about pointless switch statment
          - drm/amd/display: validate extended dongle caps
          - md: fix raid10 hang issue caused by barrier
          - fbdev: fbmem: behave better with small rotated displays and many CPUs
          - i40e: define proper net_device::neigh_priv_len
          - ice: Do not enable NAPI on q_vectors that have no rings
          - igb: Fix an issue that PME is not enabled during runtime suspend
          - ACPI/APEI: Clear GHES block_status before panic()
          - fbdev: fbcon: Fix unregister crash when more than one framebuffer
          - [powerpc] mm: Fix reporting of kernel execute faults on the 8xx
          - [x86] KVM: svm: report MSR_IA32_MCG_EXT_CTL as unsupported
          - [powerpc] fadump: Do not allow hot-remove memory from fadump reserved
          - kvm: Change offset in kvm_write_guest_offset_cached to unsigned
          - NFS: nfs_compare_mount_options always compare auth flavors.
          - perf build: Don't unconditionally link the libbfd feature test to
            -liberty and -lz
          - hwmon: (lm80) fix a missing check of the status of SMBus read
          - hwmon: (lm80) fix a missing check of bus read in lm80 probe
          - seq_buf: Make seq_buf_puts() null-terminate the buffer
          - cifs: check ntwrk_buf_start for NULL before dereferencing it
          - f2fs: fix use-after-free issue when accessing sbi->stat_info
          - niu: fix missing checks of niu_pci_eeprom_read
          - f2fs: fix sbi->extent_list corruption issue
          - cgroup: fix parsing empty mount option string
          - perf python: Do not force closing original perf descriptor in
          - scripts/decode_stacktrace: only strip base path when a prefix of the path
          - arch/sh/boards/mach-kfr2r09/setup.c: fix struct mtd_oob_ops build warning
          - ocfs2: don't clear bh uptodate for block read
          - ocfs2: improve ocfs2 Makefile
          - mm/page_alloc.c: don't call kasan_free_pages() at deferred mem init
          - zram: fix lockdep warning of free block handling
          - isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in
          - [m68k] block/swim3: Fix -EBUSY error when re-opening device after unmount
          - [arm*] thermal: bcm2835: enable hwmon explicitly
          - [armhf] PCI: imx: Enable MSI from downstream components
          - thermal: generic-adc: Fix adc to temp interpolation
          - [arm64] sve: ptrace: Fix SVE_PT_REGS_OFFSET definition
          - kernel/hung_task.c: break RCU locks based on jiffies
          - proc/sysctl: fix return error for proc_doulongvec_minmax()
          - kernel/hung_task.c: force console verbose before panic
          - fs/epoll: drop ovflist branch prediction
          - exec: load_script: don't blindly truncate shebang string
          - xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat
          - xfs: cancel COW blocks before swapext
          - xfs: Fix error code in 'xfs_ioc_getbmap()'
          - xfs: fix overflow in xfs_attr3_leaf_verify
          - xfs: fix shared extent data corruption due to missing cow reservation
          - xfs: fix transient reference count error in
          - xfs: delalloc -> unwritten COW fork allocation can go wrong
          - fs/xfs: fix f_ffree value for statfs when project quota is set
          - xfs: fix PAGE_MASK usage in xfs_free_file_space
          - xfs: fix inverted return from xfs_btree_sblock_verify_crc
          - thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set
          - dccp: fool proof ccid_hc_[rt]x_parse_options()
          - enic: fix checksum validation for IPv6
          - lib/test_rhashtable: Make test_insert_dup() allocate its hash table
          - net: dsa: Fix lockdep false positive splat
          - net: dsa: Fix NULL checking in dsa_slave_set_eee()
          - [armhf,arm64] net: dsa: mv88e6xxx: Fix counting of ATU violations
          - net: dsa: slave: Don't propagate flag changes on down slave interfaces
          - net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames
          - rds: fix refcount bug in rds_sock_addref
          - Revert "net: phy: marvell: avoid pause mode on SGMII-to-Copper for
          - rxrpc: bad unlock balance in rxrpc_recvmsg
          - sctp: check and update stream->out_curr when allocating stream_out
          - sctp: walk the list of asoc safely (CVE-2019-8956)
          - skge: potential memory corruption in skge_get_regs()
          - virtio_net: Account for tx bytes and packets on sending xdp_frames
          - net/mlx5e: FPGA, fix Innova IPsec TX offload data path performance
          - xfs: eof trim writeback mapping as soon as it is cached
          - ALSA: compress: Fix stop handling on compressed capture streams
          - ALSA: usb-audio: Add support for new T+A USB DAC
          - ALSA: hda - Serialize codec registrations
          - ALSA: hda/realtek - Fix lose hp_pins for disable auto mute
          - ALSA: hda/realtek - Use a common helper for hp pin reference
          - ALSA: hda/realtek - Headset microphone support for System76 darp5
          - fuse: call pipe_buf_release() under pipe lock
          - fuse: decrement NR_WRITEBACK_TEMP on the right page
          - fuse: handle zero sized retrieve correctly
          - [arm*] dmaengine: bcm2835: Fix interrupt race on RT
          - [arm*] dmaengine: bcm2835: Fix abort of transactions
          - [armhf] dmaengine: imx-dma: fix wrong callback invoke
          - futex: Handle early deadlock return correctly
          - [arm64] irqchip/gic-v3-its: Plug allocation race for devices sharing a
          - [armhf] usb: phy: am335x: fix race condition in _probe
          - usb: dwc3: gadget: Handle 0 xfer length for OUT EP
          - usb: gadget: udc: net2272: Fix bitwise and boolean operations
          - usb: gadget: musb: fix short isoc packets with inventra dma
          - staging: speakup: fix tty-operation NULL derefs
          - scsi: cxlflash: Prevent deadlock when adapter probe fails
          - scsi: aic94xx: fix module loading
          - cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM
          - [x86] perf/x86/intel/uncore: Add Node ID mask
          - [x86] MCE: Initialize mce.bank in the case of a fatal error in
          - perf/core: Don't WARN() for impossible ring-buffer sizes
          - perf tests evsel-tp-sched: Fix bitwise operator
          - serial: fix race between flush_to_ldisc and tty_open
          - serial: 8250_pci: Make PCI class test non fatal
          - serial: sh-sci: Do not free irqs that have already been freed
          - cacheinfo: Keep the old value if of_property_read_u32 fails
          - IB/hfi1: Add limit test for RC/UC send via loopback
          - [x86] perf/x86/intel: Delay memory deallocation until x86_pmu_dead_cpu()
          - ath9k: dynack: make ewma estimation faster
          - ath9k: dynack: check da->enabled first in sampling routines
          - mtd: Make sure mtd->erasesize is valid even if the partition is of size 0
          - mtd: rawnand: gpmi: fix MX28 bus master lockup problem
          - libata: Add NOLPM quirk for SAMSUNG MZ7TE512HMHP-000L1 SSD
          - [armhf, arm64] iio: adc: axp288: Fix TS-pin handling
          - signal: Always notice exiting tasks
          - signal: Better detection of synchronous signals
          - [armhf, arm64] misc: vexpress: Off by one in vexpress_syscfg_exec()
          - [x86] mei: me: add ice lake point device id.
          - debugfs: fix debugfs_rename parameter checking
          - [arm64] pinctrl: sunxi: Correct number of IRQ banks on H6 main pin
          - [x86] pinctrl: cherryview: fix Strago DMI workaround
          - tracing: uprobes: Fix typo in pr_fmt string
          - [mips*] cm: reprime error cause
          - [mips*] OCTEON: don't set octeon_dma_bar_type if PCI is disabled
          - [mips*] VDSO: Use same -m%-float cflag as the kernel proper
          - [mips*] loongson64: remove unreachable(), fix loongson_poweroff().
          - [mips*] VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
          - [arm64] firmware: arm_scmi: provide the mandatory device release callback
          - [powerpc*] radix: Fix kernel crash with mremap()
          - [amd64] mic: vop: Fix use-after-free on remove
          - mac80211: ensure that mgmt tx skbs have tailroom for encryption
          - drm/modes: Prevent division by zero htotal
          - drm/amd/powerplay: Fix missing break in switch
          - [x86] drm/i915: always return something on DDI clock selection
          - [x86] drm/vmwgfx: Fix setting of dma masks
          - [x86] drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
          - SUNRPC: Always drop the XPRT_LOCK on XPRT_CLOSE_WAIT
          - xfrm: Make set-mark default behavior backward compatible
          - Revert "ext4: use ext4_write_inode() when fsyncing w/o a journal"
          - libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
          - xfrm: refine validation of template and selector families
          - batman-adv: Avoid WARN on net_device without parent in netns
          - batman-adv: Force mac header to start of data on xmit
          - svcrdma: Reduce max_send_sges
          - svcrdma: Remove max_sge check at connect time
          - Revert "exec: load_script: don't blindly truncate shebang string"
          - dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
          - eeprom: at24: add support for 24c2048
          - blk-mq: fix a hung issue when fsync (Closes: #913119, #913138)
          - [armel, armhf] 8789/1: signal: copy registers using __copy_to_user()
          - [armel, armhf] 8790/1: signal: always use __copy_to_user to save iwmmxt
          - [armel, armhf] 8791/1: vfp: use __copy_to_user() when saving VFP state
          - [armel, armhf] 8792/1: oabi-compat: copy oabi events using
          - [armel, armhf] 8793/1: signal: replace __put_user_error with __put_user
          - [armel, armhf] 8794/1: uaccess: Prevent speculative use of the current
          - [armel, armhf] 8795/1: spectre-v1.1: use put_user() for __put_user()
          - [armel, armhf] 8796/1: spectre-v1,v1.1: provide helpers for address
          - [armel, armhf] 8797/1: spectre-v1.1: harden __copy_to_user
          - [armel, armhf] 8810/1: vfp: Fix wrong assignement to ufp_exc
          - [armel, armhfl armhf] make lookup_processor_type() non-__init
          - [armel, armhf] split out processor lookup
          - [armel, armhf] clean up per-processor check_bugs method call
          - [armel, armhf] add PROC_VTABLE and PROC_TABLE macros
          - [armel, armhf] spectre-v2: per-CPU vtables to work around big.Little
          - [armel, armhf] ensure that processor vtables is not lost after boot
          - [armel, armhf] fix the cockup in the previous patch
          - drm/amdgpu/sriov:Correct pfvf exchange logic
          - [i386] ACPI: NUMA: Use correct type for printing addresses on i386-PAE
          - perf report: Fix wrong iteration count in --branch-history
          - perf test shell: Use a fallback to get the pathname in vfs_getname
          - [riscv64] riscv: fix trace_sys_exit hook
          - cpufreq: check if policy is inactive early in __cpufreq_get()
          - nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
          - nvme-pci: fix out of bounds access in nvme_cqe_pending
          - nvme-multipath: zero out ANA log buffer
          - nvme: pad fake subsys NQN vid and ssvid with zeros
          - drm/amdgpu: set WRITE_BURST_LENGTH to 64B to workaround SDMA1 hang
          - [armel] dts: kirkwood: Fix polarity of GPIO fan lines
          - [armel, armhf] gpio: pl061: handle failed allocations
          - drm/nouveau: Don't disable polling in fallback mode
          - drm/nouveau/falcon: avoid touching registers if engine is off
          - cifs: Limit memory used by lock request calls to a page
          - [x86] kvm: sev: Fail KVM_SEV_INIT if already initialized
          - CIFS: Do not assume one credit for async responses
          - [arm*] gpio: mxc: move gpio noirq suspend/resume to syscore phase
          - [x86] Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire
          - [x86] Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
          - [armhf] OMAP5+: Fix inverted nirq pin interrupts with irq_set_type
          - perf/core: Fix impossible ring-buffer sizes warning
          - [x86] perf: Add check_period PMU callback
          - [x86] ALSA: hda - Add quirk for HP EliteBook 840 G5
          - ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
          - ASoC: hdmi-codec: fix oops on re-probe
          - [alpha] tools uapi: fix Alpha support
          - [riscv64] Add pte bit to distinguish swap from invalid
          - [x86] kvm/nVMX: read from MSR_IA32_VMX_PROCBASED_CTLS2 only when it is
          - [x86] kvm: vmx: Fix entry number check for add_atomic_switch_msr()
          - [arm*] mmc: sunxi: Filter out unsupported modes declared in the device
          - mmc: block: handle complete_work on separate workqueue
          - [x86] Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
          - Revert "nfsd4: return default lease period"
          - Revert "mm: don't reclaim inodes with many attached pages"
          - Revert "mm: slowly shrink slabs with a relatively small number of
          - [alpha] fix page fault handling for r16-r18 targets
          - [alpha] Fix Eiger NR_IRQS to 128
          - [s390*] zcrypt: fix specification exception on z196 during ap probe
          - tracing/uprobes: Fix output for multiple string arguments
          - [x86] platform/UV: Use efi_runtime_lock to serialise BIOS calls
          - scsi: sd: fix entropy gathering for most rotational disks
          - signal: Restore the stop PTRACE_EVENT_EXIT
          - md/raid1: don't clear bitmap bits on interrupted recovery.
          - [x86] a.out: Clear the dump structure initially
          - dm crypt: don't overallocate the integrity tag space
          - dm thin: fix bug where bio that overwrites thin block ignores FUA
          - drm: Use array_size() when creating lease
          - [x86] drm/i915: Block fbdev HPD processing during suspend
          - [x86] drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
          - mm: proc: smaps_rollup: fix pss_locked calculation
          - af_packet: fix raw sockets over 6in4 tunnel
          - [arm64, armhf] dsa: mv88e6xxx: Ensure all pending interrupts are handled
            prior to exit
          - net: crypto set sk to NULL when af_alg_release. (CVE-2019-8912)
          - net: Fix for_each_netdev_feature on Big endian
          - net: fix IPv6 prefix route residue
          - net: ip6_gre: initialize erspan_ver just for erspan tunnels
          - net: ipv4: use a dedicated counter for icmp_v4 redirect packets
          - net: phy: xgmiitorgmii: Support generic PHY status read
          - net: stmmac: Fix a race in EEE enable callback
          - net: stmmac: handle endianness in dwmac4_get_timestamp
          - sky2: Increase D3 delay again
          - vhost: correctly check the return value of translate_desc() in log_used()
          - vsock: cope with memory allocation failure at socket creation time
          - vxlan: test dev->flags & IFF_UP before calling netif_rx()
          - net: Add header for usage of fls64()
          - tcp: clear icsk_backoff in tcp_write_queue_purge()
          - tcp: tcp_v4_err() should be more careful
          - net: Do not allocate page fragments that are not skb aligned
          - hwmon: (lm80) Fix missing unlock on error in set_fan_div()
          - scsi: target/core: Use kmem_cache_free() instead of kfree()
          - PCI: Fix __initdata issue with "pci=disable_acs_redir" parameter
          - sunrpc: fix 4 more call sites that were using stack memory with a
          - netfilter: nf_nat_snmp_basic: add missing length checks in ASN.1 cbs
          - net/x25: do not hold the cpu too long in x25_new_lci()
          - ax25: fix possible use-after-free
          - [armel armhf] 8834/1: Fix: kprobes: optimized kprobes illegal instruction
          - tracing: Fix number of entries in trace header
          - [mips*] eBPF: Always return sign extended 32b values
          - mac80211: Restore vif beacon interval if start ap fails
          - mac80211: Use linked list instead of rhashtable walk for mesh tables
          - mac80211: Free mpath object when rhashtable insertion fails
          - libceph: handle an empty authorize reply
          - ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
          - numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
          - proc, oom: do not report alien mms when setting oom_score_adj
          - [x86] ALSA: hda/realtek - Headset microphone and internal speaker
            support for System76 oryp5
          - [x86] ALSA: hda/realtek: Disable PC beep in passthrough on alc285
          - KEYS: allow reaching the keys quotas exactly
          - [armhf,arm64] backlight: pwm_bl: Fix devicetree parsing with auto-
            generated brightness tables
          - [armhf] mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering
            mfd cells
          - [armhf] mfd: twl-core: Fix section annotations on {,un}protect_pm_master
          - [arm64] mfd: qcom_rpm: write fw_version to CTRL_REG
          - mfd: axp20x: Add AC power supply cell for AXP813
          - mfd: axp20x: Re-align MFD cell entries
          - mfd: axp20x: Add supported cells for AXP803
          - mfd: cros_ec_dev: Add missing mfd_remove_devices() call in remove
          - [armhf] mfd: mc13xxx: Fix a missing check of a register-read failure
          - qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page
          - qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory
          - [arm64] net: hns: Fix use after free identified by SLUB debug
          - bpf: Fix [::] -> [::1] rewrite in sys_sendmsg
          - selftests/bpf: Test [::] -> [::1] rewrite in sys_sendmsg in
          - net/mlx4: Get rid of page operation after dma_alloc_coherent
          - xprtrdma: Double free in rpcrdma_sendctxs_create()
          - selftests: forwarding: Add a test for VLAN deletion
          - netfilter: nf_tables: fix leaking object reference count
          - scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
          - scsi: isci: initialize shost fully before calling scsi_add_host()
          - include/linux/compiler*.h: fix OPTIMIZER_HIDE_VAR
          - netfilter: nft_flow_offload: Fix reverse route lookup
          - bpf: correctly set initial window on active Fast Open sender
          - bpf: fix panic in stack_map_get_build_id() on i386 and arm32
          - netfilter: nft_flow_offload: fix interaction with vrf slave device
          - RDMA/mthca: Clear QP objects during their allocation
          - [powerpcspe] 8xx: fix setting of pagetable for Abatron BDI debug tool.
          - acpi/nfit: Fix race accessing memdev in nfit_get_smbios_id()
          - net: stmmac: Fix PCI module removal leak
          - net: stmmac: dwxgmac2: Only clear interrupts that are active
          - net: stmmac: Check if CBS is supported before configuring
          - net: stmmac: Fix the logic of checking if RX Watchdog must be enabled
          - net: stmmac: Prevent RX starvation in stmmac_napi_poll()
          - scsi: tcmu: avoid cmd/qfull timers updated whenever a new cmd comes
          - scsi: ufs: Fix system suspend status
          - scsi: qedi: Add ep_state for login completion on un-reachable targets
          - scsi: ufs: Fix geometry descriptor size
          - scsi: cxgb4i: add wait_for_completion()
          - netfilter: nft_flow_offload: fix checking method of conntrack helper
          - always clear the X2APIC_ENABLE bit for PV guest
          - [armhf, arm64] drm/meson: add missing of_node_put
          - drm/amdkfd: Don't assign dGPUs to APU topology devices
          - drm/amd/display: fix PME notification not working in RV desktop
          - vhost: return EINVAL if iovecs size does not match the message size
          - [armhf, arm64] drm/sun4i: backend: add missing of_node_puts
          - bpf: don't assume build-id length is always 20 bytes
          - bpf: zero out build_id for BPF_STACK_BUILD_ID_IP
          - atm: he: fix sign-extension overflow on large shift
          - hwmon: (tmp421) Correct the misspelling of the tmp442 compatible
            attribute in OF device ID table
          - [armhf] leds: lp5523: fix a missing check of return value of lp55xx_read
          - bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
          - net: bridge: Mark FDB entries that were added by user as such
          - net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
          - isdn: avm: Fix string plus integer warning from Clang
          - batman-adv: fix uninit-value in batadv_interface_tx()
          - inet_diag: fix reporting cgroup classid and fallback to priority
          - ipv6: propagate genlmsg_reply return code
          - net: ena: fix race between link up and device initalization
          - net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
          - net/mlx5e: Don't overwrite pedit action when multiple pedit used
          - net/packet: fix 4gb buffer limit due to overflow check
          - net: sfp: do not probe SFP module before we're attached
          - sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
          - sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
          - team: avoid complex list operations in team_nl_cmd_options_set()
          - Revert "socket: fix struct ifreq size in compat ioctl"
          - Revert "kill dev_ifsioc()"
          - net: socket: fix SIOCGIFNAME in compat
          - net: socket: make bond ioctls go through compat_ifreq_ioctl()
          - geneve: should not call rt6_lookup() when ipv6 was disabled
          - sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
          - net_sched: fix a race condition in tcindex_destroy() (Closes: #921542)
          - net_sched: fix a memory leak in cls_tcindex
          - net_sched: fix two more memory leaks in cls_tcindex
          - net/mlx5e: XDP, fix redirect resources availability check
          - RDMA/srp: Rework SCSI device reset handling
          - KEYS: user: Align the payload buffer
          - KEYS: always initialize keyring_index_key::desc_len
          - drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
          - gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
          - [x86] drm/i915/fbdev: Actually configure untiled displays
          - drm/amd/display: Fix MST reboot/poweroff sequence
          - mac80211: allocate tailroom for forwarded mesh packets
          - [x86] kvm: Return LA57 feature based on hardware capability
          - net: validate untrusted gso packets without csum offload
          - net: avoid false positives in untrusted gso validation
          - Revert "bridge: do not add port to router list when receives query with
          - netfilter: nf_tables: fix flush after rule deletion in the same batch
          - netfilter: nft_compat: use-after-free when deleting targets
          - netfilter: ipv6: Don't preserve original oif for loopback address
          - netfilter: nfnetlink_osf: add missing fmatch check
          - netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in
          - udlfb: handle unplug properly
          - [armhf arm64] pinctrl: max77620: Use define directive for
            max77620_pinconf_param values
          - net: phylink: avoid resolving link state too early
          - irq/matrix: Split out the CPU selection code into a helper
          - irq/matrix: Spread managed interrupts on allocation
          - genirq/matrix: Improve target CPU selection for managed interrupts
            (Closes: #922182)
          - mac80211: Change default tx_sk_pacing_shift to 7
          - scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
          - [arm64] drm/msm: Unblock writer if reader closes file
          - [x86] ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
          - [armhf] clk: tegra: dfll: Fix a potential Oop in remove()
          - [x86] thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
          - [arm64, armhf] usb: dwc3: gadget: synchronize_irq dwc irq in suspend
          - [arm64, armhf] usb: dwc3: gadget: Fix the uninitialized link_state when
            udc starts
          - genirq: Make sure the initial affinity is not empty
          - [arm64, armel, x86, armhf] ASoC: dapm: change snprintf to scnprintf for
            possible overflow
          - [x86] drivers: thermal: int340x_thermal: Fix sysfs race condition
          - mac80211: fix miscounting of ttl-dropped frames
          - sched/wait: Fix rcuwait_wake_up() ordering
          - sched/wake_q: Fix wakeup ordering for wake_q
          - futex: Fix (possible) missed wakeup
          - drm/amd/powerplay: OD setting fix on Vega10
          - [armhf] drm/sun4i: hdmi: Fix usage of TMDS clock
          - direct-io: allow direct writes to empty inodes
          - writeback: synchronize sync(2) against cgroup writeback membership
          - scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport
          - scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport
          - scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
          - [x86] hv_netvsc: Fix ethtool change hash key error
          - [x86] hv_netvsc: Refactor assignments of struct netvsc_device_info
          - [x86] hv_netvsc: Fix hash key value reset after other ops
          - nvme-rdma: fix timeout handler
          - nvme-multipath: drop optimization for static ANA group IDs
          - [arm64] drm/msm: Fix A6XX support for opp-level
          - net: usb: asix: ax88772_bind return error when hw_reset fail
          - net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
          - [powerpc*] ibmveth: Do not process frames after calling napi_reschedule
          - mac80211: don't initiate TDLS connection if station is not associated to
          - mac80211: Add attribute aligned(2) to struct 'action'
          - cfg80211: extend range deviation for DMG
          - [x86] svm: Fix AVIC incomplete IPI emulation
          - [x86] KVM: nSVM: clear events pending from svm_complete_interrupts() when
            exiting to L1
          - [arm64, armhf] mmc: spi: Fix card detection during probe
          - mmc: core: Fix NULL ptr crash from mmc_should_fail_request
          - [armhf] mmc: sdhci-esdhc-imx: correct the fix of ERR004536
          - mm: enforce min addr even if capable() in expand_downwards()
          - hugetlbfs: fix races and page leaks during migration
          - [mips*] fix truncation in __cmpxchg_small for short values
          - [x86] uaccess: Don't leak the AC flag into __put_user() value evaluation
          - cpufreq: Use struct kobj_attribute instead of struct global_attr
          - staging: erofs: fix mis-acted TAIL merging behavior
          - USB: serial: option: add Telit ME910 ECM composition
          - USB: serial: cp210x: add ID for Ingenico 3070
          - USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
          - [x86] staging: comedi: ni_660x: fix missing break in switch statement
          - [x86, arm64, armhf] staging: android: ashmem: Don't call fallocate() with
            ashmem_mutex held.
          - [x86, arm64, armhf] staging: android: ashmem: Avoid range_alloc()
            allocation with ashmem_mutex held.
          - ip6mr: Do not call __IP6_INC_STATS() from preemptible context
          - [arm64, armhf] net: dsa: mv88e6xxx: handle unknown duplex modes gracefully
            in mv88e6xxx_port_set_duplex
          - [arm64, armhf] net: dsa: mv88e6xxx: fix number of internal PHYs for
            88E6x90 family
          - net: sched: put back q.qlen into a single location
          - net-sysfs: Fix mem leak in netdev_register_kobject
          - qmi_wwan: Add support for Quectel EG12/EM12
          - sctp: call iov_iter_revert() after sending ABORT
          - sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79
          - team: Free BPF filter when unregistering netdev
          - tipc: fix RDM/DGRAM connect() regression
          - bnxt_en: Drop oversize TX packets to prevent errors.
          - geneve: correctly handle ipv6.disable module parameter
          - [x86] hv_netvsc: Fix IP header checksum for coalesced packets
          - ipv4: Add ICMPv6 support when parse route ipproto
          - lan743x: Fix TX Stall Issue
          - [arm64, armhf] net: dsa: mv88e6xxx: Fix statistics on mv88e6161
          - [arm64, armhf] net: dsa: mv88e6xxx: Fix u64 statistics
          - net: netem: fix skb length BUG_ON in __skb_to_sgvec
          - net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
          - net: phy: Micrel KSZ8061: link failure after cable connect
          - [arm64, armhf] net: phy: phylink: fix uninitialized variable in
          - net: sit: fix memory leak in sit_init_net()
          - net: socket: set sock->sk to NULL after calling proto_ops::release()
          - tipc: fix race condition causing hung sendto
          - tun: fix blocking read
          - [x86, arm64, armhf] xen-netback: don't populate the hash cache on XenBus
          - [x86, arm64, armhf] xen-netback: fix occasional leak of grant ref mappings
            under memory pressure
          - tun: remove unnecessary memory barrier
          - net: Add __icmp_send helper.
          - ipv4: Return error for RTA_VIA attribute
          - ipv6: Return error for RTA_VIA attribute
          - mpls: Return error for RTA_GATEWAY attribute
          - ipv4: Pass original device to ip_rcv_finish_core
          - [arm64, armhf] net: dsa: mv88e6xxx: power serdes on/off for 10G interfaces
            on 6390X
          - [arm64, armhf] net: dsa: mv88e6xxx: prevent interrupt storm caused by
          - net/sched: act_ipt: fix refcount leak when replace fails
          - net/sched: act_skbedit: fix refcount leak when replace fails
          - net: sched: act_tunnel_key: fix NULL pointer dereference during init
          - [x86] CPU/AMD: Set the CPB bit unconditionally on F17h
          - [x86] boot/compressed/64: Do not read legacy ROM on EFI system
          - tracing: Fix event filters and triggers to handle negative numbers
          - usb: xhci: Fix for Enabling USB ROLE SWITCH QUIRK on
          - [x86, powerpc*] applicom: Fix potential Spectre v1 vulnerabilities
          - [mips*] irq: Allocate accurate order pages for irq stack
          - aio: Fix locking in aio_poll()
          - xtensa: fix get_wchan
          - gnss: sirf: fix premature wakeup interrupt enable
          - USB: serial: cp210x: fix GPIO in autosuspend
          - Bluetooth: btrtl: Restore old logic to assume firmware is already loaded
          - Bluetooth: Fix locking in bt_accept_enqueue() for BH context
          - exec: Fix mem leak in kernel_read_file (CVE-2019-8980)
          - scsi: core: reset host byte in DID_NEXUS_FAILURE case
          - bpf: fix sanitation rewrite in case of non-pointers
        [ Ben Hutchings ]
        * [sparc64] udeb: Use standard module list in nic-modules; add i2c-modules
          and nic-shared-modules to avoid duplication
        * mt76: Use the correct hweight8() function (fixes FTBFS on ia64)
        * [armel] udeb: Add mmc-core-modules
        * udeb: Make nic-wireless-modules depend on mmc-core-modules, not
          mmc-modules; move crc7 to crc-modules to avoid duplication
        * [powerpc*] udeb: Add i2c-modules, mmc-core-modules, nic-wireless-modules
        * [arm64,armhf] udeb: Add mmc-core-modules to Provides of kernel-image
        * udeb: Add fb-modules and include drm and drm_kms_helper on most
        * udeb: Move basic PV modules from {hyperv,virtio}-modules to kernel-image
        * udeb: Move drivers from {hyperv,virtio}-modules to
        * debian/bin/gencontrol.py: Add rules to build debian/build/config.*
        * certs: Replace test signing certificate with production signing certificate
        * debian/bin/gencontrol_signed.py: Put all files.json fields under "packages"
        * Bump ABI to 4
        [ Wookey ]
        * linux-perf: Enable coresight trace (libopencsd) support in perf
          (Closes: #895131)
        [ Vagrant Cascadian ]
        * [armhf] Add patch from upstream fixing stability issues when cpufreq
          is enabled on Orange Pi Plus.
        * [armhf] Enable REGULATOR_SY8106A as module.
        * [arm64] Add patch working around A64 timer issues.
        [ dann frazier ]
        * arm64: lockdown: Move init_lockdown() call after uefi_init()
        [ Salvatore Bonaccorso ]
        * Btrfs: fix corruption reading shared and compressed extents after hole
          punching (Closes: #922306)
        [ Vagrant Cascadian ]
        * [arm64] Add patch from v4.20 to enable device-tree for Pine64-LTS.
        [ Romain Perier ]
        * [rt] Update to 4.19.25-rt16:
          - Add zram_slot_trylock() to "drivers/block/zram: Replace bit spinlocks
            with rtmutex for -rt"
          - Refresh "futex: workaround migrate_disable/enable in different context"
          - softirq: Avoid "local_softirq_pending" messages if ksoftirqd is blocked
          - softirq: Avoid "local_softirq_pending" messages if task is in cpu_chill()
          - hrtimer: Don't lose state in cpu_chill()
          - hrtimer: cpu_chill(): save task state in ->saved_state()
          - [x86] lazy-preempt: properly check against preempt-mask
          - [i386] lazy-preempt: use proper return label on 32bit-x86
        * [armel/rpi] Add flavour for Raspberry Pi and Raspberry Pi Zero
        * [armel, armhf] Enable CRASH_DUMP
        * Enable STRICT_MODULE_RWX
        [ Marcin Juszkiewicz ]
        * [arm64] udeb: Use generic ata-modules
        * [arm64] udeb: Remove redundant lines from nic-modules
        [ YunQiang Su ]
        * [mips r6] Disable JUMP_LABEL for now: it will cause Reserved Instruction.
          Enable SERIAL_OF_PLATFORM, if not, userland shows nothing.
          Enable CPU_HAS_MSA, HIGHMEM, CRYPTO_CRC32_MIPS, and NR_CPUS to 16.
          Support some boston drivers: IMG_ASCII_LCD, I2C_EG20T, PCH_PHUB, MMC,
        * [mipsel/mips64el] Backport MIPS: Loongson: Introduce and use
    • Sophie Brun's avatar
      Import Upstream version 4.19.28 · 03e953fa
      Sophie Brun authored
  18. 13 Feb, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 4.19.20-1 · d877e218
      Ben Hutchings authored
      linux (4.19.20-1) unstable; urgency=medium
        * New upstream stable update:
          - tty/ldsem: Wake up readers after timed out down_write()
          - tty: Hold tty_ldisc_lock() during tty_reopen()
          - tty: Simplify tty->count math in tty_reopen()
          - tty: Don't hold ldisc lock in tty_reopen() if ldisc present
          - can: gw: ensure DLC boundaries after CAN frame modification
          - netfilter: nf_conncount: don't skip eviction when age is negative
          - netfilter: nf_conncount: split gc in two phases
          - netfilter: nf_conncount: restart search when nodes have been erased
            (Closes: #921616)
          - netfilter: nf_conncount: merge lookup and add functions
          - netfilter: nf_conncount: move all list iterations under spinlock
          - netfilter: nf_conncount: speculative garbage collection on empty lists
          - netfilter: nf_conncount: fix argument order to find_next_bit
          - [arm64] mmc: sdhci-msm: Disable CDR function on TX
          - Revert "scsi: target: iscsi: cxgbit: fix csk leak"
          - scsi: target: iscsi: cxgbit: fix csk leak
          - scsi: target: iscsi: cxgbit: fix csk leak
          - [arm64] kvm: consistently handle host HCR_EL2 flags
          - [arm64] Don't trap host pointer auth use to EL2
          - ipv6: fix kernel-infoleak in ipv6_local_error()
          - net: bridge: fix a bug on using a neighbour cache entry without checking
            its state
          - packet: Do not leak dev refcounts on error exit
          - tcp: change txhash on SYN-data timeout
          - tun: publish tfile after it's fully initialized
          - r8169: don't try to read counters if chip is in a PCI power-save state
          - bonding: update nest level on unlink
          - ip: on queued skb use skb_header_pointer instead of pskb_may_pull
          - r8169: load Realtek PHY driver module before r8169
          - crypto: authencesn - Avoid twice completion call in decrypt path
          - crypto: authenc - fix parsing key with misaligned rta_len
          - [x86] xen: Fix x86 sched_clock() interface for xen
          - Revert "btrfs: balance dirty metadata pages in btrfs_finish_ordered_io"
          - btrfs: wait on ordered extents on abort cleanup
          - Yama: Check for pid death before checking ancestry
          - scsi: core: Synchronize request queue PM status only on successful resume
          - [x86] scsi: sd: Fix cache_type_store()
          - [mips*] fix n32 compat_ipc_parse_version
          - [mips*] BCM47XX: Setup struct device for the SoC
          - [mips*] lantiq: Fix IPI interrupt handling
          - of: properties: add missing of_node_put
          - RDMA/nldev: Don't expose unsafe global rkey to regular user
          - [arm64] kaslr: ensure randomized quantities are clean to the PoC
          - [arm64] dts: marvell: armada-ap806: reserve PSCI area
          - [mips*] Disable MSI also when pcie-octeon.pcie_disable on
          - fix int_sqrt64() for very large numbers
          - media: vivid: fix error handling of kthread_run
          - media: vivid: set min width/height to a value > 0
          - bpf: in __bpf_redirect_no_mac pull mac only if present
          - ipv6: make icmp6_send() robust against null skb->dev
          - LSM: Check for NULL cred-security on free
          - netfilter: ebtables: account ebt_table_info to kmemcg
          - block: use rcu_work instead of call_rcu to avoid sleep in softirq
          - selinux: fix GPF on invalid policy
          - blockdev: Fix livelocks on loop device
          - sctp: allocate sctp_sockaddr_entry with kzalloc
          - tipc: fix uninit-value in in tipc_conn_rcv_sub
          - tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
          - tipc: fix uninit-value in tipc_nl_compat_bearer_enable
          - tipc: fix uninit-value in tipc_nl_compat_link_set
          - tipc: fix uninit-value in tipc_nl_compat_name_table_dump
          - tipc: fix uninit-value in tipc_nl_compat_doit
          - block/loop: Don't grab "struct file" for vfs_getattr() operation.
          - block/loop: Use global lock for ioctl() operation.
          - loop: Fold __loop_release into loop_release
          - loop: Get rid of loop_index_mutex
          - loop: Push lo_ctl_mutex down into individual ioctls
          - loop: Split setting of lo_state from loop_clr_fd
          - loop: Push loop_ctl_mutex down into loop_clr_fd()
          - loop: Push loop_ctl_mutex down to loop_get_status()
          - loop: Push loop_ctl_mutex down to loop_set_status()
          - loop: Push loop_ctl_mutex down to loop_set_fd()
          - loop: Push loop_ctl_mutex down to loop_change_fd()
          - loop: Move special partition reread handling in loop_clr_fd()
          - loop: Move loop_reread_partitions() out of loop_ctl_mutex
          - loop: Fix deadlock when calling blkdev_reread_part()
          - loop: Avoid circular locking dependency between loop_ctl_mutex and
          - loop: Get rid of 'nested' acquisition of loop_ctl_mutex
          - loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
          - loop: drop caches if offset or block_size are changed
          - drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
          - nbd: Use set_blocksize() to set device blocksize
          - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped
          - [armhf, arm64 net: dsa: mv88x6xxx: mv88e6390 errata
          - net, skbuff: do not prefer skb allocation fails early
          - qmi_wwan: add MTU default to qmap network interface
          - r8169: Add support for new Realtek Ethernet
          - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
          - net: clear skb->tstamp in bridge forwarding path
          - netfilter: ipset: Allow matching on destination MAC address for mac and
            ipmac sets
          - [arm64] gpio: pl061: Move irq_chip definition inside struct pl061
          - drm/amd/display: Guard against null stream_state in set_crc_source
          - [x86] drm/amdkfd: fix interrupt spin lock
          - ixgbe: allow IPsec Tx offload in VEPA mode
          - [x86] platform: asus-wmi: Tell the EC the OS will handle the display
            off hotkey
          - e1000e: allow non-monotonic SYSTIM readings
          - [x86] usb: typec: tcpm: Do not disconnect link for self powered devices
          - of: overlay: add missing of_node_put() after add new node to changeset
          - writeback: don't decrement wb->refcnt if !wb->bdi
          - serial: set suppress_bind_attrs flag only if builtin
          - bpf: Allow narrow loads with offset > 0
          - ALSA: oxfw: add support for APOGEE duet FireWire
          - [x86] mce: Fix -Wmissing-prototypes warnings
          - [mips] SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
          - [arm64] perf: set suppress_bind_attrs flag to true
          - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier
          - [arm64] clk: meson: meson8b: fix incorrect divider mapping in
          - samples: bpf: fix: error handling regarding kprobe_events
          - usb: gadget: udc: renesas_usb3: add a safety connection way for
          - fpga: altera-cvp: fix probing for multiple FPGAs on the bus
          - selinux: always allow mounting submounts
          - ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
          - scsi: qedi: Check for session online before getting iSCSI TLV data.
          - drm/amdgpu: Reorder uvd ring init before uvd resume
          - rxe: IB_WR_REG_MR does not capture MR's iova field
          - efi/libstub: Disable some warnings for x86{,_64}
          - jffs2: Fix use of uninitialized delayed_work, lockdep breakage
          - clk: imx: make mux parent strings const
          - pstore/ram: Do not treat empty buffers as valid
          - media: uvcvideo: Refactor teardown of uvc on USB disconnect
          - powerpc/xmon: Fix invocation inside lock region
          - powerpc/pseries/cpuidle: Fix preempt warning
          - media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
          - ASoC: use dma_ops of parent device for acp_audio_dma
          - media: venus: core: Set dma maximum segment size
          - staging: erofs: fix use-after-free of on-stack `z_erofs_vle_unzip_io'
          - net: call sk_dst_reset when set SO_DONTROUTE
          - scsi: target: use consistent left-aligned ASCII INQUIRY data
          - scsi: target/core: Make sure that target_wait_for_sess_cmds() waits long
          - [arm64] kasan: Increase stack size for KASAN_EXTRA
          - clk: imx6q: reset exclusive gates on init
          - [arm64] Fix minor issues with the dcache_by_line_op macro
          - bpf: relax verifier restriction on BPF_MOV | BPF_ALU
          - mmc: atmel-mci: do not assume idle after atmci_request_end
          - btrfs: volumes: Make sure there is no overlap of dev extents at mount
          - btrfs: alloc_chunk: fix more DUP stripe size handling
          - btrfs: fix use-after-free due to race between replace start and cancel
          - btrfs: improve error handling of btrfs_add_link
          - tty/serial: do not free trasnmit buffer page under port lock
          - perf intel-pt: Fix error with config term "pt=0"
          - perf tests ARM: Disable breakpoint tests 32-bit
          - perf svghelper: Fix unchecked usage of strncpy()
          - perf parse-events: Fix unchecked usage of strncpy()
          - perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
          - netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set
          - netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine
          - netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
          - [x86] topology: Use total_cpus for max logical packages calculation
          - dm crypt: use u64 instead of sector_t to store iv_offset
          - dm kcopyd: Fix bug causing workqueue stalls
          - perf stat: Avoid segfaults caused by negated options
          - tools lib subcmd: Don't add the kernel sources to the include path
          - dm snapshot: Fix excessive memory usage and workqueue stalls
          - perf cs-etm: Correct packets swapping in cs_etm__flush()
          - perf tools: Add missing sigqueue() prototype for systems lacking it
          - perf tools: Add missing open_memstream() prototype for systems lacking it
          - quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.
          - clocksource/drivers/integrator-ap: Add missing of_node_put()
          - dm: Check for device sector overflow if CONFIG_LBDAF is not set
          - Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029
          - ALSA: bebob: fix model-id of unit for Apogee Ensemble
          - sysfs: Disable lockdep for driver bind/unbind files
          - IB/usnic: Fix potential deadlock
          - scsi: mpt3sas: fix memory ordering on 64bit writes
          - scsi: smartpqi: correct lun reset issues
          - ath10k: fix peer stats null pointer dereference
          - scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
          - scsi: megaraid: fix out-of-bound array accesses
          - iomap: don't search past page end in iomap_is_partially_uptodate
          - ocfs2: fix panic due to unrecovered local alloc
          - mm/page-writeback.c: don't break integrity writeback on ->writepage()
          - mm/swap: use nr_node_ids for avail_lists in swap_info_struct
          - userfaultfd: clear flag if remap event not enabled
          - mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
          - iwlwifi: mvm: Send LQ command as async when necessary
          - Bluetooth: Fix unnecessary error message for HCI request completion
          - ipmi: fix use-after-free of user->release_barrier.rda
          - ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
          - ipmi: Prevent use-after-free in deliver_response
          - ipmi:ssif: Fix handling of multi-part return messages
          - ipmi: Don't initialize anything in the core until something uses it
          - amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
          - net: bridge: Fix ethernet header pointer before check skb forwardable
          - net: Fix usage of pskb_trim_rcsum
          - net: phy: marvell: Errata for mv88e6390 internal PHYs
          - net: phy: mdio_bus: add missing device_del() in mdiobus_register() error
          - net/sched: act_tunnel_key: fix memory leak in case of action replace
          - net_sched: refetch skb protocol for each filter
          - openvswitch: Avoid OOB read when parsing flow nlattrs
          - vhost: log dirty page correctly
          - net: ipv4: Fix memory leak in network namespace dismantle
          - net/sched: cls_flower: allocate mask dynamically in fl_change()
          - udp: with udp_segment release on error path
          - ip6_gre: fix tunnel list corruption for x-netns
          - erspan: build the header with the right proto according to erspan_ver
          - net: phy: marvell: Fix deadlock from wrong locking
          - ip6_gre: update version related info when changing link
          - tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
          - mei: me: mark LBG devices as having dma support
          - mei: me: add denverton innovation engine device IDs
          - USB: leds: fix regression in usbport led trigger
          - USB: serial: simple: add Motorola Tetra TPG2200 device id
          - USB: serial: pl2303: add new PID to support PL2303TB
          - ceph: clear inode pointer when snap realm gets dropped by its inode
          - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
          - ASoC: rt5514-spi: Fix potential NULL pointer dereference
          - ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
          - clk: socfpga: stratix10: fix rate calculation for pll clocks
          - clk: socfpga: stratix10: fix naming convention for the fixed-clocks
          - inotify: Fix fd refcount leak in inotify_add_watch().
          - ALSA: hda/realtek - Fix typo for ALC225 model
          - ALSA: hda - Add mute LED support for HP ProBook 470 G5
          - ARCv2: lib: memeset: fix doing prefetchw outside of buffer
          - ARC: adjust memblock_reserve of kernel memory
          - ARC: perf: map generic branches to correct hardware condition
          - s390/mm: always force a load of the primary ASCE on context switch
          - s390/early: improve machine detection
          - s390/smp: fix CPU hotplug deadlock with CPU rescan
          - misc: ibmvsm: Fix potential NULL pointer dereference
          - char/mwave: fix potential Spectre v1 vulnerability
          - [arm64] mmc: dw_mmc-bluefield: : Fix the license information
          - [arm64] mmc: meson-gx: Free irq in release() callback
          - staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
          - tty: Handle problem if line discipline does not have receive_buf
          - uart: Fix crash in uart_write and uart_put_char
          - tty/n_hdlc: fix __might_sleep warning
          - hv_balloon: avoid touching uninitialized struct page during tail onlining
          - Drivers: hv: vmbus: Check for ring when getting debug info
          - vgacon: unconfuse vc_origin when using soft scrollback
          - CIFS: Fix possible hang during async MTU reads and writes
          - CIFS: Fix credits calculations for reads with errors
          - CIFS: Fix credit calculation for encrypted reads with errors
          - CIFS: Do not reconnect TCP session in add_credits()
          - smb3: add credits we receive from oplock/break PDUs
          - Input: xpad - add support for SteelSeries Stratus Duo
          - Input: input_event - provide override for sparc64
          - Input: uinput - fix undefined behavior in uinput_validate_absinfo()
          - acpi/nfit: Block function zero DSMs
          - acpi/nfit: Fix command-supported detection
          - scsi: ufs: Use explicit access size in ufshcd_dump_regs
          - dm thin: fix passdown_double_checking_shared_status()
          - dm crypt: fix parsing of extended IV arguments
          - [x86] drm/amdgpu: Add APTX quirk for Lenovo laptop
          - [x86] KVM: Fix single-step debugging
          - [x86] KVM: Fix PV IPIs for 32-bit KVM host
          - [x86] KVM: WARN_ONCE if sending a PV IPI returns a fatal error
          - [x86] kvm: vmx: Use kzalloc for cached_vmcs12
          - [x86] KVM/nVMX: Do not validate that posted_intr_desc_addr is page
          - [x86] pkeys: Properly copy pkey state at fork()
          - [x86] selftests/pkeys: Fork() to check for state being preserved
          - [x86] kaslr: Fix incorrect i8254 outb() parameters
          - [x86] entry/64/compat: Fix stack switching for XEN PV
          - [arm64] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
          - can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by
            removing it
          - can: bcm: check timer values before ktime conversion
          - can: flexcan: fix NULL pointer exception during bringup
          - vt: make vt_console_print() compatible with the unicode screen buffer
          - vt: always call notifier with the console lock held
          - vt: invoke notifier on screen size change
          - [arm64] drm/meson: Fix atomic mode switching regression
          - bpf: improve verifier branch analysis
          - bpf: add per-insn complexity limit
          - bpf: move {prev_,}insn_idx into verifier env
          - bpf: move tmp variable into ax register in interpreter
          - bpf: enable access to ax register also from verifier rewrite
          - bpf: restrict map value pointer arithmetic for unprivileged
          - bpf: restrict stack pointer arithmetic for unprivileged
          - bpf: restrict unknown scalars of mixed signed bounds for unprivileged
          - bpf: fix check_map_access smin_value test when pointer contains offset
          - bpf: prevent out of bounds speculation on pointer arithmetic
          - bpf: fix sanitation of alu op with pointer / scalar type from different
            paths (CVE-2019-7308)
          - bpf: fix inner map masking to prevent oob under speculation
          - [s390*] smp: Fix calling smp_call_ipl_cpu() from ipl CPU
          - nvmet-rdma: Add unlikely for response allocated check
          - nvmet-rdma: fix null dereference under heavy load
          - Revert "mm, memory_hotplug: initialize struct pages for the full memory
          - usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
          - ide: fix a typo in the settings proc file name
          - Input: input_event - fix the CONFIG_SPARC64 mixup
          - Fix "net: ipv4: do not handle duplicate fragments as overlapping"
          - ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation
          - ipvlan, l3mdev: fix broken l3s mode wrt local routes
          - l2tp: copy 4 more bytes to linear part if necessary
          - l2tp: fix reading optional fields of L2TPv3
          - net: ip_gre: always reports o_key to userspace
          - net: ip_gre: use erspan key field for tunnel lookup
          - net/mlx4_core: Add masking for a few queries on HCA caps
          - netrom: switch to sock timer API
          - net/rose: fix NULL ax25_cb kernel panic
          - net: set default network namespace in init_dummy_netdev()
          - sctp: improve the events for sctp stream reset
          - tun: move the call to tun_set_real_num_queues
          - vhost: fix OOB in get_rx_bufs()
          - net: ip6_gre: always reports o_key to userspace
          - sctp: improve the events for sctp stream adding
          - net/mlx5e: Allow MAC invalidation while spoofchk is ON
          - ip6mr: Fix notifiers call on mroute_clean_tables()
          - sctp: set chunk transport correctly when it's a new asoc
          - sctp: set flow sport from saddr only when it's 0
          - virtio_net: Don't enable NAPI when interface is down
          - virtio_net: Don't call free_old_xmit_skbs for xdp_frames
          - virtio_net: Fix not restoring real_num_rx_queues
          - virtio_net: Fix out of bounds access of sq
          - virtio_net: Don't process redirected XDP frames when XDP is disabled
          - virtio_net: Use xdp_return_frame to free xdp_frames on destroying vqs
          - virtio_net: Differentiate sk_buff and xdp_frame on freeing
          - CIFS: Do not count -ENODATA as failure for query directory
          - CIFS: Fix trace command logging for SMB2 reads and writes
          - CIFS: Do not consider -ENODATA as stat failure for reads
          - fs/dcache: Fix incorrect nr_dentry_unused accounting in
          - iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions()
          - NFS: Fix up return value on fatal errors in nfs_page_async_flush()
          - [arm64] kaslr: ensure randomized quantities are clean also when kaslr is
          - [arm64] Do not issue IPIs for user executable ptes
          - [arm64] hyp-stub: Forbid kprobing of the hyp-stub
          - [arm64] hibernate: Clean the __hyp_text to PoC after resume
          - gpiolib: fix line event timestamps for nested irqs
          - gpio: pcf857x: Fix interrupts on multiple instances
          - gfs2: Revert "Fix loop in gfs2_rbm_find"
          - [arm*] mmc: bcm2835: Fix DMA channel leak on probe error
          - mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay
          - ALSA: usb-audio: Add Opus #3 to quirks for native DSD support
          - ALSA: hda/realtek - Fixed hp_pin no value
          - IB/hfi1: Remove overly conservative VM_EXEC flag check
          - [x86] platform: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK
          - [x86] platform: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes
          - mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
          - Btrfs: fix deadlock when allocating tree block during leaf/node split
          - btrfs: On error always free subvol_name in btrfs_mount
          - kernel/exit.c: release ptraced tasks before zap_pid_ns_processes
          - mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT
          - oom, oom_reaper: do not enqueue same task twice
          - mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages
          - mm, oom: fix use-after-free in oom_kill_process
          - mm: hwpoison: use do_send_sig_info() instead of force_sig()
          - mm: migrate: don't rely on __PageMovable() of newpage after unlocking it
          - of: Convert to using %pOFn instead of device_node.name
          - of: overlay: add tests to validate kfrees from overlay removal
          - of: overlay: add missing of_node_get() in __of_attach_node_sysfs
          - of: overlay: use prop add changeset entry for property in new nodes
          - of: overlay: do not duplicate properties from overlay for new nodes
          - md/raid5: fix 'out of memory' during raid cache recovery
          - cifs: Always resolve hostname before reconnecting
        [ Luca Boccassi ]
        * Do not generate linux-source-$ver stanza in debian/control if
          source is set to disabled in debian/config/defines.
        * linux-perf: explicitly disable the jvmti feature and shared library.
        * Document pkg.linux.nosource in debian/README.source.
        * [amd64] enable UIO_HV_GENERIC for Azure's VMBus access.
        * [cloud-amd64] enable UIO for Azure's VMBus access, and VFIO for guests
          running on an hypervisor that exposes a vIOMMU.
        [ Ben Hutchings ]
        * debian/rules.d, debian/rules.real: Restore build of userland headers for
        * debian/rules.d: Delete now-unused recursive makefiles
        * debian/rules.d/tools/perf/Makefile: Delete redundant arch/profile checks
        * debian/control: Add !pkg.linux.nokernel to qualification for compiler
        * [i386] debian/control: Fix cross-compiler build-dependency
        * debian/README.source: Document how to run kconfigeditor2
        * [armhf,arm64] serial: 8250: Disable SERIAL_8250_DEPRECATED_OPTIONS
        * percpu: convert spin_lock_irq to spin_lock_irqsave (fixes boot failure with
          alpha-generic flavour)
        * debian/tests/python: Fix spurious failure due to misuse of stderr
        * Update "Revert "objtool: Fix CONFIG_STACK_VALIDATION=y warning for ..."
          to not duplicate the conditional warning/error
        * Bump ABI to 3
        * drivers/firmware: Enable FW_CFG_SYSFS as module (Closes: #882208)
        * [arm64,armhf,ia64,riscv64,sparc64] udeb: Add usb-serial-modules
          (Closes: #903824)
        * [powerpc*,sparc64] udeb: Add nic-usb-modules
        * [armhf,riscv64,s390x] udeb: Add cdrom-core-modules
        * 9p: Enable NET_9P_XEN as module
        * ACPI: Enable ACPI_TAD as module
        * amd-xgbe: Enable AMD_XGBE_DCB
        * ath9k: Enable ATH9K_CHANNEL_CONTEXT
        * block: Enable BLK_DEV_ZONED (except armel/marvell)
        * bluetooth: Enable BT_HCIUART_RTL; BT_HCIUART_NOKIA, BT_MTKUART as modules
        * bnxt: Enable BNXT_DCB
        * ethernet: Enable HINIC, ICE, LAN743X, LIQUIDIO_VF as modules
        * can: Enable CAN_VXCAN, CAN_MCBA_USB, CAN_UCAN as modules
        * dm: Enable DM_UNSTRIPED, DM_WRITECACHE, DM_ZONED as modules
        * [arm64,armhf] drm: Enable DRM_PANEL_RASPBERRYPI_TOUCHSCREEN as module
        * dvb-usb-v2: Enable DVB_USB_ZD1301 as module
        * gnss: Enable GNSS, GNSS_SIRF_SERIAL, GNSS_UBX_SERIAL as modules
        * gpio: Enable GPIO_EXAR, GPIO_PCI_IDIO_16, GPIO_PCIE_IDIO_24 as modules
        * [x86] i2c: Enable I2C_DESIGNWARE_BAYTRAIL
        * IB: Enable CGROUP_RDMA (except armel/marvell)
        * ieee802154: Enable IEEE802154_HWSIM as module
        * inet: Enable INET_RAW_DIAG as module
        * input: Enable INPUT_AXP20X_PEK as module
        * IPMI: Enable IPMI_SSIF as module
        * joystick: Enable JOYSTICK_PXRC as module
        * media/rc: Enable IR_IMON_DECODER, IR_IMON_RAW as modules
        * [x86] mfd: Enable INTEL_SOC_PMIC_BXTWC, INTEL_SOC_PMIC_CHTDC_TI as modules
        * mlx5: Enable MLX5_FPGA, MLX5_CORE_IPOIB; MLXFW as module
        * net: Enable BPF_STREAM_PARSER, XDP_SOCKETS (except armel/marvell)
          (Closes: #908860); NET_FAILOVER, SMC, SMC_DIAG, VSOCKMON as modules
        * net/phy: Enable LED_TRIGGER_PHY; CORTINA_PHY, DP83822_PHY, DP83TC811_PHY,
          as modules
        * PCMCIA: Enable SCR24X as module
        * [x86] pinctrl: Enable PINCTRL_CANNONLAKE, PINCTRL_CEDARFORK,
        * [x86] rmi4: Re-enable RMI4_CORE, RMI4_SMB as modules (Closes: #875621);
          RMI4_F03, RMI4_F11, RMI4_F12, RMI4_F30, RMI4_F34, RMI4_F55
        * xfrm: Enable XFRM_INTERFACE as module
        * PCI: Enable PCI_PF_STUB as module
        * ptp: Change PTP_1588_CLOCK_KVM from built-in to module
        * random: Enable RANDOM_TRUST_CPU. This can be reverted using the kernel
          parameter: random.trust_cpu=off
        * SCSI: Enable QEDF, QEDI as modules
        * serial: Enable SERIAL_8250_EXAR, USB_SERIAL_F8153X, USB_SERIAL_UPD78F0730
          as modules
        * sound: Enable SND_FIREWIRE_MOTU, SND_FIREFACE, SND_XEN_FRONTEND as modules
        * [x86] sound: Enable SND_SOC_AMD_CZ_DA7219MX98357_MACH,
          SND_SOC_INTEL_GLK_RT5682_MAX98357A_MACH as modules
        * tpm: Enable TCG_TIS_SPI, TCG_VTPM_PROXY as modules
        * usbtouchscreen: Enable TOUCHSCREEN_USB_EASYTOUCH
          WDAT_WDT as modules
        * [x86] watchdog: Enable INTEL_MEI_WDT, NI903X_WDT, NIC7018_WDT as modules
        * wireless: Enable MT76x0U, MT76x2E, MT76x2U, QTNFMAC_PEARL_PCIE as modules
          (Closes: #918331)
        * udeb: Add scsi-nic-modules containing Chelsio and Qlogic iSCSI/FC drivers
        [ Marcin Juszkiewicz ]
        * [arm64] enable ARM_CCI_PMU so ARM_CCI400_PMU and ARM_CCI5xx_PMU options
          get really enabled.
        * [arm64] enable PCI_PRI, PCI_PASID as PCI can be behind IOMMU in servers.
        * udeb: Add virtio-gpu into d-i to get graphical output in VM instances.
        * [arm64] Enable ARM64_ERRATUM_843419 (Closes: #920866)
        [ Salvatore Bonaccorso ]
        * [x86] kvmclock: set offset for kvm unstable clock (Closes: #918036)
        * kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
        * [x86] KVM: work around leak of uninitialized stack contents
        * [x86] KVM: nVMX: unconditionally cancel preemption timer in free_nested
        * HID: debug: fix the ring buffer implementation (CVE-2019-3819)
        [ Hideki Yamane ]
        * [x86] Enable Touchpad support on Gemini Lake via CONFIG_PINCTRL_GEMINILAKE
          (Closes: #917388)
        * [x86] Enable SND_SOC_ES8316 and Baytrail & Cherrytrail with ES8316 codec,
          too (Closes: #918589)
        * hwmon: Enable CONFIG_SENSORS_NCT7802,NCT7904,NPCM7XX,ASPEED and W83773G
          to use HWMON hardware (Closes: #912597)
        * net: can: Enable CONFIG_CAN_PEAK_PCIEFD for a PCI express CAN Bus adapter
          (Closes: #920809)
        * [armhf] Enable CONFIG_SENSORS_LM75 for armhf (Closes: #918114)
        * [armhf] Enable CONFIG_IMX_THERMAL for armhf (Closes: #883023)
        * [arm64] Enable CONFIG_ARM_ARMADA_37XX_CPUFREQ for arm64 (Closes: #917939)
        [ Vagrant Cascadian ]
        * [armhf] Enable CONFIG_MMC_SDHCI_OMAP=m, used on DRA7 and related SoCs.
        [ Uwe Kleine-König ]
        * [armel] add spi-orion to mtd.udeb to be able to access spi flash on e.g.
          qnap ts-21x. (Closes: #920607)
    • Sophie Brun's avatar
      Import Upstream version 4.19.20 · 0e520f43
      Sophie Brun authored
  19. 21 Jan, 2019 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 4.19.16-1 · 31232605
      Ben Hutchings authored
      linux (4.19.16-1) unstable; urgency=medium
        * New upstream stable update:
          - ax25: fix a use-after-free in ax25_fillin_cb()
          - gro_cell: add napi_disable in gro_cells_destroy
          - ip6mr: Fix potential Spectre v1 vulnerability
          - ipv4: Fix potential Spectre v1 vulnerability
          - ipv6: explicitly initialize udp6_addr in udp_sock_create6()
          - ipv6: tunnels: fix two use-after-free
          - ip: validate header length on virtual device xmit
          - isdn: fix kernel-infoleak in capi_unlocked_ioctl
          - net/wan: fix a double free in x25_asy_open_tty()
          - packet: validate address length
          - packet: validate address length if non-zero
          - ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
          - sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
          - tipc: compare remote and local protocols in tipc_udp_enable()
          - tipc: fix a double free in tipc_enable_bearer()
          - tipc: fix a double kfree_skb()
          - ipv6: frags: Fix bogus skb->sk in reassembled packets
          - ipv6: route: Fix return value of ip6_neigh_lookup() on neigh_create()
          - ALSA: rme9652: Fix potential Spectre v1 vulnerability
          - ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
          - ALSA: pcm: Fix potential Spectre v1 vulnerability
          - ALSA: emux: Fix potential Spectre v1 vulnerabilities
          - powerpc/fsl: Fix spectre_v2 mitigations reporting
          - usb: r8a66597: Fix a possible concurrency use-after-free bug in
          - [s390x] s390/pci: fix sleeping in atomic during hotplug
          - [x86] x86/speculation/l1tf: Drop the swap storage limit restriction when
          - [x86] x86/mm: Drop usage of __flush_tlb_all() in
          - [x86] KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
          - [arm64] arm64: KVM: Make VHE Stage-2 TLB invalidation operations
          - perf pmu: Suppress potential format-truncation warning
          - perf env: Also consider env->arch == NULL as local operation
          - ext4: fix possible use after free in ext4_quota_enable
          - ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
          - ext4: include terminating u32 in size of xattr entries when expanding
          - ext4: force inode writes when nfsd calls commit_metadata()
          - ext4: check for shutdown and r/o file system in ext4_write_inode()
          - [armhf,arm64] spi: bcm2835: Fix race on DMA termination
          - [armhf,arm64] spi: bcm2835: Fix book-keeping of DMA termination
          - [armhf,arm64] spi: bcm2835: Avoid finishing transfer prematurely in IRQ
          - btrfs: dev-replace: go back to suspended state if target device is missing
          - btrfs: dev-replace: go back to suspend state if another EXCL_OP is running
          - btrfs: skip file_extent generation check for free_space_inode in
          - Btrfs: fix fsync of files with multiple hard links in new directories
          - btrfs: run delayed items before dropping the snapshot
          - Btrfs: send, fix race with transaction commits that create snapshots
          - brcmfmac: Fix out of bounds memory access during fw load
          - dax: Don't access a freed inode
          - f2fs: read page index before freeing
          - f2fs: sanity check of xattr entry size
          - media: imx274: fix stack corruption in imx274_read_reg
          - media: v4l2-tpg: array index could become negative
          - tools lib traceevent: Fix processing of dereferenced args in bprintk
          - [mips*] MIPS: math-emu: Write-protect delay slot emulation pages
          - [mips*] MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
          - [mips*] MIPS: Align kernel load address to 64KB
          - [mips*] MIPS: Expand MIPS32 ASIDs to 64 bits
          - CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock
          - smb3: fix large reads on encrypted connections
          - [arm*] KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
          - [arm*] KVM: arm/arm64: vgic-v2: Set active_source to 0 when restoring
          - [arm*] KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()
          - IB/core: Fix oops in netdev_next_upper_dev_rcu()
          - xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force
            clears the dst_entry.
          - ieee802154: hwsim: fix off-by-one in parse nested
          - netfilter: seqadj: re-load tcp header pointer after possible head
          - scsi: bnx2fc: Fix NULL dereference in error handling
          - [ppc64el] ibmvnic: Convert reset work item mutex to spin lock
          - [ppc64el] ibmvnic: Fix non-atomic memory allocation in IRQ context
          - [x86] x86/mm: Fix guard hole handling
          - i40e: fix mac filter delete when setting mac address
          - ixgbe: Fix race when the VF driver does a reset
          - netfilter: nat: can't use dst_hold on noref dst
          - bnx2x: Clear fip MAC when fcoe offload support is disabled
          - bnx2x: Remove configured vlans as part of unload sequence.
          - bnx2x: Send update-svid ramrod with retry/poll flags enabled
          - mt76: fix potential NULL pointer dereference in mt76_stop_tx_queues
          - [x86] x86, hyperv: remove PCI dependency
          - [arm64] net: hns: All ports can not work when insmod hns ko after rmmod.
          - [arm64] net: hns: Fixed bug that netdev was opened twice
          - [arm64] net: hns: Clean rx fbd when ae stopped.
          - [arm64] net: hns: Avoid net reset caused by pause frames storm
          - [arm64] net: hns: Add mac pcs config when enable|disable mac
          - [arm64] net: hns: Fix ping failed when use net bridge and send multicast
          - mac80211: fix a kernel panic when TXing after TXQ teardown
          - [arm64,riscv64] net: macb: fix random memory corruption on RX with
            64-bit DMA
          - [arm64.risvv64] net: macb: fix dropped RX frames due to a race
          - lan78xx: Resolve issue with changing MAC address
          - [s390x] scsi: zfcp: fix posting too many status read buffers leading to
            adapter shutdown
          - fork: record start_time late
          - zram: fix double free backing device
          - hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined
          - mm, devm_memremap_pages: kill mapping "System RAM" support
          - memcg, oom: notify on oom killer invocation from the charge path
          - mt76x0: init hw capabilities
          - [amd64] media: cx23885: only reset DMA on problematic CPUs
          - ALSA: cs46xx: Potential NULL dereference in probe
          - ALSA: usb-audio: Avoid access before bLength check in
          - ALSA: usb-audio: Check mixer unit descriptors more strictly
          - ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
          - ALSA: usb-audio: Always check descriptor sizes in parser code
          - Fix failure path in alloc_pid()
          - block: deactivate blk_stat timer in wbt_disable_default()
          - gfs2: Get rid of potential double-freeing in gfs2_create_inode
          - gfs2: Fix loop in gfs2_rbm_find
          - b43: Fix error in cordic routine
          - nfsd4: zero-length WRITE should succeed
          - [ppc*] powerpc/tm: Set MSR[TS] just prior to recheckpoint
          - RDMA/srpt: Fix a use-after-free in the channel release code
          - sched/fair: Fix infinite loop in update_blocked_averages() by reverting
          - [s390x] genwqe: Fix size check
          - [x86] intel_th: msu: Fix an off-by-one in attribute store
          - [armhf,arm64] drm/rockchip: psr: do not dereference encoder before it is
            null checked.
          - bnx2x: Fix NULL pointer dereference in bnx2x_del_all_vlans() on some hw
          - Btrfs: fix deadlock when using free space tree due to block group
          - staging: rtl8188eu: Fix module loading from tasklet for CCMP encryption
          - staging: rtl8188eu: Fix module loading from tasklet for WEP encryption
          - cpufreq: scmi: Fix frequency invariance in slow path
          - [x86] modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE
          - ALSA: hda/realtek - Support Dell headset mode for New AIO platform
          - ALSA: hda/realtek - Add unplug function into unplug state of Headset Mode
            for ALC225
          - ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225
          - CIFS: Fix adjustment of credits for MTU requests
          - CIFS: Do not set credits to 1 if the server didn't grant anything
          - CIFS: Do not hide EINTR after sending network packets
          - CIFS: Fix credit computation for compounded requests
          - cifs: Fix potential OOB access of lock element array
          - usb: cdc-acm: send ZLP for Telit 3G Intel based modems
          - USB: storage: don't insert sane sense for SPC3+ when bad sense specified
          - USB: storage: add quirk for SMI SM3350
          - USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
          - slab: alien caches must not be initialized if the allocation of the alien
            cache failed
          - mm/usercopy.c: no check page span for stack objects
          - mm, memcg: fix reclaim deadlock with writeback
          - ACPI: power: Skip duplicate power resource references in _PRx
          - ACPI / PMIC: xpower: Fix TS-pin current-source handling
          - ACPI/IORT: Fix rc_dma_get_range()
          - i2c: dev: prevent adapter retries and timeout being set as minus value
          - vfio/type1: Fix unmap overflow off-by-one
          - drm/amdgpu: Add new VegaM pci id
          - PCI: dwc: Use interrupt masking instead of disabling
          - PCI: dwc: Take lock when ACKing an interrupt
          - PCI: dwc: Move interrupt acking into the proper callback
          - drm/amd/display: Fix MST dp_blank REG_WAIT timeout
          - drm/fb_helper: Allow leaking fbdev smem_start
          - drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
          - [x86] drm/i915: Unwind failure on pinning the gen7 ppgtt
          - drm/amdgpu: Don't ignore rc from drm_dp_mst_topology_mgr_resume()
          - drm/amdgpu: Don't fail resume process if resuming atomic state fails
          - rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
          - ext4: make sure enough credits are reserved for dioread_nolock writes
          - ext4: fix a potential fiemap/page fault deadlock w/ inline_data
          - ext4: avoid kernel warning when writing the superblock to a dead device
          - ext4: use ext4_write_inode() when fsyncing w/o a journal
          - ext4: track writeback errors using the generic tracking infrastructure
          - ext4: fix special inode number checks in __ext4_iget()
          - mm: page_mapped: don't assume compound page is huge or THP
          - sunrpc: use-after-free in svc_process_common()
          - [armhf,arm64] KVM: Fix VMID alloc race by reverting to lock-less
          - [arm64] compat: Don't pull syscall number from regs in arm_compat_syscall
          - Btrfs: fix access to available allocation bits when starting balance
          - Btrfs: fix deadlock when enabling quotas due to concurrent snapshot
          - Btrfs: use nofs context when initializing security xattrs to avoid
        [ John Paul Adrian Glaubitz ]
        * [m68k] Add patch to build with -ffreestanding to fix FTBFS
        [ Ben Hutchings ]
        * [ia64,m68k] libbpf: Really don't build on architectures without perf events
        * Use dh_listpackages to determine which packages to build
        * Add pkg.linux.nokernel build profile that excludes kernel image and header
        [ Yves-Alexis Perez ]
        * Bump ABI to 2 because of changes in struct sock_common from 60f05dddf1eb
        * [rt] Update to 4.19.15-rt12
          - rtmutex/rwlock: preserve state like a sleeping lock
        [ Salvatore Bonaccorso ]
        * ipv6: Consider sk_bound_dev_if when binding a socket to an address
          (Closes: #918103)
        * posix-cpu-timers: Unbreak timer rearming (Closes: #919019, #919049)
        [ Michal Simek ]
        * [arm64] Enable Xilinx ZynqMP SoC and drivers
        [ YunQiang Su ]
        * [mipsel, mips64el] Enable DRM_AST and FB_SM750 for loongson-3
          install ast and sm750fb to loongson-3's fb-modules
        [ Romain Perier ]
        * [rt] Update to 4.19.13-rt10
        [ Luigi Baldoni ]
        * [x86] Enable LEDS_APU to support leds on PC Engines
          APU SBC series
    • Sophie Brun's avatar
      Import Upstream version 4.19.16 · 4c17101e
      Sophie Brun authored
  20. 02 Jan, 2019 2 commits
    • Salvatore Bonaccorso's avatar
      Import Debian changes 4.19.13-1 · a57e5ace
      Salvatore Bonaccorso authored
      linux (4.19.13-1) unstable; urgency=medium
        * New upstream stable update:
          - Revert "vfs: Allow userns root to call mknod on owned filesystems."
          - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
          - xhci: Don't prevent USB2 bus suspend in state check intended for USB3
          - USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd
          - USB: serial: option: add GosunCn ZTE WeLink ME3630
          - USB: serial: option: add HP lt4132
          - USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
          - USB: serial: option: add Fibocom NL668 series
          - USB: serial: option: add Telit LN940 series
          - ubifs: Handle re-linking of inodes correctly while recovery
          - scsi: t10-pi: Return correct ref tag when queue has no integrity profile
          - scsi: sd: use mempool for discard special page
          - mmc: core: Reset HPI enabled state during re-init and in case of errors
          - mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
          - mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl
          - [armhf] mmc: omap_hsmmc: fix DMA API warning
          - gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers
          - posix-timers: Fix division by zero bug
          - [x86] KVM: Fix NULL deref in vcpu_scan_ioapic
          - [x86] kvm: Add AMD's EX_CFG to the list of ignored MSRs
          - [x86] KVM: Fix UAF in nested posted interrupt processing
          - [x86] Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened
          - futex: Cure exit race
          - [x86] mtrr: Don't copy uninitialized gentry fields back to userspace
          - [x86] mm: Fix decoy address handling vs 32-bit builds (Closes: #917569)
          - [x86] vdso: Pass --eh-frame-hdr to the linker
          - panic: avoid deadlocks in re-entrant console drivers
          - mm: add mm_pxd_folded checks to pgtable_bytes accounting functions
          - mm: make the __PAGETABLE_PxD_FOLDED defines non-empty
          - mm: introduce mm_[p4d|pud|pmd]_folded
          - xfrm_user: fix freeing of xfrm states on acquire
          - rtlwifi: Fix leak of skb when processing C2H_BT_INFO
          - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares
          - Revert "mwifiex: restructure rx_reorder_tbl_lock usage"
          - iwlwifi: add new cards for 9560, 9462, 9461 and killer series
          - mm, memory_hotplug: initialize struct pages for the full memory section
          - mm: thp: fix flags for pmd migration when split
          - mm, page_alloc: fix has_unmovable_pages for HugePages
          - mm: don't miss the last page because of round-off error
          - Input: elantech - disable elan-i2c for P52 and P72
          - proc/sysctl: don't return ENOMEM on lookup when a table is unregistering
          - drm/ioctl: Fix Spectre v1 vulnerabilities
        [ Uwe Kleine-König ]
        * [armhf] enable some kconfig items for Allwinner SoCs (SUNXI_CCU=y,
          SND_SUN8I_CODEC_ANALOG=m). (Closes: #915899)
        [ Ben Hutchings ]
        * linux-image-*-unsigned: Remove Provides field (Closes: #916927)
        * [ia64,m68k] libbpf: Don't build on architectures without performance events
        * [riscv64] tools uapi: fix RISC-V 64-bit support
        * [powerpc,powerpcspe,ppc64] linux-config: Eliminate config.*_bootwrapper.gz
        * [powerpcspe] Fix -mcpu= options for SPE-only compiler
        * debian/lib/python/debian_linux/debian.py: Fix deprecated import of
        * Fix pycodestyle "line break after binary operator" warnings
        * Fix pycodestyle "inalid escape sequence" warnings
        [ Romain Perier ]
        * [rt] Update to 4.19.10-rt8
    • Sophie Brun's avatar
      Import Upstream version 4.19.13 · cc034cde
      Sophie Brun authored
  21. 28 Dec, 2018 2 commits
    • Salvatore Bonaccorso's avatar
      Import Debian changes 4.19.12-1 · 99085dff
      Salvatore Bonaccorso authored
      linux (4.19.12-1) unstable; urgency=medium
        * New upstream stable update:
          - ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
          - ipv6: Check available headroom in ip6_xmit() even without options
          - ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
          - [arm64, hppa, powerpc, x86, alpha, armhf, mips*] net: 8139cp: fix a BUG
            triggered by changing mtu with network traffic
          - net: phy: don't allow __set_phy_supported to add unsupported modes
          - net: Prevent invalid access to skb->prev in __qdisc_drop_all
          - net: use skb_list_del_init() to remove from RX sublists
          - Revert "net/ibm/emac: wrong bit is used for STA control"
          - rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
          - sctp: kfree_rcu asoc
          - tcp: Do not underestimate rwnd_limited
          - tcp: fix NULL ref in tail loss probe
          - tun: forbid iface creation with rtnl ops
          - virtio-net: keep vnet header zeroed after processing XDP
          - net: phy: sfp: correct store of detected link modes
          - sctp: update frag_point when stream_interleave is set
          - net: restore call to netdev_queue_numa_node_write when resetting XPS
          - net: fix XPS static_key accounting
          - [armhf] OMAP2+: prm44xx: Fix section annotation on
          - [arm64, x86] staging: rtl8723bs: Fix the return value in case of error in
          - [armhf] dts: am3517: Fix pinmuxing for CD on MMC1
          - [armhf] dts: LogicPD Torpedo: Fix mmc3_dat1 interrupt
          - [armhf] dts: logicpd-somlv: Fix interrupt on mmc3_dat1
          - [armhf] dts: am3517-som: Fix WL127x Wifi interrupt
          - tools: bpftool: prevent infinite loop in get_fdinfo()
          - [arm64] dts: sdm845-mtp: Reserve reserved gpios
          - sysv: return 'err' instead of 0 in __sysv_write_inode
          - netfilter: nf_tables: don't skip inactive chains during update
          - perf tools: Fix crash on synthesizing the unit
          - netfilter: xt_RATEEST: remove netns exit routine
          - netfilter: nf_tables: fix use-after-free when deleting compat expressions
          - [armhf] ASoC: rockchip: add missing slave_config setting for I2S
          - s390/cpum_cf: Reject request for sampling in event initialization
          - [arm64, armel, x86, armhf] ASoC: dapm: Recalculate audio map forcely when
            card instantiated
          - [armhf] spi: omap2-mcspi: Add missing suspend and resume calls
          - bpf: allocate local storage buffers using GFP_ATOMIC
          - aio: fix failure to put the file pointer
          - netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
          - hwmon: (w83795) temp4_type has writable permission
          - perf tools: Restore proper cwd on return from mnt namespace
          - [armhf] PCI: imx6: Fix link training status detection in link up check
          - objtool: Fix double-free in .cold detection error path
          - objtool: Fix segfault in .cold detection with -ffunction-sections
          - [arm64] phy: qcom-qusb2: Use HSTX_TRIM fused value as is
          - [arm64] phy: qcom-qusb2: Fix HSTX_TRIM tuning with fused value for SDM845
          - Btrfs: send, fix infinite loop due to directory rename dependencies
          - RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
          - RDMA/core: Add GIDs while changing MAC addr only for registered ndev
          - RDMA/rdmavt: Fix rvt_create_ah function signature
          - tools: bpftool: fix potential NULL pointer dereference in do_load
          - ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
          - [x86] thunderbolt: Prevent root port runtime suspend during NVM upgrade
          - [arm64] drm/meson: add support for 1080p25 mode
          - netfilter: ipv6: Preserve link scope traffic original oif
          - IB/mlx5: Fix page fault handling for MW
          - netfilter: add missing error handling code for register functions
          - [x86] KVM: VMX: Update shared MSRs to be saved/restored on MSR_EFER.LMA
          - [x86] kvm/vmx: fix old-style function declaration
          - [arm64] net: thunderx: fix NULL pointer dereference in nic_remove
          - netfilter: nf_tables: deactivate expressions in rule replecement routine
          - ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock
          - cachefiles: Fix an assertion failure when trying to update a failed object
          - fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
          - cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is
          - igb: fix uninitialized variables
          - ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
          - [arm64] net: hisilicon: remove unexpected free_netdev
          - drm/amdgpu: Add delay after enable RLC ucode
          - [arm64, powerpc, x86] drm/ast: fixed reading monitor EDID not stable issue
          - Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
          - afs: Fix validation/callback interaction
          - fscache: fix race between enablement and dropping of object
          - cachefiles: Explicitly cast enumerated type in put_object
          - fscache, cachefiles: remove redundant variable 'cache'
          - nvme: warn when finding multi-port subsystems without multipathing enabled
          - ocfs2: fix deadlock caused by ocfs2_defrag_extent()
          - mm/page_alloc.c: fix calculation of pgdat->nr_zones
          - hfs: do not free node before using
          - hfsplus: do not free node before using
          - initramfs: clean old path before creating a hardlink
          - ocfs2: fix potential use after free
          - dax: Check page->mapping isn't NULL
          - ALSA: hda/realtek - Fixed headphone issue for ALC700
          - ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
          - ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
          - ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294
          - ALSA: hda/realtek - Fix the mute LED regresion on Lenovo X1 Carbon
          - IB/hfi1: Fix an out-of-bounds access in get_hw_stats
          - bpf: fix off-by-one error in adjust_subprog_starts
          - tcp: lack of available data can also cause TSO defer
          - sched/pelt: Fix warning and clean up IRQ PELT config
          - scsi: raid_attrs: fix unused variable warning
          - [i386] staging: olpc_dcon: add a missing dependency
          - [arm64] dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint warning
          - [arm64] drm/msm: fix address space warning
          - aio: fix spectre gadget in lookup_ioctx
          - fs/iomap.c: get/put the page in iomap_page_create/release()
          - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is
          - [arm64] dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing
          - block/bio: Do not zero user pages
          - ovl: fix decode of dir file handle with multi lower layers
          - ovl: fix missing override creds in link of a metacopy upper
          - [armhf] MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
          - mmc: core: use mrq->sbc when sending CMD23 for RPMB
          - mmc: sdhci: fix the timeout check window for clock and reset
          - fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS
          - [arm] mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt
          - [arm] dts: bcm2837: Fix polarity of wifi reset GPIOs (Closes: #911443)
          - dm thin: send event about thin-pool state change _after_ making it
          - dm cache metadata: verify cache has blocks in
          - dm: call blk_queue_split() to impose device limits on bios
          - tracing: Fix memory leak of instance function hash filters
          - [powerpc*] msi: Fix NULL pointer access in teardown code
          - drm/nouveau/kms: Fix memory leak in nv50_mstm_del()
          - drm/nouveau/kms/nv50-: also flush fb writes when rewinding push buffer
          - Revert "drm/rockchip: Allow driver to be shutdown on reboot/kexec"
          - [x86] drm/i915/execlists: Apply a full mb before execution for Braswell
          - [amd64] drm/amdkfd: add new vega10 pci ids
          - drm/amdgpu: add some additional vega10 pci ids
          - drm/amdgpu: update smu firmware images for VI variants (v2)
          - drm/amdgpu: update SMC firmware image for polaris10 variants
          - [x86] build: Fix compiler support check for CONFIG_RETPOLINE
          - locking/qspinlock: Re-order code
          - [x86] locking/qspinlock, x86: Provide liveness guarantee
          - [amd64] IB/hfi1: Remove race conditions in user_sdma send path
          - mac80211_hwsim: fix module init error paths for netlink
          - [x86] Input: hyper-v - fix wakeup from suspend-to-idle
          - scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset
          - [x86] scsi: vmw_pscsi: Rearrange code to avoid multiple calls to
            free_irq during unload
          - [x86] earlyprintk/efi: Fix infinite loop on some screen widths
          - [arm64] drm/msm: Fix task dump in gpu recovery
          - [arm64] drm/msm/gpu: Fix a couple memory leaks in debugfs
          - [arm64] drm/msm: fix handling of cmdstream offset
          - [arm64] drm/msm/dsi: configure VCO rate for 10nm PLL driver
          - [arm64] drm/msm: Grab a vblank reference when waiting for commit_done
          - drm/ttm: fix LRU handling in ttm_buffer_object_transfer
          - drm/amdgpu: wait for IB test on first device open
          - [arm64,armhf] net: stmmac: Move debugfs init/exit to
          - [amd64] net: aquantia: fix rx checksum offload bits
          - bonding: fix 802.3ad state sent to partner when unbinding slave
          - liquidio: read sc->iq_no before release sc
          - nfs: don't dirty kernel pages read by direct-io
          - SUNRPC: Fix a potential race in xprt_connect()
          - [sparc64] sbus: char: add of_node_put()
          - [sparc64] drivers/sbus/char: add of_node_put()
          - [sparc64] drivers/tty: add missing of_node_put()
          - [arm64] drm/msm/hdmi: Enable HPD after HDMI IRQ is set up
          - [amr64] drm/msm: dpu: Don't set legacy plane->crtc pointer
          - [arm64] drm/msm: dpu: Fix "WARNING: invalid free of devm_ allocated
          - [arm64] drm/msm: Fix error return checking
          - [arm64] clk: mvebu: Off by one bugs in cp110_of_clk_get()
          - Input: synaptics - enable SMBus for HP 15-ay000
          - [armhf] Input: omap-keypad - fix keyboard debounce configuration
          - libata: whitelist all SAMSUNG MZ7KM* solid-state disks
          - macvlan: return correct error value
          - [arm64,armhf] mv88e6060: disable hardware level MAC learning
          - net/mlx4_en: Fix build break when CONFIG_INET is off
          - bpf: check pending signals while verifying programs
          - [arm*] 8814/1: mm: improve/fix ARM v7_dma_inv_range() unaligned address
          - [arm*] 8815/1: V7M: align v7m_dma_inv_range() with v7 counterpart
          - [arm*] 8816/1: dma-mapping: fix potential uninitialized return
          - [arm64,armhf] thermal: armada: fix legacy validity test sense
          - [arm64,armhf] net: mvpp2: fix detection of 10G SFP modules
          - [arm64,armhf] net: mvpp2: fix phylink handling of invalid PHY modes
          - drm/amdgpu/vcn: Update vcn.cur_state during suspend
          - [amd64,arm64] acpi/nfit: Fix user-initiated ARS to be "ARS-long" rather
            than "ARS-short"
          - drm/ast: Fix connector leak during driver unload
          - cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure
          - vhost/vsock: fix reset orphans race with close timeout
          - [x86] i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI
            device node
          - nvme: validate controller state before rescheduling keep alive
          - nvmet-rdma: fix response use after free
          - Btrfs: fix missing delayed iputs on unmount
        [ Uwe Kleine-König ]
        * [arm] Fix probing of 3rd gpio device on Armada 370.
        [ Ben Hutchings ]
        * linux-perf: Fix build-time check for unversioned files
        * linux-perf: Fix installation directories for BPF headers and examples
          (Closes: #916774)
        [ Noah Meyerhans ]
        * drivers/net/ethernet/amazon: Backport v2.0.2 from Linux 4.20
        [ Bastian Blank ]
        * Ignore various ABI changes.
        [ Salvatore Bonaccorso ]
        * iomap: Revert "fs/iomap.c: get/put the page in
    • Sophie Brun's avatar
      Import Upstream version 4.19.12 · 69da4143
      Sophie Brun authored
  22. 20 Dec, 2018 2 commits
    • Bastian Blank's avatar
      Import Debian changes 4.19.9-1 · c1efff2c
      Bastian Blank authored
      linux (4.19.9-1) unstable; urgency=medium
        * New upstream stable update:
          - [x86] KVM: LAPIC: Fix pv ipis use-before-initialization (CVE-2018-19406)
          - mm: cleancache: fix corruption on missed inode invalidation
          - blk-mq: fix corruption with direct issue (Closes: #915666)
          - userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails
          - userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem
          - userfaultfd: shmem: add i_size checks (CVE-2018-18397)
          - userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not
            set (CVE-2018-18397)
          - blk-mq: punt failed direct issue to dispatch list
          - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in
            card.c (CVE-2018-19824)
          - vhost/vsock: fix use-after-free in network stack callers
        [ Marcin Juszkiewicz ]
        * [arm64] Enable ACPI IMPI
        * [arm64] Enable IPMI watchdog and power off support
        * [arm64] Enable PCI Express hotplug
        * [arm64] Enable PMU for several server cpus
        * [arm64] Enable HiSilicon LPC for serial/ipmi access
        [ Romain Perier ]
        * [x86] Enable support for error detection and correction on the Intel
          Pondicherry2 Integrated Memory Controller (Closes: #914946)
        * [rt] Update to 4.19.8-rt6
        [ Uwe Kleine-König ]
        * Enable usb support for ATH10K (Closes: #915083)
        [ Luca Boccassi ]
        * debian/rules.real: Split the rules so that the [un]versioned_tools
          knobs can be used to avoid building them. Fixes FTBFS with unversioned
          tools disabled.
        * perf: do not ship python2-only call-graph-from-sql script.
        * Override Lintian warning dbg-package-missing-depends in source too.
        [ Ben Hutchings ]
        * debian/rules.real: Mark most targets as phony
        * debian/rules: Mark more targets as phony
        * libcpupower: Hide private function and drop it from .symbols file
        * integrity: Disable INTEGRITY_TRUSTED_KEYRING (Closes: #865277)
        [ Vagrant Cascadian ]
        * debian/config/config: Enable Z3FOLD as a module.
        [ Salvatore Bonaccorso ]
        * Set ABI to 1
        [ Nicolas Schier ]
        * ovl: permit overlayfs mounts in user namespaces (Closes: #913880)
        [ Hilko Bengen ]
        * Add patches to build libbpf.so with SONAME, link against libelf
        * Add versioned libbpf, libbpf-dev package (Closes: #914428)
        [ Hans van Kranenburg ]
        * [x86] Add patch to repair booting as Xen dom0 (Closes: #914951)
        * [x86] Add patches to support booting a Xen PVH guest via Grub2
        [ Christoph Anton Mitterer ]
        * crypto: Enable MORUS and AEGIS AEAD ciphers (Closes: #914136)
        * [amd64]: Enable AES-NI/SSE2/AVX2 optimised implementations of the MORUS
          and AEGIS AEAD ciphers
        [ Bastian Blank ]
        * Enable netfilter flow table support.
        * [x86] Enable DRM_XEN_FRONTEND.
      linux (4.19.5-1~exp1) experimental; urgency=medium
        * New upstream release: https://kernelnewbies.org/Linux_4.19
        * New upstream stable update:
        [ Ben Hutchings ]
        * linux-perf: Enable verbose output for build-time feature detection
        * udeb: Define mtd-core-modules package to contain MTD core if not built-in
        * udeb: Move MTD core from nic-modules to mtd-core-modules
        * debian/changelog: Move older entries to changelog.old
        * debian/rules: Checksum only the source name and version from
        * Move generation of CONFIG_BUILD_SALT to gencontrol.py
        * [x86] hyperv-daemons: Make all services conditional on device existence
        * debian/rules.real: Fix build failure with pkg.linux.nosource profile
        * debian/source/options: Delete redundant compression setting; satisfy
        * Documentation/media: uapi: Explicitly say there are no Invariant Sections
          (Closes: #698668)
        [ Karsten Merker ]
        * [riscv64] Build a kernel image and udebs for riscv64 (Closes: #908161)
        [ Uwe Kleine-König ]
        * [armhf,arm64] enable SND_BCM2835 as a module (Closes: #911121)
        * Enable Orange filesystem (Closes: #911743)
        * [arm64] Enable hns3 network driver as a module. (Closes: #914422)
        [ Noah Meyerhans ]
        * [cloud-amd64] Enable Amazon ENA ethernet driver (Closes: #910049)
        [ Romain Perier ]
        * [rt] Update to 4.19.1-rt3
        * [rt] Update patch arm-disable-NEON-in-kernel-mode.patch, so it can be
          applied onto 4.19.2
        * [rt] Update patch
          irq-allow-disabling-of-softirq-processing-in-irq-thread-context.patch, so
          it can be applied onto 4.19.2
        * [amd64] Enable AMD pinctrl driver (Closes: #908954)
        * Enable Diffie-Hellman operations on retained keys (Closes: #911998)
        * Update patch features/all/lockdown/enable-cold-boot-attack-mitigation.patch,
          so it can be applied onto 4.19.2
        * [x86] Enable DisplayPort CEC-Tunneling-over-AUX HDMI support
          (Closes: #913199)
      linux (4.19~rc7-1~exp1) experimental; urgency=medium
        * New upstream release candidate
        [ Uwe Kleine-König ]
        * [armhf] enable MVNETA_BM_ENABLE and CAN_FLEXCAN as a module
        * enable NET_SCH_CAKE as a module (Closes: #908709)
        * enable HID_NTI as a module (Closes: #910260)
        [ Ben Hutchings ]
        * linux-kbuild: Include scripts/subarch.include (Closes: #910348)
      linux (4.19~rc6-1~exp1) experimental; urgency=medium
        * New upstream release candidate
        [ Ben Hutchings ]
        * [ppc64el] udeb: Fix relative #include filenames in kernel-image module
          list (really fixes FTBFS?)
        * debian/bin, debian/lib/python: Fix most errors reported by pycodestyle
        * debian/bin, debian/rules.real: Add symlink to Python package directory
          instead of editing path
        * debian/bin, debian/lib/python: Clean up imports based on pyflakes report
        * debian/bin, debian/lib/python: Delete write-only vars reported by pyflakes
        * debian/lib/python/debian_linux/gencontrol.py: Delete broken methods
        * debian/lib/python/debian_linux/config.py: Fix undefined exception type
        * Add Python static checks and unit tests to autopkgtest tests
      linux (4.19~rc4-1~exp1) experimental; urgency=medium
        * New upstream release candidate
        [ Ben Hutchings ]
        * debian/control: Add arch-qualification to build-dependencies for linux-perf
          (Closes: #908519)
        * debian/control: Build-depend on libunwind-dev instead of libunwind8-dev
        * [hppa,mips*,powerpc*,sh4] debian/control: Build-depend on libunwind-dev for
        * debian/control: Build-depend on libnuma-dev for linux-perf on all arches
        * debian/control: Remove "cross" from profiles for build-dep on libssl-dev
        * [mips64*] debian/control: Build-depend on gcc-multilib for linux-perf
        * debian/lib/python: Use raw strings for all regexes
        * debian/control: Fix restrictions for build-deps on asciidoctor and
        * Add support for specifying build-dependencies in binary package templates
        * debian/templates: Move various build-dependencies to binary package
        * linux-perf: Fix generation of Perl and Python interpreter dependencies
          (Closes: #908547)
        * lockdep, lib{cpupower,lockdep}-dev: Remove bogus deps on ${shlibs:Depends}
        * debian/rules.d/tools/power/linux-cpupower: Add "+" to recursive make
        * tools: x86_energy_perf_policy: Fix "uninitialized variable" warnings at -O2
        * tools: turbostat: Add checks for failure of fgets() and fscanf()
        * debian/control: Build-depend on texlive-latex-{base,extra}, dvipng for
        * debian/rules{,.real}: Use /usr/share/dpkg/architecture.mk
        * debian/signing_templates/rules: Use /usr/share/dpkg/architecture.mk
        * linux-image-*-signed-template: Add ${misc:Depends} to Depends
        * linux-image-*-signed-template: Include changelog and copyright files
        * linux-image-*-signed-template: Depend on dpkg-dev
        * linux-image-*-signed-template: Override lintian warnings about non-
          executable scripts
        * [ia64] udeb: Fix priority of sn-modules
        * Revert "Revert "net: increase fragment memory usage limits"", as 4.19
          includes a better fix for CVE-2018-5391
        * debian/patches: Add Forwarded fields to several patches
        * [ppc64el] udeb: Fix relative #include filenames in module lists (fixes
        * [ppc64] udeb: Revert accidental change to nic-pcmcia-modules dependencies
          (fixes FTBFS)
      linux (4.19~rc3-1~exp1) experimental; urgency=medium
        * New upstream release candidate
        [ Ben Hutchings ]
        * [s390x] linux-image: Install compressed kernel image (fixes FTBFS)
        * [powerpc*] boot: Fix missing crc32poly.h when building with KERNEL_XZ
          (fixes FTBFS)
        * [x86] boot: Fix EFI stub alignment
        * wireless: Update "wireless: Disable regulatory.db direct loading" for
        * aufs: Update support patchset to aufs4.x-rcN 20180910
      linux (4.19~rc2-1~exp1) experimental; urgency=medium
        * New upstream release candidate
        [ Ben Hutchings ]
        * aufs: Disable until it is updated for Linux 4.19
        * debian/rules.d: Update for move of bin2c back up to scripts
        * locking/lockdep: Delete unnecesary #include (fixes liblockdep build)
        * [hppa] debian/control: Simplify build-dependencies for 64-bit toolchain
        * Compile with gcc-8 on all architectures
        * udeb: Merge configuration directories and files across architectures
        * [alpha,hppa] udeb: Remove incorrect dependency overrides
    • Sophie Brun's avatar
      Import Upstream version 4.19.9 · a8c39cfb
      Sophie Brun authored
  23. 26 Nov, 2018 1 commit
  24. 23 Nov, 2018 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 4.18.20-1 · 7ab0d975
      Ben Hutchings authored
      linux (4.18.20-1) unstable; urgency=medium
        * New upstream stable update:
          - gso_segment: Reset skb->mac_len after modifying network header
          - ipv6: fix possible use-after-free in ip6_xmit()
          - net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
          - [alpha, hppa, x86] net: hp100: fix always-true check for link up state
          - pppoe: fix reception of frames with no mac header
          - qmi_wwan: set DTR for modems in forced USB2 mode
          - udp4: fix IP_CMSG_CHECKSUM for connected sockets
          - neighbour: confirm neigh entries when ARP packet is received
          - udp6: add missing checks on edumux packet processing
          - net/sched: act_sample: fix NULL dereference in the data path
          - hv_netvsc: fix schedule in RCU context
          - [arm64, armhf] net: dsa: mv88e6xxx: Fix ATU Miss Violation
          - socket: fix struct ifreq size in compat ioctl
          - bnxt_en: Fix VF mac address regression.
          - ipv6: use rt6_info members when dst is set in rt6_fill_node
          - net/ipv6: do not copy dst flags on rt init
          - [arm64, armhf] net: mvpp2: let phylink manage the carrier state
          - net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
          - NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
          - NFC: Fix the number of pipes
          - ASoC: uapi: fix sound/skl-tplg-interface.h userspace compilation errors
          - ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at
            error path
          - ALSA: bebob: use address returned by kmalloc() instead of kernel stack for
            streaming DMA mapping
          - [powerpc*, mips*, x86, alpha, sparc*] ALSA: emu10k1: fix possible info
            leak to userspace on SNDRV_EMU10K1_IOCTL_INFO
          - ALSA: firewire-digi00x: fix memory leak of private data
          - ALSA: firewire-tascam: fix memory leak of private data
          - ALSA: fireworks: fix memory leak of response buffer at error path
          - ALSA: oxfw: fix memory leak for model-dependent data at error path
          - ALSA: oxfw: fix memory leak of discovered stream formats at error path
          - ALSA: oxfw: fix memory leak of private data
          - mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able
          - [x86] platform: dell-smbios-wmi: Correct a memory leak
          - [x86] platform: alienware-wmi: Correct a memory leak
          - xen/netfront: don't bug in case of too many frags
          - Revert "PCI: Add ACS quirk for Intel 300 series"
          - crypto: x86/aegis,morus - Do not require OSXSAVE for SSE2
          - fork: report pid exhaustion correctly
          - mm: disable deferred struct page for 32-bit arches
          - mm: shmem.c: Correctly annotate new inodes for lockdep
          - bpf/verifier: disallow pointer subtraction
          - Revert "ubifs: xattr: Don't operate on deleted inodes"
          - libata: mask swap internal and hardware tag
          - ocfs2: fix ocfs2 read block panic
          - drm/i915/bdw: Increase IPS disable timeout to 100ms
          - drm/nouveau: Reset MST branching unit before enabling
          - drm/nouveau: Only write DP_MSTM_CTRL when needed
          - drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend()
          - drm/nouveau: Fix deadlocks in nouveau_connector_detect()
          - drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload
          - drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement
          - drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM
          - drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in
          - drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early
          - drm/vc4: Fix the "no scaling" case on multi-planar YUV formats
          - drm: udl: Destroy framebuffer only if it was initialized
          - drm/amdgpu: add new polaris pci id
          - tty: vt_ioctl: fix potential Spectre v1
          - ext4: check to make sure the rename(2)'s destination is not freed
          - ext4: avoid divide by zero fault when deleting corrupted inline
          - ext4: avoid arithemetic overflow that can trigger a BUG
          - ext4: recalucate superblock checksum after updating free blocks/inodes
          - ext4: fix online resize's handling of a too-small final block group
          - ext4: fix online resizing for bigalloc file systems with a 1k block size
          - ext4: don't mark mmp buffer head dirty
          - ext4: show test_dummy_encryption mount option in /proc/mounts
          - ext4, dax: add ext4_bmap to ext4_dax_aops
          - ext4, dax: set ext4_dax_aops for dax files
          - sched/fair: Fix vruntime_normalized() for remote non-migration wakeup
          - [x86] vmw_balloon: include asm/io.h
          - iw_cxgb4: only allow 1 flush on user qps
          - tsl2550: fix lux1_input error in low light
          - vmci: type promotion bug in qp_host_get_user_memory()
          - [x86] numa_emulation: Fix emulated-to-physical node mapping
          - staging: rts5208: fix missing error check on call to rtsx_write_register
          - [armhf] power: supply: axp288_charger: Fix initial
            constant_charge_current value
          - [sh4] serial: sh-sci: Stop RX FIFO timer during port shutdown
          - [arm64] power: vexpress: fix corruption in notifier registration
          - [x86] iommu/amd: make sure TLB to be flushed before IOVA freed
          - Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
          - USB: serial: kobil_sct: fix modem-status error handling
          - 6lowpan: iphc: reset mac_header after decompress to fix panic
          - [s390x] mm: correct allocate_pgste proc_handler callback
          - power: remove possible deadlock when unregistering power_supply
          - cxgb4: Fix the condition to check if the card is T5
          - RDMA/bnxt_re: Fix a couple off by one bugs
          - RDMA/i40w: Hold read semaphore while looking after VMA
          - RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
          - IB/core: type promotion bug in rdma_rw_init_one_mr()
          - IB/mlx4: Test port number before querying type.
          - vhost_net: Avoid tx vring kicks during busyloop
          - IB/mlx5: Fix GRE flow specification
          - include/rdma/opa_addr.h: Fix an endianness issue
          - x86/tsc: Add missing header to tsc_msr.c
          - ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
          - [x86] entry/64: Add two more instruction suffixes
          - scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
            buffer size
          - scsi: klist: Make it safe to use klists in atomic context
          - [powerpc*] scsi: ibmvscsi: Improve strings handling
          - scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
          - usb: wusbcore: security: cast sizeof to int for comparison
          - ath10k: sdio: use same endpoint id for all packets in a bundle
          - ath10k: sdio: set skb len for all rx packets
          - [powerpc*] powerpc/powernv/ioda2: Reduce upper limit for DMA window size
          - [x86] platform/x86: asus-wireless: Fix uninitialized symbol usage
          - [x86] ACPI / button: increment wakeup count only when notified
          - alarmtimer: Prevent overflow for relative nanosleep (CVE-2018-13053)
          - [s390x] s390/dasd: correct numa_node in dasd_alloc_queue
          - [s390x] s390/scm_blk: correct numa_node in scm_blk_dev_setup
          - posix-timers: Make forward callback return s64
          - posix-timers: Sanitize overrun handling (CVE-2018-12896)
          - [powerpc*] ALSA: snd-aoa: add of_node_put() in error path
          - ath10k: use locked skb_dequeue for rx completions
          - [armhf] media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial
          - staging: android: ashmem: Fix mmap size validation
          - staging: mt7621-eth: Fix memory leak in mtk_add_mac() error path
          - [powerpc*, x86, alpha, m68k, hppa] drivers/tty: add error handling for
          - [arm64] dts: renesas: salvator-common: Fix adv7482 decimal unit addresses
          - [x86] media: tm6000: add error handling for dvb_register_adapter
          - [powerpc*, mips*, arm64, x86, alpha] ALSA: hda: Add AZX_DCAPS_PM_RUNTIME
            for AMD Raven Ridge
          - ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
          - [armhf] drm/sun4i: Enable DW HDMI PHY clock
          - [armhf] drm/sun4i: Fix releasing node when enumerating enpoints
          - ath10k: transmit queued frames after processing rx packets
          - mt76x2: fix mrr idx/count estimation in mt76x2_mac_fill_tx_status()
          - rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
          - brcmsmac: fix wrap around in conversion from constant to s16
          - bitfield: fix *_encode_bits()
          - [arm64]wlcore: Add missing PM call for
          - [armhf] drm/omap: gem: Fix mm_list locking
          - [armhf] mvebu: declare asm symbols as character arrays in pmsu.c
          - RDMA/uverbs: Don't overwrite NULL pointer with ZERO_SIZE_PTR
          - HID: hid-ntrig: add error handling for sysfs_create_group
          - [x86] HID: i2c-hid: Use devm to allocate i2c_hid struct
          - [arm64] dts: renesas: Fix VSPD registers range
          - drm/v3d: Take a lock across GPU scheduler job creation and queuing.
          - scsi: bnx2i: add error handling for ioremap_nocache
          - [arm64] scsi: hisi_sas: Fix the conflict between dev gone and host reset
          - [armhf] spi: orion: fix CS GPIO handling again
          - scsi: megaraid_sas: Update controller info during resume
          - [x86] ASoC: Intel: bytcr_rt5640: Fix Acer Iconia 8 over-current detect
          - [x86] EDAC, i7core: Fix memleaks and use-after-free on probe and remove
          - [x86, arm64, armhf] ASoC: dapm: Fix potential DAI widget pointer deref
            when linking DAIs
          - module: exclude SHN_UNDEF symbols from kallsyms api
          - nfsd: fix corrupted reply to badly ordered compound
          - [mips*, arm64, x86] EDAC: Fix memleak in module init error path
          - ath10k: fix incorrect size of dma_free_coherent in
          - ath10k: snoc: use correct bus-specific pointer in RX retry
          - fs/lock: skip lock owner pid translation in case we are in init_pid_ns
          - ath10k: fix memory leak of tpc_stats
          - Input: xen-kbdfront - fix multi-touch XenStore node's locations
          - drm/vc4: Add missing formats to vc4_format_mod_supported().
          - [armhf] ARM: dts: dra7: fix DCAN node addresses
          - drm/vc4: plane: Expand the lower bits by repeating the higher bits
          - block: fix deadline elevator drain for zoned block devices
          - [x86] mm: Expand static page table for fixmap space
          - [armhf] serial: imx: restore handshaking irq for imx1
          - [arm64] serial: mvebu-uart: Fix reporting of effective CSIZE to userspace
          - [x86] intel_th: Fix device removal logic
          - [x86] intel_th: Fix resource handling for ACPI glue layer
          - spi: tegra20-slink: explicitly enable/disable clock
          - [mips*, 'arm64', x86, armhf] regulator: fix crash caused by null driver
          - [mips*, 'arm64', x86, armhf] regulator: Fix 'do-nothing' value for
            regulators without suspend state
          - USB: fix error handling in usb_driver_claim_interface()
          - USB: handle NULL config in usb_find_alt_setting()
          - usb: core: safely deal with the dynamic quirk lists
          - [armhf] usb: musb: dsps: do not disable CPPI41 irq in driver teardown
          - USB: usbdevfs: sanitize flags more
          - USB: usbdevfs: restore warning for nonsensical flags
          - Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in
          - USB: remove LPM management from usb_driver_claim_interface()
          - uaccess: Fix is_source param for check_copy_size() in
          - filesystem-dax: Fix use of zero page
          - Input: elantech - enable middle button of touchpad on ThinkPad P72
          - IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
          - IB/hfi1: Fix SL array bounds check
          - IB/hfi1: Invalid user input can result in crash
          - IB/hfi1: Fix context recovery when PBC has an UnsupportedVL
          - IB/hfi1: Fix destroy_qp hang after a link down
          - [x86] ACPI / hotplug / PCI: Don't scan for non-hotplug bridges if slot
            is not bridge
          - RDMA/uverbs: Atomically flush and mark closed the comp event queue
          - ARM: OMAP2+: Fix null hwmod for ti-sysc debug
          - ARM: OMAP2+: Fix module address for modules using mpu_rt_idx
          - bus: ti-sysc: Fix module register ioremap for larger offsets
          - qed: Wait for ready indication before rereading the shmem
          - qed: Wait for MCP halt and resume commands to take place
          - qed: Prevent a possible deadlock during driver load and unload
          - qed: Avoid sending mailbox commands when MFW is not responsive
          - thermal: of-thermal: disable passive polling when thermal zone is disabled
          - isofs: reject hardware sector size > 2048 bytes
          - mmc: atmel-mci: fix bad logic of sg_copy_{from,to}_buffer conversion
          - mmc: android-goldfish: fix bad logic of sg_copy_{from,to}_buffer
          - bus: ti-sysc: Fix no_console_suspend handling
          - [armhf] dts: omap4-droid4: fix vibrations on Droid 4
          - bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
          - bpf, sockmap: fix sock hash count in alloc_sock_hash_elem
          - tls: possible hang when do_tcp_sendpages hits sndbuf is full case
          - bpf: sockmap: write_space events need to be passed to TCP handler
          - drm/amdgpu: fix VM clearing for the root PD
          - drm/amdgpu: fix preamble handling
          - amdgpu: fix multi-process hang issue
          - net/ncsi: Fixup .dumpit message flags and ID check in Netlink handler
          - tcp_bbr: add bbr_check_probe_rtt_done() helper
          - tcp_bbr: in restart from idle, see if we should exit PROBE_RTT
          - net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
          - net: hns: fix skb->truesize underestimation
          - tools: bpftool: return from do_event_pipe() on bad arguments
          - e1000: check on netif_running() before calling e1000_up()
          - e1000: ensure to free old tx/rx rings in set_ringparam()
          - ixgbe: fix driver behaviour after issuing VFLR
          - i40e: Fix for Tx timeouts when interface is brought up if DCB is enabled
          - i40e: fix condition of WARN_ONCE for stat strings
          - [arm64] crypto: cavium/nitrox - fix for command corruption in queue full
            case with backlog submissions.
          - hwmon: (ina2xx) fix sysfs shunt resistor read access
          - hwmon: (adt7475) Make adt7475_read_word() return errors
          - Revert "ARM: dts: imx7d: Invert legacy PCI irq mapping"
          - drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode
          - drm/amdgpu: Update power state at the end of smu hw_init.
          - ata: ftide010: Add a quirk for SQ201
          - nvme-fcloop: Fix dropped LS's to removed target port
          - [armhf] dts: omap4-droid4: Fix emmc errors seen on some devices
          - drm/amdgpu: Need to set moved to true when evict bo
          - [arm64, armhf] smccc-1.1: Make return values unsigned long
          - [arm64, armhf] smccc-1.1: Handle function result as parameters
          - i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
          - clk: x86: Set default parent to 48Mhz
          - [x86] pti: Fix section mismatch warning/error
          - [powerpc*] KVM: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM
          - [powerpc*] fix csum_ipv6_magic() on little endian platforms
          - [powerpc*] pkeys: Fix reading of ibm, processor-storage-keys property
          - [powerpc*] pseries: Fix unitialized timer reset on migration
          - mac80211: Run TXQ teardown code before de-registering interfaces
          - mac80211_hwsim: require at least one channel
          - Btrfs: fix unexpected failure of nocow buffered writes after snapshotting
            when low on space
          - [powerpc*] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate
          - cfg80211: remove division by size of sizeof(struct ieee80211_wmm_rule)
          - btrfs: btrfs_shrink_device should call commit transaction at the end
          - scsi: csiostor: add a check for NULL pointer after kmalloc()
          - scsi: csiostor: fix incorrect port capabilities
          - scsi: libata: Add missing newline at end of file
          - scsi: aacraid: fix a signedness bug
          - bpf, sockmap: fix potential use after free in bpf_tcp_close
          - bpf, sockmap: fix psock refcount leak in bpf_tcp_recvmsg
          - bpf: sockmap, decrement copied count correctly in redirect error case
          - mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
          - mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
          - cfg80211: make wmm_rule part of the reg_rule structure
          - mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom
          - nl80211: Fix nla_put_u8 to u16 for NL80211_WMMR_TXOP
          - nl80211: Pass center frequency in kHz instead of MHz
          - bpf: fix several offset tests in bpf_msg_pull_data
          - mac80211: mesh: fix HWMP sequence numbering to follow standard
          - mac80211: avoid kernel panic when building AMSDU from non-linear SKB
          - bpf: fix msg->data/data_end after sg shift repair in bpf_msg_pull_data
          - bpf: fix shift upon scatterlist ring wrap-around in bpf_msg_pull_data
          - bpf: fix sg shift repair start offset in bpf_msg_pull_data
          - [arm64] net: hns: add the code for cleaning pkt in chip
          - [arm64] net: hns: add netif_carrier_off before change speed and duplex
          - [arm64, armhf] net: mvpp2: initialize port of_node pointer
          - cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
          - mac80211: do not convert to A-MSDU if frag/subframe limited
          - mac80211: always account for A-MSDU header changes
          - Revert "blk-throttle: fix race between blkcg_bio_issue_check() and
          - md/raid5-cache: disable reshape completely
          - RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
          - bpf: Fix bpf_msg_pull_data()
          - bpf: avoid misuse of psock when TCP_ULP_BPF collides with another ULP
          - fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
          - mac80211: fix an off-by-one issue in A-MSDU max_subframe computation
          - cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
          - mac80211: fix WMM TXOP calculation
          - mac80211: fix a race between restart and CSA flows
          - mac80211: Fix station bandwidth setting after channel switch
          - mac80211: don't Tx a deauth frame if the AP forbade Tx
          - mac80211: shorten the IBSS debug messages
          - [powerpc*] net/ibm/emac: wrong emac_calc_base call was used by typo
          - ceph: avoid a use-after-free in ceph_destroy_options()
          - firmware: arm_scmi: fix divide by zero when sustained_perf_level is zero
          - afs: Fix cell specification to permit an empty address list
          - mm: madvise(MADV_DODUMP): allow hugetlbfs pages
          - bpf: 32-bit RSH verification must truncate input before the ALU op
          - netfilter: xt_cluster: add dependency on conntrack module
          - [x86] HID: intel-ish-hid: Enable Sunrise Point-H ish driver
          - HID: add support for Apple Magic Keyboards
          - HID: hid-saitek: Add device ID for RAT 7 Contagion
          - scsi: iscsi: target: Set conn->sess to NULL when
            iscsi_login_set_conn_values fails
          - scsi: iscsi: target: Fix conn_ops double free
          - perf annotate: Properly interpret indirect call
          - perf evsel: Fix potential null pointer dereference in
          - perf util: Fix bad memory access in trace info.
          - [powerpc*] perf probe: Ignore SyS symbols irrespective of endianness
          - [arm64] perf annotate: Fix parsing aarch64 branch instructions after
            objdump update
          - netfilter: nf_tables: release chain in flushing set
          - HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub
          - USB: yurex: Check for truncation in yurex_read()
          - nvmet-rdma: fix possible bogus dereference under heavy load
          - net/mlx5: Consider PCI domain in search for next dev
          - [x86] HID: i2c-hid: Don't reset device upon system resume
          - dm raid: fix reshape race on small devices
          - drm/nouveau: fix oops in client init failure path
          - drm/nouveau/mmu: don't attempt to dereference vmm without valid instance
          - drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
          - drm/nouveau/disp: fix DP disable race
          - drm/nouveau/disp/gm200-: enforce identity-mapped SOR assignment for
            LVDS/eDP panels
          - dm raid: fix stripe adding reshape deadlock
          - dm raid: fix rebuild of specific devices by updating superblock
          - dm raid: fix RAID leg rebuild errors
          - r8169: set TxConfig register after TX / RX is enabled, just like RxConfig
          - fs/cifs: suppress a string overflow warning
          - net: ena: fix surprise unplug NULL dereference kernel crash
          - net: ena: fix driver when PAGE_SIZE == 64kB
          - net: ena: fix device destruction to gracefully free resources
          - net: ena: fix potential double ena_destroy_device()
          - net: ena: fix missing lock during device destruction
          - net: ena: fix missing calls to READ_ONCE
          - sched/topology: Set correct NUMA topology type
          - dm thin metadata: try to avoid ever aborting transactions
          - netfilter: nfnetlink_queue: Solve the NFQUEUE/conntrack clash for
          - netfilter: xt_hashlimit: use s->file instead of s->private
          - drm/amdgpu: Fix SDMA hang in prt mode v2
          - drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk
          - r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
          - [s390x] qeth: use vzalloc for QUERY OAT buffer
          - [s390x] qeth: don't dump past end of unknown HW header
          - cifs: read overflow in is_valid_oplock_break()
          - asm-generic: io: Fix ioport_map() for !CONFIG_GENERIC_IOMAP &&
          - xen/manage: don't complain about an empty value in control/sysrq node
          - [mips*, x86, s390x] xen: avoid crash in disable_hotplug_cpu
          - new primitive: discard_new_inode()
          - vfs: don't evict uninitialized inode
          - ovl: set I_CREATING on inode being created
          - ovl: fix access beyond unterminated strings
          - ovl: fix memory leak on unlink of indexed file
          - ovl: fix format of setxattr debug
          - sysfs: Do not return POSIX ACL xattrs via listxattr
          - b43: fix DMA error related regression with proprietary firmware
          - firmware: Fix security issue with request_firmware_into_buf()
          - firmware: Always initialize the fw_priv list object
          - smb2: fix missing files in root share directory listing
          - [x86] iommu/amd: Clear memory encryption mask from physical address
          - ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
          - [x86] crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
          - crypto: chelsio - Fix memory corruption in DMA Mapped buffers.
          - [arm64, armhf, x86, powerpc*] gpiolib: Free the last requested descriptor
          - [x86] Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()
          - proc: restrict kernel stack dumps to root (CVE-2018-17972)
          - ocfs2: fix locking for res->tracking and dlm->tracking_list
          - [x86] HID: i2c-hid: disable runtime PM operations on hantick touchpad
          - ixgbe: check return value of napi_complete_done()
          - dm thin metadata: fix __udivdi3 undefined on 32-bit
          - Revert "drm/amd/pp: Send khz clock values to DC for smu7/8"
          - perf/core: Add sanity check to deal with pinned event failure
          - mm: migration: fix migration of huge PMD shared pages
          - mm, thp: fix mlocking THP page with migration enabled
          - mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly
          - [x86] KVM: fix L1TF's MMIO GFN calculation
          - [x86] KVM: VMX: check for existence of secondary exec controls before
          - blk-mq: I/O and timer unplugs are inverted in blktrace
          - [powerpc*, mips*, arm64, x86, alpha, armhf] mmc: core: Fix debounce time
            to use microseconds
          - [powerpc*, mips*, arm64, x86, alpha, armhf] mmc: slot-gpio: Fix debounce
            time to use miliseconds again
          - mac80211: allocate TXQs for active monitor interfaces
          - drm/amdgpu: Fix vce work queue was not cancelled when suspend
          - [x86] vdso: Fix asm constraints on vDSO syscall fallbacks
          - [x86] vdso: Only enable vDSO retpolines when enabled and supported
          - [x86] vdso: Fix vDSO syscall fallback asm constraint regression
          - [powerpc*, mips*, arm64, x86, s390x, armhf, sparc, hppa] PCI: Reprogram
            bridge prefetch registers on resume
          - mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
          - dm mpath: fix attached_handler_name leak and dangling hw_handler_name
          - dm cache metadata: ignore hints array being too small during resize
          - dm cache: fix resize crash if user doesn't reload cache table
          - USB: serial: simple: add Motorola Tetra MTP6550 id
          - USB: serial: option: improve Quectel EP06 detection
          - USB: serial: option: add two-endpoints device-id flag
          - usb: cdc_acm: Do not leak URB buffers
          - tty: Drop tty->count on tty_reopen() failure
          - [powerpc*] Avoid code patching freed init sections
          - [powerpc*] lib: fix book3s/32 boot failure due to code patching
          - f2fs: fix invalid memory access
          - tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
          - ubifs: Check for name being NULL while mounting
          - rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
          - ath10k: fix scan crash due to incorrect length calculation
          - bnxt_en: Fix TX timeout during netpoll.
          - bnxt_en: free hwrm resources, if driver probe fails.
          - bonding: avoid possible dead-lock
          - ip6_tunnel: be careful when accessing the inner header
          - ip_tunnel: be careful when accessing the inner header
          - ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
          - ipv6: take rcu lock in rawv6_send_hdrinc()
          - [armhf] net: dsa: bcm_sf2: Call setup during switch resume
          - [arm64] net: hns: fix for unmapping problem when SMMU is on
          - net: ipv4: update fnhe_pmtu when first hop's MTU changes
          - net/ipv6: Display all addresses in output of /proc/net/if_inet6
          - netlabel: check for IPV4MASK in addrinfo_get
          - [armhf,arm64] net: mvpp2: Extract the correct ethtype from the skb for
            tx csum offload
          - [armhf,arm64] net: mvpp2: fix a txq_done race condition
          - net: sched: Add policy validation for tc attributes
          - net: sched: cls_u32: fix hnode refcounting
          - net/usb: cancel pending work when unbinding smsc75xx
          - qlcnic: fix Tx descriptor corruption on 82xx devices
          - qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface
          - rtnetlink: fix rtnl_fdb_dump() for ndmsg header
          - rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
          - sctp: update dst pmtu with the correct daddr
          - team: Forbid enslaving team device to itself
          - tipc: fix flow control accounting for implicit connect
          - udp: Unbreak modules that rely on external __skb_recv_udp() availability
          - tun: remove unused parameters
          - tun: initialize napi_mutex unconditionally
          - tun: napi flags belong to tfile
          - [armhf,arm64] net: stmmac: Fixup the tail addr setting in xmit path
          - net/packet: fix packet drop as of virtio gso
          - [armhf] net: dsa: bcm_sf2: Fix unbind ordering
          - net/mlx5e: Set vlan masks for all offloaded TC rules
          - net: aquantia: memory corruption on jumbo frames
          - net/mlx5: E-Switch, Fix out of bound access when setting vport rate
          - bonding: pass link-local packets to bonding master also.
          - bonding: fix warning message
          - [armhf,arm64] net: stmmac: Rework coalesce timer and fix multi-queue
          - nfp: avoid soft lockups under control message storm
          - bnxt_en: don't try to offload VLAN 'modify' action
          - net-ethtool: ETHTOOL_GUFO did not and should not require CAP_NET_ADMIN
          - net: phy: phylink: fix SFP interface autodetection
          - sfp: fix oops with ethtool -m
          - tcp/dccp: fix lockdep issue when SYN is backlogged
          - inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
          - [armhf] net: dsa: b53: Keep CPU port as tagged in all VLANs
          - rtnetlink: Fail dump if target netnsid is invalid
          - bnxt_en: Fix VNIC reservations on the PF.
          - net: ipv4: don't let PMTU updates increase route MTU
          - net/mlx5: Check for SQ and not RQ state when modifying hairpin SQ
          - bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request
          - bnxt_en: get the reduced max_irqs by the ones used by RDMA
          - net/ipv6: Remove extra call to ip6_convert_metrics for multipath case
          - net/ipv6: stop leaking percpu memory in fib6 info
          - qed: Fix shmem structure inconsistency between driver and the mfw.
          - r8169: fix network stalls due to missing bit TXCFG_AUTO_FIFO
          - r8169: set RX_MULTI_EN bit in RxConfig for 8168F-family chips
          - vxlan: fill ttl inherit info
          - ASoC: dapm: Fix NULL pointer deference on CODEC to CODEC DAIs
          - hwmon: (nct6775) Fix access to fan pulse registers
          - [x86] ASoC: AMD: Ensure reset bit is cleared before configuring
          - Bluetooth: SMP: Fix trying to use non-existent local OOB data
          - Bluetooth: Use correct tfm to generate OOB data
          - Bluetooth: hci_ldisc: Free rw_semaphore on close
          - [armhf] mfd: omap-usb-host: Fix dts probe of children
          - [powerpc*] KVM: Book3S HV: Don't use compound_order to determine host
            mapping size
          - scsi: iscsi: target: Don't use stack buffer for scatterlist
          - scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted()
          - sound: enable interrupt after dma buffer initialization
          - sound: don't call skl_init_chip() to reset intel skl soc
          - bpf: btf: Fix end boundary calculation for type section
          - bpf: use __GFP_COMP while allocating page
          - hwmon: (nct6775) Fix virtual temperature sources for NCT6796D
          - hwmon: (nct6775) Fix RPM output for fan7 on NCT6796D
          - [armhf,arm64] stmmac: fix valid numbers of unicast filter entries
          - hwmon: (nct6775) Use different register to get fan RPM for fan7
          - [x86] PCI: hv: support reporting serial number as slot information
          - [x86] clk: add "ether_clk" alias for Bay Trail / Cherry Trail
          - [x86] clk: Stop marking clocks as CLK_IS_CRITICAL
          - [x86] pinctrl: cannonlake: Fix gpio base for GPP-E
          - [x86] kvm/lapic: always disable MMIO interface in x2APIC mode
          - drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7
          - drm/amdkfd: Change the control stack MTYPE from UC to NC on GFX9
          - drm/amdkfd: Fix ATS capablity was not reported correctly on some APUs
          - mm/vmstat.c: fix outdated vmstat_text
          - afs: Fix afs_server struct leak
          - afs: Fix clearance of reply
          - [mips*] Fix CONFIG_CMDLINE handling
          - [mips*] VDSO: Always map near top of user memory
          - [sparc64] mach64: detect the dot clock divider correctly on sparc
          - vsprintf: Fix off-by-one bug in bstr_printf() processing dereferenced
          - percpu: stop leaking bitmap metadata blocks
          - perf script python: Fix export-to-postgresql.py occasional failure
          - perf script python: Fix export-to-sqlite.py sample columns
          - [s390x] cio: Fix how vfio-ccw checks pinned pages
          - dm cache: destroy migration_cache if cache target registration failed
          - dm: fix report zone remapping to account for partition offset
          - dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled
          - dm linear: fix linear_end_io conditional definition
          - cgroup: Fix dom_cgrp propagation when enabling threaded mode
          - drm/nouveau/drm/nouveau: Grab runtime PM ref in nv50_mstc_detect()
          - mmc: block: avoid multiblock reads for the last sector in SPI mode
          - [armhf] pinctrl: mcp23s08: fix irq and irqchip setup order
          - [arm64] perf: Reject stand-alone CHAIN events for PMUv3
          - mm/mmap.c: don't clobber partially overlapping VMA with
          - mm/thp: fix call to mmu_notifier in set_pmd_migration_entry() v2
          - filesystem-dax: Fix dax_layout_busy_page() livelock
          - mm: Preserve _PAGE_DEVMAP across mprotect() calls
          - [x86] i2c: i2c-scmi: fix for i2c_smbus_write_block_data
          - [powerpc*] KVM: Book3S HV: Avoid crash from THP collapse during radix
            page fault
          - media: af9035: prevent buffer overflow on write
          - spi: gpio: Fix copy-and-paste error
          - batman-adv: Avoid probe ELP information leak
          - batman-adv: Fix segfault when writing to throughput_override
          - batman-adv: Fix segfault when writing to sysfs elp_interval
          - batman-adv: Prevent duplicated gateway_node entry
          - batman-adv: Prevent duplicated nc_node entry
          - batman-adv: Prevent duplicated softif_vlan entry
          - batman-adv: Prevent duplicated global TT entry
          - batman-adv: Prevent duplicated tvlv handler
          - batman-adv: fix backbone_gw refcount on queue_work() failure
          - batman-adv: fix hardif_neigh refcount on queue_work() failure
          - cxgb4: fix abort_req_rss6 struct
          - [armhf] clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag
            for non-am43 SoCs
          - [powerpc*] scsi: ibmvscsis: Fix a stringop-overflow warning
          - [powerpc*] scsi: ibmvscsis: Ensure partition name is properly NUL
          - [x86] intel_th: pci: Add Ice Lake PCH support
          - [m68k] Input: atakbd - fix Atari keymap
          - [m68k] Input: atakbd - fix Atari CapsLock behaviour
          - [powerpc*] net: emac: fix fixed-link setup for the RTL8363SB switch
          - qed: Fix populating the invalid stag value in multi function mode.
          - qed: Do not add VLAN 0 tag to untagged frames in multi-function mode.
          - [armhf,arm64] PCI: dwc: Fix scheduling while atomic issues
          - RDMA/uverbs: Fix validity check for modify QP
          - scsi: lpfc: Synchronize access to remoteport via rport
          - [arm64] drm: mali-dp: Call drm_crtc_vblank_reset on device init
          - scsi: ipr: System hung while dlpar adding primary ipr adapter back
          - scsi: sd: don't crash the host on invalid commands
          - bpf: sockmap only allow ESTABLISHED sock state
          - bpf: sockmap, fix transition through disconnect without close
          - bpf: test_maps, only support ESTABLISHED socks
          - net/mlx4: Use cpumask_available for eq->affinity_mask
          - clocksource/drivers/fttmr010: Fix set_next_event handler
          - RDMA/bnxt_re: Fix system crash during RDMA resource initialization
          - [armhf,arm64] iommu/rockchip: Free irqs in shutdown handler
          - [x86] pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type
          - [powerpc*] tm: Fix userspace r13 corruption
          - [powerpc*] tm: Avoid possible userspace r1 corruption on reclaim
          - [powerpc*] numa: Use associativity if VPHN hcall is successful
          - [x86] iommu/amd: Return devid as alias for ACPI HID devices
          - [x86] boot: Fix kexec booting failure in the SEV bit detection code
          - Revert "vfs: fix freeze protection in mnt_want_write_file() for
          - mremap: properly flush TLB before releasing the page
          - xfrm: Validate address prefix lengths in the xfrm selector.
          - xfrm6: call kfree_skb when skb is toobig
          - xfrm: reset transport header back to network header after all input
            transforms ahave been applied
          - xfrm: reset crypto_done when iterating over multiple input xfrms
          - mac80211: Always report TX status
          - cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
          - mac80211: fix pending queue hang due to TX_DROP
          - cfg80211: Address some corner cases in scan result channel updating
          - mac80211: TDLS: fix skb queue/priority assignment
          - mac80211: fix TX status reporting for ieee80211s
          - xfrm: Fix NULL pointer dereference when skb_dst_force clears the
          - [armel,armhf] 8799/1: mm: fix pci_ioremap_io() offset check
          - xfrm: validate template mode
          - netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
          - netfilter: conntrack: get rid of double sizeof
          - [arm64] hugetlb: Fix handling of young ptes
          - nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT
          - mac80211_hwsim: fix locking when iterating radios during ns exit
          - mac80211_hwsim: fix race in radio destruction from netlink notifier
          - mac80211_hwsim: do not omit multicast announce of first added radio
          - Bluetooth: SMP: fix crash in unpairing
          - qed: Avoid implicit enum conversion in qed_set_tunn_cls_info
          - qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv
          - qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor
          - qed: Avoid constant logical operation warning in qed_vf_pf_acquire
          - qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt
          - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
          - scsi: qedi: Initialize the stats mutex lock
          - rxrpc: Fix checks as to whether we should set up a new call
          - rxrpc: Fix RTT gathering
          - rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket
          - rxrpc: Fix error distribution
          - netfilter: nft_set_rbtree: add missing rb_erase() in GC routine
          - netfilter: avoid erronous array bounds warning
          - asix: Check for supported Wake-on-LAN modes
          - ax88179_178a: Check for supported Wake-on-LAN modes
          - lan78xx: Check for supported Wake-on-LAN modes
          - sr9800: Check for supported Wake-on-LAN modes
          - r8152: Check for supported Wake-on-LAN Modes
          - smsc75xx: Check for Wake-on-LAN modes
          - smsc95xx: Check for Wake-on-LAN modes
          - cfg80211: fix use-after-free in reg_process_hint()
          - [x86] KVM: nVMX: Do not expose MPX VMX controls when guest MPX disabled
          - [x86] KVM: Do not use kvm_x86_ops->mpx_supported() directly
          - [x86] KVM: nVMX: Fix emulation of VM_ENTRY_LOAD_BNDCFGS
          - perf/core: Fix perf_pmu_unregister() locking
          - [x86] perf/intel/uncore: Use boot_cpu_data.phys_proc_id instead of
            hardcorded physical package ID 0
          - perf/ring_buffer: Prevent concurent ring buffer access
          - [x86] perf/intel/uncore: Fix PCI BDF address of M3UPI on SKX
          - [x86] perf/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf
          - thunderbolt: Do not handle ICM events after domain is stopped
          - thunderbolt: Initialize after IOMMUs
          - Revert "serial: 8250_dw: Fix runtime PM handling"
          - locking/ww_mutex: Fix runtime warning in the WW mutex selftest
          - drm/amd/display: Signal hw_done() after waiting for flip_done()
          - be2net: don't flip hw_features when VXLANs are added/deleted
          - [powerpc*] numa: Skip onlining a offline node in kdump path
          - net: cxgb3_main: fix a missing-check bug
          - yam: fix a missing-check bug
          - ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()
          - mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl
          - mm/migrate.c: split only transparent huge pages when allocation fails
          - [x86] paravirt: Fix some warning messages
          - [arm64] clk: mvebu: armada-37xx-periph: Remove unused var num_parents
          - libertas: call into generic suspend code before turning off power
          - perf report: Don't try to map ip to invalid map
          - HID: i2c-hid: Remove RESEND_REPORT_DESCR quirk and its handling
          - [armhf] dts: imx53-qsb: disable 1.2GHz OPP
          - perf record: Use unmapped IP for inline callchain cursors
          - rxrpc: Don't check RXRPC_CALL_TX_LAST after calling
          - rxrpc: Carry call state out of locked section in rxrpc_rotate_tx_window()
          - rxrpc: Only take the rwind and mtu values from latest ACK
          - rxrpc: Fix connection-level abort handling
          - [x86] net: ena: fix warning in rmmod caused by double iounmap
          - [x86] net: ena: fix rare bug when failed restart/resume is followed by
            driver removal
          - [x86] net: ena: fix NULL dereference due to untimely napi initialization
          - gpio: Assign gpio_irq_chip::parents to non-stack pointer
          - IB/mlx5: Unmap DMA addr from HCA before IOMMU
          - rds: RDS (tcp) hangs on sendto() to unresponding address
          - afs: Fix cell proc list
          - fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
          - Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"
          - bridge: do not add port to router list when receives query with source
          - ipv6: mcast: fix a use-after-free in inet6_mc_check
          - ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are
          - ipv6: rate-limit probes for neighbourless routes
          - llc: set SOCK_RCU_FREE in llc_sap_add_socket()
          - net: fec: don't dump RX FIFO register when not available
          - net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
          - net/mlx5e: fix csum adjustments caused by RXFCS
          - net: sched: gred: pass the right attribute to gred_change_table_def()
          - net: socket: fix a missing-check bug
          - [armhf,arm64] net: stmmac: Fix stmmac_mdio_reset() when building stmmac
            as  modules
          - net: udp: fix handling of CHECKSUM_COMPLETE packets
          - r8169: fix NAPI handling under high load
          - rtnetlink: Disallow FDB configuration for non-Ethernet device
          - sctp: fix race on sctp_id2asoc
          - tipc: fix unsafe rcu locking when accessing publication list
          - udp6: fix encap return code for resubmitting
          - vhost: Fix Spectre V1 vulnerability
          - virtio_net: avoid using netif_tx_disable() for serializing tx routine
          - ethtool: fix a privilege escalation bug
          - bonding: fix length of actor system
          - ip6_tunnel: Fix encapsulation layout
          - openvswitch: Fix push/pop ethernet validation
          - net: ipmr: fix unresolved entry dumps
          - net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
          - net: sched: Fix for duplicate class dump
          - net/sched: cls_api: add missing validation of netlink attributes
          - net/ipv6: Allow onlink routes to have a device mismatch if it is the
            default route
          - sctp: fix the data size calculation in sctp_data_size
          - sctp: not free the new asoc when sctp_wait_for_connect returns err
          - net/mlx5: Fix memory leak when setting fpga ipsec caps
          - net: bpfilter: use get_pid_task instead of pid_task
          - net: drop skb on failure in ip_check_defrag()
          - net: fix pskb_trim_rcsum_slow() with odd trim offset
          - net/mlx5: WQ, fixes for fragmented WQ buffers API
          - [sparc64] Make corrupted user stacks more debuggable.
          - [sparc64] Set %l4 properly on trap return after handling signals.
          - [sparc64] Wire up compat getpeername and getsockname.
          - [sparc64] Fix single-pcr perf event counter management.
          - [sparc64] Fix syscall fallback bugs in VDSO.
          - [sparc64] Throttle perf events properly.
          - net: bridge: remove ipv6 zero address check in mcast queries
          - vfs: swap names of {do,vfs}_clone_file_range()
          - bpf: fix partial copy of map_ptr when dst is scalar
          - [armhf,arm64] clk: sunxi-ng: sun4i: Set VCO and PLL bias current to
            lowest setting
          - fscache: Fix incomplete initialisation of inline key space
          - cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
          - fscache: Fix out of bound read in long cookie keys
          - ptp: fix Spectre v1 vulnerability
          - drm/edid: VSDB yCBCr420 Deep Color mode bit definitions
          - drm: fb-helper: Reject all pixel format changing requests
          - RDMA/ucma: Fix Spectre v1 vulnerability (CVE-2017-5753)
          - IB/ucm: Fix Spectre v1 vulnerability (CVE-2017-5753)
          - cdc-acm: do not reset notification buffer index upon urb unlinking
          - cdc-acm: correct counting of UART states in serial state notification
          - cdc-acm: fix race between reset and control messaging
          - usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
          - usb: gadget: storage: Fix Spectre v1 vulnerability
          - usb: roles: intel_xhci: Fix Unbalanced pm_runtime_enable
          - usb: xhci: pci: Enable Intel USB role mux on Apollo Lake platforms
          - USB: fix the usbfs flag sanitization for control transfers
          - tracing: Fix synthetic event to accept unsigned modifier
          - tracing: Fix synthetic event to allow semicolon at end
          - [armhf] drm/sun4i: Fix an ulong overflow in the dotclock driver
          - sched/fair: Fix throttle_list starvation with low CFS quota
          - [x86] tsc: Force inlining of cyc2ns bits
          - [x86] hibernate: Fix nosave_regions setup for hibernation
          - [x86] percpu: Fix this_cpu_read()
          - [x86] time: Correct the attribute on jiffies' definition
          - [armhf] mtd: rawnand: marvell: fix the IRQ handler complete() condition
          - spi: spi-mem: Adjust op len based on message/transfer size limitations
          - bcache: trace missed reading by cache_missed
          - bcache: correct dirty data statistics
          - bcache: fix miss key refill->end in writeback
          - hwmon: (pmbus) Fix page count auto-detection.
          - jffs2: free jffs2_sb_info through jffs2_kill_sb()
          - block: setup bounce bio_sets properly
          - block: don't deal with discard limit in blkdev_issue_discard()
          - block: make sure discard bio is aligned with logical block size
          - block: make sure writesame bio is aligned with logical block size
          - cpufreq: conservative: Take limits changes into account properly
          - dma-mapping: fix panic caused by passing empty cma command line argument
          - pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
          - ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
          - ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended
          - [x86] kprobes: Use preempt_enable() in optimized_callback()
          - ipmi: Fix timer race with module unload
          - acpi, nfit: Fix Address Range Scrub completion tracking
          - [hppa] Fix address in HPMC IVA
          - [hppa] Fix map_pages() to not overwrite existing pte entries
          - [hppa] Fix exported address of os_hpmc handler
          - [x86] ALSA: hda - Add quirk for ASUS G751 laptop
          - [x86] ALSA: hda - Fix headphone pin config for ASUS G751
          - [x86] ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo
          - [x86] ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
          - ALSA: hda: Add 2 more models to the power_save blacklist
          - ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
          - [x86] speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
          - [x86] xen: Fix boot loader version reported for PVH guests
          - [x86] corruption-check: Fix panic in memory_corruption_check() when boot
            option without value is provided
          - [x86] mm/pat: Disable preemption around __flush_tlb_all()
          - [x86] speculation: Support Enhanced IBRS on future CPUs (CVE-2017-5715)
          - [armhf] dts: exynos: Disable pull control for MAX8997 interrupts on
          - drm: fix use of freed memory in drm_mode_setcrtc
          - bpf: do not blindly change rlimit in reuseport net selftest
          - nvme: remove ns sibling before clearing path
          - Revert "perf tools: Fix PMU term format max value calculation"
          - xsk: do not call synchronize_net() under RCU read lock
          - xfrm: policy: use hlist rcu variants on insert
          - [x86] perf vendor events intel: Fix wrong filter_band* values for uncore
          - r8169: Enable MSI-X on RTL8106e
          - nfp: flower: fix pedit set actions for multiple partial masks
          - nfp: flower: use offsets provided by pedit instead of index for ipv6
          - sched/fair: Fix the min_vruntime update logic in dequeue_entity()
          - perf evsel: Store ids for events with their own cpus
          - perf tools: Fix use of alternatives to find JDIR
          - perf cpu_map: Align cpu map synthesized events properly.
          - perf report: Don't crash on invalid inline debug information
          - [x86] fpu: Remove second definition of fpu in __fpu__restore_sig()
          - net: qla3xxx: Remove overflowing shift statement
          - r8169: re-enable MSI-X on RTL8168g
          - drm: Get ref on CRTC commit object when waiting for flip_done
          - [arm64] net: socionext: Reset tx queue in ndo_stop
          - netfilter: xt_nat: fix DNAT target for shifted portmap ranges
          - [m68k] ataflop: fix error handling during setup
          - [m68k] swim: fix cleanup on setup error
          - [arm64] cpufeature: ctr: Fix cpu capability check for late CPUs
          - nfp: devlink port split support for 1x100G CXP NIC
          - tun: Consistently configure generic netdev params via rtnetlink
          - [s390x] sthyi: Fix machine name validity indication
          - hwmon: (pwm-fan) Set fan speed to 0 on suspend
          - lightnvm: pblk: fix race on sysfs line state
          - lightnvm: pblk: fix two sleep-in-atomic-context bugs
          - lightnvm: pblk: fix race condition on metadata I/O
          - perf tools: Free temporary 'sys' string in read_event_files()
          - perf tools: Cleanup trace-event-info 'tdata' leak
          - perf strbuf: Match va_{add,copy} with va_end
          - [x86] cpupower: Fix coredump on VMWare
          - bcache: Populate writeback_rate_minimum attribute
          - mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
          - sdhci: acpi: add free_slot callback
          - iwlwifi: pcie: avoid empty free RB queue
          - iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
          - iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
          - [i386] olpc: Indicate that legacy PC XO-1 platform should not register
          - ACPI/PPTT: Handle architecturally unknown cache types
          - ACPI / PM: LPIT: Register sysfs attributes based on FADT
          - ACPI / processor: Fix the return value of acpi_processor_ids_walk()
          - cpufreq: dt: Try freeing static OPPs only if we have added them
          - [x86] intel_rdt: Show missing resctrl mount options
          - [arm64] signal: Introduce COMPAT_SIGMINSTKSZ for use in
          - [arm64] net: hns3: Fix for packet buffer setting bug
          - [x86] boot: Fix EFI stub alignment
          - [arm64] net: hns3: Add nic state check before calling netif_tx_wake_queue
          - [arm64] net: hns3: Fix ets validate issue
          - [armhf,arm64] pinctrl: sunxi: fix 'pctrl->functions' allocation in
          - [arm64] pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
          - brcmfmac: fix for proper support of 160MHz bandwidth
          - [arm64] net: hns3: Check hdev state when getting link status
          - [arm64] net: hns3: Set STATE_DOWN bit of hdev state when stopping net
          - net: phy: phylink: ensure the carrier is off when starting phylink
          - block, bfq: correctly charge and reset entity service in all cases
          - [arm64] entry: Allow handling of undefined instructions from EL1
          - kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
          - spi: gpio: No MISO does not imply no RX
          - ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
          - [arm64] pinctrl: qcom: spmi-mpp: Fix drive strength setting
          - bpf/verifier: fix verifier instability
          - failover: Add missing check to validate 'slave_dev' in
          - perf tests: Fix record+probe_libc_inet_pton.sh without ping's debuginfo
          - [arm64] pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
          - [arm64] pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
          - [arm64] net: hns3: Preserve vlan 0 in hardware table
          - [arm64] net: hns3: Fix ping exited problem when doing lp selftest
          - [arm64] net: hns3: Fix for vf vlan delete failed problem
          - [armhf,arm64] net: dsa: mv88e6xxx: Fix writing to a PHY page.
          - rsi: fix memory alignment issue in ARM32 platforms
          - iwlwifi: mvm: fix BAR seq ctrl reporting
          - ixgbe: disallow IPsec Tx offload when in SR-IOV mode
          - ixgbevf: VF2VF TCP RSS
          - ath10k: schedule hardware restart if WMI command times out
          - libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
          - cgroup, netclassid: add a preemption point to write_classid
          - [armhf,arm64] net: stmmac: dwmac-sun8i: fix OF child-node lookup
          - f2fs: fix to account IO correctly for cgroup writeback
          - MD: Memory leak when flush bio size is zero
          - md: fix memleak for mempool
          - scsi: esp_scsi: Track residual for PIO transfers
          - scsi: ufs: Schedule clk gating work on correct queue
          - UAPI: ndctl: Fix g++-unsupported initialisation in headers
          - [x86] KVM: nVMX: Clear reserved bits of #DB exit qualification
          - scsi: megaraid_sas: fix a missing-check bug
          - RDMA/core: Do not expose unsupported counters
          - IB/ipoib: Clear IPCB before icmp_send
          - usb: host: ohci-at91: fix request of irq for optional gpio
          - usb: typec: tcpm: Report back negotiated PPS voltage and current
          - tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/
          - f2fs: clear PageError on the read path
          - [x86] Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
          - [x86] VMCI: Resource wildcard match fixed
          - PCI / ACPI: Enable wake automatically for power managed bridges
          - xprtrdma: Reset credit grant properly after a disconnect
          - irqchip/pdc: Setup all edge interrupts as rising edge at GIC
          - [armhf,arm64] usb: dwc2: fix a race with external vbus supply
          - ext4: fix argument checking in EXT4_IOC_MOVE_EXT
          - MD: fix invalid stored role for a disk
          - nvmem: check the return value of nvmem_add_cells()
          - xhci: Avoid USB autosuspend when resuming USB2 ports.
          - f2fs: fix to recover inode's crtime during POR
          - f2fs: fix to recover inode's i_flags during POR
          - PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
          - [armhf.arm64] usb: chipidea: Prevent unbalanced IRQ disable
          - [x86] driver/dma/ioat: Call del_timer_sync() without holding prep_lock
          - IB/mlx5: Allow transition of DCI QP to reset
          - uio: ensure class is registered before devices
          - scsi: lpfc: Correct soft lockup when running mds diagnostics
          - scsi: lpfc: Correct race with abort on completion path
          - f2fs: avoid sleeping under spin_lock
          - f2fs: report error if quota off error during umount
          - signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid
            namespace init
          - IB/rxe: fix for duplicate request processing and ack psns
          - ALSA: hda: Check the non-cached stream buffers more explicitly
          - [x86] cpupower: Fix AMD Family 0x17 msr_pstate size
          - Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()"
          - f2fs: fix to recover cold bit of inode block during POR
          - f2fs: fix to account IO correctly
          - OPP: Free OPP table properly on performance state irregularities
          - [armhf] dts: exynos: Add missing cooling device properties for CPUs
          - [armhf] dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
          - [armhf] dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
          - xen-swiotlb: use actually allocated size on check physical continuous
          - tpm: Restore functionality to xen vtpm driver.
          - xen/blkfront: avoid NULL blkfront_info dereference on device removal
          - xen/balloon: Support xend-based toolstack
          - xen: fix race in xen_qlock_wait()
          - xen: make xen_qlock_wait() nestable
          - xen/pvh: increase early stack size
          - xen/pvh: don't try to unplug emulated devices
          - libertas: don't set URB_ZERO_PACKET on IN USB transfer
          - usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
          - usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage
          - mt76: mt76x2: fix multi-interface beacon configuration
          - iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
          - net/ipv4: defensive cipso option parsing
          - libnvdimm: Hold reference on parent while scheduling async init
          - libnvdimm, region: Fail badblocks listing for inactive regions
          - libnvdimm, pmem: Fix badblocks population for 'raw' namespaces
          - [x86] ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
          - IB/mlx5: Fix MR cache initialization
          - IB/rxe: Revise the ib_wr_opcode enum
          - jbd2: fix use after free in jbd2_log_do_checkpoint()
          - gfs2_meta: ->mount() can get NULL dev_name
          - ext4: fix EXT4_IOC_SWAP_BOOT
          - ext4: initialize retries variable in ext4_da_write_inline_data_begin()
          - ext4: fix setattr project check in fssetxattr ioctl
          - ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
          - ext4: fix use-after-free race in ext4_remount()'s error path
          - selinux: fix mounting of cgroup2 under older policies
          - HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452
          - HID: hiddev: fix potential Spectre v1
          - [x86] EDAC, amd64: Add Family 17h, models 10h-2fh support
          - [x86] EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
          - [x86] EDAC, skx_edac: Fix logical channel intermediate decoding
          - PCI/ASPM: Fix link_state teardown on device removal
          - [x86] PCI: vmd: White list for fast interrupt handlers
          - [powerpc*] signal/GenWQE: Fix sending of SIGKILL
          - signal: Guard against negative signal numbers in copy_siginfo_from_user32
          - crypto: lrw - Fix out-of bounds access on counter overflow
          - crypto: tcrypt - fix ghash-generic speed test
          - [x86] crypto: aesni - don't use GFP_ATOMIC allocation if the request
            doesn't cross a page in gcm
          - mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
          - ima: fix showing large 'violations' or 'runtime_measurements_count'
          - hugetlbfs: dirty pages as they are added to pagecache
          - mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
          - mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback
          - [armhf,arm64] KVM: Ensure only THP is candidate for adjustment
          - [arm64] KVM: Fix caching of host MDCR_EL2 value
          - [armhf] w1: omap-hdq: fix missing bus unregister at removal
          - smb3: allow stats which track session and share reconnects to be reset
          - smb3: do not attempt cifs operation in smb3 query info error path
          - smb3: on kerberos mount if server doesn't specify auth type use krb5
          - printk: Fix panic caused by passing log_buf_len to command line
          - genirq: Fix race on spurious interrupt detection
          - NFSv4.1: Fix the r/wsize checking
          - nfs: Fix a missed page unlock after pg_doio()
          - nfsd: correctly decrement odstate refcount in error path
          - nfsd: Fix an Oops in free_session()
          - lockd: fix access beyond unterminated strings in prints
          - dm ioctl: harden copy_params()'s copy_from_user() from malicious users
          - dm zoned: fix metadata block ref counting
          - dm zoned: fix various dmz_get_mblock() issues
          - media: ov7670: make "xclk" clock optional
          - fsnotify: Fix busy inodes during unmount
          - [powerpc*] msi: Fix compile error on mpc83xx
          - [powerpc*] tm: Fix HFSCR bit for no suspend case
          - [powerpc*] 4s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
          - [mips*] memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
          - [mips*/octeon] fix out of bounds array access on CN68XX
          - rtc: ds1307: fix ds1339 wakealarm support
          - rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt'
          - rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI
          - [armhf] power: supply: twl4030-charger: fix OF sibling-node lookup
          - [armhf,arm64] iommu/arm-smmu: Ensure that page-table updates are visible
            before TLBI
          - media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
          - Revert "media: dvbsky: use just one mutex for serializing device R/W ops"
          - media: cec: make cec_get_edid_spa_location() an inline function
          - media: cec: integrate cec_validate_phys_addr() in cec-api.c
          - xen: fix xen_qlock_wait()
          - xen: remove size limit of privcmd-buf mapping interface
          - xen-blkfront: fix kernel panic with negotiate_mq error path
          - media: cec: add new tx/rx status bits to detect aborts/timeouts
          - media: cec: fix the Signal Free Time calculation
          - media: cec: forgot to cancel delayed work
          - media: em28xx: use a default format if TRY_FMT fails
          - media: tvp5150: avoid going past array on v4l2_querymenu()
          - media: em28xx: fix input name for Terratec AV 350
          - media: em28xx: make v4l2-compliance happier by starting sequence on zero
          - media: em28xx: fix handler for vidioc_s_input()
          - media: media colorspaces*.rst: rename AdobeRGB to opRGB
          - media: replace ADOBERGB by OPRGB
          - media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
          - [arm64] lse: remove -fcall-used-x0 flag
          - [arm64] rpmsg: smd: fix memory leak on channel create
          - Cramfs: fix abad comparison when wrap-arounds occur
          - [armhf,arm64] soc/tegra: pmc: Fix child-node lookup
          - tracing: Return -ENOENT if there is no target synthetic event
          - btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
          - btrfs: Handle owner mismatch gracefully when walking up tree
          - btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid
          - btrfs: fix error handling in free_log_tree
          - btrfs: fix error handling in btrfs_dev_replace_start
          - btrfs: Enhance btrfs_trim_fs function to handle error better
          - btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
          - btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
          - btrfs: don't attempt to trim devices that don't support it
          - btrfs: keep trim from interfering with transaction commits
          - btrfs: wait on caching when putting the bg cache
          - Btrfs: don't clean dirty pages during buffered writes
          - btrfs: release metadata before running delayed refs
          - btrfs: protect space cache inode alloc with GFP_NOFS
          - btrfs: reset max_extent_size on clear in a bitmap
          - btrfs: make sure we create all new block groups
          - Btrfs: fix warning when replaying log after fsync of a tmpfile
          - Btrfs: fix wrong dentries after fsync of file that got its parent
          - btrfs: qgroup: Dirty all qgroups before rescan
          - Btrfs: fix null pointer dereference on compressed write path error
          - Btrfs: fix assertion on fsync of regular file when using no-holes feature
          - Btrfs: fix deadlock when writing out free space caches
          - btrfs: reset max_extent_size properly
          - btrfs: set max_extent_size properly
          - btrfs: don't use ctl->free_space for max_extent_size
          - btrfs: only free reserved extent if we didn't insert it
          - btrfs: fix insert_reserved error handling
          - btrfs: don't run delayed_iputs in commit
          - btrfs: move the dio_sem higher up the callchain
          - Btrfs: fix use-after-free during inode eviction
          - Btrfs: fix use-after-free when dumping free space
          - net: sched: Remove TCA_OPTIONS from policy
          - userns: also map extents in the reverse map to kernel IDs
          - bpf: wait for running BPF programs when updating map-in-map
          - MD: fix invalid stored role for a disk - try2
          - [powerpc*] traps: restore recoverability of machine_check interrupts
          - [powerpc*] 64/module: REL32 relocation range check
          - [powerpc*] mm: Fix page table dump to work on Radix
          - [powerpc*] mm: fix always true/false warning in slice.c
          - drm/amd/display: fix bug of accessing invalid memory
          - Input: wm97xx-ts - fix exit path
          - [powerpc*] eeh: Fix possible null deref in eeh_dump_dev_log()
          - tty: check name length in tty_find_polling_driver()
          - tracing/kprobes: Check the probe on unloaded module correctly
          - drm/amdgpu/powerplay: fix missing break in switch statements
          - [powerpc*] nohash: fix undefined behaviour when testing page size support
          - [powerpc*] mm: Don't report hugepage tables as memory leaks when using
          - [armhf] drm/omap: fix memory barrier bug in DMM driver
          - drm/amd/display: fix gamma not being applied
          - [arm64] drm/hisilicon: hibmc: Do not carry error code in HiBMC
            framebuffer pointer
          - media: pci: cx23885: handle adding to list failure
          - [mips*] kexec: Mark CPU offline before disabling local IRQ
          - [powerpc*] memtrace: Remove memory in chunks
          - [mips*] PCI: Call pcie_bus_configure_settings() to set MPS/MRRS
          - media: tvp5150: fix width alignment during set_selection()
          - drm/amdgpu: Fix SDMA TO after GPU reset v3
          - 9p locks: fix glock.client_id leak in do_lock
          - udf: Prevent write-unsupported filesystem to be remounted read-write
          - 9p: clear dangling pointers in p9stat_free
          - cdrom: fix improper type cast, which can leat to information leak.
          - ovl: fix error handling in ovl_verify_set_fh()
          - ovl: check whiteout in ovl_create_over_whiteout()
          - [sh4] serial: sh-sci: Fix could not remove dev_attr_rx_fifo_timeout
          - scsi: qla2xxx: Fix incorrect port speed being set for FC adapters
          - scsi: qla2xxx: Fix process response queue for ISP26XX and above
          - scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx
          - scsi: qla2xxx: shutdown chip if reset fail
          - scsi: qla2xxx: Fix duplicate switch database entries
          - scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
          - fuse: Fix use-after-free in fuse_dev_do_read()
          - fuse: Fix use-after-free in fuse_dev_do_write()
          - fuse: fix blocked_waitq wakeup
          - fuse: set FR_SENT while locked
          - ovl: fix recursive oi->lock in ovl_link()
          - scsi: qla2xxx: Fix re-using LoopID when handle is in use
          - scsi: qla2xxx: Fix NVMe session hang on unload
          - [arm64] clk: meson-gxbb: set fclk_div3 as CLK_IS_CRITICAL
          - [arm64] clk: meson: axg: mark fdiv2 and fdiv3 as critical
          - zram: close udev startup race condition as default groups
          - [mips*el/loonsgon-3] Fix CPU UART irq delivery problem
          - [mips*el/loongson-3] Fix BRIDGE irq delivery problem
          - [armhf] clk: s2mps11: Fix matching when built as module and DT node
            contains compatible
          - [armhf,arm64] clk: sunxi-ng: h6: fix bus clocks' divider position
          - [arm64] clk: rockchip: fix wrong mmc sample phase shift for rk3328
          - [armhf,arm64] clk: rockchip: Fix static checker warning in
            rockchip_ddrclk_get_parent call
          - libceph: bump CEPH_MSG_MAX_DATA_LEN
          - Revert "ceph: fix dentry leak in splice_dentry()"
          - thermal: core: Fix use-after-free in thermal_cooling_device_destroy_sysfs
          - mach64: fix display corruption on big endian machines
          - mach64: fix image corruption due to reading accelerator registers
          - acpi/nfit, x86/mce: Handle only uncorrectable machine checks
          - acpi/nfit, x86/mce: Validate a MCE's address before using it
          - acpi, nfit: Fix ARS overflow continuation
          - [arm64] reset: hisilicon: fix potential NULL pointer dereference
          - vhost/scsi: truncate T10 PI iov_iter to prot_bytes
          - scsi: qla2xxx: Initialize port speed to avoid setting lower speed
          - SCSI: fix queue cleanup race before queue initialization is done
          - [powerpc*] Revert "powerpc/8xx: Use L1 entry APG to handle _PAGE_ACCESSED
            for CONFIG_SWAP"
          - ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
          - ocfs2: free up write context when direct IO failed
          - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings
          - memory_hotplug: cond_resched in __remove_pages
          - netfilter: conntrack: fix calculation of next bucket number in early_drop
          - [armhf] 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm
          - bonding/802.3ad: fix link_failure_count tracking
          - mtd: nand: Fix nanddev_neraseblocks()
          - mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
          - hwmon: (core) Fix double-free in __hwmon_device_register()
          - perf stat: Handle different PMU names with common prefix
          - of, numa: Validate some distance map rules
          - [x86] hyper-v: Enable PIT shutdown quirk
          - termios, tty/tty_baudrate.c: fix buffer overrun
          - watchdog/core: Add missing prototypes for weak functions
          - btrfs: fix pinned underflow after transaction aborted
          - Btrfs: fix cur_offset in the error case for nocow
          - Btrfs: fix infinite loop on inode eviction after deduplication of eof
          - Btrfs: fix data corruption due to cloning of eof block
          - clockevents/drivers/i8253: Add support for PIT shutdown quirk
          - ext4: add missing brelse() update_backups()'s error path
          - ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
          - ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
          - ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
          - ext4: missing !bh check in ext4_xattr_inode_write()
          - ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
          - ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()
          - ext4: avoid buffer leak in ext4_orphan_add() after prior errors
          - ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while
          - ext4: avoid possible double brelse() in add_new_gdb() on error path
          - ext4: fix possible leak of sbi->s_group_desc_leak in error path
          - ext4: fix possible leak of s_journal_flag_rwsem in error path
          - ext4: fix buffer leak in ext4_xattr_get_block() on error path
          - ext4: release bs.bh before re-using in ext4_xattr_block_find()
          - ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
          - ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path
          - ext4: fix buffer leak in __ext4_read_dirblock() on error path
          - mount: Retest MNT_LOCKED in do_umount
          - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
          - mount: Prevent MNT_DETACH from disconnecting locked mounts
          - mnt: fix __detach_mounts infinite loop
          - sunrpc: correct the computation for page_ptr when truncating
          - NFSv4: Don't exit the state manager without clearing
          - nfsd: COPY and CLONE operations require the saved filehandle to be set
          - rtc: hctosys: Add missing range error reporting
          - fuse: fix use-after-free in fuse_direct_IO()
          - fuse: fix leaked notify reply
          - selinux: check length properly in SCTP bind hook
          - configfs: replace strncpy with memcpy
          - gfs2: Put bitmap buffers in put_super
          - gfs2: Fix metadata read-ahead during truncate (2)
          - libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD
          - crypto: user - fix leaking uninitialized memory to userspace
          - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
          - mm/swapfile.c: use kvzalloc for swap_info_struct allocation
          - [armhf,arm64] efi/libstub: Pack FDT after populating it
          - [armhf,arm64] drm/rockchip: Allow driver to be shutdown on reboot/kexec
          - [arm64] drm/msm: fix OF child-node lookup
          - drm/amdgpu: Fix typo in amdgpu_vmid_mgr_init
          - drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type
          - drm/nouveau: Check backlight IDs are >= 0, not > 0
          - drm/nouveau: Fix nv50_mstc->best_encoder()
          - drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD
          - [armhf] drm/etnaviv: fix bogus fence complete check in timeout handler
          - drm/dp_mst: Check if primary mstb is null
          - drm: panel-orientation-quirks: Add quirk for Acer One 10 (S1003)
          - [x86] drm/i915/dp: Link train Fallback on eDP only if fallback link BW
            can fit panel's native mode
          - [x86] drm/i915: Restore vblank interrupts earlier
          - [x86] drm/i915: Don't unset intel_connector->mst_port
          - [x86] drm/i915: Skip vcpi allocation for MSTB ports that are gone
          - [x86] drm/i915: Large page offsets for pread/pwrite
          - [x86] drm/i915/dp: Fix link retraining comment in intel_dp_long_pulse()
          - [x86] drm/i915/dp: Restrict link retrain workaround to external monitors
          - [x86] drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values
          - [x86] drm/i915: Fix error handling for the NV12 fb dimensions check
          - [x86] drm/i915: Fix ilk+ watermarks when disabling pipes
          - [x86] drm/i915: Compare user's 64b GTT offset even on 32b
          - [x86] drm/i915: Don't oops during modeset shutdown after lpe audio deinit
          - [x86] drm/i915: Mark pin flags as u64
          - [x86] drm/i915/ringbuffer: Delay after EMIT_INVALIDATE for gen4/gen5
          - [x86] drm/i915/execlists: Force write serialisation into context image vs
          - [x86] drm/i915: Fix possible race in intel_dp_add_mst_connector()
          - [armhf,arm64] CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM
        [ Ben Hutchings ]
        * linux-perf: Fix BPF feature detection
        * [rt] Update to 4.18.16-rt9:
          - Revert "rcu: Use cpus_read_lock() while looking at cpu_online_mask"
          - EXP rcu: Revert expedited GP parallelization cleverness
        [ Romain Perier ]
        * [rt] Update to 4.18.12-rt7
        * Fixed FTBFS caused by wireless-disable-regulatory.db-direct-loading.patch,
          due to conflicting types for 'reg_query_regdb_wmm'
        [ Vagrant Cascadian ]
        * [arm64] Update pinebook/teres-i device-tree patches to 4.19.x:
          - Enables the lid to wakeup from suspend.
        [ Salvatore Bonaccorso ]
        * [x86] swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
          (Closes: #908924)
        * mremap: properly flush TLB before releasing the page (CVE-2018-18281)
        * cdrom: fix improper type cast, which can leat to information leak
    • Sophie Brun's avatar
      Import Upstream version 4.18.20 · a0d69087
      Sophie Brun authored