From 098172cdc1b50f546ffe686c4d082e0f467232c1 Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Mon, 25 Nov 2019 03:24:16 +0000 Subject: [PATCH] debian/changelog: Clean up list of changes from stable * Delete changes that are irrelevant, were previously cherry-picked by us, or that cancel each other out * Add architecture/flavour/featureset-qualifications * Add CVE IDs * Word-wrap --- debian/changelog | 1084 ++++++++++++++++++++-------------------------- 1 file changed, 470 insertions(+), 614 deletions(-) diff --git a/debian/changelog b/debian/changelog index a84667c5b..f60fee223 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,19 +2,16 @@ linux (4.19.81-1) UNRELEASED; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.68 - - sh: kernel: hw_breakpoint: Fix missing break in switch statement - seq_file: fix problem when seeking mid-record - mm/hmm: fix bad subpage pointer in try_to_unmap_one - - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified + - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and + MPOL_MF_STRICT were specified - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind - mm/memcontrol.c: fix use after free in mem_cgroup_iter() - mm/usercopy: use memory range to be accessed for wraparound check - Revert "pwm: Set class for exported channels in sysfs" - cpufreq: schedutil: Don't skip freq update when limits change - - xtensa: add missing isync to the cpu_reset TLB code - - ALSA: hda/realtek - Add quirk for HP Envy x360 - - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term - - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit + - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360 - ALSA: hda - Apply workaround for another AMD chip 1022:1487 - ALSA: hda - Fix a memory leak bug - ALSA: hda - Add a generic reboot_notify @@ -26,54 +23,43 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - Input: iforce - add sanity checks - net: usb: pegasus: fix improper read if get_registers() fail - netfilter: ebtables: also count base chain policies - - riscv: Make __fstate_clean() work correctly. - - clk: at91: generated: Truncate divisor to GENERATED_MAX_DIV + 1 - - clk: sprd: Select REGMAP_MMIO to avoid compile errors - - clk: renesas: cpg-mssr: Fix reset control race condition - xen/pciback: remove set but not used variable 'old_state' - - irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail - - irqchip/irq-imx-gpcv2: Forward irq type to parent + - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe + table fail - perf header: Fix divide by zero error if f_header.attr_size==0 - perf header: Fix use of unitialized value warning - libata: zpodd: Fix small read overflow in zpodd_get_mech_type() - - drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m - Btrfs: fix deadlock between fiemap and transaction commits - scsi: hpsa: correct scsi command status issue after reset - scsi: qla2xxx: Fix possible fcport null-pointer dereferences - drm/amdgpu: fix a potential information leaking bug - ata: libahci: do not complain in case of deferred probe - kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules - - kbuild: Check for unknown options with cc-option usage in Kconfig and clang - - arm64/efi: fix variable 'si' set but not used - - arm64: unwind: Prohibit probing on return_address() - - arm64/mm: fix variable 'pud' set but not used + - [arm64] efi: fix variable 'si' set but not used + - [arm64] unwind: Prohibit probing on return_address() + - [arm64] mm: fix variable 'pud' set but not used - IB/core: Add mitigation for Spectre V1 - IB/mlx5: Fix MR registration flow to use UMR properly - IB/mad: Fix use-after-free in ib mad completion handling - - drm: msm: Fix add_gpu_components - - drm/exynos: fix missing decrement of retry counter - - Revert "kmemleak: allow to coexist with fault injection" + - [arm64] drm: msm: Fix add_gpu_components + - [armhf] drm/exynos: fix missing decrement of retry counter - ocfs2: remove set but not used variable 'last_hash' - asm-generic: fix -Wtype-limits compiler warnings - - arm64: KVM: regmap: Fix unexpected switch fall-through - - KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block - - staging: comedi: dt3000: Fix signed integer overflow 'divider * base' - - staging: comedi: dt3000: Fix rounding up of timer divisor - - iio: adc: max9611: Fix temperature reading in probe + - [arm64] KVM: regmap: Fix unexpected switch fall-through + - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block + - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider * + base' + - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor - USB: core: Fix races in character device registration and deregistraion - - usb: gadget: udc: renesas_usb3: Fix sysfs interface of "role" - usb: cdc-acm: make sure a refcount is taken early enough - USB: CDC: fix sanity checks in CDC union parser - USB: serial: option: add D-Link DWM-222 device ID - USB: serial: option: Add support for ZTE MF871A - USB: serial: option: add the BroadMobi BM818 card - USB: serial: option: Add Motorola modem UARTs - - drm/i915/cfl: Add a new CFL PCI ID. - - dm: disable DISCARD if the underlying storage no longer supports it - - arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side - - netfilter: conntrack: Use consistent ct id hash calculation + - [x86] drm/i915/cfl: Add a new CFL PCI ID. + - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side - Input: psmouse - fix build error of multiple definition - - iommu/amd: Move iommu_init_pci() to .init section - bnx2x: Fix VF's VLAN reconfiguration in reload. - bonding: Add vlan tx offload to hw_enc_features - net: dsa: Check existence of .port_mdb_add callback before calling it @@ -86,38 +72,38 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - xen/netback: Reset nr_frags before freeing skb - net/mlx5e: Only support tx/rx pause setting for port owner - net/mlx5e: Use flow keys dissector to parse packets for ARFS - - mmc: sdhci-of-arasan: Do now show error message in case of deffered probe + - [arm64] mmc: sdhci-of-arasan: Do now show error message in case of + deffered probe https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.69 - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT - - MIPS: kernel: only use i8253 clocksource with periodic clockevent - - mips: fix cacheinfo + - [mips*] kernel: only use i8253 clocksource with periodic clockevent + - [mips*] fix cacheinfo - netfilter: ebtables: fix a memory leak bug in compat - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks - - selftests/bpf: fix sendmsg6_prog on s390 - bonding: Force slave speed check after link state recovery for 802.3ad - - net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links - - selftests: forwarding: gre_multipath: Enable IPv4 forwarding - - selftests: forwarding: gre_multipath: Fix flower filters + - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for + 10G links - can: dev: call netif_carrier_off() in register_candev() - - can: mcp251x: add error check when wq alloc failed - can: gw: Fix error path of cgw_module_init - - ASoC: Fail card instantiation if DAI format setup fails - - st21nfca_connectivity_event_received: null check the allocation - - st_nci_hci_connectivity_event_received: null check the allocation - - ASoC: rockchip: Fix mono capture - - ASoC: ti: davinci-mcasp: Correct slot_width posed constraint + - [armhf,arm64] ASoC: rockchip: Fix mono capture + - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint - net: usb: qmi_wwan: Add the BroadMobi BM818 card - qed: RDMA - Fix the hw_ver returned in device attributes - - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() - - mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() - - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too - - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets + - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in + start_isoc_chain() + - mac80211_hwsim: Fix possible null-pointer dereferences in + hwsim_dump_radio_nl() + - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac + sets too + - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and + hash:ip,mac sets - netfilter: ipset: Fix rename concurrency with listing - rxrpc: Fix potential deadlock - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet - - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack - - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in phy_led_trigger_change_speed() - - perf bench numa: Fix cpu0 binding + - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the + stack + - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in + phy_led_trigger_change_speed() - can: sja1000: force the string buffer NULL-terminated - can: peak_usb: force the string buffer NULL-terminated - net/ethernet/qlogic/qed: force the string buffer NULL-terminated @@ -125,43 +111,43 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52 - HID: input: fix a4tech horizontal wheel custom usage - - drm/rockchip: Suspend DP late + - [armhf,arm64] drm/rockchip: Suspend DP late - SMB3: Fix potential memory leak when processing compound chain - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - - s390: put _stext and _etext into .text section + - [s390x] put _stext and _etext into .text section - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()' - - net: stmmac: Fix issues when number of Queues >= 4 - - net: stmmac: tc: Do not return a fragment entry - - net: hisilicon: make hip04_tx_reclaim non-reentrant - - net: hisilicon: fix hip04-xmit never return TX_BUSY - - net: hisilicon: Fix dma_map_single failed on arm64 + - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4 + - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry + - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant + - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY + - [arm64] net: hisilicon: Fix dma_map_single failed on arm64 - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests - libata: add SG safety checks in SFF pio transfers - - x86/lib/cpu: Address missing prototypes warning - - drm/vmwgfx: fix memory leak when too many retries have occurred + - [x86] lib/cpu: Address missing prototypes warning + - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred - block, bfq: handle NULL return value by bfq_init_rq() - perf ftrace: Fix failure to set cpumask when only one cpu is present - perf cpumap: Fix writing to illegal memory in handling cpumap mask - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event - - KVM: arm64: Don't write junk to sysregs on reset - - KVM: arm: Don't write junk to CP15 registers on reset - - selftests: kvm: Adding config fragments + - [arm64] KVM: Don't write junk to sysregs on reset + - [armhf] KVM: Don't write junk to CP15 registers on reset - HID: wacom: correct misreported EKR ring values - HID: wacom: Correct distance scale for 2nd-gen Intuos devices - - Revert "dm bufio: fix deadlock with loop device" - - clk: socfpga: stratix10: fix rate caclulationg for cnt_clks + - Revert "dm bufio: fix deadlock with loop device" (regression in 4.19.61) - ceph: clear page dirty before invalidate page - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply - libceph: fix PG split vs OSD (re)connect race - - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX + - drm/nouveau: Don't retry infinitely when receiving no data on i2c over + AUX - gpiolib: never report open-drain/source lines as 'input' to user-space - - Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE - - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx - - x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 - - x86/apic: Handle missing global clockevent gracefully - - x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h - - x86/boot: Save fields explicitly, zero out everything else - - x86/boot: Fix boot regression caused by bootparam sanitizing + - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE + - userfaultfd_release: always remove uffd flags and clear + vm_userfaultfd_ctx + - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 + - [x86] apic: Handle missing global clockevent gracefully + - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h + - [x86] boot: Save fields explicitly, zero out everything else + - [x86] boot: Fix boot regression caused by bootparam sanitizing - dm kcopyd: always complete failed jobs - dm btree: fix order of block initialization in btree_split_beneath - dm integrity: fix a crash due to BUG_ON in __journal_read_write() @@ -175,53 +161,42 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - mm, page_owner: handle THP splits correctly - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely - mm/zsmalloc.c: fix race condition in zs_destroy_pool - - xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT - - xfs: don't trip over uninitialized buffer on extent read of corrupted inode + - xfs: don't trip over uninitialized buffer on extent read of corrupted + inode - xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h - xfs: Add helper function xfs_attr_try_sf_addname - xfs: Add attibute set and helper functions - xfs: Add attibute remove and helper functions - xfs: always rejoin held resources during defer roll - dm zoned: fix potential NULL dereference in dmz_do_reclaim() - - powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB + - [ppc64el] Allow flush_(inval_)dcache_range to work across ranges >4GB - rxrpc: Fix local endpoint refcounting - rxrpc: Fix read-after-free in rxrpc_queue_local() - rxrpc: Fix local endpoint replacement - rxrpc: Fix local refcounting https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.70 - - dmaengine: ste_dma40: fix unneeded variable warning - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns - afs: Fix the CB.ProbeUuid service handler to reply correctly - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u() - fs: afs: Fix a possible null-pointer dereference in afs_put_read() - afs: Only update d_fsdata if different in afs_d_revalidate() - nvmet-loop: Flush nvme_delete_wq when removing the port - - nvme: fix a possible deadlock when passthru commands sent to a multipath device + - nvme: fix a possible deadlock when passthru commands sent to a multipath + device - nvme-pci: Fix async probe remove race - - soundwire: cadence_master: fix register definition for SLAVE_STATE - - soundwire: cadence_master: fix definitions for INTSTAT0/1 - - auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach - - dmaengine: stm32-mdma: Fix a possible null-pointer dereference in stm32_mdma_irq_handler() - - omap-dma/omap_vout_vrfb: fix off-by-one fi value + - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value - iommu/dma: Handle SG length overflow better - usb: gadget: composite: Clear "suspended" on reset/disconnect - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt - xen/blkback: fix memory leaks - - arm64: cpufeature: Don't treat granule sizes as strict - - i2c: rcar: avoid race when unregistering slave client - - i2c: emev2: avoid race when unregistering slave client + - [arm64] cpufeature: Don't treat granule sizes as strict - drm/ast: Fixed reboot test may cause system hanged - - usb: host: fotg2: restart hcd after port reset - - tools: hv: fixed Python pep8/flake8 warnings for lsvmbus - - tools: hv: fix KVP and VSS daemons exit code - - drm/i915: fix broadwell EU computation - - watchdog: bcm2835_wdt: Fix module autoload - - drm/bridge: tfp410: fix memleak in get_modes() + - [x86] tools: hv: fix KVP and VSS daemons exit code + - [x86] drm/i915: fix broadwell EU computation + - [arm*] watchdog: bcm2835_wdt: Fix module autoload - scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value - - drm/tilcdc: Register cpufreq notifier after we have initialized crtc - - net/tls: Fixed return value when tls_complete_pending_work() fails - - net/tls: swap sk_write_space on close - - net: tls, fix sk_write_space NULL write when tx disabled + - [armhf] drm/tilcdc: Register cpufreq notifier after we have initialized + crtc - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set - ipv6: Default fib6_type to RTN_UNICAST when not set - net/smc: make sure EPOLLOUT is raised @@ -234,81 +209,78 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - ALSA: seq: Fix potential concurrent access to the deleted pool - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604 - - kvm: x86: skip populating logical dest map if apic is not sw enabled - - KVM: x86: Don't update RIP or do single-step on faulting emulation - - uprobes/x86: Fix detection of 32-bit user mode - - x86/apic: Do not initialize LDR and DFR for bigsmp - - x86/apic: Include the LDR when clearing out APIC registers + - [x86] kvm: skip populating logical dest map if apic is not sw enabled + - [x86] KVM: Don't update RIP or do single-step on faulting emulation + - [amd64] uprobes: Fix detection of 32-bit user mode + - [x86] apic: Do not initialize LDR and DFR for bigsmp - ftrace: Fix NULL pointer dereference in t_probe_next() - ftrace: Check for successful allocation of hash - ftrace: Check for empty hash and comment the race with registering probes - usb-storage: Add new JMS567 revision to unusual_devs - USB: cdc-wdm: fix race between write and disconnect due to flag abuse - usb: hcd: use managed device resources - - usb: chipidea: udc: don't do hardware access if gadget has stopped + - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has + stopped - usb: host: ohci: fix a race condition between shutdown and irq - usb: host: xhci: rcar: Fix typo in compatible string matching - - USB: storage: ums-realtek: Update module parameter description for auto_delink_en + - USB: storage: ums-realtek: Update module parameter description for + auto_delink_en - USB: storage: ums-realtek: Whitelist auto-delink support - - mei: me: add Tiger Lake point LP device ID - - mmc: sdhci-of-at91: add quirk for broken HS200 + - [x86] mei: me: add Tiger Lake point LP device ID - mmc: core: Fix init of SD cards reporting an invalid VDD range - stm class: Fix a double free of stm_source_device - - intel_th: pci: Add support for another Lewisburg PCH - - intel_th: pci: Add Tiger Lake support - - typec: tcpm: fix a typo in the comparison of pdo_max_voltage - - fsi: scom: Don't abort operations for minor errors + - [x86] intel_th: pci: Add support for another Lewisburg PCH + - [x86] intel_th: pci: Add Tiger Lake support + - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage - lib: logic_pio: Fix RCU usage - lib: logic_pio: Avoid possible overlap for unregistering regions - lib: logic_pio: Add logic_pio_unregister_range() - - drm/amdgpu: Add APTX quirk for Dell Latitude 5495 - - drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest - - drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() - - bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free - - bus: hisi_lpc: Add .remove method to avoid driver unbind crash - - VMCI: Release resource if the work is already queued - - crypto: ccp - Ignore unconfigured CCP device on suspend/resume + - [x86] drm/amdgpu: Add APTX quirk for Dell Latitude 5495 + - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest + - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() + - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential + use-after-free + - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash + - [x86] VMCI: Release resource if the work is already queued + - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume - Revert "cfg80211: fix processing world regdomain when non modular" - mac80211: fix possible sta leak - mac80211: Don't memset RXCB prior to PAE intercept - mac80211: Correctly set noencrypt for PAE frames - - KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling - - KVM: arm/arm64: vgic: Fix potential deadlock when ap_list is long - - KVM: arm/arm64: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI + - [ppc64el] KVM: Book3S: Fix incorrect guest-to-user-translation error + handling + - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long + - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI - NFS: Clean up list moves of struct nfs_page - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() - NFS: Pass error information to the pgio error cleanup routine - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 - - i2c: piix4: Fix port selection for AMD Family 16h Model 30h - - x86/ptrace: fix up botched merge of spectrev1 fix + - [x86] i2c: piix4: Fix port selection for AMD Family 16h Model 30h - mt76: mt76x0u: do not reset radio on resume - - Revert "ASoC: Fail card instantiation if DAI format setup fails" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.71 - Revert "Input: elantech - enable SMBus on new (2018+) systems" + (regression in 4.19.67) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.72 - mld: fix memory leak in mld_del_delrec() - net: fix skb use after free in netpoll - net: sched: act_sample: fix psample group handling on overwrite - net_sched: fix a NULL pointer deref in ipt action - - net: stmmac: dwmac-rk: Don't fail if phy regulator is absent + - [armhf,arm64] net: stmmac: dwmac-rk: Don't fail if phy regulator is + absent - tcp: inherit timestamp on mtu probe - tcp: remove empty skb from write queue in error cases - - net/rds: Fix info leak in rds6_inc_info_copy() - - x86/boot: Preserve boot_params.secure_boot from sanitizing - - spi: bcm2835aux: unifying code between polling and interrupt driven code - - spi: bcm2835aux: remove dangerous uncontrolled read of fifo - - spi: bcm2835aux: fix corruptions for longer spi transfers - - net: tundra: tsi108: use spin_lock_irqsave instead of spin_lock_irq in IRQ context + - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714) + - [x86] boot: Preserve boot_params.secure_boot from sanitizing + - [arm*] spi: bcm2835aux: unifying code between polling and interrupt + driven code + - [arm*] spi: bcm2835aux: remove dangerous uncontrolled read of fifo + - [arm*] spi: bcm2835aux: fix corruptions for longer spi transfers - netfilter: nf_tables: use-after-free in failing rule with bound set - - tools: bpftool: fix error message (prog -> object) - - hv_netvsc: Fix a warning of suspicious RCU usage - - net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx + - [x86] hv_netvsc: Fix a warning of suspicious RCU usage - Bluetooth: btqca: Add a short delay before downloading the NVM - - ibmveth: Convert multicast list size for little-endian system + - [ppc64el] ibmveth: Convert multicast list size for little-endian system - gpio: Fix build error of function redefinition - netfilter: nft_flow_offload: skip tcp rst and fin packets - - drm/mediatek: use correct device to import PRIME buffers - - drm/mediatek: set DMA max segment size - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure - scsi: target: tcmu: avoid use-after-free after command timeout - cxgb4: fix a memory leak bug @@ -318,95 +290,88 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - vfs: fix page locking deadlocks when deduping files - cx82310_eth: fix a memory leak bug - net: kalmia: fix memory leaks - - ibmvnic: Unmap DMA address of TX descriptor buffers after use - net: cavium: fix driver name - wimax/i2400m: fix a memory leak bug - - ravb: Fix use-after-free ravb_tstamp_skb - kprobes: Fix potential deadlock in kprobe_optimizer() - HID: cp2112: prevent sleeping function called from invalid context - - x86/boot/compressed/64: Fix boot on machines with broken E820 table - - Input: hyperv-keyboard: Use in-place iterator API in the channel callback - - Tools: hv: kvp: eliminate 'may be used uninitialized' warning + - [amd64] boot/compressed: Fix boot on machines with broken E820 table + - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel + callback + - [x86] Tools: hv: kvp: eliminate 'may be used uninitialized' warning - nvme-multipath: fix possible I/O hang when paths are updated - IB/mlx4: Fix memory leaks - infiniband: hfi1: fix a memory leak bug - infiniband: hfi1: fix memory leaks - - selftests: kvm: fix state save/load on processors without XSAVE - - selftests/kvm: make platform_info_test pass on AMD - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() - - ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() + - ceph: fix buffer free while holding i_ceph_lock in + __ceph_build_xattrs_blob() - ceph: fix buffer free while holding i_ceph_lock in fill_inode() - - KVM: arm/arm64: Only skip MMIO insn once + - [armhf,arm64] KVM: Only skip MMIO insn once - afs: Fix leak in afs_lookup_cell_rcu() - - KVM: arm/arm64: VGIC: Properly initialise private IRQ affinity - - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() + - [armhf,arm64] KVM: VGIC: Properly initialise private IRQ affinity + - [amd64] boot/compressed: Fix missing initialization in + find_trampoline_placement() - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer - - Revert "x86/apic: Include the LDR when clearing out APIC registers" https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.73 - ALSA: hda - Fix potential endless loop at applying quirks - ALSA: hda/realtek - Fix overridden device-specific initialization - - ALSA: hda/realtek - Add quirk for HP Pavilion 15 - - ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL - - ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre + - [x86] ALSA: hda/realtek - Add quirk for HP Pavilion 15 + - [x86] ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS + UX431FL + - [x86] ALSA: hda/realtek - Fix the problem of two front mics on a + ThinkCentre - sched/fair: Don't assign runtime for throttled cfs_rq - - drm/vmwgfx: Fix double free in vmw_recv_msg() - - vhost/test: fix build for vhost test - - vhost/test: fix build for vhost test - again - - powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction + - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg() + - [ppc64el] tm: Fix FP/VMX unavailable exceptions inside a transaction + (CVE-2019-15030) - batman-adv: fix uninit-value in batadv_netlink_get_ifindex() - batman-adv: Only read OGM tvlv_len after buffer len check - - hv_sock: Fix hang when a connection is closed + - [x86] hv_sock: Fix hang when a connection is closed - Blk-iolatency: warn on negative inflight IO counter - blk-iolatency: fix STS_AGAIN handling - {nl,mac}80211: fix interface combinations on crypto controlled devices - timekeeping: Use proper ktime_add when adding nsecs in coarse offset - selftests: fib_rule_tests: use pre-defined DEV_ADDR - - x86/ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() - - powerpc/64: mark start_here_multiplatform as __ref - - media: stm32-dcmi: fix irq = 0 case - - arm64: dts: rockchip: enable usb-host regulators at boot on rk3328-rock64 - - scripts/decode_stacktrace: match basepath using shell prefix operator, not regex - - riscv: remove unused variable in ftrace + - [x86] ftrace: Fix warning and considate ftrace_jmp_replace() and + ftrace_call_replace() + - [ppc64el] mark start_here_multiplatform as __ref + - [arm64] dts: rockchip: enable usb-host regulators at boot on + rk3328-rock64 - nvme-fc: use separate work queue to avoid warning - - clk: s2mps11: Add used attribute to s2mps11_dt_match - - remoteproc: qcom: q6v5: shore up resource probe handling + - [armhf] clk: s2mps11: Add used attribute to s2mps11_dt_match + - [arm64] remoteproc: qcom: q6v5: shore up resource probe handling - modules: always page-align module section allocations - kernel/module: Fix mem leak in module_add_modinfo_attrs - - drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" - - media: cec/v4l2: move V4L2 specific CEC functions to V4L2 - - media: cec: remove cec-edid.c + - [x86] drm/i915: Re-apply "Perform link quality check, unconditionally + during long pulse" - scsi: qla2xxx: Move log messages before issuing command to firmware - keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h - - Drivers: hv: kvp: Fix two "this statement may fall through" warnings - - x86, hibernate: Fix nosave_regions setup for hibernation - - remoteproc: qcom: q6v5-mss: add SCM probe dependency + - [x86] Drivers: hv: kvp: Fix two "this statement may fall through" + warnings + - [x86] hibernate: Fix nosave_regions setup for hibernation + - [arm64] remoteproc: qcom: q6v5-mss: add SCM probe dependency - drm/amdgpu/gfx9: Update gfx9 golden settings. - drm/amdgpu: Update gc_9_0 golden settings. - - KVM: x86: hyperv: enforce vp_index < KVM_MAX_VCPUS - - KVM: x86: hyperv: consistently use 'hv_vcpu' for 'struct kvm_vcpu_hv' variables - - KVM: x86: hyperv: keep track of mismatched VP indexes - - KVM: hyperv: define VP assist page helpers - - x86/kvm/lapic: preserve gfn_to_hva_cache len on cache reinit - - drm/i915: Fix intel_dp_mst_best_encoder() - - drm/i915: Rename PLANE_CTL_DECOMPRESSION_ENABLE - - drm/i915/gen9+: Fix initial readout for Y tiled framebuffers + - [x86] KVM: hyperv: enforce vp_index < KVM_MAX_VCPUS + - [x86] KVM: hyperv: consistently use 'hv_vcpu' for 'struct kvm_vcpu_hv' + variables + - [x86] KVM: hyperv: keep track of mismatched VP indexes + - [x86] KVM: hyperv: define VP assist page helpers + - [x86] kvm/lapic: preserve gfn_to_hva_cache len on cache reinit + - [x86] drm/i915: Fix intel_dp_mst_best_encoder() + - [x86] drm/i915: Rename PLANE_CTL_DECOMPRESSION_ENABLE + - [x86] drm/i915/gen9+: Fix initial readout for Y tiled framebuffers - drm/atomic_helper: Disallow new modesets on unregistered connectors - - Drivers: hv: kvp: Fix the indentation of some "break" statements - - Drivers: hv: kvp: Fix the recent regression caused by incorrect clean-up + - [x86] Drivers: hv: kvp: Fix the recent regression caused by incorrect + clean-up - powerplay: Respect units on max dcfclk watermark - drm/amd/pp: Fix truncated clock value when set watermark - drm/amd/dm: Understand why attaching path/tile properties are needed - - ARM: davinci: da8xx: define gpio interrupts as separate resources - - ARM: davinci: dm365: define gpio interrupts as separate resources - - ARM: davinci: dm646x: define gpio interrupts as separate resources - - ARM: davinci: dm355: define gpio interrupts as separate resources - - ARM: davinci: dm644x: define gpio interrupts as separate resources - - s390/zcrypt: reinit ap queue state machine during device probe - - media: vim2m: use workqueue - - media: vim2m: use cancel_delayed_work_sync instead of flush_schedule_work - - drm/i915: Restore sane defaults for KMS on GEM error load - - drm/i915: Cleanup gt powerstate from gem - - KVM: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch + - [s390x] zcrypt: reinit ap queue state machine during device probe + - [x86] drm/i915: Restore sane defaults for KMS on GEM error load + - [x86] drm/i915: Cleanup gt powerstate from gem + - [ppc64el] KVM: Book3S HV: Fix race between kvm_unmap_hva_range and MMU + mode switch - Btrfs: clean up scrub is_dev_replace parameter - Btrfs: fix deadlock with memory reclaim during scrub - btrfs: Remove extent_io_ops::fill_delalloc @@ -414,93 +379,75 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - scsi: megaraid_sas: Fix combined reply queue mode detection - scsi: megaraid_sas: Add check for reset adapter bit - scsi: megaraid_sas: Use 63-bit DMA addressing - - powerpc/pkeys: Fix handling of pkey state across fork() + - [ppc64el] pkeys: Fix handling of pkey state across fork() - btrfs: volumes: Make sure no dev extent is beyond device boundary - btrfs: Use real device structure to verify dev extent - - media: vim2m: only cancel work if it is for right context - - ARC: show_regs: lockdep: re-enable preemption - - ARC: mm: do_page_fault fixes #1: relinquish mmap_sem if signal arrives while handle_mm_fault - IB/uverbs: Fix OOPs upon device disassociation - - crypto: ccree - fix resume race condition on init - - crypto: ccree - add missing inline qualifier - drm/vblank: Allow dynamic per-crtc max_vblank_count - - drm/i915/ilk: Fix warning when reading emon_status with no output - - mfd: Kconfig: Fix I2C_DESIGNWARE_PLATFORM dependencies + - [x86] drm/i915/ilk: Fix warning when reading emon_status with no output - tpm: Fix some name collisions with drivers/char/tpm.h - bcache: replace hard coded number with BUCKET_GC_GEN_MAX - bcache: treat stale && dirty keys as bad keys - - KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run - - iio: adc: exynos-adc: Add S5PV210 variant - - dt-bindings: iio: adc: exynos-adc: Add S5PV210 variant - - iio: adc: exynos-adc: Use proper number of channels for Exynos4x12 + - [x86] KVM: VMX: Compare only a single byte for VMCS' "launched" in + vCPU-run + - [armhf] iio: adc: exynos-adc: Add S5PV210 variant + - [armhf] iio: adc: exynos-adc: Use proper number of channels for + Exynos4x12 - mt76: fix corrupted software generated tx CCMP PN - drm/nouveau: Don't WARN_ON VCPI allocation failures - iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules - iwlwifi: add new card for 9260 series - - x86/kvmclock: set offset for kvm unstable clock - spi: spi-gpio: fix SPI_CS_HIGH capability - - powerpc/kvm: Save and restore host AMR/IAMR/UAMOR - - mmc: renesas_sdhi: Fix card initialization failure in high speed mode + - [ppc64el] kvm: Save and restore host AMR/IAMR/UAMOR - btrfs: scrub: pass fs_info to scrub_setup_ctx - btrfs: scrub: move scrub_setup_ctx allocation out of device_list_mutex - btrfs: scrub: fix circular locking dependency warning - btrfs: init csum_list before possible free - - PCI: qcom: Fix error handling in runtime PM support - - PCI: qcom: Don't deassert reset GPIO during probe - - drm: add __user attribute to ptr_to_compat() + - [arm64] PCI: qcom: Fix error handling in runtime PM support + - [arm64] PCI: qcom: Don't deassert reset GPIO during probe - CIFS: Fix error paths in writeback code - CIFS: Fix leaking locked VFS cache pages in writeback retry - - drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set - - drm/i915: Sanity check mmap length against object size - - usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 source-caps - - arm64: dts: stratix10: add the sysmgr-syscon property from the gmac's + - [x86] drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC + set + - [x86] drm/i915: Sanity check mmap length against object size + - [x86] usb: typec: tcpm: Try PD-2.0 if sink does not respond to 3.0 + source-caps - IB/mlx5: Reset access mask when looping inside page fault handler - kvm: mmu: Fix overflow on kvm mmu page limit calculation - - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context - - KVM: x86: Always use 32-bit SMRAM save state for 32-bit kernels - - cifs: Fix lease buffer length error - - media: i2c: tda1997x: select V4L2_FWNODE + - [x86] kvm: move kvm_load/put_guest_xcr0 into atomic context + - [x86] KVM: Always use 32-bit SMRAM save state for 32-bit kernels + - cifs: Fix lease buffer length error (CVE-2019-15918) - ext4: protect journal inode's blocks using block_validity - - ARM: dts: qcom: ipq4019: fix PCI range - - ARM: dts: qcom: ipq4019: Fix MSI IRQ type - - ARM: dts: qcom: ipq4019: enlarge PCIe BAR range - - dt-bindings: mmc: Add supports-cqe property - - dt-bindings: mmc: Add disable-cqe-dcmd property. - - PCI: Add macro for Switchtec quirk declarations - - PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary + - [x86] PCI: Reset Lenovo ThinkPad P50 nvgpu at boot if necessary - dm mpath: fix missing call of path selector type->end_io - blk-mq: free hw queue's resource in hctx's release handler - mmc: sdhci-pci: Add support for Intel CML - PCI: dwc: Use devm_pci_alloc_host_bridge() to simplify code - cifs: smbd: take an array of reqeusts when sending upper layer data - dm crypt: move detailed message into debug level - - signal/arc: Use force_sig_fault where appropriate - - ARC: mm: fix uninitialised signal code in do_page_fault - - ARC: mm: SIGSEGV userspace trying to access kernel virtual memory - - drm/amdkfd: Add missing Polaris10 ID + - [x86] drm/amdkfd: Add missing Polaris10 ID - kvm: Check irqchip mode before assign irqfd - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) - drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc - Btrfs: fix race between block group removal and block group allocation - cifs: add spinlock for the openFileList to cifsInodeInfo - - clk: tegra: Fix maximum audio sync clock for Tegra124/210 - - clk: tegra210: Fix default rates for HDA clocks + - [arm64] clk: tegra: Fix maximum audio sync clock for Tegra124/210 + - [arm64] clk: tegra210: Fix default rates for HDA clocks - IB/hfi1: Avoid hardlockup with flushlist_lock - apparmor: reset pos on failure to unpack for various functions - scsi: target/core: Use the SECTOR_SHIFT constant - scsi: target/iblock: Fix overrun in WRITE SAME emulation - - staging: wilc1000: fix error path cleanup in wilc_wlan_initialize() - - scsi: zfcp: fix request object use-after-free in send path causing wrong traces + - [s390x] scsi: zfcp: fix request object use-after-free in send path + causing wrong traces - cifs: Properly handle auto disabling of serverino option - - ALSA: hda - Don't resume forcibly i915 HDMI/DP codec - - ceph: use ceph_evict_inode to cleanup inode's resource - - KVM: x86: optimize check for valid PAT value - - KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value - - KVM: VMX: Fix handling of #MC that occurs during VM-Entry - - KVM: VMX: check CPUID before allowing read/write of IA32_XSS - - KVM: PPC: Use ccr field in pt_regs struct embedded in vcpu struct - - KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation - - ARM: dts: gemini: Set DIR-685 SPI CS as active low + - [x86] ALSA: hda - Don't resume forcibly i915 HDMI/DP codec + - [x86] KVM: optimize check for valid PAT value + - [x86] KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad + value + - [x86] KVM: VMX: Fix handling of #MC that occurs during VM-Entry + - [x86] KVM: VMX: check CPUID before allowing read/write of IA32_XSS + - [ppc64el] KVM: Use ccr field in pt_regs struct embedded in vcpu struct + - [ppc64el] KVM: Book3S HV: Fix CR0 setting in TM emulation - RDMA/srp: Document srp_parse_in() arguments - RDMA/srp: Accept again source addresses that do not have a port number - btrfs: correctly validate compression type @@ -509,37 +456,34 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - resource: fix locking in find_next_iomem_res() - pstore: Fix double-free in pstore_mkfile() failure path - dm thin metadata: check if in fail_io mode when setting needs_check - - drm/panel: Add support for Armadeus ST0700 Adapt - - ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips - - powerpc/mm: Limit rma_size to 1TB when running without HV mode + - [armhf,arm64] drm/panel: Add support for Armadeus ST0700 Adapt + - [x86] ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips + - [ppc64el] mm: Limit rma_size to 1TB when running without HV mode - iommu/iova: Remove stale cached32_node - gpio: don't WARN() on NULL descs if gpiolib is disabled - - i2c: at91: disable TXRDY interrupt after sending data - - i2c: at91: fix clk_offset for sama5d2 - mm/migrate.c: initialize pud_entry in migrate_vma() - - iio: adc: gyroadc: fix uninitialized return code - NFSv4: Fix delegation state recovery - bcache: only clear BTREE_NODE_dirty bit when it is set - bcache: add comments for mutex_lock(&b->write_lock) - bcache: fix race in btree_flush_write() - - drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV - - virtio/s390: fix race on airq_areas[] + - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV + - [s390x] virtio: fix race on airq_areas[] - drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors - ext4: don't perform block validity checks on the journal inode - ext4: fix block validity checks for journal inodes using indirect blocks - ext4: unsigned int compared against zero - - PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround - - powerpc/tm: Remove msr_tm_active() - - powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts - - vhost: make sure log_num < in_num + - [x86] PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround + - [ppc64el] tm: Remove msr_tm_active() + - [ppc64el] tm: Fix restoring FP/VMX facility incorrectly on interrupts + (CVE-2019-15031) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.74 - bridge/mdb: remove wrong use of NLM_F_MULTI - cdc_ether: fix rndis support for Mediatek based smartphones - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' - isdn/capi: check message length in capi_write() - - ixgbe: Fix secpath usage for IPsec TX offload. - net: Fix null de-reference of device refcount - - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list + - net: gso: Fix skb_segment splat when splitting gso_size mangled skb + having linear-headed frag_list - net: phylink: Fix flow control resolution - net: sched: fix reordering issues - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero @@ -548,127 +492,108 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR - tipc: add NULL pointer check before calling kfree_rcu - tun: fix use-after-free when register netdev failed - - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist + - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and + blacklist - gpio: fix line flag validation in linehandle_create - Btrfs: fix assertion failure during fsync and use of stale transaction - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us - genirq: Prevent NULL pointer dereference in resend_irqs() - - KVM: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() - - KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl - - KVM: x86: work around leak of uninitialized stack contents - - KVM: nVMX: handle page fault in vmread - - x86/purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large to fix kexec relocation errors - - powerpc: Add barrier_nospec to raw_copy_in_user() - - drm/meson: Add support for XBGR8888 & ABGR8888 formats - - clk: rockchip: Don't yell about bad mmc phases when getting - - mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue + - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using + it as target for memset() + - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT + ioctl + - [x86] KVM: work around leak of uninitialized stack contents + - [x86] KVM: nVMX: handle page fault in vmread + - [x86] purgatory: Change compiler flags from -mcmodel=kernel to + -mcmodel=large to fix kexec relocation errors + - [ppc64el] Add barrier_nospec to raw_copy_in_user() + - [arm64] drm/meson: Add support for XBGR8888 & ABGR8888 formats + - [armhf,arm64] clk: rockchip: Don't yell about bad mmc phases when getting - PCI: Always allow probing with driver_override - gpio: fix line flag validation in lineevent_create - ubifs: Correctly use tnc_next() in search_dh_cookie() - driver core: Fix use-after-free and double free on glue directory - - crypto: talitos - check AES key size - - crypto: talitos - fix CTR alg blocksize - - crypto: talitos - check data blocksize in ablkcipher. - - crypto: talitos - fix ECB algs ivsize - - crypto: talitos - Do not modify req->cryptlen on decryption. - - crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking. - firmware: ti_sci: Always request response from firmware - - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC - - drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto + - [x86] drm: panel-orientation-quirks: Add extra quirk table entry for + GPD MicroPC - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" - - iio: adc: stm32-dfsdm: fix data type - modules: fix BUG when load module with rodata=n - - modules: fix compile error if don't have strict module rwx - - platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table - - rsi: fix a double free bug in rsi_91x_deinit() + - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504) - nvmem: Use the same permissions for eeprom as for nvmem - - x86/build: Add -Wnoaddress-of-packed-member to REALMODE_CFLAGS, to silence GCC9 build warning https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.75 - netfilter: nf_flow_table: set default timeout after successful insertion - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report - RDMA/restrack: Release task struct which was hold by CM_ID object - - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID - - powerpc/mm/radix: Use the right page size for vmemmap mapping + - [x86] Input: elan_i2c - remove Lenovo Legion Y7000 PnpID + - [ppc64el] mm/radix: Use the right page size for vmemmap mapping - USB: usbcore: Fix slab-out-of-bounds bug during device reset - media: tm6000: double free if usb disconnect while streaming - - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit - udp: correct reuseport selection with connected sockets - xen-netfront: do not assume sk_buff_head list is empty in error handling - net_sched: let qdisc_put() accept NULL pointer - - KVM: coalesced_mmio: add bounds checking - - firmware: google: check if size is valid when decoding VPD data - - serial: sprd: correct the wrong sequence of arguments - - tty/serial: atmel: reschedule TX after RX was started - - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings + - mwifiex: Fix three heap overflow at parsing element in + cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816) - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds - ieee802154: hwsim: Fix error handle path in hwsim_init_module - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails - - ARM: dts: am57xx: Disable voltage switching for SD card - - ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss - - bus: ti-sysc: Fix using configured sysc mask value - - s390/bpf: fix lcgr instruction encoding - - ARM: OMAP2+: Fix omap4 errata warning on other SoCs - - ARM: dts: dra74x: Fix iodelay configuration for mmc3 - - ARM: OMAP1: ams-delta-fiq: Fix missing irq_ack - - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe() - - s390/bpf: use 32-bit index for tail calls - - selftests/bpf: fix "bind{4, 6} deny specific IP & port" on s390 - - tools: bpftool: close prog FD before exit on showing a single program - - fpga: altera-ps-spi: Fix getting of optional confd gpio + - [armhf] dts: am57xx: Disable voltage switching for SD card + - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss + - [armhf] bus: ti-sysc: Fix using configured sysc mask value + - [s390x] bpf: fix lcgr instruction encoding + - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs + - [armhf] dts: dra74x: Fix iodelay configuration for mmc3 + - [armhf] bus: ti-sysc: Simplify cleanup upon failures in sysc_probe() + - [s390x] bpf: use 32-bit index for tail calls - netfilter: ebtables: Fix argument order to ADD_COUNTER - netfilter: nft_flow_offload: missing netlink attribute policy - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info - NFSv4: Fix return values for nfs4_file_open() - NFSv4: Fix return value in nfs_finish_open() - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup - - Kconfig: Fix the reference to the IDT77105 Phy driver in the description of ATM_NICSTAR_USE_IDT77105 - xdp: unpin xdp umem pages in error path - qed: Add cleanup in qed_slowpath_start() - - ARM: 8874/1: mm: only adjust sections of valid mm structures + - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures - batman-adv: Only read OGM2 tvlv_len after buffer len check - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0 - r8152: Set memory to all 0xFFs on failed reg reads - - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines + - [x86] apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check - netfilter: nf_conntrack_ftp: Fix debug output - NFSv2: Fix eof handling - NFSv2: Fix write regression - - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the first symbol + - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the + first symbol - cifs: set domainName when a domain-key is used in multiuser - cifs: Use kzfree() to zero out the password - - usb: host: xhci-tegra: Set DMA mask correctly - - ARM: 8901/1: add a criteria for pfn_valid of arm - - ibmvnic: Do not process reset during or after device removal + - [armhf,arm64] usb: host: xhci-tegra: Set DMA mask correctly + - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) - i2c: designware: Synchronize IRQs when unregistering slave client - - perf/x86/intel: Restrict period on Nehalem - - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops + - [x86] perf/intel: Restrict period on Nehalem + - [x86] perf/amd/ibs: Fix sample bias for dispatched micro-ops - amd-xgbe: Fix error path in xgbe_mod_init() - - tools/power x86_energy_perf_policy: Fix "uninitialized variable" warnings at -O2 - - tools/power x86_energy_perf_policy: Fix argument parsing - - tools/power turbostat: fix buffer overrun + - [x86] tools/power x86_energy_perf_policy: Fix argument parsing + - [x86] tools/power turbostat: fix buffer overrun - net: aquantia: fix out of memory condition on rx side - - net: seeq: Fix the function used to release some memory in an error handling path - - dmaengine: ti: dma-crossbar: Fix a memory leak bug - - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() - - x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation - - x86/hyper-v: Fix overflow bug in fill_gva_list() + - [armhf] dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() + - [x86] uaccess: Don't leak the AC flags into __get_user() argument + evaluation + - [x86] hyper-v: Fix overflow bug in fill_gva_list() - keys: Fix missing null pointer check in request_key_auth_describe() - - iommu/amd: Flush old domains in kdump kernel - - iommu/amd: Fix race in increase_address_space() - - PCI: kirin: Fix section mismatch warning + - [x86] iommu/amd: Flush old domains in kdump kernel + - [x86] iommu/amd: Fix race in increase_address_space() + - [arm64] PCI: kirin: Fix section mismatch warning - ovl: fix regression caused by overlapping layers detection - floppy: fix usercopy direction - binfmt_elf: move brk out of mmap when doing direct loader exec - - arm64: kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field + - [arm64] kpti: Whitelist Cortex-A CPUs that don't implement the CSV3 field - media: technisat-usb2: break out of loop at end of buffer + (CVE-2019-15505) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.76 - Revert "Bluetooth: validate BLE connection interval updates" - - net/ibmvnic: free reset work of removed device from queue - RDMA/restrack: Protect from reentry to resource return path - - powerpc/xive: Fix bogus error code returned by OPAL - - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to undefined SW FP routines + - [ppc64el] xive: Fix bogus error code returned by OPAL - IB/core: Add an unbound WQ type to the new CQ API - HID: prodikeys: Fix general protection fault during probe - HID: sony: Fix memory corruption issue on cleanup. @@ -676,7 +601,6 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - HID: hidraw: Fix invalid read in hidraw_ioctl - HID: Add quirk for HP X500 PIXART OEM mouse - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword() - - crypto: talitos - fix missing break in switch statement - CIFS: fix deadlock in cached root handling - net/mlx5e: Set ECN for received packets using CQE indication - net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets @@ -688,37 +612,35 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - iwlwifi: mvm: send BCAST management frames to the right station - iwlwifi: mvm: always init rs_fw with 20MHz bandwidth rates - media: tvp5150: fix switch exit in set control handler - - ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it enabled - - ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt() + - [x86] ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep + it enabled - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support - ALSA: usb-audio: Add DSD support for EVGA NU Audio - ALSA: dice: fix wrong packet parameter for Alesis iO26 - - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop - - ALSA: hda - Apply AMD controller workaround for Raven platform + - [x86] ALSA: hda - Add laptop imic fixup for ASUS M9V laptop + - [x86] ALSA: hda - Apply AMD controller workaround for Raven platform - objtool: Clobber user CFLAGS variable - - pinctrl: sprd: Use define directive for sprd_pinconf_params values - power: supply: sysfs: ratelimit property read error message - - locking/lockdep: Add debug_locks check in __lock_downgrade() - scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion - scsi: qla2xxx: Remove all rports if fabric scan retry fails - scsi: qla2xxx: Return switch command on a timeout - Revert "drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD" - bpf: libbpf: retry loading program on EAGAIN - - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices + - [armhf,arm64] irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices - f2fs: check all the data segments against all node ones - - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it + - [x86] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it - bcache: remove redundant LIST_HEAD(journal) from run_cache_set() - initramfs: don't free a non-existent initrd - blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs - blk-mq: move cancel of requeue_work to the front of blk_exit_queue - Revert "f2fs: avoid out-of-range memory access" - dm zoned: fix invalid memory access - - net/ibmvnic: Fix missing { in __ibmvnic_reset - f2fs: fix to do sanity check on segment bitmap of LFS curseg - drm: Flush output polling on shutdown - net: don't warn in inet diag when IPV6 is disabled - Bluetooth: btrtl: HCI reset on close for Realtek BT chip - - ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 + - [x86] ACPI: video: Add new hw_changes_brightness quirk, set it on + PB Easynote MZ35 - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling - xfs: don't crash on null attr fork xfs_bmapi_read - netfilter: nft_socket: fix erroneous socket assignment @@ -732,10 +654,10 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize - macsec: drop skb sk before calling gro_cells_receive - net/phy: fix DP83865 10 Mbps HDX loopback disable function - - net: qrtr: Stop rx_worker before freeing node - net/sched: act_sample: don't push mac header on ip6gre ingress - net_sched: add max len check for TCA_KIND - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs + (CVE-2019-19081) - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC - ppp: Fix memory leak in ppp_write - sch_netem: fix a divide by zero in tabledist() @@ -745,75 +667,55 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - net: sched: fix possible crash in tcf_action_destroy() - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state - net/mlx5: Add device ID of upcoming BlueField-2 - - mISDN: enforce CAP_NET_RAW for raw sockets - - appletalk: enforce CAP_NET_RAW for raw sockets - - ax25: enforce CAP_NET_RAW for raw sockets - - ieee802154: enforce CAP_NET_RAW for raw sockets - - nfc: enforce CAP_NET_RAW for raw sockets + - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055) + - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054) + - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052) + - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053) + - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056) - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs + (CVE-2019-19080) - ALSA: hda: Flush interrupts on disabling - - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg - - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER - - ASoC: sgtl5000: Fix of unmute outputs on probe - - ASoC: sgtl5000: Fix charge pump source assignment - - firmware: qcom_scm: Use proper types for dma mappings - - dmaengine: bcm2835: Print error in case setting DMA mask fails - - leds: leds-lp5562 allow firmware files up to the maximum length + - [armhf] ASoC: sgtl5000: Fix of unmute outputs on probe + - [armhf] ASoC: sgtl5000: Fix charge pump source assignment + - [arm*] dmaengine: bcm2835: Print error in case setting DMA mask fails - media: dib0700: fix link error for dibx000_i2c_set_speed - - media: mtk-cir: lower de-glitch counter for rc-mm protocol - - media: exynos4-is: fix leaked of_node references - media: hdpvr: Add device num check and handling - - media: i2c: ov5640: Check for devm_gpiod_get_optional() error - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint - sched/fair: Fix imbalance due to CPU affinity - sched/core: Fix CPU controller for !RT_GROUP_SCHED - - x86/apic: Make apic_pending_intr_clear() more robust - - sched/deadline: Fix bandwidth accounting at all levels after offline migration - - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails - - x86/apic: Soft disable APIC before initializing it + - [x86] apic: Make apic_pending_intr_clear() more robust + - sched/deadline: Fix bandwidth accounting at all levels after offline + migration + - [x86] reboot: Always use NMI fallback when shutdown via reboot vector IPI + fails + - [x86] apic: Soft disable APIC before initializing it - ALSA: hda - Show the fatal CORB/RIRB error more clearly - - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() + - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in + build_adc_controls() - EDAC/mc: Fix grain_bits calculation - media: iguanair: add sanity checks - base: soc: Export soc_device_register/unregister APIs - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid - - ia64:unwind: fix double free for mod->arch.init_unw_table - - EDAC/altera: Use the proper type for the IRQ status bits - - ASoC: rsnd: don't call clk_get_rate() under atomic context - - arm64/prefetch: fix a -Wtype-limits warning + - [arm64] prefetch: fix a -Wtype-limits warning - md/raid1: end bio when the device faulty - - md: don't call spare_active in md_reap_sync_thread if all member devices can't work + - md: don't call spare_active in md_reap_sync_thread if all member devices + can't work - md: don't set In_sync if array is frozen - - media: media/platform: fsl-viu.c: fix build for MICROBLAZE - ACPI / processor: don't print errors for processorIDs == 0xff - loop: Add LOOP_SET_DIRECT_IO to compat ioctl - - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() + - [x86] EDAC, pnd2: Fix ioremap() size in dnv_rd_reg() - efi: cper: print AER info of PCIe fatal error - - firmware: arm_scmi: Check if platform has released shmem before using - sched/fair: Use rq_lock/unlock in online_fair_sched_group - idle: Prevent late-arriving interrupts from disrupting offline - media: gspca: zero usb_buf on error - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig - perf test vfs_getname: Disable ~/.perfconfig to get default output - - media: mtk-mdp: fix reference count on old device tree - - media: fdp1: Reduce FCP not found message level to debug - media: em28xx: modules workqueue not inited for 2nd device - media: rc: imon: Allow iMON RC protocol for ffdc 7e device - - dmaengine: iop-adma: use correct printk format strings - - perf record: Support aarch64 random socket_id assignment - - media: vsp1: fix memory leak of dl on error return path - - media: i2c: ov5645: Fix power sequence - - media: omap3isp: Don't set streaming state on random subdevs - - media: imx: mipi csi-2: Don't fail if initial state times-out - - net: lpc-enet: fix printk format strings - - m68k: Prevent some compiler warnings in Coldfire builds - - ARM: dts: imx7d: cl-som-imx7: make ethernet work again - - ARM: dts: imx7-colibri: disable HS400 + - [arm64] perf record: Support aarch64 random socket_id assignment + - [armhf] media: omap3isp: Don't set streaming state on random subdevs - media: radio/si470x: kill urb on error - media: hdpvr: add terminating 0 at end of string - - ASoC: uniphier: Fix double reset assersion when transitioning to suspend state - - tools headers: Fixup bitsperlong per arch includes - - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK - led: triggers: Fix a memory leak bug - nbd: add missing config put - media: mceusb: fix (eliminate) TX IR signal length limit @@ -821,8 +723,8 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - posix-cpu-timers: Sanitize bogus WARNONS - media: dvb-core: fix a memory leak bug - libperf: Fix alignment trap with xyarray contents in 'perf stat' - - EDAC/amd64: Recognize DRAM device type ECC capability - - EDAC/amd64: Decode syndrome before translating address + - [amd64] EDAC/amd64: Recognize DRAM device type ECC capability + - [amd64] EDAC/amd64: Decode syndrome before translating address - PM / devfreq: passive: Use non-devm notifiers - PM / devfreq: exynos-bus: Correct clock enable sequence - media: cec-notifier: clear cec_adap in cec_notifier_unregister @@ -830,15 +732,14 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - media: cpia2_usb: fix memory leaks - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() - perf trace beauty ioctl: Fix off-by-one error in cmd->string table - - media: ov9650: add a sanity check - - ASoC: es8316: fix headphone mixer volume table + - [x86] ASoC: es8316: fix headphone mixer volume table - ACPI / CPPC: do not require the _PSD method - sched/cpufreq: Align trace event behavior of fast switching - - x86/apic/vector: Warn when vector space exhaustion breaks affinity - - arm64: kpti: ensure patched kernel text is fetched from PoU - - x86/mm/pti: Do not invoke PTI functions when PTI is disabled - - ASoC: fsl_ssi: Fix clock control issue in master mode - - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable() + - [x86] apic/vector: Warn when vector space exhaustion breaks affinity + - [arm64] kpti: ensure patched kernel text is fetched from PoU + - [x86] mm/pti: Do not invoke PTI functions when PTI is disabled + - [x86] mm/pti: Handle unaligned address gracefully in + pti_clone_pagetable() - nvmet: fix data units read and written counters in SMART log - nvme-multipath: fix ana log nsid lookup when nsid is not found - ALSA: firewire-motu: add support for MOTU 4pre @@ -846,36 +747,40 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - libata/ahci: Drop PCS quirk for Denverton and beyond - iommu/iova: Avoid false sharing on fq_timer_on - libtraceevent: Change users plugin directory - - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks + - [armhf] dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks - ACPI: custom_method: fix memory leaks - ACPI / PCI: fix acpi_pci_irq_enable() memory leak - closures: fix a race on wakeup from closure_sync - - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' + - hwmon: (acpi_power_meter) Change log level for 'unsafe software power + cap' - md/raid1: fail run raid1 array when active disk less than one - dmaengine: ti: edma: Do not reset reserved paRAM slots - kprobes: Prohibit probing on BUG() and WARN() address - - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding - - x86/cpu: Add Tiger Lake to Intel family - - platform/x86: intel_pmc_core: Do not ioremap RAM - - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set + - [s390x] crypto: xts-aes-s390 fix extra run-time crypto self tests finding + - [x86] cpu: Add Tiger Lake to Intel family + - [x86] platform: intel_pmc_core: Do not ioremap RAM + - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not + set - raid5: don't set STRIPE_HANDLE to stripe which is in batch list - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD - mmc: sdhci: Fix incorrect switch to HS mode - mmc: core: Add helper function to indicate if SDIO IRQs is enabled - - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume + - [armhf,arm64] mmc: dw_mmc: Re-store SDIO IRQs mask at system resume - raid5: don't increment read_errors on EILSEQ return - libertas: Add missing sentinel at end of if_usb.c fw_table - e1000e: add workaround for possible stalled packet - ALSA: hda - Drop unsol event handler for Intel HDMI codecs - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() - - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 - - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems - - btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type - - media: omap3isp: Set device on omap3isp subdevs + - [x86] ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 + - [x86] iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems + - btrfs: extent-tree: Make sure we only allocate extents from block groups + with the same type + - [armhf] media: omap3isp: Set device on omap3isp subdevs - PM / devfreq: passive: fix compiler warning - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 - - ALSA: firewire-tascam: handle error code when getting current source of clock + - ALSA: firewire-tascam: handle error code when getting current source of + clock - ALSA: firewire-tascam: check intermediate state of clock status and retry - scsi: scsi_dh_rdac: zero cdb in send_mode_select() - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag @@ -883,28 +788,24 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - IB/mlx5: Free mpi in mp_slave mode - IB/hfi1: Define variables as unsigned long to fix KASAN warning - randstruct: Check member structs in is_pure_ops_struct() - - Revert "ceph: use ceph_evict_inode to cleanup inode's resource" - ceph: use ceph_evict_inode to cleanup inode's resource - - ALSA: hda/realtek - PCI quirk for Medion E4254 + - [x86] ALSA: hda/realtek - PCI quirk for Medion E4254 - blk-mq: add callback of .cleanup_rq - scsi: implement .cleanup_rq callback - - powerpc/imc: Dont create debugfs files for cpu-less nodes + - [ppc64el] imc: Dont create debugfs files for cpu-less nodes - fuse: fix missing unlock_page in fuse_writepage() - - parisc: Disable HP HSC-PCI Cards to prevent kernel crash - - KVM: x86: always stop emulation on page fault - - KVM: x86: set ctxt->have_exception in x86_decode_insn() - - KVM: x86: Manually calculate reserved bits when loading PDPTRS - - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table + - [x86] KVM: always stop emulation on page fault + - [x86] KVM: set ctxt->have_exception in x86_decode_insn() + - [x86] KVM: Manually calculate reserved bits when loading PDPTRS + - [x86] media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table - media: don't drop front-end reference count for ->detach - binfmt_elf: Do not move brk for INTERP-less ET_EXEC - - ASoC: Intel: NHLT: Fix debug print format - - ASoC: Intel: Skylake: Use correct function to access iomem space - - ASoC: Intel: Fix use of potentially uninitialized variable - - ARM: samsung: Fix system restart on S3C6410 - - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up - - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" - - arm64: tlb: Ensure we execute an ISB following walk cache invalidation - - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328 + - [x86] ASoC: Intel: NHLT: Fix debug print format + - [x86] ASoC: Intel: Skylake: Use correct function to access iomem space + - [x86] ASoC: Intel: Fix use of potentially uninitialized variable + - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" + - [arm64] tlb: Ensure we execute an ISB following walk cache invalidation + - [arm64] dts: rockchip: limit clock rate of MMC controllers for RK3328 - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP - regulator: Defer init completion for a while after late_initcall - efifb: BGRT: Improve efifb_bgrt_sanity_check @@ -919,11 +820,14 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - btrfs: fix allocation of free space cache v1 bitmap pages - Btrfs: fix use-after-free when using the tree modification log - btrfs: Relinquish CPUs in btrfs_compare_trees - - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space - - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls + - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data + space + - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve + calls - Btrfs: fix race setting up and completing qgroup rescan workers - md/raid6: Set R5_ReadError when there is read failure on parity disk - - md: don't report active array_state until after revalidate_disk() completes. + - md: don't report active array_state until after revalidate_disk() + completes. - md: only call set_in_sync() when it is expected to succeed. - cfg80211: Purge frame registrations on iftype change - /dev/mem: Bail out upon SIGKILL. @@ -931,91 +835,72 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - ext4: fix punch hole for inline_data file systems - quota: fix wrong condition in is_quota_modification() - hwrng: core - don't wait on add_early_randomness() - - i2c: riic: Clear NACK in tend isr - CIFS: fix max ea value size - CIFS: Fix oplock handling for SMB 2.1+ protocols - md/raid0: avoid RAID0 data corruption due to layout confusion. - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock - - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone + - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new + zone - drm/amd/display: Restore backlight brightness after system resume https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.78 - tpm: use tpm_try_get_ops() in tpm-sysfs.c. - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations - - drm/bridge: tc358767: Increase AUX transfer length limit - - drm/panel: simple: fix AUO g185han01 horizontal blanking - - video: ssd1307fb: Start page range at page_offset - - drm/stm: attach gem fence to atomic state - - drm/panel: check failure cases in the probe func - - drm/rockchip: Check for fast link training before enabling psr - - drm/radeon: Fix EEH during kexec - - gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() - - PCI: rpaphp: Avoid a sometimes-uninitialized warning + - [armhf,arm64] drm/panel: simple: fix AUO g185han01 horizontal blanking + - [armhf,arm64] drm/panel: check failure cases in the probe func + - [armhf,arm64] drm/rockchip: Check for fast link training before enabling + psr + - gpu: drm: radeon: Fix a possible null-pointer dereference in + radeon_connector_set_property() + - [ppc64el] PCI: rpaphp: Avoid a sometimes-uninitialized warning - ipmi_si: Only schedule continuously in the thread in maintenance mode - - clk: qoriq: Fix -Wunused-const-variable - - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks + - [armhf,arm64] clk: sunxi-ng: v3s: add missing clock slices for MMC2 + module clocks - drm/amd/display: fix issue where 252-255 values are clipped - drm/amd/display: reprogram VM config when system resume - - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window - - clk: actions: Don't reference clk_init_data after registration - - clk: sirf: Don't reference clk_init_data after registration - - clk: sprd: Don't reference clk_init_data after registration - - clk: zx296718: Don't reference clk_init_data after registration - - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL - - powerpc/rtas: use device model APIs and serialization during LPM - - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this function - - powerpc/pseries/mobility: use cond_resched when updating device tree - - pinctrl: tegra: Fix write barrier placement in pmx_writel - - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag + - [ppc64el] powernv/ioda2: Allocate TCE table levels on demand for default + DMA window + - [ppc64el] xmon: Check for HV mode when dumping XIVE info from OPAL + - [ppc64el] rtas: use device model APIs and serialization during LPM + - [ppc64el] futex: Fix warning: 'oldval' may be used uninitialized in this + function + - [ppc64el] pseries/mobility: use cond_resched when updating device tree + - [armhf,arm64] pinctrl: tegra: Fix write barrier placement in pmx_writel + - [ppc64el] eeh: Clear stale EEH_DEV_NO_HANDLER flag - vfio_pci: Restore original state on release - drm/nouveau/volt: Fix for some cards having 0 maximum voltage - - pinctrl: amd: disable spurious-firing GPIO IRQs - - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain - - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain + - [x86] pinctrl: amd: disable spurious-firing GPIO IRQs - drm/amd/display: support spdif - drm/amdgpu/si: fix ASIC tests - - powerpc/64s/exception: machine check use correct cfar for late handler + - [ppc64el] exception: machine check use correct cfar for late handler - pstore: fs superblock limits - - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks - - powerpc/pseries: correctly track irq state in default idle - - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c - - arm64: fix unreachable code issue with cmpxchg - - clk: at91: select parent if main oscillator or bypass is enabled - - powerpc: dump kernel log before carrying out fadump or kdump - - mbox: qcom: add APCS child device for QCS404 - - clk: sprd: add missing kfree + - [ppc64el] pseries: correctly track irq state in default idle + - [arm64] pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c + - [ppc64el] dump kernel log before carrying out fadump or kdump + - [arm64] mbox: qcom: add APCS child device for QCS404 - scsi: core: Reduce memory required for SCSI logging - dma-buf/sw_sync: Synchronize signal vs syncpt free - ext4: fix potential use after free after remounting with noblock_validity - - MIPS: Ingenic: Disable broken BTB lookup optimization. - - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean - - i2c-cht-wc: Fix lockdep warning - - mfd: intel-lpss: Remove D3cold delay - - PCI: tegra: Fix OF node reference leak + - [mips*] tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean + - [x86] i2c-cht-wc: Fix lockdep warning + - [x86] mfd: intel-lpss: Remove D3cold delay - HID: wacom: Fix several minor compiler warnings - - livepatch: Nullify obj->mod in klp_module_coming()'s error path - - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as writes - - soundwire: intel: fix channel number reported by hardware - - ARM: 8875/1: Kconfig: default to AEABI w/ Clang - - rtc: snvs: fix possible race condition - - rtc: pcf85363/pcf85263: fix regmap error in set_time + - [armel,armhf] 8898/1: mm: Don't treat faults reported from cache + maintenance as writes + - [armhf] rtc: snvs: fix possible race condition - HID: apple: Fix stuck function keys when using FN - - PCI: rockchip: Propagate errors for optional regulators - - PCI: histb: Propagate errors for optional regulators - - PCI: imx6: Propagate errors for optional regulators - - PCI: exynos: Propagate errors for optional PHYs - - security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb() - - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address + - [arm64] PCI: rockchip: Propagate errors for optional regulators + - [armhf] PCI: imx6: Propagate errors for optional regulators + - [armel,armhf] 8903/1: ensure that usable memory in bank 0 starts from a + PMD-aligned address - fat: work around race with userspace's read via blockdev while mounting - pktcdvd: remove warning on attempting to register non-passthrough dev - - hypfs: Fix error number left in struct pointer member - - crypto: hisilicon - Fix double free in sec_free_hw_sgl() - - kbuild: clean compressed initramfs image + - [s390x] hypfs: Fix error number left in struct pointer member - ocfs2: wait for recovering done after direct unlock request - - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K - - arm64: consider stack randomization for mmap base only when necessary - - mips: properly account for stack randomization and stack guard gap - - arm: properly account for stack randomization and stack guard gap - - arm: use STACK_TOP when computing mmap base address + - [arm64] consider stack randomization for mmap base only when necessary + - [mips*] properly account for stack randomization and stack guard gap + - [armel,armhf] properly account for stack randomization and stack guard + gap + - [armel,armhf] use STACK_TOP when computing mmap base address - block: mq-deadline: Fix queue restart handling - bpf: fix use after free in prog symbol exposure - cxgb4:Fix out-of-bounds MSI-X info array access @@ -1032,68 +917,62 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - sch_dsmark: fix potential NULL deref in dsmark_init() - udp: fix gso_segs calculations - vsock: Fix a lockdep warning in __vsock_release() - - net: dsa: rtl8366: Check VLAN ID and not ports - udp: only do GSO if # of segs > 1 - net/rds: Fix error handling in rds_ib_add_one() - - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() + - xen-netfront: do not use ~0U as error return value for + xennet_fill_frags() - tipc: fix unlimited bundling of small messages - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash - - soundwire: Kconfig: fix help format - - soundwire: fix regmap dependencies and align with other serial links - - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set - - smack: use GFP_NOFS while holding inode_smack::smk_lock - NFC: fix attrs checks in netlink interface - kexec: bail out upon SIGKILL when allocating memory. - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.79 - - s390/process: avoid potential reading of freed stack - - KVM: s390: Test for bad access register and size at the start of S390_MEM_OP - - s390/topology: avoid firing events before kobjs are created - - s390/cio: exclude subchannels with no parent from pseudo check - - KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts - - KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores - - KVM: PPC: Book3S HV: Don't lose pending doorbell request on migration on P9 - - KVM: X86: Fix userspace set invalid CR4 - - KVM: nVMX: handle page fault in vmread fix + - [s390x] process: avoid potential reading of freed stack + - [s390x] KVM: Test for bad access register and size at the start of + S390_MEM_OP + - [s390x] topology: avoid firing events before kobjs are created + - [s390x] cio: exclude subchannels with no parent from pseudo check + - [ppc64el] KVM: Book3S HV: Fix race in re-enabling XIVE escalation + interrupts + - [ppc64el] KVM: Book3S HV: Check for MMU ready on piggybacked virtual + cores + - [ppc64el] KVM: Book3S HV: Don't lose pending doorbell request on + migration on P9 + - [x86] KVM: Fix userspace set invalid CR4 + - [x86] KVM: nVMX: handle page fault in vmread fix - nbd: fix max number of supported devs - PM / devfreq: tegra: Fix kHz to Hz conversion - ASoC: Define a set of DAPM pre/post-up events - - ASoC: sgtl5000: Improve VAG power and mute control - - powerpc/mce: Fix MCE handling for huge pages - - powerpc/mce: Schedule work from irq_work - - powerpc/powernv: Restrict OPAL symbol map to only be readable by root - - powerpc/powernv/ioda: Fix race in TCE level allocation - - powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions - - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset + - [armhf] ASoC: sgtl5000: Improve VAG power and mute control + - [ppc64el] mce: Fix MCE handling for huge pages + - [ppc64el] mce: Schedule work from irq_work + - [ppc64el] powernv: Restrict OPAL symbol map to only be readable by root + - [ppc64el] powernv/ioda: Fix race in TCE level allocation + - [ppc64el] book3s64/mm: Don't do tlbie fixup for some hardware revisions - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file - - crypto: qat - Silence smp_processor_id() warning + - [x86] crypto: qat - Silence smp_processor_id() warning - crypto: skcipher - Unmap pages after an external error - - crypto: cavium/zip - Add missing single_release() - - crypto: caam - fix concurrency issue in givencrypt descriptor - - crypto: ccree - account for TEE not ready to report - - crypto: ccree - use the full crypt length value - - MIPS: Treat Loongson Extensions as ASEs + - [mips*el/loongson-3] Treat Loongson Extensions as ASEs - power: supply: sbs-battery: use correct flags field - power: supply: sbs-battery: only return health when battery present - tracing: Make sure variable reference alias has correct var_ref_idx - usercopy: Avoid HIGHMEM pfn warning - timer: Read jiffies once when forwarding base clk - - PCI: vmd: Fix shadow offsets to reflect spec changes + - [x86] PCI: vmd: Fix shadow offsets to reflect spec changes - PCI: Restore Resizable BAR size bits correctly for 1MB BARs - - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout + - [armhf] watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout - perf stat: Fix a segmentation fault when using repeat forever - - drm/omap: fix max fclk divider for omap36xx - - drm/msm/dsi: Fix return value check for clk_get_parent + - [armhf] drm/omap: fix max fclk divider for omap36xx + - [arm64] drm/msm/dsi: Fix return value check for clk_get_parent - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors - - drm/i915/gvt: update vgpu workload head pointer correctly + - [x86] drm/i915/gvt: update vgpu workload head pointer correctly - mmc: sdhci: improve ADMA error reporting - - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted" - xen/xenbus: fix self-deadlock after killing user process - ieee802154: atusb: fix use-after-free at disconnect - - s390/cio: avoid calling strlen on null pointer + - [s390x] cio: avoid calling strlen on null pointer - cfg80211: initialize on-stack chandefs - - arm64: cpufeature: Detect SSBS and advertise to userspace + - [arm64] cpufeature: Detect SSBS and advertise to userspace - ima: always return negative code for error - ima: fix freeing ongoing ahash_request - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() @@ -1106,9 +985,9 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - netfilter: nf_tables: allow lookups in dynamic sets - drm/amdgpu: Fix KFD-related kernel oops on Hawaii - drm/amdgpu: Check for valid number of registers to read - - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors - - pwm: stm32-lp: Add check in case requested period cannot be achieved - - x86/purgatory: Disable the stackleak GCC plugin for the purgatory + - pNFS: Ensure we do clear the return-on-close layout stateid on fatal + errors + - [x86] purgatory: Disable the stackleak GCC plugin for the purgatory - ntb: point to right memory window index - thermal: Fix use-after-free when unregistering thermal zone device - thermal_hwmon: Sanitize thermal_zone type @@ -1118,47 +997,41 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - sched/membarrier: Call sync_core only before usermode for same mm - sched/membarrier: Fix private expedited registration check - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() - - perf build: Add detection of java-11-openjdk-devel package - kernel/elfcore.c: include proper prototypes - - perf unwind: Fix libunwind build failure on i386 systems - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed - - KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP - - KVM: nVMX: Fix consistency check on injected exception error code + - [ppc64el] KVM: HV: XIVE: Free escalation interrupts before disabling the + VP + - [x86] KVM: nVMX: Fix consistency check on injected exception error code - nbd: fix crash when the blksize is zero - - powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() - - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag - - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure + - [ppc64el] pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() + - [ppc64el] radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag + - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on + failure - tick: broadcast-hrtimer: Fix a race in bc_set_next - perf tools: Fix segfault in cpu_cache_level__read() - perf stat: Reset previous counts on repeat with interval - - riscv: Avoid interrupts being erroneously enabled in handle_exception() - - arm64: ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 - - KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe - - arm64: docs: Document SSBS HWCAP - - arm64: fix SSBS sanitization - - arm64: Add sysfs vulnerability show for spectre-v1 - - arm64: add sysfs vulnerability show for meltdown - - arm64: enable generic CPU vulnerabilites support - - arm64: Always enable ssb vulnerability detection - - arm64: Provide a command line to disable spectre_v2 mitigation - - arm64: Advertise mitigation of Spectre-v2, or lack thereof - - arm64: Always enable spectre-v2 vulnerability detection - - arm64: add sysfs vulnerability show for spectre-v2 - - arm64: add sysfs vulnerability show for speculative store bypass - - arm64: ssbs: Don't treat CPUs with SSBS as unaffected by SSB - - arm64: Force SSBS on context switch - - arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 - - arm64/speculation: Support 'mitigations=' cmdline option + - [arm64] ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 + - [arm64] KVM: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe + - [arm64] docs: Document SSBS HWCAP + - [arm64] fix SSBS sanitization + - [arm64] Add sysfs vulnerability show for spectre-v1 + - [arm64] add sysfs vulnerability show for meltdown + - [arm64] enable generic CPU vulnerabilites support + - [arm64] Always enable ssb vulnerability detection + - [arm64] Provide a command line to disable spectre_v2 mitigation + - [arm64] Advertise mitigation of Spectre-v2, or lack thereof + - [arm64] Always enable spectre-v2 vulnerability detection + - [arm64] add sysfs vulnerability show for spectre-v2 + - [arm64] add sysfs vulnerability show for speculative store bypass + - [arm64] ssbs: Don't treat CPUs with SSBS as unaffected by SSB + - [arm64] Force SSBS on context switch + - [arm64] Use firmware to detect CPUs that are not affected by Spectre-v2 + - [arm64] speculation: Support 'mitigations=' cmdline option - vfs: Fix EOVERFLOW testing in put_compat_statfs64 - - coresight: etm4x: Use explicit barriers on enable/disable - - staging: erofs: fix an error handling in erofs_readdir() - - staging: erofs: some compressed cluster should be submitted for corrupted images - - staging: erofs: add two missing erofs_workgroup_put for corrupted images - - staging: erofs: detect potential multiref due to corrupted images - cfg80211: add and use strongly typed element iteration macros - cfg80211: Use const more consistently in for_each_element macros - - nl80211: validate beacon head + - nl80211: validate beacon head (CVE-2019-16746) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.80 - panic: ensure preemption is disabled during panic() - f2fs: use EINVAL for superblock with invalid magic @@ -1192,23 +1065,17 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - USB: usblcd: fix I/O after disconnect - USB: microtek: fix info-leak at probe - USB: dummy-hcd: fix power budget for SuperSpeed mode - - usb: renesas_usbhs: gadget: Do not discard queues in usb_ep_set_{halt,wedge}() - - usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior - USB: legousbtower: fix slab info leak at probe - USB: legousbtower: fix deadlock on disconnect - USB: legousbtower: fix potential NULL-deref on disconnect - USB: legousbtower: fix open after failed reset request - USB: legousbtower: fix use-after-free on release - - mei: me: add comet point (lake) LP device ids - - mei: avoid FW version request on Ibex Peak and earlier - - gpio: eic: sprd: Fix the incorrect EIC offset when toggling - - Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc - - staging: vt6655: Fix memory leak in vt6655_probe - - iio: adc: hx711: fix bug in sampling of data - - iio: adc: ad799x: fix probe error handling - - iio: adc: axp288: Override TS pin bias current for some models - - iio: light: opt3001: fix mutex unlock race - - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified + - [x86] mei: me: add comet point (lake) LP device ids + - [x86] mei: avoid FW version request on Ibex Peak and earlier + - [armhf,arm64] iio: adc: axp288: Override TS pin bias current for some + models + - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was + specified - perf llvm: Don't access out-of-scope array - perf inject jit: Fix JIT_CODE_MOVE filename - blk-wbt: fix performance regression in wbt scale_up/scale_down @@ -1217,124 +1084,113 @@ linux (4.19.81-1) UNRELEASED; urgency=medium - CIFS: Force reval dentry if LOOKUP_REVAL flag is set - kernel/sysctl.c: do not override max_threads provided by userspace - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event() - - firmware: google: increment VPD key_len properly - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source - - iio: adc: stm32-adc: move registers definitions - - iio: adc: stm32-adc: fix a race when using several adcs with dma and irq - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic - btrfs: fix incorrect updating of log root tree - btrfs: fix uninitialized ret in ref-verify - NFS: Fix O_DIRECT accounting of number of bytes read/written - - MIPS: Disable Loongson MMI instructions for kernel build - - MIPS: elf_hwcap: Export userspace ASEs + - [mips*] elf_hwcap: Export userspace ASEs - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags - ACPI/PPTT: Add support for ACPI 6.3 thread flag - - arm64: topology: Use PPTT to determine if PE is a thread - - Fix the locking in dcache_readdir() and friends + - [arm64] topology: Use PPTT to determine if PE is a thread + - vfs: Fix the locking in dcache_readdir() and friends - media: stkwebcam: fix runtime PM after driver unbind - - arm64/sve: Fix wrong free for task->thread.sve_state - - tracing/hwlat: Report total time spent in all NMIs during the sample - - tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency + - [arm64] sve: Fix wrong free for task->thread.sve_state + - [rt] tracing/hwlat: Report total time spent in all NMIs during the sample + - [rt] tracing/hwlat: Don't ignore outer-loop duration when calculating + max_latency - ftrace: Get a reference counter for the trace_array on filter files - tracing: Get trace_array reference for available_tracers files - hwmon: Fix HWMON_P_MIN_ALARM mask - - x86/asm: Fix MWAITX C-state hint value - - PCI: vmd: Fix config addressing when using bus offsets + - [x86] asm: Fix MWAITX C-state hint value + - [x86] PCI: vmd: Fix config addressing when using bus offsets - perf/hw_breakpoint: Fix arch_hw_breakpoint use-before-initialization https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.81 - nvme-pci: Fix a race in controller removal - scsi: ufs: skip shutdown if hba is not powered - scsi: megaraid: disable device when probe failed after enabled device - scsi: qla2xxx: Fix unbound sleep in fcport delete path. - - ARM: OMAP2+: Fix missing reset done flag for am3 and am43 - - ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage() - - ieee802154: ca8210: prevent memory leak - - ARM: dts: am4372: Set memory bandwidth limit for DISPC - - net: dsa: qca8k: Use up to 7 ports for all operations - - MIPS: dts: ar9331: fix interrupt-controller size + - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43 + - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage() - xen/efi: Set nonblocking callbacks - nl80211: fix null pointer dereference - mac80211: fix txq null pointer dereference - netfilter: nft_connlimit: disable bh on garbage collection - - net: dsa: rtl8366rb: add missing of_node_put after calling of_get_child_by_name - - mips: Loongson: Fix the link time qualifier of 'serial_exit()' - - net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() + - [mips*el/loongson-3] Fix the link time qualifier of 'serial_exit()' + - [arm64] net: hisilicon: Fix usage of uninitialized variable in function + mdio_sc_cfg_reg_write() - lib: textsearch: fix escapes in example code - r8152: Set macpassthru in reset_resume callback - - namespace: fix namespace.pl script to support relative paths - libata/ahci: Fix PCS quirk application - md/raid0: fix warning message for parameter default_layout - - Revert "drm/radeon: Fix EEH during kexec" - ocfs2: fix panic due to ocfs2_wq is null - ipv4: fix race condition between route lookup and invalidation - - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid - net: avoid potential infinite loop in tc_ctl_action() - - net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 - - net: bcmgenet: Set phydev->dev_flags only for internal PHYs - - net: i82596: fix dma_alloc_attr for sni_82596 - - net/ibmvnic: Fix EOI when running in XIVE mode. - net: ipv6: fix listify ip6_rcv_finish in case of forwarding - - net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow + - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume + flow - sctp: change sctp_prot .no_autobind with true - memfd: Fix locking when tagging pins - USB: legousbtower: fix memleak on disconnect - ALSA: hda/realtek - Add support for ALC711 - - ALSA: hda/realtek - Enable headset mic on Asus MJ401TA + - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers - ALSA: hda - Force runtime PM on Nvidia HDMI codecs - - usb: udc: lpc32xx: fix bad bit shift operation - USB: serial: ti_usb_3410_5052: fix port-close races - USB: ldusb: fix memleak on disconnect - USB: usblp: fix use-after-free on disconnect - USB: ldusb: fix read info leaks - - MIPS: tlbex: Fix build_restore_pagemask KScratch restore + - [mips*] tlbex: Fix build_restore_pagemask KScratch restore - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS - - scsi: zfcp: fix reaction on bit error threshold notification + - [s390x] scsi: zfcp: fix reaction on bit error threshold notification - scsi: sd: Ignore a failure to sync cache due to lack of authorization - scsi: core: save/restore command resid for error handling - scsi: core: try to get module before removing device - scsi: ch: Make it possible to open a ch device multiple times again - - Input: da9063 - fix capability and drop KEY_SLEEP - Input: synaptics-rmi4 - avoid processing unknown IRQs - - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() - - cfg80211: wext: avoid copying malformed SSIDs + - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133) - mac80211: Reject malformed SSID elements - - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 + - [x86] drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 - drm/ttm: Restore ttm prefaulting - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 - - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() + - drivers/base/memory.c: don't access uninitialized memmaps in + soft_offline_page_store() - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c - - mmc: cqhci: Commit descriptors before setting the doorbell - - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() + - mm/memory-failure.c: don't access uninitialized memmaps in + memory_failure() - mm/slub: fix a deadlock in show_slab_objects() - - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo - - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() - - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once - - xtensa: drop EXPORT_SYMBOL for outs*/ins* - - parisc: Fix vmap memory leak in ioremap()/iounmap() + - mm/page_owner: don't access uninitialized memmaps when reading + /proc/pagetypeinfo + - hugetlbfs: don't access uninitialized memmaps in + pfn_range_valid_gigantic() + - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if + mmaped more than once - EDAC/ghes: Fix Use after free in ghes_edac remove path - - arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT + - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT - CIFS: avoid using MID 0xFFFF - CIFS: Fix use after free of file info structures - perf/aux: Fix AUX output stopping - tracing: Fix race in perf_trace_buf initialization - dm cache: fix bugs when a GFP_NOWAIT allocation fails - - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area - - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu - - pinctrl: cherryview: restore Strago DMI workaround for all versions - - pinctrl: armada-37xx: fix control of pins 32 and up - - pinctrl: armada-37xx: swap polarity on LED group - - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() - - Btrfs: add missing extents release on file extent cluster relocation error - - Btrfs: check for the full sync flag while holding the inode lock during fsync + - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area + - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu + - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions + - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up + - [arm64] pinctrl: armada-37xx: swap polarity on LED group + - btrfs: block-group: Fix a memory leak due to missing + btrfs_put_block_group() + - Btrfs: add missing extents release on file extent cluster relocation + error + - Btrfs: check for the full sync flag while holding the inode lock during + fsync - btrfs: tracepoints: Fix bad entry members of qgroup events - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown - xen/netback: fix error path of xenvif_connect_data() - PCI: PM: Fix pci_power_up() - blk-rq-qos: fix first node deletion of rq_qos_del() - - RDMA/cxgb4: Do not dma memory off of the stack + - RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075) [ Romain Perier ] * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530)