deiban packaging of linux kernel with sysmocom modifications
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

23017 lines
1.2 MiB

linux (4.19.146-1) UNRELEASED; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.133
- [s390x] KVM: s390: reduce number of IO pins to 1
- regmap: fix alignment issue
- [arm64,armhf] drm/tegra: hub: Do not enable orphaned window group
- [arm64,armhf] gpu: host1x: Detach driver on unregister
- spi: spidev: fix a race between spidev_release and spidev_remove
- spi: spidev: fix a potential use-after-free in spidev_release()
- ixgbe: protect ring accesses with READ- and WRITE_ONCE
- i40e: protect ring accesses with READ- and WRITE_ONCE
- [x86] drm: panel-orientation-quirks: Add quirk for Asus T101HA panel
- [x86] drm: panel-orientation-quirks: Use generic orientation-data for
Acer S1003
- cifs: update ctime and mtime during truncate
- [armhf] imx6: add missing put_device() call in imx6q_suspend_init()
- scsi: mptscsih: Fix read sense data size
- [arm64] usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work
- block: release bip in a right way in error path
- nvme-rdma: assign completion vector correctly
- [x86] entry: Increase entry_stack size to a full page
- net: cxgb4: fix return error value in t4_prep_fw
- smsc95xx: check return value of smsc95xx_reset
- smsc95xx: avoid memory leak in smsc95xx_bind
- [arm64] net: hns3: fix use-after-free when doing self test
- [x86] ALSA: compress: fix partial_drain completion state
- nbd: Fix memory leak in nbd_add_socket
- cxgb4: fix all-mask IP address comparison
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails
- [arm64] net: macb: mark device wake capable when "magic-packet" property
present
- ALSA: opl3: fix infoleak in opl3
- ALSA: hda - let hs_mic be picked ahead of hp_mic
- ALSA: usb-audio: add quirk for MacroSilicon MS2109
- [arm64] KVM: Fix definition of PAGE_HYP_DEVICE
- [arm64] KVM: Stop clobbering x0 for HVC_SOFT_RESTART
- [x86] KVM: bit 8 of non-leaf PDPEs is not reserved
- [x86] KVM: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit
mode
- [x86] KVM: Mark CR4.TSD as being possibly owned by the guest
- kallsyms: Refactor kallsyms_show_value() to take cred
- kernel: module: Use struct_size() helper
- module: Refactor section attr into bin attribute
- module: Do not expose section addresses to non-CAP_SYSLOG
- kprobes: Do not expose probe addresses to non-CAP_SYSLOG
- bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok()
- btrfs: fix fatal extent_buffer readahead vs releasepage race
- drm/radeon: fix double free
- dm: use noio when sending kobject event
- [s390x] mm: fix huge pte soft dirty copying
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.134
- perf: Make perf able to build with latest libbfd
- genetlink: remove genl_bind
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg
- l2tp: remove skb_dst_set() from l2tp_xmit_skb()
- llc: make sure applications use ARPHRD_ETHER
- net: Added pointer check for dst->ops->neigh_lookup in
dst_neigh_lookup_skb
- net_sched: fix a memory leak in atm_tc_init()
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem
- tcp: fix SO_RCVLOWAT possible hangs under high mem pressure
- tcp: make sure listeners don't initialize congestion-control state
- tcp: md5: add missing memory barriers in
tcp_md5_do_add()/tcp_md5_hash_key()
- tcp: md5: do not send silly options in SYNCOOKIES
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers
- tcp: md5: allow changing MD5 keys in all socket states
- cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (CVE-2020-14356)
(Closes: #966846)
- cgroup: Fix sock_cgroup_data on big-endian.
- sched: consistently handle layer3 header accesses in the presence of
VLANs
- vlan: consolidate VLAN parsing code and limit max parsing depth
- [arm64] drm/msm: fix potential memleak in error branch
- [arm64] alternatives: use subsections for replacement sequences
- [arm64,x86] tpm_tis: extra chip->ops check on error path in
tpm_tis_core_init
- gfs2: read-only mounts should grab the sd_freeze_gl glock
- [i386] i2c: eg20t: Load module automatically if ID matches
- [arm64] alternatives: don't patch up internal branches
- [armhf] iio: mma8452: Add missed iio_device_unregister() call in
mma8452_probe()
- [armhf] net: dsa: bcm_sf2: Fix node reference count
- of: of_mdio: Correct loop scanning logic
- Revert "usb/ohci-platform: Fix a warning when hibernating"
- [arm64,armhf] Revert "usb/xhci-plat: Set PM runtime as active on resume"
- Revert "usb/ehci-platform: Set PM runtime as active on resume"
- [arm64,armhf] net: sfp: add support for module quirks
- [arm64,armhf] net: sfp: add some quirks for GPON modules
- HID: quirks: Remove ITE 8595 entry from hid_have_special_driver
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp
(0951:16d8)
- mmc: sdhci: do not enable card detect interrupt for gpio cd type
- ALSA: usb-audio: Rewrite registration quirk handling
- [x86] ACPI: video: Use native backlight on Acer Aspire 5783z
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha
S
- [x86] ACPI: video: Use native backlight on Acer TravelMate 5735Z
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight
S
- [arm64,armhf] phy: sun4i-usb: fix dereference of pointer phy0 before it
is null checked
- [armhf] spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock
rate
- [x86] staging: comedi: verify array index is correct before using it
- regmap: debugfs: Don't sleep while atomic for fast_io regmaps
- [x86] copy_xstate_to_kernel: Fix typo which caused GDB regression
- apparmor: ensure that dfa state tables have entries
- perf stat: Zero all the 'ena' and 'run' array slot stats for interval
mode
- [armhf] mtd: rawnand: marvell: Use nand_cleanup() when the device is not
yet registered
- [armhf] mtd: rawnand: marvell: Fix probe error path
- mtd: rawnand: timings: Fix default tR_max and tCCS_min timings
- HID: magicmouse: do not set up autorepeat
- HID: quirks: Always poll Obins Anne Pro 2 keyboard
- HID: quirks: Ignore Simply Automated UPB PIM
- ALSA: line6: Perform sanity check for each URB creation
- ALSA: line6: Sync the pending work cancel at disconnection
- ALSA: usb-audio: Fix race against the error recovery URB submission
- [x86] ALSA: hda/realtek - change to suitable link model for ASUS platform
- [x86] ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534
- [arm*] usb: dwc2: Fix shutdown callback in platform
- [arm64,armhf] usb: chipidea: core: add wakeup support for extcon
- USB: serial: iuu_phoenix: fix memory corruption
- USB: serial: cypress_m8: enable Simply Automated UPB PIM
- USB: serial: ch341: add new Product ID for CH340
- USB: serial: option: add GosunCn GM500 series
- USB: serial: option: add Quectel EG95 LTE modem
- [x86] virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers
to match upstream
- [x86] virt: vbox: Fix guest capabilities mask check
- [arm64] virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for
rproc serial
- ovl: inode reference leak in ovl_is_inuse true case.
- ovl: relax WARN_ON() when decoding lower directory file handle
- ovl: fix unneeded call to ovl_change_flags()
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS
- Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()"
(CVE-2020-10781)
- [x86] mei: bus: don't clean driver pointer
- timer: Prevent base->clk from moving backward
- timer: Fix wheel index calculation on last level
- [mips*] Fix build for LTS kernel caused by backporting lpj adjustment
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute
- [powerpc*] book3s64/pkeys: Fix pkey_access_permitted() for execute
disable pkey
- [x86] intel_th: pci: Add Jasper Lake CPU support
- [x86] intel_th: pci: Add Tiger Lake PCH-H support
- [x86] intel_th: pci: Add Emmitsburg PCH support
- [x86] intel_th: Fix a NULL dereference when hub driver is not loaded
- [arm*] thermal/drivers/cpufreq_cooling: Fix wrong frequency converted
from power
- [arm64] ptrace: Override SPSR.SS when single-stepping is enabled
- [arm64] ptrace: Consistently use pseudo-singlestep exceptions
- [arm64] compat: Ensure upper 32 bits of x0 are zero on syscall return
- sched: Fix unreliable rseq cpu_id for new tasks
- sched/fair: handle case of task_h_load() returning 0
- genirq/affinity: Handle affinity setting on inactive interrupts
correctly
- printk: queue wake_up_klogd irq_work only if per-CPU areas are ready
- libceph: don't omit recovery_deletes in target_copy()
- rxrpc: Fix trace string
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.135
- mac80211: allow rx of mesh eapol frames with default rx key
- scsi: scsi_transport_spi: Fix function pointer check
- net: sky2: initialize return of gm_phy_read
- drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout
- fuse: fix weird page warning
- [x86] irqdomain/treewide: Keep firmware node unconditionally allocated
- SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct
IO compeletion")
- tipc: clean up skb list lock handling on send path
- IB/umem: fix reference count leak in ib_umem_odp_get()
- uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to
fix GDB regression
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check
- btrfs: fix double free on ulist after backref resolution failure
- btrfs: fix mount failure caused by race with umount
- btrfs: fix page leaks after failure to lock page for delalloc
- bnxt_en: Fix race when modifying pause settings.
- [x86] hippi: Fix a size used in a 'pci_free_consistent()' in an error
handling path
- ax88172a: fix ax88172a_unbind() failures
- ieee802154: fix one possible memleak in adf7242_probe
- [arm64,armhf] drm: sun4i: hdmi: Fix inverted HPD result
- [arm64,armhf] net: smc91x: Fix possible memory leak in smc_drv_probe()
- bonding: check error value of register_netdevice() immediately
- qed: suppress "don't support RoCE & iWARP" flooding on HW init
- ipvs: fix the connection sync failed in some cases
- bonding: check return value of register_netdevice() in bond_newlink()
- serial: exar: Fix GPIO configuration for Sealevel cards based on
XR17V35X
- [arm64,x86] HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor
override
- HID: alps: support devices with report id 2
- HID: steam: fixes race in handling device list.
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards
- [arm64] dmaengine: tegra210-adma: Fix runtime PM imbalance on error
- Input: add `SW_MACHINE_COVER`
- regmap: dev_get_regmap_match(): fix string comparison
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow
- [amd64] dmaengine: ioat setting ioat timeout as module parameter
- [x86] Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen
- [arm64] Use test_tsk_thread_flag() for checking TIF_SINGLESTEP
- [arm*] binder: Don't use mmput() from shrinker function.
- usb: xhci: Fix ASM2142/ASM3142 DMA addressing
- Revert "cifs: Fix the target file was deleted when rename failed."
(Closes: #966917)
- [x86] staging: wlan-ng: properly check endpoint types
- [x86] staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG
shift
- [x86] staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support
- [x86] staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG
shift
- [x86] staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG
shift
- serial: 8250: fix null-ptr-deref in serial8250_start_tx()
- fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
- vt: Reject zero-sized screen buffer size.
- mm/memcg: fix refcount error while moving and swapping
- mm: memcg/slab: synchronize access to kmem_cache dying flag using a
spinlock
- mm: memcg/slab: fix memory leak at non-root kmem_cache destroy
- io-mapping: indicate mapping failure
- drm/amdgpu: Fix NULL dereference in dpm sysfs handlers
- [x86] vmlinux.lds: Page-align end of ..page_aligned sections
- [x86] ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on
the Lenovo Miix 2 10
- dm integrity: fix integrity recalculation that is improperly skipped
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
- ath9k: Fix regression with Atheros 9271
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.136
- AX.25: Fix out-of-bounds read in ax25_connect()
- AX.25: Prevent out-of-bounds read in ax25_sendmsg()
- dev: Defer free of skbs in flush_backlog
- ip6_gre: fix null-ptr-deref in ip6gre_init_net()
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs
- net: udp: Fix wrong clean up for IS_UDPLITE macro
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
- tcp: allow at most one TLP probe per flight
- AX.25: Prevent integer overflows in connect and sendmsg
- sctp: shrink stream outq only when new outcnt < old outcnt
- sctp: shrink stream outq when fails to do addstream reconf
- udp: Copy has_conns in reuseport_grow().
- udp: Improve load balancing for SO_REUSEPORT.
- rtnetlink: Fix memory(net_device) leak when ->newlink fails
- regmap: debugfs: check count when read regmap file
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.137
- [x86] crypto: ccp - Release all allocated memory if sha type is invalid
(CVE-2019-18808)
- media: rc: prevent memory leak in cx23888_ir_probe (CVE-2019-19054)
- iio: imu: adis16400: fix memory leak (CVE-2019-19061)
- [x86] drm/amdgpu: fix multiple memory leaks in acp_hw_init
(CVE-2019-19067)
- tracing: Have error path in predicate_parse() free its allocated memory
(CVE-2019-19072)
- ath9k_htc: release allocated buffer if timed out (CVE-2019-19073)
- ath9k: release allocated buffer if timed out (CVE-2019-19074)
- drm/amd/display: prevent memory leak (CVE-2019-19082)
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference
(CVE-2019-19813, CVE-2019-19816)
- sctp: implement memory accounting on tx path (CVE-2019-3874)
- Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
- 9p/trans_fd: Fix concurrency del of req_list in
p9_fd_cancelled/p9_read_work
- wireless: Use offsetof instead of custom macro.
- [armel,armhf] 8986/1: hw_breakpoint: Don't invoke overflow handler on
uaccess watchpoints
- Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
- drm: hold gem reference until object is no longer accessed
- rds: Prevent kernel-infoleak in rds_notify_queue_get()
- xfs: fix missed wakeup on l_flush_wait
- xfrm: Fix crash when the hold queue is used.
- net/mlx5: Verify Hardware supports requested ptp function on a given pin
- net: lan78xx: add missing endpoint sanity check
- net: lan78xx: fix transfer-buffer memory leak
- mlx4: disable device on shutdown
- bpf: Fix map leak in HASH_OF_MAPS map
- mac80211: mesh: Free ie data when leaving mesh
- mac80211: mesh: Free pending skb when destroying a mpath
- [arm64] alternatives: move length validation inside the subsection
- [arm64] csum: Fix handling of bad packets
- Bluetooth: fix kernel oops in store_pending_adv_report
- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
- qed: Disable "MFW indication via attention" SPAM every 5 minutes
- [amd64] x86/unwind/orc: Fix ORC for newly forked tasks
- cxgb4: add missing release on skb in uld_send()
- xen-netfront: fix potential deadlock in xennet_remove()
- [x86] KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is
hw disabled
- [x86] i8259: Use printk_deferred() to prevent deadlock
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.138
- random32: update the net random state on interrupt and activity
(CVE-2020-16166)
- [armel] ARM: percpu.h: fix build error
- random: fix circular include dependency on arm64 after addition of
percpu.h
- random32: remove net_rand_state from the latent entropy gcc plugin
- random32: move the pseudo-random 32-bit definitions to prandom.h
- ext4: fix direct I/O read error
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.139
- USB: serial: qcserial: add EM7305 QDL product ID
- USB: iowarrior: fix up report size handling for some devices
- usb: xhci: define IDs for various ASMedia host controllers
- usb: xhci: Fix ASMedia ASM1142 DMA addressing
- Revert "ALSA: hda: call runtime_allow() for all hda controllers"
- [arm*] staging: android: ashmem: Fix lockdep warning for write operation
- Bluetooth: Fix slab-out-of-bounds read in
hci_extended_inquiry_result_evt()
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
- Bluetooth: Prevent out-of-bounds read in
hci_inquiry_result_with_rssi_evt()
- [arm*] binder: Prevent context manager from incrementing ref 0
- vgacon: Fix for missing check in scrollback handling (CVE-2020-14331)
- mtd: properly check all write ioctls for permissions
- net/9p: validate fds in p9_fd_open
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some
reason
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure
- usb: hso: check for return value in hso_serial_common_create()
- firmware: Fix a reference count leak.
- cfg80211: check vendor command doit pointer before use
- igb: reinit_locked() should be called with rtnl_lock
- atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
- tools lib traceevent: Fix memory leak in process_dynamic_array_len
- [x86] Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23)
- xattr: break delegations in {set,remove}xattr
- ipv4: Silence suspicious RCU usage warning
- ipv6: fix memory leaks on IPV6_ADDRFORM path
- vxlan: Ensure FDB dump is performed under RCU
- net: lan78xx: replace bogus endpoint lookup
- [x86] hv_netvsc: do not use VF device if link is down
- net: gre: recompute gre csum for sctp over gre tunnels
- [arm64] net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task()
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
- Revert "vxlan: fix tos value before xmit"
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
- i40e: add num_vectors checker in iwarp handler
- i40e: Wrong truncation from u16 to u8
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
- i40e: Memory leak in i40e_config_iwarp_qvlist
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.140
- tracepoint: Mark __tracepoint_string's __used
- HID: input: Fix devices that return multiple bytes in battery report
- cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()
- [x86] mce/inject: Fix a wrong assignment of i_mce.status
- sched/fair: Fix NOHZ next idle balance
- sched: correct SD_flags returned by tl->sd_flags()
- EDAC: Fix reference count leaks
- [x86] platform/x86: intel-hid: Fix return value check in
check_acpi_dev()
- [x86] platform/x86: intel-vbtn: Fix return value check in
check_acpi_dev()
- [armhf] drm/tilcdc: fix leak & null ref in panel_connector_get_modes
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set
- loop: be paranoid on exit and prevent new additions / removals
- fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
- drm/amdgpu: avoid dereferencing a NULL pointer
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
- [x86] crypto: aesni - Fix build with LLVM_IAS=1
- video: fbdev: neofb: fix memory leak in neo_scan_monitor()
- md-cluster: fix wild pointer of unlock_all_bitmaps()
- [arm64] dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT
binding
- [armhf] drm/etnaviv: fix ref count leak via pm_runtime_get_sync
- drm/nouveau: fix multiple instances of reference count leaks
- drm/debugfs: fix plain echo to connector "force" attribute
- drm/radeon: disable AGP by default
- mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero
- brcmfmac: To fix Bss Info flag definition Bug
- brcmfmac: set state of hanger slot to FREE when flushing PSQ
- iwlegacy: Check the return value of pcie_capability_read_*()
- [arm64,armhf] gpu: host1x: debug: Fix multiple channels emitting
messages simultaneously
- usb: gadget: net2280: fix memory leak on probe error handling paths
- dyndbg: fix a BUG_ON in ddebug_describe_flags
- bcache: fix super block seq numbers comparision in register_cache_set()
- [arm64,x86] ACPICA: Do not increment operation_region reference counts
for field units
- [arm64] drm/msm: ratelimit crtc event overflow error
- [x86] agp/intel: Fix a memory leak on module initialisation failure
- ath10k: Acquire tx_lock in tx error paths
- [armhf] drm/etnaviv: Fix error path on failure to enable bus clk
- [arm64] drm/arm: fix unintentional integer overflow on left shift
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
- [powerpc*] cxl: Fix kobject memleak
- drm/radeon: fix array out-of-bounds read and write issues
- ipvs: allow connection reuse for unconfirmed conntrack
- xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork
- xfs: fix reflink quota reservation accounting error
- RDMA/rxe: Skip dgid check in loopback mode
- PCI: Fix pci_cfg_wait queue locking problem
- leds: core: Flush scheduled work for system suspend
- [arm64,armhf] drm: panel: simple: Fix bpc for LG LB070WV8 panel
- [armhf] phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY
- scsi: scsi_debug: Add check for sdebug_max_queue during module init
- mwifiex: Prevent memory corruption handling keys
- [powerpc*] vdso: Fix vdso cpu truncation
- RDMA/qedr: SRQ's bug fixes
- RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send
queue
- [x86] staging: rtl8192u: fix a dubious looking mask before a shift
- PCI/ASPM: Add missing newline in sysfs 'policy'
- [powerpc*] book3s64/pkeys: Use PVR check instead of cpu feature
- USB: serial: iuu_phoenix: fix led-activity helpers
- usb: core: fix quirks_param_set() writing to a const pointer
- [armhf] thermal: ti-soc-thermal: Fix reversed condition in
ti_thermal_expose_sensor()
- [mips*] OCTEON: add missing put_device() call in
dwc3_octeon_device_init()
- [arm*] usb: dwc2: Fix error path in gadget registration
- [arm64,armhf] net: dsa: mv88e6xxx: MV88E6097 does not support jumbo
configuration
- RDMA/core: Fix return error value in _ib_modify_qp() to negative
- Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags
- Bluetooth: hci_serdev: Only unregister device if it was registered
- [x86] PCI: Release IVRS table in AMD ACS quirk
- [s390x] qeth: don't process empty bridge port events
- [arm64,armhf] wl1251: fix always return 0 error
- [amd64] net: ethernet: aquantia: Fix wrong return value
- liquidio: Fix wrong return value in cn23xx_get_pf_num()
- dlm: Fix kobject memleak
- ocfs2: fix unbalanced locking
- [arm64,armhf] pinctrl-single: fix pcs_parse_pinconf() return value
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk()
- [x86] fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
- [amd64] crypto: aesni - add compatibility with IAS
- af_packet: TPACKET_V3: fix fill status rwlock imbalance
- net/nfc/rawsock.c: add CAP_NET_RAW check.
- net: Set fput_needed iff FDPUT_FPUT is set
- net: refactor bind_bucket fastreuse into helper
- net: initialize fastreuse on inet_inherit_port
- USB: serial: cp210x: re-enable auto-RTS on open
- USB: serial: cp210x: enable usb generic throttle/unthrottle
- [x86] ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
- [x86] crypto: qat - fix double free in qat_uclo_create_batch_init_list
- [x86] crypto: ccp - Fix use of merged scatterlists
- [arm64] crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not
specified
- bitfield.h: don't compile-time validate _val in FIELD_FIT
- fs/minix: check return value of sb_getblk()
- fs/minix: don't allow getting deleted inodes
- fs/minix: reject too-large maximum file size
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB
- 9p: Fix memory leak in v9fs_mount
- drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
- NFS: Don't move layouts to plh_return_segs list while in use
- NFS: Don't return layout segments that are in use
- [arm64] cpufreq: dt: fix oops on armada37xx
- include/asm-generic/vmlinux.lds.h: align ro_after_init
- spi: spidev: Align buffers for DMA
- [x86] irqdomain/treewide: Free firmware node after domain removal
- xen/balloon: fix accounting in alloc_xenballooned_pages error path
- xen/balloon: make the balloon wait interruptible
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.141
- smb3: warn on confusing error scenario with sec=krb5
- genirq/affinity: Make affinity setting if activated opt-in
- [arm64,x86] PCI: hotplug: ACPI: Fix context refcounting in
acpiphp_grab_context()
- PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken
- PCI: Add device even if driver attach failed
- [arm64] PCI: qcom: Define some PARF params needed for ipq8064 SoC
- [arm64] PCI: qcom: Add support for tx term offset for rev 2.1.0
- PCI: Probe bridge window attributes once at enumeration-time
- btrfs: free anon block device right after subvolume deletion
- btrfs: don't allocate anonymous block device for user invisible roots
- btrfs: ref-verify: fix memory leak in add_block_entry
- btrfs: don't traverse into the seed devices in show_devname
- btrfs: open device without device_list_mutex
- btrfs: fix messages after changing compression level by remount
- btrfs: only search for left_info if there is no right_info in
try_merge_free_space (CVE-2019-19448)
- btrfs: fix memory leaks after failure to lookup checksums during inode
logging
- btrfs: fix return value mixup in btrfs_get_extent
- cifs: Fix leak when handling lease break for cached root fid
- [powerpc*] Allow 4224 bytes of stack expansion for the signal frame
- [powerpc*] Fix circular dependency between percpu.h and mmu.h
- [arm64] net: ethernet: stmmac: Disable hardware multicast filter
- [arm64,armhf] net: stmmac: dwmac1000: provide multicast filter fallback
- net/compat: Add missing sock updates for SCM_RIGHTS
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
- bcache: allocate meta data pages as compound pages
- bcache: fix overflow in offset_to_stripe()
- mac80211: fix misplaced while instead of if
- driver core: Avoid binding drivers to dead devices
- [mips*] CPU#0 is not hotpluggable
- ocfs2: change slot number type s16 to u16
- mm/page_counter.c: fix protection usage propagation
- ftrace: Setup correct FTRACE_FL_REGS flags for module
- kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
- tracing/hwlat: Honor the tracing_cpumask
- tracing: Use trace_sched_process_free() instead of exit() for pid
tracing
- [x86] watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in
watchdog_info.options
- [x86] watchdog: f71808e_wdt: remove use of wrong watchdog_info option
- [x86] watchdog: f71808e_wdt: clear watchdog timeout occurred flag
- [powerpc*] pseries: Fix 64 bit logical memory block panic
- module: Correctly truncate sysfs sections output
- [armhf] drm/imx: imx-ldb: Disable both channels for split mode in
enc->disable()
- RDMA/ipoib: Return void from ipoib_ib_dev_stop()
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah()
- USB: serial: ftdi_sio: make process-packet buffer unsigned
- USB: serial: ftdi_sio: clean up receive processing
- [armhf] gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq
handlers
- dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue()
- [amd64] iommu/vt-d: Enforce PASID devTLB field mask
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying
targetport
- watchdog: initialize device before misc_register
- Input: sentelic - fix error return when fsp_reg_write fails
- [x86] drm/vmwgfx: Use correct vmw_legacy_display_unit pointer
- [x86] drm/vmwgfx: Fix two list_for_each loop exit tests
- [arm64] net: qcom/emac: add missed clk_disable_unprepare in error path
of emac_clks_phase1_init
- nfs: Fix getxattr kernel panic and memory overflow (CVE-2020-25212)
- fs/minix: set s_maxbytes correctly
- fs/minix: fix block limit check for V1 filesystems
- fs/minix: remove expected error message in block_to_path()
- fs/ufs: avoid potential u32 multiplication overflow
- khugepaged: retract_page_tables() remember to test exit
- [arm64] dts: marvell: espressobin: add ethernet alias
- [x86] drm: Added orientation quirk for ASUS tablet model T103HAF
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.142
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
- perf probe: Fix memory leakage when the probe point is not found
- khugepaged: khugepaged_test_exit() check mmget_still_valid()
- khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
- btrfs: export helpers for subvolume name/id resolution
- btrfs: don't show full path of bind mounts in subvol=
- btrfs: Move free_pages_out label in inline extent handling branch in
compress_file_range
- btrfs: inode: fix NULL pointer dereference if inode doesn't need
compression
- btrfs: sysfs: use NOFS for device creation
- romfs: fix uninitialized memory leak in romfs_dev_read()
- kernel/relay.c: fix memleak on destroy relay channel
- mm: include CMA pages in lowmem_reserve at boot
- mm, page_alloc: fix core hung in free_pcppages_bulk()
- ext4: fix checking of directory entry validity for inline directories
- jbd2: add the missing unlock_buffer() in the error path of
jbd2_write_superblock()
- [s390x] scsi: zfcp: Fix use-after-free in request timeout handlers
- kthread: Do not preempt current task if it is going to call schedule()
- spi: Prevent adding devices below an unregistering controller
- scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices
- [arm*] scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM
- media: budget-core: Improve exception handling in budget_register()
- Input: psmouse - add a newline when printing 'proto' by sysfs
- svcrdma: Fix another Receive buffer leak
- xfs: fix inode quota reservation checks
- jffs2: fix UAF problem
- ceph: fix use-after-free for fsc->mdsc
- [x86] cpufreq: intel_pstate: Fix cpuinfo_max_freq when
MSR_TURBO_RATIO_LIMIT is 0
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases
- virtio_ring: Avoid loop when vq is broken in virtqueue_poll
- xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
- fs/signalfd.c: fix inconsistent return codes for signalfd4
- ext4: fix potential negative array index in do_split() (CVE-2020-14314)
- ext4: don't allow overlapping system zones
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN
- i40e: Fix crash during removing i40e driver
- [armhf] net: fec: correct the error path for regulator disable in probe
- bonding: show saner speed for broadcast mode
- bonding: fix a potential double-unregister
- [s390x] runtime_instrumentation: fix storage key handling
- [s390x] ptrace: fix storage key handling
- [x86] ASoC: intel: Fix memleak in sst_media_open
- [amd64,arm64] vfio/type1: Add proper error unwind for
vfio_iommu_replay()
- [x86] kvm: Toggling CR4.SMAP does not load PDPTEs in PAE mode
- [x86] kvm: Toggling CR4.PKE does not load PDPTEs in PAE mode
- efi: avoid error message when booting under Xen
- afs: Fix NULL deref in afs_dynroot_depopulate()
- bonding: fix active-backup failover for current ARP slave
- net: ena: Prevent reset after device destruction
- [x86] hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit()
- [armhf] net: dsa: b53: check for timeout
- [powerpc*] pseries: Do not initiate shutdown when system is running on
UPS
- efi: add missed destroy_workqueue when efisubsys_init fails
- epoll: Keep a reference on files added to the check list
- do_epoll_ctl(): clean the failure exits up a bit
- mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
- xen: don't reschedule in preemption off sections
- clk: Evict unregistered clks from parent caches
- KVM: Pass MMU notifier range flags to kvm_unmap_hva_range()
- [arm64] KVM: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.143
- [powerpc*] 64s: Don't init FSCR_DSCR in __init_FSCR()
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY
- net: Fix potential wrong skb->protocol in skb_vlan_untag()
- net/smc: Prevent kernel-infoleak in __smc_diag_dump()
- tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
- net: ena: Make missed_tx stat incremental
- ipvlan: fix device features
- [x86] mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs
- [powerpc*] xive: Ignore kmemleak false positives
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad
DMA value in debiirq()
- blktrace: ensure our debugfs dir exists
- scsi: target: tcmu: Fix crash on ARM during cmd completion
- [arm*] iommu/iova: Don't BUG on invalid PFNs
- [amd64] drm/amdkfd: Fix reference count leaks.
- drm/radeon: fix multiple reference count leak
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl
- drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
- xfs: Don't allow logging of XFS_ISTALE inodes
- f2fs: fix error path in do_recover_data()
- PCI: Fix pci_create_slot() reference count leak
- rtlwifi: rtl8192cu: Prevent leaking urb
- [mips*] vdso: Fix resource leaks in genvdso.c
- cec-api: prevent leaking memory through hole in structure
- HID: quirks: add NOGET quirk for Logitech GROUP
- f2fs: fix use-after-free issue
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit
- drm/nouveau: Fix reference count leak in nouveau_connector_detect
- btrfs: file: reserve qgroup space after the hole punch range is locked
- scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
- ceph: fix potential mdsc use-after-free crash
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
- [x86] EDAC/ie31200: Fallback if host bridge device is already
initialized
- [arm64] KVM: Fix symbol dependency in __hyp_call_panic_nvhe
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative
value
- [arm64] drm/msm/adreno: fix updating ring fence
- nvme-fc: Fix wrong return value in __nvme_fc_init_request()
- null_blk: fix passing of REQ_FUA flag in null_handle_rq
- jbd2: make sure jh have b_transaction set in refile/unfile_buffer
- ext4: don't BUG on inconsistent journal feature
- ext4: handle read only external journal device
- jbd2: abort journal if free a async write error metadata buffer
- ext4: handle option set by mount flags correctly
- ext4: handle error of ext4_setup_system_zone() on remount
- ext4: correctly restore system zone info when remount fails
- fs: prevent BUG_ON in submit_bh_wbc()
- [s390x] cio: add cond_resched() in the slow_eval_known_fn() loop
- scsi: fcoe: Fix I/O path allocation
- scsi: ufs: Fix possible infinite loop in ufshcd_hold
- scsi: ufs: Improve interrupt handling for shared interrupts
- scsi: ufs: Clean up completed request without interrupt notification
- scsi: qla2xxx: Check if FW supports MQ before enabling
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
- macvlan: validate setting of multiple remote source MAC addresses
- [powerpc*] perf: Fix soft lockups due to missed interrupt accounting
- block: loop: set discard granularity and alignment for block device
backed loop
- [arm64,x86] HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON
commands
- blk-mq: order adding requests to hctx->dispatch and checking
SCHED_RESTART
- btrfs: reset compression level for lzo on remount
- btrfs: fix space cache memory leak after transaction abort
- fbcon: prevent user font height or width change from causing potential
out-of-bounds access
- vt: defer kfree() of vc_screenbuf in vc_do_resize()
- vt_ioctl: change VT_RESIZEX ioctl to check for error return from
vc_resize()
- [armhf] serial: samsung: Removes the IRQ not found warning
- [arm*] serial: pl011: Fix oops on -EPROBE_DEFER
- [arm*] serial: pl011: Don't leak amba_ports entry on driver register
error
- serial: 8250_exar: Fix number of ports for Commtech PCIe cards
- serial: 8250: change lock order in serial8250_do_startup()
- writeback: Protect inode->i_io_list with inode->i_lock
- writeback: Avoid skipping inode writeback
- writeback: Fix sync livelock due to b_dirty_time processing
- XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt
XEN data pointer which contains XEN specific information.
- usb: host: xhci: fix ep context print mismatch in debugfs
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set
- xhci: Always restore EP_SOFT_CLEAR_TOGGLE even if ep reset failed
- PM: sleep: core: Fix the handling of pending runtime resume requests
- device property: Fix the secondary firmware node handling in
set_primary_fwnode()
- [x86] genirq/matrix: Deal with the sillyness of for_each_cpu() on UP
- drm/amdgpu: Fix buffer overflow in INFO ioctl
- USB: yurex: Fix bad gfp argument
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D
- [armhf] usb: host: ohci-exynos: Fix error handling in
exynos_ohci_probe()
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
- USB: cdc-acm: rework notification_buffer resizing
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log
- [arm64,armhf] usb: dwc3: gadget: Don't setup more than requested
- [arm64,armhf] usb: dwc3: gadget: Fix handling ZLP
- [arm64,armhf] usb: dwc3: gadget: Handle ZLP for sg requests
- [arm64,x86] tpm: Unify the mismatching TPM space buffer sizes
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.144
- HID: core: Correctly handle ReportSize being zero
- HID: core: Sanitize event code and type when mapping input
- scsi: target: tcmu: Fix size in calls to tcmu_flush_dcache_range
- scsi: target: tcmu: Optimize use of flush_dcache_page
- [arm64] drm/msm: add shutdown support for display platform_driver
- [x86] hwmon: (applesmc) check status earlier.
- nvmet: Disable keep-alive timer when kato is cleared to 0h
- [arm64] drm/msm/a6xx: fix gmu start on newer firmware
- ceph: don't allow setlease on cephfs
- cpuidle: Fixup IRQ state
- [s390x] don't trace preemption in percpu macros
- xen/xenbus: Fix granting of vmalloc'd memory
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling
- batman-adv: Avoid uninitialized chaddr when handling DHCP
- batman-adv: bla: use netif_rx_ni when not in interrupt context
- [mips*] mm: BMIPS5000 has inclusive physical caches
- netfilter: nf_tables: add NFTA_SET_USERDATA if not null
- netfilter: nf_tables: incorrect enum nft_list_attributes definition
- netfilter: nf_tables: fix destination register zeroing
- [arm64] net: hns: Fix memleak in hns_nic_dev_probe
- [arm64,armhf] dmaengine: pl330: Fix burst length if burst size is
smaller than bus width
- gtp: add GTPA_LINK info to msg sent to userspace
- bnxt_en: Don't query FW when netif_running() is false.
- bnxt_en: Check for zero dir entries in NVRAM.
- bnxt_en: Fix PCI AER error recovery flow
- bnxt_en: fix HWRM error when querying VF temperature
- xfs: fix boundary test in xfs_attr_shortform_verify (CVE-2020-14385)
- bnxt: don't enable NAPI until rings are ready
- netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of
ENOBUFS
- nvmet-fc: Fix a missed _irqsave version of spin_lock in
'nvmet_fc_fod_op_done()'
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
- fix regression in "epoll: Keep a reference on files added to the check
list"
- xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt
files
- tg3: Fix soft lockup when tg3_reset_task() fails.
- [amd64] x86, fakenuma: Fix invalid starting node ID
- [amd64] iommu/vt-d: Serialize IOMMU GCMD register modifications
- [armhf] thermal: ti-soc-thermal: Fix bogus thermal shutdowns for
omap4430
- xfs: don't update mtime on COW faults
- btrfs: drop path before adding new uuid tree entry
- vfio/type1: Support faulting PFNMAP vmas
- vfio-pci: Fault mmaps to enable vma tracking
- vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
(CVE-2020-12888)
- btrfs: Remove redundant extent_buffer_get in get_old_root
- btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind
- btrfs: set the lockdep class for log tree extent buffers
- uaccess: Add non-pagefault user-space read functions
- uaccess: Add non-pagefault user-space write function
- btrfs: fix potential deadlock in the search ioctl
- net: usb: qmi_wwan: add Telit 0x1050 composition
- usb: qmi_wwan: add D-Link DWM-222 A2 device ID
- ALSA: ca0106: fix error code handling
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
- [x86] ALSA: hda/hdmi: always check pin power status in i915 pin fixup
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection
- [x86] ALSA: hda - Fix silent audio output and corrupted input on MSI
X570-A PRO
- media: rc: do not access device via sysfs after rc_unregister_device()
- media: rc: uevent sysfs file races with rc_unregister_device()
- affs: fix basic permission bits to actually work
- block: allow for_each_bvec to support zero len bvec
- libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
- dm writecache: handle DAX to partitions on persistent memory correctly
- dm cache metadata: Avoid returning cmd->bm wild pointer on error
- dm thin metadata: Avoid returning cmd->bm wild pointer on error
- mm: slub: fix conversion of freelist_corrupted()
- [arm64] KVM: Add kvm_extable for vaxorcism code
- [arm64] KVM: Defer guest entry when an asynchronous exception is pending
- [arm64] KVM: Survive synchronous exceptions caused by AT instructions
- [arm64] KVM: Set HCR_EL2.PTW to prevent AT taking synchronous exception
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking
- checkpatch: fix the usage of capture group ( ... )
- mm/hugetlb: fix a race between hugetlb sysctl handlers (CVE-2020-25285)
- cfg80211: regulatory: reject invalid hints
- net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.145
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection
- block: ensure bdi->io_pages is always initialized
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL
- sctp: not disable bh in the whole sctp_get_port_local()
- tipc: fix shutdown() of connectionless socket
- net: disable netpoll on fresh napis
- [arm64,armhf] net/mlx5e: Don't support phys switch id if not in
switchdev mode
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.146
- RDMA/rxe: Fix memleak in rxe_mem_init_user
- RDMA/rxe: Drop pointless checks in rxe_init_ports
- [armhf] drm/sun4i: Fix dsi dcs long write function
- scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA
- RDMA/core: Fix reported speed and width
- [arm64] mmc: sdhci-msm: Add retries when all tuning phases are found
valid
- [arm64,x86] dmaengine: acpi: Put the CSRT table after using it
- netfilter: conntrack: allow sctp hearbeat after connection re-use
- [x86] firestream: Fix memleak in fs_open
- [arm64,armhf] ALSA: hda: Fix 2 channel swapping for Tegra
- xfs: initialize the shortform attr header padding entry
- nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance
- nvme-rdma: serialize controller teardown sequences
- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices
- [ppc64el,x86] drivers/net/wan/hdlc_cisco: Add hard_header_len
- HID: elan: Fix memleak in elan_input_configured
- [x86] cpufreq: intel_pstate: Refuse to turn off with HWP enabled
- [x86] cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo
disabled
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
- [amd64] iommu/amd: Do not use IOMMUv2 functionality when SME is active
- [x86] iio:accel:bmc150-accel: Fix timestamp alignment and prevent data
leak.
- [x86] iio:magnetometer:ak8975 Fix alignment and data leak issues.
- [armhf] iio:accel:mma8452: Fix timestamp alignment and prevent data
leak.
- [x86] staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
- btrfs: require only sector size alignment for parent eb bytenr
- btrfs: fix lockdep splat in add_missing_dev
- btrfs: fix wrong address when faulting in pages in the search ioctl
- regulator: push allocation in set_consumer_device_supply() out of lock
- scsi: target: iscsi: Fix data digest calculation
- scsi: target: iscsi: Fix hang in iscsit_access_np() when getting
tpg->np_login_sem
- [arm64] drm/msm: Disable preemption on all 5xx targets
- rbd: require global CAP_SYS_ADMIN for mapping and unmapping
(CVE-2020-25284)
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars
- vgacon: remove software scrollback support
- fbcon: remove soft scrollback code (CVE-2020-14390)
- fbcon: remove now unusued 'softback_lines' cursor() argument
- [x86] KVM: VMX: Don't freeze guest when event delivery causes an
APIC-access exit
- [x86] video: fbdev: fix OOB read in vga_8planes_imageblit()
- [arm64] phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init
- usb: core: fix slab-out-of-bounds Read in read_descriptors
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter
- USB: serial: option: support dynamic Quectel USB compositions
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules
- usb: Fix out of sync data toggle if a configured device is reconfigured
- [x86] usb: typec: ucsi: acpi: Check the _DEP dependencies
[ Salvatore Bonaccorso ]
* Bump ABI to 11
* Drop 'Revert "mips: Add udelay lpj numbers adjustment"'
* [rt] Update to 4.19.135-rt60
* [rt] Refresh "net: Use skbufhead with raw lock" for context changes in
4.19.136
* [rt] Refresh "timers: Prepare for full preemption" for context changes in
4.19.138
* [rt] Refresh "timers: Redo the notification of canceling timers on -RT"
for context changes in 4.19.138
* [rt] Refresh "watchdog: prevent deferral of watchdogd wakeup on RT" for
context changes in 4.19.141
* Refresh "net: ena: fix crash during ena_remove()" for context changes in
4.19.142
* [rt] Refresh "Split IRQ-off and zone->lock while freeing pages from PCP
list #1" for context changes in 4.19.142
* ACPI: configfs: Disallow loading ACPI tables when locked down
(CVE-2020-15780)
* [rt] Update to 4.19.142-rt63
* net/packet: fix overflow in tpacket_rcv (CVE-2020-14386)
* debian/tests/python: pycodestyle: Increase max-line-length to 100.
* gfs2: initialize transaction tr_ailX_lists earlier (Closes: #968567)
-- Salvatore Bonaccorso <carnil@debian.org> Tue, 04 Aug 2020 16:33:40 +0200
linux (4.19.132-1) buster; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.132
- btrfs: fix a block group ref counter leak after failure to remove block
group
- mm: fix swap cache node allocation mask
- [x86] EDAC/amd64: Read back the scrub rate PCI register on F15h
- usbnet: smsc95xx: Fix use-after-free after removal
- mm/slub.c: fix corrupted freechain in deactivate_slab()
- mm/slub: fix stack overruns with SLUB_STATS
- [s390x] debug: avoid kernel warning on too large number of pages
- nvme-multipath: set bdi capabilities once
- nvme-multipath: fix deadlock between ana_work and scan_work
- crypto: af_alg - fix use-after-free in af_alg_accept() due to
bh_lock_sock()
- [arm64] drm/msm/dpu: fix error return code in dpu_encoder_init
- cxgb4: use unaligned conversion for fetching timestamp
- cxgb4: parse TC-U32 key values and masks natively
- cxgb4: use correct type for all-mask IP address comparison
- cxgb4: fix SGE queue dump destination buffer context
- [x86] hwmon: (acpi_power_meter) Fix potential memory leak in
acpi_power_meter_add()
- [arm64,armhf] drm: sun4i: hdmi: Remove extra HPD polling
- virtio-blk: free vblk-vqs in error path of virtblk_probe()
- SMB3: Honor 'posix' flag for multiuser mounts
- nvme: fix a crash in nvme_mpath_add_disk
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665
- Revert "ALSA: usb-audio: Improve frames size computation"
- SMB3: Honor 'seal' flag for multiuser mounts
- SMB3: Honor persistent/resilient handle flags for multiuser mounts
- SMB3: Honor lease disabling for multiuser mounts
- cifs: Fix the target file was deleted when rename failed.
- [mips*] Add missing EHB in mtc0 -> mfc0 sequence for DSPen
- [arm64,armhf] irqchip/gic: Atomically update affinity
- dm zoned: assign max_io_len correctly
- efi: Make it possible to disable efivar_ssdt entirely
[ Salvatore Bonaccorso ]
* [rt] Update to 4.19.132-rt59
* Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"
(Closes: #964153, #964480)
* efi: Restrict efivar_ssdt_load when the kernel is locked down
(CVE-2019-20908)
* certs: Rotate to use the Debian Secure Boot Signer 2020 certificate
* e1000e: Add support for Comet Lake (Closes: #965365)
-- Salvatore Bonaccorso <carnil@debian.org> Fri, 24 Jul 2020 20:46:18 +0200
linux (4.19.131-2) buster; urgency=medium
[ Aurelien Jarno ]
* Revert "mips: Add udelay lpj numbers adjustment", since it causes the
build to fail with CONFIG_CPU_FREQ=y.
-- Salvatore Bonaccorso <carnil@debian.org> Sat, 11 Jul 2020 15:44:13 +0200
linux (4.19.131-1) buster; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.119
- ext4: fix extent_status fragmentation for plain files
- [arm64] drm/msm: Use the correct dma_sync calls harder
- vti4: removed duplicate log message.
- [arm64] Add part number for Neoverse N1
- [arm64] errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1
#1542419
- [arm64] Fake the IminLine size on systems affected by Neoverse-N1
#1542419
- [arm64] compat: Workaround Neoverse-N1 #1542419 for compat user-space
- watchdog: reset last_hw_keepalive time at start
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG
- ceph: return ceph_mdsc_do_request() errors from __get_parent()
- ceph: don't skip updating wanted caps when cap is stale
- scsi: iscsi: Report unbind session event when the target has been
removed
- [x86] ASoC: Intel: atom: Take the drv->lock mutex before calling
sst_send_slot_map()
- nvme: fix deadlock caused by ANA update wrong locking
- ipc/util.c: sysvipc_find_ipc() should increase position index
- [s390x] cio: avoid duplicated 'ADD' uevents
- loop: Better discard support for block devices
- [powerpc*] Revert "powerpc/64: irq_work avoid interrupt when called with
hardware irqs enabled"
- [arm*] pwm: bcm2835: Dynamically allocate base
- perf/core: Disable page faults when getting phys address
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN MPWIN895CL tablet
- xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3
- virtio-blk: improve virtqueue error to BLK_STS
- scsi: smartpqi: fix call trace in device discovery
- PCI/ASPM: Allow re-enabling Clock PM
- [x86] KVM: VMX: Zero out *all* general purpose registers after VM-Exit
- cxgb4: fix adapter crash due to wrong MC size
- cxgb4: fix large delays in PTP synchronization
- ipv6: fix restrict IPV6_ADDRFORM operation
- macsec: avoid to set wrong mtu
- macvlan: fix null dereference in macvlan_device_event()
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
- [arm64,armhf] net: stmmac: dwmac-meson8b: Add missing boundary to RGMII
TX clock array
- sched: etf: do not assume all sockets are full blown
- tcp: cache line align MAX_TCP_HEADER
- team: fix hang in team_mode_get()
- vrf: Fix IPv6 with qdisc and xfrm
- [armhf] net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
- [armhf] net: dsa: b53: Fix ARL register definitions
- [armhf] net: dsa: b53: Rework ARL bin logic
- [armhf] net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
- vrf: Check skb for XFRM_TRANSFORMED flag
- KEYS: Avoid false positive ENOMEM error on key read
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist
- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos
- ALSA: usb-audio: Add connector notifier delegation
- [armhf] iio: st_sensors: rely on odr mask to know if odr can be set
- USB: sisusbvga: Change port variable from signed to unsigned
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair
K70 RGB RAPIDFIRE
- USB: early: Handle AMD's spec-compliant identifiers, too
- USB: hub: Fix handling of connect changes during sleep
- vmalloc: fix remap_vmalloc_range() bounds checks
- mm/hugetlb: fix a addressing exception caused by huge_pte_offset
- mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
- ALSA: hda/realtek - Fix unexpected init_amp override
- ALSA: hda/realtek - Add new codec supported for ALC245
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
- ALSA: usb-audio: Filter out unsupported sample rates on Focusrite
devices
- tpm/tpm_tis: Free IRQ if probing fails
- [s390x] KVM: Return last valid slot if approx index is out-of-bounds
- KVM: Check validity of resolved slot when searching memslots
- [x86] KVM: VMX: Enable machine check support for 32bit targets
- tty: hvc: fix buffer overflow during hvc_alloc().
- [x86] tty: rocket, avoid OOB access
- usb-storage: Add unusual_devs entry for JMicron JMS566
- audit: check the length of userspace generated audit records
- ASoC: dapm: fixup dapm kcontrol widget
- iwlwifi: pcie: actually release queue memory in TVQM
- iwlwifi: mvm: beacon statistics shouldn't go backwards
- [armel,armhf] ARM: imx: provide v7_cpu_resume() only on
ARM_CPU_SUSPEND=y
- [powerpc*] setup_64: Set cache-line-size based on cache-block-size
- [i386] staging: comedi: dt2815: fix writing hi byte of analog output
- [x86] staging: comedi: Fix comedi_device refcnt leak in comedi_open
- vt: don't hardcode the mem allocation upper bound
- vt: don't use kmalloc() for the unicode screen buffer
- [x86] staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by
default.
- [x86] staging: vt6656: Fix calling conditions of vnt_set_bss_mode
- [x86] staging: vt6656: Fix drivers TBTT timing counter.
- [x86] staging: vt6656: Fix pairwise key entry save.
- [x86] staging: vt6656: Power save stop wake_up_count wrap around.
- cdc-acm: close race betrween suspend() and acm_softint
- cdc-acm: introduce a cool down
- UAS: no use logging any details in case of ENODEV
- UAS: fix deadlock in error handling and PM flushing work
- [arm64,armhf] usb: dwc3: gadget: Fix request completion check
- usb: f_fs: Clear OS Extended descriptor counts to zero in
ffs_data_reset()
- xhci: prevent bus suspend if a roothub port detected a over-current
condition
- xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.120
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
- [arm*] binder: take read mode of mmap_sem in binder_alloc_free_page()
- [arm64,armhf] usb: dwc3: gadget: Do link recovery for SS and SSP
- nfsd: memory corruption in nfsd4_lock()
- rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
- net/cxgb4: Check the return from t4_query_params properly
- xfs: acquire superblock freeze protection on eofblocks scans
- svcrdma: Fix trace point use-after-free race
- svcrdma: Fix leak of svc_rdma_recv_ctxt objects
- PCI: Avoid ASMedia XHCI USB PME# from D0 defect
- [s390x] net/mlx5: Fix failing fw tracer allocation on s390
- perf/core: fix parent pid/tid in task exit events
- [i386] bpf, x86_32: Fix incorrect encoding in BPF_LDX zero-extension
- mm: shmem: disable interrupt when acquiring info->lock in
userfaultfd_copy path
- xfs: clear PF_MEMALLOC before exiting xfsaild thread
- [x86] bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
- [armhf] net: fec: set GPR bit on suspend by DT configuration.
- [x86] hyperv: report value of misc_features
- xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
- ALSA: hda: Keep the controller initialization even if no codecs found
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is
supported
- scsi: target: fix PR IN / READ FULL STATUS for FC
- scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN
- xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
- ALSA: hda: call runtime_allow() for all hda controllers
- [arm64] Delete the space separator in __emit_inst
- ext4: use matching invalidatepage in ext4_writepage
- ext4: increase wait time needed before reuse of deleted inode numbers
- ext4: convert BUG_ON's to WARN_ON's in mballoc.c
- hwmon: (jc42) Fix name to have no illegal characters
- [i386] bpf, x86_32: Fix clobbering of dst for BPF_JSET
- qed: Fix use after free in qed_chain_free
- ext4: check for non-zero journal inum in ext4_calculate_overhead
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.121
- drm/edid: Fix off-by-one in DispID DTD pixel clock
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
- drm/qxl: qxl_release use after free
- btrfs: fix block group leak when removing fails
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID
- ALSA: hda/hdmi: fix without unlocked before return
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
(Closes: #960493)
- PM: ACPI: Output correct message on target power state
- PM: hibernate: Freeze kernel threads in software_resume()
- dm writecache: fix data corruption when reloading the target
- dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
- scsi: qla2xxx: set UNLOADING before waiting for session deletion
- scsi: qla2xxx: check UNLOADING before posting async work
- RDMA/mlx5: Set GRH fields in query QP on RoCE
- RDMA/mlx4: Initialize ib_spec on the stack
- RDMA/core: Prevent mixed use of FDs between shared ufiles
- RDMA/core: Fix race between destroy and release FD object
- [amd64,arm64] vfio: avoid possible overflow in
vfio_iommu_type1_pin_pages
- [amd64,arm64] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in
vaddr_get_pfn()
- [arm64] iommu/qcom: Fix local_base status check
- scsi: target/iblock: fix WRITE SAME zeroing
- [amd64] iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled
system
- nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
- btrfs: fix partial loss of prealloc extent past i_size after fsync
- btrfs: transaction: Avoid deadlock due to bad initialization timing of
fs_info::journal_info
- mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout
loop
- [arm64] mmc: sdhci-xenon: fix annoying 1.8V regulator warning
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
- [arm64] mmc: sdhci-msm: Enable host capabilities pertains to R1b
response
- [armhf] mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
- [armhf] mmc: meson-mx-sdio: remove the broken ->card_busy() op
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.122
- vhost: vsock: kick send_pkt worker once device is started
- [powerpc*] pci/of: Parse unassigned resources
- [x86] ASoC: topology: Check return value of pcm_new_ver
- [armhf] ASoC: sgtl5000: Fix VAG power-on handling
- [arm64,armhf] usb: dwc3: gadget: Properly set maxpacket limit
- [x86] ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
- wimax/i2400m: Fix potential urb refcnt leak
- [armhf] net: stmmac: fix enabling socfpga's ptp_ref_clock
- [armhf] net: stmmac: Fix sub-second increment
- cifs: protect updating server->dstaddr with a spinlock
- [s390x] ftrace: fix potential crashes when switching tracers
- sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
- lib: devres: add a helper function for ioremap_uc
- [x86] mfd: intel-lpss: Use devm_ioremap_uc for MMIO
- ALSA: hda: Match both PCI ID and SSID for driver blacklist
- [x86] platform: GPD pocket fan: Fix error message when temp-limits are
out of range
- mac80211: add ieee80211_is_any_nullfunc()
- cgroup, netclassid: remove double cond_resched
- drm/atomic: Take the atomic toys away from X
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.123
- USB: serial: qcserial: Add DW5816e support
- tracing/kprobes: Fix a double initialization typo
- vt: fix unicode console freeing with a common interface
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
- net: macsec: preserve ingress frame ordering
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
- net_sched: sch_skbprio: add message validation to skbprio_change()
- net: usb: qmi_wwan: add support for DW5816e
- sch_choke: avoid potential panic in choke_reset()
- sch_sfq: validate silly quantum values
- tipc: fix partial topology connection closure
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
- net/mlx5: Fix forced completion access non initialized command entry
- net/mlx5: Fix command entry leak in Internal Error State
- bnxt_en: Improve AER slot reset.
- bnxt_en: Fix VF anti-spoof filter setup.
- net: stricter validation of untrusted gso packets
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
- sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
- HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
- USB: uas: add quirk for LaCie 2Big Quadra
- USB: serial: garmin_gps: add sanity checking for data length
- tracing: Add a vmalloc_sync_mappings() for safe measure
- [arm64,armhf] KVM: vgic: Fix limit condition when writing to
GICD_I[CS]ACTIVER
- [arm64] KVM: Fix 32bit PC wrap-around
- [arm64] hugetlb: avoid potential NULL dereference
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
- [x86] KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm
blobs
- [x86] KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s
asm blob
- batman-adv: fix batadv_nc_random_weight_tq
- batman-adv: Fix refcnt leak in batadv_show_throughput_override
- batman-adv: Fix refcnt leak in batadv_store_throughput_override
- batman-adv: Fix refcnt leak in batadv_v_ogm_process
- [amd64] x86/entry/64: Fix unwind hints in register clearing code
- [amd64] x86/entry/64: Fix unwind hints in kernel exit path
- [amd64] x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
- [amd64] x86/unwind/orc: Don't skip the first frame for inactive tasks
- [amd64] x86/unwind/orc: Prevent unwinding before ORC initialization
- [amd64] x86/unwind/orc: Fix error path for bad ORC entry type
- [amd64] x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
- netfilter: nat: never update the UDP checksum when it's 0
- netfilter: nf_osf: avoid passing pointer to local var
- scripts/decodecode: fix trapping instruction formatting
- ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.124
- [arm64,armhf] net: dsa: Do not make user port errors fatal
- shmem: fix possible deadlocks on shmlock_user_lock
- virtio-blk: handle block_device_operations callbacks after hot unplug
- mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040
- net: fix a potential recursive NETDEV_FEAT_CHANGE
- net: phy: fix aneg restart in phy_ethtool_set_eee
- pppoe: only process PADT targeted at local interfaces
- Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
- tcp: fix error recovery in tcp_zerocopy_receive()
- virtio_net: fix lockdep warning on 32 bit
- [x86,arm64] hinic: fix a bug of ndo_stop
- net: ipv4: really enforce backoff for redirects
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups
- net: tcp: fix rx timestamp behavior for tcp_recvmsg
- tcp: fix SO_RCVLOWAT hangs with fat skbs
- [i386] dmaengine: pch_dma.c: Avoid data race between probe and irq
handler
- [x86] cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode
once
- ALSA: hda/hdmi: fix race in monitor detection during probe
- drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
- ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
- gfs2: Another gfs2_walk_metadata fix
- [x86] pinctrl: baytrail: Enable pin configuration setting for GPIO chip
- [x86] pinctrl: cherryview: Add missing spinlock usage in
chv_gpio_irq_handler
- i40iw: Fix error handling in i40iw_manage_arp_cache()
- mmc: core: Check request type before completing the request
- mmc: block: Fix request completion in the CQE timeout path
- NFS: Fix fscache super_cookie index_key from changing after umount
- nfs: fscache: use timespec64 in inode auxdata
- NFSv4: Fix fscache cookie aux_data to ensure change_attr is included
- [arm64] fix the flush_icache_range arguments in machine_kexec
- netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
- IB/mlx4: Test return value of calls to ib_get_cached_pkey
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX
headset
- usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
- [arm64,armhf] usb: host: xhci-plat: keep runtime active when removing
host
- usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg
list
- cifs: fix leaked reference on requeued write
- exec: Move would_dump into flush_old_exec
- [arm64,armhf] clk: rockchip: fix incorrect configuration of rk3228
aclk_gpu* clocks
- [arm64,armhf] dwc3: Remove check for HWO flag in
dwc3_gadget_ep_reclaim_trb_sg()
- Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
- clk: Unlink clock if failed to prepare or enable
- [arm64] dts: rockchip: Replace RK805 PMIC node name with "pmic" on
rk3328 boards
- [x86] KVM: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.125
- i2c: dev: Fix the race between the release of i2c_dev and cdev
- fix multiplication overflow in copy_fdtable()
- ubifs: remove broken lazytime support
- [amd64] iommu/amd: Fix over-read of ACPI UID from IVRS table
- ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
- HID: multitouch: add eGalaxTouch P80H84 support
- HID: alps: Add AUI1657 device ID
- HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
- scsi: qla2xxx: Delete all sessions before unregister local nvme port
- configfs: fix config_item refcnt leak in configfs_rmdir()
- vhost/vsock: fix packet delivery order to monitoring devices
- [amd64] aquantia: Fix the media type of AQC100 ethernet controller in
the driver
- component: Silence bind error on -EPROBE_DEFER
- [ppc64el] scsi: ibmvscsi: Fix WARN_ON during event pool release
- HID: i2c-hid: reset Synaptics SYNA2393 on resume
- [x86] apic: Move TSC deadline timer debug printk
- gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
- HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A
keyboard-dock
- ceph: fix double unlock in handle_cap_export()
- [arm64,armhf] stmmac: fix pointer check after utilization in
stmmac_interrupt
- USB: core: Fix misleading driver bug report
- [x86] platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
- padata: Replace delayed timer with immediate workqueue in padata_reorder
- padata: initialize pd->cpu with effective cpumask
- padata: purge get_cpu and reorder_via_wq from padata_do_serial
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio
option
- ALSA: pcm: fix incorrect hw_base increase
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
- ALSA: hda/realtek - Add more fixup entries for Clevo machines
- [armhf] drm/etnaviv: fix perfmon domain interation
- apparmor: Fix use-after-free in aa_audit_rule_init
- apparmor: fix potential label refcnt leak in aa_change_profile
- apparmor: Fix aa_label refcnt leak in policy_update
- [arm64] dmaengine: tegra210-adma: Fix an error handling path in
'tegra_adma_probe()'
- [powerpc*] Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
- [powerpc*] 64s: Disable STRICT_KERNEL_RWX
- [amd64,arm64] nfit: Add Hyper-V NVDIMM DSM command set to white list
- [x86,arm64] libnvdimm/btt: Remove unnecessary code in btt_freelist_init
- [x86,arm64] libnvdimm/btt: Fix LBA masking during 'free list' population
- [x86] thunderbolt: Drop duplicated get_switch_at_route()
- cxgb4: free mac_hlist properly
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free
- brcmfmac: abort and release host after error
- Revert "gfs2: Don't demote a glock until its revokes are written"
- misc: rtsx: Add short delay after exit from ASPM
- [x86] mei: release me_cl object reference
- rxrpc: Fix a memory leak in rxkad_verify_response()
- rxrpc: Trace discarded ACKs
- rxrpc: Fix ack discard
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.126
- ax25: fix setsockopt(SO_BINDTODEVICE)
- __netif_receive_skb_core: pass skb by reference
- net: inet_csk: Fix so_reuseport bind-address cache in tb->fast*
- net: ipip: fix wrong address family in init error path
- net/mlx5: Add command entry handling completion
- net: revert "net: get rid of an signed integer overflow in
ip_idents_reserve()"
- net sched: fix reporting the first-time use timestamp
- r8152: support additional Microsoft Surface Ethernet Adapter variant
- sctp: Don't add the shutdown timer if its already been added
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state
and socket is closed
- net/mlx5e: Update netdev txq on completions during closure
- net/mlx5: Annotate mutex destroy for root ns
- net: sun: fix missing release regions in cas_init_one().
- net/mlx4_core: fix a memory leak bug.
- [armhf] dts: rockchip: fix phy nodename for rk3228-evb
- [arm64] dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts
- [arm64,armhf] gpio: tegra: mask GPIO IRQs during IRQ shutdown
- ALSA: usb-audio: add mapping for ASRock TRX40 Creator
- gfs2: move privileged user check to gfs2_quota_lock_check
- cachefiles: Fix race between read_waiter and read_copier involving
op->to_do
- [arm64] usb: dwc3: pci: Enable extcon driver for Intel Merrifield
- usb: gadget: legacy: fix redundant initialization warnings
- IB/i40iw: Remove bogus call to netdev_master_upper_dev_get()
- cifs: Fix null pointer check in cifs_read
- Input: usbtouchscreen - add support for BonXeon TP
- Input: evdev - call input_flush_device() on release(), not flush()
- Input: xpad - add custom init packet for Xbox One S controllers
- Input: i8042 - add ThinkPad S230u to i8042 reset list
- Input: synaptics-rmi4 - really fix attn_data use-after-free
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()
- [armel,armhf] 8970/1: decompressor: increase tag size
- [arm*] 8843/1: use unified assembler in headers
- gpio: exar: Fix bad handling for ida_simple_get error path
- IB/qib: Call kobject_put() when kobject_init_and_add() fails
- [armhf] dts/imx6q-bx50v3: Set display interface clock parents
- [armel,armhf] dts: bcm2835-rpi-zero-w: Fix led polarity
- mmc: block: Fix use-after-free issue for rpmb
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC
- exec: Always set cap_ambient in cap_bprm_set_creds
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio
- ALSA: hda/realtek - Add new codec supported for ALC287
- libceph: ignore pool overlay and cache logic on redirects
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument
- iommu: Fix reference count leak in iommu_group_alloc.
- mmc: core: Fix recursive locking issue in CQE recovery path
- RDMA/core: Fix double destruction of uobject
- mac80211: mesh: fix discovery timer re-arming issue / crash
- [x86] dma: Fix max PFN arithmetic overflow on 32 bit systems
- [x86] copy_xstate_to_kernel(): don't leave parts of destination
uninitialized
- xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input
- xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output
- xfrm interface: fix oops when deleting a x-netns interface
- xfrm: fix a warning in xfrm_policy_insert_list
- xfrm: fix a NULL-ptr deref in xfrm_local_error
- xfrm: fix error in comment
- vti4: eliminated some duplicate code.
- ip_vti: receive ipip packet by calling ip_tunnel_rcv
- netfilter: nft_reject_bridge: enable reject with bridge vlan
- netfilter: ipset: Fix subcounter update skip
- netfilter: nfnetlink_cthelper: unbreak userspace helper support
- netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code
- esp6: get the right proto for transport mode in esp6_gso_encap
- bnxt_en: Fix accumulation of bp->net_stats_prev.
- xsk: Add overflow check for u64 division, stored into u32
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test.
- bonding: Fix reference count leak in bond_sysfs_slave_add.
- netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
- mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.127
- Revert "cgroup: Add memory barriers to plug cgroup_rstat_updated() race
window"
- libnvdimm: Fix endian conversion issues 
- HID: sony: Fix for broken buttons on DS3 USB dongles
- HID: i2c-hid: add Schneider SCL142ALM to descriptor override
- p54usb: add AirVasT USB stick device-id
- mmc: fix compilation of user API
- scsi: ufs: Release clock if DMA map fails
- airo: Fix read overflows sending packets
- [x86] drm/i915: fix port checks for MST support on gen >= 11
- [arm64] scsi: hisi_sas: Check sas_port before using it
- [powerpc*] powernv: Avoid re-registration of imc debugfs directory
- [s390x] ftrace: save traced function caller
- drm/edid: Add Oculus Rift S to non-desktop list
- [s390x] mm: fix set_huge_pte_at() for empty ptes
- null_blk: return error for invalid zone size
- [arm64] net: ethernet: stmmac: Enable interface clocks on probe for
IPQ806x
- [arm64,armhf] net: smsc911x: Fix runtime PM imbalance on error
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.128
- devinet: fix memleak in inetdev_init()
- l2tp: add sk_family checks to l2tp_validate_socket
- l2tp: do not use inet_hash()/inet_unhash()
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition
- vsock: fix timeout in vsock_accept()
- net: check untrusted gso_size at kernel entry
- USB: serial: qcserial: add DW5816e QDL support
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors
- USB: serial: option: add Telit LE910C1-EUX compositions
- [arm64,armhf] usb: musb: start session in resume for host port
- [arm64,armhf] usb: musb: Fix runtime PM imbalance on error
- vt: keyboard: avoid signed integer overflow in k_ascii (CVE-2020-13974)
- tty: hvc_console, fix crashes on parallel open/close
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
- CDC-ACM: heed quirk also in error handling
- [arm64] nvmem: qfprom: remove incorrect write support
- uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly
aligned
- Revert "net/mlx5: Annotate mutex destroy for root ns"
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.129
- ipv6: fix IPV6_ADDRFORM operation logic
- net_failover: fixed rollback in net_failover_open()
- bridge: Avoid infinite loop when suppressing NS messages with invalid
options
- vxlan: Avoid infinite loop when suppressing NS messages with invalid
options
- tun: correct header offsets in napi frags mode
- make 'user_access_begin()' do 'access_ok()' (CVE-2018-20669)
- [x86] uaccess: Inhibit speculation past access_ok() in
user_access_begin()
- lib: Reduce user_access_begin() boundaries in strncpy_from_user() and
strnlen_user()
- btrfs: merge btrfs_find_device and find_device (CVE-2019-18885)
- btrfs: Detect unbalanced tree with empty leaf before crashing btree
operations
- [armel,armhf] 8977/1: ptrace: Fix mask for thumb breakpoint hook
- sched/fair: Don't NUMA balance for kthreads
- Input: synaptics - add a second working PNP_ID for Lenovo T470s
- [powerpc*] xive: Clear the page tables for the ESB IO mapping
- ath9k_htc: Silence undersized packet warnings
- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated
- [x86] cpu/amd: Make erratum #1054 a legacy erratum
- perf probe: Accept the instance number of kretprobe event
- mm: add kvfree_sensitive() for freeing sensitive data objects
- aio: fix async fsync creds
- btrfs: tree-checker: Check level for leaves and nodes
- [x86] Fix jiffies ODR violation
- [x86] PCI: Mark Intel C620 MROMs as having non-compliant BARs
- [x86] speculation: Prevent rogue cross-process SSBD shutdown
(CVE-2020-10766)
- [x86] reboot/quirks: Add MacBook6,1 reboot quirk
- efi/efivars: Add missing kobject_put() in sysfs entry creation error
path
- [i386] ALSA: es1688: Add the missed snd_card_free()
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines
- ALSA: usb-audio: Fix inconsistent card PM state after resume
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt
Dock
- [arm64,x86] ACPI: sysfs: Fix reference count leak in
acpi_sysfs_add_hotplug_profile()
- [amd64,arm64] ACPI: CPPC: Fix reference count leak in
acpi_cppc_processor_probe()
- [arm64] ACPI: GED: add support for _Exx / _Lxx handler methods
- [arm64,x86] ACPI: PM: Avoid using power resources if there are none for
D0
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
- [arm*] spi: bcm2835aux: Fix controller unregister order
- PM: runtime: clk: Fix clk_pm_runtime_get() error path
- [arm64] crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when
ndevlist is fully iterated
- ALSA: pcm: disallow linking stream to itself
- [x86] {mce,mm}: Unmap the entire page if the whole page is affected and
poisoned
- [x86] KVM: Fix APIC page invalidation race
- [x86] kvm: Fix L1TF mitigation for shadow MMU
- [x86] KVM: x86/mmu: Consolidate "is MMIO SPTE" code
- [x86] KVM: only do L1TF workaround on affected processors
- [x86] speculation: Change misspelled STIPB to STIBP
- [x86] speculation: Add support for STIBP always-on preferred mode
- [x86] speculation: Avoid force-disabling IBPB based on STIBP and
enhanced IBRS. (CVE-2020-10767)
- [x86] speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect
branches. (CVE-2020-10768)
- spi: No need to assign dummy value in spi_unregister_controller()
- spi: Fix controller unregister order
- [amd64] spi: pxa2xx: Fix controller unregister order
- [arm*] spi: bcm2835: Fix controller unregister order
- [amd64] spi: pxa2xx: Balance runtime PM enable/disable on error
- [amd64] spi: pxa2xx: Fix runtime PM ref imbalance on probe error
- crypto: virtio: Fix use-after-free in
virtio_crypto_skcipher_finalize_req()
- crypto: virtio: Fix src/dst scatterlist calculation in
__virtio_crypto_skcipher_do_req()
- crypto: virtio: Fix dest length calculation in
__virtio_crypto_skcipher_do_req()
- ovl: initialize error in ovl_copy_xattr
- proc: Use new_inode not new_inode_pseudo
- [x86] KVM: nSVM: fix condition for filtering async PF
- [x86] KVM: nSVM: leave ASID aside in copy_vmcb_control_area
- [x86] KVM: nVMX: Consult only the "basic" exit reason when routing
nested exit
- [arm64] KVM: Make vcpu_cp1x() work on Big Endian hosts
- scsi: megaraid_sas: TM command refire leads to controller firmware crash
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
- mm/slub: fix a memory leak in sysfs_slab_add()
- fat: don't allow to mount if the FAT length == 0
- perf: Add cond_resched() to task_function_call()
- [x86] agp/intel: Reinforce the barrier after GTT updates
- [arm64] mmc: sdhci-msm: Clear tuning done flag while hs400 tuning
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card()
- xen/pvcalls-back: test for errors when calling backend_connect()
- [arm64] KVM: Synchronize sysreg state on injecting an AArch32 exception
- [arm64] ACPI: GED: use correct trigger type field in _Exx / _Lxx
handling
- [arm64] drm: bridge: adv7511: Extend list of audio sample rates
- [x86] crypto: ccp -- don't "select" CONFIG_DMADEVICES
- media: si2157: Better check for running tuner in init
- [amd64] spi: pxa2xx: Apply CS clk quirk to BXT
- [amd64] net: atlantic: make hw_get_regs optional
- net: ena: fix error returning in ena_com_get_hash_function()
- [arm64] insn: Fix two bugs in encoding 32-bit logical immediates
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K
- Bluetooth: Add SCO fallback for invalid LMP parameters error
- [armhf] clocksource: dw_apb_timer: Make CPU-affiliation being optional
- [armhf] clocksource: dw_apb_timer_of: Fix missing clockevent timers
- btrfs: do not ignore error from btrfs_next_leaf() when inserting
checksums
- batman-adv: Revert "disable ethtool link speed detection when auto
negotiation off"
- [armhf] mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC
error
- [x86] kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
- [x86] net: vmxnet3: fix possible buffer overflow caused by bad DMA value
in vmxnet3_get_rss()
- brcmfmac: fix wrong location to get firmware feature
- e1000: Distribute switch variables for initialization
- dt-bindings: display: mediatek: control dpi pins mode to avoid leakage
- audit: fix a net reference leak in audit_send_reply()
- media: dvb: return -EREMOTEIO on i2c transfer failure.
- [mips*] Make sparse_init() using top-down allocation
- Bluetooth: btbcm: Add 2 missing models to subver tables
- audit: fix a net reference leak in audit_list_rules_send()
- netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
- exit: Move preemption fixup up, move blocking operations down
- sched/core: Fix illegal RCU from offline CPUs
- drivers/perf: hisi: Fix typo in events attribute array
- [armhf] net: allwinner: Fix use correct return type for ndo_start_xmit()
- xfs: clean up the error handling in xfs_swap_extents
- Crypto/chcr: fix for ccm(aes) failed test
- [mips*] cm: Fix an invalid error code of INTVN_*_ERR
- xfs: reset buffer write failure state on successful completion
- xfs: fix duplicate verification from xfs_qm_dqflush()
- [x86] platform/x86: intel-vbtn: Use acpi_evaluate_integer()
- [x86] platform/x86: intel-vbtn: Split keymap into buttons and switches
parts
- [x86] platform/x86: intel-vbtn: Do not advertise switches to userspace
if they are not there
- [x86] platform/x86: intel-vbtn: Also handle tablet-mode switch on
"Detachable" and "Portable" chassis-types
- nvme: refine the Qemu Identify CNS quirk
- ath10k: Remove msdu from idr when management pkt send fails
- [arm64] wcn36xx: Fix error handling path in 'wcn36xx_probe()'
- net: qed*: Reduce RX and TX default ring count when running inside kdump
kernel
- mt76: avoid rx reorder buffer overflow
- md: don't flush workqueue unconditionally in md_open
- veth: Adjust hard_start offset on redirect XDP frames
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup()
- mwifiex: Fix memory corruption in dump_station
- [x86] boot: Correct relocation destination on old linkers
- [x86] mm: Stop printing BRK addresses
- btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a
new qgroup
- macvlan: Skip loopback packets in RX handler
- PCI: Don't disable decoding when mmio_always_on is set
- [mips*] Fix IRQ tracing when call handle_fpe() and handle_msa_fpe()
- bcache: fix refcount underflow in bcache_device_free()
- [arm64] mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk
- mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core
- ixgbe: fix signed-integer-overflow warning
- [armhf] mmc: sdhci-esdhc-imx: fix the mask for tuning start point
- cpuidle: Fix three reference count leaks
- [x86] platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32()
- [x86] platform/x86: intel-hid: Add a quirk to support HP Spectre X2
(2015)
- [x86] platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 /
"Laptop" chasis-type
- btrfs: include non-missing as a qualifier for the latest_bdev
- btrfs: send: emit file capabilities after chown
- mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked()
- mm: initialize deferred pages with interrupts enabled
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
- ext4: fix error pointer dereference
- ext4: fix race between ext4_sync_parent() and rename()
- PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect
- PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
- PCI: Avoid FLR for AMD Starship USB 3.0
- PCI: Add ACS quirk for iProc PAXB
- PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints
- PCI: Remove unused NFP32xx IDs
- [x86] hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
- [x86] amd_nb: Add PCI device IDs for family 17h, model 30h
- PCI: add USR vendor id and use it in r8169 and w6692 driver
- PCI: Move Synopsys HAPS platform device IDs
- PCI: Move Rohm Vendor ID to generic list
- misc: pci_endpoint_test: Add the layerscape EP device support
- misc: pci_endpoint_test: Add support to test PCI EP in AM654x
- PCI: Add Synopsys endpoint EDDA Device ID
- PCI: Add NVIDIA GPU multi-function power dependencies
- PCI: Enable NVIDIA HDA controllers
- [x86] amd_nb: Add PCI device IDs for family 17h, model 70h
- ALSA: lx6464es - add support for LX6464ESe pci express variant
- PCI: Add Genesys Logic, Inc. Vendor ID
- PCI: Add Amazon's Annapurna Labs vendor ID
- PCI: vmd: Add device id for VMD device 8086:9A0B
- [x86] amd_nb: Add Family 19h PCI IDs
- PCI: Add Loongson vendor ID
- serial: 8250_pci: Move Pericom IDs to pci_ids.h
- PCI: Make ACS quirk implementations more uniform
- PCI: Unify ACS quirk desired vs provided checking
- PCI: Generalize multi-function power dependency device links
- btrfs: fix error handling when submitting direct I/O bio
- btrfs: fix wrong file range cleanup after an error filling dealloc range
- PCI: Program MPS for RCiEP devices
- e1000e: Disable TSO for buffer overrun workaround
- e1000e: Relax condition to trigger reset for ME workaround
- carl9170: remove P2P_GO support
- media: go7007: fix a miss of snd_card_free (CVE-2019-20810)
- Bluetooth: hci_bcm: fix freeing not-requested IRQ
- b43legacy: Fix case where channel status is corrupted
- b43: Fix connection problem with WPA3
- b43_legacy: Fix connection problem with WPA3
- igb: Report speed and duplex as unknown when device is runtime suspended
- [arm64,armhf] power: vexpress: add suppress_bind_attrs to true
- [armhf] pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210
- [armhf] pinctrl: samsung: Save/restore eint_mask over suspend for
EINT_TYPE GPIOs
- gnss: sirf: fix error return code in sirf_probe()
- dm crypt: avoid truncating the logical block size
- kernel/cpu_pm: Fix uninitted local in cpu_pm
- [armhf] tegra: Correct PL310 Auxiliary Control Register initialization
- [powerpc*] 64s: Don't let DT CPU features set FSCR_DSCR
- [powerpc*] 64s: Save FSCR to init_task.thread.fscr after feature init
- sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate
registrations.
- sunrpc: clean up properly in gss_mech_unregister()
- [armhf] w1: omap-hdq: cleanup to add missing newline for some dev_dbg
- perf probe: Do not show the skipped events
- perf probe: Fix to check blacklist address correctly
- perf probe: Check address correctness by map instead of _etext
- perf symbols: Fix debuginfo search for Ubuntu
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.130
- [arm64,armhf] clk: sunxi: Fix incorrect usage of round_down()
- [arm64,armhf] ASoC: tegra: tegra_wm8903: Support nvidia, headset
property
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets
- [x86] iio: pressure: bmp280: Tolerate IRQ before registering
- [arm64] clk: qcom: msm8916: Fix the address location of pll->config_reg
- [arm64] backlight: lp855x: Ensure regulators are disabled on probe
failure
- [armhf] ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma
type
- [armel] integrator: Add some Kconfig selections
- scsi: qedi: Check for buffer overflow in qedi_set_path()
- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO
- [i386] ALSA: isa/wavefront: prevent out of bounds write in ioctl
- PCI: Allow pci_resize_resource() for devices on root bus
- scsi: qla2xxx: Fix issue with adapter's stopping state
- [x86] iio: bmp280: fix compensation of humidity
- f2fs: report delalloc reserve as non-free in statfs for project quota
- [x86] i2c: pxa: clear all master action bits in i2c_pxa_stop_message()
- [armhf] clk: samsung: Mark top ISP and CAM clocks on Exynos542x as
critical
- usblp: poison URBs upon disconnect
- serial: 8250: Fix max baud limit in generic 8250 port
- dm mpath: switch paths in dm_blk_ioctl() code path
- [arm64] PCI: aardvark: Don't blindly enable ASPM L0s and don't write to
read-only register
- vfio/pci: fix memory leaks in alloc_perm_bits()
- RDMA/mlx5: Add init2init as a modify command
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event
- [powerpc*] perf/hv-24x7: Fix inconsistent output values incase multiple
hv-24x7 events run
- nfsd: Fix svc_xprt refcnt leak when setup callback client failed
- [amd64] PCI: vmd: Filter resource type bits from shadow register
- [powerpc*] crashkernel: Take "mem=" option into account
- yam: fix possible memory leak in yam_init_driver
- apparmor: fix introspection of of task mode for unconfined tasks
- apparmor: check/put label on apparmor_sk_clone_security()
- scsi: sr: Fix sr_probe() missing deallocate of device minor
- [powerpc*] scsi: ibmvscsi: Don't send host info in adapter info MAD
after LPM
- apparmor: fix nnp subset test for unconfined
- [x86] purgatory: Disable various profiling and sanitizing options
- scsi: qedi: Do not flush offload work if ARP not resolved
- [armhf] dts: sun8i-h2-plus-bananapi-m2-zero: Fix led polarity
- scsi: qedf: Fix crash when MFW calls for protocol stats while function
is still probing
- [arm64] firmware: qcom_scm: fix bogous abuse of dma-direct internals
- ALSA: usb-audio: Improve frames size computation
- ALSA: usb-audio: Fix racy list management in output queue
- [s390x] qdio: put thinint indicator after early error
- tty: hvc: Fix data abort due to race in hvc_open
- [armhf] thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR
- [arm64,armhf] usb: dwc3: gadget: Properly handle failed kick_transfer
- [mips64el,mipsel] staging: sm750fb: add missing case while setting
FB_VISUAL
- [arm64,i386] i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output
- [arm*] serial: amba-pl011: Make sure we initialize the port.lock
spinlock
- drivers: base: Fix NULL pointer exception in __platform_driver_probe()
if a driver developer is foolish
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges
- scsi: qla2xxx: Fix warning after FC target reset
- scsi: mpt3sas: Fix double free warnings
- [arm64,armhf] pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map
- [armhf] clk: ti: composite: fix memory leak
- PCI: Fix pci_register_host_bridge() device_register() error handling
- [powerpc*] Don't initialise init_task->thread.regs
- tty: n_gsm: Fix SOF skipping
- tty: n_gsm: Fix waking up upper tty layer when room available
- HID: Add quirks for Trust Panora Graphic Tablet
- ipmi: use vzalloc instead of kmalloc for user creation
- [powerpc*] pseries/ras: Fix FWNMI_VALID off by one
- vfio-pci: Mask cap zero
- usb/ohci-platform: Fix a warning when hibernating
- [arm64] drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms
allocation
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A
tablet
- [armhf] USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe()
- tty: n_gsm: Fix bogus i++ in gsm_data_kick
- scsi: target: tcmu: Userspace must not complete queued commands
- [powerpc*] 64s/pgtable: fix an undefined behaviour
- dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port
- [arm64,armhf] PCI: dwc: Fix inner MSI IRQ domain registration
- IB/cma: Fix ports memory leak in cma_configfs
- [arm*] usb: dwc2: gadget: move gadget resume after the core is in L0
state
- usb: gadget: Fix issue with config_ep_by_speed function
- RDMA/iw_cxgb4: cleanup device debugfs entries on ULD remove
- [x86] apic: Make TSC deadline timer detection message visible
- scsi: target: tcmu: Fix a use after free in
tcmu_check_expired_queue_cmd()
- [arm*] clk: bcm2835: Fix return type of bcm2835_register_gate
- [ppc64el] KVM: Book3S HV: Ignore kmemleak false positives
- net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'
- NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION
- of: Fix a refcounting bug in __of_attach_node_sysfs()
- rxrpc: Adjust /proc/net/rxrpc/calls to display call->debug_id not
user_ID
- gfs2: Allow lock_nolock mount to specify jid=X
- scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj
- scsi: ufs: Don't update urgent bkops level when toggling auto bkops
- [armhf] pinctrl: freescale: imx: Fix an error handling path in
'imx_pinctrl_probe()'
- geneve: change from tx_error to tx_dropped on missing metadata
- lib/zlib: remove outdated and incorrect pre-increment optimization
- blktrace: use errno instead of bi_status
- blktrace: fix endianness in get_pdu_int()
- blktrace: fix endianness for blk_log_remap()
- gfs2: fix use-after-free on transaction ail lists
- drivers/perf: hisi: Fix wrong value for all counters enable
- afs: Fix memory leak in afs_put_sysnames()
- ASoC: core: only convert non DPCM link to DPCM link
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT10-A
tablet
- ASoC: rt5645: Add platform-data for Asus T101HA
- [arm64,armhf] drm/sun4i: hdmi ddc clk: Fix size of m divider
- [x86] idt: Keep spurious entries unset in system_vectors
- net/filter: Permit reading NET in load_bytes_relative when MAC not set
- xdp: Fix xsk_generic_xmit errno
- [arm64,armhf] usb/xhci-plat: Set PM runtime as active on resume
- usb: host: ehci-platform: add a quirk to avoid stuck
- usb/ehci-platform: Set PM runtime as active on resume
- perf report: Fix NULL pointer dereference in
hists__fprintf_nr_sample_events()
- ext4: stop overwrite the errcode in ext4_setup_super
- bcache: fix potential deadlock problem in btree_gc_coalesce
(CVE-2020-12771)
- afs: Fix non-setting of mtime when writing into mmap
- afs: afs_write_end() should change i_size under the right lock
- block: Fix use-after-free in blkdev_get()
- [arm64] hw_breakpoint: Don't invoke overflow handler on uaccess
watchpoints
- libata: Use per port sync for detach
- drm: encoder_slave: fix refcouting error for modules
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit
- drm/qxl: Use correct notify port address when creating cursor ring
- selinux: fix double free
- ext4: fix partial cluster initialization when splitting extent
- ext4: avoid race conditions when remounting with options that change dax
- drm/dp_mst: Increase ACT retry timeout to 3s
- block: nr_sects_write(): Disable preemption on seqcount write
- mtd: rawnand: Pass a nand_chip object to nand_scan()
- mtd: rawnand: Pass a nand_chip object to nand_release()
- mtd: rawnand: diskonchip: Fix the probe error path
- [armel,armhf] mtd: rawnand: orion: Fix the probe error path
- [s390x] fix syscall_get_error for compat processes
- [x86] drm/i915: Whitelist context-local timestamp in the gen9 cmdparser
- [x86] drm/i915/icl+: Fix hotplug interrupt disabling after storm
detection
- crypto: algif_skcipher - Cap recv SG list at ctx->used
- crypto: algboss - don't wait during notifier callback
- kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex
- e1000e: Do not wake up the system via WOL if device wakeup is disabled
- [mips*] net: octeon: mgmt: Repair filling of RX ring
- kretprobe: Prevent triggering kretprobe from within kprobe_flush_task
- sched/rt, net: Use CONFIG_PREEMPTION.patch
- net: core: device_rename: Use rwsem instead of a seqcount
- md: add feature flag MD_FEATURE_RAID0_LAYOUT
- [x86] kvm: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
- [x86] kvm: Fix reserved bits related calculation errors caused by MKTME
- [x86] KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be
generated
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.131
- net: be more gentle about silly gso requests coming from user
- block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
- fanotify: fix ignore mask logic for events on child and on dir
- [armhf] mtd: rawnand: marvell: Fix the condition on a return code
- net: sched: export __netdev_watchdog_up()
- [x86] EDAC/amd64: Add Family 17h Model 30h PCI IDs
- [arm64,armhf] i2c: tegra: Cleanup kerneldoc comments
- [arm64,armhf] i2c: tegra: Add missing kerneldoc for some fields
- [arm64,armhf] i2c: tegra: Fix Maximum transfer size
- ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294
- ALSA: hda/realtek: Enable mute LED on an HP system
- ALSA: hda/realtek - Enable micmute LED on and HP system
- apparmor: don't try to replace stale label in ptraceme check
(Closes: #963493)
- [ppc64el] ibmveth: Fix max MTU limit
- mld: fix memory leak in ipv6_mc_destroy_dev()
- net: bridge: enfore alignment for ethernet address
- net: fix memleak in register_netdevice()
- net: place xmit recursion in softnet data
- net: use correct this_cpu primitive in dev_recursion_level
- net: increment xmit_recursion level in dev_direct_xmit()
- net: usb: ax88179_178a: fix packet alignment padding
- rxrpc: Fix notification call on completion of discarded calls
- sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
- tcp: don't ignore ECN CWR on pure ACK
- tcp: grow window for OOO packets only for SACK flows
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
- net: phy: Check harder for errors in get_phy_id()
- ip_tunnel: fix use-after-free in ip_tunnel_lookup()
- sch_cake: don't try to reallocate or unshare skb unconditionally
- sch_cake: fix a few style nits
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
- sch_cake: don't call diffserv parsing code when it is not needed
- net: Fix the arp error in some cases
- net: Do not clear the sock TX queue in sk_set_socket()
- net: core: reduce recursion limit value
- [arm*] usb: dwc2: Postponed gadget registration to the udc class driver
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922
- USB: ehci: reopen solution for Synopsys HC bug
- xhci: Poll for U0 after disabling USB2 LPM
- [armhf] usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
- ALSA: usb-audio: add quirk for Denon DCD-1500RE
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)
- ALSA: usb-audio: Fix OOB access of mixer element list
- [s390x] scsi: zfcp: Fix panic on ERP timeout for previously dismissed
ERP action
- xhci: Fix incorrect EP_STATE_MASK
- xhci: Fix enumeration issue when setting max packet size for FS devices.
- xhci: Return if xHCI doesn't support LPM
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
- loop: replace kill_bdev with invalidate_bdev
- IB/mad: Fix use after free when destroying MAD agent
- cifs/smb3: Fix data inconsistent when punch hole
- cifs/smb3: Fix data inconsistent when zero file range
- xfrm: Fix double ESP trailer insertion in IPsec crypto offload.
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
- [armhf] regualtor: pfuze100: correct sw1a/sw2 on pfuze3000
- [armhf] ASoC: fsl_ssi: Fix bclk calculation for mono channel
- [armhf] dts: Fix duovero smsc interrupt for suspend
- regmap: Fix memory leak from regmap_register_patch
- rxrpc: Fix handling of rwind from an ACK packet
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
- net: qed: fix left elements count calculation
- net: qed: fix NVMe login fails over VFs
- net: qed: fix excessive QM ILT lines consumption
- cxgb4: move handling L2T ARP failures to caller
- [armhf] imx5: add missing put_device() call in imx_suspend_alloc_ocram()
- netfilter: ipset: fix unaligned atomic access
- i2c: core: check returned size of emulated smbus block read
- sched/deadline: Initialize ->dl_boosted
- sched/core: Fix PI boosting between RT and DEADLINE tasks
- ata/libata: Fix usage of page address by page_address in
ata_scsi_mode_select_xlat function
- net: alx: fix race condition in alx_remove
- [s390x] ptrace: fix setting syscall number
- [s390x] vdso: fix vDSO clock_getres()
- kbuild: improve cc-option to clean up all temporary files
- blktrace: break out of blktrace setup on concurrent calls
- ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop
- [x86,arm64] ACPI: sysfs: Fix pm_profile_attr type
- [x86] KVM: Fix MSR range of APIC registers in X2APIC mode
- [x86] KVM: nVMX: Plumb L2 GPA through to PML emulation
- [amd64] x86/asm/64: Align start of __clear_user() loop to 16-bytes
- btrfs: fix data block group relocation failure due to concurrent scrub
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
- mm/slab: use memzero_explicit() in kzfree()
- ocfs2: avoid inode removal while nfsd is accessing it
- ocfs2: load global_inode_alloc
- ocfs2: fix value of OCFS2_INVALID_SLOT
- ocfs2: fix panic on nfs server over ocfs2
- [arm64] perf: Report the PC value in REGS_ABI_32 mode
- tracing: Fix event trigger to accept redundant spaces
- ring-buffer: Zero out time extend if it is nested and not absolute
- drm/radeon: fix fb_div check in ni_init_smc_spll_table()
- [x86,arm64] Staging: rtl8723bs: prevent buffer overflow in
update_sta_support_rate()
- sunrpc: fixed rollback in rpc_gssd_dummy_populate()
- SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
- pNFS/flexfiles: Fix list corruption if the mirror count changes
- NFSv4 fix CLOSE not waiting for direct IO compeletion
- dm writecache: correct uncommitted_block when discarding uncommitted
entry
- dm writecache: add cond_resched to loop in persistent_memory_claim()
- xfs: add agf freeblocks verify in xfs_agf_verify (CVE-2020-12655)
- Revert "tty: hvc: Fix data abort due to race in hvc_open"
[ Salvatore Bonaccorso ]
* [rt] Add new signing key for Tom Zanussi
* nfsd: apply umask on fs without ACL support (Closes: #962254)
* [rt] Update to 4.19.120-rt52:
- tasklet: Address a race resulting in double-enqueue
- hrtimer: fix logic for when grabbing softirq_expiry_lock can be elided
* [rt] Update to 4.19.124-rt53
* [rt] Update to 4.19.127-rt55:
- fs/dcache: Include swait.h header
- mm: slub: Always flush the delayed empty slubs in flush_all()
- tasklet: Fix UP case for tasklet CHAINED state
* usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect
(CVE-2020-15393)
[ Ben Hutchings ]
* [rt] Update "net: move xmit_recursion to per-task variable on -RT" to
apply on top of "net: place xmit recursion in softnet data"
* [rt] Drop "net: Add a mutex around devnet_rename_seq", redundant with
"net: Introduce net_rwsem to protect net_namespace_list"
* [rt] Drop idle task related parts of "sched: Move mmdrop to RCU on RT",
redundant with "sched/core: Fix illegal RCU from offline CPUs"
* Bump ABI to 10
[ YunQiang Su ]
* [mips*]: Do not enable MIPS_O32_FP64_SUPPORT, since golang hasn't been
migrated to FPXX yet and this breaks the golang packages on Octeon
hardware. In turns this disables MSA on 32-bit kernels.
[ Luca Boccassi ]
* [cloud] Enable INFINIBAND configs for HyperV/Azure (Closes: #958300)
-- Salvatore Bonaccorso <carnil@debian.org> Thu, 09 Jul 2020 04:45:56 +0200
linux (4.19.118-2+deb10u1) buster-security; urgency=high
[ Salvatore Bonaccorso ]
* selinux: properly handle multiple messages in selinux_netlink_send()
(CVE-2020-10751)
* fs/namespace.c: fix mountpoint reference counter race (CVE-2020-12114)
* USB: core: Fix free-while-in-use bug in the USB S-Glibrary
(CVE-2020-12464)
* [x86] KVM: SVM: Fix potential memory leak in svm_cpu_init()
(CVE-2020-12768)
* scsi: sg: add sg_remove_request in sg_write (CVE-2020-12770)
* USB: gadget: fix illegal array access in binding with UDC (CVE-2020-13143)
* netlabel: cope with NULL catmap (CVE-2020-10711)
* fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
(CVE-2020-10732)
* kernel/relay.c: handle alloc_percpu returning NULL in relay_open
(CVE-2019-19462)
* mm: Fix mremap not considering huge pmd devmap (CVE-2020-10757)
* [x86] KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
* KVM: Introduce a new guest mapping API
* [arm64] kvm: fix compilation on aarch64
* [s390x] kvm: fix compilation on s390
* [s390x] kvm: fix compile on s390 part 2
* KVM: Properly check if "page" is valid in kvm_vcpu_unmap
* [x86] kvm: Introduce kvm_(un)map_gfn() (CVE-2019-3016)
* [x86] kvm: Cache gfn to pfn translation (CVE-2019-3016)
* [x86] KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed (CVE-2019-3016)
* [x86] KVM: Clean up host's steal time structure (CVE-2019-3016)
* include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for
swap (Closes: #960271)
[ Ben Hutchings ]
* propagate_one(): mnt_set_mountpoint() needs mount_lock
* [x86] Add support for mitigation of Special Register Buffer Data Sampling
(SRBDS) (CVE-2020-0543):
- x86/cpu: Add 'table' argument to cpu_matches()
- x86/speculation: Add Special Register Buffer Data Sampling (SRBDS)
mitigation
- x86/speculation: Add SRBDS vulnerability and mitigation documentation
- x86/speculation: Add Ivy Bridge to affected list
* [x86] speculation: Do not match steppings, to avoid an ABI change
-- Salvatore Bonaccorso <carnil@debian.org> Sun, 07 Jun 2020 17:42:22 +0200
linux (4.19.118-2) buster; urgency=medium
* Merge changes from 4.19.67-2+deb10u2 to include all security fixes from
DSA 4667-1.
-- Salvatore Bonaccorso <carnil@debian.org> Wed, 29 Apr 2020 11:38:41 +0200
linux (4.19.118-1) buster; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.99
- Revert "efi: Fix debugobjects warning on 'efi_rts_work'"
- xfs: Sanity check flags of Q_XQUOTARM call
- [x86] mfd: intel-lpss: Add default I2C device properties for Gemini Lake
- SUNRPC: Fix svcauth_gss_proxy_init()
- [powerpc*] pseries: Enable support for ibm,drc-info property
- tipc: update mon's self addr when node addr generated
- tipc: fix wrong timeout input for tipc_wait_for_cond()
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
- [armhf] crypto: sun4i-ss - fix big endian issues
- perf map: No need to adjust the long name of modules
- ipmi: Fix memory leak in __ipmi_bmc_register (CVE-2019-19046)
- ixgbe: don't clear IPsec sa counters on HW clearing
- drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
- iio: fix position relative kernel version
- apparmor: Fix network performance issue in aa_label_sk_perm
- ALSA: hda: fix unused variable warning
- apparmor: don't try to replace stale label in ptrace access check
- firmware: coreboot: Let OF core populate platform device
- bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
- [arm64] drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
- IB/rxe: replace kvfree with vfree
- [amd64] IB/hfi1: Add mtu check for operational data VLs
- genirq/debugfs: Reinstate full OF path for domain name
- [arm64] usb: dwc3: add EXTCON dependency for qcom
- cfg80211: regulatory: make initialization more robust
- [x86] mei: replace POLL* with EPOLL* for write queues.
- [arm64] drm/msm: fix unsigned comparison with less than zero
- ALSA: usb-audio: update quirk for B&W PX to remove microphone
- iwlwifi: nvm: get num of hw addresses from firmware
- netfilter: nft_osf: usage from output path is not valid
- [x86] pwm: lpss: Release runtime-pm reference from the driver's remove
callback
- [powerpc*] pseries/memory-hotplug: Fix return value type of
find_aa_index
- rtlwifi: rtl8821ae: replace _rtl8821ae_mrate_idx_to_arfr_id with generic
version
- netfilter: nf_flow_table: do not remove offload when other netns's
interface is down
- tipc: eliminate message disordering during binding table update
- [arm64] net: socionext: Add dummy PHY register read in phy_write()
- [arm64,armhf] drm/sun4i: hdmi: Fix double flag assignation
- [arm64] net: hns3: add error handler for hns3_nic_init_vector_data()
- pcrypt: use format specifier in kobject_add
- [armhf] ASoC: sun8i-codec: add missing route for ADC
- [arm64] pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
- [armhf] bus: ti-sysc: Add mcasp optional clocks flag
- exportfs: fix 'passing zero to ERR_PTR()' warning
- net: always initialize pagedlen
- net: phy: Fix not to call phy_resume() if PHY is not attached
- [amd64] IB/hfi1: Correctly process FECN and BECN in packets
- IB/rxe: Fix incorrect cache cleanup in error flow
- ipv6: add missing tx timestamping on IPPROTO_RAW
- [arm64] net: hns3: fix error handling int the hns3_get_vector_ring_chain
- vxlan: changelink: Fix handling of default remotes
- fork,memcg: fix crash in free_thread_stack on memcg charge fail
- [armhf] clk: highbank: fix refcount leak in hb_clk_init()
- [armhf] clk: ti: fix refcount leak in ti_dt_clocks_register()
- [armhf] clk: socfpga: fix refcount leak
- [armhf] clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
- [armhf] clk: imx6q: fix refcount leak in imx6q_clocks_init()
- [armhf] clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
- [armhf] clk: armada-370: fix refcount leak in a370_clk_init()
- [armel] clk: kirkwood: fix refcount leak in kirkwood_clk_init()
- [armhf] clk: armada-xp: fix refcount leak in axp_clk_init()
- [armhf] clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
- [armhf] clk: dove: fix refcount leak in dove_clk_init()
- drm: Fix error handling in drm_legacy_addctx
- [armhf] drm/etnaviv: fix some off by one bugs
- drm/fb-helper: generic: Fix setup error path
- fork, memcg: fix cached_stacks case
- [amd64] IB/usnic: Fix out of bounds index check in query pkey
- RDMA/ocrdma: Fix out of bounds index check in query pkey
- RDMA/qedr: Fix out of bounds index check in query pkey
- RDMA/iw_cxgb4: Fix the unchecked ep dereference
- net: phy: micrel: set soft_reset callback to genphy_soft_reset for
KSZ9031
- [armhf] memory: tegra: Don't invoke Tegra30+ specific memory timing setup
on Tegra20
- [armhf] drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
- kbuild: mark prepare0 as PHONY to fix external module build
- crypto: tgr192 - fix unaligned memory access
- [armhf] ASoC: imx-sgtl5000: put of nodes if finding codec fails
- IB/iser: Pass the correct number of entries for dma mapped SGL
- [arm64] net: hns3: fix wrong combined count returned by ethtool -l
- IB/mlx5: Don't override existing ip_protocol
- rtc: cmos: ignore bogus century byte
- [i386] spi/topcliff_pch: Fix potential NULL dereference on allocation
error
- [arm64] net: hns3: fix bug of ethtool_ops.get_channels for VF
- [armhf] clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
- iwlwifi: mvm: avoid possible access out of array.
- net/mlx5: Take lock with IRQs disabled to avoid deadlock
- ip_tunnel: Fix route fl4 init in ip_md_tunnel_xmit
- iwlwifi: mvm: fix A-MPDU reference assignment
- [armhf] bus: ti-sysc: Fix timer handling with drop pm_runtime_irq_safe()
- [x86] tty: ipwireless: Fix potential NULL pointer dereference
- driver: uio: fix possible memory leak in __uio_register_device
- driver: uio: fix possible use-after-free in __uio_register_device
- driver core: Fix DL_FLAG_AUTOREMOVE_SUPPLIER device link flag handling
- driver core: Avoid careless re-use of existing device links
- driver core: Do not resume suppliers under device_links_write_lock()
- driver core: Fix handling of runtime PM flags in device_link_add()
- driver core: Do not call rpm_put_suppliers() in pm_runtime_drop_link()
- drm/xen-front: Fix mmap attributes for display buffers
- iwlwifi: mvm: fix RSS config command
- [mips*] rtc: ds1672: fix unintended sign extension
- ath10k: fix dma unmap direction for management frames
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO
- rtc: ds1307: rx8130: Fix alarm handling
- net/smc: original socket family in inet_sock_diag
- [arm64] rtc: pm8xxx: fix unintended sign extension
- iw_cxgb4: use tos when importing the endpoint
- iw_cxgb4: use tos when finding ipv6 routes
- xsk: add missing smp_rmb() in xsk_mmap
- [armhf] drm/etnaviv: potential NULL dereference
- RDMA/mlx5: Fix memory leak in case we fail to add an IB device
- driver core: Fix possible supplier PM-usage counter imbalance
- [armhf] usb: phy: twl6030-usb: fix possible use-after-free on remove
- block: don't use bio->bi_vcnt to figure out segment number
- keys: Timestamp new keys
- [armhf] net: dsa: b53: Fix default VLAN ID
- [armhf] net: dsa: b53: Properly account for VLAN filtering
- [armhf] net: dsa: b53: Do not program CPU port's PVID
- mt76: usb: fix possible memory leak in mt76u_buf_free
- vfio_pci: Enable memory accesses before calling pci_map_rom
- mdio_bus: Fix PTR_ERR() usage after initialization to constant
- [powerpc*] KVM: Release all hardware TCE tables attached to a group
- [x86] staging: r8822be: check kzalloc return or bail
- [arm*] dmaengine: mv_xor: Use correct device for DMA API
- cdc-wdm: pass return value of recover_from_urb_loss
- brcmfmac: create debugfs files for bus-specific layer
- net/mlx5: Delete unused FPGA QPN variable
- drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
- drm/nouveau/pmu: don't print reply values if exec is false
- drm/nouveau: fix missing break in switch statement
- driver core: Fix PM-runtime for links added during consumer probe
- [arm64] ASoC: qcom: Fix of-node refcount unbalance in
apq8016_sbc_parse_of()
- [arm64,armhf] net: dsa: fix unintended change of bridge interface STP
state
- fs/nfs: Fix nfs_parse_devname to not modify it's argument
- [x86] staging: rtlwifi: Use proper enum for return in
halmac_parse_psd_data_88xx
- [ppc64el] 64s: Fix logic when handling unknown CPU features
- NFS: Fix a soft lockup in the delegation recovery code
- perf: Copy parent's address filter offsets on clone
- perf, pt, coresight: Fix address filters for vmas with non-zero offset
- [armhf] clocksource/drivers/sun5i: Fail gracefully when clock rate is
unavailable
- [armhf] clocksource/drivers/exynos_mct: Fix error path in timer
resources initialization
- [x86] platform/x86: wmi: fix potential null pointer dereference
- NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
- ath10k: Fix length of wmi tlv command for protected mgmt frames
- netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
- netfilter: nft_set_hash: bogus element self comparison from deactivation
path
- net: sched: act_csum: Fix csum calc for tagged packets
- [arm*] hwrng: bcm2835 - fix probe as platform device
- [amd64] iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
- NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
- NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
- [amd64] net: aquantia: fixed instack structure overflow
- media: dvb/earth-pt1: fix wrong initialization for demod blocks
- rbd: clear ->xferred on error from rbd_obj_issue_copyup()
- PCI: Fix "try" semantics of bus and slot reset
- scsi: megaraid_sas: reduce module load time
- xen, cpu_hotplug: Prevent an out of bounds access
- net/mlx5: Fix multiple updates of steering rules in parallel
- net/mlx5e: IPoIB, Fix RX checksum statistics update
- [arm64,armhf] soc: amlogic: gx-socinfo: Add mask for each SoC packages
- media: ivtv: update *pos correctly in ivtv_read_pos()
- media: cx18: update *pos correctly in cx18_read_pos()
- [armhf] media: wl128x: Fix an error code in fm_download_firmware()
- media: cx23885: check allocation return
- jfs: fix bogus variable self-initialization
- [armhf] dts: sun9i: optimus: Fix fixed-regulators
- net: phy: don't clear BMCR in genphy_soft_reset
- [armhf] OMAP2+: Fix potentially uninitialized return value for
_setup_reset()
- [arm64,armhf] net: dsa: Avoid null pointer when failing to connect to
PHY
- media: tw5864: Fix possible NULL pointer dereference in
tw5864_handle_frame
- [arm64,armhf] spi: tegra114: clear packed bit for unpacked mode
- [arm64,armhf] spi: tegra114: fix for unpacked mode transfers
- [arm64,armhf] spi: tegra114: terminate dma and reset on transfer timeout
- [arm64,armhf] spi: tegra114: flush fifos
- [arm64,armhf] spi: tegra114: configure dma burst size to fifo trig level
- [armhf] bus: ti-sysc: Fix sysc_unprepare() when no clocks have been
allocated
- [arm*] spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
- drm/fb-helper: generic: Call drm_client_add() after setup is done
- [arm64] vdso: don't leak kernel addresses
- rtc: Fix timestamp value for RTC_TIMESTAMP_BEGIN_1900
- bpf: Add missed newline in verifier verbose log
- [x86] drm/vmwgfx: Remove set but not used variable 'restart'
- scsi: qla2xxx: Unregister chrdev if module initialization fails
- net/sched: cbs: fix port_rate miscalculation
- ACPI: button: reinitialize button state upon resume
- [arm64,armhf] firmware: arm_scmi: fix of_node leak in scmi_mailbox_check
- rxrpc: Fix detection of out of order acks
- scsi: target/core: Fix a race condition in the LUN lookup code
- brcmfmac: fix leak of mypkt on error return path
- [arm64] net: hns3: fix for vport->bw_limit overflow problem
- [x86] hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
- perf/core: Fix the address filtering fix
- [arm64,armhf] soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register
bitmask
- [x86] platform/x86: alienware-wmi: fix kfree on potentially
uninitialized pointer
- tipc: set sysctl_tipc_rmem and named_timeout right range
- usb: typec: tcpm: Notify the tcpc to start connection-detection for SRPs
- [arm64] net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
- 6lowpan: Off by one handling ->nexthdr
- ALSA: usb-audio: Handle the error from
snd_usb_mixer_apply_create_quirk()
- afs: Fix AFS file locking to allow fine grained locks
- afs: Further fix file locking
- NFS: Don't interrupt file writeout due to fatal errors
- scsi: qla2xxx: Fix a format specifier
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
- [ppc64el] KVM: PPC: Book3S HV: Fix lockdep warning when entering the
guest
- netfilter: nft_flow_offload: add entry to flowtable after confirmation
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll
- ASoC: fix valid stream condition
- [arm*] dwc2: gadget: Fix completed transfer size calculation in DDMA
- IB/mlx5: Add missing XRC options to QP optional params mask
- RDMA/rxe: Consider skb reserve space based on netdev of GID
- [amd64] iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
- [arm64] dmaengine: tegra210-adma: restore channel status
- mmc: core: fix possible use after free of host
- ath10k: Fix encoding for protected management frames
- afs: Fix the afs.cell and afs.volume xattr handlers
- l2tp: Fix possible NULL pointer dereference
- [x86] platform/x86: alienware-wmi: printing the wrong error code
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
- [arm64,armhf] pwm: meson: Consider 128 a valid pre-divider
- [arm64,armhf] pwm: meson: Don't disable PWM when setting duty repeatedly
- nfp: bpf: fix static check error through tightening shift amount
adjustment
- netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
- [arm*] thermal: cpu_cooling: Actually trace CPU load in
thermal_power_cpu_get_power
- EDAC/mc: Fix edac_mc_find() in case no device is found
- afs: Fix key leak in afs_release() and afs_evict_inode()
- afs: Don't invalidate callback if AFS_VNODE_DIR_VALID not set
- afs: Fix lock-wait/callback-break double locking
- afs: Fix double inc of vnode->cb_break
- [armhf] dts: sun8i-h3: Fix wifi in Beelink X2 DT
- [arm64] clk: meson: gxbb: no spread spectrum on mpll0
- [arm64] clk: meson: axg: spread spectrum is on mpll2
- [arm64] dmaengine: tegra210-adma: Fix crash during probe
- [arm64] dts: meson: libretech-cc: set eMMC as removable
- RDMA/qedr: Fix incorrect device rate.
- [x86] crypto: ccp - fix AES CFB error exposed by new test vectors
- [x86] crypto: ccp - Fix 3DES complaint from ccp-crypto module
- iommu: Add missing new line for dma type
- iommu: Use right function to get group for device
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of
force_sig
- inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
- [arm64] net: hns3: fix a memory leak issue for
hclge_map_unmap_ring_to_vf_vector
- [x86] netvsc: unshare skb in VF rx handler
- net: core: support XDP generic on stacked devices.
- RDMA/uverbs: check for allocation failure in uapi_add_elm()
- net: don't clear sock->sk early to avoid trouble in strparser
- [arm64] phy: qcom-qusb2: fix missing assignment of ret when calling
clk_prepare_enable
- [arm64] clk: sunxi-ng: sun50i-h6-r: Fix incorrect W1 clock gate register
- media: vivid: fix incorrect assignment operation when setting video mode
- [arm64] crypto: inside-secure - fix zeroing of the request in
ahash_exit_inv
- [arm64] crypto: inside-secure - fix queued len computation
- mpls: fix warning with multi-label encap
- [arm64] dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
- [arm64] dts: meson-gxm-khadas-vim2: fix Bluetooth support
- [amd64] iommu/vt-d: Duplicate iommu_resv_region objects per device list
- qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
- qed: iWARP - fix uninitialized callback
- [powerpc*] cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
- [powerpc*] pseries/mobility: rebuild cacheinfo hierarchy post-migration
- bpf: fix the check that forwarding is enabled in bpf_ipv6_fib_lookup
- [amd64] IB/hfi1: Handle port down properly in pio
- [arm64] drm/msm/mdp5: Fix mdp5_cfg_init error return
- net: netem: fix backlog accounting for corrupted GSO frames
- net/udp_gso: Allow TX timestamp with UDP GSO
- [s390x] net/af_iucv: build proper skbs for HiperTransport
- [s390x] net/af_iucv: always register net_device notifier
- [armhf] ASoC: ti: davinci-mcasp: Fix slot mask settings when using
multiple AXRs
- rtc: pcf8563: Fix interrupt trigger method
- rtc: pcf8563: Clear event flags and disable interrupts before requesting
irq
- net/sched: cbs: Fix error path of cbs_module_init
- [arm64] drm/msm/a3xx: remove TPL1 regs from snapshot
- ip6_fib: Don't discard nodes with valid routing information in
fib6_locate_1()
- perf/ioctl: Add check for the sample_period value
- [x86] dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
- tools: bpftool: use correct argument in cgroup errors
- fork,memcg: alloc_thread_stack_node needs to set tsk->stack
- bnxt_en: Fix ethtool selftest crash under error conditions.
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities.
- [amd64] iommu: Make iommu_disable safer
- [x86] mfd: intel-lpss: Release IDA resources
- rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
- xprtrdma: Fix use-after-free in rpcrdma_post_recvs
- PM: ACPI/PCI: Resume all devices during hibernation
- ACPI: PM: Simplify and fix PM domain hibernation callbacks
- ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
- devres: allow const resource arguments
- [arm64] RDMA/hns: Fixs hw access invalid dma memory error
- ceph: fix "ceph.dir.rctime" vxattr value
- xdp: fix possible cq entry leak
- scsi: libfc: fix null pointer dereference on a null lport
- xfrm interface: ifname may be wrong in logs
- [armhf] clk: sunxi-ng: v3s: add the missing PLL_DDR1
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
- libertas_tf: Use correct channel range in lbtf_geo_init
- qed: reduce maximum stack frame size
- usb: host: xhci-hub: fix extra endianness conversion
- [x86] crypto: ccp - Reduce maximum stack usage
- tipc: reduce risk of wakeup queue starvation
- net/mlx5: Fix mlx5_ifc_query_lag_out_bits
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes
- net: fix bpf_xdp_adjust_head regression for generic-XDP
- cxgb4: smt: Add lock for atomic_dec_and_test
- ext4: set error return correctly when ext4_htree_store_dirent fails
- [arm64] RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08
driver
- [arm64] RDMA/hns: bugfix for slab-out-of-bounds when loading hip08
driver
- net/rds: Add a few missing rds_stat_names entries
- tools: bpftool: fix arguments for p_err() in do_event_pipe()
- tools: bpftool: fix format strings and arguments for jsonw_printf()
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
- signal: Allow cifs and drbd to receive their terminating signals
- [ppc64el] 64s/radix: Fix memory hot-unplug page table split
- [x86] dmaengine: dw: platform: Switch to acpi_dma_controller_register()
- mac80211: minstrel_ht: fix per-group max throughput rate initialization
- i40e: reduce stack usage in i40e_set_fc
- [armhf] 8896/1: VDSO: Don't leak kernel addresses
- [mips*] avoid explicit UB in assignment of mips_io_port_base
- media: em28xx: Fix exception handling in em28xx_alloc_urbs()
- ahci: Do not export local variable ahci_em_messages
- rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up
- Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
- hwmon: (lm75) Fix write operations for negative temperatures
- net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
- power: supply: Init device wakeup after device_add()
- [x86] perf: Fix the dependency of the x86 insn decoder selftest
- irqdomain: Add the missing assignment of domain->fwnode for named fwnode
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
- bcache: Fix an error code in bch_dump_read()
- netfilter: ctnetlink: honor IPS_OFFLOAD flag
- [arm64] wcn36xx: use dynamic allocation for large variables
- xsk: avoid store-tearing when assigning queues
- xsk: avoid store-tearing when assigning umem
- led: triggers: Fix dereferencing of null pointer
- [arm64] net: hns3: fix error VF index when setting VLAN offload
- rtlwifi: Fix file release memory leak
- f2fs: fix wrong error injection path in inc_valid_block_count()
- f2fs: fix error path of f2fs_convert_inline_page()
- [x86] scsi: fnic: fix msix interrupt allocation
- Btrfs: fix hang when loading existing inode cache off disk
- Btrfs: fix inode cache waiters hanging on failure to start caching
thread
- Btrfs: fix inode cache waiters hanging on path allocation failure
- btrfs: use correct count in btrfs_file_write_iter()
- ixgbe: sync the first fragment unconditionally
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
- RDMA/cma: Fix false error message
- net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
- bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands
- f2fs: fix to avoid accessing uninitialized field of inode page in
is_alive()
- [powerpc*] mm/mce: Keep irqs disabled during lockless page table walk
- bpf: fix BTF limits
- [amd64] iommu: Wait for completion of IOTLB flush in attach_device
- [amd64] net: aquantia: Fix aq_vec_isr_legacy() return value
- cxgb4: Signedness bug in init_one()
- [arm64] net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
- [arm64] net: netsec: Fix signedness bug in netsec_probe()
- [arm64,armhf] net: stmmac: dwmac-meson8b: Fix signedness bug in probe
- of: mdio: Fix a signedness bug in of_phy_get_and_connect()
- [arm64] net: ethernet: stmmac: Fix signedness bug in
ipq806x_gmac_of_parse()
- net: sched: cbs: Avoid division by zero when calculating the port rate
- nvme: retain split access workaround for capability reads
- [arm64,armhf] net: stmmac: gmac4+: Not all Unicast addresses may be
available
- rxrpc: Fix trace-after-put looking at the put connection record
- mac80211: accept deauth frames in IBSS mode
- llc: fix another potential sk_buff leak in llc_ui_sendmsg()
- llc: fix sk_buff refcounting in llc_conn_state_process()
- ip6erspan: remove the incorrect mtu limit for ip6erspan
- [arm64,armhf] net: stmmac: fix length of PTP clock's name string
- [arm64,armhf] net: stmmac: fix disabling flexible PPS output
- sctp: add chunks to sk_backlog when the newsk sk_socket is not set
- [s390x] qeth: Fix error handling during VNICC initialization
- [s390x] qeth: Fix initialization of vnicc cmd masks during set online
- act_mirred: Fix mirred_init_module error handling
- net: avoid possible false sharing in sk_leave_memory_pressure()
- net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
- tcp: annotate lockless access to tcp_memory_pressure
- net/smc: receive returns without data
- net/smc: receive pending data after RCV_SHUTDOWN
- [arm64] drm/msm/dsi: Implement reset correctly
- [armhf] dmaengine: imx-sdma: fix size check for sdma script_number
- [arm64] hibernate: check pgd table allocation
- net: netem: fix error path for corrupted GSO frames
- net: netem: correct the parent's backlog when corrupted packet was
dropped
- xsk: Fix registration of Rx-only sockets
- bpf, offload: Unlock on error in bpf_offload_dev_create()
- afs: Fix missing timeout reset
- [x86] hv_netvsc: Fix offset usage in netvsc_send_table()
- [x86] hv_netvsc: Fix send_table offset in case of a host bug
- afs: Fix large file support
- [armhf] hwrng: omap3-rom - Fix missing clock by probing with device tree
- [mips64el,mipsel] Loongson: Fix return value of loongson_hwmon_init
- [x86] hv_netvsc: flag software created hash value
- net: neigh: use long type to store jiffies delta
- packet: fix data-race in fanout_flow_is_huge()
- affs: fix a memory leak in affs_remount
- afs: Remove set but not used variables 'before', 'after'
- [armhf] dmaengine: ti: edma: fix missed failure handling
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2
- [arm64] dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.100
- can, slip: Protect tty->disc_data in write_wakeup and close with RCU
- [x86] firestream: fix memory leaks
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted
- ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM
- net: ip6_gre: fix moving ip6gre between namespaces
- net, ip6_tunnel: fix namespaces move
- net, ip_tunnel: fix namespaces move
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
- net_sched: fix datalen for ematch
- net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject
- net-sysfs: fix netdev_queue_add_kobject() breakage
- net-sysfs: Call dev_hold always in netdev_queue_add_kobject
- net-sysfs: Call dev_hold always in rx_queue_add_kobject
- net-sysfs: Fix reference count leak
- net: usb: lan78xx: Add .ndo_features_check
- Revert "udp: do rmem bulk free even if the rx sk queue is empty"
- tcp_bbr: improve arithmetic division in bbr_update_bw()
- tcp: do not leave dangling pointers in tp->highest_sack
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
- afs: Fix characters allowed into cell names
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input
- hwmon: (core) Do not use device managed functions for memory allocations
- PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken
- tracing: trigger: Replace unneeded RCU-list traversals
- Input: keyspan-remote - fix control-message timeouts
- [x86] Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus
transfers"
- [arm64,armhf] mmc: tegra: fix SDR50 tuning override
- mmc: sdhci: fix minimum clock rate for v3 controller
- [arm64] Documentation: Document arm64 kpti control
- Input: sur40 - fix interface sanity checks
- Input: gtco - fix endpoint sanity check
- Input: aiptek - fix endpoint sanity check
- Input: pegasus_notetaker - fix endpoint sanity check
- [armhf] Input: sun4i-ts - add a check for
devm_thermal_zone_of_sensor_register
- netfilter: nft_osf: add missing check for DREG attribute
- hwmon: (nct7802) Fix voltage limits to wrong registers
- do_last(): fetch directory ->i_mode and ->i_uid before it's too late
(CVE-2020-8428)
- sd: Fix REQ_OP_ZONE_REPORT completion handling
- [i386] crypto: geode-aes - switch to skcipher for cbc(aes) fallback
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
- netfilter: ipset: use bitmap infrastructure completely
- netfilter: nf_tables: add __nft_chain_type_get()
- mm/memory_hotplug: make remove_memory() take the device_hotplug_lock
- mm, sparse: drop pgdat_resize_lock in sparse_add/remove_one_section()
- mm, sparse: pass nid instead of pgdat to sparse_add_one_section()
- drivers/base/memory.c: remove an unnecessary check on NR_MEM_SECTIONS
- mm, memory_hotplug: add nid parameter to arch_remove_memory
- mm/memory_hotplug: release memory resource after arch_remove_memory()
- drivers/base/memory.c: clean up relics in function parameters
- mm, memory_hotplug: update a comment in unregister_memory()
- mm/memory_hotplug: make unregister_memory_section() never fail
- mm/memory_hotplug: make __remove_section() never fail
- [powerpc*] mm: Fix section mismatch warning
- mm/memory_hotplug: make __remove_pages() and arch_remove_memory() never
fail
- [s390x] mm: implement arch_remove_memory()
- mm/memory_hotplug: allow arch_remove_memory() without
CONFIG_MEMORY_HOTREMOVE
- drivers/base/memory: pass a block_id to init_memory_block()
- mm/memory_hotplug: create memory block devices after arch_add_memory()
- mm/memory_hotplug: remove memory block devices before
arch_remove_memory()
- mm/memory_hotplug: make unregister_memory_block_under_nodes() never fail
- mm/memory_hotplug: remove "zone" parameter from
sparse_remove_one_section
- mm/hotplug: kill is_dev_zone() usage in __remove_pages()
- drivers/base/node.c: simplify unregister_memory_block_under_nodes()
- mm/memunmap: don't access uninitialized memmap in memunmap_pages()
- mm/memory_hotplug: fix try_offline_node()
- mm/memory_hotplug: shrink zones when offlining memory
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.101
- orinoco_usb: fix interface sanity check
- rsi_91x_usb: fix interface sanity check
- USB: serial: ir-usb: add missing endpoint sanity check
- USB: serial: ir-usb: fix link-speed handling
- USB: serial: ir-usb: fix IrLAP framing
- [arm64,armhf] usb: dwc3: turn off VBUS when leaving host mode
- staging: wlan-ng: ensure error return is actually returned
- [x86] staging: vt6656: correct packet types for CTS protect, mode.
- [x86] staging: vt6656: use NULLFUCTION stack on mac80211
- [x86] staging: vt6656: Fix false Tx excessive retries reporting.
- [arm64,armel] serial: 8250_bcm2835aux: Fix line mismatch on driver
unbind
- component: do not dereference opaque pointer in debugfs
- [x86] mei: me: add comet point (lake) H device ids
- crypto: chelsio - fix writing tfm flags to wrong place
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd()
- ath9k: fix storage endpoint lookup
- brcmfmac: fix interface sanity check
- rtl8xxxu: fix interface sanity check
- zd1211rw: fix storage endpoint lookup
- net_sched: ematch: reject invalid TCF_EM_SIMPLE
- net_sched: fix ops->bind_class() implementations
- HID: multitouch: Add LG MELF0410 I2C touchscreen support
- HID: Add quirk for Xin-Mo Dual Controller
- HID: ite: Add USB id match for Acer SW5-012 keyboard dock
- [x86] HID: Add quirk for incorrect input length on Lenovo Y720
- drivers/hid/hid-multitouch.c: fix a possible null pointer access.
- [arm64] phy: qcom-qmp: Increase PHY ready timeout
- drivers/net/b44: Change to non-atomic bit operations on pwol_mask
- [i386] net: wan: sdla: Fix cast from pointer to integer of different
size
- [arm64] gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
- atm: eni: fix uninitialized variable warning
- HID: steam: Fix input device disappearing
- [x86] platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx
- [amd64] PCI: Add DMA alias quirk for Intel VCA NTB
- [amd64] iommu: Support multiple PCI DMA aliases in IRQ Remapping
- usb-storage: Disable UAS on JMicron SATA enclosure
- sched/fair: Add tmp_alone_branch assertion
- sched/fair: Fix insertion in rq->leaf_cfs_rq_list
- rsi: fix use-after-free on probe errors
- rsi: fix memory leak on failed URB submission
- rsi: fix non-atomic allocation in completion handler
- crypto: af_alg - Use bh_lock_sock in sk_destruct
- block: cleanup __blkdev_issue_discard()
- block: fix 32 bit overflow in __blkdev_issue_discard()
- [arm64] KVM: Write arch.mdcr_el2 changes since last vcpu_load on VHE
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.102
- vfs: fix do_last() regression
- crypto: pcrypt - Fix user-after-free on module unload
- perf c2c: Fix return type for histogram sorting comparision functions
- PM / devfreq: Add new name attribute for sysfs
- tools lib: Fix builds when glibc contains strlcpy()
- ext4: validate the debug_want_extra_isize mount option at parse time
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
- reiserfs: Fix memory leak of journal device string
- media: digitv: don't continue if remote control state can't be read
- media: af9005: uninitialized variable printked
- media: vp7045: do not read uninitialized values if usb transfer fails
- media: gspca: zero usb_buf
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
- tomoyo: Use atomic_t for statistics counter
- ttyprintk: fix a potential deadlock in interrupt context issue
- Bluetooth: Fix race condition in hci_release_sock()
- cgroup: Prevent double killing of css when enabling threaded cgroup
- [armhf] dts: sun8i: a83t: Correct USB3503 GPIOs polarity
- [armhf] dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint
dt nodes
- [armhf] dts: beagle-x15-common: Model 5V0 regulator
- [arm64] clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order
- mac80211: mesh: restrict airtime metric to peered established plinks
- ASoC: rt5640: Fix NULL dereference on module unload
- ixgbevf: Remove limit of 10 entries for unicast filter list
- ixgbe: Fix calculation of queue with VFs and flow director on interface
flap
- igb: Fix SGMII SFP module discovery for 100FX/LX.
- [x86] platform/x86: GPD pocket fan: Allow somewhat lower/higher
temperature limits
- qmi_wwan: Add support for Quectel RM500Q
- wireless: fix enabling channel 12 for custom regulatory domain
- cfg80211: Fix radar event during another phy CAC
- mac80211: Fix TKIP replay protection immediately after key setup
- netfilter: nft_tunnel: ERSPAN_VERSION must not be null
- [armhf] net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
- bnxt_en: Fix ipv6 RFS filter matching logic.
- iwlwifi: Don't ignore the cap field upon mcc update
- [armhf] dts: am335x-boneblack-common: fix memory size
- vti[6]: fix packet tx through bpf_redirect()
- xfrm interface: fix packet tx through bpf_redirect()
- xfrm: interface: do not confirm neighbor when do pmtu update
- scsi: fnic: do not queue commands during fwreset
- [armhf] 8955/1: virt: Relax arch timer version check during early boot
- [arm64] tee: optee: Fix compilation issue with nommu
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE
- r8152: get default setting of WOL before initializing
- qlcnic: Fix CPU soft lockup while collecting firmware dump
- seq_tab_next() should increase position index
- l2t_seq_next should increase position index
- net: Fix skb->csum update in inet_proto_csum_replace16().
- btrfs: do not zero f_bavail if we have available space
- perf report: Fix no libunwind compiled warning break s390 issue
- mm/migrate.c: also overwrite error when it is bigger than zero
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.103
- [armhf] Revert "drm/sun4i: dsi: Change the start delay calculation"
- ovl: fix lseek overflow on 32bit
- kernel/module: Fix memleak in module_add_modinfo_attrs()
- media: iguanair: fix endpoint sanity check
- ocfs2: fix oops when writing cloned file
- [x86] cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
- udf: Allow writing to 'Rewritable' partitions
- printk: fix exclusive_console replaying
- iwlwifi: mvm: fix NVM check for 3168 devices
- gtp: use __GFP_NOWARN to avoid memalloc warning
- l2tp: Allow duplicate session creation with UDP
- net_sched: fix an OOB access in cls_tcindex
- [arm64,armhf] net: stmmac: Delete txtimer in suspend()
- bnxt_en: Fix TC queue mapping.
- tcp: clear tp->total_retrans in tcp_disconnect()
- tcp: clear tp->delivered in tcp_disconnect()
- tcp: clear tp->data_segs{in|out} in tcp_disconnect()
- tcp: clear tp->segs_{in|out} in tcp_disconnect()
- rxrpc: Fix use-after-free in rxrpc_put_local()
- rxrpc: Fix insufficient receive notification generation
- rxrpc: Fix missing active use pinning of rxrpc_local object
- rxrpc: Fix NULL pointer deref due to call->conn being cleared on
disconnect
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB
descriptors
- ipc/msg.c: consolidate all xxxctl_down() functions
- tracing: Fix sched switch start/stop refcount racy updates
- rcu: Avoid data-race in rcu_gp_fqs_check_wake()
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit
- usb: gadget: f_ncm: Use atomic_t to track in-flight request
- usb: gadget: f_ecm: Use atomic_t to track in-flight request
- ALSA: usb-audio: Fix endianess in descriptor validation
- ALSA: dummy: Fix PCM format loop in proc output
- mm/memory_hotplug: fix remove_memory() lockdep splat
- mm: move_pages: report the number of non-attempted pages
- media/v4l2-core: set pages dirty upon releasing DMA buffers
- media: v4l2-core: compat: ignore native command codes
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
- irqdomain: Fix a memory leak in irq_domain_push_irq()
- [x86] platform/x86: intel_scu_ipc: Fix interrupt support
- [x86] ALSA: hda: Add Clevo W65_67SB the power_save blacklist
- [arm64] KVM: Correct PSTATE on exception entry
- [arm64,armhf] KVM: Correct CPSR on exception entry
- [arm64,armhf] KVM: Correct AArch32 SPSR on exception entry
- [arm64] KVM: Only sign-extend MMIO up to register width
- [s390x] mm: fix dynamic pagetable upgrade for hugetlbfs
- [powerpc*] pseries: Advance pfn if section is not present in
lmb_is_removable()
- smb3: fix signing verification of large reads
- [arm64,armhf] PCI: tegra: Fix return value check of
pm_runtime_get_sync()
- [arm64,armhf] mmc: spi: Toggle SPI polarity, do not hardcode it
- [x86] ACPI: video: Do not export a non working backlight interface on MSI
MS-7721 boards
- [x86] ACPI / battery: Deal with design or full capacity being reported
as -1
- [x86] ACPI / battery: Use design-cap for capacity calculations if
full-cap is not available
- [x86] ACPI / battery: Deal better with neither design nor full capacity
not being reported
- alarmtimer: Unregister wakeup source when module get fails
- ubifs: Reject unsupported ioctl flags explicitly
- ubifs: don't trigger assertion on invalid no-key filename
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
- ubifs: Fix deadlock in concurrent bulk-read and writepage
- [i386] crypto: geode-aes - convert to skcipher API and make thread-safe
- [x86] hv_balloon: Balloon up according to request page number
- mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
- crypto: api - Check spawn->alg under lock in crypto_drop_spawn
- scsi: qla2xxx: Fix mtcp dump collection failure
- ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
- f2fs: choose hardlimit when softlimit is larger than hardlimit in
f2fs_statfs_project()
- f2fs: fix miscounted block limit in f2fs_statfs_project()
- f2fs: code cleanup for f2fs_statfs_project()
- PM: core: Fix handling of devices deleted during system-wide resume
- dm zoned: support zone sizes smaller than 128MiB
- dm space map common: fix to ensure new block isn't already in use
- dm crypt: fix benbi IV constructor crash if used in authenticated mode
- dm: fix potential for q->make_request_fn NULL pointer
- dm writecache: fix incorrect flush sequence when doing SSD mode commit
- padata: Remove broken queue flushing
- tracing: Annotate ftrace_graph_hash pointer with __rcu
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
- ftrace: Add comment to why rcu_dereference_sched() is open coded
- ftrace: Protect ftrace_graph_hash with ftrace_sync
- [x86] crypto: ccp - set max RSA modulus size for v3 platform devices as
well
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
- crypto: api - Fix race condition in crypto_spawn_alg
- scsi: qla2xxx: Fix unbound NVME response length
- NFS: Fix memory leaks and corruption in readdir
- NFS: Directory page cache pages need to be locked when read
- jbd2_seq_info_next should increase position index
- Btrfs: fix missing hole after hole punching and fsync when using
NO_HOLES
- btrfs: set trans->drity in btrfs_commit_transaction
- Btrfs: fix race between adding and putting tree mod seq elements and
nodes
- [armhf] tegra: Enable PLLP bypass during Tegra124 LP1
- iwlwifi: don't throw error when trying to remove IGTK
- mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
- sunrpc: expiry_time should be seconds not timeval
- gfs2: move setting current->backing_dev_info
- gfs2: fix O_SYNC write handling
- drm/rect: Avoid division by zero
- media: rc: ensure lirc is initialized before registering input device
- xen/balloon: Support xend-based toolstack take two
- watchdog: fix UAF in reboot notifier handling in watchdog core code
- bcache: add readahead cache policy options via sysfs interface
- eventfd: track eventfd_signal() recursion depth
- aio: prevent potential eventfd recursion on poll
- [x86] KVM: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
- [x86] KVM: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
- [x86] KVM: Protect pmu_intel.c from Spectre-v1/L1TF attacks
- [x86] KVM: Protect DR-based index computations from Spectre-v1/L1TF
attacks
- [x86] KVM: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
- [x86] KVM: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF
attacks
- [x86] KVM: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
- [x86] KVM: Protect MSR-based index computations in pmu.h from
Spectre-v1/L1TF attacks
- [x86] KVM: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
- [x86] KVM: Protect MSR-based index computations from Spectre-v1/L1TF
attacks in x86.c
- [x86] KVM: Protect x86_decode_insn from Spectre-v1/L1TF attacks
- [x86] KVM: Protect MSR-based index computations in
fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks
- [x86] KVM: Fix potential put_fpu() w/o load_fpu() on MPX platform
- [ppc64el] KVM: Book3S HV: Uninit vCPU if vcore creation fails
- [ppc64el] KVM: Book3S PR: Free shared page if mmu initialization fails
- [x86] kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
(CVE-2019-3016)
- [x86] KVM: Don't let userspace set host-reserved cr4 bits
- [x86] KVM: Free wbinvd_dirty_mask if vCPU creation fails
- [s390x] KVM: do not clobber registers during guest reset/store status
- [arm64,armhf] clk: tegra: Mark fuse clock as critical
- percpu: Separate decrypted varaibles anytime encryption can be enabled
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return
type
- scsi: csiostor: Adjust indentation in csio_device_reset
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
- scsi: ufs: Recheck bkops level if bkops is disabled
- [arm64] phy: qualcomm: Adjust indentation in read_poll_timeout
- ext2: Adjust indentation in ext2_fill_super
- [arm64] drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
- IB/mlx5: Fix outstanding_pi index for GSI qps
- IB/core: Fix ODP get user pages flow
- nfsd: fix delay timer on 32-bit architectures
- nfsd: fix jiffies/time_t mixup in LRU list
- nfsd: Return the correct number of bytes written to the file
- ubi: fastmap: Fix inverted logic in seen selfcheck
- ubi: Fix an error pointer dereference in error handling code
- bonding/alb: properly access headers in bond_alb_xmit()
- [armhf] net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
- [arm64,armhf] net: mvneta: move rx_dropped and rx_errors in per-cpu
stats
- net_sched: fix a resource leak in tcindex_set_parms()
- net/mlx5: IPsec, Fix esp modify function attribute
- net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx
- [arm64] net: macb: Remove unnecessary alignment check for TSO
- [arm64] net: macb: Limit maximum GEM TX length in TSO
- [armhf] net: dsa: b53: Always use dev->vlan_enabled in
b53_configure_vlan()
- ext4: fix deadlock allocating crypto bounce page from mempool
- btrfs: use bool argument in free_root_pointers()
- btrfs: free block groups after free'ing fs trees
- btrfs: flush write bio if we loop in extent_write_cache_pages
- [x86] KVM: mmu: Apply max PA check for MMIO sptes to 32-bit KVM
- [x86] KVM: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
- [x86] KVM: nVMX: vmread should not set rflags to specify success in case
of #PF
- KVM: Use vcpu-specific gva->hva translation when querying host page size
- KVM: Play nice with read-only memslots when querying host page size
- mm: zero remaining unavailable struct pages
- mm: return zero_resv_unavail optimization
- mm/page_alloc.c: fix uninitialized memmaps on a partially populated last
section
- cifs: fail i/o on soft mounts if sessionsetup errors out
- [x86] apic/msi: Plug non-maskable MSI affinity race
- clocksource: Prevent double add_timer_on() for watchdog_timer
- perf/core: Fix mlock accounting in perf_mmap()
- rxrpc: Fix service call disconnection
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.104
- ASoC: pcm: update FE/BE trigger order based on the command
- [x86] hv_sock: Remove the accept port restriction
- IB/mlx4: Fix memory leak in add_gid error flow
- RDMA/netlink: Do not always generate an ACK for some netlink operations
- RDMA/core: Fix locking in ib_uverbs_event_read
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case
ufshcd_scsi_add_wlus() fails
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn()
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe
- PCI: Don't disable bridge BARs when assigning bus resources
- nfs: NFS_SWAP should depend on SWAP
- NFS: Revalidate the file size on a fatal write error
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes()
- NFSv4: try lease recovery on NFS4ERR_EXPIRED
- [arm64] serial: uartps: Add a timeout to the tx empty wait
- [arm64] gpio: zynq: Report gpio direction at boot
- spi: spi-mem: Add extra sanity checks on the op param
- spi: spi-mem: Fix inverted logic in op sanity check
- rtc: cmos: Stop using shared IRQ
- [x86] platform/x86: intel_mid_powerbtn: Take a copy of ddata
- [powerpc*] pseries/vio: Fix iommu_table use-after-free refcount warning
- [powerpc*] pseries: Allow not having ibm,
hypertas-functions::hcall-multi-tce for DDW
- [arm64] iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA
- [arm64,armhf] KVM: vgic-its: Fix restoration of unmapped collections
- [armel,armhf] 8949/1: mm: mark free_memmap as __init
- [arm64] cpufeature: Fix the type of no FP/SIMD capability
- [arm64] ptrace: nofpsimd: Fail FP/SIMD regset operations
- [arm64,armhf] KVM: Fix young bit from mmu notifier
- [arm64,armhf] KVM: Fix DFSR setting for non-LPAE aarch32 guests
- [arm64,armhf] KVM: Make inject_abt32() inject an external abort instead
- [arm64] KVM: pmu: Don't increment SW_INCR if PMCR.E is unset
- mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock
- mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
- libertas: don't exit from lbs_ibss_join_existing() with RCU read lock
held
- libertas: make lbs_ibss_join_existing() return error code on rates
overflow
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready
state
- [x86] stackframe: Move ENCODE_FRAME_POINTER to asm/frame.h
- [x86] x86/stackframe, x86/ftrace: Add pt_regs frame annotations
- [arm64] serial: uartps: Move the spinlock after the read of the tx empty
- padata: fix null pointer deref of pd->pinst
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.105
- Input: synaptics - switch T470s to RMI4 by default
- Input: synaptics - enable SMBus on ThinkPad L470
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list
- ALSA: usb-audio: Fix UAC2/3 effect unit parsing
- ALSA: hda/realtek - Fix silent output on MSI-GL73
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1
- [arm64] cpufeature: Set the FP/SIMD compat HWCAP bits properly
- [arm64] nofpsmid: Handle TIF_FOREIGN_FPSTATE flag cleanly
- ALSA: usb-audio: sound: usb: usb true/false for bool return type
- ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000
- ext4: don't assume that mmp_nodename/bdevname have NUL
- ext4: fix support for inode sizes > 1024 bytes
- ext4: fix checksum errors with indexed dirs
- ext4: add cond_resched() to ext4_protect_reserved_inode (CVE-2020-8992)
- ext4: improve explanation of a mount failure caused by a misconfigured
kernel
- Btrfs: fix race between using extent maps and merging them
- btrfs: ref-verify: fix memory leaks
- btrfs: print message when tree-log replay starts
- btrfs: log message when rw remount is attempted with unclean tree-log
- [arm64] ssbs: Fix context-switch when SSBS is present on all CPUs
- [x86] perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's
event map
- nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info
- [amd64] IB/hfi1: Acquire lock to release TID entries when user file is
closed
- [amd64] IB/hfi1: Close window for pq and request coliding
- IB/rdmavt: Reset all QPs when the device is shut down
- RDMA/core: Fix invalid memory access in spec_filter_size
- [amd64] RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list
- [s390x] time: Fix clk type in get_tod_clock
- [x86] perf/x86/intel: Fix inaccurate period in context switch for auto-
reload
- NFSv4.1 make cachethis=no for writes
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer()
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer
- [x86] KVM: mmu: Fix struct guest_walker arrays for 5-level paging
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.106
- core: Don't skip generic XDP program execution for cloned SKBs
- enic: prevent waking up stopped tx queues over watchdog reset
- net/smc: fix leak of kernel memory to user space
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS
- [x86] KVM: nVMX: Use correct root level for nested EPT shadow page
tables
- [x86] drm/gma500: Fixup fbdev stolen size usage evaluation
- cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order
- brcmfmac: Fix use after free in brcmf_sdio_readframes()
- ext4: fix ext4_dax_read/write inode locking sequence for IOCB_NOWAIT
- ALSA: ctl: allow TLV read operation for callback type of element in
locked case
- [powerpc*] powernv/iov: Ensure the pdn for VFs always contains a valid
PE number
- [amd64] iommu/vt-d: Fix off-by-one in PASID allocation
- [x86] pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled
pins
- [x86] efi: Map the entire EFI vendor string before copying it
- [mips64el,mipsel] Loongson: Fix potential NULL dereference in
loongson3_platform_init()
- [arm*] usb: dwc2: Fix IN FIFO allocation
- [armel,armhf] clocksource/drivers/bcm2835_timer: Fix memory leak of
timer
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info
when load journal
- [armhf] pwm: omap-dmtimer: Simplify error handling
- [s390x] pci: Fix possible deadlock in recover_store()
- [powerpc*] iov: Move VF pdev fixup into pcibios_fixup_iov()
- tracing: Fix tracing_stat return values in error handling paths
- tracing: Fix very unlikely race of registering two stat tracers
- ext4, jbd2: ensure panic when aborting with zero errno
- ath10k: Correct the DMA direction for management tx buffers
- nbd: add a flush_workqueue in nbd_start_device
- [s390x] KVM: ENOTSUPP -> EOPNOTSUPP fixups
- [arm64] clk: qcom: rcg2: Don't crash if our parent can't be found;
return an error
- drm/amdgpu: remove 4 set but not used variable in
amdgpu_atombios_get_connector_info_from_object_table
- [arm64,armhf] regulator: rk808: Lower log level on optional GPIOs being
not available
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use
le16_add_cpu().
- selinux: fall back to ref-walk if audit is required
- selinux: ensure we cleanup the internal AVC counters on error in
avc_insert()
- media: cx23885: Add support for AVerMedia CE310B
- PCI: Add generic quirk for increasing D3hot delay
- PCI: Increase D3 delay for AMD Ryzen5/7 XHCI controllers
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in
v4l2_device macros
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
- fore200e: Fix incorrect checks of NULL pointer dereference
- netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status
- orinoco: avoid assertion in case of NULL pointer
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1
- scsi: ufs: Complete pending requests in host reset and restore path
- scsi: aic7xxx: Adjust indentation in ahc_find_syncrate
- selinux: ensure we cleanup the internal AVC counters on error in
avc_update()
- dmaengine: Store module owner in dma_device struct
- [arm64] clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock
- tools lib api fs: Fix gcc9 stringop-truncation compilation error
- [x86] ACPI: button: Add DMI quirk for Razer Blade Stealth 13 late 2019
lid switch
- mlx5: work around high stack usage with gcc
- drm: remove the newline for CRC source name.
- usbip: Fix unsafe unaligned pointer usage
- udf: Fix free space reporting for metadata and virtual partitions
- staging: rtl8188: avoid excessive stack usage
- [amd64] IB/hfi1: Add software counter for ctxt0 seq drop
- [armhf] soc/tegra: fuse: Correct straps' address for older Tegra124
device trees
- [x86] efi: Don't panic or BUG() on non-critical error conditions
- rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls
- [x86] nmi: Remove irq_work from the long duration NMI handler
- driver core: platform: Prevent resouce overflow from causing infinite
loops
- driver core: Print device when resources present in really_probe()
- bpf: Return -EBADRQC for invalid map type in __bpf_tx_xdp_map
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new()
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from
fw
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler
- drm/nouveau/fault/gv100-: fix memory leak on module unload
- [x86] drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add
- [armhf] usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue
- [arm64] iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an
STE
- f2fs: set I_LINKABLE early to avoid wrong access by vfs
- f2fs: free sysfs kobject
- scsi: iscsi: Don't destroy session if there are outstanding connections
- watchdog/softlockup: Enforce that timestamp is valid on boot
- f2fs: fix memleak of kobject
- [x86] mm: Fix NX bit clearing issue in kernel_map_pages_in_pgd
- [armhf] pwm: omap-dmtimer: Remove PWM chip in .remove before making it
unfunctional
- btrfs: fix possible NULL-pointer dereference in integrity checks
- btrfs: safely advance counter when looking up bio csums
- btrfs: device stats, log when stats are zeroed
- module: avoid setting info->name early in case we can fall back to
info->mod->name
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi()
- driver core: platform: fix u32 greater or equal to zero comparison
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s
- drm/nouveau/mmu: fix comptag memory leak
- [powerpc*] sriov: Remove VF eeh_dev state when disabling SR-IOV
- bcache: cached_dev_free needs to put the sb page
- [amd64] iommu/vt-d: Remove unnecessary WARN_ON_ONCE()
- jbd2: switch to use jbd2_journal_abort() when failed to submit the
commit record
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite
loop
- cifs: fix NULL dereference in match_prepath
- bpf: map_seq_next should always increase position index
- ceph: check availability of mds cluster on mount after wait timeout
- [arm64,armhf] irqchip/gic-v3: Only provision redistributors that are
enabled in ACPI
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided
- ftrace: fpid_next() should increase position index
- trigger_next should increase position index
- radeon: insert 10ms sleep in dce5_crtc_load_lut
- ocfs2: fix a NULL pointer dereference when call
ocfs2_update_inode_fsync_trans()
- reiserfs: prevent NULL pointer dereference in reiserfs_insert_item()
- bcache: explicity type cast in bset_bkey_last()
- [arm64,armhf] irqchip/gic-v3-its: Reference to its_invall_cmd descriptor
when building INVALL
- iwlwifi: mvm: Fix thermal zone registration
- brd: check and limit max_part par
- NFS: Fix memory leaks
- help_next should increase position index
- cifs: log warning message (once) if out of disk space
- virtio_balloon: prevent pfn array overflow
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.107
- [arm64] iommu/qcom: Fix bogus detach logic
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs
- [x86] ALSA: hda/realtek - Apply quirk for MSI GP63, too
- [x86] ALSA: hda/realtek - Apply quirk for yet another MSI laptop
- [armhf] ASoC: sun8i-codec: Fix setting DAI data format
- ecryptfs: fix a memory leak bug in parse_tag_1_packet()
- ecryptfs: fix a memory leak bug in ecryptfs_init_messaging()
- [x86] thunderbolt: Prevent crash if non-active NVMem file is read
- USB: misc: iowarrior: add support for 2 OEMed devices
- USB: misc: iowarrior: add support for the 28 and 28L devices
- USB: misc: iowarrior: add support for the 100 device
- floppy: check FDC index for errors before assigning it (CVE-2020-9383)
- vt: fix scrollback flushing on background consoles
- vt: selection, handle pending signals in paste_selection
- vt: vt_ioctl: fix race in VT_RESIZEX
- [arm*] staging: android: ashmem: Disallow ashmem memory from being
remapped (CVE-2020-0009)
- [x86] staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi.
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid
range.
- xhci: fix runtime pm enabling for quirky Intel hosts
- xhci: Fix memory leak when caching protocol extended capability PSI
tables - take 2
- usb: host: xhci: update event ring dequeue pointer on purpose
- USB: core: add endpoint-blacklist quirk
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2
- usb: uas: fix a plug & unplug racing
- USB: Fix novation SourceControl XL after suspend
- USB: hub: Don't record a connect-change event during reset-resume
- USB: hub: Fix the broken detection of USB3 device in SMSC hub
- [arm*] usb: dwc2: Fix SET/CLEAR_FEATURE and GET_STATUS flows
- [arm64,armhf] usb: dwc3: gadget: Check for IOC/LST bit in TRB->ctrl
fields
- staging: rtl8188eu: Fix potential security hole
- staging: rtl8188eu: Fix potential overuse of kernel memory
- staging: rtl8723bs: Fix potential security hole
- staging: rtl8723bs: Fix potential overuse of kernel memory
- [powerpc*] tm: Fix clearing MSR[TS] in current when reclaiming on signal
delivery
- jbd2: fix ocfs2 corrupt when clearing block group bits
- [x86] mce/amd: Publish the bank pointer only after setup has succeeded
- [x86] mce/amd: Fix kobject lifetime
- [x86] cpu/amd: Enable the fixed Instructions Retired counter IRPERF
- serial: 8250: Check UPF_IRQ_SHARED in advance
- [armhf] tty: serial: imx: setup the correct sg entry for tx dma
- serdev: ttyport: restore client ops on deregistration
- Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()"
- mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps()
- nvme-multipath: Fix memory leak with ana_log_buf
- genirq/irqdomain: Make sure all irq domain flags are distinct
- mm/vmscan.c: don't round up scan size for online memory cgroup
- drm/amdgpu/soc15: fix xclk for raven
- [x86] xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms
- [x86] KVM: nVMX: Don't emulate instructions in guest mode
(CVE-2020-2732)
- [x86] KVM: don't notify userspace IOAPIC on edge-triggered interrupt EOI
- drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets
- ext4: fix a data race in EXT4_I(inode)->i_disksize
- ext4: add cond_resched() to __ext4_find_entry()
- ext4: fix potential race between online resizing and write operations
- ext4: fix potential race between s_group_info online resizing and access
- ext4: fix potential race between s_flex_groups online resizing and
access
- ext4: fix mount failure with quota configured as module
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL
- [x86] KVM: nVMX: Refactor IO bitmap checks into helper function
- [x86] KVM: nVMX: Check IO instruction VM-exit conditions
- [x86] KVM: nVMX: handle nested posted interrupts when apicv is disabled
for L1
- [x86] KVM: apic: avoid calculating pending eoi from an uninitialized val
- btrfs: fix bytes_may_use underflow in prealloc error condtition
- btrfs: reset fs_root to NULL on error in open_ctree
- btrfs: do not check delayed items are empty for single transaction
cleanup
- Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered
extents
- scsi: Revert "target: iscsi: Wait for all commands to finish before
freeing a session"
- usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus
- [arm*] usb: dwc2: Fix in ISOC request length checking
- staging: rtl8723bs: fix copy of overlapping memory
- ecryptfs: replace BUG_ON with error handling code
- genirq/proc: Reject invalid affinity masks (again)
- bpf, offload: Replace bitwise AND by logical AND in
bpf_prog_offload_info_fill
- ALSA: seq: Avoid concurrent access to queue flags
- ALSA: seq: Fix concurrent access to queue current tick/time
- netfilter: xt_hashlimit: limit the max size of hashtable
- rxrpc: Fix call RCU cleanup using non-bh-safe locks
- ata: ahci: Add shutdown to freeze hardware resources of ahci
- xen: Enable interrupts when calling _cond_resched()
- [s390x] mm: Explicitly compare PAGE_DEFAULT_KEY against zero in
storage_key_init_range
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.108
- [arm64,armhf] irqchip/gic-v3-its: Fix misuse of GENMASK macro
- iwlwifi: pcie: fix rb_allocator workqueue allocation
- ipmi:ssif: Handle a possible NULL pointer reference
- [arm64] drm/msm: Set dma maximum segment size for mdss
- dax: pass NOWAIT flag to iomap_apply
- mac80211: consider more elements in parsing CRC
- cfg80211: check wiphy driver existence for drvinfo report
- [s390x] zcrypt: fix card and queue total counter wrap
- qmi_wwan: re-add DW5821e pre-production variant
- qmi_wwan: unconditionally reject 2 ep interfaces
- [arm64] soc/tegra: fuse: Fix build with Tegra194 configuration
- net: ena: fix potential crash when rxfh key is NULL
- net: ena: fix uses of round_jiffies()
- net: ena: add missing ethtool TX timestamping indication
- net: ena: fix incorrect default RSS key
- net: ena: rss: fix failure to get indirection table
- net: ena: rss: store hash function as values and not bits
- net: ena: fix incorrectly saving queue numbers when setting RSS
indirection table
- net: ena: ethtool: use correct value for crc32 hash
- net: ena: ena-com.c: prevent NULL pointer dereference
- cifs: Fix mode output in debugging statements
- cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE
- sysrq: Restore original console_loglevel when sysrq disabled
- sysrq: Remove duplicated sysrq message
- net: fib_rules: Correctly set table field when table number exceeds 8
bits
- net: sched: correct flower port blocking
- sctp: move the format error check out of __sctp_sf_do_9_1_abort
- ipv6: Fix route replacement with dev-only route
- ipv6: Fix nlmsg_flags when splitting a multipath route
- qede: Fix race between rdma destroy workqueue and link change event
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array()
- audit: fix error handling in audit_data_to_entry()
- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro
- [arm64,x86] ACPI: watchdog: Fix gas->access_width usage
- [x86] KVM: VMX: check descriptor table exits on instruction emulation
- HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard
dock
- HID: core: fix off-by-one memset in hid_report_raw_event()
- HID: core: increase HID report buffer size to 8KiB
- tracing: Disable trace_printk() on post poned tests
- Revert "PM / devfreq: Modify the device name as devfreq(X) for sysfs"
- amdgpu/gmc_v9: save/restore sdpif regs during S3
- vhost: Check docket sk_family instead of call getname (CVE-2020-10942)
- HID: alps: Fix an error handling path in 'alps_input_configured()'
- HID: hiddev: Fix race in in hiddev_disconnect()
- [x86] hv_netvsc: Fix unwanted wakeup in netvsc_attach()
- [s390x] qeth: vnicc Fix EOPNOTSUPP precedence
- net: netlink: cap max groups which will be considered in netlink_bind()
- [amd64] net: atlantic: fix use after free kasan warn
- [amd64] net: atlantic: fix potential error handling
- net/smc: no peer ID in CLC decline for SMCD
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE
- namei: only return -ECHILD from follow_dotdot_rcu()
- mwifiex: drop most magic numbers from
mwifiex_process_tdls_action_frame()
- [x86] KVM: SVM: Override default MMIO mask if memory encryption is
enabled
- KVM: Check for a bad hva before dropping into the ghc slow path
- sched/fair: Optimize update_blocked_averages()
- sched/fair: Fix O(nr_cgroups) in the load balancing path
- perf stat: Use perf_evsel__is_clocki() for clock events
- perf stat: Fix shadow stats for clock events
- [arm64] drivers: net: xgene: Fix the order of the arguments of
'alloc_etherdev_mqs()'
- kprobes: Set unoptimized flag after unoptimizing code
- [armhf] pwm: omap-dmtimer: put_device() after of_find_device_by_node()
- perf hists browser: Restore ESC as "Zoom out" of DSO/thread/etc
- [x86] KVM: Remove spurious kvm_mmu_unload() from vcpu destruction path
- [x86] KVM: Remove spurious clearing of async #PF MSR
- netfilter: nft_tunnel: no need to call htons() when dumping ports
- mm/hu