deiban packaging of linux kernel with sysmocom modifications
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

9819 lines
533 KiB

linux (4.19.6-1~exp1) UNRELEASED; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.6
[ Marcin Juszkiewicz ]
* [arm64] Enable ACPI IMPI
* [arm64] Enable IPMI watchdog and power off support
* [arm64] Enable PCI Express hotplug
* [arm64] Enable PMU for several server cpus
* [arm64] Enable HiSilicon LPC for serial/ipmi access
[ Romain Perier ]
* [x86] Enable support for error detection and correction on the Intel
Pondicherry2 Integrated Memory Controller (Closes: #914946)
[ Uwe Kleine-König ]
* Enable usb support for ATH10K (Closes: #915083)
[ Luca Boccassi ]
* debian/rules.real: Split the rules so that the [un]versioned_tools
knobs can be used to avoid building them. Fixes FTBFS with unversioned
tools disabled.
* perf: do not ship python2-only call-graph-from-sql script.
* Override Lintian warning dbg-package-missing-depends in source too.
[ Ben Hutchings ]
* debian/rules.real: Mark most targets as phony
* debian/rules: Mark more targets as phony
* libcpupower: Hide private function and drop it from .symbols file
-- Uwe Kleine-König <ukleinek@debian.org> Wed, 28 Nov 2018 12:20:46 +0100
linux (4.19.5-1~exp1) experimental; urgency=medium
* New upstream release: https://kernelnewbies.org/Linux_4.19
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.1
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.3
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.4
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.5
[ Ben Hutchings ]
* linux-perf: Enable verbose output for build-time feature detection
* udeb: Define mtd-core-modules package to contain MTD core if not built-in
* udeb: Move MTD core from nic-modules to mtd-core-modules
* debian/changelog: Move older entries to changelog.old
* debian/rules: Checksum only the source name and version from
debian/changelog
* Move generation of CONFIG_BUILD_SALT to gencontrol.py
* [x86] hyperv-daemons: Make all services conditional on device existence
* debian/rules.real: Fix build failure with pkg.linux.nosource profile
* debian/source/options: Delete redundant compression setting; satisfy
lintian
* Documentation/media: uapi: Explicitly say there are no Invariant Sections
(Closes: #698668)
[ Karsten Merker ]
* [riscv64] Build a kernel image and udebs for riscv64 (Closes: #908161)
[ Uwe Kleine-König ]
* [armhf,arm64] enable SND_BCM2835 as a module (Closes: #911121)
* Enable Orange filesystem (Closes: #911743)
* [arm64] Enable hns3 network driver as a module. (Closes: #914422)
[ Noah Meyerhans ]
* [cloud-amd64] Enable Amazon ENA ethernet driver (Closes: #910049)
[ Romain Perier ]
* [rt] Update to 4.19.1-rt3
* [rt] Update patch arm-disable-NEON-in-kernel-mode.patch, so it can be
applied onto 4.19.2
* [rt] Update patch
irq-allow-disabling-of-softirq-processing-in-irq-thread-context.patch, so
it can be applied onto 4.19.2
* [amd64] Enable AMD pinctrl driver (Closes: #908954)
* Enable Diffie-Hellman operations on retained keys (Closes: #911998)
* Update patch features/all/lockdown/enable-cold-boot-attack-mitigation.patch,
so it can be applied onto 4.19.2
* [x86] Enable DisplayPort CEC-Tunneling-over-AUX HDMI support
(Closes: #913199)
-- Bastian Blank <waldi@debian.org> Tue, 27 Nov 2018 20:06:42 +0100
linux (4.19~rc7-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ Uwe Kleine-König ]
* [armhf] enable MVNETA_BM_ENABLE and CAN_FLEXCAN as a module
* enable NET_SCH_CAKE as a module (Closes: #908709)
* enable HID_NTI as a module (Closes: #910260)
[ Ben Hutchings ]
* linux-kbuild: Include scripts/subarch.include (Closes: #910348)
-- Ben Hutchings <ben@decadent.org.uk> Sun, 07 Oct 2018 23:48:27 +0100
linux (4.19~rc6-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ Ben Hutchings ]
* [ppc64el] udeb: Fix relative #include filenames in kernel-image module
list (really fixes FTBFS?)
* debian/bin, debian/lib/python: Fix most errors reported by pycodestyle
* debian/bin, debian/rules.real: Add symlink to Python package directory
instead of editing path
* debian/bin, debian/lib/python: Clean up imports based on pyflakes report
* debian/bin, debian/lib/python: Delete write-only vars reported by pyflakes
* debian/lib/python/debian_linux/gencontrol.py: Delete broken methods
* debian/lib/python/debian_linux/config.py: Fix undefined exception type
* Add Python static checks and unit tests to autopkgtest tests
-- Ben Hutchings <ben@decadent.org.uk> Wed, 03 Oct 2018 18:57:08 +0100
linux (4.19~rc4-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ Ben Hutchings ]
* debian/control: Add arch-qualification to build-dependencies for linux-perf
(Closes: #908519)
* debian/control: Build-depend on libunwind-dev instead of libunwind8-dev
* [hppa,mips*,powerpc*,sh4] debian/control: Build-depend on libunwind-dev for
linux-perf
* debian/control: Build-depend on libnuma-dev for linux-perf on all arches
* debian/control: Remove "cross" from profiles for build-dep on libssl-dev
* [mips64*] debian/control: Build-depend on gcc-multilib for linux-perf
* debian/lib/python: Use raw strings for all regexes
* debian/control: Fix restrictions for build-deps on asciidoctor and
patchutils
* Add support for specifying build-dependencies in binary package templates
* debian/templates: Move various build-dependencies to binary package
templates
* linux-perf: Fix generation of Perl and Python interpreter dependencies
(Closes: #908547)
* lockdep, lib{cpupower,lockdep}-dev: Remove bogus deps on ${shlibs:Depends}
* debian/rules.d/tools/power/linux-cpupower: Add "+" to recursive make
commands
* tools: x86_energy_perf_policy: Fix "uninitialized variable" warnings at -O2
* tools: turbostat: Add checks for failure of fgets() and fscanf()
* debian/control: Build-depend on texlive-latex-{base,extra}, dvipng for
linux-doc
* debian/rules{,.real}: Use /usr/share/dpkg/architecture.mk
* debian/signing_templates/rules: Use /usr/share/dpkg/architecture.mk
* linux-image-*-signed-template: Add ${misc:Depends} to Depends
* linux-image-*-signed-template: Include changelog and copyright files
* linux-image-*-signed-template: Depend on dpkg-dev
* linux-image-*-signed-template: Override lintian warnings about non-
executable scripts
* [ia64] udeb: Fix priority of sn-modules
* Revert "Revert "net: increase fragment memory usage limits"", as 4.19
includes a better fix for CVE-2018-5391
* debian/patches: Add Forwarded fields to several patches
* [ppc64el] udeb: Fix relative #include filenames in module lists (fixes
FTBFS)
* [ppc64] udeb: Revert accidental change to nic-pcmcia-modules dependencies
(fixes FTBFS)
-- Ben Hutchings <ben@decadent.org.uk> Tue, 18 Sep 2018 15:52:02 +0100
linux (4.19~rc3-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ Ben Hutchings ]
* [s390x] linux-image: Install compressed kernel image (fixes FTBFS)
* [powerpc*] boot: Fix missing crc32poly.h when building with KERNEL_XZ
(fixes FTBFS)
* [x86] boot: Fix EFI stub alignment
* wireless: Update "wireless: Disable regulatory.db direct loading" for
4.19-rc3
* aufs: Update support patchset to aufs4.x-rcN 20180910
-- Ben Hutchings <ben@decadent.org.uk> Mon, 10 Sep 2018 20:13:55 +0100
linux (4.19~rc2-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ Ben Hutchings ]
* aufs: Disable until it is updated for Linux 4.19
* debian/rules.d: Update for move of bin2c back up to scripts
* locking/lockdep: Delete unnecesary #include (fixes liblockdep build)
* [hppa] debian/control: Simplify build-dependencies for 64-bit toolchain
* Compile with gcc-8 on all architectures
* udeb: Merge configuration directories and files across architectures
* [alpha,hppa] udeb: Remove incorrect dependency overrides
-- Ben Hutchings <ben@decadent.org.uk> Mon, 03 Sep 2018 21:34:41 +0100
linux (4.18.20-2) unstable; urgency=medium
* linux-kbuild: Include scripts/subarch.include (Closes: #910348)
-- Ben Hutchings <ben@decadent.org.uk> Fri, 23 Nov 2018 19:15:55 +0000
linux (4.18.20-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.11
- gso_segment: Reset skb->mac_len after modifying network header
- ipv6: fix possible use-after-free in ip6_xmit()
- net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
- [alpha, hppa, x86] net: hp100: fix always-true check for link up state
- pppoe: fix reception of frames with no mac header
- qmi_wwan: set DTR for modems in forced USB2 mode
- udp4: fix IP_CMSG_CHECKSUM for connected sockets
- neighbour: confirm neigh entries when ARP packet is received
- udp6: add missing checks on edumux packet processing
- net/sched: act_sample: fix NULL dereference in the data path
- hv_netvsc: fix schedule in RCU context
- [arm64, armhf] net: dsa: mv88e6xxx: Fix ATU Miss Violation
- socket: fix struct ifreq size in compat ioctl
- bnxt_en: Fix VF mac address regression.
- ipv6: use rt6_info members when dst is set in rt6_fill_node
- net/ipv6: do not copy dst flags on rt init
- [arm64, armhf] net: mvpp2: let phylink manage the carrier state
- net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
- NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
- NFC: Fix the number of pipes
- ASoC: uapi: fix sound/skl-tplg-interface.h userspace compilation errors
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at
error path
- ALSA: bebob: use address returned by kmalloc() instead of kernel stack for
streaming DMA mapping
- [powerpc*, mips*, x86, alpha, sparc*] ALSA: emu10k1: fix possible info
leak to userspace on SNDRV_EMU10K1_IOCTL_INFO
- ALSA: firewire-digi00x: fix memory leak of private data
- ALSA: firewire-tascam: fix memory leak of private data
- ALSA: fireworks: fix memory leak of response buffer at error path
- ALSA: oxfw: fix memory leak for model-dependent data at error path
- ALSA: oxfw: fix memory leak of discovered stream formats at error path
- ALSA: oxfw: fix memory leak of private data
- mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able
- [x86] platform: dell-smbios-wmi: Correct a memory leak
- [x86] platform: alienware-wmi: Correct a memory leak
- xen/netfront: don't bug in case of too many frags
- Revert "PCI: Add ACS quirk for Intel 300 series"
- crypto: x86/aegis,morus - Do not require OSXSAVE for SSE2
- fork: report pid exhaustion correctly
- mm: disable deferred struct page for 32-bit arches
- mm: shmem.c: Correctly annotate new inodes for lockdep
- bpf/verifier: disallow pointer subtraction
- Revert "ubifs: xattr: Don't operate on deleted inodes"
- libata: mask swap internal and hardware tag
- ocfs2: fix ocfs2 read block panic
- drm/i915/bdw: Increase IPS disable timeout to 100ms
- drm/nouveau: Reset MST branching unit before enabling
- drm/nouveau: Only write DP_MSTM_CTRL when needed
- drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend()
- drm/nouveau: Fix deadlocks in nouveau_connector_detect()
- drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload
- drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement
- drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM
requests
- drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in
connector_detect()
- drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early
- drm/vc4: Fix the "no scaling" case on multi-planar YUV formats
- drm: udl: Destroy framebuffer only if it was initialized
- drm/amdgpu: add new polaris pci id
- tty: vt_ioctl: fix potential Spectre v1
- ext4: check to make sure the rename(2)'s destination is not freed
- ext4: avoid divide by zero fault when deleting corrupted inline
directories
- ext4: avoid arithemetic overflow that can trigger a BUG
- ext4: recalucate superblock checksum after updating free blocks/inodes
- ext4: fix online resize's handling of a too-small final block group
- ext4: fix online resizing for bigalloc file systems with a 1k block size
- ext4: don't mark mmp buffer head dirty
- ext4: show test_dummy_encryption mount option in /proc/mounts
- ext4, dax: add ext4_bmap to ext4_dax_aops
- ext4, dax: set ext4_dax_aops for dax files
- sched/fair: Fix vruntime_normalized() for remote non-migration wakeup
- [x86] vmw_balloon: include asm/io.h
- iw_cxgb4: only allow 1 flush on user qps
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.12
- tsl2550: fix lux1_input error in low light
- vmci: type promotion bug in qp_host_get_user_memory()
- [x86] numa_emulation: Fix emulated-to-physical node mapping
- staging: rts5208: fix missing error check on call to rtsx_write_register
- [armhf] power: supply: axp288_charger: Fix initial
constant_charge_current value
- [sh4] serial: sh-sci: Stop RX FIFO timer during port shutdown
- [arm64] power: vexpress: fix corruption in notifier registration
- [x86] iommu/amd: make sure TLB to be flushed before IOVA freed
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
- USB: serial: kobil_sct: fix modem-status error handling
- 6lowpan: iphc: reset mac_header after decompress to fix panic
- [s390x] mm: correct allocate_pgste proc_handler callback
- power: remove possible deadlock when unregistering power_supply
- cxgb4: Fix the condition to check if the card is T5
- RDMA/bnxt_re: Fix a couple off by one bugs
- RDMA/i40w: Hold read semaphore while looking after VMA
- RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
- IB/core: type promotion bug in rdma_rw_init_one_mr()
- IB/mlx4: Test port number before querying type.
- vhost_net: Avoid tx vring kicks during busyloop
- IB/mlx5: Fix GRE flow specification
- include/rdma/opa_addr.h: Fix an endianness issue
- x86/tsc: Add missing header to tsc_msr.c
- ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
- [x86] entry/64: Add two more instruction suffixes
- scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
buffer size
- scsi: klist: Make it safe to use klists in atomic context
- [powerpc*] scsi: ibmvscsi: Improve strings handling
- scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
- usb: wusbcore: security: cast sizeof to int for comparison
- ath10k: sdio: use same endpoint id for all packets in a bundle
- ath10k: sdio: set skb len for all rx packets
- [powerpc*] powerpc/powernv/ioda2: Reduce upper limit for DMA window size
- [x86] platform/x86: asus-wireless: Fix uninitialized symbol usage
- [x86] ACPI / button: increment wakeup count only when notified
- alarmtimer: Prevent overflow for relative nanosleep (CVE-2018-13053)
- [s390x] s390/dasd: correct numa_node in dasd_alloc_queue
- [s390x] s390/scm_blk: correct numa_node in scm_blk_dev_setup
- posix-timers: Make forward callback return s64
- posix-timers: Sanitize overrun handling (CVE-2018-12896)
- [powerpc*] ALSA: snd-aoa: add of_node_put() in error path
- ath10k: use locked skb_dequeue for rx completions
- [armhf] media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial
data
- staging: android: ashmem: Fix mmap size validation
- staging: mt7621-eth: Fix memory leak in mtk_add_mac() error path
- [powerpc*, x86, alpha, m68k, hppa] drivers/tty: add error handling for
pcmcia_loop_config
- [arm64] dts: renesas: salvator-common: Fix adv7482 decimal unit addresses
- [x86] media: tm6000: add error handling for dvb_register_adapter
- [powerpc*, mips*, arm64, x86, alpha] ALSA: hda: Add AZX_DCAPS_PM_RUNTIME
for AMD Raven Ridge
- ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
- [armhf] drm/sun4i: Enable DW HDMI PHY clock
- [armhf] drm/sun4i: Fix releasing node when enumerating enpoints
- ath10k: transmit queued frames after processing rx packets
- mt76x2: fix mrr idx/count estimation in mt76x2_mac_fill_tx_status()
- rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
- brcmsmac: fix wrap around in conversion from constant to s16
- bitfield: fix *_encode_bits()
- [arm64]wlcore: Add missing PM call for
wlcore_cmd_wait_for_event_or_timeout()
- [armhf] drm/omap: gem: Fix mm_list locking
- [armhf] mvebu: declare asm symbols as character arrays in pmsu.c
- RDMA/uverbs: Don't overwrite NULL pointer with ZERO_SIZE_PTR
- HID: hid-ntrig: add error handling for sysfs_create_group
- [x86] HID: i2c-hid: Use devm to allocate i2c_hid struct
- [arm64] dts: renesas: Fix VSPD registers range
- drm/v3d: Take a lock across GPU scheduler job creation and queuing.
- scsi: bnx2i: add error handling for ioremap_nocache
- [arm64] scsi: hisi_sas: Fix the conflict between dev gone and host reset
- [armhf] spi: orion: fix CS GPIO handling again
- scsi: megaraid_sas: Update controller info during resume
- [x86] ASoC: Intel: bytcr_rt5640: Fix Acer Iconia 8 over-current detect
threshold
- [x86] EDAC, i7core: Fix memleaks and use-after-free on probe and remove
- [x86, arm64, armhf] ASoC: dapm: Fix potential DAI widget pointer deref
when linking DAIs
- module: exclude SHN_UNDEF symbols from kallsyms api
- nfsd: fix corrupted reply to badly ordered compound
- [mips*, arm64, x86] EDAC: Fix memleak in module init error path
- ath10k: fix incorrect size of dma_free_coherent in
ath10k_ce_alloc_src_ring_64
- ath10k: snoc: use correct bus-specific pointer in RX retry
- fs/lock: skip lock owner pid translation in case we are in init_pid_ns
- ath10k: fix memory leak of tpc_stats
- Input: xen-kbdfront - fix multi-touch XenStore node's locations
- drm/vc4: Add missing formats to vc4_format_mod_supported().
- [armhf] ARM: dts: dra7: fix DCAN node addresses
- drm/vc4: plane: Expand the lower bits by repeating the higher bits
- block: fix deadline elevator drain for zoned block devices
- [x86] mm: Expand static page table for fixmap space
- [armhf] serial: imx: restore handshaking irq for imx1
- [arm64] serial: mvebu-uart: Fix reporting of effective CSIZE to userspace
- [x86] intel_th: Fix device removal logic
- [x86] intel_th: Fix resource handling for ACPI glue layer
- spi: tegra20-slink: explicitly enable/disable clock
- [mips*, 'arm64', x86, armhf] regulator: fix crash caused by null driver
data
- [mips*, 'arm64', x86, armhf] regulator: Fix 'do-nothing' value for
regulators without suspend state
- USB: fix error handling in usb_driver_claim_interface()
- USB: handle NULL config in usb_find_alt_setting()
- usb: core: safely deal with the dynamic quirk lists
- [armhf] usb: musb: dsps: do not disable CPPI41 irq in driver teardown
- USB: usbdevfs: sanitize flags more
- USB: usbdevfs: restore warning for nonsensical flags
- Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in
service_outstanding_interrupt()"
- USB: remove LPM management from usb_driver_claim_interface()
- uaccess: Fix is_source param for check_copy_size() in
copy_to_iter_mcsafe()
- filesystem-dax: Fix use of zero page
- Input: elantech - enable middle button of touchpad on ThinkPad P72
- IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
- IB/hfi1: Fix SL array bounds check
- IB/hfi1: Invalid user input can result in crash
- IB/hfi1: Fix context recovery when PBC has an UnsupportedVL
- IB/hfi1: Fix destroy_qp hang after a link down
- [x86] ACPI / hotplug / PCI: Don't scan for non-hotplug bridges if slot
is not bridge
- RDMA/uverbs: Atomically flush and mark closed the comp event queue
- ARM: OMAP2+: Fix null hwmod for ti-sysc debug
- ARM: OMAP2+: Fix module address for modules using mpu_rt_idx
- bus: ti-sysc: Fix module register ioremap for larger offsets
- qed: Wait for ready indication before rereading the shmem
- qed: Wait for MCP halt and resume commands to take place
- qed: Prevent a possible deadlock during driver load and unload
- qed: Avoid sending mailbox commands when MFW is not responsive
- thermal: of-thermal: disable passive polling when thermal zone is disabled
- isofs: reject hardware sector size > 2048 bytes
- mmc: atmel-mci: fix bad logic of sg_copy_{from,to}_buffer conversion
- mmc: android-goldfish: fix bad logic of sg_copy_{from,to}_buffer
conversion
- bus: ti-sysc: Fix no_console_suspend handling
- [armhf] dts: omap4-droid4: fix vibrations on Droid 4
- bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
- bpf, sockmap: fix sock hash count in alloc_sock_hash_elem
- tls: possible hang when do_tcp_sendpages hits sndbuf is full case
- bpf: sockmap: write_space events need to be passed to TCP handler
- drm/amdgpu: fix VM clearing for the root PD
- drm/amdgpu: fix preamble handling
- amdgpu: fix multi-process hang issue
- net/ncsi: Fixup .dumpit message flags and ID check in Netlink handler
- tcp_bbr: add bbr_check_probe_rtt_done() helper
- tcp_bbr: in restart from idle, see if we should exit PROBE_RTT
- net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
- net: hns: fix skb->truesize underestimation
- tools: bpftool: return from do_event_pipe() on bad arguments
- e1000: check on netif_running() before calling e1000_up()
- e1000: ensure to free old tx/rx rings in set_ringparam()
- ixgbe: fix driver behaviour after issuing VFLR
- i40e: Fix for Tx timeouts when interface is brought up if DCB is enabled
- i40e: fix condition of WARN_ONCE for stat strings
- [arm64] crypto: cavium/nitrox - fix for command corruption in queue full
case with backlog submissions.
- hwmon: (ina2xx) fix sysfs shunt resistor read access
- hwmon: (adt7475) Make adt7475_read_word() return errors
- Revert "ARM: dts: imx7d: Invert legacy PCI irq mapping"
- drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode
- drm/amdgpu: Update power state at the end of smu hw_init.
- ata: ftide010: Add a quirk for SQ201
- nvme-fcloop: Fix dropped LS's to removed target port
- [armhf] dts: omap4-droid4: Fix emmc errors seen on some devices
- drm/amdgpu: Need to set moved to true when evict bo
- [arm64, armhf] smccc-1.1: Make return values unsigned long
- [arm64, armhf] smccc-1.1: Handle function result as parameters
- i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
- clk: x86: Set default parent to 48Mhz
- [x86] pti: Fix section mismatch warning/error
- [powerpc*] KVM: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM
workarounds
- [powerpc*] fix csum_ipv6_magic() on little endian platforms
- [powerpc*] pkeys: Fix reading of ibm, processor-storage-keys property
- [powerpc*] pseries: Fix unitialized timer reset on migration
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.13
- mac80211: Run TXQ teardown code before de-registering interfaces
- mac80211_hwsim: require at least one channel
- Btrfs: fix unexpected failure of nocow buffered writes after snapshotting
when low on space
- [powerpc*] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate
function
- cfg80211: remove division by size of sizeof(struct ieee80211_wmm_rule)
- btrfs: btrfs_shrink_device should call commit transaction at the end
- scsi: csiostor: add a check for NULL pointer after kmalloc()
- scsi: csiostor: fix incorrect port capabilities
- scsi: libata: Add missing newline at end of file
- scsi: aacraid: fix a signedness bug
- bpf, sockmap: fix potential use after free in bpf_tcp_close
- bpf, sockmap: fix psock refcount leak in bpf_tcp_recvmsg
- bpf: sockmap, decrement copied count correctly in redirect error case
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- cfg80211: make wmm_rule part of the reg_rule structure
- mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom
- nl80211: Fix nla_put_u8 to u16 for NL80211_WMMR_TXOP
- nl80211: Pass center frequency in kHz instead of MHz
- bpf: fix several offset tests in bpf_msg_pull_data
- mac80211: mesh: fix HWMP sequence numbering to follow standard
- mac80211: avoid kernel panic when building AMSDU from non-linear SKB
- bpf: fix msg->data/data_end after sg shift repair in bpf_msg_pull_data
- bpf: fix shift upon scatterlist ring wrap-around in bpf_msg_pull_data
- bpf: fix sg shift repair start offset in bpf_msg_pull_data
- [arm64] net: hns: add the code for cleaning pkt in chip
- [arm64] net: hns: add netif_carrier_off before change speed and duplex
- [arm64, armhf] net: mvpp2: initialize port of_node pointer
- cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
- mac80211: do not convert to A-MSDU if frag/subframe limited
- mac80211: always account for A-MSDU header changes
- Revert "blk-throttle: fix race between blkcg_bio_issue_check() and
cgroup_rmdir()"
- md/raid5-cache: disable reshape completely
- RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
- bpf: Fix bpf_msg_pull_data()
- bpf: avoid misuse of psock when TCP_ULP_BPF collides with another ULP
- fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
- mac80211: fix an off-by-one issue in A-MSDU max_subframe computation
- cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
- mac80211: fix WMM TXOP calculation
- mac80211: fix a race between restart and CSA flows
- mac80211: Fix station bandwidth setting after channel switch
- mac80211: don't Tx a deauth frame if the AP forbade Tx
- mac80211: shorten the IBSS debug messages
- [powerpc*] net/ibm/emac: wrong emac_calc_base call was used by typo
- ceph: avoid a use-after-free in ceph_destroy_options()
- firmware: arm_scmi: fix divide by zero when sustained_perf_level is zero
- afs: Fix cell specification to permit an empty address list
- mm: madvise(MADV_DODUMP): allow hugetlbfs pages
- bpf: 32-bit RSH verification must truncate input before the ALU op
(CVE-2018-18445)
- netfilter: xt_cluster: add dependency on conntrack module
- [x86] HID: intel-ish-hid: Enable Sunrise Point-H ish driver
- HID: add support for Apple Magic Keyboards
- HID: hid-saitek: Add device ID for RAT 7 Contagion
- scsi: iscsi: target: Set conn->sess to NULL when
iscsi_login_set_conn_values fails
- scsi: iscsi: target: Fix conn_ops double free
- perf annotate: Properly interpret indirect call
- perf evsel: Fix potential null pointer dereference in
perf_evsel__new_idx()
- perf util: Fix bad memory access in trace info.
- [powerpc*] perf probe: Ignore SyS symbols irrespective of endianness
- [arm64] perf annotate: Fix parsing aarch64 branch instructions after
objdump update
- netfilter: nf_tables: release chain in flushing set
- HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub
report
- USB: yurex: Check for truncation in yurex_read()
- nvmet-rdma: fix possible bogus dereference under heavy load
- net/mlx5: Consider PCI domain in search for next dev
- [x86] HID: i2c-hid: Don't reset device upon system resume
- dm raid: fix reshape race on small devices
- drm/nouveau: fix oops in client init failure path
- drm/nouveau/mmu: don't attempt to dereference vmm without valid instance
pointer
- drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
- drm/nouveau/disp: fix DP disable race
- drm/nouveau/disp/gm200-: enforce identity-mapped SOR assignment for
LVDS/eDP panels
- dm raid: fix stripe adding reshape deadlock
- dm raid: fix rebuild of specific devices by updating superblock
- dm raid: fix RAID leg rebuild errors
- r8169: set TxConfig register after TX / RX is enabled, just like RxConfig
- fs/cifs: suppress a string overflow warning
- net: ena: fix surprise unplug NULL dereference kernel crash
- net: ena: fix driver when PAGE_SIZE == 64kB
- net: ena: fix device destruction to gracefully free resources
- net: ena: fix potential double ena_destroy_device()
- net: ena: fix missing lock during device destruction
- net: ena: fix missing calls to READ_ONCE
- sched/topology: Set correct NUMA topology type
- dm thin metadata: try to avoid ever aborting transactions
- netfilter: nfnetlink_queue: Solve the NFQUEUE/conntrack clash for
NF_REPEAT
- netfilter: xt_hashlimit: use s->file instead of s->private
- drm/amdgpu: Fix SDMA hang in prt mode v2
- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk
- r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
- [s390x] qeth: use vzalloc for QUERY OAT buffer
- [s390x] qeth: don't dump past end of unknown HW header
- cifs: read overflow in is_valid_oplock_break()
- asm-generic: io: Fix ioport_map() for !CONFIG_GENERIC_IOMAP &&
CONFIG_INDIRECT_PIO
- xen/manage: don't complain about an empty value in control/sysrq node
- [mips*, x86, s390x] xen: avoid crash in disable_hotplug_cpu
- new primitive: discard_new_inode()
- vfs: don't evict uninitialized inode
- ovl: set I_CREATING on inode being created
- ovl: fix access beyond unterminated strings
- ovl: fix memory leak on unlink of indexed file
- ovl: fix format of setxattr debug
- sysfs: Do not return POSIX ACL xattrs via listxattr
- b43: fix DMA error related regression with proprietary firmware
- firmware: Fix security issue with request_firmware_into_buf()
- firmware: Always initialize the fw_priv list object
- smb2: fix missing files in root share directory listing
- [x86] iommu/amd: Clear memory encryption mask from physical address
- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
- [x86] crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
- crypto: chelsio - Fix memory corruption in DMA Mapped buffers.
- [arm64, armhf, x86, powerpc*] gpiolib: Free the last requested descriptor
- [x86] Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()
- proc: restrict kernel stack dumps to root (CVE-2018-17972)
- ocfs2: fix locking for res->tracking and dlm->tracking_list
- [x86] HID: i2c-hid: disable runtime PM operations on hantick touchpad
- ixgbe: check return value of napi_complete_done()
- dm thin metadata: fix __udivdi3 undefined on 32-bit
- Revert "drm/amd/pp: Send khz clock values to DC for smu7/8"
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.14
- perf/core: Add sanity check to deal with pinned event failure
- mm: migration: fix migration of huge PMD shared pages
- mm, thp: fix mlocking THP page with migration enabled
- mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly
- [x86] KVM: fix L1TF's MMIO GFN calculation
- [x86] KVM: VMX: check for existence of secondary exec controls before
accessing
- blk-mq: I/O and timer unplugs are inverted in blktrace
- [powerpc*, mips*, arm64, x86, alpha, armhf] mmc: core: Fix debounce time
to use microseconds
- [powerpc*, mips*, arm64, x86, alpha, armhf] mmc: slot-gpio: Fix debounce
time to use miliseconds again
- mac80211: allocate TXQs for active monitor interfaces
- drm/amdgpu: Fix vce work queue was not cancelled when suspend
- [x86] vdso: Fix asm constraints on vDSO syscall fallbacks
- [x86] vdso: Only enable vDSO retpolines when enabled and supported
- [x86] vdso: Fix vDSO syscall fallback asm constraint regression
- [powerpc*, mips*, arm64, x86, s390x, armhf, sparc, hppa] PCI: Reprogram
bridge prefetch registers on resume
- mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
- dm mpath: fix attached_handler_name leak and dangling hw_handler_name
pointer
- dm cache metadata: ignore hints array being too small during resize
- dm cache: fix resize crash if user doesn't reload cache table
- USB: serial: simple: add Motorola Tetra MTP6550 id
- USB: serial: option: improve Quectel EP06 detection
- USB: serial: option: add two-endpoints device-id flag
- usb: cdc_acm: Do not leak URB buffers
- tty: Drop tty->count on tty_reopen() failure
- [powerpc*] Avoid code patching freed init sections
- [powerpc*] lib: fix book3s/32 boot failure due to code patching
- f2fs: fix invalid memory access
- tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
- ubifs: Check for name being NULL while mounting
- rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
- ath10k: fix scan crash due to incorrect length calculation
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.15
- bnxt_en: Fix TX timeout during netpoll.
- bnxt_en: free hwrm resources, if driver probe fails.
- bonding: avoid possible dead-lock
- ip6_tunnel: be careful when accessing the inner header
- ip_tunnel: be careful when accessing the inner header
- ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
- ipv6: take rcu lock in rawv6_send_hdrinc()
- [armhf] net: dsa: bcm_sf2: Call setup during switch resume
- [arm64] net: hns: fix for unmapping problem when SMMU is on
- net: ipv4: update fnhe_pmtu when first hop's MTU changes
- net/ipv6: Display all addresses in output of /proc/net/if_inet6
- netlabel: check for IPV4MASK in addrinfo_get
- [armhf,arm64] net: mvpp2: Extract the correct ethtype from the skb for
tx csum offload
- [armhf,arm64] net: mvpp2: fix a txq_done race condition
- net: sched: Add policy validation for tc attributes
- net: sched: cls_u32: fix hnode refcounting
- net/usb: cancel pending work when unbinding smsc75xx
- qlcnic: fix Tx descriptor corruption on 82xx devices
- qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface
- rtnetlink: fix rtnl_fdb_dump() for ndmsg header
- rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
- sctp: update dst pmtu with the correct daddr
- team: Forbid enslaving team device to itself
- tipc: fix flow control accounting for implicit connect
- udp: Unbreak modules that rely on external __skb_recv_udp() availability
- tun: remove unused parameters
- tun: initialize napi_mutex unconditionally
- tun: napi flags belong to tfile
- [armhf,arm64] net: stmmac: Fixup the tail addr setting in xmit path
- net/packet: fix packet drop as of virtio gso
- [armhf] net: dsa: bcm_sf2: Fix unbind ordering
- net/mlx5e: Set vlan masks for all offloaded TC rules
- net: aquantia: memory corruption on jumbo frames
- net/mlx5: E-Switch, Fix out of bound access when setting vport rate
- bonding: pass link-local packets to bonding master also.
- bonding: fix warning message
- [armhf,arm64] net: stmmac: Rework coalesce timer and fix multi-queue
races
- nfp: avoid soft lockups under control message storm
- bnxt_en: don't try to offload VLAN 'modify' action
- net-ethtool: ETHTOOL_GUFO did not and should not require CAP_NET_ADMIN
- net: phy: phylink: fix SFP interface autodetection
- sfp: fix oops with ethtool -m
- tcp/dccp: fix lockdep issue when SYN is backlogged
- inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
- [armhf] net: dsa: b53: Keep CPU port as tagged in all VLANs
- rtnetlink: Fail dump if target netnsid is invalid
- bnxt_en: Fix VNIC reservations on the PF.
- net: ipv4: don't let PMTU updates increase route MTU
- net/mlx5: Check for SQ and not RQ state when modifying hairpin SQ
- bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request
- bnxt_en: get the reduced max_irqs by the ones used by RDMA
- net/ipv6: Remove extra call to ip6_convert_metrics for multipath case
- net/ipv6: stop leaking percpu memory in fib6 info
- qed: Fix shmem structure inconsistency between driver and the mfw.
- r8169: fix network stalls due to missing bit TXCFG_AUTO_FIFO
- r8169: set RX_MULTI_EN bit in RxConfig for 8168F-family chips
- vxlan: fill ttl inherit info
- ASoC: dapm: Fix NULL pointer deference on CODEC to CODEC DAIs
- hwmon: (nct6775) Fix access to fan pulse registers
- [x86] ASoC: AMD: Ensure reset bit is cleared before configuring
- Bluetooth: SMP: Fix trying to use non-existent local OOB data
- Bluetooth: Use correct tfm to generate OOB data
- Bluetooth: hci_ldisc: Free rw_semaphore on close
- [armhf] mfd: omap-usb-host: Fix dts probe of children
- [powerpc*] KVM: Book3S HV: Don't use compound_order to determine host
mapping size
- scsi: iscsi: target: Don't use stack buffer for scatterlist
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted()
- sound: enable interrupt after dma buffer initialization
- sound: don't call skl_init_chip() to reset intel skl soc
- bpf: btf: Fix end boundary calculation for type section
- bpf: use __GFP_COMP while allocating page
- hwmon: (nct6775) Fix virtual temperature sources for NCT6796D
- hwmon: (nct6775) Fix RPM output for fan7 on NCT6796D
- [armhf,arm64] stmmac: fix valid numbers of unicast filter entries
- hwmon: (nct6775) Use different register to get fan RPM for fan7
- [x86] PCI: hv: support reporting serial number as slot information
- [x86] clk: add "ether_clk" alias for Bay Trail / Cherry Trail
- [x86] clk: Stop marking clocks as CLK_IS_CRITICAL
- [x86] pinctrl: cannonlake: Fix gpio base for GPP-E
- [x86] kvm/lapic: always disable MMIO interface in x2APIC mode
- drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7
- drm/amdkfd: Change the control stack MTYPE from UC to NC on GFX9
- drm/amdkfd: Fix ATS capablity was not reported correctly on some APUs
- mm/vmstat.c: fix outdated vmstat_text
- afs: Fix afs_server struct leak
- afs: Fix clearance of reply
- [mips*] Fix CONFIG_CMDLINE handling
- [mips*] VDSO: Always map near top of user memory
- [sparc64] mach64: detect the dot clock divider correctly on sparc
- vsprintf: Fix off-by-one bug in bstr_printf() processing dereferenced
pointers
- percpu: stop leaking bitmap metadata blocks
- perf script python: Fix export-to-postgresql.py occasional failure
- perf script python: Fix export-to-sqlite.py sample columns
- [s390x] cio: Fix how vfio-ccw checks pinned pages
- dm cache: destroy migration_cache if cache target registration failed
- dm: fix report zone remapping to account for partition offset
- dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled
- dm linear: fix linear_end_io conditional definition
- cgroup: Fix dom_cgrp propagation when enabling threaded mode
- drm/nouveau/drm/nouveau: Grab runtime PM ref in nv50_mstc_detect()
- mmc: block: avoid multiblock reads for the last sector in SPI mode
- [armhf] pinctrl: mcp23s08: fix irq and irqchip setup order
- [arm64] perf: Reject stand-alone CHAIN events for PMUv3
- mm/mmap.c: don't clobber partially overlapping VMA with
MAP_FIXED_NOREPLACE
- mm/thp: fix call to mmu_notifier in set_pmd_migration_entry() v2
- filesystem-dax: Fix dax_layout_busy_page() livelock
- mm: Preserve _PAGE_DEVMAP across mprotect() calls
- [x86] i2c: i2c-scmi: fix for i2c_smbus_write_block_data
- [powerpc*] KVM: Book3S HV: Avoid crash from THP collapse during radix
page fault
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.16
- media: af9035: prevent buffer overflow on write
- spi: gpio: Fix copy-and-paste error
- batman-adv: Avoid probe ELP information leak
- batman-adv: Fix segfault when writing to throughput_override
- batman-adv: Fix segfault when writing to sysfs elp_interval
- batman-adv: Prevent duplicated gateway_node entry
- batman-adv: Prevent duplicated nc_node entry
- batman-adv: Prevent duplicated softif_vlan entry
- batman-adv: Prevent duplicated global TT entry
- batman-adv: Prevent duplicated tvlv handler
- batman-adv: fix backbone_gw refcount on queue_work() failure
- batman-adv: fix hardif_neigh refcount on queue_work() failure
- cxgb4: fix abort_req_rss6 struct
- [armhf] clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag
for non-am43 SoCs
- [powerpc*] scsi: ibmvscsis: Fix a stringop-overflow warning
- [powerpc*] scsi: ibmvscsis: Ensure partition name is properly NUL
terminated
- [x86] intel_th: pci: Add Ice Lake PCH support
- [m68k] Input: atakbd - fix Atari keymap
- [m68k] Input: atakbd - fix Atari CapsLock behaviour
- [powerpc*] net: emac: fix fixed-link setup for the RTL8363SB switch
- qed: Fix populating the invalid stag value in multi function mode.
- qed: Do not add VLAN 0 tag to untagged frames in multi-function mode.
- [armhf,arm64] PCI: dwc: Fix scheduling while atomic issues
- RDMA/uverbs: Fix validity check for modify QP
- scsi: lpfc: Synchronize access to remoteport via rport
- [arm64] drm: mali-dp: Call drm_crtc_vblank_reset on device init
- scsi: ipr: System hung while dlpar adding primary ipr adapter back
- scsi: sd: don't crash the host on invalid commands
- bpf: sockmap only allow ESTABLISHED sock state
- bpf: sockmap, fix transition through disconnect without close
- bpf: test_maps, only support ESTABLISHED socks
- net/mlx4: Use cpumask_available for eq->affinity_mask
- clocksource/drivers/fttmr010: Fix set_next_event handler
- RDMA/bnxt_re: Fix system crash during RDMA resource initialization
- [armhf,arm64] iommu/rockchip: Free irqs in shutdown handler
- [x86] pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type
- [powerpc*] tm: Fix userspace r13 corruption
- [powerpc*] tm: Avoid possible userspace r1 corruption on reclaim
- [powerpc*] numa: Use associativity if VPHN hcall is successful
- [x86] iommu/amd: Return devid as alias for ACPI HID devices
- [x86] boot: Fix kexec booting failure in the SEV bit detection code
- Revert "vfs: fix freeze protection in mnt_want_write_file() for
overlayfs"
- mremap: properly flush TLB before releasing the page
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.17
- xfrm: Validate address prefix lengths in the xfrm selector.
- xfrm6: call kfree_skb when skb is toobig
- xfrm: reset transport header back to network header after all input
transforms ahave been applied
- xfrm: reset crypto_done when iterating over multiple input xfrms
- mac80211: Always report TX status
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
- mac80211: fix pending queue hang due to TX_DROP
- cfg80211: Address some corner cases in scan result channel updating
- mac80211: TDLS: fix skb queue/priority assignment
- mac80211: fix TX status reporting for ieee80211s
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the
dst_entry.
- [armel,armhf] 8799/1: mm: fix pci_ioremap_io() offset check
- xfrm: validate template mode
- netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
- netfilter: conntrack: get rid of double sizeof
- [arm64] hugetlb: Fix handling of young ptes
- nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT
- mac80211_hwsim: fix locking when iterating radios during ns exit
- mac80211_hwsim: fix race in radio destruction from netlink notifier
- mac80211_hwsim: do not omit multicast announce of first added radio
- Bluetooth: SMP: fix crash in unpairing
- qed: Avoid implicit enum conversion in qed_set_tunn_cls_info
- qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv
- qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor
- qed: Avoid constant logical operation warning in qed_vf_pf_acquire
- qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
- scsi: qedi: Initialize the stats mutex lock
- rxrpc: Fix checks as to whether we should set up a new call
- rxrpc: Fix RTT gathering
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket
- rxrpc: Fix error distribution
- netfilter: nft_set_rbtree: add missing rb_erase() in GC routine
- netfilter: avoid erronous array bounds warning
- asix: Check for supported Wake-on-LAN modes
- ax88179_178a: Check for supported Wake-on-LAN modes
- lan78xx: Check for supported Wake-on-LAN modes
- sr9800: Check for supported Wake-on-LAN modes
- r8152: Check for supported Wake-on-LAN Modes
- smsc75xx: Check for Wake-on-LAN modes
- smsc95xx: Check for Wake-on-LAN modes
- cfg80211: fix use-after-free in reg_process_hint()
- [x86] KVM: nVMX: Do not expose MPX VMX controls when guest MPX disabled
- [x86] KVM: Do not use kvm_x86_ops->mpx_supported() directly
- [x86] KVM: nVMX: Fix emulation of VM_ENTRY_LOAD_BNDCFGS
- perf/core: Fix perf_pmu_unregister() locking
- [x86] perf/intel/uncore: Use boot_cpu_data.phys_proc_id instead of
hardcorded physical package ID 0
- perf/ring_buffer: Prevent concurent ring buffer access
- [x86] perf/intel/uncore: Fix PCI BDF address of M3UPI on SKX
- [x86] perf/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf
events
- thunderbolt: Do not handle ICM events after domain is stopped
- thunderbolt: Initialize after IOMMUs
- Revert "serial: 8250_dw: Fix runtime PM handling"
- locking/ww_mutex: Fix runtime warning in the WW mutex selftest
- drm/amd/display: Signal hw_done() after waiting for flip_done()
- be2net: don't flip hw_features when VXLANs are added/deleted
- [powerpc*] numa: Skip onlining a offline node in kdump path
- net: cxgb3_main: fix a missing-check bug
- yam: fix a missing-check bug
- ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()
- mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl
- mm/migrate.c: split only transparent huge pages when allocation fails
- [x86] paravirt: Fix some warning messages
- [arm64] clk: mvebu: armada-37xx-periph: Remove unused var num_parents
- libertas: call into generic suspend code before turning off power
- perf report: Don't try to map ip to invalid map
- HID: i2c-hid: Remove RESEND_REPORT_DESCR quirk and its handling
- [armhf] dts: imx53-qsb: disable 1.2GHz OPP
- perf record: Use unmapped IP for inline callchain cursors
- rxrpc: Don't check RXRPC_CALL_TX_LAST after calling
rxrpc_rotate_tx_window()
- rxrpc: Carry call state out of locked section in rxrpc_rotate_tx_window()
- rxrpc: Only take the rwind and mtu values from latest ACK
- rxrpc: Fix connection-level abort handling
- [x86] net: ena: fix warning in rmmod caused by double iounmap
- [x86] net: ena: fix rare bug when failed restart/resume is followed by
driver removal
- [x86] net: ena: fix NULL dereference due to untimely napi initialization
- gpio: Assign gpio_irq_chip::parents to non-stack pointer
- IB/mlx5: Unmap DMA addr from HCA before IOMMU
- rds: RDS (tcp) hangs on sendto() to unresponding address
- afs: Fix cell proc list
- fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
- Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"
- bridge: do not add port to router list when receives query with source
0.0.0.0
- ipv6: mcast: fix a use-after-free in inet6_mc_check
- ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are
called
- ipv6: rate-limit probes for neighbourless routes
- llc: set SOCK_RCU_FREE in llc_sap_add_socket()
- net: fec: don't dump RX FIFO register when not available
- net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
- net/mlx5e: fix csum adjustments caused by RXFCS
- net: sched: gred: pass the right attribute to gred_change_table_def()
- net: socket: fix a missing-check bug
- [armhf,arm64] net: stmmac: Fix stmmac_mdio_reset() when building stmmac
as modules
- net: udp: fix handling of CHECKSUM_COMPLETE packets
- r8169: fix NAPI handling under high load
- rtnetlink: Disallow FDB configuration for non-Ethernet device
- sctp: fix race on sctp_id2asoc
- tipc: fix unsafe rcu locking when accessing publication list
- udp6: fix encap return code for resubmitting
- vhost: Fix Spectre V1 vulnerability
- virtio_net: avoid using netif_tx_disable() for serializing tx routine
- ethtool: fix a privilege escalation bug
- bonding: fix length of actor system
- ip6_tunnel: Fix encapsulation layout
- openvswitch: Fix push/pop ethernet validation
- net: ipmr: fix unresolved entry dumps
- net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
- net: sched: Fix for duplicate class dump
- net/sched: cls_api: add missing validation of netlink attributes
- net/ipv6: Allow onlink routes to have a device mismatch if it is the
default route
- sctp: fix the data size calculation in sctp_data_size
- sctp: not free the new asoc when sctp_wait_for_connect returns err
- net/mlx5: Fix memory leak when setting fpga ipsec caps
- net: bpfilter: use get_pid_task instead of pid_task
- net: drop skb on failure in ip_check_defrag()
- net: fix pskb_trim_rcsum_slow() with odd trim offset
- net/mlx5: WQ, fixes for fragmented WQ buffers API
- [sparc64] Make corrupted user stacks more debuggable.
- [sparc64] Set %l4 properly on trap return after handling signals.
- [sparc64] Wire up compat getpeername and getsockname.
- [sparc64] Fix single-pcr perf event counter management.
- [sparc64] Fix syscall fallback bugs in VDSO.
- [sparc64] Throttle perf events properly.
- net: bridge: remove ipv6 zero address check in mcast queries
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.18
- vfs: swap names of {do,vfs}_clone_file_range()
- bpf: fix partial copy of map_ptr when dst is scalar
- [armhf,arm64] clk: sunxi-ng: sun4i: Set VCO and PLL bias current to
lowest setting
- fscache: Fix incomplete initialisation of inline key space
- cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
- fscache: Fix out of bound read in long cookie keys
- ptp: fix Spectre v1 vulnerability
- drm/edid: VSDB yCBCr420 Deep Color mode bit definitions
- drm: fb-helper: Reject all pixel format changing requests
- RDMA/ucma: Fix Spectre v1 vulnerability (CVE-2017-5753)
- IB/ucm: Fix Spectre v1 vulnerability (CVE-2017-5753)
- cdc-acm: do not reset notification buffer index upon urb unlinking
- cdc-acm: correct counting of UART states in serial state notification
- cdc-acm: fix race between reset and control messaging
- usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
- usb: gadget: storage: Fix Spectre v1 vulnerability
- usb: roles: intel_xhci: Fix Unbalanced pm_runtime_enable
- usb: xhci: pci: Enable Intel USB role mux on Apollo Lake platforms
- USB: fix the usbfs flag sanitization for control transfers
- tracing: Fix synthetic event to accept unsigned modifier
- tracing: Fix synthetic event to allow semicolon at end
- [armhf] drm/sun4i: Fix an ulong overflow in the dotclock driver
- sched/fair: Fix throttle_list starvation with low CFS quota
- [x86] tsc: Force inlining of cyc2ns bits
- [x86] hibernate: Fix nosave_regions setup for hibernation
- [x86] percpu: Fix this_cpu_read()
- [x86] time: Correct the attribute on jiffies' definition
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19
- [armhf] mtd: rawnand: marvell: fix the IRQ handler complete() condition
- spi: spi-mem: Adjust op len based on message/transfer size limitations
- bcache: trace missed reading by cache_missed
- bcache: correct dirty data statistics
- bcache: fix miss key refill->end in writeback
- hwmon: (pmbus) Fix page count auto-detection.
- jffs2: free jffs2_sb_info through jffs2_kill_sb()
- block: setup bounce bio_sets properly
- block: don't deal with discard limit in blkdev_issue_discard()
- block: make sure discard bio is aligned with logical block size
- block: make sure writesame bio is aligned with logical block size
- cpufreq: conservative: Take limits changes into account properly
- dma-mapping: fix panic caused by passing empty cma command line argument
- pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
- ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
- ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended
opcodes
- [x86] kprobes: Use preempt_enable() in optimized_callback()
- ipmi: Fix timer race with module unload
- acpi, nfit: Fix Address Range Scrub completion tracking
- [hppa] Fix address in HPMC IVA
- [hppa] Fix map_pages() to not overwrite existing pte entries
- [hppa] Fix exported address of os_hpmc handler
- [x86] ALSA: hda - Add quirk for ASUS G751 laptop
- [x86] ALSA: hda - Fix headphone pin config for ASUS G751
- [x86] ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo
M715
- [x86] ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
- ALSA: hda: Add 2 more models to the power_save blacklist
- ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
- [x86] speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
(CVE-2017-5715)
- [x86] xen: Fix boot loader version reported for PVH guests
- [x86] corruption-check: Fix panic in memory_corruption_check() when boot
option without value is provided
- [x86] mm/pat: Disable preemption around __flush_tlb_all()
- [x86] speculation: Support Enhanced IBRS on future CPUs (CVE-2017-5715)
- [armhf] dts: exynos: Disable pull control for MAX8997 interrupts on
Origen
- drm: fix use of freed memory in drm_mode_setcrtc
- bpf: do not blindly change rlimit in reuseport net selftest
- nvme: remove ns sibling before clearing path
- Revert "perf tools: Fix PMU term format max value calculation"
- xsk: do not call synchronize_net() under RCU read lock
- xfrm: policy: use hlist rcu variants on insert
- [x86] perf vendor events intel: Fix wrong filter_band* values for uncore
events
- r8169: Enable MSI-X on RTL8106e
- nfp: flower: fix pedit set actions for multiple partial masks
- nfp: flower: use offsets provided by pedit instead of index for ipv6
- sched/fair: Fix the min_vruntime update logic in dequeue_entity()
- perf evsel: Store ids for events with their own cpus
perf_event__synthesize_event_update_cpus
- perf tools: Fix use of alternatives to find JDIR
- perf cpu_map: Align cpu map synthesized events properly.
- perf report: Don't crash on invalid inline debug information
- [x86] fpu: Remove second definition of fpu in __fpu__restore_sig()
- net: qla3xxx: Remove overflowing shift statement
- r8169: re-enable MSI-X on RTL8168g
- drm: Get ref on CRTC commit object when waiting for flip_done
- [arm64] net: socionext: Reset tx queue in ndo_stop
- netfilter: xt_nat: fix DNAT target for shifted portmap ranges
- [m68k] ataflop: fix error handling during setup
- [m68k] swim: fix cleanup on setup error
- [arm64] cpufeature: ctr: Fix cpu capability check for late CPUs
- nfp: devlink port split support for 1x100G CXP NIC
- tun: Consistently configure generic netdev params via rtnetlink
- [s390x] sthyi: Fix machine name validity indication
- hwmon: (pwm-fan) Set fan speed to 0 on suspend
- lightnvm: pblk: fix race on sysfs line state
- lightnvm: pblk: fix two sleep-in-atomic-context bugs
- lightnvm: pblk: fix race condition on metadata I/O
- perf tools: Free temporary 'sys' string in read_event_files()
- perf tools: Cleanup trace-event-info 'tdata' leak
- perf strbuf: Match va_{add,copy} with va_end
- [x86] cpupower: Fix coredump on VMWare
- bcache: Populate writeback_rate_minimum attribute
- mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
- sdhci: acpi: add free_slot callback
- iwlwifi: pcie: avoid empty free RB queue
- iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
- iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
- [i386] olpc: Indicate that legacy PC XO-1 platform should not register
RTC
- ACPI/PPTT: Handle architecturally unknown cache types
- ACPI / PM: LPIT: Register sysfs attributes based on FADT
- ACPI / processor: Fix the return value of acpi_processor_ids_walk()
- cpufreq: dt: Try freeing static OPPs only if we have added them
- [x86] intel_rdt: Show missing resctrl mount options
- [arm64] signal: Introduce COMPAT_SIGMINSTKSZ for use in
compat_sys_sigaltstack
- [arm64] net: hns3: Fix for packet buffer setting bug
- [x86] boot: Fix EFI stub alignment
- [arm64] net: hns3: Add nic state check before calling netif_tx_wake_queue
- [arm64] net: hns3: Fix ets validate issue
- [armhf,arm64] pinctrl: sunxi: fix 'pctrl->functions' allocation in
sunxi_pinctrl_build_state
- [arm64] pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
- brcmfmac: fix for proper support of 160MHz bandwidth
- [arm64] net: hns3: Check hdev state when getting link status
- [arm64] net: hns3: Set STATE_DOWN bit of hdev state when stopping net
- net: phy: phylink: ensure the carrier is off when starting phylink
- block, bfq: correctly charge and reset entity service in all cases
- [arm64] entry: Allow handling of undefined instructions from EL1
- kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
- spi: gpio: No MISO does not imply no RX
- ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
- [arm64] pinctrl: qcom: spmi-mpp: Fix drive strength setting
- bpf/verifier: fix verifier instability
- failover: Add missing check to validate 'slave_dev' in
net_failover_slave_unregister
- perf tests: Fix record+probe_libc_inet_pton.sh without ping's debuginfo
- [arm64] pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
- [arm64] pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
- [arm64] net: hns3: Preserve vlan 0 in hardware table
- [arm64] net: hns3: Fix ping exited problem when doing lp selftest
- [arm64] net: hns3: Fix for vf vlan delete failed problem
- [armhf,arm64] net: dsa: mv88e6xxx: Fix writing to a PHY page.
- rsi: fix memory alignment issue in ARM32 platforms
- iwlwifi: mvm: fix BAR seq ctrl reporting
- ixgbe: disallow IPsec Tx offload when in SR-IOV mode
- ixgbevf: VF2VF TCP RSS
- ath10k: schedule hardware restart if WMI command times out
- libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
- cgroup, netclassid: add a preemption point to write_classid
- [armhf,arm64] net: stmmac: dwmac-sun8i: fix OF child-node lookup
- f2fs: fix to account IO correctly for cgroup writeback
- MD: Memory leak when flush bio size is zero
- md: fix memleak for mempool
- scsi: esp_scsi: Track residual for PIO transfers
- scsi: ufs: Schedule clk gating work on correct queue
- UAPI: ndctl: Fix g++-unsupported initialisation in headers
- [x86] KVM: nVMX: Clear reserved bits of #DB exit qualification
- scsi: megaraid_sas: fix a missing-check bug
- RDMA/core: Do not expose unsupported counters
- IB/ipoib: Clear IPCB before icmp_send
- usb: host: ohci-at91: fix request of irq for optional gpio
- usb: typec: tcpm: Report back negotiated PPS voltage and current
- tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/
deactivated
- f2fs: clear PageError on the read path
- [x86] Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
- [x86] VMCI: Resource wildcard match fixed
- PCI / ACPI: Enable wake automatically for power managed bridges
- xprtrdma: Reset credit grant properly after a disconnect
- irqchip/pdc: Setup all edge interrupts as rising edge at GIC
- [armhf,arm64] usb: dwc2: fix a race with external vbus supply
- ext4: fix argument checking in EXT4_IOC_MOVE_EXT
- MD: fix invalid stored role for a disk
- nvmem: check the return value of nvmem_add_cells()
- xhci: Avoid USB autosuspend when resuming USB2 ports.
- f2fs: fix to recover inode's crtime during POR
- f2fs: fix to recover inode's i_flags during POR
- PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
- [armhf.arm64] usb: chipidea: Prevent unbalanced IRQ disable
- [x86] driver/dma/ioat: Call del_timer_sync() without holding prep_lock
- IB/mlx5: Allow transition of DCI QP to reset
- uio: ensure class is registered before devices
- scsi: lpfc: Correct soft lockup when running mds diagnostics
- scsi: lpfc: Correct race with abort on completion path
- f2fs: avoid sleeping under spin_lock
- f2fs: report error if quota off error during umount
- signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid
namespace init
- IB/rxe: fix for duplicate request processing and ack psns
- ALSA: hda: Check the non-cached stream buffers more explicitly
- [x86] cpupower: Fix AMD Family 0x17 msr_pstate size
- Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()"
- f2fs: fix to recover cold bit of inode block during POR
- f2fs: fix to account IO correctly
- OPP: Free OPP table properly on performance state irregularities
- [armhf] dts: exynos: Add missing cooling device properties for CPUs
- [armhf] dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
- [armhf] dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
- xen-swiotlb: use actually allocated size on check physical continuous
- tpm: Restore functionality to xen vtpm driver.
- xen/blkfront: avoid NULL blkfront_info dereference on device removal
- xen/balloon: Support xend-based toolstack
- xen: fix race in xen_qlock_wait()
- xen: make xen_qlock_wait() nestable
- xen/pvh: increase early stack size
- xen/pvh: don't try to unplug emulated devices
- libertas: don't set URB_ZERO_PACKET on IN USB transfer
- usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
- usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage
- mt76: mt76x2: fix multi-interface beacon configuration
- iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
- net/ipv4: defensive cipso option parsing
- libnvdimm: Hold reference on parent while scheduling async init
- libnvdimm, region: Fail badblocks listing for inactive regions
- libnvdimm, pmem: Fix badblocks population for 'raw' namespaces
- [x86] ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
- IB/mlx5: Fix MR cache initialization
- IB/rxe: Revise the ib_wr_opcode enum
- jbd2: fix use after free in jbd2_log_do_checkpoint()
- gfs2_meta: ->mount() can get NULL dev_name
- ext4: fix EXT4_IOC_SWAP_BOOT
- ext4: initialize retries variable in ext4_da_write_inline_data_begin()
- ext4: fix setattr project check in fssetxattr ioctl
- ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
- ext4: fix use-after-free race in ext4_remount()'s error path
- selinux: fix mounting of cgroup2 under older policies
- HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452
- HID: hiddev: fix potential Spectre v1
- [x86] EDAC, amd64: Add Family 17h, models 10h-2fh support
- [x86] EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
- [x86] EDAC, skx_edac: Fix logical channel intermediate decoding
- PCI/ASPM: Fix link_state teardown on device removal
- [x86] PCI: vmd: White list for fast interrupt handlers
- [powerpc*] signal/GenWQE: Fix sending of SIGKILL
- signal: Guard against negative signal numbers in copy_siginfo_from_user32
- crypto: lrw - Fix out-of bounds access on counter overflow
- crypto: tcrypt - fix ghash-generic speed test
- [x86] crypto: aesni - don't use GFP_ATOMIC allocation if the request
doesn't cross a page in gcm
- mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
- ima: fix showing large 'violations' or 'runtime_measurements_count'
- hugetlbfs: dirty pages as they are added to pagecache
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
- mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback
- [armhf,arm64] KVM: Ensure only THP is candidate for adjustment
- [arm64] KVM: Fix caching of host MDCR_EL2 value
- [armhf] w1: omap-hdq: fix missing bus unregister at removal
- smb3: allow stats which track session and share reconnects to be reset
- smb3: do not attempt cifs operation in smb3 query info error path
- smb3: on kerberos mount if server doesn't specify auth type use krb5
- printk: Fix panic caused by passing log_buf_len to command line
- genirq: Fix race on spurious interrupt detection
- NFSv4.1: Fix the r/wsize checking
- nfs: Fix a missed page unlock after pg_doio()
- nfsd: correctly decrement odstate refcount in error path
- nfsd: Fix an Oops in free_session()
- lockd: fix access beyond unterminated strings in prints
- dm ioctl: harden copy_params()'s copy_from_user() from malicious users
- dm zoned: fix metadata block ref counting
- dm zoned: fix various dmz_get_mblock() issues
- media: ov7670: make "xclk" clock optional
- fsnotify: Fix busy inodes during unmount
- [powerpc*] msi: Fix compile error on mpc83xx
- [powerpc*] tm: Fix HFSCR bit for no suspend case
- [powerpc*] 4s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
- [mips*] memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
- [mips*/octeon] fix out of bounds array access on CN68XX
- rtc: ds1307: fix ds1339 wakealarm support
- rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt'
- rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI
- [armhf] power: supply: twl4030-charger: fix OF sibling-node lookup
- [armhf,arm64] iommu/arm-smmu: Ensure that page-table updates are visible
before TLBI
- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
- Revert "media: dvbsky: use just one mutex for serializing device R/W ops"
- media: cec: make cec_get_edid_spa_location() an inline function
- media: cec: integrate cec_validate_phys_addr() in cec-api.c
- xen: fix xen_qlock_wait()
- xen: remove size limit of privcmd-buf mapping interface
- xen-blkfront: fix kernel panic with negotiate_mq error path
- media: cec: add new tx/rx status bits to detect aborts/timeouts
- media: cec: fix the Signal Free Time calculation
- media: cec: forgot to cancel delayed work
- media: em28xx: use a default format if TRY_FMT fails
- media: tvp5150: avoid going past array on v4l2_querymenu()
- media: em28xx: fix input name for Terratec AV 350
- media: em28xx: make v4l2-compliance happier by starting sequence on zero
- media: em28xx: fix handler for vidioc_s_input()
- media: media colorspaces*.rst: rename AdobeRGB to opRGB
- media: replace ADOBERGB by OPRGB
- media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
- [arm64] lse: remove -fcall-used-x0 flag
- [arm64] rpmsg: smd: fix memory leak on channel create
- Cramfs: fix abad comparison when wrap-arounds occur
- [armhf,arm64] soc/tegra: pmc: Fix child-node lookup
- tracing: Return -ENOENT if there is no target synthetic event
- btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
- btrfs: Handle owner mismatch gracefully when walking up tree
- btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid
deadlock
- btrfs: fix error handling in free_log_tree
- btrfs: fix error handling in btrfs_dev_replace_start
- btrfs: Enhance btrfs_trim_fs function to handle error better
- btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
- btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
- btrfs: don't attempt to trim devices that don't support it
- btrfs: keep trim from interfering with transaction commits
- btrfs: wait on caching when putting the bg cache
- Btrfs: don't clean dirty pages during buffered writes
- btrfs: release metadata before running delayed refs
- btrfs: protect space cache inode alloc with GFP_NOFS
- btrfs: reset max_extent_size on clear in a bitmap
- btrfs: make sure we create all new block groups
- Btrfs: fix warning when replaying log after fsync of a tmpfile
- Btrfs: fix wrong dentries after fsync of file that got its parent
replaced
- btrfs: qgroup: Dirty all qgroups before rescan
- Btrfs: fix null pointer dereference on compressed write path error
- Btrfs: fix assertion on fsync of regular file when using no-holes feature
- Btrfs: fix deadlock when writing out free space caches
- btrfs: reset max_extent_size properly
- btrfs: set max_extent_size properly
- btrfs: don't use ctl->free_space for max_extent_size
- btrfs: only free reserved extent if we didn't insert it
- btrfs: fix insert_reserved error handling
- btrfs: don't run delayed_iputs in commit
- btrfs: move the dio_sem higher up the callchain
- Btrfs: fix use-after-free during inode eviction
- Btrfs: fix use-after-free when dumping free space
- net: sched: Remove TCA_OPTIONS from policy
- userns: also map extents in the reverse map to kernel IDs
- bpf: wait for running BPF programs when updating map-in-map
- MD: fix invalid stored role for a disk - try2
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.20
- [powerpc*] traps: restore recoverability of machine_check interrupts
- [powerpc*] 64/module: REL32 relocation range check
- [powerpc*] mm: Fix page table dump to work on Radix
- [powerpc*] mm: fix always true/false warning in slice.c
- drm/amd/display: fix bug of accessing invalid memory
- Input: wm97xx-ts - fix exit path
- [powerpc*] eeh: Fix possible null deref in eeh_dump_dev_log()
- tty: check name length in tty_find_polling_driver()
- tracing/kprobes: Check the probe on unloaded module correctly
- drm/amdgpu/powerplay: fix missing break in switch statements
- [powerpc*] nohash: fix undefined behaviour when testing page size support
- [powerpc*] mm: Don't report hugepage tables as memory leaks when using
kmemleak
- [armhf] drm/omap: fix memory barrier bug in DMM driver
- drm/amd/display: fix gamma not being applied
- [arm64] drm/hisilicon: hibmc: Do not carry error code in HiBMC
framebuffer pointer
- media: pci: cx23885: handle adding to list failure
- [mips*] kexec: Mark CPU offline before disabling local IRQ
- [powerpc*] memtrace: Remove memory in chunks
- [mips*] PCI: Call pcie_bus_configure_settings() to set MPS/MRRS
- media: tvp5150: fix width alignment during set_selection()
- drm/amdgpu: Fix SDMA TO after GPU reset v3
- 9p locks: fix glock.client_id leak in do_lock
- udf: Prevent write-unsupported filesystem to be remounted read-write
- 9p: clear dangling pointers in p9stat_free
- cdrom: fix improper type cast, which can leat to information leak.
- ovl: fix error handling in ovl_verify_set_fh()
- ovl: check whiteout in ovl_create_over_whiteout()
- [sh4] serial: sh-sci: Fix could not remove dev_attr_rx_fifo_timeout
- scsi: qla2xxx: Fix incorrect port speed being set for FC adapters
- scsi: qla2xxx: Fix process response queue for ISP26XX and above
- scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx
- scsi: qla2xxx: shutdown chip if reset fail
- scsi: qla2xxx: Fix duplicate switch database entries
- scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
- fuse: Fix use-after-free in fuse_dev_do_read()
- fuse: Fix use-after-free in fuse_dev_do_write()
- fuse: fix blocked_waitq wakeup
- fuse: set FR_SENT while locked
- ovl: fix recursive oi->lock in ovl_link()
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
- scsi: qla2xxx: Fix NVMe session hang on unload
- [arm64] clk: meson-gxbb: set fclk_div3 as CLK_IS_CRITICAL
- [arm64] clk: meson: axg: mark fdiv2 and fdiv3 as critical
- zram: close udev startup race condition as default groups
- [mips*el/loonsgon-3] Fix CPU UART irq delivery problem
- [mips*el/loongson-3] Fix BRIDGE irq delivery problem
- [armhf] clk: s2mps11: Fix matching when built as module and DT node
contains compatible
- [armhf,arm64] clk: sunxi-ng: h6: fix bus clocks' divider position
- [arm64] clk: rockchip: fix wrong mmc sample phase shift for rk3328
- [armhf,arm64] clk: rockchip: Fix static checker warning in
rockchip_ddrclk_get_parent call
- libceph: bump CEPH_MSG_MAX_DATA_LEN
- Revert "ceph: fix dentry leak in splice_dentry()"
- thermal: core: Fix use-after-free in thermal_cooling_device_destroy_sysfs
- mach64: fix display corruption on big endian machines
- mach64: fix image corruption due to reading accelerator registers
- acpi/nfit, x86/mce: Handle only uncorrectable machine checks
- acpi/nfit, x86/mce: Validate a MCE's address before using it
- acpi, nfit: Fix ARS overflow continuation
- [arm64] reset: hisilicon: fix potential NULL pointer dereference
- vhost/scsi: truncate T10 PI iov_iter to prot_bytes
- scsi: qla2xxx: Initialize port speed to avoid setting lower speed
- SCSI: fix queue cleanup race before queue initialization is done
- [powerpc*] Revert "powerpc/8xx: Use L1 entry APG to handle _PAGE_ACCESSED
for CONFIG_SWAP"
- ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
- ocfs2: free up write context when direct IO failed
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings
- memory_hotplug: cond_resched in __remove_pages
- netfilter: conntrack: fix calculation of next bucket number in early_drop
- [armhf] 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm
- bonding/802.3ad: fix link_failure_count tracking
- mtd: nand: Fix nanddev_neraseblocks()
- mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
- hwmon: (core) Fix double-free in __hwmon_device_register()
- perf stat: Handle different PMU names with common prefix
- of, numa: Validate some distance map rules
- [x86] hyper-v: Enable PIT shutdown quirk
- termios, tty/tty_baudrate.c: fix buffer overrun
- watchdog/core: Add missing prototypes for weak functions
- btrfs: fix pinned underflow after transaction aborted
- Btrfs: fix cur_offset in the error case for nocow
- Btrfs: fix infinite loop on inode eviction after deduplication of eof
block
- Btrfs: fix data corruption due to cloning of eof block
- clockevents/drivers/i8253: Add support for PIT shutdown quirk
- ext4: add missing brelse() update_backups()'s error path
- ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
- ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
- ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
- ext4: missing !bh check in ext4_xattr_inode_write()
- ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
- ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()
- ext4: avoid buffer leak in ext4_orphan_add() after prior errors
- ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while
resizing
- ext4: avoid possible double brelse() in add_new_gdb() on error path
- ext4: fix possible leak of sbi->s_group_desc_leak in error path
- ext4: fix possible leak of s_journal_flag_rwsem in error path
- ext4: fix buffer leak in ext4_xattr_get_block() on error path
- ext4: release bs.bh before re-using in ext4_xattr_block_find()
- ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
- ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path
- ext4: fix buffer leak in __ext4_read_dirblock() on error path
- mount: Retest MNT_LOCKED in do_umount
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
- mount: Prevent MNT_DETACH from disconnecting locked mounts
- mnt: fix __detach_mounts infinite loop
- sunrpc: correct the computation for page_ptr when truncating
- NFSv4: Don't exit the state manager without clearing
NFS4CLNT_MANAGER_RUNNING
- nfsd: COPY and CLONE operations require the saved filehandle to be set
- rtc: hctosys: Add missing range error reporting
- fuse: fix use-after-free in fuse_direct_IO()
- fuse: fix leaked notify reply
- selinux: check length properly in SCTP bind hook
- configfs: replace strncpy with memcpy
- gfs2: Put bitmap buffers in put_super
- gfs2: Fix metadata read-ahead during truncate (2)
- libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD
- crypto: user - fix leaking uninitialized memory to userspace
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
- mm/swapfile.c: use kvzalloc for swap_info_struct allocation
- [armhf,arm64] efi/libstub: Pack FDT after populating it
- [armhf,arm64] drm/rockchip: Allow driver to be shutdown on reboot/kexec
- [arm64] drm/msm: fix OF child-node lookup
- drm/amdgpu: Fix typo in amdgpu_vmid_mgr_init
- drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type
- drm/nouveau: Check backlight IDs are >= 0, not > 0
- drm/nouveau: Fix nv50_mstc->best_encoder()
- drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD
- [armhf] drm/etnaviv: fix bogus fence complete check in timeout handler
- drm/dp_mst: Check if primary mstb is null
- drm: panel-orientation-quirks: Add quirk for Acer One 10 (S1003)
- [x86] drm/i915/dp: Link train Fallback on eDP only if fallback link BW
can fit panel's native mode
- [x86] drm/i915: Restore vblank interrupts earlier
- [x86] drm/i915: Don't unset intel_connector->mst_port
- [x86] drm/i915: Skip vcpi allocation for MSTB ports that are gone
- [x86] drm/i915: Large page offsets for pread/pwrite
- [x86] drm/i915/dp: Fix link retraining comment in intel_dp_long_pulse()
- [x86] drm/i915/dp: Restrict link retrain workaround to external monitors
- [x86] drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values
- [x86] drm/i915: Fix error handling for the NV12 fb dimensions check
- [x86] drm/i915: Fix ilk+ watermarks when disabling pipes
- [x86] drm/i915: Compare user's 64b GTT offset even on 32b
- [x86] drm/i915: Don't oops during modeset shutdown after lpe audio deinit
- [x86] drm/i915: Mark pin flags as u64
- [x86] drm/i915/ringbuffer: Delay after EMIT_INVALIDATE for gen4/gen5
- [x86] drm/i915/execlists: Force write serialisation into context image vs
execution
- [x86] drm/i915: Fix possible race in intel_dp_add_mst_connector()
- [armhf,arm64] CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM
[ Ben Hutchings ]
* linux-perf: Fix BPF feature detection
* [rt] Update to 4.18.16-rt9:
- Revert "rcu: Use cpus_read_lock() while looking at cpu_online_mask"
- EXP rcu: Revert expedited GP parallelization cleverness
[ Romain Perier ]
* [rt] Update to 4.18.12-rt7
* Fixed FTBFS caused by wireless-disable-regulatory.db-direct-loading.patch,
due to conflicting types for 'reg_query_regdb_wmm'
[ Vagrant Cascadian ]
* [arm64] Update pinebook/teres-i device-tree patches to 4.19.x:
- Enables the lid to wakeup from suspend.
[ Salvatore Bonaccorso ]
* [x86] swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
(Closes: #908924)
* mremap: properly flush TLB before releasing the page (CVE-2018-18281)
* cdrom: fix improper type cast, which can leat to information leak
(CVE-2018-18710)
-- Ben Hutchings <ben@decadent.org.uk> Wed, 21 Nov 2018 20:55:46 +0000
linux (4.18.10-2) unstable; urgency=medium
[ Ben Hutchings ]
* [rt][arm64,armhf] Fix build failure after rebasing onto 4.18.10
* xen-netback: fix input validation in xenvif_set_hash_mapping()
(CVE-2018-15471)
* Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct
member name" (Closes: #909813)
[ Salvatore Bonaccorso ]
* [arm64] KVM: Tighten guest core register access from userspace
(CVE-2018-18021)
* [arm64] KVM: Sanitize PSTATE.M when being set from userspace
(CVE-2018-18021)
-- Ben Hutchings <ben@decadent.org.uk> Sun, 07 Oct 2018 21:57:06 +0100
linux (4.18.10-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.9
- i2c: xiic: Make the start and the byte count write atomic
- i2c: i801: fix DNV's SMBCTRL register offset
- HID: multitouch: fix Elan panels with 2 input modes declaration
- HID: core: fix grouping by application
- HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen
- HID: input: fix leaking custom input node name
- mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not
supported.
- mac80211: don't update the PM state of a peer upon a multicast frame
- scsi: lpfc: Correct MDS diag and nvmet configuration
- nbd: don't allow invalid blocksize settings
- block: don't warn when doing fsync on read-only devices
- block: bfq: swap puts in bfqg_and_blkg_put
- android: binder: fix the race mmap and alloc_new_buf_locked
- [mips*] VDSO: Match data page cache colouring when D$ aliases
- smb3: Backup intent flag missing for directory opens with backupuid mounts
- smb3: check for and properly advertise directory lease support
- cifs: connect to servername instead of IP for IPC$ share
- btrfs: fix qgroup_free wrong num_bytes in btrfs_subvolume_reserve_metadata
- btrfs: fix data corruption when deduplicating between different files
- [arm64] KVM: Only force FPEXC32_EL2.EN if trapping FPSIMD
- [armhf, arm64] KVM: Clean dcache to PoC when changing PTE due to CoW
- [[powerpc*] KVM: Book3S HV: Use correct pagesize in kvm_unmap_radix()
- [s390x] KVM: vsie: copy wrapping keys to right place
- [x86] KVM: SVM: Set EMULTYPE_NO_REEXECUTE for RSM emulation
- [x86] KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO
instr
- [x86] KVM: Invert emulation re-execute behavior to make it opt-in
- [x86] KVM: Merge EMULTYPE_RETRY and EMULTYPE_ALLOW_REEXECUTE
- [x86] KVM: Default to not allowing emulation retry in kvm_mmu_page_fault
- [x86] KVM: Do not re-{try,execute} after failed emulation in L2
- ACPI / LPSS: Force LPSS quirks on boot
- memory: ti-aemif: fix a potential NULL-pointer dereference
- ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
- cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
- cpu/hotplug: Prevent state corruption on error rollback
- [x86] microcode: Make sure boot_cpu_data.microcode is up-to-date
- [x86] microcode: Update the new microcode revision unconditionally
- [x86] process: Don't mix user/kernel regs in 64bit __show_regs()
- [x86] apic/vector: Make error return value negative
- switchtec: Fix Spectre v1 vulnerability
- misc: mic: SCIF Fix scif_get_new_port() error handling
- ALSA: hda/realtek - Add mute LED quirk for HP Spectre x360
- ethtool: Remove trailing semicolon for static inline
- i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
- Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
- gpio: tegra: Move driver registration to subsys_init level
- [powerpc*] powernv: Fix concurrency issue with npu->mmio_atsd_usage
- [powerpc*] 4xx: Fix error return path in ppc4xx_msi_probe()
- media: davinci: vpif_display: Mix memory leak on probe error path
- media: dw2102: Fix memleak on sequence of probes
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
- scsi: qla2xxx: Fix unintended Logout
- scsi: qla2xxx: Fix session state stuck in Get Port DB
- scsi: qla2xxx: Silent erroneous message
- clk: scmi: Fix the rounding of clock rate
- blk-mq: fix updating tags depth
- scsi: lpfc: Fix driver crash when re-registering NVME rports.
- scsi: target: fix __transport_register_session locking
- md/raid5: fix data corruption of replacements after originals dropped
- timers: Clear timer_base::must_forward_clk with timer_base::lock held
- gpu: ipu-v3: default to id 0 on missing OF alias
- misc: ti-st: Fix memory leak in the error path of probe()
- uio: potential double frees if __uio_register_device() fails
- firmware: vpd: Fix section enabled flag on vpd_section_destroy
- [x86] Drivers: hv: vmbus: Cleanup synic memory free path
- tty: rocket: Fix possible buffer overwrite on register_PCI
- uio: fix possible circular locking dependency
- iwlwifi: pcie: don't access periphery registers when not available
- IB/IPoIB: Set ah valid flag in multicast send flow
- f2fs: fix to active page in lru list for read path
- f2fs: do not set free of current section
- f2fs: Keep alloc_valid_block_count in sync
- f2fs: issue discard align to section in LFS mode
- f2fs: fix defined but not used build warnings
- f2fs: fix to detect looped node chain correctly
- ASoC: soc-pcm: Use delay set in component pointer function
- perf tools: Allow overriding MAX_NR_CPUS at compile time
- device-dax: avoid hang on error before devm_memremap_pages()
- NFSv4.0 fix client reference leak in callback
- perf c2c report: Fix crash for empty browser
- perf evlist: Fix error out while applying initial delay and LBR
- [powerpc*] pseries: fix EEH recovery of some IOV devices
- [powerpc*] macintosh/via-pmu: Add missing mmio accessors
- ath9k: report tx status on EOSP
- ath9k_hw: fix channel maximum power level test
- ath10k: prevent active scans on potential unusable channels
- wlcore: Set rx_status boottime_ns field on rx
- rpmsg: core: add support to power domains for devices
- mtd: rawnand: make subop helpers return unsigned values
- scsi: tcmu: do not set max_blocks if data_bitmap has been setup
- [mips*] Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
- ata: libahci: Allow reconfigure of DEVSLP register
- ata: libahci: Correct setting of DEVSLP register
- nfs: Referrals not inheriting proto setting from parent
- scsi: 3ware: fix return 0 on the error path of probe
- tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
- ath10k: disable bundle mgmt tx completion event support
- media: em28xx: explicitly disable TS packet filter
- PCI: mobiveil: Fix struct mobiveil_pcie.pcie_reg_base address type
- [powerpc*] mm: Don't report PUDs as memory leaks when using kmemleak
- Bluetooth: hidp: Fix handling of strncpy for hid->name information
- [x86] mm: Remove in_nmi() warning from vmalloc_fault()
- [armhf] pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
- gpio: pxa: disable pinctrl calls for PXA3xx
- gpio: ml-ioh: Fix buffer underwrite on probe error path
- [x86, arm64] pinctrl/amd: only handle irq if it is pending and unmasked
- [armhf, arm64] net: mvneta: fix mtu change on port without link
- f2fs: try grabbing node page lock aggressively in sync scenario
- pktcdvd: Fix possible Spectre-v1 for pkt_devs
- f2fs: fix to skip GC if type in SSA and SIT is inconsistent
- [x86] tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- f2fs: fix to do sanity check with reserved blkaddr of inline inode
(CVE-2018-13099)
- [mips*] Octeon: add missing of_node_put()
- [mips*] generic: fix missing of_node_put()
- thermal: rcar_thermal: avoid NULL dereference in absence of IRQ resources
- thermal_hwmon: Sanitize attribute name passed to hwmon
- net: dcb: For wild-card lookups, use priority -1, not 0
- dm cache: only allow a single io_mode cache feature to be requested
- Input: atmel_mxt_ts - only use first T9 instance
- [powerpc*] partitions/aix: append null character to print data from disk
- [powerpc*] partitions/aix: fix usage of uninitialized lv_info and lvname
structures
- drm/amd/display: Prevent PSR from being enabled if initialization fails
- media: em28xx: Fix dual transport stream operation
- [arm64] iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in
kdump kernel
- f2fs: fix to wait on page writeback before updating page
- f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
- media: em28xx: Fix DualHD disconnect oops
- f2fs: avoid potential deadlock in f2fs_sbi_store
- f2fs: fix to do sanity check with secs_per_zone (CVE-2018-13100)
- [armhf] mfd: ti_am335x_tscadc: Fix struct clk memory leak
- f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
- f2fs: fix to propagate return value of scan_nat_page()
- f2fs: fix to do sanity check with extra_attr feature (CVE-2018-13098)
- RDMA/hns: Add illegal hop_num judgement
- NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
- RDMA/hns: Update the data type of immediate data
- [mips*] WARN_ON invalid DMA cache maintenance, not BUG_ON
- [mips*] mscc: ocelot: fix length of memory address space for MIIM
- RDMA/cma: Do not ignore net namespace for unbound cm_id
- clocksource: Revert "Remove kthread"
- autofs: fix autofs_sbi() does not check super block type
- mm: get rid of vmacache_flush_all() entirely (CVE-2018-17182)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.10
- be2net: Fix memory leak in be_cmd_get_profile_config()
- net/mlx5: Fix use-after-free in self-healing flow
- rds: fix two RCU related problems
- tipc: orphan sock in tipc_release()
- net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB
tables
- net/tls: Set count of SG entries if sk_alloc_sg returns -ENOSPC
- net/mlx5: Check for error in mlx5_attach_interface
- net/mlx5: Fix debugfs cleanup in the device init/remove flow
- erspan: fix error handling for erspan tunnel
- erspan: return PACKET_REJECT when the appropriate tunnel is not found
- tcp: really ignore MSG_ZEROCOPY if no SO_ZEROCOPY
- net/mlx5: Fix not releasing read lock when adding flow rules
- net/mlx5: Fix possible deadlock from lockdep when adding fte to fg
- net/mlx5: Use u16 for Work Queue buffer fragment size
- [armhf, arm64] usb: dwc3: change stream event enable bit back to 13
- [arm64] iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
- [armhf] iommu/io-pgtable-arm-v7s: Abort allocation when table address
overflows the PTE
- [armhf] iommu/io-pgtable-arm: Fix pgtable allocation in selftest
- ALSA: msnd: Fix the default sample sizes
- ALSA: usb-audio: Add support for Encore mDSD USB DAC
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
- xfrm: fix 'passing zero to ERR_PTR()' warning
- [amd64, arm64] amd-xgbe: use dma_mapping_error to check map errors
- nfp: don't fail probe on pci_sriov_set_totalvfs() errors
- iwlwifi: cancel the injective function between hw pointers to tfd entry
index
- gfs2: Special-case rindex for gfs2_grow
- [armhf] clk: imx6ul: fix missing of_node_put()
- [armhf] clk: imx6sll: fix missing of_node_put()
- [arm64] clk: mvebu: armada-37xx-periph: Fix wrong return value in
get_parent
- Input: pxrc - fix freeing URB on device teardown
- clk: core: Potentially free connection id
- clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure
- media: tw686x: Fix oops on buffer alloc failure
- [armhf] dmaengine: pl330: fix irq race with terminate_all
- [mips*] ath79: fix system restart
- media: videobuf2-core: check for q->error in vb2_core_qbuf()
- IB/rxe: Drop QP0 silently
- block: allow max_discard_segments to be stacked
- IB/ipoib: Fix error return code in ipoib_dev_init()
- mtd/maps: fix solutionengine.c printk format warnings
- gfs2: Don't reject a supposedly full bitmap if we have blocks reserved
- perf tools: Synthesize GROUP_DESC feature in pipe mode
- perf tools: Fix struct comm_str removal crash
- [powerpc*] perf: Fix callchain ip filtering when return address is in a
register
- fbdev: Distinguish between interlaced and progressive modes
- [armhf] exynos: Clear global variable on init error path
- [powerpc*] perf: Fix callchain ip filtering
- nvmet: fix file discard return status
- nvme-rdma: unquiesce queues when deleting the controller
- [armhf, arm64] KVM: vgic: Fix possible spectre-v1 write in
vgic_mmio_write_apr()
- [powerpc*] powerpc/powernv: opal_put_chars partial write fix
- perf script: Show correct offsets for DWARF-based unwinding
- ASoC: rt5514: Fix the issue of the delay volume applied
- [mips*] jz4740: Bump zload address
- mac80211: restrict delayed tailroom needed decrement
- Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
- wan/fsl_ucc_hdlc: use IS_ERR_VALUE() to check return value of
qe_muram_alloc
- [arm64] fix possible spectre-v1 write in ptrace_hbp_set_event()
- reset: imx7: Fix always writing bits as 0
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT
- ALSA: usb-audio: Generic DSD detection for Thesycon-based implementations
- nfp: avoid buffer leak when FW communication fails
- xen-netfront: fix queue name setting
- [arm64] dts: qcom: db410c: Fix Bluetooth LED trigger
- ARM: dts: qcom: msm8974-hammerhead: increase load on l20 for sdhci
- soc: qcom: smem: Correct check for global partition
- [s390x] qeth: fix race in used-buffer accounting
- [s390x] qeth: reset layer2 attribute on layer switch
- platform/x86: toshiba_acpi: Fix defined but not used build warnings
- KVM: arm/arm64: Fix vgic init race
- drivers/base: stop new probing during shutdown
- i2c: aspeed: Fix initial values of master and slave state
- drm/amd/pp: Set Max clock level to display by default
- regulator: qcom_spmi: Use correct regmap when checking for error
- regulator: qcom_spmi: Fix warning Bad of_node_put()
- iommu/ipmmu-vmsa: IMUCTRn.TTSEL needs a special usage on R-Car Gen3
- dmaengine: mv_xor_v2: kill the tasklets upon exit
- crypto: sharah - Unregister correct algorithms for SAHARA 3
- [x86] pti: Check the return value of pti_user_pagetable_walk_p4d()
- [x86] pti: Check the return value of pti_user_pagetable_walk_pmd()
- [x86} mm/pti: Add an overflow check to pti_clone_pmds()
- PCI/AER: Honor "pcie_ports=native" even if HEST sets FIRMWARE_FIRST
- xen-netfront: fix warn message as irq device name has '/'
- RDMA/cma: Protect cma dev list with lock
- pstore: Fix incorrect persistent ram buffer mapping
- xen/netfront: fix waiting for xenbus state change
- IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
- [s390x] crypto: Fix return code checking in cbc_paes_crypt()
- [armhf] mmc: omap_hsmmc: fix wakeirq handling on removal
- ipmi: Rework SMI registration failure
- ipmi: Move BT capabilities detection to the detect call
- ipmi: Fix I2C client removal in the SSIF driver
- ovl: fix oopses in ovl_fill_super() failure paths
- vmbus: don't return values for uninitalized channels
- tools: hv: Fix a bug in the key delete code
- misc: ibmvsm: Fix wrong assignment of return code
- misc: hmc6352: fix potential Spectre v1
- xhci: Fix use after free for URB cancellation on a reallocated endpoint
- usb: Don't die twice if PCI xhci host is not responding in resume
- usb: xhci: fix interrupt transfer error happened on MTK platforms
- usb: mtu3: fix error of xhci port id when enable U3 dual role
- mei: ignore not found client in the enumeration
- mei: bus: fix hw module get/put balance
- mei: bus: need to unlink client before freeing
- dm verity: fix crash on bufio buffer that was allocated with vmalloc
- usb: Add quirk to support DJI CineSSD
- usb: uas: add support for more quirk flags
- usb: Avoid use-after-free by flushing endpoints early in
usb_set_interface()
- usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
- usb: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB
controller
- usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0
- usb: net2280: Fix erroneous synchronization change
- usb: serial: io_ti: fix array underflow in completion handler
- usb: misc: uss720: Fix two sleep-in-atomic-context bugs
- usb: serial: ti_usb_3410_5052: fix array underflow in completion handler
- usb: yurex: Fix buffer over-read in yurex_write()
- usb: cdc-wdm: Fix a sleep-in-atomic-context bug in
service_outstanding_interrupt()
- Revert "cdc-acm: implement put_char() and flush_chars()"
- cifs: prevent integer overflow in nxt_dir_entry()
- CIFS: fix wrapping bugs in num_entries()
- cifs: integer overflow in in SMB2_ioctl()
- xtensa: ISS: don't allocate memory in platform_setup
- perf/core: Force USER_DS when recording user stack data
- perf tools: Fix maps__find_symbol_by_name()
- of: fix phandle cache creation for DTs with no phandles
- x86/EISA: Don't probe EISA bus for Xen PV guests
- NFSv4: Fix a tracepoint Oops in initiate_file_draining()
- NFSv4.1 fix infinite loop on I/O.
- of: add helper to lookup compatible child node
- mmc: meson-mx-sdio: fix OF child-node lookup
- binfmt_elf: Respect error return from `regset->active'
- net/mlx5: Add missing SET_DRIVER_VERSION command translation
- audit: fix use-after-free in audit_add_watch
- mtdchar: fix overflows in adjustment of `count`
- vfs: fix freeze protection in mnt_want_write_file() for overlayfs
- bpf: fix rcu annotations in compute_effective_progs()
- spi: dw: fix possible race condition
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
- evm: Don't deadlock if a crypto algorithm is unavailable
- [powerpc*] KVM: Book3S HV: Add of_node_put() in success path
- security: check for kstrdup() failure in lsm_append()
- PM / devfreq: use put_device() instead of kfree()
- [powerpc*] KVM: Book3S: Fix matching of hardware and emulated TCE tables
- configfs: fix registered group removal
- sched/core: Use smp_mb() in wake_woken_function()
- efi/esrt: Only call efi_mem_reserve() for boot services memory
- [arm64] net: hns3: Reset net device with rtnl_lock
- [arm64] net: hns3: Fix for reset_level default assignment probelm
- [arm64] hisi: handle of_iomap and fix missing of_node_put
- [arm64] hisi: fix error handling and missing of_node_put
- [arm64] net: hns3: Fix return value error in hns3_reset_notify_down_enet
- [arm64] hisi: check of_iomap and fix missing of_node_put
- liquidio: fix hang when re-binding VF host drv after running DPDK VF
driver
- [armhf] gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
- ASoC: hdmi-codec: fix routing
- serial: 8250: of: Correct of_platform_serial_setup() error handling
- tty: fix termios input-speed encoding when using BOTHER
- tty: fix termios input-speed encoding
- [armhf, arm64] mmc: tegra: prevent HS200 on Tegra 3
- mmc: sdhci: do not try to use 3.3V signaling if not supported
- drm/nouveau: Fix runtime PM leak in drm_open()
- drm/nouveau/debugfs: Wake up GPU before doing any reclocking
- [armhf, arm64] drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping
- tls: Fix zerocopy_from_iter iov handling
- parport: sunbpp: fix error return code
- sched/fair: Fix util_avg of new tasks for asymmetric systems
- f2fs: do checkpoint in kill_sb
- drm/amd/display: support access ddc for mst branch
- gpiolib: Mark gpio_suffixes array with __maybe_unused
- [armhf, arm64] net: mvpp2: make sure we use single queue mode on PPv2.1
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- [x86] drm/amdkfd: Fix kernel queue 64 bit doorbell offset calculation
- [x86] drm/amdkfd: Fix error codes in kfd_get_process
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
- scsi: libfc: fixup 'sleeping function called from invalid context'
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
- scsi: lpfc: Fix panic if driver unloaded when port is offline
- [arm64] perf: Disable PMU while processing counter overflows
- drm/amd/pp: Send khz clock values to DC for smu7/8
- IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers
- blk-mq: only attempt to merge bio if there is rq in sw queue
- blk-mq: avoid to synchronize rcu inside blk_cleanup_queue()
- [arm64] pinctrl: msm: Fix msm_config_group_get() to be compliant
- [arm64] pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be
compliant
- [armhf, arm64] clk: tegra: bpmp: Don't crash when a clock fails to
register
- [x86] mei: bus: type promotion bug in mei_nfc_if_version()
- [x86] crypto: ccp - add timeout support in the SEV command
[ Vagrant Cascadian ]
* debian/rules.real: Generate linux-source tarball with root user and
group specified, to fix reproducibility issues.
[ Ben Hutchings ]
* drivers/net/ethernet: Ignore ABI changes
* [arm64] ACPI: Change ACPI_NFIT from built-in to module
* [i386/686] Enable MGEODE_LX instead of M686 (regression in 4.16)
- x86-32: Disable 3D-Now in generic config
* Bump ABI to 2
[ Yves-Alexis Perez ]
* [x86] enable PINCTRL_AMD for touchpad support on Lenovo IdeaPad.
(closes: #876141)
[ Geoff Levand ]
* [arm64] Add support for new server hardware (Closes: #900581):
- Enable SCHED_SMT for hardware multithreading processors
- Enable ARM64_LSE_ATOMICS for v8.1 processors
- ACPI: Enable ACPI_PCI_SLOT, ACPI_HED, ACPI_BGRT, ACPI_APEI,
ACPI_APEI_GHES, ACPI_APEI_PCIEAER, ACPI_APEI_SEA,
ACPI_APEI_MEMORY_FAILURE as built-in;
ACPI_APEI_EINJ, WDAT_WDT as modules
* [arm64] acpi: Add fixup for HPE m400 quirks
[ Salvatore Bonaccorso ]
* floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
(CVE-2018-7755)
* scsi: target: iscsi: Use hex2bin instead of a re-implementation
(CVE-2018-14633)
* scsi: target: iscsi: Use bin2hex instead of a re-implementation
-- Ben Hutchings <ben@decadent.org.uk> Sun, 30 Sep 2018 18:02:51 +0100
linux (4.18.8-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.7
- rcu: Make expedited GPs handle CPU 0 being offline
- net: 6lowpan: fix reserved space for single frames
- net: mac802154: tx: expand tailroom if necessary
- 9p/net: Fix zero-copy path in the 9p virtio transport
- spi: pxa2xx: Add support for Intel Ice Lake
- mmc: block: Fix unsupported parallel dispatch of requests
- readahead: stricter check for bdi io_pages
- block: fix infinite loop if the device loses discard capability
- block: blk_init_allocated_queue() set q->fq as NULL in the fail case
- block: really disable runtime-pm for blk-mq
- blkcg: Introduce blkg_root_lookup()
- block: Introduce blk_exit_queue()
- block: Ensure that a request queue is dissociated from the cgroup
controller
- apparmor: fix bad debug check in apparmor_secid_to_secctx()
- dma-buf: Move BUG_ON from _add_shared_fence to _add_shared_inplace
- libertas: fix suspend and resume for SDIO connected cards
- media: Revert "[media] tvp5150: fix pad format frame height"
- [arm64] mailbox: xgene-slimpro: Fix potential NULL pointer dereference
- Replace magic for trusting the secondary keyring with #define
- Fix kexec forbidding kernels signed with keys in the secondary keyring to
boot
- [powerpc*] fadump: handle crash memory ranges array index overflow
- [powerpc*] 64s: Fix page table fragment refcount race vs speculative
references
- [powerpc*] pseries: Fix endianness while restoring of r3 in MCE handler.
- [powerpc*] pkeys: Give all threads control of their key permissions
- [powerpc*] pkeys: Deny read/write/execute by default
- [powerpc*] pkeys: key allocation/deallocation must not change pkey
registers
- [powerpc*] pkeys: Save the pkey registers before fork
- [powerpc*] pkeys: Fix calculation of total pkeys.
- [powerpc*] pkeys: Preallocate execute-only key
- [powerpc*] nohash: fix pte_access_permitted()
- [powerpc64] ftrace: Include ftrace.h needed for enable/disable calls
- [powerpc*] powernv/pci: Work around races in PCI bridge enabling
- cxl: Fix wrong comparison in cxl_adapter_context_get()
- ocxl: Fix page fault handler in case of fault on dying process
- IB/mlx5: Honor cnt_set_id_valid flag instead of set_id
- IB/mlx5: Fix leaking stack memory to userspace
- IB/srpt: Fix srpt_cm_req_recv() error path (1/2)
- IB/srpt: Fix srpt_cm_req_recv() error path (2/2)
- IB/srpt: Support HCAs with more than two ports
- RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq
- ib_srpt: Fix a use-after-free in srpt_close_ch()
- ib_srpt: Fix a use-after-free in __srpt_close_all_ch()
- RDMA/rxe: Set wqe->status correctly if an unexpected response is received
- 9p: fix multiple NULL-pointer-dereferences
- fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr
failed
- 9p/virtio: fix off-by-one error in sg list bounds check
- net/9p/client.c: version pointer uninitialized
- net/9p/trans_fd.c: fix race-condition by flushing workqueue before the
kfree()
- dm integrity: change 'suspending' variable from bool to int
- dm thin: stop no_space_timeout worker when switching to write-mode
- dm cache metadata: save in-core policy_hint_size to on-disk superblock
- dm cache metadata: set dirty on all cache blocks after a crash
- dm crypt: don't decrease device limits
- dm writecache: fix a crash due to reading past end of dirty_bitmap
- uart: fix race between uart_put_char() and uart_shutdown()
- [x86] Drivers: hv: vmbus: Fix the offer_in_progress in
vmbus_process_offer()
- [x86] Drivers: hv: vmbus: Reset the channel callback in
vmbus_onoffer_rescind()
- extcon: Release locking when sending the notification of connector state
- [x86] vmw_balloon: fix inflation of 64-bit GFNs
- [x86] vmw_balloon: do not use 2MB without batching
- [x86] vmw_balloon: VMCI_DOORBELL_SET does not check status
- [x86] vmw_balloon: fix VMCI use when balloon built into kernel
- [armhf] rtc: omap: fix resource leak in registration error path
- [armhf] rtc: omap: fix potential crash on power off
- tracing: Do not call start/stop() functions when tracing_on does not
change
- tracing/blktrace: Fix to allow setting same value
- printk/tracing: Do not trace printk_nmi_enter()
- uprobes: Use synchronize_rcu() not synchronize_sched()
- mfd: hi655x: Fix regmap area declared size for hi655x
- ovl: fix wrong use of impure dir cache in ovl_iterate()
- ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
- ACPICA: Clear status of all events when entering sleep states
- drivers/block/zram/zram_drv.c: fix bug storing backing_dev
- sched: idle: Avoid retaining the tick when it has been stopped
- cpuidle: menu: Handle stopped tick more aggressively
- cpufreq: governor: Avoid accessing invalid governor_data
- PM / sleep: wakeup: Fix build error caused by missing SRCU support
- ALSA: ac97: fix device initialization in the compat layer
- ALSA: ac97: fix check of pm_runtime_get_sync failure
- ALSA: ac97: fix unbalanced pm_runtime_enable
- [x86, arm64] i2c: designware: Re-init controllers with pm_disabled set on
resume
- [x86] KVM: VMX: fixes for vmentry_l1d_flush module parameter
- [powerpc*] KVM: Book3S: Fix guest DMA when guest partially backed by
THP pages
- block, bfq: return nbytes and not zero from struct cftype .write() method
- pnfs/blocklayout: off by one in bl_map_stripe()
- nfsd: fix leaked file lock with nfs exported overlayfs
- NFSv4 client live hangs after live data migration recovery
- NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
- NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
- [armhf] ARM: dts: am57xx-idk: Enable dual role for USB2 port
- [armhf] pwm: omap-dmtimer: Return -EPROBE_DEFER if no dmtimer platform
data
- mm/tlb: Remove tlb_remove_table() non-concurrent condition
- [x86] iommu/vt-d: Add definitions for PFSID
- [x86] iommu/vt-d: Fix dev iotlb pfsid use
- sys: don't hold uts_sem while accessing userspace memory
- ubifs: Fix memory leak in lprobs self-check
- Revert "UBIFS: Fix potential integer overflow in allocation"
- ubifs: Check data node size before truncate
- ubifs: xattr: Don't operate on deleted inodes
- ubifs: Fix directory size calculation for symlinks
- ubifs: Fix synced_i_size calculation for xattr inodes
- [armhf] pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
- [armhf] pwm: tiehrpwm: Fix disabling of output of PWMs
- fb: fix lost console when the user unplugs a USB adapter
- udlfb: fix semaphore value leak
- udlfb: fix display corruption of the last line
- udlfb: don't switch if we are switching to the same videomode
- udlfb: set optimal write delay
- udlfb: make a local copy of fb_ops
- udlfb: handle allocation failure
- udlfb: set line_length in dlfb_ops_set_par
- getxattr: use correct xattr length
- libnvdimm: Use max contiguous area for namespace size
- libnvdimm: fix ars_status output length calculation
- bcache: release dc->writeback_lock properly in bch_writeback_thread()
- cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
- mm, dev_pagemap: Do not clear ->mapping on final put
- perf auxtrace: Fix queue resize
- [x86] crypto: vmx - Fix sleep-in-atomic bugs
- [x86] crypto: aesni - Use unaligned loads from gcm_context_data
- [arm64] crypto: arm64/sm4-ce - check for the right CPU feature bit
- fs/quota: Fix spectre gadget in do_quotactl
- udf: Fix mounting of Win7 created UDF filesystems
- cpuidle: menu: Retain tick when shallow state is selected
- [arm64] mm: always enable CONFIG_HOLES_IN_ZONE
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.8
- act_ife: fix a potential use-after-free
- ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT
state
- net: sched: Fix memory exposure from short TCA_U32_SEL
- qlge: Fix netdev features configuration.
- r8152: disable RX aggregation on new Dell TB16 dock
- tcp: do not restart timewait timer on rst reception
- vti6: remove !skb->ignore_df check from vti6_xmit()
- act_ife: move tcfa_lock down to where necessary
- act_ife: fix a potential deadlock
- net: sched: action_ife: take reference to meta module
- bnxt_en: Clean up unused functions.
- bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA.
- net/sched: act_pedit: fix dump of extended layered op
- tipc: fix a missing rhashtable_walk_exit()
- [x86] hv_netvsc: Fix a deadlock by getting rtnl lock earlier in
netvsc_probe()
- tipc: fix the big/little endian issue in tipc_dest
- sctp: remove useless start_fail from sctp_ht_iter in proc
- erspan: set erspan_ver to 1 by default when adding an erspan dev
- ipv6: don't get lwtstate twice in ip6_rt_copy_init()
- net/ipv6: init ip6 anycast rt->dst.input as ip6_input
- net/ipv6: Only update MTU metric if it set
- net/ipv6: Put lwtstate when destroying fib6_info
- net/mlx5: Fix SQ offset in QPs with small RQ
- r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices
- [armhf,arm64] Revert "net: stmmac: Do not keep rearming the coalesce
timer in stmmac_xmit"
- ip6_vti: fix creating fallback tunnel device for vti6
- ip6_vti: fix a null pointer deference when destroy vti6 tunnel
- nfp: wait for posted reconfigs when disabling the device
- sctp: hold transport before accessing its asoc in sctp_transport_get_next
- vhost: correctly check the iova range when waking virtqueue
- [x86] hv_netvsc: ignore devices that are not PCI
- cifs: check if SMB2 PDU size has been padded and suppress the warning
- hfsplus: don't return 0 when fill_super() failed
- hfs: prevent crash on exit from failed search
- sunrpc: Don't use stack buffer with scatterlist
- fork: don't copy inconsistent signal handler state to child
- fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds
- reiserfs: change j_timestamp type to time64_t
- [armhf,arm64] iommu/rockchip: Handle errors returned from PM framework
- hfsplus: fix NULL dereference in hfsplus_lookup() (CVE-2018-14617)
- [armhf,arm64] iommu/rockchip: Move irq request past pm_runtime_enable
- fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
- fat: validate ->i_start before using
- workqueue: skip lockdep wq dependency in cancel_work_sync()
- workqueue: re-add lockdep dependencies for flushing
- scripts: modpost: check memory allocation results
- apparmor: fix an error code in __aa_create_ns()
- virtio: pci-legacy: Validate queue pfn
- [x86] mce: Add notifier_block forward declaration
- i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return
value
- IB/hfi1: Invalid NUMA node information can cause a divide by zero
- [armhf,arm64] pwm: meson: Fix mux clock names
- [powerpc*] topology: Get topology for shared processors at boot
- mm/fadvise.c: fix signed overflow UBSAN complaint
- mm: make DEFERRED_STRUCT_PAGE_INIT explicitly depend on SPARSEMEM
- fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
- [x86] platform: intel_punit_ipc: fix build errors
- bpf, sockmap: fix map elem deletion race with smap_stop_sock
- tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
- bpf, sockmap: fix sock_map_ctx_update_elem race with exist/noexist
- net/xdp: Fix suspicious RCU usage warning
- bpf, sockmap: fix leakage of smap_psock_map_entry
- netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
- [s390x] kdump: Fix memleak in nt_vmcoreinfo
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
- mfd: sm501: Set coherent_dma_mask when creating subdevices
- netfilter: x_tables: do not fail xt_alloc_table_info too easilly
- [x86] platform: asus-nb-wmi: Add keymap entry for lid flip action on
UX360
- netfilter: fix memory leaks on netlink_dump_start error
- tcp, ulp: add alias for all ulp modules
- ubi: Initialize Fastmap checkmapping correctly
- ACPICA: ACPICA: add status check for acpi_hw_read before assigning return
value
- [arm*] perf arm spe: Fix uninitialized record error variable
- [arm64] net: hns3: Fix for command format parsing error in
hclge_is_all_function_id_zero
- block: don't warn for flush on read-only device
- [arm64] net: hns3: Fix for phy link issue when using marvell phy driver
- PCI: Match Root Port's MPS to endpoint's MPSS as necessary
- drm/amd/display: Guard against null crtc in CRC IRQ
- perf tools: Check for null when copying nsinfo.
- f2fs: avoid race between zero_range and background GC
- f2fs: fix avoid race between truncate and background GC
- net/9p/trans_fd.c: fix race by holding the lock
- net/9p: fix error path of p9_virtio_probe
- f2fs: fix to clear PG_checked flag in set_page_dirty()
- [armhf,arm64] pinctrl: axp209: Fix NULL pointer dereference after
allocation
- bpf: fix bpffs non-array map seq_show issue
- [powerpc*] uaccess: Enable get_user(u64, *p) on 32-bit
- [powerpc*] Fix size calculation using resource_size()
- [powerpc*] perf probe powerpc: Fix trace event post-processing
- block: bvec_nr_vecs() returns value for wrong slab
- brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference
- [s390x] dasd: fix hanging offline processing due to canceled worker
- [s390x] dasd: fix panic for failed online processing
- ACPI / scan: Initialize status to ACPI_STA_DEFAULT
- blk-mq: count the hctx as active before allocating tag
- scsi: aic94xx: fix an error code in aic94xx_init()
- NFSv4: Fix error handling in nfs4_sp4_select_mode()
- Input: do not use WARN() in input_alloc_absinfo()
- xen/balloon: fix balloon initialization for PVH Dom0
- [armhf] PCI: mvebu: Fix I/O space end address calculation
- dm kcopyd: avoid softlockup in run_complete_job
- [x86] staging: comedi: ni_mio_common: fix subdevice flags for PFI
subdevice
- ASoC: rt5677: Fix initialization of rt5677_of_match.data
- [armhf] iommu/omap: Fix cache flushes on L2 table entries
- selinux: cleanup dentry and inodes on error in selinuxfs
- RDS: IB: fix 'passing zero to ERR_PTR()' warning
- cfq: Suppress compiler warnings about comparisons
- smb3: fix reset of bytes read and written stats
- CIFS: fix memory leak and remove dead code
- SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
- smb3: if server does not support posix do not allow posix mount option
- [powerpcspe] platforms/85xx: fix t1042rdb_diu.c build errors & warning
- [powerpc*] 64s: Make rfi_flush_fallback a little more robust
- [powerpc*] pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
- [armhf,arm64] clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in
rk3399
- drm/amd/display: Read back max backlight value at boot
- [x86] KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
- [x86] kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
- [armhf] drm/etnaviv: fix crash in GPU suspend when init failed due to
buffer placement
- btrfs: Exit gracefully when chunk map cannot be inserted to the tree
- btrfs: replace: Reset on-disk dev stats value after replace
- btrfs: fix in-memory value of total_devices after seed device deletion
- btrfs: relocation: Only remove reloc rb_trees if reloc control has been
initialized (CVE-2018-14609)
- btrfs: tree-checker: Detect invalid and empty essential trees
(CVE-2018-14612)
- btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
- btrfs: lift uuid_mutex to callers of btrfs_open_devices
- btrfs: Don't remove block group that still has pinned down bytes
- btrfs: Fix a C compliance issue
- [armhf,arm64] rockchip: Force CONFIG_PM on Rockchip systems
- btrfs: do btrfs_free_stale_devices outside of device_list_add
- btrfs: extend locked section when adding a new device in device_list_add
- btrfs: rename local devices for fs_devices in btrfs_free_stale_devices(
- btrfs: use device_list_mutex when removing stale devices
- btrfs: lift uuid_mutex to callers of btrfs_scan_one_device
- btrfs: lift uuid_mutex to callers of btrfs_parse_early_options
- btrfs: reorder initialization before the mount locks uuid_mutex
- btrfs: fix mount and ioctl device scan ioctl race
- [x86] drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
- [x86] drm/i915: Nuke the LVDS lid notifier
- [x86] drm/i915: Increase LSPCON timeout
- [x86] drm/i915: Free write_buf that we allocated with kzalloc.
- drm/amdgpu: update uvd_v6_0_ring_vm_funcs to use new nop packet
- drm/amdgpu: fix a reversed condition
- drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
- drm/amd/pp: Convert voltage unit in mV*4 to mV on CZ/ST
- drm/amd/powerplay: fixed uninitialized value
- drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
- drm/edid: Quirk Vive Pro VR headset non-desktop.
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
- drm/amd/display: fix type of variable
- drm/amd/display: Don't share clk source between DP and HDMI
- drm/amd/display: update clk for various HDMI color depths
- drm/amd/display: Use requested HDMI aspect ratio
- drm/amd/display: Report non-DP display as disconnected without EDID
- [armhf,arm64] drm/rockchip: lvds: add missing of_node_put
- [armhf,arm64] drm/rockchip: vop: split out core clock enablement into
separate functions
- [armhf,arm64] drm/rockchip: vop: fix irq disabled after vop driver probed
- drm/amd/display: Pass connector id when executing VBIOS CT
- drm/amd/display: Check if clock source in use before disabling
- drm/amdgpu: update tmr mc address
- drm/amdgpu:add tmr mc address into amdgpu_firmware_info
- drm/amdgpu:add new firmware id for VCN
- drm/amdgpu:add VCN support in PSP driver
- drm/amdgpu:add VCN booting with firmware loaded by PSP
- drm/amdgpu: fix incorrect use of fcheck
- drm/amdgpu: fix incorrect use of drm_file->pid
- [x86] drm/i915: Re-apply "Perform link quality check, unconditionally
during long pulse"
- uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member
name
- mm: respect arch_dup_mmap() return value
- [x86] drm/i915: set DP Main Stream Attribute for color range on DDI
platforms
- [i386] tsc: Prevent result truncation on 32bit
- drm/amdgpu: Keep track of amount of pinned CPU visible VRAM
- drm/amdgpu: Make pin_size values atomic
- drm/amdgpu: Warn and update pin_size values when destroying a pinned BO
- drm/amdgpu: Don't warn on destroying a pinned BO
- debugobjects: Make stack check warning more informative
- [i386] pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
- [x86] xen: don't write ptes directly in 32-bit PV guests
- [x86] kvm: Set highest physical address bits in non-present/reserved SPTEs
- [x86] kvm: avoid unused variable warning
- HID: redragon: fix num lock and caps lock LEDs
[ Ben Hutchings ]
* [x86] wireless: Enable R8822BE as module (Closes: #908330)
* Move all patch generation scripts to debian/bin
* [rt] genpatch-rt: Store patches and series file in debian/patches-rt
* linux-headers: Stop linking the doc directory, which is not binNMU-safe
* debian/copyright: Simplify exclusions to work with mk-origtargz
* debian/{watch,bin/uscan-hook}: Drop uscan hook in favour of uupdate
* debian/watch: Add options for signature validation
* README.Debian: Update URLs that were pointing to Alioth
* README.Debian: Describe where to find patches for a specific version
* Revert "i40e: Add kconfig dependency to ensure cmpxchg64() is available"
[ Salvatore Bonaccorso ]
* mac80211: don't update the PM state of a peer upon a multicast frame
(Closes: #887045, #886292)
[ Romain Perier ]
* [x86] Enable TI TPS6598x USB Power Delivery controller family
* [x86] crypto: ccp: add timeout support in the SEV command (Closes: #908248)
* [rt] Update to 4.18.7-rt5
-- Ben Hutchings <ben@decadent.org.uk> Tue, 18 Sep 2018 03:05:01 +0100
linux (4.18.6-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6
- scsi: libsas: dynamically allocate and free ata host
- xprtrdma: Fix disconnect regression
- mei: don't update offset in write
- cifs: add missing support for ACLs in SMB 3.11
- cifs: fix uninitialized ptr deref in smb2 signing
- cifs: add missing debug entries for kconfig options
- cifs: use a refcount to protect open/closing the cached file handle
- cifs: check kmalloc before use
- smb3: enumerating snapshots was leaving part of the data off end
- smb3: Do not send SMB3 SET_INFO if nothing changed
- smb3: don't request leases in symlink creation and query
- smb3: fill in statfs fsid and correct namelen
- btrfs: use correct compare function of dirty_metadata_bytes
- btrfs: don't leak ret from do_chunk_alloc
- Btrfs: fix mount failure after fsync due to hard link recreation
- Btrfs: fix btrfs_write_inode vs delayed iput deadlock
- Btrfs: fix send failure when root has deleted files still open
- Btrfs: send, fix incorrect file layout after hole punching beyond eof
- hwmon: (k10temp) 27C Offset needed for Threadripper2
- [armhf] bpf: fix stack var offset in jit
- [armhf, arm64] iommu/arm-smmu: Error out only if not enough context
interrupts
- printk: Split the code for storing a message into the log buffer
- printk: Create helper function to queue deferred console handling
- printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
- [arm64] kprobes: Fix %p uses in error messages
- [arm64] Fix mismatched cache line size detection
- [arm64] Handle mismatched cache type
- [arm64] mm: check for upper PAGE_SHIFT bits in pfn_valid()
- [arm64] dts: rockchip: corrected uart1 clock-names for rk3328
- [armhf, arm64] KVM: Fix potential loss of ptimer interrupts
- [armhf, arm64] KVM: Fix lost IRQs from emulated physcial timer when
blocked
- [armhf, arm64] KVM: Skip updating PMD entry if no change
- [armhf, arm64] KVM: Skip updating PTE entry if no change
- [s390x] kvm: fix deadlock when killed by oom
- [s390x] perf kvm: Fix subcommands on s390
- stop_machine: Reflow cpu_stop_queue_two_works()
- stop_machine: Atomically queue and wake stopper threads
- ext4: check for NUL characters in extended attribute's name
- ext4: use ext4_warning() for sb_getblk failure
- ext4: sysfs: print ext4_super_block fields as little-endian
- ext4: reset error code in ext4_find_entry in fallback
- ext4: fix race when setting the bitmap corrupted flag
- nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event
- [x86] gpu: reserve ICL's graphics stolen memory
- [x86] platform: wmi: Do not mix pages and kmalloc
- [x86] platform: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
- mm: move tlb_table_flush to tlb_flush_mmu_free
- [x86] mm/tlb, mm: Support invalidating TLB caches for RCU_TABLE_FREE
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit
- [x86] speculation/l1tf: Fix off-by-one error when warning that system has
too much RAM (Closes: #907581)
- [x86] speculation/l1tf: Suggest what to do on systems with too much RAM
- [x86] vdso: Fix vDSO build if a retpoline is emitted
- [x86] process: Re-export start_thread()
- [x86] KVM: ensure all MSRs can always be KVM_GET/SET_MSR'd
- [x86] KVM: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts
disabled
- fuse: Don't access pipe->buffers without pipe_lock()
- fuse: fix initial parallel dirops
- fuse: fix double request_end()
- fuse: fix unlocked access to processing queue
- fuse: umount should wait for all requests
- fuse: Fix oops at process_init_reply()
- fuse: Add missed unlock_page() to fuse_readpages_fill()
- lib/vsprintf: Do not handle %pO[^F] as %px
- udl-kms: change down_interruptible to down
- udl-kms: handle allocation failure
- udl-kms: fix crash due to uninitialized memory
- udl-kms: avoid division
- b43legacy/leds: Ensure NUL-termination of LED name string
- b43/leds: Ensure NUL-termination of LED name string
- ASoC: dpcm: don't merge format from invalid codec dai
- ASoC: zte: Fix incorrect PCM format bit usages
- ASoC: sirf: Fix potential NULL pointer dereference
- ASoC: wm_adsp: Correct DSP pointer for preloader control
- [armhf] pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
- scsi: qla2xxx: Fix stalled relogin
- [x86] vdso: Fix lsl operand order
- [x86 ]nmi: Fix NMI uaccess race against CR3 switching
- [x86] irqflags: Mark native_restore_fl extern inline
- [x86] spectre: Add missing family 6 check to microcode check
- [x86] speculation/l1tf: Increase l1tf memory limit for Nehalem+
(Closes: #907581)
- hwmon: (nct6775) Fix potential Spectre v1
- [x86] entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
- [x86] Allow generating user-space headers without a compiler
- [s390x] mm: fix addressing exception after suspend/resume
- [s390x] lib: use expoline for all bcr instructions
- [s390x] fix br_r1_trampoline for machines without exrl
- [s390x] qdio: reset old sbal_state flags
- [s390x] numa: move initial setup of node_to_cpumask_map
- [s390x] pci: fix out of bounds access during irq setup
- [s390x] purgatory: Fix crash with expoline enabled
- [s390x] purgatory: Add missing FORCE to Makefile targets
- kprobes: Show blacklist addresses as same as kallsyms does
- kprobes: Replace %p with other pointer types
- kprobes/arm: Fix %p uses in error messages
- kprobes: Make list and blacklist root user read only
- [mips*] Correct the 64-bit DSP accumulator register size
- [mips*] memset.S: Fix byte_fixup for MIPSr6
- [mips*] Always use -march=<arch>, not -<arch> shortcuts
- [mips*] Change definition of cpu_relax() for Loongson-3
- [mips*] lib: Provide MIPS64r6 __multi3() for GCC < 7
- tpm: Return the actual size when receiving an unsupported command
- tpm: separate cmd_ready/go_idle from runtime_pm
- scsi: mpt3sas: Fix calltrace observed while running IO & reset
- scsi: mpt3sas: Fix _transport_smp_handler() error path
- scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
- scsi: core: Avoid that SCSI device removal through sysfs triggers a
deadlock
- iscsi target: fix session creation failure handling
- mtd: rawnand: hynix: Use ->exec_op() in hynix_nand_reg_write_op()
- mtd: rawnand: fsmc: Stop using chip->read_buf()
- mtd: rawnand: marvell: add suspend and resume hooks
- mtd: rawnand: qcom: wait for desc completion in all BAM channels
- [arm64] clk: rockchip: fix clk_i2sout parent selection bits on rk3399
- PM / clk: signedness bug in of_pm_clk_add_clks()
- power: generic-adc-battery: fix out-of-bounds write when copying channel
properties
- power: generic-adc-battery: check for duplicate properties copied from
iio channels
- watchdog: Mark watchdog touch functions as notrace
- cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status
- [x86] dumpstack: Don't dump kernel memory based on usermode RIP
[ Ben Hutchings ]
* Set ABI to 1
* [x86,arm64] Disable code signing for upload to unstable
* [rt] Re-enable PREEMPT_RT
* aufs: Update support patchset to aufs4.18-20180827 (no functional change)
* netfilter: Enable NF_TABLES_SET as module, replacing the multiple set
type modules that were enabled before 4.18
* [powerpc,powerpcspe,ppc64] Build-Depend on updated kernel-wedge to fix
broken symlinks in kernel-image udeb
[ Romain Perier ]
* [rt] Update to 4.18.5-rt3
-- Ben Hutchings <ben@decadent.org.uk> Thu, 06 Sep 2018 15:32:14 +0100
linux (4.18.5-1~exp1) experimental; urgency=medium
* New upstream release: https://kernelnewbies.org/Linux_4.18
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1
- [x86] paravirt: Fix spectre-v2 mitigations for paravirt guests
- [x86] speculation: Protect against userspace-userspace spectreRSB
- [x86] kprobes: Fix %p uses in error messages
- [x86] irqflags: Provide a declaration for native_save_fl
- [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
- [x86] speculation/l1tf: Change order of offset/type in swap entry
- [x86] speculation/l1tf: Protect swap entries against L1TF
- [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation
- [x86] speculation/l1tf: Make sure the first page is always reserved
- [x86] speculation/l1tf: Add sysfs reporting for l1tf
- [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE
mappings
- [x86] speculation/l1tf: Limit swap file size to MAX_PA/2
- [x86] Move the l1tf function and define pr_fmt properly
- sched/smt: Update sched_smt_present at runtime
- [x86] smp: Provide topology_is_primary_thread()
- [x86] topology: Provide topology_smt_supported()
- cpu/hotplug: Make bringup/teardown of smp threads symmetric
- cpu/hotplug: Split do_cpu_down()
- cpu/hotplug: Provide knobs to control SMT
- [x86] cpu: Remove the pointless CPU printout
- [x86] cpu/AMD: Remove the pointless detect_ht() call
- [x86] cpu/common: Provide detect_ht_early()
- [x86] cpu/topology: Provide detect_extended_topology_early()
- [x86] cpu/intel: Evaluate smp_num_siblings early
- [x86] cpu/AMD: Do not check CPUID max ext level before parsing SMP info
- [x86] cpu/AMD: Evaluate smp_num_siblings early
- [x86] apic: Ignore secondary threads if nosmt=force
- [x86] speculation/l1tf: Extend 64bit swap file size limit
- [x86] cpufeatures: Add detection of L1D cache flush support.
- [x86] cpu/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF
- [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE
- Revert "x86/apic: Ignore secondary threads if nosmt=force"
- cpu/hotplug: Boot HT siblings at least once
- [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present
- [x86] KVM/VMX: Add module argument for L1TF mitigation
- [x86] KVM/VMX: Add L1D flush algorithm
- [x86] KVM/VMX: Add L1D MSR based flush
- [x86] KVM/VMX: Add L1D flush logic
- [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest
numbers
- [x86] KVM/VMX: Add find_msr() helper function
- [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting
- [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
- [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
- cpu/hotplug: Online siblings when SMT control is turned on
- [x86] litf: Introduce vmx status variable
- [x86] kvm: Drop L1TF MSR list approach
- [x86] l1tf: Handle EPT disabled state proper
- [x86] kvm: Move l1tf setup function
- [x86] kvm: Add static key for flush always
- [x86] kvm: Serialize L1D flush parameter setter
- [x86] kvm: Allow runtime control of L1D flush
- cpu/hotplug: Expose SMT control init function
- cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
- [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations
- [x86] speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED
architectures
- [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content
- cpu/hotplug: detect SMT disabled by BIOS
- [x86] KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
- [x86] KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
- [x86] KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
- [x86] irq: Demote irq_cpustat_t::__softirq_pending to u16
- [x86] KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
- [x86] Don't include linux/irq.h from asm/hardirq.h
- [x86] irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
- [x86] KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
- [x86] speculation: Simplify sysfs report of VMX L1TF vulnerability
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
- [x86] KVM/VMX: Tell the nested hypervisor to skip L1D flush on vmentry
- cpu/hotplug: Fix SMT supported evaluation
- [x86] speculation/l1tf: Invert all not present mappings
- [x86] speculation/l1tf: Make pmd/pud_mknotpresent() invert
- [x86] mm/pat: Make set_memory_np() L1TF safe
- [x86] mm/kmmio: Make the tracer robust against L1TF
- tools headers: Synchronise x86 cpufeatures.h for L1TF additions
- [x86] microcode: Allow late microcode loading with SMT disabled
- cpu/hotplug: Non-SMP machines do not make use of booted_once
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.2
- [x86] l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
- [x86] hyper-v: Check for VP_INVAL in hyperv_flush_tlb_others()
- [x86] platform/UV: Mark memblock related init code and data correctly
- [x86] mm/pti: Clear Global bit more aggressively
- [x86] xen/pv: Call get_cpu_address_sizes to set x86_virt/phys_bits
- [x86] mm: Disable ioremap free page handling on x86-PAE
- crypto: ccp - Check for NULL PSP pointer at module unload
- crypto: ccp - Fix command completion detection race
- [x86] crypto: x86/sha256-mb - fix digest copy in
sha256_mb_mgr_get_comp_job_avx2()
- crypto: vmac - require a block cipher with 128-bit block size
- crypto: vmac - separate tfm and request context
- Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363)
- ioremap: Update pgtable free interfaces with addr
- [x86] mm: Add TLB purge to free pmd/pte page interfaces
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.3
- [x86] speculation/l1tf: Exempt zeroed PTEs from inversion
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.4
- l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
- net_sched: fix NULL pointer dereference when delete tcindex filter
- net_sched: Fix missing res info when create new tc_index filter
- r8169: don't use MSI-X on RTL8168g
- ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs
- ALSA: hda - Turn CX8200 into D3 as well upon reboot
- ALSA: vx222: Fix invalid endian conversions
- ALSA: cs5535audio: Fix invalid endian conversion
- ALSA: dice: fix wrong copy to rx parameters for Alesis iO26
- ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry
- ALSA: memalloc: Don't exceed over the requested size
- ALSA: vxpocket: Fix invalid endian conversions
- ALSA: seq: Fix poll() error return
- media: gl861: fix probe of dvb_usb_gl861
- USB: serial: sierra: fix potential deadlock at close
- USB: serial: pl2303: add a new device id for ATEN
- USB: option: add support for DW5821e
- [x86] ACPI / PM: save NVS memory for ASUS 1025C laptop
- tty: serial: 8250: Revert NXP SC16C2552 workaround
- serial: 8250_exar: Read INT0 from slave device, too
- [x86, armhf, arm64] serial: 8250_dw: always set baud rate in
dw8250_set_termios
- [armhf, arm64] serial: 8250_dw: Add ACPI support for uart on Broadcom SoC
- uio: fix wrong return value from uio_mmap()
- Revert "uio: use request_threaded_irq instead"
- Bluetooth: avoid killing an already killed socket
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd()
- [x86] hv/netvsc: Fix NULL dereference at single queue mode fallback
- r8169: don't use MSI-X on RTL8106e
- ip_vti: fix a null pointer deferrence when create vti fallback tunnel
- [arm64] net: ethernet: mvneta: Fix napi structure mixup on armada 3700
- [arm64] net: mvneta: fix mvneta_config_rss on armada 3700
- cls_matchall: fix tcf_unbind_filter missing
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.5
- [mips*, x86] EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]
- pty: fix O_CLOEXEC for TIOCGPTPEER
- mm: Allow non-direct-map arguments to free_reserved_area()
- [x86] mm/init: Pass unconverted symbol addresses to free_init_pages()
- [x86] mm/init: Add helper for freeing kernel image pages
- [x86] mm/init: Remove freed kernel image areas from alias mapping
- [powerpc64] Show ori31 availability in spectre_v1 sysfs file not v2
- ext4: fix spectre gadget in ext4_mb_regular_allocator()
- [x86] drm/i915/kvmgt: Fix potential Spectre v1
- drm/amdgpu/pm: Fix potential Spectre v1
- [hppa/parisc] Remove unnecessary barriers from spinlock.h
- [hppa/parisc] Remove ordered stores from syscall.S
- PCI: Restore resized BAR state on resume
- PCI/ACPI/PM: Resume all bridges on suspend-to-RAM
- PCI: hotplug: Don't leak pci_slot on registration failure
- [arm64] PCI: aardvark: Size bridges before resources allocation
- PCI: Skip MPS logic for Virtual Functions (VFs)
- PCI: pciehp: Fix use-after-free on unplug
- PCI: pciehp: Fix unprotected list iteration in IRQ handler
- i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes
- [armhf] i2c: imx: Fix race condition in dma read
- reiserfs: fix broken xattr handling (heap corruption, bad retval)
[ Uwe Kleine-König ]
* [arm64] enable RTC_DRV_PCF8563 for Odroid-C2
[ Romain Perier ]
* [armhf, arm64] add the rt featureset, which adds support for
PREEMPT_RT (Closes #719547)
* spi: Enable CONFIG_SPI_SPIDEV (Closes: #904043)
[ Ben Hutchings ]
* certs: Remove certificate for my personal signing key
* Update policy version to 4.2.0:
- linux-kbuild: Change "#!/usr/bin/env perl" to "#!/usr/bin/perl"
- Build with KBUILD_VERBOSE=1 by default
- objtool, usbip: Build with V=1 by default
* cpupower: Fix handling of noopt and nostrip build options
* debian/bin/gencontrol_signed.py: Add certificate fingerprints to template
metadata
* scripts/kernel-doc: Escape all literal braces in regexes (Closes: #905116)
* debian/bin/genorig.py: Add support for debian/copyright Files-Excluded
field
* Move file exclusion from d/p/debian/dfsg/files-1 to d/copyright
* Move disabling of broken features from d/p/series-orig to d/p/series
* Remove our private patch system, which is no longer needed
* debian/bin: Change "#!/usr/bin/env python3" to "#!/usr/bin/python3"
-- Ben Hutchings <ben@decadent.org.uk> Sun, 26 Aug 2018 20:52:17 +0100
linux (4.18~rc5-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ John Paul Adrian Glaubitz ]
* [m68k] net: Enable CONFIG_XSURF100 as module.
* [m68k] udeb: Remove individual modules from nic-modules.
* [m68k] scsi: Enable CONFIG_SCSI_ZORRO_ESP as module.
* [m68k] udeb: Add zorro_esp module to scsi-modules.
[ Ben Hutchings ]
* [powerpcspe] powerpc/Makefile: Assemble with -me500 when building for E500
(fixes FTBFS) (thanks to James Clarke)
-- Ben Hutchings <ben@decadent.org.uk> Thu, 19 Jul 2018 16:16:23 +0100
linux (4.18~rc4-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ Ben Hutchings ]
* Remove remaining Python 2 (build-)dependencies:
- Build docs using Python 3 version of Sphinx
- linux-perf: Build docs using asciidoctor
- linux-perf: Use Python 3 for scripts
* autofs: rename 'autofs' module back to 'autofs4' (Closes: #902946)
* udeb: Move of_mdio to nic-shared-modules (Closes: #903587)
* [armhf] mm: Export __sync_icache_dcache() for xen-privcmd (fixes FTBFS)
-- Ben Hutchings <ben@decadent.org.uk> Thu, 12 Jul 2018 05:12:50 +0100
linux (4.18~rc3-1~exp1) experimental; urgency=medium
* New upstream release candidate
[ Ben Hutchings ]
* aufs: Update to aufs4.x-rcN 20180702
* netfilter: ipvs: Fix invalid bytes in IP_VS_MH_TAB_INDEX help text
* Update config for 4.18 using kconfigeditor2
- [x86,arm64] PCI: HOTPLUG_PCI_SHPC is now built-in
* Move config files from linux-source-<version> to an arch-dependent
linux-config-<version> package
* lockdep: Stub task_struct::state
* [sh4] udeb: Add nic-shared-modules package
* udeb: Moved fixed_phy to nic-shared-modules
[ YunQiang Su ]
* [mips*r6*] Enable dtb building for boston.
* [mips*r6*/mipsn32*] build linux-perf in rules.real.
-- Ben Hutchings <ben@decadent.org.uk> Tue, 03 Jul 2018 17:26:05 +0100
linux (4.17.17-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.16
- [x86] platform/UV: Mark memblock related init code and data correctly
- [x86] mm/pti: Clear Global bit more aggressively
- [x86] xen/pv: Call get_cpu_address_sizes to set x86_virt/phys_bits
- [x86] mm: Disable ioremap free page handling on x86-PAE
- kbuild: verify that $DEPMOD is installed
- [x86] crypto: ccp - Check for NULL PSP pointer at module unload
- [x86] crypto: ccp - Fix command completion detection race
- crypto: vmac - require a block cipher with 128-bit block size
- crypto: vmac - separate tfm and request context
- crypto: blkcipher - fix crash flushing dcache in error path
- crypto: ablkcipher - fix crash flushing dcache in error path
- crypto: skcipher - fix aligning block size in skcipher_copy_iv()
- crypto: skcipher - fix crash flushing dcache in error path
- ioremap: Update pgtable free interfaces with addr
- [x86] mm: Add TLB purge to free pmd/pte page interfaces
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.17
- [x86] speculation/l1tf: Exempt zeroed PTEs from inversion
-- Salvatore Bonaccorso <carnil@debian.org> Sat, 18 Aug 2018 14:02:58 +0200
linux (4.17.15-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.15
- [hppa/parisc] Enable CONFIG_MLONGCALLS by default
- [hppa/parisc] Define mb() and add memory barriers to assembler unlock
sequences
- Mark HI and TASKLET softirq synchronous
- stop_machine: Disable preemption after queueing stopper threads
- sched/deadline: Update rq_clock of later_rq when pushing a task
- zram: remove BD_CAP_SYNCHRONOUS_IO with writeback feature
- xen/netfront: don't cache skb_shinfo()
- bpf, sockmap: fix leak in bpf_tcp_sendmsg wait for mem path
- bpf, sockmap: fix bpf_tcp_sendmsg sock error handling
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power
management enabled
- scsi: qla2xxx: Fix memory leak for allocating abort IOCB
- init: rename and re-order boot_cpu_state_init()
- root dentries need RCU-delayed freeing
- make sure that __dentry_kill() always invalidates d_seq, unhashed or not
- fix mntput/mntput race
- fix __legitimize_mnt()/mntput() race
- [armhf] dts: imx6sx: fix irq for pcie bridge
- [x86] paravirt: Fix spectre-v2 mitigations for paravirt guests
- [x86] speculation: Protect against userspace-userspace spectreRSB
- [x86] kprobes/x86: Fix %p uses in error messages
- [x86] irqflags: Provide a declaration for native_save_fl
- [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
- [x86] speculation/l1tf: Change order of offset/type in swap entry
- [x86] speculation/l1tf: Protect swap entries against L1TF
- [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation
- [x86] speculation/l1tf: Make sure the first page is always reserved
- [x86] speculation/l1tf: Add sysfs reporting for l1tf
- [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE
mappings
- [x86] speculation/l1tf: Limit swap file size to MAX_PA/2
- [x86] bugs: Move the l1tf function and define pr_fmt properly
- sched/smt: Update sched_smt_present at runtime
- [x86] smp: Provide topology_is_primary_thread()
- [x86] topology: Provide topology_smt_supported()
- cpu/hotplug: Make bringup/teardown of smp threads symmetric
- cpu/hotplug: Split do_cpu_down()
- cpu/hotplug: Provide knobs to control SMT
- [x86] cpu: Remove the pointless CPU printout
- [x86] cpu/AMD: Remove the pointless detect_ht() call
- [x86] cpu/common: Provide detect_ht_early()
- [x86] cpu/topology: Provide detect_extended_topology_early()
- [x86] cpu/intel: Evaluate smp_num_siblings early
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info
- [x86] cpu/AMD: Evaluate smp_num_siblings early
- [x86] apic: Ignore secondary threads if nosmt=force
- [x86] speculation/l1tf: Extend 64bit swap file size limit
- [x86] cpufeatures: Add detection of L1D cache flush support.
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF
- [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE
- Revert "[x86] apic: Ignore secondary threads if nosmt=force"
- cpu/hotplug: Boot HT siblings at least once
- [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present
- [x86] KVM/VMX: Add module argument for L1TF mitigation
- [x86] KVM/VMX: Add L1D flush algorithm
- [x86] KVM/VMX: Add L1D MSR based flush
- [x86] KVM/VMX: Add L1D flush logic
- [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest
numbers
- [x86] KVM/VMX: Add find_msr() helper function
- [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting
- [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
- [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
- cpu/hotplug: Online siblings when SMT control is turned on
- [x86] litf: Introduce vmx status variable
- [x86] kvm: Drop L1TF MSR list approach
- [x86] l1tf: Handle EPT disabled state proper
- [x86] kvm: Move l1tf setup function
- [x86] kvm: Add static key for flush always
- [x86] kvm: Serialize L1D flush parameter setter
- [x86] kvm: Allow runtime control of L1D flush
- cpu/hotplug: Expose SMT control init function
- cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
- [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations
- Documentation: Add section about CPU vulnerabilities
- [x86] speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED
architectures
- [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content
- Documentation/l1tf: Fix typos
- cpu/hotplug: detect SMT disabled by BIOS
- [x86] KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
- [x86] KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
- [x86] KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
- [x86] irq: Demote irq_cpustat_t::__softirq_pending to u16
- [x86] KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
- [x86] Don't include linux/irq.h from asm/hardirq.h
- [x86] irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
- [x86] KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
- Documentation/l1tf: Remove Yonah processors from not vulnerable list
- [x86] speculation: Simplify sysfs report of VMX L1TF vulnerability
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
- KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
- cpu/hotplug: Fix SMT supported evaluation
- [x86] speculation/l1tf: Invert all not present mappings
- [x86] speculation/l1tf: Make pmd/pud_mknotpresent() invert
- [x86] mm/pat: Make set_memory_np() L1TF safe
- [x86] mm/kmmio: Make the tracer robust against L1TF
- tools headers: Synchronize prctl.h ABI header
- tools headers: Synchronise x86 cpufeatures.h for L1TF additions
- [x86] microcode: Allow late microcode loading with SMT disabled
- [x86] smp: fix non-SMP broken build due to redefinition of
apic_id_is_primary_thread
- cpu/hotplug: Non-SMP machines do not make use of booted_once
- [x86] init: fix build with CONFIG_SWAP=n
- [x86] CPU/AMD: Have smp_num_siblings and cpu_llc_id always be present
[ Ben Hutchings ]
* serdev: Enable SERIAL_DEV_BUS, SERIAL_DEV_CTRL_TTYPORT as built-in
(except on armel)
- bluetooth: Re-enable BT_HCIUART_{BCM,LL} (Closes: #906048)
* drivers/net/phy: Enable SFP as module (Closes: #906054)
* Revert "net: increase fragment memory usage limits" (CVE-2018-5391)
[ Salvatore Bonaccorso ]
* [x86] l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
* [x86] i8259: Add missing include file
* Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363)
* Bump ABI to 3
-- Salvatore Bonaccorso <carnil@debian.org> Fri, 17 Aug 2018 05:11:43 +0200
linux (4.17.14-1) unstable; urgency=high
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.9
- compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations
- [x86] asm: Add _ASM_ARG* constants for argument registers to <asm/asm.h>
- [x86] paravirt: Make native_save_fl() extern inline
- alx: take rtnl before calling __alx_open from resume
- atm: Preserve value of skb->truesize when accounting to vcc
- atm: zatm: Fix potential Spectre v1
- [x86] hv_netvsc: split sub-channel setup into async and sync
- ipv6: sr: fix passing wrong flags to crypto_alloc_shash()
- ipvlan: fix IFLA_MTU ignored on NEWLINK
- ixgbe: split XDP_TX tail and XDP_REDIRECT map flushing
- net: dccp: avoid crash in ccid3_hc_rx_send_feedback()
- net: dccp: switch rx_tstamp_last_feedback to monotonic clock
- net: fix use-after-free in GRO with ESP
- net/mlx5e: Avoid dealing with vport representors if not being e-switch
manager
- net/mlx5e: Don't attempt to dereference the ppriv struct if not being
eswitch manager
- net/mlx5: E-Switch, Avoid setup attempt if not being e-switch manager
- net/mlx5: Fix command interface race in polling mode
- net/mlx5: Fix incorrect raw command length parsing
- net/mlx5: Fix required capability for manipulating MPFS
- net/mlx5: Fix wrong size allocation for QoS ETC TC regitster
- [armhf, arm64] net: mvneta: fix the Rx desc DMA address in the Rx path
- net/packet: fix use-after-free
- net/sched: act_ife: fix recursive lock and idr leak
- net/sched: act_ife: preserve the action control in case of error
- net_sched: blackhole: tell upper qdisc about dropped packets
- net: sungem: fix rx checksum support
- net/tcp: Fix socket lookups with SO_BINDTODEVICE
- qede: Adverstise software timestamp caps when PHC is not available.
- qed: Fix setting of incorrect eswitch mode.
- qed: Fix use of incorrect size in memcpy call.
- qed: Limit msix vectors in kdump kernel to the minimum required count.
- qmi_wwan: add support for the Dell Wireless 5821e module
- r8152: napi hangup fix after disconnect
- [s390x] qeth: don't clobber buffer on async TX completion
- [armhf, arm64] stmmac: fix DMA channel hang in half-duplex mode
- tcp: fix Fast Open key endianness
- tcp: prevent bogus FRTO undos with non-SACK flows
- vhost_net: validate sock before trying to put its fd
- VSOCK: fix loopback on big-endian systems
- nfp: flower: fix mpls ether type detection
- net: use dev_change_tx_queue_len() for SIOCSIFTXQLEN
- nfp: reject binding to shared blocks
- xen-netfront: Fix mismatched rtnl_unlock
- xen-netfront: Update features after registering netdev
- enic: do not overwrite error code
- i40e: split XDP_TX tail and XDP_REDIRECT map flushing
- IB/mlx5: Avoid dealing with vport representors if not being e-switch
manager
- [s390x] Revert "s390/qeth: use Read device to query hypervisor for MAC"
- [s390x] qeth: avoid using is_multicast_ether_addr_64bits on (u8 *)[6]
- [s390x] qeth: fix race when setting MAC address
- sfc: correctly initialise filter rwsem for farch
- virtio_net: split XDP_TX kick and XDP_REDIRECT map flushing
- [x86] kvm/Kconfig: Ensure CRYPTO_DEV_CCP_DD state at minimum matches
KVM_AMD
- net: cxgb3_main: fix potential Spectre v1
- net: lan78xx: Fix race in tx pending skb size calculation
- [x86] PCI: hv: Disable/enable IRQs rather than BH in hv_compose_msi_msg()
- netfilter: ebtables: reject non-bridge targets
- reiserfs: fix buffer overflow with long warning messages
- KEYS: DNS: fix parsing multiple options
- tls: Stricter error checking in zerocopy sendmsg path
- autofs: fix slab out of bounds read in getname_kernel()
- netfilter: ipv6: nf_defrag: drop skb dst before queueing
- bpf: reject any prog that failed read-only lock
- rds: avoid unenecessary cong_update in loop transport
- block: don't use blocking queue entered for recursive bio submits
- bpf: sockmap, fix crash when ipv6 sock is added
- bpf: sockmap, consume_skb in close path
- bpf: don't leave partial mangled prog in jit_subprogs error path
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
- ipvs: initialize tbl->entries after allocation
- ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
- [armhf, arm64] smccc: Add SMCCC-specific return codes
- [arm64] Add 'ssbd' command-line option
- [arm64] ssbd: Add global mitigation state accessor
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation
- [arm64] ssbd: Restore mitigation status on CPU resume
- [arm64] ssbd: Introduce thread flag to control userspace mitigation
- [arm64] ssbd: Add prctl interface for per-thread mitigation
- [arm64] KVM: Add HYP per-cpu accessors
ARCH_FEATURES_FUNC_ID
- bpf: enforce correct alignment for instructions
- [armhf] bpf: fix to use bpf_jit_binary_lock_ro api
- bpf: undo prog rejection on read-only lock failure
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.10
- scsi: sd_zbc: Fix variable type and bogus comment
- scsi: qla2xxx: Fix inconsistent DMA mem alloc/free
- scsi: qla2xxx: Fix kernel crash due to late workqueue allocation
- scsi: qla2xxx: Fix NULL pointer dereference for fcport search
- KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in
parallel.
- KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer
- [x86] KVM: VMX: Mark VMXArea with revision_id of physical CPU even when
eVMCS enabled
- [x86] kvm/vmx: don't read current->thread.{fs,gs}base of legacy tasks
- [x86] kvmclock: set pvti_cpu0_va after enabling kvmclock
- [x86] apm: Don't access __preempt_count with zeroed fs
- [x86] events/intel/ds: Fix bts_interrupt_threshold alignment
- [x86] MCE: Remove min interval polling limitation
- fat: fix memory allocation failure handling of match_strdup()
- ALSA: rawmidi: Change resized buffers atomically
- [x86] ALSA: hda/realtek - Add Panasonic CF-SZ6 headset jack quirk
- [x86] ALSA: hda/realtek - Yet another Clevo P950 quirk entry
- [x86] ALSA: hda: add mute led support for HP ProBook 455 G5
- mm: memcg: fix use after free in mem_cgroup_iter()
- mm/huge_memory.c: fix data loss when splitting a file pmd
- [x86] cpufreq: intel_pstate: Register when ACPI PCCH is present
- [x86, arm64, powerpc*] vfio/pci: Fix potential Spectre v1
- stop_machine: Disable preemption when waking two stopper threads
- [powerpc*] powerpc/powernv: Fix save/restore of SPRG3 on entry/exit from
stop (idle)
- drm/amdgpu: Reserve VM root shared fence slot for command submission (v3)
- [x86] drm/i915: Fix hotplug irq ack on i965/g4x
- Revert "drm/amd/display: Don't return ddc result and read_bytes in same
return value"
- [x86] drm/nouveau: Remove bogus crtc check in pmops_runtime_idle
- [x86] drm/nouveau: Use drm_connector_list_iter_* for iterating connectors
- [x86] drm/nouveau: Avoid looping through fake MST connectors
- gen_stats: Fix netlink stats dumping in the presence of padding
- ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns
- ipv6: fix useless rol32 call on hash
- ipv6: ila: select CONFIG_DST_CACHE
- lib/rhashtable: consider param->min_size when setting initial table size
- net: diag: Don't double-free TCP_NEW_SYN_RECV sockets in tcp_abort
- net: Don't copy pfmemalloc flag in __copy_skb_header()
- skbuff: Unconditionally copy pfmemalloc in __skb_clone()
- net/ipv4: Set oif in fib_compute_spec_dst
- net/ipv6: Do not allow device only routes via the multipath API
- net: phy: fix flag masking in __set_phy_supported
- qmi_wwan: add support for Quectel EG91
- rhashtable: add restart routine in rhashtable_free_and_destroy()
- sch_fq_codel: zero q->flows_cnt when fq_codel_init fails
- tg3: Add higher cpu clock for 5762.
- net: ip6_gre: get ipv6hdr after skb_cow_head()
- sctp: introduce sctp_dst_mtu
- sctp: fix the issue that pathmtu may be set lower than MINSEGMENT
- [x86] hv_netvsc: Fix napi reschedule while receive completion is busy
- net: aquantia: vlan unicast address list correct handling
- net/mlx4_en: Don't reuse RX page when XDP is set
- ipv6: make DAD fail with enhanced DAD when nonce length differs
- net: usb: asix: replace mii_nway_restart in resume path
- [alpha] fix osf_wait4() breakage
- drm_mode_create_lease_ioctl(): fix open-coded filp_clone_open()
- xhci: Fix perceived dead host due to runtime suspend race with event
handler
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.11
- [x86] KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
- [x86] Revert "iommu/intel-iommu: Enable CONFIG_DMA_DIRECT_OPS=y and clean
up intel_{alloc,free}_coherent()"
- [mips*] Fix off-by-one in pci_resource_to_user()
- [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU rate from 300Mhz
to 1.2GHz
- [x86] xen/PVH: Set up GS segment for stack canary
- [x86] drm/nouveau: Fix runtime PM leak in nv50_disp_atomic_commit()
- [x86] drm/nouveau: Set DRIVER_ATOMIC cap earlier to fix debugfs
- [arm64] clk: meson-gxbb: set fclk_div2 as CLK_IS_CRITICAL
- bonding: set default miimon value for non-arp modes if not set
- ip: hash fragments consistently
- ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
- net: dsa: mv88e6xxx: fix races between lock and irq freeing
- net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper
- net-next/hinic: fix a problem in hinic_xmit_frame()
- net: skb_segment() should not return NULL
- tcp: fix dctcp delayed ACK schedule
- tcp: helpers to send special DCTCP ack
- tcp: do not cancel delay-AcK on DCTCP special ACK
- tcp: do not delay ACK in DCTCP upon CE status change
- net/mlx5: E-Switch, UBSAN fix undefined behavior in mlx5_eswitch_mode
- r8169: restore previous behavior to accept BIOS WoL settings
- tls: check RCV_SHUTDOWN in tls_wait_data
- net/mlx5e: Add ingress/egress indication for offloaded TC flows
- net/mlx5e: Only allow offloading decap egress (egdev) flows
- net/mlx5e: Refine ets validation function
- nfp: flower: ensure dead neighbour entries are not offloaded
- sock: fix sg page frag coalescing in sk_alloc_sg
- net: phy: consider PHY_IGNORE_INTERRUPT in phy_start_aneg_priv
- multicast: do not restore deleted record source filter mode to new one
- net/ipv6: Fix linklocal to global address with VRF
- net/mlx5e: Don't allow aRFS for encapsulated packets
- net/mlx5e: Fix quota counting in aRFS expire flow
- net/mlx5: Adjust clock overflow work period
- rtnetlink: add rtnl_link_state check in rtnl_configure_link
- vxlan: add new fdb alloc and create helpers
- vxlan: make netlink notify in vxlan_fdb_destroy optional
- vxlan: fix default fdb entry netlink notify ordering during netdev create
- tcp: free batches of packets in tcp_prune_ofo_queue()
CVE-2018-5390
- tcp: avoid collapses in tcp_prune_queue() if possible
- tcp: detect malicious patterns in tcp_collapse_ofo_queue()
- tcp: call tcp_drop() from tcp_data_queue_ofo()
- tcp: add tcp_ooo_try_coalesce() helper
- Revert "staging:r8188eu: Use lib80211 to support TKIP"
- staging: speakup: fix wraparound in uaccess length check
- usb: cdc_acm: Add quirk for Castles VEGA3000
- usb: core: handle hub C_PORT_OVER_CURRENT condition
- [armhf, arm64] usb: dwc2: Fix DMA alignment to start at allocated boundary
- [armhf, arm64] usb: xhci: Fix memory leak in xhci_endpoint_reset()
- [x86, arm64] ACPICA: AML Parser: ignore dispatcher error status during
table load
- driver core: Partially revert "driver core: correct device's shutdown
order"
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.12
- Input: elan_i2c - add ACPI ID for lenovo ideapad 330
- Input: i8042 - add Lenovo LaVie Z to the i8042 reset list
- Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST
- mm: disallow mappings that conflict for devm_memremap_pages()
- kvm, mm: account shadow page tables to kmemcg
- delayacct: fix crash in delayacct_blkio_end() after delayacct init failure
- tracing: Fix double free of event_trigger_data
- tracing: Fix possible double free in event_enable_trigger_func()
- kthread, tracing: Don't expose half-written comm when creating kthreads
- tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure
- tracing: Quiet gcc warning about maybe unused link variable
- [arm64] fix vmemmap BUILD_BUG_ON() triggering on !vmemmap setups
- [x86] drm/i915/glk: Add Quirk for GLK NUC HDMI port issues.
- kcov: ensure irq code sees a valid area
- mm: check for SIGKILL inside dup_mmap() loop
- drm/amd/powerplay: Set higher SCLK&MCLK frequency than dpm7 in OD (v2)
- xen/netfront: raise max number of slots in xennet_get_responses()
- [x86] hv_netvsc: fix network namespace issues with VF support
- skip LAYOUTRETURN if layout is invalid
- ixgbe: Fix setting of TC configuration for macvlan case
- ALSA: emu10k1: add error handling for snd_ctl_add
- ALSA: fm801: add error handling for snd_ctl_add
- NFSv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY
- nfsd: fix error handling in nfs4_set_delegation()
- nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo
- vfio: platform: Fix reset module leak in error path
- vfio/mdev: Check globally for duplicate devices
- vfio/type1: Fix task tracking for QEMU vCPU hotplug
- kernel/hung_task.c: show all hung tasks before panic
- mem_cgroup: make sure moving_account, move_lock_task and stat_cpu in the
same cacheline
- mm: /proc/pid/pagemap: hide swap entries from unprivileged users
- mm: vmalloc: avoid racy handling of debugobjects in vunmap
- mm/slub.c: add __printf verification to slab_err()
- rtc: ensure rtc_set_alarm fails when alarms are not supported
- rxrpc: Fix terminal retransmission connection ID to include the channel
- [arm64] net: hns3: Fix for VF mailbox cannot receiving PF response
- perf tools: Fix pmu events parsing rule
- netfilter: ipset: forbid family for hash:mac sets
- netfilter: ipset: List timing out entries with "timeout 1" instead of zero
- printk: drop in_nmi check from printk_safe_flush_on_panic()
- [armhf] bpf: fix inconsistent naming about emit_a32_lsr_{r64,i64}
- ceph: fix alignment of rasize
- ceph: fix use-after-free in ceph_statfs()
- e1000e: Ignore TSYNCRXCTL when getting I219 clock attributes
- infiniband: fix a possible use-after-free bug (CVE-2018-14734)
- [powerpc*] lib: Adjust .balign inside string functions for PPC32
- [powerpc*] 64s: Add barrier_nospec
- [powerpc*] eeh: Fix use-after-release of EEH driver
- [powerpc*] 64s: Fix compiler store ordering to SLB shadow area
- [arm64] net: hns3: Fix for phy not link up problem after resetting
- [arm64] net: hns3: Fix for service_task not running problem after
resetting
- RDMA/mad: Convert BUG_ONs to error flows
- lightnvm: fix partial read error path
- lightnvm: proper error handling for pblk_bio_add_pages
- lightnvm: pblk: warn in case of corrupted write buffer
- netfilter: nf_tables: check msg_type before nft_trans_set(trans)
- pnfs: Don't release the sequence slot until we've processed layoutget on
open
- NFS: Fix up nfs_post_op_update_inode() to force ctime updates
- disable loading f2fs module on PAGE_SIZE > 4KB
- f2fs: fix error path of move_data_page
- f2fs: don't drop dentry pages after fs shutdown
- f2fs: fix to don't trigger writeback during recovery
- f2fs: fix to wait page writeback during revoking atomic write
- f2fs: Fix deadlock in shutdown ioctl
- f2fs: fix missing clear FI_NO_PREALLOC in some error case
- f2fs: fix to detect failure of dquot_initialize
- f2fs: fix race in between GC and atomic open
- block, bfq: remove wrong lock in bfq_requests_merged
- usbip: usbip_detach: Fix memory, udev context and udev leak
- usbip: dynamically allocate idev by nports found in sysfs
- [x86] perf/x86/intel/uncore: Correct fixed counter index check in
generic code
- [x86] perf/x86/intel/uncore: Correct fixed counter index check for NHM
- PCI: Fix devm_pci_alloc_host_bridge() memory leak
- btrfs: balance dirty metadata pages in btrfs_finish_ordered_io
- iwlwifi: pcie: fix race in Rx buffer allocator
- iwlwifi: mvm: open BA session only when sta is authorized
- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
- drm/amd/display: Do not program interrupt status on disabled crtc
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
- ASoC: dpcm: fix BE dai not hw_free and shutdown
- mfd: cros_ec: Fail early if we cannot identify the EC
- mwifiex: handle race during mwifiex_usb_disconnect
- wlcore: sdio: check for valid platform device data before suspend
- [arm64] net: hns3: Fixes initalization of RoCE handle and makes it
conditional
- [arm64] net: hns3: Fixes the init of the VALID BD info in the descriptor
- media: tw686x: Fix incorrect vb2_mem_ops GFP flags
- media: cec-pin-error-inj: avoid a false-positive Spectre detection
- media: videobuf2-core: don't call memop 'finish' when queueing
- Btrfs: don't return ino to ino cache if inode item removal fails
- Btrfs: don't BUG_ON() in btrfs_truncate_inode_items()
- btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups
- btrfs: qgroup: Finish rescan when hit the last leaf of extent tree
- [x86] microcode: Make the late update update_lock a raw lock for RT
- PM / wakeup: Make s2idle_lock a RAW_SPINLOCK
- PCI: Prevent sysfs disable of device while driver is attached
- [arm64] soc: qcom: qmi: fix a buffer sizing bug
- [arm64] soc: qcom: smem: fix qcom_smem_set_global_partition()
- [arm64] soc: qcom: smem: byte swap values properly
- nvme-rdma: stop admin queue before freeing it
- nvme-pci: Fix AER reset handling
- ath: Add regulatory mapping for : FCC3_ETSIC, ETSI8_WORLD, APL13_WORLD,
APL2_FCCA, Uganda, Tanzania, Serbia, Bermuda and Bahamas
- sched/cpufreq: Modify aggregate utilization to always include blocked FAIR
utilization
- [powerpc*] Add a missing include header
- [powerpc*] chrp/time: Make some functions static, add missing header
include
- [powerpc*] powermac: Add missing prototype for note_bootable_part()
- [powerpc*] powermac: Mark variable x as unused
- powerpc: Add __printf verification to prom_printf
- [x86] KVM: prevent integer overflows in KVM_MEMORY_ENCRYPT_REG_REGION
- [powerpc*] 8xx: fix invalid register expression in head_8xx.S
- [arm64] pinctrl: msm: fix gpio-hog related boot issues
- bpf: fix multi-function JITed dump obtained via syscall
- [powerpc*] bpf: pad function address loads with NOPs
- PCI: pciehp: Request control of native hotplug only if supported
- mwifiex: correct histogram data with appropriate index
- ima: based on policy verify firmware signatures (pre-allocated buffer)
- spi: Add missing pm_runtime_put_noidle() after failed get
- [arm64] net: hns3: Fix for CMDQ and Misc. interrupt init order problem
- [arm64] net: hns3: Fix the missing client list node initialization
- [arm64] net: hns3: Fix for hns3 module is loaded multiple times problem
- fscrypt: use unbound workqueue for decryption
- [armhf, arm64] net: mvpp2: Add missing VLAN tag detection
- scsi: ufs: ufshcd: fix possible unclocked register access
- scsi: ufs: fix exception event handling
- [s390x] scsi: zfcp: assert that the ERP lock is held when tracing a
recovery trigger
- drm/nouveau: remove fence wait code from deferred client work handler
- drm/nouveau/gem: lookup VMAs for buffers referenced by pushbuf ioctl
- drm/nouveau/fifo/gk104-: poll for runlist update completion
- Bluetooth: btusb: add ID for LiteOn 04ca:301a
- rtc: tps6586x: fix possible race condition
- rtc: vr41xx: fix possible race condition
- rtc: tps65910: fix possible race condition
- ALSA: emu10k1: Rate-limit error messages about page errors
- regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops
- md/raid1: add error handling of read error from FailFast device
- md: fix NULL dereference of mddev->pers in remove_and_add_spares()
- ixgbevf: fix MAC address changes through ixgbevf_set_mac()
- gpu: host1x: Acquire a reference to the IOVA cache
- media: smiapp: fix timeout checking in smiapp_read_nvm
- PCI/DPC: Clear interrupt status in interrupt handler top half
- clocksource: Move inline keyword to the beginning of function declarations
- net: ethernet: ti: cpsw-phy-sel: check bus_find_device() ret value
- ALSA: usb-audio: Apply rate limit to warning messages in URB complete
callback
- [arm64] net: hns3: Fix for fiber link up problem
- media: atomisp: ov2680: don't declare unused vars
- media: staging: atomisp: Comment out several unused sensor resolutions
- [arm64] cmpwait: Clear event register before arming exclusive monitor
- HID: hid-plantronics: Re-resend Update to map button for PTT products
- drm/amd/display: remove need of modeset flag for overlay planes (V2)
- drm/radeon: fix mode_valid's return type
- drm/amdgpu: Remove VRAM from shared bo domains.
- drm/amd/display: Fix dim display on DCE11
- IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for DMA_VIRT_OPS
- [powerpc*] embedded6xx/hlwd-pic: Prevent interrupts from being handled by
Starlet
- HID: i2c-hid: check if device is there before really probing
- rsi: Add null check for virtual interfaces in wowlan config
- nvmem: properly handle returned value nvmem_reg_read
- [armhf] ARM: dts: imx53: Fix LDB OF graph warning
- i40e: free the skb after clearing the bitlock
- tty: Fix data race in tty_insert_flip_string_fixed_flag
- dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA
- net: phy: phylink: Release link GPIO
- media: rcar_jpu: Add missing clk_disable_unprepare() on error in
jpu_open()
- libata: Fix command retry decision
- ACPI / LPSS: Only call pwm_add_table() for Bay Trail PWM if PMIC HRV is 2
- media: media-device: fix ioctl function types
- media: saa7164: Fix driver name in debug output
- media: em28xx: Fix DualHD broken second tuner
- mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter
pages
- brcmfmac: Add support for bcm43364 wireless chipset
- [s390x] cpum_sf: Add data entry sizes to sampling trailer entry
- perf: fix invalid bit in diagnostic entry
- net: phy: sfp: handle cases where neither BR, min nor BR, max is given
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF only.
- bnxt_en: Always forward VF MAC address to the PF.
- mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is
enabled
- staging: most: cdev: fix chrdev_region leak
- scsi: 3w-9xxx: fix a missing-check bug
- scsi: 3w-xxxx: fix a missing-check bug
- scsi: megaraid: silence a static checker bug
- scsi: hisi_sas: config ATA de-reset as an constrained command for v3 hw
- soc/tegra: pmc: Don't allocate struct tegra_powergate on stack
- scsi: qedf: Set the UNLOADING flag when removing a vport
- dma-direct: try reallocation with GFP_DMA32 if possible
- staging: lustre: o2iblnd: fix race at kiblnd_connect_peer
- staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5
- thermal: exynos: fix setting rising_threshold for Exynos5433
- regulator: add dummy function of_find_regulator_by_node
- bpf: fix references to free_bpf_prog_info() in comments
- f2fs: avoid fsync() failure caused by EAGAIN in writepage()
- media: em28xx: fix a regression with HVR-950
- media: siano: get rid of __le32/__le16 cast warnings
- mt76x2: fix avg_rssi estimation
- drm/atomic: Handling the case when setting old crtc for plane
- mmc: sdhci-omap: Fix when capabilities are obtained from
SDHCI_CAPABILITIES reg
- f2fs: check cap_resource only for data blocks
- mlxsw: spectrum_router: Return an error for non-default FIB rules
- ALSA: hda/ca0132: fix build failure when a local macro is defined
- mmc: dw_mmc: update actual clock for mmc debugfs
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
- [arm64] dt-bindings: pinctrl: meson: add support for the Meson8m2 SoC
- [armhf] spi: meson-spicc: Fix error handling in meson_spicc_probe()
- [arm64] net: hns3: Fixes the out of bounds access in hclge_map_tqp
- dt-bindings: net: meson-dwmac: new compatible name for AXG SoC
- i40e: Add advertising 10G LR mode
- i40e: avoid overflow in i40e_ptp_adjfreq()
- mt76: add rcu locking around tx scheduling
- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
- stop_machine: Use raw spinlocks
- delayacct: Use raw_spinlocks
- ath10k: fix kernel panic while reading tpc_stats
- memory: tegra: Do not handle spurious interrupts
- memory: tegra: Apply interrupts mask per SoC
- nvme: lightnvm: add granby support
- ASoC: fsl_ssi: Use u32 variable type when using regmap_read()
- ASoC: compress: Only call free for components which have been opened
- igb: Fix queue selection on MAC filters on i210
- qtnfmac: pearl: pcie: fix memory leak in qtnf_fw_work_handler
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
- ipconfig: Correctly initialise ic_nameservers
- rsi: Fix 'invalid vdd' warning in mmc
- rsi: fix nommu_map_sg overflow kernel panic
- audit: allow not equal op for audit by executable
- [armhf, arm64] drm/rockchip: analogix_dp: Do not call Analogix code before
bind
- [x86] platform/x86: dell-smbios: Match on www.dell.com in OEM strings too
- staging: vchiq_core: Fix missing semaphore release in error case
- staging: lustre: llite: correct removexattr detection
- staging: lustre: ldlm: free resource when ldlm_lock_create() fails.
- staging: ks7010: fix error handling in ks7010_upload_firmware
- serial: core: Make sure compiler barfs for 16-byte earlycon names
- soc: imx: gpcv2: Do not pass static memory as platform data
- microblaze: Fix simpleImage format generation
- usb: hub: Don't wait for connect state at resume for powered-off ports
- crypto: authencesn - don't leak pointers to authenc keys
- crypto: authenc - don't leak pointers to authenc keys
- y2038: ipc: Use ktime_get_real_seconds consistently
- media: rc: mce_kbd decoder: low timeout values cause double keydowns
- media: omap3isp: fix unbalanced dma_iommu_mapping
- regulator: Don't return or expect -errno from of_map_mode()
- ath10k: search all IEs for variant before falling back
- drm/stm: ltdc: fix warning in ltdc_crtc_update_clut()