-linux (4.15.0-20.21) UNRELEASED; urgency=medium
+linux (4.15.0-34.37) UNRELEASED; urgency=medium
CHANGELOG: Do not edit directly. Autogenerated at release.
CHANGELOG: Use the printchanges target to see the curent changes.
CHANGELOG: Use the insertchanges target to create the final log.
- -- Seth Forshee <seth.forshee@canonical.com> Mon, 23 Apr 2018 23:24:04 -0500
+ -- Kamal Mostafa <kamal@canonical.com> Wed, 22 Aug 2018 10:11:37 -0700
+
+linux (4.15.0-33.36) bionic; urgency=medium
+
+ * linux: 4.15.0-33.36 -proposed tracker (LP: #1787149)
+
+ * RTNL assertion failure on ipvlan (LP: #1776927)
+ - ipvlan: drop ipv6 dependency
+ - ipvlan: use per device spinlock to protect addrs list updates
+ - SAUCE: fix warning from "ipvlan: drop ipv6 dependency"
+
+ * ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941)
+ - test_bpf: flag tests that cannot be jited on s390
+
+ * HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689)
+ - drm/nouveau: fix nouveau_dsm_get_client_id()'s return type
+ - drm/radeon: fix radeon_atpx_get_client_id()'s return type
+ - drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type
+ - platform/x86: apple-gmux: fix gmux_get_client_id()'s return type
+ - ALSA: hda: use PCI_BASE_CLASS_DISPLAY to replace PCI_CLASS_DISPLAY_VGA
+ - vga_switcheroo: set audio client id according to bound GPU id
+
+ * locking sockets broken due to missing AppArmor socket mediation patches
+ (LP: #1780227)
+ - UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets
+
+ * Update2 for ocxl driver (LP: #1781436)
+ - ocxl: Fix page fault handler in case of fault on dying process
+
+ * netns: unable to follow an interface that moves to another netns
+ (LP: #1774225)
+ - net: core: Expose number of link up/down transitions
+ - dev: always advertise the new nsid when the netns iface changes
+ - dev: advertise the new ifindex when the netns iface changes
+
+ * [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066)
+ - block, bfq: fix occurrences of request finish method's old name
+ - block, bfq: remove batches of confusing ifdefs
+ - block, bfq: add requeue-request hook
+
+ * HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763)
+ - ALSA: hda: add mute led support for HP ProBook 455 G5
+
+ * [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver
+ (LP: #1781476)
+ - i2c: xlp9xx: Fix issue seen when updating receive length
+ - i2c: xlp9xx: Make sure the transfer size is not more than
+ I2C_SMBUS_BLOCK_SIZE
+
+ * x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486)
+ - x86/kvm: fix LAPIC timer drift when guest uses periodic mode
+
+ * Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823)
+ - [Config:] d-i: Add ax88179_178a and r8152 to nic-modules
+
+ * Nvidia fails after switching its mode (LP: #1778658)
+ - PCI: Restore config space on runtime resume despite being unbound
+
+ * Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364)
+ - SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3
+
+ * CVE-2018-12232
+ - PATCH 1/1] socket: close race condition between sock_close() and
+ sockfs_setattr()
+
+ * CVE-2018-10323
+ - xfs: set format back to extents if xfs_bmap_extents_to_btree
+
+ * change front mic location for more lenovo m7/8/9xx machines (LP: #1781316)
+ - ALSA: hda/realtek - Fix the problem of two front mics on more machines
+ - ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION
+
+ * Cephfs + fscache: unable to handle kernel NULL pointer dereference at
+ 0000000000000000 IP: jbd2__journal_start+0x22/0x1f0 (LP: #1783246)
+ - ceph: track read contexts in ceph_file_info
+
+ * Touchpad of ThinkPad P52 failed to work with message "lost sync at byte"
+ (LP: #1779802)
+ - Input: elantech - fix V4 report decoding for module with middle key
+ - Input: elantech - enable middle button of touchpads on ThinkPad P52
+
+ * xhci_hcd 0000:00:14.0: Root hub is not suspended (LP: #1779823)
+ - usb: xhci: dbc: Fix lockdep warning
+ - usb: xhci: dbc: Don't decrement runtime PM counter if DBC is not started
+
+ * CVE-2018-13406
+ - video: uvesafb: Fix integer overflow in allocation
+
+ * CVE-2018-10840
+ - ext4: correctly handle a zero-length xattr with a non-zero e_value_offs
+
+ * CVE-2018-11412
+ - ext4: do not allow external inodes for inline data
+
+ * CVE-2018-10881
+ - ext4: clear i_data in ext4_inode_info when removing inline data
+
+ * CVE-2018-12233
+ - jfs: Fix inconsistency between memory allocation and ea_buf->max_size
+
+ * CVE-2018-12904
+ - kvm: nVMX: Enforce cpl=0 for VMX instructions
+
+ * Error parsing PCC subspaces from PCCT (LP: #1528684)
+ - mailbox: PCC: erroneous error message when parsing ACPI PCCT
+
+ * CVE-2018-13094
+ - xfs: don't call xfs_da_shrink_inode with NULL bp
+
+ * other users' coredumps can be read via setgid directory and killpriv bypass
+ (LP: #1779923) // CVE-2018-13405
+ - Fix up non-directory creation in SGID directories
+
+ * Invoking obsolete 'firmware_install' target breaks snap build (LP: #1782166)
+ - snapcraft.yaml: stop invoking the obsolete (and non-existing)
+ 'firmware_install' target
+
+ * snapcraft.yaml: missing ubuntu-retpoline-extract-one script breaks the build
+ (LP: #1782116)
+ - snapcraft.yaml: copy retpoline-extract-one to scripts before build
+
+ * Allow Raven Ridge's audio controller to be runtime suspended (LP: #1782540)
+ - ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
+
+ * CVE-2018-11506
+ - sr: pass down correctly sized SCSI sense buffer
+
+ * Bionic update: upstream stable patchset 2018-07-24 (LP: #1783418)
+ - net: Fix a bug in removing queues from XPS map
+ - net/mlx4_core: Fix error handling in mlx4_init_port_info.
+ - net/sched: fix refcnt leak in the error path of tcf_vlan_init()
+ - net: sched: red: avoid hashing NULL child
+ - net/smc: check for missing nlattrs in SMC_PNETID messages
+ - net: test tailroom before appending to linear skb
+ - packet: in packet_snd start writing at link layer allocation
+ - sock_diag: fix use-after-free read in __sk_free
+ - tcp: purge write queue in tcp_connect_init()
+ - vmxnet3: set the DMA mask before the first DMA map operation
+ - vmxnet3: use DMA memory barriers where required
+ - hv_netvsc: empty current transmit aggregation if flow blocked
+ - hv_netvsc: Use the num_online_cpus() for channel limit
+ - hv_netvsc: avoid retry on send during shutdown
+ - hv_netvsc: only wake transmit queue if link is up
+ - hv_netvsc: fix error unwind handling if vmbus_open fails
+ - hv_netvsc: cancel subchannel setup before halting device
+ - hv_netvsc: fix race in napi poll when rescheduling
+ - hv_netvsc: defer queue selection to VF
+ - hv_netvsc: disable NAPI before channel close
+ - hv_netvsc: use RCU to fix concurrent rx and queue changes
+ - hv_netvsc: change GPAD teardown order on older versions
+ - hv_netvsc: common detach logic
+ - hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown
+ - hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl()
+ - hv_netvsc: Ensure correct teardown message sequence order
+ - hv_netvsc: Fix a network regression after ifdown/ifup
+ - sparc: vio: use put_device() instead of kfree()
+ - ext2: fix a block leak
+ - s390: add assembler macros for CPU alternatives
+ - s390: move expoline assembler macros to a header
+ - s390/crc32-vx: use expoline for indirect branches
+ - s390/lib: use expoline for indirect branches
+ - s390/ftrace: use expoline for indirect branches
+ - s390/kernel: use expoline for indirect branches
+ - s390: move spectre sysfs attribute code
+ - s390: extend expoline to BC instructions
+ - s390: use expoline thunks in the BPF JIT
+ - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
+ - scsi: zfcp: fix infinite iteration on ERP ready list
+ - loop: don't call into filesystem while holding lo_ctl_mutex
+ - loop: fix LOOP_GET_STATUS lock imbalance
+ - cfg80211: limit wiphy names to 128 bytes
+ - hfsplus: stop workqueue when fill_super() failed
+ - x86/kexec: Avoid double free_page() upon do_kexec_load() failure
+ - usb: gadget: f_uac2: fix bFirstInterface in composite gadget
+ - usb: dwc3: Undo PHY init if soft reset fails
+ - usb: dwc3: omap: don't miss events during suspend/resume
+ - usb: gadget: core: Fix use-after-free of usb_request
+ - usb: gadget: fsl_udc_core: fix ep valid checks
+ - usb: dwc2: Fix dwc2_hsotg_core_init_disconnected()
+ - usb: cdc_acm: prevent race at write to acm while system resumes
+ - net: usbnet: fix potential deadlock on 32bit hosts
+ - ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name
+ - usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume
+ timing"
+ - USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM
+ - net/usb/qmi_wwan.c: Add USB id for lt4120 modem
+ - net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
+ - Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB
+ - ALSA: usb-audio: Add native DSD support for Luxman DA-06
+ - usb: dwc3: Add SoftReset PHY synchonization delay
+ - usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields
+ - usb: dwc3: Makefile: fix link error on randconfig
+ - xhci: zero usb device slot_id member when disabling and freeing a xhci slot
+ - usb: dwc2: Fix interval type issue
+ - usb: dwc2: hcd: Fix host channel halt flow
+ - usb: dwc2: host: Fix transaction errors in host mode
+ - usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS
+ - usb: gadget: ffs: Execute copy_to_user() with USER_DS set
+ - usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS
+ - usb: gadget: udc: change comparison to bitshift when dealing with a mask
+ - usb: gadget: composite: fix incorrect handling of OS desc requests
+ - media: lgdt3306a: Fix module count mismatch on usb unplug
+ - media: em28xx: USB bulk packet size fix
+ - Bluetooth: btusb: Add device ID for RTL8822BE
+ - xhci: Show what USB release number the xHC supports from protocol capablity
+ - staging: bcm2835-audio: Release resources on module_exit()
+ - staging: lustre: fix bug in osc_enter_cache_try
+ - staging: fsl-dpaa2/eth: Fix incorrect casts
+ - staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr
+ - staging: ks7010: Use constants from ieee80211_eid instead of literal ints.
+ - staging: lustre: lmv: correctly iput lmo_root
+ - crypto: inside-secure - wait for the request to complete if in the backlog
+ - crypto: atmel-aes - fix the keys zeroing on errors
+ - crypto: ccp - don't disable interrupts while setting up debugfs
+ - crypto: inside-secure - do not process request if no command was issued
+ - crypto: inside-secure - fix the cache_len computation
+ - crypto: inside-secure - fix the extra cache computation
+ - crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss
+ - crypto: inside-secure - fix the invalidation step during cra_exit
+ - scsi: mpt3sas: fix an out of bound write
+ - scsi: ufs: Enable quirk to ignore sending WRITE_SAME command
+ - scsi: bnx2fc: Fix check in SCSI completion handler for timed out request
+ - scsi: sym53c8xx_2: iterator underflow in sym_getsync()
+ - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
+ - scsi: qla2xxx: Avoid triggering undefined behavior in
+ qla2x00_mbx_completion()
+ - scsi: storvsc: Increase cmd_per_lun for higher speed devices
+ - scsi: qedi: Fix truncation of CHAP name and secret
+ - scsi: aacraid: fix shutdown crash when init fails
+ - scsi: qla4xxx: skip error recovery in case of register disconnect.
+ - scsi: qedi: Fix kernel crash during port toggle
+ - scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM
+ - scsi: sd: Keep disk read-only when re-reading partition
+ - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled
+ - scsi: aacraid: Insure command thread is not recursively stopped
+ - scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD
+ - scsi: mvsas: fix wrong endianness of sgpio api
+ - ASoC: hdmi-codec: Fix module unloading caused kernel crash
+ - ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs
+ - ASoC: samsung: odroid: Fix 32000 sample rate handling
+ - ASoC: topology: create TLV data for dapm widgets
+ - ASoC: samsung: i2s: Ensure the RCLK rate is properly determined
+ - clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228
+ - clk: Don't show the incorrect clock phase
+ - clk: hisilicon: mark wdt_mux_p[] as const
+ - clk: tegra: Fix pll_u rate configuration
+ - clk: rockchip: Prevent calculating mmc phase if clock rate is zero
+ - clk: samsung: s3c2410: Fix PLL rates
+ - clk: samsung: exynos7: Fix PLL rates
+ - clk: samsung: exynos5260: Fix PLL rates
+ - clk: samsung: exynos5433: Fix PLL rates
+ - clk: samsung: exynos5250: Fix PLL rates
+ - clk: samsung: exynos3250: Fix PLL rates
+ - media: dmxdev: fix error code for invalid ioctls
+ - media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array
+ - media: ov5645: add missing of_node_put() in error path
+ - media: cx23885: Override 888 ImpactVCBe crystal frequency
+ - media: cx23885: Set subdev host data to clk_freq pointer
+ - media: s3c-camif: fix out-of-bounds array access
+ - media: lgdt3306a: Fix a double kfree on i2c device remove
+ - media: em28xx: Add Hauppauge SoloHD/DualHD bulk models
+ - media: v4l: vsp1: Fix display stalls when requesting too many inputs
+ - media: i2c: adv748x: fix HDMI field heights
+ - media: vb2: Fix videobuf2 to map correct area
+ - media: vivid: fix incorrect capabilities for radio
+ - media: cx25821: prevent out-of-bounds read on array card
+ - serial: xuartps: Fix out-of-bounds access through DT alias
+ - serial: sh-sci: Fix out-of-bounds access through DT alias
+ - serial: samsung: Fix out-of-bounds access through serial port index
+ - serial: mxs-auart: Fix out-of-bounds access through serial port index
+ - serial: imx: Fix out-of-bounds access through serial port index
+ - serial: fsl_lpuart: Fix out-of-bounds access through DT alias
+ - serial: arc_uart: Fix out-of-bounds access through DT alias
+ - serial: 8250: Don't service RX FIFO if interrupts are disabled
+ - serial: altera: ensure port->regshift is honored consistently
+ - rtc: snvs: Fix usage of snvs_rtc_enable
+ - rtc: hctosys: Ensure system time doesn't overflow time_t
+ - rtc: rk808: fix possible race condition
+ - rtc: m41t80: fix race conditions
+ - rtc: tx4939: avoid unintended sign extension on a 24 bit shift
+ - rtc: rp5c01: fix possible race condition
+ - rtc: goldfish: Add missing MODULE_LICENSE
+ - cxgb4: Correct ntuple mask validation for hash filters
+ - net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule
+ - net: dsa: Do not register devlink for unused ports
+ - net: dsa: bcm_sf2: Fix IPv6 rules and chain ID
+ - net: dsa: bcm_sf2: Fix IPv6 rule half deletion
+ - 3c59x: convert to generic DMA API
+ - net: ip6_gre: Request headroom in __gre6_xmit()
+ - net: ip6_gre: Split up ip6gre_tnl_link_config()
+ - net: ip6_gre: Split up ip6gre_tnl_change()
+ - net: ip6_gre: Split up ip6gre_newlink()
+ - net: ip6_gre: Split up ip6gre_changelink()
+ - qed: LL2 flush isles when connection is closed
+ - qed: Fix possibility of list corruption during rmmod flows
+ - qed: Fix LL2 race during connection terminate
+ - powerpc: Move default security feature flags
+ - Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026]
+ - staging: fsl-dpaa2/eth: Fix incorrect kfree
+ - crypto: inside-secure - move the digest to the request context
+ - scsi: lpfc: Fix NVME Initiator FirstBurst
+ - serial: mvebu-uart: fix tx lost characters
+
+ * Bionic update: upstream stable patchset 2018-07-20 (LP: #1782846)
+ - usbip: usbip_host: refine probe and disconnect debug msgs to be useful
+ - usbip: usbip_host: delete device from busid_table after rebind
+ - usbip: usbip_host: run rebind from exit when module is removed
+ - usbip: usbip_host: fix NULL-ptr deref and use-after-free errors
+ - usbip: usbip_host: fix bad unlock balance during stub_probe()
+ - ALSA: usb: mixer: volume quirk for CM102-A+/102S+
+ - ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist
+ - ALSA: control: fix a redundant-copy issue
+ - spi: pxa2xx: Allow 64-bit DMA
+ - spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
+ - spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
+ - KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls
+ - KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock
+ - vfio: ccw: fix cleanup if cp_prefetch fails
+ - tracing/x86/xen: Remove zero data size trace events
+ trace_xen_mmu_flush_tlb{_all}
+ - tee: shm: fix use-after-free via temporarily dropped reference
+ - netfilter: nf_tables: free set name in error path
+ - netfilter: nf_tables: can't fail after linking rule into active rule list
+ - netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}
+ - i2c: designware: fix poll-after-enable regression
+ - powerpc/powernv: Fix NVRAM sleep in invalid context when crashing
+ - drm: Match sysfs name in link removal to link creation
+ - lib/test_bitmap.c: fix bitmap optimisation tests to report errors correctly
+ - radix tree: fix multi-order iteration race
+ - mm: don't allow deferred pages with NEED_PER_CPU_KM
+ - drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk
+ - s390/qdio: fix access to uninitialized qdio_q fields
+ - s390/qdio: don't release memory in qdio_setup_irq()
+ - s390: remove indirect branch from do_softirq_own_stack
+ - x86/pkeys: Override pkey when moving away from PROT_EXEC
+ - x86/pkeys: Do not special case protection key 0
+ - efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32'
+ definition for mixed mode
+ - ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr
+ - x86/mm: Drop TS_COMPAT on 64-bit exec() syscall
+ - tick/broadcast: Use for_each_cpu() specially on UP kernels
+ - ARM: 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed
+ - ARM: 8770/1: kprobes: Prohibit probing on optimized_callback
+ - ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions
+ - Btrfs: fix xattr loss after power failure
+ - Btrfs: send, fix invalid access to commit roots due to concurrent
+ snapshotting
+ - btrfs: property: Set incompat flag if lzo/zstd compression is set
+ - btrfs: fix crash when trying to resume balance without the resume flag
+ - btrfs: Split btrfs_del_delalloc_inode into 2 functions
+ - btrfs: Fix delalloc inodes invalidation during transaction abort
+ - btrfs: fix reading stale metadata blocks after degraded raid1 mounts
+ - xhci: Fix USB3 NULL pointer dereference at logical disconnect.
+ - KVM: arm/arm64: Properly protect VGIC locks from IRQs
+ - KVM: arm/arm64: VGIC/ITS: Promote irq_lock() in update_affinity
+ - hwmon: (k10temp) Fix reading critical temperature register
+ - hwmon: (k10temp) Use API function to access System Management Network
+ - vsprintf: Replace memory barrier with static_key for random_ptr_key update
+ - x86/amd_nb: Add support for Raven Ridge CPUs
+ - x86/apic/x2apic: Initialize cluster ID properly
+
+ * Bionic update: upstream stable patchset 2018-07-09 (LP: #1780858)
+ - 8139too: Use disable_irq_nosync() in rtl8139_poll_controller()
+ - bridge: check iface upper dev when setting master via ioctl
+ - dccp: fix tasklet usage
+ - ipv4: fix fnhe usage by non-cached routes
+ - ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg
+ - llc: better deal with too small mtu
+ - net: ethernet: sun: niu set correct packet size in skb
+ - net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode
+ - net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()'
+ - net/mlx4_en: Verify coalescing parameters are in range
+ - net/mlx5e: Err if asked to offload TC match on frag being first
+ - net/mlx5: E-Switch, Include VF RDMA stats in vport statistics
+ - net sched actions: fix refcnt leak in skbmod
+ - net_sched: fq: take care of throttled flows before reuse
+ - net: support compat 64-bit time in {s,g}etsockopt
+ - net/tls: Don't recursively call push_record during tls_write_space callbacks
+ - net/tls: Fix connection stall on partial tls record
+ - openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found
+ - qmi_wwan: do not steal interfaces from class drivers
+ - r8169: fix powering up RTL8168h
+ - rds: do not leak kernel memory to user land
+ - sctp: delay the authentication for the duplicated cookie-echo chunk
+ - sctp: fix the issue that the cookie-ack with auth can't get processed
+ - sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
+ - sctp: remove sctp_chunk_put from fail_mark err path in
+ sctp_ulpevent_make_rcvmsg
+ - sctp: use the old asoc when making the cookie-ack chunk in dupcook_d
+ - tcp_bbr: fix to zero idle_restart only upon S/ACKed data
+ - tcp: ignore Fast Open on repair mode
+ - tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent().
+ - bonding: do not allow rlb updates to invalid mac
+ - bonding: send learning packets for vlans on slave
+ - net: sched: fix error path in tcf_proto_create() when modules are not
+ configured
+ - net/mlx5e: TX, Use correct counter in dma_map error flow
+ - net/mlx5: Avoid cleaning flow steering table twice during error flow
+ - hv_netvsc: set master device
+ - ipv6: fix uninit-value in ip6_multipath_l3_keys()
+ - net/mlx5e: Allow offloading ipv4 header re-write for icmp
+ - nsh: fix infinite loop
+ - udp: fix SO_BINDTODEVICE
+ - l2tp: revert "l2tp: fix missing print session offset info"
+ - proc: do not access cmdline nor environ from file-backed areas
+ - net/smc: restrict non-blocking connect finish
+ - mlxsw: spectrum_switchdev: Do not remove mrouter port from MDB's ports list
+ - net/mlx5e: DCBNL fix min inline header size for dscp
+ - net: systemport: Correclty disambiguate driver instances
+ - sctp: clear the new asoc's stream outcnt in sctp_stream_update
+ - tcp: restore autocorking
+ - tipc: fix one byte leak in tipc_sk_set_orig_addr()
+ - hv_netvsc: Fix net device attach on older Windows hosts
+
+ * Bionic update: upstream stable patchset 2018-07-06 (LP: #1780499)
+ - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS
+ - ipvs: fix rtnl_lock lockups caused by start_sync_thread
+ - netfilter: ebtables: don't attempt to allocate 0-sized compat array
+ - kcm: Call strp_stop before strp_done in kcm_attach
+ - crypto: af_alg - fix possible uninit-value in alg_bind()
+ - netlink: fix uninit-value in netlink_sendmsg
+ - net: fix rtnh_ok()
+ - net: initialize skb->peeked when cloning
+ - net: fix uninit-value in __hw_addr_add_ex()
+ - dccp: initialize ireq->ir_mark
+ - ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
+ - soreuseport: initialise timewait reuseport field
+ - inetpeer: fix uninit-value in inet_getpeer
+ - memcg: fix per_node_info cleanup
+ - perf: Remove superfluous allocation error check
+ - tcp: fix TCP_REPAIR_QUEUE bound checking
+ - bdi: wake up concurrent wb_shutdown() callers.
+ - bdi: Fix oops in wb_workfn()
+ - gpioib: do not free unrequested descriptors
+ - gpio: fix aspeed_gpio unmask irq
+ - gpio: fix error path in lineevent_create
+ - rfkill: gpio: fix memory leak in probe error path
+ - libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs
+ - dm integrity: use kvfree for kvmalloc'd memory
+ - tracing: Fix regex_match_front() to not over compare the test string
+ - z3fold: fix reclaim lock-ups
+ - mm: sections are not offlined during memory hotremove
+ - mm, oom: fix concurrent munlock and oom reaper unmap, v3
+ - ceph: fix rsize/wsize capping in ceph_direct_read_write()
+ - can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()
+ - can: hi311x: Acquire SPI lock on ->do_get_berr_counter
+ - can: hi311x: Work around TX complete interrupt erratum
+ - drm/vc4: Fix scaling of uni-planar formats
+ - drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log
+ - drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()
+ - drm/atomic: Clean private obj old_state/new_state in
+ drm_atomic_state_default_clear()
+ - net: atm: Fix potential Spectre v1
+ - atm: zatm: Fix potential Spectre v1
+ - cpufreq: schedutil: Avoid using invalid next_freq
+ - Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"
+ - Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome
+ chipsets
+ - thermal: exynos: Reading temperature makes sense only when TMU is turned on
+ - thermal: exynos: Propagate error value from tmu_read()
+ - nvme: add quirk to force medium priority for SQ creation
+ - smb3: directory sync should not return an error
+ - sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
+ - tracing/uprobe_event: Fix strncpy corner case
+ - perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_*
+ - perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr
+ - perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver
+ - perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]
+ - perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map()
+ - i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()
+ - bdi: Fix use after free bug in debugfs_remove()
+ - drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages
+ - drm/i915: Adjust eDP's logical vco in a reliable place.
+ - drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client
+ - sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
+
+ * Bionic update: upstream stable patchset 2018-06-26 (LP: #1778759)
+ - percpu: include linux/sched.h for cond_resched()
+ - ACPI / button: make module loadable when booted in non-ACPI mode
+ - USB: serial: option: Add support for Quectel EP06
+ - ALSA: hda - Fix incorrect usage of IS_REACHABLE()
+ - ALSA: pcm: Check PCM state at xfern compat ioctl
+ - ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger()
+ - ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation
+ for array index
+ - ALSA: aloop: Mark paused device as inactive
+ - ALSA: aloop: Add missing cable lock to ctl API callbacks
+ - tracepoint: Do not warn on ENOMEM
+ - scsi: target: Fix fortify_panic kernel exception
+ - Input: leds - fix out of bound access
+ - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro
+ - rtlwifi: btcoex: Add power_on_setting routine
+ - rtlwifi: cleanup 8723be ant_sel definition
+ - xfs: prevent creating negative-sized file via INSERT_RANGE
+ - RDMA/cxgb4: release hw resources on device removal
+ - RDMA/ucma: Allow resolving address w/o specifying source address
+ - RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow
+ - RDMA/mlx5: Protect from shift operand overflow
+ - NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2
+ - IB/mlx5: Use unlimited rate when static rate is not supported
+ - IB/hfi1: Fix handling of FECN marked multicast packet
+ - IB/hfi1: Fix loss of BECN with AHG
+ - IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used
+ - iw_cxgb4: Atomically flush per QP HW CQEs
+ - drm/vmwgfx: Fix a buffer object leak
+ - drm/bridge: vga-dac: Fix edid memory leak
+ - test_firmware: fix setting old custom fw path back on exit, second try
+ - errseq: Always report a writeback error once
+ - USB: serial: visor: handle potential invalid device configuration
+ - usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue
+ - USB: Accept bulk endpoints with 1024-byte maxpacket
+ - USB: serial: option: reimplement interface masking
+ - USB: serial: option: adding support for ublox R410M
+ - usb: musb: host: fix potential NULL pointer dereference
+ - usb: musb: trace: fix NULL pointer dereference in musb_g_tx()
+ - platform/x86: asus-wireless: Fix NULL pointer dereference
+ - irqchip/qcom: Fix check for spurious interrupts
+ - tracing: Fix bad use of igrab in trace_uprobe.c
+ - [Config] CONFIG_ARM64_ERRATUM_1024718=y
+ - arm64: Add work around for Arm Cortex-A55 Erratum 1024718
+ - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro
+ - infiniband: mlx5: fix build errors when INFINIBAND_USER_ACCESS=m
+ - btrfs: Take trans lock before access running trans in check_delayed_ref
+ - drm/vc4: Make sure vc4_bo_{inc,dec}_usecnt() calls are balanced
+ - xhci: Fix use-after-free in xhci_free_virt_device
+ - platform/x86: Kconfig: Fix dell-laptop dependency chain.
+ - KVM: x86: remove APIC Timer periodic/oneshot spikes
+ - clocksource: Allow clocksource_mark_unstable() on unregistered clocksources
+ - clocksource: Initialize cs->wd_list
+ - clocksource: Consistent de-rate when marking unstable
+
+ * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265)
+ - ext4: set h_journal if there is a failure starting a reserved handle
+ - ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs
+ - ext4: add validity checks for bitmap block numbers
+ - ext4: fix bitmap position validation
+ - random: fix possible sleeping allocation from irq context
+ - random: rate limit unseeded randomness warnings
+ - usbip: usbip_event: fix to not print kernel pointer address
+ - usbip: usbip_host: fix to hold parent lock for device_attach() calls
+ - usbip: vhci_hcd: Fix usb device and sockfd leaks
+ - usbip: vhci_hcd: check rhport before using in vhci_hub_control()
+ - Revert "xhci: plat: Register shutdown for xhci_plat"
+ - USB: serial: simple: add libtransistor console
+ - USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster
+ - USB: serial: cp210x: add ID for NI USB serial console
+ - usb: core: Add quirk for HP v222w 16GB Mini
+ - USB: Increment wakeup count on remote wakeup.
+ - ALSA: usb-audio: Skip broken EU on Dell dock USB-audio
+ - virtio: add ability to iterate over vqs
+ - virtio_console: don't tie bufs to a vq
+ - virtio_console: free buffers after reset
+ - virtio_console: drop custom control queue cleanup
+ - virtio_console: move removal code
+ - virtio_console: reset on out of memory
+ - drm/virtio: fix vq wait_event condition
+ - tty: Don't call panic() at tty_ldisc_init()
+ - tty: n_gsm: Fix long delays with control frame timeouts in ADM mode
+ - tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set
+ - tty: Avoid possible error pointer dereference at tty_ldisc_restore().
+ - tty: Use __GFP_NOFAIL for tty_ldisc_get()
+ - ALSA: dice: fix OUI for TC group
+ - ALSA: dice: fix error path to destroy initialized stream data
+ - ALSA: hda - Skip jack and others for non-existing PCM streams
+ - ALSA: opl3: Hardening for potential Spectre v1
+ - ALSA: asihpi: Hardening for potential Spectre v1
+ - ALSA: hdspm: Hardening for potential Spectre v1
+ - ALSA: rme9652: Hardening for potential Spectre v1
+ - ALSA: control: Hardening for potential Spectre v1
+ - ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY.
+ - ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr
+ - ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device
+ - ALSA: seq: oss: Hardening for potential Spectre v1
+ - ALSA: hda: Hardening for potential Spectre v1
+ - ALSA: hda/realtek - Add some fixes for ALC233
+ - ALSA: hda/realtek - Update ALC255 depop optimize
+ - ALSA: hda/realtek - change the location for one of two front mics
+ - mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic
+ - mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.
+ - mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.
+ - mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.
+ - mtd: rawnand: tango: Fix struct clk memory leak
+ - kobject: don't use WARN for registration failures
+ - scsi: sd: Defer spinning up drive while SANITIZE is in progress
+ - bfq-iosched: ensure to clear bic/bfqq pointers when preparing request
+ - vfio: ccw: process ssch with interrupts disabled
+ - ANDROID: binder: prevent transactions into own process.
+ - PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf()
+ - PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf()
+ - PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq mode
+ - PCI: aardvark: Fix PCIe Max Read Request Size setting
+ - ARM: amba: Make driver_override output consistent with other buses
+ - ARM: amba: Fix race condition with driver_override
+ - ARM: amba: Don't read past the end of sysfs "driver_override" buffer
+ - ARM: socfpga_defconfig: Remove QSPI Sector 4K size force
+ - KVM: arm/arm64: Close VMID generation race
+ - crypto: drbg - set freed buffers to NULL
+ - ASoC: fsl_esai: Fix divisor calculation failure at lower ratio
+ - libceph: un-backoff on tick when we have a authenticated session
+ - libceph: reschedule a tick in finish_hunting()
+ - libceph: validate con->state at the top of try_write()
+ - fpga-manager: altera-ps-spi: preserve nCONFIG state
+ - earlycon: Use a pointer table to fix __earlycon_table stride
+ - drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders
+ - drm/i915: Enable display WA#1183 from its correct spot
+ - objtool, perf: Fix GCC 8 -Wrestrict error
+ - tools/lib/subcmd/pager.c: do not alias select() params
+ - x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds
+ - x86/smpboot: Don't use mwait_play_dead() on AMD systems
+ - x86/microcode/intel: Save microcode patch unconditionally
+ - x86/microcode: Do not exit early from __reload_late()
+ - tick/sched: Do not mess with an enqueued hrtimer
+ - arm/arm64: KVM: Add PSCI version selection API
+ - powerpc/eeh: Fix race with driver un/bind
+ - serial: mvebu-uart: Fix local flags handling on termios update
+ - block: do not use interruptible wait anywhere
+ - ASoC: dmic: Fix clock parenting
+ - PCI / PM: Do not clear state_saved in pci_pm_freeze() when smart suspend is
+ set
+ - module: Fix display of wrong module .text address
+ - drm/edid: Reset more of the display info
+ - drm/i915/fbdev: Enable late fbdev initial configuration
+ - drm/i915/audio: set minimum CD clock to twice the BCLK
+ - drm/amd/display: Fix deadlock when flushing irq
+ - drm/amd/display: Disallow enabling CRTC without primary plane with FB
+
+ * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) //
+ CVE-2018-1108.
+ - random: set up the NUMA crng instances after the CRNG is fully initialized
+
+ * Ryzen/Raven Ridge USB ports do not work (LP: #1756700)
+ - xhci: Fix USB ports for Dell Inspiron 5775
+
+ * [Ubuntu 1804][boston][ixgbe] EEH causes kernel BUG at /build/linux-
+ jWa1Fv/linux-4.15.0/drivers/pci/msi.c:352 (i2S) (LP: #1776389)
+ - ixgbe/ixgbevf: Free IRQ when PCI error recovery removes the device
+
+ * Need fix to aacraid driver to prevent panic (LP: #1770095)
+ - scsi: aacraid: Correct hba_send to include iu_type
+
+ * kernel: Fix arch random implementation (LP: #1775391)
+ - s390/archrandom: Rework arch random implementation.
+
+ * kernel: Fix memory leak on CCA and EP11 CPRB processing. (LP: #1775390)
+ - s390/zcrypt: Fix CCA and EP11 CPRB processing failure memory leak.
+
+ * Various fixes for CXL kernel module (LP: #1774471)
+ - cxl: Remove function write_timebase_ctrl_psl9() for PSL9
+ - cxl: Set the PBCQ Tunnel BAR register when enabling capi mode
+ - cxl: Report the tunneled operations status
+ - cxl: Configure PSL to not use APC virtual machines
+ - cxl: Disable prefault_mode in Radix mode
+
+ * Bluetooth not working (LP: #1764645)
+ - Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models
+
+ * linux-snapdragon: wcn36xx: mac address generation on boot (LP: #1776491)
+ - [Config] arm64: snapdragon: WCN36XX_SNAPDRAGON_HACKS=y
+ - SAUCE: wcn36xx: read MAC from file or randomly generate one
+
+ * fscache: Fix hanging wait on page discarded by writeback (LP: #1777029)
+ - fscache: Fix hanging wait on page discarded by writeback
+
+ -- Kleber Sacilotto de Souza <kleber.souza@canonical.com> Wed, 15 Aug 2018 14:50:38 +0200
+
+linux (4.15.0-32.35) bionic; urgency=medium
+
+ [ Stefan Bader ]
+ * CVE-2018-3620 // CVE-2018-3646
+ - x86/Centaur: Initialize supported CPU features properly
+ - x86/Centaur: Report correct CPU/cache topology
+ - x86/CPU/AMD: Have smp_num_siblings and cpu_llc_id always be present
+ - perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined cpu_llc_id
+ - x86/CPU: Rename intel_cacheinfo.c to cacheinfo.c
+ - x86/CPU/AMD: Calculate last level cache ID from number of sharing threads
+ - x86/CPU: Modify detect_extended_topology() to return result
+ - x86/CPU/AMD: Derive CPU topology from CPUID function 0xB when available
+ - x86/CPU: Move cpu local function declarations to local header
+ - x86/CPU: Make intel_num_cpu_cores() generic
+ - x86/CPU: Move cpu_detect_cache_sizes() into init_intel_cacheinfo()
+ - x86/CPU: Move x86_cpuinfo::x86_max_cores assignment to
+ detect_num_cpu_cores()
+ - x86/CPU/AMD: Fix LLC ID bit-shift calculation
+ - x86/mm: Factor out pageattr _PAGE_GLOBAL setting
+ - x86/mm: Undo double _PAGE_PSE clearing
+ - x86/mm: Introduce "default" kernel PTE mask
+ - x86/espfix: Document use of _PAGE_GLOBAL
+ - x86/mm: Do not auto-massage page protections
+ - x86/mm: Remove extra filtering in pageattr code
+ - x86/mm: Comment _PAGE_GLOBAL mystery
+ - x86/mm: Do not forbid _PAGE_RW before init for __ro_after_init
+ - x86/ldt: Fix support_pte_mask filtering in map_ldt_struct()
+ - x86/power/64: Fix page-table setup for temporary text mapping
+ - x86/pti: Filter at vma->vm_page_prot population
+ - x86/boot/64/clang: Use fixup_pointer() to access '__supported_pte_mask'
+ - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
+ - x86/speculation/l1tf: Change order of offset/type in swap entry
+ - x86/speculation/l1tf: Protect swap entries against L1TF
+ - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
+ - x86/speculation/l1tf: Make sure the first page is always reserved
+ - x86/speculation/l1tf: Add sysfs reporting for l1tf
+ - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
+ - x86/speculation/l1tf: Limit swap file size to MAX_PA/2
+ - x86/bugs: Move the l1tf function and define pr_fmt properly
+ - sched/smt: Update sched_smt_present at runtime
+ - x86/smp: Provide topology_is_primary_thread()
+ - x86/topology: Provide topology_smt_supported()
+ - cpu/hotplug: Make bringup/teardown of smp threads symmetric
+ - cpu/hotplug: Split do_cpu_down()
+ - cpu/hotplug: Provide knobs to control SMT
+ - x86/cpu: Remove the pointless CPU printout
+ - x86/cpu/AMD: Remove the pointless detect_ht() call
+ - x86/cpu/common: Provide detect_ht_early()
+ - x86/cpu/topology: Provide detect_extended_topology_early()
+ - x86/cpu/intel: Evaluate smp_num_siblings early
+ - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info
+ - x86/cpu/AMD: Evaluate smp_num_siblings early
+ - x86/apic: Ignore secondary threads if nosmt=force
+ - x86/speculation/l1tf: Extend 64bit swap file size limit
+ - x86/cpufeatures: Add detection of L1D cache flush support.
+ - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
+ - x86/speculation/l1tf: Protect PAE swap entries against L1TF
+ - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
+ - Revert "x86/apic: Ignore secondary threads if nosmt=force"
+ - cpu/hotplug: Boot HT siblings at least once
+ - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present
+ - x86/KVM/VMX: Add module argument for L1TF mitigation
+ - x86/KVM/VMX: Add L1D flush algorithm
+ - x86/KVM/VMX: Add L1D MSR based flush
+ - x86/KVM/VMX: Add L1D flush logic
+ - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
+ - x86/KVM/VMX: Add find_msr() helper function
+ - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting
+ - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
+ - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
+ - cpu/hotplug: Online siblings when SMT control is turned on
+ - x86/litf: Introduce vmx status variable
+ - x86/kvm: Drop L1TF MSR list approach
+ - x86/l1tf: Handle EPT disabled state proper
+ - x86/kvm: Move l1tf setup function
+ - x86/kvm: Add static key for flush always
+ - x86/kvm: Serialize L1D flush parameter setter
+ - x86/kvm: Allow runtime control of L1D flush
+ - cpu/hotplug: Expose SMT control init function
+ - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
+ - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
+ - Documentation: Add section about CPU vulnerabilities
+ - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
+ - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
+ - Documentation/l1tf: Fix typos
+ - cpu/hotplug: detect SMT disabled by BIOS
+ - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
+ - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
+ - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
+ - x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
+ - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
+ - x86: Don't include linux/irq.h from asm/hardirq.h
+ - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
+ - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
+ - Documentation/l1tf: Remove Yonah processors from not vulnerable list
+ - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
+ - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
+ - KVM: x86: Add a framework for supporting MSR-based features
+ - KVM: X86: Introduce kvm_get_msr_feature()
+ - KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
+ - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
+ - cpu/hotplug: Fix SMT supported evaluation
+ - x86/speculation/l1tf: Invert all not present mappings
+ - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
+ - x86/mm/pat: Make set_memory_np() L1TF safe
+ - cpu: Fix per-cpu regression on ARM64
+
+ * CVE-2018-5391
+ - Revert "net: increase fragment memory usage limits"
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Fri, 10 Aug 2018 14:22:53 -0300
+
+linux (4.15.0-30.32) bionic; urgency=medium
+
+ * CVE-2018-5390
+ - tcp: free batches of packets in tcp_prune_ofo_queue()
+ - tcp: avoid collapses in tcp_prune_queue() if possible
+ - tcp: detect malicious patterns in tcp_collapse_ofo_queue()
+ - tcp: call tcp_drop() from tcp_data_queue_ofo()
+ - tcp: add tcp_ooo_try_coalesce() helper
+
+ -- Stefan Bader <stefan.bader@canonical.com> Thu, 26 Jul 2018 17:20:29 +0200
+
+linux (4.15.0-29.31) bionic; urgency=medium
+
+ * linux: 4.15.0-29.31 -proposed tracker (LP: #1782173)
+
+ * [SRU Bionic][Cosmic] kernel panic in ipmi_ssif at msg_done_handler
+ (LP: #1777716)
+ - ipmi_ssif: Fix kernel panic at msg_done_handler
+
+ * Update to ocxl driver for 18.04.1 (LP: #1775786)
+ - misc: ocxl: use put_device() instead of device_unregister()
+ - powerpc: Add TIDR CPU feature for POWER9
+ - powerpc: Use TIDR CPU feature to control TIDR allocation
+ - powerpc: use task_pid_nr() for TID allocation
+ - ocxl: Rename pnv_ocxl_spa_remove_pe to clarify it's action
+ - ocxl: Expose the thread_id needed for wait on POWER9
+ - ocxl: Add an IOCTL so userspace knows what OCXL features are available
+ - ocxl: Document new OCXL IOCTLs
+ - ocxl: Fix missing unlock on error in afu_ioctl_enable_p9_wait()
+
+ * Critical upstream bugfix missing in Ubuntu 18.04 - frequent Xorg crash after
+ suspend (LP: #1776887)
+ - ocxl: Document the OCXL_IOCTL_GET_METADATA IOCTL
+
+ * Hard LOCKUP observed on stressing Ubuntu 18 04 (LP: #1777194)
+ - powerpc: use NMI IPI for smp_send_stop
+ - powerpc: Fix smp_send_stop NMI IPI handling
+
+ * IPL: ppc64_cpu --frequency hang with INFO: rcu_sched detected stalls on
+ CPUs/tasks on w34 and wsbmc016 with 920.1714.20170330n (LP: #1773964)
+ - rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops
+
+ * [Regression] EXT4-fs error (device sda2): ext4_validate_block_bitmap:383:
+ comm stress-ng: bg 4705: bad block bitmap checksum (LP: #1781709)
+ - SAUCE: Revert "UBUNTU: SAUCE: ext4: fix ext4_validate_inode_bitmap: comm
+ stress-ng: Corrupt inode bitmap"
+ - SAUCE: ext4: check for allocation block validity with block group locked
+
+ -- Stefan Bader <stefan.bader@canonical.com> Tue, 17 Jul 2018 10:57:50 +0200
+
+linux (4.15.0-28.30) bionic; urgency=medium
+
+ * linux: 4.15.0-28.30 -proposed tracker (LP: #1781433)
+
+ * Cannot set MTU higher than 1500 in Xen instance (LP: #1781413)
+ - xen-netfront: Fix mismatched rtnl_unlock
+ - xen-netfront: Update features after registering netdev
+
+ -- Kamal Mostafa <kamal@canonical.com> Thu, 12 Jul 2018 09:47:07 -0700
+
+linux (4.15.0-27.29) bionic; urgency=medium
+
+ * linux: 4.15.0-27.29 -proposed tracker (LP: #1781062)
+
+ * [Regression] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:99:
+ comm stress-ng: Corrupt inode bitmap (LP: #1780137)
+ - SAUCE: ext4: fix ext4_validate_inode_bitmap: comm stress-ng: Corrupt inode
+ bitmap
+
+ -- Khalid Elmously <khalid.elmously@canonical.com> Tue, 10 Jul 2018 19:05:00 -0400
+
+linux (4.15.0-26.28) bionic; urgency=medium
+
+ * linux: 4.15.0-26.28 -proposed tracker (LP: #1780112)
+
+ * failure to boot with linux-image-4.15.0-24-generic (LP: #1779827) // Cloud-
+ init causes potentially huge boot delays with 4.15 kernels (LP: #1780062)
+ - random: Make getrandom() ready earlier
+
+ -- Stefan Bader <stefan.bader@canonical.com> Wed, 04 Jul 2018 17:52:52 +0200
+
+linux (4.15.0-25.27) bionic; urgency=medium
+
+ * linux: 4.15.0-25.27 -proposed tracker (LP: #1779354)
+
+ * hisi_sas_v3_hw: internal task abort: timeout and not done. (LP: #1777736)
+ - scsi: hisi_sas: Update a couple of register settings for v3 hw
+
+ * hisi_sas: Add missing PHY spinlock init (LP: #1777734)
+ - scsi: hisi_sas: Add missing PHY spinlock init
+
+ * hisi_sas: improve read performance by pre-allocating slot DMA buffers
+ (LP: #1777727)
+ - scsi: hisi_sas: use dma_zalloc_coherent()
+ - scsi: hisi_sas: Use dmam_alloc_coherent()
+ - scsi: hisi_sas: Pre-allocate slot DMA buffers
+
+ * hisi_sas: Failures during host reset (LP: #1777696)
+ - scsi: hisi_sas: Only process broadcast change in phy_bcast_v3_hw()
+ - scsi: hisi_sas: Fix the conflict between dev gone and host reset
+ - scsi: hisi_sas: Adjust task reject period during host reset
+ - scsi: hisi_sas: Add a flag to filter PHY events during reset
+ - scsi: hisi_sas: Release all remaining resources in clear nexus ha
+
+ * Fake SAS addresses for SATA disks on HiSilicon D05 are non-unique
+ (LP: #1776750)
+ - scsi: hisi_sas: make SAS address of SATA disks unique
+
+ * Vcs-Git header on bionic linux source package points to zesty git tree
+ (LP: #1766055)
+ - [Packaging]: Update Vcs-Git
+
+ * large KVM instances run out of IRQ routes (LP: #1778261)
+ - SAUCE: kvm -- increase KVM_MAX_IRQ_ROUTES to 2048 on x86
+
+ -- Khalid Elmously <khalid.elmously@canonical.com> Sun, 01 Jul 2018 23:10:18 +0000
+
+linux (4.15.0-24.26) bionic; urgency=medium
+
+ * linux: 4.15.0-24.26 -proposed tracker (LP: #1776338)
+
+ * Bionic update: upstream stable patchset 2018-06-06 (LP: #1775483)
+ - drm: bridge: dw-hdmi: Fix overflow workaround for Amlogic Meson GX SoCs
+ - i40e: Fix attach VF to VM issue
+ - tpm: cmd_ready command can be issued only after granting locality
+ - tpm: tpm-interface: fix tpm_transmit/_cmd kdoc
+ - tpm: add retry logic
+ - Revert "ath10k: send (re)assoc peer command when NSS changed"
+ - bonding: do not set slave_dev npinfo before slave_enable_netpoll in
+ bond_enslave
+ - ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
+ - ipv6: sr: fix NULL pointer dereference in seg6_do_srh_encap()- v4 pkts
+ - KEYS: DNS: limit the length of option strings
+ - l2tp: check sockaddr length in pppol2tp_connect()
+ - net: validate attribute sizes in neigh_dump_table()
+ - llc: delete timers synchronously in llc_sk_free()
+ - tcp: don't read out-of-bounds opsize
+ - net: af_packet: fix race in PACKET_{R|T}X_RING
+ - tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
+ - net: fix deadlock while clearing neighbor proxy table
+ - team: avoid adding twice the same option to the event list
+ - net/smc: fix shutdown in state SMC_LISTEN
+ - team: fix netconsole setup over team
+ - packet: fix bitfield update race
+ - tipc: add policy for TIPC_NLA_NET_ADDR
+ - pppoe: check sockaddr length in pppoe_connect()
+ - vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
+ - amd-xgbe: Add pre/post auto-negotiation phy hooks
+ - sctp: do not check port in sctp_inet6_cmp_addr
+ - amd-xgbe: Improve KR auto-negotiation and training
+ - strparser: Do not call mod_delayed_work with a timeout of LONG_MAX
+ - amd-xgbe: Only use the SFP supported transceiver signals
+ - strparser: Fix incorrect strp->need_bytes value.
+ - net: sched: ife: signal not finding metaid
+ - tcp: clear tp->packets_out when purging write queue
+ - net: sched: ife: handle malformed tlv length
+ - net: sched: ife: check on metadata length
+ - llc: hold llc_sap before release_sock()
+ - llc: fix NULL pointer deref for SOCK_ZAPPED
+ - net: ethernet: ti: cpsw: fix tx vlan priority mapping
+ - virtio_net: split out ctrl buffer
+ - virtio_net: fix adding vids on big-endian
+ - KVM: s390: force bp isolation for VSIE
+ - s390: correct module section names for expoline code revert
+ - microblaze: Setup dependencies for ASM optimized lib functions
+ - commoncap: Handle memory allocation failure.
+ - scsi: mptsas: Disable WRITE SAME
+ - cdrom: information leak in cdrom_ioctl_media_changed()
+ - m68k/mac: Don't remap SWIM MMIO region
+ - block/swim: Check drive type
+ - block/swim: Don't log an error message for an invalid ioctl
+ - block/swim: Remove extra put_disk() call from error path
+ - block/swim: Rename macros to avoid inconsistent inverted logic
+ - block/swim: Select appropriate drive on device open
+ - block/swim: Fix array bounds check
+ - block/swim: Fix IO error at end of medium
+ - tracing: Fix missing tab for hwlat_detector print format
+ - s390/cio: update chpid descriptor after resource accessibility event
+ - s390/dasd: fix IO error for newly defined devices
+ - s390/uprobes: implement arch_uretprobe_is_alive()
+ - ACPI / video: Only default only_lcd to true on Win8-ready _desktops_
+ - docs: ip-sysctl.txt: fix name of some ipv6 variables
+ - net: mvpp2: Fix DMA address mask size
+ - net: stmmac: Disable ACS Feature for GMAC >= 4
+ - l2tp: hold reference on tunnels in netlink dumps
+ - l2tp: hold reference on tunnels printed in pppol2tp proc file
+ - l2tp: hold reference on tunnels printed in l2tp/tunnels debugfs file
+ - l2tp: fix {pppol2tp, l2tp_dfs}_seq_stop() in case of seq_file overflow
+ - s390/qeth: fix error handling in adapter command callbacks
+ - s390/qeth: avoid control IO completion stalls
+ - s390/qeth: handle failure on workqueue creation
+ - bnxt_en: Fix memory fault in bnxt_ethtool_init()
+ - virtio-net: add missing virtqueue kick when flushing packets
+ - VSOCK: make af_vsock.ko removable again
+ - hwmon: (k10temp) Add temperature offset for Ryzen 2700X
+ - hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics
+ - s390/cpum_cf: rename IBM z13/z14 counter names
+ - kprobes: Fix random address output of blacklist file
+ - Revert "pinctrl: intel: Initialize GPIO properly when used through irqchip"
+
+ * Lenovo V330 needs patch in ideapad_laptop module for rfkill (LP: #1774636)
+ - SAUCE: Add Lenovo V330 to the ideapad_laptop rfkill blacklist
+
+ * bluetooth controller fail after suspend with USB autosuspend on XPS 13 9360
+ (LP: #1775217)
+ - Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table
+
+ * [Hyper-V] PCI: hv: Fix 2 hang issues in hv_compose_msi_msg (LP: #1758378)
+ - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary
+ - PCI: hv: Remove the bogus test in hv_eject_device_work()
+ - PCI: hv: Fix a comment typo in _hv_pcifront_read_config()
+
+ * register on binfmt_misc may overflow and crash the system (LP: #1775856)
+ - fs/binfmt_misc.c: do not allow offset overflow
+
+ * CVE-2018-11508
+ - compat: fix 4-byte infoleak via uninitialized struct field
+
+ * Network installs fail on SocioNext board (LP: #1775884)
+ - net: netsec: reduce DMA mask to 40 bits
+ - net: socionext: reset hardware in ndo_stop
+ - net: netsec: enable tx-irq during open callback
+
+ * r8169 ethernet card don't work after returning from suspension
+ (LP: #1752772)
+ - PCI: Add pcim_set_mwi(), a device-managed pci_set_mwi()
+ - r8169: switch to device-managed functions in probe
+ - r8169: remove netif_napi_del in probe error path
+ - r8169: remove some WOL-related dead code
+ - r8169: disable WOL per default
+ - r8169: improve interrupt handling
+ - r8169: fix interrupt number after adding support for MSI-X interrupts
+
+ * ISST-LTE:KVM:Ubuntu18.04:BostonLC:boslcp3:boslcp3g3:Guest conosle hangs
+ after hotplug CPU add operation. (LP: #1759723)
+ - genirq/affinity: assign vectors to all possible CPUs
+ - genirq/affinity: Don't return with empty affinity masks on error
+ - genirq/affinity: Rename *node_to_possible_cpumask as *node_to_cpumask
+ - genirq/affinity: Move actual irq vector spreading into a helper function
+ - genirq/affinity: Allow irq spreading from a given starting point
+ - genirq/affinity: Spread irq vectors among present CPUs as far as possible
+ - blk-mq: simplify queue mapping & schedule with each possisble CPU
+ - blk-mq: make sure hctx->next_cpu is set correctly
+ - blk-mq: Avoid that blk_mq_delay_run_hw_queue() introduces unintended delays
+ - blk-mq: make sure that correct hctx->next_cpu is set
+ - blk-mq: avoid to write intermediate result to hctx->next_cpu
+ - blk-mq: introduce blk_mq_hw_queue_first_cpu() to figure out first cpu
+ - blk-mq: don't check queue mapped in __blk_mq_delay_run_hw_queue()
+ - nvme: pci: pass max vectors as num_possible_cpus() to pci_alloc_irq_vectors
+ - scsi: hpsa: fix selection of reply queue
+ - scsi: megaraid_sas: fix selection of reply queue
+ - scsi: core: introduce force_blk_mq
+ - scsi: virtio_scsi: fix IO hang caused by automatic irq vector affinity
+ - scsi: virtio_scsi: unify scsi_host_template
+
+ * Fix several bugs in RDMA/hns driver (LP: #1770974)
+ - RDMA/hns: Use structs to describe the uABI instead of opencoding
+ - RDMA/hns: Remove unnecessary platform_get_resource() error check
+ - RDMA/hns: Remove unnecessary operator
+ - RDMA/hns: Add names to function arguments in function pointers
+ - RDMA/hns: Fix misplaced call to hns_roce_cleanup_hem_table
+ - RDMA/hns: Fix a bug with modifying mac address
+ - RDMA/hns: Use free_pages function instead of free_page
+ - RDMA/hns: Replace __raw_write*(cpu_to_le*()) with LE write*()
+ - RDMA/hns: Bugfix for init hem table
+ - RDMA/hns: Intercept illegal RDMA operation when use inline data
+ - RDMA/hns: Fix the qp context state diagram
+ - RDMA/hns: Only assign mtu if IB_QP_PATH_MTU bit is set
+ - RDMA/hns: Remove some unnecessary attr_mask judgement
+ - RDMA/hns: Only assign dqpn if IB_QP_PATH_DEST_QPN bit is set
+ - RDMA/hns: Adjust the order of cleanup hem table
+ - RDMA/hns: Update assignment method for owner field of send wqe
+ - RDMA/hns: Submit bad wr
+ - RDMA/hns: Fix a couple misspellings
+ - RDMA/hns: Add rq inline flags judgement
+ - RDMA/hns: Bugfix for rq record db for kernel
+ - RDMA/hns: Load the RoCE dirver automatically
+ - RDMA/hns: Update convert function of endian format
+ - RDMA/hns: Add return operation when configured global param fail
+ - RDMA/hns: Not support qp transition from reset to reset for hip06
+ - RDMA/hns: Fix the bug with rq sge
+ - RDMA/hns: Set desc_dma_addr for zero when free cmq desc
+ - RDMA/hns: Enable inner_pa_vld filed of mpt
+ - RDMA/hns: Set NULL for __internal_mr
+ - RDMA/hns: Fix the bug with NULL pointer
+ - RDMA/hns: Bugfix for cq record db for kernel
+ - RDMA/hns: Move the location for initializing tmp_len
+ - RDMA/hns: Drop local zgid in favor of core defined variable
+ - RDMA/hns: Add 64KB page size support for hip08
+ - RDMA/hns: Rename the idx field of db
+ - RDMA/hns: Modify uar allocation algorithm to avoid bitmap exhaust
+ - RDMA/hns: Increase checking CMQ status timeout value
+ - RDMA/hns: Add reset process for RoCE in hip08
+ - RDMA/hns: Fix the illegal memory operation when cross page
+ - RDMA/hns: Implement the disassociate_ucontext API
+
+ * powerpc/livepatch: Implement reliable stack tracing for the consistency
+ model (LP: #1771844)
+ - powerpc/livepatch: Implement reliable stack tracing for the consistency
+ model
+
+ * vmxnet3: update to latest ToT (LP: #1768143)
+ - vmxnet3: avoid xmit reset due to a race in vmxnet3
+ - vmxnet3: use correct flag to indicate LRO feature
+ - vmxnet3: fix incorrect dereference when rxvlan is disabled
+
+ * 4.15.0-22-generic fails to boot on IBM S822LC (POWER8 (raw), altivec
+ supported) (LP: #1773162)
+ - Revert "powerpc/64s: Add support for a store forwarding barrier at kernel
+ entry/exit"
+ - powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit
+
+ * Decode ARM CPER records in kernel (LP: #1770244)
+ - [Config] CONFIG_UEFI_CPER_ARM=y
+ - efi: Move ARM CPER code to new file
+ - efi: Parse ARM error information value
+
+ * Adding back alx WoL feature (LP: #1772610)
+ - SAUCE: Revert "alx: remove WoL support"
+ - SAUCE: alx: add enable_wol paramenter
+
+ * Lancer A0 Asic HBA's won't boot with 18.04 (LP: #1768103)
+ - scsi: lpfc: Fix WQ/CQ creation for older asic's.
+ - scsi: lpfc: Fix 16gb hbas failing cq create.
+
+ * [LTCTest][OPAL][OP920] cpupower idle-info is not listing stop4 and stop5
+ idle states when all CORES are guarded (LP: #1771780)
+ - SAUCE: cpuidle/powernv : init all present cpus for deep states
+
+ * Huawei 25G/100G Network Adapters Unsupported (LP: #1770970)
+ - net-next/hinic: add pci device ids for 25ge and 100ge card
+
+ * [Ubuntu 18.04.1] POWER9 - Nvidia Volta - Kernel changes to enable Nvidia
+ driver on bare metal (LP: #1772991)
+ - powerpc/powernv/npu: Fix deadlock in mmio_invalidate()
+ - powerpc/powernv/mce: Don't silently restart the machine
+ - powerpc/npu-dma.c: Fix crash after __mmu_notifier_register failure
+ - powerpc/mm: Flush cache on memory hot(un)plug
+ - powerpc/powernv/memtrace: Let the arch hotunplug code flush cache
+ - powerpc/powernv/npu: Add lock to prevent race in concurrent context
+ init/destroy
+ - powerpc/powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback
+ parameters
+ - powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large
+ address range
+ - powerpc/mce: Fix a bug where mce loops on memory UE.
+
+ * cpum_sf: ensure sample freq is non-zero (LP: #1772593)
+ - s390/cpum_sf: ensure sample frequency of perf event attributes is non-zero
+
+ * PCIe link speeds of 16 GT/s are shown as "Unknown speed" (LP: #1773243)
+ - PCI: Add decoding for 16 GT/s link speed
+
+ * False positive ACPI _PRS error messages (LP: #1773295)
+ - ACPI / PCI: pci_link: Allow the absence of _PRS and change log level
+
+ * Dell systems crash when disabling Nvidia dGPU (LP: #1773299)
+ - ACPI / OSI: Add OEM _OSI strings to disable NVidia RTD3
+
+ * wlp3s0: failed to remove key (1, ff:ff:ff:ff:ff:ff) from hardware (-22)
+ (LP: #1720930)
+ - iwlwifi: mvm: fix "failed to remove key" message
+
+ * Expose arm64 CPU topology to userspace (LP: #1770231)
+ - ACPICA: ACPI 6.2: Additional PPTT flags
+ - drivers: base: cacheinfo: move cache_setup_of_node()
+ - drivers: base: cacheinfo: setup DT cache properties early
+ - cacheinfo: rename of_node to fw_token
+ - arm64/acpi: Create arch specific cpu to acpi id helper
+ - ACPI/PPTT: Add Processor Properties Topology Table parsing
+ - [Config] CONFIG_ACPI_PPTT=y
+ - ACPI: Enable PPTT support on ARM64
+ - drivers: base cacheinfo: Add support for ACPI based firmware tables
+ - arm64: Add support for ACPI based firmware tables
+ - arm64: topology: rename cluster_id
+ - arm64: topology: enable ACPI/PPTT based CPU topology
+ - ACPI: Add PPTT to injectable table list
+ - arm64: topology: divorce MC scheduling domain from core_siblings
+
+ * hisi_sas robustness fixes (LP: #1774466)
+ - scsi: hisi_sas: delete timer when removing hisi_sas driver
+ - scsi: hisi_sas: print device id for errors
+ - scsi: hisi_sas: Add some checks to avoid free'ing a sas_task twice
+ - scsi: hisi_sas: check host frozen before calling "done" function
+ - scsi: hisi_sas: check sas_dev gone earlier in hisi_sas_abort_task()
+ - scsi: hisi_sas: stop controller timer for reset
+ - scsi: hisi_sas: update PHY linkrate after a controller reset
+ - scsi: hisi_sas: change slot index allocation mode
+ - scsi: hisi_sas: Change common allocation mode of device id
+ - scsi: hisi_sas: Reset disks when discovered
+ - scsi: hisi_sas: Create a scsi_host_template per HW module
+ - scsi: hisi_sas: Init disks after controller reset
+ - scsi: hisi_sas: Try wait commands before before controller reset
+ - scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
+ - scsi: hisi_sas: Add v2 hw force PHY function for internal ATA command
+ - scsi: hisi_sas: Terminate STP reject quickly for v2 hw
+ - scsi: hisi_sas: Fix return value when get_free_slot() failed
+ - scsi: hisi_sas: Mark PHY as in reset for nexus reset
+
+ * hisi_sas: Support newer v3 hardware (LP: #1774467)
+ - scsi: hisi_sas: update RAS feature for later revision of v3 HW
+ - scsi: hisi_sas: check IPTT is valid before using it for v3 hw
+ - scsi: hisi_sas: fix PI memory size
+ - scsi: hisi_sas: config ATA de-reset as an constrained command for v3 hw
+ - scsi: hisi_sas: remove redundant handling to event95 for v3
+ - scsi: hisi_sas: add readl poll timeout helper wrappers
+ - scsi: hisi_sas: workaround a v3 hw hilink bug
+ - scsi: hisi_sas: Add LED feature for v3 hw
+
+ * hisi_sas: improve performance by optimizing DQ locking (LP: #1774472)
+ - scsi: hisi_sas: initialize dq spinlock before use
+ - scsi: hisi_sas: optimise the usage of DQ locking
+ - scsi: hisi_sas: relocate smp sg map
+ - scsi: hisi_sas: make return type of prep functions void
+ - scsi: hisi_sas: allocate slot buffer earlier
+ - scsi: hisi_sas: Don't lock DQ for complete task sending
+ - scsi: hisi_sas: Use device lock to protect slot alloc/free
+ - scsi: hisi_sas: add check of device in hisi_sas_task_exec()
+ - scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
+
+ * Request to revert SAUCE patches in the 18.04 SRU and update with upstream
+ version (LP: #1768431)
+ - scsi: cxlflash: Handle spurious interrupts
+ - scsi: cxlflash: Remove commmands from pending list on timeout
+ - scsi: cxlflash: Synchronize reset and remove ops
+ - SAUCE: (no-up) cxlflash: OCXL diff between v2 and v3
+
+ * After update to 4.13-43 Intel Graphics are Laggy (LP: #1773520)
+ - SAUCE: Revert "drm/i915/edp: Allow alternate fixed mode for eDP if
+ available."
+
+ * ELANPAD ELAN0612 does not work, patch available (LP: #1773509)
+ - SAUCE: Input: elan_i2c - add ELAN0612 to the ACPI table
+
+ * FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false (LP: #1774336)
+ - SAUCE: CacheFiles: fix a read_waiter/read_copier race
+
+ * hns3 driver updates (LP: #1768670)
+ - net: hns3: VF should get the real rss_size instead of rss_size_max
+ - net: hns3: set the cmdq out_vld bit to 0 after used
+ - net: hns3: fix endian issue when PF get mbx message flag
+ - net: hns3: fix the queue id for tqp enable&&reset
+ - net: hns3: set the max ring num when alloc netdev
+ - net: hns3: add support for VF driver inner interface
+ hclgevf_ops.get_tqps_and_rss_info
+ - net: hns3: refactor the hclge_get/set_rss function
+ - net: hns3: refactor the hclge_get/set_rss_tuple function
+ - net: hns3: fix for RSS configuration loss problem during reset
+ - net: hns3: fix for pause configuration lost during reset
+ - net: hns3: fix for use-after-free when setting ring parameter
+ - net: hns3: refactor the get/put_vector function
+ - net: hns3: fix for coalesce configuration lost during reset
+ - net: hns3: refactor the coalesce related struct
+ - net: hns3: fix for coal configuation lost when setting the channel
+ - net: hns3: add existence check when remove old uc mac address
+ - net: hns3: fix for netdev not running problem after calling net_stop and
+ net_open
+ - net: hns3: fix for ipv6 address loss problem after setting channels
+ - net: hns3: unify the pause params setup function
+ - net: hns3: fix rx path skb->truesize reporting bug
+ - net: hns3: add support for querying pfc puase packets statistic
+ - net: hns3: fix for loopback failure when vlan filter is enable
+ - net: hns3: fix for buffer overflow smatch warning
+ - net: hns3: fix error type definition of return value
+ - net: hns3: fix return value error of hclge_get_mac_vlan_cmd_status()
+ - net: hns3: add existence checking before adding unicast mac address
+ - net: hns3: add result checking for VF when modify unicast mac address
+ - net: hns3: reallocate tx/rx buffer after changing mtu
+ - net: hns3: fix the VF queue reset flow error
+ - net: hns3: fix for vlan table lost problem when resetting
+ - net: hns3: increase the max time for IMP handle command
+ - net: hns3: change GL update rate
+ - net: hns3: change the time interval of int_gl calculating
+ - net: hns3: fix for getting wrong link mode problem
+ - net: hns3: add get_link support to VF
+ - net: hns3: add querying speed and duplex support to VF
+ - net: hns3: fix for not returning problem in get_link_ksettings when phy
+ exists
+ - net: hns3: Changes to make enet watchdog timeout func common for PF/VF
+ - net: hns3: Add VF Reset Service Task to support event handling
+ - net: hns3: Add VF Reset device state and its handling
+ - net: hns3: Add support to request VF Reset to PF
+ - net: hns3: Add support to reset the enet/ring mgmt layer
+ - net: hns3: Add support to re-initialize the hclge device
+ - net: hns3: Changes to support ARQ(Asynchronous Receive Queue)
+ - net: hns3: Add *Asserting Reset* mailbox message & handling in VF
+ - net: hns3: Changes required in PF mailbox to support VF reset
+ - net: hns3: hclge_inform_reset_assert_to_vf() can be static
+ - net: hns3: fix for returning wrong value problem in hns3_get_rss_key_size
+ - net: hns3: fix for returning wrong value problem in hns3_get_rss_indir_size
+ - net: hns3: fix for the wrong shift problem in hns3_set_txbd_baseinfo
+ - net: hns3: fix for not initializing VF rss_hash_key problem
+ - net: hns3: never send command queue message to IMP when reset
+ - net: hns3: remove unnecessary pci_set_drvdata() and devm_kfree()
+ - net: hns3: fix length overflow when CONFIG_ARM64_64K_PAGES
+ - net: hns3: Remove error log when getting pfc stats fails
+ - net: hns3: fix to correctly fetch l4 protocol outer header
+ - net: hns3: Fixes the out of bounds access in hclge_map_tqp
+ - net: hns3: Fixes the error legs in hclge_init_ae_dev function
+ - net: hns3: fix for phy_addr error in hclge_mac_mdio_config
+ - net: hns3: Fix to support autoneg only for port attached with phy
+ - net: hns3: fix a dead loop in hclge_cmd_csq_clean
+ - net: hns3: Fix for packet loss due wrong filter config in VLAN tbls
+ - net: hns3: Remove packet statistics in the range of 8192~12287
+ - net: hns3: Add support of hardware rx-vlan-offload to HNS3 VF driver
+ - net: hns3: Fix for setting mac address when resetting
+ - net: hns3: remove add/del_tunnel_udp in hns3_enet module
+ - net: hns3: fix for cleaning ring problem
+ - net: hns3: refactor the loopback related function
+ - net: hns3: Fix for deadlock problem occurring when unregistering ae_algo
+ - net: hns3: Fix for the null pointer problem occurring when initializing
+ ae_dev failed
+ - net: hns3: Add a check for client instance init state
+ - net: hns3: Change return type of hnae3_register_ae_dev
+ - net: hns3: Change return type of hnae3_register_ae_algo
+ - net: hns3: Change return value in hnae3_register_client
+ - net: hns3: Fixes the back pressure setting when sriov is enabled
+ - net: hns3: Fix for fiber link up problem
+ - net: hns3: Add support of .sriov_configure in HNS3 driver
+ - net: hns3: Fixes the missing PCI iounmap for various legs
+ - net: hns3: Fixes error reported by Kbuild and internal review
+ - net: hns3: Fixes API to fetch ethernet header length with kernel default
+ - net: hns3: cleanup of return values in hclge_init_client_instance()
+ - net: hns3: Fix the missing client list node initialization
+ - net: hns3: Fix for hns3 module is loaded multiple times problem
+ - net: hns3: Use enums instead of magic number in hclge_is_special_opcode
+ - net: hns3: Fix for netdev not running problem after calling net_stop and
+ net_open
+ - net: hns3: Fixes kernel panic issue during rmmod hns3 driver
+ - net: hns3: Fix for CMDQ and Misc. interrupt init order problem
+ - net: hns3: Updates RX packet info fetch in case of multi BD
+ - net: hns3: Add support for tx_accept_tag2 and tx_accept_untag2 config
+ - net: hns3: Add STRP_TAGP field support for hardware revision 0x21
+ - net: hns3: Add support to enable TX/RX promisc mode for H/W rev(0x21)
+ - net: hns3: Fix for PF mailbox receving unknown message
+ - net: hns3: Fixes the state to indicate client-type initialization
+ - net: hns3: Fixes the init of the VALID BD info in the descriptor
+ - net: hns3: Removes unnecessary check when clearing TX/RX rings
+ - net: hns3: Clear TX/RX rings when stopping port & un-initializing client
+ - net: hns3: Remove unused led control code
+ - net: hns3: Adds support for led locate command for copper port
+ - net: hns3: Fixes initalization of RoCE handle and makes it conditional
+ - net: hns3: Disable vf vlan filter when vf vlan table is full
+ - net: hns3: Add support for IFF_ALLMULTI flag
+ - net: hns3: Add repeat address checking for setting mac address
+ - net: hns3: Fix setting mac address error
+ - net: hns3: Fix for service_task not running problem after resetting
+ - net: hns3: Fix for hclge_reset running repeatly problem
+ - net: hns3: Fix for phy not link up problem after resetting
+ - net: hns3: Add missing break in misc_irq_handle
+ - net: hns3: Fix for vxlan tx checksum bug
+ - net: hns3: Optimize the PF's process of updating multicast MAC
+ - net: hns3: Optimize the VF's process of updating multicast MAC
+ - SAUCE: {topost} net: hns3: add support for serdes loopback selftest
+ - SAUCE: {topost} net: hns3: RX BD information valid only in last BD except
+ VLD bit and buffer size
+ - SAUCE: {topost} net: hns3: remove hclge_get_vector_index from
+ hclge_bind_ring_with_vector
+ - SAUCE: {topost} net: hns3: rename the interface for init_client_instance and
+ uninit_client_instance
+ - SAUCE: {topost} net: hns3: add vector status check before free vector
+ - SAUCE: {topost} net: hns3: add l4_type check for both ipv4 and ipv6
+ - SAUCE: {topost} net: hns3: remove unused head file in hnae3.c
+ - SAUCE: {topost} net: hns3: extraction an interface for state state
+ init|uninit
+ - SAUCE: {topost} net: hns3: print the ret value in error information
+ - SAUCE: {topost} net: hns3: remove the Redundant put_vector in
+ hns3_client_uninit
+ - SAUCE: {topost} net: hns3: add unlikely for error check
+ - SAUCE: {topost} net: hns3: remove back in struct hclge_hw
+ - SAUCE: {topost} net: hns3: use lower_32_bits and upper_32_bits
+ - SAUCE: {topost} net: hns3: remove unused hclge_ring_to_dma_dir
+ - SAUCE: {topost} net: hns3: remove useless code in hclge_cmd_send
+ - SAUCE: {topost} net: hns3: remove some redundant assignments
+ - SAUCE: {topost} net: hns3: simplify hclge_cmd_csq_clean
+ - SAUCE: {topost} net: hns3: using modulo for cyclic counters in
+ hclge_cmd_send
+ - SAUCE: {topost} net: hns3: remove a redundant hclge_cmd_csq_done
+ - SAUCE: {topost} net: hns3: remove some unused members of some structures
+ - SAUCE: {topost} net: hns3: give default option while dependency HNS3 set
+ - SAUCE: {topost} net: hns3: use dma_zalloc_coherent instead of
+ kzalloc/dma_map_single
+ - SAUCE: {topost} net: hns3: modify hnae_ to hnae3_
+ - SAUCE: {topost} net: hns3: fix unused function warning in VF driver
+ - SAUCE: {topost} net: hns3: remove some redundant assignments
+ - SAUCE: {topost} net: hns3: standardize the handle of return value
+ - SAUCE: {topost} net: hns3: remove extra space and brackets
+ - SAUCE: {topost} net: hns3: fix unreasonable code comments
+ - SAUCE: {topost} net: hns3: use decimal for bit offset macros
+ - SAUCE: {topost} net: hns3: modify inconsistent bit mask macros
+ - SAUCE: {topost} net: hns3: fix mislead parameter name
+ - SAUCE: {topost} net: hns3: remove unused struct member and definition
+ - SAUCE: {topost} net: hns3: Add SPDX tags to hns3 driver
+ - SAUCE: {topost} net: hns3: Add pf reset for hip08 RoCE
+ - SAUCE: {topost} net: hns3: optimize the process of notifying roce client
+ - SAUCE: {topost} net: hns3: Add calling roce callback function when link
+ status change
+ - SAUCE: {topost} net: hns3: fix tc setup when netdev is first up
+ - SAUCE: {topost} net: hns3: fix for mac pause not disable in pfc mode
+ - SAUCE: {topost} net: hns3: fix for waterline not setting correctly
+ - SAUCE: {topost} net: hns3: fix for l4 checksum offload bug
+ - SAUCE: {topost} net: hns3: fix for mailbox message truncated problem
+ - SAUCE: {topost} net: hns3: Add configure for mac minimal frame size
+ - SAUCE: {topost} net: hns3: fix warning bug when doing lp selftest
+ - SAUCE: {topost} net: hns3: fix get_vector ops in hclgevf_main module
+ - SAUCE: {topost} net: hns3: remove the warning when clear reset cause
+ - SAUCE: {topost} net: hns3: Use roce handle when calling roce callback
+ function
+ - SAUCE: {topost} net: hns3: prevent sending command during global or core
+ reset
+ - SAUCE: {topost} net: hns3: modify the order of initializeing command queue
+ register
+ - SAUCE: {topost} net: hns3: reset net device with rtnl_lock
+ - SAUCE: {topost} net: hns3: prevent to request reset frequently
+ - SAUCE: {topost} net: hns3: correct reset event status register
+ - SAUCE: {topost} net: hns3: separate roce from nic when resetting
+ - SAUCE: net: hns3: Fix for phy link issue when using marvell phy driver
+ - SAUCE: {topost} net: hns3: fix return value error in
+ hns3_reset_notify_down_enet
+ - SAUCE: {topost} net: hns3: remove unnecessary ring configuration operation
+ while resetting
+ - SAUCE: {topost} net: hns3: fix for reset_level default assignment probelm
+ - SAUCE: {topost} net: hns3: fix for using wrong mask and shift in
+ hclge_get_ring_chain_from_mbx
+ - SAUCE: {topost} net: hns3: fix comments for hclge_get_ring_chain_from_mbx
+ - SAUCE: net: hns3: Fix for VF mailbox cannot receiving PF response
+ - SAUCE: net: hns3: Fix for VF mailbox receiving unknown message
+ - SAUCE: net: hns3: Optimize PF CMDQ interrupt switching process
+
+ * enable mic-mute hotkey and led on Lenovo M820z and M920z (LP: #1774306)
+ - ALSA: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs
+
+ * Bionic update: upstream stable patchset 2018-05-29 (LP: #1774063)
+ - cifs: do not allow creating sockets except with SMB1 posix exensions
+ - btrfs: fix unaligned access in readdir
+ - x86/acpi: Prevent X2APIC id 0xffffffff from being accounted
+ - clocksource/imx-tpm: Correct -ETIME return condition check
+ - x86/tsc: Prevent 32bit truncation in calc_hpet_ref()
+ - drm/vc4: Fix memory leak during BO teardown
+ - drm/i915/gvt: throw error on unhandled vfio ioctls
+ - drm/i915/audio: Fix audio detection issue on GLK
+ - drm/i915: Do no use kfree() to free a kmem_cache_alloc() return value
+ - drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state
+ - drm/i915/bxt, glk: Increase PCODE timeouts during CDCLK freq changing
+ - usb: musb: fix enumeration after resume
+ - usb: musb: call pm_runtime_{get,put}_sync before reading vbus registers
+ - usb: musb: Fix external abort in musb_remove on omap2430
+ - firewire-ohci: work around oversized DMA reads on JMicron controllers
+ - x86/tsc: Allow TSC calibration without PIT
+ - NFSv4: always set NFS_LOCK_LOST when a lock is lost.
+ - ACPI / LPSS: Do not instiate platform_dev for devs without MMIO resources
+ - ALSA: hda - Use IS_REACHABLE() for dependency on input
+ - ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read()
+ - kvm: x86: fix KVM_XEN_HVM_CONFIG ioctl
+ - RDMA/core: Clarify rdma_ah_find_type
+ - KVM: PPC: Book3S HV: Enable migration of decrementer register
+ - netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460
+ - tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into
+ account
+ - KVM: s390: use created_vcpus in more places
+ - platform/x86: dell-laptop: Filter out spurious keyboard backlight change
+ events
+ - xprtrdma: Fix backchannel allocation of extra rpcrdma_reps
+ - selftest: ftrace: Fix to pick text symbols for kprobes
+ - PCI: Add function 1 DMA alias quirk for Marvell 9128
+ - Input: psmouse - fix Synaptics detection when protocol is disabled
+ - libbpf: Makefile set specified permission mode
+ - Input: synaptics - reset the ABS_X/Y fuzz after initializing MT axes
+ - i40iw: Free IEQ resources
+ - i40iw: Zero-out consumer key on allocate stag for FMR
+ - perf unwind: Do not look just at the global callchain_param.record_mode
+ - tools lib traceevent: Simplify pointer print logic and fix %pF
+ - perf callchain: Fix attr.sample_max_stack setting
+ - tools lib traceevent: Fix get_field_str() for dynamic strings
+ - perf record: Fix failed memory allocation for get_cpuid_str
+ - iommu/exynos: Don't unconditionally steal bus ops
+ - powerpc: System reset avoid interleaving oops using die synchronisation
+ - iommu/vt-d: Use domain instead of cache fetching
+ - dm thin: fix documentation relative to low water mark threshold
+ - dm mpath: return DM_MAPIO_REQUEUE on blk-mq rq allocation failure
+ - ubifs: Fix uninitialized variable in search_dh_cookie()
+ - net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b
+ - net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock
+ - spi: a3700: Clear DATA_OUT when performing a read
+ - IB/cq: Don't force IB_POLL_DIRECT poll context for ib_process_cq_direct
+ - nfs: Do not convert nfs_idmap_cache_timeout to jiffies
+ - MIPS: Fix clean of vmlinuz.{32,ecoff,bin,srec}
+ - PCI: Add dummy pci_irqd_intx_xlate() for CONFIG_PCI=n build
+ - watchdog: sp5100_tco: Fix watchdog disable bit
+ - kconfig: Don't leak main menus during parsing
+ - kconfig: Fix automatic menu creation mem leak
+ - kconfig: Fix expr_free() E_NOT leak
+ - ipmi/powernv: Fix error return code in ipmi_powernv_probe()
+ - Btrfs: set plug for fsync
+ - btrfs: Fix out of bounds access in btrfs_search_slot
+ - Btrfs: fix scrub to repair raid6 corruption
+ - btrfs: fail mount when sb flag is not in BTRFS_SUPER_FLAG_SUPP
+ - Btrfs: fix unexpected EEXIST from btrfs_get_extent
+ - Btrfs: raid56: fix race between merge_bio and rbio_orig_end_io
+ - RDMA/cma: Check existence of netdevice during port validation
+ - f2fs: avoid hungtask when GC encrypted block if io_bits is set
+ - scsi: devinfo: fix format of the device list
+ - scsi: fas216: fix sense buffer initialization
+ - Input: stmfts - set IRQ_NOAUTOEN to the irq flag
+ - HID: roccat: prevent an out of bounds read in kovaplus_profile_activated()
+ - nfp: fix error return code in nfp_pci_probe()
+ - block: Set BIO_TRACE_COMPLETION on new bio during split
+ - bpf: test_maps: cleanup sockmaps when test ends
+ - i40evf: Don't schedule reset_task when device is being removed
+ - i40evf: ignore link up if not running
+ - platform/x86: thinkpad_acpi: suppress warning about palm detection
+ - KVM: s390: vsie: use READ_ONCE to access some SCB fields
+ - blk-mq-debugfs: don't allow write on attributes with seq_operations set
+ - ASoC: rockchip: Use dummy_dai for rt5514 dsp dailink
+ - igb: Allow to remove administratively set MAC on VFs
+ - igb: Clear TXSTMP when ptp_tx_work() is timeout
+ - fm10k: fix "failed to kill vid" message for VF
+ - x86/hyperv: Stop suppressing X86_FEATURE_PCID
+ - tty: serial: exar: Relocate sleep wake-up handling
+ - device property: Define type of PROPERTY_ENRTY_*() macros
+ - crypto: artpec6 - remove select on non-existing CRYPTO_SHA384
+ - RDMA/uverbs: Use an unambiguous errno for method not supported
+ - jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path
+ - ixgbe: don't set RXDCTL.RLPML for 82599
+ - i40e: program fragmented IPv4 filter input set
+ - i40e: fix reported mask for ntuple filters
+ - samples/bpf: Partially fixes the bpf.o build
+ - powerpc/numa: Use ibm,max-associativity-domains to discover possible nodes
+ - powerpc/numa: Ensure nodes initialized for hotplug
+ - RDMA/mlx5: Avoid memory leak in case of XRCD dealloc failure
+ - ntb_transport: Fix bug with max_mw_size parameter
+ - gianfar: prevent integer wrapping in the rx handler
+ - x86/hyperv: Check for required priviliges in hyperv_init()
+ - netfilter: x_tables: fix pointer leaks to userspace
+ - tcp_nv: fix potential integer overflow in tcpnv_acked
+ - kvm: Map PFN-type memory regions as writable (if possible)
+ - x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when
+ running nested
+ - fs/dax.c: release PMD lock even when there is no PMD support in DAX
+ - ocfs2: return -EROFS to mount.ocfs2 if inode block is invalid
+ - ocfs2/acl: use 'ip_xattr_sem' to protect getting extended attribute
+ - ocfs2: return error when we attempt to access a dirty bh in jbd2
+ - mm/mempolicy: fix the check of nodemask from user
+ - mm/mempolicy: add nodes_empty check in SYSC_migrate_pages
+ - asm-generic: provide generic_pmdp_establish()
+ - sparc64: update pmdp_invalidate() to return old pmd value
+ - mm: thp: use down_read_trylock() in khugepaged to avoid long block
+ - mm: pin address_space before dereferencing it while isolating an LRU page
+ - mm/fadvise: discard partial page if endbyte is also EOF
+ - openvswitch: Remove padding from packet before L3+ conntrack processing
+ - blk-mq: fix discard merge with scheduler attached
+ - IB/hfi1: Re-order IRQ cleanup to address driver cleanup race
+ - IB/hfi1: Fix for potential refcount leak in hfi1_open_file()
+ - IB/ipoib: Fix for potential no-carrier state
+ - IB/core: Map iWarp AH type to undefined in rdma_ah_find_type
+ - drm/nouveau/pmu/fuc: don't use movw directly anymore
+ - s390/eadm: fix CONFIG_BLOCK include dependency
+ - netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure
+ - x86/power: Fix swsusp_arch_resume prototype
+ - x86/dumpstack: Avoid uninitlized variable
+ - firmware: dmi_scan: Fix handling of empty DMI strings
+ - ACPI: processor_perflib: Do not send _PPC change notification if not ready
+ - ACPI / bus: Do not call _STA on battery devices with unmet dependencies
+ - ACPI / scan: Use acpi_bus_get_status() to initialize ACPI_TYPE_DEVICE devs
+ - MIPS: TXx9: use IS_BUILTIN() for CONFIG_LEDS_CLASS
+ - perf record: Fix period option handling
+ - MIPS: Generic: Support GIC in EIC mode
+ - perf evsel: Fix period/freq terms setup
+ - xen-netfront: Fix race between device setup and open
+ - xen/grant-table: Use put_page instead of free_page
+ - bpf: sockmap, fix leaking maps with attached but not detached progs
+ - RDS: IB: Fix null pointer issue
+ - arm64: spinlock: Fix theoretical trylock() A-B-A with LSE atomics
+ - proc: fix /proc/*/map_files lookup
+ - PM / domains: Fix up domain-idle-states OF parsing
+ - cifs: silence compiler warnings showing up with gcc-8.0.0
+ - bcache: properly set task state in bch_writeback_thread()
+ - bcache: fix for allocator and register thread race
+ - bcache: fix for data collapse after re-attaching an attached device
+ - bcache: return attach error when no cache set exist
+ - cpufreq: intel_pstate: Enable HWP during system resume on CPU0
+ - selftests/ftrace: Add some missing glob checks
+ - rxrpc: Don't put crypto buffers on the stack
+ - svcrdma: Fix Read chunk round-up
+ - net: Extra '_get' in declaration of arch_get_platform_mac_address
+ - tools/libbpf: handle issues with bpf ELF objects containing .eh_frames
+ - SUNRPC: Don't call __UDPX_INC_STATS() from a preemptible context
+ - net: stmmac: discard disabled flags in interrupt status register
+ - bpf: fix rlimit in reuseport net selftest
+ - ACPI / EC: Restore polling during noirq suspend/resume phases
+ - PM / wakeirq: Fix unbalanced IRQ enable for wakeirq
+ - vfs/proc/kcore, x86/mm/kcore: Fix SMAP fault when dumping vsyscall user page
+ - powerpc/mm/hash64: Zero PGD pages on allocation
+ - x86/platform/UV: Fix GAM Range Table entries less than 1GB
+ - locking/qspinlock: Ensure node->count is updated before initialising node
+ - powerpc/powernv: IMC fix out of bounds memory access at shutdown
+ - perf test: Fix test trace+probe_libc_inet_pton.sh for s390x
+ - irqchip/gic-v3: Ignore disabled ITS nodes
+ - cpumask: Make for_each_cpu_wrap() available on UP as well
+ - irqchip/gic-v3: Change pr_debug message to pr_devel
+ - RDMA/core: Reduce poll batch for direct cq polling
+ - alarmtimer: Init nanosleep alarm timer on stack
+ - netfilter: x_tables: cap allocations at 512 mbyte
+ - netfilter: x_tables: add counters allocation wrapper
+ - netfilter: compat: prepare xt_compat_init_offsets to return errors
+ - netfilter: compat: reject huge allocation requests
+ - netfilter: x_tables: limit allocation requests for blob rule heads
+ - perf: Fix sample_max_stack maximum check
+ - perf: Return proper values for user stack errors
+ - RDMA/mlx5: Fix NULL dereference while accessing XRC_TGT QPs
+ - Revert "KVM: X86: Fix SMRAM accessing even if VM is shutdown"
+ - mac80211_hwsim: fix use-after-free bug in hwsim_exit_net
+ - btrfs: Fix race condition between delayed refs and blockgroup removal
+ - mm,vmscan: Allow preallocating memory for register_shrinker().
+
+ * Bionic update: upstream stable patchset 2018-05-24 (LP: #1773233)
+ - tty: make n_tty_read() always abort if hangup is in progress
+ - cpufreq: CPPC: Use transition_delay_us depending transition_latency
+ - ubifs: Check ubifs_wbuf_sync() return code
+ - ubi: fastmap: Don't flush fastmap work on detach
+ - ubi: Fix error for write access
+ - ubi: Reject MLC NAND
+ - mm/ksm.c: fix inconsistent accounting of zero pages
+ - mm/hmm: hmm_pfns_bad() was accessing wrong struct
+ - task_struct: only use anon struct under randstruct plugin
+ - fs/reiserfs/journal.c: add missing resierfs_warning() arg
+ - resource: fix integer overflow at reallocation
+ - ipc/shm: fix use-after-free of shm file via remap_file_pages()
+ - mm, slab: reschedule cache_reap() on the same CPU
+ - usb: musb: gadget: misplaced out of bounds check
+ - phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS
+ - usb: gadget: udc: core: update usb_ep_queue() documentation
+ - ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate
+ - KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list
+ - ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210
+ - arm: dts: mt7623: fix USB initialization fails on bananapi-r2
+ - ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
+ - ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250
+ - ARM: dts: at91: sama5d4: fix pinctrl compatible string
+ - spi: atmel: init FIFOs before spi enable
+ - spi: Fix scatterlist elements size in spi_map_buf
+ - spi: Fix unregistration of controller with fixed SPI bus number
+ - media: atomisp_fops.c: disable atomisp_compat_ioctl32
+ - media: vivid: check if the cec_adapter is valid
+ - media: vsp1: Fix BRx conditional path in WPF
+ - x86/xen: Delay get_cpu_cap until stack canary is established
+ - regmap: Fix reversed bounds check in regmap_raw_write()
+ - ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E
+ - ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
+ - USB: gadget: f_midi: fixing a possible double-free in f_midi
+ - USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
+ - usb: dwc3: prevent setting PRTCAP to OTG from debugfs
+ - usb: dwc3: pci: Properly cleanup resource
+ - usb: dwc3: gadget: never call ->complete() from ->ep_queue()
+ - cifs: fix memory leak in SMB2_open()
+ - fix smb3-encryption breakage when CONFIG_DEBUG_SG=y
+ - smb3: Fix root directory when server returns inode number of zero
+ - HID: i2c-hid: fix size check and type usage
+ - i2c: i801: Save register SMBSLVCMD value only once
+ - i2c: i801: Restore configuration at shutdown
+ - CIFS: refactor crypto shash/sdesc allocation&free
+ - CIFS: add sha512 secmech
+ - CIFS: fix sha512 check in cifs_crypto_secmech_release
+ - powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits
+ - powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9
+ - powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
+ - powerpc/kprobes: Fix call trace due to incorrect preempt count
+ - powerpc/kexec_file: Fix error code when trying to load kdump kernel
+ - powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
+ - powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
+ - HID: Fix hid_report_len usage
+ - HID: core: Fix size as type u32
+ - soc: mediatek: fix the mistaken pointer accessed when subdomains are added
+ - ASoC: ssm2602: Replace reg_default_raw with reg_default
+ - ASoC: topology: Fix kcontrol name string handling
+ - irqchip/gic: Take lock when updating irq type
+ - random: use a tighter cap in credit_entropy_bits_safe()
+ - extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO
+ - block: use 32-bit blk_status_t on Alpha
+ - jbd2: if the journal is aborted then don't allow update of the log tail
+ - ext4: shutdown should not prevent get_write_access
+ - ext4: eliminate sleep from shutdown ioctl
+ - ext4: pass -ESHUTDOWN code to jbd2 layer
+ - ext4: don't update checksum of new initialized bitmaps
+ - ext4: protect i_disksize update by i_data_sem in direct write path
+ - ext4: limit xattr size to INT_MAX
+ - ext4: always initialize the crc32c checksum driver
+ - ext4: don't allow r/w mounts if metadata blocks overlap the superblock
+ - ext4: move call to ext4_error() into ext4_xattr_check_block()
+ - ext4: add bounds checking to ext4_xattr_find_entry()
+ - ext4: add extra checks to ext4_xattr_block_get()
+ - dm crypt: limit the number of allocated pages
+ - RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
+ - RDMA/mlx5: Protect from NULL pointer derefence
+ - RDMA/rxe: Fix an out-of-bounds read
+ - ALSA: pcm: Fix UAF at PCM release via PCM timer access
+ - IB/srp: Fix srp_abort()
+ - IB/srp: Fix completion vector assignment algorithm
+ - dmaengine: at_xdmac: fix rare residue corruption
+ - cxl: Fix possible deadlock when processing page faults from cxllib
+ - tpm: self test failure should not cause suspend to fail
+ - libnvdimm, dimm: fix dpa reservation vs uninitialized label area
+ - libnvdimm, namespace: use a safe lookup for dimm device name
+ - nfit, address-range-scrub: fix scrub in-progress reporting
+ - nfit: skip region registration for incomplete control regions
+ - ring-buffer: Check if memory is available before allocation
+ - um: Compile with modern headers
+ - um: Use POSIX ucontext_t instead of struct ucontext
+ - iommu/vt-d: Fix a potential memory leak
+ - mmc: jz4740: Fix race condition in IRQ mask update
+ - mmc: tmio: Fix error handling when issuing CMD23
+ - PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken
+ - clk: mvebu: armada-38x: add support for missing clocks
+ - clk: fix false-positive Wmaybe-uninitialized warning
+ - clk: mediatek: fix PWM clock source by adding a fixed-factor clock
+ - clk: bcm2835: De-assert/assert PLL reset signal when appropriate
+ - pwm: rcar: Fix a condition to prevent mismatch value setting to duty
+ - thermal: imx: Fix race condition in imx_thermal_probe()
+ - dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4
+ - watchdog: f71808e_wdt: Fix WD_EN register read
+ - ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
+ - ALSA: pcm: Avoid potential races between OSS ioctls and read/write
+ - ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
+ - ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
+ - ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
+ - drm/amdgpu: Add an ATPX quirk for hybrid laptop
+ - drm/amdgpu: Fix always_valid bos multiple LRU insertions.
+ - drm/amdgpu/sdma: fix mask in emit_pipeline_sync
+ - drm/amdgpu: Fix PCIe lane width calculation
+ - drm/amdgpu/si: implement get/set pcie_lanes asic callback
+ - drm/rockchip: Clear all interrupts before requesting the IRQ
+ - drm/radeon: add PX quirk for Asus K73TK
+ - drm/radeon: Fix PCIe lane width calculation
+ - ALSA: line6: Use correct endpoint type for midi output
+ - ALSA: rawmidi: Fix missing input substream checks in compat ioctls
+ - ALSA: hda - New VIA controller suppor no-snoop path
+ - random: fix crng_ready() test
+ - random: use a different mixing algorithm for add_device_randomness()
+ - random: crng_reseed() should lock the crng instance that it is modifying
+ - random: add new ioctl RNDRESEEDCRNG
+ - HID: input: fix battery level reporting on BT mice
+ - HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
+ - HID: wacom: bluetooth: send exit report for recent Bluetooth devices
+ - MIPS: uaccess: Add micromips clobbers to bzero invocation
+ - MIPS: memset.S: EVA & fault support for small_memset
+ - MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
+ - MIPS: memset.S: Fix clobber of v1 in last_fixup
+ - powerpc/eeh: Fix enabling bridge MMIO windows
+ - powerpc/lib: Fix off-by-one in alternate feature patching
+ - udf: Fix leak of UTF-16 surrogates into encoded strings
+ - fanotify: fix logic of events on child
+ - mmc: sdhci-pci: Only do AMD tuning for HS200
+ - drm/i915: Correctly handle limited range YCbCr data on VLV/CHV
+ - jffs2_kill_sb(): deal with failed allocations
+ - hypfs_kill_super(): deal with failed allocations
+ - orangefs_kill_sb(): deal with allocation failures
+ - rpc_pipefs: fix double-dput()
+ - Don't leak MNT_INTERNAL away from internal mounts
+ - autofs: mount point create should honour passed in mode
+ - mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
+ - Revert "media: lirc_zilog: driver only sends LIRCCODE"
+ - media: staging: lirc_zilog: incorrect reference counting
+ - writeback: safer lock nesting
+ - Bluetooth: hci_bcm: Add irq_polarity module option
+ - mm: hwpoison: disable memory error handling on 1GB hugepage
+ - media: rc: oops in ir_timer_keyup after device unplug
+ - acpi, nfit: rework NVDIMM leaf method detection
+ - ceph: always update atime/mtime/ctime for new inode
+ - ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin()
+ - ext4: force revalidation of directory pointer after seekdir(2)
+ - RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access
+ - xprtrdma: Fix latency regression on NUMA NFS/RDMA clients
+ - xprtrdma: Fix corner cases when handling device removal
+ - IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write()
+ - drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4
+ - drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4
+ - mmc: core: Prevent bus reference leak in mmc_blk_init()
+ - drm/amd/display: HDMI has no sound after Panel power off/on
+ - trace_uprobe: Use %lx to display offset
+ - clk: tegra: Mark HCLK, SCLK and EMC as critical
+ - pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623
+ - pwm: mediatek: Improve precision in rate calculation
+ - HID: i2c-hid: Fix resume issue on Raydium touchscreen device
+ - s390: add support for IBM z14 Model ZR1
+ - drm/i915: Fix hibernation with ACPI S0 target state
+ - libnvdimm, dimm: handle EACCES failures from label reads
+ - device-dax: allow MAP_SYNC to succeed
+ - HID: i2c-hid: fix inverted return value from i2c_hid_command()
+
+ * CVE-2018-7755
+ - SAUCE: floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
+
+ -- Kleber Sacilotto de Souza <kleber.souza@canonical.com> Tue, 12 Jun 2018 18:09:35 +0200
+
+linux (4.15.0-23.25) bionic; urgency=medium
+
+ * linux: 4.15.0-23.25 -proposed tracker (LP: #1772927)
+
+ * arm64 SDEI support needs trampoline code for KPTI (LP: #1768630)
+ - arm64: mmu: add the entry trampolines start/end section markers into
+ sections.h
+ - arm64: sdei: Add trampoline code for remapping the kernel
+
+ * Some PCIe errors not surfaced through rasdaemon (LP: #1769730)
+ - ACPI: APEI: handle PCIe AER errors in separate function
+ - ACPI: APEI: call into AER handling regardless of severity
+
+ * qla2xxx: Fix page fault at kmem_cache_alloc_node() (LP: #1770003)
+ - scsi: qla2xxx: Fix session cleanup for N2N
+ - scsi: qla2xxx: Remove unused argument from qlt_schedule_sess_for_deletion()
+ - scsi: qla2xxx: Serialize session deletion by using work_lock
+ - scsi: qla2xxx: Serialize session free in qlt_free_session_done
+ - scsi: qla2xxx: Don't call dma_free_coherent with IRQ disabled.
+ - scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout()
+ - scsi: qla2xxx: Prevent relogin trigger from sending too many commands
+ - scsi: qla2xxx: Fix double free bug after firmware timeout
+ - scsi: qla2xxx: Fixup locking for session deletion
+
+ * Several hisi_sas bug fixes (LP: #1768974)
+ - scsi: hisi_sas: dt-bindings: add an property of signal attenuation
+ - scsi: hisi_sas: support the property of signal attenuation for v2 hw
+ - scsi: hisi_sas: fix the issue of link rate inconsistency
+ - scsi: hisi_sas: fix the issue of setting linkrate register
+ - scsi: hisi_sas: increase timer expire of internal abort task
+ - scsi: hisi_sas: remove unused variable hisi_sas_devices.running_req
+ - scsi: hisi_sas: fix return value of hisi_sas_task_prep()
+ - scsi: hisi_sas: Code cleanup and minor bug fixes
+
+ * [bionic] machine stuck and bonding not working well when nvmet_rdma module
+ is loaded (LP: #1764982)
+ - nvmet-rdma: Don't flush system_wq by default during remove_one
+ - nvme-rdma: Don't flush delete_wq by default during remove_one
+
+ * Warnings/hang during error handling of SATA disks on SAS controller
+ (LP: #1768971)
+ - scsi: libsas: defer ata device eh commands to libata
+
+ * Hotplugging a SATA disk into a SAS controller may cause crash (LP: #1768948)
+ - ata: do not schedule hot plug if it is a sas host
+
+ * ISST-LTE:pKVM:Ubuntu1804: rcu_sched self-detected stall on CPU follow by CPU
+ ATTEMPT TO RE-ENTER FIRMWARE! (LP: #1767927)
+ - powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write()
+ - powerpc/64s: return more carefully from sreset NMI
+ - powerpc/64s: sreset panic if there is no debugger or crash dump handlers
+
+ * fsnotify: Fix fsnotify_mark_connector race (LP: #1765564)
+ - fsnotify: Fix fsnotify_mark_connector race
+
+ * Hang on network interface removal in Xen virtual machine (LP: #1771620)
+ - xen-netfront: Fix hang on device removal
+
+ * HiSilicon HNS NIC names are truncated in /proc/interrupts (LP: #1765977)
+ - net: hns: Avoid action name truncation
+
+ * Ubuntu 18.04 kernel crashed while in degraded mode (LP: #1770849)
+ - SAUCE: powerpc/perf: Fix memory allocation for core-imc based on
+ num_possible_cpus()
+
+ * Switch Build-Depends: transfig to fig2dev (LP: #1770770)
+ - [Config] update Build-Depends: transfig to fig2dev
+
+ * smp_call_function_single/many core hangs with stop4 alone (LP: #1768898)
+ - cpufreq: powernv: Fix hardlockup due to synchronous smp_call in timer
+ interrupt
+
+ * Add d-i support for Huawei NICs (LP: #1767490)
+ - d-i: add hinic to nic-modules udeb
+
+ * unregister_netdevice: waiting for eth0 to become free. Usage count = 5
+ (LP: #1746474)
+ - xfrm: reuse uncached_list to track xdsts
+
+ * Include nfp driver in linux-modules (LP: #1768526)
+ - [Config] Add nfp.ko to generic inclusion list
+
+ * Kernel panic on boot (m1.small in cn-north-1) (LP: #1771679)
+ - x86/xen: Reset VCPU0 info pointer after shared_info remap
+
+ * CVE-2018-3639 (x86)
+ - x86/bugs: Fix the parameters alignment and missing void
+ - KVM: SVM: Move spec control call after restore of GS
+ - x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
+ - x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS
+ - x86/cpufeatures: Disentangle SSBD enumeration
+ - x86/cpufeatures: Add FEATURE_ZEN
+ - x86/speculation: Handle HT correctly on AMD
+ - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
+ - x86/speculation: Add virtualized speculative store bypass disable support
+ - x86/speculation: Rework speculative_store_bypass_update()
+ - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host}
+ - x86/bugs: Expose x86_spec_ctrl_base directly
+ - x86/bugs: Remove x86_spec_ctrl_set()
+ - x86/bugs: Rework spec_ctrl base and mask logic
+ - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG
+ - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
+ - x86/bugs: Rename SSBD_NO to SSB_NO
+ - bpf: Prevent memory disambiguation attack
+ - KVM: VMX: Expose SSBD properly to guests.
+
+ * Suspend to idle: Open lid didn't resume (LP: #1771542)
+ - ACPI / PM: Do not reconfigure GPEs for suspend-to-idle
+
+ * Fix initialization failure detection in SDEI for device-tree based systems
+ (LP: #1768663)
+ - firmware: arm_sdei: Fix return value check in sdei_present_dt()
+
+ * No driver for Huawei network adapters on arm64 (LP: #1769899)
+ - net-next/hinic: add arm64 support
+
+ * CVE-2018-1092
+ - ext4: fail ext4_iget for root directory if unallocated
+
+ * kernel 4.15 breaks nouveau on Lenovo P50 (LP: #1763189)
+ - drm/nouveau: Fix deadlock in nv50_mstm_register_connector()
+
+ * update-initramfs not adding i915 GuC firmware for Kaby Lake, firmware fails
+ to load (LP: #1728238)
+ - Revert "UBUNTU: SAUCE: (no-up) i915: Remove MODULE_FIRMWARE statements for
+ unreleased firmware"
+
+ * Battery drains when laptop is off (shutdown) (LP: #1745646)
+ - PCI / PM: Check device_may_wakeup() in pci_enable_wake()
+
+ * Dell Latitude 5490/5590 BIOS update 1.1.9 causes black screen at boot
+ (LP: #1764194)
+ - drm/i915/bios: filter out invalid DDC pins from VBT child devices
+
+ * Intel 9462 A370:42A4 doesn't work (LP: #1748853)
+ - iwlwifi: add shared clock PHY config flag for some devices
+ - iwlwifi: add a bunch of new 9000 PCI IDs
+
+ * Fix an issue that some PCI devices get incorrectly suspended (LP: #1764684)
+ - PCI / PM: Always check PME wakeup capability for runtime wakeup support
+
+ * [SRU][Bionic/Artful] fix false positives in W+X checking (LP: #1769696)
+ - init: fix false positives in W+X checking
+
+ * Bionic update to v4.15.18 stable release (LP: #1769723)
+ - netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to
+ ip_set_net_exit()
+ - cdc_ether: flag the Cinterion AHS8 modem by gemalto as WWAN
+ - rds: MP-RDS may use an invalid c_path
+ - slip: Check if rstate is initialized before uncompressing
+ - vhost: fix vhost_vq_access_ok() log check
+ - l2tp: fix races in tunnel creation
+ - l2tp: fix race in duplicate tunnel detection
+ - ip_gre: clear feature flags when incompatible o_flags are set
+ - vhost: Fix vhost_copy_to_user()
+ - lan78xx: Correctly indicate invalid OTP
+ - media: v4l2-compat-ioctl32: don't oops on overlay
+ - media: v4l: vsp1: Fix header display list status check in continuous mode
+ - ipmi: Fix some error cleanup issues
+ - parisc: Fix out of array access in match_pci_device()
+ - parisc: Fix HPMC handler by increasing size to multiple of 16 bytes
+ - Drivers: hv: vmbus: do not mark HV_PCIE as perf_device
+ - PCI: hv: Serialize the present and eject work items
+ - PCI: hv: Fix 2 hang issues in hv_compose_msi_msg()
+ - KVM: PPC: Book3S HV: trace_tlbie must not be called in realmode
+ - perf/core: Fix use-after-free in uprobe_perf_close()
+ - x86/mce/AMD: Get address from already initialized block
+ - hwmon: (ina2xx) Fix access to uninitialized mutex
+ - ath9k: Protect queue draining by rcu_read_lock()
+ - x86/apic: Fix signedness bug in APIC ID validity checks
+ - f2fs: fix heap mode to reset it back
+ - block: Change a rcu_read_{lock,unlock}_sched() pair into
+ rcu_read_{lock,unlock}()
+ - nvme: Skip checking heads without namespaces
+ - lib: fix stall in __bitmap_parselist()
+ - blk-mq: order getting budget and driver tag
+ - blk-mq: don't keep offline CPUs mapped to hctx 0
+ - ovl: fix lookup with middle layer opaque dir and absolute path redirects
+ - xen: xenbus_dev_frontend: Fix XS_TRANSACTION_END handling
+ - hugetlbfs: fix bug in pgoff overflow checking
+ - nfsd: fix incorrect umasks
+ - scsi: qla2xxx: Fix small memory leak in qla2x00_probe_one on probe failure
+ - block/loop: fix deadlock after loop_set_status
+ - nfit: fix region registration vs block-data-window ranges
+ - s390/qdio: don't retry EQBS after CCQ 96
+ - s390/qdio: don't merge ERROR output buffers
+ - s390/ipl: ensure loadparm valid flag is set
+ - get_user_pages_fast(): return -EFAULT on access_ok failure
+ - mm/gup_benchmark: handle gup failures
+ - getname_kernel() needs to make sure that ->name != ->iname in long case
+ - Bluetooth: Fix connection if directed advertising and privacy is used
+ - Bluetooth: hci_bcm: Treat Interrupt ACPI resources as always being active-
+ low
+ - rtl8187: Fix NULL pointer dereference in priv->conf_mutex
+ - ovl: set lower layer st_dev only if setting lower st_ino
+ - Linux 4.15.18
+
+ * Kernel bug when unplugging Thunderbolt 3 cable, leaves xHCI host controller
+ dead (LP: #1768852)
+ - xhci: Fix Kernel oops in xhci dbgtty
+
+ * Incorrect blacklist of bcm2835_wdt (LP: #1766052)
+ - [Packaging] Fix missing watchdog for Raspberry Pi
+
+ * CVE-2018-8087
+ - mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl()
+
+ * Integrated Webcam Realtek Integrated_Webcam_HD (0bda:58f4) not working in
+ DELL XPS 13 9370 with firmware 1.50 (LP: #1763748)
+ - SAUCE: media: uvcvideo: Support realtek's UVC 1.5 device
+
+ * [ALSA] [PATCH] Clevo P950ER ALC1220 Fixup (LP: #1769721)
+ - SAUCE: ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup
+
+ * Bionic: Intermittently sent to Emergency Mode on boot with unhandled kernel
+ NULL pointer dereference at 0000000000000980 (LP: #1768292)
+ - thunderbolt: Prevent crash when ICM firmware is not running
+
+ * linux-snapdragon: reduce EPROBEDEFER noise during boot (LP: #1768761)
+ - [Config] snapdragon: DRM_I2C_ADV7511=y
+
+ * regression Aquantia Corp. AQC107 4.15.0-13-generic -> 4.15.0-20-generic ?
+ (LP: #1767088)
+ - net: aquantia: Regression on reset with 1.x firmware
+ - net: aquantia: oops when shutdown on already stopped device
+
+ * e1000e msix interrupts broken in linux-image-4.15.0-15-generic
+ (LP: #1764892)
+ - e1000e: Remove Other from EIAC
+
+ * Acer Swift sf314-52 power button not managed (LP: #1766054)
+ - SAUCE: platform/x86: acer-wmi: add another KEY_POWER keycode
+
+ * set PINCFG_HEADSET_MIC to parse_flags for Dell precision 3630 (LP: #1766398)
+ - ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags
+
+ * Change the location for one of two front mics on a lenovo thinkcentre
+ machine (LP: #1766477)
+ - ALSA: hda/realtek - adjust the location of one mic
+
+ * SRU: bionic: apply 50 ZFS upstream bugfixes (LP: #1764690)
+ - SAUCE: (noup) Update zfs to 0.7.5-1ubuntu15 (LP: #1764690)
+
+ * [8086:3e92] display becomes blank after S3 (LP: #1763271)
+ - drm/i915/edp: Do not do link training fallback or prune modes on EDP
+
+ -- Stefan Bader <stefan.bader@canonical.com> Wed, 23 May 2018 18:54:55 +0200
+
+linux (4.15.0-22.24) bionic; urgency=medium
+
+ * CVE-2018-3639 (powerpc)
+ - powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit
+ - stf-barrier: set eieio instruction bit 6 for future optimisations
+
+ * CVE-2018-3639 (x86)
+ - x86/nospec: Simplify alternative_msr_write()
+ - x86/bugs: Concentrate bug detection into a separate function
+ - x86/bugs: Concentrate bug reporting into a separate function
+ - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits
+ - x86/bugs, KVM: Support the combination of guest and host IBRS
+ - x86/bugs: Expose /sys/../spec_store_bypass
+ - x86/cpufeatures: Add X86_FEATURE_RDS
+ - x86/bugs: Provide boot parameters for the spec_store_bypass_disable
+ mitigation
+ - x86/bugs/intel: Set proper CPU features and setup RDS
+ - x86/bugs: Whitelist allowed SPEC_CTRL MSR values
+ - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested
+ - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
+ - x86/speculation: Create spec-ctrl.h to avoid include hell
+ - prctl: Add speculation control prctls
+ - x86/process: Allow runtime control of Speculative Store Bypass
+ - x86/speculation: Add prctl for Speculative Store Bypass mitigation
+ - nospec: Allow getting/setting on non-current task
+ - proc: Provide details on speculation flaw mitigations
+ - seccomp: Enable speculation flaw mitigations
+ - x86/bugs: Make boot modes __ro_after_init
+ - prctl: Add force disable speculation
+ - seccomp: Use PR_SPEC_FORCE_DISABLE
+ - seccomp: Add filter flag to opt-out of SSB mitigation
+ - seccomp: Move speculation migitation control to arch code
+ - x86/speculation: Make "seccomp" the default mode for Speculative Store
+ Bypass
+ - x86/bugs: Rename _RDS to _SSBD
+ - proc: Use underscores for SSBD in 'status'
+ - Documentation/spec_ctrl: Do some minor cleanups
+ - x86/bugs: Fix __ssb_select_mitigation() return type
+ - x86/bugs: Make cpu_show_common() static
+
+ * LSM Stacking prctl values should be redefined as to not collide with
+ upstream prctls (LP: #1769263) // CVE-2018-3639
+ - SAUCE: LSM stacking: adjust prctl values
+
+ -- Stefan Bader <stefan.bader@canonical.com> Tue, 15 May 2018 07:41:28 +0200
+
+linux (4.15.0-21.22) bionic; urgency=medium
+
+ * linux: 4.15.0-21.22 -proposed tracker (LP: #1767397)
+
+ * initramfs-tools exception during pm.DoInstall with do-release-upgrade from
+ 16.04 to 18.04 (LP: #1766727)
+ - Add linux-image-* Breaks on s390-tools (<< 2.3.0-0ubuntu3)
+
+ * linux-image-4.15.0-20-generic install after upgrade from xenial breaks
+ (LP: #1767133)
+ - Packaging: Depends on linux-base that provides the necessary tools
+
+ * linux-image packages need to Breaks flash-kernel << 3.90ubuntu2
+ (LP: #1766629)
+ - linux-image-* breaks on flash-kernel (<< 3.90ubuntu2)
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Mon, 30 Apr 2018 14:58:35 -0300
+
+linux (4.15.0-20.21) bionic; urgency=medium
+
+ * linux: 4.15.0-20.21 -proposed tracker (LP: #1766452)
+
+ * package shim-signed (not installed) failed to install/upgrade: installed
+ shim-signed package post-installation script subprocess returned error exit
+ status 5 (LP: #1766391)
+ - [Packaging] fix invocation of header postinst hooks
+
+ -- Seth Forshee <seth.forshee@canonical.com> Mon, 23 Apr 2018 23:56:17 -0500
linux (4.15.0-19.20) bionic; urgency=medium
projects / mirror_ubuntu-bionic-kernel.git / blobdiff