X-Git-Url: https://git.proxmox.com/?a=blobdiff_plain;f=debian.master%2Fchangelog;h=b77f448b1589242d199a49140c12bd4686afd340;hb=cd8f1d8398a0797776a86138b7e121d5bc435d7a;hp=d84b74409f426203a72e52391ae8a0fe08b54954;hpb=4fb41d2b3f9fbd0389202cf8bc5b24d0820ca21f;p=mirror_ubuntu-bionic-kernel.git diff --git a/debian.master/changelog b/debian.master/changelog index d84b74409f42..b77f448b1589 100644 --- a/debian.master/changelog +++ b/debian.master/changelog @@ -1,3 +1,2221 @@ +linux (4.15.0-39.42) bionic; urgency=medium + + * linux: 4.15.0-39.42 -proposed tracker (LP: #1799411) + + * Linux: insufficient shootdown for paging-structure caches (LP: #1798897) + - mm: move tlb_table_flush to tlb_flush_mmu_free + - mm/tlb: Remove tlb_remove_table() non-concurrent condition + - mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE + - [Config] CONFIG_HAVE_RCU_TABLE_INVALIDATE=y + + * Ubuntu18.04: GPU total memory is reduced (LP: #1792102) + - Revert "powerpc/powernv: Increase memory block size to 1GB on radix" + + * arm64: snapdragon: reduce boot noise (LP: #1797154) + - [Config] arm64: snapdragon: DRM_MSM=m + - [Config] arm64: snapdragon: SND*=m + - [Config] arm64: snapdragon: disable ARM_SDE_INTERFACE + - [Config] arm64: snapdragon: disable DRM_I2C_ADV7511_CEC + - [Config] arm64: snapdragon: disable VIDEO_ADV7511, VIDEO_COBALT + + * [Bionic] CPPC bug fixes (LP: #1796949) + - ACPI / CPPC: Update all pr_(debug/err) messages to log the susbspace id + - cpufreq: CPPC: Don't set transition_latency + - ACPI / CPPC: Fix invalid PCC channel status errors + + * regression in 'ip --family bridge neigh' since linux v4.12 (LP: #1796748) + - rtnetlink: fix rtnl_fdb_dump() for ndmsg header + + * screen displays abnormally on the lenovo M715 with the AMD GPU (Radeon Vega + 8 Mobile, rev ca, 1002:15dd) (LP: #1796786) + - drm/amd/display: Fix takover from VGA mode + - drm/amd/display: early return if not in vga mode in disable_vga + - drm/amd/display: Refine disable VGA + + * arm64: snapdragon: WARNING: CPU: 0 PID: 1 arch/arm64/kernel/setup.c:271 + reserve_memblock_reserved_regions (LP: #1797139) + - SAUCE: arm64: Fix /proc/iomem for reserved but not memory regions + + * The front MIC can't work on the Lenovo M715 (LP: #1797292) + - ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo M715 + + * Keyboard backlight sysfs sometimes is missing on Dell laptops (LP: #1797304) + - platform/x86: dell-smbios: Correct some style warnings + - platform/x86: dell-smbios: Rename dell-smbios source to dell-smbios-base + - platform/x86: dell-smbios: Link all dell-smbios-* modules together + - [Config] CONFIG_DELL_SMBIOS_SMM=y, CONFIG_DELL_SMBIOS_WMI=y + + * rpi3b+: ethernet not working (LP: #1797406) + - lan78xx: Don't reset the interface on open + + * 87cdf3148b11 was never backported to 4.15 (LP: #1795653) + - xfrm: Verify MAC header exists before overwriting eth_hdr(skb)->h_proto + + * [Ubuntu18.04][Power9][DD2.2]package installation segfaults inside debian + chroot env in P9 KVM guest with HTM enabled (kvm) (LP: #1792501) + - KVM: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM workarounds + + * Provide mode where all vCPUs on a core must be the same VM (LP: #1792957) + - KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same + VM + + * fscache: bad refcounting in fscache_op_complete leads to OOPS (LP: #1797314) + - SAUCE: fscache: Fix race in decrementing refcount of op->npages + + * CVE-2018-9363 + - Bluetooth: hidp: buffer overflow in hidp_process_report + + * CVE-2017-13168 + - scsi: sg: mitigate read/write abuse + + * [Bionic] ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID + is set (LP: #1797200) + - ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set + + * [Bionic] arm64: topology: Avoid checking numa mask for scheduler MC + selection (LP: #1797202) + - arm64: topology: Avoid checking numa mask for scheduler MC selection + + * crypto/vmx - Backport of Fix sleep-in-atomic bugs patch for 18.04 + (LP: #1790832) + - crypto: vmx - Fix sleep-in-atomic bugs + + * hns3: autoneg settings get lost on down/up (LP: #1797654) + - net: hns3: Fix for information of phydev lost problem when down/up + + * not able to unwind the stack from within __kernel_clock_gettime in the Linux + vDSO (LP: #1797963) + - powerpc/vdso: Correct call frame information + + * Signal 7 error when running GPFS tracing in cluster (LP: #1792195) + - powerpc/mm/books3s: Add new pte bit to mark pte temporarily invalid. + - powerpc/mm/radix: Only need the Nest MMU workaround for R -> RW transition + + * Support Edge Gateway's WIFI LED (LP: #1798330) + - SAUCE: mwifiex: Switch WiFi LED state according to the device status + + * Support Edge Gateway's Bluetooth LED (LP: #1798332) + - SAUCE: Bluetooth: Support for LED on Edge Gateways + + * USB cardreader (0bda:0328) make the system can't enter s3 or hang + (LP: #1798328) + - usb: Don't disable Latency tolerance Messaging (LTM) before port reset + + * CVE-2018-15471 + - xen-netback: fix input validation in xenvif_set_hash_mapping() + + * CVE-2018-16658 + - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status + + * [Bionic] Update ThunderX2 implementation defined pmu core events + (LP: #1796904) + - perf vendor events arm64: Update ThunderX2 implementation defined pmu core + events + + * the machine of lenovo M715 with the AMD GPU (Radeon Vega 8 Mobile, rev ca, + 1002:15dd) often hangs randomly (LP: #1796789) + - drm/amd: Add missing fields in atom_integrated_system_info_v1_11 + + * [18.04] GLK hang after a while (LP: #1760545) + - drm/i915/glk: Add MODULE_FIRMWARE for Geminilake + + * Fix usbcore.quirks when used at boot (LP: #1795784) + - usb: core: safely deal with the dynamic quirk lists + + -- Kleber Sacilotto de Souza Tue, 23 Oct 2018 14:44:55 +0000 + +linux (4.15.0-38.41) bionic; urgency=medium + + * linux: 4.15.0-38.41 -proposed tracker (LP: #1797061) + + * Silent data corruption in Linux kernel 4.15 (LP: #1796542) + - block: add a lower-level bio_add_page interface + - block: bio_iov_iter_get_pages: fix size of last iovec + - blkdev: __blkdev_direct_IO_simple: fix leak in error case + - block: bio_iov_iter_get_pages: pin more pages for multi-segment IOs + + -- Stefan Bader Wed, 10 Oct 2018 11:20:35 +0200 + +linux (4.15.0-37.40) bionic; urgency=medium + + * linux: 4.15.0-37.40 -proposed tracker (LP: #1795564) + + * hns3: enable ethtool rx-vlan-filter on supported hw (LP: #1793394) + - net: hns3: Add vlan filter setting by ethtool command -K + + * hns3: Modifying channel parameters will reset ring parameters back to + defaults (LP: #1793404) + - net: hns3: Fix desc num set to default when setting channel + + * hisi_sas: Add SATA FIX check for v3 hw (LP: #1794151) + - scsi: hisi_sas: Add SATA FIS check for v3 hw + + * Fix potential corruption using SAS controller on HiSilicon arm64 boards + (LP: #1794156) + - scsi: hisi_sas: add memory barrier in task delivery function + + * hisi_sas: Reduce unnecessary spin lock contention (LP: #1794165) + - scsi: hisi_sas: Tidy hisi_sas_task_prep() + + * Add functional level reset support for the SAS controller on HiSilicon D06 + systems (LP: #1794166) + - scsi: hisi_sas: tidy host controller reset function a bit + - scsi: hisi_sas: relocate some common code for v3 hw + - scsi: hisi_sas: Implement handlers of PCIe FLR for v3 hw + + * HiSilicon SAS controller doesn't recover from PHY STP link timeout + (LP: #1794172) + - scsi: hisi_sas: tidy channel interrupt handler for v3 hw + - scsi: hisi_sas: Fix the failure of recovering PHY from STP link timeout + + * getxattr: always handle namespaced attributes (LP: #1789746) + - getxattr: use correct xattr length + + * Fix unusable NVIDIA GPU after S3 (LP: #1793338) + - PCI: Reprogram bridge prefetch registers on resume + + * Fails to boot under Xen PV: BUG: unable to handle kernel paging request at + edc21fd9 (LP: #1789118) + - x86/EISA: Don't probe EISA bus for Xen PV guests + + * qeth: use vzalloc for QUERY OAT buffer (LP: #1793086) + - s390/qeth: use vzalloc for QUERY OAT buffer + + * SRU: Enable middle button of touchpad on ThinkPad P72 (LP: #1793463) + - Input: elantech - enable middle button of touchpad on ThinkPad P72 + + * Dell new AIO requires a new uart backlight driver (LP: #1727235) + - SAUCE: platform/x86: dell-uart-backlight: new backlight driver for DELL AIO + - updateconfigs for Dell UART backlight driver + + * [Ubuntu] s390/crypto: Fix return code checking in cbc_paes_crypt. + (LP: #1794294) + - s390/crypto: Fix return code checking in cbc_paes_crypt() + + * hns3: Retrieve RoCE MSI-X config from firmware (LP: #1793221) + - net: hns3: Fix MSIX allocation issue for VF + - net: hns3: Refine the MSIX allocation for PF + + * net: hns: Avoid hang when link is changed while handling packets + (LP: #1792209) + - net: hns: add the code for cleaning pkt in chip + - net: hns: add netif_carrier_off before change speed and duplex + + * Page leaking in cachefiles_read_backing_file while vmscan is active + (LP: #1793430) + - SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan + is active + + * some nvidia p1000 graphic cards hang during the boot (LP: #1791569) + - drm/nouveau/gr/gf100-: virtualise tpc_mask + apply fixes from traces + + * Error reported when creating ZFS pool with "-t" option, despite successful + pool creation (LP: #1769937) + - SAUCE: (noup) Update zfs to 0.7.5-1ubuntu16.4 + + * Fix I2C touchpanels' interrupt storms after system suspend (LP: #1792309) + - HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen + - HID: i2c-hid: Don't reset device upon system resume + + * ipmmu is always registered (LP: #1783746) + - iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have IPMMU- + VMSA + + * Bionic update: upstream stable patchset 2018-09-27 (LP: #1794889) + - clocksource/drivers/imx-tpm: Correct some registers operation flow + - Input: synaptics-rmi4 - fix an unchecked out of memory error path + - KVM: X86: fix incorrect reference of trace_kvm_pi_irte_update + - x86: Add check for APIC access address for vmentry of L2 guests + - MIPS: io: Prevent compiler reordering writeX() + - nfp: ignore signals when communicating with management FW + - perf report: Fix switching to another perf.data file + - fsnotify: fix ignore mask logic in send_to_group() + - MIPS: io: Add barrier after register read in readX() + - s390/smsgiucv: disable SMSG on module unload + - isofs: fix potential memory leak in mount option parsing + - MIPS: dts: Boston: Fix PCI bus dtc warnings: + - spi: sh-msiof: Fix bit field overflow writes to TSCR/RSCR + - doc: Add vendor prefix for Kieback & Peter GmbH + - dt-bindings: pinctrl: sunxi: Fix reference to driver + - dt-bindings: serial: sh-sci: Add support for r8a77965 (H)SCIF + - dt-bindings: dmaengine: rcar-dmac: document R8A77965 support + - clk: honor CLK_MUX_ROUND_CLOSEST in generic clk mux + - ASoC: rt5514: Add the missing register in the readable table + - eCryptfs: don't pass up plaintext names when using filename encryption + - soc: bcm: raspberrypi-power: Fix use of __packed + - soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure + - PCI: kirin: Fix reset gpio name + - ASoC: topology: Fix bugs of freeing soc topology + - xen: xenbus_dev_frontend: Really return response string + - ASoC: topology: Check widget kcontrols before deref. + - spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo() + - blkcg: don't hold blkcg lock when deactivating policy + - tipc: fix infinite loop when dumping link monitor summary + - scsi: iscsi: respond to netlink with unicast when appropriate + - scsi: megaraid_sas: Do not log an error if FW successfully initializes. + - scsi: target: fix crash with iscsi target and dvd + - netfilter: nf_tables: NAT chain and extensions require NF_TABLES + - netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update + - ASoC: msm8916-wcd-analog: use threaded context for mbhc events + - drm/msm: Fix possible null dereference on failure of get_pages() + - drm/msm/dsi: use correct enum in dsi_get_cmd_fmt + - drm/msm: don't deref error pointer in the msm_fbdev_create error path + - blkcg: init root blkcg_gq under lock + - vfs: Undo an overly zealous MS_RDONLY -> SB_RDONLY conversion + - parisc: time: Convert read_persistent_clock() to read_persistent_clock64() + - scsi: storvsc: Set up correct queue depth values for IDE devices + - scsi: isci: Fix infinite loop in while loop + - mm, pagemap: fix swap offset value for PMD migration entry + - proc: revalidate kernel thread inodes to root:root + - kexec_file: do not add extra alignment to efi memmap + - mm: memcg: add __GFP_NOWARN in __memcg_schedule_kmem_cache_create() + - usb: typec: ucsi: fix tracepoint related build error + - ACPI / PM: Blacklist Low Power S0 Idle _DSM for ThinkPad X1 Tablet(2016) + - dt-bindings: meson-uart: DT fix s/clocks-names/clock-names/ + - net: phy: marvell: clear wol event before setting it + - ARM: dts: da850: fix W=1 warnings with pinmux node + - ACPI / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 + - drm/amdkfd: fix clock counter retrieval for node without GPU + - thermal: int3403_thermal: Fix NULL pointer deref on module load / probe + - net: ethtool: Add missing kernel doc for FEC parameters + - arm64: ptrace: remove addr_limit manipulation + - HID: lenovo: Add support for IBM/Lenovo Scrollpoint mice + - HID: wacom: Release device resource data obtained by devres_alloc() + - selftests: ftrace: Add a testcase for multiple actions on trigger + - rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp + - perf/x86/intel: Don't enable freeze-on-smi for PerfMon V1 + - remoteproc: qcom: Fix potential device node leaks + - rpmsg: added MODULE_ALIAS for rpmsg_char + - HID: intel-ish-hid: use put_device() instead of kfree() + - blk-mq: fix sysfs inflight counter + - arm64: fix possible spectre-v1 in ptrace_hbp_get_event() + - KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_mmio_read_apr() + - libahci: Allow drivers to override stop_engine + - ata: ahci: mvebu: override ahci_stop_engine for mvebu AHCI + - x86/cpu/intel: Add missing TLB cpuid values + - bpf: fix uninitialized variable in bpf tools + - i2c: sprd: Prevent i2c accesses after suspend is called + - i2c: sprd: Fix the i2c count issue + - tipc: fix bug in function tipc_nl_node_dump_monitor + - nvme: depend on INFINIBAND_ADDR_TRANS + - nvmet-rdma: depend on INFINIBAND_ADDR_TRANS + - ib_srpt: depend on INFINIBAND_ADDR_TRANS + - ib_srp: depend on INFINIBAND_ADDR_TRANS + - IB: make INFINIBAND_ADDR_TRANS configurable + - IB/uverbs: Fix validating mandatory attributes + - RDMA/cma: Fix use after destroy access to net namespace for IPoIB + - RDMA/iwpm: fix memory leak on map_info + - IB/rxe: add RXE_START_MASK for rxe_opcode IB_OPCODE_RC_SEND_ONLY_INV + - IB/rxe: avoid double kfree_skb + - : fix end_name_hash() for 64bit long + - IB/core: Make ib_mad_client_id atomic + - ARM: davinci: board-da830-evm: fix GPIO lookup for MMC/SD + - ARM: davinci: board-da850-evm: fix GPIO lookup for MMC/SD + - ARM: davinci: board-omapl138-hawk: fix GPIO numbers for MMC/SD lookup + - ARM: davinci: board-dm355-evm: fix broken networking + - dt-bindings: panel: lvds: Fix path to display timing bindings + - ARM: OMAP2+: powerdomain: use raw_smp_processor_id() for trace + - ARM: dts: logicpd-som-lv: Fix WL127x Startup Issues + - ARM: dts: logicpd-som-lv: Fix Audio Mute + - Input: atmel_mxt_ts - fix the firmware update + - hexagon: add memset_io() helper + - hexagon: export csum_partial_copy_nocheck + - scsi: vmw-pvscsi: return DID_BUS_BUSY for adapter-initated aborts + - bpf, x64: fix memleak when not converging after image + - parisc: drivers.c: Fix section mismatches + - stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock + - kthread, sched/wait: Fix kthread_parkme() wait-loop + - arm64: tegra: Make BCM89610 PHY interrupt as active low + - iommu/vt-d: fix shift-out-of-bounds in bug checking + - nvme: fix potential memory leak in option parsing + - nvme: Set integrity flag for user passthrough commands + - ARM: OMAP1: ams-delta: fix deferred_fiq handler + - smc: fix sendpage() call + - IB/hfi1 Use correct type for num_user_context + - IB/hfi1: Fix memory leak in exception path in get_irq_affinity() + - RDMA/cma: Do not query GID during QP state transition to RTR + - spi: bcm2835aux: ensure interrupts are enabled for shared handler + - sched/core: Introduce set_special_state() + - sh: fix build failure for J2 cpu with SMP disabled + - tee: check shm references are consistent in offset/size + - mac80211: Adjust SAE authentication timeout + - drm/omap: silence unititialized variable warning + - drm/omap: fix uninitialized ret variable + - drm/omap: fix possible NULL ref issue in tiler_reserve_2d + - drm/omap: check return value from soc_device_match + - drm/omap: handle alloc failures in omap_connector + - driver core: add __printf verification to __ata_ehi_pushv_desc + - ARM: dts: cygnus: fix irq type for arm global timer + - mac80211: use timeout from the AddBA response instead of the request + - net: aquantia: driver should correctly declare vlan_features bits + - can: dev: increase bus-off message severity + - arm64: Add MIDR encoding for NVIDIA CPUs + - cifs: smb2ops: Fix listxattr() when there are no EAs + - agp: uninorth: make two functions static + - tipc: eliminate KMSAN uninit-value in strcmp complaint + - qed: Fix l2 initializations over iWARP personality + - qede: Fix gfp flags sent to rdma event node allocation + - rxrpc: Fix error reception on AF_INET6 sockets + - rxrpc: Fix the min security level for kernel calls + - KVM: Extend MAX_IRQ_ROUTES to 4096 for all archs + - x86: Delay skip of emulated hypercall instruction + - ixgbe: return error on unsupported SFP module when resetting + - net sched actions: fix invalid pointer dereferencing if skbedit flags + missing + - proc/kcore: don't bounds check against address 0 + - ocfs2: take inode cluster lock before moving reflinked inode from orphan dir + - kprobes/x86: Prohibit probing on exception masking instructions + - uprobes/x86: Prohibit probing on MOV SS instruction + - objtool, kprobes/x86: Sync the latest header with + tools/objtool/arch/x86/include/asm/insn.h + - x86/pkeys/selftests: Adjust the self-test to fresh distros that export the + pkeys ABI + - x86/mpx/selftests: Adjust the self-test to fresh distros that export the MPX + ABI + - x86/selftests: Add mov_to_ss test + - x86/pkeys/selftests: Give better unexpected fault error messages + - x86/pkeys/selftests: Stop using assert() + - x86/pkeys/selftests: Remove dead debugging code, fix dprint_in_signal + - x86/pkeys/selftests: Allow faults on unknown keys + - x86/pkeys/selftests: Factor out "instruction page" + - x86/pkeys/selftests: Add PROT_EXEC test + - x86/pkeys/selftests: Fix pkey exhaustion test off-by-one + - x86/pkeys/selftests: Fix pointer math + - x86/pkeys/selftests: Save off 'prot' for allocations + - x86/pkeys/selftests: Add a test for pkey 0 + - mtd: Fix comparison in map_word_andequal() + - afs: Fix the non-encryption of calls + - usb: musb: fix remote wakeup racing with suspend + - ARM: keystone: fix platform_domain_notifier array overrun + - i2c: pmcmsp: return message count on master_xfer success + - i2c: pmcmsp: fix error return from master_xfer + - i2c: viperboard: return message count on master_xfer success + - ARM: davinci: dm646x: fix timer interrupt generation + - ARM: davinci: board-dm646x-evm: pass correct I2C adapter id for VPIF + - ARM: davinci: board-dm646x-evm: set VPIF capture card name + - clk: imx6ull: use OSC clock during AXI rate change + - locking/rwsem: Add a new RWSEM_ANONYMOUSLY_OWNED flag + - locking/percpu-rwsem: Annotate rwsem ownership transfer by setting + RWSEM_OWNER_UNKNOWN + - drm/dumb-buffers: Integer overflow in drm_mode_create_ioctl() + - sched/debug: Move the print_rt_rq() and print_dl_rq() declarations to + kernel/sched/sched.h + - sched/deadline: Make the grub_reclaim() function static + - parisc: Move setup_profiling_timer() out of init section + - efi/libstub/arm64: Handle randomized TEXT_OFFSET + - ARM: 8753/1: decompressor: add a missing parameter to the addruart macro + - ARM: 8758/1: decompressor: restore r1 and r2 just before jumping to the + kernel + - ARM: kexec: fix kdump register saving on panic() + - Revert "Btrfs: fix scrub to repair raid6 corruption" + - Btrfs: fix scrub to repair raid6 corruption + - Btrfs: make raid6 rebuild retry more + - tcp: do not overshoot window_clamp in tcp_rcv_space_adjust() + - ibmvnic: Do not notify peers on parameter change resets + - dt-bindings: net: ravb: Add support for r8a77965 SoC + - X86/KVM: Properly update 'tsc_offset' to represent the running guest + - kvm: x86: move MSR_IA32_TSC handling to x86.c + - ARM: dts: Fix cm2 and prm sizes for omap4 + - powerpc/64s: Default l1d_size to 64K in RFI fallback flush + - KVM: arm/arm64: vgic: Kick new VCPU on interrupt migration + - arm64: kasan: avoid pfn_to_nid() before page array is initialized + - ARM64: dts: meson-gxl: add USB host support + - ARM64: dts: meson-gxm: add GXM specific USB host configuration + - ARM64: dts: meson-gxl-s905x-p212: enable the USB controller + - ARM64: dts: meson-gx-p23x-q20x: enable the USB controller + - ARM64: dts: meson-gxl-s905x-libretech-cc: enable the USB controller + - ARM64: dts: meson-gxl-nexbox-a95x: enable the USB controller + - ARM64: dts: meson-gxm-khadas-vim2: enable the USB controller + - arm64: dts: correct SATA addresses for Stingray + - afs: Fix server record deletion + - proc: fix /proc/loadavg regression + - s390/qeth: fix request-side race during cmd IO timeout + - ACPI / scan: Initialize watchdog before PNP + - CIFS: set *resp_buf_type to NO_BUFFER on error + - arm64: dts: uniphier: fix input delay value for legacy mode of eMMC + - igb: Fix the transmission mode of queue 0 for Qav mode + - RISC-V: build vdso-dummy.o with -no-pie + - arm64: only advance singlestep for user instruction traps + - perf pmu: Fix core PMU alias list for X86 platform + - bpf, x64: fix JIT emission for dead code + - powerpc/kvm/booke: Fix altivec related build break + - reset: uniphier: fix USB clock line for LD20 + - nfp: don't depend on eth_tbl being available + - net: mvpp2: Fix clk error path in mvpp2_probe + - kvm: apic: Flush TLB after APIC mode/address change if VPIDs are in use + - IB/uverbs: Fix validating mandatory attributes + - RDMA/hns: Intercept illegal RDMA operation when use inline data + - pinctrl: cherryview: Associate IRQ descriptors to irqdomain + - kthread, sched/wait: Fix kthread_parkme() completion issue + - iommu/vt-d: Fix usage of force parameter in intel_ir_reconfigure_irte() + - nvme/multipath: Disable runtime writable enabling parameter + - ARM: dts: correct missing "compatible" entry for ti81xx SoCs + - usb: typec: tps6598x: handle block reads separately with plain-I2C adapters + - IB/mlx4: Fix integer overflow when calculating optimal MTT size + - bpf: add map_alloc_check callback + - bpf: fix possible spectre-v1 in find_and_alloc_map() + - drm/exynos/mixer: fix synchronization check in interlaced mode + - drm/exynos: mixer: avoid Oops in vp_video_buffer() + - bpf: use array_index_nospec in find_prog_type + - gcc-plugins: fix build condition of SANCOV plugin + - drm/vc4: Fix oops dereferencing DPI's connector since panel_bridge. + - nvme: fix use-after-free in nvme_free_ns_head + - powerpc/pseries: Fix CONFIG_NUMA=n build + - HID: i2c-hid: Add RESEND_REPORT_DESCR quirk for Toshiba Click Mini L9W-B + - cifs: Allocate validate negotiation request through kmalloc + - drm/amdgpu: Switch to interruptable wait to recover from ring hang. + - rxrpc: Fix missing start of call timeout + - ARM: dts: imx51-zii-rdu1: fix touchscreen bindings + - sh: switch to NO_BOOTMEM + - lib/find_bit_benchmark.c: avoid soft lockup in test_find_first_bit() + - x86/pkeys/selftests: Avoid printf-in-signal deadlocks + - afs: Fix address list parsing + - afs: Fix refcounting in callback registration + - afs: Fix server rotation's handling of fileserver probe failure + - afs: Fix VNOVOL handling in address rotation + - afs: Fix the handling of CB.InitCallBackState3 to find the server by UUID + - afs: Fix afs_find_server search loop + - KVM: X86: Lower the default timer frequency limit to 200us + - platform/x86: DELL_WMI use depends on instead of select for DELL_SMBIOS + - ARM: replace unnecessary perl with sed and the shell $(( )) operator + + * Improvements to the kernel source package preparation (LP: #1793461) + - [Packaging] startnewrelease: add support for backport kernels + + * Kernel 4.15.0-35.38 fails to build with CONFIG_XFS_ONLINE_SCRUB enabled + (LP: #1792393) + - SAUCE: xfs: fix build error with CONFIG_XFS_ONLINE_SCRUB enabled + + * update ENA driver to latest mainline version (LP: #1792044) + - net: ena: add detection and recovery mechanism for handling missed/misrouted + MSI-X + - net: ena: increase ena driver version to 1.5.0 + - net: ena: Eliminate duplicate barriers on weakly-ordered archs + - SAUCE: ena: devm_kzalloc() -> devm_kcalloc() + - net: ena: Fix use of uninitialized DMA address bits field + - net: ena: fix surprise unplug NULL dereference kernel crash + - net: ena: fix driver when PAGE_SIZE == 64kB + - net: ena: fix device destruction to gracefully free resources + - net: ena: fix potential double ena_destroy_device() + - net: ena: fix missing lock during device destruction + - net: ena: fix missing calls to READ_ONCE + - net: ena: fix incorrect usage of memory barriers + + -- Stefan Bader Tue, 02 Oct 2018 14:33:09 +0200 + +linux (4.15.0-36.39) bionic; urgency=medium + + * CVE-2018-14633 + - iscsi target: Use hex2bin instead of a re-implementation + + * CVE-2018-17182 + - mm: get rid of vmacache_flush_all() entirely + + -- Kleber Sacilotto de Souza Mon, 24 Sep 2018 16:08:41 +0200 + +linux (4.15.0-35.38) bionic; urgency=medium + + * linux: 4.15.0-35.38 -proposed tracker (LP: #1791719) + + * device hotplug of vfio devices can lead to deadlock in vfio_pci_release + (LP: #1792099) + - SAUCE: vfio -- release device lock before userspace requests + + * L1TF mitigation not effective in some CPU and RAM combinations + (LP: #1788563) + - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit + - x86/speculation/l1tf: Fix off-by-one error when warning that system has too + much RAM + - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ + + * CVE-2018-15594 + - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests + + * CVE-2017-5715 (Spectre v2 s390x) + - KVM: s390: implement CPU model only facilities + - s390: detect etoken facility + - KVM: s390: add etoken support for guests + - s390/lib: use expoline for all bcr instructions + - s390: fix br_r1_trampoline for machines without exrl + - SAUCE: s390: use expoline thunks for all branches generated by the BPF JIT + + * Ubuntu18.04.1: cpuidle: powernv: Fix promotion from snooze if next state + disabled (performance) (LP: #1790602) + - cpuidle: powernv: Fix promotion from snooze if next state disabled + + * Watchdog CPU:19 Hard LOCKUP when kernel crash was triggered (LP: #1790636) + - powerpc: hard disable irqs in smp_send_stop loop + - powerpc: Fix deadlock with multiple calls to smp_send_stop + - powerpc: smp_send_stop do not offline stopped CPUs + - powerpc/powernv: Fix opal_event_shutdown() called with interrupts disabled + + * Security fix: check if IOMMU page is contained in the pinned physical page + (LP: #1785675) + - vfio/spapr: Use IOMMU pageshift rather than pagesize + - KVM: PPC: Check if IOMMU page is contained in the pinned physical page + + * Missing Intel GPU pci-id's (LP: #1789924) + - drm/i915/kbl: Add KBL GT2 sku + - drm/i915/whl: Introducing Whiskey Lake platform + - drm/i915/aml: Introducing Amber Lake platform + - drm/i915/cfl: Add a new CFL PCI ID. + + * CVE-2018-15572 + - x86/speculation: Protect against userspace-userspace spectreRSB + + * Support Power Management for Thunderbolt Controller (LP: #1789358) + - thunderbolt: Handle NULL boot ACL entries properly + - thunderbolt: Notify userspace when boot_acl is changed + - thunderbolt: Use 64-bit DMA mask if supported by the platform + - thunderbolt: Do not unnecessarily call ICM get route + - thunderbolt: No need to take tb->lock in domain suspend/complete + - thunderbolt: Use correct ICM commands in system suspend + - thunderbolt: Add support for runtime PM + + * random oopses on s390 systems using NVMe devices (LP: #1790480) + - s390/pci: fix out of bounds access during irq setup + + * [Bionic] Spectre v4 mitigation (Speculative Store Bypass Disable) support + for arm64 using SMC firmware call to set a hardware chicken bit + (LP: #1787993) // CVE-2018-3639 (arm64) + - arm64: alternatives: Add dynamic patching feature + - KVM: arm/arm64: Do not use kern_hyp_va() with kvm_vgic_global_state + - KVM: arm64: Avoid storing the vcpu pointer on the stack + - arm/arm64: smccc: Add SMCCC-specific return codes + - arm64: Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 + - arm64: Add per-cpu infrastructure to call ARCH_WORKAROUND_2 + - arm64: Add ARCH_WORKAROUND_2 probing + - arm64: Add 'ssbd' command-line option + - arm64: ssbd: Add global mitigation state accessor + - arm64: ssbd: Skip apply_ssbd if not using dynamic mitigation + - arm64: ssbd: Restore mitigation status on CPU resume + - arm64: ssbd: Introduce thread flag to control userspace mitigation + - arm64: ssbd: Add prctl interface for per-thread mitigation + - arm64: KVM: Add HYP per-cpu accessors + - arm64: KVM: Add ARCH_WORKAROUND_2 support for guests + - arm64: KVM: Handle guest's ARCH_WORKAROUND_2 requests + - arm64: KVM: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID + - [Config] ARM64_SSBD=y + + * Reconcile hns3 SAUCE patches with upstream (LP: #1787477) + - Revert "UBUNTU: SAUCE: net: hns3: Optimize PF CMDQ interrupt switching + process" + - Revert "UBUNTU: SAUCE: net: hns3: Fix for VF mailbox receiving unknown + message" + - Revert "UBUNTU: SAUCE: net: hns3: Fix for VF mailbox cannot receiving PF + response" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix comments for + hclge_get_ring_chain_from_mbx" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for using wrong mask and + shift in hclge_get_ring_chain_from_mbx" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for reset_level default + assignment probelm" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unnecessary ring + configuration operation while resetting" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix return value error in + hns3_reset_notify_down_enet" + - Revert "UBUNTU: SAUCE: net: hns3: Fix for phy link issue when using marvell + phy driver" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: separate roce from nic when + resetting" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: correct reset event status + register" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: prevent to request reset + frequently" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: reset net device with rtnl_lock" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: modify the order of initializeing + command queue register" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: prevent sending command during + global or core reset" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove the warning when clear + reset cause" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix get_vector ops in + hclgevf_main module" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix warning bug when doing lp + selftest" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: Add configure for mac minimal + frame size" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for mailbox message truncated + problem" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for l4 checksum offload bug" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for waterline not setting + correctly" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix for mac pause not disable in + pfc mode" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix tc setup when netdev is first + up" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: Add SPDX tags to hns3 driver" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused struct member and + definition" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix mislead parameter name" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: modify inconsistent bit mask + macros" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: use decimal for bit offset + macros" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix unreasonable code comments" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove extra space and brackets" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: standardize the handle of return + value" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some redundant + assignments" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: fix unused function warning in VF + driver" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: modify hnae_ to hnae3_" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: use dma_zalloc_coherent instead + of kzalloc/dma_map_single" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: give default option while + dependency HNS3 set" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some unused members of + some structures" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove a redundant + hclge_cmd_csq_done" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: using modulo for cyclic counters + in hclge_cmd_send" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: simplify hclge_cmd_csq_clean" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove some redundant + assignments" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove useless code in + hclge_cmd_send" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused + hclge_ring_to_dma_dir" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: use lower_32_bits and + upper_32_bits" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove back in struct hclge_hw" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: add unlikely for error check" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove the Redundant put_vector + in hns3_client_uninit" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: print the ret value in error + information" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: extraction an interface for state + state init|uninit" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove unused head file in + hnae3.c" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: add l4_type check for both ipv4 + and ipv6" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: add vector status check before + free vector" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: rename the interface for + init_client_instance and uninit_client_instance" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: remove hclge_get_vector_index + from hclge_bind_ring_with_vector" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: RX BD information valid only in + last BD except VLD bit and buffer size" + - Revert "UBUNTU: SAUCE: {topost} net: hns3: add support for serdes loopback + selftest" + - net: hns3: Updates RX packet info fetch in case of multi BD + - net: hns3: remove unused hclgevf_cfg_func_mta_filter + - net: hns3: Fix for VF mailbox cannot receiving PF response + - net: hns3: Fix for VF mailbox receiving unknown message + - net: hns3: Optimize PF CMDQ interrupt switching process + - net: hns3: remove hclge_get_vector_index from hclge_bind_ring_with_vector + - net: hns3: rename the interface for init_client_instance and + uninit_client_instance + - net: hns3: add vector status check before free vector + - net: hns3: add l4_type check for both ipv4 and ipv6 + - net: hns3: add unlikely for error check + - net: hns3: remove unused head file in hnae3.c + - net: hns3: extraction an interface for state init|uninit + - net: hns3: print the ret value in error information + - net: hns3: remove the Redundant put_vector in hns3_client_uninit + - net: hns3: remove back in struct hclge_hw + - net: hns3: use lower_32_bits and upper_32_bits + - net: hns3: remove unused hclge_ring_to_dma_dir + - net: hns3: remove useless code in hclge_cmd_send + - net: hns3: remove some redundant assignments + - net: hns3: simplify hclge_cmd_csq_clean + - net: hns3: remove a redundant hclge_cmd_csq_done + - net: hns3: remove some unused members of some structures + - net: hns3: give default option while dependency HNS3 set + - net: hns3: use dma_zalloc_coherent instead of kzalloc/dma_map_single + - net: hns3: modify hnae_ to hnae3_ + - net: hns3: Fix tc setup when netdev is first up + - net: hns3: Fix for mac pause not disable in pfc mode + - net: hns3: Fix for waterline not setting correctly + - net: hns3: Fix for l4 checksum offload bug + - net: hns3: Fix for mailbox message truncated problem + - net: hns3: Add configure for mac minimal frame size + - net: hns3: Fix warning bug when doing lp selftest + - net: hns3: Fix get_vector ops in hclgevf_main module + - net: hns3: Remove the warning when clear reset cause + - net: hns3: Prevent sending command during global or core reset + - net: hns3: Modify the order of initializing command queue register + - net: hns3: Reset net device with rtnl_lock + - net: hns3: Prevent to request reset frequently + - net: hns3: Correct reset event status register + - net: hns3: Fix return value error in hns3_reset_notify_down_enet + - net: hns3: remove unnecessary ring configuration operation while resetting + - net: hns3: Fix for reset_level default assignment probelm + - net: hns3: Fix for using wrong mask and shift in + hclge_get_ring_chain_from_mbx + - net: hns3: Fix comments for hclge_get_ring_chain_from_mbx + - net: hns3: Remove some redundant assignments + - net: hns3: Standardize the handle of return value + - net: hns3: Remove extra space and brackets + - net: hns3: Correct unreasonable code comments + - net: hns3: Use decimal for bit offset macros + - net: hns3: Modify inconsistent bit mask macros + - net: hns3: Fix misleading parameter name + - net: hns3: Remove unused struct member and definition + - net: hns3: Add SPDX tags to HNS3 PF driver + - net: hns3: Add support for serdes loopback selftest + - net: hns3: Fix for phy link issue when using marvell phy driver + - SAUCE: {topost} net: hns3: separate roce from nic when resetting + + * CVE-2018-6555 + - SAUCE: irda: Only insert new objects into the global database via setsockopt + + * CVE-2018-6554 + - SAUCE: irda: Fix memory leak caused by repeated binds of irda socket + + * Bionic update: upstream stable patchset 2018-08-31 (LP: #1790188) + - netfilter: nf_tables: fix NULL pointer dereference on + nft_ct_helper_obj_dump() + - blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers + - af_key: Always verify length of provided sadb_key + - gpio: No NULL owner + - KVM: X86: Fix reserved bits check for MOV to CR3 + - KVM: x86: introduce linear_{read,write}_system + - KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and + kvm_write_guest_virt_system + - staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy + - NFC: pn533: don't send USB data off of the stack + - usbip: vhci_sysfs: fix potential Spectre v1 + - usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver + - usb-storage: Add compatibility quirk flags for G-Technologies G-Drive + - Input: xpad - add GPD Win 2 Controller USB IDs + - phy: qcom-qusb2: Fix crash if nvmem cell not specified + - usb: gadget: function: printer: avoid wrong list handling in printer_write() + - usb: gadget: udc: renesas_usb3: disable the controller's irqs for + reconnecting + - serial: sh-sci: Stop using printk format %pCr + - tty/serial: atmel: use port->name as name in request_irq() + - serial: samsung: fix maxburst parameter for DMA transactions + - serial: 8250: omap: Fix idling of clocks for unused uarts + - vmw_balloon: fixing double free when batching mode is off + - tty: pl011: Avoid spuriously stuck-off interrupts + - kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access + - Input: goodix - add new ACPI id for GPD Win 2 touch screen + - crypto: caam - strip input zeros from RSA input buffer + - crypto: caam - fix DMA mapping dir for generated IV + - crypto: caam - fix IV DMA mapping and updating + - crypto: caam/qi - fix IV DMA mapping and updating + - crypto: caam - fix size of RSA prime factor q + - crypto: vmx - Remove overly verbose printk from AES init routines + - crypto: vmx - Remove overly verbose printk from AES XTS init + - crypto: omap-sham - fix memleak + - usb: typec: wcove: Remove dependency on HW FSM + - usb: gadget: udc: renesas_usb3: fix double phy_put() + - usb: gadget: udc: renesas_usb3: should remove debugfs + - usb: gadget: udc: renesas_usb3: should call pm_runtime_enable() before add + udc + - usb: gadget: udc: renesas_usb3: should call devm_phy_get() before add udc + - usb: gadget: udc: renesas_usb3: should fail if devm_phy_get() returns error + + * Bionic update: upstream stable patchset 2018-08-29 (LP: #1789666) + - scsi: sd_zbc: Avoid that resetting a zone fails sporadically + - mmap: introduce sane default mmap limits + - mmap: relax file size limit for regular files + - btrfs: define SUPER_FLAG_METADUMP_V2 + - kconfig: Avoid format overflow warning from GCC 8.1 + - be2net: Fix error detection logic for BE3 + - bnx2x: use the right constant + - dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect() + - enic: set DMA mask to 47 bit + - ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds + - ip6_tunnel: remove magic mtu value 0xFFF8 + - ipmr: properly check rhltable_init() return value + - ipv4: remove warning in ip_recv_error + - ipv6: omit traffic class when calculating flow hash + - isdn: eicon: fix a missing-check bug + - kcm: Fix use-after-free caused by clonned sockets + - netdev-FAQ: clarify DaveM's position for stable backports + - net: ipv4: add missing RTA_TABLE to rtm_ipv4_policy + - net: metrics: add proper netlink validation + - net/packet: refine check for priv area size + - net: phy: broadcom: Fix bcm_write_exp() + - net: usb: cdc_mbim: add flag FLAG_SEND_ZLP + - packet: fix reserve calculation + - qed: Fix mask for physical address in ILT entry + - sctp: not allow transport timeout value less than HZ/5 for hb_timer + - team: use netdev_features_t instead of u32 + - vhost: synchronize IOTLB message with dev cleanup + - vrf: check the original netdevice for generating redirect + - ipv6: sr: fix memory OOB access in seg6_do_srh_encap/inline + - net: phy: broadcom: Fix auxiliary control register reads + - net-sysfs: Fix memory leak in XPS configuration + - virtio-net: correctly transmit XDP buff after linearizing + - net/mlx4: Fix irq-unsafe spinlock usage + - tun: Fix NULL pointer dereference in XDP redirect + - virtio-net: correctly check num_buf during err path + - net/mlx5e: When RXFCS is set, add FCS data into checksum calculation + - virtio-net: fix leaking page for gso packet during mergeable XDP + - rtnetlink: validate attributes in do_setlink() + - cls_flower: Fix incorrect idr release when failing to modify rule + - PCI: hv: Do not wait forever on a device that has disappeared + - drm: set FMODE_UNSIGNED_OFFSET for drm files + - l2tp: fix refcount leakage on PPPoL2TP sockets + - mlxsw: spectrum: Forbid creation of VLAN 1 over port/LAG + - net: ethernet: ti: cpdma: correct error handling for chan create + - net: ethernet: davinci_emac: fix error handling in probe() + - net: dsa: b53: Fix for brcm tag issue in Cygnus SoC + - net : sched: cls_api: deal with egdev path only if needed + + * Bionic update: upstream stable patchset 2018-08-24 (LP: #1788897) + - fix io_destroy()/aio_complete() race + - mm: fix the NULL mapping case in __isolate_lru_page() + - objtool: Support GCC 8's cold subfunctions + - objtool: Support GCC 8 switch tables + - objtool: Detect RIP-relative switch table references + - objtool: Detect RIP-relative switch table references, part 2 + - objtool: Fix "noreturn" detection for recursive sibling calls + - xfs: convert XFS_AGFL_SIZE to a helper function + - xfs: detect agfl count corruption and reset agfl + - Input: synaptics - Lenovo Carbon X1 Gen5 (2017) devices should use RMI + - Input: synaptics - add Lenovo 80 series ids to SMBus + - Input: elan_i2c_smbus - fix corrupted stack + - tracing: Fix crash when freeing instances with event triggers + - tracing: Make the snapshot trigger work with instances + - selinux: KASAN: slab-out-of-bounds in xattr_getsecurity + - cfg80211: further limit wiphy names to 64 bytes + - drm/amd/powerplay: Fix enum mismatch + - rtlwifi: rtl8192cu: Remove variable self-assignment in rf.c + - platform/chrome: cros_ec_lpc: remove redundant pointer request + - kbuild: clang: disable unused variable warnings only when constant + - tcp: avoid integer overflows in tcp_rcv_space_adjust() + - iio: ad7793: implement IIO_CHAN_INFO_SAMP_FREQ + - iio:buffer: make length types match kfifo types + - iio:kfifo_buf: check for uint overflow + - iio: adc: select buffer for at91-sama5d2_adc + - MIPS: lantiq: gphy: Drop reboot/remove reset asserts + - MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs + - MIPS: prctl: Disallow FRE without FR with PR_SET_FP_MODE requests + - scsi: scsi_transport_srp: Fix shost to rport translation + - stm class: Use vmalloc for the master map + - hwtracing: stm: fix build error on some arches + - IB/core: Fix error code for invalid GID entry + - mm/huge_memory.c: __split_huge_page() use atomic ClearPageDirty() + - Revert "rt2800: use TXOP_BACKOFF for probe frames" + - intel_th: Use correct device when freeing buffers + - drm/psr: Fix missed entry in PSR setup time table. + - drm/i915/lvds: Move acpi lid notification registration to registration phase + - drm/i915: Disable LVDS on Radiant P845 + - drm/vmwgfx: Use kasprintf + - drm/vmwgfx: Fix host logging / guestinfo reading error paths + - nvme: fix extended data LBA supported setting + - iio: hid-sensor-trigger: Fix sometimes not powering up the sensor after + resume + - x86/MCE/AMD: Define a function to get SMCA bank type + - x86/mce/AMD: Pass the bank number to smca_get_bank_type() + - x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type + - x86/mce/AMD: Carve out SMCA get_block_address() code + - x86/MCE/AMD: Cache SMCA MISC block addresses + + * errors when scanning partition table of corrupted AIX disk (LP: #1787281) + - partitions/aix: fix usage of uninitialized lv_info and lvname structures + - partitions/aix: append null character to print data from disk + + * tlbie master timeout checkstop (using NVidia/GPU) (LP: #1789772) + - powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call + __ptep_set_access_flags directly + - powerpc/mm/radix: Move function from radix.h to pgtable-radix.c + - powerpc/mm: Change function prototype + - powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang + + * performance drop with ATS enabled (LP: #1788097) + - powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage + + * [Regression] kernel crashdump fails on arm64 (LP: #1786878) + - arm64: export memblock_reserve()d regions via /proc/iomem + - drivers: acpi: add dependency of EFI for arm64 + - efi/arm: preserve early mapping of UEFI memory map longer for BGRT + - efi/arm: map UEFI memory map even w/o runtime services enabled + - arm64: acpi: fix alignment fault in accessing ACPI + - [Config] CONFIG_ARCH_SUPPORTS_ACPI=y + - arm64: fix ACPI dependencies + - ACPI: fix menuconfig presentation of ACPI submenu + + * TB 16 issue on Dell Lattitude 7490 with large amount of data (LP: #1785780) + - r8152: disable RX aggregation on new Dell TB16 dock + + * dell_wmi: Unknown key codes (LP: #1762385) + - platform/x86: dell-wmi: Ignore new rfkill and fn-lock events + + * Enable AMD PCIe MP2 for AMDI0011 (LP: #1773940) + - SAUCE: i2c:amd I2C Driver based on PCI Interface for upcoming platform + - SAUCE: i2c:amd move out pointer in union i2c_event_base + - SAUCE: i2c:amd Depends on ACPI + - [Config] i2c: CONFIG_I2C_AMD_MP2=y on x86 + + * r8169 no internet after suspending (LP: #1779817) + - r8169: restore previous behavior to accept BIOS WoL settings + - r8169: don't use MSI-X on RTL8168g + - r8169: don't use MSI-X on RTL8106e + + * Fix Intel Cannon Lake LPSS I2C input clock (LP: #1789790) + - mfd: intel-lpss: Fix Intel Cannon Lake LPSS I2C input clock + + * Microphone cannot be detected with front panel audio combo jack on HP Z8-G4 + machine (LP: #1789145) + - ALSA: hda/realtek - Fix HP Headset Mic can't record + + * Tango platform uses __initcall without further checks (LP: #1787945) + - [Config] disable ARCH_TANGO + + * [18.10 FEAT] Add kernel config option "CONFIG_SCLP_OFB" (LP: #1787898) + - [Config] CONFIG_SCLP_OFB=y for s390x + + -- Kleber Sacilotto de Souza Wed, 12 Sep 2018 11:39:17 +0200 + +linux (4.15.0-34.37) bionic; urgency=medium + + * linux: 4.15.0-34.37 -proposed tracker (LP: #1788744) + + * Bionic update: upstream stable patchset 2018-08-09 (LP: #1786352) + - MIPS: c-r4k: Fix data corruption related to cache coherence + - MIPS: ptrace: Expose FIR register through FP regset + - MIPS: Fix ptrace(2) PTRACE_PEEKUSR and PTRACE_POKEUSR accesses to o32 FGRs + - KVM: Fix spelling mistake: "cop_unsuable" -> "cop_unusable" + - affs_lookup(): close a race with affs_remove_link() + - fs: don't scan the inode cache before SB_BORN is set + - aio: fix io_destroy(2) vs. lookup_ioctx() race + - ALSA: timer: Fix pause event notification + - do d_instantiate/unlock_new_inode combinations safely + - mmc: sdhci-iproc: remove hard coded mmc cap 1.8v + - mmc: sdhci-iproc: fix 32bit writes for TRANSFER_MODE register + - mmc: sdhci-iproc: add SDHCI_QUIRK2_HOST_OFF_CARD_ON for cygnus + - libata: Blacklist some Sandisk SSDs for NCQ + - libata: blacklist Micron 500IT SSD with MU01 firmware + - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent + - drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros + - arm64: lse: Add early clobbers to some input/output asm operands + - powerpc/64s: Clear PCR on boot + - IB/hfi1: Use after free race condition in send context error path + - IB/umem: Use the correct mm during ib_umem_release + - idr: fix invalid ptr dereference on item delete + - Revert "ipc/shm: Fix shmat mmap nil-page protection" + - ipc/shm: fix shmat() nil address after round-down when remapping + - mm/kasan: don't vfree() nonexistent vm_area + - kasan: free allocated shadow memory on MEM_CANCEL_ONLINE + - kasan: fix memory hotplug during boot + - kernel/sys.c: fix potential Spectre v1 issue + - KVM: s390: vsie: fix < 8k check for the itdba + - KVM: x86: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed + - kvm: x86: IA32_ARCH_CAPABILITIES is always supported + - powerpc/64s: Improve RFI L1-D cache flush fallback + - powerpc/pseries: Restore default security feature flags on setup + - powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() + - MIPS: generic: Fix machine compatible matching + - mac80211: mesh: fix wrong mesh TTL offset calculation + - ARC: Fix malformed ARC_EMUL_UNALIGNED default + - ptr_ring: prevent integer overflow when calculating size + - arm64: dts: rockchip: fix rock64 gmac2io stability issues + - arm64: dts: rockchip: correct ep-gpios for rk3399-sapphire + - libata: Fix compile warning with ATA_DEBUG enabled + - selftests: sync: missing CFLAGS while compiling + - selftest/vDSO: fix O= + - selftests: pstore: Adding config fragment CONFIG_PSTORE_RAM=m + - selftests: memfd: add config fragment for fuse + - ARM: OMAP2+: timer: fix a kmemleak caused in omap_get_timer_dt + - ARM: OMAP3: Fix prm wake interrupt for resume + - ARM: OMAP2+: Fix sar_base inititalization for HS omaps + - ARM: OMAP1: clock: Fix debugfs_create_*() usage + - tls: retrun the correct IV in getsockopt + - xhci: workaround for AMD Promontory disabled ports wakeup + - IB/uverbs: Fix method merging in uverbs_ioctl_merge + - IB/uverbs: Fix possible oops with duplicate ioctl attributes + - IB/uverbs: Fix unbalanced unlock on error path for rdma_explicit_destroy + - arm64: dts: rockchip: Fix DWMMC clocks + - ARM: dts: rockchip: Fix DWMMC clocks + - iwlwifi: mvm: fix security bug in PN checking + - iwlwifi: mvm: fix IBSS for devices that support station type API + - iwlwifi: mvm: always init rs with 20mhz bandwidth rates + - NFC: llcp: Limit size of SDP URI + - rxrpc: Work around usercopy check + - MD: Free bioset when md_run fails + - md: fix md_write_start() deadlock w/o metadata devices + - s390/dasd: fix handling of internal requests + - xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos + - mac80211: round IEEE80211_TX_STATUS_HEADROOM up to multiple of 4 + - mac80211: fix a possible leak of station stats + - mac80211: fix calling sleeping function in atomic context + - cfg80211: clear wep keys after disconnection + - mac80211: Do not disconnect on invalid operating class + - mac80211: Fix sending ADDBA response for an ongoing session + - gpu: ipu-v3: pre: fix device node leak in ipu_pre_lookup_by_phandle + - gpu: ipu-v3: prg: fix device node leak in ipu_prg_lookup_by_phandle + - md raid10: fix NULL deference in handle_write_completed() + - drm/exynos: g2d: use monotonic timestamps + - drm/exynos: fix comparison to bitshift when dealing with a mask + - drm/meson: fix vsync buffer update + - arm64: perf: correct PMUVer probing + - RDMA/bnxt_re: Unpin SQ and RQ memory if QP create fails + - RDMA/bnxt_re: Fix system crash during load/unload + - net/mlx5e: Return error if prio is specified when offloading eswitch vlan + push + - locking/xchg/alpha: Add unconditional memory barrier to cmpxchg() + - md: raid5: avoid string overflow warning + - virtio_net: fix XDP code path in receive_small() + - kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE + - bug.h: work around GCC PR82365 in BUG() + - selftests/memfd: add run_fuse_test.sh to TEST_FILES + - seccomp: add a selftest for get_metadata + - soc: imx: gpc: de-register power domains only if initialized + - powerpc/bpf/jit: Fix 32-bit JIT for seccomp_data access + - s390/cio: fix ccw_device_start_timeout API + - s390/cio: fix return code after missing interrupt + - s390/cio: clear timer when terminating driver I/O + - selftests/bpf/test_maps: exit child process without error in ENOMEM case + - PKCS#7: fix direct verification of SignerInfo signature + - arm64: dts: cavium: fix PCI bus dtc warnings + - nfs: system crashes after NFS4ERR_MOVED recovery + - ARM: OMAP: Fix dmtimer init for omap1 + - smsc75xx: fix smsc75xx_set_features() + - regulatory: add NUL to request alpha2 + - integrity/security: fix digsig.c build error with header file + - x86/intel_rdt: Fix incorrect returned value when creating rdgroup sub- + directory in resctrl file system + - locking/xchg/alpha: Fix xchg() and cmpxchg() memory ordering bugs + - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across + CPU hotplug operations + - mac80211: drop frames with unexpected DS bits from fast-rx to slow path + - arm64: fix unwind_frame() for filtered out fn for function graph tracing + - macvlan: fix use-after-free in macvlan_common_newlink() + - KVM: nVMX: Don't halt vcpu when L1 is injecting events to L2 + - kvm: fix warning for CONFIG_HAVE_KVM_EVENTFD builds + - ARM: dts: imx6dl: Include correct dtsi file for Engicam i.CoreM6 + DualLite/Solo RQS + - fs: dcache: Avoid livelock between d_alloc_parallel and __d_add + - fs: dcache: Use READ_ONCE when accessing i_dir_seq + - md: fix a potential deadlock of raid5/raid10 reshape + - md/raid1: fix NULL pointer dereference + - batman-adv: fix packet checksum in receive path + - batman-adv: invalidate checksum on fragment reassembly + - netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct + refcount + - netfilter: ipt_CLUSTERIP: put config instead of freeing it + - netfilter: ebtables: convert BUG_ONs to WARN_ONs + - batman-adv: Ignore invalid batadv_iv_gw during netlink send + - batman-adv: Ignore invalid batadv_v_gw during netlink send + - batman-adv: Fix netlink dumping of BLA claims + - batman-adv: Fix netlink dumping of BLA backbones + - nvme-pci: Fix nvme queue cleanup if IRQ setup fails + - clocksource/drivers/fsl_ftm_timer: Fix error return checking + - libceph, ceph: avoid memory leak when specifying same option several times + - ceph: fix dentry leak when failing to init debugfs + - xen/pvcalls: fix null pointer dereference on map->sock + - ARM: orion5x: Revert commit 4904dbda41c8. + - qrtr: add MODULE_ALIAS macro to smd + - selftests/futex: Fix line continuation in Makefile + - r8152: fix tx packets accounting + - virtio-gpu: fix ioctl and expose the fixed status to userspace. + - dmaengine: rcar-dmac: fix max_chunk_size for R-Car Gen3 + - bcache: fix kcrashes with fio in RAID5 backend dev + - ip_gre: fix IFLA_MTU ignored on NEWLINK + - ip6_tunnel: fix IFLA_MTU ignored on NEWLINK + - sit: fix IFLA_MTU ignored on NEWLINK + - nbd: fix return value in error handling path + - ARM: dts: NSP: Fix amount of RAM on BCM958625HR + - ARM: dts: bcm283x: Fix unit address of local_intc + - powerpc/boot: Fix random libfdt related build errors + - clocksource/drivers/mips-gic-timer: Use correct shift count to extract data + - gianfar: Fix Rx byte accounting for ndev stats + - net/tcp/illinois: replace broken algorithm reference link + - nvmet: fix PSDT field check in command format + - net/smc: use link_id of server in confirm link reply + - mlxsw: core: Fix flex keys scratchpad offset conflict + - mlxsw: spectrum: Treat IPv6 unregistered multicast as broadcast + - spectrum: Reference count VLAN entries + - ARC: mcip: halt GFRC counter when ARC cores halt + - ARC: mcip: update MCIP debug mask when the new cpu came online + - ARC: setup cpu possible mask according to possible-cpus dts property + - ipvs: remove IPS_NAT_MASK check to fix passive FTP + - IB/mlx: Set slid to zero in Ethernet completion struct + - RDMA/bnxt_re: Unconditionly fence non wire memory operations + - RDMA/bnxt_re: Fix incorrect DB offset calculation + - RDMA/bnxt_re: Fix the ib_reg failure cleanup + - xen/pirq: fix error path cleanup when binding MSIs + - drm/amd/amdgpu: Correct VRAM width for APUs with GMC9 + - xfrm: Fix ESN sequence number handling for IPsec GSO packets. + - arm64: dts: rockchip: Fix rk3399-gru-* s2r (pinctrl hogs, wifi reset) + - drm/sun4i: Fix dclk_set_phase + - btrfs: use kvzalloc to allocate btrfs_fs_info + - Btrfs: send, fix issuing write op when processing hole in no data mode + - Btrfs: fix log replay failure after linking special file and fsync + - ceph: fix potential memory leak in init_caches() + - block: display the correct diskname for bio + - selftests/powerpc: Skip the subpage_prot tests if the syscall is unavailable + - net: ethtool: don't ignore return from driver get_fecparam method + - iwlwifi: mvm: fix TX of CCMP 256 + - iwlwifi: mvm: Fix channel switch for count 0 and 1 + - iwlwifi: mvm: fix assert 0x2B00 on older FWs + - iwlwifi: avoid collecting firmware dump if not loaded + - iwlwifi: mvm: Direct multicast frames to the correct station + - iwlwifi: mvm: Correctly set the tid for mcast queue + - rds: Incorrect reference counting in TCP socket creation + - watchdog: f71808e_wdt: Fix magic close handling + - batman-adv: Fix multicast packet loss with a single WANT_ALL_IPV4/6 flag + - hv_netvsc: use napi_schedule_irqoff + - hv_netvsc: filter multicast/broadcast + - hv_netvsc: propagate rx filters to VF + - ARM: dts: rockchip: Add missing #sound-dai-cells on rk3288 + - e1000e: Fix check_for_link return value with autoneg off + - e1000e: allocate ring descriptors with dma_zalloc_coherent + - ia64/err-inject: Use get_user_pages_fast() + - RDMA/qedr: Fix kernel panic when running fio over NFSoRDMA + - RDMA/qedr: Fix iWARP write and send with immediate + - IB/mlx4: Fix corruption of RoCEv2 IPv4 GIDs + - IB/mlx4: Include GID type when deleting GIDs from HW table under RoCE + - IB/mlx5: Fix an error code in __mlx5_ib_modify_qp() + - fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in + sbusfb_ioctl_helper(). + - fsl/fman: avoid sleeping in atomic context while adding an address + - qed: Free RoCE ILT Memory on rmmod qedr + - net: qcom/emac: Use proper free methods during TX + - net: smsc911x: Fix unload crash when link is up + - IB/core: Fix possible crash to access NULL netdev + - cxgb4: do not set needs_free_netdev for mgmt dev's + - xen-blkfront: move negotiate_mq to cover all cases of new VBDs + - xen: xenbus: use put_device() instead of kfree() + - hv_netvsc: fix filter flags + - hv_netvsc: fix locking for rx_mode + - hv_netvsc: fix locking during VF setup + - ARM: davinci: fix the GPIO lookup for omapl138-hawk + - arm64: Relax ARM_SMCCC_ARCH_WORKAROUND_1 discovery + - selftests/vm/run_vmtests: adjust hugetlb size according to nr_cpus + - lib/test_kmod.c: fix limit check on number of test devices created + - dmaengine: mv_xor_v2: Fix clock resource by adding a register clock + - netfilter: ebtables: fix erroneous reject of last rule + - can: m_can: change comparison to bitshift when dealing with a mask + - can: m_can: select pinctrl state in each suspend/resume function + - bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa(). + - workqueue: use put_device() instead of kfree() + - ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu + - sunvnet: does not support GSO for sctp + - KVM: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending + - gpu: ipu-v3: prg: avoid possible array underflow + - drm/imx: move arming of the vblank event to atomic_flush + - drm/nouveau/bl: fix backlight regression + - xfrm: fix rcu_read_unlock usage in xfrm_local_error + - iwlwifi: mvm: set the correct tid when we flush the MCAST sta + - iwlwifi: mvm: Correctly set IGTK for AP + - iwlwifi: mvm: fix error checking for multi/broadcast sta + - net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off + - vlan: Fix out of order vlan headers with reorder header off + - batman-adv: fix header size check in batadv_dbg_arp() + - batman-adv: Fix skbuff rcsum on packet reroute + - vti4: Don't count header length twice on tunnel setup + - ip_tunnel: Clamp MTU to bounds on new link + - vti6: Fix dev->max_mtu setting + - iwlwifi: mvm: Increase session protection time after CS + - iwlwifi: mvm: clear tx queue id when unreserving aggregation queue + - iwlwifi: mvm: make sure internal station has a valid id + - iwlwifi: mvm: fix array out of bounds reference + - drm/tegra: Shutdown on driver unbind + - perf/cgroup: Fix child event counting bug + - brcmfmac: Fix check for ISO3166 code + - kbuild: make scripts/adjust_autoksyms.sh robust against timestamp races + - RDMA/ucma: Correct option size check using optlen + - RDMA/qedr: fix QP's ack timeout configuration + - RDMA/qedr: Fix rc initialization on CNQ allocation failure + - RDMA/qedr: Fix QP state initialization race + - net/sched: fix idr leak on the error path of tcf_bpf_init() + - net/sched: fix idr leak in the error path of tcf_simp_init() + - net/sched: fix idr leak in the error path of tcf_act_police_init() + - net/sched: fix idr leak in the error path of tcp_pedit_init() + - net/sched: fix idr leak in the error path of __tcf_ipt_init() + - net/sched: fix idr leak in the error path of tcf_skbmod_init() + - net: dsa: Fix functional dsa-loop dependency on FIXED_PHY + - drm/ast: Fixed 1280x800 Display Issue + - mm/mempolicy.c: avoid use uninitialized preferred_node + - mm, thp: do not cause memcg oom for thp + - xfrm: Fix transport mode skb control buffer usage. + - selftests: ftrace: Add probe event argument syntax testcase + - selftests: ftrace: Add a testcase for string type with kprobe_event + - selftests: ftrace: Add a testcase for probepoint + - drm/amdkfd: Fix scratch memory with HWS enabled + - batman-adv: fix multicast-via-unicast transmission with AP isolation + - batman-adv: fix packet loss for broadcasted DHCP packets to a server + - ARM: 8748/1: mm: Define vdso_start, vdso_end as array + - lan78xx: Set ASD in MAC_CR when EEE is enabled. + - net: qmi_wwan: add BroadMobi BM806U 2020:2033 + - bonding: fix the err path for dev hwaddr sync in bond_enslave + - net: dsa: mt7530: fix module autoloading for OF platform drivers + - net/mlx5: Make eswitch support to depend on switchdev + - perf/x86/intel: Fix linear IP of PEBS real_ip on Haswell and later CPUs + - x86/alternatives: Fixup alternative_call_2 + - llc: properly handle dev_queue_xmit() return value + - builddeb: Fix header package regarding dtc source links + - qede: Fix barrier usage after tx doorbell write. + - mm, slab: memcg_link the SLAB's kmem_cache + - mm/page_owner: fix recursion bug after changing skip entries + - mm/kmemleak.c: wait for scan completion before disabling free + - hv_netvsc: enable multicast if necessary + - qede: Do not drop rx-checksum invalidated packets. + - net: Fix untag for vlan packets without ethernet header + - vlan: Fix vlan insertion for packets without ethernet header + - net: mvneta: fix enable of all initialized RXQs + - sh: fix debug trap failure to process signals before return to user + - firmware: dmi_scan: Fix UUID length safety check + - nvme: don't send keep-alives to the discovery controller + - Btrfs: clean up resources during umount after trans is aborted + - Btrfs: fix loss of prealloc extents past i_size after fsync log replay + - x86/pgtable: Don't set huge PUD/PMD on non-leaf entries + - fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl + table + - swap: divide-by-zero when zero length swap file on ssd + - z3fold: fix memory leak + - sr: get/drop reference to device in revalidate and check_events + - Force log to disk before reading the AGF during a fstrim + - cpufreq: CPPC: Initialize shared perf capabilities of CPUs + - powerpc/fscr: Enable interrupts earlier before calling get_user() + - perf tools: Fix perf builds with clang support + - perf clang: Add support for recent clang versions + - dp83640: Ensure against premature access to PHY registers after reset + - ibmvnic: Zero used TX descriptor counter on reset + - mm/ksm: fix interaction with THP + - mm: fix races between address_space dereference and free in page_evicatable + - mm: thp: fix potential clearing to referenced flag in + page_idle_clear_pte_refs_one() + - Btrfs: bail out on error during replay_dir_deletes + - Btrfs: fix NULL pointer dereference in log_dir_items + - btrfs: Fix possible softlock on single core machines + - IB/rxe: Fix for oops in rxe_register_device on ppc64le arch + - ocfs2/dlm: don't handle migrate lockres if already in shutdown + - powerpc/64s/idle: Fix restore of AMOR on POWER9 after deep sleep + - sched/rt: Fix rq->clock_update_flags < RQCF_ACT_SKIP warning + - x86/mm: Fix bogus warning during EFI bootup, use boot_cpu_has() instead of + this_cpu_has() in build_cr3_noflush() + - KVM: VMX: raise internal error for exception during invalid protected mode + state + - lan78xx: Connect phy early + - sparc64: Make atomic_xchg() an inline function rather than a macro. + - net: bgmac: Fix endian access in bgmac_dma_tx_ring_free() + - net: bgmac: Correctly annotate register space + - btrfs: tests/qgroup: Fix wrong tree backref level + - Btrfs: fix copy_items() return value when logging an inode + - btrfs: fix lockdep splat in btrfs_alloc_subvolume_writers + - btrfs: qgroup: Fix root item corruption when multiple same source snapshots + are created with quota enabled + - rxrpc: Fix Tx ring annotation after initial Tx failure + - rxrpc: Don't treat call aborts as conn aborts + - xen/acpi: off by one in read_acpi_id() + - drivers: macintosh: rack-meter: really fix bogus memsets + - ACPI: acpi_pad: Fix memory leak in power saving threads + - powerpc/mpic: Check if cpu_possible() in mpic_physmask() + - ieee802154: ca8210: fix uninitialised data read + - ath10k: advertize beacon_int_min_gcd + - iommu/amd: Take into account that alloc_dev_data() may return NULL + - intel_th: Use correct method of finding hub + - m68k: set dma and coherent masks for platform FEC ethernets + - iwlwifi: mvm: check if mac80211_queue is valid in iwl_mvm_disable_txq + - parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode + - hwmon: (nct6775) Fix writing pwmX_mode + - powerpc/perf: Prevent kernel address leak to userspace via BHRB buffer + - powerpc/perf: Fix kernel address leak via sampling registers + - rsi: fix kernel panic observed on 64bit machine + - tools/thermal: tmon: fix for segfault + - selftests: Print the test we're running to /dev/kmsg + - net/mlx5: Protect from command bit overflow + - watchdog: davinci_wdt: fix error handling in davinci_wdt_probe() + - ath10k: Fix kernel panic while using worker (ath10k_sta_rc_update_wk) + - nvme-pci: disable APST for Samsung NVMe SSD 960 EVO + ASUS PRIME Z370-A + - ath9k: fix crash in spectral scan + - cxgb4: Setup FW queues before registering netdev + - ima: Fix Kconfig to select TPM 2.0 CRB interface + - ima: Fallback to the builtin hash algorithm + - watchdog: aspeed: Allow configuring for alternate boot + - arm: dts: socfpga: fix GIC PPI warning + - ext4: don't complain about incorrect features when probing + - drm/vmwgfx: Unpin the screen object backup buffer when not used + - iommu/mediatek: Fix protect memory setting + - cpufreq: cppc_cpufreq: Fix cppc_cpufreq_init() failure path + - IB/mlx5: Set the default active rate and width to QDR and 4X + - zorro: Set up z->dev.dma_mask for the DMA API + - bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set + - remoteproc: imx_rproc: Fix an error handling path in 'imx_rproc_probe()' + - dt-bindings: add device tree binding for Allwinner H6 main CCU + - ACPICA: Events: add a return on failure from acpi_hw_register_read + - ACPICA: Fix memory leak on unusual memory leak + - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c + - cxgb4: Fix queue free path of ULD drivers + - i2c: mv64xxx: Apply errata delay only in standard mode + - KVM: lapic: stop advertising DIRECTED_EOI when in-kernel IOAPIC is in use + - perf top: Fix top.call-graph config option reading + - perf stat: Fix core dump when flag T is used + - IB/core: Honor port_num while resolving GID for IB link layer + - drm/amdkfd: add missing include of mm.h + - coresight: Use %px to print pcsr instead of %p + - regulator: gpio: Fix some error handling paths in 'gpio_regulator_probe()' + - spi: bcm-qspi: fIX some error handling paths + - net/smc: pay attention to MAX_ORDER for CQ entries + - MIPS: ath79: Fix AR724X_PLL_REG_PCIE_CONFIG offset + - watchdog: dw: RMW the control register + - watchdog: aspeed: Fix translation of reset mode to ctrl register + - drm/meson: Fix some error handling paths in 'meson_drv_bind_master()' + - drm/meson: Fix an un-handled error path in 'meson_drv_bind_master()' + - powerpc: Add missing prototype for arch_irq_work_raise() + - f2fs: fix to set KEEP_SIZE bit in f2fs_zero_range + - f2fs: fix to clear CP_TRIMMED_FLAG + - f2fs: fix to check extent cache in f2fs_drop_extent_tree + - perf/core: Fix installing cgroup events on CPU + - max17042: propagate of_node to power supply device + - perf/core: Fix perf_output_read_group() + - drm/panel: simple: Fix the bus format for the Ontat panel + - hwmon: (pmbus/max8688) Accept negative page register values + - hwmon: (pmbus/adm1275) Accept negative page register values + - perf/x86/intel: Properly save/restore the PMU state in the NMI handler + - cdrom: do not call check_disk_change() inside cdrom_open() + - efi/arm*: Only register page tables when they exist + - perf/x86/intel: Fix large period handling on Broadwell CPUs + - perf/x86/intel: Fix event update for auto-reload + - arm64: dts: qcom: Fix SPI5 config on MSM8996 + - soc: qcom: wcnss_ctrl: Fix increment in NV upload + - gfs2: Fix fallocate chunk size + - x86/devicetree: Initialize device tree before using it + - x86/devicetree: Fix device IRQ settings in DT + - phy: rockchip-emmc: retry calpad busy trimming + - ALSA: vmaster: Propagate slave error + - phy: qcom-qmp: Fix phy pipe clock gating + - drm/bridge: sii902x: Retry status read after DDI I2C + - tools: hv: fix compiler warnings about major/target_fname + - block: null_blk: fix 'Invalid parameters' when loading module + - dmaengine: pl330: fix a race condition in case of threaded irqs + - dmaengine: rcar-dmac: Check the done lists in rcar_dmac_chan_get_residue() + - enic: enable rq before updating rq descriptors + - watchdog: asm9260_wdt: fix error handling in asm9260_wdt_probe() + - hwrng: stm32 - add reset during probe + - pinctrl: devicetree: Fix dt_to_map_one_config handling of hogs + - pinctrl: artpec6: dt: add missing pin group uart5nocts + - vfio-ccw: fence off transport mode + - dmaengine: qcom: bam_dma: get num-channels and num-ees from dt + - drm: omapdrm: dss: Move initialization code from component bind to probe + - ARM: dts: dra71-evm: Correct evm_sd regulator max voltage + - drm/amdgpu: disable GFX ring and disable PQ wptr in hw_fini + - drm/amdgpu: adjust timeout for ib_ring_tests(v2) + - net: stmmac: ensure that the device has released ownership before reading + data + - net: stmmac: ensure that the MSS desc is the last desc to set the own bit + - cpufreq: Reorder cpufreq_online() error code path + - dpaa_eth: fix SG mapping + - PCI: Add function 1 DMA alias quirk for Marvell 88SE9220 + - udf: Provide saner default for invalid uid / gid + - ixgbe: prevent ptp_rx_hang from running when in FILTER_ALL mode + - sh_eth: fix TSU init on SH7734/R8A7740 + - power: supply: ltc2941-battery-gauge: Fix temperature units + - ARM: dts: bcm283x: Fix probing of bcm2835-i2s + - ARM: dts: bcm283x: Fix pin function of JTAG pins + - PCMCIA / PM: Avoid noirq suspend aborts during suspend-to-idle + - audit: return on memory error to avoid null pointer dereference + - net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() + - rcu: Call touch_nmi_watchdog() while printing stall warnings + - pinctrl: sh-pfc: r8a7796: Fix MOD_SEL register pin assignment for SSI pins + group + - dpaa_eth: fix pause capability advertisement logic + - MIPS: Octeon: Fix logging messages with spurious periods after newlines + - drm/rockchip: Respect page offset for PRIME mmap calls + - x86/apic: Set up through-local-APIC mode on the boot CPU if 'noapic' + specified + - perf test: Fix test case inet_pton to accept inlines. + - perf report: Fix wrong jump arrow + - perf tests: Use arch__compare_symbol_names to compare symbols + - perf report: Fix memory corruption in --branch-history mode --branch-history + - perf tests: Fix dwarf unwind for stripped binaries + - selftests/net: fixes psock_fanout eBPF test case + - netlabel: If PF_INET6, check sk_buff ip header version + - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen3 + - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen2 + - ARM: dts: at91: tse850: use the correct compatible for the eeprom + - regmap: Correct comparison in regmap_cached + - i40e: Add delay after EMP reset for firmware to recover + - ARM: dts: imx7d: cl-som-imx7: fix pinctrl_enet + - ARM: dts: porter: Fix HDMI output routing + - regulator: of: Add a missing 'of_node_put()' in an error handling path of + 'of_regulator_match()' + - pinctrl: mcp23s08: spi: Fix regmap debugfs entries + - kdb: make "mdr" command repeat + - drm/vmwgfx: Set dmabuf_size when vmw_dmabuf_init is successful + - perf tools: Add trace/beauty/generated/ into .gitignore + - tools: sync up .h files with the repective arch and uapi .h files + - MIPS: xilfpga: Stop generating useless dtb.o + - MIPS: xilfpga: Actually include FDT in fitImage + - MIPS: Fix build with DEBUG_ZBOOT and MACH_JZ4770 + - fix breakage caused by d_find_alias() semantics change + - Btrfs: fix error handling in btrfs_truncate() + - mmc: block: propagate correct returned value in mmc_rpmb_ioctl + - arm64: export tishift functions to modules + - bcma: fix buffer size caused crash in bcma_core_mips_print_irq() + - PM / core: Fix direct_complete handling for devices with no callbacks + - ARM: dts: sun4i: Fix incorrect clocks for displays + - bnxt_en: Ignore src port field in decap filter nodes + - kasan, slub: fix handling of kasan_slab_free hook + - riscv/spinlock: Strengthen implementations with fences + - platform/x86: dell-smbios: Fix memory leaks in build_tokens_sysfs() + - rxrpc: Fix resend event time calculation + - i40e: hold the RTNL lock while changing interrupt schemes + - hv_netvsc: Fix the return status in RX path + - firmware: fix checking for return values for fw_add_devm_name() + - bcache: set writeback_rate_update_seconds in range [1, 60] seconds + - bcache: fix cached_dev->count usage for bch_cache_set_error() + - bcache: stop dc->writeback_rate_update properly + - ibmvnic: Fix reset return from closed state + - powerpc/vas: Fix cleanup when VAS is not configured + - f2fs: flush cp pack except cp pack 2 page at first + - drm/amdgpu: Clean sdma wptr register when only enable wptr polling + - powerpc/mm/slice: Remove intermediate bitmap copy + - powerpc/mm/slice: create header files dedicated to slices + - powerpc/mm/slice: Enhance for supporting PPC32 + - powerpc/mm/slice: Fix hugepage allocation at hint address on 8xx + - ibmvnic: Allocate statistics buffers during probe + - dt-bindings: display: msm/dsi: Fix the PHY regulator supply props + - drm/amd/display: Set vsc pack revision when DPCD revision is >= 1.2 + - soc: renesas: r8a77970-sysc: fix power area parents + - drm/vblank: Data type fixes for 64-bit vblank sequences. + - selftests: Add FIB onlink tests + - soc: amlogic: meson-gx-pwrc-vpu: fix error on shutdown when domain is + powered off + + * arm-smmu-v3 arm-smmu-v3.1.auto: failed to allocate MSIs (LP: #1785282) + - ACPICA: iasl: Add SMMUv3 device ID mapping index support + - ACPI/IORT: Remove temporary iort_get_id_mapping_index() ACPICA guard + + * Driver iwlwifi for Intel Wireless-AC 9560 is slow and unreliable in kernel + 4.15.0-20-generic (LP: #1772467) + - scsi: hpsa: disable device during shutdown + + * [Bionic] i2c: xlp9xx: Add SMBAlert support (LP: #1786981) + - i2c: xlp9xx: Add support for SMBAlert + + * qeth: don't clobber buffer on async TX completion (LP: #1786057) + - s390/qeth: don't clobber buffer on async TX completion + + * Linux 4.15.0-23 crashes during the boot process with a "Unable to handle + kernel NULL pointer dereference" message (LP: #1777338) + - x86/xen: Add call of speculative_store_bypass_ht_init() to PV paths + + * ThinkPad systems have no HDMI sound when using the nvidia GPU (LP: #1787058) + - ACPI / OSI: Add OEM _OSI string to enable NVidia HDMI audio + + * [Bionic] i2c: xlp9xx: Fix case where SSIF read transaction completes early + (LP: #1787240) + - i2c: xlp9xx: Fix case where SSIF read transaction completes early + + * [Bionic] integrate upstream fix for Cavium zram driver (LP: #1787469) + - Revert "UBUNTU: SAUCE: crypto: thunderx_zip: Fix fallout from + CONFIG_VMAP_STACK" + - crypto: cavium - Fix fallout from CONFIG_VMAP_STACK + - crypto: cavium - Limit result reading attempts + - crypto: cavium - Prevent division by zero + - crypto: cavium - Fix statistics pending request value + - crypto: cavium - Fix smp_processor_id() warnings + + * Bugfix for handling of shadow doorbell buffer (LP: #1788222) + - nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event + + * nvme devices namespace assigned to the wrong controller (LP: #1789227) + - nvme/multipath: Fix multipath disabled naming collisions + + * linux-cloud-tools-common: Ensure hv-kvp-daemon.service starts before + walinuxagent.service (LP: #1739107) + - [Debian] hyper-v -- Ensure that hv-kvp-daemon.service starts before + walinuxagent.service + + * hinic interfaces aren't getting predictable names (LP: #1783138) + - hinic: Link the logical network device to the pci device in sysfs + + * Suspend fails in Ubuntu and Kubuntu 18.04 but works fine in Ubuntu and + Kubuntu 17.10 (and on Kubuntu 18.04 using kernel 4.14.47) (LP: #1774950) + - ACPI / LPSS: Avoid PM quirks on suspend and resume from S3 + - ACPI / LPSS: Avoid PM quirks on suspend and resume from hibernation + + * [Bionic] Bluetooth: Support RTL8723D and RTL8821C Devices (LP: #1784835) + - Bluetooth: btrtl: Add RTL8723D and RTL8821C devices + + * CacheFiles: Error: Overlong wait for old active object to go away. + (LP: #1776254) + - cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE flag + - cachefiles: Wait rather than BUG'ing on "Unexpected object collision" + + * fscache cookie refcount updated incorrectly during fscache object allocation + (LP: #1776277) // fscache cookie refcount updated incorrectly during fscache + object allocation (LP: #1776277) + - fscache: Fix reference overput in fscache_attach_object() error handling + + * FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false (LP: #1774336) + - Revert "UBUNTU: SAUCE: CacheFiles: fix a read_waiter/read_copier race" + - fscache: Allow cancelled operations to be enqueued + - cachefiles: Fix refcounting bug in backing-file read monitoring + + * SMB3: Fix regression in server reconnect detection (LP: #1786110) + - smb3: on reconnect set PreviousSessionId field + + * CVE-2018-1118 + - vhost: fix info leak due to uninitialized memory + + -- Kleber Sacilotto de Souza Mon, 27 Aug 2018 16:45:36 +0200 + +linux (4.15.0-33.36) bionic; urgency=medium + + * linux: 4.15.0-33.36 -proposed tracker (LP: #1787149) + + * RTNL assertion failure on ipvlan (LP: #1776927) + - ipvlan: drop ipv6 dependency + - ipvlan: use per device spinlock to protect addrs list updates + - SAUCE: fix warning from "ipvlan: drop ipv6 dependency" + + * ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941) + - test_bpf: flag tests that cannot be jited on s390 + + * HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689) + - drm/nouveau: fix nouveau_dsm_get_client_id()'s return type + - drm/radeon: fix radeon_atpx_get_client_id()'s return type + - drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type + - platform/x86: apple-gmux: fix gmux_get_client_id()'s return type + - ALSA: hda: use PCI_BASE_CLASS_DISPLAY to replace PCI_CLASS_DISPLAY_VGA + - vga_switcheroo: set audio client id according to bound GPU id + + * locking sockets broken due to missing AppArmor socket mediation patches + (LP: #1780227) + - UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets + + * Update2 for ocxl driver (LP: #1781436) + - ocxl: Fix page fault handler in case of fault on dying process + + * netns: unable to follow an interface that moves to another netns + (LP: #1774225) + - net: core: Expose number of link up/down transitions + - dev: always advertise the new nsid when the netns iface changes + - dev: advertise the new ifindex when the netns iface changes + + * [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066) + - block, bfq: fix occurrences of request finish method's old name + - block, bfq: remove batches of confusing ifdefs + - block, bfq: add requeue-request hook + + * HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763) + - ALSA: hda: add mute led support for HP ProBook 455 G5 + + * [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver + (LP: #1781476) + - i2c: xlp9xx: Fix issue seen when updating receive length + - i2c: xlp9xx: Make sure the transfer size is not more than + I2C_SMBUS_BLOCK_SIZE + + * x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486) + - x86/kvm: fix LAPIC timer drift when guest uses periodic mode + + * Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823) + - [Config:] d-i: Add ax88179_178a and r8152 to nic-modules + + * Nvidia fails after switching its mode (LP: #1778658) + - PCI: Restore config space on runtime resume despite being unbound + + * Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364) + - SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3 + + * CVE-2018-12232 + - PATCH 1/1] socket: close race condition between sock_close() and + sockfs_setattr() + + * CVE-2018-10323 + - xfs: set format back to extents if xfs_bmap_extents_to_btree + + * change front mic location for more lenovo m7/8/9xx machines (LP: #1781316) + - ALSA: hda/realtek - Fix the problem of two front mics on more machines + - ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION + + * Cephfs + fscache: unable to handle kernel NULL pointer dereference at + 0000000000000000 IP: jbd2__journal_start+0x22/0x1f0 (LP: #1783246) + - ceph: track read contexts in ceph_file_info + + * Touchpad of ThinkPad P52 failed to work with message "lost sync at byte" + (LP: #1779802) + - Input: elantech - fix V4 report decoding for module with middle key + - Input: elantech - enable middle button of touchpads on ThinkPad P52 + + * xhci_hcd 0000:00:14.0: Root hub is not suspended (LP: #1779823) + - usb: xhci: dbc: Fix lockdep warning + - usb: xhci: dbc: Don't decrement runtime PM counter if DBC is not started + + * CVE-2018-13406 + - video: uvesafb: Fix integer overflow in allocation + + * CVE-2018-10840 + - ext4: correctly handle a zero-length xattr with a non-zero e_value_offs + + * CVE-2018-11412 + - ext4: do not allow external inodes for inline data + + * CVE-2018-10881 + - ext4: clear i_data in ext4_inode_info when removing inline data + + * CVE-2018-12233 + - jfs: Fix inconsistency between memory allocation and ea_buf->max_size + + * CVE-2018-12904 + - kvm: nVMX: Enforce cpl=0 for VMX instructions + + * Error parsing PCC subspaces from PCCT (LP: #1528684) + - mailbox: PCC: erroneous error message when parsing ACPI PCCT + + * CVE-2018-13094 + - xfs: don't call xfs_da_shrink_inode with NULL bp + + * other users' coredumps can be read via setgid directory and killpriv bypass + (LP: #1779923) // CVE-2018-13405 + - Fix up non-directory creation in SGID directories + + * Invoking obsolete 'firmware_install' target breaks snap build (LP: #1782166) + - snapcraft.yaml: stop invoking the obsolete (and non-existing) + 'firmware_install' target + + * snapcraft.yaml: missing ubuntu-retpoline-extract-one script breaks the build + (LP: #1782116) + - snapcraft.yaml: copy retpoline-extract-one to scripts before build + + * Allow Raven Ridge's audio controller to be runtime suspended (LP: #1782540) + - ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge + + * CVE-2018-11506 + - sr: pass down correctly sized SCSI sense buffer + + * Bionic update: upstream stable patchset 2018-07-24 (LP: #1783418) + - net: Fix a bug in removing queues from XPS map + - net/mlx4_core: Fix error handling in mlx4_init_port_info. + - net/sched: fix refcnt leak in the error path of tcf_vlan_init() + - net: sched: red: avoid hashing NULL child + - net/smc: check for missing nlattrs in SMC_PNETID messages + - net: test tailroom before appending to linear skb + - packet: in packet_snd start writing at link layer allocation + - sock_diag: fix use-after-free read in __sk_free + - tcp: purge write queue in tcp_connect_init() + - vmxnet3: set the DMA mask before the first DMA map operation + - vmxnet3: use DMA memory barriers where required + - hv_netvsc: empty current transmit aggregation if flow blocked + - hv_netvsc: Use the num_online_cpus() for channel limit + - hv_netvsc: avoid retry on send during shutdown + - hv_netvsc: only wake transmit queue if link is up + - hv_netvsc: fix error unwind handling if vmbus_open fails + - hv_netvsc: cancel subchannel setup before halting device + - hv_netvsc: fix race in napi poll when rescheduling + - hv_netvsc: defer queue selection to VF + - hv_netvsc: disable NAPI before channel close + - hv_netvsc: use RCU to fix concurrent rx and queue changes + - hv_netvsc: change GPAD teardown order on older versions + - hv_netvsc: common detach logic + - hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown + - hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl() + - hv_netvsc: Ensure correct teardown message sequence order + - hv_netvsc: Fix a network regression after ifdown/ifup + - sparc: vio: use put_device() instead of kfree() + - ext2: fix a block leak + - s390: add assembler macros for CPU alternatives + - s390: move expoline assembler macros to a header + - s390/crc32-vx: use expoline for indirect branches + - s390/lib: use expoline for indirect branches + - s390/ftrace: use expoline for indirect branches + - s390/kernel: use expoline for indirect branches + - s390: move spectre sysfs attribute code + - s390: extend expoline to BC instructions + - s390: use expoline thunks in the BPF JIT + - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() + - scsi: zfcp: fix infinite iteration on ERP ready list + - loop: don't call into filesystem while holding lo_ctl_mutex + - loop: fix LOOP_GET_STATUS lock imbalance + - cfg80211: limit wiphy names to 128 bytes + - hfsplus: stop workqueue when fill_super() failed + - x86/kexec: Avoid double free_page() upon do_kexec_load() failure + - usb: gadget: f_uac2: fix bFirstInterface in composite gadget + - usb: dwc3: Undo PHY init if soft reset fails + - usb: dwc3: omap: don't miss events during suspend/resume + - usb: gadget: core: Fix use-after-free of usb_request + - usb: gadget: fsl_udc_core: fix ep valid checks + - usb: dwc2: Fix dwc2_hsotg_core_init_disconnected() + - usb: cdc_acm: prevent race at write to acm while system resumes + - net: usbnet: fix potential deadlock on 32bit hosts + - ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name + - usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume + timing" + - USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM + - net/usb/qmi_wwan.c: Add USB id for lt4120 modem + - net-usb: add qmi_wwan if on lte modem wistron neweb d18q1 + - Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB + - ALSA: usb-audio: Add native DSD support for Luxman DA-06 + - usb: dwc3: Add SoftReset PHY synchonization delay + - usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields + - usb: dwc3: Makefile: fix link error on randconfig + - xhci: zero usb device slot_id member when disabling and freeing a xhci slot + - usb: dwc2: Fix interval type issue + - usb: dwc2: hcd: Fix host channel halt flow + - usb: dwc2: host: Fix transaction errors in host mode + - usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS + - usb: gadget: ffs: Execute copy_to_user() with USER_DS set + - usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS + - usb: gadget: udc: change comparison to bitshift when dealing with a mask + - usb: gadget: composite: fix incorrect handling of OS desc requests + - media: lgdt3306a: Fix module count mismatch on usb unplug + - media: em28xx: USB bulk packet size fix + - Bluetooth: btusb: Add device ID for RTL8822BE + - xhci: Show what USB release number the xHC supports from protocol capablity + - staging: bcm2835-audio: Release resources on module_exit() + - staging: lustre: fix bug in osc_enter_cache_try + - staging: fsl-dpaa2/eth: Fix incorrect casts + - staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr + - staging: ks7010: Use constants from ieee80211_eid instead of literal ints. + - staging: lustre: lmv: correctly iput lmo_root + - crypto: inside-secure - wait for the request to complete if in the backlog + - crypto: atmel-aes - fix the keys zeroing on errors + - crypto: ccp - don't disable interrupts while setting up debugfs + - crypto: inside-secure - do not process request if no command was issued + - crypto: inside-secure - fix the cache_len computation + - crypto: inside-secure - fix the extra cache computation + - crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss + - crypto: inside-secure - fix the invalidation step during cra_exit + - scsi: mpt3sas: fix an out of bound write + - scsi: ufs: Enable quirk to ignore sending WRITE_SAME command + - scsi: bnx2fc: Fix check in SCSI completion handler for timed out request + - scsi: sym53c8xx_2: iterator underflow in sym_getsync() + - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() + - scsi: qla2xxx: Avoid triggering undefined behavior in + qla2x00_mbx_completion() + - scsi: storvsc: Increase cmd_per_lun for higher speed devices + - scsi: qedi: Fix truncation of CHAP name and secret + - scsi: aacraid: fix shutdown crash when init fails + - scsi: qla4xxx: skip error recovery in case of register disconnect. + - scsi: qedi: Fix kernel crash during port toggle + - scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM + - scsi: sd: Keep disk read-only when re-reading partition + - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled + - scsi: aacraid: Insure command thread is not recursively stopped + - scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD + - scsi: mvsas: fix wrong endianness of sgpio api + - ASoC: hdmi-codec: Fix module unloading caused kernel crash + - ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs + - ASoC: samsung: odroid: Fix 32000 sample rate handling + - ASoC: topology: create TLV data for dapm widgets + - ASoC: samsung: i2s: Ensure the RCLK rate is properly determined + - clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228 + - clk: Don't show the incorrect clock phase + - clk: hisilicon: mark wdt_mux_p[] as const + - clk: tegra: Fix pll_u rate configuration + - clk: rockchip: Prevent calculating mmc phase if clock rate is zero + - clk: samsung: s3c2410: Fix PLL rates + - clk: samsung: exynos7: Fix PLL rates + - clk: samsung: exynos5260: Fix PLL rates + - clk: samsung: exynos5433: Fix PLL rates + - clk: samsung: exynos5250: Fix PLL rates + - clk: samsung: exynos3250: Fix PLL rates + - media: dmxdev: fix error code for invalid ioctls + - media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array + - media: ov5645: add missing of_node_put() in error path + - media: cx23885: Override 888 ImpactVCBe crystal frequency + - media: cx23885: Set subdev host data to clk_freq pointer + - media: s3c-camif: fix out-of-bounds array access + - media: lgdt3306a: Fix a double kfree on i2c device remove + - media: em28xx: Add Hauppauge SoloHD/DualHD bulk models + - media: v4l: vsp1: Fix display stalls when requesting too many inputs + - media: i2c: adv748x: fix HDMI field heights + - media: vb2: Fix videobuf2 to map correct area + - media: vivid: fix incorrect capabilities for radio + - media: cx25821: prevent out-of-bounds read on array card + - serial: xuartps: Fix out-of-bounds access through DT alias + - serial: sh-sci: Fix out-of-bounds access through DT alias + - serial: samsung: Fix out-of-bounds access through serial port index + - serial: mxs-auart: Fix out-of-bounds access through serial port index + - serial: imx: Fix out-of-bounds access through serial port index + - serial: fsl_lpuart: Fix out-of-bounds access through DT alias + - serial: arc_uart: Fix out-of-bounds access through DT alias + - serial: 8250: Don't service RX FIFO if interrupts are disabled + - serial: altera: ensure port->regshift is honored consistently + - rtc: snvs: Fix usage of snvs_rtc_enable + - rtc: hctosys: Ensure system time doesn't overflow time_t + - rtc: rk808: fix possible race condition + - rtc: m41t80: fix race conditions + - rtc: tx4939: avoid unintended sign extension on a 24 bit shift + - rtc: rp5c01: fix possible race condition + - rtc: goldfish: Add missing MODULE_LICENSE + - cxgb4: Correct ntuple mask validation for hash filters + - net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule + - net: dsa: Do not register devlink for unused ports + - net: dsa: bcm_sf2: Fix IPv6 rules and chain ID + - net: dsa: bcm_sf2: Fix IPv6 rule half deletion + - 3c59x: convert to generic DMA API + - net: ip6_gre: Request headroom in __gre6_xmit() + - net: ip6_gre: Split up ip6gre_tnl_link_config() + - net: ip6_gre: Split up ip6gre_tnl_change() + - net: ip6_gre: Split up ip6gre_newlink() + - net: ip6_gre: Split up ip6gre_changelink() + - qed: LL2 flush isles when connection is closed + - qed: Fix possibility of list corruption during rmmod flows + - qed: Fix LL2 race during connection terminate + - powerpc: Move default security feature flags + - Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026] + - staging: fsl-dpaa2/eth: Fix incorrect kfree + - crypto: inside-secure - move the digest to the request context + - scsi: lpfc: Fix NVME Initiator FirstBurst + - serial: mvebu-uart: fix tx lost characters + + * Bionic update: upstream stable patchset 2018-07-20 (LP: #1782846) + - usbip: usbip_host: refine probe and disconnect debug msgs to be useful + - usbip: usbip_host: delete device from busid_table after rebind + - usbip: usbip_host: run rebind from exit when module is removed + - usbip: usbip_host: fix NULL-ptr deref and use-after-free errors + - usbip: usbip_host: fix bad unlock balance during stub_probe() + - ALSA: usb: mixer: volume quirk for CM102-A+/102S+ + - ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist + - ALSA: control: fix a redundant-copy issue + - spi: pxa2xx: Allow 64-bit DMA + - spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master + - spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL + - KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls + - KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock + - vfio: ccw: fix cleanup if cp_prefetch fails + - tracing/x86/xen: Remove zero data size trace events + trace_xen_mmu_flush_tlb{_all} + - tee: shm: fix use-after-free via temporarily dropped reference + - netfilter: nf_tables: free set name in error path + - netfilter: nf_tables: can't fail after linking rule into active rule list + - netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} + - i2c: designware: fix poll-after-enable regression + - powerpc/powernv: Fix NVRAM sleep in invalid context when crashing + - drm: Match sysfs name in link removal to link creation + - lib/test_bitmap.c: fix bitmap optimisation tests to report errors correctly + - radix tree: fix multi-order iteration race + - mm: don't allow deferred pages with NEED_PER_CPU_KM + - drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk + - s390/qdio: fix access to uninitialized qdio_q fields + - s390/qdio: don't release memory in qdio_setup_irq() + - s390: remove indirect branch from do_softirq_own_stack + - x86/pkeys: Override pkey when moving away from PROT_EXEC + - x86/pkeys: Do not special case protection key 0 + - efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32' + definition for mixed mode + - ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr + - x86/mm: Drop TS_COMPAT on 64-bit exec() syscall + - tick/broadcast: Use for_each_cpu() specially on UP kernels + - ARM: 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed + - ARM: 8770/1: kprobes: Prohibit probing on optimized_callback + - ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions + - Btrfs: fix xattr loss after power failure + - Btrfs: send, fix invalid access to commit roots due to concurrent + snapshotting + - btrfs: property: Set incompat flag if lzo/zstd compression is set + - btrfs: fix crash when trying to resume balance without the resume flag + - btrfs: Split btrfs_del_delalloc_inode into 2 functions + - btrfs: Fix delalloc inodes invalidation during transaction abort + - btrfs: fix reading stale metadata blocks after degraded raid1 mounts + - xhci: Fix USB3 NULL pointer dereference at logical disconnect. + - KVM: arm/arm64: Properly protect VGIC locks from IRQs + - KVM: arm/arm64: VGIC/ITS: Promote irq_lock() in update_affinity + - hwmon: (k10temp) Fix reading critical temperature register + - hwmon: (k10temp) Use API function to access System Management Network + - vsprintf: Replace memory barrier with static_key for random_ptr_key update + - x86/amd_nb: Add support for Raven Ridge CPUs + - x86/apic/x2apic: Initialize cluster ID properly + + * Bionic update: upstream stable patchset 2018-07-09 (LP: #1780858) + - 8139too: Use disable_irq_nosync() in rtl8139_poll_controller() + - bridge: check iface upper dev when setting master via ioctl + - dccp: fix tasklet usage + - ipv4: fix fnhe usage by non-cached routes + - ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg + - llc: better deal with too small mtu + - net: ethernet: sun: niu set correct packet size in skb + - net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode + - net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()' + - net/mlx4_en: Verify coalescing parameters are in range + - net/mlx5e: Err if asked to offload TC match on frag being first + - net/mlx5: E-Switch, Include VF RDMA stats in vport statistics + - net sched actions: fix refcnt leak in skbmod + - net_sched: fq: take care of throttled flows before reuse + - net: support compat 64-bit time in {s,g}etsockopt + - net/tls: Don't recursively call push_record during tls_write_space callbacks + - net/tls: Fix connection stall on partial tls record + - openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found + - qmi_wwan: do not steal interfaces from class drivers + - r8169: fix powering up RTL8168h + - rds: do not leak kernel memory to user land + - sctp: delay the authentication for the duplicated cookie-echo chunk + - sctp: fix the issue that the cookie-ack with auth can't get processed + - sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr + - sctp: remove sctp_chunk_put from fail_mark err path in + sctp_ulpevent_make_rcvmsg + - sctp: use the old asoc when making the cookie-ack chunk in dupcook_d + - tcp_bbr: fix to zero idle_restart only upon S/ACKed data + - tcp: ignore Fast Open on repair mode + - tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent(). + - bonding: do not allow rlb updates to invalid mac + - bonding: send learning packets for vlans on slave + - net: sched: fix error path in tcf_proto_create() when modules are not + configured + - net/mlx5e: TX, Use correct counter in dma_map error flow + - net/mlx5: Avoid cleaning flow steering table twice during error flow + - hv_netvsc: set master device + - ipv6: fix uninit-value in ip6_multipath_l3_keys() + - net/mlx5e: Allow offloading ipv4 header re-write for icmp + - nsh: fix infinite loop + - udp: fix SO_BINDTODEVICE + - l2tp: revert "l2tp: fix missing print session offset info" + - proc: do not access cmdline nor environ from file-backed areas + - net/smc: restrict non-blocking connect finish + - mlxsw: spectrum_switchdev: Do not remove mrouter port from MDB's ports list + - net/mlx5e: DCBNL fix min inline header size for dscp + - net: systemport: Correclty disambiguate driver instances + - sctp: clear the new asoc's stream outcnt in sctp_stream_update + - tcp: restore autocorking + - tipc: fix one byte leak in tipc_sk_set_orig_addr() + - hv_netvsc: Fix net device attach on older Windows hosts + + * Bionic update: upstream stable patchset 2018-07-06 (LP: #1780499) + - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS + - ipvs: fix rtnl_lock lockups caused by start_sync_thread + - netfilter: ebtables: don't attempt to allocate 0-sized compat array + - kcm: Call strp_stop before strp_done in kcm_attach + - crypto: af_alg - fix possible uninit-value in alg_bind() + - netlink: fix uninit-value in netlink_sendmsg + - net: fix rtnh_ok() + - net: initialize skb->peeked when cloning + - net: fix uninit-value in __hw_addr_add_ex() + - dccp: initialize ireq->ir_mark + - ipv4: fix uninit-value in ip_route_output_key_hash_rcu() + - soreuseport: initialise timewait reuseport field + - inetpeer: fix uninit-value in inet_getpeer + - memcg: fix per_node_info cleanup + - perf: Remove superfluous allocation error check + - tcp: fix TCP_REPAIR_QUEUE bound checking + - bdi: wake up concurrent wb_shutdown() callers. + - bdi: Fix oops in wb_workfn() + - gpioib: do not free unrequested descriptors + - gpio: fix aspeed_gpio unmask irq + - gpio: fix error path in lineevent_create + - rfkill: gpio: fix memory leak in probe error path + - libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs + - dm integrity: use kvfree for kvmalloc'd memory + - tracing: Fix regex_match_front() to not over compare the test string + - z3fold: fix reclaim lock-ups + - mm: sections are not offlined during memory hotremove + - mm, oom: fix concurrent munlock and oom reaper unmap, v3 + - ceph: fix rsize/wsize capping in ceph_direct_read_write() + - can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg() + - can: hi311x: Acquire SPI lock on ->do_get_berr_counter + - can: hi311x: Work around TX complete interrupt erratum + - drm/vc4: Fix scaling of uni-planar formats + - drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log + - drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear() + - drm/atomic: Clean private obj old_state/new_state in + drm_atomic_state_default_clear() + - net: atm: Fix potential Spectre v1 + - atm: zatm: Fix potential Spectre v1 + - cpufreq: schedutil: Avoid using invalid next_freq + - Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174" + - Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome + chipsets + - thermal: exynos: Reading temperature makes sense only when TMU is turned on + - thermal: exynos: Propagate error value from tmu_read() + - nvme: add quirk to force medium priority for SQ creation + - smb3: directory sync should not return an error + - sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] + - tracing/uprobe_event: Fix strncpy corner case + - perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_* + - perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr + - perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver + - perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] + - perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map() + - i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr() + - bdi: Fix use after free bug in debugfs_remove() + - drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages + - drm/i915: Adjust eDP's logical vco in a reliable place. + - drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client + - sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] + + * Bionic update: upstream stable patchset 2018-06-26 (LP: #1778759) + - percpu: include linux/sched.h for cond_resched() + - ACPI / button: make module loadable when booted in non-ACPI mode + - USB: serial: option: Add support for Quectel EP06 + - ALSA: hda - Fix incorrect usage of IS_REACHABLE() + - ALSA: pcm: Check PCM state at xfern compat ioctl + - ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger() + - ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation + for array index + - ALSA: aloop: Mark paused device as inactive + - ALSA: aloop: Add missing cable lock to ctl API callbacks + - tracepoint: Do not warn on ENOMEM + - scsi: target: Fix fortify_panic kernel exception + - Input: leds - fix out of bound access + - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro + - rtlwifi: btcoex: Add power_on_setting routine + - rtlwifi: cleanup 8723be ant_sel definition + - xfs: prevent creating negative-sized file via INSERT_RANGE + - RDMA/cxgb4: release hw resources on device removal + - RDMA/ucma: Allow resolving address w/o specifying source address + - RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow + - RDMA/mlx5: Protect from shift operand overflow + - NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2 + - IB/mlx5: Use unlimited rate when static rate is not supported + - IB/hfi1: Fix handling of FECN marked multicast packet + - IB/hfi1: Fix loss of BECN with AHG + - IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used + - iw_cxgb4: Atomically flush per QP HW CQEs + - drm/vmwgfx: Fix a buffer object leak + - drm/bridge: vga-dac: Fix edid memory leak + - test_firmware: fix setting old custom fw path back on exit, second try + - errseq: Always report a writeback error once + - USB: serial: visor: handle potential invalid device configuration + - usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue + - USB: Accept bulk endpoints with 1024-byte maxpacket + - USB: serial: option: reimplement interface masking + - USB: serial: option: adding support for ublox R410M + - usb: musb: host: fix potential NULL pointer dereference + - usb: musb: trace: fix NULL pointer dereference in musb_g_tx() + - platform/x86: asus-wireless: Fix NULL pointer dereference + - irqchip/qcom: Fix check for spurious interrupts + - tracing: Fix bad use of igrab in trace_uprobe.c + - [Config] CONFIG_ARM64_ERRATUM_1024718=y + - arm64: Add work around for Arm Cortex-A55 Erratum 1024718 + - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro + - infiniband: mlx5: fix build errors when INFINIBAND_USER_ACCESS=m + - btrfs: Take trans lock before access running trans in check_delayed_ref + - drm/vc4: Make sure vc4_bo_{inc,dec}_usecnt() calls are balanced + - xhci: Fix use-after-free in xhci_free_virt_device + - platform/x86: Kconfig: Fix dell-laptop dependency chain. + - KVM: x86: remove APIC Timer periodic/oneshot spikes + - clocksource: Allow clocksource_mark_unstable() on unregistered clocksources + - clocksource: Initialize cs->wd_list + - clocksource: Consistent de-rate when marking unstable + + * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) + - ext4: set h_journal if there is a failure starting a reserved handle + - ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs + - ext4: add validity checks for bitmap block numbers + - ext4: fix bitmap position validation + - random: fix possible sleeping allocation from irq context + - random: rate limit unseeded randomness warnings + - usbip: usbip_event: fix to not print kernel pointer address + - usbip: usbip_host: fix to hold parent lock for device_attach() calls + - usbip: vhci_hcd: Fix usb device and sockfd leaks + - usbip: vhci_hcd: check rhport before using in vhci_hub_control() + - Revert "xhci: plat: Register shutdown for xhci_plat" + - USB: serial: simple: add libtransistor console + - USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster + - USB: serial: cp210x: add ID for NI USB serial console + - usb: core: Add quirk for HP v222w 16GB Mini + - USB: Increment wakeup count on remote wakeup. + - ALSA: usb-audio: Skip broken EU on Dell dock USB-audio + - virtio: add ability to iterate over vqs + - virtio_console: don't tie bufs to a vq + - virtio_console: free buffers after reset + - virtio_console: drop custom control queue cleanup + - virtio_console: move removal code + - virtio_console: reset on out of memory + - drm/virtio: fix vq wait_event condition + - tty: Don't call panic() at tty_ldisc_init() + - tty: n_gsm: Fix long delays with control frame timeouts in ADM mode + - tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set + - tty: Avoid possible error pointer dereference at tty_ldisc_restore(). + - tty: Use __GFP_NOFAIL for tty_ldisc_get() + - ALSA: dice: fix OUI for TC group + - ALSA: dice: fix error path to destroy initialized stream data + - ALSA: hda - Skip jack and others for non-existing PCM streams + - ALSA: opl3: Hardening for potential Spectre v1 + - ALSA: asihpi: Hardening for potential Spectre v1 + - ALSA: hdspm: Hardening for potential Spectre v1 + - ALSA: rme9652: Hardening for potential Spectre v1 + - ALSA: control: Hardening for potential Spectre v1 + - ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY. + - ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr + - ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device + - ALSA: seq: oss: Hardening for potential Spectre v1 + - ALSA: hda: Hardening for potential Spectre v1 + - ALSA: hda/realtek - Add some fixes for ALC233 + - ALSA: hda/realtek - Update ALC255 depop optimize + - ALSA: hda/realtek - change the location for one of two front mics + - mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic + - mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block. + - mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug. + - mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block. + - mtd: rawnand: tango: Fix struct clk memory leak + - kobject: don't use WARN for registration failures + - scsi: sd: Defer spinning up drive while SANITIZE is in progress + - bfq-iosched: ensure to clear bic/bfqq pointers when preparing request + - vfio: ccw: process ssch with interrupts disabled + - ANDROID: binder: prevent transactions into own process. + - PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf() + - PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf() + - PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq mode + - PCI: aardvark: Fix PCIe Max Read Request Size setting + - ARM: amba: Make driver_override output consistent with other buses + - ARM: amba: Fix race condition with driver_override + - ARM: amba: Don't read past the end of sysfs "driver_override" buffer + - ARM: socfpga_defconfig: Remove QSPI Sector 4K size force + - KVM: arm/arm64: Close VMID generation race + - crypto: drbg - set freed buffers to NULL + - ASoC: fsl_esai: Fix divisor calculation failure at lower ratio + - libceph: un-backoff on tick when we have a authenticated session + - libceph: reschedule a tick in finish_hunting() + - libceph: validate con->state at the top of try_write() + - fpga-manager: altera-ps-spi: preserve nCONFIG state + - earlycon: Use a pointer table to fix __earlycon_table stride + - drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders + - drm/i915: Enable display WA#1183 from its correct spot + - objtool, perf: Fix GCC 8 -Wrestrict error + - tools/lib/subcmd/pager.c: do not alias select() params + - x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds + - x86/smpboot: Don't use mwait_play_dead() on AMD systems + - x86/microcode/intel: Save microcode patch unconditionally + - x86/microcode: Do not exit early from __reload_late() + - tick/sched: Do not mess with an enqueued hrtimer + - arm/arm64: KVM: Add PSCI version selection API + - powerpc/eeh: Fix race with driver un/bind + - serial: mvebu-uart: Fix local flags handling on termios update + - block: do not use interruptible wait anywhere + - ASoC: dmic: Fix clock parenting + - PCI / PM: Do not clear state_saved in pci_pm_freeze() when smart suspend is + set + - module: Fix display of wrong module .text address + - drm/edid: Reset more of the display info + - drm/i915/fbdev: Enable late fbdev initial configuration + - drm/i915/audio: set minimum CD clock to twice the BCLK + - drm/amd/display: Fix deadlock when flushing irq + - drm/amd/display: Disallow enabling CRTC without primary plane with FB + + * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) // + CVE-2018-1108. + - random: set up the NUMA crng instances after the CRNG is fully initialized + + * Ryzen/Raven Ridge USB ports do not work (LP: #1756700) + - xhci: Fix USB ports for Dell Inspiron 5775 + + * [Ubuntu 1804][boston][ixgbe] EEH causes kernel BUG at /build/linux- + jWa1Fv/linux-4.15.0/drivers/pci/msi.c:352 (i2S) (LP: #1776389) + - ixgbe/ixgbevf: Free IRQ when PCI error recovery removes the device + + * Need fix to aacraid driver to prevent panic (LP: #1770095) + - scsi: aacraid: Correct hba_send to include iu_type + + * kernel: Fix arch random implementation (LP: #1775391) + - s390/archrandom: Rework arch random implementation. + + * kernel: Fix memory leak on CCA and EP11 CPRB processing. (LP: #1775390) + - s390/zcrypt: Fix CCA and EP11 CPRB processing failure memory leak. + + * Various fixes for CXL kernel module (LP: #1774471) + - cxl: Remove function write_timebase_ctrl_psl9() for PSL9 + - cxl: Set the PBCQ Tunnel BAR register when enabling capi mode + - cxl: Report the tunneled operations status + - cxl: Configure PSL to not use APC virtual machines + - cxl: Disable prefault_mode in Radix mode + + * Bluetooth not working (LP: #1764645) + - Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models + + * linux-snapdragon: wcn36xx: mac address generation on boot (LP: #1776491) + - [Config] arm64: snapdragon: WCN36XX_SNAPDRAGON_HACKS=y + - SAUCE: wcn36xx: read MAC from file or randomly generate one + + * fscache: Fix hanging wait on page discarded by writeback (LP: #1777029) + - fscache: Fix hanging wait on page discarded by writeback + + -- Kleber Sacilotto de Souza Wed, 15 Aug 2018 14:50:38 +0200 + linux (4.15.0-32.35) bionic; urgency=medium [ Stefan Bader ]