Changelog
linux (4.19.98-1) buster; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.88
- [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
- ASoC: compress: fix unsigned integer overflow check
- reset: Fix memory leak in reset_control_array_put()
- [armhf] clk: samsung: exynos5433: Fix error paths
- [armel/marvell,armhf] ASoC: kirkwood: fix external clock probe defer
- [armel/marvell,armhf] ASoC: kirkwood: fix device remove ordering
- [armhf] clk: samsung: exynos5420: Preserve PLL configuration during
suspend/resume
- [x86] pinctrl: cherryview: Allocate IRQ chip dynamic
- [armhf] dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts
- reset: fix reset_control_ops kerneldoc comment
- [armhf,arm64] clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup
- [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
- [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
- [ppc64el] bpf: Fix tail call implementation
- idr: Fix integer overflow in idr_for_each_entry
- idr: Fix idr_alloc_u32 on 32-bit systems
- [x86] resctrl: Prevent NULL pointer dereference when reading mondata
- [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
- [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay
timeout
- bridge: ebtables: don't crash when using dnat target in output chains
- can: peak_usb: report bus recovery as well
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid
skb mem leak
- can: rx-offload: can_rx_offload_offload_one(): do not increase the
skb_queue beyond skb_queue_len_max
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors
on queue overflow or OOM
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to
propagate error value in case of errors
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on
error
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
- [armhf] can: flexcan: increase error counters if skb enqueueing via
can_rx_offload_queue_sorted() fails
- [arm64] watchdog: meson: Fix the wrong value of left time
- ceph: return -EINVAL if given fsc mount option on kernel w/o support
- net/fq_impl: Switch to kvmalloc() for memory allocation
- mac80211: fix station inactive_time shortly after boot
- block: drbd: remove a stray unlock in __drbd_send_protocol()
- scsi: target/tcmu: Fix queue_cmd_ring() declaration
- scsi: lpfc: Fix kernel Oops due to null pring pointers
- scsi: lpfc: Fix dif and first burst use in write commands
- tracing: Lock event_mutex before synth_event_mutex
- [armhf] dts: imx*: Fix memory node duplication
- [armhf] dts: Fix hsi gdd range for omap4
- [arm64] mm: Prevent mismatched 52-bit VA support
- [arm64] smp: Handle errors reported by the firmware
- [armhf] bus: ti-sysc: Check for no-reset and no-idle flags at the child
level
- [arm64] RDMA/hns: Fix the bug while use multi-hop of pbl
- [x86] RDMA/vmw_pvrdma: Use atomic memory allocation in create AH
- [armhf] PM / AVS: SmartReflex: NULL check before some freeing functions
is not needed
- xfs: zero length symlinks are not valid
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value
- scsi: lpfc: Enable Management features for IF_TYPE=6
- scsi: qla2xxx: Fix NPIV handling for FC-NVMe
- scsi: qla2xxx: Fix for FC-NVMe discovery for NPIV port
- nvme: provide fallback for discard alloc failure
- [s390x] zcrypt: make sysfs reset attribute trigger queue reset
- crypto: user - support incremental algorithm dumps
- mwifiex: fix potential NULL dereference and use after free
- mwifiex: debugfs: correct histogram spacing, formatting
- brcmfmac: set F2 watermark to 256 for 4373
- brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373
- rtl818x: fix potential use after free
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove
- bcache: do not mark writeback_running too early
- xfs: require both realtime inodes to mount
- nvme: fix kernel paging oops
- ubifs: Fix default compression selection in ubifs
- ubi: Put MTD device after it is not used
- ubi: Do not drop UBI device reference before using
- iwlwifi: move iwl_nvm_check_version() into dvm
- iwlwifi: mvm: force TCM re-evaluation on TCM resume
- iwlwifi: pcie: fix erroneous print
- iwlwifi: pcie: set cmd_len in the correct place
- [armhf,arm64] gpio: pca953x: Fix AI overflow on PCAL6524
- gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB
- [x86] kvm: vmx: Set IA32_TSC_AUX for legacy mode guests
- [x86] Revert "KVM: nVMX: reset cache/shadows when switching loaded VMCS"
- [x86] Revert "KVM: nVMX: move check_vmentry_postreqs() call to
nested_vmx_enter_non_root_mode()"
- VSOCK: bind to random port for VMADDR_PORT_ANY
- [amd64] mmc: meson-gx: make sure the descriptor is stopped on errors
- [armhf] mtd: rawnand: sunxi: Write pageprog related opcodes to WCMD_SET
- [armhf] usb: ehci-omap: Fix deferred probe for phy handling
- btrfs: Check for missing device before bio submission in btrfs_map_bio
- btrfs: fix ncopies raid_attr for RAID56
- btrfs: dev-replace: set result code of cancel by status of scrub
- Btrfs: allow clear_extent_dirty() to receive a cached extent state
record
- btrfs: only track ref_heads in delayed_ref_updates
- [x86] HID: intel-ish-hid: fixes incorrect error handling
- serial: 8250: Rate limit serial port rx interrupts during input overruns
- [x86] kprobes/xen: blacklist non-attachable xen interrupt functions
- xen/pciback: Check dev_data before using it
- kprobes: Blacklist symbols in arch-defined prohibited area
- [amd64] kprobes: Show x86-64 specific blacklisted symbols correctly
- [armhf] memory: omap-gpmc: Get the header of the enum
- net/mlx5: Continue driver initialization despite debugfs failure
- netfilter: nf_nat_sip: fix RTP/RTCP source port translations
- exofs_mount(): fix leaks on failure exits
- bnxt_en: Return linux standard errors in bnxt_ethtool.c
- bnxt_en: Save ring statistics before reset.
- bnxt_en: query force speeds before disabling autoneg mode.
- [s390x] KVM: unregister debug feature on failing arch init
- dm flakey: Properly corrupt multi-page bios.
- gfs2: take jdata unstuff into account in do_grow
- dm raid: fix false -EBUSY when handling check/repair message
- xfs: Align compat attrlist_by_handle with native implementation.
- xfs: Fix bulkstat compat ioctls on x32 userspace.
- IB/qib: Fix an error code in qib_sdma_verbs_send()
- vxlan: Fix error path in __vxlan_dev_create()
- [ppc64el] xmon: fix dump_segments()
- drivers/regulator: fix a missing check of return value
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware
loading
- RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer
- scsi: qla2xxx: deadlock by configfs_depend_item
- scsi: csiostor: fix incorrect dma device in case of vport
- brcmfmac: Fix access point mode
- ath6kl: Only use match sets when firmware supports it
- ath6kl: Fix off by one error in scan completion
- [ppc64el] perf: Fix unit_sel/cache_sel checks
- [ppc64el] prom: fix early DEBUG messages
- [ppc64el] mm: Make NULL pointer deferences explicit on bad page faults.
- [ppc64el] vfio/spapr_tce: Get rid of possible infinite loop
- [ppc64el] powernv/eeh/npu: Fix uninitialized variables in
opal_pci_eeh_freeze_status
- drbd: ignore "all zero" peer volume sizes in handshake
- drbd: reject attach of unsuitable uuids even if connected
- drbd: do not block when adjusting "disk-options" while IO is frozen
- drbd: fix print_st_err()'s prototype to match the definition
- IB/rxe: Make counters thread safe
- bpf/cpumap: make sure frame_size for build_skb is aligned if headroom
isn't
- [armhf] regulator: tps65910: fix a missing check of return value
- [ppc64el] powerpc/pseries: Fix node leak in
update_lmb_associativity_index()
- net/netlink_compat: Fix a missing check of nla_parse_nested
- net/net_namespace: Check the return value of register_pernet_subsys()
- f2fs: fix block address for __check_sit_bitmap
- f2fs: fix to dirty inode synchronously
- [armhf] net: dsa: bcm_sf2: Propagate error value from mdio_write
- atl1e: checking the status of atl1e_write_phy_reg
- tipc: fix a missing check of genlmsg_put
- net: marvell: fix a missing check of acpi_match_device
- ocfs2: clear journal dirty flag after shutdown journal
- vmscan: return NODE_RECLAIM_NOSCAN in node_reclaim() when CONFIG_NUMA is
n
- mm/page_alloc.c: free order-0 pages through PCP in page_frag_free()
- mm/page_alloc.c: use a single function to free page
- mm/page_alloc.c: deduplicate __memblock_free_early() and memblock_free()
- netfilter: nf_tables: fix a missing check of nla_put_failure
- xprtrdma: Prevent leak of rpcrdma_rep objects
- infiniband/qedr: Potential null ptr dereference of qp
- lib/genalloc.c: fix allocation of aligned buffer from non-aligned chunk
- lib/genalloc.c: use vzalloc_node() to allocate the bitmap
- drivers/base/platform.c: kmemleak ignore a known leak
- lib/genalloc.c: include vmalloc.h
- mtd: Check add_mtd_device() ret code
- tipc: fix memory leak in tipc_nl_compat_publ_dump
- net/core/neighbour: tell kmemleak about hash tables
- [armhf,arm64] ata: ahci: mvebu: do Armada 38x configuration only on
relevant SoCs
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity()
- net/core/neighbour: fix kmemleak minimal reference count for hash tables
- serial: 8250: Fix serial8250 initialization crash
- [armhf] gpu: ipu-v3: pre: don't trigger update if buffer address doesn't
change
- sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe
- ip_tunnel: Make none-tunnel-dst tunnel port work with lwtunnel
- decnet: fix DN_IFREQ_SIZE
- net/smc: prevent races between smc_lgr_terminate() and smc_conn_free()
- net/smc: don't wait for send buffer space when data was already sent
- mm/hotplug: invalid PFNs from pfn_to_online_page()
- xfs: end sync buffer I/O properly on shutdown error
- net/smc: fix sender_free computation
- blktrace: Show requests without sector
- net/smc: fix byte_order for rx_curs_confirmed
- tipc: fix skb may be leaky in tipc_link_input
- sfc: initialise found bitmap in efx_ef10_mtd_probe
- geneve: change NET_UDP_TUNNEL dependency to select
- net: fix possible overflow in __sk_mem_raise_allocated()
- net: ip_gre: do not report erspan_ver for gre or gretap
- net: ip6_gre: do not report erspan_ver for ip6gre or ip6gretap
- sctp: don't compare hb_timer expire date before starting it
- bpf: decrease usercnt if bpf_map_new_fd() fails in
bpf_map_get_fd_by_id()
- mmc: core: align max segment size with logical block size
- net: dev: Use unsigned integer as an argument to left-shift
- kvm: properly check debugfs dentry before using it
- bpf: drop refcount if bpf_map_new_fd() fails in map_create()
- [arm64] net: hns3: Change fw error code NOT_EXEC to NOT_SUPPORTED
- [arm64] net: hns3: fix PFC not setting problem for DCB module
- [arm64] net: hns3: fix an issue for hclgevf_ae_get_hdev
- [arm64] net: hns3: fix an issue for hns3_update_new_int_gl
- [x86] iommu/amd: Fix NULL dereference bug in match_hid_uid
- apparmor: delete the dentry in aafs_remove() to avoid a leak
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during
discovery
- ACPI / APEI: Don't wait to serialise with oops messages when panic()ing
- ACPI / APEI: Switch estatus pool to use vmalloc memory
- [arm64] scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned
- scsi: libsas: Check SMP PHY control function result
- [arm64] RDMA/hns: Fix the bug with updating rq head pointer when flush cqe
- [arm64] RDMA/hns: Bugfix for the scene without receiver queue
- [arm64] RDMA/hns: Fix the state of rereg mr
- [arm64] RDMA/hns: Use GFP_ATOMIC in hns_roce_v2_modify_qp
- ASoC: rt5645: Headphone Jack sense inverts on the LattePanda board
- [ppc64el] pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()
(CVE-2019-12614)
- xdp: fix cpumap redirect SKB creation bug
- mtd: Remove a debug trace in mtdpart.c
- [s390x] mm, gup: add missing refcount overflow checks on s390
- [armhf,arm64] usb: dwc2: use a longer core rest timeout in
dwc2_core_reset()
- staging: rtl8192e: fix potential use after free
- staging: rtl8723bs: Drop ACPI device ids
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
- USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
- [x86] mei: bus: prefix device names on bus with the bus name
- [x86] mei: me: add comet point V device id
- thunderbolt: Power cycle the router if NVM authentication fails
- xfrm: Fix memleak on xfrm state destroy
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE
- [arm64] net: macb: fix error format in dev_err()
- pwm: Clear chip_data in pwm_put()
- macvlan: schedule bc_work even if error
- net: psample: fix skb_over_panic
- openvswitch: fix flow command message size
- sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
- slip: Fix use-after-free Read in slip_open
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
- openvswitch: remove another BUG_ON()
- tipc: fix link name length check
- sctp: cache netns in sctp_ep_common
- net: sched: fix `tc -s class show` no bstats on class with nolock
subqueues
- [arm64] net: macb: add missed tasklet_kill
- ext4: add more paranoia checking in ext4_expand_extra_isize handling
(CVE-2019-19767)
- [arm64] net: macb: Fix SUBNS increment and increase resolution
- [arm64] net: macb driver, check for SKBTX_HW_TSTAMP
- mtd: spi-nor: cast to u64 to avoid uint overflows
- tcp: exit if nothing to retransmit on RTO timeout
- HID: core: check whether Usage Page item is after Usage ID items
- [x86] platform: hp-wmi: Fix ACPI errors caused by too small buffer
- [x86] platform: hp-wmi: Fix ACPI errors caused by passing 0 as input size
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.89
- rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071)
- [arm64] tegra: Fix 'active-low' warning for Jetson TX1 regulator
- usb: gadget: u_serial: add missing port entry locking
- [arm64] tty: serial: msm_serial: Fix flow control
- [armhf,arm64] serial: pl011: Fix DMA ->flush_buffer()
- serial: serial_core: Perform NULL checks for break_ctl ops
- autofs: fix a leak in autofs_expire_indirect()
- [arm64] RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN
- iwlwifi: pcie: don't consider IV len in A-MSDU
- exportfs_decode_fh(): negative pinned may become positive without the
parent locked
- audit_get_nd(): don't unlock parent too early
- xfrm: release device reference for invalid state
- sched/core: Avoid spurious lock dependencies
- perf/core: Consistently fail fork on allocation failures
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed()
- [armhf,arm64] drm/sun4i: tcon: Set min division of TCON0_DCLK to 1.
- rsxx: add missed destroy_workqueue calls in remove
- i2c: core: fix use after free in of_i2c_notify
- serial: core: Allow processing sysrq at port unlock time
- cxgb4vf: fix memleak in mac_hlist initialization
- iwlwifi: mvm: synchronize TID queue removal
- iwlwifi: trans: Clear persistence bit when starting the FW
- iwlwifi: mvm: Send non offchannel traffic via AP sta
- [armhf] 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+
- audit: Embed key into chunk
- netfilter: nf_tables: don't use position attribute on rule replacement
- net/mlx5: Release resource on error flow
- [arm64] clk: sunxi-ng: a64: Fix gate bit of DSI DPHY
- ice: Fix NVM mask defines
- dlm: fix possible call to kfree() for non-initialized pointer
- [armhf] dts: exynos: Fix LDO13 min values on Odroid XU3/XU4/HC1
- [armhf,arm64] rtc: max77686: Fix the returned value in case of error in
'max77686_rtc_read_time()'
- i40e: don't restart nway if autoneg not supported
- virtchnl: Fix off by one error
- [armhf] clk: rockchip: fix rk3188 sclk_smc gate data
- [armhf] clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering
- [armhf] dts: rockchip: Fix rk3288-rock2 vcc_flash name
- dlm: fix missing idr_destroy for recover_idr
- [armhf,arm64] net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing
MII_PHYSID2
- [s390x] scsi: zfcp: update kernel message for invalid FCP_CMND length,
it's not the CDB
- [s390x] scsi: zfcp: drop default switch case which might paper over
missing case
- [armhf] bus: ti-sysc: Fix getting optional clocks in clock_roles
- [armhf] dts: imx6: RDU2: fix eGalax touchscreen node
- crypto: ecc - check for invalid values in the key verification test
- crypto: bcm - fix normal/non key hash algorithm failure
- [arm64] dts: zynqmp: Fix node names which contain "_"
- [arm64] pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues
- [arm*] firmware: raspberrypi: Fix firmware calls with large buffers
- mm/vmstat.c: fix NUMA statistics updates
- [arm64] clk: rockchip: fix I2S1 clock gate register for rk3328
- [arm64] clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328
- sctp: count sk_wmem_alloc by skb truesize in sctp_packet_transmit
- regulator: Fix return value of _set_load() stub
- USB: serial: f81534: fix reading old/new IC config
- xfs: extent shifting doesn't fully invalidate page cache
- net-next/hinic:fix a bug in set mac address
- net-next/hinic: fix a bug in rx data flow
- ice: Fix return value from NAPI poll
- ice: Fix possible NULL pointer de-reference
- iomap: FUA is wrong for DIO O_DSYNC writes into unwritten extents
- iomap: sub-block dio needs to zeroout beyond EOF
- iomap: dio data corruption and spurious errors when pipes fill
- iomap: readpages doesn't zero page tail beyond EOF
- iw_cxgb4: only reconnect with MPAv1 if the peer aborts
- [mips*/octeon] octeon-platform: fix typing
- net/smc: use after free fix in smc_wr_tx_put_slot()
- [armhf] dts: exynos: Use Samsung SoC specific compatible for DWC2 module
- media: pulse8-cec: return 0 when invalidating the logical address
- media: cec: report Vendor ID after initialization
- iwlwifi: fix cfg structs for 22000 with different RF modules
- net/ipv6: re-do dad when interface has IFF_NOARP flag change
- [x86] dmaengine: dw-dmac: implement dma protection control setting
- [armhf,arm64] usb: dwc3: debugfs: Properly print/set link state for HS
- [armhf,arm64] usb: dwc3: don't log probe deferrals; but do log other
error codes
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion()
- f2fs: fix to account preflush command for noflush_merge mode
- f2fs: fix count of seg_freed to make sec_freed correct
- f2fs: change segment to section in f2fs_ioc_gc_range
- [armhf] dts: rockchip: Fix the PMU interrupt number for rv1108
- [armhf] dts: rockchip: Assign the proper GPIO clocks for rv1108
- f2fs: fix to allow node segment for GC by ioctl path
- nvme: Free ctrl device name on init failure
- dma-mapping: fix return type of dma_set_max_seg_size()
- [armhf] serial: imx: fix error handling in console_setup
- [armhf] i2c: imx: don't print error message on probe defer
- [arm64] clk: meson: Fix GXL HDMI PLL fractional bits width
- [armhf,arm64] gpu: host1x: Fix syncpoint ID field size on Tegra186
- lockd: fix decoding of TEST results
- sctp: increase sk_wmem_alloc when head->truesize is increased
- [x86] iommu/amd: Fix line-break in error log reporting
- [armhf] dts: sun8i: a23/a33: Fix OPP DTC warnings
- [armhf] dts: sun8i: v3s: Change pinctrl nodes to avoid warning
- nfsd: fix a warning in __cld_pipe_upcall()
- bpf: btf: implement btf_name_valid_identifier()
- bpf: btf: check name validity for various types
- [armhf] OMAP1/2: fix SoC name printing
- [arm64] dts: meson-gxl-libretech-cc: fix GPIO lines names
- [arm64] dts: meson-gxbb-nanopi-k2: fix GPIO lines names
- [arm64] dts: meson-gxbb-odroidc2: fix GPIO lines names
- [arm64] dts: meson-gxl-khadas-vim: fix GPIO lines names
- net/x25: fix called/calling length calculation in x25_parse_address_block
- net/x25: fix null_x25_address handling
- tcp: make tcp_space() aware of socket backlog
- tcp: fix off-by-one bug on aborting window-probing socket
- tcp: fix SNMP under-estimation on failed retransmission
- tcp: fix SNMP TCP timeout under-estimation
- kbuild: fix single target build for external module
- mtd: fix mtd_oobavail() incoherent returned value
- [arm64] clk: meson: meson8b: fix the offset of vid_pll_dco's N value
- [armhf,arm64] clk: sunxi-ng: h3/h5: Fix CSI_MCLK parent
- [arm64] clk: qcom: Fix MSM8998 resets
- dlm: fix invalid cluster name warning
- net/mlx4_core: Fix return codes of unsupported operations
- pstore/ram: Avoid NULL deref in ftrace merging failure path
- [mips*/octeon] cvmx_pko_mem_debug8: use oldest forward compatible
definition
- nfsd: Return EPERM, not EACCES, in some SETATTR cases
- media: uvcvideo: Abstract streaming object lifetime
- [armhf] dts: sun8i: h3: Fix the system-control register range
- tty: Don't block on IO when ldisc change is pending
- media: stkwebcam: Bugfix for wrong return values
- sctp: frag_point sanity check
- IB/hfi1: Ignore LNI errors before DC8051 transitions to Polling state
- IB/hfi1: Close VNIC sdma_progress sleep window
- mlx4: Use snprintf instead of complicated strcpy
- [armhf] dts: sunxi: Fix PMU compatible strings
- [armhf] dts: am335x-pdu001: Fix polarity of card detection input
- net: aquantia: fix RSS table and key sizes
- sched/fair: Scale bandwidth quota and period without losing quota/period
ratio precision
- fuse: verify nlink
- fuse: verify attributes
- [x86] ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC
- [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
- [x86] ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
- ALSA: pcm: oss: Avoid potential buffer overflows
- [x86] ALSA: hda - Add mute led support for HP ProBook 645 G4
- [x86] Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
- [x86] Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
- [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers
- [x86] Input: goodix - add upside-down quirk for Teclast X89 tablet
- Input: Fix memory leak in psxpad_spi_probe
- [i386] mm: Sync only to VMALLOC_END in vmalloc_sync_all()
- [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
- xfrm interface: fix memory leak on creation
- xfrm interface: avoid corruption on changelink
- xfrm interface: fix list corruption for x-netns
- xfrm interface: fix management of phydev
- CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
- CIFS: Fix SMB2 oplock break processing
- tty: vt: keyboard: reject invalid keycodes
- can: slcan: Fix use-after-free Read in slcan_open
- kernfs: fix ino wrap-around detection
- jbd2: Fix possible overflow in jbd2_log_space_left()
- [arm64] drm/msm: fix memleak on release
- [i386] drm/i810: Prevent underflow in ioctl
- [armhf,arm64] KVM: vgic: Don't rely on the wrong pending table
- [x86] KVM: do not modify masked bits of shared MSRs
- [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES
- [x86] KVM: Grab KVM's srcu lock when setting nested state
- crypto: af_alg - cast ki_complete ternary op to int
- [x86] crypto: ccp - fix uninitialized list head
- crypto: ecdh - fix big endian bug in ECC library
- crypto: user - fix memory leak in crypto_report (CVE-2019-19062)
- mwifiex: update set_mac_address logic
- can: ucan: fix non-atomic allocation in completion handler
- RDMA/qib: Validate ->show()/store() callbacks before calling them
- iomap: Fix pipe page leakage during splicing
- thermal: Fix deadlock in thermal thermal_zone_device_check
- vcs: prevent write access to vcsu devices (CVE-2019-19252)
- binder: Fix race between mmap() and binder_alloc_print_pages()
- binder: Handle start==NULL in binder_update_page_range()
- ALSA: hda - Fix pending unsol events at shutdown
- perf script: Fix invalid LBR/binary mismatch error
- splice: don't read more than available pipe space
- iomap: partially revert 4721a601099 (simulated directio short read on
EFAULT)
- xfs: add missing error check in xfs_prepare_shift()
- ASoC: rsnd: fixup MIX kctrl registration
- [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
(CVE-2019-19332)
- net: qrtr: fix memort leak in qrtr_tun_write_iter (CVE-2019-19079)
- appletalk: Fix potential NULL pointer dereference in
unregister_snap_client (CVE-2019-19227)
- appletalk: Set error code if register_snap_client failed
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.90
- usb: gadget: configfs: Fix missing spin_lock_init()
- [x86] usb: gadget: pch_udc: fix use after free
- scsi: qla2xxx: Fix driver unload hang
- [arm64] media: venus: remove invalid compat_ioctl32 handler
- USB: uas: honor flag to avoid CAPACITY16
- USB: uas: heed CAPACITY_HEURISTICS
- usb: Allow USB device to be warm reset in suspended state
- staging: rtl8188eu: fix interface sanity check
- staging: rtl8712: fix interface sanity check
- staging: gigaset: fix general protection fault on probe
- staging: gigaset: fix illegal free on probe errors
- staging: gigaset: add endpoint-type sanity check
- usb: xhci: only set D3hot for pci device
- xhci: Fix memory leak in xhci_add_in_port()
- xhci: Increase STS_HALT timeout in xhci_suspend()
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour.
- [armhf] dts: pandora-common: define wl1251 as child node of mmc3
- [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit
- USB: atm: ueagle-atm: add missing endpoint check
- USB: idmouse: fix interface sanity checks
- USB: serial: io_edgeport: fix epic endpoint lookup
- usb: roles: fix a potential use after free
- USB: adutux: fix interface sanity check
- usb: core: urb: fix URB structure initialization function
- usb: mon: Fix a deadlock in usbmon between mmap and read
- tpm: add check after commands attribs tab allocation
- virtio-balloon: fix managed page counts when migrating pages between
zones
- [armhf,arm64] usb: dwc3: gadget: Fix logical condition
- [armhf,arm64] usb: dwc3: ep0: Clear started flag on completion
- btrfs: check page->mapping when loading free space cache
- btrfs: use refcount_inc_not_zero in kill_all_nodes
- Btrfs: fix metadata space leak on fixup worker failure to set range as
delalloc
- Btrfs: fix negative subv_writers counter and data space leak after
buffered write
- btrfs: Avoid getting stuck during cyclic writebacks
- btrfs: Remove btrfs_bio::flags member
- Btrfs: send, skip backreference walking for extents with many references
- btrfs: record all roots for rename exchange on a subvol
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of
buffer
- rtlwifi: rtl8192de: Fix missing enable interrupt flag
- ovl: fix corner case of non-unique st_dev;st_ino
- ovl: relax WARN_ON() on rename to self
- [armhf] hwrng: omap - Fix RNG wait loop timeout
- dm writecache: handle REQ_FUA
- dm zoned: reduce overhead of backing device checks
- workqueue: Fix spurious sanity check failures in destroy_workqueue()
- workqueue: Fix pwq ref leak in rescuer_thread()
- ASoC: rt5645: Fixed buddy jack support.
- ASoC: rt5645: Fixed typo for buddy jack support.
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
- blk-mq: avoid sysfs buffer overflow with too many CPU cores
- cgroup: pids: use atomic64_t for pids->limit
- ar5523: check NULL before memcpy() in ar5523_cmd()
- [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped
- cpuidle: Do not unset the driver if it is there already
- erofs: zero out when listxattr is called with no xattr
- [x86] intel_th: Fix a double put_device() in error path
- [x86] intel_th: pci: Add Ice Lake CPU support
- [x86] intel_th: pci: Add Tiger Lake CPU support
- PM / devfreq: Lock devfreq in trans_stat_show
- [ppc64el] cpufreq: powernv: fix stack bloat and hard limit on number of
CPUs
- ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug
bridge
- ACPI: OSL: only free map once in osl.c
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices
- [arm64] pinctrl: armada-37xx: Fix irq mask access in
armada_37xx_irq_set_type()
- [armhf] pinctrl: samsung: Add of_node_put() before return in error path
- [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup
controller init
- [armhf] pinctrl: samsung: Fix device node refcount leaks in init code
- [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to get
rid of pandora_wl1251_init_card
- [armhf] dts: omap3-tao3530: Fix incorrect MMC card detection GPIO
polarity
- ppdev: fix PPGETTIME/PPSETTIME ioctls
- [ppc64el] Allow 64bit VDSO __kernel_sync_dicache to work across ranges
>4GB
- [ppc64el] xive: Prevent page fault issues in the machine crash handler
- [ppc64el] Allow flush_icache_range to work across ranges >4GB
- [ppc64el] xive: Skip ioremap() of ESB pages for LSI interrupts
- video/hdmi: Fix AVI bar unpack
- quota: Check that quota is not dirty before release
- ext2: check err when partial != NULL
- quota: fix livelock in dquot_writeback_dquots
- ext4: Fix credit estimate for final inode freeing
- reiserfs: fix extended attributes on the root directory
- block: fix single range discard merge
- [s390x] scsi: zfcp: trace channel log even for FCP command responses
- scsi: qla2xxx: Fix DMA unmap leak
- scsi: qla2xxx: Fix hang in fcport delete path
- scsi: qla2xxx: Fix session lookup in qlt_abort_work()
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd()
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value
- scsi: qla2xxx: Fix message indicating vectors used by driver
- scsi: qla2xxx: Fix SRB leak on switch command timeout
- xhci: make sure interrupts are restored to correct state
- usb: typec: fix use after free in typec_register_port()
- [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251
- scsi: lpfc: Cap NPIV vports to 256
- scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE
- scsi: lpfc: Correct topology type reporting on G7 adapters
- sch_cake: Correctly update parent qlen when splitting GSO packets
- net/smc: do not wait under send_lock
- [arm64] net: hns3: clear pci private data when unload hns3 driver
- [arm64] net: hns3: change hnae3_register_ae_dev() to int
- [arm64] net: hns3: Check variable is valid before assigning it to another
- [arm64] scsi: hisi_sas: send primitive NOTIFY to SSP situation only
- [arm64] scsi: hisi_sas: Reject setting programmed minimum linkrate > 1.5G
- [x86] MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models
- [x86] MCE/AMD: Carve out the MC4_MISC thresholding quirk
- ath10k: fix fw crash by moving chip reset after napi disabled
- [ppc64el] Fix vDSO clock_getres()
- ext4: work around deleting a file with i_nlink == 0 safely
(CVE-2019-19447)
- mm/shmem.c: cast the type of unmap_start to u64
- rtc: disable uie before setting time and enable after
- splice: only read in as much information as there is pipe buffer space
- ext4: fix a bug in ext4_wait_for_tail_page_commit
- [armhf,arm64] mfd: rk808: Fix RK818 ID template
- mm, thp, proc: report THP eligibility for each vma
- [s390x] smp,vdso: fix ASCE handling
- blk-mq: make sure that line break can be printed
- workqueue: Fix missing kfree(rescuer) in destroy_workqueue()
- perf callchain: Fix segfault in thread__resolve_callchain_sample()
- gre: refetch erspan header from skb->data after pskb_may_pull()
- sunrpc: fix crash when cache_head become valid before update
- net/mlx5e: Fix SFF 8472 eeprom length
- leds: trigger: netdev: fix handling on interface rename
- gfs2: fix glock reference problem in gfs2_trans_remove_revoke
- of: overlay: add_changeset_property() memory leak
- kernel/module.c: wakeup processes in module_wq on module unload
- cifs: Fix potential softlockups while refreshing DFS cache
- [x86] gpiolib: acpi: Add Terra Pad 1061 to the
run_edge_events_on_boot_blacklist
- raid5: need to set STRIPE_HANDLE for batch head
- scsi: qla2xxx: Change discovery state before PLOGI
- [x86] iio: imu: mpu6050: add missing available scan masks
- idr: Fix idr_get_next_ul race with idr_remove
- of: unittest: fix memory leak in attach_node_and_children
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.91
- inet: protect against too small mtu values.
- mqprio: Fix out-of-bounds access in mqprio_dump
- net: bridge: deny dev_set_mac_address() when unregistering
- net: dsa: fix flow dissection on Tx path
- net: ethernet: ti: cpsw: fix extra rx interrupt
- net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues
- [arm64] net: thunderx: start phy before starting autonegotiation
- openvswitch: support asymmetric conntrack
- tcp: md5: fix potential overestimation of TCP option space
- tipc: fix ordering of tipc module init and exit routine
- net/mlx5e: Query global pause state before setting prio2buffer
- tcp: fix rejected syncookies due to stale timestamps
- tcp: tighten acceptance of ACKs not matching a child socket
- tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE()
- [arm64] Revert "arm64: preempt: Fix big-endian when checking preempt
count in assembly"
- mmc: block: Make card_busy_detect() a bit more generic
- mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response
- PCI/PM: Always return devices to D0 when thawing
- PCI: pciehp: Avoid returning prematurely from sysfs requests
- [x86] PCI: Fix Intel ACS quirk UPDCR register address
- PCI/MSI: Fix incorrect MSI-X masking on resume
- [arm64] PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3
- [arm64] rpmsg: glink: Set tail pointer to 0 at end of FIFO
- [arm64] rpmsg: glink: Fix reuse intents memory leak issue
- [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case
- [arm64] rpmsg: glink: Put an extra reference during cleanup
- [arm64] rpmsg: glink: Fix rpmsg_register_device err handling
- [arm64] rpmsg: glink: Don't send pending rx_done during remove
- [arm64] rpmsg: glink: Free pending deferred work on remove
- cifs: smbd: Return -EAGAIN when transport is reconnecting
- cifs: smbd: Add messages on RDMA session destroy and reconnection
- cifs: smbd: Return -EINVAL when the number of iovs exceeds
SMBDIRECT_MAX_SGE
- cifs: Don't display RDMA transport on reconnect
- CIFS: Respect O_SYNC and O_DIRECT flags during reconnect
- CIFS: Close open handle after interrupted close
- [armhf] tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume()
- vfio/pci: call irq_bypass_unregister_producer() before freeing irq
- dma-buf: Fix memory leak in sync_file_merge()
- [arm64] drm: meson: venc: cvbs: fix CVBS mode matching
- dm mpath: remove harmful bio-based optimization
- dm btree: increase rebalance threshold in __rebalance2()
- scsi: iscsi: Fix a potential deadlock in the timeout handler
- scsi: qla2xxx: Change discovery state before PLOGI
- drm/radeon: fix r1xx/r2xx register checker for POT textures
- xhci: fix USB3 device initiated resume race with roothub autosuspend
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.92
- af_packet: set defaule value for tmo
- [amd64] fjes: fix missed check in fjes_acpi_add
- [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl
- net: qlogic: Fix error paths in ql_alloc_large_buffers()
- net: usb: lan78xx: Fix suspend/resume PHY register access error
- qede: Disable hardware gro when xdp prog is installed
- qede: Fix multicast mac configuration
- sctp: fully initialize v4 addr in some functions
- btrfs: don't double lock the subvol_sem for rename exchange
- btrfs: do not call synchronize_srcu() in inode_tree_del
- Btrfs: fix missing data checksums after replaying a log tree
- btrfs: send: remove WARN_ON for readonly mount
- btrfs: abort transaction after failed inode updates in create_subvol
- btrfs: skip log replay on orphaned roots
- btrfs: do not leak reloc root if we fail to read the fs root
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate
- Btrfs: fix removal logic of the tree mod log that leads to
use-after-free issues
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers
- ALSA: hda/ca0132 - Keep power on during processing DSP response
- ALSA: hda/ca0132 - Avoid endless loop
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection
- [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers
- drm/amdgpu: grab the id mgr lock while accessing passid_mapping
- spi: Add call to spi_slave_abort() function when spidev driver is
released
- [x86] staging: rtl8192u: fix multiple memory leaks on error path
- staging: rtl8188eu: fix possible null dereference
- rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063)
- libertas: fix a potential NULL pointer dereference
- ath10k: fix backtrace on coredump
- IB/iser: bound protection_sg size by data_sg size
- [arm64] media: venus: core: Fix msm8996 frequency table
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq
- pinctrl: devicetree: Avoid taking direct reference to device name string
- [amd64] drm/amdkfd: fix a potential NULL pointer dereference
- [arm64] media: venus: Fix occasionally failures to suspend
- [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if
not idled
- media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
- [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the
internal I2C controller
- block: Fix writeback throttling W=1 compiler warnings
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
(CVE-2019-19057)
- drm/drm_vblank: Change EINVAL by the correct errno
- media: cx88: Fix some error handling path in 'cx8800_initdev()'
- [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride
- [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid
pixel format
- [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame
sequence number
- [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format
- [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a
kernel panic
- [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in
abort cases
- [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid
sizeimage
- [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0
- [x86] mm: Use the correct function type for native_set_fixmap()
- ath10k: Correct error handling of dma_map_single()
- [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode
- perf report: Add warning when libunwind not compiled in
- usb: usbfs: Suppress problematic bind and unbind uevents.
- Bluetooth: missed cpu_to_le16 conversion in hci_init4_req
- Bluetooth: Workaround directed advertising bug in Broadcom controllers
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
- [x86] mce: Lower throttling MCE messages' priority to warning
- [x86] drm/gma500: fix memory disclosures due to uninitialized bytes
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot
- ipmi: Don't allow device module unload when in use
- [x86] ioapic: Prevent inconsistent state when moving an interrupt
- md/bitmap: avoid race window between md_bitmap_resize and
bitmap_file_clear_bit
- [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill()
- i40e: initialize ITRN registers with correct values
- net: phy: dp83867: enable robust auto-mdix
- [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210
- ACPI: button: Add DMI quirk for Medion Akoya E2215T
- RDMA/qedr: Fix memory leak in user qp and mr
- [arm64,armhf] gpu: host1x: Allocate gather copy for host1x
- [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable
- [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle
- [s390x] time: ensure get_clock_monotonic() returns monotonic values
- [s390x] mm: add mm_pxd_folded() checks to pxd_free()
- [arm64] net: hns3: add struct netdev_queue debug info for TX timeout
- libata: Ensure ata_port probe has completed before detach
- loop: fix no-unmap write-zeroes request behavior
- Bluetooth: Fix advertising duplicated flags
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler()
- ixgbe: protect TX timestamping from API misuse
- media: rcar_drif: fix a memory disclosure (CVE-2019-18786)
- media: v4l2-core: fix touch support in v4l_g_fmt
- rfkill: allocate static minor
- bnx2x: Fix PF-VF communication over multi-cos queues.
- ALSA: timer: Limit max amount of slave instances
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
- perf probe: Fix to find range-only function instance
- perf probe: Fix to list probe event with correct line number
- perf jevents: Fix resource leak in process_mapfile() and main()
- perf probe: Walk function lines in lexical blocks
- perf probe: Fix to probe an inline function which has no entry pc
- perf probe: Fix to show ranges of variables in functions without
entry_pc
- perf probe: Fix to show inlined function callsite without entry_pc
- perf probe: Fix to probe a function which has no entry pc
- perf tools: Splice events onto evlist even on error
- perf parse: If pmu configuration fails free terms
- perf probe: Skip overlapped location on searching variables
- perf probe: Return a better scope DIE if there is no best scope
- perf probe: Fix to show calling lines of inlined functions
- perf probe: Skip end-of-sequence and non statement lines
- perf probe: Filter out instances except for inlined subroutine and
subprogram
- ath10k: fix get invalid tx rate for Mesh metric
- media: pvrusb2: Fix oops on tear-down when radio support is not present
- ice: delay less
- [amd64] spi: pxa2xx: Add missed security checks
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
- iio: dac: ad5446: Add support for new AD5600 DAC
- [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format
constraint
- [s390x] disassembler: don't hide instruction addresses
- nvme: Discard workaround for non-conformant devices
- parport: load lowlevel driver if ports not found
- bcache: fix static checker warning in bcache_device_free()
- cpufreq: Register drivers only after CPU devices have been registered
- tracing: use kvcalloc for tgid_map array allocation
- tracing/kprobe: Check whether the non-suffixed symbol is notrace
- bcache: fix deadlock in bcache_allocator
- iwlwifi: mvm: fix unaligned read of rx_pkt_status
- [arm64] spi: tegra20-slink: add missed clk_unprepare
- tun: fix data-race in gro_normal_list()
- crypto: virtio - deal with unsupported input sizes
- btrfs: don't prematurely free work in end_workqueue_fn()
- btrfs: don't prematurely free work in run_ordered_work()
- [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012
2-in-1
- [x86] insn: Add some Intel instructions to the opcode map
- brcmfmac: remove monitor interface when detaching
- iwlwifi: check kasprintf() return value
- [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart
- [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings
- [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED
- net: phy: initialise phydev speed and duplex sanely
- btrfs: don't prematurely free work in reada_start_machine_worker()
- btrfs: don't prematurely free work in scrub_missing_raid56_worker()
- Revert "mmc: sdhci: Fix incorrect switch to HS mode"
- can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices
(CVE-2019-19947)
- usb: xhci: Fix build warning seen with CONFIG_PM=n
- [s390x] ftrace: fix endless recursion in function_graph tracer
- btrfs: return error pointer from alloc_test_extent_buffer
- usbip: Fix receive error in vhci-hcd when using scatter-gather
- usbip: Fix error path of vhci_recv_ret_submit()
- cpufreq: Avoid leaving stale IRQ work items during CPU offline
- [x86] intel_th: pci: Add Comet Lake PCH-V support
- [x86] intel_th: pci: Add Elkhart Lake SOC support
- [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128
bytes
- [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
- ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037)
- ext4: check for directory entries too close to block end
- ext4: unlock on error in ext4_expand_extra_isize()
- [arm64] KVM: Ensure 'params' is initialised when looking up sys register
- [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure()
- [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[]
- [powerpc*] irq: fix stack overflow verification
- [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG
register
- mmc: sdhci: Update the tuning failed messages to pr_debug level
- mmc: sdhci: Workaround broken command queuing on Intel GLK
- mmc: sdhci: Add a quirk for broken command queuing
- nbd: fix shutdown and recv work deadlock
- perf probe: Fix to show function entry line as probe-able
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.93
- scsi: lpfc: Fix discovery failures when target device connectivity
bounces
- scsi: mpt3sas: Fix clear pending bit in ioctl status
- scsi: lpfc: Fix locking on mailbox command completion
- Input: atmel_mxt_ts - disable IRQ across suspend
- f2fs: fix to update time in lazytime mode
- [arm64,armhf] iommu: rockchip: Free domain on .domain_free
- [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory
- scsi: target: compare full CHAP_A Algorithm strings
- scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
- scsi: csiostor: Don't enable IRQs too early
- [arm64] scsi: hisi_sas: Replace in_softirq() check in
hisi_sas_task_exec()
- [ppc64el] pseries: Mark accumulate_stolen_time() as notrace
- [ppc64el] pseries: Don't fail hash page table insert for bolted mapping
- clocksource/drivers/timer-of: Use unique device name instead of timer
- [ppc64el] security/book3s64: Report L1TF status in sysfs
- [ppc64el] book3s64/hash: Add cond_resched to avoid soft lockup warning
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT
- ext4: iomap that extends beyond EOF should be marked dirty
- jbd2: Fix statistics for the number of logged blocks
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and
WRITE(6)
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
- f2fs: fix to update dir's i_pino during cross_rename
- [arm64] clk: qcom: Allow constant ratio freq tables for rcg
- clk: clk-gpio: propagate rate change to parent
- fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned
long
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer
dereferences
- [ppc64el] PCI: rpaphp: Fix up pointer to first drc-info entry
- scsi: ufs: fix potential bug which ends in system hang
- [ppc64el] PCI: rpaphp: Don't rely on firmware feature to imply drc-info
support
- [ppc64el] PCI: rpaphp: Annotate and correctly byte swap DRC properties
- [ppc64el] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name
when using drc-info
- [ppc64el] powerpc/security: Fix wrong message when RFI Flush is disable
- bcache: at least try to shrink 1 node in bch_mca_scan()
- HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors
- [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening
- libnvdimm/btt: fix variable 'rc' set but not used
- HID: Improve Windows Precision Touchpad detection.
- HID: rmi: Check that the RMI_STARTED bit is set before unregistering the
RMI transport device
- watchdog: Fix the race between the release of watchdog_core_data and
cdev
- scsi: pm80xx: Fix for SATA device discovery
- scsi: ufs: Fix error handing during hibern8 enter
- scsi: scsi_debug: num_tgts must be >= 0
- scsi: iscsi: Don't send data to unbound connection
- scsi: target: iscsi: Wait for all commands to finish before freeing a
session
- apparmor: fix unsigned len comparison with less than zero
- scripts/kallsyms: fix definitely-lost memory leak
- cdrom: respect device capabilities during opening action
- perf script: Fix brstackinsn for AUXTRACE
- perf regs: Make perf_reg_name() return "unknown" instead of NULL
- [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR
- [s390x] cpum_sf: Check for SDBT and SDB consistency
- ocfs2: fix passing zero to 'PTR_ERR' warning
- kernel: sysctl: make drop_caches write-only
- userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK
- [x86] mce: Fix possibly incorrect severity calculation on AMD
- net, sysctl: Fix compiler warning when only cBPF is present
- netfilter: nf_queue: enqueue skbs with NULL dst
- ALSA: hda - Downgrade error message for single-cmd fallback
- bonding: fix active-backup transition after link failure
- perf strbuf: Remove redundant va_end() in strbuf_addv()
- Make filldir[64]() verify the directory entry filename is valid
(CVE-2019-10220)
- filldir[64]: remove WARN_ON_ONCE() for bad directory entries
(CVE-2019-10220)
- netfilter: ebtables: compat: reject all padding in matches/watchers
- 6pack,mkiss: fix possible deadlock
- netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
- inetpeer: fix data-race in inet_putpeer / inet_putpeer
- net: add a READ_ONCE() in skb_peek_tail()
- net: icmp: fix data-race in cmp_global_allow()
- hrtimer: Annotate lockless access to timer->state
- net: ena: fix napi handler misbehavior when the napi budget is zero
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning
- [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on
Meson8b/8m2 SoCs
- ptp: fix the race between the release of ptp_clock and cdev
- tcp: Fix highest_sack and highest_sack_seq
- udp: fix integer overflow while computing available space in sk_rcvbuf
- vhost/vsock: accept only packets with the right dst_cid
- net: add bool confirm_neigh parameter for dst_ops.update_pmtu
- ip6_gre: do not confirm neighbor when do pmtu update
- gtp: do not confirm neighbor when do pmtu update
- net/dst: add new function skb_dst_update_pmtu_no_confirm
- tunnel: do not confirm neighbor when do pmtu update
- vti: do not confirm neighbor when do pmtu update
- sit: do not confirm neighbor when do pmtu update
- net/dst: do not confirm neighbor for vxlan and geneve pmtu update
- gtp: do not allow adding duplicate tid and ms_addr pdp context
- [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt
- tcp/dccp: fix possible race __inet_lookup_established()
- tcp: do not send empty skb from tcp_write_xmit()
- gtp: fix wrong condition in gtp_genl_dump_pdp()
- gtp: fix an use-after-free in ipv4_pdp_find()
- gtp: avoid zero size hashtable
- [arm64,armhf] pinctrl: baytrail: Really serialize all register accesses
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.94
- nvme_fc: add module to ops template to allow module references
- nvme-fc: fix double-free scenarios on hw queues
- drm/amdgpu: add check before enabling/disabling broadcast mode
- drm/amdgpu: add cache flush workaround to gfx8 emit_fence
- PM / devfreq: Fix devfreq_notifier_call returning errno
- PM / devfreq: Set scaling_max_freq to max on OPP notifier error
- PM / devfreq: Don't fail devfreq_dev_release if not in list
- afs: Fix afs_find_server lookups for ipv4 peers
- afs: Fix SELinux setting security label on /afs
- RDMA/cma: add missed unregister_pernet_subsys in init failure
- rxe: correctly calculate iCRC for unaligned payloads
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work
- scsi: qla2xxx: Don't call qlt_async_event twice
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length
- scsi: qla2xxx: Configure local loop for N2N target
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI
- scsi: iscsi: qla4xxx: fix double free in probe
- scsi: libsas: stop discovering if oob mode is disconnected
(CVE-2019-19965)
- drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit
- usb: gadget: fix wrong endpoint desc
- net: make socket read/write_iter() honor IOCB_NOWAIT
- afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP
- md: raid1: check rdev before reference in raid1_sync_request func
- [s390x] cpum_sf: Adjust sampling interval to avoid hitting sample limits
- [s390x] cpum_sf: Avoid SBD overflow condition in irq handler
- IB/mlx4: Follow mirror sequence of device add during device removal
- IB/mlx5: Fix steering rule of drop and count
- xen-blkback: prevent premature module unload
- xen/balloon: fix ballooned page accounting without hotplug enabled
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
- ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker
- ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen
- xfs: fix mount failure crash on invalid iclog memory access
- taskstats: fix data-race
- drm: limit to INT_MAX in create_blob ioctl
- netfilter: nft_tproxy: Fix port selector on Big Endian
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code
- ALSA: usb-audio: fix set_format altsetting sanity check
- ALSA: usb-audio: set the interface format after resume on Dell WD19
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283
- [arm64,armhf] drm/sun4i: hdmi: Remove duplicate cleanup calls
- [mips*] Avoid VDSO ABI breakage due to global register variable
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call
- media: cec: CEC 2.0-only bcast messages were ignored
- media: cec: avoid decrementing transmit_queue_sz if it is 0
- media: cec: check 'transmit_in_progress', not 'transmitting'
- mm/zsmalloc.c: fix the migrated zspage statistics.
- memcg: account security cred as well to kmemcg
- mm: move_pages: return valid node id in status if the page is already on
the target node
- [x86,arm64] pstore/ram: Write new dumps to start of recycled zones
- locks: print unsigned ino in /proc/locks
- compat_ioctl: block: handle Persistent Reservations
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE
- ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys()
- libata: Fix retrieving of active qcs
- gpiolib: fix up emulated open drain outputs
- tracing: Fix lock inversion in trace_event_enable_tgid_record()
- tracing: Avoid memory leak in process_system_preds()
- tracing: Have the histogram compare functions convert to u64 first
- tracing: Fix endianness bug in histogram trigger
- apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
- [i386] ALSA: cs4236: fix error return comparison of an unsigned integer
- ALSA: firewire-motu: Correct a typo in the clock proc string
- exit: panic before exit_mm() on global init exit
- [arm64] Revert support for execute-only user mappings
- ftrace: Avoid potential division by zero in function profiler
- [arm64] drm/msm: include linux/sched/task.h
- PM / devfreq: Check NULL governor in available_governors_show
- nfsd4: fix up replay_matches_cache()
- [x86,arm64] HID: i2c-hid: Reset ALPS touchpads on resume
- ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100
- xfs: don't check for AG deadlock for realtime files in bunmapi
- [x86] platform/x86: pmc_atom: Add Siemens CONNECT X300 to
critclk_systems DMI table
- Bluetooth: btusb: fix PM leak in error case of setup
- Bluetooth: delete a stray unlock
- Bluetooth: Fix memory leak in hci_connect_le_scan
- media: flexcop-usb: ensure -EIO is returned on error condition
- media: usb: fix memory leak in af9005_identify_state (CVE-2019-18809)
- [arm64] dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed
warning
- [arm64] tty: serial: msm_serial: Fix lockup for sysrq and oops
- fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP
- bdev: Factor out bdev revalidation into a common helper
- bdev: Refresh bdev size for disks without partitioning
- scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails
- drm/mst: Fix MST sideband up-reply failure handling
- [ppc64el] pseries/hvconsole: Fix stack overread via udbg
- [ppc64el] KVM: PPC: Book3S HV: use smp_mb() when setting/clearing
host_ipi flag
- rxrpc: Fix possible NULL pointer access in ICMP handling
- tcp: annotate tp->rcv_nxt lockless reads
- net: core: limit nested device depth
- ath9k_htc: Modify byte order for an error message
- ath9k_htc: Discard undersized packets
- xfs: periodically yield scrub threads to the scheduler
- net: add annotations on hh->hh_len lockless accesses
- ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps
- [s390x] smp: fix physical to logical CPU map for SMT
- xen/blkback: Avoid unmapping unmapped grant pages
- [x86] perf/x86/intel/bts: Fix the use of page_private()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.95
- bpf: Fix passing modified ctx to ld/abs/ind instruction
- regulator: fix use after free issue
- ASoC: max98090: fix possible race conditions
- netfilter: ctnetlink: netns exit must wait for callbacks
- mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
(CVE-2019-14901)
- [x86] efi: Update e820 with reserved EFI boot services data to fix kexec
breakage
- [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89
- efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs
- efi/gop: Return EFI_SUCCESS if a usable GOP was found
- efi/gop: Fix memory leak in __gop_query32/64()
- netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
- netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in
named sets
- netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END
- netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
- [arm64] spi: spi-cavium-thunderx: Add missing pci_release_regions()
- ASoC: topology: Check return value for soc_tplg_pcm_create()
- bnxt_en: Return error if FW returns more data than dump length
- [mips*] bpf, mips: Limit to 33 tail calls
- [armhf] spi: spi-ti-qspi: Fix a bug when accessing non default CS
- [powerpc*] Ensure that swiotlb buffer is allocated from low memory
- btrfs: Fix error messages in qgroup_rescan_init
- bpf: Clear skb->tstamp in bpf_redirect when necessary
- bnx2x: Do not handle requests from VFs after parity
- bnx2x: Fix logic to get total no. of PFs per engine
- cxgb4: Fix kernel panic while accessing sge_info
- net: usb: lan78xx: Fix error message format specifier
- rfkill: Fix incorrect check to avoid NULL pointer dereference
- iommu/iova: Init the struct iova to fix the possible memleak
- [x86] perf/x86/intel: Fix PT PMI handling
- fs: avoid softlockups in s_inodes iterators
- [arm64,armhf] net: stmmac: Do not accept invalid MTU values
- [arm64,armhf] net: stmmac: xgmac: Clear previous RX buffer size
- [arm64,armhf] net: stmmac: RX buffer size must be 16 byte aligned
- [arm64,armhf] net: stmmac: Always arm TX Timer at end of transmission
start
- [s390x] dasd/cio: Interpret ccw_device_get_mdc return value correctly
- [s390x] dasd: fix memleak in path handling error case
- block: fix memleak when __blk_rq_map_user_iov() is failed
- llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and
_test_c)
- [x86] hv_netvsc: Fix unwanted rx_table reset
- [powerpc*] vcpu: Assume dedicated processors as non-preempt
- [powerpc*] spinlocks: Include correct header for static key
- [armhf] cpufreq: imx6q: read OCOTP through nvmem for imx6ul/imx6ull
- gtp: fix bad unlock balance in gtp_encap_enable_socket
- macvlan: do not assume mac_header is set in macvlan_broadcast()
- [arm64,armhf] net: dsa: mv88e6xxx: Preserve priority when setting CPU
port.
- [arm64,armhf] net: stmmac: dwmac-sun8i: Allow all RGMII modes
- [arm64,armhf] net: stmmac: dwmac-sunxi: Allow all RGMII modes
- net: usb: lan78xx: fix possible skb leak
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
- sch_cake: avoid possible divide by zero in cake_enqueue()
- sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
- tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
- vxlan: fix tos value before xmit
- vlan: fix memory leak in vlan_dev_set_egress_priority
- vlan: vlan_changelink() should propagate errors
- net: sch_prio: When ungrafting, replace with FIFO
- [arm64,armhf] usb: dwc3: gadget: Fix request complete check
- USB: core: fix check for duplicate endpoints
- USB: serial: option: add Telit ME910G1 0x110a composition
- usb: missing parentheses in USE_NEW_SCHEME
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.96
- chardev: Avoid potential use-after-free in 'chrdev_open()'
- i2c: fix bus recovery stop mode timing
- [arm64,armhf] usb: chipidea: host: Disable port power only if previously
enabled
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
- ALSA: hda/realtek - Add new codec supported for ALCS1200A
- ALSA: hda/realtek - Set EAPD control to default for ALC222
- [x86] ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga
X1 7th gen
- kernel/trace: Fix do not unregister tracepoints when register
sched_migrate_task fail
- tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
- tracing: Change offset type to s32 in preempt/irq tracepoints
- HID: Fix slab-out-of-bounds read in hid_field_extract
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
- HID: hid-input: clear unmapped usages
- Input: add safety guards to input_set_keycode()
- [arm64,armhf] drm/sun4i: tcon: Set RGB DCLK min. divider based on
hardware model
- drm/fb-helper: Round up bits_per_pixel if possible
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
- can: kvaser_usb: fix interface sanity check
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
- can: can_dropped_invalid_skb(): ensure an initialized headroom in
outgoing CAN sk_buffs
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
- [x86] staging: vt6656: set usb_set_intfdata on driver fail.
- USB: serial: option: add ZLP support for 0x1bc7/0x9010
- [arm64,armhf] usb: musb: fix idling for suspend after disconnect
interrupt
- [arm64,armhf] usb: musb: Disable pullup at init
- [arm64,armhf] usb: musb: dma: Correct parameter passed to IRQ handler
- [x86] staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
- serdev: Don't claim unsupported ACPI serial devices
- tty: link tty and port before configuring it as console
- tty: always relink the port
- mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
(CVE-2019-14895)
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
(CVE-2019-19056)
- scsi: bfa: release allocated memory in case of error (CVE-2019-19066)
- rtl8xxxu: prevent leaking urb (CVE-2019-19068)
- ath10k: fix memory leak (CVE-2019-19078)
- HID: hiddev: fix mess in hiddev_open()
- USB: Fix: Don't skip endpoint descriptors with maxpacket=0
- netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
- netfilter: conntrack: dccp, sctp: handle null timeout argument
- netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
- [x86] drm/i915/gen9: Clear residual context state on context switch
(CVE-2019-14615)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.97
- hidraw: Return EPOLLOUT from hidraw_poll
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
- HID: hidraw, uhid: Always report EPOLLOUT
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function
- mac80211: Do not send Layer 2 Update frame before authorization
(CVE-2019-5108)
- f2fs: Move err variable to function scope in f2fs_fill_dentries()
- f2fs: check memory boundary by insane namelen
- f2fs: check if file namelen exceeds max value (CVE-2019-9445)
- media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in
zr364xx_vidioc_querycap (CVE-2019-15217)
- iwlwifi: dbg_ini: fix memory leak in alloc_sgtable (CVE-2019-19058)
- iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init
(CVE-2019-19059)
- RDMA: Fix goto target to release the allocated memory (CVE-2019-19077)
- dccp: Fix memleak in __feat_register_sp (CVE-2019-20096)
- [x86] drm/i915: Fix use-after-free when destroying GEM context
- ASoC: soc-core: Set dpcm_playback / dpcm_capture
- [armhf] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
- [arm64] gpio: zynq: Fix for bug in zynq_gpio_restore_context API
- iommu: Remove device link to group on failure
- gpio: Fix error message on out-of-range GPIO in lookup table
- [s390x] qeth: fix false reporting of VNIC CHAR config failure
- [s390x] qeth: Fix vnicc_is_in_use if rx_bcast not set
- cifs: Adjust indentation in smb2_open_file
- afs: Fix missing cell comparison in afs_test_super()
- drm/ttm: fix start page for huge page check in ttm_put_pages()
(CVE-2019-19927)
- drm/ttm: fix incrementing the page pointer for huge pages
(CVE-2019-19927)
- btrfs: simplify inode locking for RWF_NOWAIT
- RDMA/mlx5: Return proper error value
- RDMA/srpt: Report the SCSI residual to the initiator
- scsi: enclosure: Fix stale device oops with hot replug
- scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
- [x86] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
- [x86] platform/x86: GPD pocket fan: Use default values when wrong
modparams are given
- xprtrdma: Fix completion wait during device removal
- crypto: virtio - implement missing support for output IVs
- NFSv2: Fix a typo in encode_sattr()
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for
layoutreturn
- mei: fix modalias documentation
- [armhf] clk: samsung: exynos5420: Preserve CPU clocks configuration
during suspend/resume
- [armhf] pinctl: ti: iodelay: fix error checking on
pinctrl_count_index_with_args call
- [x86] pinctrl: lewisburg: Update pin list according to v1.1v6
- scsi: sd: enable compat ioctls for sed-opal
- af_unix: add compat_ioctl support
- compat_ioctl: handle SIOCOUTQNSD
- [arm64,armhf] PCI: dwc: Fix find_next_bit() usage
- PCI/PTM: Remove spurious "d" from granularity message
- [powerpc*] powernv: Disable native PCIe port management
- [armhf] tty: serial: imx: use the sg count from dma_map_sg
- [i386] tty: serial: pch_uart: correct usage of dma_unmap_sg
- mtd: spi-nor: fix silent truncation in spi_nor_read()
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init
- f2fs: fix potential overflow
- scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
- [mips*] cacheinfo: report shared CPU map
- [arm64] drm/arm/mali: make malidp_mw_connector_helper_funcs static
- [arm64] dmaengine: k3dma: Avoid null pointer traversal
- [amd64] ioat: ioat_alloc_ring() failure handling.
- ocfs2: call journal flush to mark journal as empty after journal
recovery when mount
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.98
- clk: Don't try to enable critical clocks if prepare failed
- iio: buffer: align the size of scan bytes to size of the largest element
- USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
- USB: serial: option: Add support for Quectel RM500Q
- USB: serial: opticon: fix control-message timeouts
- USB: serial: option: add support for Quectel RM500Q in QDL mode
- USB: serial: suppress driver bind attributes
- USB: serial: ch341: handle unbound port at reset_resume
- USB: serial: io_edgeport: handle unbound ports on URB completion
- USB: serial: io_edgeport: add missing active-port sanity check
- USB: serial: keyspan: handle unbound ports
- USB: serial: quatech2: handle unbound ports
- [x86] scsi: fnic: fix invalid stack access
- scsi: mptfusion: Fix double fetch bug in ioctl
- [armhf] dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection
- ALSA: dice: fix fallback from protocol extension into limited
functionality
- ALSA: seq: Fix racy access for queue timer in proc read
- ALSA: usb-audio: fix sync-ep altsetting sanity check
- [arm64] dts: allwinner: a64: olinuxino: Fix SDIO supply regulator
- block: fix an integer overflow in logical block size
- [armhf] dts: am571x-idk: Fix gpios property to have the correct gpio
number
- LSM: generalize flag passing to security_capable
- ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
- usb: core: hub: Improved device recognition on remote wakeup
- [x86] resctrl: Fix an imbalance in domain_remove_cpu()
- [x86] CPU/AMD: Ensure clearing of SME/SEV features is maintained
- [amd64] x86/efistub: Disable paging at mixed mode entry
- [x86] resctrl: Fix potential memory leak
- perf hists: Fix variable name's inconsistency in hists__for_each() macro
- perf report: Fix incorrectly added dimensions as switch perf data file
- mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD
alignment
- mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is
valid
- btrfs: rework arguments of btrfs_unlink_subvol
- btrfs: fix invalid removal of root ref
- btrfs: do not delete mismatched root refs
- btrfs: fix memory leak in qgroup accounting
- mm/page-writeback.c: avoid potential division by zero in
wb_min_max_ratio()
- [armhf] dts: imx6qdl: Add Engicam i.Core 1.5 MX6
- [armhf] dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL
- [arm64,armhf] net: stmmac: 16KB buffer must be 16 byte aligned
- [arm64,armhf] net: stmmac: Enable 16KB buffer size
- mm/huge_memory.c: make __thp_get_unmapped_area static
- mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD
alignment
- bpf: Fix incorrect verifier simulation of ARSH under ALU32
- cfg80211: fix deadlocks in autodisconnect work
- cfg80211: fix memory leak in cfg80211_cqm_rssi_update
- cfg80211: fix page refcount issue in A-MSDU decap
- netfilter: fix a use-after-free in mtype_destroy()
- netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
- netfilter: nft_tunnel: fix null-attribute check
- netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
- netfilter: nf_tables: store transaction list locally while requesting
module
- netfilter: nf_tables: fix flowtable list del corruption
- NFC: pn533: fix bulk-message timeout
- batman-adv: Fix DAT candidate selection on little endian systems
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
- [x86] hv_netvsc: Fix memory leak when removing rndis device
- [arm64] net: hns: fix soft lockup when there is not enough memory
- net: usb: lan78xx: limit size of local TSO packets
- ptp: free ptp device pin descriptors properly
- r8152: add missing endpoint sanity check
- tcp: fix marked lost packets not being retransmitted
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
- tcp: refine rule to allow EPOLLOUT generation under mem pressure
- [arm64] dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
- cfg80211: check for set_wiphy_params
- tick/sched: Annotate lockless access to last_jiffies_update
- drm/nouveau/bar/nv50: check bar1 vmm return value
- drm/nouveau/bar/gf100: ensure BAR is mapped
- drm/nouveau/mmu: qualify vmm during dtor
- reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
- scsi: qla4xxx: fix double free bug
- scsi: bnx2i: fix potential use after free
- scsi: target: core: Fix a pr_debug() argument
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
- scsi: core: scsi_trace: Use get_unaligned_be*()
- perf probe: Fix wrong address verification
[ Joe Richey ]
* [cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237)
[ Salvatore Bonaccorso ]
* Refresh powerpc-fix-mcpu-options-for-spe-only-compiler.patch (Context
changes in 4.19.88)
* Drop 0027-RDMA-hns-Fix-the-bug-with-updating-rq-head-pointer-w.patch
* Drop 0028-RDMA-hns-Bugfix-for-the-scene-without-receiver-queue.patch
* [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch
(Context changes in 4.19.88)
* [rt] Update to 4.19.90-rt35:
- Update "workqueue: rework" for workqueue changes in 4.19.90
* [rt] Drop 0245-Revert-arm64-preempt-Fix-big-endian-when-checking-pr.patch
* Refresh 0013-scsi-hisi_sas-Relocate-some-codes-to-avoid-an-unused.patch
for context changes in 4.19.93.
* [rt] Refresh
0253-watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch (Context
changes in 4.19.93)
* [rt] Refresh 0199-net-move-xmit_recursion-to-per-task-variable-on-RT.patch
(Context changes in 4.19.97)
[ Ben Hutchings ]
* [rt] Update to 4.19.94-rt38:
- Refresh "x86/ioapic: Don't let setaffinity unmask threaded EOI interrupt
too early" which was partly included in 4.19.92
* aufs: Update support patchset to aufs4.19.63+ 20200113; no functional
changes
* Bump ABI to 8
* libertas: Fix two buffer overflows at parsing bss descriptor
(CVE-2019-14896, CVE-2019-14897)
* wimax: i2400: fix memory leak (CVE-2019-19051)
* wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
(CVE-2019-19051)
* [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511)
[ Noah Meyerhans ]
* random: try to actively add entropy rather than passively wait for it
(Closes: #948519)
[ Aurelien Jarno ]
* [mips*/malta] Enable POWER_RESET_PIIX4_POWEROFF.
-- Salvatore Bonaccorso <email address hidden> Sun, 26 Jan 2020 21:01:13 +0100
