** Description changed:

  SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2019-07-25
  
              Ported from the following upstream stable releases:
                  v4.14.107, v4.19.30,
                  v4.14.108, v4.19.31
  
         from git://git.kernel.org/
+ 
+ ACPICA: Reference Counts: increase max to 0x4000 for large servers
+ gro_cells: make sure device is up in gro_cells_receive()
+ ipv4/route: fail early when inet dev is missing
+ l2tp: fix infoleak in l2tp_ip6_recvmsg()
+ net: hsr: fix memory leak in hsr_dev_finalize()
+ net/hsr: fix possible crash in add_timer()
+ net: sit: fix UBSAN Undefined behaviour in check_6rd
+ net/x25: fix use-after-free in x25_device_event()
+ net/x25: reset state in x25_connect()
+ pptp: dst_release sk_dst_cache in pptp_sock_destruct
+ ravb: Decrease TxFIFO depth of Q3 and Q2 to one
+ route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
+ rxrpc: Fix client call queueing, waiting for channel
+ tcp: Don't access TCP_SKB_CB before initializing it
+ tcp: handle inet_csk_reqsk_queue_add() failures
+ vxlan: Fix GRO cells race condition between receive and link delete
+ vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
+ net/mlx4_core: Fix reset flow when in command polling mode
+ net/mlx4_core: Fix locking in SRIOV mode when switching between events and 
polling
+ net/mlx4_core: Fix qp mtt size calculation
+ net/x25: fix a race in x25_bind()
+ net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
+ bonding: fix PACKET_ORIGDEV regression
+ missing barriers in some of unix_sock ->addr and ->path accesses
+ ipvlan: disallow userns cap_net_admin to change global mode/flags
+ perf/x86: Fixup typo in stub functions
+ ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against 
Liquid Saffire 56
+ ALSA: firewire-motu: fix construction of PCM frame for capture direction
+ perf/x86/intel: Fix memory corruption
+ perf/x86/intel: Make dev_attr_allow_tsx_force_abort static
+ It's wrong to add len to sector_nr in raid10 reshape twice
+ sctp: remove sched init from sctp_stream_init
+ team: use operstate consistently for linkup
+ ipv6: route: enforce RCU protection in rt6_update_exception_stamp_rt()
+ ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
+ ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
+ i40e: report correct statistics when XDP is enabled
+ 9p: use inode->i_lock to protect i_size_write() under 32-bit
+ 9p/net: fix memory leak in p9_client_create
+ ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
+ iio: adc: exynos-adc: Fix NULL pointer exception on unbind
+ stm class: Fix an endless loop in channel allocation
+ crypto: caam - fixed handling of sg list
+ crypto: ahash - fix another early termination in hash walk
+ crypto: rockchip - fix scatterlist nents error
+ crypto: rockchip - update new iv to device in multiple operations
+ drm/imx: ignore plane updates on disabled crtcs
+ gpu: ipu-v3: Fix i.MX51 CSI control registers offset
+ drm/imx: imx-ldb: add missing of_node_puts
+ gpu: ipu-v3: Fix CSI offsets for imx53
+ s390/dasd: fix using offset into zero size array error
+ Input: pwm-vibra - prevent unbalanced regulator
+ Input: pwm-vibra - stop regulator after disabling pwm, not before
+ ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be 
uninitialized
+ ASoC: dapm: fix out-of-bounds accesses to DAPM lookup tables
+ ASoC: rsnd: fixup rsnd_ssi_master_clk_start() user count check
+ KVM: arm/arm64: Reset the VCPU without preemption and vcpu state loaded
+ ARM: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug
+ Input: cap11xx - switch to using set_brightness_blocking()
+ Input: ps2-gpio - flush TX work when closing port
+ Input: matrix_keypad - use flush_delayed_work()
+ mac80211: Fix Tx aggregation session tear down with ITXQs
+ ipvs: fix dependency on nf_defrag_ipv6
+ floppy: check_events callback should not return a negative number
+ NFS: Don't use page_file_mapping after removing the page
+ mm/gup: fix gup_pmd_range() for dax
+ Revert "mm: use early_pfn_to_nid in page_ext_init"
+ mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs
+ net: hns: Fix object reference leaks in hns_dsaf_roce_reset()
+ i2c: cadence: Fix the hold bit setting
+ i2c: bcm2835: Clear current buffer pointers and counts after a transfer
+ auxdisplay: ht16k33: fix potential user-after-free on module unload
+ Input: st-keyscan - fix potential zalloc NULL dereference
+ clk: sunxi-ng: v3s: Fix TCON reset de-assert bit
+ clk: sunxi: A31: Fix wrong AHB gate number
+ esp: Skip TX bytes accounting when sending from a request socket
+ ARM: 8824/1: fix a migrating irq bug when hotplug cpu
+ af_key: unconditionally clone on broadcast
+ assoc_array: Fix shortcut creation
+ keys: Fix dependency loop between construction record and auth key
+ scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
+ net: systemport: Fix reception of BPDUs
+ pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
+ qmi_wwan: apply SET_DTR quirk to Sierra WP7607
+ net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
+ mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush timeout issue
+ ASoC: topology: free created components in tplg load error
+ qed: Fix iWARP syn packet mac address validation.
+ arm64: Relax GIC version check during early boot
+ net: marvell: mvneta: fix DMA debug warning
+ tmpfs: fix link accounting when a tmpfile is linked in
+ ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN
+ ARCv2: lib: memcpy: fix doing prefetchw outside of buffer
+ ARC: uacces: remove lp_start, lp_end from clobber list
+ ARCv2: support manual regfile save on interrupts
+ phonet: fix building with clang
+ mac80211_hwsim: propagate genlmsg_reply return code
+ net: thunderx: make CFG_DONE message to run through generic send-ack sequence
+ nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K
+ nfp: bpf: fix ALU32 high bits clearance bug
+ net: set static variable an initial value in atl2_probe()
+ tmpfs: fix uninitialized return value in shmem_link
+ media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
+ stm class: Prevent division by zero
+ libnvdimm/label: Clear 'updating' flag after label-set update
+ libnvdimm, pfn: Fix over-trim in trim_pfn_device()
+ libnvdimm/pmem: Honor force_raw for legacy pmem regions
+ libnvdimm: Fix altmap reservation size calculation
+ fix cgroup_do_mount() handling of failure exits
+ crypto: arm/crct10dif - revert to C code for short inputs
+ crypto: arm64/crct10dif - revert to C code for short inputs
+ crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
+ crypto: testmgr - skip crc32c context test for ahash algorithms
+ crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
+ crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine
+ CIFS: Do not reset lease state to NONE on lease break
+ CIFS: Fix read after write for files with read caching
+ tracing: Use strncpy instead of memcpy for string keys in hist triggers
+ tracing: Do not free iter->trace in fail path of tracing_open_pipe()
+ xen: fix dom0 boot on huge systems
+ ACPI / device_sysfs: Avoid OF modalias creation for removed device
+ mmc: sdhci-esdhc-imx: fix HS400 timing issue
+ spi: ti-qspi: Fix mmap read when more than one CS in use
+ spi: pxa2xx: Setup maximum supported DMA transfer length
+ regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
+ regulator: max77620: Initialize values for DT properties
+ regulator: s2mpa01: Fix step values for some LDOs
+ clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
+ clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
+ s390/setup: fix early warning messages
+ s390/virtio: handle find on invalid queue gracefully
+ scsi: virtio_scsi: don't send sc payload with tmfs
+ scsi: aacraid: Fix performance issue on logical drives
+ scsi: sd: Optimal I/O size should be a multiple of physical block size
+ scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
+ fs/devpts: always delete dcache dentry-s in dput()
+ splice: don't merge into linked buffers
+ m68k: Add -ffreestanding to CFLAGS
+ Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
+ btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
+ Btrfs: fix corruption reading shared and compressed extents after hole 
punching
+ crypto: pcbc - remove bogus memcpy()s with src == dest
+ libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
+ irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table
+ x86/kprobes: Prohibit probing on optprobe template code
+ cpufreq: tegra124: add missing of_node_put()
+ cpufreq: pxa2xx: remove incorrect __init annotation
+ ext4: add mask of ext4 flags to swap
+ ext4: fix crash during online resizing
+ IB/hfi1: Close race condition on user context disable and close
+ cxl: Wrap iterations over afu slices inside 'afu_list_lock'
+ ext2: Fix underflow in ext2_max_size()
+ clk: uniphier: Fix update register for CPU-gear
+ clk: clk-twl6040: Fix imprecise external abort for pdmclk
+ clk: ingenic: Fix round_rate misbehaving with non-integer dividers
+ clk: ingenic: Fix doc of ingenic_cgu_div_info
+ usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
+ nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
+ mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
+ mm/vmalloc: fix size check for remap_vmalloc_range_partial()
+ kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
+ device property: Fix the length used in PROPERTY_ENTRY_STRING()
+ intel_th: Don't reference unassigned outputs
+ parport_pc: fix find_superio io compare code, should use equal test.
+ i2c: tegra: fix maximum transfer size
+ crypto: arm64/aes-neonbs - fix returning final keystream block
+ drm/i915: Relax mmap VMA check
+ serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
+ serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
+ serial: 8250_pci: Fix number of ports for ACCES serial cards
+ serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 
chip use the pci_pericom_setup()
+ jbd2: clear dirty flag when revoking a buffer from an older transaction
+ jbd2: fix compile warning when using JBUFFER_TRACE
+ security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
+ powerpc/32: Clear on-stack exception marker upon exception return
+ powerpc/wii: properly disable use of BATs when requested.
+ powerpc/powernv: Make opal log only readable by root
+ powerpc/83xx: Also save/restore SPRG4-7 during suspend
+ powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest
+ powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning
+ powerpc/hugetlb: Don't do runtime allocation of 16G pages in LPAR 
configuration
+ powerpc/traps: fix recoverability of machine check handling on book3s/32
+ powerpc/traps: Fix the message printed when stack overflows
+ ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
+ arm64: Fix HCR.TGE status for NMI contexts
+ arm64: debug: Ensure debug handlers check triggering exception level
+ arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2
+ dm: fix to_sector() for 32bit
+ dm integrity: limit the rate of error messages
+ cpcap-charger: generate events for userspace
+ NFS: Fix I/O request leakages
+ NFS: Fix an I/O request leakage in nfs_do_recoalesce
+ NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
+ nfsd: fix memory corruption caused by readdir
+ nfsd: fix wrong check in write_v4_end_grace()
+ NFSv4.1: Reinitialise sequence results before retransmitting a request
+ PM / wakeup: Rework wakeup source timer cancellation
+ x86/unwind/orc: Fix ORC unwind table alignment
+ perf intel-pt: Fix CYC timestamp calculation after OVF
+ perf auxtrace: Define auxtrace record alignment
+ perf intel-pt: Fix overlap detection to identify consecutive buffers correctly
+ perf intel-pt: Fix overlap calculation for padding
+ perf intel-pt: Fix divide by zero when TSC is not available
+ md: Fix failed allocation of md_register_thread
+ tpm/tpm_crb: Avoid unaligned reads in crb_recv()
+ tpm: Unify the send callback behaviour
+ rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
+ media: imx: prpencvf: Stop upstream before disabling IDMA channel
+ media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
+ media: vimc: Add vimc-streamer for stream control
+ media: imx: csi: Disable CSI immediately after last EOF
+ media: imx: csi: Stop upstream before disabling IDMA channel
+ drm/radeon/evergreen_cs: fix missing break in switch statement
+ KVM: Call kvm_arch_memslots_updated() before updating memslots
+ KVM: x86/mmu: Detect MMIO generation wrap in any address space
+ KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
+ KVM: nVMX: Sign extend displacements of VMX instr's mem operands
+ KVM: nVMX: Apply addr size mask to effective address for VMX instructions
+ KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
+ s390/setup: fix boot crash for machine without EDAT-1
+ crypto: caam - fix hash context DMA unmap size
+ crypto: caam - fix DMA mapping of stack memory
+ KVM: arm/arm64: vgic: Make vgic_dist->lpi_list_lock a raw_spinlock
+ arm/arm64: KVM: Allow a VCPU to fully reset itself
+ arm/arm64: KVM: Don't panic on failure to properly reset system registers
+ ASoC: samsung: Prevent clk_get_rate() calls in atomic context
+ mac80211: call drv_ibss_join() on restart
+ blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue
+ xprtrdma: Make sure Send CQ is allocated on an existing compvec
+ net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend()
+ x86/CPU: Add Icelake model number
+ kallsyms: Handle too long symbols in kallsyms.c
+ ARM: 8835/1: dma-mapping: Clear DMA ops on teardown
+ net: dsa: bcm_sf2: Do not assume DSA master supports WoL
+ qed: Fix iWARP buffer size provided for syn packet processing.
+ mm: handle lru_add_drain_all for UP properly
+ ARCv2: don't assume core 0x54 has dual issue
+ bpf, lpm: fix lookup bug in map_delete_elem
+ acpi/nfit: Fix bus command validation
+ mmc:fix a bug when max_discard is 0
+ netfilter: ipt_CLUSTERIP: fix warning unused variable cn
+ UBUNTU: [Config] updateconfigs for CONFIG_SUN50I_ERRATUM_UNKNOWN1
+ clocksource/drivers/arch_timer: Workaround for Allwinner A64 timer instability
+ irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code
+ ext4: fix check of inode in swap_inode_boot_loader
+ ext4: cleanup pagecache before swap i_data
+ ext4: update quota information while swapping boot loader inode
+ dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
+ mm/memory.c: do_fault: avoid usage of stale vm_area_struct
+ media: i2c: ov5640: Fix post-reset delay
+ powerpc/powernv: Don't reprogram SLW image on every KVM guest entry/exit
+ mfd: sm501: Fix potential NULL pointer dereference
+ nfsd: fix performance-limiting session calculation
+ svcrpc: fix UDP on servers with lots of threads
+ stable-kernel-rules.rst: add link to networking patch queue
+ bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
+ UBUNTU: upstream stable to v4.14.108, v4.19.31

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1837952

Title:
  Bionic update: upstream stable patchset 2019-07-25

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1837952/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to