-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 26 Apr 2020 14:04:11 +0100 Source: linux Architecture: source Version: 4.19.118-1 Distribution: buster Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Ben Hutchings <benh@debian.org> Closes: 947021 951274 953017 955366 Changes: linux (4.19.118-1) buster; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.99 - Revert "efi: Fix debugobjects warning on 'efi_rts_work'" - xfs: Sanity check flags of Q_XQUOTARM call - [x86] mfd: intel-lpss: Add default I2C device properties for Gemini Lake - SUNRPC: Fix svcauth_gss_proxy_init() - [powerpc*] pseries: Enable support for ibm,drc-info property - tipc: update mon's self addr when node addr generated - tipc: fix wrong timeout input for tipc_wait_for_cond() - mt7601u: fix bbp version check in mt7601u_wait_bbp_ready - [armhf] crypto: sun4i-ss - fix big endian issues - perf map: No need to adjust the long name of modules - ipmi: Fix memory leak in __ipmi_bmc_register (CVE-2019-19046) - ixgbe: don't clear IPsec sa counters on HW clearing - drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset() - iio: fix position relative kernel version - apparmor: Fix network performance issue in aa_label_sk_perm - ALSA: hda: fix unused variable warning - apparmor: don't try to replace stale label in ptrace access check - firmware: coreboot: Let OF core populate platform device - bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER - [arm64] drm/hisilicon: hibmc: Don't overwrite fb helper surface depth - IB/rxe: replace kvfree with vfree - [amd64] IB/hfi1: Add mtu check for operational data VLs - genirq/debugfs: Reinstate full OF path for domain name - [arm64] usb: dwc3: add EXTCON dependency for qcom - cfg80211: regulatory: make initialization more robust - [x86] mei: replace POLL* with EPOLL* for write queues. - [arm64] drm/msm: fix unsigned comparison with less than zero - ALSA: usb-audio: update quirk for B&W PX to remove microphone - iwlwifi: nvm: get num of hw addresses from firmware - netfilter: nft_osf: usage from output path is not valid - [x86] pwm: lpss: Release runtime-pm reference from the driver's remove callback - [powerpc*] pseries/memory-hotplug: Fix return value type of find_aa_index - rtlwifi: rtl8821ae: replace _rtl8821ae_mrate_idx_to_arfr_id with generic version - netfilter: nf_flow_table: do not remove offload when other netns's interface is down - tipc: eliminate message disordering during binding table update - [arm64] net: socionext: Add dummy PHY register read in phy_write() - [arm64,armhf] drm/sun4i: hdmi: Fix double flag assignation - [arm64] net: hns3: add error handler for hns3_nic_init_vector_data() - pcrypt: use format specifier in kobject_add - [armhf] ASoC: sun8i-codec: add missing route for ADC - [arm64] pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins - [armhf] bus: ti-sysc: Add mcasp optional clocks flag - exportfs: fix 'passing zero to ERR_PTR()' warning - net: always initialize pagedlen - net: phy: Fix not to call phy_resume() if PHY is not attached - [amd64] IB/hfi1: Correctly process FECN and BECN in packets - IB/rxe: Fix incorrect cache cleanup in error flow - ipv6: add missing tx timestamping on IPPROTO_RAW - [arm64] net: hns3: fix error handling int the hns3_get_vector_ring_chain - vxlan: changelink: Fix handling of default remotes - fork,memcg: fix crash in free_thread_stack on memcg charge fail - [armhf] clk: highbank: fix refcount leak in hb_clk_init() - [armhf] clk: ti: fix refcount leak in ti_dt_clocks_register() - [armhf] clk: socfpga: fix refcount leak - [armhf] clk: samsung: exynos4: fix refcount leak in exynos4_get_xom() - [armhf] clk: imx6q: fix refcount leak in imx6q_clocks_init() - [armhf] clk: imx6sx: fix refcount leak in imx6sx_clocks_init() - [armhf] clk: armada-370: fix refcount leak in a370_clk_init() - [armel] clk: kirkwood: fix refcount leak in kirkwood_clk_init() - [armhf] clk: armada-xp: fix refcount leak in axp_clk_init() - [armhf] clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init() - [armhf] clk: dove: fix refcount leak in dove_clk_init() - drm: Fix error handling in drm_legacy_addctx - [armhf] drm/etnaviv: fix some off by one bugs - drm/fb-helper: generic: Fix setup error path - fork, memcg: fix cached_stacks case - [amd64] IB/usnic: Fix out of bounds index check in query pkey - RDMA/ocrdma: Fix out of bounds index check in query pkey - RDMA/qedr: Fix out of bounds index check in query pkey - RDMA/iw_cxgb4: Fix the unchecked ep dereference - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ9031 - [armhf] memory: tegra: Don't invoke Tegra30+ specific memory timing setup on Tegra20 - [armhf] drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump() - kbuild: mark prepare0 as PHONY to fix external module build - crypto: tgr192 - fix unaligned memory access - [armhf] ASoC: imx-sgtl5000: put of nodes if finding codec fails - IB/iser: Pass the correct number of entries for dma mapped SGL - [arm64] net: hns3: fix wrong combined count returned by ethtool -l - IB/mlx5: Don't override existing ip_protocol - rtc: cmos: ignore bogus century byte - [i386] spi/topcliff_pch: Fix potential NULL dereference on allocation error - [arm64] net: hns3: fix bug of ethtool_ops.get_channels for VF - [armhf] clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it - iwlwifi: mvm: avoid possible access out of array. - net/mlx5: Take lock with IRQs disabled to avoid deadlock - ip_tunnel: Fix route fl4 init in ip_md_tunnel_xmit - iwlwifi: mvm: fix A-MPDU reference assignment - [armhf] bus: ti-sysc: Fix timer handling with drop pm_runtime_irq_safe() - [x86] tty: ipwireless: Fix potential NULL pointer dereference - driver: uio: fix possible memory leak in __uio_register_device - driver: uio: fix possible use-after-free in __uio_register_device - driver core: Fix DL_FLAG_AUTOREMOVE_SUPPLIER device link flag handling - driver core: Avoid careless re-use of existing device links - driver core: Do not resume suppliers under device_links_write_lock() - driver core: Fix handling of runtime PM flags in device_link_add() - driver core: Do not call rpm_put_suppliers() in pm_runtime_drop_link() - drm/xen-front: Fix mmap attributes for display buffers - iwlwifi: mvm: fix RSS config command - [mips*] rtc: ds1672: fix unintended sign extension - ath10k: fix dma unmap direction for management frames - net: phy: fixed_phy: Fix fixed_phy not checking GPIO - rtc: ds1307: rx8130: Fix alarm handling - net/smc: original socket family in inet_sock_diag - [arm64] rtc: pm8xxx: fix unintended sign extension - iw_cxgb4: use tos when importing the endpoint - iw_cxgb4: use tos when finding ipv6 routes - xsk: add missing smp_rmb() in xsk_mmap - [armhf] drm/etnaviv: potential NULL dereference - RDMA/mlx5: Fix memory leak in case we fail to add an IB device - driver core: Fix possible supplier PM-usage counter imbalance - [armhf] usb: phy: twl6030-usb: fix possible use-after-free on remove - block: don't use bio->bi_vcnt to figure out segment number - keys: Timestamp new keys - [armhf] net: dsa: b53: Fix default VLAN ID - [armhf] net: dsa: b53: Properly account for VLAN filtering - [armhf] net: dsa: b53: Do not program CPU port's PVID - mt76: usb: fix possible memory leak in mt76u_buf_free - vfio_pci: Enable memory accesses before calling pci_map_rom - mdio_bus: Fix PTR_ERR() usage after initialization to constant - [powerpc*] KVM: Release all hardware TCE tables attached to a group - [x86] staging: r8822be: check kzalloc return or bail - [arm*] dmaengine: mv_xor: Use correct device for DMA API - cdc-wdm: pass return value of recover_from_urb_loss - brcmfmac: create debugfs files for bus-specific layer - net/mlx5: Delete unused FPGA QPN variable - drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON - drm/nouveau/pmu: don't print reply values if exec is false - drm/nouveau: fix missing break in switch statement - driver core: Fix PM-runtime for links added during consumer probe - [arm64] ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of() - [arm64,armhf] net: dsa: fix unintended change of bridge interface STP state - fs/nfs: Fix nfs_parse_devname to not modify it's argument - [x86] staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx - [ppc64el] 64s: Fix logic when handling unknown CPU features - NFS: Fix a soft lockup in the delegation recovery code - perf: Copy parent's address filter offsets on clone - perf, pt, coresight: Fix address filters for vmas with non-zero offset - [armhf] clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable - [armhf] clocksource/drivers/exynos_mct: Fix error path in timer resources initialization - [x86] platform/x86: wmi: fix potential null pointer dereference - NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount - ath10k: Fix length of wmi tlv command for protected mgmt frames - netfilter: nft_set_hash: fix lookups with fixed size hash on big endian - netfilter: nft_set_hash: bogus element self comparison from deactivation path - net: sched: act_csum: Fix csum calc for tagged packets - [arm*] hwrng: bcm2835 - fix probe as platform device - [amd64] iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm() - NFS: Add missing encode / decode sequence_maxsz to v4.2 operations - NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE() - [amd64] net: aquantia: fixed instack structure overflow - media: dvb/earth-pt1: fix wrong initialization for demod blocks - rbd: clear ->xferred on error from rbd_obj_issue_copyup() - PCI: Fix "try" semantics of bus and slot reset - scsi: megaraid_sas: reduce module load time - xen, cpu_hotplug: Prevent an out of bounds access - net/mlx5: Fix multiple updates of steering rules in parallel - net/mlx5e: IPoIB, Fix RX checksum statistics update - [arm64,armhf] soc: amlogic: gx-socinfo: Add mask for each SoC packages - media: ivtv: update *pos correctly in ivtv_read_pos() - media: cx18: update *pos correctly in cx18_read_pos() - [armhf] media: wl128x: Fix an error code in fm_download_firmware() - media: cx23885: check allocation return - jfs: fix bogus variable self-initialization - [armhf] dts: sun9i: optimus: Fix fixed-regulators - net: phy: don't clear BMCR in genphy_soft_reset - [armhf] OMAP2+: Fix potentially uninitialized return value for _setup_reset() - [arm64,armhf] net: dsa: Avoid null pointer when failing to connect to PHY - media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame - [arm64,armhf] spi: tegra114: clear packed bit for unpacked mode - [arm64,armhf] spi: tegra114: fix for unpacked mode transfers - [arm64,armhf] spi: tegra114: terminate dma and reset on transfer timeout - [arm64,armhf] spi: tegra114: flush fifos - [arm64,armhf] spi: tegra114: configure dma burst size to fifo trig level - [armhf] bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated - [arm*] spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios - drm/fb-helper: generic: Call drm_client_add() after setup is done - [arm64] vdso: don't leak kernel addresses - rtc: Fix timestamp value for RTC_TIMESTAMP_BEGIN_1900 - bpf: Add missed newline in verifier verbose log - [x86] drm/vmwgfx: Remove set but not used variable 'restart' - scsi: qla2xxx: Unregister chrdev if module initialization fails - net/sched: cbs: fix port_rate miscalculation - ACPI: button: reinitialize button state upon resume - [arm64,armhf] firmware: arm_scmi: fix of_node leak in scmi_mailbox_check - rxrpc: Fix detection of out of order acks - scsi: target/core: Fix a race condition in the LUN lookup code - brcmfmac: fix leak of mypkt on error return path - [arm64] net: hns3: fix for vport->bw_limit overflow problem - [x86] hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses - perf/core: Fix the address filtering fix - [arm64,armhf] soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask - [x86] platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer - tipc: set sysctl_tipc_rmem and named_timeout right range - usb: typec: tcpm: Notify the tcpc to start connection-detection for SRPs - [arm64] net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info() - 6lowpan: Off by one handling ->nexthdr - ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk() - afs: Fix AFS file locking to allow fine grained locks - afs: Further fix file locking - NFS: Don't interrupt file writeout due to fatal errors - scsi: qla2xxx: Fix a format specifier - scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() - scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory - [ppc64el] KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest - netfilter: nft_flow_offload: add entry to flowtable after confirmation - packet: in recvmsg msg_name return at least sizeof sockaddr_ll - ASoC: fix valid stream condition - [arm*] dwc2: gadget: Fix completed transfer size calculation in DDMA - IB/mlx5: Add missing XRC options to QP optional params mask - RDMA/rxe: Consider skb reserve space based on netdev of GID - [amd64] iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU - [arm64] dmaengine: tegra210-adma: restore channel status - mmc: core: fix possible use after free of host - ath10k: Fix encoding for protected management frames - afs: Fix the afs.cell and afs.volume xattr handlers - l2tp: Fix possible NULL pointer dereference - [x86] platform/x86: alienware-wmi: printing the wrong error code - netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule - [arm64,armhf] pwm: meson: Consider 128 a valid pre-divider - [arm64,armhf] pwm: meson: Don't disable PWM when setting duty repeatedly - nfp: bpf: fix static check error through tightening shift amount adjustment - netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value - [arm*] thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power - EDAC/mc: Fix edac_mc_find() in case no device is found - afs: Fix key leak in afs_release() and afs_evict_inode() - afs: Don't invalidate callback if AFS_VNODE_DIR_VALID not set - afs: Fix lock-wait/callback-break double locking - afs: Fix double inc of vnode->cb_break - [armhf] dts: sun8i-h3: Fix wifi in Beelink X2 DT - [arm64] clk: meson: gxbb: no spread spectrum on mpll0 - [arm64] clk: meson: axg: spread spectrum is on mpll2 - [arm64] dmaengine: tegra210-adma: Fix crash during probe - [arm64] dts: meson: libretech-cc: set eMMC as removable - RDMA/qedr: Fix incorrect device rate. - [x86] crypto: ccp - fix AES CFB error exposed by new test vectors - [x86] crypto: ccp - Fix 3DES complaint from ccp-crypto module - iommu: Add missing new line for dma type - iommu: Use right function to get group for device - signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig - inet: frags: call inet_frags_fini() after unregister_pernet_subsys() - [arm64] net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector - [x86] netvsc: unshare skb in VF rx handler - net: core: support XDP generic on stacked devices. - RDMA/uverbs: check for allocation failure in uapi_add_elm() - net: don't clear sock->sk early to avoid trouble in strparser - [arm64] phy: qcom-qusb2: fix missing assignment of ret when calling clk_prepare_enable - [arm64] clk: sunxi-ng: sun50i-h6-r: Fix incorrect W1 clock gate register - media: vivid: fix incorrect assignment operation when setting video mode - [arm64] crypto: inside-secure - fix zeroing of the request in ahash_exit_inv - [arm64] crypto: inside-secure - fix queued len computation - mpls: fix warning with multi-label encap - [arm64] dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node - [arm64] dts: meson-gxm-khadas-vim2: fix Bluetooth support - [amd64] iommu/vt-d: Duplicate iommu_resv_region objects per device list - qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state - qed: iWARP - fix uninitialized callback - [powerpc*] cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild - [powerpc*] pseries/mobility: rebuild cacheinfo hierarchy post-migration - bpf: fix the check that forwarding is enabled in bpf_ipv6_fib_lookup - [amd64] IB/hfi1: Handle port down properly in pio - [arm64] drm/msm/mdp5: Fix mdp5_cfg_init error return - net: netem: fix backlog accounting for corrupted GSO frames - net/udp_gso: Allow TX timestamp with UDP GSO - [s390x] net/af_iucv: build proper skbs for HiperTransport - [s390x] net/af_iucv: always register net_device notifier - [armhf] ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs - rtc: pcf8563: Fix interrupt trigger method - rtc: pcf8563: Clear event flags and disable interrupts before requesting irq - net/sched: cbs: Fix error path of cbs_module_init - [arm64] drm/msm/a3xx: remove TPL1 regs from snapshot - ip6_fib: Don't discard nodes with valid routing information in fib6_locate_1() - perf/ioctl: Add check for the sample_period value - [x86] dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width" - tools: bpftool: use correct argument in cgroup errors - fork,memcg: alloc_thread_stack_node needs to set tsk->stack - bnxt_en: Fix ethtool selftest crash under error conditions. - bnxt_en: Suppress error messages when querying DSCP DCB capabilities. - [amd64] iommu: Make iommu_disable safer - [x86] mfd: intel-lpss: Release IDA resources - rxrpc: Fix uninitialized error code in rxrpc_send_data_packet() - xprtrdma: Fix use-after-free in rpcrdma_post_recvs - PM: ACPI/PCI: Resume all devices during hibernation - ACPI: PM: Simplify and fix PM domain hibernation callbacks - ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS - devres: allow const resource arguments - [arm64] RDMA/hns: Fixs hw access invalid dma memory error - ceph: fix "ceph.dir.rctime" vxattr value - xdp: fix possible cq entry leak - scsi: libfc: fix null pointer dereference on a null lport - xfrm interface: ifname may be wrong in logs - [armhf] clk: sunxi-ng: v3s: add the missing PLL_DDR1 - PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() - libertas_tf: Use correct channel range in lbtf_geo_init - qed: reduce maximum stack frame size - usb: host: xhci-hub: fix extra endianness conversion - [x86] crypto: ccp - Reduce maximum stack usage - tipc: reduce risk of wakeup queue starvation - net/mlx5: Fix mlx5_ifc_query_lag_out_bits - cifs: fix rmmod regression in cifs.ko caused by force_sig changes - net: fix bpf_xdp_adjust_head regression for generic-XDP - cxgb4: smt: Add lock for atomic_dec_and_test - ext4: set error return correctly when ext4_htree_store_dirent fails - [arm64] RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver - [arm64] RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver - net/rds: Add a few missing rds_stat_names entries - tools: bpftool: fix arguments for p_err() in do_event_pipe() - tools: bpftool: fix format strings and arguments for jsonw_printf() - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails - signal: Allow cifs and drbd to receive their terminating signals - [ppc64el] 64s/radix: Fix memory hot-unplug page table split - [x86] dmaengine: dw: platform: Switch to acpi_dma_controller_register() - mac80211: minstrel_ht: fix per-group max throughput rate initialization - i40e: reduce stack usage in i40e_set_fc - [armhf] 8896/1: VDSO: Don't leak kernel addresses - [mips*] avoid explicit UB in assignment of mips_io_port_base - media: em28xx: Fix exception handling in em28xx_alloc_urbs() - ahci: Do not export local variable ahci_em_messages - rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up - Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()" - hwmon: (lm75) Fix write operations for negative temperatures - net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate - power: supply: Init device wakeup after device_add() - [x86] perf: Fix the dependency of the x86 insn decoder selftest - irqdomain: Add the missing assignment of domain->fwnode for named fwnode - bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA - bcache: Fix an error code in bch_dump_read() - netfilter: ctnetlink: honor IPS_OFFLOAD flag - [arm64] wcn36xx: use dynamic allocation for large variables - xsk: avoid store-tearing when assigning queues - xsk: avoid store-tearing when assigning umem - led: triggers: Fix dereferencing of null pointer - [arm64] net: hns3: fix error VF index when setting VLAN offload - rtlwifi: Fix file release memory leak - f2fs: fix wrong error injection path in inc_valid_block_count() - f2fs: fix error path of f2fs_convert_inline_page() - [x86] scsi: fnic: fix msix interrupt allocation - Btrfs: fix hang when loading existing inode cache off disk - Btrfs: fix inode cache waiters hanging on failure to start caching thread - Btrfs: fix inode cache waiters hanging on path allocation failure - btrfs: use correct count in btrfs_file_write_iter() - ixgbe: sync the first fragment unconditionally - ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet - RDMA/cma: Fix false error message - net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names' - bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands - f2fs: fix to avoid accessing uninitialized field of inode page in is_alive() - [powerpc*] mm/mce: Keep irqs disabled during lockless page table walk - bpf: fix BTF limits - [amd64] iommu: Wait for completion of IOTLB flush in attach_device - [amd64] net: aquantia: Fix aq_vec_isr_legacy() return value - cxgb4: Signedness bug in init_one() - [arm64] net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() - [arm64] net: netsec: Fix signedness bug in netsec_probe() - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix signedness bug in probe - of: mdio: Fix a signedness bug in of_phy_get_and_connect() - [arm64] net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() - net: sched: cbs: Avoid division by zero when calculating the port rate - nvme: retain split access workaround for capability reads - [arm64,armhf] net: stmmac: gmac4+: Not all Unicast addresses may be available - rxrpc: Fix trace-after-put looking at the put connection record - mac80211: accept deauth frames in IBSS mode - llc: fix another potential sk_buff leak in llc_ui_sendmsg() - llc: fix sk_buff refcounting in llc_conn_state_process() - ip6erspan: remove the incorrect mtu limit for ip6erspan - [arm64,armhf] net: stmmac: fix length of PTP clock's name string - [arm64,armhf] net: stmmac: fix disabling flexible PPS output - sctp: add chunks to sk_backlog when the newsk sk_socket is not set - [s390x] qeth: Fix error handling during VNICC initialization - [s390x] qeth: Fix initialization of vnicc cmd masks during set online - act_mirred: Fix mirred_init_module error handling - net: avoid possible false sharing in sk_leave_memory_pressure() - net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head - tcp: annotate lockless access to tcp_memory_pressure - net/smc: receive returns without data - net/smc: receive pending data after RCV_SHUTDOWN - [arm64] drm/msm/dsi: Implement reset correctly - [armhf] dmaengine: imx-sdma: fix size check for sdma script_number - [arm64] hibernate: check pgd table allocation - net: netem: fix error path for corrupted GSO frames - net: netem: correct the parent's backlog when corrupted packet was dropped - xsk: Fix registration of Rx-only sockets - bpf, offload: Unlock on error in bpf_offload_dev_create() - afs: Fix missing timeout reset - [x86] hv_netvsc: Fix offset usage in netvsc_send_table() - [x86] hv_netvsc: Fix send_table offset in case of a host bug - afs: Fix large file support - [armhf] hwrng: omap3-rom - Fix missing clock by probing with device tree - [mips64el,mipsel] Loongson: Fix return value of loongson_hwmon_init - [x86] hv_netvsc: flag software created hash value - net: neigh: use long type to store jiffies delta - packet: fix data-race in fanout_flow_is_huge() - affs: fix a memory leak in affs_remount - afs: Remove set but not used variables 'before', 'after' - [armhf] dmaengine: ti: edma: fix missed failure handling - drm/radeon: fix bad DMA from INTERRUPT_CNTL2 - [arm64] dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.100 - can, slip: Protect tty->disc_data in write_wakeup and close with RCU - [x86] firestream: fix memory leaks - gtp: make sure only SOCK_DGRAM UDP sockets are accepted - ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions - net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM - net: ip6_gre: fix moving ip6gre between namespaces - net, ip6_tunnel: fix namespaces move - net, ip_tunnel: fix namespaces move - net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() - net_sched: fix datalen for ematch - net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject - net-sysfs: fix netdev_queue_add_kobject() breakage - net-sysfs: Call dev_hold always in netdev_queue_add_kobject - net-sysfs: Call dev_hold always in rx_queue_add_kobject - net-sysfs: Fix reference count leak - net: usb: lan78xx: Add .ndo_features_check - Revert "udp: do rmem bulk free even if the rx sk queue is empty" - tcp_bbr: improve arithmetic division in bbr_update_bw() - tcp: do not leave dangling pointers in tp->highest_sack - tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() - afs: Fix characters allowed into cell names - hwmon: (adt7475) Make volt2reg return same reg as reg2volt input - hwmon: (core) Do not use device managed functions for memory allocations - PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken - tracing: trigger: Replace unneeded RCU-list traversals - Input: keyspan-remote - fix control-message timeouts - [x86] Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers" - [arm64,armhf] mmc: tegra: fix SDR50 tuning override - mmc: sdhci: fix minimum clock rate for v3 controller - [arm64] Documentation: Document arm64 kpti control - Input: sur40 - fix interface sanity checks - Input: gtco - fix endpoint sanity check - Input: aiptek - fix endpoint sanity check - Input: pegasus_notetaker - fix endpoint sanity check - [armhf] Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register - netfilter: nft_osf: add missing check for DREG attribute - hwmon: (nct7802) Fix voltage limits to wrong registers - do_last(): fetch directory ->i_mode and ->i_uid before it's too late (CVE-2020-8428) - sd: Fix REQ_OP_ZONE_REPORT completion handling - [i386] crypto: geode-aes - switch to skcipher for cbc(aes) fallback - media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT - scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func - netfilter: ipset: use bitmap infrastructure completely - netfilter: nf_tables: add __nft_chain_type_get() - mm/memory_hotplug: make remove_memory() take the device_hotplug_lock - mm, sparse: drop pgdat_resize_lock in sparse_add/remove_one_section() - mm, sparse: pass nid instead of pgdat to sparse_add_one_section() - drivers/base/memory.c: remove an unnecessary check on NR_MEM_SECTIONS - mm, memory_hotplug: add nid parameter to arch_remove_memory - mm/memory_hotplug: release memory resource after arch_remove_memory() - drivers/base/memory.c: clean up relics in function parameters - mm, memory_hotplug: update a comment in unregister_memory() - mm/memory_hotplug: make unregister_memory_section() never fail - mm/memory_hotplug: make __remove_section() never fail - [powerpc*] mm: Fix section mismatch warning - mm/memory_hotplug: make __remove_pages() and arch_remove_memory() never fail - [s390x] mm: implement arch_remove_memory() - mm/memory_hotplug: allow arch_remove_memory() without CONFIG_MEMORY_HOTREMOVE - drivers/base/memory: pass a block_id to init_memory_block() - mm/memory_hotplug: create memory block devices after arch_add_memory() - mm/memory_hotplug: remove memory block devices before arch_remove_memory() - mm/memory_hotplug: make unregister_memory_block_under_nodes() never fail - mm/memory_hotplug: remove "zone" parameter from sparse_remove_one_section - mm/hotplug: kill is_dev_zone() usage in __remove_pages() - drivers/base/node.c: simplify unregister_memory_block_under_nodes() - mm/memunmap: don't access uninitialized memmap in memunmap_pages() - mm/memory_hotplug: fix try_offline_node() - mm/memory_hotplug: shrink zones when offlining memory https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.101 - orinoco_usb: fix interface sanity check - rsi_91x_usb: fix interface sanity check - USB: serial: ir-usb: add missing endpoint sanity check - USB: serial: ir-usb: fix link-speed handling - USB: serial: ir-usb: fix IrLAP framing - [arm64,armhf] usb: dwc3: turn off VBUS when leaving host mode - staging: wlan-ng: ensure error return is actually returned - [x86] staging: vt6656: correct packet types for CTS protect, mode. - [x86] staging: vt6656: use NULLFUCTION stack on mac80211 - [x86] staging: vt6656: Fix false Tx excessive retries reporting. - [arm64,armel] serial: 8250_bcm2835aux: Fix line mismatch on driver unbind - component: do not dereference opaque pointer in debugfs - [x86] mei: me: add comet point (lake) H device ids - crypto: chelsio - fix writing tfm flags to wrong place - cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() - ath9k: fix storage endpoint lookup - brcmfmac: fix interface sanity check - rtl8xxxu: fix interface sanity check - zd1211rw: fix storage endpoint lookup - net_sched: ematch: reject invalid TCF_EM_SIMPLE - net_sched: fix ops->bind_class() implementations - HID: multitouch: Add LG MELF0410 I2C touchscreen support - HID: Add quirk for Xin-Mo Dual Controller - HID: ite: Add USB id match for Acer SW5-012 keyboard dock - [x86] HID: Add quirk for incorrect input length on Lenovo Y720 - drivers/hid/hid-multitouch.c: fix a possible null pointer access. - [arm64] phy: qcom-qmp: Increase PHY ready timeout - drivers/net/b44: Change to non-atomic bit operations on pwol_mask - [i386] net: wan: sdla: Fix cast from pointer to integer of different size - [arm64] gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP - atm: eni: fix uninitialized variable warning - HID: steam: Fix input device disappearing - [x86] platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx - [amd64] PCI: Add DMA alias quirk for Intel VCA NTB - [amd64] iommu: Support multiple PCI DMA aliases in IRQ Remapping - usb-storage: Disable UAS on JMicron SATA enclosure - sched/fair: Add tmp_alone_branch assertion - sched/fair: Fix insertion in rq->leaf_cfs_rq_list - rsi: fix use-after-free on probe errors - rsi: fix memory leak on failed URB submission - rsi: fix non-atomic allocation in completion handler - crypto: af_alg - Use bh_lock_sock in sk_destruct - block: cleanup __blkdev_issue_discard() - block: fix 32 bit overflow in __blkdev_issue_discard() - [arm64] KVM: Write arch.mdcr_el2 changes since last vcpu_load on VHE https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.102 - vfs: fix do_last() regression - crypto: pcrypt - Fix user-after-free on module unload - perf c2c: Fix return type for histogram sorting comparision functions - PM / devfreq: Add new name attribute for sysfs - tools lib: Fix builds when glibc contains strlcpy() - ext4: validate the debug_want_extra_isize mount option at parse time - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() - reiserfs: Fix memory leak of journal device string - media: digitv: don't continue if remote control state can't be read - media: af9005: uninitialized variable printked - media: vp7045: do not read uninitialized values if usb transfer fails - media: gspca: zero usb_buf - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 - tomoyo: Use atomic_t for statistics counter - ttyprintk: fix a potential deadlock in interrupt context issue - Bluetooth: Fix race condition in hci_release_sock() - cgroup: Prevent double killing of css when enabling threaded cgroup - [armhf] dts: sun8i: a83t: Correct USB3503 GPIOs polarity - [armhf] dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes - [armhf] dts: beagle-x15-common: Model 5V0 regulator - [arm64] clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order - mac80211: mesh: restrict airtime metric to peered established plinks - ASoC: rt5640: Fix NULL dereference on module unload - ixgbevf: Remove limit of 10 entries for unicast filter list - ixgbe: Fix calculation of queue with VFs and flow director on interface flap - igb: Fix SGMII SFP module discovery for 100FX/LX. - [x86] platform/x86: GPD pocket fan: Allow somewhat lower/higher temperature limits - qmi_wwan: Add support for Quectel RM500Q - wireless: fix enabling channel 12 for custom regulatory domain - cfg80211: Fix radar event during another phy CAC - mac80211: Fix TKIP replay protection immediately after key setup - netfilter: nft_tunnel: ERSPAN_VERSION must not be null - [armhf] net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec - bnxt_en: Fix ipv6 RFS filter matching logic. - iwlwifi: Don't ignore the cap field upon mcc update - [armhf] dts: am335x-boneblack-common: fix memory size - vti[6]: fix packet tx through bpf_redirect() - xfrm interface: fix packet tx through bpf_redirect() - xfrm: interface: do not confirm neighbor when do pmtu update - scsi: fnic: do not queue commands during fwreset - [armhf] 8955/1: virt: Relax arch timer version check during early boot - [arm64] tee: optee: Fix compilation issue with nommu - airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE - airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE - r8152: get default setting of WOL before initializing - qlcnic: Fix CPU soft lockup while collecting firmware dump - seq_tab_next() should increase position index - l2t_seq_next should increase position index - net: Fix skb->csum update in inet_proto_csum_replace16(). - btrfs: do not zero f_bavail if we have available space - perf report: Fix no libunwind compiled warning break s390 issue - mm/migrate.c: also overwrite error when it is bigger than zero https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.103 - [armhf] Revert "drm/sun4i: dsi: Change the start delay calculation" - ovl: fix lseek overflow on 32bit - kernel/module: Fix memleak in module_add_modinfo_attrs() - media: iguanair: fix endpoint sanity check - ocfs2: fix oops when writing cloned file - [x86] cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR - udf: Allow writing to 'Rewritable' partitions - printk: fix exclusive_console replaying - iwlwifi: mvm: fix NVM check for 3168 devices - gtp: use __GFP_NOWARN to avoid memalloc warning - l2tp: Allow duplicate session creation with UDP - net_sched: fix an OOB access in cls_tcindex - [arm64,armhf] net: stmmac: Delete txtimer in suspend() - bnxt_en: Fix TC queue mapping. - tcp: clear tp->total_retrans in tcp_disconnect() - tcp: clear tp->delivered in tcp_disconnect() - tcp: clear tp->data_segs{in|out} in tcp_disconnect() - tcp: clear tp->segs_{in|out} in tcp_disconnect() - rxrpc: Fix use-after-free in rxrpc_put_local() - rxrpc: Fix insufficient receive notification generation - rxrpc: Fix missing active use pinning of rxrpc_local object - rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors - ipc/msg.c: consolidate all xxxctl_down() functions - tracing: Fix sched switch start/stop refcount racy updates - rcu: Avoid data-race in rcu_gp_fqs_check_wake() - brcmfmac: Fix memory leak in brcmf_usbdev_qinit - usb: gadget: f_ncm: Use atomic_t to track in-flight request - usb: gadget: f_ecm: Use atomic_t to track in-flight request - ALSA: usb-audio: Fix endianess in descriptor validation - ALSA: dummy: Fix PCM format loop in proc output - mm/memory_hotplug: fix remove_memory() lockdep splat - mm: move_pages: report the number of non-attempted pages - media/v4l2-core: set pages dirty upon releasing DMA buffers - media: v4l2-core: compat: ignore native command codes - media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments - irqdomain: Fix a memory leak in irq_domain_push_irq() - [x86] platform/x86: intel_scu_ipc: Fix interrupt support - [x86] ALSA: hda: Add Clevo W65_67SB the power_save blacklist - [arm64] KVM: Correct PSTATE on exception entry - [arm64,armhf] KVM: Correct CPSR on exception entry - [arm64,armhf] KVM: Correct AArch32 SPSR on exception entry - [arm64] KVM: Only sign-extend MMIO up to register width - [s390x] mm: fix dynamic pagetable upgrade for hugetlbfs - [powerpc*] pseries: Advance pfn if section is not present in lmb_is_removable() - smb3: fix signing verification of large reads - [arm64,armhf] PCI: tegra: Fix return value check of pm_runtime_get_sync() - [arm64,armhf] mmc: spi: Toggle SPI polarity, do not hardcode it - [x86] ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards - [x86] ACPI / battery: Deal with design or full capacity being reported as -1 - [x86] ACPI / battery: Use design-cap for capacity calculations if full-cap is not available - [x86] ACPI / battery: Deal better with neither design nor full capacity not being reported - alarmtimer: Unregister wakeup source when module get fails - ubifs: Reject unsupported ioctl flags explicitly - ubifs: don't trigger assertion on invalid no-key filename - ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag - ubifs: Fix deadlock in concurrent bulk-read and writepage - [i386] crypto: geode-aes - convert to skcipher API and make thread-safe - [x86] hv_balloon: Balloon up according to request page number - mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile - crypto: api - Check spawn->alg under lock in crypto_drop_spawn - scsi: qla2xxx: Fix mtcp dump collection failure - ovl: fix wrong WARN_ON() in ovl_cache_update_ino() - f2fs: choose hardlimit when softlimit is larger than hardlimit in f2fs_statfs_project() - f2fs: fix miscounted block limit in f2fs_statfs_project() - f2fs: code cleanup for f2fs_statfs_project() - PM: core: Fix handling of devices deleted during system-wide resume - dm zoned: support zone sizes smaller than 128MiB - dm space map common: fix to ensure new block isn't already in use - dm crypt: fix benbi IV constructor crash if used in authenticated mode - dm: fix potential for q->make_request_fn NULL pointer - dm writecache: fix incorrect flush sequence when doing SSD mode commit - padata: Remove broken queue flushing - tracing: Annotate ftrace_graph_hash pointer with __rcu - tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu - ftrace: Add comment to why rcu_dereference_sched() is open coded - ftrace: Protect ftrace_graph_hash with ftrace_sync - [x86] crypto: ccp - set max RSA modulus size for v3 platform devices as well - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request - crypto: api - Fix race condition in crypto_spawn_alg - scsi: qla2xxx: Fix unbound NVME response length - NFS: Fix memory leaks and corruption in readdir - NFS: Directory page cache pages need to be locked when read - jbd2_seq_info_next should increase position index - Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES - btrfs: set trans->drity in btrfs_commit_transaction - Btrfs: fix race between adding and putting tree mod seq elements and nodes - [armhf] tegra: Enable PLLP bypass during Tegra124 LP1 - iwlwifi: don't throw error when trying to remove IGTK - mwifiex: fix unbalanced locking in mwifiex_process_country_ie() - sunrpc: expiry_time should be seconds not timeval - gfs2: move setting current->backing_dev_info - gfs2: fix O_SYNC write handling - drm/rect: Avoid division by zero - media: rc: ensure lirc is initialized before registering input device - xen/balloon: Support xend-based toolstack take two - watchdog: fix UAF in reboot notifier handling in watchdog core code - bcache: add readahead cache policy options via sysfs interface - eventfd: track eventfd_signal() recursion depth - aio: prevent potential eventfd recursion on poll - [x86] KVM: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks - [x86] KVM: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks - [x86] KVM: Protect pmu_intel.c from Spectre-v1/L1TF attacks - [x86] KVM: Protect DR-based index computations from Spectre-v1/L1TF attacks - [x86] KVM: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks - [x86] KVM: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks - [x86] KVM: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks - [x86] KVM: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks - [x86] KVM: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks - [x86] KVM: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c - [x86] KVM: Protect x86_decode_insn from Spectre-v1/L1TF attacks - [x86] KVM: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks - [x86] KVM: Fix potential put_fpu() w/o load_fpu() on MPX platform - [ppc64el] KVM: Book3S HV: Uninit vCPU if vcore creation fails - [ppc64el] KVM: Book3S PR: Free shared page if mmu initialization fails - [x86] kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit (CVE-2019-3016) - [x86] KVM: Don't let userspace set host-reserved cr4 bits - [x86] KVM: Free wbinvd_dirty_mask if vCPU creation fails - [s390x] KVM: do not clobber registers during guest reset/store status - [arm64,armhf] clk: tegra: Mark fuse clock as critical - percpu: Separate decrypted varaibles anytime encryption can be enabled - scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type - scsi: csiostor: Adjust indentation in csio_device_reset - scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free - scsi: ufs: Recheck bkops level if bkops is disabled - [arm64] phy: qualcomm: Adjust indentation in read_poll_timeout - ext2: Adjust indentation in ext2_fill_super - [arm64] drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable - IB/mlx5: Fix outstanding_pi index for GSI qps - IB/core: Fix ODP get user pages flow - nfsd: fix delay timer on 32-bit architectures - nfsd: fix jiffies/time_t mixup in LRU list - nfsd: Return the correct number of bytes written to the file - ubi: fastmap: Fix inverted logic in seen selfcheck - ubi: Fix an error pointer dereference in error handling code - bonding/alb: properly access headers in bond_alb_xmit() - [armhf] net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port - [arm64,armhf] net: mvneta: move rx_dropped and rx_errors in per-cpu stats - net_sched: fix a resource leak in tcindex_set_parms() - net/mlx5: IPsec, Fix esp modify function attribute - net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx - [arm64] net: macb: Remove unnecessary alignment check for TSO - [arm64] net: macb: Limit maximum GEM TX length in TSO - [armhf] net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan() - ext4: fix deadlock allocating crypto bounce page from mempool - btrfs: use bool argument in free_root_pointers() - btrfs: free block groups after free'ing fs trees - btrfs: flush write bio if we loop in extent_write_cache_pages - [x86] KVM: mmu: Apply max PA check for MMIO sptes to 32-bit KVM - [x86] KVM: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM - [x86] KVM: nVMX: vmread should not set rflags to specify success in case of #PF - KVM: Use vcpu-specific gva->hva translation when querying host page size - KVM: Play nice with read-only memslots when querying host page size - mm: zero remaining unavailable struct pages - mm: return zero_resv_unavail optimization - mm/page_alloc.c: fix uninitialized memmaps on a partially populated last section - cifs: fail i/o on soft mounts if sessionsetup errors out - [x86] apic/msi: Plug non-maskable MSI affinity race - clocksource: Prevent double add_timer_on() for watchdog_timer - perf/core: Fix mlock accounting in perf_mmap() - rxrpc: Fix service call disconnection https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.104 - ASoC: pcm: update FE/BE trigger order based on the command - [x86] hv_sock: Remove the accept port restriction - IB/mlx4: Fix memory leak in add_gid error flow - RDMA/netlink: Do not always generate an ACK for some netlink operations - RDMA/core: Fix locking in ib_uverbs_event_read - scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails - PCI/IOV: Fix memory leak in pci_iov_add_virtfn() - ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe - PCI: Don't disable bridge BARs when assigning bus resources - nfs: NFS_SWAP should depend on SWAP - NFS: Revalidate the file size on a fatal write error - NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() - NFSv4: try lease recovery on NFS4ERR_EXPIRED - [arm64] serial: uartps: Add a timeout to the tx empty wait - [arm64] gpio: zynq: Report gpio direction at boot - spi: spi-mem: Add extra sanity checks on the op param - spi: spi-mem: Fix inverted logic in op sanity check - rtc: cmos: Stop using shared IRQ - [x86] platform/x86: intel_mid_powerbtn: Take a copy of ddata - [powerpc*] pseries/vio: Fix iommu_table use-after-free refcount warning - [powerpc*] pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW - [arm64] iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA - [arm64,armhf] KVM: vgic-its: Fix restoration of unmapped collections - [armel,armhf] 8949/1: mm: mark free_memmap as __init - [arm64] cpufeature: Fix the type of no FP/SIMD capability - [arm64] ptrace: nofpsimd: Fail FP/SIMD regset operations - [arm64,armhf] KVM: Fix young bit from mmu notifier - [arm64,armhf] KVM: Fix DFSR setting for non-LPAE aarch32 guests - [arm64,armhf] KVM: Make inject_abt32() inject an external abort instead - [arm64] KVM: pmu: Don't increment SW_INCR if PMCR.E is unset - mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() - libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held - libertas: make lbs_ibss_join_existing() return error code on rates overflow - scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state - [x86] stackframe: Move ENCODE_FRAME_POINTER to asm/frame.h - [x86] x86/stackframe, x86/ftrace: Add pt_regs frame annotations - [arm64] serial: uartps: Move the spinlock after the read of the tx empty - padata: fix null pointer deref of pd->pinst https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.105 - Input: synaptics - switch T470s to RMI4 by default - Input: synaptics - enable SMBus on ThinkPad L470 - Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list - ALSA: usb-audio: Fix UAC2/3 effect unit parsing - ALSA: hda/realtek - Fix silent output on MSI-GL73 - ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 - [arm64] cpufeature: Set the FP/SIMD compat HWCAP bits properly - [arm64] nofpsmid: Handle TIF_FOREIGN_FPSTATE flag cleanly - ALSA: usb-audio: sound: usb: usb true/false for bool return type - ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 - ext4: don't assume that mmp_nodename/bdevname have NUL - ext4: fix support for inode sizes > 1024 bytes - ext4: fix checksum errors with indexed dirs - ext4: add cond_resched() to ext4_protect_reserved_inode (CVE-2020-8992) - ext4: improve explanation of a mount failure caused by a misconfigured kernel - Btrfs: fix race between using extent maps and merging them - btrfs: ref-verify: fix memory leaks - btrfs: print message when tree-log replay starts - btrfs: log message when rw remount is attempted with unclean tree-log - [arm64] ssbs: Fix context-switch when SSBS is present on all CPUs - [x86] perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map - nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info - [amd64] IB/hfi1: Acquire lock to release TID entries when user file is closed - [amd64] IB/hfi1: Close window for pq and request coliding - IB/rdmavt: Reset all QPs when the device is shut down - RDMA/core: Fix invalid memory access in spec_filter_size - [amd64] RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create - RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq - RDMA/core: Fix protection fault in get_pkey_idx_qp_list - [s390x] time: Fix clk type in get_tod_clock - [x86] perf/x86/intel: Fix inaccurate period in context switch for auto- reload - NFSv4.1 make cachethis=no for writes - jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() - jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer - [x86] KVM: mmu: Fix struct guest_walker arrays for 5-level paging https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.106 - core: Don't skip generic XDP program execution for cloned SKBs - enic: prevent waking up stopped tx queues over watchdog reset - net/smc: fix leak of kernel memory to user space - net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS - net/sched: flower: add missing validation of TCA_FLOWER_FLAGS - [x86] KVM: nVMX: Use correct root level for nested EPT shadow page tables - [x86] drm/gma500: Fixup fbdev stolen size usage evaluation - cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order - brcmfmac: Fix use after free in brcmf_sdio_readframes() - ext4: fix ext4_dax_read/write inode locking sequence for IOCB_NOWAIT - ALSA: ctl: allow TLV read operation for callback type of element in locked case - [powerpc*] powernv/iov: Ensure the pdn for VFs always contains a valid PE number - [amd64] iommu/vt-d: Fix off-by-one in PASID allocation - [x86] pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins - [x86] efi: Map the entire EFI vendor string before copying it - [mips64el,mipsel] Loongson: Fix potential NULL dereference in loongson3_platform_init() - [arm*] usb: dwc2: Fix IN FIFO allocation - [armel,armhf] clocksource/drivers/bcm2835_timer: Fix memory leak of timer - jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal - [armhf] pwm: omap-dmtimer: Simplify error handling - [s390x] pci: Fix possible deadlock in recover_store() - [powerpc*] iov: Move VF pdev fixup into pcibios_fixup_iov() - tracing: Fix tracing_stat return values in error handling paths - tracing: Fix very unlikely race of registering two stat tracers - ext4, jbd2: ensure panic when aborting with zero errno - ath10k: Correct the DMA direction for management tx buffers - nbd: add a flush_workqueue in nbd_start_device - [s390x] KVM: ENOTSUPP -> EOPNOTSUPP fixups - [arm64] clk: qcom: rcg2: Don't crash if our parent can't be found; return an error - drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table - [arm64,armhf] regulator: rk808: Lower log level on optional GPIOs being not available - NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu(). - selinux: fall back to ref-walk if audit is required - selinux: ensure we cleanup the internal AVC counters on error in avc_insert() - media: cx23885: Add support for AVerMedia CE310B - PCI: Add generic quirk for increasing D3hot delay - PCI: Increase D3 delay for AMD Ryzen5/7 XHCI controllers - media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros - reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling - fore200e: Fix incorrect checks of NULL pointer dereference - netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy - ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status - orinoco: avoid assertion in case of NULL pointer - ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 - scsi: ufs: Complete pending requests in host reset and restore path - scsi: aic7xxx: Adjust indentation in ahc_find_syncrate - selinux: ensure we cleanup the internal AVC counters on error in avc_update() - dmaengine: Store module owner in dma_device struct - [arm64] clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock - tools lib api fs: Fix gcc9 stringop-truncation compilation error - [x86] ACPI: button: Add DMI quirk for Razer Blade Stealth 13 late 2019 lid switch - mlx5: work around high stack usage with gcc - drm: remove the newline for CRC source name. - usbip: Fix unsafe unaligned pointer usage - udf: Fix free space reporting for metadata and virtual partitions - staging: rtl8188: avoid excessive stack usage - [amd64] IB/hfi1: Add software counter for ctxt0 seq drop - [armhf] soc/tegra: fuse: Correct straps' address for older Tegra124 device trees - [x86] efi: Don't panic or BUG() on non-critical error conditions - rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls - [x86] nmi: Remove irq_work from the long duration NMI handler - driver core: platform: Prevent resouce overflow from causing infinite loops - driver core: Print device when resources present in really_probe() - bpf: Return -EBADRQC for invalid map type in __bpf_tx_xdp_map - drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() - drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw - drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler - drm/nouveau/fault/gv100-: fix memory leak on module unload - [x86] drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add - [armhf] usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue - [arm64] iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE - f2fs: set I_LINKABLE early to avoid wrong access by vfs - f2fs: free sysfs kobject - scsi: iscsi: Don't destroy session if there are outstanding connections - watchdog/softlockup: Enforce that timestamp is valid on boot - f2fs: fix memleak of kobject - [x86] mm: Fix NX bit clearing issue in kernel_map_pages_in_pgd - [armhf] pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional - btrfs: fix possible NULL-pointer dereference in integrity checks - btrfs: safely advance counter when looking up bio csums - btrfs: device stats, log when stats are zeroed - module: avoid setting info->name early in case we can fall back to info->mod->name - ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() - driver core: platform: fix u32 greater or equal to zero comparison - ALSA: hda - Add docking station support for Lenovo Thinkpad T420s - drm/nouveau/mmu: fix comptag memory leak - [powerpc*] sriov: Remove VF eeh_dev state when disabling SR-IOV - bcache: cached_dev_free needs to put the sb page - [amd64] iommu/vt-d: Remove unnecessary WARN_ON_ONCE() - jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record - jbd2: make sure ESHUTDOWN to be recorded in the journal superblock - iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop - cifs: fix NULL dereference in match_prepath - bpf: map_seq_next should always increase position index - ceph: check availability of mds cluster on mount after wait timeout - [arm64,armhf] irqchip/gic-v3: Only provision redistributors that are enabled in ACPI - drm/nouveau/disp/nv50-: prevent oops when no channel method map provided - ftrace: fpid_next() should increase position index - trigger_next should increase position index - radeon: insert 10ms sleep in dce5_crtc_load_lut - ocfs2: fix a NULL pointer dereference when call ocfs2_update_inode_fsync_trans() - reiserfs: prevent NULL pointer dereference in reiserfs_insert_item() - bcache: explicity type cast in bset_bkey_last() - [arm64,armhf] irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL - iwlwifi: mvm: Fix thermal zone registration - brd: check and limit max_part par - NFS: Fix memory leaks - help_next should increase position index - cifs: log warning message (once) if out of disk space - virtio_balloon: prevent pfn array overflow https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.107 - [arm64] iommu/qcom: Fix bogus detach logic - ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs - [x86] ALSA: hda/realtek - Apply quirk for MSI GP63, too - [x86] ALSA: hda/realtek - Apply quirk for yet another MSI laptop - [armhf] ASoC: sun8i-codec: Fix setting DAI data format - ecryptfs: fix a memory leak bug in parse_tag_1_packet() - ecryptfs: fix a memory leak bug in ecryptfs_init_messaging() - [x86] thunderbolt: Prevent crash if non-active NVMem file is read - USB: misc: iowarrior: add support for 2 OEMed devices - USB: misc: iowarrior: add support for the 28 and 28L devices - USB: misc: iowarrior: add support for the 100 device - floppy: check FDC index for errors before assigning it (CVE-2020-9383) - vt: fix scrollback flushing on background consoles - vt: selection, handle pending signals in paste_selection - vt: vt_ioctl: fix race in VT_RESIZEX - [arm*] staging: android: ashmem: Disallow ashmem memory from being remapped (CVE-2020-0009) - [x86] staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi. - xhci: Force Maximum Packet size for Full-speed bulk devices to valid range. - xhci: fix runtime pm enabling for quirky Intel hosts - xhci: Fix memory leak when caching protocol extended capability PSI tables - take 2 - usb: host: xhci: update event ring dequeue pointer on purpose - USB: core: add endpoint-blacklist quirk - USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 - usb: uas: fix a plug & unplug racing - USB: Fix novation SourceControl XL after suspend - USB: hub: Don't record a connect-change event during reset-resume - USB: hub: Fix the broken detection of USB3 device in SMSC hub - [arm*] usb: dwc2: Fix SET/CLEAR_FEATURE and GET_STATUS flows - [arm64,armhf] usb: dwc3: gadget: Check for IOC/LST bit in TRB->ctrl fields - staging: rtl8188eu: Fix potential security hole - staging: rtl8188eu: Fix potential overuse of kernel memory - staging: rtl8723bs: Fix potential security hole - staging: rtl8723bs: Fix potential overuse of kernel memory - [powerpc*] tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery - jbd2: fix ocfs2 corrupt when clearing block group bits - [x86] mce/amd: Publish the bank pointer only after setup has succeeded - [x86] mce/amd: Fix kobject lifetime - [x86] cpu/amd: Enable the fixed Instructions Retired counter IRPERF - serial: 8250: Check UPF_IRQ_SHARED in advance - [armhf] tty: serial: imx: setup the correct sg entry for tx dma - serdev: ttyport: restore client ops on deregistration - Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()" - mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps() - nvme-multipath: Fix memory leak with ana_log_buf - genirq/irqdomain: Make sure all irq domain flags are distinct - mm/vmscan.c: don't round up scan size for online memory cgroup - drm/amdgpu/soc15: fix xclk for raven - [x86] xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms - [x86] KVM: nVMX: Don't emulate instructions in guest mode (CVE-2020-2732) - [x86] KVM: don't notify userspace IOAPIC on edge-triggered interrupt EOI - drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets - ext4: fix a data race in EXT4_I(inode)->i_disksize - ext4: add cond_resched() to __ext4_find_entry() - ext4: fix potential race between online resizing and write operations - ext4: fix potential race between s_group_info online resizing and access - ext4: fix potential race between s_flex_groups online resizing and access - ext4: fix mount failure with quota configured as module - ext4: rename s_journal_flag_rwsem to s_writepages_rwsem - ext4: fix race between writepages and enabling EXT4_EXTENTS_FL - [x86] KVM: nVMX: Refactor IO bitmap checks into helper function - [x86] KVM: nVMX: Check IO instruction VM-exit conditions - [x86] KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1 - [x86] KVM: apic: avoid calculating pending eoi from an uninitialized val - btrfs: fix bytes_may_use underflow in prealloc error condtition - btrfs: reset fs_root to NULL on error in open_ctree - btrfs: do not check delayed items are empty for single transaction cleanup - Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents - scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session" - usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus - [arm*] usb: dwc2: Fix in ISOC request length checking - staging: rtl8723bs: fix copy of overlapping memory - ecryptfs: replace BUG_ON with error handling code - genirq/proc: Reject invalid affinity masks (again) - bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill - ALSA: seq: Avoid concurrent access to queue flags - ALSA: seq: Fix concurrent access to queue current tick/time - netfilter: xt_hashlimit: limit the max size of hashtable - rxrpc: Fix call RCU cleanup using non-bh-safe locks - ata: ahci: Add shutdown to freeze hardware resources of ahci - xen: Enable interrupts when calling _cond_resched() - [s390x] mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.108 - [arm64,armhf] irqchip/gic-v3-its: Fix misuse of GENMASK macro - iwlwifi: pcie: fix rb_allocator workqueue allocation - ipmi:ssif: Handle a possible NULL pointer reference - [arm64] drm/msm: Set dma maximum segment size for mdss - dax: pass NOWAIT flag to iomap_apply - mac80211: consider more elements in parsing CRC - cfg80211: check wiphy driver existence for drvinfo report - [s390x] zcrypt: fix card and queue total counter wrap - qmi_wwan: re-add DW5821e pre-production variant - qmi_wwan: unconditionally reject 2 ep interfaces - [arm64] soc/tegra: fuse: Fix build with Tegra194 configuration - net: ena: fix potential crash when rxfh key is NULL - net: ena: fix uses of round_jiffies() - net: ena: add missing ethtool TX timestamping indication - net: ena: fix incorrect default RSS key - net: ena: rss: fix failure to get indirection table - net: ena: rss: store hash function as values and not bits - net: ena: fix incorrectly saving queue numbers when setting RSS indirection table - net: ena: ethtool: use correct value for crc32 hash - net: ena: ena-com.c: prevent NULL pointer dereference - cifs: Fix mode output in debugging statements - cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE - sysrq: Restore original console_loglevel when sysrq disabled - sysrq: Remove duplicated sysrq message - net: fib_rules: Correctly set table field when table number exceeds 8 bits - net: sched: correct flower port blocking - sctp: move the format error check out of __sctp_sf_do_9_1_abort - ipv6: Fix route replacement with dev-only route - ipv6: Fix nlmsg_flags when splitting a multipath route - qede: Fix race between rdma destroy workqueue and link change event - ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() - audit: fix error handling in audit_data_to_entry() - ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro - [arm64,x86] ACPI: watchdog: Fix gas->access_width usage - [x86] KVM: VMX: check descriptor table exits on instruction emulation - HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock - HID: core: fix off-by-one memset in hid_report_raw_event() - HID: core: increase HID report buffer size to 8KiB - tracing: Disable trace_printk() on post poned tests - Revert "PM / devfreq: Modify the device name as devfreq(X) for sysfs" - amdgpu/gmc_v9: save/restore sdpif regs during S3 - vhost: Check docket sk_family instead of call getname (CVE-2020-10942) - HID: alps: Fix an error handling path in 'alps_input_configured()' - HID: hiddev: Fix race in in hiddev_disconnect() - [x86] hv_netvsc: Fix unwanted wakeup in netvsc_attach() - [s390x] qeth: vnicc Fix EOPNOTSUPP precedence - net: netlink: cap max groups which will be considered in netlink_bind() - [amd64] net: atlantic: fix use after free kasan warn - [amd64] net: atlantic: fix potential error handling - net/smc: no peer ID in CLC decline for SMCD - net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE - namei: only return -ECHILD from follow_dotdot_rcu() - mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() - [x86] KVM: SVM: Override default MMIO mask if memory encryption is enabled - KVM: Check for a bad hva before dropping into the ghc slow path - sched/fair: Optimize update_blocked_averages() - sched/fair: Fix O(nr_cgroups) in the load balancing path - perf stat: Use perf_evsel__is_clocki() for clock events - perf stat: Fix shadow stats for clock events - [arm64] drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' - kprobes: Set unoptimized flag after unoptimizing code - [armhf] pwm: omap-dmtimer: put_device() after of_find_device_by_node() - perf hists browser: Restore ESC as "Zoom out" of DSO/thread/etc - [x86] KVM: Remove spurious kvm_mmu_unload() from vcpu destruction path - [x86] KVM: Remove spurious clearing of async #PF MSR - netfilter: nft_tunnel: no need to call htons() when dumping ports - mm/huge_memory.c: use head to check huge zero page - mm, thp: fix defrag setting if newline is not used - audit: always check the netlink payload length in audit_receive_msg() https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.109 - [x86] EDAC/amd64: Set grain per DIMM - ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 - [armhf] net: dsa: bcm_sf2: Forcibly configure IMP port for 1Gb/sec - kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic - [x86] ALSA: hda: do not override bus codec_mask in link_get() - usb: gadget: composite: Support more than 500mA MaxPower - usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags - usb: gadget: serial: fix Tx stall after buffer overflow - [arm64] drm/msm/mdp5: rate limit pp done timeout warnings - [arm64] drm: msm: Fix return type of dsi_mgr_connector_mode_valid for kCFI - scsi: megaraid_sas: silence a warning - [arm64] drm/msm/dsi: save pll state before dsi host is powered off - [arm64] drm/msm/dsi/pll: call vco set rate explicitly - [armhf] net: dsa: b53: Ensure the default VID is untagged - [s390x] cio: cio_ignore_proc_seq_next should increase position index - [s390x] qdio: fill SL with absolute addresses - ice: Don't tell the OS that link is going down - [arm64] net: thunderx: workaround BGX TX Underflow issue - ALSA: hda/realtek - Add Headset Mic supported - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master - cifs: don't leak -EAGAIN for stat() during reconnect - usb: storage: Add quirk for Samsung Fit flash - usb: quirks: add NO_LPM quirk for Logitech Screen Share - [arm64,armhf] usb: dwc3: gadget: Update chain bit correctly when using sg list - usb: core: hub: fix unhandled return by employing a void function - usb: core: hub: do error out if usb_autopm_get_interface() fails - usb: core: port: do error out if usb_autopm_get_interface() fails - vgacon: Fix a UAF in vgacon_invert_region (CVE-2020-8647, CVE-2020-8649) - mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa - mm: fix possible PMD dirty bit lost in set_pmd_migration_entry() - fat: fix uninit-memory access for partial initialized inode - [arm64] tty:serial:mvebu-uart:fix a wrong return - serial: 8250_exar: add support for ACCES cards - vt: selection, close sel_buffer race (CVE-2020-8648) - vt: selection, push console lock down - vt: selection, push sel_lock up - [arm64,armhf] media: v4l2-mem2mem.c: fix broken links - [x86] pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes - [arm64,armhf] dmaengine: tegra-apb: Fix use-after-free - [arm64,armhf] dmaengine: tegra-apb: Prevent race conditions of tasklet vs free list - dm cache: fix a crash due to incorrect work item cancelling - dm: report suspended device during destroy - dm writecache: verify watermark during resume - [x86] ASoC: topology: Fix memleak in soc_tplg_link_elems_load() - [x86] ASoC: topology: Fix memleak in soc_tplg_manifest_load() - [x86] ASoC: intel: skl: Fix pin debug prints - [x86] ASoC: intel: skl: Fix possible buffer overflow in debug outputs - [armhf] dmaengine: imx-sdma: remove dma_slave_config direction usage and leave sdma_event_enable() - ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output - ASoC: dapm: Correct DAPM handling of active widgets during shutdown - [armhf] drm/sun4i: Fix DE2 VI layer format support - [armhf] drm/sun4i: de2/de3: Remove unsupported VI layer formats - RDMA/iwcm: Fix iwcm work deallocation - RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() - [amd64] IB/hfi1, qib: Ensure RCU is locked when accessing list - [armhf] ARM: imx: build v7_cpu_resume() unconditionally - hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() - [powerpc*] fix hardware PMU exception bug on PowerVM compatibility mode systems - [amd64] efi/x86: Align GUIDs to their size in the mixed mode runtime wrapper - [amd64] efi/x86: Handle by-ref arguments covering multiple pages in mixed mode - dm integrity: fix a deadlock due to offloading to an incorrect workqueue - scsi: pm80xx: Fixed kernel panic during error recovery for SATA drive https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.110 - [x86] KVM: SVM: fix up incorrect backport https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.111 - phy: Revert toggling reset changes. - net: phy: Avoid multiple suspends - cgroup, netclassid: periodically release file_lock on classid updating - gre: fix uninit-value in __iptunnel_pull_header - inet_diag: return classid for all socket types - ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface - ipvlan: add cond_resched_rcu() while processing muticast backlog - ipvlan: do not add hardware address of master to its unicast filter list - ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() - ipvlan: don't deref eth hdr before checking it's set - net/ipv6: use configured metric when add peer route - netlink: Use netlink header as base to calculate bad attribute offset - net: macsec: update SCI upon MAC address change. - net: nfc: fix bounds checking bugs on "pipe" - net/packet: tpacket_rcv: do not increment ring index on drop - [arm64,armhf] net: stmmac: dwmac1000: Disable ACS if enhanced descs are not used - r8152: check disconnect status after long sleep - sfc: detach from cb_page in efx_copy_channel() - bnxt_en: reinitialize IRQs when MTU is modified - cgroup: memcg: net: do not associate sock with unrelated cgroup - net: memcg: late association of sock to memcg - net: memcg: fix lockdep splat in inet_csk_accept() - devlink: validate length of param values - nl802154: add missing attribute validation - nl802154: add missing attribute validation for dev_type - can: add missing attribute validation for termination - macsec: add missing attribute validation for port - net: fq: add missing attribute validation for orphan mask - team: add missing attribute validation for port ifindex - team: add missing attribute validation for array index - nfc: add missing attribute validation for SE API - nfc: add missing attribute validation for deactivate target - nfc: add missing attribute validation for vendor subcommand - net: phy: fix MDIO bus PM PHY resuming - net/ipv6: need update peer route when modify metric - net/ipv6: remove the old peer route if change it to a new one - tipc: add missing attribute validation for MTU property - devlink: validate length of region addr/len - bonding/alb: make sure arp header is pulled before accessing it - slip: make slhc_compress() more robust against malicious packets - [armhf] net: fec: validate the new settings in fec_enet_set_coalesce() - macvlan: add cond_resched() during multicast processing - cgroup: cgroup_procs_next should increase position index - cgroup: Iterate tasks that did not finish do_exit() - iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices - virtio-blk: fix hw_queue stopped on arbitrary error - [amd64] iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint - netfilter: nf_conntrack: ct_cpu_seq_next should increase position index - netfilter: synproxy: synproxy_cpu_seq_next should increase position index - netfilter: xt_recent: recent_seq_next should increase position index - netfilter: x_tables: xt_mttg_seq_next should increase position index - workqueue: don't use wq_select_unbound_cpu() for bound works - drm/amd/display: remove duplicated assignment to grph_obj_type - cifs_atomic_open(): fix double-put on late allocation failure - gfs2_atomic_open(): fix O_EXCL|O_CREAT handling on cold dcache - [x86] KVM: clear stale x86_emulate_ctxt->intercept value - efi: Fix a race and a buffer overflow while reading efivars via sysfs - efi: Make efi_rts_work accessible to efi page fault handler - mt76: fix array overflow on receiving too many fragments for a packet - [x86] mce: Fix logic and comments around MSR_PPIN_CTL - [arm64] iommu/dma: Fix MSI reservation allocation - [amd64] iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint - [amd64] iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page - batman-adv: Don't schedule OGM for disabled interface - [arm64] pinctrl: meson-gxl: fix GPIOX sdio pins - pinctrl: core: Remove extra kref_get which blocks hogs being freed - [arm64,armhf] i2c: gpio: suppress error on probe defer - nl80211: add missing attribute validation for critical protocol indication - nl80211: add missing attribute validation for beacon report scanning - nl80211: add missing attribute validation for channel switch - perf bench futex-wake: Restore thread count default to online CPU count - netfilter: cthelper: add missing attribute validation for cthelper - netfilter: nft_payload: add missing attribute validation for payload csum flags - netfilter: nft_tunnel: add missing attribute validation for tunnels - [amd64] iommu/vt-d: Fix the wrong printing in RHSA parsing - [amd64] iommu/vt-d: Ignore devices with out-of-spec domain number - [arm64,x86] i2c: acpi: put device when verifying client fails - ipv6: restrict IPV6_ADDRFORM operation - net/smc: check for valid ib_client_data - net/smc: cancel event worker during device removal - efi: Add a sanity check to efivar_store_raw() - batman-adv: Avoid free/alloc race when handling OGM2 buffer https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.112 - [x86] perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag - [armhf] mmc: sdhci-omap: Add platform specific reset callback - [armhf] mmc: sdhci-omap: Workaround errata regarding SDR104/HS200 tuning failures (i929) - ACPI: watchdog: Allow disabling WDAT at boot - HID: apple: Add support for recent firmware on Magic Keyboards - [x86] HID: i2c-hid: add Trekstor Surfbook E11B to descriptor override - cfg80211: check reg_rule for NULL in handle_channel_custom() - scsi: libfc: free response frame from GPN_ID - net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch - mac80211: rx: avoid RCU list traversal under mutex - signal: avoid double atomic counter increments for user accounting - slip: not call free_netdev before rtnl_unlock in slip_open - [x86,arm64] hinic: fix a irq affinity bug - [x86,arm64] hinic: fix a bug of setting hw_ioctxt - sfc: fix timestamp reconstruction at 16-bit rollover points - jbd2: fix data races at struct journal_head - [armhf] mmc: sdhci-omap: Don't finish_mrq() on a command error during tuning - [armhf] mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C - driver core: Remove the link if there is no driver with AUTO flag - driver core: Fix adding device links to probing suppliers - driver core: Make driver core own stateful device links - driver core: Add device link flag DL_FLAG_AUTOPROBE_CONSUMER - driver core: Remove device link creation limitation - driver core: Fix creation of device links with PM-runtime flags - mm: slub: add missing TID bump in kmem_cache_alloc_bulk() - efi: Fix debugobjects warning on 'efi_rts_work' https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.113 - [arm64] spi: qup: call spi_qup_pm_resume_runtime before suspending - [amd64] spi: pxa2xx: Add CS control clock quirk - [armhf] drm/exynos: dsi: fix workaround for the legacy clock name - [arm64] drivers/perf: arm_pmu_acpi: Fix incorrect checking of gicc pointer - dm bio record: save/restore bi_end_io and bi_integrity - dm integrity: use dm_bio_record and dm_bio_restore - xenbus: req->body should be updated before req->state - xenbus: req->err should be updated before req->state - block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group() - USB: Disable LPM on WD19's Realtek Hub - usb: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters - USB: serial: option: add ME910G1 ECM composition 0x110b - [arm64,armhf] usb: host: xhci-plat: add a shutdown - USB: serial: pl2303: add device-id for HP LD381 - [x86] usb: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c - ALSA: line6: Fix endless MIDI read loop - ALSA: seq: virmidi: Fix running status after receiving sysex - ALSA: seq: oss: Fix running status after receiving sysex - ALSA: pcm: oss: Avoid plugin buffer overflow - ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks - [armhf] iio: st_sensors: remap SMO8840 to LIS2DH12 - mmc: rtsx_pci: Fix support for speed-modes that relies on tuning - staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 - staging/speakup: fix get_word non-space look-ahead - [x86] intel_th: Fix user-visible error codes - [x86] intel_th: pci: Add Elkhart Lake CPU support - xhci: Do not open code __print_symbolic() in xhci trace events - btrfs: fix log context list corruption after rename whiteout error - drm/amd/amdgpu: Fix GPR read from debugfs (v2) - drm/lease: fix WARNING in idr_destroy - memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event - mm: slub: be more careful about the double cmpxchg of freelist - mm, slub: prevent kmalloc_node crashes and memory leaks - page-flags: fix a crash at SetPageError(THP_SWAP) - [x86] mm: split vmalloc_sync_all() (Closes: #953017) - USB: cdc-acm: fix close_delay and closing_wait units in TIOCSSERIAL - USB: cdc-acm: fix rounding error in TIOCSSERIAL - futex: Fix inode life-time issue - futex: Unbreak futex hashing - Revert "vrf: mark skb for multicast or link-local as enslaved to VRF" - Revert "ipv6: Fix handling of LLA with VRF and sockets bound to VRF" - ALSA: hda/realtek: Fix pop noise on ALC225 - [arm64] smp: fix smp_send_stop() behaviour - [arm64] smp: fix crash_smp_send_stop() behaviour - [arm64,armhf] drm/bridge: dw-hdmi: fix AVI frame colorimetry https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.114 - mmc: core: Allow host controllers to require R1B for CMD6 - mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for erase/trim/discard - mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for eMMC sleep command - [armhf] mmc: sdhci-omap: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY - [arm64,armhf] mmc: sdhci-tegra: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY - geneve: move debug check after netdev unregister - macsec: restrict to ethernet devices - net: cbs: Fix software cbs to consider packet sending time - [armhf] net: dsa: Fix duplicate frames flooded by learning - [arm64,armhf] net: mvneta: Fix the case where the last poll did not process all rx - net/packet: tpacket_rcv: avoid a producer race condition - net: qmi_wwan: add support for ASKEY WWHC050 - net_sched: cls_route: remove the right filter from hashtable - net_sched: keep alloc_hash updated after hash allocation - [arm64,armhf] net: stmmac: dwmac-rk: fix error path in rk_gmac_probe - slcan: not call free_netdev before rtnl_unlock in slcan_open - bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() - bnxt_en: Reset rings if ring reservation fails during open() - net: ip_gre: Separate ERSPAN newlink / changelink callbacks - net: ip_gre: Accept IFLA_INFO_DATA-less configuration - r8169: re-enable MSI on RTL8168c - tcp: repair: fix TCP_QUEUE_SEQ implementation - vxlan: check return value of gro_cells_init() - cgroup-v1: cgroup_pidlist_next should update position index - nfs: add minor version to nfs_server_key for fscache - drivers/of/of_mdio.c:fix of_mdiobus_register() - cgroup1: don't call release_agent when it is "" - [s390x] qeth: handle error when backing RX buffer - scsi: ipr: Fix softlockup when rescanning devices in petitboot - mac80211: Do not send mesh HWMP PREQ if HWMP is disabled - [x86] ftrace: Anotate text_mutex split between ftrace_arch_code_modify_post_process() and ftrace_arch_code_modify_prepare() - [x86] Input: synaptics - enable RMI on HP Envy 13-ad105ng - Input: avoid BIT() macro usage in the serio.h UAPI header - ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL - perf probe: Do not depend on dwfl_module_addrsym() - scsi: sd: Fix optimal I/O size for devices that change reported values - nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type - mac80211: mark station unauthorized before key removal - [x86] gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk - gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option - [x86] gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model - genirq: Fix reference leaks on irq affinity notifiers - xfrm: handle NETDEV_UNREGISTER for xfrm device - vti[6]: fix packet tx through bpf_redirect() in XinY cases - RDMA/mlx5: Block delay drop to unprivileged users - xfrm: fix uctx len check in verify_sec_ctx_len - xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire - xfrm: policy: Fix doulbe free in xfrm_policy_timer - afs: Fix some tracing details - netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6} - netfilter: nft_fwd_netdev: validate family and chain type - bpf/btf: Fix BTF verification of enum members in struct/union - vti6: Fix memory leak of skb if input policy check fails - mac80211: add option for setting control flags - mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX - USB: serial: option: add support for ASKEY WWHC050 - USB: serial: option: add BroadMobi BM806U - USB: serial: option: add Wistron Neweb D19Q1 - USB: cdc-acm: restore capability check order - USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback - [arm64,armhf] usb: musb: fix crash with highmen PIO and usbmon - media: flexcop-usb: fix endpoint sanity check - media: usbtv: fix control-message timeouts - staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table - [x86] ahci: Add Intel Comet Lake H RAID PCI ID - libfs: fix infoleak in simple_attr_read() - media: ov519: add missing endpoint sanity checks (CVE-2020-11608) - media: dib0700: fix rc endpoint lookup - media: stv06xx: add missing descriptor sanity checks (CVE-2020-11609) - media: xirlink_cit: add missing descriptor sanity checks (CVE-2020-11668) - mac80211: Check port authorization in the ieee80211_tx_dequeue() case - mac80211: fix authentication with iwlwifi/mvm - vt: selection, introduce vc_is_sel - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines - vt: switch vt_dont_switch to bool - vt: vt_ioctl: remove unnecessary console allocation checks - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console - vt: vt_ioctl: fix use-after-free in vt_in_use() - [x86] platform: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table - bpf: Explicitly memset the bpf_attr structure - bpf: Explicitly memset some bpf info structures declared on the stack - [x86] gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model - perf map: Fix off by one in strncpy() size argument - [armel] bcm2835-rpi-zero-w: Add missing pinctrl name - [armhf] dts: N900: fix onenand timings https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.115 - ipv4: fix a RCU-list lock in fib_triestat_seq_show - net, ip_tunnel: fix interface lookup with no key - sctp: fix refcount bug in sctp_wfree - sctp: fix possibly using a bad saddr with a given dst - nvme-rdma: Avoid double freeing of async event data - drm/bochs: downgrade pci_request_region failure from error to warning - drm/amdgpu: fix typo for vcn1 idle check - [x86] tools/power turbostat: Fix gcc build warnings - [x86] tools/power turbostat: Fix missing SYS_LPI counter on some Chromebooks - [armhf] drm/etnaviv: replace MMU flush marker with flush sequence - media: rc: IR signal for Panasonic air conditioner too long - misc: rtsx: set correct pcr_ops for rts522A - [x86] mei: me: add cedar fork device ids - ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard - rxrpc: Fix sendmsg(MSG_WAITALL) handling - net: Fix Tx hash bound checking - padata: always acquire cpu_hotplug_lock before pinst->lock - mm: mempolicy: require at least one nodeid for MPOL_PREFERRED (CVE-2020-11565) - ipv6: don't auto-add link-local address to lag ports - [armhf] net: dsa: bcm_sf2: Do not register slave MDIO bus with OF - [armhf] net: dsa: bcm_sf2: Ensure correct sub-node is parsed - net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers - [arm64,armhf] net: stmmac: dwmac1000: fix out-of-bounds mac address reg setting - slcan: Don't transmit uninitialized stack data in padding (CVE-2020-11494) - random: always use batched entropy for get_random_u{32,64} - [arm64,armhf] usb: dwc3: gadget: Wrap around when skip TRBs - [armhf] hwrng: imx-rngc - fix an error path - [amd64] IB/hfi1: Call kobject_put() when kobject_init_and_add() fails - [amd64] IB/hfi1: Fix memory leaks in sysfs registration and unregistration - ceph: remove the extra slashes in the server path - ceph: canonicalize server path in place - RDMA/ucma: Put a lock around every call to the rdma_cm layer - RDMA/cma: Teach lockdep about the order of rtnl and lock - Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl - RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow - fbcon: fix null-ptr-deref in fbcon_switch - [arm64] clk: qcom: rcg: Return failure for RCG update - [arm64] drm/msm: stop abusing dma_map/unmap for cache - [arm64] Fix size of __early_cpu_boot_status - [arm64] rpmsg: glink: Remove chunk size word align warning - [arm64,armhf] usb: dwc3: don't set gadget->is_otg flag - drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() - [arm64] drm/msm: Use the correct dma_sync calls in msm_gem https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.116 - [armhf] dts: sun8i-a83t-tbs-a711: HM5065 doesn't like such a high voltage - [arm64,armhf] bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads - [x86,arm64] hinic: fix a bug of waitting for IO stopped - [x86,arm64] hinic: fix wrong para of wait_for_completion_timeout - cxgb4/ptp: pass the sign of offset delta in FW CMD - qlcnic: Fix bad kzalloc null test - [armhf] cpufreq: imx6q: Fixes unwanted cpu overclocking on i.MX6ULL - [arm64] media: venus: hfi_parser: Ignore HEVC encoding for V1 - null_blk: Fix the null_add_dev() error path - null_blk: Handle null_add_dev() failures properly - null_blk: fix spurious IO errors after failed past-wp access - xhci: bail out early if driver can't accress host in resume - [x86] Don't let pgprot_modify() change the page encryption bit - block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices - sched: Avoid scale real weight down to zero - libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() - [amd64,x86] pstore/platform: fix potential mem leak if pstore_init_fs failed - gfs2: Don't demote a glock until its revokes are written - [i386] efi/x86: Ignore the memory attributes table on i386 - genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy() - block: Fix use-after-free issue accessing struct io_cq - [arm64,armhf] usb: dwc3: core: add support for disabling SS instances in park mode - [arm64,armhf] irqchip/gic-v4: Provide irq_retrigger to avoid circular locking dependency - md: check arrays is suspended in mddev_detach before call quiesce operations - firmware: fix a double abort case with fw_load_sysfs_fallback - block, bfq: fix use-after-free in bfq_idle_slice_timer_body - btrfs: qgroup: ensure qgroup_rescan_running is only set when the worker is at least queued - btrfs: remove a BUG_ON() from merge_reloc_roots() - btrfs: track reloc roots based on their commit root bytenr - IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads - uapi: rename ext2_swab() to swab() and share globally in swab.h - slub: improve bit diffusion for freelist ptr obfuscation - ASoC: fix regwmask - ASoC: dapm: connect virtual mux with default value - ASoC: dpcm: allow start or stop during pause for backend - [x86] ASoC: topology: use name_prefix for new kcontrol - usb: gadget: f_fs: Fix use after free issue as part of queue failure - usb: gadget: composite: Inform controller driver of self-powered - ALSA: hda: Add driver blacklist - ALSA: hda: Fix potential access overflow in beep helper - ALSA: ice1724: Fix invalid access for enumerated ctl items - ALSA: pcm: oss: Fix regression by buffer overflow fix - ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 - ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 - [x86] ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups - [x86] ALSA: hda/realtek - Add quirk for MSI GL63 - [x86] acpi: ignore unspecified bit positions in the ACPI global lock field - nvme-fc: Revert "add module to ops template to allow module references" - nvme: Treat discovery subsystems as unique subsystems - PCI: pciehp: Fix indefinite wait on sysfs requests - PCI/ASPM: Clear the correct bits when enabling L1 substates - PCI: Add boot interrupt quirk mechanism for Xeon chipsets - tpm: Don't make log failures fatal - tpm: tpm1_bios_measurements_next should increase position index - tpm: tpm2_bios_measurements_next should increase position index - KEYS: reaching the keys quotas correctly - [amd64,x86] pstore: pstore_ftrace_seq_next should increase position index - [mips*el] tlbex: Fix LDDIR usage in setup_pw() for Loongson-3 - [mips*/octeon] irq: Fix potential NULL pointer dereference - ath9k: Handle txpower changes even when TPC is disabled - signal: Extend exec_id to 64bits - [i386] x86/entry/32: Add missing ASM_CLAC to general_protection entry - [x86] KVM: nVMX: Properly handle userspace interrupt window request - [s390x] KVM: vsie: Fix region 1 ASCE sanity shadow address checks - [s390x] KVM: vsie: Fix delivery of addressing exceptions - [x86] KVM: Allocate new rmap and large page tracking when moving memslot - [x86] KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support - [x86] KVM: Gracefully handle __vmalloc() failure during VM allocation - [x86] KVM: VMX: fix crash cleanup when KVM wasn't used - CIFS: Fix bug which the return value by asynchronous read is error - Btrfs: fix crash during unmount due to race with delayed inode workers - btrfs: set update the uuid generation as soon as possible - btrfs: drop block from cache on error in relocation - btrfs: fix missing file extent item for hole after ranged fsync - btrfs: fix missing semaphore unlock in btrfs_sync_file - [powerpc*] pseries: Drop pointless static qualifier in vpa_debugfs_init() - [x86] speculation: Remove redundant arch_smt_update() invocation - mm: Use fixed constant in page_frag_alloc instead of size + 1 - dm writecache: add cond_resched to avoid CPU hangs - [s390x] scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point - [arm64] armv8_deprecated: Fix undef_hook mask for thumb setend - [armhf] drm/etnaviv: rework perfmon query infrastructure - [powerpc*] pseries: Avoid NULL pointer dereference when drmem is unavailable - NFS: Fix a page leak in nfs_destroy_unlinked_subrequests() - ext4: fix a data race at inode->i_blocks - fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once() - ocfs2: no need try to truncate file beyond i_size - [s390x] diag: fix display of diagnose call statistics - [x86] Input: i8042 - add Acer Aspire 5738z to nomux list - kmod: make request_module() return an error when autoloading is disabled - [powerpc*] cpufreq: powernv: Fix use-after-free - hfsplus: fix crash and filesystem corruption when deleting files - libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set - ipmi: fix hung processes in __get_guid() - xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() - [powerpc*] powernv/idle: Restore AMR/UAMOR/AMOR after idle (CVE-2020-11669) - [powerpc*] 64/tm: Don't let userspace set regs->trap via sigreturn - [powerpc*] hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries - [powerpc*] xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs - [powerpc*] kprobes: Ignore traps that happened in real mode - scsi: mpt3sas: Fix kernel panic observed on soft HBA unplug - [powerpc*] Add attributes for setjmp/longjmp - [powerpc*] Make setjmp/longjmp signature standard - btrfs: use nofs allocations for running delayed items - dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() - drm/dp_mst: Fix clearing payload state on topology disable - drm: Remove PageReserved manipulation from drm_pci_alloc - ftrace/kprobe: Show the maxactive number on kprobe_events - [armhf] etnaviv: perfmon: fix total and idle HI cyleces readout - [amd64] efi/x86: Fix the deletion of variables in mixed mode https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.117 - [amd64,arm64] amd-xgbe: Use __napi_schedule() in BH context - net: ipv6: do not consider routes via gateways for anycast address check - net: revert default NAPI poll timeout to 2 jiffies - [arm64,armhf] net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes - ovl: fix value of i_ino for lower hardlink corner case - scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic - jbd2: improve comments about freeing data buffers whose page mapping is NULL - ext4: fix incorrect group count in ext4_fill_super error message - ext4: fix incorrect inodes per group in error message - [x86] ASoC: Intel: mrfld: fix incorrect check on p->sink - [x86] ASoC: Intel: mrfld: return error codes when an error occurs - ALSA: usb-audio: Filter error from connector kctl ops, too - ALSA: usb-audio: Don't override ignore_ctl_error value from the map - ALSA: usb-audio: Don't create jack controls for PCM terminals - ALSA: usb-audio: Check mapping at creating connector controls, too - keys: Fix proc_keys_next to increase position index - tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation - btrfs: check commit root generation in should_ignore_root - mac80211_hwsim: Use kstrndup() in place of kasprintf() - [arm64,armhf] usb: dwc3: gadget: don't enable interrupt when disabling endpoint - [arm64,armhf] usb: dwc3: gadget: Don't clear flags before transfer ended - ext4: do not zeroout extents beyond i_disksize - [x86] kvm: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD - scsi: target: fix hang when multiple threads try to destroy the same iscsi session - [x86] microcode/AMD: Increase microcode PATCH_MAX_SIZE - wil6210: check rx_buff_mgmt before accessing it - wil6210: ignore HALP ICR if already handled - wil6210: add general initialization/size checks - wil6210: make sure Rx ring sizes are correlated - wil6210: remove reset file from debugfs - mm/vmalloc.c: move 'area->pages' after if statement https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.118 - [armel,armhf] bpf: Fix offset overflow for BPF_MEM BPF_DW - scsi: sg: add sg_remove_request in sg_common_write - ext4: use non-movable memory for superblock readahead - [arm64,armhf] watchdog: sp805: fix restart handler - [armel,armhf] arm, bpf: Fix bugs with ALU64 {RSH, ARSH} BPF_K shift by 0 - netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type - [arm64] irqchip/mbigen: Free msi_desc on device teardown - ALSA: hda: Don't release card at firmware loading error - of: overlay: kmemleak in dup_and_fixup_symbol_prop() - [x86] Hyper-V: Report crash register data or kmsg before running crash kernel - rbd: avoid a deadlock on header_rwsem when flushing notifies - rbd: call rbd_dev_unprobe() after unwatching and flushing notifies - xsk: Add missing check on user supplied headroom size - [x86] Hyper-V: Unload vmbus channel in hv panic callback - [x86] Hyper-V: Free hv_panic_page when fail to register kmsg dump - [x86] Hyper-V: Trigger crash enlightenment only once during system crash. - [x86] Hyper-V: Report crash register data when sysctl_record_panic_msg is not set - [x86] Hyper-V: Report crash data in die() when panic_on_oops is set - power: supply: bq27xxx_battery: Silence deferred-probe error - [arm64,armhf] clk: tegra: Fix Tegra PMC clock out parents - [armhf] soc: imx: gpc: fix power up sequencing - NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() - NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails - [s390x] cpuinfo: fix wrong output when CPU0 is offline - [s390x] cpum_sf: Fix wrong page count in error message - ext4: do not commit super on read-only bdev - cifs: Allocate encryption header through kmalloc - include/linux/swapops.h: correct guards for non_swap_entry() - percpu_counter: fix a data race at vm_committed_as - [s390x] KVM: vsie: Fix possible race when shadowing region 3 tables - [x86] ACPI: fix CPU hotplug deadlock - [amd64] drm/amdkfd: kfree the wrong pointer - NFS: Fix memory leaks in nfs_pageio_stop_mirroring() - f2fs: fix NULL pointer dereference in f2fs_write_begin() - [arm*] drm/vc4: Fix HDMI mode validation - [amd64] iommu/vt-d: Fix mm reference leak - power: supply: axp288_fuel_gauge: Broaden vendor check for Intel Compute Sticks. - libnvdimm: Out of bounds read in __nd_ioctl() - f2fs: fix to wait all node page writeback - [armhf] net: dsa: bcm_sf2: Fix overflow checks - fbdev: potential information leak in do_fb_ioctl() - mtd: lpddr: Fix a double free in probe() - mtd: phram: fix a double free issue in error path - KEYS: Don't write out to userspace while holding key semaphore - bpf: fix buggy r0 retval refinement for tracing helpers . [ Salvatore Bonaccorso ] * Refresh "Revert "objtool: Fix CONFIG_STACK_VALIDATION=y warning for out-of-tree modules"" for context changes in 4.19.99 * Refresh "ARM: dts: bcm283x: Correct vchiq compatible string" for context changes in 4.19.99 * Drop "tools/lib/api/fs/fs.c: Fix misuse of strncpy()" * Refresh "net: ena: add MAX_QUEUES_EXT get feature admin command" for context changes in 4.19.108 * [rt] Update to 4.19.115-rt48: - Revert "genirq: Do not invoke the affinity callback via a workqueue on RT" * [rt] Refresh "pci/switchtec: Don't use completion's wait queue" for context changes in 4.19.116 * Refresh "firmware: Remove redundant log messages from drivers" for context changes in 4.19.118 * f2fs: fix to avoid memory leakage in f2fs_listxattr (CVE-2020-0067) * net: ipv6: add net argument to ip6_dst_lookup_flow * net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (CVE-2020-1749) * blktrace: Protect q->blk_trace with RCU (CVE-2019-19768) * blktrace: fix dereference after null check . [ Ben Hutchings ] * [x86] Drop "Add a SysRq option to lift kernel lockdown" (Closes: #947021) - This patch allowed remotely disabling lockdown using usbip - Lockdown can be disabled by running "mokutil --disable-validation", rebooting, and confirming the change when prompted * debian/README.source: Refer to upload checklist in kernel-team.git * Bump ABI to 9 . [ YunQiang Su ] * [mips*] enable CONFIG_MIPS_O32_FP64_SUPPORT. * [mips*] enable CONFIG_CPU_HAS_MSA except octeon. . [ Steve McIntyre ] * [arm64] Include the Hisilicon Hibmc drm driver in fb-modules (Closes: #951274) . [ Noah Meyerhans ] * [cloud] Enable CONFIG_KSM (Closes: #955366) Checksums-Sha1: 4438ffe972b71a1707b1569d71204e61daeee7a7 189131 linux_4.19.118-1.dsc 5a7f4e3de9d484263eb7d907b527122d5a1f3051 107469088 linux_4.19.118.orig.tar.xz 75e3f3eb1a49d64b79eea7eeb2a6c3e72657d78d 1394540 linux_4.19.118-1.debian.tar.xz adf4462146200153be7109559d96b0e83629f287 46549 linux_4.19.118-1_source.buildinfo Checksums-Sha256: 7589a07bf306bd1a3b52ab4e8329e3ba40bfcc06bc4d40d9b5a9ae0460fcc506 189131 linux_4.19.118-1.dsc 353b99a93364cc9c54cd889acc71ffd3190101ad67f19238150691a3c6f95aaf 107469088 linux_4.19.118.orig.tar.xz c3cfba2d401d27b55369dd4a35c67f5e7502654580b3a7f241eabd8f640796f2 1394540 linux_4.19.118-1.debian.tar.xz 0aa8ff598ff59444220d86afefbceee36bff3f8db3091d27db0c56161fa707bd 46549 linux_4.19.118-1_source.buildinfo Files: 313ff315448f4fe8428fa9d6c8f6bec5 189131 kernel optional linux_4.19.118-1.dsc 12f0a53ac0579cb01404de3bc62224c3 107469088 kernel optional linux_4.19.118.orig.tar.xz 2a581d98599f91569b9fb725accd9ec6 1394540 kernel optional linux_4.19.118-1.debian.tar.xz 8d08761edefc6cb7c0f2c0a05dc2889f 46549 kernel optional linux_4.19.118-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAl6lq14ACgkQ57/I7JWG EQmPaBAAwh34dOCumlmxZpnyq78x1XgNDLoL/Z82EKiskeQNTKutlTy45GsEEoZP GF8kz1nr/ykTEfLTCZ6+RBbJ4gRx39oNqAwZLg6Ar/4pU+4fACh6YWy/tTPPDce4 wxEQJB2PrHV3xYhhuAzzm4vlaEvupdIA4bdeZvHZByWPP1BiLz14Odwgrl5GVGMZ HgMucmdyR5yRW7BXkQNqPkajj1WNZxjPe0iRzEfX/XI/ldi2hxbT9ibhV8Q1CgcV /4ajkBxOplOAY1uAQl/G8HlGrFhBvrghZkimW0xmurjWoqpTcB4tLaR10g8UKbx1 c/tkZ56Ei22dxH9taIMvy80mjOTN1M7sO+sGQQDngxrsmOt7ybVmIPWptRKIUsWx l1QJZyLtyEHhVTujqKm0H1j1waMohZU4vGA7/HF2IRpi97SHvesj7wFIxD6cv8yf frKm6gH4z4lqMDZF81sd9kGhAkxvVUWO6KN74MBB4a92M0OiYKm7i+GsISZau9wb G/XNB0s6axgJGzzbf1JHNnoOEy9hXywF6PIcTgE2A9tIG3biAljKTdP2B+YDOPLr 1zw+b/+rbd7/Etz8Vm8lG1LT0c1I1I1m2M2XXMgOjfSY1VbmWM3ro1/fq9ZcUKnk sM1pcnskPwN6voICGCUsRjzj3Bg3mGZVo4XcpQ+R/9WYCmOibk8= =2kyp -----END PGP SIGNATURE-----