[SRU][Bionic][PULL] Bionic upstream stable patchset 2020-08-18+

Kamal Mostafa kamal at canonical.com
Tue Aug 18 20:24:51 UTC 2020


This pull request (117 commits) includes the following Bionic stable patchsets:

	Bionic update: upstream stable patchset 2020-08-11
                Ported from the following upstream stable releases:
                        v4.14.191, v4.19.136,
                        v4.14.192, v4.19.137,
                        v4.14.193, v4.19.138
	https://bugs.launchpad.net/bugs/1891228

	Bionic update: upstream stable patchset 2020-08-18
                Ported from the following upstream stable releases:
                                   v4.19.139
	https://bugs.launchpad.net/bugs/1892091

 -Kamal

-----

The following changes since commit f4daf25f7f8608d1c14c85ea0b73c9e1e1eb2dba:

  UBUNTU: Ubuntu-4.15.0-114.115 (2020-08-11 10:58:21 +0200)

are available in the Git repository at:

  git://kernel.ubuntu.com/ubuntu-stable/ubuntu-stable-bionic.git stable-next

for you to fetch changes up to 20c1c8487a8d0874cb998a44200d03065ad5457e:

  UBUNTU: upstream stable to v4.19.139 (2020-08-18 11:35:18 -0700)

----------------------------------------------------------------
Adam Ford (1):
      omapfb: dss: Fix max fclk divider for omap36xx

Andrea Righi (1):
      xen-netfront: fix potential deadlock in xennet_remove()

Andrii Nakryiko (1):
      bpf: Fix map leak in HASH_OF_MAPS map

Ben Skeggs (2):
      drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason
      drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure

Christoph Hellwig (1):
      net/9p: validate fds in p9_fd_open

Cong Wang (2):
      qrtr: orphan socket in qrtr_release()
      ipv6: fix memory leaks on IPV6_ADDRFORM path

Dan Carpenter (1):
      AX.25: Prevent integer overflows in connect and sendmsg

David Howells (2):
      rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
      rxrpc: Fix race between recvmsg and sendmsg on immediate call failure

Dexuan Cui (1):
      Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23)

Dominique Martinet (1):
      9p/trans_fd: abort p9_read_work if req status changed

Eran Ben Elisha (1):
      net/mlx5: Verify Hardware supports requested ptp function on a given pin

Eric Biggers (1):
      Smack: fix use-after-free in smk_write_relabel_self()

Erik Ekman (1):
      USB: serial: qcserial: add EM7305 QDL product ID

Forest Crossman (2):
      usb: xhci: define IDs for various ASMedia host controllers
      usb: xhci: Fix ASMedia ASM1142 DMA addressing

Francesco Ruggeri (1):
      igb: reinit_locked() should be called with rtnl_lock

Frank van der Linden (1):
      xattr: break delegations in {set,remove}xattr

Geert Uytterhoeven (1):
      usb: hso: Fix debug compile warning on sparc32

Greg Kroah-Hartman (2):
      USB: iowarrior: fix up report size handling for some devices
      mtd: properly check all write ioctls for permissions

Grygorii Strashko (1):
      ARM: percpu.h: fix build error

Grzegorz Siwik (1):
      i40e: Wrong truncation from u16 to u8

Hangbin Liu (1):
      Revert "vxlan: fix tos value before xmit"

Hui Wang (1):
      Revert "ALSA: hda: call runtime_allow() for all hda controllers"

Ido Schimmel (4):
      mlxsw: core: Increase scope of RCU read-side critical section
      mlxsw: core: Free EMAD transactions using kfree_rcu()
      ipv4: Silence suspicious RCU usage warning
      vxlan: Ensure FDB dump is performed under RCU

Jaegeuk Kim (1):
      f2fs: check memory boundary by insane namelen

Jakub Kicinski (1):
      mlx4: disable device on shutdown

Jann Horn (1):
      binder: Prevent context manager from incrementing ref 0

Jiang Ying (1):
      ext4: fix direct I/O read error

Johan Hovold (7):
      net: lan78xx: add missing endpoint sanity check
      net: lan78xx: fix transfer-buffer memory leak
      leds: wm831x-status: fix use-after-free on unbind
      leds: da903x: fix use-after-free on unbind
      leds: lm3533: fix use-after-free on unbind
      leds: 88pm860x: fix use-after-free on unbind
      net: lan78xx: replace bogus endpoint lookup

Josh Poimboeuf (1):
      x86/unwind/orc: Fix ORC for newly forked tasks

Julian Squires (1):
      cfg80211: check vendor command doit pointer before use

Kamal Mostafa (4):
      UBUNTU: upstream stable to v4.14.191, v4.19.136
      UBUNTU: upstream stable to v4.14.192, v4.19.137
      UBUNTU: upstream stable to v4.14.193, v4.19.138
      UBUNTU: upstream stable to v4.19.139

Landen Chao (1):
      net: ethernet: mtk_eth_soc: fix MTU warnings

Laurence Oberman (1):
      qed: Disable "MFW indication via attention" SPAM every 5 minutes

Liam Beguin (1):
      parisc: add support for cmpxchg on u8 pointers

Linus Torvalds (2):
      random32: remove net_rand_state from the latent entropy gcc plugin
      random32: move the pseudo-random 32-bit definitions to prandom.h

Lorenzo Bianconi (1):
      net: gre: recompute gre csum for sctp over gre tunnels

Martyna Szapar (1):
      i40e: Memory leak in i40e_config_iwarp_qvlist

Miaohe Lin (1):
      net: udp: Fix wrong clean up for IS_UDPLITE macro

Michael Karcher (1):
      sh: Fix validation of system call number

Navid Emamdoost (7):
      crypto: ccp - Release all allocated memory if sha type is invalid
      media: rc: prevent memory leak in cx23888_ir_probe
      ath9k_htc: release allocated buffer if timed out
      ath9k: release allocated buffer if timed out
      nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
      cxgb4: add missing release on skb in uld_send()
      drm/amdgpu: fix multiple memory leaks in acp_hw_init

Peilin Ye (8):
      AX.25: Fix out-of-bounds read in ax25_connect()
      AX.25: Prevent out-of-bounds read in ax25_sendmsg()
      drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
      rds: Prevent kernel-infoleak in rds_notify_queue_get()
      Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
      Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
      Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
      openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()

Peng Fan (1):
      regmap: debugfs: check count when read regmap file

Philippe Duplessis-Guindon (1):
      tools lib traceevent: Fix memory leak in process_dynamic_array_len

Pi-Hsun Shih (1):
      wireless: Use offsetof instead of custom macro.

Qiushi Wu (1):
      firmware: Fix a reference count leak.

Raviteja Narayanam (1):
      Revert "i2c: cadence: Fix the hold bit setting"

Remi Pommarel (2):
      mac80211: mesh: Free ie data when leaving mesh
      mac80211: mesh: Free pending skb when destroying a mpath

Rik van Riel (1):
      xfs: fix missed wakeup on l_flush_wait

Robert Hancock (1):
      PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge

Robin Murphy (1):
      arm64: csum: Fix handling of bad packets

Rustam Kovhaev (1):
      usb: hso: check for return value in hso_serial_common_create()

Sami Tolvanen (2):
      x86/build/lto: Fix truncated .bss with -fdata-sections
      arm64/alternatives: move length validation inside the subsection

Sasha Levin (1):
      iio: imu: adis16400: fix memory leak

Sergey Nemov (1):
      i40e: add num_vectors checker in iwarp handler

Sheng Yong (1):
      f2fs: check if file namelen exceeds max value

Stephen Hemminger (1):
      hv_netvsc: do not use VF device if link is down

Steve Cohen (1):
      drm: hold gem reference until object is no longer accessed

Subash Abhinov Kasiviswanathan (1):
      dev: Defer free of skbs in flush_backlog

Suren Baghdasaryan (1):
      staging: android: ashmem: Fix lockdep warning for write operation

Takashi Iwai (1):
      ALSA: seq: oss: Serialize ioctls

Tanner Love (2):
      selftests/net: rxtimestamp: fix clang issues for target arch PowerPC
      selftests/net: psock_fanout: fix clang issues for target arch PowerPC

Thomas Falcon (1):
      ibmvnic: Fix IRQ mapping disposal in error path

Thomas Gleixner (1):
      x86/i8259: Use printk_deferred() to prevent deadlock

Wang Hai (1):
      9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work

Wanpeng Li (1):
      KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled

Wei Yongjun (1):
      ip6_gre: fix null-ptr-deref in ip6gre_init_net()

Weilong Chen (1):
      rtnetlink: Fix memory(net_device) leak when ->newlink fails

Will Deacon (1):
      ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints

Willem de Bruijn (1):
      selftests/net: relax cpu affinity requirement in msg_zerocopy test

Willy Tarreau (2):
      random32: update the net random state on interrupt and activity
      random: fix circular include dependency on arm64 after addition of percpu.h

Wolfram Sang (2):
      i2c: slave: improve sanity check when registering
      i2c: slave: add sanity check when unregistering

Xie He (1):
      drivers/net/wan/x25_asy: Fix to make it work

Xin Long (2):
      sctp: shrink stream outq only when new outcnt < old outcnt
      sctp: shrink stream outq when fails to do addstream reconf

Xin Xiong (1):
      atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent

Xiongfeng Wang (1):
      net-sysfs: add a newline when printing 'tx_timeout' by sysfs

Xiyu Yang (1):
      net/x25: Fix x25_neigh refcnt leak when x25 disconnect

Yoshihiro Shimoda (1):
      net: ethernet: ravb: exit if re-initialization fails in tx timeout

Yuchung Cheng (1):
      tcp: allow at most one TLP probe per flight

YueHaibing (1):
      net/x25: Fix null-ptr-deref in x25_disconnect

Yunhai Zhang (1):
      vgacon: Fix for missing check in scrollback handling

 arch/arm/include/asm/percpu.h                      |   2 +
 arch/arm/kernel/hw_breakpoint.c                    |  27 ++++-
 arch/arm64/include/asm/alternative.h               |   4 +-
 arch/arm64/include/asm/checksum.h                  |   5 +-
 arch/parisc/include/asm/cmpxchg.h                  |   2 +
 arch/parisc/lib/bitops.c                           |  12 +++
 arch/sh/kernel/entry-common.S                      |   6 +-
 arch/x86/kernel/i8259.c                            |   2 +-
 arch/x86/kernel/unwind_orc.c                       |   8 +-
 arch/x86/kernel/vmlinux.lds.S                      |   2 +-
 arch/x86/kvm/lapic.c                               |   2 +-
 debian.master/upstream-stable                      |   4 +-
 drivers/android/binder.c                           |  15 ++-
 drivers/atm/atmtcp.c                               |  10 +-
 drivers/base/regmap/regmap-debugfs.c               |   6 ++
 drivers/char/random.c                              |   1 +
 drivers/crypto/ccp/ccp-ops.c                       |   3 +-
 drivers/firmware/qemu_fw_cfg.c                     |   7 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c            |  34 ++++---
 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c            |   3 +-
 drivers/gpu/drm/drm_gem.c                          |  10 +-
 drivers/gpu/drm/nouveau/nouveau_fbcon.c            |   3 +-
 drivers/hv/channel_mgmt.c                          |  21 ++--
 drivers/hv/vmbus_drv.c                             |   4 +
 drivers/i2c/busses/i2c-cadence.c                   |   9 +-
 drivers/i2c/i2c-core-slave.c                       |   7 +-
 drivers/iio/imu/adis16400_buffer.c                 |   5 +-
 drivers/leds/leds-88pm860x.c                       |  14 ++-
 drivers/leds/leds-da903x.c                         |  14 ++-
 drivers/leds/leds-lm3533.c                         |  12 ++-
 drivers/leds/leds-wm831x-status.c                  |  14 ++-
 drivers/media/pci/cx23885/cx23888-ir.c             |   5 +-
 drivers/mtd/mtdchar.c                              |  56 ++++++++--
 drivers/net/ethernet/chelsio/cxgb4/sge.c           |   1 +
 drivers/net/ethernet/ibm/ibmvnic.c                 |   2 +-
 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c |  33 ++++--
 drivers/net/ethernet/intel/igb/igb_main.c          |   9 ++
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |   2 +
 drivers/net/ethernet/mellanox/mlx4/main.c          |   2 +
 .../net/ethernet/mellanox/mlx5/core/lib/clock.c    |  23 ++++-
 drivers/net/ethernet/mellanox/mlxsw/core.c         |   8 +-
 drivers/net/ethernet/qlogic/qed/qed_int.c          |   3 +-
 drivers/net/ethernet/renesas/ravb_main.c           |  26 ++++-
 drivers/net/hyperv/netvsc_drv.c                    |   7 +-
 drivers/net/usb/hso.c                              |  10 +-
 drivers/net/usb/lan78xx.c                          | 113 ++++++---------------
 drivers/net/vxlan.c                                |  10 +-
 drivers/net/wan/x25_asy.c                          |  21 ++--
 drivers/net/wireless/ath/ath9k/htc_hst.c           |   3 +
 drivers/net/wireless/ath/ath9k/wmi.c               |   1 +
 drivers/net/xen-netfront.c                         |  64 ++++++++----
 drivers/nfc/s3fwrn5/core.c                         |   1 +
 drivers/pci/quirks.c                               |  13 +++
 drivers/staging/android/ashmem.c                   |  12 +++
 drivers/usb/host/xhci-pci.c                        |  10 +-
 drivers/usb/misc/iowarrior.c                       |  35 +++++--
 drivers/usb/serial/qcserial.c                      |   1 +
 drivers/video/console/vgacon.c                     |   4 +
 drivers/video/fbdev/omap2/omapfb/dss/dss.c         |   2 +-
 fs/ext4/inode.c                                    |   5 +
 fs/f2fs/dir.c                                      |  12 ++-
 fs/xattr.c                                         |  84 +++++++++++++--
 fs/xfs/xfs_log.c                                   |   9 +-
 include/linux/hyperv.h                             |   2 +
 include/linux/prandom.h                            |  78 ++++++++++++++
 include/linux/random.h                             |  63 +-----------
 include/linux/tcp.h                                |   4 +-
 include/net/addrconf.h                             |   1 +
 include/uapi/linux/wireless.h                      |   5 +-
 kernel/bpf/hashtab.c                               |  12 ++-
 kernel/time/timer.c                                |   8 ++
 lib/random32.c                                     |   2 +-
 net/9p/trans_fd.c                                  |  56 +++++++---
 net/ax25/af_ax25.c                                 |  10 +-
 net/bluetooth/hci_event.c                          |  11 +-
 net/core/dev.c                                     |   2 +-
 net/core/net-sysfs.c                               |   2 +-
 net/core/rtnetlink.c                               |   3 +-
 net/ipv4/fib_trie.c                                |   2 +-
 net/ipv4/gre_offload.c                             |  13 ++-
 net/ipv4/tcp_input.c                               |  11 +-
 net/ipv4/tcp_output.c                              |  13 ++-
 net/ipv4/udp.c                                     |   2 +-
 net/ipv6/anycast.c                                 |  17 +++-
 net/ipv6/ip6_gre.c                                 |  11 +-
 net/ipv6/ipv6_sockglue.c                           |   1 +
 net/ipv6/udp.c                                     |   2 +-
 net/mac80211/cfg.c                                 |   1 +
 net/mac80211/mesh_pathtbl.c                        |   1 +
 net/openvswitch/conntrack.c                        |  38 +++----
 net/qrtr/qrtr.c                                    |   1 +
 net/rds/recv.c                                     |   3 +-
 net/rxrpc/call_object.c                            |  27 +++--
 net/rxrpc/conn_object.c                            |   8 +-
 net/rxrpc/recvmsg.c                                |   4 +-
 net/rxrpc/sendmsg.c                                |   5 +-
 net/sctp/stream.c                                  |  27 +++--
 net/wireless/nl80211.c                             |   6 +-
 net/x25/x25_subr.c                                 |   6 ++
 security/smack/smackfs.c                           |  13 ++-
 sound/core/seq/oss/seq_oss.c                       |   8 +-
 sound/pci/hda/hda_intel.c                          |   1 -
 tools/lib/traceevent/event-parse.c                 |   1 +
 tools/testing/selftests/net/msg_zerocopy.c         |   5 +-
 tools/testing/selftests/net/psock_fanout.c         |   3 +-
 .../networking/timestamping/rxtimestamp.c          |   3 +-
 106 files changed, 929 insertions(+), 418 deletions(-)
 create mode 100644 include/linux/prandom.h



More information about the kernel-team mailing list