Cosmic update: 4.18.20 upstream stable release

[Kamal Mostafa]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       4.18.20 upstream stable release
       from git://git.kernel.org/

powerpc/traps: restore recoverability of machine_check interrupts
powerpc/64/module: REL32 relocation range check
powerpc/mm: Fix page table dump to work on Radix
powerpc/mm: fix always true/false warning in slice.c
drm/amd/display: fix bug of accessing invalid memory
Input: wm97xx-ts - fix exit path
powerpc/Makefile: Fix PPC_BOOK3S_64 ASFLAGS
powerpc/eeh: Fix possible null deref in eeh_dump_dev_log()
tty: check name length in tty_find_polling_driver()
tracing/kprobes: Check the probe on unloaded module correctly
drm/amdgpu/powerplay: fix missing break in switch statements
ARM: imx_v6_v7_defconfig: Select CONFIG_TMPFS_POSIX_ACL
powerpc/nohash: fix undefined behaviour when testing page size support
powerpc/mm: Don't report hugepage tables as memory leaks when using kmemleak
drm/omap: fix memory barrier bug in DMM driver
drm/amd/display: fix gamma not being applied
drm/hisilicon: hibmc: Do not carry error code in HiBMC framebuffer pointer
media: pci: cx23885: handle adding to list failure
media: coda: don't overwrite h.264 profile_idc on decoder instance
MIPS: kexec: Mark CPU offline before disabling local IRQ
powerpc/boot: Ensure _zimage_start is a weak symbol
powerpc/memtrace: Remove memory in chunks
MIPS/PCI: Call pcie_bus_configure_settings() to set MPS/MRRS
sc16is7xx: Fix for multi-channel stall
media: tvp5150: fix width alignment during set_selection()
powerpc/selftests: Wait all threads to join
staging:iio:ad7606: fix voltage scales
drm: rcar-du: Update Gen3 output limitations
drm/amdgpu: Fix SDMA TO after GPU reset v3
staging: most: video: fix registration of an empty comp core_component
9p locks: fix glock.client_id leak in do_lock
udf: Prevent write-unsupported filesystem to be remounted read-write
ARM: dts: imx6ull: keep IMX6UL_ prefix for signals on both i.MX6UL and i.MX6ULL
9p: clear dangling pointers in p9stat_free
ovl: fix error handling in ovl_verify_set_fh()
ovl: check whiteout in ovl_create_over_whiteout()
serial: sh-sci: Fix could not remove dev_attr_rx_fifo_timeout
scsi: qla2xxx: Fix incorrect port speed being set for FC adapters
scsi: qla2xxx: Fix process response queue for ISP26XX and above
scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx
scsi: qla2xxx: shutdown chip if reset fail
scsi: qla2xxx: Fix duplicate switch database entries
scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
fuse: Fix use-after-free in fuse_dev_do_read()
fuse: Fix use-after-free in fuse_dev_do_write()
fuse: fix blocked_waitq wakeup
fuse: set FR_SENT while locked
ovl: fix recursive oi->lock in ovl_link()
scsi: qla2xxx: Fix re-using LoopID when handle is in use
scsi: qla2xxx: Fix NVMe session hang on unload
arm64: dts: stratix10: Support Ethernet Jumbo frame
arm64: dts: stratix10: fix multicast filtering
clk: meson-gxbb: set fclk_div3 as CLK_IS_CRITICAL
clk: meson: axg: mark fdiv2 and fdiv3 as critical
zram: close udev startup race condition as default groups
MIPS: Loongson-3: Fix CPU UART irq delivery problem
MIPS: Loongson-3: Fix BRIDGE irq delivery problem
xtensa: add NOTES section to the linker script
xtensa: make sure bFLT stack is 16 byte aligned
xtensa: fix boot parameters address translation
um: Drop own definition of PTRACE_SYSEMU/_SINGLESTEP
clk: s2mps11: Fix matching when built as module and DT node contains compatible
clk: at91: Fix division by zero in PLL recalc_rate()
clk: sunxi-ng: h6: fix bus clocks' divider position
clk: rockchip: fix wrong mmc sample phase shift for rk3328
clk: rockchip: Fix static checker warning in rockchip_ddrclk_get_parent call
libceph: bump CEPH_MSG_MAX_DATA_LEN
Revert "ceph: fix dentry leak in splice_dentry()"
thermal: core: Fix use-after-free in thermal_cooling_device_destroy_sysfs
mach64: fix display corruption on big endian machines
mach64: fix image corruption due to reading accelerator registers
acpi/nfit, x86/mce: Handle only uncorrectable machine checks
acpi/nfit, x86/mce: Validate a MCE's address before using it
acpi, nfit: Fix ARS overflow continuation
reset: hisilicon: fix potential NULL pointer dereference
vhost/scsi: truncate T10 PI iov_iter to prot_bytes
scsi: qla2xxx: Initialize port speed to avoid setting lower speed
SCSI: fix queue cleanup race before queue initialization is done
Revert "powerpc/8xx: Use L1 entry APG to handle _PAGE_ACCESSED for CONFIG_SWAP"
soc: ti: QMSS: Fix usage of irq_set_affinity_hint
ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
ocfs2: free up write context when direct IO failed
mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings
memory_hotplug: cond_resched in __remove_pages
netfilter: conntrack: fix calculation of next bucket number in early_drop
ARM: 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm
bonding/802.3ad: fix link_failure_count tracking
mtd: spi-nor: cadence-quadspi: Return error code in cqspi_direct_read_execute()
mtd: nand: Fix nanddev_neraseblocks()
mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
hwmon: (core) Fix double-free in __hwmon_device_register()
perf stat: Handle different PMU names with common prefix
of, numa: Validate some distance map rules
x86/cpu/vmware: Do not trace vmware_sched_clock()
x86/hyper-v: Enable PIT shutdown quirk
termios, tty/tty_baudrate.c: fix buffer overrun
arch/alpha, termios: implement BOTHER, IBSHIFT and termios2
watchdog/core: Add missing prototypes for weak functions
btrfs: fix pinned underflow after transaction aborted
Btrfs: fix cur_offset in the error case for nocow
Btrfs: fix infinite loop on inode eviction after deduplication of eof block
Btrfs: fix data corruption due to cloning of eof block
clockevents/drivers/i8253: Add support for PIT shutdown quirk
ext4: add missing brelse() update_backups()'s error path
ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
ext4: missing !bh check in ext4_xattr_inode_write()
ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()
ext4: avoid buffer leak in ext4_orphan_add() after prior errors
ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing
ext4: avoid possible double brelse() in add_new_gdb() on error path
ext4: fix possible leak of sbi->s_group_desc_leak in error path
ext4: fix possible leak of s_journal_flag_rwsem in error path
ext4: fix buffer leak in ext4_xattr_get_block() on error path
ext4: release bs.bh before re-using in ext4_xattr_block_find()
ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path
ext4: fix buffer leak in __ext4_read_dirblock() on error path
mount: Prevent MNT_DETACH from disconnecting locked mounts
mnt: fix __detach_mounts infinite loop
kdb: use correct pointer when 'btc' calls 'btt'
kdb: print real address of pointers instead of hashed addresses
sunrpc: correct the computation for page_ptr when truncating
NFSv4: Don't exit the state manager without clearing NFS4CLNT_MANAGER_RUNNING
nfsd: COPY and CLONE operations require the saved filehandle to be set
rtc: hctosys: Add missing range error reporting
fuse: fix use-after-free in fuse_direct_IO()
fuse: fix leaked notify reply
selinux: check length properly in SCTP bind hook
configfs: replace strncpy with memcpy
gfs2: Put bitmap buffers in put_super
gfs2: Fix metadata read-ahead during truncate (2)
libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD
crypto: user - fix leaking uninitialized memory to userspace
lib/ubsan.c: don't mark __ubsan_handle_builtin_unreachable as noreturn
hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
mm/swapfile.c: use kvzalloc for swap_info_struct allocation
efi/arm/libstub: Pack FDT after populating it
drm/rockchip: Allow driver to be shutdown on reboot/kexec
drm/msm: fix OF child-node lookup
drm/amdgpu: Fix typo in amdgpu_vmid_mgr_init
drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type
drm/nouveau: Check backlight IDs are >= 0, not > 0
drm/nouveau: Fix nv50_mstc->best_encoder()
drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD
drm/etnaviv: fix bogus fence complete check in timeout handler
drm/dp_mst: Check if primary mstb is null
drm: panel-orientation-quirks: Add quirk for Acer One 10 (S1003)
drm/i915/dp: Link train Fallback on eDP only if fallback link BW can fit panel's native mode
drm/i915: Restore vblank interrupts earlier
drm/i915: Don't unset intel_connector->mst_port
drm/i915: Skip vcpi allocation for MSTB ports that are gone
drm/i915: Large page offsets for pread/pwrite
drm/i915/dp: Fix link retraining comment in intel_dp_long_pulse()
drm/i915/dp: Restrict link retrain workaround to external monitors
drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values
drm/i915: Fix error handling for the NV12 fb dimensions check
drm/i915: Fix ilk+ watermarks when disabling pipes
drm/i915: Compare user's 64b GTT offset even on 32b
drm/i915: Don't oops during modeset shutdown after lpe audio deinit
drm/i915: Mark pin flags as u64
drm/i915/ringbuffer: Delay after EMIT_INVALIDATE for gen4/gen5
drm/i915/execlists: Force write serialisation into context image vs execution
drm/i915: Fix possible race in intel_dp_add_mst_connector()
CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM
Linux 4.18.20

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.18.0-14.15

---------------
linux (4.18.0-14.15) cosmic; urgency=medium

  * linux: 4.18.0-14.15 -proposed tracker (LP: #1811406)

  * CPU hard lockup with rigorous writes to NVMe drive (LP: #1810998)
    - blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait
    - blk-wbt: move disable check into get_limit()
    - blk-wbt: use wq_has_sleeper() for wq active check
    - blk-wbt: fix has-sleeper queueing check
    - blk-wbt: abstract out end IO completion handler
    - blk-wbt: improve waking of tasks

  * To reduce the Realtek USB cardreader power consumption (LP: #1811337)
    - mmc: core: Introduce MMC_CAP_SYNC_RUNTIME_PM
    - mmc: rtsx_usb_sdmmc: Don't runtime resume the device while changing led
    - mmc: rtsx_usb_sdmmc: Re-work runtime PM support
    - mmc: rtsx_usb_sdmmc: Re-work card detection/removal support
    - memstick: rtsx_usb_ms: Add missing pm_runtime_disable() in probe function
    - misc: rtsx_usb: Use USB remote wakeup signaling for card insertion detection
    - memstick: Prevent memstick host from getting runtime suspended during card
      detection
    - memstick: rtsx_usb_ms: Use ms_dev() helper
    - memstick: rtsx_usb_ms: Support runtime power management

  * Support non-strict iommu mode on arm64 (LP: #1806488)
    - iommu/io-pgtable-arm: Fix race handling in split_blk_unmap()
    - iommu/arm-smmu-v3: Implement flush_iotlb_all hook
    - iommu/dma: Add support for non-strict mode
    - iommu: Add "iommu.strict" command line option
    - iommu/io-pgtable-arm: Add support for non-strict mode
    - iommu/arm-smmu-v3: Add support for non-strict mode
    - iommu/io-pgtable-arm-v7s: Add support for non-strict mode
    - iommu/arm-smmu: Support non-strict mode

  * [Regression] crashkernel fails on HiSilicon D05 (LP: #1806766)
    - efi: honour memory reservations passed via a linux specific config table
    - efi/arm: libstub: add a root memreserve config table
    - efi: add API to reserve memory persistently across kexec reboot
    - irqchip/gic-v3-its: Change initialization ordering for LPIs
    - irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage
    - irqchip/gic-v3-its: Split property table clearing from allocation
    - irqchip/gic-v3-its: Move pending table allocation to init time
    - irqchip/gic-v3-its: Keep track of property table's PA and VA
    - irqchip/gic-v3-its: Allow use of pre-programmed LPI tables
    - irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump
      kernels
    - irqchip/gic-v3-its: Check that all RDs have the same property table
    - irqchip/gic-v3-its: Register LPI tables with EFI config table
    - irqchip/gic-v3-its: Allow use of LPI tables in reserved memory
    - arm64: memblock: don't permit memblock resizing until linear mapping is up
    - efi/arm: Defer persistent reservations until after paging_init()
    - efi: Permit calling efi_mem_reserve_persistent() from atomic context
    - efi: Prevent GICv3 WARN() by mapping the memreserve table before first use

  * ELAN900C:00 04F3:2844 touchscreen doesn't work (LP: #1811335)
    - pinctrl: cannonlake: Fix community ordering for H variant
    - pinctrl: c...