This bug was fixed in the package linux-azure - 4.15.0-1023.24~16.04.1 --------------- linux-azure (4.15.0-1023.24~16.04.1) xenial; urgency=medium * linux-azure: 4.15.0-1023.24~16.04.1 -proposed tracker (LP: #1788755) * linux-azure: 4.15.0-1023.24 -proposed tracker (LP: #1788751) * [Hyper-V] hv_netvsc: Fix napi reschedule while receive completion is busy (LP: #1786313) - hv_netvsc: Fix napi reschedule while receive completion is busy [ Ubuntu: 4.15.0-34.37 ] * linux: 4.15.0-34.37 -proposed tracker (LP: #1788744) * Bionic update: upstream stable patchset 2018-08-09 (LP: #1786352) - MIPS: c-r4k: Fix data corruption related to cache coherence - MIPS: ptrace: Expose FIR register through FP regset - MIPS: Fix ptrace(2) PTRACE_PEEKUSR and PTRACE_POKEUSR accesses to o32 FGRs - KVM: Fix spelling mistake: "cop_unsuable" -> "cop_unusable" - affs_lookup(): close a race with affs_remove_link() - fs: don't scan the inode cache before SB_BORN is set - aio: fix io_destroy(2) vs. lookup_ioctx() race - ALSA: timer: Fix pause event notification - do d_instantiate/unlock_new_inode combinations safely - mmc: sdhci-iproc: remove hard coded mmc cap 1.8v - mmc: sdhci-iproc: fix 32bit writes for TRANSFER_MODE register - mmc: sdhci-iproc: add SDHCI_QUIRK2_HOST_OFF_CARD_ON for cygnus - libata: Blacklist some Sandisk SSDs for NCQ - libata: blacklist Micron 500IT SSD with MU01 firmware - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent - drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros - arm64: lse: Add early clobbers to some input/output asm operands - powerpc/64s: Clear PCR on boot - IB/hfi1: Use after free race condition in send context error path - IB/umem: Use the correct mm during ib_umem_release - idr: fix invalid ptr dereference on item delete - Revert "ipc/shm: Fix shmat mmap nil-page protection" - ipc/shm: fix shmat() nil address after round-down when remapping - mm/kasan: don't vfree() nonexistent vm_area - kasan: free allocated shadow memory on MEM_CANCEL_ONLINE - kasan: fix memory hotplug during boot - kernel/sys.c: fix potential Spectre v1 issue - KVM: s390: vsie: fix < 8k check for the itdba - KVM: x86: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed - kvm: x86: IA32_ARCH_CAPABILITIES is always supported - powerpc/64s: Improve RFI L1-D cache flush fallback - powerpc/pseries: Restore default security feature flags on setup - powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() - MIPS: generic: Fix machine compatible matching - mac80211: mesh: fix wrong mesh TTL offset calculation - ARC: Fix malformed ARC_EMUL_UNALIGNED default - ptr_ring: prevent integer overflow when calculating size - arm64: dts: rockchip: fix rock64 gmac2io stability issues - arm64: dts: rockchip: correct ep-gpios for rk3399-sapphire - libata: Fix compile warning with ATA_DEBUG enabled - selftests: sync: missing CFLAGS while compiling - selftest/vDSO: fix O= - selftests: pstore: Adding config fragment CONFIG_PSTORE_RAM=m - selftests: memfd: add config fragment for fuse - ARM: OMAP2+: timer: fix a kmemleak caused in omap_get_timer_dt - ARM: OMAP3: Fix prm wake interrupt for resume - ARM: OMAP2+: Fix sar_base inititalization for HS omaps - ARM: OMAP1: clock: Fix debugfs_create_*() usage - tls: retrun the correct IV in getsockopt - xhci: workaround for AMD Promontory disabled ports wakeup - IB/uverbs: Fix method merging in uverbs_ioctl_merge - IB/uverbs: Fix possible oops with duplicate ioctl attributes - IB/uverbs: Fix unbalanced unlock on error path for rdma_explicit_destroy - arm64: dts: rockchip: Fix DWMMC clocks - ARM: dts: rockchip: Fix DWMMC clocks - iwlwifi: mvm: fix security bug in PN checking - iwlwifi: mvm: fix IBSS for devices that support station type API - iwlwifi: mvm: always init rs with 20mhz bandwidth rates - NFC: llcp: Limit size of SDP URI - rxrpc: Work around usercopy check - MD: Free bioset when md_run fails - md: fix md_write_start() deadlock w/o metadata devices - s390/dasd: fix handling of internal requests - xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos - mac80211: round IEEE80211_TX_STATUS_HEADROOM up to multiple of 4 - mac80211: fix a possible leak of station stats - mac80211: fix calling sleeping function in atomic context - cfg80211: clear wep keys after disconnection - mac80211: Do not disconnect on invalid operating class - mac80211: Fix sending ADDBA response for an ongoing session - gpu: ipu-v3: pre: fix device node leak in ipu_pre_lookup_by_phandle - gpu: ipu-v3: prg: fix device node leak in ipu_prg_lookup_by_phandle - md raid10: fix NULL deference in handle_write_completed() - drm/exynos: g2d: use monotonic timestamps - drm/exynos: fix comparison to bitshift when dealing with a mask - drm/meson: fix vsync buffer update - arm64: perf: correct PMUVer probing - RDMA/bnxt_re: Unpin SQ and RQ memory if QP create fails - RDMA/bnxt_re: Fix system crash during load/unload - net/mlx5e: Return error if prio is specified when offloading eswitch vlan push - locking/xchg/alpha: Add unconditional memory barrier to cmpxchg() - md: raid5: avoid string overflow warning - virtio_net: fix XDP code path in receive_small() - kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE - bug.h: work around GCC PR82365 in BUG() - selftests/memfd: add run_fuse_test.sh to TEST_FILES - seccomp: add a selftest for get_metadata - soc: imx: gpc: de-register power domains only if initialized - powerpc/bpf/jit: Fix 32-bit JIT for seccomp_data access - s390/cio: fix ccw_device_start_timeout API - s390/cio: fix return code after missing interrupt - s390/cio: clear timer when terminating driver I/O - selftests/bpf/test_maps: exit child process without error in ENOMEM case - PKCS#7: fix direct verification of SignerInfo signature - arm64: dts: cavium: fix PCI bus dtc warnings - nfs: system crashes after NFS4ERR_MOVED recovery - ARM: OMAP: Fix dmtimer init for omap1 - smsc75xx: fix smsc75xx_set_features() - regulatory: add NUL to request alpha2 - integrity/security: fix digsig.c build error with header file - x86/intel_rdt: Fix incorrect returned value when creating rdgroup sub- directory in resctrl file system - locking/xchg/alpha: Fix xchg() and cmpxchg() memory ordering bugs - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations - mac80211: drop frames with unexpected DS bits from fast-rx to slow path - arm64: fix unwind_frame() for filtered out fn for function graph tracing - macvlan: fix use-after-free in macvlan_common_newlink() - KVM: nVMX: Don't halt vcpu when L1 is injecting events to L2 - kvm: fix warning for CONFIG_HAVE_KVM_EVENTFD builds - ARM: dts: imx6dl: Include correct dtsi file for Engicam i.CoreM6 DualLite/Solo RQS - fs: dcache: Avoid livelock between d_alloc_parallel and __d_add - fs: dcache: Use READ_ONCE when accessing i_dir_seq - md: fix a potential deadlock of raid5/raid10 reshape - md/raid1: fix NULL pointer dereference - batman-adv: fix packet checksum in receive path - batman-adv: invalidate checksum on fragment reassembly - netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - netfilter: ipt_CLUSTERIP: put config instead of freeing it - netfilter: ebtables: convert BUG_ONs to WARN_ONs - batman-adv: Ignore invalid batadv_iv_gw during netlink send - batman-adv: Ignore invalid batadv_v_gw during netlink send - batman-adv: Fix netlink dumping of BLA claims - batman-adv: Fix netlink dumping of BLA backbones - nvme-pci: Fix nvme queue cleanup if IRQ setup fails - clocksource/drivers/fsl_ftm_timer: Fix error return checking - libceph, ceph: avoid memory leak when specifying same option several times - ceph: fix dentry leak when failing to init debugfs - xen/pvcalls: fix null pointer dereference on map->sock - ARM: orion5x: Revert commit 4904dbda41c8. - qrtr: add MODULE_ALIAS macro to smd - selftests/futex: Fix line continuation in Makefile - r8152: fix tx packets accounting - virtio-gpu: fix ioctl and expose the fixed status to userspace. - dmaengine: rcar-dmac: fix max_chunk_size for R-Car Gen3 - bcache: fix kcrashes with fio in RAID5 backend dev - ip_gre: fix IFLA_MTU ignored on NEWLINK - ip6_tunnel: fix IFLA_MTU ignored on NEWLINK - sit: fix IFLA_MTU ignored on NEWLINK - nbd: fix return value in error handling path - ARM: dts: NSP: Fix amount of RAM on BCM958625HR - ARM: dts: bcm283x: Fix unit address of local_intc - powerpc/boot: Fix random libfdt related build errors - clocksource/drivers/mips-gic-timer: Use correct shift count to extract data - gianfar: Fix Rx byte accounting for ndev stats - net/tcp/illinois: replace broken algorithm reference link - nvmet: fix PSDT field check in command format - net/smc: use link_id of server in confirm link reply - mlxsw: core: Fix flex keys scratchpad offset conflict - mlxsw: spectrum: Treat IPv6 unregistered multicast as broadcast - spectrum: Reference count VLAN entries - ARC: mcip: halt GFRC counter when ARC cores halt - ARC: mcip: update MCIP debug mask when the new cpu came online - ARC: setup cpu possible mask according to possible-cpus dts property - ipvs: remove IPS_NAT_MASK check to fix passive FTP - IB/mlx: Set slid to zero in Ethernet completion struct - RDMA/bnxt_re: Unconditionly fence non wire memory operations - RDMA/bnxt_re: Fix incorrect DB offset calculation - RDMA/bnxt_re: Fix the ib_reg failure cleanup - xen/pirq: fix error path cleanup when binding MSIs - drm/amd/amdgpu: Correct VRAM width for APUs with GMC9 - xfrm: Fix ESN sequence number handling for IPsec GSO packets. - arm64: dts: rockchip: Fix rk3399-gru-* s2r (pinctrl hogs, wifi reset) - drm/sun4i: Fix dclk_set_phase - btrfs: use kvzalloc to allocate btrfs_fs_info - Btrfs: send, fix issuing write op when processing hole in no data mode - Btrfs: fix log replay failure after linking special file and fsync - ceph: fix potential memory leak in init_caches() - block: display the correct diskname for bio - selftests/powerpc: Skip the subpage_prot tests if the syscall is unavailable - net: ethtool: don't ignore return from driver get_fecparam method - iwlwifi: mvm: fix TX of CCMP 256 - iwlwifi: mvm: Fix channel switch for count 0 and 1 - iwlwifi: mvm: fix assert 0x2B00 on older FWs - iwlwifi: avoid collecting firmware dump if not loaded - iwlwifi: mvm: Direct multicast frames to the correct station - iwlwifi: mvm: Correctly set the tid for mcast queue - rds: Incorrect reference counting in TCP socket creation - watchdog: f71808e_wdt: Fix magic close handling - batman-adv: Fix multicast packet loss with a single WANT_ALL_IPV4/6 flag - hv_netvsc: use napi_schedule_irqoff - hv_netvsc: filter multicast/broadcast - hv_netvsc: propagate rx filters to VF - ARM: dts: rockchip: Add missing #sound-dai-cells on rk3288 - e1000e: Fix check_for_link return value with autoneg off - e1000e: allocate ring descriptors with dma_zalloc_coherent - ia64/err-inject: Use get_user_pages_fast() - RDMA/qedr: Fix kernel panic when running fio over NFSoRDMA - RDMA/qedr: Fix iWARP write and send with immediate - IB/mlx4: Fix corruption of RoCEv2 IPv4 GIDs - IB/mlx4: Include GID type when deleting GIDs from HW table under RoCE - IB/mlx5: Fix an error code in __mlx5_ib_modify_qp() - fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper(). - fsl/fman: avoid sleeping in atomic context while adding an address - qed: Free RoCE ILT Memory on rmmod qedr - net: qcom/emac: Use proper free methods during TX - net: smsc911x: Fix unload crash when link is up - IB/core: Fix possible crash to access NULL netdev - cxgb4: do not set needs_free_netdev for mgmt dev's - xen-blkfront: move negotiate_mq to cover all cases of new VBDs - xen: xenbus: use put_device() instead of kfree() - hv_netvsc: fix filter flags - hv_netvsc: fix locking for rx_mode - hv_netvsc: fix locking during VF setup - ARM: davinci: fix the GPIO lookup for omapl138-hawk - arm64: Relax ARM_SMCCC_ARCH_WORKAROUND_1 discovery - selftests/vm/run_vmtests: adjust hugetlb size according to nr_cpus - lib/test_kmod.c: fix limit check on number of test devices created - dmaengine: mv_xor_v2: Fix clock resource by adding a register clock - netfilter: ebtables: fix erroneous reject of last rule - can: m_can: change comparison to bitshift when dealing with a mask - can: m_can: select pinctrl state in each suspend/resume function - bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa(). - workqueue: use put_device() instead of kfree() - ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu - sunvnet: does not support GSO for sctp - KVM: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending - gpu: ipu-v3: prg: avoid possible array underflow - drm/imx: move arming of the vblank event to atomic_flush - drm/nouveau/bl: fix backlight regression - xfrm: fix rcu_read_unlock usage in xfrm_local_error - iwlwifi: mvm: set the correct tid when we flush the MCAST sta - iwlwifi: mvm: Correctly set IGTK for AP - iwlwifi: mvm: fix error checking for multi/broadcast sta - net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off - vlan: Fix out of order vlan headers with reorder header off - batman-adv: fix header size check in batadv_dbg_arp() - batman-adv: Fix skbuff rcsum on packet reroute - vti4: Don't count header length twice on tunnel setup - ip_tunnel: Clamp MTU to bounds on new link - vti6: Fix dev->max_mtu setting - iwlwifi: mvm: Increase session protection time after CS - iwlwifi: mvm: clear tx queue id when unreserving aggregation queue - iwlwifi: mvm: make sure internal station has a valid id - iwlwifi: mvm: fix array out of bounds reference - drm/tegra: Shutdown on driver unbind - perf/cgroup: Fix child event counting bug - brcmfmac: Fix check for ISO3166 code - kbuild: make scripts/adjust_autoksyms.sh robust against timestamp races - RDMA/ucma: Correct option size check using optlen - RDMA/qedr: fix QP's ack timeout configuration - RDMA/qedr: Fix rc initialization on CNQ allocation failure - RDMA/qedr: Fix QP state initialization race - net/sched: fix idr leak on the error path of tcf_bpf_init() - net/sched: fix idr leak in the error path of tcf_simp_init() - net/sched: fix idr leak in the error path of tcf_act_police_init() - net/sched: fix idr leak in the error path of tcp_pedit_init() - net/sched: fix idr leak in the error path of __tcf_ipt_init() - net/sched: fix idr leak in the error path of tcf_skbmod_init() - net: dsa: Fix functional dsa-loop dependency on FIXED_PHY - drm/ast: Fixed 1280x800 Display Issue - mm/mempolicy.c: avoid use uninitialized preferred_node - mm, thp: do not cause memcg oom for thp - xfrm: Fix transport mode skb control buffer usage. - selftests: ftrace: Add probe event argument syntax testcase - selftests: ftrace: Add a testcase for string type with kprobe_event - selftests: ftrace: Add a testcase for probepoint - drm/amdkfd: Fix scratch memory with HWS enabled - batman-adv: fix multicast-via-unicast transmission with AP isolation - batman-adv: fix packet loss for broadcasted DHCP packets to a server - ARM: 8748/1: mm: Define vdso_start, vdso_end as array - lan78xx: Set ASD in MAC_CR when EEE is enabled. - net: qmi_wwan: add BroadMobi BM806U 2020:2033 - bonding: fix the err path for dev hwaddr sync in bond_enslave - net: dsa: mt7530: fix module autoloading for OF platform drivers - net/mlx5: Make eswitch support to depend on switchdev - perf/x86/intel: Fix linear IP of PEBS real_ip on Haswell and later CPUs - x86/alternatives: Fixup alternative_call_2 - llc: properly handle dev_queue_xmit() return value - builddeb: Fix header package regarding dtc source links - qede: Fix barrier usage after tx doorbell write. - mm, slab: memcg_link the SLAB's kmem_cache - mm/page_owner: fix recursion bug after changing skip entries - mm/kmemleak.c: wait for scan completion before disabling free - hv_netvsc: enable multicast if necessary - qede: Do not drop rx-checksum invalidated packets. - net: Fix untag for vlan packets without ethernet header - vlan: Fix vlan insertion for packets without ethernet header - net: mvneta: fix enable of all initialized RXQs - sh: fix debug trap failure to process signals before return to user - firmware: dmi_scan: Fix UUID length safety check - nvme: don't send keep-alives to the discovery controller - Btrfs: clean up resources during umount after trans is aborted - Btrfs: fix loss of prealloc extents past i_size after fsync log replay - x86/pgtable: Don't set huge PUD/PMD on non-leaf entries - fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl table - swap: divide-by-zero when zero length swap file on ssd - z3fold: fix memory leak - sr: get/drop reference to device in revalidate and check_events - Force log to disk before reading the AGF during a fstrim - cpufreq: CPPC: Initialize shared perf capabilities of CPUs - powerpc/fscr: Enable interrupts earlier before calling get_user() - perf tools: Fix perf builds with clang support - perf clang: Add support for recent clang versions - dp83640: Ensure against premature access to PHY registers after reset - ibmvnic: Zero used TX descriptor counter on reset - mm/ksm: fix interaction with THP - mm: fix races between address_space dereference and free in page_evicatable - mm: thp: fix potential clearing to referenced flag in page_idle_clear_pte_refs_one() - Btrfs: bail out on error during replay_dir_deletes - Btrfs: fix NULL pointer dereference in log_dir_items - btrfs: Fix possible softlock on single core machines - IB/rxe: Fix for oops in rxe_register_device on ppc64le arch - ocfs2/dlm: don't handle migrate lockres if already in shutdown - powerpc/64s/idle: Fix restore of AMOR on POWER9 after deep sleep - sched/rt: Fix rq->clock_update_flags < RQCF_ACT_SKIP warning - x86/mm: Fix bogus warning during EFI bootup, use boot_cpu_has() instead of this_cpu_has() in build_cr3_noflush() - KVM: VMX: raise internal error for exception during invalid protected mode state - lan78xx: Connect phy early - sparc64: Make atomic_xchg() an inline function rather than a macro. - net: bgmac: Fix endian access in bgmac_dma_tx_ring_free() - net: bgmac: Correctly annotate register space - btrfs: tests/qgroup: Fix wrong tree backref level - Btrfs: fix copy_items() return value when logging an inode - btrfs: fix lockdep splat in btrfs_alloc_subvolume_writers - btrfs: qgroup: Fix root item corruption when multiple same source snapshots are created with quota enabled - rxrpc: Fix Tx ring annotation after initial Tx failure - rxrpc: Don't treat call aborts as conn aborts - xen/acpi: off by one in read_acpi_id() - drivers: macintosh: rack-meter: really fix bogus memsets - ACPI: acpi_pad: Fix memory leak in power saving threads - powerpc/mpic: Check if cpu_possible() in mpic_physmask() - ieee802154: ca8210: fix uninitialised data read - ath10k: advertize beacon_int_min_gcd - iommu/amd: Take into account that alloc_dev_data() may return NULL - intel_th: Use correct method of finding hub - m68k: set dma and coherent masks for platform FEC ethernets - iwlwifi: mvm: check if mac80211_queue is valid in iwl_mvm_disable_txq - parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode - hwmon: (nct6775) Fix writing pwmX_mode - powerpc/perf: Prevent kernel address leak to userspace via BHRB buffer - powerpc/perf: Fix kernel address leak via sampling registers - rsi: fix kernel panic observed on 64bit machine - tools/thermal: tmon: fix for segfault - selftests: Print the test we're running to /dev/kmsg - net/mlx5: Protect from command bit overflow - watchdog: davinci_wdt: fix error handling in davinci_wdt_probe() - ath10k: Fix kernel panic while using worker (ath10k_sta_rc_update_wk) - nvme-pci: disable APST for Samsung NVMe SSD 960 EVO + ASUS PRIME Z370-A - ath9k: fix crash in spectral scan - cxgb4: Setup FW queues before registering netdev - ima: Fix Kconfig to select TPM 2.0 CRB interface - ima: Fallback to the builtin hash algorithm - watchdog: aspeed: Allow configuring for alternate boot - arm: dts: socfpga: fix GIC PPI warning - ext4: don't complain about incorrect features when probing - drm/vmwgfx: Unpin the screen object backup buffer when not used - iommu/mediatek: Fix protect memory setting - cpufreq: cppc_cpufreq: Fix cppc_cpufreq_init() failure path - IB/mlx5: Set the default active rate and width to QDR and 4X - zorro: Set up z->dev.dma_mask for the DMA API - bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set - remoteproc: imx_rproc: Fix an error handling path in 'imx_rproc_probe()' - dt-bindings: add device tree binding for Allwinner H6 main CCU - ACPICA: Events: add a return on failure from acpi_hw_register_read - ACPICA: Fix memory leak on unusual memory leak - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c - cxgb4: Fix queue free path of ULD drivers - i2c: mv64xxx: Apply errata delay only in standard mode - KVM: lapic: stop advertising DIRECTED_EOI when in-kernel IOAPIC is in use - perf top: Fix top.call-graph config option reading - perf stat: Fix core dump when flag T is used - IB/core: Honor port_num while resolving GID for IB link layer - drm/amdkfd: add missing include of mm.h - coresight: Use %px to print pcsr instead of %p - regulator: gpio: Fix some error handling paths in 'gpio_regulator_probe()' - spi: bcm-qspi: fIX some error handling paths - net/smc: pay attention to MAX_ORDER for CQ entries - MIPS: ath79: Fix AR724X_PLL_REG_PCIE_CONFIG offset - watchdog: dw: RMW the control register - watchdog: aspeed: Fix translation of reset mode to ctrl register - drm/meson: Fix some error handling paths in 'meson_drv_bind_master()' - drm/meson: Fix an un-handled error path in 'meson_drv_bind_master()' - powerpc: Add missing prototype for arch_irq_work_raise() - f2fs: fix to set KEEP_SIZE bit in f2fs_zero_range - f2fs: fix to clear CP_TRIMMED_FLAG - f2fs: fix to check extent cache in f2fs_drop_extent_tree - perf/core: Fix installing cgroup events on CPU - max17042: propagate of_node to power supply device - perf/core: Fix perf_output_read_group() - drm/panel: simple: Fix the bus format for the Ontat panel - hwmon: (pmbus/max8688) Accept negative page register values - hwmon: (pmbus/adm1275) Accept negative page register values - perf/x86/intel: Properly save/restore the PMU state in the NMI handler - cdrom: do not call check_disk_change() inside cdrom_open() - efi/arm*: Only register page tables when they exist - perf/x86/intel: Fix large period handling on Broadwell CPUs - perf/x86/intel: Fix event update for auto-reload - arm64: dts: qcom: Fix SPI5 config on MSM8996 - soc: qcom: wcnss_ctrl: Fix increment in NV upload - gfs2: Fix fallocate chunk size - x86/devicetree: Initialize device tree before using it - x86/devicetree: Fix device IRQ settings in DT - phy: rockchip-emmc: retry calpad busy trimming - ALSA: vmaster: Propagate slave error - phy: qcom-qmp: Fix phy pipe clock gating - drm/bridge: sii902x: Retry status read after DDI I2C - tools: hv: fix compiler warnings about major/target_fname - block: null_blk: fix 'Invalid parameters' when loading module - dmaengine: pl330: fix a race condition in case of threaded irqs - dmaengine: rcar-dmac: Check the done lists in rcar_dmac_chan_get_residue() - enic: enable rq before updating rq descriptors - watchdog: asm9260_wdt: fix error handling in asm9260_wdt_probe() - hwrng: stm32 - add reset during probe - pinctrl: devicetree: Fix dt_to_map_one_config handling of hogs - pinctrl: artpec6: dt: add missing pin group uart5nocts - vfio-ccw: fence off transport mode - dmaengine: qcom: bam_dma: get num-channels and num-ees from dt - drm: omapdrm: dss: Move initialization code from component bind to probe - ARM: dts: dra71-evm: Correct evm_sd regulator max voltage - drm/amdgpu: disable GFX ring and disable PQ wptr in hw_fini - drm/amdgpu: adjust timeout for ib_ring_tests(v2) - net: stmmac: ensure that the device has released ownership before reading data - net: stmmac: ensure that the MSS desc is the last desc to set the own bit - cpufreq: Reorder cpufreq_online() error code path - dpaa_eth: fix SG mapping - PCI: Add function 1 DMA alias quirk for Marvell 88SE9220 - udf: Provide saner default for invalid uid / gid - ixgbe: prevent ptp_rx_hang from running when in FILTER_ALL mode - sh_eth: fix TSU init on SH7734/R8A7740 - power: supply: ltc2941-battery-gauge: Fix temperature units - ARM: dts: bcm283x: Fix probing of bcm2835-i2s - ARM: dts: bcm283x: Fix pin function of JTAG pins - PCMCIA / PM: Avoid noirq suspend aborts during suspend-to-idle - audit: return on memory error to avoid null pointer dereference - net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() - rcu: Call touch_nmi_watchdog() while printing stall warnings - pinctrl: sh-pfc: r8a7796: Fix MOD_SEL register pin assignment for SSI pins group - dpaa_eth: fix pause capability advertisement logic - MIPS: Octeon: Fix logging messages with spurious periods after newlines - drm/rockchip: Respect page offset for PRIME mmap calls - x86/apic: Set up through-local-APIC mode on the boot CPU if 'noapic' specified - perf test: Fix test case inet_pton to accept inlines. - perf report: Fix wrong jump arrow - perf tests: Use arch__compare_symbol_names to compare symbols - perf report: Fix memory corruption in --branch-history mode --branch-history - perf tests: Fix dwarf unwind for stripped binaries - selftests/net: fixes psock_fanout eBPF test case - netlabel: If PF_INET6, check sk_buff ip header version - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen3 - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen2 - ARM: dts: at91: tse850: use the correct compatible for the eeprom - regmap: Correct comparison in regmap_cached - i40e: Add delay after EMP reset for firmware to recover - ARM: dts: imx7d: cl-som-imx7: fix pinctrl_enet - ARM: dts: porter: Fix HDMI output routing - regulator: of: Add a missing 'of_node_put()' in an error handling path of 'of_regulator_match()' - pinctrl: mcp23s08: spi: Fix regmap debugfs entries - kdb: make "mdr" command repeat - drm/vmwgfx: Set dmabuf_size when vmw_dmabuf_init is successful - perf tools: Add trace/beauty/generated/ into .gitignore - tools: sync up .h files with the repective arch and uapi .h files - MIPS: xilfpga: Stop generating useless dtb.o - MIPS: xilfpga: Actually include FDT in fitImage - MIPS: Fix build with DEBUG_ZBOOT and MACH_JZ4770 - fix breakage caused by d_find_alias() semantics change - Btrfs: fix error handling in btrfs_truncate() - mmc: block: propagate correct returned value in mmc_rpmb_ioctl - arm64: export tishift functions to modules - bcma: fix buffer size caused crash in bcma_core_mips_print_irq() - PM / core: Fix direct_complete handling for devices with no callbacks - ARM: dts: sun4i: Fix incorrect clocks for displays - bnxt_en: Ignore src port field in decap filter nodes - kasan, slub: fix handling of kasan_slab_free hook - riscv/spinlock: Strengthen implementations with fences - platform/x86: dell-smbios: Fix memory leaks in build_tokens_sysfs() - rxrpc: Fix resend event time calculation - i40e: hold the RTNL lock while changing interrupt schemes - hv_netvsc: Fix the return status in RX path - firmware: fix checking for return values for fw_add_devm_name() - bcache: set writeback_rate_update_seconds in range [1, 60] seconds - bcache: fix cached_dev->count usage for bch_cache_set_error() - bcache: stop dc->writeback_rate_update properly - ibmvnic: Fix reset return from closed state - powerpc/vas: Fix cleanup when VAS is not configured - f2fs: flush cp pack except cp pack 2 page at first - drm/amdgpu: Clean sdma wptr register when only enable wptr polling - powerpc/mm/slice: Remove intermediate bitmap copy - powerpc/mm/slice: create header files dedicated to slices - powerpc/mm/slice: Enhance for supporting PPC32 - powerpc/mm/slice: Fix hugepage allocation at hint address on 8xx - ibmvnic: Allocate statistics buffers during probe - dt-bindings: display: msm/dsi: Fix the PHY regulator supply props - drm/amd/display: Set vsc pack revision when DPCD revision is >= 1.2 - soc: renesas: r8a77970-sysc: fix power area parents - drm/vblank: Data type fixes for 64-bit vblank sequences. - selftests: Add FIB onlink tests - soc: amlogic: meson-gx-pwrc-vpu: fix error on shutdown when domain is powered off * arm-smmu-v3 arm-smmu-v3.1.auto: failed to allocate MSIs (LP: #1785282) - ACPICA: iasl: Add SMMUv3 device ID mapping index support - ACPI/IORT: Remove temporary iort_get_id_mapping_index() ACPICA guard * Driver iwlwifi for Intel Wireless-AC 9560 is slow and unreliable in kernel 4.15.0-20-generic (LP: #1772467) - scsi: hpsa: disable device during shutdown * [Bionic] i2c: xlp9xx: Add SMBAlert support (LP: #1786981) - i2c: xlp9xx: Add support for SMBAlert * qeth: don't clobber buffer on async TX completion (LP: #1786057) - s390/qeth: don't clobber buffer on async TX completion * Linux 4.15.0-23 crashes during the boot process with a "Unable to handle kernel NULL pointer dereference" message (LP: #1777338) - x86/xen: Add call of speculative_store_bypass_ht_init() to PV paths * ThinkPad systems have no HDMI sound when using the nvidia GPU (LP: #1787058) - ACPI / OSI: Add OEM _OSI string to enable NVidia HDMI audio * [Bionic] i2c: xlp9xx: Fix case where SSIF read transaction completes early (LP: #1787240) - i2c: xlp9xx: Fix case where SSIF read transaction completes early * [Bionic] integrate upstream fix for Cavium zram driver (LP: #1787469) - Revert "UBUNTU: SAUCE: crypto: thunderx_zip: Fix fallout from CONFIG_VMAP_STACK" - crypto: cavium - Fix fallout from CONFIG_VMAP_STACK - crypto: cavium - Limit result reading attempts - crypto: cavium - Prevent division by zero - crypto: cavium - Fix statistics pending request value - crypto: cavium - Fix smp_processor_id() warnings * Bugfix for handling of shadow doorbell buffer (LP: #1788222) - nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event * nvme devices namespace assigned to the wrong controller (LP: #1789227) - nvme/multipath: Fix multipath disabled naming collisions * linux-cloud-tools-common: Ensure hv-kvp-daemon.service starts before walinuxagent.service (LP: #1739107) - [Debian] hyper-v -- Ensure that hv-kvp-daemon.service starts before walinuxagent.service * hinic interfaces aren't getting predictable names (LP: #1783138) - hinic: Link the logical network device to the pci device in sysfs * Suspend fails in Ubuntu and Kubuntu 18.04 but works fine in Ubuntu and Kubuntu 17.10 (and on Kubuntu 18.04 using kernel 4.14.47) (LP: #1774950) - ACPI / LPSS: Avoid PM quirks on suspend and resume from S3 - ACPI / LPSS: Avoid PM quirks on suspend and resume from hibernation * [Bionic] Bluetooth: Support RTL8723D and RTL8821C Devices (LP: #1784835) - Bluetooth: btrtl: Add RTL8723D and RTL8821C devices * CacheFiles: Error: Overlong wait for old active object to go away. (LP: #1776254) - cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE flag - cachefiles: Wait rather than BUG'ing on "Unexpected object collision" * fscache cookie refcount updated incorrectly during fscache object allocation (LP: #1776277) // fscache cookie refcount updated incorrectly during fscache object allocation (LP: #1776277) - fscache: Fix reference overput in fscache_attach_object() error handling * FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false (LP: #1774336) - Revert "UBUNTU: SAUCE: CacheFiles: fix a read_waiter/read_copier race" - fscache: Allow cancelled operations to be enqueued - cachefiles: Fix refcounting bug in backing-file read monitoring * SMB3: Fix regression in server reconnect detection (LP: #1786110) - smb3: on reconnect set PreviousSessionId field * CVE-2018-1118 - vhost: fix info leak due to uninitialized memory linux-azure (4.15.0-1022.23) bionic; urgency=medium * linux-azure: 4.15.0-1022.23 -proposed tracker (LP: #1787155) * linux-azure: make sure CONFIG_MLX{4,5}_INFINIBAND stays as "y" (LP: #1785822) - [Config] azure: Ensure CONFIG_MLX5_INFINIBAND=y [ Ubuntu: 4.15.0-33.36 ] * linux: 4.15.0-33.36 -proposed tracker (LP: #1787149) * RTNL assertion failure on ipvlan (LP: #1776927) - ipvlan: drop ipv6 dependency - ipvlan: use per device spinlock to protect addrs list updates - SAUCE: fix warning from "ipvlan: drop ipv6 dependency" * ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941) - test_bpf: flag tests that cannot be jited on s390 * HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689) - drm/nouveau: fix nouveau_dsm_get_client_id()'s return type - drm/radeon: fix radeon_atpx_get_client_id()'s return type - drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type - platform/x86: apple-gmux: fix gmux_get_client_id()'s return type - ALSA: hda: use PCI_BASE_CLASS_DISPLAY to replace PCI_CLASS_DISPLAY_VGA - vga_switcheroo: set audio client id according to bound GPU id * locking sockets broken due to missing AppArmor socket mediation patches (LP: #1780227) - UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets * Update2 for ocxl driver (LP: #1781436) - ocxl: Fix page fault handler in case of fault on dying process * netns: unable to follow an interface that moves to another netns (LP: #1774225) - net: core: Expose number of link up/down transitions - dev: always advertise the new nsid when the netns iface changes - dev: advertise the new ifindex when the netns iface changes * [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066) - block, bfq: fix occurrences of request finish method's old name - block, bfq: remove batches of confusing ifdefs - block, bfq: add requeue-request hook * HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763) - ALSA: hda: add mute led support for HP ProBook 455 G5 * [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver (LP: #1781476) - i2c: xlp9xx: Fix issue seen when updating receive length - i2c: xlp9xx: Make sure the transfer size is not more than I2C_SMBUS_BLOCK_SIZE * x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486) - x86/kvm: fix LAPIC timer drift when guest uses periodic mode * Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823) - [Config:] d-i: Add ax88179_178a and r8152 to nic-modules * Nvidia fails after switching its mode (LP: #1778658) - PCI: Restore config space on runtime resume despite being unbound * Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364) - SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3 * CVE-2018-12232 - PATCH 1/1] socket: close race condition between sock_close() and sockfs_setattr() * CVE-2018-10323 - xfs: set format back to extents if xfs_bmap_extents_to_btree * change front mic location for more lenovo m7/8/9xx machines (LP: #1781316) - ALSA: hda/realtek - Fix the problem of two front mics on more machines - ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION * Cephfs + fscache: unable to handle kernel NULL pointer dereference at 0000000000000000 IP: jbd2__journal_start+0x22/0x1f0 (LP: #1783246) - ceph: track read contexts in ceph_file_info * Touchpad of ThinkPad P52 failed to work with message "lost sync at byte" (LP: #1779802) - Input: elantech - fix V4 report decoding for module with middle key - Input: elantech - enable middle button of touchpads on ThinkPad P52 * xhci_hcd 0000:00:14.0: Root hub is not suspended (LP: #1779823) - usb: xhci: dbc: Fix lockdep warning - usb: xhci: dbc: Don't decrement runtime PM counter if DBC is not started * CVE-2018-13406 - video: uvesafb: Fix integer overflow in allocation * CVE-2018-10840 - ext4: correctly handle a zero-length xattr with a non-zero e_value_offs * CVE-2018-11412 - ext4: do not allow external inodes for inline data * CVE-2018-10881 - ext4: clear i_data in ext4_inode_info when removing inline data * CVE-2018-12233 - jfs: Fix inconsistency between memory allocation and ea_buf->max_size * CVE-2018-12904 - kvm: nVMX: Enforce cpl=0 for VMX instructions * Error parsing PCC subspaces from PCCT (LP: #1528684) - mailbox: PCC: erroneous error message when parsing ACPI PCCT * CVE-2018-13094 - xfs: don't call xfs_da_shrink_inode with NULL bp * other users' coredumps can be read via setgid directory and killpriv bypass (LP: #1779923) // CVE-2018-13405 - Fix up non-directory creation in SGID directories * Invoking obsolete 'firmware_install' target breaks snap build (LP: #1782166) - snapcraft.yaml: stop invoking the obsolete (and non-existing) 'firmware_install' target * snapcraft.yaml: missing ubuntu-retpoline-extract-one script breaks the build (LP: #1782116) - snapcraft.yaml: copy retpoline-extract-one to scripts before build * Allow Raven Ridge's audio controller to be runtime suspended (LP: #1782540) - ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge * CVE-2018-11506 - sr: pass down correctly sized SCSI sense buffer * Bionic update: upstream stable patchset 2018-07-24 (LP: #1783418) - net: Fix a bug in removing queues from XPS map - net/mlx4_core: Fix error handling in mlx4_init_port_info. - net/sched: fix refcnt leak in the error path of tcf_vlan_init() - net: sched: red: avoid hashing NULL child - net/smc: check for missing nlattrs in SMC_PNETID messages - net: test tailroom before appending to linear skb - packet: in packet_snd start writing at link layer allocation - sock_diag: fix use-after-free read in __sk_free - tcp: purge write queue in tcp_connect_init() - vmxnet3: set the DMA mask before the first DMA map operation - vmxnet3: use DMA memory barriers where required - hv_netvsc: empty current transmit aggregation if flow blocked - hv_netvsc: Use the num_online_cpus() for channel limit - hv_netvsc: avoid retry on send during shutdown - hv_netvsc: only wake transmit queue if link is up - hv_netvsc: fix error unwind handling if vmbus_open fails - hv_netvsc: cancel subchannel setup before halting device - hv_netvsc: fix race in napi poll when rescheduling - hv_netvsc: defer queue selection to VF - hv_netvsc: disable NAPI before channel close - hv_netvsc: use RCU to fix concurrent rx and queue changes - hv_netvsc: change GPAD teardown order on older versions - hv_netvsc: common detach logic - hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown - hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl() - hv_netvsc: Ensure correct teardown message sequence order - hv_netvsc: Fix a network regression after ifdown/ifup - sparc: vio: use put_device() instead of kfree() - ext2: fix a block leak - s390: add assembler macros for CPU alternatives - s390: move expoline assembler macros to a header - s390/crc32-vx: use expoline for indirect branches - s390/lib: use expoline for indirect branches - s390/ftrace: use expoline for indirect branches - s390/kernel: use expoline for indirect branches - s390: move spectre sysfs attribute code - s390: extend expoline to BC instructions - s390: use expoline thunks in the BPF JIT - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() - scsi: zfcp: fix infinite iteration on ERP ready list - loop: don't call into filesystem while holding lo_ctl_mutex - loop: fix LOOP_GET_STATUS lock imbalance - cfg80211: limit wiphy names to 128 bytes - hfsplus: stop workqueue when fill_super() failed - x86/kexec: Avoid double free_page() upon do_kexec_load() failure - usb: gadget: f_uac2: fix bFirstInterface in composite gadget - usb: dwc3: Undo PHY init if soft reset fails - usb: dwc3: omap: don't miss events during suspend/resume - usb: gadget: core: Fix use-after-free of usb_request - usb: gadget: fsl_udc_core: fix ep valid checks - usb: dwc2: Fix dwc2_hsotg_core_init_disconnected() - usb: cdc_acm: prevent race at write to acm while system resumes - net: usbnet: fix potential deadlock on 32bit hosts - ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name - usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume timing" - USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM - net/usb/qmi_wwan.c: Add USB id for lt4120 modem - net-usb: add qmi_wwan if on lte modem wistron neweb d18q1 - Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB - ALSA: usb-audio: Add native DSD support for Luxman DA-06 - usb: dwc3: Add SoftReset PHY synchonization delay - usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields - usb: dwc3: Makefile: fix link error on randconfig - xhci: zero usb device slot_id member when disabling and freeing a xhci slot - usb: dwc2: Fix interval type issue - usb: dwc2: hcd: Fix host channel halt flow - usb: dwc2: host: Fix transaction errors in host mode - usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS - usb: gadget: ffs: Execute copy_to_user() with USER_DS set - usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS - usb: gadget: udc: change comparison to bitshift when dealing with a mask - usb: gadget: composite: fix incorrect handling of OS desc requests - media: lgdt3306a: Fix module count mismatch on usb unplug - media: em28xx: USB bulk packet size fix - Bluetooth: btusb: Add device ID for RTL8822BE - xhci: Show what USB release number the xHC supports from protocol capablity - staging: bcm2835-audio: Release resources on module_exit() - staging: lustre: fix bug in osc_enter_cache_try - staging: fsl-dpaa2/eth: Fix incorrect casts - staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr - staging: ks7010: Use constants from ieee80211_eid instead of literal ints. - staging: lustre: lmv: correctly iput lmo_root - crypto: inside-secure - wait for the request to complete if in the backlog - crypto: atmel-aes - fix the keys zeroing on errors - crypto: ccp - don't disable interrupts while setting up debugfs - crypto: inside-secure - do not process request if no command was issued - crypto: inside-secure - fix the cache_len computation - crypto: inside-secure - fix the extra cache computation - crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss - crypto: inside-secure - fix the invalidation step during cra_exit - scsi: mpt3sas: fix an out of bound write - scsi: ufs: Enable quirk to ignore sending WRITE_SAME command - scsi: bnx2fc: Fix check in SCSI completion handler for timed out request - scsi: sym53c8xx_2: iterator underflow in sym_getsync() - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() - scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion() - scsi: storvsc: Increase cmd_per_lun for higher speed devices - scsi: qedi: Fix truncation of CHAP name and secret - scsi: aacraid: fix shutdown crash when init fails - scsi: qla4xxx: skip error recovery in case of register disconnect. - scsi: qedi: Fix kernel crash during port toggle - scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM - scsi: sd: Keep disk read-only when re-reading partition - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled - scsi: aacraid: Insure command thread is not recursively stopped - scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD - scsi: mvsas: fix wrong endianness of sgpio api - ASoC: hdmi-codec: Fix module unloading caused kernel crash - ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs - ASoC: samsung: odroid: Fix 32000 sample rate handling - ASoC: topology: create TLV data for dapm widgets - ASoC: samsung: i2s: Ensure the RCLK rate is properly determined - clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228 - clk: Don't show the incorrect clock phase - clk: hisilicon: mark wdt_mux_p[] as const - clk: tegra: Fix pll_u rate configuration - clk: rockchip: Prevent calculating mmc phase if clock rate is zero - clk: samsung: s3c2410: Fix PLL rates - clk: samsung: exynos7: Fix PLL rates - clk: samsung: exynos5260: Fix PLL rates - clk: samsung: exynos5433: Fix PLL rates - clk: samsung: exynos5250: Fix PLL rates - clk: samsung: exynos3250: Fix PLL rates - media: dmxdev: fix error code for invalid ioctls - media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array - media: ov5645: add missing of_node_put() in error path - media: cx23885: Override 888 ImpactVCBe crystal frequency - media: cx23885: Set subdev host data to clk_freq pointer - media: s3c-camif: fix out-of-bounds array access - media: lgdt3306a: Fix a double kfree on i2c device remove - media: em28xx: Add Hauppauge SoloHD/DualHD bulk models - media: v4l: vsp1: Fix display stalls when requesting too many inputs - media: i2c: adv748x: fix HDMI field heights - media: vb2: Fix videobuf2 to map correct area - media: vivid: fix incorrect capabilities for radio - media: cx25821: prevent out-of-bounds read on array card - serial: xuartps: Fix out-of-bounds access through DT alias - serial: sh-sci: Fix out-of-bounds access through DT alias - serial: samsung: Fix out-of-bounds access through serial port index - serial: mxs-auart: Fix out-of-bounds access through serial port index - serial: imx: Fix out-of-bounds access through serial port index - serial: fsl_lpuart: Fix out-of-bounds access through DT alias - serial: arc_uart: Fix out-of-bounds access through DT alias - serial: 8250: Don't service RX FIFO if interrupts are disabled - serial: altera: ensure port->regshift is honored consistently - rtc: snvs: Fix usage of snvs_rtc_enable - rtc: hctosys: Ensure system time doesn't overflow time_t - rtc: rk808: fix possible race condition - rtc: m41t80: fix race conditions - rtc: tx4939: avoid unintended sign extension on a 24 bit shift - rtc: rp5c01: fix possible race condition - rtc: goldfish: Add missing MODULE_LICENSE - cxgb4: Correct ntuple mask validation for hash filters - net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule - net: dsa: Do not register devlink for unused ports - net: dsa: bcm_sf2: Fix IPv6 rules and chain ID - net: dsa: bcm_sf2: Fix IPv6 rule half deletion - 3c59x: convert to generic DMA API - net: ip6_gre: Request headroom in __gre6_xmit() - net: ip6_gre: Split up ip6gre_tnl_link_config() - net: ip6_gre: Split up ip6gre_tnl_change() - net: ip6_gre: Split up ip6gre_newlink() - net: ip6_gre: Split up ip6gre_changelink() - qed: LL2 flush isles when connection is closed - qed: Fix possibility of list corruption during rmmod flows - qed: Fix LL2 race during connection terminate - powerpc: Move default security feature flags - Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026] - staging: fsl-dpaa2/eth: Fix incorrect kfree - crypto: inside-secure - move the digest to the request context - scsi: lpfc: Fix NVME Initiator FirstBurst - serial: mvebu-uart: fix tx lost characters * Bionic update: upstream stable patchset 2018-07-20 (LP: #1782846) - usbip: usbip_host: refine probe and disconnect debug msgs to be useful - usbip: usbip_host: delete device from busid_table after rebind - usbip: usbip_host: run rebind from exit when module is removed - usbip: usbip_host: fix NULL-ptr deref and use-after-free errors - usbip: usbip_host: fix bad unlock balance during stub_probe() - ALSA: usb: mixer: volume quirk for CM102-A+/102S+ - ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist - ALSA: control: fix a redundant-copy issue - spi: pxa2xx: Allow 64-bit DMA - spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master - spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL - KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls - KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock - vfio: ccw: fix cleanup if cp_prefetch fails - tracing/x86/xen: Remove zero data size trace events trace_xen_mmu_flush_tlb{_all} - tee: shm: fix use-after-free via temporarily dropped reference - netfilter: nf_tables: free set name in error path - netfilter: nf_tables: can't fail after linking rule into active rule list - netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} - i2c: designware: fix poll-after-enable regression - powerpc/powernv: Fix NVRAM sleep in invalid context when crashing - drm: Match sysfs name in link removal to link creation - lib/test_bitmap.c: fix bitmap optimisation tests to report errors correctly - radix tree: fix multi-order iteration race - mm: don't allow deferred pages with NEED_PER_CPU_KM - drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk - s390/qdio: fix access to uninitialized qdio_q fields - s390/qdio: don't release memory in qdio_setup_irq() - s390: remove indirect branch from do_softirq_own_stack - x86/pkeys: Override pkey when moving away from PROT_EXEC - x86/pkeys: Do not special case protection key 0 - efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32' definition for mixed mode - ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr - x86/mm: Drop TS_COMPAT on 64-bit exec() syscall - tick/broadcast: Use for_each_cpu() specially on UP kernels - ARM: 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed - ARM: 8770/1: kprobes: Prohibit probing on optimized_callback - ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions - Btrfs: fix xattr loss after power failure - Btrfs: send, fix invalid access to commit roots due to concurrent snapshotting - btrfs: property: Set incompat flag if lzo/zstd compression is set - btrfs: fix crash when trying to resume balance without the resume flag - btrfs: Split btrfs_del_delalloc_inode into 2 functions - btrfs: Fix delalloc inodes invalidation during transaction abort - btrfs: fix reading stale metadata blocks after degraded raid1 mounts - xhci: Fix USB3 NULL pointer dereference at logical disconnect. - KVM: arm/arm64: Properly protect VGIC locks from IRQs - KVM: arm/arm64: VGIC/ITS: Promote irq_lock() in update_affinity - hwmon: (k10temp) Fix reading critical temperature register - hwmon: (k10temp) Use API function to access System Management Network - vsprintf: Replace memory barrier with static_key for random_ptr_key update - x86/amd_nb: Add support for Raven Ridge CPUs - x86/apic/x2apic: Initialize cluster ID properly * Bionic update: upstream stable patchset 2018-07-09 (LP: #1780858) - 8139too: Use disable_irq_nosync() in rtl8139_poll_controller() - bridge: check iface upper dev when setting master via ioctl - dccp: fix tasklet usage - ipv4: fix fnhe usage by non-cached routes - ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg - llc: better deal with too small mtu - net: ethernet: sun: niu set correct packet size in skb - net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode - net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()' - net/mlx4_en: Verify coalescing parameters are in range - net/mlx5e: Err if asked to offload TC match on frag being first - net/mlx5: E-Switch, Include VF RDMA stats in vport statistics - net sched actions: fix refcnt leak in skbmod - net_sched: fq: take care of throttled flows before reuse - net: support compat 64-bit time in {s,g}etsockopt - net/tls: Don't recursively call push_record during tls_write_space callbacks - net/tls: Fix connection stall on partial tls record - openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found - qmi_wwan: do not steal interfaces from class drivers - r8169: fix powering up RTL8168h - rds: do not leak kernel memory to user land - sctp: delay the authentication for the duplicated cookie-echo chunk - sctp: fix the issue that the cookie-ack with auth can't get processed - sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr - sctp: remove sctp_chunk_put from fail_mark err path in sctp_ulpevent_make_rcvmsg - sctp: use the old asoc when making the cookie-ack chunk in dupcook_d - tcp_bbr: fix to zero idle_restart only upon S/ACKed data - tcp: ignore Fast Open on repair mode - tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent(). - bonding: do not allow rlb updates to invalid mac - bonding: send learning packets for vlans on slave - net: sched: fix error path in tcf_proto_create() when modules are not configured - net/mlx5e: TX, Use correct counter in dma_map error flow - net/mlx5: Avoid cleaning flow steering table twice during error flow - hv_netvsc: set master device - ipv6: fix uninit-value in ip6_multipath_l3_keys() - net/mlx5e: Allow offloading ipv4 header re-write for icmp - nsh: fix infinite loop - udp: fix SO_BINDTODEVICE - l2tp: revert "l2tp: fix missing print session offset info" - proc: do not access cmdline nor environ from file-backed areas - net/smc: restrict non-blocking connect finish - mlxsw: spectrum_switchdev: Do not remove mrouter port from MDB's ports list - net/mlx5e: DCBNL fix min inline header size for dscp - net: systemport: Correclty disambiguate driver instances - sctp: clear the new asoc's stream outcnt in sctp_stream_update - tcp: restore autocorking - tipc: fix one byte leak in tipc_sk_set_orig_addr() - hv_netvsc: Fix net device attach on older Windows hosts * Bionic update: upstream stable patchset 2018-07-06 (LP: #1780499) - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS - ipvs: fix rtnl_lock lockups caused by start_sync_thread - netfilter: ebtables: don't attempt to allocate 0-sized compat array - kcm: Call strp_stop before strp_done in kcm_attach - crypto: af_alg - fix possible uninit-value in alg_bind() - netlink: fix uninit-value in netlink_sendmsg - net: fix rtnh_ok() - net: initialize skb->peeked when cloning - net: fix uninit-value in __hw_addr_add_ex() - dccp: initialize ireq->ir_mark - ipv4: fix uninit-value in ip_route_output_key_hash_rcu() - soreuseport: initialise timewait reuseport field - inetpeer: fix uninit-value in inet_getpeer - memcg: fix per_node_info cleanup - perf: Remove superfluous allocation error check - tcp: fix TCP_REPAIR_QUEUE bound checking - bdi: wake up concurrent wb_shutdown() callers. - bdi: Fix oops in wb_workfn() - gpioib: do not free unrequested descriptors - gpio: fix aspeed_gpio unmask irq - gpio: fix error path in lineevent_create - rfkill: gpio: fix memory leak in probe error path - libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs - dm integrity: use kvfree for kvmalloc'd memory - tracing: Fix regex_match_front() to not over compare the test string - z3fold: fix reclaim lock-ups - mm: sections are not offlined during memory hotremove - mm, oom: fix concurrent munlock and oom reaper unmap, v3 - ceph: fix rsize/wsize capping in ceph_direct_read_write() - can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg() - can: hi311x: Acquire SPI lock on ->do_get_berr_counter - can: hi311x: Work around TX complete interrupt erratum - drm/vc4: Fix scaling of uni-planar formats - drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log - drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear() - drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear() - net: atm: Fix potential Spectre v1 - atm: zatm: Fix potential Spectre v1 - cpufreq: schedutil: Avoid using invalid next_freq - Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174" - Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets - thermal: exynos: Reading temperature makes sense only when TMU is turned on - thermal: exynos: Propagate error value from tmu_read() - nvme: add quirk to force medium priority for SQ creation - smb3: directory sync should not return an error - sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] - tracing/uprobe_event: Fix strncpy corner case - perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_* - perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr - perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver - perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] - perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map() - i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr() - bdi: Fix use after free bug in debugfs_remove() - drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages - drm/i915: Adjust eDP's logical vco in a reliable place. - drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client - sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] * Bionic update: upstream stable patchset 2018-06-26 (LP: #1778759) - percpu: include linux/sched.h for cond_resched() - ACPI / button: make module loadable when booted in non-ACPI mode - USB: serial: option: Add support for Quectel EP06 - ALSA: hda - Fix incorrect usage of IS_REACHABLE() - ALSA: pcm: Check PCM state at xfern compat ioctl - ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger() - ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation for array index - ALSA: aloop: Mark paused device as inactive - ALSA: aloop: Add missing cable lock to ctl API callbacks - tracepoint: Do not warn on ENOMEM - scsi: target: Fix fortify_panic kernel exception - Input: leds - fix out of bound access - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro - rtlwifi: btcoex: Add power_on_setting routine - rtlwifi: cleanup 8723be ant_sel definition - xfs: prevent creating negative-sized file via INSERT_RANGE - RDMA/cxgb4: release hw resources on device removal - RDMA/ucma: Allow resolving address w/o specifying source address - RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow - RDMA/mlx5: Protect from shift operand overflow - NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2 - IB/mlx5: Use unlimited rate when static rate is not supported - IB/hfi1: Fix handling of FECN marked multicast packet - IB/hfi1: Fix loss of BECN with AHG - IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used - iw_cxgb4: Atomically flush per QP HW CQEs - drm/vmwgfx: Fix a buffer object leak - drm/bridge: vga-dac: Fix edid memory leak - test_firmware: fix setting old custom fw path back on exit, second try - errseq: Always report a writeback error once - USB: serial: visor: handle potential invalid device configuration - usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue - USB: Accept bulk endpoints with 1024-byte maxpacket - USB: serial: option: reimplement interface masking - USB: serial: option: adding support for ublox R410M - usb: musb: host: fix potential NULL pointer dereference - usb: musb: trace: fix NULL pointer dereference in musb_g_tx() - platform/x86: asus-wireless: Fix NULL pointer dereference - irqchip/qcom: Fix check for spurious interrupts - tracing: Fix bad use of igrab in trace_uprobe.c - [Config] CONFIG_ARM64_ERRATUM_1024718=y - arm64: Add work around for Arm Cortex-A55 Erratum 1024718 - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro - infiniband: mlx5: fix build errors when INFINIBAND_USER_ACCESS=m - btrfs: Take trans lock before access running trans in check_delayed_ref - drm/vc4: Make sure vc4_bo_{inc,dec}_usecnt() calls are balanced - xhci: Fix use-after-free in xhci_free_virt_device - platform/x86: Kconfig: Fix dell-laptop dependency chain. - KVM: x86: remove APIC Timer periodic/oneshot spikes - clocksource: Allow clocksource_mark_unstable() on unregistered clocksources - clocksource: Initialize cs->wd_list - clocksource: Consistent de-rate when marking unstable * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) - ext4: set h_journal if there is a failure starting a reserved handle - ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs - ext4: add validity checks for bitmap block numbers - ext4: fix bitmap position validation - random: fix possible sleeping allocation from irq context - random: rate limit unseeded randomness warnings - usbip: usbip_event: fix to not print kernel pointer address - usbip: usbip_host: fix to hold parent lock for device_attach() calls - usbip: vhci_hcd: Fix usb device and sockfd leaks - usbip: vhci_hcd: check rhport before using in vhci_hub_control() - Revert "xhci: plat: Register shutdown for xhci_plat" - USB: serial: simple: add libtransistor console - USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster - USB: serial: cp210x: add ID for NI USB serial console - usb: core: Add quirk for HP v222w 16GB Mini - USB: Increment wakeup count on remote wakeup. - ALSA: usb-audio: Skip broken EU on Dell dock USB-audio - virtio: add ability to iterate over vqs - virtio_console: don't tie bufs to a vq - virtio_console: free buffers after reset - virtio_console: drop custom control queue cleanup - virtio_console: move removal code - virtio_console: reset on out of memory - drm/virtio: fix vq wait_event condition - tty: Don't call panic() at tty_ldisc_init() - tty: n_gsm: Fix long delays with control frame timeouts in ADM mode - tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set - tty: Avoid possible error pointer dereference at tty_ldisc_restore(). - tty: Use __GFP_NOFAIL for tty_ldisc_get() - ALSA: dice: fix OUI for TC group - ALSA: dice: fix error path to destroy initialized stream data - ALSA: hda - Skip jack and others for non-existing PCM streams - ALSA: opl3: Hardening for potential Spectre v1 - ALSA: asihpi: Hardening for potential Spectre v1 - ALSA: hdspm: Hardening for potential Spectre v1 - ALSA: rme9652: Hardening for potential Spectre v1 - ALSA: control: Hardening for potential Spectre v1 - ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY. - ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr - ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device - ALSA: seq: oss: Hardening for potential Spectre v1 - ALSA: hda: Hardening for potential Spectre v1 - ALSA: hda/realtek - Add some fixes for ALC233 - ALSA: hda/realtek - Update ALC255 depop optimize - ALSA: hda/realtek - change the location for one of two front mics - mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic - mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block. - mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug. - mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block. - mtd: rawnand: tango: Fix struct clk memory leak - kobject: don't use WARN for registration failures - scsi: sd: Defer spinning up drive while SANITIZE is in progress - bfq-iosched: ensure to clear bic/bfqq pointers when preparing request - vfio: ccw: process ssch with interrupts disabled - ANDROID: binder: prevent transactions into own process. - PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf() - PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf() - PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq mode - PCI: aardvark: Fix PCIe Max Read Request Size setting - ARM: amba: Make driver_override output consistent with other buses - ARM: amba: Fix race condition with driver_override - ARM: amba: Don't read past the end of sysfs "driver_override" buffer - ARM: socfpga_defconfig: Remove QSPI Sector 4K size force - KVM: arm/arm64: Close VMID generation race - crypto: drbg - set freed buffers to NULL - ASoC: fsl_esai: Fix divisor calculation failure at lower ratio - libceph: un-backoff on tick when we have a authenticated session - libceph: reschedule a tick in finish_hunting() - libceph: validate con->state at the top of try_write() - fpga-manager: altera-ps-spi: preserve nCONFIG state - earlycon: Use a pointer table to fix __earlycon_table stride - drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders - drm/i915: Enable display WA#1183 from its correct spot - objtool, perf: Fix GCC 8 -Wrestrict error - tools/lib/subcmd/pager.c: do not alias select() params - x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds - x86/smpboot: Don't use mwait_play_dead() on AMD systems - x86/microcode/intel: Save microcode patch unconditionally - x86/microcode: Do not exit early from __reload_late() - tick/sched: Do not mess with an enqueued hrtimer - arm/arm64: KVM: Add PSCI version selection API - powerpc/eeh: Fix race with driver un/bind - serial: mvebu-uart: Fix local flags handling on termios update - block: do not use interruptible wait anywhere - ASoC: dmic: Fix clock parenting - PCI / PM: Do not clear state_saved in pci_pm_freeze() when smart suspend is set - module: Fix display of wrong module .text address - drm/edid: Reset more of the display info - drm/i915/fbdev: Enable late fbdev initial configuration - drm/i915/audio: set minimum CD clock to twice the BCLK - drm/amd/display: Fix deadlock when flushing irq - drm/amd/display: Disallow enabling CRTC without primary plane with FB * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) // CVE-2018-1108. - random: set up the NUMA crng instances after the CRNG is fully initialized * Ryzen/Raven Ridge USB ports do not work (LP: #1756700) - xhci: Fix USB ports for Dell Inspiron 5775 * [Ubuntu 1804][boston][ixgbe] EEH causes kernel BUG at /build/linux- jWa1Fv/linux-4.15.0/drivers/pci/msi.c:352 (i2S) (LP: #1776389) - ixgbe/ixgbevf: Free IRQ when PCI error recovery removes the device * Need fix to aacraid driver to prevent panic (LP: #1770095) - scsi: aacraid: Correct hba_send to include iu_type * kernel: Fix arch random implementation (LP: #1775391) - s390/archrandom: Rework arch random implementation. * kernel: Fix memory leak on CCA and EP11 CPRB processing. (LP: #1775390) - s390/zcrypt: Fix CCA and EP11 CPRB processing failure memory leak. * Various fixes for CXL kernel module (LP: #1774471) - cxl: Remove function write_timebase_ctrl_psl9() for PSL9 - cxl: Set the PBCQ Tunnel BAR register when enabling capi mode - cxl: Report the tunneled operations status - cxl: Configure PSL to not use APC virtual machines - cxl: Disable prefault_mode in Radix mode * Bluetooth not working (LP: #1764645) - Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models * linux-snapdragon: wcn36xx: mac address generation on boot (LP: #1776491) - [Config] arm64: snapdragon: WCN36XX_SNAPDRAGON_HACKS=y - SAUCE: wcn36xx: read MAC from file or randomly generate one * fscache: Fix hanging wait on page discarded by writeback (LP: #1777029) - fscache: Fix hanging wait on page discarded by writeback [ Ubuntu: 4.15.0-32.35 ] * CVE-2018-3620 // CVE-2018-3646 - cpu: Fix per-cpu regression on ARM64 -- Marcelo Henrique Cerri