Eoan update: v5.2.3 upstream stable release

Bug #1838089 reported by Seth Forshee on 2019-07-26
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Seth Forshee
Seth Forshee

Bug Description

    SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.2.3 upstream stable release
       from git://git.kernel.org/

Linux 5.2.3
dm bufio: fix deadlock with loop device
dm thin metadata: check if in fail_io mode when setting needs_check
phy: qcom-qmp: Correct READY_STATUS poll break condition
pstore: Fix double-free in pstore_mkfile() failure path
dt-bindings: allow up to four clocks for orion-mdio
net: mvmdio: allow up to four clocks to be specified for orion-mdio
blkcg: update blkcg_print_stat() to handle larger outputs
blk-iolatency: clear use_delay when io.latency is set to zero
clk: imx: imx8mm: correct audio_pll2_clk to audio_pll2_out
blk-throttle: fix zero wait time for iops throttled group
usb: Handle USB3 remote wakeup for LPM enabled devices correctly
dax: Fix missed wakeup with PMD faults
Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
intel_th: msu: Fix single mode with disabled IOMMU
intel_th: msu: Remove set but not used variable 'last'
mtd: spinand: read returns badly if the last page has bitflips
mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
eCryptfs: fix a couple type promotion bugs
mmc: sdhci-msm: fix mutex while in spinlock
powerpc/pseries: Fix oops in hotplug memory notifier
powerpc/pseries: Fix xive=off command line
powerpc/powernv: Fix stale iommu table base after VFIO
powerpc/powernv/idle: Fix restore of SPRN_LDBAR for POWER9 stop state.
powerpc/powernv/npu: Fix reference leak
powerpc/watchpoint: Restore NV GPRs while returning from exception
powerpc/mm/32s: fix condition that is always true
powerpc/32s: fix suspend/resume when IBATs 4-7 are used
parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
parisc: Avoid kernel panic triggered by invalid kprobe
parisc: Ensure userspace privilege for ptraced processes in regset functions
gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
resource: fix locking in find_next_iomem_res()
include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures
coda: pass the host file in vma->vm_file on mmap
mm/z3fold.c: lock z3fold page before __SetPageMovable()
mm/memcontrol: fix wrong statistics in memory.stat
libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
mm/nvdimm: add is_ioremap_addr and use that to check ioremap address
mm: vmscan: scan anonymous pages on file refaults
HID: wacom: correct touch resolution x/y typo
HID: wacom: generic: Correct pad syncing
HID: wacom: generic: only switch the mode on devices with LEDs
IB/mlx5: Report correctly tag matching rendezvous capability
Btrfs: add missing inode version, ctime and mtime updates when punching hole
Btrfs: fix fsync not persisting dentry deletions due to inode evictions
Btrfs: fix data loss after inode eviction, renaming it, and fsync it
btrfs: correctly validate compression type
PCI: qcom: Ensure that PERST is asserted for at least 100 ms
PCI: Do not poll for PME if the device is in D3cold
PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
intel_th: pci: Add Ice Lake NNPI support
RDMA/odp: Fix missed unlock in non-blocking invalidate_start
RDMA/srp: Accept again source addresses that do not have a port number
block: Fix potential overflow in blk_report_zones()
block: Allow mapping of vmalloc-ed buffers
drm/edid: parse CEA blocks embedded in DisplayID
x86/stacktrace: Prevent infinite loop in arch_stack_walk_user()
perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
perf/x86/intel: Fix spurious NMI on fixed counter
x86/boot: Fix memory leak in default_get_smp_config()
x86/hyper-v: Zero out the VP ASSIST PAGE on allocation
rt2x00usb: fix rx queue hang
9p/virtio: Add cleanup path in p9_virtio_init
9p/xen: Add cleanup path in p9_trans_xen_init
xen/events: fix binding user event channels to cpus
dm zoned: fix zone state management race
padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
drm/nouveau/i2c: Enable i2c pads & busses during preinit
ARM: dts: gemini: Set DIR-685 SPI CS as active low
i3c: fix i2c and i3c scl rate by bus mode
fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes.
signal: Correct namespace fixups of si_pid and si_uid
signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio
intel_th: msu: Fix unused variable warning on arm64 platform
arm64: Fix incorrect irqflag restore for priority masking
arm64: irqflags: Add condition flags to inline asm clobber list
arm64: tegra: Fix AGIC register range
KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation
KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest entry
KVM: PPC: Book3S HV: Signed extend decrementer value if not using large decrementer
KVM: Properly check if "page" is valid in kvm_vcpu_unmap
KVM: VMX: check CPUID before allowing read/write of IA32_XSS
KVM: VMX: Fix handling of #MC that occurs during VM-Entry
KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value
KVM: nVMX: Don't dump VMCS if virtual APIC page can't be mapped
media: videobuf2-dma-sg: Prevent size from overflowing
media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
media: coda: Remove unbalanced and unneeded mutex unlock
media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
ceph: use ceph_evict_inode to cleanup inode's resource
ceph: fix end offset in truncate_inode_pages_range call
ALSA: hda/hdmi - Fix i915 reverse port/pin mapping
ALSA: hda/hdmi - Remove duplicated define
ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
ALSA: seq: Break too long mutex context in the write loop
kconfig: fix missing choice values in auto.conf
raid5-cache: Need to do start() part job after adding journal device
ASoC: core: Adapt for debugfs API change
ASoC: dapm: Adapt for debugfs API change
lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE
SUNRPC: Ensure the bvecs are reset when we re-encode the RPC request
pnfs: Fix a problem where we gratuitously start doing I/O through the MDS
pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
Revert "NFS: readdirplus optimization by cache mechanism" (memleak)
NFSv4: Handle the special Linux file open access mode
tracing: Fix user stack trace "??" output
arm64: Fix interrupt tracing in the presence of NMIs
opp: Don't use IS_ERR on invalid supplies
iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware
iwlwifi: mvm: delay GTK setting in FW in AP mode
iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
iwlwifi: pcie: don't service an interrupt that was masked
iwlwifi: add support for hr1 RF ID
arm64: tegra: Fix Jetson Nano GPU regulator
arm64: tegra: Update Jetson TX1 GPU regulator timings
regulator: s2mps11: Fix buck7 and buck8 wrong voltages
regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure
Input: alps - fix a mismatch between a condition check and its comment
Input: synaptics - whitelist Lenovo T580 SMBus intertouch
Input: alps - don't handle ALPS cs19 trackpoint-only device
Input: gtco - bounds check collection indent level
bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread
bcache: fix mistaken sysfs entry for io_error counter
bcache: ignore read-ahead request failure on backing device
bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free"
bcache: Revert "bcache: fix high CPU occupancy during journal"
Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()"
CIFS: fix deadlock in cached root handling
cifs: flush before set-info if we have writeable handles
cifs: Properly handle auto disabling of serverino option
cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
cifs: always add credits back for unsolicited PDUs
crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
crypto: ccp/gcm - use const time tag comparison.
crypto: ccp - memset structure fields to zero before reuse
crypto: crypto4xx - block ciphers should only accept complete blocks
crypto: crypto4xx - fix blocksize for cfb and ofb
crypto: crypto4xx - fix AES CTR blocksize value
crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
crypto: arm64/sha2-ce - correct digest for empty data in finup
crypto: arm64/sha1-ce - correct digest for empty data in finup
crypto: ccp - Validate the the error value used to index error messages
crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
crypto: ghash - fix unaligned memory access in ghash_setkey()
scsi: mac_scsi: Fix pseudo DMA implementation, take 2
scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
scsi: megaraid_sas: Fix calculation of target ID
scsi: zfcp: fix request object use-after-free in send path causing wrong traces
scsi: zfcp: fix request object use-after-free in send path causing seqno errors
scsi: sd_zbc: Fix compilation warning
scsi: core: Fix race on creating sense cache
Revert "scsi: ncr5380: Increase register polling limit"
scsi: NCR5380: Handle PDMA failure reliably
scsi: NCR5380: Always re-enable reselection interrupt
xen: let alloc_xenballooned_pages() fail if not enough memory free
floppy: fix out-of-bounds read in copy_buffer
floppy: fix invalid pointer dereference in drive_name
floppy: fix out-of-bounds read in next_valid_format
floppy: fix div-by-zero in setup_format_params
libbpf: fix another GCC8 warning for strncpy
blk-iolatency: fix STS_AGAIN handling
iavf: fix dereference of null rx_buffer pointer
net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue
net: mvmdio: defer probe of orion-mdio if a clock is not ready
xdp: fix race on generic receive path
gtp: fix use-after-free in gtp_newlink()
gtp: fix use-after-free in gtp_encap_destroy()
gtp: fix Illegal context switch in RCU read-side critical section.
gtp: fix suspicious RCU usage
Bluetooth: validate BLE connection interval updates
gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
Bluetooth: hidp: NUL terminate a string in the compat ioctl
Bluetooth: Check state in l2cap_disconnect_rsp
perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
genirq: Update irq stats from NMI handlers
Bluetooth: 6lowpan: search for destination address in all peers
Bluetooth: Add new 13d3:3501 QCA_ROME device
Bluetooth: Add new 13d3:3491 QCA_ROME device
Bluetooth: hci_bcsp: Fix memory leak in rx_skb
net: hns3: fix port capbility updating issue
net: hns3: enable broadcast promisc mode when initializing VF
tools: bpftool: Fix json dump crash on powerpc
ASoC: audio-graph-card: fix use-after-free in graph_for_each_link
iommu/arm-smmu-v3: Invalidate ATC when detaching a device
gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
bonding: validate ip header before check IPPROTO_IGMP
selftests: bpf: fix inlines in test_lwt_seg6local
bpf, libbpf, smatch: Fix potential NULL pointer dereference
libbpf: fix GCC8 warning for strncpy
rxrpc: Fix oops in tracepoint
net: usb: asix: init MAC address buffers
bnx2x: Prevent ptp_task to be rescheduled indefinitely
vxlan: do not destroy fdb if register_netdevice() is failed
perf stat: Fix group lookup for metric group
perf stat: Don't merge events in the same PMU
perf stat: Fix metrics with --no-merge
perf stat: Make metric event lookup more robust
ALSA: hda: Fix a headphone detection issue when using SOF
bnxt_en: Cap the returned MSIX vectors to the RDMA driver.
bnxt_en: Fix statistics context reservation logic for RDMA driver.
bnxt_en: Disable bus master during PCI shutdown and driver unload.
iwlwifi: dbg: fix debug monitor stop and restart delays
netfilter: Fix remainder of pseudo-header protocol 0
bpf: fix uapi bpf_prog_info fields alignment
iwlwifi: mvm: Drop large non sta frames
ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw
net: ethernet: ti: cpsw: Assign OF node to slave devices
net: hns3: add Asym Pause support to fix autoneg problem
igb: clear out skb->tstamp after reading the txtime
net: mvpp2: prs: Don't override the sign bit in SRAM parser shift
ath10k: destroy sdio workqueue while remove sdio module
ath10k: Fix memory leak in qmi
net: hns3: add some error checking in hclge_tm module
net: hns3: fix a -Wformat-nonliteral compile warning
bcache: fix potential deadlock in cached_def_free()
bcache: avoid a deadlock in bcache_reboot()
bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
bcache: acquire bch_register_lock later in cached_dev_free()
bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
bcache: check CACHE_SET_IO_DISABLE in allocator code
bcache: fix return value error in bch_journal_read()
net/mlx5e: Attach/detach XDP program safely
EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
wil6210: drop old event after wmi_call timeout
ath9k: correctly handle short radar pulses
crypto: asymmetric_keys - select CRYPTO_HASH where needed
crypto: serpent - mark __serpent_setkey_sbox noinline
ixgbe: Check DDM existence in transceiver before access
net/mlx5: Get vport ACL namespace by vport index
net: hns3: restore the MAC autoneg state after reset
gpio: Fix return value mismatch of function gpiod_get_from_of_node()
rslib: Fix handling of of caller provided syndrome
bpf: fix BPF_ALU32 | BPF_ARSH on BE arches
rslib: Fix decoding of shortened codes
xsk: Properly terminate assignment in xskq_produce_flush_desc
netfilter: ctnetlink: Fix regression in conntrack entry deletion
clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
clocksource/drivers/tegra: Restore base address before cleanup
libata: don't request sense data on !ZAC ATA devices
clocksource/drivers/tegra: Release all IRQ's on request_irq() error
block, bfq: fix rq_in_driver check in bfq_update_inject_limit
ASoC: Intel: hdac_hdmi: Set ops to NULL on remove
perf tools: Increase MAX_NR_CPUS and MAX_CACHES
ALSA: hdac: Fix codec name after machine driver is unloaded and reloaded
ath10k: fix PCIE device wake up failed
ath10k: fix fw crash by moving chip reset after napi disabled
ath10k: add missing error handling
mt76: mt7615: do not process rx packets if the device is not initialized
ipvs: fix tinfo memory leak in start_sync_thread
mt7601u: fix possible memory leak when the device is disconnected
x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
mt7601u: do not schedule rx_tasklet when the device has been disconnected
rtlwifi: rtl8192cu: fix error handle when usb probe failed
net: stmmac: sun8i: force select external PHY when no internal one
media: hdpvr: fix locking and a missing msleep
media: vimc: cap: check v4l2_fill_pixfmt return value
media: coda: increment sequence offset for the last returned frame
media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
media: coda: fix mpeg2 sequence number handling
acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock;
media: mt9m111: fix fw-node refactoring
timer_list: Guard procfs specific code
ntp: Limit TAI-UTC offset
media: i2c: fix warning same module names
media: s5p-mfc: Make additional clocks optional
ipvs: defer hook registration to avoid leaks
media: staging: davinci: fix memory leaks and check for allocation failure
ipsec: select crypto ciphers for xfrm_algo
arm64: Do not enable IRQs for ct_user_exit
nvme-pci: adjust irq max_vector using num_possible_cpus()
lightnvm: fix uninitialized pointer in nvm_remove_tgt()
lightnvm: pblk: fix freeing of merged pages
nvme-pci: set the errno on ctrl state change error
nvme-pci: properly report state change failure in nvme_reset_work
nvme: fix possible io failures when removing multipathed ns
EDAC/sysfs: Fix memory leak when creating a csrow object
EDAC/sysfs: Drop device references properly
spi: fix ctrl->num_chipselect constraint
ACPICA: Clear status of GPEs on first direct enable
blk-iolatency: only account submitted bios
x86/cacheinfo: Fix a -Wtype-limits warning
net: netsec: initialize tx ring on ndo_open
PCI: Add missing link delays required by the PCIe spec
perf build: Handle slang being in /usr/include and in /usr/include/slang/
bpf: fix callees pruning callers
tools build: Fix the zstd test in the test-all.c common case feature test
ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_
ipoib: correcly show a VF hardware address
iavf: allow null RX descriptors
vhost_net: disable zerocopy by default
perf evsel: Make perf_evsel__name() accept a NULL argument
x86/atomic: Fix smp_mb__{before,after}_atomic()
integrity: Fix __integrity_init_keyring() section mismatch
perf/x86/intel/uncore: Handle invalid event coding for free-running counter
perf/x86/intel: Disable check_msr for real HW
sched/fair: Fix "runnable_avg_yN_inv" not used warnings
perf/x86/intel: Add more Icelake CPUIDs
sched/core: Add __sched tag for io_schedule()
xfrm: fix sa selector validation
blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration
block: null_blk: fix race condition for null_del_dev
net: hns3: delay ring buffer clearing during reset
net: hns3: fix for skb leak when doing selftest
net: hns3: fix for dereferencing before null checking
qed: iWARP - Fix tc for MPA ll2 connection
x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
perf/x86: Add Intel Ice Lake NNPI uncore support
rcu: Force inlining of rcu_read_lock()
ASoC: meson: axg-tdm: fix sample clock inversion
x86/cpu: Add Ice Lake NNPI to Intel family
crypto: testmgr - add some more preemption points
selinux: fix empty write to keycreate file
media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7
bpf: silence warning messages in core
media: davinci: vpif_capture: fix memory leak in vpif_probe()
gpio: omap: Fix lost edge wake-up interrupts
regmap: fix bulk writes on paged registers
gpio: omap: ensure irq is enabled before wakeup
gpio: omap: fix lack of irqstatus_raw0 for OMAP4
iommu: Fix a leak in iommu_insert_resv_region
media: fdp1: Support M3N and E3 platforms
media: uvcvideo: Fix access to uninitialized fields on probe error
irqchip/meson-gpio: Add support for Meson-G12A SoC
selftests/bpf : clean up feature/ when make clean
perf report: Fix OOM error in TUI mode on s390
perf test 6: Fix missing kvm module load for s390
perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
ipset: Fix memory accounting for hash types on resize
netfilter: ipset: fix a missing check of nla_parse
net: sfp: add mutex to prevent concurrent state checks
RAS/CEC: Fix pfn insertion
s390/qdio: handle PENDING state for QEBSM devices
net: axienet: Fix race condition causing TX hang
net: fec: Do not use netdev messages too early
crypto: inside-secure - do not rely on the hardware last bit for result descriptors
net: stmmac: modify default value of tx-frames
net: stmmac: dwmac4: fix flow control issue
media: aspeed: fix a kernel warning on clk control
media: aspeed: change irq to threaded irq
perf jvmti: Address gcc string overflow warning for strncpy()
media: imx7-mipi-csis: Propagate the error if clock enabling fails
arm64: mm: make CONFIG_ZONE_DMA32 configurable
cpupower : frequency-set -r option misses the last cpu in related cpu list
net: hns3: set ops to null when unregister ad_dev
net: hns3: add a check to pointer in error_detected and slot_reset
media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
media: platform: ao-cec-g12a: disable regmap fast_io for cec bus regmap
locking/lockdep: Fix merging of hlocks with non-zero references
locking/lockdep: Fix OOO unlock when hlocks need merging
batman-adv: Fix duplicated OGMs on NETDEV_UP
tua6100: Avoid build warnings.
crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
crypto: talitos - properly handle split ICV.
net: dsa: sja1105: Fix broken fixed-link interfaces on user ports
net: phy: Check against net_device being NULL
media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails.
ASoC: Intel: sof-rt5682: fix undefined references with Baytrail-only support
media: saa7164: fix remove_proc_entry warning
media: mc-device.c: don't memset __user pointer contents
ice: Check all VFs for MDD activity, don't disable
perf annotate TUI browser: Do not use member from variable within its own initialization
media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
fscrypt: clean up some BUG_ON()s in block encryption/decryption
media: v4l2-core: fix use-after-free error
media: vim2m: fix two double-free issues
xfrm: Fix xfrm sel prefix length validation
af_key: fix leaks in key_pol_get_resp and dump_sp.
signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
qed: Set the doorbell address correctly
net: hns3: fix for FEC configuration
net: hns3: initialize CPU reverse mapping
net: mvpp2: cls: Extract the RSS context when parsing the ethtool rule
ice: Fix couple of issues in ice_vsi_release
net: stmmac: Prevent missing interrupts when running NAPI
net: stmmac: dwmac4/5: Clear unused address entries
net: stmmac: dwmac1000: Clear unused address entries
crypto: caam - avoid S/G table fetching for AEAD zero-length output
media: venus: firmware: fix leaked of_node references
ice: Gracefully handle reset failure in ice_alloc_vfs()
media: media_device_enum_links32: clean a reserved field
media: vpss: fix a potential NULL pointer dereference
selftests/bpf: adjust verifier scale test
media: marvell-ccic: fix DMA s/g desc number calculation
media: ov7740: avoid invalid framesize setting
crypto: talitos - fix skcipher failure due to wrong output IV
media: spi: IR LED: add missing of table registration
media: dvb: usb: fix use after free in dvb_usb_device_exit
batman-adv: fix for leaked TVLV handler.
regmap: debugfs: Fix memory leak in regmap_debugfs_init
ath10k: Fix encoding for protected management frames
ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
wil6210: fix spurious interrupts in 3-msi
ath10k: add peer id check in ath10k_peer_find_by_id
ath6kl: add some bounds checking
wil6210: fix missed MISC mbox interrupt
ath10k: Fix the wrong value of enums for wmi tlv stats id
ath9k: Check for errors when reading SREV register
spi: rockchip: turn down tx dma bursts
ath10k: Do not send probe response template for mesh
wil6210: fix potential out-of-bounds read
ath9k: Don't trust TX status TID number when reporting airtime
ath10k: fix incorrect multicast/broadcast rate setting
ath10k: htt: don't use txdone_fifo with SDIO
ath10k: Check tx_stats before use it

CVE References

Seth Forshee (sforshee) on 2019-07-26
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Eoan):
assignee: nobody → Seth Forshee (sforshee)
importance: Undecided → Medium
status: Confirmed → In Progress
Seth Forshee (sforshee) on 2019-07-26
Changed in linux (Ubuntu Eoan):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (37.9 KiB)

This bug was fixed in the package linux - 5.2.0-10.11

linux (5.2.0-10.11) eoan; urgency=medium

  * eoan/linux: 5.2.0-10.11 -proposed tracker (LP: #1838113)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log

  * Eoan update: v5.2.4 upstream stable release (LP: #1838428)
    - bnx2x: Prevent load reordering in tx completion processing
    - caif-hsi: fix possible deadlock in cfhsi_exit_module()
    - hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback()
    - igmp: fix memory leak in igmpv3_del_delrec()
    - ipv4: don't set IPv6 only flags to IPv4 addresses
    - ipv6: rt6_check should return NULL if 'from' is NULL
    - ipv6: Unlink sibling route in case of failure
    - net: bcmgenet: use promisc for unsupported filters
    - net: dsa: mv88e6xxx: wait after reset deactivation
    - net: make skb_dst_force return true when dst is refcounted
    - net: neigh: fix multiple neigh timer scheduling
    - net: openvswitch: fix csum updates for MPLS actions
    - net: phy: sfp: hwmon: Fix scaling of RX power
    - net_sched: unset TCQ_F_CAN_BYPASS when adding filters
    - net: stmmac: Re-work the queue selection for TSO packets
    - net/tls: make sure offload also gets the keys wiped
    - nfc: fix potential illegal memory access
    - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b
    - rxrpc: Fix send on a connected, but unbound socket
    - sctp: fix error handling on stream scheduler initialization
    - sctp: not bind the socket in sctp_connect
    - sky2: Disable MSI on ASUS P6T
    - tcp: be more careful in tcp_fragment()
    - tcp: fix tcp_set_congestion_control() use from bpf hook
    - tcp: Reset bytes_acked and bytes_received when disconnecting
    - vrf: make sure skb->data contains ip header to make routing
    - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
    - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
    - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
    - net: bridge: don't cache ether dest pointer on input
    - net: bridge: stp: don't cache eth dest pointer before skb pull
    - macsec: fix use-after-free of skb during RX
    - macsec: fix checksumming after decryption
    - netrom: fix a memory leak in nr_rx_frame()
    - netrom: hold sock when setting skb->destructor
    - selftests: txring_overwrite: fix incorrect test of mmap() return value
    - net/tls: fix poll ignoring partially copied records
    - net/tls: reject offload of TLS 1.3
    - net/mlx5e: Fix port tunnel GRE entropy control
    - net/mlx5e: Rx, Fix checksum calculation for new hardware
    - net/mlx5e: Fix return value from timeout recover function
    - net/mlx5e: Fix error flow in tx reporter diagnose
    - bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips.
    - mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed
    - net/mlx5: E-Switch, Fix default encap mode
    - mlxsw: spectrum: Do not process learned records with a dummy FID
    - dma-buf: balance refcount inbalance
    - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
    - Revert "gpio/spi: Fix spi-gpio...

Changed in linux (Ubuntu Eoan):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers