This bug was fixed in the package linux - 5.0.0-38.41 --------------- linux (5.0.0-38.41) disco; urgency=medium * disco/linux: 5.0.0-38.41 -proposed tracker (LP: #1854788) * [Regression] Failed to boot disco kernel built from master-next (kernel kernel NULL pointer dereference) (LP: #1853981) - SAUCE: blk-mq: Fix blk_mq_make_request for mq devices * CVE-2019-14901 - SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() * CVE-2019-14896 // CVE-2019-14897 - SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor * CVE-2019-14895 - SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie() * [CML] New device id's for CMP-H (LP: #1846335) - mmc: sdhci-pci: Add another Id for Intel CML - i2c: i801: Add support for Intel Comet Lake PCH-H - mtd: spi-nor: intel-spi: Add support for Intel Comet Lake-H SPI serial flash - mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs * Please add patch fixing RK818 ID detection (LP: #1853192) - SAUCE: mfd: rk808: Fix RK818 ID template * [SRU][B/OEM-B/OEM-OSP1/D] Enable new Elan touchpads which are not in current whitelist (LP: #1853246) - Input: elan_i2c - export the device id whitelist - HID: quirks: Refactor ELAN 400 and 401 handling * Lenovo dock MAC Address pass through doesn't work in Ubuntu (LP: #1827961) - r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2 * [CML-S62] Need enable turbostat patch support for Comet lake- S 6+2 (LP: #1847451) - SAUCE: tools/power turbostat: Add Cometlake support * External microphone can't work on some dell machines with the codec alc256 or alc236 (LP: #1853791) - SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table - SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table * Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection (LP: #1853197) - xfrm: Fix memleak on xfrm state destroy * CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660 - powerpc/64s: support nospectre_v2 cmdline option - powerpc/book3s64: Fix link stack flush on context switch - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel * Raydium Touchscreen on ThinkPad L390 does not work (LP: #1849721) - HID: i2c-hid: fix no irq after reset on raydium 3118 * Make Goodix I2C touchpads work (LP: #1853842) - HID: i2c-hid: Remove runtime power management - HID: i2c-hid: Send power-on command after reset * Touchpad doesn't work on Dell Inspiron 7000 2-in-1 (LP: #1851901) - Revert "UBUNTU: SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1" - lib: devres: add a helper function for ioremap_uc - mfd: intel-lpss: Use devm_ioremap_uc for MMIO * CVE-2019-19055 - nl80211: fix memory leak in nl80211_get_ftm_responder_stats * [CML-S62] Need enable intel_rapl patch support for Comet lake- S 6+2 (LP: #1847454) - powercap/intel_rapl: add support for CometLake Mobile - powercap/intel_rapl: add support for Cometlake desktop * [CML-S62] Need enable intel_pmc_core driver patch for Comet lake- S 6+2 (LP: #1847450) - SAUCE: platform/x86: intel_pmc_core: Add Comet Lake (CML) platform support to intel_pmc_core driver * update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180) - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it - net: ena: switch to dim algorithm for rx adaptive interrupt moderation - net: ena: reimplement set/get_coalesce() - net: ena: enable the interrupt_moderation in driver_supported_features - net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() - net: ena: remove old adaptive interrupt moderation code from ena_netdev - net: ena: remove ena_restore_ethtool_params() and relevant fields - net: ena: remove all old adaptive rx interrupt moderation code from ena_com - net: ena: fix update of interrupt moderation register - net: ena: fix retrieval of nonadaptive interrupt moderation intervals - net: ena: fix incorrect update of intr_delay_resolution - net: ena: Select DIMLIB for ENA_ETHERNET - SAUCE: net: ena: fix issues in setting interrupt moderation params in ethtool - SAUCE: net: ena: fix too long default tx interrupt moderation interval * CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222) - [Config] Enable ROCKCHIP support for arm64 * remount of multilower moved pivoted-root overlayfs root, results in I/O errors on some modified files (LP: #1824407) - SAUCE: ovl: fix lookup failure on multi lower squashfs * backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637) - linux/dim: Move logic to dim.h - linux/dim: Remove "net" prefix from internal DIM members - linux/dim: Rename externally exposed macros - linux/dim: Rename net_dim_sample() to net_dim_update_sample() - linux/dim: Rename externally used net_dim members - [Config] updateconfigs for DIMLIB - linux/dim: Move implementation to .c files - linux/dim: Add completions count to dim_sample - linux/dim: Implement RDMA adaptive moderation (DIM) - linux/dim: Fix overflow in dim calculation - lib/dim: Fix -Wunused-const-variable warnings * The alsa hda driver is not loaded due to the missing of PCIID for Comet Lake-S [8086:a3f0] (LP: #1852070) - SAUCE: ALSA: hda: Add Cometlake-S PCI ID * Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877) - SAUCE: platform/x86: dell-uart-backlight: add missing status command - SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status - SAUCE: platform/x86: dell-uart-backlight: add force parameter - SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms * Enable framebuffer fonts auto selection for HighDPI screen (LP: #1851623) - fonts: Fix coding style - fonts: Prefer a bigger font for high resolution screens * Disable unreliable HPET on CFL-H system (LP: #1852216) - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms * i40e: Setting VF MAC address causes General Protection Fault (LP: #1852432) - i40e: Fix crash caused by stress setting of VF MAC addresses * CVE-2019-19072 - tracing: Have error path in predicate_parse() free its allocated memory * CVE-2019-2214 - binder: Set end of SG buffer area properly. * Disco update: upstream stable patchset 2019-11-27 (LP: #1854229) - i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf() - Revert "OPP: Protect dev_list with opp_table lock" - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() - mm/memory_hotplug: fix updating the node span - arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault - fbdev: Ditch fb_edid_add_monspecs - bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG - bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0 - bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0 - bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE} - bpf: btf: Fix a missing check bug * Disco update: upstream stable patchset 2019-11-26 (LP: #1854094) - KVM: x86: introduce is_pae_paging - scsi: core: Handle drivers which set sg_tablesize to zero - ax88172a: fix information leak on short answers - ipmr: Fix skb headroom in ipmr_get_route(). - net: gemini: add missed free_netdev - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules - slip: Fix memory leak in slip_open error path - ALSA: usb-audio: Fix missing error check at mixer resolution test - ALSA: usb-audio: not submit urb for stopped endpoint - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() - ALSA: usb-audio: Fix incorrect size check for processing/extension units - Btrfs: fix log context list corruption after rename exchange operation - Input: ff-memless - kill timer in destroy() - Input: synaptics-rmi4 - fix video buffer size - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) - Input: synaptics-rmi4 - clear IRQ enables for F54 - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing - IB/hfi1: Ensure full Gen3 speed in a Gen4 system - IB/hfi1: Use a common pad buffer for 9B and 16B packets - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either - net: ethernet: dwmac-sun8i: Use the correct function in exit path - iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros - mm: mempolicy: fix the wrong return value and potential pages leak of mbind - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() - mmc: sdhci-of-at91: fix quirk2 overwrite - dmaengine: at_xdmac: remove a stray bottom half unlock - slcan: Fix memory leak in error path - tcp: remove redundant new line from tcp_event_sk_skb - dpaa2-eth: free already allocated channels on probe defer - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved - drm/i915: update rawclk also on resume - ntp/y2038: Remove incorrect time_t truncation - mm/page_io.c: do not free shared swap slots * Disco update: upstream stable patchset 2019-11-22 (LP: #1853659) - bonding: fix state transition issue in link monitoring - CDC-NCM: handle incomplete transfer of MTU - ipv4: Fix table id reference in fib_sync_down_addr - net: ethernet: octeon_mgmt: Account for second possible VLAN header - net: fix data-race in neigh_event_send() - net: qualcomm: rmnet: Fix potential UAF when unregistering - net: usb: qmi_wwan: add support for DW5821e with eSIM support - NFC: fdp: fix incorrect free object - nfc: netlink: fix double device reference drop - NFC: st21nfca: fix double free - qede: fix NULL pointer deref in __qede_remove() - net: mscc: ocelot: don't handle netdev events for other netdevs - net: mscc: ocelot: fix NULL pointer on LAG slave removal - ipv6: fixes rt6_probe() and fib6_nh->last_probe init - net: hns: Fix the stray netpoll locks causing deadlock in NAPI path - ALSA: timer: Fix incorrectly assigned timer instance - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series - ALSA: hda/ca0132 - Fix possible workqueue stall - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges - mm, meminit: recalculate pcpu batch and high limits after init completes - mm: thp: handle page cache THP correctly in PageTransCompoundMap - mm, vmstat: hide /proc/pagetypeinfo from normal users - dump_stack: avoid the livelock of the dump_lock - tools: gpio: Use !building_out_of_srctree to determine srctree - perf tools: Fix time sorting - drm/radeon: fix si_enable_smc_cac() failed issue - HID: wacom: generic: Treat serial number and related fields as unsigned - soundwire: depend on ACPI - soundwire: bus: set initial value to port_status - arm64: Do not mask out PTE_RDONLY in pte_same() - ceph: fix use-after-free in __ceph_remove_cap() - ceph: add missing check in d_revalidate snapdir handling - iio: adc: stm32-adc: fix stopping dma - iio: imu: adis16480: make sure provided frequency is positive - iio: srf04: fix wrong limitation in distance measuring - ARM: sunxi: Fix CPU powerdown on A83T - netfilter: nf_tables: Align nft_expr private data to 64-bit - netfilter: ipset: Fix an error code in ip_set_sockfn_get() - intel_th: pci: Add Comet Lake PCH support - intel_th: pci: Add Jasper Lake PCH support - x86/apic/32: Avoid bogus LDR warnings - SMB3: Fix persistent handles reconnect - can: usb_8dev: fix use-after-free on disconnect - can: flexcan: disable completely the ECC mechanism - can: c_can: c_can_poll(): only read status register after status IRQ - can: peak_usb: fix a potential out-of-sync while decoding packets - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak - can: gs_usb: gs_can_open(): prevent memory leak - can: dev: add missing of_node_put() after calling of_get_child_by_name() - can: mcba_usb: fix use-after-free on disconnect - can: peak_usb: fix slab info leak - configfs: stash the data we need into configfs_buffer at open time - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts - configfs: new object reprsenting tree fragments - configfs: provide exclusion between IO and removals - configfs: fix a deadlock in configfs_symlink() - ALSA: usb-audio: More validations of descriptor units - ALSA: usb-audio: Simplify parse_audio_unit() - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects - ALSA: usb-audio: Remove superfluous bLength checks - ALSA: usb-audio: Clean up check_input_term() - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() - ALSA: usb-audio: remove some dead code - ALSA: usb-audio: Fix copy&paste error in the validator - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path - usbip: Implement SG support to vhci-hcd and stub driver - PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30 - HID: google: add magnemite/masterball USB ids - dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config - dmaengine: sprd: Fix the possible memory leak issue - HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() - RDMA/mlx5: Clear old rate limit when closing QP - iw_cxgb4: fix ECN check on the passive accept - RDMA/qedr: Fix reported firmware version - net/mlx5e: TX, Fix consumer index of error cqe dump - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq - scsi: qla2xxx: fixup incorrect usage of host_byte - RDMA/uverbs: Prevent potential underflow - net: openvswitch: free vport unless register_netdevice() succeeds - scsi: lpfc: Honor module parameter lpfc_use_adisc - scsi: qla2xxx: Initialized mailbox to prevent driver load failure - netfilter: nf_flow_table: set timeout before insertion into hashes - ipvs: don't ignore errors in case refcounting ip_vs module fails - ipvs: move old_secure_tcp into struct netns_ipvs - bonding: fix unexpected IFF_BONDING bit unset - macsec: fix refcnt leak in module exit routine - usb: fsl: Check memory resource before releasing it - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode. - usb: gadget: composite: Fix possible double free memory bug - usb: dwc3: pci: prevent memory leak in dwc3_pci_probe - usb: gadget: configfs: fix concurrent issue between composite APIs - usb: dwc3: remove the call trace of USBx_GFLADJ - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) - perf/x86/uncore: Fix event group support - USB: Skip endpoints with 0 maxpacket length - USB: ldusb: use unsigned size format specifiers - usbip: tools: Fix read_usb_vudc_device() error path handling - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case - RDMA/hns: Prevent memory leaks of eq->buf_list - scsi: qla2xxx: stop timer in shutdown path - nvme-multipath: fix possible io hang after ctrl reconnect - fjes: Handle workqueue allocation failure - net: hisilicon: Fix "Trying to free already-free IRQ" - net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up - net: mscc: ocelot: refuse to overwrite the port's native vlan - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 - drm/amdgpu: If amdgpu_ib_schedule fails return back the error. - drm/amd/display: Passive DP->HDMI dongle detection fix - hv_netvsc: Fix error handling in netvsc_attach() - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers - NFSv4: Don't allow a cached open with a revoked delegation - net: ethernet: arc: add the missed clk_disable_unprepare - igb: Fix constant media auto sense switching when no cable is connected - e1000: fix memory leaks - pinctrl: intel: Avoid potential glitches if pin is in GPIO mode - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() - pinctrl: cherryview: Fix irq_valid_mask calculation - blkcg: make blkcg_print_stat() print stats only for online blkgs - iio: imu: mpu6050: Add support for the ICM 20602 IMU - iio: imu: inv_mpu6050: fix no data on MPU6050 - mm/filemap.c: don't initiate writeback if mapping has no dirty pages - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead - usbip: Fix free of unallocated memory in vhci tx - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets - net: prevent load/store tearing on sk->sk_stamp - iio: imu: mpu6050: Fix FIFO layout for ICM20602 - vsock/virtio: fix sock refcnt holding during the shutdown - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs - x86/cpu: Add Tremont to the cpu vulnerability whitelist - Documentation: Add ITLB_MULTIHIT documentation - net/tls: fix sk_msg trim on fallback to copy mode - net/tls: add a TX lock - selftests/tls: add test for concurrent recv and send - net/smc: fix ethernet interface refcounting - perf map: Use zalloc for map_groups - soundwire: depend on ACPI || OF - ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address - ceph: fix RCU case handling in ceph_d_revalidate() - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open - ceph: don't allow copy_file_range when stripe_count != 1 - cpufreq: intel_pstate: Fix invalid EPB setting - dmaengine: sprd: Fix the link-list pointer register configuration issue - dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow - scsi: ufs-bsg: Wake the device before sending raw upiu commands - bpf: Fix use after free in subprog's jited symbol removal - bpf: Fix use after free in bpf_get_prog_name - xsk: Fix registration of Rx-only sockets - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag - virt_wifi: fix refcnt leak in module exit routine - hwmon: (ina3221) Fix read timeout issue - sched/topology: Don't try to build empty sched domains - sched/topology: Allow sched_asym_cpucapacity to be disabled - mt76: dma: fix buffer unmap with non-linear skbs - drm/amd/display: do not synchronize "drr" displays - SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding - efi: libstub/arm: Account for firmware reserved memory at the base of RAM - x86, efi: Never relocate kernel below lowest acceptable address - arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo - arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core - arm64: Brahma-B53 is SSB and spectre v2 safe - arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core - arm64: errata: Update stale comment - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run * Disco update: upstream stable patchset 2019-11-20 (LP: #1853382) - regulator: of: fix suspend-min/max-voltage parsing - ASoC: wm8994: Do not register inapplicable controls for WM1811 - arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay - arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay - arm64: dts: Fix gpio to pinmux mapping - regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone - ASoC: rt5682: add NULL handler to set_jack function - regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized - ASoC: wm_adsp: Don't generate kcontrols without READ flags - ASoc: rockchip: i2s: Fix RPM imbalance - ARM: dts: logicpd-torpedo-som: Remove twl_keypad - pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable() - ARM: mm: fix alignment handler faults under memory pressure - scsi: qla2xxx: fix a potential NULL pointer dereference - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions - scsi: sni_53c710: fix compilation error - scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE - ARM: dts: imx7s: Correct GPT's ipg clock source - perf c2c: Fix memory leak in build_cl_output() - 8250-men-mcb: fix error checking when get_num_ports returns -ENODEV - perf kmem: Fix memory leak in compact_gfp_flags() - ARM: davinci: dm365: Fix McBSP dma_slave_map entry - drm/amdgpu: fix potential VM faults - scsi: target: core: Do not overwrite CDB byte 1 - tracing: Fix "gfp_t" format for synthetic events - ARM: 8926/1: v7m: remove register save to stack before svc - of: unittest: fix memory leak in unittest_data_add - MIPS: bmips: mark exception vectors as char arrays - irqchip/gic-v3-its: Use the exact ITSList for VMOVP - i2c: stm32f7: fix first byte to send in slave mode - i2c: stm32f7: fix a race in slave mode with arbitration loss irq - i2c: stm32f7: remove warning when compiling with W=1 - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs - nbd: protect cmd->status with cmd->lock - nbd: handle racing with error'ed out commands - cxgb4: fix panic when attaching to ULD fail - dccp: do not leak jiffies on the wire - erspan: fix the tun_info options_len check for erspan - inet: stop leaking jiffies on the wire - net: annotate accesses to sk->sk_incoming_cpu - net: annotate lockless accesses to sk->sk_napi_id - net: dsa: bcm_sf2: Fix IMP setup for port different than 8 - net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum - net: fix sk_page_frag() recursion from memory reclaim - net: hisilicon: Fix ping latency when deal with high throughput - net/mlx4_core: Dynamically set guaranteed amount of counters per VF - netns: fix GFP flags in rtnl_net_notifyid() - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() - selftests: net: reuseport_dualstack: fix uninitalized parameter - udp: fix data-race in udp_set_dev_scratch() - vxlan: check tun_info options_len properly - net: add skb_queue_empty_lockless() - udp: use skb_queue_empty_lockless() - net: use skb_queue_empty_lockless() in poll() handlers - net: use skb_queue_empty_lockless() in busy poll contexts - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() - ipv4: fix route update on metric change. - selftests: fib_tests: add more tests for metric update - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget - r8169: fix wrong PHY ID issue with RTL8168dp - net/mlx5e: Fix ethtool self test: link speed - net: dsa: b53: Do not clear existing mirrored port mask - net: bcmgenet: don't set phydev->link from MAC - net: phy: bcm7xxx: define soft_reset for 40nm EPHY - net: bcmgenet: reset 40nm EPHY on energy detect - net: usb: lan78xx: Connect PHY before registering MAC - net: dsa: fix switch tree list - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 - net/flow_dissector: switch to siphash - wireless: Skip directory when generating certificates - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table - powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 - selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue - selftests/powerpc: Fix compile error on tlbie_test due to newer gcc - ASoC: pcm3168a: The codec does not support S32_LE - arm64: dts: ti: k3-am65-main: Fix gic-its node unit-address - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails - regulator: da9062: fix suspend_enable/disable preparation - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create() - pinctrl: intel: Allocate IRQ chip dynamic - arm64: dts: rockchip: fix Rockpro64 RK808 interrupt line - arm64: dts: rockchip: fix RockPro64 vdd-log regulator settings - arm64: dts: rockchip: fix RockPro64 sdhci settings - ARM: 8908/1: add __always_inline to functions called from __get_user_check() - arm64: dts: rockchip: fix RockPro64 sdmmc settings - ARM: dts: vf610-zii-scu4-aib: Specify 'i2c-mux-idle-disconnect' - arm64: dts: imx8mq: Use correct clock for usdhc's ipg clk - drm/amdgpu: fix error handling in amdgpu_bo_list_create - ARM: dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue - ALSA: hda: Add Elkhart Lake PCI ID - ALSA: hda: Add Tigerlake/Jasperlake PCI ID - irqchip/sifive-plic: Skip contexts except supervisor in plic_init() - net: rtnetlink: fix a typo fbd -> fdb - net/mlx5: Fix flow counter list auto bits struct - net: hns3: fix mis-counting IRQ vector numbers issue - net: reorder 'struct net' fields to avoid false sharing - net: netem: correct the parent's backlog when corrupted packet was dropped - CIFS: Fix retry mid list corruption on reconnects * Disco update: upstream stable patchset 2019-11-18 (LP: #1853067) - dm snapshot: introduce account_start_copy() and account_end_copy() - dm snapshot: rework COW throttling to fix deadlock - Btrfs: fix inode cache block reserve leak on failure to allocate data space - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() - f2fs: flush quota blocks after turnning it off - drm/msm/dpu: handle failures while initializing displays - bcache: fix input overflow to writeback_rate_minimum - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 - staging: mt7621-pinctrl: use pinconf-generic for 'dt_node_to_map' and 'dt_free_map' - HID: Add ASUS T100CHI keyboard dock battery quirks - HID: steam: fix boot loop with bluetooth firmware - HID: steam: fix deadlock with input devices. - usb: dwc3: gadget: early giveback if End Transfer already completed - usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete - ALSA: usb-audio: Cleanup DSD whitelist - usb: handle warm-reset port requests on hub resume - rtc: pcf8523: set xtal load capacitance from DT - arm64: Add MIDR encoding for HiSilicon Taishan CPUs - arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs - mlxsw: spectrum: Set LAG port collector only when active - scsi: lpfc: Correct localport timeout duration error - CIFS: Respect SMB2 hdr preamble size in read responses - cifs: add credits from unmatched responses/messages - ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume - media: vimc: Remove unused but set variables - ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT - net: dsa: mv88e6xxx: Release lock while requesting IRQ - PCI/PME: Fix possible use-after-free on remove - drm/amd/display: fix odm combine pipe reset - power: supply: max14656: fix potential use-after-free - iio: adc: meson_saradc: Fix memory allocation order - iio: fix center temperature of bmc150-accel-core - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature - perf tests: Avoid raising SEGV using an obvious NULL dereference - perf map: Fix overlapped map handling - perf script brstackinsn: Fix recovery from LBR/binary mismatch - perf jevents: Fix period for Intel fixed counters - perf tools: Propagate get_cpuid() error - perf annotate: Propagate perf_env__arch() error - perf annotate: Fix the signedness of failure returns - perf annotate: Propagate the symbol__annotate() error return - perf annotate: Return appropriate error code for allocation failures - staging: rtl8188eu: fix null dereference when kzalloc fails - RDMA/hfi1: Prevent memory leak in sdma_init - RDMA/iwcm: Fix a lock inversion issue - HID: hyperv: Use in-place iterator API in the channel callback - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request - arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419 - tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()' - tty: n_hdlc: fix build on SPARC - gpio: max77620: Use correct unit for debounce times - fs: cifs: mute -Wunused-const-variable message - serial: mctrl_gpio: Check for NULL pointer - efi/cper: Fix endianness of PCIe class code - efi/x86: Do not clean dummy variable in kexec path - MIPS: include: Mark __cmpxchg as __always_inline - x86/xen: Return from panic notifier - ocfs2: clear zero in unaligned direct IO - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() - arm64: armv8_deprecated: Checking return value for memory allocation - sched/vtime: Fix guest/system mis-accounting on task switch - perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp - drm/amdgpu: fix memory leak - iio: imu: adis16400: release allocated memory on failure - MIPS: include: Mark __xchg as __always_inline - MIPS: fw: sni: Fix out of bounds init of o32 stack - virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr - nbd: fix possible sysfs duplicate warning - NFSv4: Fix leak of clp->cl_acceptor string - s390/uaccess: avoid (false positive) compiler warnings - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() - ARM: 8914/1: NOMMU: Fix exc_ret for XIP - nbd: verify socket is supported during setup - USB: legousbtower: fix a signedness bug in tower_probe() - thunderbolt: Use 32-bit writes when writing ring producer/consumer - fuse: flush dirty data/metadata before non-truncate setattr - fuse: truncate pending writes on O_TRUNC - ALSA: bebob: Fix prototype of helper function to return negative value - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") - USB: gadget: Reject endpoints with 0 maxpacket value - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") - USB: ldusb: fix ring-buffer locking - USB: ldusb: fix control-message timeout - usb: xhci: fix __le32/__le64 accessors in debugfs code - USB: serial: whiteheat: fix potential slab corruption - USB: serial: whiteheat: fix line-speed endianness - scsi: target: cxgbit: Fix cxgbit_fw4_ack() - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override - HID: Fix assumption that devices have inputs - HID: fix error message in hid_open_report() - nl80211: fix validation of mesh path nexthop - s390/cmm: fix information leak in cmm_timeout_handler() - s390/idle: fix cpu idle time calculation - arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default - dmaengine: qcom: bam_dma: Fix resource leak - dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle - drm/amdgpu/powerplay/vega10: allow undervolting in p7 - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() - batman-adv: Avoid free/alloc race when handling OGM buffer - llc: fix sk_buff leak in llc_sap_state_process() - llc: fix sk_buff leak in llc_conn_service() - rxrpc: Fix call ref leak - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record - rxrpc: Fix trace-after-put looking at the put peer record - NFC: pn533: fix use-after-free and memleaks - bonding: fix potential NULL deref in bond_update_slave_arr - net: usb: sr9800: fix uninitialized local variable - sch_netem: fix rcu splat in netem_enqueue() - ALSA: timer: Simplify error path in snd_timer_open() - ALSA: timer: Fix mutex deadlock at releasing card - ALSA: usb-audio: DSD auto-detection for Playback Designs - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface - powerpc/powernv: Fix CPU idle to be called with IRQs disabled - Revert "ALSA: hda: Flush interrupts on disabling" - perf annotate: Fix arch specific ->init() failure errors - kselftest: exclude failed TARGETS from runlist - tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()' - RDMA/cm: Fix memory leak in cm_add/remove_one - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision - perf/core: Rework memory accounting in perf_mmap() - perf/core: Fix corner case in perf_rotate_context() - iio: imu: st_lsm6dsx: fix waitime for st_lsm6dsx i2c controller - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() - um-ubd: Entrust re-queue to the upper layers - ARC: perf: Accommodate big-endian CPU - arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 - virtio_ring: fix stalls for packed rings - rtlwifi: rtl_pci: Fix problem of too small skb->len - dmaengine: imx-sdma: fix size check for sdma script_number - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices - sched/fair: Fix -Wunused-but-set-variable warnings * Dell XPS 13 9350/9360 headphone audio hiss (LP: #1654448) // [XPS 13 9360, Realtek ALC3246, Black Headphone Out, Front] High noise floor (LP: #1845810) // Disco update: upstream stable patchset 2019-11-18 (LP: #1853067) - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 * Disco update: upstream stable patchset 2019-11-13 (LP: #1852459) - nvme-pci: Fix a race in controller removal - scsi: ufs: skip shutdown if hba is not powered - scsi: megaraid: disable device when probe failed after enabled device - scsi: qla2xxx: Fix unbound sleep in fcport delete path. - ARM: OMAP2+: Fix missing reset done flag for am3 and am43 - ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage() - ieee802154: ca8210: prevent memory leak - ARM: dts: am4372: Set memory bandwidth limit for DISPC - net: dsa: qca8k: Use up to 7 ports for all operations - MIPS: dts: ar9331: fix interrupt-controller size - xen/efi: Set nonblocking callbacks - nl80211: fix null pointer dereference - mac80211: fix txq null pointer dereference - netfilter: nft_connlimit: disable bh on garbage collection - net: dsa: rtl8366rb: add missing of_node_put after calling of_get_child_by_name - mips: Loongson: Fix the link time qualifier of 'serial_exit()' - net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() - lib: textsearch: fix escapes in example code - namespace: fix namespace.pl script to support relative paths - libata/ahci: Fix PCS quirk application - Revert "drm/radeon: Fix EEH during kexec" - ocfs2: fix panic due to ocfs2_wq is null - ipv4: fix race condition between route lookup and invalidation - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid - net: avoid potential infinite loop in tc_ctl_action() - net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 - net: bcmgenet: Set phydev->dev_flags only for internal PHYs - net: i82596: fix dma_alloc_attr for sni_82596 - net/ibmvnic: Fix EOI when running in XIVE mode. - net: ipv6: fix listify ip6_rcv_finish in case of forwarding - net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow - sctp: change sctp_prot .no_autobind with true - USB: legousbtower: fix memleak on disconnect - ALSA: hda/realtek - Add support for ALC711 - ALSA: hda/realtek - Enable headset mic on Asus MJ401TA - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers - ALSA: hda - Force runtime PM on Nvidia HDMI codecs - usb: udc: lpc32xx: fix bad bit shift operation - USB: serial: ti_usb_3410_5052: fix port-close races - USB: ldusb: fix memleak on disconnect - USB: usblp: fix use-after-free on disconnect - USB: ldusb: fix read info leaks - MIPS: tlbex: Fix build_restore_pagemask KScratch restore - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS - scsi: zfcp: fix reaction on bit error threshold notification - scsi: sd: Ignore a failure to sync cache due to lack of authorization - scsi: core: save/restore command resid for error handling - scsi: core: try to get module before removing device - scsi: ch: Make it possible to open a ch device multiple times again - Input: da9063 - fix capability and drop KEY_SLEEP - Input: synaptics-rmi4 - avoid processing unknown IRQs - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() - cfg80211: wext: avoid copying malformed SSIDs - mac80211: Reject malformed SSID elements - drm/ttm: Restore ttm prefaulting - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c - mmc: cqhci: Commit descriptors before setting the doorbell - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() - mm/slub: fix a deadlock in show_slab_objects() - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once - xtensa: drop EXPORT_SYMBOL for outs*/ins* - parisc: Fix vmap memory leak in ioremap()/iounmap() - EDAC/ghes: Fix Use after free in ghes_edac remove path - arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT - CIFS: avoid using MID 0xFFFF - CIFS: Fix use after free of file info structures - perf/aux: Fix AUX output stopping - tracing: Fix race in perf_trace_buf initialization - dm cache: fix bugs when a GFP_NOWAIT allocation fails - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu - pinctrl: cherryview: restore Strago DMI workaround for all versions - pinctrl: armada-37xx: fix control of pins 32 and up - pinctrl: armada-37xx: swap polarity on LED group - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() - Btrfs: add missing extents release on file extent cluster relocation error - Btrfs: check for the full sync flag while holding the inode lock during fsync - btrfs: tracepoints: Fix bad entry members of qgroup events - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown - xen/netback: fix error path of xenvif_connect_data() - PCI: PM: Fix pci_power_up() - blk-rq-qos: fix first node deletion of rq_qos_del() - RDMA/cxgb4: Do not dma memory off of the stack - drm: Clear the fence pointer when writeback job signaled - clk: ti: dra7: Fix mcasp8 clock bits - ARM: dts: Fix wrong clocks for dra7 mcasp - scsi: qla2xxx: Fix N2N link reset - scsi: qla2xxx: Fix N2N link up fail - ARM: dts: Fix gpio0 flags for am335x-icev2 - ARM: OMAP2+: Add missing LCDC midlemode for am335x - nvme-tcp: fix wrong stop condition in io_work - nvme-pci: Save PCI state before putting drive into deepest state - nvme: fix an error code in nvme_init_subsystem() - nvme-rdma: Fix max_hw_sectors calculation - Added QUIRKs for ADATA XPG SX8200 Pro 512GB - nvme-rdma: fix possible use-after-free in connect timeout - blk-mq: honor IO scheduler for multiqueue devices - loop: change queue block size to match when using DIO - drm/amdgpu: fix multiple memory leaks in acp_hw_init - drm/amd/display: memory leak - s390/mm: fix -Wunused-but-set-variable warnings - net: phy: fix write to mii-ctrl1000 register - Convert filldir[64]() from __put_user() to unsafe_put_user() - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings - Make filldir[64]() verify the directory entry filename is valid - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over to it - filldir[64]: remove WARN_ON_ONCE() for bad directory entries - rxrpc: Fix possible NULL pointer access in ICMP handling - sched: etf: Fix ordering of packets with same txtime - net: aquantia: correctly handle macvlan and multicast coexistence - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs - net: phy: micrel: Update KSZ87xx PHY name - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit - rxrpc: use rcu protection while reading sk->sk_user_data - binder: Don't modify VMA bounds in ->mmap handler - drm/amdgpu/vce: fix allocation size in enc ring test - drm/amdgpu/vcn: fix allocation size in enc ring test - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2) - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2) - mmc: mxs: fix flags passed to dmaengine_prep_slave_sg - mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C - mm/memunmap: don't access uninitialized memmap in memunmap_pages() - zram: fix race between backing_dev_show and backing_dev_store - s390/zcrypt: fix memleak at release - fs/dax: Fix pmd vs pte conflict detection - x86/hyperv: Make vapic support x2apic mode - btrfs: tracepoints: Fix wrong parameter order for qgroup events - ceph: just skip unrecognized info in ceph_reply_info_extra - opp: of: drop incorrect lockdep_assert_held() * Colour banding in Lenovo G50-80 laptop display (i915) (LP: #1819968) // Disco update: upstream stable patchset 2019-11-13 (LP: #1852459) - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 -- Khalid Elmously