Skip to content
Snippets Groups Projects
  1. Dec 03, 2019
  2. Nov 28, 2019
  3. Nov 26, 2019
    • Ben Hutchings's avatar
      Import Debian changes 5.4-1~exp1 · e1ccb1e1
      Ben Hutchings authored
      linux (5.4-1~exp1) experimental; urgency=medium
      
        * New upstream release: https://kernelnewbies.org/Linux_5.4
      
        [ Ben Hutchings ]
        * lockdown: Rebase on upstream Lockdown LSM:
          - Refresh "efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode"
          - Update "efi: Lock down the kernel if booted in secure boot mode"
          - Update "Add a SysRq option to lift kernel lockdown"
          - Update "mtd: Disable slram and phram when locked down"
          - Update "arm64: add kernel config option to lock down when in Secure Boot
            mode"
          - Refresh "lockdown: Refer to Debian wiki until manual page exists"
          - Drop all other lockdown patches
          - Enable SECURITY_LOCKDOWN_LSM, LOCK_DOWN_KERNEL_FORCE_NONE,
            LOCK_DOWN_IN_EFI_SECURE_BOOT
        * [armel/marvell] lockdown: Disable Lockdown as it now selects MODULE_SIG
        * [amd64] Update "x86: Make x32 syscall support conditional …" for 5.4
        * debian/lib/python/debian_linux/abi.py: Add support for symbol namespaces
        * debian/bin/genpatch-rt: Fix series generation from git
      
        [ Romain Perier ]
        * Rebased the following patches onto 5.4.x:
          - debian/version.patch
          - debian/ia64-hardcode-arch-script-output.patch
          - bugfix/all/
            radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
          - features/all/aufs5/aufs5-mmap.patch
          - features/all/aufs5/aufs5-standalone.patch
          - features/x86/
            intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch
          - bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
          - debian/revert-objtool-fix-config_stack_validation-y-warning.patch
          - features/all/db-mok-keyring/
            0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module
            .patch
          - bugfix/all/tools-perf-man-date.patch
          - bugfix/all/usbip-fix-misuse-of-strncpy.patch
          - bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch
      
        [ John Paul Adrian Glaubitz ]
        * [m68k] Enable CONFIG_PATA_BUDDHA as module
      
        [ Aurelien Jarno ]
        * [armhf] Add support for STM32MP1 SoC: enable ARCH_STM32,
          CRYPTO_DEV_STM32_CRC, CRYPTO_DEV_STM32_CRYP, CRYPTO_DEV_STM32_HASH,
          DRM_PANEL_ORISETECH_OTM8009A, DRM_SII902X, DRM_STM, DRM_STM_DSI,
          HW_RANDOM_STM32, I2C_STM32F7, INPUT_STPMIC1_ONKEY, MFD_STM32_LPTIMER,
          MFD_STPMIC1, MTD_NAND_STM32_FMC2, PHY_STM32_USBPHYC, PWM_STM32_LP,
          REGULATOR_STM32_BOOSTER, REGULATOR_STM32_PWR, REGULATOR_STM32_VREFBUF,
          REGULATOR_STPMIC1, REMOTEPROC, RTC_DRV_STM32, SERIAL_STM32,
          SERIAL_STM32_CONSOLE, SND_AUDIO_GRAPH_CARD, SND_SOC_CS42L51_I2C,
          SND_SOC_STM32_DFSDM, SND_SOC_STM32_I2S, SND_SOC_STM32_SAI,
          SND_SOC_STM32_SPDIFRX, SPI_STM32, SPI_STM32_QSPI, STM32_DMA,
          STM32_DMAMUX, STM32_MDMA, STM32_RPROC, STPMIC1_WATCHDOG,
          TOUCHSCREEN_EDT_FT5X06.
        * [arm64] Re-enable BT_HCIUART_{BCM,LL} (arm64 version of #906048).
        * [arm64,armhf] Enable CLK_RASPBERRYPI and RASPBERRYPI_CPUFREQ.
      
        [ Salvatore Bonaccorso ]
        * md: Enable MD_CLUSTER as module (Closes: #927026)
      
      linux (5.3.9-3) unstable; urgency=medium
      
        * [arm64,armhf,powerpc*,s390x] KVM: Add more exports to ABI ignore list
          (fixes FTBFS)
      
      linux (5.3.9-2) unstable; urgency=medium
      
        * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135):
          - x86/msr: Add the IA32_TSX_CTRL MSR
          - x86/cpu: Add a helper function x86_read_arch_cap_msr()
          - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
          - x86/speculation/taa: Add mitigation for TSX Async Abort
          - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
          - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
          - x86/tsx: Add "auto" option to the tsx= cmdline parameter
          - x86/speculation/taa: Add documentation for TSX Async Abort
          - x86/tsx: Add config options to set tsx=on|off|auto
          - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
          TSX is now disabled by default; see
          Documentation/admin-guide/hw-vuln/tsx_async_abort.rst
        * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change
          (aka iTLB multi-hit, CVE-2018-12207):
          - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
          - x86/bugs: Add ITLB_MULTIHIT bug infrastructure
          - x86/cpu: Add Tremont to the cpu vulnerability whitelist
          - cpu/speculation: Uninline and export CPU mitigations helpers
          - kvm: mmu: ITLB_MULTIHIT mitigation
          - kvm: Add helper function for creating VM worker threads
          - kvm: x86: mmu: Recovery of shattered NX large pages
          - Documentation: Add ITLB_MULTIHIT documentation
        * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155):
          - drm/i915: Rename gen7 cmdparser tables
          - drm/i915: Disable Secure Batches for gen6+
          - drm/i915: Remove Master tables from cmdparser
          - drm/i915: Add support for mandatory cmdparsing
          - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
          - drm/i915: Allow parsing of unsized batches
          - drm/i915: Add gen9 BCS cmdparsing
          - drm/i915/cmdparser: Use explicit goto for error paths
          - drm/i915/cmdparser: Add support for backward jumps
          - drm/i915/cmdparser: Ignore Length operands during command matching
          - drm/i915/cmdparser: Fix jump whitelist clearing
        * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154):
          - drm/i915: Lower RM timeout to avoid DSI hard hangs
          - drm/i915/gen8+: Add RC6 CTX corruption WA
      
      linux (5.3.9-1) unstable; urgency=medium
      
        * New version hopefully closes: #942881
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8
          - drm: Free the writeback_job when it with an empty fb
          - drm: Clear the fence pointer when writeback job signaled
          - [armhf] clk: ti: dra7: Fix mcasp8 clock bits
          - [armhf] dts: Fix wrong clocks for dra7 mcasp
          - nvme-pci: Fix a race in controller removal
          - scsi: ufs: skip shutdown if hba is not powered
          - scsi: megaraid: disable device when probe failed after enabled device
          - scsi: qla2xxx: Silence fwdump template message
          - scsi: qla2xxx: Fix unbound sleep in fcport delete path.
          - scsi: qla2xxx: Fix stale mem access on driver unload
          - scsi: qla2xxx: Fix N2N link reset
          - scsi: qla2xxx: Fix N2N link up fail
          - [armhf] dts: Fix gpio0 flags for am335x-icev2
          - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43
          - [armhf] OMAP2+: Add missing LCDC midlemode for am335x
          - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage()
          - nvme-tcp: fix wrong stop condition in io_work
          - nvme-pci: Save PCI state before putting drive into deepest state
          - nvme: fix an error code in nvme_init_subsystem()
          - nvme-rdma: Fix max_hw_sectors calculation
          - nvme: Added QUIRKs for ADATA XPG SX8200 Pro 512GB
          - nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T
          - nvme-rdma: fix possible use-after-free in connect timeout
          - blk-mq: honor IO scheduler for multiqueue devices
          - xen/efi: Set nonblocking callbacks
          - loop: change queue block size to match when using DIO
          - nl80211: fix null pointer dereference
          - mac80211: fix txq null pointer dereference
          - netfilter: nft_connlimit: disable bh on garbage collection
          - [armhf,arm64] net: stmmac: xgmac: Not all Unicast addresses may be
            available
          - [armhf,arm64] net: stmmac: dwmac4: Always update the MAC Hash Filter
          - [armhf,arm64] net: stmmac: Correctly take timestamp for PTPv2
          - [armhf,arm64] net: stmmac: Do not stop PHY if WoL is enabled
          - drm/amdgpu: fix multiple memory leaks in acp_hw_init
          - drm/amd/display: memory leak
          - [mips*el/loongson-*] Fix the link time qualifier of 'serial_exit()'
          - [arm64] net: hisilicon: Fix usage of uninitialized variable in function
            mdio_sc_cfg_reg_write()
          - [armhf,arm64] net: stmmac: Avoid deadlock on suspend/resume
          - [s390x] mm: fix -Wunused-but-set-variable warnings
          - r8152: Set macpassthru in reset_resume callback
          - net: phy: allow for reset line to be tied to a sleepy GPIO controller
          - net: phy: fix write to mii-ctrl1000 register
          - vfs: Convert filldir[64]() from __put_user() to unsafe_put_user()
          - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
            (regression in 4.17)
          - vfs: Make filldir[64]() verify the directory entry filename is valid
          - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over
            to it
          - vfs: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
          - net_sched: fix backward compatibility for TCA_KIND (regression in 5.3.4)
          - net_sched: fix backward compatibility for TCA_ACT_KIND (regression in
            5.3.4)
          - libata/ahci: Fix PCS quirk application (regression in 5.3.4)
          - md/raid0: fix warning message for parameter default_layout
          - Revert "drm/radeon: Fix EEH during kexec" (regression in 5.3.5)
          - ocfs2: fix panic due to ocfs2_wq is null
          - nvme-pci: Set the prp2 correctly when using more than 4k page
          - ipv4: fix race condition between route lookup and invalidation
          - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
          - net: avoid potential infinite loop in tc_ctl_action()
          - [hppa,m68k] net: i82596: fix dma_alloc_attr for sni_82596
          - net: ipv6: fix listify ip6_rcv_finish in case of forwarding
          - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume
            flow
          - rxrpc: Fix possible NULL pointer access in ICMP handling
          - sched: etf: Fix ordering of packets with same txtime
          - sctp: change sctp_prot .no_autobind with true
          - net: aquantia: temperature retrieval fix
          - net: aquantia: when cleaning hw cache it should be toggled
          - net: aquantia: do not pass lro session with invalid tcp checksum
          - net: aquantia: correctly handle macvlan and multicast coexistence
          - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
          - net: phy: micrel: Update KSZ87xx PHY name
          - net: avoid errors when trying to pop MLPS header on non-MPLS packets
          - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions
          - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
          - net: ethernet: broadcom: have drivers select DIMLIB as needed
          - net: phy: Fix "link partner" information disappear issue
          - rxrpc: use rcu protection while reading sk->sk_user_data
          - io_uring: fix bad inflight accounting for SETUP_IOPOLL|SETUP_SQTHREAD
          - io_uring: Fix corrupted user_data
          - USB: legousbtower: fix memleak on disconnect
          - ALSA: hda/realtek - Add support for ALC711
          - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
          - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
          - ALSA: hda - Force runtime PM on Nvidia HDMI codecs
          - USB: serial: ti_usb_3410_5052: fix port-close races
          - USB: ldusb: fix memleak on disconnect
          - USB: usblp: fix use-after-free on disconnect
          - USB: ldusb: fix read info leaks
          - binder: Don't modify VMA bounds in ->mmap handler
          - [mips*] tlbex: Fix build_restore_pagemask KScratch restore
          - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
          - [s390x] scsi: zfcp: fix reaction on bit error threshold notification
          - scsi: sd: Ignore a failure to sync cache due to lack of authorization
          - scsi: core: save/restore command resid for error handling
          - scsi: core: try to get module before removing device
          - scsi: ch: Make it possible to open a ch device multiple times again
          - Revert "Input: elantech - enable SMBus on new (2018+) systems"
            (regression in 5.3)
          - Input: synaptics-rmi4 - avoid processing unknown IRQs
          - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
          - ACPI: NFIT: Fix unlock on error in scrub_show()
          - iwlwifi: pcie: change qu with jf devices to use qu configuration
          - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133)
          - mac80211: Reject malformed SSID elements
          - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
          - drm/ttm: Restore ttm prefaulting
          - [armhf,arm64] drm/panfrost: Handle resetting on timeout better
          - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
          - drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for pipe sync
          - [x86] drm/i915/userptr: Never allow userptr into the mappable GGTT
          - [x86] drm/i915: Favor last VBT child device with conflicting AUX ch/DDC
            pin
          - drm/amdgpu/vce: fix allocation size in enc ring test
          - drm/amdgpu/vcn: fix allocation size in enc ring test
          - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
          - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
          - drm/amdgpu: user pages array memory leak fix
          - drivers/base/memory.c: don't access uninitialized memmaps in
            soft_offline_page_store()
          - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
          - io_uring: Fix broken links with offloading
          - io_uring: Fix race for sqes with userspace
          - io_uring: used cached copies of sq->dropped and cq->overflow
          - [armhf] mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
          - mm/memory-failure.c: don't access uninitialized memmaps in
            memory_failure()
          - mm/slub: fix a deadlock in show_slab_objects()
          - mm/page_owner: don't access uninitialized memmaps when reading
            /proc/pagetypeinfo
          - mm/memunmap: don't access uninitialized memmap in memunmap_pages()
          - mm: memcg/slab: fix panic in __free_slab() caused by premature memcg
            pointer release
          - mm, compaction: fix wrong pfn handling in __reset_isolation_pfn()
          - mm: memcg: get number of pages on the LRU list in memcgroup base on
            lru_zone_size
          - mm: memblock: do not enforce current limit for memblock_phys* family
          - hugetlbfs: don't access uninitialized memmaps in
            pfn_range_valid_gigantic()
          - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if
            mmaped more than once
          - zram: fix race between backing_dev_show and backing_dev_store
          - [s390x] zcrypt: fix memleak at release
          - [s390x] kaslr: add support for R_390_GLOB_DAT relocation type
          - lib/vdso: Make clock_getres() POSIX compliant again
          - [hppa] Fix vmap memory leak in ioremap()/iounmap()
          - [arm64] KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM is set
          - [arm64] Avoid Cavium TX2 erratum 219 when switching TTBR
          - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT
          - [arm64] Allow CAVIUM_TX2_ERRATUM_219 to be selected
          - CIFS: avoid using MID 0xFFFF
          - cifs: Fix missed free operations
          - CIFS: Fix use after free of file info structures
          - perf/aux: Fix AUX output stopping
          - tracing: Fix race in perf_trace_buf initialization
          - fs/dax: Fix pmd vs pte conflict detection
          - dm cache: fix bugs when a GFP_NOWAIT allocation fails
          - [riscv64] irqchip/sifive-plic: Switch to fasteoi flow
          - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area
          - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
          - [x86] hyperv: Make vapic support x2apic mode
          - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions
          - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up
          - [arm64] pinctrl: armada-37xx: swap polarity on LED group
          - btrfs: block-group: Fix a memory leak due to missing
            btrfs_put_block_group()
          - Btrfs: add missing extents release on file extent cluster relocation
            error
          - btrfs: don't needlessly create extent-refs kernel thread
          - Btrfs: fix qgroup double free after failure to reserve metadata for
            delalloc
          - Btrfs: check for the full sync flag while holding the inode lock during
            fsync
          - btrfs: tracepoints: Fix wrong parameter order for qgroup events
          - btrfs: tracepoints: Fix bad entry members of qgroup events
          - [ppc64*] KVM: Book3S HV: XIVE: Ensure VP isn't already in use
          - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
          - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
          - ceph: just skip unrecognized info in ceph_reply_info_extra
          - xen/netback: fix error path of xenvif_connect_data()
          - PCI: PM: Fix pci_power_up()
          - opp: of: drop incorrect lockdep_assert_held()
          - of: reserved_mem: add missing of_node_put() for proper ref-counting
          - blk-rq-qos: fix first node deletion of rq_qos_del()
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9
          - io_uring: fix up O_NONBLOCK handling for sockets
          - dm snapshot: introduce account_start_copy() and account_end_copy()
          - dm snapshot: rework COW throttling to fix deadlock
          - Btrfs: fix inode cache block reserve leak on failure to allocate data
            space
          - btrfs: qgroup: Always free PREALLOC META reserve in
            btrfs_delalloc_release_extents()
          - iio: fix center temperature of bmc150-accel-core
          - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
          - perf tests: Avoid raising SEGV using an obvious NULL dereference
          - perf map: Fix overlapped map handling
          - perf script brstackinsn: Fix recovery from LBR/binary mismatch
          - perf jevents: Fix period for Intel fixed counters
          - perf tools: Propagate get_cpuid() error
          - perf annotate: Propagate perf_env__arch() error
          - perf annotate: Fix the signedness of failure returns
          - perf annotate: Propagate the symbol__annotate() error return
          - perf annotate: Fix arch specific ->init() failure errors
          - perf annotate: Return appropriate error code for allocation failures
          - perf annotate: Don't return -1 for error when doing BPF disassembly
          - staging: rtl8188eu: fix null dereference when kzalloc fails
          - RDMA/hfi1: Prevent memory leak in sdma_init
          - RDMA/iw_cxgb4: fix SRQ access from dump_qp()
          - RDMA/iwcm: Fix a lock inversion issue
          - [x86] HID: hyperv: Use in-place iterator API in the channel callback
          - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
          - [arm64] cpufeature: Effectively expose FRINT capability to userspace
          - [arm64] Fix incorrect irqflag restore for priority masking for compat
          - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1
            #1542419
          - [riscv64] serial/sifive: select SERIAL_EARLYCON
          - RDMA/core: Fix an error handling path in 'res_get_common_doit()'
          - RDMA/cm: Fix memory leak in cm_add/remove_one
          - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path
          - RDMA/mlx5: Do not allow rereg of a ODP MR
          - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu
          - RDMA/mlx5: Add missing synchronize_srcu() for MW cases
          - [arm64] gpio: max77620: Use correct unit for debounce times
          - fs: cifs: mute -Wunused-const-variable message
          - [arm64] vdso32: Fix broken compat vDSO build warnings
          - [arm64] vdso32: Detect binutils support for dmb ishld
          - serial: mctrl_gpio: Check for NULL pointer
          - [armhf] serial: 8250_omap: Fix gpio check for auto RTS/CTS
          - [arm64] vdso32: Don't use KBUILD_CPPFLAGS unconditionally
          - efi/cper: Fix endianness of PCIe class code
          - [x86] efi: Do not clean dummy variable in kexec path
          - [mips*] include: Mark __cmpxchg as __always_inline
          - [riscv64] avoid kernel hangs when trapped in BUG()
          - [riscv64] avoid sending a SIGTRAP to a user thread trapped in WARN()
          - [riscv64] Correct the handling of unexpected ebreak in do_trap_break()
          - [x86] xen: Return from panic notifier
          - ocfs2: clear zero in unaligned direct IO
          - fs: ocfs2: fix possible null-pointer dereferences in
            ocfs2_xa_prepare_entry()
          - fs: ocfs2: fix a possible null-pointer dereference in
            ocfs2_write_end_nolock()
          - fs: ocfs2: fix a possible null-pointer dereference in
            ocfs2_info_scan_inode_alloc()
          - btrfs: silence maybe-uninitialized warning in clone_range
          - [arm64] armv8_deprecated: Checking return value for memory allocation
          - [x86] cpu: Add Comet Lake to the Intel CPU models header
          - sched/fair: Scale bandwidth quota and period without losing quota/period
            ratio precision
          - sched/vtime: Fix guest/system mis-accounting on task switch
          - perf/core: Rework memory accounting in perf_mmap()
          - perf/core: Fix corner case in perf_rotate_context()
          - [x86] perf/amd: Change/fix NMI latency mitigation to use a timestamp
          - drm/amdgpu: fix memory leak
          - [mips*] include: Mark __xchg as __always_inline
          - [mips*] fw: sni: Fix out of bounds init of o32 stack
          - [s390x] cio: fix virtio-ccw DMA without PV
          - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
          - nbd: fix possible sysfs duplicate warning
          - NFSv4: Fix leak of clp->cl_acceptor string
          - SUNRPC: fix race to sk_err after xs_error_report
          - [s390x] uaccess: avoid (false positive) compiler warnings
          - tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
          - perf annotate: Fix multiple memory and file descriptor leaks
          - perf/aux: Fix tracking of auxiliary trace buffer allocation
          - USB: legousbtower: fix a signedness bug in tower_probe()
          - nbd: verify socket is supported during setup
          - [arm64] dts: qcom: Add Lenovo Miix 630
          - [arm64] dts: qcom: Add HP Envy x2
          - [arm64] dts: qcom: Add Asus NovaGo TP370QL
          - rtw88: Fix misuse of GENMASK macro
          - [s390x] pci: fix MSI message data
          - thunderbolt: Correct path indices for PCIe tunnel
          - thunderbolt: Use 32-bit writes when writing ring producer/consumer
          - fuse: flush dirty data/metadata before non-truncate setattr
          - fuse: truncate pending writes on O_TRUNC
          - ALSA: bebob: Fix prototype of helper function to return negative value
          - ALSA: timer: Fix mutex deadlock at releasing card
          - ALSA: hda/realtek - Fix 2 front mics of codec 0x623
          - ALSA: hda/realtek - Add support for ALC623
          - ath10k: fix latency issue for QCA988x
          - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
            segments") (regression in 5.2)
          - nl80211: fix validation of mesh path nexthop
          - USB: gadget: Reject endpoints with 0 maxpacket value
          - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
            virt_boundary_mask to avoid SG overflows") (regression in 5.2)
          - USB: ldusb: fix ring-buffer locking
          - USB: ldusb: fix control-message timeout
          - usb: xhci: fix Immediate Data Transfer endianness
          - USB: serial: whiteheat: fix potential slab corruption
          - USB: serial: whiteheat: fix line-speed endianness
          - xhci: Fix use-after-free regression in xhci clear hub TT implementation
          - scsi: qla2xxx: Fix partial flash write of MBI
          - scsi: target: cxgbit: Fix cxgbit_fw4_ack()
          - [x86] HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
          - HID: Fix assumption that devices have inputs
          - HID: fix error message in hid_open_report()
          - HID: logitech-hidpp: split g920_get_config()
          - HID: logitech-hidpp: rework device validation
          - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
          - [s390x] unwind: fix mixing regs and sp
          - [s390x] cmm: fix information leak in cmm_timeout_handler()
          - [s390x] idle: fix cpu idle time calculation
          - IB/hfi1: Avoid excessive retry for TID RDMA READ request
          - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default
          - [arm64] cpufeature: Enable Qualcomm Falkor/Kryo errata 1003
          - virtio_ring: fix stalls for packed rings
          - rtlwifi: rtl_pci: Fix problem of too small skb->len
          - rtlwifi: Fix potential overflow on P2P code
          - [x86] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
            active
          - [arm64] dmaengine: qcom: bam_dma: Fix resource leak
          - [arm64] dmaengine: tegra210-adma: fix transfer failure
          - [armhf] dmaengine: imx-sdma: fix size check for sdma script_number
          - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
          - drm/amdgpu/gmc10: properly set BANK_SELECT and FRAGMENT_SIZE
          - [x86] drm/i915: Fix PCH reference clock for FDI on HSW/BDW
          - drm/amdgpu/gfx10: update gfx golden settings
          - drm/amdgpu/powerplay/vega10: allow undervolting in p7
          - drm/amdgpu: Fix SDMA hang when performing VKexample test
          - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
          - io_uring: ensure we clear io_kiocb->result before each issue
          - [x86] iommu/vt-d: Fix panic after kexec -p for kdump
          - batman-adv: Avoid free/alloc race when handling OGM buffer
          - llc: fix sk_buff leak in llc_sap_state_process()
          - llc: fix sk_buff leak in llc_conn_service()
          - rxrpc: Fix call ref leak
          - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
          - rxrpc: Fix trace-after-put looking at the put peer record
          - NFC: pn533: fix use-after-free and memleaks
          - bonding: fix potential NULL deref in bond_update_slave_arr
          - netfilter: conntrack: avoid possible false sharing
          - net: usb: sr9800: fix uninitialized local variable
          - sch_netem: fix rcu splat in netem_enqueue()
          - net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
          - iwlwifi: exclude GEO SAR support for 3168
          - sched/fair: Fix low cpu usage with high throttling by removing expiration
            of cpu-local slices
          - ALSA: usb-audio: DSD auto-detection for Playback Designs
          - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel
          - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface
          - RDMA/mlx5: Use irq xarray locking for mkey_table
          - sched/fair: Fix -Wunused-but-set-variable warnings
          - [powerpc*] powernv: Fix CPU idle to be called with IRQs disabled
          - Revert "ALSA: hda: Flush interrupts on disabling" (regression in 5.3.4)
      
        [ Ben Hutchings ]
        * debian/bin/gencontrol_signed.py: Fix code style error
        * debian/bin/gencontrol.py: Skip linux-perf lintian-overrides if we won't
          build it
        * debian/bin/gencontrol{,_signed}.py: Use vars parameter instead of self.vars
        * debian/bin/gencontrol{,_signed}.py: Use %(name)s to format template vars
        * debian/.gitignore, debian/rules: Generalise patterns for generated files
        * gencontrol: Generalise substitution of debhelper config template
        * Add maint scripts to meta-packages to convert doc directories to symlinks
          (Closes: #942861)
        * debian/lib/python/debian_linux/utils.py: Use 'with' to manage file handles
        * debian/lib/python/debian_linux/utils.py: Store file mode for templates
        * Copy template file permissions to output files
        * debian/templates/headers.postinst.in: Set executable for consistency
        * debian/README.source: Document code signing and how to test it
        * debian/tests/control: Mark python test as superficial
        * [arm64] linux-headers: Disable check for a 32-bit compiler
          (Closes: #943953):
          - arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option
          - debian/bin/gencontrol.py: Optionally define $(CROSS_COMPILE_COMPAT) make
            variable
          - Enable COMPAT_VDSO and set $(CROSS_COMPILE_COMPAT) instead of setting
            CROSS_COMPILE_COMPAT_VDSO
        * crypto: Enable PKCS8_PRIVATE_KEY_PARSER as module (Closes: #924705)
        * Bump ABI to 2
        * [arm64] atmel_mxt_ts: Disable TOUCHSCREEN_ATMEL_MXT_T37 to avoid V4L
          dependency
        * random: try to actively add entropy rather than passively wait for it
      
        [ Bastian Blank ]
        * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341)
      
        [ Thomas W ]
        * [x86] Enable missing modules and setting:
          CONFIG_HUAWEI_WMI
          CONFIG_I2C_MULTI_INSTANTIATE
          CONFIG_INTEL_TURBO_MAX_3
      
        [ Alper Nebi Yasak ]
        * [arm64] udeb: Add i2c-rk3x to i2c-modules
        * [arm64,armhf] udeb: Add rockchip-io-domain to kernel-image
        * udeb: Add atmel_mxt_ts to input-modules
      
        [ Noah Meyerhans ]
        * drivers/net/ethernet/amazon: Backport driver fixes from v5.4-rc5
      
        [ Niv Sardi ]
        * KEYS: Make use of platform keyring for module signature verify
          (closes: #935945)
      
      linux (5.3.7-1) unstable; urgency=medium
      
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.3
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4
          - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055)
          - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054)
          - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052)
          - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053)
          - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.6
          - nl80211: validate beacon head (CVE-2019-16746)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.7
      
        [ Aurelien Jarno ]
        * [riscv64] Enable SOC_SIFIVE. Do not select CLK_SIFIVE,
          CLK_SIFIVE_FU540_PRCI, SIFIVE_PLIC, SERIAL_SIFIVE and
          SERIAL_SIFIVE_CONSOLE as they are selected by SOC_SIFIVE.
        * [riscv64] Install DTBS using dtbs_install target.
        * [riscv64] Enable SPI_SIFIVE.
        * [riscv64] Enable SERIAL_EARLYCON_RISCV_SBI.
        * [riscv64] Enable MMC, MMC_SPI.
        * [riscv64] udeb: Add mmc-core-modules and mmc-modules.
        * [riscv64] Fix memblock reservation for device tree blob.
        * [riscv64] Clear load reservations while restoring hart contexts.
      
        [ Ben Hutchings ]
        * [mips*] Revert "Only define MAX_PHYSMEM_BITS on Loongson-3"
        * KEYS: Re-enable SECONDARY_TRUSTED_KEYRING, dropped in 5.2.6-1 by
          mis-merge (Closes: #935945)
      
        [ John Paul Adrian Glaubitz ]
        * [m68k] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
        * [hppa] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
        * [sh4] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
      
        [ Salvatore Bonaccorso ]
        * RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075)
        * ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
          (CVE-2019-15098)
      
        [ Romain Perier ]
        * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530)
      
        [ Héctor Orón Martínez ]
        * [x86] Enable ASoC: SOF sound driver (Closes: #940726)
      
      linux (5.3.2-1~exp1) experimental; urgency=medium
      
        * New upstream release: https://kernelnewbies.org/Linux_5.3
          - [armhf] select the dma-noncoherent symbols for all swiotlb builds
            (fixes FTBFS)
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.1
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.2
      
        [ Ben Hutchings ]
        * [hppa,sparc64] udeb: Delete osst from scsi-modules (fixes FTBFS)
        * Compile with gcc-9 on all architectures
        * Set KCFLAGS make variable instead of CFLAGS_{KERNEL,MODULE}
        * linux-image-dbg: Delete ./ from source file names in debug info
        * debian/rules: Make maintainerclean delete (almost) everything clean does
        * debian/rules: Make maintainerclean delete everything gencontrol.py creates
        * debian/.gitignore: Synchronise some patterns with clean target
        * Add the metapackages previously built by src:linux-latest:
          - Add template and NEWS files from linux-latest
          - Rename added templates to be consistent with existing templates
          - Fix some inconsistencies in metapackage templates
          - Define pkg.linux.nometa build profile to exclude the metapackages
          - Build the metapackages by default (Closes: #583849, #941042)
          - Make linux-perf an arch-dependent package
          - Require metapackage dependencies to be the same version, and link doc
            dirs
      
        [ Uwe Kleine-König ]
        * [arm64] enable I2C_QCOM_GENI for Lenovo C630
      
      linux (5.3~rc5-1~exp2) experimental; urgency=medium
      
        * tools/perf: pmu-events: Fix reproducibility
        * Fix FTBFS:
          - Update "kbuild: Make the toolchain variables easily overwritable" for 5.3
          - udeb: Make nic-wireless-modules depend on crypto-modules
        * debian/control: Remove build profile qual for rsync, needed for
          headers_install
        * debian/changelog: Move older entries to changelog.old
      
      linux (5.3~rc5-1~exp1) experimental; urgency=medium
      
        * New upstream release candidate
      
        [ Ben Hutchings ]
        * aufs: Update support patchset to aufs5.x-rcN 20190805
        * [rt] Disable until it is updated for 5.3 or later
        * [powerpcspe] Remove all support for powerpcspe, which is dead upstream
        * linux-headers: Change per-flavour Makefile to match upstream out-of-tree
          builds
        * debian/bin/genorig.py: Import debian.deb822 instead of deprecated deb822
        * [arm64] Use armhf cross-compiler for building compat vDSO
        * Documentation: Fix broken link to CIPSO draft
      
        [ Lubomir Rintel ]
        * udeb: input-modules: Add OLPC AP-SP keyboard
        * [armhf] Add camera, EC and battery drivers for OLPC XO-1.75 laptop.
      
      linux (5.2.17-1) unstable; urgency=medium
      
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10
          - KEYS: trusted: allow module init if TPM is inactive or deactivated
          - seq_file: fix problem when seeking mid-record
          - mm/hmm: fix bad subpage pointer in try_to_unmap_one
          - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
            MPOL_MF_STRICT were specified
          - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
          - mm/z3fold.c: fix z3fold_destroy_pool() ordering
          - mm/z3fold.c: fix z3fold_destroy_pool() race condition
          - mm/memcontrol.c: fix use after free in mem_cgroup_iter()
          - mm/usercopy: use memory range to be accessed for wraparound check
          - mm, vmscan: do not special-case slab reclaim when watermarks are boosted
          - [armhf,arm64] cpufreq: schedutil: Don't skip freq update when limits
            change
          - drm/amdgpu: fix gfx9 soft recovery
          - drm/nouveau: Only recalculate PBN/VCPI on mode/connector changes
          - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side
          - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360
          - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
            (CVE-2019-15118)
          - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
            (CVE-2019-15117)
          - [x86] ALSA: hda - Apply workaround for another AMD chip 1022:1487
          - ALSA: hda - Fix a memory leak bug
          - ALSA: hda - Add a generic reboot_notify
          - ALSA: hda - Let all conexant codec enter D3 when rebooting
          - HID: holtek: test for sanity of intfdata
          - HID: hiddev: avoid opening a disconnected device
          - HID: hiddev: do cleanup in failure of opening a device
          - Input: kbtab - sanity check for endpoint type
          - Input: iforce - add sanity checks
          - net: usb: pegasus: fix improper read if get_registers() fail
          - bpf: fix access to skb_shared_info->gso_segs
          - netfilter: ebtables: also count base chain policies
          - [riscv64] Correct the initialized flow of FP register
          - [riscv64] Make __fstate_clean() work correctly.
          - [armhf] Revert "i2c: imx: improve the error handling in
            i2c_imx_dma_request()"
          - blk-mq: move cancel of requeue_work to the front of blk_exit_queue
          - io_uring: fix manual setup of iov_iter for fixed buffers
          - [arm64] RDMA/hns: Fix sg offset non-zero issue
          - IB/mlx5: Replace kfree with kvfree
          - dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable}
          - [x87] platform: intel_pmc_core: Add ICL-NNPI support to PMC Core
          - mm/hmm: always return EBUSY for invalid ranges in
            hmm_range_{fault,snapshot}
          - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe
            table fail
          - [armhf] irqchip/irq-imx-gpcv2: Forward irq type to parent
          - f2fs: fix to read source block before invalidating it
          - tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC()
          - perf header: Fix divide by zero error if f_header.attr_size==0
          - perf header: Fix use of unitialized value warning
          - RDMA/qedr: Fix the hca_type and hca_rev returned in device attributes
          - ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
          - libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
          - Btrfs: fix deadlock between fiemap and transaction commits
          - scsi: hpsa: correct scsi command status issue after reset
          - scsi: qla2xxx: Fix possible fcport null-pointer dereferences
          - drm/amdkfd: Fix byte align on VegaM
          - drm/amd/powerplay: fix null pointer dereference around dpm state relates
          - drm/amdgpu: fix error handling in amdgpu_cs_process_fence_dep
          - drm/amdgpu: fix a potential information leaking bug
          - ata: libahci: do not complain in case of deferred probe
          - [riscv64] Fix perf record without libelf support
          - [arm64] Lower priority mask for GIC_PRIO_IRQON
          - [arm64] unwind: Prohibit probing on return_address()
          - IB/core: Add mitigation for Spectre V1 (CVE-2017-5753)
          - IB/mlx5: Fix MR registration flow to use UMR properly
          - RDMA/restrack: Track driver QP types in resource tracker
          - IB/mad: Fix use-after-free in ib mad completion handling
          - RDMA/mlx5: Release locks during notifier unregister
          - [arm64] drm: msm: Fix add_gpu_components
          - [arm64] RDMA/hns: Fix error return code in hns_roce_v1_rsv_lp_qp()
          - [armhf] drm/exynos: fix missing decrement of retry counter
          - [arm64] kprobes: Recover pstate.D in single-step exception handler
          - [arm64] Make debug exception handlers visible from RCU
          - Revert "kmemleak: allow to coexist with fault injection"
          - ocfs2: remove set but not used variable 'last_hash'
          - page flags: prioritize kasan bits over last-cpuid
          - asm-generic: fix -Wtype-limits compiler warnings
          - tpm: tpm_ibm_vtpm: Fix unallocated banks
          - [arm64] KVM: regmap: Fix unexpected switch fall-through
          - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider *
            base'
          - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor
          - USB: core: Fix races in character device registration and deregistraion
          - usb: cdc-acm: make sure a refcount is taken early enough
          - USB: CDC: fix sanity checks in CDC union parser
          - USB: serial: option: add D-Link DWM-222 device ID
          - USB: serial: option: Add support for ZTE MF871A
          - USB: serial: option: add the BroadMobi BM818 card
          - USB: serial: option: Add Motorola modem UARTs
          - usb: setup authorized_default attributes using usb_bus_notify
          - netfilter: conntrack: Use consistent ct id hash calculation
          - iwlwifi: Add support for SAR South Korea limitation
          - Input: psmouse - fix build error of multiple definition
          - bnx2x: Fix VF's VLAN reconfiguration in reload.
          - bonding: Add vlan tx offload to hw_enc_features
          - [armhf,arm64] net: dsa: Check existence of .port_mdb_add callback before
            calling it
          - net/mlx4_en: fix a memory leak bug
          - net/packet: fix race in tpacket_snd()
          - net: sched: sch_taprio: fix memleak in error path for sched list parse
          - sctp: fix memleak in sctp_send_reset_streams
          - sctp: fix the transport error_count check
          - team: Add vlan tx offload to hw_enc_features
          - tipc: initialise addr_trail_end when setting node addresses
          - xen/netback: Reset nr_frags before freeing skb
          - net/mlx5e: Only support tx/rx pause setting for port owner
          - bnxt_en: Fix VNIC clearing logic for 57500 chips.
          - bnxt_en: Improve RX doorbell sequence.
          - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
          - bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command
          - bnxt_en: Use correct src_fid to determine direction of the flow
          - bnxt_en: Fix to include flow direction in L2 key
          - net sched: update skbedit action for batched events operations
          - netdevsim: Restore per-network namespace accounting for fib entries
          - net/mlx5e: ethtool, Avoid setting speed to 56GBASE when autoneg off
          - net/mlx5e: Fix false negative indication on tx reporter CQE recovery
          - net/mlx5e: Remove redundant check in CQE recovery flow of tx reporter
          - net/mlx5e: Use flow keys dissector to parse packets for ARFS
          - net/tls: prevent skb_orphan() from leaking TLS plain text with offload
          - net: phy: consider AN_RESTART status when reading link status
          - netlink: Fix nlmsg_parse as a wrapper for strict message parsing
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.11
          - ASoC: simple_card_utils.h: care NULL dai at asoc_simple_debug_dai()
          - ASoC: simple-card: fix an use-after-free in simple_dai_link_of_dpcm()
          - ASoC: simple-card: fix an use-after-free in simple_for_each_link()
          - ASoC: audio-graph-card: fix use-after-free in graph_dai_link_of_dpcm()
          - ASoC: audio-graph-card: fix an use-after-free in graph_get_dai_id()
          - ASoC: audio-graph-card: add missing const at graph_get_dai_id()
          - regulator: axp20x: fix DCDCA and DCDCD for AXP806
          - regulator: axp20x: fix DCDC5 and DCDC6 for AXP803
          - [armhf] ASoC: samsung: odroid: fix an use-after-free issue for codec
          - [armhf] ASoC: samsung: odroid: fix a double-free issue for cpu_dai
          - [x86] ASoC: Intel: bytcht_es8316: Add quirk for Irbis NB41 netbook
          - HID: logitech-hidpp: add USB PID for a few more supported mice
          - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
          - [mips*] kernel: only use i8253 clocksource with periodic clockevent
          - [mips*] fix cacheinfo
          - libbpf: sanitize VAR to conservative 1-byte INT
          - netfilter: ebtables: fix a memory leak bug in compat
          - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
          - [amd64] spi: pxa2xx: Balance runtime PM enable/disable on error
          - bpf: sockmap, sock_map_delete needs to use xchg
          - bpf: sockmap, synchronize_rcu before free'ing map
          - bpf: sockmap, only create entry if ulp is not already enabled
          - ASoC: dapm: fix a memory leak bug
          - bonding: Force slave speed check after link state recovery for 802.3ad
          - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for
            10G links
          - libbpf: fix using uninitialized ioctl results
          - can: dev: call netif_carrier_off() in register_candev()
          - can: gw: Fix error path of cgw_module_init
          - libbpf: silence GCC8 warning about string truncation
          - {nl,mac}80211: fix interface combinations on crypto controlled devices
          - [armhf] ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master
            mode
          - [armhf,arm64] ASoC: rockchip: Fix mono capture
          - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
          - net: usb: qmi_wwan: Add the BroadMobi BM818 card
          - qed: RDMA - Fix the hw_ver returned in device attributes
          - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
            start_isoc_chain()
          - mac80211_hwsim: Fix possible null-pointer dereferences in
            hwsim_dump_radio_nl()
          - [armhf,arm64] net: stmmac: manage errors returned by of_get_mac_address()
          - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
            sets too
          - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
            hash:ip,mac sets
          - netfilter: ipset: Fix rename concurrency with listing
          - rxrpc: Fix potential deadlock
          - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
          - nvmem: Use the same permissions for eeprom as for nvmem
          - iwlwifi: mvm: avoid races in rate init and rate perform
          - iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef
          - iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
          - iwlwifi: fix locking in delayed GTK setting
          - iwlwifi: mvm: send LQ command always ASYNC
          - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the
            stack
          - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
            phy_led_trigger_change_speed()
          - perf bench numa: Fix cpu0 binding
          - [arm64] spi: pxa2xx: Add support for Intel Tiger Lake
          - can: sja1000: force the string buffer NULL-terminated
          - can: peak_usb: force the string buffer NULL-terminated
          - [x86] ASoC: amd: acp3x: use dma_ops of parent device for acp3x dma driver
          - net/ethernet/qlogic/qed: force the string buffer NULL-terminated
          - NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid
          - NFSv4: When recovering state fails with EAGAIN, retry the same recovery
          - NFSv4.1: Fix open stateid recovery
          - NFSv4.1: Only reap expired delegations
          - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
          - NFS: Fix regression whereby fscache errors are appearing on 'nofsc'
            mounts
          - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52
          - HID: input: fix a4tech horizontal wheel custom usage
          - [armhf,arm64] drm/rockchip: Suspend DP late
          - SMB3: Fix potential memory leak when processing compound chain
          - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
          - sched/deadline: Fix double accounting of rq/running bw in push & pull
          - sched/psi: Reduce psimon FIFO priority
          - sched/psi: Do not require setsched permission from the trigger creator
          - [s390x] protvirt: avoid memory sharing for diag 308 set/store
          - [s390x] mm: fix dump_pagetables top level page table walking
          - [s390x] put _stext and _etext into .text section
          - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
          - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4
          - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry
          - drm/amdgpu: pin the csb buffer on hw init for gfx v8
          - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant
          - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY
          - [arm64] net: hisilicon: Fix dma_map_single failed on arm64
          - NFSv4: Ensure state recovery handles ETIMEDOUT correctly
          - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
          - libata: add SG safety checks in SFF pio transfers
          - [x86] lib/cpu: Address missing prototypes warning
          - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred
          - block: aoe: Fix kernel crash due to atomic sleep when exiting
          - block, bfq: handle NULL return value by bfq_init_rq()
          - perf ftrace: Fix failure to set cpumask when only one cpu is present
          - perf cpumap: Fix writing to illegal memory in handling cpumap mask
          - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
          - [riscv64] dt-bindings: fix the schema compatible string for the HiFive
            Unleashed board
          - [arm64] KVM: Don't write junk to sysregs on reset
          - [armhf] KVM: Don't write junk to CP15 registers on reset
          - iwlwifi: mvm: disable TX-AMSDU on older NICs (Closes: #939853)
          - HID: wacom: correct misreported EKR ring values
          - HID: wacom: Correct distance scale for 2nd-gen Intuos devices
          - [x86] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a
            memslot" (regression in 5.1)
          - Revert "dm bufio: fix deadlock with loop device" (regression in 5.2.3)
          - [armhf] clk: socfpga: stratix10: fix rate caclulationg for cnt_clks
          - ceph: clear page dirty before invalidate page
          - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
          - libceph: fix PG split vs OSD (re)connect race
          - drm/amdgpu/gfx9: update pg_flags after determining if gfx off is possible
          - drm/nouveau: Don't retry infinitely when receiving no data on i2c over
            AUX
          - scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm()
          - gpiolib: never report open-drain/source lines as 'input' to user-space
          - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE
          - userfaultfd_release: always remove uffd flags and clear
            vm_userfaultfd_ctx
          - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
          - [x86] apic: Handle missing global clockevent gracefully
          - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
          - [x86] boot: Save fields explicitly, zero out everything else
          - [x86] boot: Fix boot regression caused by bootparam sanitizing
          - IB/hfi1: Unsafe PSN checking for TID RDMA READ Resp packet
          - IB/hfi1: Add additional checks when handling TID RDMA READ RESP packet
          - IB/hfi1: Add additional checks when handling TID RDMA WRITE DATA packet
          - IB/hfi1: Drop stale TID RDMA packets that cause TIDErr
          - psi: get poll_work to run when calling poll syscall next time
          - dm kcopyd: always complete failed jobs
          - dm btree: fix order of block initialization in btree_split_beneath
          - dm integrity: fix a crash due to BUG_ON in __journal_read_write()
          - dm raid: add missing cleanup in raid_ctr()
          - dm space map metadata: fix missing store of apply_bops() return value
          - dm table: fix invalid memory accesses with too high sector number
          - dm zoned: improve error handling in reclaim
          - dm zoned: improve error handling in i/o map code
          - dm zoned: properly handle backing device failure
          - genirq: Properly pair kobject_del() with kobject_add()
          - mm/z3fold.c: fix race between migration and destruction
          - mm, page_alloc: move_freepages should not examine struct page of reserved
            memory
          - mm: memcontrol: flush percpu vmstats before releasing memcg
          - mm: memcontrol: flush percpu vmevents before releasing memcg
          - mm, page_owner: handle THP splits correctly
          - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
          - mm/zsmalloc.c: fix race condition in zs_destroy_pool
          - IB/hfi1: Drop stale TID RDMA packets
          - dm zoned: fix potential NULL dereference in dmz_do_reclaim()
          - io_uring: fix potential hang with polled IO
          - io_uring: don't enter poll loop if we have CQEs pending
          - io_uring: add need_resched() check in inner poll loop
          - [powerpc*] Allow flush_(inval_)dcache_range to work across ranges >4GB
          - rxrpc: Fix local endpoint refcounting
          - rxrpc: Fix read-after-free in rxrpc_queue_local()
          - rxrpc: Fix local endpoint replacement
          - rxrpc: Fix local refcounting
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.12
          - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns
          - afs: Fix the CB.ProbeUuid service handler to reply correctly
          - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u()
          - fs: afs: Fix a possible null-pointer dereference in afs_put_read()
          - afs: Fix off-by-one in afs_rename() expected data version calculation
          - afs: Only update d_fsdata if different in afs_d_revalidate()
          - afs: Fix missing dentry data version updating
          - nvmet: Fix use-after-free bug when a port is removed
          - nvmet-loop: Flush nvme_delete_wq when removing the port
          - nvmet-file: fix nvmet_file_flush() always returning an error
          - nvme-core: Fix extra device_put() call on error path
          - nvme: fix a possible deadlock when passthru commands sent to a multipath
            device
          - nvme-rdma: fix possible use-after-free in connect error flow
          - nvme: fix controller removal race with scan work
          - nvme-pci: Fix async probe remove race
          - btrfs: trim: Check the range passed into to prevent overflow
          - IB/mlx5: Fix implicit MR release flow
          - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value
          - iommu/dma: Handle SG length overflow better
          - dma-direct: don't truncate dma_required_mask to bus addressing
            capabilities
          - usb: gadget: composite: Clear "suspended" on reset/disconnect
          - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt
          - xen/blkback: fix memory leaks
          - [arm64] cpufeature: Don't treat granule sizes as strict
          - [riscv64] fix flush_tlb_range() end address for flush_tlb_page()
          - drm/scheduler: use job count instead of peek
          - drm/ast: Fixed reboot test may cause system hanged
          - [x86] tools: hv: fix KVP and VSS daemons exit code
          - locking/rwsem: Add missing ACQUIRE to read_slowpath exit when queue is
            empty
          - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop
          - [arm*] watchdog: bcm2835_wdt: Fix module autoload
          - mt76: usb: fix rx A-MSDU support
          - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set
          - ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets
            (regression in 5.1)
          - [armhf] net: cpsw: fix NULL pointer exception in the probe error path
          - net: fix __ip_mc_inc_group usage
          - net/smc: make sure EPOLLOUT is raised
          - tcp: make sure EPOLLOUT wont be missed
          - ipv4: mpls: fix mpls_xmit for iptunnel
          - openvswitch: Fix conntrack cache with timeout
          - ipv4/icmp: fix rt dst dev null pointer dereference
          - xfrm/xfrm_policy: fix dst dev null pointer dereference in collect_md mode
          - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n
          - ALSA: usb-audio: Check mixer unit bitmap yet more strictly
          - ALSA: hda/ca0132 - Add new SBZ quirk
          - ALSA: line6: Fix memory leak at line6_init_pcm() error path
          - ALSA: hda - Fixes inverted Conexant GPIO mic mute led
          - ALSA: seq: Fix potential concurrent access to the deleted pool
          - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate()
          - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604
          - [x86] kvm: skip populating logical dest map if apic is not sw enabled
          - [x86] KVM: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when
            kvm_intel.nested is disabled
          - [x86] KVM: Don't update RIP or do single-step on faulting emulation
          - [x86] uprobes: Fix detection of 32-bit user mode
          - [x86] mm/cpa: Prevent large page split when ftrace flips RW on kernel text
          - [x86] apic: Do not initialize LDR and DFR for bigsmp
          - [x86] apic: Include the LDR when clearing out APIC registers
          - HID: logitech-hidpp: remove support for the G700 over USB
          - ftrace: Fix NULL pointer dereference in t_probe_next()
          - ftrace: Check for successful allocation of hash
          - ftrace: Check for empty hash and comment the race with registering probes
          - usbtmc: more sanity checking for packet size
          - usb-storage: Add new JMS567 revision to unusual_devs
          - USB: cdc-wdm: fix race between write and disconnect due to flag abuse
          - usb: hcd: use managed device resources
          - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has
            stopped
          - usb: host: ohci: fix a race condition between shutdown and irq
          - USB: storage: ums-realtek: Whitelist auto-delink support
          - [x86] tools/power turbostat: Fix caller parameter of get_tdp_amd()
          - [powerpc*] KVM: Book3S: Fix incorrect guest-to-user-translation error
            handling
          - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long
          - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI
          - [x86] mei: me: add Tiger Lake point LP device ID
          - [armhf,arm64] Revert "mmc: sdhci-tegra: drop ->get_ro() implementation"
            (regression in 5.1)
          - mmc: core: Fix init of SD cards reporting an invalid VDD range
          - [x86] intel_th: pci: Add support for another Lewisburg PCH
          - [x86] intel_th: pci: Add Tiger Lake support
          - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage
          - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend()
          - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0
          - Revert "NFSv4/flexfiles: Abort I/O early if the layout segment was
            invalidated" (regression in 5.1)
          - lib: logic_pio: Fix RCU usage
          - lib: logic_pio: Avoid possible overlap for unregistering regions
          - lib: logic_pio: Add logic_pio_unregister_range()
          - drm/amdgpu: Add APTX quirk for Dell Latitude 5495
          - drm/amdgpu: fix GFXOFF on Picasso and Raven2
          - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest
          - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe()
          - i2c: piix4: Fix port selection for AMD Family 16h Model 30h
          - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential
            use-after-free
          - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash
          - [x86] VMCI: Release resource if the work is already queued
          - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume
          - SUNRPC: Don't handle errors if the bind/connect succeeded
          - mt76: mt76x0u: do not reset radio on resume
          - mm, memcg: partially revert "mm/memcontrol.c: keep local VM counters in
            sync with the hierarchical ones" (regression in 5.2.7)
          - mm: memcontrol: fix percpu vmstats and vmevents flush
          - mac80211: fix possible sta leak
          - cfg80211: Fix Extended Key ID key install checks
          - mac80211: Don't memset RXCB prior to PAE intercept
          - mac80211: Correctly set noencrypt for PAE frames
          - iwlwifi: add new cards for 22000 and fix struct name
          - iwlwifi: add new cards for 22000 and change wrong structs
          - iwlwifi: add new cards for 9000 and 20000 series
          - iwlwifi: change 0x02F0 fw from qu to quz
          - iwlwifi: pcie: add support for qu c-step devices
          - iwlwifi: pcie: don't switch FW to qnj when ax201 is detected
          - iwlwifi: pcie: handle switching killer Qu B0 NICs to C0
          - [x86] drm/i915: Do not create a new max_bpc prop for MST connectors
          - [x86] drm/i915/dp: Fix DSC enable code to use cpu_transcoder instead of
            encoder->type
          - [x86] ptrace: fix up botched merge of spectrev1 fix
          - bpf: fix use after free in prog symbol exposure
          - hsr: implement dellink to clean up resources
          - hsr: fix a NULL pointer deref in hsr_dev_xmit()
          - hsr: switch ->dellink() to ->ndo_uninit()
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.13
          - Revert "Input: elantech - enable SMBus on new (2018+) systems"
            (regression in 5.2.9)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.14
          - mld: fix memory leak in mld_del_delrec()
          - net: fix skb use after free in netpoll
          - net: sched: act_sample: fix psample group handling on overwrite
          - net_sched: fix a NULL pointer deref in ipt action
          - [arm64, armhf] net: stmmac: dwmac-rk: Don't fail if phy regulator is
            absent
          - tcp: inherit timestamp on mtu probe
          - tcp: remove empty skb from write queue in error cases
          - Revert "r8152: napi hangup fix after disconnect"
          - r8152: remove calling netif_napi_del
          - net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
          - Add genphy_c45_config_aneg() function to phy-c45.c
          - net/sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue
          - net/sched: pfifo_fast: fix wrong dereference when qdisc is reset
          - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714)
          - batman-adv: Fix netlink dumping of all mcast_flags buckets
          - libbpf: fix erroneous multi-closing of BTF FD
          - libbpf: set BTF FD for prog only when there is supported .BTF.ext data
          - netfilter: nf_flow_table: fix offload for flows that are subject to xfrm
          - net/mlx5e: Fix error flow of CQE recovery on tx reporter
          - [armhf] clk: samsung: Change signature of exynos5_subcmus_init() function
          - [armhf] clk: samsung: exynos5800: Move MAU subsystem clocks to MAU sub-CMU
          - [armhf] clk: samsung: exynos542x: Move MSCL subsystem clocks to its
            sub-CMU
          - netfilter: nf_tables: use-after-free in failing rule with bound set
          - netfilter: nf_flow_table: conntrack picks up expired flows
          - netfilter: nf_flow_table: teardown flow timeout race
          - tools: bpftool: fix error message (prog -> object)
          - ixgbe: fix possible deadlock in ixgbe_service_task()
          - [x86] hv_netvsc: Fix a warning of suspicious RCU usage
          - net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx
          - Bluetooth: btqca: Add a short delay before downloading the NVM
          - Bluetooth: hci_qca: Send VS pre shutdown command.
          - [s390x] qeth: serialize cmd reply with concurrent timeout
          - ibmveth: Convert multicast list size for little-endian system
          - gpio: Fix build error of function redefinition
          - netfilter: nft_flow_offload: skip tcp rst and fin packets
          - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure
          - scsi: target: tcmu: avoid use-after-free after command timeout
          - cxgb4: fix a memory leak bug
          - liquidio: add cleanup in octeon_setup_iq()
          - net: myri10ge: fix memory leaks
          - clk: Fix falling back to legacy parent string matching
          - clk: Fix potential NULL dereference in clk_fetch_parent_index()
          - lan78xx: Fix memory leaks
          - vfs: fix page locking deadlocks when deduping files
          - cx82310_eth: fix a memory leak bug
          - net: kalmia: fix memory leaks
          - net: cavium: fix driver name
          - wimax/i2400m: fix a memory leak bug
          - sched/core: Schedule new worker even if PI-blocked
          - kprobes: Fix potential deadlock in kprobe_optimizer()
          - [x86] HID: intel-ish-hid: ipc: add EHL device id
          - HID: cp2112: prevent sleeping function called from invalid context
          - [x86] boot/compressed/64: Fix boot on machines with broken E820 table
          - scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ
          - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel
            callback
          - Tools: hv: kvp: eliminate 'may be used uninitialized' warning
          - nvme-multipath: fix possible I/O hang when paths are updated
          - nvme: Fix cntlid validation when not using NVMEoF
          - RDMA/cma: fix null-ptr-deref Read in cma_cleanup
          - IB/mlx4: Fix memory leaks
          - [x86] infiniband: hfi1: fix a memory leak bug
          - [x86] infiniband: hfi1: fix memory leaks
          - drm/amdgpu: prevent memory leaks in AMDGPU_CS ioctl
          - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr()
          - ceph: fix buffer free while holding i_ceph_lock in
            __ceph_build_xattrs_blob()
          - ceph: fix buffer free while holding i_ceph_lock in fill_inode()
          - [arm64, armhf] KVM: Only skip MMIO insn once
          - afs: Fix leak in afs_lookup_cell_rcu()
          - afs: Fix possible oops in afs_lookup trace event
          - afs: use correct afs_call_type in yfs_fs_store_opaque_acl2
          - RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message
          - gpio: Fix irqchip initialization order
          - [arm64, armhf] KVM: VGIC: Properly initialise private IRQ affinity
          - [x86] boot/compressed/64: Fix missing initialization in
            find_trampoline_placement()
          - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer
          - [x86] Revert "x86/apic: Include the LDR when clearing out APIC registers"
          - [x86] boot: Preserve boot_params.secure_boot from sanitizing
          - Revert "mmc: core: do not retry CMD6 in __mmc_switch()"
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.15
          - gpio: pca953x: correct type of reg_direction
          - gpio: pca953x: use pca953x_read_regs instead of regmap_bulk_read
          - ALSA: hda - Fix potential endless loop at applying quirks
          - ALSA: hda/realtek - Fix overridden device-specific initialization
          - ALSA: hda/realtek - Add quirk for HP Pavilion 15
          - ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL
          - ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre
          - sched/fair: Don't assign runtime for throttled cfs_rq
          - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg()
          - drm/nouveau/sec2/gp102: add missing MODULE_FIRMWAREs
          - [powerpc*] 64e: Drop stale call to smp_processor_id() which hangs SMP
            startup
          - [powerpc*] tm: Fix restoring FP/VMX facility incorrectly on interrupts
            (CVE-2019-15031)
          - batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
          - batman-adv: Only read OGM tvlv_len after buffer len check
          - bcache: only clear BTREE_NODE_dirty bit when it is set
          - bcache: add comments for mutex_lock(&b->write_lock)
          - bcache: fix race in btree_flush_write()
          - IB/rdmavt: Add new completion inline
          - IB/{rdmavt, qib, hfi1}: Convert to new completion API
          - IB/hfi1: Unreserve a flushed OPFN request
          - [x86] drm/i915: Disable SAMPLER_STATE prefetching on all Gen11 steppings.
          - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV
          - mmc: sdhci-sprd: Fix the incorrect soft reset operation when runtime
            resuming
          - usb: chipidea: imx: add imx7ulp support
          - usb: chipidea: imx: fix EPROBE_DEFER support during driver probe
          - [s390x] virtio: fix race on airq_areas[]
          - [x86] drm/i915: Support flags in whitlist WAs
          - [x86] drm/i915: Support whitelist workarounds on all engines
          - [x86] drm/i915: whitelist PS_(DEPTH|INVOCATION)_COUNT
          - [x86] drm/i915: Add whitelist workarounds for ICL
          - [x86] drm/i915/icl: whitelist PS_(DEPTH|INVOCATION)_COUNT
          - Btrfs: fix unwritten extent buffers and hangs on future writeback
            attempts (Closes: #940105)
          - vhost: make sure log_num < in_num (CVE-2019-14835)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.16
          - bridge/mdb: remove wrong use of NLM_F_MULTI
          - cdc_ether: fix rndis support for Mediatek based smartphones
          - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'
          - isdn/capi: check message length in capi_write()
          - ixgbe: Fix secpath usage for IPsec TX offload.
          - ixgbevf: Fix secpath usage for IPsec Tx offload
          - net: Fix null de-reference of device refcount
          - net: gso: Fix skb_segment splat when splitting gso_size mangled skb
            having linear-headed frag_list
          - net: phylink: Fix flow control resolution
          - net: sched: fix reordering issues
          - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
          - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()'
          - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike
          - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
          - tipc: add NULL pointer check before calling kfree_rcu
          - tun: fix use-after-free when register netdev failed
          - net-ipv6: fix excessive RTF_ADDRCONF flag on ::1/128 local route (and
            others)
          - ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
          - net: fixed_phy: Add forward declaration for struct gpio_desc;
          - sctp: fix the missing put_user when dumping transport thresholds
          - net: sock_map, fix missing ulp check in sock hash case
          - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and
            blacklist
          - gpio: mockup: add missing single_release()
          - gpio: fix line flag validation in linehandle_create
          - gpio: fix line flag validation in lineevent_create
          - Btrfs: fix assertion failure during fsync and use of stale transaction
          - cgroup: freezer: fix frozen state inheritance
          - Revert "mmc: bcm2835: Terminate timeout work synchronously"
          - Revert "mmc: sdhci: Remove unneeded quirk2 flag of O2 SD host controller"
          - mmc: tmio: Fixup runtime PM management during probe
          - mmc: tmio: Fixup runtime PM management during remove
          - drm/lima: fix lima_gem_wait() return value
          - [x86] drm/i915: Limit MST to <= 8bpc once again
          - [x86] drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+
          - ipc: fix semtimedop for generic 32-bit architectures
          - ipc: fix sparc64 ipc() wrapper
          - ixgbe: fix double clean of Tx descriptors with xdp
          - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us
          - Revert "rt2800: enable TX_PIN_CFG_LNA_PE_ bits per band"
          - mt76: mt76x0e: disable 5GHz band for MT7630E
          - genirq: Prevent NULL pointer dereference in resend_irqs()
          - regulator: twl: voltage lists for vdd1/2 on twl4030
          - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using
            it as target for memset()
          - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl
          - [x86] KVM: work around leak of uninitialized stack contents
          - [x86] KVM: mmu: Reintroduce fast invalidate/zap for flushing memslot
          - [x86] KVM: nVMX: handle page fault in vmread
          - [x86] purgatory: Change compiler flags from -mcmodel=kernel to
            -mcmodel=large to fix kexec relocation errors
          - powerpc: Add barrier_nospec to raw_copy_in_user()
          - kernel/module: Fix mem leak in module_add_modinfo_attrs
          - x86/boot: Use efi_setup_data for searching RSDP on kexec-ed kernels
          - x86/ima: check EFI SetupMode too
          - drm/meson: Add support for XBGR8888 & ABGR8888 formats
          - clk: Fix debugfs clk_possible_parents for clks without parent string names
          - clk: Simplify debugfs printing and add a newline
          - mt76: Fix a signedness bug in mt7615_add_interface()
          - mt76: mt7615: Use after free in mt7615_mcu_set_bcn()
          - clk: rockchip: Don't yell about bad mmc phases when getting
          - mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue
          - PCI: Always allow probing with driver_override
          - ubifs: Correctly use tnc_next() in search_dh_cookie()
          - driver core: Fix use-after-free and double free on glue directory
          - crypto: talitos - check AES key size
          - crypto: talitos - fix CTR alg blocksize
          - crypto: talitos - check data blocksize in ablkcipher.
          - crypto: talitos - fix ECB algs ivsize
          - crypto: talitos - Do not modify req->cryptlen on decryption.
          - crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking.
          - firmware: ti_sci: Always request response from firmware
          - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC
          - drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto
          - mm/z3fold.c: remove z3fold_migration trylock
          - mm/z3fold.c: fix lock/unlock imbalance in z3fold_page_isolate
          - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
          - modules: fix BUG when load module with rodata=n
          - modules: fix compile error if don't have strict module rwx
          - modules: always page-align module section allocations
          - [x86] kvm: nVMX: Remove unnecessary sync_roots from handle_invept
          - [x86] KVM: SVM: Fix detection of AMD Errata 1096
          - [x86] platform: pmc_atom: Add CB4063 Beckhoff Automation board to
            critclk_systems DMI table
          - [x86] platform: pcengines-apuv2: use KEY_RESTART for front button
          - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.17
          - USB: usbcore: Fix slab-out-of-bounds bug during device reset
          - media: tm6000: double free if usb disconnect while streaming
          - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
          - net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit()
          - netfilter: nf_flow_table: set default timeout after successful insertion
          - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
          - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
          - SUNRPC: Handle connection breakages correctly in call_status()
          - nfs: disable client side deduplication
          - [powerpc*] mm/radix: Use the right page size for vmemmap mapping
          - net: hns: fix LED configuration for marvell phy
          - net: aquantia: fix limit of vlan filters
          - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
          - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc
          - net_sched: let qdisc_put() accept NULL pointer
          - udp: correct reuseport selection with connected sockets
          - xen-netfront: do not assume sk_buff_head list is empty in error handling
          - net: dsa: Fix load order between DSA drivers and taggers
          - KVM: coalesced_mmio: add bounds checking (CVE-2019-14821)
          - firmware: google: check if size is valid when decoding VPD data
          - serial: sprd: correct the wrong sequence of arguments
          - tty/serial: atmel: reschedule TX after RX was started
          - mwifiex: Fix three heap overflow at parsing element in
            cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816)
          - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
          - ieee802154: hwsim: Fix error handle path in hwsim_init_module
          - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
          - [armhf] dts: am57xx: Disable voltage switching for SD card
          - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
          - bus: ti-sysc: Fix handling of forced idle
          - bus: ti-sysc: Fix using configured sysc mask value
          - [armhf] dts: Fix flags for gpio7
          - [armhf] dts: Fix incorrect dcan register mapping for am3, am4 and dra7
          - [arm64] dts: meson-g12a: add missing dwc2 phy-names
          - [s390x] bpf: fix lcgr instruction encoding
          - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs
          - [armhf] dts: am335x: Fix UARTs length
          - [armhf] dts: dra74x: Fix iodelay configuration for mmc3
          - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
          - [armhf] dts: Fix incomplete dts data for am3 and am4 mmc
          - [s390x] bpf: use 32-bit index for tail calls
          - fpga: altera-ps-spi: Fix getting of optional confd gpio
          - netfilter: ebtables: Fix argument order to ADD_COUNTER
          - netfilter: nft_flow_offload: missing netlink attribute policy
          - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
          - NFSv4: Fix return values for nfs4_file_open()
          - NFSv4: Fix return value in nfs_finish_open()
          - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
          - NFS: On fatal writeback errors, we need to call
            nfs_inode_remove_request()
          - xdp: unpin xdp umem pages in error path
          - selftests/bpf: fix test_cgroup_storage on s390
          - selftests/bpf: add config fragment BPF_JIT
          - qed: Add cleanup in qed_slowpath_start()
          - drm/omap: Fix port lookup for SDI output
          - drm/virtio: use virtio_max_dma_size
          - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures
          - batman-adv: Only read OGM2 tvlv_len after buffer len check
          - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
          - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
          - r8152: Set memory to all 0xFFs on failed reg reads
          - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
          - pNFS/flexfiles: Don't time out requests on hard mounts
          - NFS: Fix spurious EIO read errors
          - NFS: Fix writepage(s) error handling to not report errors twice
          - drm/amdgpu: fix dma_fence_wait without reference
          - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
          - netfilter: nf_conntrack_ftp: Fix debug output
          - NFSv2: Fix eof handling
          - NFSv2: Fix write regression
          - NFS: remove set but not used variable 'mapping'
          - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
            first symbol
          - netfilter: conntrack: make sysctls per-namespace again
          - drm/amd/powerplay: correct Vega20 dpm level related settings
          - cifs: set domainName when a domain-key is used in multiuser
          - cifs: Use kzfree() to zero out the password
          - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
          - usb: host: xhci-tegra: Set DMA mask correctly
          - RISC-V: Fix FIXMAP area corruption on RV32 systems
          - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm
          - ibmvnic: Do not process reset during or after device removal
          - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
          - i2c: designware: Synchronize IRQs when unregistering slave client
          - perf/x86/intel: Restrict period on Nehalem
          - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
          - i2c: iproc: Stop advertising support of SMBUS quick cmd
          - i2c: mediatek: disable zero-length transfers for mt8183
          - amd-xgbe: Fix error path in xgbe_mod_init()
          - netfilter: nf_flow_table: clear skb tstamp before xmit
          - [x86] tools/power x86_energy_perf_policy: Fix argument parsing
          - [x86] tools/power turbostat: fix leak of file descriptor on error return
            path
          - [x86] tools/power turbostat: fix file descriptor leaks
          - [x86] tools/power turbostat: fix buffer overrun
          - [x86] tools/power turbostat: Fix Haswell Core systems
          - [x86] tools/power turbostat: Add Ice Lake NNPI support
          - [x86] tools/power turbostat: Fix CPU%C1 display value
          - net: aquantia: fix removal of vlan 0
          - net: aquantia: reapply vlan filters on up
          - net: aquantia: linkstate irq should be oneshot
          - net: aquantia: fix out of memory condition on rx side
          - net: dsa: microchip: add KSZ8563 compatibility string
          - enetc: Add missing call to 'pci_free_irq_vectors()' in probe and remove
            functions
          - net: seeq: Fix the function used to release some memory in an error
            handling path
          - dmaengine: ti: dma-crossbar: Fix a memory leak bug
          - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
          - [x86] uaccess: Don't leak the AC flags into __get_user() argument
            evaluation
          - [x86] hyper-v: Fix overflow bug in fill_gva_list()
          - [x86] iommu/vt-d: Remove global page flush support
          - dmaengine: sprd: Fix the DMA link-list configuration
          - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
          - keys: Fix missing null pointer check in request_key_auth_describe()
          - [x86] iommu/amd: Flush old domains in kdump kernel
          - [x86] iommu/amd: Fix race in increase_address_space()
          - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
          - ovl: fix regression caused by overlapping layers detection
          - floppy: fix usercopy direction
          - media: technisat-usb2: break out of loop at end of buffer
            (CVE-2019-15505)
          - vfs: Fix refcounting of filenames in fs_parser
      
        [ Salvatore Bonaccorso ]
        * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
          (CVE-2019-15538)
      
        [ Romain Perier ]
        * [rt] Update to 5.2.14-rt7
      
        [ Ben Hutchings ]
        * Bump ABI to 3
      
      linux (5.2.9-2) unstable; urgency=medium
      
        [ Ben Hutchings ]
        * Partially revert "net: socket: implement 64-bit timestamps"
          (fixes build/test regressions for glibc, qemu, suricata)
        * [x86] intel-iommu: Exclude integrated GPUs by default (Closes: #935270):
          - intel-iommu: Add option to exclude integrated GPU only
          - intel-iommu: Add Kconfig option to exclude iGPU by default
          - Enable INTEL_IOMMU_DEFAULT_ON_INTGPU_OFF instead of
            INTEL_IOMMU_DEFAULT_ON
      
        [ Thomas W ]
        * [x86] Add various laptop modules. (Closes: #932086)
          CONFIG_ACER_WIRELESS
          CONFIG_LG_LAPTOP
          CONFIG_SURFACE3_WMI
          CONFIG_INTEL_WMI_THUNDERBOLT
          CONFIG_PEAQ_WMI
          CONFIG_TOSHIBA_WMI
          CONFIG_SURFACE_3_BUTTON
      
      linux (5.2.9-1) unstable; urgency=medium
      
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.8
          - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
          - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
          - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
          - ALSA: usb-audio: Sanity checks for each pipe and EP types
          - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
          - HID: wacom: fix bit shift for Cintiq Companion 2
          - HID: Add quirk for HP X1200 PIXART OEM mouse
          - atm: iphase: Fix Spectre v1 vulnerability (CVE-2017-5753)
          - bnx2x: Disable multi-cos feature.
          - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (Closes: #908712)
          - ife: error out when nla attributes are empty
          - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
          - ip6_tunnel: fix possible use-after-free on xmit
          - ipip: validate header length in ipip_tunnel_xmit
          - [armhf,arm64] mvpp2: fix panic on module removal
          - [armhf,arm64] mvpp2: refactor MTU change code
          - net: bridge: delete local fdb on device init failure
          - net: bridge: mcast: don't delete permanent entries when fast leave is
            enabled
          - net: bridge: move default pvid init/deinit to NETDEV_REGISTER/UNREGISTER
          - net: fix ifindex collision during namespace removal
          - net/mlx5e: always initialize frag->last_in_page
          - net/mlx5: Use reversed order when unregister devices
          - net: phy: fixed_phy: print gpio error only if gpio node is present
          - net: phy: mscc: initialize stats array
          - net: sched: Fix a possible null-pointer dereference in dequeue_func()
          - net sched: update vlan action for batched events operations
          - net: sched: use temporary variable for actions indexes
          - net/smc: do not schedule tx_work in SMC_CLOSED state
          - [armhf,arm64] net: stmmac: Use netif_tx_napi_add() for TX polling
            function
          - tipc: compat: allow tipc commands without arguments
          - tipc: fix unitilized skb list crash
          - tun: mark small packets as owned by the tap sock
          - net/mlx5: Fix modify_cq_in alignment
          - net/mlx5e: Prevent encap flow counter update async to user query
          - r8169: don't use MSI before RTL8168d
          - net: fix bpf_xdp_adjust_head regression for generic-XDP
          - [x86] hv_sock: Fix hang when a connection is closed
          - net: phy: fix race in genphy_update_link
          - net/smc: avoid fallback in case of non-blocking connect
          - rocker: fix memory leaks of fib_work on two error return paths
          - net/mlx5: Add missing RDMA_RX capabilities
          - net/mlx5e: Fix matching of speed to PRM link modes
          - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
          - [x86] drm/i915/vbt: Fix VBT parsing for the PSR section
          - Revert "mac80211: set NETIF_F_LLTX when using intermediate tx queues"
          - [armhf,arm64] spi: bcm2835: Fix 3-wire mode if DMA is enabled
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9
          - Revert "PCI: Add missing link delays required by the PCIe spec"
          - [arm64] iio: cros_ec_accel_legacy: Fix incorrect channel setting
          - [x86] iio: imu: mpu6050: add missing available scan masks
          - [x86] crypto: ccp - Fix oops by properly managing allocated structures
          - [x86] crypto: ccp - Add support for valid authsize values less than 16
          - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext
          - driver core: platform: return -ENXIO for missing GpioInt
          - usb: usbfs: fix double-free of usb memory upon submiturb error
          - Revert "USB: rio500: simplify locking"
          - usb: iowarrior: fix deadlock on disconnect
          - sound: fix a memory leak bug
          - [arm64,mips/octeon] mmc: cavium: Set the correct dma max segment size for
            mmc_host
          - [arm64,mips/octeon] mmc: cavium: Add the missing dma unmap when the dma
            has finished.
          - loop: set PF_MEMALLOC_NOIO for the worker thread
          - bdev: Fixup error handling in blkdev_get() (Closes: #934378)
          - Input: usbtouchscreen - initialize PM mutex before using it
          - Input: elantech - enable SMBus on new (2018+) systems
          - [x86] Input: synaptics - enable RMI mode for HP Spectre X360
          - [x86] mm: Check for pfn instead of page in vmalloc_sync_one()
          - [x86] mm: Sync also unmappings in vmalloc_sync_all()
          - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
          - [s390x] perf annotate: Fix s390 gap between kernel end and module start
          - perf db-export: Fix thread__exec_comm()
          - [s390x] perf record: Fix module size on s390
          - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset
          - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
          - genirq/affinity: Create affinity mask for single vector
          - gfs2: gfs2_walk_metadata fix
          - usb: yurex: Fix use-after-free in yurex_delete
          - usb: typec: ucsi: ccg: Fix uninitilized symbol error
          - usb: typec: tcpm: free log buf memory when remove debug file
          - usb: typec: tcpm: remove tcpm dir if no children
          - usb: typec: tcpm: Add NULL check before dereferencing config
          - usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
          - [armhf] can: flexcan: fix stop mode acknowledgment
          - [armhf] can: flexcan: fix an use-after-free in flexcan_setup_stop_mode()
          - can: peak_usb: fix potential double kfree_skb()
          - [powerpc*] fix off by one in max_zone_pfn initialization for ZONE_DMA
          - netfilter: nfnetlink: avoid deadlock due to synchronous request_module
          - netfilter: Fix rpfilter dropping vrf packets by mistake
          - netfilter: nf_tables: fix module autoload for redir
          - netfilter: conntrack: always store window size un-scaled
          - netfilter: nft_hash: fix symhash with modulus one
          - rq-qos: don't reset has_sleepers on spurious wakeups
          - rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule
          - rq-qos: use a mb for got_token
          - netfilter: nf_tables: Support auto-loading for inet nat
          - drm/amd/display: No audio endpoint for Dell MST display
          - drm/amd/display: Clock does not lower in Updateplanes
          - drm/amd/display: Wait for backlight programming completion in set
            backlight level
          - drm/amd/display: fix DMCU hang when going into Modern Standby
          - drm/amd/display: use encoder's engine id to find matched free audio
            device
          - drm/amd/display: put back front end initialization sequence
          - drm/amd/display: allocate 4 ddc engines for RV2
          - drm/amd/display: Fix dc_create failure handling and 666 color depths
          - drm/amd/display: Only enable audio if speaker allocation exists
          - drm/amd/display: Increase size of audios array
          - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
          - mac80211: fix possible memory leak in ieee80211_assign_beacon
          - mac80211: don't warn about CW params when not using them
          - allocate_flower_entry: should check for null deref
          - hwmon: (nct6775) Fix register address and added missed tolerance for
            nct6106
          - [armhf] dts: imx6ul: fix clock frequency property name of I2C buses
          - [powerpc*] papr_scm: Force a scm-unbind if initial scm-bind fails
          - [arm64] Force SSBS on context switch
          - [arm64] entry: SP Alignment Fault doesn't write to FAR_EL1
          - [x86] iommu/vt-d: Check if domain->pgd was allocated
          - [arm64] drm/msm/dpu: Correct dpu encoder spinlock initialization
          - [ppc64] cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
          - [s390x] qdio: add sanity checks to the fast-requeue path
          - ALSA: compress: Fix regression on compressed capture streams
          - ALSA: compress: Prevent bypasses of set_params
          - ALSA: compress: Don't allow paritial drain operations on capture streams
          - ALSA: compress: Be more restrictive about when a drain is allowed
          - perf script: Fix off by one in brstackinsn IPC computation
          - perf tools: Fix proper buffer size for feature processing
          - perf stat: Fix segfault for event group in repeat mode
          - perf session: Fix loading of compressed data split across adjacent
            records
          - perf probe: Avoid calling freeing routine multiple times for same pointer
          - drbd: dynamically allocate shash descriptor
          - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
          - nvme: ignore subnqn for ADATA SX6000LNP
          - nvme: fix memory leak caused by incorrect subsystem free
          - scsi: megaraid_sas: fix panic on loading firmware crashdump
          - scsi: ibmvfc: fix WARN_ON during event pool release
          - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
          - test_firmware: fix a memory leak bug
          - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
          - [x86] perf/intel: Fix SLOTS PEBS event constraint
          - [x86] perf/intel: Fix invalid Bit 13 for Icelake MSR_OFFCORE_RSP_x
            register
          - [x86] perf: Apply more accurate check on hypervisor platform
          - perf/core: Fix creating kernel counters for PMUs that override event->cpu
          - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value
          - HID: sony: Fix race condition between rumble and device remove.
          - ALSA: usb-audio: fix a memory leak bug
          - [x86] KVM/nSVM: properly map nested VMCB
          - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
          - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
          - hwmon: (nct7802) Fix wrong detection of in4 presence
          - hwmon: (lm75) Fixup tmp75b clr_mask
          - [x86] drm/i915: Fix wrong escape clock divisor init for GLK
          - ALSA: firewire: fix a memory leak bug
          - ALSA: hiface: fix multiple memory leak bugs
          - ALSA: hda - Don't override global PCM hw info flag
          - [x86] ALSA: hda - Workaround for crackled sound on AMD controller
            (1022:1457)
          - mac80211: don't WARN on short WMM parameters from AP
          - dax: dax_layout_busy_page() should not unmap cow pages
          - SMB3: Fix deadlock in validate negotiate hits reconnect
          - smb3: send CAP_DFS capability during session setup
          - NFSv4: Fix delegation state recovery
          - NFSv4: Check the return value of update_open_stateid()
          - NFSv4: Fix an Oops in nfs4_do_setattr
          - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU
          - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block
          - mwifiex: fix 802.11n/WPA detection
          - iwlwifi: don't unmap as page memory that was mapped as single
          - iwlwifi: mvm: fix an out-of-bound access
          - iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment
          - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
          - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
      
        [ Salvatore Bonaccorso ]
        * Enable Realtek 802.11ac wireless chips support (Closes: #933963)
      
        [ Ben Hutchings ]
        * [armel] fb-modules: Remove xgifb, which was removed upstream (fixes FTBFS)
        * tracefs: Fix potential null dereference in default_file_open()
          (Closes: #934304)
        * [arm64] hwrandom: Re-enable HW_RANDOM_OMAP as module (Closes: #931707)
        * ptp: Change CAVIUM_PTP from built-in to modular (Closes: #934848)
        * bug script: Check whether /e/n/interfaces exists (Closes: #934824)
        * bug script: Include network configuration from /e/n/interfaces.d
        * bug script: Check for unreadable /e/n/interfaces files
        * [x86] iommu: Enable INTEL_IOMMU_DEFAULT_ON (Closes: #934309)
        * HID: Enable HID_BIGBEN_FF, HID_MACALLY, HID_GFRM, HID_GT683R,
          HID_VIEWSONIC, HID_MALTRON, HID_U2FZERO as modules (Closes: #934091)
        * usbip: network: Fix unaligned member access (Closes: #925766)
        * libbpf: Fix cross-build
        * [rt] Update to 5.2.9-rt3:
          - i2c: exynos5: Remove IRQF_ONESHOT
          - i2c: hix5hd2: Remove IRQF_ONESHOT
          - sched/deadline: Ensure inactive_timer runs in hardirq context
          - thermal/x86_pkg_temp: make pkg_temp_lock a raw spinlock
          - dma-buf: Use seqlock_t instread disabling preemption
          - KVM: arm/arm64: Let the timer expire in hardirq context on RT
          - x86: preempt: Check preemption level before looking at lazy-preempt
          - arm64: preempt: Fixup lazy preempt
          - arm64: preempt: Check preemption level before looking at lazy-preempt
      
        [ Alper Nebi Yasak ]
        * [arm64] udeb: Add pl330 to kernel-image
      
      linux (5.2.7-1) unstable; urgency=medium
      
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.7
          - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200
          - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again
          - [arm64] clk: meson: mpll: properly handle spread spectrum
          - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend
          - ftrace: Enable trampoline when rec count returns back to one
          - [arm64] dts: qcom: qcs404-evb: fix l3 min voltage
          - [arm64] dts: marvell: mcbin: enlarge PCI memory window
          - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag
            is unset
          - [arm64] dts: rockchip: fix isp iommu clocks and power domain
          - kernel/module.c: Only return -EEXIST for modules that have finished
            loading
          - PCI: OF: Initialize dev->fwnode appropriately
          - [armhf,arm64] firmware/psci: psci_checker: Park kthreads before stopping
            them
          - [arm64] qcom: qcs404: Add reset-cells to GCC node
          - swiotlb: fix phys_addr_t overflow warning
          - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1
          - fs/adfs: super: fix use-after-free bug
          - [arm64] dts: rockchip: Fix USB3 Type-C on rk3399-sapphire
          - btrfs: tree-checker: Check if the file extent end overflows
          - btrfs: fix minimum number of chunk errors for DUP
          - btrfs: Flush before reflinking any extent to prevent NOCOW write falling
            back to COW without data reservation
          - [arm64] remoteproc: copy parent dma_pfn_offset for vdev
          - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
          - cifs: Fix a race condition with cifs_echo_request
          - ceph: fix improper use of smp_mb__before_atomic()
          - ceph: fix dir_lease_is_valid()
          - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
          - virtio-mmio: add error check for platform_get_irq
          - drm/amd/display: Expose audio inst from DC to DM
          - cifs: fix crash in cifs_dfs_do_automount
          - perf version: Fix segfault due to missing OPT_END()
          - [x86] kvm: avoid constant-conversion warning
          - ACPI: fix false-positive -Wuninitialized warning
          - [x86] KVM: nVMX: Ignore segment base for VMX memory operand when segment
            not FS or GS
          - bpf: fix BTF verifier size resolution logic
          - be2net: Signal that the device cannot transmit during reconfiguration
          - mm/z3fold: don't try to use buddy slots after free
          - mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones
          - mm/z3fold.c: reinitialize zhdr structs after migration
          - [x86] apic: Silence -Wtype-limits compiler warnings
          - [arm*] mm/cma.c: fail if fixed declaration can't be honored
          - mm/ioremap: check virtual address alignment while creating huge mappings
          - coda: add error handling for fget
          - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
            headers
          - ipc/mqueue.c: only perform resource calculation if user valid
          - device-dax: fix memory and resource leak if hotplug fails
          - mm/hotplug: make remove_memory() interface usable
          - stacktrace: Force USER_DS for stack_trace_save_user()
          - [x86] crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
          - xen/pv: Fix a boot up hang revealed by int3 self test
          - [x86] kvm: Don't call kvm_spurious_fault() from .fixup
          - [x86] paravirt: Fix callee-saved function ELF sizes
          - [x86] boot: Remove multiple copy of static function sanitize_boot_params()
          - bpf: Disable GCC -fgcse optimization for ___bpf_prog_run()
          - drm/nouveau: fix memory leak in nouveau_conn_reset()
          - drm/nouveau/dmem: missing mutex_lock in error path
          - kconfig: Clear "written" flag to avoid data loss
          - tpm: Fix null pointer dereference on chip register error path
          - Btrfs: fix incremental send failure after deduplication
          - Btrfs: fix race leading to fs corruption after transaction abort
          - dax: Fix missed wakeup in put_unlocked_entry()
          - fgraph: Remove redundant ftrace_graph_notrace_addr() test
          - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC
          - [armhf] mmc: meson-mx-sdio: Fix misuse of GENMASK macro
          - mmc: mmc_spi: Enable stable writes
          - gpiolib: Preserve desc->flags when setting state
          - gpio: don't WARN() on NULL descs if gpiolib is disabled
          - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
          - IB/hfi1: Fix Spectre v1 vulnerability
          - drm/nouveau: Only release VCPI slots on mode changes
          - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
          - eeprom: at24: make spd world-readable again
          - [arm*] i2c: iproc: Fix i2c master read more than 63 bytes
          - selinux: fix memory leak in policydb_init()
          - [x86] ALSA: hda: Fix 1-minute detection delay when i915 module is not
            available (see #931507)
          - mm: vmscan: check if mem cgroup is disabled or not before calling memcg
            slab shrinker
          - mm: migrate: fix reference check race between __find_get_block() and
            migration
          - mm: compaction: avoid 100% CPU usage during compaction when a task is
            killed
          - mm/migrate.c: initialize pud_entry in migrate_vma()
          - loop: Fix mount(2) failure due to race with LOOP_SET_FD
          - [s390x] dasd: fix endless loop after read unit address configuration
          - cgroup: kselftest: relax fs_spec checks
          - [hppa] Add archclean Makefile target
          - [hppa] Strip debug info from kernel before creating compressed vmlinuz
          - [hppa] Fix build of compressed kernel even with debug enabled
          - drivers/perf: arm_pmu: Fix failure path in PM notifier
          - [arm64] compat: Allow single-byte watchpoints on all addresses
          - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
          - io_uring: fix KASAN use after free in io_sq_wq_submit_work
          - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
          - nbd: replace kill_bdev() with __invalidate_device() again
          - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
          - xen/gntdev.c: Replace vm_map_pages() with vm_map_pages_zero()
          - RDMA/devices: Do not deadlock during client removal
          - IB/mlx5: Fix unreg_umr to ignore the mkey state
          - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
          - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
          - IB/mlx5: Fix clean_mr() to work in the expected order
          - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
          - IB/hfi1: Check for error on call to alloc_rsm_map_table
          - IB/hfi1: Drop all TID RDMA READ RESP packets after r_next_psn
          - IB/hfi1: Field not zero-ed when allocating TID flow memory
          - [x86] drm/i915/perf: fix ICL perf register offsets
          - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping
          - [x86] cpufeatures: Carve out CQM features retrieval
          - [x86] cpufeatures: Combine word 11 and 12 into a new scattered features
            word
          - [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations
          - [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125)
          - [amd64] entry: Use JMP instead of JMPQ
          - [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
          - Documentation: Add swapgs description to the Spectre v1 documentation
      
        [ Ben Hutchings ]
        * [armhf] udeb: Remove davinci_cpdma from nic-modules (fixes FTBFS)
        * Bump ABI to 2
        * [armel/marvell] Increase maximum image size (fixes FTBFS):
          - This removes support for QNAP TS-109, TS-119, TS-209, TS-219, TS-409,
            and HP Media Vault mv2120
          - This may be reverted if we can disable or modularise some features
      
        [ Julien Cristau ]
        * Fix libcpupower-dev's Depends field to account for SONAME bump.
      
      linux (5.2.6-1) unstable; urgency=medium
      
        * New upstream release:
          https://kernelnewbies.org/Linux_5.1
          https://kernelnewbies.org/Linux_5.2
      
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.1
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.2
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.4
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.5
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.6
      
        [ Bastian Germann ]
        * [armhf] Enable C_CAN as a module. (Closes: #929968)
      
        [ Ben Hutchings ]
        * Drop "x86/boot: Add ACPI RSDP address to setup_header", which should
          not have been applied to 4.20 or later
        * Drop redundant part of "Install perf scripts non-executable"
        * Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed
        * debian/rules.d/scripts/kconfig: Update for upstream file renaming
        * debian/rules.d/scripts/mod: Add uuid_t and UUID_STRING_LEN definitions
        * liblockdep: Disable until it can be built again
        * libcpupower: Bump soversion since 2 exported functions have been removed
        * libbpf: Stop overriding upstream soname; rename shlib package to libbpf0
        * vfs: Enable FS_ENCRYPTION as built-in; disable on armel/marvell
        * net: Enable NET_DEVLINK as built-in; disable on armel/marvell
        * aufs: Update support patchset to aufs5.2 20190805
        * lockdown: Update for 5.2:
          - Update "acpi: Ignore acpi_rsdp kernel param when the kernel ..."
          - Add "tracefs: Restrict tracefs when the kernel is locked down"
          - Add "efi: Restrict efivar_ssdt_load when the kernel is locked down"
          - Drop "MODSIGN: Import certificates from UEFI Secure Boot"
        * [rt] Rebase onto 5.2.6, and re-enable
        * [armhf,arm64] gpu: Enable DRM_LIMA, DRM_PANFROST as modules
        * sched: Enable PSI (Closes: #931247)
        * [armhf,arm64] power: Enable ENERGY_MODEL
        * [armhf,arm64] cpufreq: Enable CPU_FREQ_DEFAULT_GOV_SCHEDUTIL (instead of
          CPU_FREQ_DEFAULT_GOV_PERFORMANCE)
        * hamradio: Disable auto-loading as mitigation against local exploits
        * hamradio: Enable most options in top-level config:
          - [arm64,ia64,mips*,riscv64,s390x,sh4,sparc64] Enable AX25, NETROM, ROSE,
            and all possible drivers (Closes: #920651)
          - [alpha,amd64,armel] ax25: Enable AX25_DAMA_SLAVE
          - [armhf] Enable BPQETHER, BAYCOM_SER_FDX, BAYCOM_SER_HDX, BAYCOM_PAR,
            BAYCOM_EPP, YAM as modules
        * [armel/rpi,armhf] media: Enable VIDEO_BCM2835 as module
        * usb/typec: Enable TYPEC_DP_ALTMODE, TYPEC_NVIDIA_ALTMODE as modules
          (Closes: #931752)
        * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511)
        * [ppc64*] crypto: Enable CRYPTO_DEV_NX, and CRYPTO_DEV_NX_ENCRYPT,
          CRYPTO_DEV_NX_COMPRESS, CRYPTO_DEV_NX_COMPRESS_PSERIES,
          CRYPTO_DEV_NX_COMPRESS_POWERNV as modules (Closes: #931374)
        * [ppc64*] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122)
      
        [ Vagrant Cascadian ]
        * [arm64] Enable modules to support audio on pinebook: SND_SUN4I_I2S,
          SND_SUN8I_CODEC, SND_SUN50I_CODEC_ANALOG, SND_SIMPLE_CARD,
          SND_SOC_SIMPLE_AMPLIFIER. (Closes: #921019)
      
        [ Romain Perier ]
        * Refreshed patches:
          - debian/revert-objtool-fix-config_stack_validation-y-warning.patch
          - debian/dfsg/video-remove-nvidiafb-and-rivafb.patch
          - debian/gitignore.patch
          - debian/mips-disable-werror.patch
          - bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
          - bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch
          - bugfix/powerpc/powerpc-lib-makefile-don-t-pull-in-quad.o-for-32-bit.patch
          - bugfix/all/
            radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
          - bugfix/all/disable-some-marvell-phys.patch
          - debian/overlayfs-permit-mounts-in-userns.patch
          - bugfix/all/tools-perf-remove-shebangs.patch
          - debian/ntfs-mark-it-as-broken.patch
          - features/all/db-mok-keyring/
            0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch
          - features/all/db-mok-keyring/
            0004-MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch
          - debian/android-enable-building-ashmem-and-binder-as-modules.patch
          - features/all/aufs5/aufs5-mmap.patch
          - features/all/aufs5/aufs5-standalone.patch
          - features/all/lockdown/
            0029-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
        * Enable coreboot memconsole (Closes: #872069)
        * [rt] Update to 5.2-rt1
      
        [ Karsten Merker ]
        * [riscv64] Change the kernel image format from ELF to flat Image.
          (Closes: #928451)
        * [riscv64] Update config and image format (Closes: #933603):
          - Enable SiFive UART and UART console support
          - Enable clock drivers for the SiFive FU540
          - Backport kernel image header support from kernel 5.3
      
        [ Uwe Kleine-König ]
        * [armhf] Add support for all i.MX6 variants.
        * enable XFRM_STATISTICS (Closes: #929938)
        * [arm64] Add support for Raspberry Pi 3 camera host interface (Closes:
          #933228)
        * Enable CRYPTO_ZSTD for ZRAM with ZSTD compression (Closes: #932722)
      
        [ Lubomir Rintel ]
        * [armhf] Enable config items for OLPC XO-1.75 (Closes: #927791)
      
      linux (5.0.2-1~exp1) experimental; urgency=medium
      
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.2
      
        [ Vagrant Cascadian ]
        * [arm64,armhf] Enable PHY_ROCKCHIP_INNO_HDMI as modules.
      
        [ Ben Hutchings ]
        * [amd64] kexec: Enable KEXEC_SIG, replacing KEXEC_VERIFY_SIG
        * [armel] MTD: Enable MTD_PHYSMAP as module and set MTD_PHYSMAP_OF=y
          - udeb: Include physmap instead of physmap_of in mtd-modules (fixes FTBFS)
        * [armhf] sound/soc/ti: Enable SND_SOC_DAVINCI_MCASP, SND_SOC_NOKIA_RX51,
          SND_SOC_OMAP3_PANDORA, SND_SOC_OMAP3_TWL4030, SND_SOC_OMAP_ABE_TWL6040
          as modules; replacing SND_DAVINCI_SOC_MCASP, SND_OMAP_SOC_RX51,
          SND_OMAP_SOC_OMAP3_PANDORA, SND_OMAP_SOC_OMAP_TWL4030,
          SND_OMAP_SOC_OMAP_ABE_TWL6040 respectively
        * udeb: Add thermal_sys to kernel-image (fixes FTBFS on mips*, ppc64*,
          riscv64)
        * [powerpc*] mm: Only define MAX_PHYSMEM_BITS in SPARSEMEM configurations
          (fixes FTBFS on powerpc, powerpcspe)
        * debian/source/lintian-overrides: Override license-problem-gfdl-invariants
          in more files
        * debian/rules: Remove debian/*.substvars in clean target
        * debian/source/lintian-overrides: Override
          orig-tarball-missing-upstream-signature
      
      linux (5.0.1-1~exp1) experimental; urgency=medium
      
        * New upstream release: https://kernelnewbies.org/Linux_5.0
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1
      
        [ YunQiang Su ]
        * [mipsel, mips64el] Enable DRM_AST and FB_SM750 for loongson-3
          install ast and sm750fb to loongson-3's fb-modules
        * [mips r6] Disable JUMP_LABEL for now: it will cause Reserved Instruction.
          Enable SERIAL_OF_PLATFORM, if not, userland shows nothing.
          Enable CPU_HAS_MSA, HIGHMEM, CRYPTO_CRC32_MIPS, and NR_CPUS to 16.
          Support some boston drivers: IMG_ASCII_LCD, I2C_EG20T, PCH_PHUB, MMC,
            PCIE_XILINX, RTC_DRV_M41T80, SPI_TOPCLIFF_PCH.
      
        [ Hideki Yamane ]
        * [x86] Enable Touchpad support on Gemini Lake (Closes: #917388)
      
        [ Helge Deller ]
        * [hppa] Build only 32- and 64-bit SMP-kernel: Alternative
          live-patching code will patch kernel for UP at boot if necessary.
      
        [ Romain Perier ]
        * Refreshed debian/export-symbols-needed-by-android-drivers.patch to export
          __close_fd_get_file() and task_work_add(), both required by binder.
        * Refreshed debian/revert-objtool-fix-config_stack_validation-y-warning.patch,
          so this can be applied against 4.20.4
        * Refreshed patch for lockdown
          0028-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-b.patch, so this
          can be applied against >= 4.20.13
      
        [ Marcin Juszkiewicz ]
        * udeb: Add virtio-gpu into d-i to get graphical output in VM instances.
      
        [ Ben Hutchings ]
        * SCSI: Enable SCSI_MYRB, SCSI_MYRS as modules, replacing BLK_DEV_DAC960
        * [arm64] remoteproc: Enable QCOM_Q6V5_MSS, renamed version of
          QCOM_Q6V5_PIL
        * [x86] drivers/gpu/drm/amd: Re-enable HSA_AMD (Closes: #920454)
        * genpatch-aufs: Update to use aufs5-standalone
        * aufs: Update support patchset to aufs5.0 20190311
        * lockdown: Update patchset to 2019-02-18 version
      
      linux (4.20-1~exp1) experimental; urgency=medium
      
        * New upstream release: https://kernelnewbies.org/Linux_4.20
      
        [ Ben Hutchings ]
        * aufs: Update support patchset to aufs4.x-rcN 20181217
        * [rt] Disable until it is updated for 4.20 or later
        * [x86] udeb: Move rfkill to new rfkill-modules package to avoid duplication
        * debian/source/lintian-overrides: Update overrides for GFDL notices
  4. Nov 27, 2019
  5. Nov 22, 2019
  6. Nov 07, 2019
  7. Oct 09, 2019
  8. Sep 24, 2019
  9. Sep 21, 2019
    • Emanuele Aina's avatar
    • Emanuele Aina's avatar
      Disable the module ABI check · b27ce4e8
      Emanuele Aina authored
      
      Commit 8e1482b4 tried to bump the abiname to avoid incurring in
      failures due to the module ABI in Apertis not matching the one in
      Debian, but it had to be reverted as it introduced too much delta.
      
      To address the ABI mismatch, simply disable the ABI checker, since
      Apertis is not committing to a stable module ABI at the moment.
      
      Signed-off-by: Emanuele Aina's avatarEmanuele Aina <emanuele.aina@collabora.com>
      b27ce4e8
    • Emanuele Aina's avatar
      Revert abiname bump · 6b910657
      Emanuele Aina authored
      This reverts commit 8e1482b4
      "Bump abiname as we don't match the Debian kernel ABI" that was
      introduced to avoid complaints from the ABI checker since the Apertis
      kernel module ABI does not match the Debian one.
      
      While most of the files got updated with the abiname bump, the
      maintscripts have been left behind.
      
      For this reason, the generated binaries are not shipping any
      maintscript, causing all kind of breakage: for instance, the
      `linux-image` packages misses the postinst script that trigger the
      generation of the initrd, breaking the boot process.
      
      Rather than introducing even more delta compared to the upstream
      packaging, a later commit will simply disable the ABI check.
      6b910657
  10. Sep 18, 2019
  11. Sep 17, 2019
  12. Sep 11, 2019
  13. Sep 10, 2019
  14. Sep 09, 2019
  15. Sep 05, 2019
  16. Aug 30, 2019
  17. Aug 28, 2019
    • Salvatore Bonaccorso's avatar
      Import Debian changes 4.19.67-2 · 4625d738
      Salvatore Bonaccorso authored
      linux (4.19.67-2) buster; urgency=medium
      
        [ Salvatore Bonaccorso ]
        * dm: disable DISCARD if the underlying storage no longer supports it
          (Closes: #934331)
        * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
          (CVE-2019-15538)
      
        [ Ben Hutchings ]
        * KVM: Ignore ABI changes
        * [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122)
        * [ppc64el] Avoid ABI change for disabling TM
        * netfilter: conntrack: Use consistent ct id hash calculation
          (fixes regression in 4.19.44)
      
        [ Cyril Brulebois ]
        * [arm] Backport DTB support for Rasperry Pi Compute Module 3.
        * [arm64] Backport DTB support for Rasperry Pi Compute Module 3.
      
      linux (4.19.67-1) buster; urgency=medium
      
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.38
          - netfilter: nft_compat: use refcnt_t type for nft_xt reference count
          - netfilter: nft_compat: make lists per netns
          - netfilter: nf_tables: split set destruction in deactivate and destroy
            phase
          - netfilter: nft_compat: destroy function must not have side effects
          - netfilter: nf_tables: warn when expr implements only one of
            activate/deactivate
          - netfilter: nf_tables: unbind set in rule from commit path
          - netfilter: nft_compat: don't use refcount_inc on newly allocated entry
          - netfilter: nft_compat: use .release_ops and remove list of extension
          - netfilter: nf_tables: fix set double-free in abort path
          - netfilter: nf_tables: bogus EBUSY when deleting set after flush
          - netfilter: nf_tables: bogus EBUSY in helper removal from transaction
          - net/ibmvnic: Fix RTNL deadlock during device reset
          - net: mvpp2: fix validate for PPv2.1
          - ext4: fix some error pointer dereferences
          - tipc: handle the err returned from cmd header function
          - loop: do not print warn message if partition scan is successful
          - [armhf,arm64] drm/rockchip: fix for mailbox read validation.
          - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
          - ipvs: fix warning on unused variable
          - [ppc64el] vdso32: fix CLOCK_MONOTONIC on PPC64
          - [armhf,arm64] net: dsa: mv88e6xxx: add call to mv88e6xxx_ports_cmode_init
            to probe for new DSA framework
          - cifs: fix memory leak in SMB2_read
          - cifs: do not attempt cifs operation on smb2+ rename error
          - tracing: Fix a memory leak by early error exit in trace_pid_write()
          - zram: pass down the bvec we need to read into in the work struct
          - trace: Fix preempt_enable_no_resched() abuse
          - IB/rdmavt: Fix frwr memory registration
          - RDMA/mlx5: Do not allow the user to write to the clock page
          - sched/numa: Fix a possible divide-by-zero
          - ceph: only use d_name directly when parent is locked
          - ceph: ensure d_name stability in ceph_dentry_hash()
          - ceph: fix ci->i_head_snapc leak
          - nfsd: Don't release the callback slot unless it was actually held
          - sunrpc: don't mark uninitialised items as VALID.
          - [x86] perf/intel: Update KBL Package C-state events to also include
            PC8/PC9/PC10 counters
          - Input: synaptics-rmi4 - write config register values to the right offset
          - [armhf] 8857/1: efi: enable CP15 DMB instructions before cleaning the
            cache
          - [ppc64el] mm/radix: Make Radix require HUGETLB_PAGE
          - [arm*] drm/vc4: Fix memory leak during gpu reset.
          - [x86] Revert "drm/i915/fbdev: Actually configure untiled displays"
          - USB: Add new USB LPM helpers
          - USB: Consolidate LPM checks to avoid enabling LPM twice
          - slip: make slhc_free() silently accept an error pointer
          - [x86] intel_th: gth: Fix an off-by-one in output unassigning
          - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
          - workqueue: Try to catch flush_work() without INIT_WORK().
          - sched/deadline: Correctly handle active 0-lag timers
          - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
          - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
          - fm10k: Fix a potential NULL pointer dereference
          - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
          - tipc: check link name with right length in tipc_nl_compat_link_set
          - net: netrom: Fix error cleanup path of nr_proto_init
          - net/rds: Check address length before reading address family
          - rxrpc: fix race condition in rxrpc_input_packet()
          - [x86] retpolines: Raise limit for generating indirect calls from
            switch-case
          - [x86] retpolines: Disable switch jump tables when retpolines are enabled
          - mm: Fix warning in insert_pfn()
          - [x86] fpu: Don't export __kernel_fpu_{begin,end}()
          - ipv4: add sanity checks in ipv4_link_failure()
          - ipv4: set the tcp_min_rtt_wlen range from 0 to one day
          - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
          - net: rds: exchange of 8K and 1M pool
          - net/rose: fix unbound loop in rose_loopback_timer()
          - [armhf,arm64] net: stmmac: move stmmac_check_ether_addr() to driver probe
          - team: fix possible recursive locking when add slaves
          - [arm64] net: hns: Fix WARNING when hns modules installed
          - net/mlx5e: Fix the max MTU check in case of XDP
          - net/mlx5e: Fix use-after-free after xdp_return_frame
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.39
          - selinux: use kernel linux/socket.h for genheaders and mdp
          - Revert "ACPICA: Clear status of GPEs before enabling them"
          - [arm*] dts: bcm283x: Fix hdmi hpd gpio pull
          - [s390x] limit brk randomization to 32MB
          - net: ieee802154: fix a potential NULL pointer dereference
          - ieee802154: hwsim: propagate genlmsg_reply return code
          - [armhf,arm64] net: stmmac: don't set own bit too early for jumbo frames
          - qlcnic: Avoid potential NULL pointer dereference
          - xsk: fix umem memory leak on cleanup
          - netfilter: nft_set_rbtree: check for inactive element after flag mismatch
          - netfilter: bridge: set skb transport_header before entering
            NF_INET_PRE_ROUTING
          - netfilter: fix NETFILTER_XT_TARGET_TEE dependencies
          - netfilter: ip6t_srh: fix NULL pointer dereferences
          - [s390x] qeth: fix race when initializing the IP address table
          - [armhf] imx51: fix a leaked reference by adding missing of_node_put
          - [arm64] KVM: Reset the PMU in preemptible context
          - [armhf,arm64] KVM: vgic-its: Take the srcu lock when writing to guest
            memory
          - [armhf,arm64] KVM: vgic-its: Take the srcu lock when parsing the memslots
          - [x86] usb: dwc3: pci: add support for Comet Lake PCH ID
          - usb: gadget: net2280: Fix overrun of OUT messages
          - usb: gadget: net2280: Fix net2280_dequeue()
          - [x86] i2c: i801: Add support for Intel Comet Lake
          - staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc
          - staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer
            dereference
          - staging: rtl8712: uninitialized memory in read_bbreg_hdl()
          - staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc
          - [arm64] net: macb: Add null check for PCLK and HCLK
          - net/sched: don't dereference a->goto_chain to read the chain index
          - [armhf] dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi
          - [armhf,arm64] drm/tegra: hub: Fix dereference before check
          - NFS: Fix a typo in nfs_init_timeout_values()
          - drm: Fix drm_release() and device unplug
          - [arm64] drm/meson: Fix invalid pointer in meson_drv_unbind()
          - [arm64] drm/meson: Uninstall IRQ handler
          - scsi: mpt3sas: Fix kernel panic during expander reset
          - scsi: aacraid: Insure we don't access PCIe space during AER/EEH
          - scsi: qla4xxx: fix a potential NULL pointer dereference
          - leds: trigger: netdev: fix refcnt leak on interface rename
          - [x86] realmode: Don't leak the trampoline kernel address
          - usb: u132-hcd: fix resource leak
          - ceph: fix use-after-free on symlink traversal
          - [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on multi-
            element RSCN
          - [x86] mm: Don't exceed the valid physical address space
          - libata: fix using DMA buffers on stack
          - gpio: of: Fix of_gpiochip_add() error path
          - nvme-multipath: relax ANA state check
          - perf machine: Update kernel map address and re-order properly
          - [x86] iommu/amd: Reserve exclusion range in iova-domain
          - ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK
          - leds: trigger: netdev: use memcpy in device_name_store
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.40
          - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
          - ipv6: A few fixes on dereferencing rt->from
          - ipv6: fix races in ip6_dst_destroy()
          - ipv6/flowlabel: wait rcu grace period before put_pid()
          - ipv6: invert flowlabel sharing check in process and user mode
          - l2ip: fix possible use-after-free
          - l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()
          - [armhf] net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
          - net: phy: marvell: Fix buffer overrun with stats counters
          - rxrpc: Fix net namespace cleanup
          - sctp: avoid running the sctp state machine recursively
          - packet: validate msg_namelen in send directly
          - bnxt_en: Improve multicast address setup logic.
          - bnxt_en: Free short FW command HWRM memory in error path in
            bnxt_init_one()
          - bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt().
          - [x86] KVM: Whitelist port 0x7e for pre-incrementing %rip
          - [x86] KVM: nVMX: Fix size checks in vmx_set_nested_state
          - ALSA: line6: use dynamic buffers
          - ath10k: Drop WARN_ON()s that always trigger during system resume
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.41
          - iwlwifi: fix driver operation for 5350
          - mwifiex: Make resume actually do something useful again on SDIO cards
          - mac80211: don't attempt to rename ERR_PTR() debugfs dirs
          - [armhf] i2c: imx: correct the method of getting private data in
            notifier_call
          - i2c: Remove unnecessary call to irq_find_mapping
          - i2c: Clear client->irq in i2c_device_remove
          - i2c: Allow recovery of the initial IRQ by an I2C client device.
          - i2c: Prevent runtime suspend of adapter when Host Notify is required
          - [x86] ALSA: hda/realtek - Add new Dell platform for headset mode
          - [x86] ALSA: hda/realtek - Fixed Dell AIO speaker noise
          - [x86] ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR
          - USB: yurex: Fix protection fault after device removal (CVE-2019-15216)
          - USB: w1 ds2490: Fix bug caused by improper use of altsetting array
          - USB: dummy-hcd: Fix failure to give back unlinked URBs
          - usb: usbip: fix isoc packet num validation in get_pipe
          - USB: core: Fix unterminated string returned by usb_string()
          - USB: core: Fix bug caused by duplicate interface PM usage counter
          - nvme-loop: init nvmet_ctrl fatal_err_work when allocate
          - [arm64] dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay
          - HID: logitech: check the return value of create_singlethread_workqueue
          - HID: debug: fix race condition with between rdesc_show() and device
            removal
          - rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured
          - batman-adv: Reduce claim hash refcnt only for removed entry
          - batman-adv: Reduce tt_local hash refcnt only for removed entry
          - batman-adv: Reduce tt_global hash refcnt only for removed entry
          - batman-adv: fix warning in function batadv_v_elp_get_throughput
          - [armhf] dts: rockchip: Fix gpu opp node names for rk3288
          - [arm64] reset: meson-audio-arb: Fix missing .owner setting of
            reset_controller_dev
          - igb: Fix WARN_ONCE on runtime suspend
          - HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630
          - net/mlx5: E-Switch, Fix esw manager vport indication for more vport
            commands
          - bonding: show full hw address in sysfs for slave entries
          - [armhf,arm64] net: stmmac: use correct DMA buffer size in the RX
            descriptor
          - [armhf,arm64] net: stmmac: ratelimit RX error logs
          - [armhf,arm64] net: stmmac: don't stop NAPI processing when dropping a
            packet
          - [armhf,arm64] net: stmmac: don't overwrite discard_frame status
          - [armhf,arm64] net: stmmac: fix dropping of multi-descriptor RX frames
          - [armhf,arm64] net: stmmac: don't log oversized frames
          - jffs2: fix use-after-free on symlink traversal
          - debugfs: fix use-after-free on symlink traversal
          - [armhf] mfd: twl-core: Disable IRQ while suspended
          - block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx
          - HID: input: add mapping for Assistant key
          - vfio/pci: use correct format characters
          - scsi: core: add new RDAC LENOVO/DE_Series device
          - [x86] scsi: storvsc: Fix calculation of sub-channel count
          - [arm64] fix wrong check of on_sdei_stack in nmi context
          - [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
          - [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver
          - [arm64] net: hns: Fix probabilistic memory overwrite when HNS driver
            initialized
          - [arm64] net: hns: fix ICMP6 neighbor solicitation messages discard
            problem
          - [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled
          - libcxgb: fix incorrect ppmax calculation
          - [x86] KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow
          - hugetlbfs: fix memory leak for resv_map
          - fs: stream_open - opener for stream-like files so that read and write can
            run simultaneously without deadlock
          - [armel] orion: don't use using 64-bit DMA masks
          - block: pass no-op callback to INIT_WORK().
          - [x86] perf/amd: Update generic hardware cache events for Family 17h
          - Bluetooth: btusb: request wake pin with NOAUTOEN
          - Bluetooth: mediatek: fix up an error path to restore bdev->tx_state
          - [arm64] clk: qcom: Add missing freq for usb30_master_clk on 8998
          - scsi: RDMA/srpt: Fix a credit leak for aborted commands
          - [x86] ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping"
          - [x86] platform: intel_pmc_core: Fix PCH IP name
          - [x86] platform: intel_pmc_core: Handle CFL regmap properly
          - IB/core: Unregister notifier before freeing MAD security
          - IB/core: Fix potential memory leak while creating MAD agents
          - IB/core: Destroy QP if XRC QP fails
          - selinux: avoid silent denials in permissive mode under RCU walk
          - selinux: never allow relabeling on context mounts
          - mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode
          - [ppc64el] mm/hash: Handle mmap_min_addr correctly in get_unmapped_area
            topdown search
          - [x86] mce: Improve error message when kernel cannot recover, p2
          - [x86] clk: Add system specific quirk to mark clocks as critical
          - [x86] mm/KASLR: Fix the size of the direct mapping section
          - [x86] mm: Fix a crash with kmemleak_scan()
          - [x86] mm/tlb: Revert "x86/mm: Align TLB invalidation info"
          - media: v4l2: i2c: ov7670: Fix PLL bypass register values
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.42
          - [armhf,arm64] net: stmmac: Use bfsize1 in ndesc_init_rx_desc
          - [x86] Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in
            hv_synic_cleanup()
          - ASoC: hdmi-codec: fix S/PDIF DAI
          - ASoC:soc-pcm:fix a codec fixup issue in TDM case
          - [x86] ASoC:intel:skl:fix a simultaneous playback & capture issue on hda
            platform
          - [arm64] clk: meson-gxbb: round the vdec dividers to closest
          - ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol
          - [armhf] drm/omap: hdmi4_cec: Fix CEC clock handling for PM
          - IB/hfi1: Eliminate opcode tests on mr deref
          - IB/hfi1: Fix the allocation of RSM table
          - [x86] perf/intel: Fix handling of wakeup_events for multi-entry PEBS
          - [x86] perf/intel: Initialize TFA MSR
          - linux/kernel.h: Use parentheses around argument in u64_to_user_ptr()
          - drm/amd/display: fix cursor black issue
          - objtool: Add rewind_stack_do_exit() to the noreturn list
          - slab: fix a crash by reading /proc/slab_allocators
          - [armhf,arm64] drm/sun4i: tcon top: Fix NULL/invalid pointer dereference
            in sun8i_tcon_top_un/bind
          - virtio_pci: fix a NULL pointer reference in vp_del_vqs
          - [x86] RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove
          - [arm64] RDMA/hns: Fix bug that caused srq creation to fail
          - scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
          - [x86] ASoC: Intel: kbl: fix wrong number of channels
          - virtio-blk: limit number of hw queues by nr_cpu_ids
          - nvme-fc: correct csn initialization and increments on error
          - [x86] platform: pmc_atom: Drop __initconst on dmi table
          - perf/core: Fix perf_event_disable_inatomic() race
          - [x86] iommu/amd: Set exclusion range correctly
          - genirq: Prevent use-after-free and work list corruption
          - usb: dwc3: Fix default lpm_nyet_threshold value
          - USB: serial: f81232: fix interrupt worker not stop
          - USB: cdc-acm: fix unthrottle races
          - usb-storage: Set virt_boundary_mask to avoid SG overflows
          - [x86] intel_th: pci: Add Comet Lake support
          - [arm64] cpufreq: armada-37xx: fix frequency calculation for opp
          - scsi: lpfc: change snprintf to scnprintf for possible overflow
          - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
          - scsi: qla2xxx: Fix device staying in blocked state
          - UAS: fix alignment of scatter/gather segments
          - [x86] ASoC: Intel: avoid Oops if DMA setup fails
          - locking/futex: Allow low-level atomic operations to return -EAGAIN
          - [arm64] futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.43
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.44
          - bfq: update internal depth state when queue depth changes
          - [x86] platform: sony-laptop: Fix unintentional fall-through
          - [x86] platform: thinkpad_acpi: Disable Bluetooth for some machines
          - [x86] platform: dell-laptop: fix rfkill functionality
          - hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
          - kernfs: fix barrier usage in __kernfs_new_node()
          - [x86] virt: vbox: Sanity-check parameter types for hgcm-calls coming from
            userspace
          - USB: serial: fix unthrottle races
          - acpi/nfit: Always dump _DSM output payload
          - libnvdimm/namespace: Fix a potential NULL pointer dereference
          - HID: input: add mapping for Expose/Overview key
          - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
          - HID: input: add mapping for "Toggle Display" key
          - libnvdimm/btt: Fix a kmemdup failure check
          - [s390x] dasd: Fix capacity calculation for large volumes
          - mac80211: fix unaligned access in mesh table hash function
          - mac80211: Increase MAX_MSG_LEN
          - cfg80211: Handle WMM rules in regulatory domain intersection
          - mac80211: fix memory accounting with A-MSDU aggregation
          - nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
          - libnvdimm/pmem: fix a possible OOB access when read and write pmem
          - [s390x] 3270: fix lockdep false positive on view->lock
          - drm/amd/display: extending AUX SW Timeout
          - mISDN: Check address length before reading address family
          - vxge: fix return of a free'd memblock on a failed dma mapping
          - qede: fix write to free'd pointer error and double free of ptp
          - afs: Unlock pages for __pagevec_release()
          - drm/amd/display: If one stream full updates, full update all planes
          - [s390x] pkey: add one more argument space for debug feature entry
          - [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
          - [x86] KVM: fix spectrev1 gadgets
          - [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in
            tracing
          - tools lib traceevent: Fix missing equality check for strcmp
          - ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
          - scsi: aic7xxx: fix EISA support
          - mm: fix inactive list balancing between NUMA nodes and cgroups
          - init: initialize jump labels before command line option parsing
          - ipvs: do not schedule icmp errors from tunnels
          - netfilter: ctnetlink: don't use conntrack/expect object addresses as id
          - netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()
          - [s390x] ctcm: fix ctcm_new_device error return code
          - [armhf,arm64] drm/sun4i: Set device driver data at bind time for use in
            unbind
          - [armhf,arm64] drm/sun4i: Fix component unbinding and component master
            deletion
          - netfilter: fix nf_l4proto_log_invalid to log invalid packets
          - [armhf] gpu: ipu-v3: dp: fix CSC handling
          - [armhf] drm/imx: don't skip DP channel disable for background plane
          - [armhf,arm64] drm/sun4i: Unbind components before releasing DRM and
            memory
          - Input: synaptics-rmi4 - fix possible double free
          - [arm64] RDMA/hns: Bugfix for mapping user db
          - mm/memory_hotplug.c: drop memory device reference after
            find_memory_block()
          - [ppc64el] smp: Fix NMI IPI timeout
          - [ppc64el] smp: Fix NMI IPI xmon timeout
          - [armhf,arm64] net: dsa: mv88e6xxx: fix few issues in
            mv88e6390x_port_set_cmode
          - mm/memory.c: fix modifying of page protection by insert_pfn()
          - usb: typec: Fix unchecked return value
          - netfilter: nf_tables: use-after-free in dynamic operations
          - netfilter: nf_tables: add missing ->release_ops() in error path of
            newrule() (Closes: #934168)
          - net: fec: manage ahb clock in runtime pm
          - net: strparser: partially revert "strparser: Call skb_unclone
            conditionally"
          - NFC: nci: Add some bounds checking in nci_hci_cmd_received()
          - nfc: nci: Potential off by one in ->pipes[] array
          - [x86] kprobes: Avoid kretprobe recursion bug
          - mwl8k: Fix rate_idx underflow
          - rtlwifi: rtl8723ae: Fix missing break in switch statement
          - bonding: fix arp_validate toggling in active-backup mode
          - bridge: Fix error path for kobject_init_and_add()
          - ipv4: Fix raw socket lookup for local traffic
          - net: dsa: Fix error cleanup path in dsa_init_module
          - [armhf] net: ethernet: stmmac: dwmac-sun8i: enable support of unicast
            filtering
          - [arm64] net: macb: Change interrupt and napi enable order in open
          - packet: Fix error path in packet_init
          - selinux: do not report error on connect(AF_UNSPEC)
          - vlan: disable SIOCSHWTSTAMP in container
          - vrf: sit mtu should not be updated when vrf netdev is the link
          - tuntap: fix dividing by zero in ebpf queue selection
          - tuntap: synchronize through tfiles array instead of tun->numqueues
          - isdn: bas_gigaset: use usb_fill_int_urb() properly
          - tipc: fix hanging clients using poll with EPOLLOUT flag
          - [ppc64el] book3s/64: check for NULL pointer in pgd_alloc()
          - [ppc64el] powernv/idle: Restore IAMR after idle
          - [x86] PCI: hv: Fix a memory leak in hv_eject_device_work()
          - [x86] PCI: hv: Add hv_pci_remove_slots() when we unload the driver
          - [x86] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if
            necessary
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.45
          - locking/rwsem: Prevent decrement of reader count before increment
          - [x86] speculation/mds: Revert CPU buffer clear on double fault exit
          - [x86] speculation/mds: Improve CPU buffer clear documentation
          - objtool: Fix function fallthrough detection
          - [arm64] dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
          - [armhf] dts: exynos: Fix interrupt for shared EINTs on Exynos5260
          - [armhf] dts: exynos: Fix audio (microphone) routing on Odroid XU3
          - [arm64] mmc: sdhci-of-arasan: Add DTS property to disable DCMDs.
          - [armhf] exynos: Fix a leaked reference by adding missing of_node_put
          - [armhf] power: supply: axp288_charger: Fix unchecked return value
          - [armhf,arm64] power: supply: axp288_fuel_gauge: Add ACEPC T8 and T11 mini
            PCs to the blacklist
          - [arm64] mmap: Ensure file offset is treated as unsigned
          - [arm64] arch_timer: Ensure counter register reads occur with seqlock held
          - [arm64] compat: Reduce address limit
          - [arm64] Clear OSDLR_EL1 on CPU boot
          - [arm64] Save and restore OSDLR_EL1 across suspend/resume
          - [x96] sched: Save [ER]FLAGS on context switch
          - crypto: salsa20 - don't access already-freed walk.iv
          - crypto: chacha20poly1305 - set cra_name correctly
          - [x86] crypto: ccp - Do not free psp_master when PLATFORM_INIT fails
          - [ppc64el] crypto: vmx - fix copy-paste error in CTR mode
          - crypto: skcipher - don't WARN on unprocessed data after slow walk step
          - crypto: crct10dif-generic - fix use via crypto_shash_digest()
          - [x86] crypto: crct10dif-pcl - fix use via crypto_shash_digest()
          - [arm64] crypto: gcm-aes-ce - fix no-NEON fallback code
          - crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
          - [armhf,arm64] crypto: aes-neonbs - don't access already-freed walk.iv
          - mmc: core: Fix tag set memory leak
          - ALSA: line6: toneport: Fix broken usage of timer for delayed execution
          - ALSA: usb-audio: Fix a memory leak bug
          - ALSA: hda/hdmi - Read the pin sense from register when repolling
          - ALSA: hda/hdmi - Consider eld_valid when reporting jack event
          - ALSA: hda/realtek - EAPD turn on later
          - ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14)
          - [armhf,arm64] ASoC: max98090: Fix restore of DAPM Muxes
          - ASoC: codec: hdac_hdmi add device_link to card device
          - [arm64] bpf: remove prefetch insn in xadd mapping
          - mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
            addresses
          - mm/hugetlb.c: don't put_page in lock of hugetlb_lock
          - hugetlb: use same fault hash key for shared and private mappings
          - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
          - userfaultfd: use RCU to free the task struct when fork fails
          - ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
          - [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
          - mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
          - tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
          - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
          - jbd2: check superblock mapped prior to committing
          - ext4: make sanity check in mballoc more strict
          - ext4: ignore e_value_offs for xattrs with value-in-ea-inode
          - ext4: avoid drop reference to iloc.bh twice
          - ext4: fix use-after-free race with debug_want_extra_isize
          - ext4: actually request zeroing of inode table after grow
          - ext4: fix ext4_show_options for file systems w/o journal
          - btrfs: Check the first key and level for cached extent buffer
          - btrfs: Correctly free extent buffer in case
            btree_read_extent_buffer_pages fails
          - Btrfs: send, flush dellaloc in order to avoid data loss
          - Btrfs: do not start a transaction during fiemap
          - Btrfs: do not start a transaction at iterate_extent_inodes()
          - bcache: fix a race between cache register and cacheset unregister
          - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
          - ipmi:ssif: compare block number correctly for multi-part return messages
          - crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
          - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
            into workqueue when umount
          - ext4: fix data corruption caused by overlapping unaligned and aligned IO
          - ext4: fix use-after-free in dx_release()
          - ext4: avoid panic during forced reboot due to aborted journal
          - [x86] ALSA: hda/realtek - Corrected fixup for System76 Gazelle (gaze14)
          - ALSA: hda/realtek - Fixup headphone noise via runtime suspend
          - [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal
            microphone bug
          - jbd2: fix potential double free
          - [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes
          - [x86] KVM: lapic: Busy wait for timer to expire when using hv_timer
          - xen/pvh: set xen_domain_type to HVM in xen_pvh_init
          - libnvdimm/namespace: Fix label tracking error
          - iov_iter: optimize page_copy_sane()
          - pstore: Centralize init/exit routines
          - pstore: Allocate compression during late_initcall()
          - pstore: Refactor compression initialization
          - ext4: don't update s_rev_level if not required
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.46
          - ipv6: fix src addr routing with the exception table
          - ipv6: prevent possible fib6 leaks
          - net: Always descend into dsa/
          - net: avoid weird emergency message
          - net/mlx4_core: Change the error print to info print
          - net: test nouarg before dereferencing zerocopy pointers
          - net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
          - nfp: flower: add rcu locks when accessing netdev for tunnels
          - ppp: deflate: Fix possible crash in deflate_init
          - rtnetlink: always put IFLA_LINK for links with a link-netnsid
          - tipc: switch order of device registration to fix a crash
          - vsock/virtio: free packets during the socket release
          - vsock/virtio: Initialize core virtio vsock before registering the driver
          - net/mlx5: Imply MLXFW in mlx5_core
          - net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled
          - stm class: Fix channel free in stm output free path
          - stm class: Fix channel bitmap on 32-bit systems
          - brd: re-enable __GFP_HIGHMEM in brd_insert_page()
          - proc: prevent changes to overridden credentials
          - Revert "MD: fix lock contention for flush bios"
          - md: batch flush requests.
          - md: add mddev->pers to avoid potential NULL pointer dereference
          - dcache: sort the freeing-without-RCU-delay mess for good.
          - [x86] intel_th: msu: Fix single mode with IOMMU
          - p54: drop device reference count if fails to enable device
          - of: fix clang -Wunsequenced for be32_to_cpu()
          - cifs: fix strcat buffer overflow and reduce raciness in
            smb21_set_oplock_level()
          - [armhf] phy: ti-pipe3: fix missing bit-wise or operator when assigning
            val
          - NFS4: Fix v4.0 client state corruption when mount
          - PNFS fallback to MDS if no deviceid found
          - [arm64] clk: hi3660: Mark clk_gate_ufs_subsys as critical
          - [armhf,arm64] clk: tegra: Fix PLLM programming on Tegra124+ when PMC
            overrides divider
          - [arm64] clk: rockchip: fix wrong clock definitions for rk3328
          - udlfb: delete the unused parameter for dlfb_handle_damage
          - udlfb: fix sleeping inside spinlock
          - udlfb: introduce a rendering mutex
          - fuse: fix writepages on 32bit
          - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
          - ovl: fix missing upper fs freeze protection on copy up for ioctl
          - [armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
          - ceph: flush dirty inodes before proceeding with remount
          - [amd64] Add gap to int3 to allow for call emulation
          - [amd64] Allow breakpoints to emulate call instructions
          - [amd64] ftrace: Emulate call function while updating in breakpoint
            handler
          - tracing: Fix partial reading of trace event's id file
          - [armhf,arm64] memory: tegra: Fix integer overflow on tick value
            calculation
          - [x86] perf intel-pt: Fix instructions sampling rate
          - [x86] perf intel-pt: Fix improved sample timestamp
          - [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches
          - fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types
          - PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
          - PCI: Mark Atheros AR9462 to avoid bus reset
          - PCI: Init PCIe feature bits for managed host bridge alloc
          - PCI/AER: Change pci_aer_init() stub to return void
          - PCI: Factor out pcie_retrain_link() function
          - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
          - dm cache metadata: Fix loading discard bitset
          - dm zoned: Fix zone report handling
          - dm delay: fix a crash when invalid device is specified
          - dm integrity: correctly calculate the size of metadata area
          - dm mpath: always free attached_handler_name in parse_path()
          - fuse: Add FOPEN_STREAM to use stream_open()
          - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
          - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
          - vti4: ipip tunnel deregistration fixes.
          - xfrm: clean up xfrm protocol checks
          - esp4: add length check for UDP encapsulation
          - xfrm: Honor original L3 slave device in xfrmi policy lookup
          - xfrm4: Fix uninitialized memory read in _decode_session4
          - [armhf,arm64] clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0)
          - securityfs: fix use-after-free on symlink traversal
          - apparmorfs: fix use-after-free on symlink traversal
          - PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored
          - [x86] kvm: hyper-v: deal with buggy TLB flush requests from WS2012
          - mac80211: Fix kernel panic due to use of txq after free
          - net: ieee802154: fix missing checks for regmap_update_bits
          - [armhf,arm64] KVM: Ensure vcpu target is unset on reset failure
          - bpf: Fix preempt_enable_no_resched() abuse
          - qmi_wwan: new Wistron, ZTE and D-Link devices
          - iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
          - sched/cpufreq: Fix kobject memleak
          - [x86] mm/mem_encrypt: Disable all instrumentation for early SME setup
          - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
          - perf bench numa: Add define for RUSAGE_THREAD if not present
          - [x86] perf/intel: Fix race in intel_pmu_disable_event()
          - md/raid: raid5 preserve the writeback action after the parity check
          - driver core: Postpone DMA tear-down until after devres release for probe
            failure
          - bpf: relax inode permission check for retrieving bpf program
          - bpf: add map_lookup_elem_sys_only for lookups from syscall side
          - bpf, lru: avoid messing with eviction heuristics upon syscall lookup
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.47
          - [x86] Hide the int3_emulate_call/jmp functions from UML
          - ext4: do not delete unlinked inode from orphan list on failed truncate
          - ext4: wait for outstanding dio during truncate in nojournal mode
          - f2fs: Fix use of number of devices
          - [x86] KVM: fix return value for reserved EFER
          - bio: fix improper use of smp_mb__before_atomic()
          - sbitmap: fix improper use of smp_mb__before_atomic()
          - Revert "scsi: sd: Keep disk read-only when re-reading partition"
          - [ppc64el] crypto: vmx - CTR: always increment IV as quadword
          - [arm*] mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold
            time problem
          - [arm*] mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time
            problem
          - [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID
          - libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
          - [arm64] kernel: kaslr: reduce module randomization range to 2 GB
          - [arm64] iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
          - gfs2: Fix sign extension bug in gfs2_update_stats
          - btrfs: don't double unlock on error in btrfs_punch_hole
          - Btrfs: do not abort transaction at btrfs_update_root() after failure to
            COW path
          - Btrfs: avoid fallback to transaction commit during fsync of files with
            holes
          - Btrfs: fix race between ranged fsync and writeback of adjacent ranges
          - btrfs: sysfs: Fix error path kobject memory leak
          - btrfs: sysfs: don't leak memory when failing add fsid
          - udlfb: fix some inconsistent NULL checking
          - fbdev: fix divide error in fb_var_to_videomode
          - NFSv4.2 fix unnecessary retry in nfs4_copy_file_range
          - NFSv4.1 fix incorrect return value in copy_file_range
          - bpf: add bpf_jit_limit knob to restrict unpriv allocations
          - [arm64] errata: Add workaround for Cortex-A76 erratum #1463225
          - btrfs: honor path->skip_locking in backref code
          - ovl: relax WARN_ON() for overlapping layers use case
          - fbdev: fix WARNING in __alloc_pages_nodemask bug
          - media: cpia2: Fix use-after-free in cpia2_exit
          - media: serial_ir: Fix use-after-free in serial_ir_init_module
          - media: vb2: add waiting_in_dqbuf flag
          - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
          - ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
          - bpf: devmap: fix use-after-free Read in __dev_map_entry_free
          - batman-adv: mcast: fix multicast tt/tvlv worker locking
          - at76c50x-usb: Don't register led_trigger if usb_register_driver failed
          - acct_on(): don't mess with freeze protection
          - gfs2: Fix lru_count going negative
          - cxgb4: Fix error path in cxgb4_init_module
          - NFS: make nfs_match_client killable
          - IB/hfi1: Fix WQ_MEM_RECLAIM warning
          - gfs2: Fix occasional glock use-after-free
          - mmc: core: Verify SD bus width
          - [arm64] dmaengine: tegra210-dma: free dma controller in remove()
          - net: ena: gcc 8: fix compilation warning
          - [x86] hv_netvsc: fix race that may miss tx queue wakeup
          - Bluetooth: Ignore CC events not matching the last HCI command
          - [x86] ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE
          - [armhf,arm64] usb: dwc2: gadget: Increase descriptors count for ISOC's
          - [armhf,arm64] usb: dwc3: move synchronize_irq() out of the spinlock
            protected block
          - ASoC: hdmi-codec: unlock the device on startup errors
          - [ppc64el] perf: Return accordingly on invalid chip-id in
          - [ppc64el] boot: Fix missing check of lseek() return value
          - [ppc64el] perf: Fix loop exit condition in nest_imc_event_init
          - [armhf] ASoC: imx: fix fiq dependencies
          - [amd64] spi: pxa2xx: fix SCR (divisor) calculation
          - brcm80211: potential NULL dereference in
            brcmf_cfg80211_vndr_cmds_dcmd_handler()
          - ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
          - drm/nouveau/bar/nv50: ensure BAR is mapped
          - [armel,armhf] vdso: Remove dependency with the arch_timer driver
            internals
          - [ppc64el] watchdog: Use hrtimers for per-CPU heartbeat
          - sched/cpufreq: Fix kobject memleak
          - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
          - scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
          - scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in
            tcm_qla2xxx_close_session()
          - scsi: qla2xxx: Fix hardirq-unsafe locking
          - [x86] modules: Avoid breaking W^X while loading modules
          - Btrfs: fix data bytes_may_use underflow with fallocate due to failed
            quota reserve
          - btrfs: fix panic during relocation after ENOSPC before writeback happens
          - btrfs: Don't panic when we can't find a root key
          - iwlwifi: pcie: don't crash on invalid RX interrupt
          - scsi: qedi: Abort ep termination if offload not scheduled
          - [s390x] kexec_file: Fix detection of text segment in ELF loader
          - sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs
          - w1: fix the resume command API
          - [s390x] qeth: address type mismatch warning
          - [armhf,arm64] dmaengine: pl330: _stop: clear interrupt status
          - mac80211/cfg80211: update bss channel on channel switch
          - mwifiex: prevent an array overflow
          - rsi: Fix NULL pointer dereference in kmalloc
          - nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE
          - nvme-rdma: fix a NULL deref when an admin connect times out
          - [armhf,arm64] crypto: sun4i-ss - Fix invalid calculation of hash end
          - bcache: avoid potential memleak of list of journal_replay(s) in the
            CACHE_SYNC branch of run_cache_set
          - bcache: return error immediately in bch_journal_replay()
          - bcache: fix failure in journal relplay
          - bcache: add failure check to run_cache_set() for journal replay
          - bcache: avoid clang -Wunintialized warning
          - RDMA/cma: Consider scope_id while binding to ipv6 ll address
          - vfio-ccw: Do not call flush_workqueue while holding the spinlock
          - vfio-ccw: Release any channel program when releasing/removing vfio-ccw
            mdev
          - [x86] mm: Remove in_nmi() warning from 64-bit implementation of
            vmalloc_fault()
          - mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC
            versions
          - Bluetooth: hci_qca: Give enough time to ROME controller to bootup.
          - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
          - [armhf] pinctrl: samsung: fix leaked of_node references
          - [armhf] clk: rockchip: undo several noc and special clocks as critical on
            rk3288
          - [arm64] perf/arm-cci: Remove broken race mitigation
          - media: au0828: stop video streaming only when last user stops
          - audit: fix a memory leak bug
          - media: au0828: Fix NULL pointer dereference in
            au0828_analog_stream_enable()
          - media: pvrusb2: Prevent a buffer overflow
          - block: fix use-after-free on gendisk
          - [ppc64el] numa: improve control of topology updates
          - [ppc64el] Fix booting large kernels with STRICT_KERNEL_RWX
          - random: fix CRNG initialization when random.trust_cpu=1
          - random: add a spinlock_t to struct batched_entropy
          - cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
          - sched/core: Check quota and period overflow at usec to nsec conversion
          - sched/rt: Check integer overflow at usec to nsec conversion
          - sched/core: Handle overflow in cpu_shares_write_u64
          - [arm*] staging: vc04_services: handle kzalloc failure
          - [arm64] drm/msm: a5xx: fix possible object reference leak
          - irq_work: Do not raise an IPI when queueing work on the local CPU
          - [x86] thunderbolt: Take domain lock in switch sysfs attribute callbacks
          - [s390x] qeth: handle error from qeth_update_from_chp_desc()
          - USB: core: Don't unbind interfaces following device reset failure
          - [amd64] irq: Limit IST stack overflow check to #DB stack
          - [armhf] drm: etnaviv: avoid DMA API warning when importing buffers
          - [armhf,arm64] phy: sun4i-usb: Make sure to disable PHY0 passby for
            peripheral mode
          - i40e: Able to add up to 16 MAC filters on an untrusted VF
          - i40e: don't allow changes to HW VLAN stripping on active port VLANs
          - ACPI/IORT: Reject platform device creation on NUMA node mapping failure
          - [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME
          - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
          - [x86] perf/msr: Add Icelake support
          - [x86] perf/intel/rapl: Add Icelake support
          - [x86] perf/intel/cstate: Add Icelake support
          - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
          - hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
          - hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
          - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
          - hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
          - scsi: libsas: Do discovery on empty PHY to update PHY info
          - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
          - [armhf,arm64] mmc_spi: add a status check for spi_sync_locked
          - drm/amdgpu: fix old fence check in amdgpu_fence_emit
          - PM / core: Propagate dev->power.wakeup_path when no callbacks
          - [armhf] clk: rockchip: Fix video codec clocks on rk3288
          - [armhf] clk: rockchip: Make rkpwm a critical clock on rk3288
          - [s390x] zcrypt: initialize variables before_use
          - [x86] microcode: Fix the ancient deprecated microcode loading method
          - [s390x] mm: silence compiler warning when compiling without CONFIG_PGSTE
          - [s390x] cio: fix cio_irb declaration
          - qmi_wwan: Add quirk for Quectel dynamic config
          - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
          - rtlwifi: fix a potential NULL pointer dereference
          - mwifiex: Fix mem leak in mwifiex_tm_cmd
          - brcmfmac: fix missing checks for kmemdup
          - b43: shut up clang -Wuninitialized variable warning
          - brcmfmac: convert dev_init_lock mutex to completion
          - brcmfmac: fix WARNING during USB disconnect in case of unempty psq
          - brcmfmac: fix race during disconnect when USB completion is in progress
          - brcmfmac: fix Oops when bringing up interface during USB disconnect
          - [arm64] rtc: xgene: fix possible race condition
          - rtlwifi: fix potential NULL pointer dereference
          - scsi: ufs: Fix regulator load and icc-level configuration
          - scsi: ufs: Avoid configuring regulator with undefined voltage range
          - [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put
          - wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext
          - [x86] uaccess, signal: Fix AC=1 bloat
          - [amd64] ia32: Fix ia32_restore_sigcontext() AC leak
          - [x86] uaccess: Fix up the fixup
          - chardev: add additional check for minor range overlap
          - [arm64] RDMA/hns: Fix bad endianess of port_pd variable
          - HID: core: move Usage Page concatenation to Main item
          - [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing
            of_node_put
          - cxgb3/l2t: Fix undefined behaviour
          - HID: logitech-hidpp: change low battery level threshold from 31 to 30
            percent
          - [armhf] spi: tegra114: reset controller on probe
          - kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
          - [armhf] media: wl128x: prevent two potential buffer overflows
          - media: gspca: Kill URBs on USB device disconnect
          - efifb: Omit memory map check on legacy boot
          - [x86] thunderbolt: property: Fix a missing check of kzalloc
          - [x86] thunderbolt: Fix to check the return value of kmemdup
          - timekeeping: Force upper bound for setting CLOCK_REALTIME
          - scsi: qedf: Add missing return in qedf_post_io_req() in the fcport
            offload check
          - virtio_console: initialize vtermno value for ports
          - tty: ipwireless: fix missing checks for ioremap
          - overflow: Fix -Wtype-limits compilation warnings
          - [x86] mce: Fix machine_check_poll() tests for error types
          - rcutorture: Fix cleanup path for invalid torture_type strings
          - [x86] mce: Handle varying MCA bank counts
          - rcuperf: Fix cleanup path for invalid perf_type strings
          - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
          - scsi: qla4xxx: avoid freeing unallocated dma memory
          - scsi: lpfc: avoid uninitialized variable warning
          - selinux: avoid uninitialized variable warning
          - batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
          - dmaengine: tegra210-adma: use devm_clk_*() helpers
          - [armhf] hwrng: omap - Set default quality
          - [x86] thunderbolt: Fix to check return value of ida_simple_get
          - [x86] thunderbolt: Fix to check for kmemdup failure
          - drm/amd/display: fix releasing planes when exiting odm
          - [x86] thunderbolt: property: Fix a NULL pointer dereference
          - e1000e: Disable runtime PM on CNP+
          - igb: Exclude device from suspend direct complete optimization
          - media: dvbsky: Avoid leaking dvb frontend
          - drm/amd/display: Fix Divide by 0 in memory calculations
          - drm/amd/display: Set stream->mode_changed when connectors change
          - scsi: ufs: fix a missing check of devm_reset_control_get
          - media: gspca: do not resubmit URBs when streaming has stopped
          - media: go7007: avoid clang frame overflow warning with KASAN
          - scsi: lpfc: Fix FDMI manufacturer attribute value
          - scsi: lpfc: Fix fc4type information for FDMI
          - media: saa7146: avoid high stack usage with clang
          - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
          - [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers
          - [armhf] drm/omap: dsi: Fix PM for display blank with paired dss_pll calls
          - [armhf] spi: imx: stop buffer overflow in RX FIFO flush
          - spi: Fix zero length xfer bug
          - [armhf] ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
          - drm/drv: Hold ref on parent device during drm_device lifetime
          - drm: Wake up next in drm_read() chain if we are forced to putback the
            event
          - [s390x] vfio-ccw: Prevent quiesce function going into an infinite loop
          - NFS: Fix a double unlock from nfs_match,get_client
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.48
          - bonding/802.3ad: fix slave link initialization transition states
          - cxgb4: offload VLAN flows regardless of VLAN ethtype
          - ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
          - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
          - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
          - ipv6: Fix redirect with VRF
          - llc: fix skb leak in llc_build_and_send_ui_pkt()
          - [armhf,arm64] net: dsa: mv88e6xxx: fix handling of upper half of
            STATS_TYPE_PORT
          - net-gro: fix use-after-free read in napi_gro_frags()
          - [armhf,arm64] net: mvneta: Fix err code path of probe
          - [armhf,arm64] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue
            value
          - net: phy: marvell10g: report if the PHY fails to boot firmware
          - net: sched: don't use tc_action->order during action dump
          - [armhf,arm64] net: stmmac: fix reset gpio free missing
          - usbnet: fix kernel crash after disconnect
          - net/mlx5: Avoid double free in fs init error unwinding path
          - tipc: Avoid copying bytes beyond the supplied data
          - net/mlx5: Allocate root ns memory using kzalloc to match kfree
          - net/mlx5e: Disable rxhash when CQE compress is enabled
          - [armhf,arm64] net: stmmac: dma channel control register need to be init
            first
          - bnxt_en: Fix aggregation buffer leak under OOM condition.
          - [ppc64el] crypto: vmx - ghash: do nosimd fallback manually
          - include/linux/compiler*.h: define asm_volatile_goto
          - compiler.h: give up __compiletime_assert_fallback()
          - jump_label: move 'asm goto' support test to Kconfig
          - tipc: fix modprobe tipc failed after switch order of device registration
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.49
          - include/linux/bitops.h: sanitize rotate primitives
          - xhci: update bounce buffer with correct sg num
          - xhci: Use %zu for printing size_t type
          - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
          - usb: xhci: avoid null pointer deref when bos field is NULL
          - usbip: usbip_host: fix BUG: sleeping function called from invalid context
          - usbip: usbip_host: fix stub_dev lock context imbalance regression
          - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
          - USB: sisusbvga: fix oops in error path of sisusb_probe (CVE-2019-15219)
          - USB: Add LPM quirk for Surface Dock GigE adapter
          - USB: rio500: refuse more than one device at a time (CVE-2019-15212)
          - USB: rio500: fix memory leak in close after disconnect
          - media: usb: siano: Fix general protection fault in smsusb
            (CVE-2019-15218)
          - media: usb: siano: Fix false-positive "uninitialized variable" warning
          - media: smsusb: better handle optional alignment
          - brcmfmac: fix NULL pointer derefence during USB disconnect
          - [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from
            port_remove
          - [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs
            (only sdevs)
          - tracing: Avoid memory leak in predicate_parse()
          - Btrfs: fix wrong ctime and mtime of a directory after log replay
          - Btrfs: fix race updating log root item during fsync
          - Btrfs: fix fsync not persisting changed attributes of a directory
          - Btrfs: incremental send, fix file corruption when no-holes feature is
            enabled
          - [s390x] crypto: fix gcm-aes-s390 selftest failures
          - [s390x] crypto: fix possible sleep during spinlock aquired
          - [ppc64el] KVM: Book3S HV: XIVE: Do not clear IRQ data of passthrough
            interrupts
          - [ppc64el] perf: Fix MMCRA corruption by bhrb_filter
          - ALSA: line6: Assure canceling delayed work at disconnection
            (CVE-2019-15223)
          - ALSA: hda/realtek - Set default power save node to 0
          - [s390x] KVM: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
          - drm/nouveau/i2c: Disable i2c bus access after ->fini()
          - [arm64] tty: serial: msm_serial: Fix XON/XOFF
          - memcg: make it work on sparse non-0-node systems
          - kernel/signal.c: trace_signal_deliver when signal_group_exit
          - [arm64] Fix the arm64_personality() syscall wrapper redirection
          - vt/fbcon: deinitialize resources in visual_init() after failed memory
            allocation
          - [arm*] staging: vc04_services: prevent integer overflow in
            create_pagelist()
          - [x86] staging: wlan-ng: fix adapter initialization failure
          - cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
          - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
            ENOMEM
          - Revert "lockd: Show pid of lockd for remote locks"
          - [armhf,arm64] drm/tegra: gem: Fix CPU-cache maintenance for BO's
            allocated using get_pages()
          - [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master
            set
          - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY clock initialization
          - [armhf,arm64] drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz
          - [armhf,arm64] drm/rockchip: shutdown drm subsystem on shutdown
          - drm/lease: Make sure implicit planes are leased
          - [x86] ftrace: Do not call function graph from dynamic trampolines
          - [x86] ftrace: Set trampoline pages as executable
          - [x86] kprobes: Set instruction page as executable
          - scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid
            uninitialized variable warning")
          - media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.50
          - ethtool: fix potential userspace buffer overflow
          - Fix memory leak in sctp_process_init
          - ipv4: not do cache for local delivery if bc_forwarding is enabled
          - ipv6: fix the check before getting the cookie in rt6_get_cookie
          - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
          - [armhf] net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
          - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
          - [armhf,arm64] net: mvpp2: Use strscpy to handle stat strings
          - net: rds: fix memory leak in rds_ib_flush_mr_pool
          - net: sfp: read eeprom in maximum 16 byte increments
          - packet: unconditionally free po->rollover
          - pktgen: do not sleep with the thread lock held.
          - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
          - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
          - rcu: locking and unlocking need to always be at least barriers
          - NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
          - NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
          - fuse: fallocate: fix return with locked inode
          - pstore: Remove needless lock during console writes
          - pstore: Convert buf_lock to semaphore
          - pstore: Set tfm to NULL on free_buf_for_compression
          - pstore/ram: Run without kernel crash dump region
          - [x86] power: Fix 'nosmt' vs hibernation triple fault during resume
          - [s390x] mm: fix address space detection in exception handling
          - xen-blkfront: switch kcalloc to kvcalloc for large array allocation
          - [ppc64el] genwqe: Prevent an integer overflow in the ioctl
          - test_firmware: Use correct snprintf() limit
          - [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels
          - [arm64] drm/msm: fix fb references in async update
          - drm: add non-desktop quirk for Valve HMDs
          - drm: add non-desktop quirks to Sensics and OSVR headsets.
          - drm/amdgpu/psp: move psp version specific function pointers to early_init
          - drm/radeon: prefer lower reference dividers
          - drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
          - [x86] drm/i915: Fix I915_EXEC_RING_MASK
          - [x86] drm/i915/fbc: disable framebuffer compression on GeminiLake
          - [x86] drm/i915: Maintain consistent documentation subsection ordering
          - drm: don't block fb changes for async plane updates
          - [x86] drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack
          - TTY: serial_core, add ->install
          - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
          - ethtool: check the return value of get_regs_len
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.51
          - fs/fat/file.c: issue flush after the writeback of FAT
          - sysctl: return -EINVAL if val violates minmax
          - ipc: prevent lockup on alloc_msg and free_msg
          - [armhf] prevent tracing IPI_CPU_BACKTRACE
          - hugetlbfs: on restore reserve error path retain subpool reservation
          - mem-hotplug: fix node spanned pages when we have a node with only
            ZONE_MOVABLE
          - mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
          - initramfs: free initrd memory if opening /initrd.image fails
          - mm/cma.c: fix the bitmap status to show failed allocation reason
          - mm: page_mkclean vs MADV_DONTNEED race
          - mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
          - mm/slab.c: fix an infinite loop in leaks_show()
          - kernel/sys.c: prctl: fix false positive in validate_prctl_map()
          - drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
          - [x86] mfd: intel-lpss: Set the device in reset state when init
          - drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
            configuration
          - [armhf] mfd: twl6040: Fix device init errors for ACCCTL register
          - [x86] perf/intel: Allow PEBS multi-entry in watermark mode
          - drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd
            when encoders change
          - [arm64] drm/bridge: adv7511: Fix low refresh rate selection
          - objtool: Don't use ignore flag for fake jumps
          - drm/nouveau/kms/gv100-: fix spurious window immediate interlocks
          - bpf: fix undefined behavior in narrow load handling
          - [arm64] pwm: meson: Use the spin-lock only to protect register
            modifications
          - ntp: Allow TAI-UTC offset to be set to zero
          - f2fs: fix to avoid panic in do_recover_data()
          - f2fs: fix to avoid panic in f2fs_inplace_write_data()
          - f2fs: fix to avoid panic in f2fs_remove_inode_page()
          - f2fs: fix to do sanity check on free nid
          - f2fs: fix to clear dirty inode in error path of f2fs_iget()
          - f2fs: fix to avoid panic in dec_valid_block_count()
          - f2fs: fix to use inline space only if inline_xattr is enable
          - f2fs: fix to do sanity check on valid block count of segment
          - f2fs: fix to do checksum even if inode page is uptodate
          - percpu: remove spurious lock dependency between percpu and sched
          - configfs: fix possible use-after-free in configfs_register_group
          - [armhf,arm64] PCI: dwc: Free MSI in dw_pcie_host_init() error path
          - [armhf,arm64] PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi()
          - ovl: do not generate duplicate fsnotify events for "fake" path
          - mmc: mmci: Prevent polling for busy detection in IRQ context
          - netfilter: nf_flow_table: fix missing error check for
            rhashtable_insert_fast
          - netfilter: nf_conntrack_h323: restore boundary check correctness
          - [mips*] Make sure dt memory regions are valid
          - netfilter: nf_tables: fix base chain stat rcu_dereference usage
          - [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values
          - watchdog: fix compile time error of pretimeout governors
          - blk-mq: move cancel of requeue_work into blk_mq_release
          - [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly
          - nvme-pci: unquiesce admin queue on shutdown
          - nvme-pci: shutdown on timeout during deletion
          - netfilter: nf_flow_table: check ttl value in flow offload data path
          - netfilter: nf_flow_table: fix netdev refcnt leak
          - ALSA: hda - Register irq handler after the chip initialization
          - nvmem: core: fix read buffer in place
          - [armhf,arm64] nvmem: sunxi_sid: Support SID on A83T and H5
          - fuse: retrieve: cap requested size to negotiated max_write
          - nfsd: allow fh_want_write to be called twice
          - nfsd: avoid uninitialized variable warning
          - vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
          - [armhf,arm64] iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel
          - [x86] net: thunderbolt: Unregister ThunderboltIP protocol handler when
            suspending
          - [x86] PCI: Fix PCI IRQ routing table memory leak
          - i40e: Queues are reserved despite "Invalid argument" error
          - platform/chrome: cros_ec_proto: check for NULL transfer function
          - [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
          - [armhf] soc: rockchip: Set the proper PWM for rk3288
          - [armhf] dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
          - [armhf] dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
          - [armhf] dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
          - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
          - [armhf] dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA
          - [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
          - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
          - [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
          - [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove
            paths
          - drm/amd/display: Use plane->color_space for dpp if specified
          - [armhf] OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using
            it
          - [x86] platform: intel_pmc_ipc: adding error handling
          - [arm64] net: hns3: return 0 and print warning when hit duplicate MAC
          - scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags
          - [x86] video: hgafb: fix potential NULL pointer dereference
          - block, bfq: increase idling for weight-raised queues
          - [arm64] PCI: xilinx: Check for __get_free_pages() failure
          - ice: Add missing case in print_link_msg for printing flow control
          - [x86] dmaengine: idma64: Use actual device for DMA transfers
          - [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs
          - [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8
            regulators on Arndale Octa
          - pwm: Fix deadlock warning when removing PWM device
          - [armhf] exynos: Fix undefined instruction during Exynos5422 resume
          - [x86] usb: typec: fusb302: Check vconn is off when we start toggling
          - soc: renesas: Identify R-Car M3-W ES1.3
          - percpu: do not search past bitmap when allocating an area
          - ovl: check the capability before cred overridden
          - ovl: support stacked SEEK_HOLE/SEEK_DATA
          - [arm*] drm/vc4: fix fb references in async update
          - ALSA: seq: Cover unsubscribe_port() in list_mutex
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.52
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.53
          - drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
          - nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
          - HID: multitouch: handle faulty Elo touch device
          - HID: wacom: Don't set tool type until we're in range
          - HID: wacom: Don't report anything prior to the tool entering range
          - HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
          - HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
          - HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
          - ALSA: oxfw: allow PCM capture for Stanton SCS.1m
          - ALSA: hda/realtek - Update headset mode for ALC256
          - ALSA: firewire-motu: fix destruction of data for isochronous resources
          - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
          - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
          - fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
          - mm/vmscan.c: fix trying to reclaim unevictable LRU page
          - signal/ptrace: Don't leak unitialized kernel memory with
            PTRACE_PEEK_SIGINFO
          - ptrace: restore smp_rmb() in __ptrace_may_access()
          - [armhf,arm64] iommu/arm-smmu: Avoid constant zero in TLBI writes
          - bcache: fix stack corruption by PRECEDING_KEY()
          - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached
          - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
          - [x86] drm/i915/sdvo: Implement proper HDMI audio support for SDVO
          - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
          - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
          - f2fs: fix to avoid accessing xattr across the boundary
          - scsi: qedi: remove memset/memcpy to nfunc and use func instead
            (CVE-2019-15090)
          - scsi: qedi: remove set but not used variables 'cdev' and 'udev'
          - scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show
          - scsi: lpfc: add check for loss of ndlp when sending RRQ
          - [arm64] mm: Inhibit huge-vmap with ptdump
          - nvme: fix srcu locking on error return in nvme_get_ns_from_disk
          - nvme: remove the ifdef around nvme_nvm_ioctl
          - nvme: merge nvme_ns_ioctl into nvme_ioctl
          - nvme: release namespace SRCU protection before performing controller
            ioctls
          - nvme: fix memory leak for power latency tolerance
          - [x86] platform: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems
            DMI table
          - [x86] platform: pmc_atom: Add several Beckhoff Automation boards to
            critclk_systems DMI table
          - scsi: bnx2fc: fix incorrect cast to u64 on shift operation
          - libnvdimm: Fix compilation warnings with W=1
          - tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts
          - usbnet: ipheth: fix racing condition
          - [armhf,arm64] KVM: Move cc/it checks under hyp's Makefile to avoid
            instrumentation
          - [x86] KVM: pmu: mask the result of rdpmc according to the width of the
            counters
          - [x86] KVM: pmu: do not mask the value that is written to fixed PMUs
          - [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
          - [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to
            an invalid read
          - [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
          - [armhf,arm64] usb: dwc2: Fix DMA cache alignment issues
          - [armhf,arm64] usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam
            regression)
          - USB: Fix chipmunk-like voice when using Logitech C270 for recording
            audio.
          - USB: usb-storage: Add new ID to ums-realtek
          - USB: serial: pl2303: add Allied Telesis VT-Kit3
          - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
          - USB: serial: option: add Telit 0x1260 and 0x1261 compositions
          - timekeeping: Repair ktime_get_coarse*() granularity
          - [x86] microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
          - [x86] mm/KASLR: Compute the size of the vmemmap section properly
          - [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled
          - drm/edid: abstract override/firmware EDID retrieval
          - drm: add fallback override/firmware EDID modes workaround
          - [armhf] rtc: pcf8523: don't return invalid date when battery is low
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.54
          - ax25: fix inconsistent lock state in ax25_destroy_timer
          - be2net: Fix number of Rx queues used for flow hashing
          - [x86] hv_netvsc: Set probe mode to sync
          - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
          - lapb: fixed leak of control-blocks.
          - neigh: fix use-after-free read in pneigh_get_next
          - net: openvswitch: do not free vport if register_netdevice() is failed.
          - sctp: Free cookie before we memdup a new one
          - tipc: purge deferredq list for each grp member in tipc_group_delete
          - vsock/virtio: set SOCK_DONE on peer shutdown
          - net/mlx5: Avoid reloading already removed devices
          - [armhf,arm64] net: mvpp2: prs: Fix parser range for VID filtering
          - [armhf,arm64] net: mvpp2: prs: Use the correct helpers when removing all
            VID filters
          - [arm*] Staging: vc04_services: Fix a couple error codes
          - [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
          - netfilter: nf_queue: fix reinject verdict handling
          - ipvs: Fix use-after-free in ip_vs_in
          - [armhf] clk: ti: clkctrl: Fix clkdm_clk handling
          - [ppc64el] powernv: Return for invalid IMC domain
          - usb: xhci: Fix a potential null pointer dereference in
            xhci_debugfs_create_endpoint()
          - mISDN: make sure device name is NUL terminated
          - [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor
          - perf/ring_buffer: Fix exposing a temporarily decreased data_head
          - perf/ring_buffer: Add ordering to rb->nest increment
          - perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
          - [armhf,arm64] net: stmmac: update rx tail pointer register to fix rx dma
            hang issue.
          - ACPI/PCI: PM: Add missing wakeup.flags.valid checks
          - [armhf] drm/etnaviv: lock MMU while dumping core
          - net: aquantia: tx clean budget logic error
          - net: aquantia: fix LRO with FCS error
          - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
          - ALSA: hda - Force polling mode on CNL for fixing codec communication
          - configfs: Fix use-after-free when accessing sd->s_dentry
          - perf data: Fix 'strncat may truncate' build failure with recent gcc
          - perf namespace: Protect reading thread's namespace
          - [s390x] perf record: Fix s390 missing module symbol and warning for
            non-root users
          - xenbus: Avoid deadlock during suspend due to open transactions
          - [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token
            list
          - [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
          - [arm64] fix syscall_fn_t type
          - [arm64] use the correct function type in SYSCALL_DEFINE0
          - [arm64] use the correct function type for __arm64_sys_ni_syscall
          - net: phylink: ensure consistent phy interface mode
          - net: phy: dp83867: Set up RGMII TX delay
          - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
          - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
          - scsi: scsi_dh_alua: Fix possible null-ptr-deref
          - scsi: libsas: delete sas port if expander discover failed
          - ocfs2: fix error path kobject memory leak
          - coredump: fix race condition between collapse_huge_page() and core dumping
          - Abort file_remove_privs() for non-reg. files
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.55
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.56
          - tracing: Silence GCC 9 array bounds warning
          - objtool: Support per-function rodata sections
          - ovl: support the FS_IOC_FS[SG]ETXATTR ioctls
          - ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls
          - ovl: make i_ino consistent with st_ino in more cases
          - ovl: detect overlapping layers
          - ovl: don't fail with disconnected lower NFS
          - ovl: fix bogus -Wmaybe-unitialized warning
          - [s390x] jump_label: Use "jdd" constraint on gcc9
          - [s390x] ap: rework assembler functions to use unions for in/out register
            variables
          - mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning
          - mmc: core: API to temporarily disable retuning for SDIO CRC errors
          - mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
          - mmc: core: Prevent processing SDIO IRQs when the card is suspended
          - scsi: ufs: Avoid runtime suspend possibly being blocked forever
          - [armhf,arm64] usb: chipidea: udc: workaround for endpoint conflict issue
          - xhci: detect USB 3.2 capable host controllers correctly
          - usb: xhci: Don't try to recover an endpoint if port is in error state.
          - IB/hfi1: Validate fault injection opcode user input
          - IB/hfi1: Silence txreq allocation warnings
          - [x86] Input: synaptics - enable SMBus on ThinkPad E480 and E580
          - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
          - [x86] Input: silead - add MSSL0017 to acpi_device_id
          - apparmor: fix PROFILE_MEDIATES for untrusted input
          - apparmor: enforce nullbyte at end of tag string
          - brcmfmac: sdio: Disable auto-tuning around commands expected to fail
          - brcmfmac: sdio: Don't tune while the card is off
          - parport: Fix mem leak in parport_register_dev_model
          - IB/rdmavt: Fix alloc_qpn() WARN_ON()
          - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
          - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
          - IB/hfi1: Validate page aligned for a given virtual address
          - [mips*] uprobes: remove set but not used variable 'epc'
          - [armhf,arm64] net: dsa: mv88e6xxx: avoid error message on remove from
            VLAN 0
          - [arm64] net: hns: Fix loopback test failed at copper ports
          - mdesc: fix a missing-check bug in get_vdev_port_node_info()
          - [arm64] drm/arm/mali-dp: Add a loop around the second set CVAL and try 5
            times
          - [arm64] drm/arm/hdlcd: Actually validate CRTC modes
          - [arm64] drm/arm/hdlcd: Allow a bit of clock tolerance
          - nvmet: fix data_len to 0 for bdev-backed write_zeroes
          - scsi: ufs: Check that space was properly alloced in copy_query_response
          - scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
          - net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
          - [s390x] qeth: fix VLAN attribute in bridge_hostnotify udev event
          - hwmon: (core) add thermal sensors only if dev->of_node is present
          - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
          - nvme: Fix u32 overflow in the number of namespace list calculation
          - btrfs: start readahead also in seed devices
          - [armhf] can: flexcan: fix timeout when set small bitrate
          - can: purge socket error queue on sock destruct
          - [ppc64el] bpf: use unsigned division instruction for 64-bit operations
          - [armhf] imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
          - [armhf] dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values
          - [armhf] dts: am57xx-idk: Remove support for voltage switching for SD card
          - [arm64] sve: <uapi/asm/ptrace.h> should not depend on
            <uapi/linux/prctl.h>
          - [arm64] ssbd: explicitly depend on <linux/prctl.h>
          - [x86] drm/vmwgfx: Use the backdoor port if the HB port is not available
          - Bluetooth: Align minimum encryption key size for LE and BR/EDR
            connections (CVE-2019-9506)
          - Bluetooth: Fix regression with minimum encryption key size alignment
          - SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
          - cfg80211: fix memory leak of wiphy device name
          - mac80211: drop robust management frames from unknown TA
          - {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
          - mac80211: handle deauthentication/disassociation from TDLS peer
          - nl80211: fix station_info pertid memory leak
          - mac80211: Do not use stack memory with scatterlist for GMAC
          - [x86] resctrl: Don't stop walking closids when a locksetup group is found
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.57
          - perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit
            set nul
          - perf help: Remove needless use of strncpy()
          - perf header: Fix unchecked usage of strncpy()
          - [arm64] Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
          - IB/hfi1: Close PSM sdma_progress sleep window
          - 9p/xen: fix check for xenbus_read error in front_probe
          - 9p: Use a slab for allocating requests
          - 9p: embed fcall in req to round down buffer allocs
          - 9p: add a per-client fcall kmem_cache
          - 9p: rename p9_free_req() function
          - 9p: Add refcount to p9_req_t
          - 9p/rdma: do not disconnect on down_interruptible EAGAIN
          - 9p: Rename req to rreq in trans_fd
          - 9p: acl: fix uninitialized iattr access
          - 9p/rdma: remove useless check in cm_event_handler
          - 9p: p9dirent_read: check network-provided name length
          - 9p: potential NULL dereference
          - 9p/trans_fd: abort p9_read_work if req status changed
          - 9p/trans_fd: put worker reqs on destroy
          - net/9p: include trans_common.h to fix missing prototype warning.
          - qmi_wwan: Fix out-of-bounds read
          - [armhf,arm64] Revert "usb: dwc3: gadget: Clear req->needs_extra_trb flag
            on cleanup"
          - [armhf,arm64] usb: dwc3: gadget: combine unaligned and zero flags
          - [armhf,arm64] usb: dwc3: gadget: track number of TRBs per request
          - [armhf,arm64] usb: dwc3: gadget: use num_trbs when skipping TRBs on
            ->dequeue()
          - [armhf,arm64] usb: dwc3: gadget: extract dwc3_gadget_ep_skip_trbs()
          - [armhf,arm64] usb: dwc3: gadget: introduce cancelled_list
          - [armhf,arm64] usb: dwc3: gadget: move requests to cancelled_list
          - [armhf,arm64] usb: dwc3: gadget: remove wait_end_transfer
          - [armhf,arm64] usb: dwc3: gadget: Clear req->needs_extra_trb flag on
            cleanup
          - fs/proc/array.c: allow reporting eip/esp for all coredumping threads
          - mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
          - fs/binfmt_flat.c: make load_flat_shared_library() work
          - [armhf] clk: socfpga: stratix10: fix divider entry for the emac clocks
          - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails
          - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on
            !PageHuge
          - mm/page_idle.c: fix oops because end_pfn is larger than max_pfn
          - dm log writes: make sure super sector log updates are written in order
          - [x86] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
          - [x86] speculation: Allow guests to use SSBD even if host does not
          - [x86] microcode: Fix the microcode load on CPU hotplug for real
          - [x86] resctrl: Prevent possible overrun during bitmap operations
          - [x86] KVM: mmu: Allocate PAE root array when using SVM's 32-bit NPT
          - NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
          - cpu/speculation: Warn on unsupported mitigations= parameter
          - SUNRPC: Clean up initialisation of the struct rpc_rqst
          - [mips*] irqchip/mips-gic: Use the correct local interrupt map registers
          - eeprom: at24: fix unexpected timeout under high load
          - af_packet: Block execution of tasks waiting for transmit to complete in
            AF_PACKET
          - bonding: Always enable vlan tx offload
          - ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while
            loop
          - net/packet: fix memory leak in packet_set_ring()
          - net: remove duplicate fetch in sock_getsockopt
          - [armhf,arm64] net: stmmac: fixed new system time seconds value
            calculation
          - [armhf,arm64] net: stmmac: set IC bit when transmitting frames with HW
            timestamp
          - sctp: change to hold sk after auth shkey is created successfully
          - team: Always enable vlan tx offload
          - tipc: change to use register_pernet_device
          - tipc: check msg->req data len in tipc_nl_compat_bearer_disable
          - tun: wake up waitqueues after IFF_UP is set
          - bpf: simplify definition of BPF_FIB_LOOKUP related flags
          - bpf: lpm_trie: check left child of last leftmost node for NULL
          - bpf: fix nested bpf tracepoints with per-cpu data
          - bpf: fix unconnected udp hooks
          - bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
          - bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
          - [arm64] futex: Avoid copying out uninitialised stack in failed cmpxchg()
          - [arm64] bpf: use more scalable stadd over ldxr / stxr loop in xadd
          - futex: Update comments and docs about return values of arch futex code
          - RDMA: Directly cast the sockaddr union to sockaddr
          - tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
          - [armhf,arm64] usb: dwc3: Reset num_trbs after skipping
          - [arm64] insn: Fix ldadd instruction encoding
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.58
          - Bluetooth: Fix faulty expression for minimum encryption key size check
          - block: Fix a NULL pointer dereference in generic_make_request()
          - md/raid0: Do not bypass blocking queue entered for raid0 bios
          - netfilter: nf_flow_table: ignore DF bit setting
          - netfilter: nft_flow_offload: set liberal tracking mode for tcp
          - netfilter: nft_flow_offload: don't offload when sequence numbers need
            adjustment
          - netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
          - ASoC: soc-pcm: BE dai needs prepare when pause release after resume
          - spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
          - [armhf,arm64] ASoC: max98090: remove 24-bit format support if RJ is 0
          - [x86] CPU: Add more Icelake model numbers
          - ALSA: hdac: fix memory release for SST and SOF drivers
          - scsi: hpsa: correct ioaccel2 chaining
          - [x86] drm: panel-orientation-quirks: Add quirk for GPD pocket2
          - [x86] drm: panel-orientation-quirks: Add quirk for GPD MicroPC
          - [x86] platform: asus-wmi: Only Tell EC the OS will handle display hotkeys
            from asus_nb_wmi
          - [x86] platform: intel-vbtn: Report switch events when event wakes device
          - [x86] platform: mlx-platform: Fix parent device in i2c-mux-reg device
            registration
          - i2c: pca-platform: Fix GPIO lookup code
          - cpuset: restore sanity to cpuset_cpus_allowed_fallback()
          - mm/mlock.c: change count_mm_mlocked_page_nr return type
          - tracing: avoid build warning with HAVE_NOP_MCOUNT
          - module: Fix livepatch/ftrace module text permissions race
          - ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
          - [x86] drm/i915/dmc: protect against reading random memory
          - crypto: user - prevent operating on larval algorithms
          - crypto: cryptd - Fix skcipher instance memory leak
          - ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
          - ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
          - ALSA: line6: Fix write on zero-sized buffer (CVE-2019-15221)
          - ALSA: usb-audio: fix sign unintended sign extension on left shifts
          - [x86] ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
          - [x86] ALSA: hda/realtek - Change front mic location for Lenovo M710q
          - lib/mpi: Fix karactx leak in mpi_powm
          - fs/userfaultfd.c: disable irqs for fault_pending and event locks
          - tracing/snapshot: Resize spare buffer if size changed
          - [armhf] dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
          - drm/amd/powerplay: use hardware fan control if no powerplay fan table
          - drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
          - [armhf] drm/etnaviv: add missing failure path to destroy suballoc
          - [armhf] drm/imx: notify drm core before sending event during crtc disable
          - drm/imx: only send event on crtc disable if kept disabled
          - [x86] ftrace: Remove possible deadlock between register_kprobe() and
            ftrace_run_update_code()
          - mm/vmscan.c: prevent useless kswapd loops
          - btrfs: Ensure replaced device doesn't have pending chunk allocation
          - tty: rocket: fix incorrect forward declaration of 'rp_init()'
          - net/smc: move unhash before release of clcsock
          - drm/fb-helper: generic: Don't take module ref for fbcon
          - f2fs: don't access node/meta inode mapping after iput
          - mac80211: mesh: fix missing unlock on error in table_path_del()
          - scsi: tcmu: fix use after free
          - [amd64] boot/compressed: Do not corrupt EDX on EFER.LME=1 setting
          - [arm64] net: hns: Fixes the missing put_device in positive leg for roce
            reset
          - ALSA: hda: Initialize power_state field properly
          - rds: Fix warning.
          - ip6: fix skb leak in ip6frag_expire_frag_queue()
          - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
          - [arm64] net: hns: fix unsigned comparison to less than zero
          - bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K
          - netfilter: ipv6: nf_defrag: accept duplicate fragments again
          - [x86] KVM: degrade WARN to pr_warn_ratelimited
          - [x86] KVM: LAPIC: Fix pending interrupt in IRR blocked by software
            disable LAPIC
          - nfsd: Fix overflow causing non-working mounts on 1 TB machines
          - svcrdma: Ignore source port when computing DRC hash
          - [mips*] Fix bounds check virt_addr_valid
          - [mips*] Add missing EHB in mtc0 -> mfc0 sequence.
          - [arm64] dmaengine: qcom: bam_dma: Fix completed descriptors count
          - [armhf] dmaengine: imx-sdma: remove BD_INTR for channel0
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.59
          - [x86] Input: elantech - enable middle button support on 2 ThinkPads
          - mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
          - bpf: sockmap, fix use after free from sleep in psock backlog workqueue
          - mac80211: mesh: fix RCU warning
          - mac80211: free peer keys before vif down in mesh
          - iwlwifi: Fix double-free problems in iwl_req_fw_callback()
          - can: af_can: Fix error path of can_init()
          - net: phy: rename Asix Electronics PHY driver
          - [armhf] dts: am335x phytec boards: Fix cd-gpios active level
          - [s390x] boot: disable address-of-packed-member warning
          - [x86] drm/vmwgfx: Honor the sg list segment size limitation
          - [x86] drm/vmwgfx: fix a warning due to missing dma_parms
          - [armhf] Input: imx_keypad - make sure keyboard can always wake up system
          - [armhf,arm64] KVM: vgic: Fix kvm_device leak in vgic_its_destroy
          - mac80211: only warn once on chanctx_conf being NULL
          - mac80211: do not start any work during reconfigure flow
          - bpf, devmap: Fix premature entry free on destroying map
          - bpf, devmap: Add missing bulk queue free
          - bpf, devmap: Add missing RCU read lock on flush
          - [amd64] bpf: fix stack layout of JITed bpf code
          - qmi_wwan: add support for QMAP padding in the RX path
          - qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
          - qmi_wwan: extend permitted QMAP mux_id value range
          - mmc: core: complete HS400 before checking status
          - md: fix for divide error in status_resync
          - bnx2x: Check if transceiver implements DDM before access
          - drm: return -EFAULT if copy_to_user() fails
          - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
          - net: lio_core: fix potential sign-extension overflow on large shift
          - scsi: qedi: Check targetname while finding boot target information
          - quota: fix a problem about transfer quota
          - [armhf,arm64] net: dsa: mv88e6xxx: fix shift of FID bits in
            mv88e6185_g1_vtu_loadpurge()
          - NFS4: Only set creation opendata if O_CREAT
          - net :sunrpc :clnt :Fix xps refcount imbalance on the error path
          - fscrypt: don't set policy for a dead directory
          - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
          - media: stv0297: fix frequency range limit
          - ALSA: usb-audio: Fix parse of UAC2 Extension Units
          - ALSA: hda/realtek - Headphone Mic can't record after S3
          - block, bfq: NULL out the bic when it's no longer valid
          - [arm64] perf pmu: Fix uncore PMU alias list for ARM64
          - [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
          - [x86] tls: Fix possible spectre-v1 in do_get_thread_area()
          - USB: serial: ftdi_sio: add ID for isodebug v1
          - USB: serial: option: add support for GosunCn ME3630 RNDIS mode
          - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
          - p54usb: Fix race between disconnect and firmware loading
            (CVE-2019-15220)
          - usb: gadget: ether: Fix race between gether_disconnect and rx_submit
          - [armhf,arm64] usb: dwc2: use a longer AHB idle timeout in
            dwc2_core_reset()
          - [x86] drivers/usb/typec/tps6598x.c: fix portinfo width
          - [x86] drivers/usb/typec/tps6598x.c: fix 4CC cmd write
          - [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt
          - [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt
          - HID: Add another Primax PIXART OEM mouse quirk
          - binder: fix memory leak in error path
          - carl9170: fix misuse of device driver API
          - [x86] VMCI: Fix integer overflow in VMCI handle arrays
          - staging: rtl8712: reduce stack usage, again
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.60
          - Revert "e1000e: fix cyclic resets at link up with active tx"
          - e1000e: start network tx queue only when link is up
          - [x86] Input: synaptics - enable SMBUS on T480 thinkpad trackpad
          - nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
          - drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel
            RDT
          - firmware: improve LSM/IMA security behaviour
          - [armhf,arm64] irqchip/gic-v3-its: Fix command queue pointer comparison
            bug
          - [armhf] clk: ti: clkctrl: Fix returning uninitialized data
          - [amd64,arm64] efi/bgrt: Drop BGRT status field reserved bits check
          - perf/core: Fix perf_sample_regs_user() mm check
          - [armhf] omap2: remove incorrect __init annotation
          - afs: Fix uninitialised spinlock afs_volume::cb_break_lock
          - [x86] apic: Fix integer overflow on 10 bit left shift of cpu_khz
          - be2net: fix link failure after ethtool offline test
          - ppp: mppe: Add softdep to arc4
          - sis900: fix TX completion
          - [armhf] dts: imx6ul: fix PWM[1-4] interrupts
          - [armhf] pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
          - dm table: don't copy from a NULL pointer in realloc_argv()
          - dm verity: use message limit for data block corruption message
          - [amd64] boot: Fix crash if kernel image crosses page table boundary
          - [amd64] boot: Add missing fixup_pointer() for next_early_pgt access
          - HID: chicony: add another quirk for PixArt mouse
          - HID: multitouch: Add pointstick support for ALPS Touchpad
          - cpu/hotplug: Fix out-of-bounds read when setting fail state
          - linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
          - genirq: Delay deactivation in free_irq()
          - genirq: Fix misleading synchronize_irq() documentation
          - genirq: Add optional hardware synchronization for shutdown
          - [x86] ioapic: Implement irq_get_irqchip_state() callback
          - [x86] irq: Handle spurious interrupt after shutdown gracefully
          - [x86] irq: Seperate unused system vectors from spurious entry again
          - [s390x] fix stfle zero padding
          - [s390x] qdio: (re-)initialize tiqdio list entries
          - [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues()
          - regmap-irq: do not write mask register if mask_base is zero
          - drm/udl: introduce a macro to convert dev to udl.
          - drm/udl: Replace drm_dev_unref with drm_dev_put
          - drm/udl: move to embedding drm device inside udl device.
          - [i386] entry: Fix ENDPROC of common_spurious
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.61
          - [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly
          - scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not
            supported
          - [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path
          - wil6210: fix potential out-of-bounds read
          - ath10k: Do not send probe response template for mesh
          - ath9k: Check for errors when reading SREV register
          - ath6kl: add some bounds checking
          - ath10k: add peer id check in ath10k_peer_find_by_id
          - wil6210: fix spurious interrupts in 3-msi
          - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
          - regmap: debugfs: Fix memory leak in regmap_debugfs_init
          - batman-adv: fix for leaked TVLV handler.
          - media: dvb: usb: fix use after free in dvb_usb_device_exit
          - media: marvell-ccic: fix DMA s/g desc number calculation
          - media: media_device_enum_links32: clean a reserved field
          - [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries
          - [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries
          - qed: Set the doorbell address correctly
          - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
          - af_key: fix leaks in key_pol_get_resp and dump_sp.
          - xfrm: Fix xfrm sel prefix length validation
          - fscrypt: clean up some BUG_ON()s in block encryption/decryption
          - perf annotate TUI browser: Do not use member from variable within its own
            initialization
          - media: mc-device.c: don't memset __user pointer contents
          - media: saa7164: fix remove_proc_entry warning
          - net: phy: Check against net_device being NULL
          - tua6100: Avoid build warnings.
          - batman-adv: Fix duplicated OGMs on NETDEV_UP
          - [armhf] media: wl128x: Fix some error handling in
            fm_v4l2_init_video_device()
          - [arm64] net: hns3: set ops to null when unregister ad_dev
          - cpupower : frequency-set -r option misses the last cpu in related cpu
            list
          - [armhf,arm64] net: stmmac: dwmac4: fix flow control issue
          - [armhf,arm64] net: stmmac: modify default value of tx-frames
          - [arm64] crypto: inside-secure - do not rely on the hardware last bit for
            result descriptors
          - [s390x] qdio: handle PENDING state for QEBSM devices
          - net: sfp: add mutex to prevent concurrent state checks
          - ipset: Fix memory accounting for hash types on resize
          - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
          - [s390x] perf report: Fix OOM error in TUI mode on s390
          - [arm64] irqchip/meson-gpio: Add support for Meson-G12A SoC
          - media: uvcvideo: Fix access to uninitialized fields on probe error
          - iommu: Fix a leak in iommu_insert_resv_region
          - [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4
          - [armhf] gpio: omap: ensure irq is enabled before wakeup
          - regmap: fix bulk writes on paged registers
          - bpf: silence warning messages in core
          - selinux: fix empty write to keycreate file
          - [x86] cpu: Add Ice Lake NNPI to Intel family
          - [arm64] ASoC: meson: axg-tdm: fix sample clock inversion
          - rcu: Force inlining of rcu_read_lock()
          - [x86] cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
          - qed: iWARP - Fix tc for MPA ll2 connection
          - [arm64] net: hns3: fix for skb leak when doing selftest
          - block: null_blk: fix race condition for null_del_dev
          - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
            arbitration
          - xfrm: fix sa selector validation
          - sched/core: Add __sched tag for io_schedule()
          - sched/fair: Fix "runnable_avg_yN_inv" not used warnings
          - [x86] perf/intel/uncore: Handle invalid event coding for free-running
            counter
          - [x86] atomic: Fix smp_mb__{before,after}_atomic()
          - perf evsel: Make perf_evsel__name() accept a NULL argument
          - vhost_net: disable zerocopy by default
          - ipoib: correcly show a VF hardware address
          - [x86] cacheinfo: Fix a -Wtype-limits warning
          - blk-iolatency: only account submitted bios
          - ACPICA: Clear status of GPEs on first direct enable
          - EDAC/sysfs: Fix memory leak when creating a csrow object
          - nvme: fix possible io failures when removing multipathed ns
          - nvme-pci: properly report state change failure in nvme_reset_work
          - nvme-pci: set the errno on ctrl state change error
          - lightnvm: pblk: fix freeing of merged pages
          - [arm64] Do not enable IRQs for ct_user_exit
          - ipsec: select crypto ciphers for xfrm_algo
          - ipvs: defer hook registration to avoid leaks
          - media: i2c: fix warning same module names
          - ntp: Limit TAI-UTC offset
          - timer_list: Guard procfs specific code
          - [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0
          - media: hdpvr: fix locking and a missing msleep
          - [armhf] net: stmmac: sun8i: force select external PHY when no internal
            one
          - rtlwifi: rtl8192cu: fix error handle when usb probe failed
          - mt7601u: do not schedule rx_tasklet when the device has been disconnected
          - mt7601u: fix possible memory leak when the device is disconnected
          - ipvs: fix tinfo memory leak in start_sync_thread
          - ath10k: add missing error handling
          - ath10k: fix PCIE device wake up failed
          - perf tools: Increase MAX_NR_CPUS and MAX_CACHES
          - [x86] ASoC: Intel: hdac_hdmi: Set ops to NULL on remove
          - libata: don't request sense data on !ZAC ATA devices
          - [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch
            timer
          - xsk: Properly terminate assignment in xskq_produce_flush_desc
          - rslib: Fix decoding of shortened codes
          - rslib: Fix handling of of caller provided syndrome
          - ixgbe: Check DDM existence in transceiver before access
          - crypto: serpent - mark __serpent_setkey_sbox noinline
          - wil6210: drop old event after wmi_call timeout
          - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
          - bcache: check CACHE_SET_IO_DISABLE in allocator code
          - bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
          - bcache: acquire bch_register_lock later in cached_dev_free()
          - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
          - bcache: fix potential deadlock in cached_def_free()
          - [arm64] net: hns3: fix a -Wformat-nonliteral compile warning
          - [arm64] net: hns3: add some error checking in hclge_tm module
          - ath10k: destroy sdio workqueue while remove sdio module
          - [armhf,arm64] net: mvpp2: prs: Don't override the sign bit in SRAM parser
            shift
          - igb: clear out skb->tstamp after reading the txtime
          - iwlwifi: mvm: Drop large non sta frames
          - perf stat: Make metric event lookup more robust
          - perf stat: Fix group lookup for metric group
          - bnx2x: Prevent ptp_task to be rescheduled indefinitely
          - net: usb: asix: init MAC address buffers
          - rxrpc: Fix oops in tracepoint
          - bpf, libbpf, smatch: Fix potential NULL pointer dereference
          - bonding: validate ip header before check IPPROTO_IGMP
          - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
          - [ppc64el] tools: bpftool: Fix json dump crash on powerpc
          - Bluetooth: hci_bcsp: Fix memory leak in rx_skb
          - Bluetooth: Add new 13d3:3491 QCA_ROME device
          - Bluetooth: Add new 13d3:3501 QCA_ROME device
          - Bluetooth: 6lowpan: search for destination address in all peers
          - [ppc64el] perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
          - Bluetooth: Check state in l2cap_disconnect_rsp
          - gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
          - Bluetooth: validate BLE connection interval updates
          - gtp: fix suspicious RCU usage
          - gtp: fix Illegal context switch in RCU read-side critical section.
          - gtp: fix use-after-free in gtp_encap_destroy()
          - gtp: fix use-after-free in gtp_newlink()
          - [armel/marvell,armhf] net: mvmdio: defer probe of orion-mdio if a clock
            is not ready
          - iavf: fix dereference of null rx_buffer pointer
          - floppy: fix out-of-bounds read in next_valid_format
          - floppy: fix invalid pointer dereference in drive_name
          - xen: let alloc_xenballooned_pages() fail if not enough memory free
          - scsi: core: Fix race on creating sense cache
          - scsi: megaraid_sas: Fix calculation of target ID
          - crypto: ghash - fix unaligned memory access in ghash_setkey()
          - [x86] crypto: ccp - Validate the the error value used to index error
            messages
          - [arm64] crypto: sha1-ce - correct digest for empty data in finup
          - [arm64] crypto: sha2-ce - correct digest for empty data in finup
          - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
          - [x86] crypto: ccp - memset structure fields to zero before reuse
          - [x86] crypto: ccp/gcm - use const time tag comparison.
          - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()"
          - bcache: Revert "bcache: fix high CPU occupancy during journal"
          - bcache: Revert "bcache: free heap cache_set->flush_btree in
            bch_journal_free"
          - bcache: ignore read-ahead request failure on backing device
          - bcache: fix mistaken sysfs entry for io_error counter
          - bcache: destroy dc->writeback_write_wq if failed to create
            dc->writeback_thread
          - Input: alps - don't handle ALPS cs19 trackpoint-only device
          - [x86] Input: synaptics - whitelist Lenovo T580 SMBus intertouch
          - Input: alps - fix a mismatch between a condition check and its comment
          - [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages
          - [arm64] tegra: Update Jetson TX1 GPU regulator timings
          - iwlwifi: pcie: don't service an interrupt that was masked
          - iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
          - iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
          - iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
          - NFSv4: Handle the special Linux file open access mode
          - pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
          - pNFS: Fix a typo in pnfs_update_layout
          - pnfs: Fix a problem where we gratuitously start doing I/O through the MDS
          - lib/scatterlist: Fix mapping iterator when sg->offset is greater than
            PAGE_SIZE
          - ASoC: dapm: Adapt for debugfs API change
          - raid5-cache: Need to do start() part job after adding journal device
          - ALSA: seq: Break too long mutex context in the write loop
          - [x86] ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell
            platform
          - [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
          - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
          - media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
          - media: videobuf2-dma-sg: Prevent size from overflowing
          - [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed
          - [arm64] tegra: Fix AGIC register range
          - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
            inodes.
          - kconfig: fix missing choice values in auto.conf
          - drm/nouveau/i2c: Enable i2c pads & busses during preinit
          - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
          - dm zoned: fix zone state management race
          - xen/events: fix binding user event channels to cpus
          - 9p/xen: Add cleanup path in p9_trans_xen_init
          - 9p/virtio: Add cleanup path in p9_virtio_init
          - [x86] boot: Fix memory leak in default_get_smp_config()
          - [x86] perf/intel: Fix spurious NMI on fixed counter
          - [x86] perf/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3
            PMCs
          - [x86] perf/amd/uncore: Set the thread mask for F17h L3 PMCs
          - drm/edid: parse CEA blocks embedded in DisplayID
          - [x86] intel_th: pci: Add Ice Lake NNPI support
          - [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
          - PCI: Do not poll for PME if the device is in D3cold
          - [arm64] PCI: qcom: Ensure that PERST is asserted for at least 100 ms
          - Btrfs: fix data loss after inode eviction, renaming it, and fsync it
          - Btrfs: fix fsync not persisting dentry deletions due to inode evictions
          - Btrfs: add missing inode version, ctime and mtime updates when punching
            hole
          - IB/mlx5: Report correctly tag matching rendezvous capability
          - HID: wacom: generic: only switch the mode on devices with LEDs
          - HID: wacom: generic: Correct pad syncing
          - HID: wacom: correct touch resolution x/y typo
          - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
          - coda: pass the host file in vma->vm_file on mmap
          - include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
            architectures
          - xfs: fix pagecache truncation prior to reflink
          - xfs: flush removing page cache in xfs_reflink_remap_prep
          - xfs: don't overflow xattr listent buffer
          - xfs: rename m_inotbt_nores to m_finobt_nores
          - xfs: don't ever put nlink > 0 inodes on the unlinked list
          - xfs: reserve blocks for ifree transaction during log recovery
          - xfs: fix reporting supported extra file attributes for statx()
          - xfs: serialize unaligned dio writes against all other dio writes
          - xfs: abort unaligned nowait directio early
          - [ppc64el] watchpoint: Restore NV GPRs while returning from exception
          - [ppc64el] powernv/npu: Fix reference leak
          - [ppc64el] pseries: Fix oops in hotplug memory notifier
          - [arm64] mmc: sdhci-msm: fix mutex while in spinlock
          - eCryptfs: fix a couple type promotion bugs
          - [x86] intel_th: msu: Fix single mode with disabled IOMMU
          - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
          - usb: Handle USB3 remote wakeup for LPM enabled devices correctly
          - blk-throttle: fix zero wait time for iops throttled group
          - blk-iolatency: clear use_delay when io.latency is set to zero
          - blkcg: update blkcg_print_stat() to handle larger outputs
          - [armel/marvell,armhf] net: mvmdio: allow up to four clocks to be
            specified for orion-mdio
          - dm bufio: fix deadlock with loop device
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.62
          - bnx2x: Prevent load reordering in tx completion processing
          - [x86] hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback()
          - igmp: fix memory leak in igmpv3_del_delrec()
          - ipv4: don't set IPv6 only flags to IPv4 addresses
          - ipv6: rt6_check should return NULL if 'from' is NULL
          - ipv6: Unlink sibling route in case of failure
          - [armhf,arm64] net: dsa: mv88e6xxx: wait after reset deactivation
          - net: make skb_dst_force return true when dst is refcounted
          - net: neigh: fix multiple neigh timer scheduling
          - net: openvswitch: fix csum updates for MPLS actions
          - net: phy: sfp: hwmon: Fix scaling of RX power
          - [armhf,arm64] net: stmmac: Re-work the queue selection for TSO packets
          - nfc: fix potential illegal memory access
          - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b
          - rxrpc: Fix send on a connected, but unbound socket
          - sctp: fix error handling on stream scheduler initialization
          - [x86] sky2: Disable MSI on ASUS P6T
          - tcp: be more careful in tcp_fragment()
          - tcp: fix tcp_set_congestion_control() use from bpf hook
          - tcp: Reset bytes_acked and bytes_received when disconnecting
          - vrf: make sure skb->data contains ip header to make routing
          - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
          - macsec: fix use-after-free of skb during RX
          - macsec: fix checksumming after decryption
          - netrom: fix a memory leak in nr_rx_frame()
          - netrom: hold sock when setting skb->destructor
          - net_sched: unset TCQ_F_CAN_BYPASS when adding filters
          - sctp: not bind the socket in sctp_connect
          - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
          - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
          - net: bridge: don't cache ether dest pointer on input
          - net: bridge: stp: don't cache eth dest pointer before skb pull
          - dma-buf: balance refcount inbalance
          - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
          - perf/core: Fix exclusive events' grouping
          - perf/core: Fix race between close() and fork()
          - ext4: don't allow any modifications to an immutable file
          - ext4: enforce the immutable flag on open files
          - mm: add filemap_fdatawait_range_keep_errors()
          - jbd2: introduce jbd2_inode dirty range scoping
          - ext4: use jbd2_inode dirty range scoping
          - ext4: allow directory holes
          - [x86] KVM: nVMX: do not use dangling shadow VMCS after guest reset
          - [x86] KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving
            nested
          - mm: vmscan: scan anonymous pages on file refaults
          - net: sched: verify that q!=NULL before setting q->flags
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.63
          - [x86] hvsock: fix epollout hang from race condition
          - [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe
          - [x86] staging: vt6656: use meaningful error code during buffer allocation
          - usb: core: hub: Disable hub-initiated U1/U2
          - [armhf,arm64] pinctrl: rockchip: fix leaked of_node references
          - drm/amd/display: Fill prescale_params->scale for RGB565
          - drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE
          - drm/amd/display: Disable ABM before destroy ABM struct
          - drm/amdkfd: Fix a potential memory leak
          - drm/amdkfd: Fix sdma queue map issue
          - drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
          - PCI: Return error if cannot probe VF
          - [armhf,arm64] gpu: host1x: Increase maximum DMA segment size
          - drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
          - drm/crc-debugfs: Also sprinkle irqrestore over early exits
          - memstick: Fix error cleanup path of memstick_init
          - [arm64] tty: serial: msm_serial: avoid system lockup condition
          - serial: 8250: Fix TX interrupt handling condition
          - drm/amd/display: Always allocate initial connector state state
          - drm/virtio: Add memory barriers for capset cache.
          - drm/amd/display: fix compilation error
          - [ppc64el] pseries/mobility: prevent cpu hotplug during DT update
          - [armhf,arm64] drm/rockchip: Properly adjust to a true clock in
            adjusted_mode
          - [armhf] serial: imx: fix locking in set_termios()
          - tty: serial_core: Set port active bit in uart_port_activate
          - usb: gadget: Zero ffs_io_data
          - mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
          - [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs
          - [arm64] drm/msm: Depopulate platform on probe failure
          - [arm64] PCI: xilinx-nwl: Fix Multi MSI data programming
          - iio: iio-utils: Fix possible incorrect mask calculation
          - [ppc64el] cacheflush: fix variable set but not used
          - [ppc64el] xmon: Fix disabling tracing while in xmon
          - [ppc64el] recordmcount: Fix spurious mcount entries on powerpc
          - mfd: core: Set fwnode for created devices
          - [arm64] mfd: hi655x-pmic: Fix missing return value check for
            devm_regmap_init_mmio_clk
          - mm/swap: fix release_pages() when releasing devmap pages
          - RDMA/i40iw: Set queue pair state when being queried
          - IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE
          - [ppc64el] mm: Handle page table allocation failures
          - IB/ipoib: Add child to parent list only if device initialized
          - [arm64] assembler: Switch ESB-instruction with a vanilla nop if
            !ARM64_HAS_RAS
          - perf stat: Fix use-after-freed pointer detected by the smatch tool
          - perf top: Fix potential NULL pointer dereference detected by the smatch
            tool
          - perf session: Fix potential NULL pointer dereference found by the smatch
            tool
          - perf annotate: Fix dereferencing freed memory found by the smatch tool
          - perf hists browser: Fix potential NULL pointer dereference found by the
            smatch tool
          - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
          - [armhf] PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
          - [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h
          - block: init flush rq ref count to 1
          - f2fs: avoid out-of-range memory access
          - mailbox: handle failed named mailbox channel request
          - dlm: check if workqueues are NULL before flushing/destroying
          - [ppc64el] eeh: Handle hugepages in ioremap space
          - block/bio-integrity: fix a memory leak bug
          - 9p: pass the correct prototype to read_cache_page
          - mm/gup.c: mark undo_dev_pagemap as __maybe_unused
          - mm/gup.c: remove some BUG_ONs from get_gate_page()
          - memcg, fsnotify: no oom-kill for remote memcg charging
          - mm/mmu_notifier: use hlist_add_head_rcu()
          - proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup
          - proc: use down_read_killable mmap_sem for /proc/pid/pagemap
          - proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
          - proc: use down_read_killable mmap_sem for /proc/pid/map_files
          - cxgb4: reduce kernel stack usage in cudbg_collect_mem_region()
          - proc: use down_read_killable mmap_sem for /proc/pid/maps
          - locking/lockdep: Fix lock used or unused stats error
          - mm: use down_read_killable for locking mmap_sem in access_remote_vm
          - locking/lockdep: Hide unused 'class' variable
          - usb: wusbcore: fix unbalanced get/put cluster_id
          - [x86] usb: pci-quirks: Correct AMD PLL quirk detection
          - btrfs: inode: Don't compress if NODATASUM or NODATACOW set
          - [x86] sysfb_efi: Add quirks for some devices with swapped width and
            height
          - [x86] speculation/mds: Apply more accurate check on hypervisor platform
          - binder: prevent transactions to context manager from its own process.
          - fpga-manager: altera-ps-spi: Fix build error
          - [x86] mei: me: add mule creek canyon (EHL) device ids
          - [x86] hpet: Fix division by zero in hpet_time_div()
          - ALSA: ac97: Fix double free of ac97_codec_device
          - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
          - ALSA: hda - Add a conexant codec entry to let mute led work
          - [ppc64el] xive: Fix loop exit-condition in xive_find_target_in_mask()
          - libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
          - access: avoid the RCU grace period for the temporary subjective
            credentials
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.64
          - [x86] hv_sock: Add support for delayed close
          - vsock: correct removal of socket from the list
          - NFS: Fix dentry revalidation on NFSv4 lookup
          - NFS: Refactor nfs_lookup_revalidate()
          - NFSv4: Fix lookup revalidate of regular files
          - [armhf,arm64] usb: dwc2: Disable all EP's on disconnect
          - [armhf,arm64] usb: dwc2: Fix disable all EP's on disconnect
          - [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ
            (Closes: #904385).
          - binder: fix possible UAF when freeing buffer
          - ISDN: hfcsusb: checking idx of ep configuration
          - media: au0828: fix null dereference in error path
          - ath10k: Change the warning message string
          - media: cpia2_usb: first wake up, then free in disconnect
            (CVE-2019-15215)
          - media: pvrusb2: use a different format for warnings
          - NFS: Cleanup if nfs_match_client is interrupted
          - media: radio-raremono: change devm_k*alloc to k*alloc (CVE-2019-15211)
          - [x86] iommu/vt-d: Don't queue_iova() if there is no flush queue
          - vhost: introduce vhost_exceeds_weight()
          - vhost_net: fix possible infinite loop (CVE-2019-3900)
          - vhost: vsock: add weight support
          - vhost: scsi: add weight support (CVE-2019-3900)
          - sched/fair: Don't free p->numa_faults with concurrent readers
          - sched/fair: Use RCU accessors consistently for ->numa_group
          - /proc/<pid>/cmdline: remove all the special cases
          - /proc/<pid>/cmdline: add back the setproctitle() special case
          - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
          - Fix allyesconfig output.
          - ceph: hold i_ceph_lock when removing caps for freeing inode
          - block, scsi: Change the preempt-only flag into a counter
          - scsi: core: Avoid that a kernel warning appears during system resume
          - ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.65
          - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200
          - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again
          - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend
          - ftrace: Enable trampoline when rec count returns back to one
          - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag
            is unset
          - [arm64] dts: rockchip: fix isp iommu clocks and power domain
          - kernel/module.c: Only return -EEXIST for modules that have finished
            loading
          - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1
          - fs/adfs: super: fix use-after-free bug
          - btrfs: fix minimum number of chunk errors for DUP
          - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
          - cifs: Fix a race condition with cifs_echo_request
          - ceph: fix improper use of smp_mb__before_atomic()
          - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
          - ACPI: blacklist: fix clang warning for unused DMI table
          - [s390x] scsi: zfcp: fix GCC compiler warning emitted with
            -Wmaybe-uninitialized
          - perf version: Fix segfault due to missing OPT_END()
          - [x86] kvm: avoid constant-conversion warning
          - ACPI: fix false-positive -Wuninitialized warning
          - be2net: Signal that the device cannot transmit during reconfiguration
          - [x86] apic: Silence -Wtype-limits compiler warnings
          - mm/cma.c: fail if fixed declaration can't be honored
          - lib/test_overflow.c: avoid tainting the kernel and fix wrap size
          - lib/test_string.c: avoid masking memset16/32/64 failures
          - coda: add error handling for fget
          - coda: fix build using bare-metal toolchain
          - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
            headers
          - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
          - ipc/mqueue.c: only perform resource calculation if user valid
          - [x86] xen/pv: Fix a boot up hang revealed by int3 self test
          - [x86] kvm: Don't call kvm_spurious_fault() from .fixup
          - [x86] paravirt: Fix callee-saved function ELF sizes
          - [x86] boot: Remove multiple copy of static function sanitize_boot_params()
          - drm/nouveau: fix memory leak in nouveau_conn_reset()
          - kconfig: Clear "written" flag to avoid data loss
          - Btrfs: fix incremental send failure after deduplication
          - Btrfs: fix race leading to fs corruption after transaction abort
          - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC
          - [arm64] mmc: meson-mx-sdio: Fix misuse of GENMASK macro
          - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
          - IB/hfi1: Fix Spectre v1 vulnerability
          - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
          - selinux: fix memory leak in policydb_init()
          - ALSA: hda: Fix 1-minute detection delay when i915 module is not available
            (Closes: #931507)
          - mm: vmscan: check if mem cgroup is disabled or not before calling memcg
            slab shrinker
          - [s390x] dasd: fix endless loop after read unit address configuration
          - [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier
          - [arm64] compat: Allow single-byte watchpoints on all addresses
          - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
          - nbd: replace kill_bdev() with __invalidate_device() again
          - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
          - IB/mlx5: Fix unreg_umr to ignore the mkey state
          - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
          - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
          - IB/mlx5: Fix clean_mr() to work in the expected order
          - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
          - IB/hfi1: Check for error on call to alloc_rsm_map_table
          - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping
          - eeprom: at24: make spd world-readable again
          - objtool: Support GCC 9 cold subfunction naming scheme
          - gcc-9: properly declare the {pv,hv}clock_page storage
          - [x86] vdso: Prevent segfaults due to hoisted vclock reads
          - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.66
          - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
          - gcc-9: don't warn about uninitialized variable
          - driver core: Establish order of operations for device_add and device_del
            via bitflag
          - drivers/base: Introduce kill_device()
          - libnvdimm/bus: Prevent duplicate device_unregister() calls
          - libnvdimm/region: Register badblocks before namespaces
          - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
          - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
          - HID: wacom: fix bit shift for Cintiq Companion 2
          - HID: Add quirk for HP X1200 PIXART OEM mouse
          - IB: directly cast the sockaddr union to aockaddr
          - atm: iphase: Fix Spectre v1 vulnerability
          - bnx2x: Disable multi-cos feature.
          - ife: error out when nla attributes are empty
          - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
          - ip6_tunnel: fix possible use-after-free on xmit
          - ipip: validate header length in ipip_tunnel_xmit
          - [armhf,arm64] mvpp2: fix panic on module removal
          - [armhf,arm64] mvpp2: refactor MTU change code
          - net: bridge: delete local fdb on device init failure
          - net: bridge: mcast: don't delete permanent entries when fast leave is
            enabled
          - net: fix ifindex collision during namespace removal
          - net/mlx5e: always initialize frag->last_in_page
          - net/mlx5: Use reversed order when unregister devices
          - net: phylink: Fix flow control for fixed-link
          - net: sched: Fix a possible null-pointer dereference in dequeue_func()
          - net sched: update vlan action for batched events operations
          - net: sched: use temporary variable for actions indexes
          - net/smc: do not schedule tx_work in SMC_CLOSED state
          - tipc: compat: allow tipc commands without arguments
          - tun: mark small packets as owned by the tap sock
          - net/mlx5: Fix modify_cq_in alignment
          - net/mlx5e: Prevent encap flow counter update async to user query
          - r8169: don't use MSI before RTL8168d
          - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
          - cgroup: Call cgroup_release() before __exit_signal()
          - cgroup: Implement css_task_iter_skip()
          - cgroup: Include dying leaders with live threads in PROCS iterations
          - cgroup: css_task_iter_skip()'d iterators must be advanced before accessed
          - cgroup: Fix css_task_iter_advance_css_set() cset skip condition
          - [arm*] spi: bcm2835: Fix 3-wire mode if DMA is enabled
          https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.67
          - [x86] crypto: ccp - Fix oops by properly managing allocated structures
          - [x86] crypto: ccp - Add support for valid authsize values less than 16
          - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext
          - usb: usbfs: fix double-free of usb memory upon submiturb error
          - usb: iowarrior: fix deadlock on disconnect
          - sound: fix a memory leak bug
          - [arm64,mips*/octeon] mmc: cavium: Set the correct dma max segment size
            for mmc_host
          - [arm64,mips*/octeon] mmc: cavium: Add the missing dma unmap when the dma
            has finished.
          - loop: set PF_MEMALLOC_NOIO for the worker thread
          - Input: usbtouchscreen - initialize PM mutex before using it
          - [x86] Input: elantech - enable SMBus on new (2018+) systems
          - [x86] Input: synaptics - enable RMI mode for HP Spectre X360
          - [x86] mm: Check for pfn instead of page in vmalloc_sync_one()
          - [x86] mm: Sync also unmappings in vmalloc_sync_all()
          - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
          - [s390x] perf annotate: Fix s390 gap between kernel end and module start
          - perf db-export: Fix thread__exec_comm()
          - [s390x] perf record: Fix module size on s390
          - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
          - gfs2: gfs2_walk_metadata fix
          - usb: yurex: Fix use-after-free in yurex_delete
          - [x86] usb: typec: tcpm: free log buf memory when remove debug file
          - [x86] usb: typec: tcpm: remove tcpm dir if no children
          - [x86] usb: typec: tcpm: Add NULL check before dereferencing config
          - [x86] usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
          - can: peak_usb: fix potential double kfree_skb()
          - netfilter: nfnetlink: avoid deadlock due to synchronous request_module
          - [s390x] vfio-ccw: Set pa_nr to 0 if memory allocation fails for
            pa_iova_pfn
          - netfilter: Fix rpfilter dropping vrf packets by mistake
          - netfilter: conntrack: always store window size un-scaled
          - netfilter: nft_hash: fix symhash with modulus one
          - drm/amd/display: Wait for backlight programming completion in set
            backlight level
          - drm/amd/display: use encoder's engine id to find matched free audio
            device
          - drm/amd/display: Fix dc_create failure handling and 666 color depths
          - drm/amd/display: Only enable audio if speaker allocation exists
          - drm/amd/display: Increase size of audios array
          - [x86] iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of
            ISCSI_IBFT_FIND
          - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
          - mac80211: don't warn about CW params when not using them
          - allocate_flower_entry: should check for null deref
          - hwmon: (nct6775) Fix register address and added missed tolerance for
            nct6106
          - drm: silence variable 'conn' set but not used
          - [s390x] qdio: add sanity checks to the fast-requeue path
          - ALSA: compress: Fix regression on compressed capture streams
          - ALSA: compress: Prevent bypasses of set_params
          - ALSA: compress: Don't allow paritial drain operations on capture streams
          - ALSA: compress: Be more restrictive about when a drain is allowed
          - perf tools: Fix proper buffer size for feature processing
          - perf probe: Avoid calling freeing routine multiple times for same pointer
          - drbd: dynamically allocate shash descriptor
          - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
          - nvme: fix multipath crash when ANA is deactivated
          - scsi: megaraid_sas: fix panic on loading firmware crashdump
          - [ppc64el] scsi: ibmvfc: fix WARN_ON during event pool release
          - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
          - test_firmware: fix a memory leak bug
          - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
          - perf/core: Fix creating kernel counters for PMUs that override event->cpu
          - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value
          - HID: sony: Fix race condition between rumble and device remove.
          - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset
          - ALSA: usb-audio: fix a memory leak bug
          - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
          - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
          - hwmon: (nct7802) Fix wrong detection of in4 presence
          - [x86] drm/i915: Fix wrong escape clock divisor init for GLK
          - ALSA: firewire: fix a memory leak bug
          - ALSA: hiface: fix multiple memory leak bugs
          - ALSA: hda - Don't override global PCM hw info flag
          - [x86] ALSA: hda - Workaround for crackled sound on AMD controller
            (1022:1457)
          - mac80211: don't WARN on short WMM parameters from AP
          - dax: dax_layout_busy_page() should not unmap cow pages
          - SMB3: Fix deadlock in validate negotiate hits reconnect
          - smb3: send CAP_DFS capability during session setup
          - NFSv4: Fix an Oops in nfs4_do_setattr
          - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU
          - mwifiex: fix 802.11n/WPA detection
          - iwlwifi: don't unmap as page memory that was mapped as single
          - iwlwifi: mvm: fix an out-of-bound access
          - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
          - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
      
        [ Steve McIntyre ]
        * [arm64] Improve support for the Huawei TaiShan server platform
          (Closes: #930554):
          - Enable the HNS/ROCE Infiniband driver
          - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS
            and HNS/ROCE Infiniband
          - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list
      
        [ Uwe Kleine-König ]
        * [armhf] Add support for all i.MX6 variants.
        * rtc-s35390a: backport fix to make hwclock able to read the time
          (Closes: #932845)
      
        [ Ben Hutchings ]
        * [rt] Update to 4.19.59-rt24:
          - Fix build failure after "genirq: Prevent use-after-free and work
            list corruption":
            + Update "genirq: Do not invoke the affinity callback via a workqueue on
              RT"
            + kthread: add a global worker thread.
            + genirq: Do not invoke the affinity callback via a workqueue on RT
            + genirq: Handle missing work_struct in irq_set_affinity_notifier()
          - Update "irqwork: push most work into softirq context" to resolve
            conflict with "irq_work: Do not raise an IPI when queueing work on the
            local CPU"
          - Drop "random: avoid preempt_disable()ed section"
          - arm: imx6: cpuidle: Use raw_spinlock_t
          - rcu: Don't allow to change rcu_normal_after_boot on RT
          - sched/core: Drop a preempt_disable_rt() statement
          - timers: Redo the notification of canceling timers on -RT
          - Fix futex regression in 4.19.21:
            + Revert "futex: Ensure lock/unlock symetry versus pi_lock and hash
              bucket lock"
            + Revert "futex: Fix bug on when a requeued RT task times out"
            + Revert "rtmutex: Handle the various new futex race conditions"
            + Revert "futex: workaround migrate_disable/enable in different context"
            + futex: Make the futex_hash_bucket lock raw
            + futex: Delay deallocation of pi_state
          - mm/zswap: Do not disable preemption in zswap_frontswap_store()
        * Bump ABI to 6
      
      linux (4.19.37-5+deb10u2) buster-security; urgency=high
      
        [ Romain Perier ]
        * [x86] x86/insn-eval: Fix use-after-free access to LDT entry (CVE-2019-13233)
        * [powerpc*] mm/64s/hash: Reallocate context ids on fork (CVE-2019-12817)
        * nfc: Ensure presence of required attributes in the deactivate_target handler
          (CVE-2019-12984)
        * binder: fix race between munmap() and direct reclaim (CVE-2019-1999)
        * scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836)
        * Input: gtco - bounds check collection indent level (CVE-2019-13631)
        * floppy: fix out-of-bounds read in copy_buffer (CVE-2019-14283)
        * inet: switch IP ID generator to siphash (CVE-2019-10638)
        * floppy: fix div-by-zero in setup_format_params (CVE-2019-14284)
        * Bluetooth: hci_uart: check for missing tty operations (CVE-2019-10207)
        * [powerpc/tm] Fix oops on sigreturn on systems without TM (CVE-2019-13648) 
      
        [ Salvatore Bonaccorso ]
        * [x86] cpufeatures: Carve out CQM features retrieval
        * [x86] cpufeatures: Combine word 11 and 12 into a new scattered features
          word
        * [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations
        * [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125)
        * [amd64] entry: Use JMP instead of JMPQ
        * [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
        * Documentation: Add section about CPU vulnerabilities for Spectre
        * Documentation: Add swapgs description to the Spectre v1 documentation
      
        [ Ben Hutchings ]
        * [x86] cpufeatures: Avoid ABI change for swapgs mitigations:
          - Move swapgs feature bits to existing scattered words
          - Revert "x86/cpufeatures: Combine word 11 and 12 into a new scattered
            features word"
        * inet: Avoid ABI change for IP ID hash change
      
      linux (4.19.37-5+deb10u1) buster-security; urgency=high
      
        * tcp: refine memory limit test in tcp_fragment() (Closes: #930904)
        * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272)
  18. Aug 22, 2019
Loading