linux-aws (4.4.0-1117.131) xenial; urgency=medium


  [ Ubuntu: 4.4.0-193.224 ]

  * CVE-2020-16119
    - SAUCE: dccp: avoid double free of ccid on child socket

 -- Marcelo Henrique Cerri <marcelo.cerri@canonical.com>  Tue, 06 Oct 2020 16:44:05 -0300

linux-aws (4.4.0-1116.129) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1116.129 -proposed tracker (LP: #1897737)

  [ Ubuntu: 4.4.0-192.222 ]

  * xenial/linux: 4.4.0-192.222 -proposed tracker (LP: #1897734)
  * mwifiex stops working after kernel upgrade (LP: #1897299)
    - mwifiex: Increase AES key storage size to 256 bits
  * xenial 4.4.0-191-generic in -proposed has a regression (LP: #1896725)
    - Revert "XEN uses irqdesc::irq_data_common::handler_data to store a per
      interrupt XEN data pointer which contains XEN specific information."

 -- Stefan Bader <stefan.bader@canonical.com>  Tue, 29 Sep 2020 17:50:19 +0200

linux-aws (4.4.0-1115.128) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1115.128 -proposed tracker (LP: #1896056)

  [ Ubuntu: 4.4.0-191.221 ]

  * xenial/linux: 4.4.0-191.221 -proposed tracker (LP: #1896067)
  * Novalink (mkvterm command failure) (LP: #1892546)
    - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
  * Xenial update: v4.4.236 upstream stable release (LP: #1895891)
    - HID: core: Correctly handle ReportSize being zero
    - HID: core: Sanitize event code and type when mapping input
    - perf record/stat: Explicitly call out event modifiers in the documentation
    - mm, page_alloc: remove unnecessary variable from free_pcppages_bulk
    - hwmon: (applesmc) check status earlier.
    - ceph: don't allow setlease on cephfs
    - s390: don't trace preemption in percpu macros
    - xen/xenbus: Fix granting of vmalloc'd memory
    - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling
    - batman-adv: Avoid uninitialized chaddr when handling DHCP
    - batman-adv: bla: use netif_rx_ni when not in interrupt context
    - dmaengine: at_hdmac: check return value of of_find_device_by_node() in
      at_dma_xlate()
    - netfilter: nf_tables: incorrect enum nft_list_attributes definition
    - netfilter: nf_tables: fix destination register zeroing
    - dmaengine: pl330: Fix burst length if burst size is smaller than bus width
    - bnxt_en: Check for zero dir entries in NVRAM.
    - fix regression in "epoll: Keep a reference on files added to the check list"
    - tg3: Fix soft lockup when tg3_reset_task() fails.
    - iommu/vt-d: Serialize IOMMU GCMD register modifications
    - thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
    - include/linux/log2.h: add missing () around n in roundup_pow_of_two()
    - btrfs: drop path before adding new uuid tree entry
    - btrfs: Remove redundant extent_buffer_get in get_old_root
    - btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind
    - btrfs: set the lockdep class for log tree extent buffers
    - uaccess: Add non-pagefault user-space read functions
    - uaccess: Add non-pagefault user-space write function
    - btrfs: fix potential deadlock in the search ioctl
    - net: qmi_wwan: MDM9x30 specific power management
    - net: qmi_wwan: support "raw IP" mode
    - net: qmi_wwan: should hold RTNL while changing netdev type
    - net: qmi_wwan: ignore bogus CDC Union descriptors
    - Add Dell Wireless 5809e Gobi 4G HSPA+ Mobile Broadband Card (rev3) to
      qmi_wwan
    - qmi_wwan: Added support for Gemalto's Cinterion PHxx WWAN interface
    - qmi_wwan: add support for Quectel EC21 and EC25
    - NET: usb: qmi_wwan: add support for Telit LE922A PID 0x1040
    - drivers: net: usb: qmi_wwan: add QMI_QUIRK_SET_DTR for Telit PID 0x1201
    - usb: qmi_wwan: add D-Link DWM-222 A2 device ID
    - net: usb: qmi_wwan: add Telit ME910 support
    - net: usb: qmi_wwan: add Telit 0x1050 composition
    - ALSA: ca0106: fix error code handling
    - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
    - dm cache metadata: Avoid returning cmd->bm wild pointer on error
    - dm thin metadata: Avoid returning cmd->bm wild pointer on error
    - net: refactor bind_bucket fastreuse into helper
    - net: initialize fastreuse on inet_inherit_port
    - checkpatch: fix the usage of capture group ( ... )
    - mm/hugetlb: fix a race between hugetlb sysctl handlers
    - cfg80211: regulatory: reject invalid hints
    - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
    - ALSA: firewire-digi00x: add support for console models of Digi00x series
    - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection
    - ALSA; firewire-tascam: exclude Tascam FE-8 from detection
    - fs/affs: use octal for permissions
    - affs: fix basic permission bits to actually work
    - ravb: Fixed to be able to unload modules
    - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
    - bnxt_en: Failure to update PHY is not fatal condition.
    - bnxt: don't enable NAPI until rings are ready
    - net: usb: dm9601: Add USB ID of Keenetic Plus DSL
    - sctp: not disable bh in the whole sctp_get_port_local()
    - net: disable netpoll on fresh napis
    - Linux 4.4.236
  * clock: overriding the clocksource should select the requested clocksource
    (LP: #1894591)
    - clocksource: Defer override invalidation unless clock is unstable
  * alsa/hdmi: the hdmi audio stops working from Ubuntu-4.4.0-155.182
    (LP: #1895603)
    - ALSA: hda/hdmi - Read the pin sense from register when repolling
    - SAUCE: ALSA: hda/hdmi - Check pin_eld->monitor_present
  * Xenial update: v4.4.235 upstream stable release (LP: #1895031)
    - net: Fix potential wrong skb->protocol in skb_vlan_untag()
    - tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
    - ipvlan: fix device features
    - bonding: show saner speed for broadcast mode
    - bonding: fix a potential double-unregister
    - powerpc/pseries: Do not initiate shutdown when system is running on UPS
    - ALSA: pci: delete repeated words in comments
    - ASoC: tegra: Fix reference count leaks.
    - media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA
      value in debiirq()
    - scsi: target: tcmu: Fix crash on ARM during cmd completion
    - drm/amdkfd: Fix reference count leaks.
    - drm/radeon: fix multiple reference count leak
    - drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms
    - drm/amd/display: fix ref count leak in amdgpu_drm_ioctl
    - drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config
    - drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails
    - scsi: lpfc: Fix shost refcount mismatch when deleting vport
    - selftests/powerpc: Purge extra count_pmc() calls of ebb selftests
    - PCI: Fix pci_create_slot() reference count leak
    - rtlwifi: rtl8192cu: Prevent leaking urb
    - mips/vdso: Fix resource leaks in genvdso.c
    - drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open
    - drm/nouveau: Fix reference count leak in nouveau_connector_detect
    - locking/lockdep: Fix overflow in presentation of average lock-time
    - scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
    - ceph: fix potential mdsc use-after-free crash
    - scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
    - EDAC/ie31200: Fallback if host bridge device is already initialized
    - media: davinci: vpif_capture: fix potential double free
    - powerpc/spufs: add CONFIG_COREDUMP dependency
    - USB: sisusbvga: Fix a potential UB casued by left shifting a negative value
    - Revert "ath10k: fix DMA related firmware crashes on multiple devices"
    - i2c: rcar: in slave mode, clear NACK earlier
    - jbd2: make sure jh have b_transaction set in refile/unfile_buffer
    - jbd2: abort journal if free a async write error metadata buffer
    - s390/cio: add cond_resched() in the slow_eval_known_fn() loop
    - scsi: ufs: Fix possible infinite loop in ufshcd_hold
    - net: gianfar: Add of_node_put() before goto statement
    - fbcon: prevent user font height or width change from causing potential out-
      of-bounds access
    - USB: lvtest: return proper error code in probe
    - vt: defer kfree() of vc_screenbuf in vc_do_resize()
    - vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
    - serial: samsung: Removes the IRQ not found warning
    - serial: pl011: Don't leak amba_ports entry on driver register error
    - serial: 8250: change lock order in serial8250_do_startup()
    - writeback: Protect inode->i_io_list with inode->i_lock
    - writeback: Avoid skipping inode writeback
    - writeback: Fix sync livelock due to b_dirty_time processing
    - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN
      data pointer which contains XEN specific information.
    - xhci: Do warm-reset when both CAS and XDEV_RESUME are set
    - PM: sleep: core: Fix the handling of pending runtime resume requests
    - device property: Fix the secondary firmware node handling in
      set_primary_fwnode()
    - USB: yurex: Fix bad gfp argument
    - usb: uas: Add quirk for PNY Pro Elite
    - USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge
    - usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe()
    - usb: storage: Add unusual_uas entry for Sony PSZ drives
    - btrfs: check the right error variable in btrfs_del_dir_entries_in_log
    - HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
    - ALSA: usb-audio: Update documentation comment for MS2109 quirk
    - Linux 4.4.235
  * DELL LATITUDE 5491 touchscreen doesn't work (LP: #1889446) // Xenial update:
    v4.4.235 upstream stable release (LP: #1895031)
    - USB: quirks: Add no-lpm quirk for another Raydium touchscreen
  * Xenial update: v4.4.234 upstream stable release (LP: #1893248)
    - cxl: Fix kobject memleak
    - drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
    - perf probe: Fix memory leakage when the probe point is not found
    - net/compat: Add missing sock updates for SCM_RIGHTS
    - watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in
      watchdog_info.options
    - watchdog: f71808e_wdt: remove use of wrong watchdog_info option
    - coredump: fix race condition between collapse_huge_page() and core dumping
    - khugepaged: khugepaged_test_exit() check mmget_still_valid()
    - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
    - btrfs: export helpers for subvolume name/id resolution
    - btrfs: don't show full path of bind mounts in subvol=
    - romfs: fix uninitialized memory leak in romfs_dev_read()
    - mm: include CMA pages in lowmem_reserve at boot
    - mm, page_alloc: fix core hung in free_pcppages_bulk()
    - ext4: clean up ext4_match() and callers
    - ext4: fix checking of directory entry validity for inline directories
    - media: budget-core: Improve exception handling in budget_register()
    - media: vpss: clean up resources in init
    - Input: psmouse - add a newline when printing 'proto' by sysfs
    - m68knommu: fix overwriting of bits in ColdFire V3 cache control
    - xfs: fix inode quota reservation checks
    - jffs2: fix UAF problem
    - scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases
    - virtio_ring: Avoid loop when vq is broken in virtqueue_poll
    - xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
    - alpha: fix annotation of io{read,write}{16,32}be()
    - ext4: fix potential negative array index in do_split()
    - ASoC: intel: Fix memleak in sst_media_open
    - powerpc: Allow 4224 bytes of stack expansion for the signal frame
    - epoll: Keep a reference on files added to the check list
    - do_epoll_ctl(): clean the failure exits up a bit
    - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
    - xen: don't reschedule in preemption off sections
    - omapfb: dss: Fix max fclk divider for omap36xx
    - KVM: arm/arm64: Don't reschedule in unmap_stage2_range()
    - Linux 4.4.234
  * CVE-2018-10322
    - libxfs: synchronize dinode_verify with userspace
    - xfs: sanity check directory inode di_size
    - xfs: move inode fork verifiers to xfs_dinode_verify
    - xfs: enhance dinode verifier

 -- Kelsey Skunberg <kelsey.skunberg@canonical.com>  Mon, 21 Sep 2020 22:19:58 -0600

linux-aws (4.4.0-1114.127) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1114.127 -proposed tracker (LP: #1893420)

  [ Ubuntu: 4.4.0-190.220 ]

  * xenial/linux: 4.4.0-190.220 -proposed tracker (LP: #1893431)
  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
  *  [Hyper-V] VSS and File Copy daemons intermittently fails to start
    (LP: #1891224)
    - [Packaging] Bind hv_vss_daemon startup to hv_vss device
    - [Packaging] bind hv_fcopy_daemon startup to hv_fcopy device
  * CVE-2019-20811
    - net-sysfs: call dev_hold if kobject_init_and_add success
  * CVE-2020-0067
    - f2fs: fix to avoid memory leakage in f2fs_listxattr
  * CVE-2019-9453
    - f2fs: fix to avoid accessing xattr across the boundary
  * Xenial update: 4.4.233 upstream stable release (LP: #1892822)
    - media: rc: prevent memory leak in cx23888_ir_probe
    - ath9k_htc: release allocated buffer if timed out
    - ath9k: release allocated buffer if timed out
    - nfs: Move call to security_inode_listsecurity into nfs_listxattr
    - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
    - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
    - drm: hold gem reference until object is no longer accessed
    - f2fs: check memory boundary by insane namelen
    - f2fs: check if file namelen exceeds max value
    - ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess
      watchpoints
    - fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
    - rds: Prevent kernel-infoleak in rds_notify_queue_get()
    - net/x25: Fix x25_neigh refcnt leak when x25 disconnect
    - net/x25: Fix null-ptr-deref in x25_disconnect
    - sh: Fix validation of system call number
    - net: lan78xx: add missing endpoint sanity check
    - net: lan78xx: fix transfer-buffer memory leak
    - mlxsw: core: Increase scope of RCU read-side critical section
    - mac80211: mesh: Free ie data when leaving mesh
    - nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
    - net: ethernet: ravb: exit if re-initialization fails in tx timeout
    - Revert "i2c: cadence: Fix the hold bit setting"
    - xen-netfront: fix potential deadlock in xennet_remove()
    - x86/i8259: Use printk_deferred() to prevent deadlock
    - random32: update the net random state on interrupt and activity
    - ARM: percpu.h: fix build error
    - random: fix circular include dependency on arm64 after addition of percpu.h
    - random32: remove net_rand_state from the latent entropy gcc plugin
    - random32: move the pseudo-random 32-bit definitions to prandom.h
    - ext4: fix direct I/O read error
    - USB: serial: qcserial: add EM7305 QDL product ID
    - ALSA: seq: oss: Serialize ioctls
    - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
    - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
    - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
    - vgacon: Fix for missing check in scrollback handling
    - mtd: properly check all write ioctls for permissions
    - net/9p: validate fds in p9_fd_open
    - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some
      reason
    - cfg80211: check vendor command doit pointer before use
    - igb: reinit_locked() should be called with rtnl_lock
    - atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
    - tools lib traceevent: Fix memory leak in process_dynamic_array_len
    - binder: Prevent context manager from incrementing ref 0
    - ipv4: Silence suspicious RCU usage warning
    - ipv6: fix memory leaks on IPV6_ADDRFORM path
    - Revert "vxlan: fix tos value before xmit"
    - net: lan78xx: replace bogus endpoint lookup
    - usb: hso: check for return value in hso_serial_common_create()
    - vxlan: Ensure FDB dump is performed under RCU
    - Smack: fix use-after-free in smk_write_relabel_self()
    - tracepoint: Mark __tracepoint_string's __used
    - udp: drop corrupt packets earlier to avoid data corruption
    - gpio: fix oops resulting from calling of_get_named_gpio(NULL, ...)
    - EDAC: Fix reference count leaks
    - m68k: mac: Don't send IOP message until channel is idle
    - m68k: mac: Fix IOP status/control register writes
    - ARM: at91: pm: add missing put_device() call in at91_pm_sram_init()
    - ARM: socfpga: PM: add missing put_device() call in
      socfpga_setup_ocram_self_refresh()
    - drm/tilcdc: fix leak & null ref in panel_connector_get_modes
    - Bluetooth: add a mutex lock to avoid UAF in do_enale_set
    - fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
    - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
    - video: fbdev: neofb: fix memory leak in neo_scan_monitor()
    - drm/nouveau: fix multiple instances of reference count leaks
    - drm/debugfs: fix plain echo to connector "force" attribute
    - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
    - brcmfmac: To fix Bss Info flag definition Bug
    - iwlegacy: Check the return value of pcie_capability_read_*()
    - usb: gadget: net2280: fix memory leak on probe error handling paths
    - bdc: Fix bug causing crash after multiple disconnects
    - dyndbg: fix a BUG_ON in ddebug_describe_flags
    - bcache: fix super block seq numbers comparision in register_cache_set()
    - ACPICA: Do not increment operation_region reference counts for field units
    - agp/intel: Fix a memory leak on module initialisation failure
    - video: fbdev: sm712fb: fix an issue about iounmap for a wrong address
    - console: newport_con: fix an issue about leak related system resources
    - iio: improve IIO_CONCENTRATION channel type description
    - leds: lm355x: avoid enum conversion warning
    - media: omap3isp: Add missed v4l2_ctrl_handler_free() for
      preview_init_entities()
    - scsi: cumana_2: Fix different dev_id between request_irq() and free_irq()
    - drm/radeon: fix array out-of-bounds read and write issues
    - scsi: powertec: Fix different dev_id between request_irq() and free_irq()
    - scsi: eesox: Fix different dev_id between request_irq() and free_irq()
    - media: firewire: Using uninitialized values in node_probe()
    - media: exynos4-is: Add missed check for pinctrl_lookup_state()
    - drm: panel: simple: Fix bpc for LG LB070WV8 panel
    - mwifiex: Prevent memory corruption handling keys
    - powerpc/vdso: Fix vdso cpu truncation
    - PCI/ASPM: Add missing newline in sysfs 'policy'
    - usb: dwc2: Fix error path in gadget registration
    - scsi: mesh: Fix panic after host or bus reset
    - Smack: fix another vsscanf out of bounds
    - Smack: prevent underflow in smk_set_cipso()
    - power: supply: check if calc_soc succeeded in pm860x_init_battery
    - s390/qeth: don't process empty bridge port events
    - wl1251: fix always return 0 error
    - net: spider_net: Fix the size used in a 'dma_free_coherent()' call
    - dlm: Fix kobject memleak
    - pinctrl-single: fix pcs_parse_pinconf() return value
    - drivers/net/wan/lapbether: Added needed_headroom and a skb->len check
    - net/nfc/rawsock.c: add CAP_NET_RAW check.
    - net: Set fput_needed iff FDPUT_FPUT is set
    - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
    - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
    - ALSA: usb-audio: add quirk for Pioneer DDJ-RB
    - crypto: qat - fix double free in qat_uclo_create_batch_init_list
    - fs/minix: check return value of sb_getblk()
    - fs/minix: don't allow getting deleted inodes
    - fs/minix: reject too-large maximum file size
    - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
    - 9p: Fix memory leak in v9fs_mount
    - parisc: mask out enable and reserved bits from sba imask
    - ARM: 8992/1: Fix unwind_frame for clang-built kernels
    - xen/balloon: fix accounting in alloc_xenballooned_pages error path
    - xen/balloon: make the balloon wait interruptible
    - PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context()
    - btrfs: only search for left_info if there is no right_info in
      try_merge_free_space
    - btrfs: fix memory leaks after failure to lookup checksums during inode
      logging
    - powerpc: Fix circular dependency between percpu.h and mmu.h
    - net: ethernet: stmmac: Disable hardware multicast filter
    - net: stmmac: dwmac1000: provide multicast filter fallback
    - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
    - bcache: allocate meta data pages as compound pages
    - mac80211: fix misplaced while instead of if
    - MIPS: CPU#0 is not hotpluggable
    - ext2: fix missing percpu_counter_inc
    - ocfs2: change slot number type s16 to u16
    - kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
    - pseries: Fix 64 bit logical memory block panic
    - USB: serial: ftdi_sio: make process-packet buffer unsigned
    - USB: serial: ftdi_sio: clean up receive processing
    - iommu/omap: Check for failure of a call to omap_iommu_dump_ctx
    - iommu/vt-d: Enforce PASID devTLB field mask
    - i2c: rcar: slave: only send STOP event when we have been addressed
    - clk: clk-atlas6: fix return value check in atlas6_clk_init()
    - Input: sentelic - fix error return when fsp_reg_write fails
    - drm/vmwgfx: Fix two list_for_each loop exit tests
    - nfs: Fix getxattr kernel panic and memory overflow
    - fs/ufs: avoid potential u32 multiplication overflow
    - mfd: dln2: Run event handler loop under spinlock
    - ALSA: echoaudio: Fix potential Oops in snd_echo_resume()
    - sh: landisk: Add missing initialization of sh_io_port_base
    - ipv6: check skb->protocol before lookup for nexthop
    - Linux 4.4.233

 -- Ian May <ian.may@canonical.com>  Thu, 03 Sep 2020 15:28:49 -0500

linux-aws (4.4.0-1113.126) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1113.125 -proposed tracker (LP: #1890659)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - [Packaging] update update.conf
    - [Packaging] resync dkms-build and family

  * Build and ship a signed wireguard.ko (LP: #1861284)
    - [Config] aws: wireguard -- enable for all architectures
    - [Packaging] aws: Add dkms build dependency

  [ Ubuntu: 4.4.0-189.219 ]

  * xenial/linux: 4.4.0-189.219 -proposed tracker (LP: #1891057)
  * Build and ship a signed wireguard.ko (LP: #1861284)
    - [Packaging] autoreconstruct -- manage executable debian files
    - [Packaging] dkms -- dkms package build packaging support
    - [Packaging] wireguard -- add support for building signed .ko
    - [Packaging] ignore wireguard modules when wireguard is disabled
    - [Config] update dkms package versions
    - [Config] wireguard -- enable for all architectures
  * ipsec: policy priority management is broken (LP: #1890796)
    - xfrm: policy: match with both mark and mask on user interfaces

  [ Ubuntu: 4.4.0-188.218 ]

  * xenial/linux: 4.4.0-188.218 -proposed tracker (LP: #1890670)
  * Xenial update: v4.4.232 upstream stable release (LP: #1889928)
    - pinctrl: amd: fix npins for uart0 in kerncz_groups
    - mac80211: allow rx of mesh eapol frames with default rx key
    - scsi: scsi_transport_spi: Fix function pointer check
    - xtensa: fix __sync_fetch_and_{and,or}_4 declarations
    - xtensa: update *pos in cpuinfo_op.next
    - drivers/net/wan/lapbether: Fixed the value of hard_header_len
    - net: sky2: initialize return of gm_phy_read
    - drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout
    - SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO
      compeletion")
    - perf/core: Fix locking for children siblings group read
    - uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix
      GDB regression
    - ALSA: info: Drop WARN_ON() from buffer NULL sanity check
    - ASoC: rt5670: Correct RT5670_LDO_SEL_MASK
    - btrfs: fix double free on ulist after backref resolution failure
    - x86/fpu: Disable bottom halves while loading FPU registers
    - btrfs: fix mount failure caused by race with umount
    - hippi: Fix a size used in a 'pci_free_consistent()' in an error handling
      path
    - ax88172a: fix ax88172a_unbind() failures
    - net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual
      configuration
    - net: smc91x: Fix possible memory leak in smc_drv_probe()
    - scripts/decode_stacktrace: strip basepath from all paths
    - regmap: dev_get_regmap_match(): fix string comparison
    - usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init()
    - arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP
    - x86: math-emu: Fix up 'cmp' insn for clang ias
    - Revert "cifs: Fix the target file was deleted when rename failed."
    - staging: wlan-ng: properly check endpoint types
    - staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift
    - staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support
    - staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift
    - staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift
    - serial: 8250: fix null-ptr-deref in serial8250_start_tx()
    - serial: 8250_mtk: Fix high-speed baud rates clamping
    - mm/memcg: fix refcount error while moving and swapping
    - parisc: Add atomic64_set_release() define to avoid CPU soft lockups
    - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
    - ath9k: Fix regression with Atheros 9271
    - AX.25: Fix out-of-bounds read in ax25_connect()
    - AX.25: Prevent out-of-bounds read in ax25_sendmsg()
    - net-sysfs: add a newline when printing 'tx_timeout' by sysfs
    - net: udp: Fix wrong clean up for IS_UDPLITE macro
    - AX.25: Prevent integer overflows in connect and sendmsg
    - tcp: allow at most one TLP probe per flight
    - rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
    - ip6_gre: fix null-ptr-deref in ip6gre_init_net()
    - drivers/net/wan/x25_asy: Fix to make it work
    - Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation
    - regmap: debugfs: check count when read regmap file
    - xfs: set format back to extents if xfs_bmap_extents_to_btree
    - tools/lib/subcmd/pager.c: do not alias select() params
    - perf: Make perf able to build with latest libbfd
    - perf tools: Fix snprint warnings for gcc 8
    - perf annotate: Use asprintf when formatting objdump command line
    - perf probe: Fix to check blacklist address correctly
    - Linux 4.4.232
  * Xenial update: v4.4.231 upstream stable release (LP: #1888690)
    - KVM: s390: reduce number of IO pins to 1
    - spi: spidev: fix a race between spidev_release and spidev_remove
    - spi: spidev: fix a potential use-after-free in spidev_release()
    - scsi: mptscsih: Fix read sense data size
    - net: cxgb4: fix return error value in t4_prep_fw
    - smsc95xx: check return value of smsc95xx_reset
    - smsc95xx: avoid memory leak in smsc95xx_bind
    - ALSA: compress: fix partial_drain completion state
    - arm64: kgdb: Fix single-step exception handling oops
    - ALSA: opl3: fix infoleak in opl3
    - ALSA: hda - let hs_mic be picked ahead of hp_mic
    - ALSA: usb-audio: add quirk for MacroSilicon MS2109
    - KVM: x86: bit 8 of non-leaf PDPEs is not reserved
    - Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"
    - btrfs: fix fatal extent_buffer readahead vs releasepage race
    - drm/radeon: fix double free
    - ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE
    - ARC: elf: use right ELF_ARCH
    - bnxt_en: fix NULL dereference in case SR-IOV configuration fails
    - ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg
    - l2tp: remove skb_dst_set() from l2tp_xmit_skb()
    - llc: make sure applications use ARPHRD_ETHER
    - net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb
    - genetlink: remove genl_bind
    - tcp: make sure listeners don't initialize congestion-control state
    - tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key()
    - tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers
    - tcp: md5: allow changing MD5 keys in all socket states
    - i2c: eg20t: Load module automatically if ID matches
    - Revert "usb/ehci-platform: Set PM runtime as active on resume"
    - Revert "usb/xhci-plat: Set PM runtime as active on resume"
    - Revert "usb/ohci-platform: Fix a warning when hibernating"
    - usb: gadget: udc: atmel: fix uninitialized read in debug printk
    - staging: comedi: verify array index is correct before using it
    - perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode
    - mtd: rawnand: brcmnand: fix CS0 layout
    - HID: magicmouse: do not set up autorepeat
    - usb: core: Add a helper function to check the validity of EP type in URB
    - ALSA: line6: Perform sanity check for each URB creation
    - ALSA: usb-audio: Fix race against the error recovery URB submission
    - USB: c67x00: fix use after free in c67x00_giveback_urb
    - usb: chipidea: core: add wakeup support for extcon
    - usb: gadget: function: fix missing spinlock in f_uac1_legacy
    - USB: serial: iuu_phoenix: fix memory corruption
    - USB: serial: cypress_m8: enable Simply Automated UPB PIM
    - USB: serial: ch341: add new Product ID for CH340
    - USB: serial: option: add GosunCn GM500 series
    - USB: serial: option: add Quectel EG95 LTE modem
    - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial
    - fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS
    - mei: bus: don't clean driver pointer
    - Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list
    - uio_pdrv_genirq: fix use without device tree and no interrupt
    - MIPS: Fix build for LTS kernel caused by backporting lpj adjustment
    - hwmon: (emc2103) fix unable to change fan pwm1_enable attribute
    - dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler
    - misc: atmel-ssc: lock with mutex instead of spinlock
    - sched/fair: handle case of task_h_load() returning 0
    - Linux 4.4.231

 -- Stefan Bader <stefan.bader@canonical.com>  Fri, 14 Aug 2020 11:58:04 +0200

linux-aws (4.4.0-1112.124) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1112.124 -proposed tracker (LP: #1888263)

  [ Ubuntu: 4.4.0-187.217 ]

  * xenial/linux: 4.4.0-187.217 -proposed tracker (LP: #1888274)
  * Regression in kernel 4.15.0-91 causes kernel panic with Bcache
    (LP: #1867916)
    - bcache: check and adjust logical block size for backing devices
  * Xenial update: v4.4.230 upstream stable release (LP: #1887011)
    - btrfs: cow_file_range() num_bytes and disk_num_bytes are same
    - btrfs: fix data block group relocation failure due to concurrent scrub
    - mm: fix swap cache node allocation mask
    - EDAC/amd64: Read back the scrub rate PCI register on F15h
    - mm/slub: fix stack overruns with SLUB_STATS
    - usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect
    - kgdb: Avoid suspicious RCU usage warning
    - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock()
    - sched/rt: Show the 'sched_rr_timeslice' SCHED_RR timeslice tuning knob in
      milliseconds
    - hwmon: (max6697) Make sure the OVERT mask is set correctly
    - hwmon: (acpi_power_meter) Fix potential memory leak in
      acpi_power_meter_add()
    - virtio-blk: free vblk-vqs in error path of virtblk_probe()
    - i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665
    - Revert "ALSA: usb-audio: Improve frames size computation"
    - SMB3: Honor 'seal' flag for multiuser mounts
    - SMB3: Honor persistent/resilient handle flags for multiuser mounts
    - cifs: Fix the target file was deleted when rename failed.
    - MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen
    - netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6
    - Linux 4.4.230
  * Xenial update: v4.4.229 upstream stable release (LP: #1885932)
    - s390: fix syscall_get_error for compat processes
    - clk: sunxi: Fix incorrect usage of round_down()
    - i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets
    - clk: qcom: msm8916: Fix the address location of pll->config_reg
    - ALSA: isa/wavefront: prevent out of bounds write in ioctl
    - scsi: qla2xxx: Fix issue with adapter's stopping state
    - i2c: pxa: clear all master action bits in i2c_pxa_stop_message()
    - usblp: poison URBs upon disconnect
    - ps3disk: use the default segment boundary
    - vfio/pci: fix memory leaks in alloc_perm_bits()
    - mfd: wm8994: Fix driver operation if loaded as modules
    - scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event
    - nfsd: Fix svc_xprt refcnt leak when setup callback client failed
    - powerpc/crashkernel: Take "mem=" option into account
    - yam: fix possible memory leak in yam_init_driver
    - mksysmap: Fix the mismatch of '.L' symbols in System.map
    - scsi: sr: Fix sr_probe() missing deallocate of device minor
    - scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM
    - ALSA: usb-audio: Improve frames size computation
    - s390/qdio: put thinint indicator after early error
    - tty: hvc: Fix data abort due to race in hvc_open
    - staging: sm750fb: add missing case while setting FB_VISUAL
    - i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output
    - serial: amba-pl011: Make sure we initialize the port.lock spinlock
    - drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a
      driver developer is foolish
    - PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges
    - power: supply: smb347-charger: IRQSTAT_D is volatile
    - scsi: mpt3sas: Fix double free warnings
    - dlm: remove BUG() before panic()
    - clk: ti: composite: fix memory leak
    - tty: n_gsm: Fix SOF skipping
    - tty: n_gsm: Fix waking up upper tty layer when room available
    - powerpc/pseries/ras: Fix FWNMI_VALID off by one
    - powerpc/ps3: Fix kexec shutdown hang
    - vfio-pci: Mask cap zero
    - usb/ohci-platform: Fix a warning when hibernating
    - USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe()
    - tty: n_gsm: Fix bogus i++ in gsm_data_kick
    - clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1
    - watchdog: da9062: No need to ping manually before setting timeout
    - usb: dwc2: gadget: move gadget resume after the core is in L0 state
    - USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in
      s3c2410_udc_nuke
    - usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check
    - usb: gadget: fix potential double-free in m66592_probe.
    - net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'
    - ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed
    - openrisc: Fix issue with argument clobbering for clone/fork
    - gfs2: Allow lock_nolock mount to specify jid=X
    - scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj
    - lib/zlib: remove outdated and incorrect pre-increment optimization
    - include/linux/bitops.h: avoid clang shift-count-overflow warnings
    - elfnote: mark all .note sections SHF_ALLOC
    - selftests/net: in timestamping, strncpy needs to preserve null byte
    - scsi: acornscsi: Fix an error handling path in acornscsi_probe()
    - usb/xhci-plat: Set PM runtime as active on resume
    - usb/ehci-platform: Set PM runtime as active on resume
    - perf report: Fix NULL pointer dereference in
      hists__fprintf_nr_sample_events()
    - bcache: fix potential deadlock problem in btree_gc_coalesce
    - block: Fix use-after-free in blkdev_get()
    - drm: encoder_slave: fix refcouting error for modules
    - drm/dp_mst: Reformat drm_dp_check_act_status() a bit
    - drm/qxl: Use correct notify port address when creating cursor ring
    - selinux: fix double free
    - ext4: fix partial cluster initialization when splitting extent
    - drm/dp_mst: Increase ACT retry timeout to 3s
    - sparc64: fix misuses of access_process_vm() in genregs32_[sg]et()
    - block: nr_sects_write(): Disable preemption on seqcount write
    - crypto: algboss - don't wait during notifier callback
    - kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex
    - powerpc/kprobes: Fixes for kprobe_lookup_name() on BE
    - x86/kprobes: Avoid kretprobe recursion bug
    - kretprobe: Prevent triggering kretprobe from within kprobe_flush_task
    - e1000e: Do not wake up the system via WOL if device wakeup is disabled
    - sched/rt, net: Use CONFIG_PREEMPTION.patch
    - net: core: device_rename: Use rwsem instead of a seqcount
    - net: Revert "pkt_sched: fq: use proper locking in fq_dump_stats()"
    - scsi: scsi_devinfo: handle non-terminated strings
    - l2tp: Allow duplicate session creation with UDP
    - net: sched: export __netdev_watchdog_up()
    - fix a braino in "sparc32: fix register window handling in
      genregs32_[gs]et()"
    - net: fix memleak in register_netdevice()
    - net: usb: ax88179_178a: fix packet alignment padding
    - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
    - ip_tunnel: fix use-after-free in ip_tunnel_lookup()
    - tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
    - ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
    - tcp: grow window for OOO packets only for SACK flows
    - sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
    - net: Fix the arp error in some cases
    - net: Do not clear the sock TX queue in sk_set_socket()
    - net: core: reduce recursion limit value
    - mld: fix memory leak in ipv6_mc_destroy_dev()
    - USB: ohci-sm501: Add missed iounmap() in remove
    - usb: dwc2: Postponed gadget registration to the udc class driver
    - usb: add USB_QUIRK_DELAY_INIT for Logitech C922
    - PCI: Disable MSI for HiSilicon Hip06/Hip07 Root Ports
    - USB: ehci: reopen solution for Synopsys HC bug
    - usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
    - ALSA: usb-audio: add quirk for Denon DCD-1500RE
    - xhci: Fix incorrect EP_STATE_MASK
    - xhci: Fix enumeration issue when setting max packet size for FS devices.
    - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
    - ALSA: usb-audio: uac1: Invalidate ctl on interrupt
    - ALSA: usb-audio: allow clock source validity interrupts
    - ALSA: usb-audio: Clean up mixer element list traverse
    - ALSA: usb-audio: Fix OOB access of mixer element list
    - xhci: Poll for U0 after disabling USB2 LPM
    - cifs/smb3: Fix data inconsistent when punch hole
    - cifs/smb3: Fix data inconsistent when zero file range
    - efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
    - RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
    - ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram()
    - usb: gadget: udc: Potential Oops in error handling code
    - netfilter: ipset: fix unaligned atomic access
    - sched/core: Fix PI boosting between RT and DEADLINE tasks
    - net: alx: fix race condition in alx_remove
    - kbuild: improve cc-option to clean up all temporary files
    - blktrace: break out of blktrace setup on concurrent calls
    - ACPI: sysfs: Fix pm_profile_attr type
    - KVM: X86: Fix MSR range of APIC registers in X2APIC mode
    - mm/slab: use memzero_explicit() in kzfree()
    - ocfs2: load global_inode_alloc
    - ocfs2: fix value of OCFS2_INVALID_SLOT
    - ocfs2: fix panic on nfs server over ocfs2
    - arm64: perf: Report the PC value in REGS_ABI_32 mode
    - tracing: Fix event trigger to accept redundant spaces
    - drm/radeon: fix fb_div check in ni_init_smc_spll_table()
    - sunrpc: fixed rollback in rpc_gssd_dummy_populate()
    - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
    - pNFS/flexfiles: Fix list corruption if the mirror count changes
    - NFSv4 fix CLOSE not waiting for direct IO compeletion
    - PCI: Disable MSI for HiSilicon Hip06/Hip07 only in Root Port mode
    - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate()
    - Linux 4.4.229
  * Computer is frozen after suspend (LP: #1867983) // Xenial update: v4.4.229
    upstream stable release (LP: #1885932)
    - libata: Use per port sync for detach

 -- Kelsey Skunberg <kelsey.skunberg@canonical.com>  Wed, 22 Jul 2020 14:57:32 -0600

linux-aws (4.4.0-1111.123) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1111.123 -proposed tracker (LP: #1885503)

  [ Ubuntu: 4.4.0-186.216 ]

  * xenial/linux: 4.4.0-186.216 -proposed tracker (LP: #1885514)
  * Xenial update: v4.4.228 upstream stable release (LP: #1884564)
    - ipv6: fix IPV6_ADDRFORM operation logic
    - vxlan: Avoid infinite loop when suppressing NS messages with invalid options
    - scsi: return correct blkprep status code in case scsi_init_io() fails.
    - net: phy: marvell: Limit 88m1101 autoneg errata to 88E1145 as well.
    - pwm: fsl-ftm: Use flat regmap cache
    - ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook
    - sched/fair: Don't NUMA balance for kthreads
    - ath9k_htc: Silence undersized packet warnings
    - x86_64: Fix jiffies ODR violation
    - x86/speculation: Prevent rogue cross-process SSBD shutdown
    - x86/reboot/quirks: Add MacBook6,1 reboot quirk
    - efi/efivars: Add missing kobject_put() in sysfs entry creation error path
    - ALSA: es1688: Add the missed snd_card_free()
    - ALSA: usb-audio: Fix inconsistent card PM state after resume
    - ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
    - ACPI: PM: Avoid using power resources if there are none for D0
    - cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages
    - nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
    - spi: bcm2835aux: Fix controller unregister order
    - ALSA: pcm: disallow linking stream to itself
    - x86/speculation: Change misspelled STIPB to STIBP
    - x86/speculation: Add support for STIBP always-on preferred mode
    - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced
      IBRS.
    - x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
    - spi: dw: fix possible race condition
    - spi: dw: Fix controller unregister order
    - spi: No need to assign dummy value in spi_unregister_controller()
    - spi: Fix controller unregister order
    - spi: pxa2xx: Fix controller unregister order
    - spi: bcm2835: Fix controller unregister order
    - ovl: initialize error in ovl_copy_xattr
    - proc: Use new_inode not new_inode_pseudo
    - video: fbdev: w100fb: Fix a potential double free.
    - KVM: nSVM: leave ASID aside in copy_vmcb_control_area
    - KVM: nVMX: Consult only the "basic" exit reason when routing nested exit
    - KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts
    - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
    - ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
    - ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
    - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
    - Smack: slab-out-of-bounds in vsscanf
    - mm/slub: fix a memory leak in sysfs_slab_add()
    - fat: don't allow to mount if the FAT length == 0
    - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices
    - spi: dw: Zero DMA Tx and Rx configurations on stack
    - Bluetooth: Add SCO fallback for invalid LMP parameters error
    - kgdb: Prevent infinite recursive entries to the debugger
    - spi: dw: Enable interrupts in accordance with DMA xfer mode
    - clocksource: dw_apb_timer_of: Fix missing clockevent timers
    - btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums
    - ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE
    - net: vmxnet3: fix possible buffer overflow caused by bad DMA value in
      vmxnet3_get_rss()
    - staging: android: ion: use vmap instead of vm_map_ram
    - e1000: Distribute switch variables for initialization
    - media: dvb: return -EREMOTEIO on i2c transfer failure.
    - MIPS: Make sparse_init() using top-down allocation
    - netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
    - lib/mpi: Fix 64-bit MIPS build with Clang
    - net: lpc-enet: fix error return code in lpc_mii_init()
    - net: allwinner: Fix use correct return type for ndo_start_xmit()
    - powerpc/spufs: fix copy_to_user while atomic
    - mips: cm: Fix an invalid error code of INTVN_*_ERR
    - kgdb: Fix spurious true from in_dbg_master()
    - md: don't flush workqueue unconditionally in md_open
    - mwifiex: Fix memory corruption in dump_station
    - mips: Add udelay lpj numbers adjustment
    - x86/mm: Stop printing BRK addresses
    - m68k: mac: Don't call via_flush_cache() on Mac IIfx
    - macvlan: Skip loopback packets in RX handler
    - PCI: Don't disable decoding when mmio_always_on is set
    - MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe()
    - ixgbe: fix signed-integer-overflow warning
    - spi: dw: Return any value retrieved from the dma_transfer callback
    - cpuidle: Fix three reference count leaks
    - ima: Fix ima digest hash table key calculation
    - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
    - Btrfs: fix unreplayable log after snapshot delete + parent dir fsync
    - btrfs: send: emit file capabilities after chown
    - btrfs: fix error handling when submitting direct I/O bio
    - ima: Directly assign the ima_default_policy pointer to ima_rules
    - PCI: Program MPS for RCiEP devices
    - e1000e: Relax condition to trigger reset for ME workaround
    - carl9170: remove P2P_GO support
    - media: go7007: fix a miss of snd_card_free
    - b43legacy: Fix case where channel status is corrupted
    - b43: Fix connection problem with WPA3
    - b43_legacy: Fix connection problem with WPA3
    - igb: Report speed and duplex as unknown when device is runtime suspended
    - power: vexpress: add suppress_bind_attrs to true
    - pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs
    - sparc32: fix register window handling in genregs32_[gs]et()
    - kernel/cpu_pm: Fix uninitted local in cpu_pm
    - ARM: tegra: Correct PL310 Auxiliary Control Register initialization
    - drivers/macintosh: Fix memleak in windfarm_pm112 driver
    - kbuild: force to build vmlinux if CONFIG_MODVERSION=y
    - sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate
      registrations.
    - sunrpc: clean up properly in gss_mech_unregister()
    - w1: omap-hdq: cleanup to add missing newline for some dev_dbg
    - perf probe: Do not show the skipped events
    - perf symbols: Fix debuginfo search for Ubuntu
    - Linux 4.4.228
  * Update lockdown patches (LP: #1884159)
    - acpi: Disable ACPI table override if the kernel is locked down
    - SAUCE: (efi-lockdown) x86/mmiotrace: Lock down the testmmiotrace module
    - Revert "Restrict /dev/mem and /dev/kmem when module loading is restricted"
    - Revert "x86: Lock down IO port access when module security is enabled"
    - SAUCE: (efi-lockdown) Restrict /dev/{mem, kmem, port} when the kernel is
      locked down
    - Annotate module params that specify hardware parameters (eg. ioport)
    - Annotate hardware config module parameters in arch/x86/mm/
    - Annotate hardware config module parameters in drivers/char/ipmi/
    - Annotate hardware config module parameters in drivers/char/mwave/
    - Annotate hardware config module parameters in drivers/char/
    - Annotate hardware config module parameters in drivers/clocksource/
    - Annotate hardware config module parameters in drivers/cpufreq/
    - Annotate hardware config module parameters in drivers/gpio/
    - Annotate hardware config module parameters in drivers/i2c/
    - Annotate hardware config module parameters in drivers/input/
    - Annotate hardware config module parameters in drivers/isdn/
    - Annotate hardware config module parameters in drivers/media/
    - Annotate hardware config module parameters in drivers/misc/
    - Annotate hardware config module parameters in drivers/mmc/host/
    - Annotate hardware config module parameters in drivers/net/appletalk/
    - Annotate hardware config module parameters in drivers/net/arcnet/
    - Annotate hardware config module parameters in drivers/net/can/
    - Annotate hardware config module parameters in drivers/net/ethernet/
    - Annotate hardware config module parameters in drivers/net/hamradio/
    - Annotate hardware config module parameters in drivers/net/irda/
    - Annotate hardware config module parameters in drivers/net/wan/
    - Annotate hardware config module parameters in drivers/net/wireless/
    - Annotate hardware config module parameters in drivers/parport/
    - Annotate hardware config module parameters in drivers/pci/hotplug/
    - Annotate hardware config module parameters in drivers/pcmcia/
    - Annotate hardware config module parameters in drivers/scsi/
    - Annotate hardware config module parameters in drivers/staging/media/
    - Annotate hardware config module parameters in drivers/staging/speakup/
    - Annotate hardware config module parameters in drivers/staging/vme/
    - Annotate hardware config module parameters in drivers/tty/
    - Annotate hardware config module parameters in drivers/video/
    - Annotate hardware config module parameters in drivers/watchdog/
    - Annotate hardware config module parameters in fs/pstore/
    - Annotate hardware config module parameters in sound/drivers/
    - Annotate hardware config module parameters in sound/isa/
    - Annotate hardware config module parameters in sound/oss/
    - Annotate hardware config module parameters in sound/pci/
    - SAUCE: (efi-lockdown) Lock down module params that specify hardware
      parameters (eg. ioport)
    - SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked
      down
    - SAUCE: (efi-lockdown) kexec_file: Disable at runtime if the kernel is locked
      down
    - SAUCE: (efi-lockdown) Lock down TIOCSSERIAL
    - efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
    - debugfs: prevent access to possibly dead file_operations at file open
    - debugfs: prevent access to removed files' private data
    - debugfs: add support for self-protecting attribute file fops
    - debugfs: unproxify integer attribute files
    - debugfs: unproxify files created through debugfs_create_bool()
    - debugfs: unproxify files created through debugfs_create_blob()
    - debugfs: unproxify files created through debugfs_create_u32_array()
    - debugfs: full_proxy_open(): free proxy on ->open() failure
    - debugfs: open_proxy_open(): avoid double fops release
    - SAUCE: (efi-lockdown) debugfs: Disallow use of debugfs files when the kernel
      is locked down
  * Xenial update: v4.4.227 upstream stable release (LP: #1883918)
    - scsi: scsi_devinfo: fixup string compare
    - usb: gadget: f_uac2: fix error handling in afunc_bind (again)
    - platform/x86: acer-wmi: setup accelerometer when ACPI device was found
    - esp6: fix memleak on error path in esp6_input
    - IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()'
    - ALSA: hda - No loopback on ALC299 codec
    - spi: dw: use "smp_mb()" to avoid sending spi data error
    - s390/ftrace: save traced function caller
    - ARC: Fix ICCM & DCCM runtime size checks
    - x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables
    - net: bmac: Fix read of MAC address from ROM
    - net/ethernet/freescale: rework quiesce/activate for ucc_geth
    - net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x
    - pppoe: only process PADT targeted at local interfaces
    - mmc: fix compilation of user API
    - slcan: Fix double-free on slcan_open() error path
    - slip: not call free_netdev before rtnl_unlock in slip_open
    - scsi: ufs: Release clock if DMA map fails
    - devinet: fix memleak in inetdev_init()
    - NFC: st21nfca: add missed kfree_skb() in an error path
    - vsock: fix timeout in vsock_accept()
    - l2tp: add sk_family checks to l2tp_validate_socket
    - l2tp: do not use inet_hash()/inet_unhash()
    - USB: serial: qcserial: add DW5816e QDL support
    - USB: serial: usb_wwan: do not resubmit rx urb on fatal errors
    - USB: serial: option: add Telit LE910C1-EUX compositions
    - vt: keyboard: avoid signed integer overflow in k_ascii
    - staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
    - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
    - x86/speculation: Add SRBDS vulnerability and mitigation documentation
    - x86/speculation: Add Ivy Bridge to affected list
    - iio: vcnl4000: Fix i2c swapped word reading.
    - uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly
      aligned
    - Linux 4.4.227
  * Xenial update: v4.4.226 upstream stable release (LP: #1883917)
    - ax25: fix setsockopt(SO_BINDTODEVICE)
    - net: revert "net: get rid of an signed integer overflow in
      ip_idents_reserve()"
    - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and
      socket is closed
    - net/mlx5: Add command entry handling completion
    - net: sun: fix missing release regions in cas_init_one().
    - net/mlx4_core: fix a memory leak bug.
    - uapi: fix linux/if_pppol2tp.h userspace compilation errors
    - IB/cma: Fix reference count leak when no ipv4 addresses are set
    - cachefiles: Fix race between read_waiter and read_copier involving op->to_do
    - usb: gadget: legacy: fix redundant initialization warnings
    - cifs: Fix null pointer check in cifs_read
    - Input: usbtouchscreen - add support for BonXeon TP
    - Input: evdev - call input_flush_device() on release(), not flush()
    - Input: xpad - add custom init packet for Xbox One S controllers
    - Input: i8042 - add ThinkPad S230u to i8042 reset list
    - IB/qib: Call kobject_put() when kobject_init_and_add() fails
    - ALSA: hwdep: fix a left shifting 1 by 31 UB bug
    - ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC
    - exec: Always set cap_ambient in cap_bprm_set_creds
    - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
    - include/asm-generic/topology.h: guard cpumask_of_node() macro argument
    - iommu: Fix reference count leak in iommu_group_alloc.
    - parisc: Fix kernel panic in mem_init()
    - x86/dma: Fix max PFN arithmetic overflow on 32 bit systems
    - xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input
    - xfrm: fix a warning in xfrm_policy_insert_list
    - xfrm: fix a NULL-ptr deref in xfrm_local_error
    - vti4: eliminated some duplicate code.
    - ip_vti: receive ipip packet by calling ip_tunnel_rcv
    - netfilter: nft_reject_bridge: enable reject with bridge vlan
    - netfilter: ipset: Fix subcounter update skip
    - netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code
    - qlcnic: fix missing release in qlcnic_83xx_interrupt_test.
    - bonding: Fix reference count leak in bond_sysfs_slave_add.
    - netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
    - mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()
    - genirq/generic_pending: Do not lose pending affinity update
    - usb: renesas_usbhs: gadget: fix spin_lock_init() for &uep->lock
    - mac80211: fix memory leak
    - net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
    - mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()
    - asm-prototypes: Clear any CPP defines before declaring the functions
    - sc16is7xx: move label 'err_spi' to correct section
    - drm/msm: Fix possible null dereference on failure of get_pages()
    - printk: help pr_debug and pr_devel to optimize out arguments
    - scsi: zfcp: fix request object use-after-free in send path causing wrong
      traces
    - Linux 4.4.226
  * Xenial update: v4.4.225 upstream stable release (LP: #1883916)
    - igb: use igb_adapter->io_addr instead of e1000_hw->hw_addr
    - padata: Remove unused but set variables
    - padata: get_next is never NULL
    - padata: ensure the reorder timer callback runs on the correct CPU
    - padata: ensure padata_do_serial() runs on the correct CPU
    - evm: Check also if *tfm is an error pointer in init_desc()
    - fix multiplication overflow in copy_fdtable()
    - HID: multitouch: add eGalaxTouch P80H84 support
    - ceph: fix double unlock in handle_cap_export()
    - USB: core: Fix misleading driver bug report
    - platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
    - ARM: futex: Address build warning
    - media: Fix media_open() to clear filp->private_data in error leg
    - drivers/media/media-devnode: clear private_data before put_device()
    - media-devnode: add missing mutex lock in error handler
    - media-devnode: fix namespace mess
    - media-device: dynamically allocate struct media_devnode
    - media: fix use-after-free in cdev_put() when app exits after driver unbind
    - media: fix media devnode ioctl/syscall and unregister race
    - i2c: dev: switch from register_chrdev to cdev API
    - i2c: dev: don't start function name with 'return'
    - i2c: dev: use after free in detach
    - i2c-dev: don't get i2c adapter via i2c_dev
    - i2c: dev: Fix the race between the release of i2c_dev and cdev
    - padata: set cpu_index of unused CPUs to -1
    - sched/fair, cpumask: Export for_each_cpu_wrap()
    - padata: Replace delayed timer with immediate workqueue in padata_reorder
    - padata: initialize pd->cpu with effective cpumask
    - padata: purge get_cpu and reorder_via_wq from padata_do_serial
    - ALSA: pcm: fix incorrect hw_base increase
    - platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
    - libnvdimm/btt: Remove unnecessary code in btt_freelist_init
    - l2tp: lock socket before checking flags in connect()
    - l2tp: fix racy socket lookup in l2tp_ip and l2tp_ip6 bind()
    - l2tp: hold session while sending creation notifications
    - l2tp: take a reference on sessions used in genetlink handlers
    - l2tp: don't use l2tp_tunnel_find() in l2tp_ip and l2tp_ip6
    - net: l2tp: export debug flags to UAPI
    - net: l2tp: deprecate PPPOL2TP_MSG_* in favour of L2TP_MSG_*
    - net: l2tp: ppp: change PPPOL2TP_MSG_* => L2TP_MSG_*
    - New kernel function to get IP overhead on a socket.
    - L2TP:Adjust intf MTU, add underlay L3, L2 hdrs.
    - l2tp: remove useless duplicate session detection in l2tp_netlink
    - l2tp: remove l2tp_session_find()
    - l2tp: define parameters of l2tp_session_get*() as "const"
    - l2tp: define parameters of l2tp_tunnel_find*() as "const"
    - l2tp: initialise session's refcount before making it reachable
    - l2tp: hold tunnel while looking up sessions in l2tp_netlink
    - l2tp: hold tunnel while processing genl delete command
    - l2tp: hold tunnel while handling genl tunnel updates
    - l2tp: hold tunnel while handling genl TUNNEL_GET commands
    - l2tp: hold tunnel used while creating sessions with netlink
    - l2tp: prevent creation of sessions on terminated tunnels
    - l2tp: fix l2tp_eth module loading
    - l2tp: don't register sessions in l2tp_session_create()
    - l2tp: initialise l2tp_eth sessions before registering them
    - l2tp: protect sock pointer of struct pppol2tp_session with RCU
    - l2tp: initialise PPP sessions before registering them
    - Revert "gfs2: Don't demote a glock until its revokes are written"
    - staging: iio: ad2s1210: Fix SPI reading
    - mei: release me_cl object reference
    - iio: sca3000: Remove an erroneous 'get_device()'
    - l2tp: device MTU setup, tunnel socket needs a lock
    - cpumask: Make for_each_cpu_wrap() available on UP as well
    - Linux 4.4.225
  * smpboot: don't call topology_sane() when Sub-NUMA-Clustering is enabled
    (LP: #1882478)
    - x86, sched: Allow topologies where NUMA nodes share an LLC
  * CVE-2020-11935
    - SAUCE: aufs: do not call i_readcount_inc()
    - SAUCE: aufs: bugfix, IMA i_readcount
  * CVE-2019-12380
    - efi/x86/Add missing error handling to old_memmap 1:1 mapping code

 -- Kelsey Skunberg <kelsey.skunberg@canonical.com>  Wed, 01 Jul 2020 11:47:42 -0600

linux-aws (4.4.0-1110.121) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1110.121 -proposed tracker (LP: #1882759)

  [ Ubuntu: 4.4.0-185.215 ]

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
  * CVE-2020-0543
    - UBUNTU/SAUCE: x86/speculation/srbds: do not try to turn mitigation off when
      not supported
  * Xenial update: 4.4.224 upstream stable release (LP: #1881356)
    - USB: serial: qcserial: Add DW5816e support
    - Revert "net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS"
    - dp83640: reverse arguments to list_add_tail
    - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
    - sch_sfq: validate silly quantum values
    - sch_choke: avoid potential panic in choke_reset()
    - enic: do not overwrite error code
    - ipv6: fix cleanup ordering for ip6_mr failure
    - binfmt_elf: move brk out of mmap when doing direct loader exec
    - x86/apm: Don't access __preempt_count with zeroed fs
    - Revert "IB/ipoib: Update broadcast object if PKey value was changed in index
      0"
    - USB: uas: add quirk for LaCie 2Big Quadra
    - USB: serial: garmin_gps: add sanity checking for data length
    - batman-adv: fix batadv_nc_random_weight_tq
    - scripts/decodecode: fix trapping instruction formatting
    - phy: micrel: Ensure interrupts are reenabled on resume
    - binfmt_elf: Do not move brk for INTERP-less ET_EXEC
    - ext4: add cond_resched() to ext4_protect_reserved_inode
    - blktrace: Fix potential deadlock between delete & sysfs ops
    - blktrace: fix unlocked access to init/start-stop/teardown
    - blktrace: fix trace mutex deadlock
    - ptp: do not explicitly set drvdata in ptp_clock_register()
    - ptp: use is_visible method to hide unused attributes
    - ptp: create "pins" together with the rest of attributes
    - chardev: add helper function to register char devs with a struct device
    - ptp: Fix pass zero to ERR_PTR() in ptp_clock_register
    - ptp: fix the race between the release of ptp_clock and cdev
    - ptp: free ptp device pin descriptors properly
    - net: handle no dst on skb in icmp6_send
    - net/sonic: Fix a resource leak in an error handling path in
      'jazz_sonic_probe()'
    - net: moxa: Fix a potential double 'free_irq()'
    - drop_monitor: work around gcc-10 stringop-overflow warning
    - scsi: sg: add sg_remove_request in sg_write
    - cifs: Check for timeout on Negotiate stage
    - cifs: Fix a race condition with cifs_echo_request
    - dmaengine: pch_dma.c: Avoid data race between probe and irq handler
    - dmaengine: mmp_tdma: Reset channel error on release
    - drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
    - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
    - net: openvswitch: fix csum updates for MPLS actions
    - gre: do not keep the GRE header around in collect medata mode
    - mm/memory_hotplug.c: fix overflow in test_pages_in_a_zone()
    - scsi: qla2xxx: Avoid double completion of abort command
    - i40e: avoid NVM acquire deadlock during NVM update
    - net/mlx5: Fix driver load error flow when firmware is stuck
    - netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
    - IB/mlx4: Test return value of calls to ib_get_cached_pkey
    - pnp: Use list_for_each_entry() instead of open coding
    - gcc-10 warnings: fix low-hanging fruit
    - kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig
    - Stop the ad-hoc games with -Wno-maybe-initialized
    - gcc-10: disable 'zero-length-bounds' warning for now
    - gcc-10: disable 'array-bounds' warning for now
    - gcc-10: disable 'stringop-overflow' warning for now
    - gcc-10: disable 'restrict' warning for now
    - blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter
    - blk-mq: Allow blocking queue tag iter callbacks
    - x86/paravirt: Remove the unused irq_enable_sysexit pv op
    - gcc-10: avoid shadowing standard library 'free()' in crypto
    - net: fix a potential recursive NETDEV_FEAT_CHANGE
    - net: ipv4: really enforce backoff for redirects
    - ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
    - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
    - ALSA: rawmidi: Initialize allocated buffers
    - ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries
    - x86: Fix early boot crash on gcc-10, third try
    - exec: Move would_dump into flush_old_exec
    - usb: gadget: net2272: Fix a memory leak in an error handling path in
      'net2272_plat_probe()'
    - usb: gadget: audio: Fix a missing error return value in audio_bind()
    - usb: gadget: legacy: fix error return code in gncm_bind()
    - usb: gadget: legacy: fix error return code in cdc_bind()
    - ARM: dts: r8a7740: Add missing extal2 to CPG node
    - KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
    - Makefile: disallow data races on gcc-10 as well
    - scsi: iscsi: Fix a potential deadlock in the timeout handler
    - Linux 4.4.224
  * upgrading to 4.15.0-99-generic breaks the sound and the trackpad
    (LP: #1875916) // Xenial update: 4.4.224 upstream stable release
    (LP: #1881356)
    - Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
  * CVE-2020-10711
    - netlabel: cope with NULL catmap
  * CVE-2020-13143
    - USB: gadget: fix illegal array access in binding with UDC
  * ext2 build failure on 4.4.0-180.210 (LP: #1880213)
    - ext2: fix debug reference to ext2_xattr_cache
  * test_bpf of ubuntu_kernel_selftests.net ADT test failure with linux
    4.4.0-180.210 (LP: #1879752)
    - bpf, test: fix ld_abs + vlan push/pop stress test

 -- Ian May <ian.may@canonical.com>  Wed, 10 Jun 2020 15:40:59 -0500

linux-aws (4.4.0-1109.120) xenial; urgency=medium


  [ Ubuntu: 4.4.0-184.214 ]

  * CVE-2020-0543
    - SAUCE: x86/cpu: Add a steppings field to struct x86_cpu_id
    - SAUCE: x86/cpu: Add 'table' argument to cpu_matches()
    - SAUCE: x86/speculation: Add Special Register Buffer Data Sampling (SRBDS)
      mitigation
    - SAUCE: x86/speculation: Add SRBDS vulnerability and mitigation documentation
    - SAUCE: x86/speculation: Add Ivy Bridge to affected list

  [ Ubuntu: 4.4.0-181.211 ]

  * xenial/linux: 4.4.0-181.211 -proposed tracker (LP: #1881170)
  * CVE-2020-12769
    - spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
  * I2C bus on Dell Edge Gateway stops working after upgrading to
    Ubuntu-4.4.0-180.210 (LP: #1881124)
    - SAUCE: Revert: Revert "ACPI / LPSS: allow to use specific PM domain during
      ->probe()"

 -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com>  Thu, 04 Jun 2020 15:57:35 -0300

linux-aws (4.4.0-1108.119) xenial; urgency=medium

  * xenial/linux-aws: 4.4.0-1108.119 -proposed tracker (LP: #1878861)

  [ Ubuntu: 4.4.0-180.210 ]

  * xenial/linux: 4.4.0-180.210 -proposed tracker (LP: #1878873)
  * Xenial update: 4.4.223 upstream stable release (LP: #1878232)
    - mwifiex: fix PCIe register information for 8997 chipset
    - drm/qxl: qxl_release use after free
    - drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
    - staging: rtl8192u: Fix crash due to pointers being "confusing"
    - usb: gadget: f_acm: Fix configfs attr name
    - usb: gadged: pch_udc: get rid of redundant assignments
    - usb: gadget: pch_udc: reorder spin_[un]lock to avoid deadlock
    - usb: gadget: udc: core: don't starve DMA resources
    - MIPS: Fix macro typo
    - MIPS: ptrace: Drop cp0_tcstatus from regoffset_table[]
    - MIPS: BMIPS: Fix PRID_IMP_BMIPS5000 masking for BMIPS5200
    - MIPS: smp-cps: Stop printing EJTAG exceptions to UART
    - MIPS: scall: Handle seccomp filters which redirect syscalls
    - MIPS: BMIPS: BMIPS5000 has I cache filing from D cache
    - MIPS: BMIPS: Clear MIPS_CACHE_ALIASES earlier
    - MIPS: BMIPS: local_r4k___flush_cache_all needs to blast S-cache
    - MIPS: BMIPS: Pretty print BMIPS5200 processor name
    - MIPS: Fix HTW config on XPA kernel without LPA enabled
    - MIPS: BMIPS: Adjust mips-hpt-frequency for BCM7435
    - MIPS: math-emu: Fix BC1{EQ,NE}Z emulation
    - MIPS: Fix BC1{EQ,NE}Z return offset calculation
    - MIPS: perf: Fix I6400 event numbers
    - MIPS: KVM: Fix translation of MFC0 ErrCtl
    - MIPS: SMP: Update cpu_foreign_map on CPU disable
    - MIPS: c-r4k: Fix protected_writeback_scache_line for EVA
    - MIPS: Octeon: Off by one in octeon_irq_gpio_map()
    - bpf, mips: fix off-by-one in ctx offset allocation
    - MIPS: RM7000: Double locking bug in rm7k_tc_disable()
    - MIPS: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
    - mips/panic: replace smp_send_stop() with kdump friendly version in panic
      path
    - ARM: dts: armadillo800eva Correct extal1 frequency to 24 MHz
    - ARM: imx: select SRC for i.MX7
    - ARM: dts: kirkwood: gpio pin fixes for linkstation ls-wxl/wsxl
    - ARM: dts: kirkwood: gpio pin fixes for linkstation ls-wvl/vl
    - ARM: dts: kirkwood: gpio-leds fixes for linkstation ls-wxl/wsxl
    - ARM: dts: kirkwood: gpio-leds fixes for linkstation ls-wvl/vl
    - ARM: dts: orion5x: gpio pin fixes for linkstation lswtgl
    - ARM: dts: orion5x: fix the missing mtd flash on linkstation lswtgl
    - ARM: dts: kirkwood: use unique machine name for ds112
    - ARM: dts: kirkwood: add kirkwood-ds112.dtb to Makefile
    - ARM: OMAP2+: hwmod: fix _idle() hwmod state sanity check sequence
    - perf/x86: Fix filter_events() bug with event mappings
    - x86/LDT: Print the real LDT base address
    - x86/apic/uv: Silence a shift wrapping warning
    - ALSA: fm801: explicitly free IRQ line
    - ALSA: fm801: propagate TUNER_ONLY bit when autodetected
    - ALSA: fm801: detect FM-only card earlier
    - netfilter: nfnetlink: use original skbuff when acking batches
    - xfrm: fix crash in XFRM_MSG_GETSA netlink handler
    - mwifiex: fix IBSS data path issue.
    - mwifiex: add missing check for PCIe8997 chipset
    - iwlwifi: set max firmware version of 7265 to 17
    - Bluetooth: btmrvl: fix hung task warning dump
    - dccp: limit sk_filter trim to payload
    - net/mlx4_core: Do not BUG_ON during reset when PCI is offline
    - mlxsw: pci: Correctly determine if descriptor queue is full
    - PCI: Supply CPU physical address (not bus address) to iomem_is_exclusive()
    - alpha/PCI: Call iomem_is_exclusive() for IORESOURCE_MEM, but not
      IORESOURCE_IO
    - vfio/pci: Allow VPD short read
    - mlxsw: Treat local port 64 as valid
    - IB/mlx4: Initialize hop_limit when creating address handle
    - GRE: Disable segmentation offloads w/ CSUM and we are encapsulated via FOU
    - powerpc/pci/of: Parse unassigned resources
    - firmware: actually return NULL on failed request_firmware_nowait()
    - c8sectpfe: Rework firmware loading mechanism
    - net/mlx5: Avoid passing dma address 0 to firmware
    - IB/mlx5: Fix RC transport send queue overhead computation
    - net/mlx5: Make command timeout way shorter
    - IB/mlx5: Fix FW version diaplay in sysfs
    - net/mlx5e: Fix MLX5E_100BASE_T define
    - net/mlx5: Fix the size of modify QP mailbox
    - net/mlx5: Fix masking of reserved bits in XRCD number
    - net/mlx5e: Fix blue flame quota logic
    - net/mlx5: use mlx5_buf_alloc_node instead of mlx5_buf_alloc in
      mlx5_wq_ll_create
    - net/mlx5: Avoid calling sleeping function by the health poll thread
    - net/mlx5: Fix wait_vital for VFs and remove fixed sleep
    - net/mlx5: Fix potential deadlock in command mode change
    - net/mlx5: Add timeout handle to commands with callback
    - net/mlx5: Fix pci error recovery flow
    - net/mlx5e: Copy all L2 headers into inline segment
    - net_sched: keep backlog updated with qlen
    - sch_drr: update backlog as well
    - sch_hfsc: always keep backlog updated
    - sch_prio: update backlog as well
    - sch_qfq: keep backlog updated with qlen
    - sch_sfb: keep backlog updated with qlen
    - sch_tbf: update backlog as well
    - btrfs: cleaner_kthread() doesn't need explicit freeze
    - irda: Free skb on irda_accept error path.
    - phy: fix device reference leaks
    - bonding: prevent out of bound accesses
    - mtd: nand: fix ONFI parameter page layout
    - ath10k: free cached fw bin contents when get board id fails
    - xprtrdma: checking for NULL instead of IS_ERR()
    - xprtrdma: Fix additional uses of spin_lock_irqsave(rb_lock)
    - xprtrdma: xprt_rdma_free() must not release backchannel reqs
    - xprtrdma: rpcrdma_bc_receive_call() should init rq_private_buf.len
    - RDMA/cxgb3: device driver frees DMA memory with different size
    - mlxsw: spectrum: Don't forward packets when STP state is DISABLED
    - mlxsw: spectrum: Disable learning according to STP state
    - mlxsw: spectrum: Don't count internal TX header bytes to stats
    - mlxsw: spectrum: Indicate support for autonegotiation
    - mlxsw: spectrum: Fix misuse of hard_header_len
    - net: tcp_memcontrol: properly detect ancestor socket pressure
    - tcp: do not set rtt_min to 1
    - RDS:TCP: Synchronize rds_tcp_accept_one with rds_send_xmit when resetting
      t_sock
    - net: ipv6: tcp reset, icmp need to consider L3 domain
    - batman-adv: Fix lockdep annotation of batadv_tlv_container_remove
    - batman-adv: replace WARN with rate limited output on non-existing VLAN
    - tty: serial: msm: Support more bauds
    - serial: samsung: Fix possible out of bounds access on non-DT platform
    - isa: Call isa_bus_init before dependent ISA bus drivers register
    - Btrfs: clean up an error code in btrfs_init_space_info()
    - Input: gpio-keys - fix check for disabling unsupported keys
    - Input: edt-ft5x06 - fix setting gain, offset, and threshold via device tree
    - net/xfrm_input: fix possible NULL deref of tunnel.ip6->parms.i_key
    - xfrm_user: propagate sec ctx allocation errors
    - xfrm: Fix memory leak of aead algorithm name
    - mac80211: fix mgmt-tx abort cookie and leak
    - mac80211: TDLS: always downgrade invalid chandefs
    - mac80211: TDLS: change BW calculation for WIDER_BW peers
    - mac80211: Fix BW upgrade for TDLS peers
    - NFS: Fix an LOCK/OPEN race when unlinking an open file
    - net: get rid of an signed integer overflow in ip_idents_reserve()
    - mtd: nand: denali: add missing nand_release() call in denali_remove()
    - ASoC: Intel: pass correct parameter in sst_alloc_stream_mrfld()
    - ASoC: tegra_alc5632: check return value
    - ASoC: fsl_ssi: mark SACNT register volatile
    - Revert "ACPI / LPSS: allow to use specific PM domain during ->probe()"
    - mmc: sdhci: restore behavior when setting VDD via external regulator
    - mmc: sd: limit SD card power limit according to cards capabilities
    - mmc: debugfs: correct wrong voltage value
    - mmc: block: return error on failed mmc_blk_get()
    - clk: rockchip: Revert "clk: rockchip: reset init state before mmc card
      initialization"
    - mmc: dw_mmc: rockchip: Set the drive phase properly
    - mmc: moxart: fix wait_for_completion_interruptible_timeout return variable
      type
    - mmc: sdhci: Fix regression setting power on Trats2 board
    - perf tools: Fix perf regs mask generation
    - powerpc/book3s: Fix MCE console messages for unrecoverable MCE.
    - sctp: fix the transports round robin issue when init is retransmitted
    - sunrpc: Update RPCBIND_MAXNETIDLEN
    - NFC: nci: memory leak in nci_core_conn_create()
    - net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS
    - net: phy: Fix phy_mac_interrupt()
    - net: phy: bcm7xxx: Fix shadow mode 2 disabling
    - of_mdio: fix node leak in of_phy_register_fixed_link error path
    - phy: micrel: Fix finding PHY properties in MAC node for KSZ9031.
    - net: dsa: slave: fix of-node leak and phy priority
    - drivers: net: cpsw: don't ignore phy-mode if phy-handle is used
    - iommu/dma: Respect IOMMU aperture when allocating
    - mdio-sun4i: oops in error handling in probe
    - iio:ad7797: Use correct attribute_group
    - selftests/ipc: Fix test failure seen after initial test run
    - wimax/i2400m: Fix potential urb refcnt leak
    - cifs: protect updating server->dstaddr with a spinlock
    - scripts/config: allow colons in option strings for sed
    - lib/mpi: Fix building for powerpc with clang
    - net: bcmgenet: suppress warnings on failed Rx SKB allocations
    - net: systemport: suppress warnings on failed Rx SKB allocations
    - rc: allow rc modules to be loaded if rc-main is not a module
    - lirc_imon: do not leave imon_probe() with mutex held
    - am437x-vpfe: fix an uninitialized variable bug
    - cx23885: uninitialized variable in cx23885_av_work_handler()
    - ath9k_htc: check for underflow in ath9k_htc_rx_msg()
    - VFIO: platform: reset: fix a warning message condition
    - net: moxa: fix an error code
    - mfd: lp8788-irq: Uninitialized variable in irq handler
    - ethernet: micrel: fix some error codes
    - power: ipaq-micro-battery: freeing the wrong variable
    - i40e: fix an uninitialized variable bug
    - qede: uninitialized variable in qede_start_xmit()
    - qlcnic: potential NULL dereference in qlcnic_83xx_get_minidump_template()
    - qlcnic: use the correct ring in qlcnic_83xx_process_rcv_ring_diag()
    - target: Fix a memory leak in target_dev_lba_map_store()
    - memory/tegra: Add number of TLB lines for Tegra124
    - pinctrl: bcm2835: Fix memory leak in error path
    - be2net: Don't leak iomapped memory on removal.
    - ipv4: Fix memory leak in exception case for splitting tries
    - flow_dissector: Check for IP fragmentation even if not using IPv4 address
    - ipv4: fix checksum annotation in udp4_csum_init
    - ipv4: do not abuse GFP_ATOMIC in inet_netconf_notify_devconf()
    - ipv4: accept u8 in IP_TOS ancillary data
    - net: vrf: Fix dev refcnt leak due to IPv6 prefix route
    - ipv6: fix checksum annotation in udp6_csum_init
    - ipv6: do not abuse GFP_ATOMIC in inet6_netconf_notify_devconf()
    - ipv6: add missing netconf notif when 'all' is updated
    - net: ipv6: Fix processing of RAs in presence of VRF
    - netfilter: nf_tables: fix a wrong check to skip the inactive rules
    - netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled
    - netfilter: nf_tables: destroy the set if fail to add transaction
    - netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it
    - udp: restore UDPlite many-cast delivery
    - clk: st: avoid uninitialized variable use
    - clk: gpio: handle error codes for of_clk_get_parent_count()
    - clk: ti: omap3+: dpll: use non-locking version of clk_get_rate
    - clk: multiplier: Prevent the multiplier from under / over flowing
    - clk: imx: clk-pllv3: fix incorrect handle of enet powerdown bit
    - clk: xgene: Don't call __pa on ioremaped address
    - cls_bpf: reset class and reuse major in da
    - arm64: bpf: jit JMP_JSET_{X,K}
    - bpf, trace: check event type in bpf_perf_event_read
    - bpf: fix map not being uncharged during map creation failure
    - net/mlx4_core: Fix potential corruption in counters database
    - net/mlx4_core: Fix access to uninitialized index
    - net/mlx4_en: Fix the return value of a failure in VLAN VID add/kill
    - net/mlx4_core: Check device state before unregistering it
    - net/mlx4_core: Fix the resource-type enum in res tracker to conform to FW
      spec
    - net/mlx4_en: Process all completions in RX rings after port goes up
    - net/mlx4_core: Do not access comm channel if it has not yet been initialized
    - net/mlx4_en: Fix potential deadlock in port statistics flow
    - net/mlx4: Fix uninitialized fields in rule when adding promiscuous mode to
      device managed flow steering
    - net/mlx4_core: Fix QUERY FUNC CAP flags
    - mlxsw: switchx2: Fix misuse of hard_header_len
    - mlxsw: switchx2: Fix ethernet port initialization
    - sched/fair: Fix calc_cfs_shares() fixed point arithmetics width confusion
    - net_sched: flower: Avoid dissection of unmasked keys
    - pkt_sched: fq: use proper locking in fq_dump_stats()
    - sched/preempt: Fix preempt_count manipulations
    - power: bq27xxx: fix reading for bq27000 and bq27010
    - power: bq27xxx: fix register numbers of bq27500
    - power: test_power: correctly handle empty writes
    - power: bq27xxx_battery: Fix bq27541 AveragePower register address
    - power_supply: tps65217-charger: Fix NULL deref during property export
    - net: vrf: Fix dst reference counting
    - net: Don't delete routes in different VRFs
    - vti6: fix input path
    - ipv4: Fix table id reference in fib_sync_down_addr
    - mlx4: do not call napi_schedule() without care
    - xprtrdma: Fix backchannel allocation of extra rpcrdma_reps
    - ALSA: fm801: Initialize chip after IRQ handler is registered
    - bonding: fix length of actor system
    - MIPS: perf: Remove incorrect odd/even counter handling for I6400
    - Revert "cpufreq: Drop rwsem lock around CPUFREQ_GOV_POLICY_EXIT"
    - net: dsa: mv88e6xxx: unlock DSA and CPU ports
    - gfs2: fix flock panic issue
    - blk-mq: fix undefined behaviour in order_to_size()
    - dm: fix second blk_delay_queue() parameter to be in msec units not jiffies
    - dmaengine: edma: Add probe callback to edma_tptc_driver
    - openvswitch: update checksum in {push,pop}_mpls
    - cxgb4/cxgb4vf: Fixes regression in perf when tx vlan offload is disabled
    - net: bcmgenet: fix skb_len in bcmgenet_xmit_single()
    - net: bcmgenet: device stats are unsigned long
    - gre: do not assign header_ops in collect metadata mode
    - gre: build header correctly for collect metadata tunnels
    - gre: reject GUE and FOU in collect metadata mode
    - sfc: fix potential stack corruption from running past stat bitmask
    - sfc: clear napi_hash state when copying channels
    - net: bcmsysport: Device stats are unsigned long
    - cxgbi: fix uninitialized flowi6
    - net: macb: add missing free_netdev() on error in macb_probe()
    - macvtap: segmented packet is consumed
    - tipc: fix the error handling in tipc_udp_enable()
    - net: icmp6_send should use dst dev to determine L3 domain
    - et131x: Fix logical vs bitwise check in et131x_tx_timeout()
    - net: ethernet: stmmac: dwmac-sti: fix probe error path
    - rtnl: reset calcit fptr in rtnl_unregister()
    - net: ethernet: stmmac: dwmac-rk: fix probe error path
    - fq_codel: return non zero qlen in class dumps
    - net: ethernet: stmmac: dwmac-generic: fix probe error path
    - bnxt: add a missing rcu synchronization
    - qdisc: fix a module refcount leak in qdisc_create_dflt()
    - net: axienet: Fix return value check in axienet_probe()
    - bnxt_en: Remove locking around txr->dev_state
    - net: ethernet: davinci_emac: Fix devioctl while in fixed link
    - net: ethernet: mvneta: Remove IFF_UNICAST_FLT which is not implemented
    - net: ethernet: ti: cpsw: fix device and of_node leaks
    - net: ethernet: ti: cpsw: fix secondary-emac probe error path
    - net: hns: fix device reference leaks
    - net: bridge: don't increment tx_dropped in br_do_proxy_arp
    - net: dsa: mv88e6xxx: enable SA learning on DSA ports
    - net: ehea: avoid null pointer dereference
    - l2tp: fix use-after-free during module unload
    - hwrng: exynos - Disable runtime PM on driver unbind
    - net: icmp_route_lookup should use rt dev to determine L3 domain
    - net: mvneta: fix trivial cut-off issue in mvneta_ethtool_update_stats
    - net: macb: replace macb_writel() call by queue_writel() to update queue ISR
    - ravb: Add missing free_irq() call to ravb_close()
    - mvpp2: use correct size for memset
    - net: vxlan: lwt: Fix vxlan local traffic.
    - net: ethoc: Fix early error paths
    - net: mv643xx_eth: fix packet corruption with TSO and tiny unaligned packets.
    - regulator: core: Rely on regulator_dev_release to free constraints
    - net: dsa: mv88e6xxx: fix port VLAN maps
    - at803x: fix reset handling
    - cxl: Fix DAR check & use REGION_ID instead of opencoding
    - net: ethernet: davinci_emac: Fix platform_data overwrite
    - ata: sata_dwc_460ex: remove incorrect locking
    - pinctrl: tegra: Correctly check the supported configuration
    - brcmfmac: add fallback for devices that do not report per-chain values
    - brcmfmac: restore stopping netdev queue when bus clogs up
    - bridge: Fix problems around fdb entries pointing to the bridge device
    - bna: add missing per queue ethtool stat
    - net: skbuff: Remove errornous length validation in skb_vlan_pop()
    - net: ep93xx_eth: Do not crash unloading module
    - macvlan: Fix potential use-after free for broadcasts
    - sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
    - ALSA: hda: Match both PCI ID and SSID for driver blacklist
    - mac80211: add ieee80211_is_any_nullfunc()
    - Linux 4.4.223
  * Xenial update: 4.4.222 upstream stable release (LP: #1878246)
    - ext4: fix special inode number checks in __ext4_iget()
    - drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
    - ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
    - PM: ACPI: Output correct message on target power state
    - RDMA/mlx4: Initialize ib_spec on the stack
    - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
    - ALSA: opti9xx: shut up gcc-10 range warning
    - nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
    - dmaengine: dmatest: Fix iteration non-stop logic
    - i2c: designware-pci: use IRQF_COND_SUSPEND flag
    - perf hists: Fix HISTC_MEM_DCACHELINE width setting
    - powerpc/perf: Remove PPMU_HAS_SSLOT flag for Power8
    - perf/x86: Fix uninitialized value usage
    - exynos4-is: fix a format string bug
    - ASoC: wm8960: Fix WM8960_SYSCLK_PLL mode
    - ASoC: imx-spdif: Fix crash on suspend
    - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
    - selinux: properly handle multiple messages in selinux_netlink_send()
    - Linux 4.4.222
  * Xenial update: 4.4.221 upstream stable release (LP: #1878098)
    - ext4: fix extent_status fragmentation for plain files
    - ALSA: hda - Fix incorrect usage of IS_REACHABLE()
    - net: ipv4: emulate READ_ONCE() on ->hdrincl bit-field in raw_sendmsg()
    - net: ipv4: avoid unused variable warning for sysctl
    - crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash'
      static
    - vti4: removed duplicate log message.
    - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
    - ceph: return ceph_mdsc_do_request() errors from __get_parent()
    - ceph: don't skip updating wanted caps when cap is stale
    - pwm: rcar: Fix late Runtime PM enablement
    - scsi: iscsi: Report unbind session event when the target has been removed
    - ASoC: Intel: atom: Take the drv->lock mutex before calling
      sst_send_slot_map()
    - kernel/gcov/fs.c: gcov_seq_next() should increase position index
    - ipc/util.c: sysvipc_find_ipc() should increase position index
    - s390/cio: avoid duplicated 'ADD' uevents
    - pwm: renesas-tpu: Fix late Runtime PM enablement
    - pwm: bcm2835: Dynamically allocate base
    - ipv6: fix restrict IPV6_ADDRFORM operation
    - macvlan: fix null dereference in macvlan_device_event()
    - net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
    - net/x25: Fix x25_neigh refcnt leak when receiving frame
    - tcp: cache line align MAX_TCP_HEADER
    - team: fix hang in team_mode_get()
    - xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
    - ALSA: hda: Remove ASUS ROG Zenith from the blacklist
    - iio: xilinx-xadc: Fix ADC-B powerdown
    - iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
    - iio: xilinx-xadc: Fix sequencer configuration for aux channels in
      simultaneous mode
    - fs/namespace.c: fix mountpoint reference counter race
    - USB: sisusbvga: Change port variable from signed to unsigned
    - USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70
      RGB RAPIDFIRE
    - drivers: usb: core: Don't disable irqs in usb_sg_wait() during URB submit.
    - drivers: usb: core: Minimize irq disabling in usb_sg_cancel()
    - USB: core: Fix free-while-in-use bug in the USB S-Glibrary
    - USB: hub: Fix handling of connect changes during sleep
    - ALSA: usx2y: Fix potential NULL dereference
    - ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
    - ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices
    - KVM: Check validity of resolved slot when searching memslots
    - KVM: VMX: Enable machine check support for 32bit targets
    - tty: hvc: fix buffer overflow during hvc_alloc().
    - tty: rocket, avoid OOB access
    - usb-storage: Add unusual_devs entry for JMicron JMS566
    - audit: check the length of userspace generated audit records
    - ASoC: dapm: fixup dapm kcontrol widget
    - ARM: imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
    - staging: comedi: dt2815: fix writing hi byte of analog output
    - staging: comedi: Fix comedi_device refcnt leak in comedi_open
    - staging: vt6656: Fix drivers TBTT timing counter.
    - staging: vt6656: Power save stop wake_up_count wrap around.
    - UAS: no use logging any details in case of ENODEV
    - UAS: fix deadlock in error handling and PM flushing work
    - usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset()
    - remoteproc: Fix wrong rvring index computation
    - sctp: use right member as the param of list_for_each_entry
    - fuse: fix possibly missed wake-up after abort
    - mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
    - usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete
    - net/cxgb4: Check the return from t4_query_params properly
    - perf/core: fix parent pid/tid in task exit events
    - bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
    - scsi: target: fix PR IN / READ FULL STATUS for FC
    - xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
    - ext4: convert BUG_ON's to WARN_ON's in mballoc.c
    - ext4: avoid declaring fs inconsistent due to invalid file handles
    - ext4: protect journal inode's blocks using block_validity
    - ext4: don't perform block validity checks on the journal inode
    - ext4: fix block validity checks for journal inodes using indirect blocks
    - ext4: unsigned int compared against zero
    - propagate_one(): mnt_set_mountpoint() needs mount_lock
    - Linux 4.4.221
  * Xenial update: 4.4.220 upstream stable release (LP: #1875905)
    - bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
    - net: vxge: fix wrong __VA_ARGS__ usage
    - qlcnic: Fix bad kzalloc null test
    - i2c: st: fix missing struct parameter description
    - irqchip/versatile-fpga: Handle chained IRQs properly
    - selftests/x86/ptrace_syscall_32: Fix no-vDSO segfault
    - libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
    - gfs2: Don't demote a glock until its revokes are written
    - x86/boot: Use unsigned comparison for addresses
    - locking/lockdep: Avoid recursion in lockdep_count_{for,back}ward_deps()
    - btrfs: remove a BUG_ON() from merge_reloc_roots()
    - btrfs: track reloc roots based on their commit root bytenr
    - misc: rtsx: set correct pcr_ops for rts522A
    - ASoC: fix regwmask
    - ASoC: dapm: connect virtual mux with default value
    - ASoC: dpcm: allow start or stop during pause for backend
    - ASoC: topology: use name_prefix for new kcontrol
    - usb: gadget: f_fs: Fix use after free issue as part of queue failure
    - usb: gadget: composite: Inform controller driver of self-powered
    - ALSA: usb-audio: Add mixer workaround for TRX40 and co
    - ALSA: hda: Add driver blacklist
    - ALSA: hda: Fix potential access overflow in beep helper
    - ALSA: ice1724: Fix invalid access for enumerated ctl items
    - ALSA: pcm: oss: Fix regression by buffer overflow fix
    - acpi/x86: ignore unspecified bit positions in the ACPI global lock field
    - thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n
    - irqchip/versatile-fpga: Apply clear-mask earlier
    - MIPS: OCTEON: irq: Fix potential NULL pointer dereference
    - ath9k: Handle txpower changes even when TPC is disabled
    - signal: Extend exec_id to 64bits
    - x86/entry/32: Add missing ASM_CLAC to general_protection entry
    - KVM: x86: Allocate new rmap and large page tracking when moving memslot
    - crypto: mxs-dcp - fix scatterlist linearization for hash
    - futex: futex_wake_op, do not fail on invalid op
    - xen-netfront: Rework the fix for Rx stall during OOM and network stress
    - ALSA: hda: Initialize power_state field properly
    - Btrfs: incremental send, fix invalid memory access
    - IB/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush
    - scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point
    - arm64: armv8_deprecated: Fix undef_hook mask for thumb setend
    - ext4: fix a data race at inode->i_blocks
    - ocfs2: no need try to truncate file beyond i_size
    - s390/diag: fix display of diagnose call statistics
    - Input: i8042 - add Acer Aspire 5738z to nomux list
    - kmod: make request_module() return an error when autoloading is disabled
    - hfsplus: fix crash and filesystem corruption when deleting files
    - powerpc/64/tm: Don't let userspace set regs->trap via sigreturn
    - Btrfs: fix crash during unmount due to race with delayed inode workers
    - drm/dp_mst: Fix clearing payload state on topology disable
    - ipmi: fix hung processes in __get_guid()
    - powerpc/fsl_booke: Avoid creating duplicate tlb1 entry
    - misc: echo: Remove unnecessary parentheses and simplify check for zero
    - mfd: dln2: Fix sanity checking for endpoints
    - net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
    - net: ipv6: do not consider routes via gateways for anycast address check
    - scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
    - jbd2: improve comments about freeing data buffers whose page mapping is NULL
    - ext4: fix incorrect group count in ext4_fill_super error message
    - ext4: fix incorrect inodes per group in error message
    - ASoC: Intel: mrfld: fix incorrect check on p->sink
    - ASoC: Intel: mrfld: return error codes when an error occurs
    - ALSA: usb-audio: Don't override ignore_ctl_error value from the map
    - mac80211_hwsim: Use kstrndup() in place of kasprintf()
    - ext4: do not zeroout extents beyond i_disksize
    - dm flakey: check for null arg_name in parse_features()
    - kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD
    - x86/mitigations: Clear CPU buffers on the SYSCALL fast path
    - tracing: Fix the race between registering 'snapshot' event trigger and
      triggering 'snapshot' operation
    - scsi: sg: add sg_remove_request in sg_common_write
    - ALSA: hda: Don't release card at firmware loading error
    - video: fbdev: sis: Remove unnecessary parentheses and commented code
    - drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem
    - wil6210: increase firmware ready timeout
    - wil6210: fix temperature debugfs
    - scsi: ufs: ufs-qcom: remove broken hci version quirk
    - wil6210: rate limit wil_rx_refill error
    - rtc: pm8xxx: Fix issue in RTC write path
    - soc: qcom: smem: Use le32_to_cpu for comparison
    - of: fix missing kobject init for !SYSFS && OF_DYNAMIC config
    - of: unittest: kmemleak in of_unittest_platform_populate()
    - clk: at91: usb: continue if clk_hw_round_rate() return zero
    - clk: tegra: Fix Tegra PMC clock out parents
    - NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
    - ext4: do not commit super on read-only bdev
    - percpu_counter: fix a data race at vm_committed_as
    - compiler.h: fix error in BUILD_BUG_ON() reporting
    - NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
    - ext2: fix empty body warnings when -Wextra is used
    - iommu/amd: Fix the configuration of GCR3 table root pointer
    - fbdev: potential information leak in do_fb_ioctl()
    - tty: evh_bytechan: Fix out of bounds accesses
    - locktorture: Print ratio of acquisitions, not failures
    - mtd: lpddr: Fix a double free in probe()
    - mtd: phram: fix a double free issue in error path
    - x86/CPU: Add native CPUID variants returning a single datum
    - x86/microcode/intel: replace sync_core() with native_cpuid_reg(eax)
    - x86/vdso: Fix lsl operand order
    - Linux 4.4.220
  * Panic on suspend/resume Kernel panic - not syncing: stack-protector: Kernel
    stack is corrupted in: sata_pmp_eh_recover+0xa2b/0xa40 (LP: #1821434) //
    Xenial update: 4.4.220 upstream stable release (LP: #1875905)
    - libata: Return correct status in sata_pmp_eh_recover_pm() when
      ATA_DFLAG_DETACH is set
  * psock_tpacket from the net test in ubuntu_kernel_selftests failed on KVM
    kernels (LP: #1812176)
    - selftests/net: skip psock_tpacket test if KALLSYMS was not enabled
  * tunnels over IPv6 are unencrypted when using IPsec (LP: #1876982) //
    CVE-2020-1749
    - net: ipv6: add net argument to ip6_dst_lookup_flow
    - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
  * Bionic ubuntu ethtool doesn't check ring parameters boundaries
    (LP: #1874444)
    - ethtool: Ensure new ring parameters are within bounds during SRINGPARAM
  * Improve TSC refinement (and calibration) reliability (LP: #1877858)
    - x86/tsc: Make calibration refinement more robust
  * Do not treat unresolved test case in ftrace from ubuntu_kernel_selftests as
    failure (LP: #1877958)
    - ftrace/selftest: make unresolved cases cause failure if --fail-unresolved
      set

 -- Sultan Alsawaf <sultan.alsawaf@canonical.com>  Wed, 20 May 2020 12:56:16 -0700

# For older changelog entries, run 'apt-get changelog linux-buildinfo-4.4.0-1117-aws'
