linux (4.15.11-1) unstable; urgency=medium

linux (4.15.11-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.5
    - IB/umad: Fix use of unprotected device pointer
    - IB/qib: Fix comparison error with qperf compare/swap test
    - IB/mlx4: Fix incorrectly releasing steerable UD QPs when have only ETH
      ports
    - IB/core: Fix two kernel warnings triggered by rxe registration
    - IB/core: Fix ib_wc structure size to remain in 64 bytes boundary
    - IB/core: Avoid a potential OOPs for an unused optional parameter
    - RDMA/rxe: Fix a race condition related to the QP error state
    - RDMA/rxe: Fix a race condition in rxe_requester()
    - RDMA/rxe: Fix rxe_qp_cleanup()
    - [powerpc*] cpufreq: powernv: Dont assume distinct pstate values for
      nominal and pmin
    - swiotlb: suppress warning when __GFP_NOWARN is set
    - PM / devfreq: Propagate error from devfreq_add_device()
    - mwifiex: resolve reset vs. remove()/shutdown() deadlocks
    - ocfs2: try a blocking lock before return AOP_TRUNCATED_PAGE
    - trace_uprobe: Display correct offset in uprobe_events
    - [powerpc*] radix: Remove trace_tlbie call from radix__flush_tlb_all
    - [powerpc*] kernel: Block interrupts when updating TIDR
    - [powerpc*] vas: Don't set uses_vas for kernel windows
    - [powerpc*] numa: Invalidate numa_cpu_lookup_table on cpu remove
    - [powerpc*] mm: Flush radix process translations when setting MMU type
    - [powerpc*] xive: Use hw CPU ids when configuring the CPU queues
    - dma-buf: fix reservation_object_wait_timeout_rcu once more v2
    - [s390x] fix handling of -1 in set{,fs}[gu]id16 syscalls
    - [arm64] dts: msm8916: Correct ipc references for smsm
    - [x86] gpu: add CFL to early quirks
    - [x86] kexec: Make kexec (mostly) work in 5-level paging mode
    - [x86] xen: init %gs very early to avoid page faults with stack protector
    - [x86] PM: Make APM idle driver initialize polling state
    - mm, memory_hotplug: fix memmap initialization
    - [amd64] entry: Clear extra registers beyond syscall arguments, to reduce
      speculation attack surface
    - [amd64] entry/compat: Clear registers for compat syscalls, to reduce
      speculation attack surface
    - [armhf] crypto: sun4i_ss_prng - fix return value of sun4i_ss_prng_generate
    - [armhf] crypto: sun4i_ss_prng - convert lock to _bh in
      sun4i_ss_prng_generate
    - [powerpc*] mm/radix: Split linear mapping on hot-unplug
    - [x86] speculation: Update Speculation Control microcode blacklist
    - [x86] speculation: Correct Speculation Control microcode blacklist again
    - [x86] Revert "x86/speculation: Simplify
      indirect_branch_prediction_barrier()"
    - [x86] KVM: Reduce retpoline performance impact in
      slot_handle_level_range(), by always inlining iterator helper methods
    - [X86] nVMX: Properly set spec_ctrl and pred_cmd before merging MSRs
    - [x86] KVM/nVMX: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02
      MSR bitmap
    - [x86] speculation: Clean up various Spectre related details
    - PM / runtime: Update links_count also if !CONFIG_SRCU
    - PM: cpuidle: Fix cpuidle_poll_state_init() prototype
    - [x86] platform: wmi: fix off-by-one write in wmi_dev_probe()
    - [amd64] entry: Clear registers for exceptions/interrupts, to reduce
      speculation attack surface
    - [amd64] entry: Merge SAVE_C_REGS and SAVE_EXTRA_REGS, remove unused
      extensions
    - [amd64] entry: Merge the POP_C_REGS and POP_EXTRA_REGS macros into a
      single POP_REGS macro
    - [amd64] entry: Interleave XOR register clearing with PUSH instructions
    - [amd64] entry: Introduce the PUSH_AND_CLEAN_REGS macro
    - [amd64] entry: Use PUSH_AND_CLEAN_REGS in more cases
    - [amd64] entry: Get rid of the ALLOC_PT_GPREGS_ON_STACK and
      SAVE_AND_CLEAR_REGS macros
    - [amd64] entry: Indent PUSH_AND_CLEAR_REGS and POP_REGS properly
    - [amd64] entry: Fix paranoid_entry() frame pointer warning
    - [amd64] entry: Remove the unused 'icebp' macro
    - gfs2: Fixes to "Implement iomap for block_map"
    - objtool: Fix segfault in ignore_unreachable_insn()
    - [x86] debug, objtool: Annotate WARN()-related UD2 as reachable
    - [x86] debug: Use UD2 for WARN()
    - [x86] speculation: Fix up array_index_nospec_mask() asm constraint
    - nospec: Move array_index_nospec() parameter checking into separate macro
    - [x86] speculation: Add <asm/msr-index.h> dependency
    - [x86] mm: Rename flush_tlb_single() and flush_tlb_one() to
      __flush_tlb_one_[user|kernel]()
    - [x86] cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
    - [x86] spectre: Fix an error message
    - [x86] cpu: Change type of x86_cache_size variable to unsigned int
    - [amd64] entry: Fix CR3 restore in paranoid_exit()
    - drm/ttm: Don't add swapped BOs to swap-LRU list
    - drm/ttm: Fix 'buf' pointer update in ttm_bo_vm_access_kmap() (v2)
    - drm/qxl: unref cursor bo when finished with it
    - drm/qxl: reapply cursor after resetting primary
    - drm/amd/powerplay: Fix smu_table_entry.handle type
    - drm/ast: Load lut in crtc_commit
    - drm: Check for lessee in DROP_MASTER ioctl
    - [arm64] Add missing Falkor part number for branch predictor hardening
    - drm/radeon: Add dpm quirk for Jet PRO (v2)
    - drm/radeon: adjust tested variable
    - [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a
      physical CPU
    - [powerpc*] rtc-opal: Fix handling of firmware error codes, prevent busy
      loops
    - mbcache: initialize entry->e_referenced in mb_cache_entry_create()
    - mmc: sdhci: Implement an SDHCI-specific bounce buffer
    - [armhf,arm64] mmc: bcm2835: Don't overwrite max frequency unconditionally
    - [arm64] Revert "mmc: meson-gx: include tx phase in the tuning process"
    - mlx5: fix mlx5_get_vector_affinity to start from completion vector 0
    - [x86] Revert "apple-gmux: lock iGP IO to protect from vgaarb changes"
    - ext4: fix a race in the ext4 shutdown path
    - ext4: save error to disk in __ext4_grp_locked_error()
    - ext4: correct documentation for grpid mount option
    - mm: Fix memory size alignment in devm_memremap_pages_release()
    - [mips*] Fix typo BIG_ENDIAN to CPU_BIG_ENDIAN
    - [mips*] CPS: Fix MIPS_ISA_LEVEL_RAW fallout
    - [mips*] Fix incorrect mem=X@Y handling
    - [arm64] PCI: Disable MSI for HiSilicon Hip06/Hip07 only in Root Port mode
    - [armhf,arm64] PCI: iproc: Fix NULL pointer dereference for BCMA
    - [x86] PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
    - console/dummy: leave .con_font_get set to NULL
    - rbd: whitelist RBD_FEATURE_OPERATIONS feature bit
    - xen: Fix {set,clear}_foreign_p2m_mapping on autotranslating guests
    - xenbus: track caller request id
    - seq_file: fix incomplete reset on read from zero offset
    - tracing: Fix parsing of globs with a wildcard at the beginning
    - mpls, nospec: Sanitize array index in mpls_label_ok() (CVE-2017-5753)
    - rtlwifi: rtl8821ae: Fix connection lost problem correctly
    - [arm64] proc: Set PTE_NG for table entries to avoid traversing them twice
    - xprtrdma: Fix calculation of ri_max_send_sges
    - xprtrdma: Fix BUG after a device removal
    - blk-wbt: account flush requests correctly
    - target/iscsi: avoid NULL dereference in CHAP auth error path
    - iscsi-target: make sure to wake up sleeping login worker
    - dm: correctly handle chained bios in dec_pending()
    - Btrfs: fix deadlock in run_delalloc_nocow
    - Btrfs: fix crash due to not cleaning up tree log block's dirty bits
    - Btrfs: fix extent state leak from tree log
    - Btrfs: fix btrfs_evict_inode to handle abnormal inodes correctly
    - Btrfs: fix use-after-free on root->orphan_block_rsv
    - Btrfs: fix unexpected -EEXIST when creating new inode
    - 9p/trans_virtio: discard zero-length reply
    - mtd: nand: vf610: set correct ooblayout
    - ALSA: hda - Fix headset mic detection problem for two Dell machines
    - ALSA: usb-audio: Fix UAC2 get_ctl request with a RANGE attribute
    - ALSA: hda/realtek - Add headset mode support for Dell laptop
    - ALSA: hda/realtek - Enable Thinkpad Dock device for ALC298 platform
    - ALSA: hda/realtek: PCI quirk for Fujitsu U7x7
    - ALSA: usb-audio: add implicit fb quirk for Behringer UFX1204
    - ALSA: usb: add more device quirks for USB DSD devices
    - ALSA: seq: Fix racy pool initializations (CVE-2018-7566)
    - [armhf,arm64] mvpp2: fix multicast address filter
    - usb: Move USB_UHCI_BIG_ENDIAN_* out of USB_SUPPORT
    - [x86] mm, mm/hwpoison: Don't unconditionally unmap kernel 1:1 pages
    - [armhf] dts: exynos: fix RTC interrupt for exynos5410
    - [arm64] dts: msm8916: Add missing #phy-cells
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.6
    - tun: fix tun_napi_alloc_frags() frag allocator
    - ptr_ring: fail early if queue occupies more than KMALLOC_MAX_SIZE
    - ptr_ring: try vmalloc() when kmalloc() fails
    - selinux: ensure the context is NUL terminated in
      security_context_to_sid_core()
    - selinux: skip bounded transition processing if the policy isn't loaded
    - media: pvrusb2: properly check endpoint types
    - [x86] crypto: twofish-3way - Fix %rbp usage
    - blk_rq_map_user_iov: fix error override
    - [x86] KVM: fix escape of guest dr6 to the host
    - kcov: detect double association with a single task
    - netfilter: x_tables: fix int overflow in xt_alloc_table_info()
    - netfilter: x_tables: avoid out-of-bounds reads in
      xt_request_find_{match|target}
    - netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in
      clusterip_tg_check()
    - netfilter: on sockopt() acquire sock lock only in the required scope
    - netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
    - netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
    - rds: tcp: correctly sequence cleanup on netns deletion.
    - rds: tcp: atomically purge entries from rds_tcp_conn_list during netns
      delete
    - net: avoid skb_warn_bad_offload on IS_ERR
    - net_sched: gen_estimator: fix lockdep splat
    - [arm64] dts: add #cooling-cells to CPU nodes
    - dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock
    - xhci: Fix NULL pointer in xhci debugfs
    - xhci: Fix xhci debugfs devices node disappearance after hibernation
    - xhci: xhci debugfs device nodes weren't removed after device plugged out
    - xhci: fix xhci debugfs errors in xhci_stop
    - usbip: keep usbip_device sockfd state in sync with tcp_socket
    - [x86] mei: me: add cannon point device ids
    - [x86] mei: me: add cannon point device ids for 4th device
    - vmalloc: fix __GFP_HIGHMEM usage for vmalloc_32 on 32b systems
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.7
    - netfilter: drop outermost socket lock in getsockopt()
    - [arm64] mm: don't write garbage into TTBR1_EL1 register
    - kconfig.h: Include compiler types to avoid missed struct attributes
    - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info
    - [mips*] Drop spurious __unused in struct compat_flock
    - cfg80211: fix cfg80211_beacon_dup
    - i2c: designware: must wait for enable
    - [armhf,arm64] i2c: bcm2835: Set up the rising/falling edge delays
    - X.509: fix BUG_ON() when hash algorithm is unsupported
    - X.509: fix NULL dereference when restricting key with unsupported_sig
    - PKCS#7: fix certificate chain verification
    - PKCS#7: fix certificate blacklisting
    - [x86] genirq/matrix: Handle CPU offlining proper
    - RDMA/uverbs: Protect from races between lookup and destroy of uobjects
    - RDMA/uverbs: Protect from command mask overflow
    - RDMA/uverbs: Fix bad unlock balance in ib_uverbs_close_xrcd
    - RDMA/uverbs: Fix circular locking dependency
    - RDMA/uverbs: Sanitize user entered port numbers prior to access it
    - iio: buffer: check if a buffer has been set up when poll is called
    - Kbuild: always define endianess in kconfig.h
    - [x86] apic/vector: Handle vector release on CPU unplug correctly
    - mm, swap, frontswap: fix THP swap if frontswap enabled
    - mm: don't defer struct page initialization for Xen pv guests
    - uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
    - [armhf,arm64] irqchip/gic-v3: Use wmb() instead of smb_wmb() in
      gic_raise_softirq()
    - [mips*] irqchip/mips-gic: Avoid spuriously handling masked interrupts
    - PCI/cxgb4: Extend T3 PCI quirk to T4+ devices
    - [x86] net: thunderbolt: Tear down connection properly on suspend
    - [x86] net: thunderbolt: Run disconnect flow asynchronously when logout is
      received
    - ohci-hcd: Fix race condition caused by ohci_urb_enqueue() and
      io_watchdog_func()
    - usb: ohci: Proper handling of ed_rm_list to handle race condition between
      usb_kill_urb() and finish_unlinks()
    - [arm64] Remove unimplemented syscall log message
    - [arm64] Disable unhandled signal log messages by default
    - [arm64] cpufeature: Fix CTR_EL0 field definitions
    - USB: Add delay-init quirk for Corsair K70 RGB keyboards
    - drm/edid: Add 6 bpc quirk for CPT panel in Asus UX303LA
    - usb: host: ehci: use correct device pointer for dma ops
    - usb: dwc3: gadget: Set maxpacket size for ep0 IN
    - usb: dwc3: ep0: Reset TRB counter for ep0 IN
    - usb: ldusb: add PIDs for new CASSY devices supported by this driver
    - Revert "usb: musb: host: don't start next rx urb if current one failed"
    - usb: gadget: f_fs: Process all descriptors during bind
    - usb: gadget: f_fs: Use config_ep_by_speed()
    - drm/cirrus: Load lut in crtc_commit
    - drm/atomic: Fix memleak on ERESTARTSYS during non-blocking commits
    - drm: Handle unexpected holes in color-eviction
    - drm/amdgpu: disable MMHUB power gating on raven
    - drm/amdgpu: fix VA hole handling on Vega10 v3
    - drm/amdgpu: Add dpm quirk for Jet PRO (v2)
    - drm/amdgpu: only check mmBIF_IOV_FUNC_IDENTIFIER on tonga/fiji
    - drm/amdgpu: add atpx quirk handling (v2)
    - drm/amdgpu: Avoid leaking PM domain on driver unbind (v2)
    - drm/amdgpu: add new device to use atpx quirk
    - [arm64] __show_regs: Only resolve kernel symbols when running at EL1
    - [x86] drm/i915/breadcrumbs: Ignore unsubmitted signalers
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8
    - vsprintf: avoid misleading "(null)" for %px
    - hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)
    - ipmi_si: Fix error handling of platform device
    - [x86] platform: dell-laptop: Allocate buffer on heap rather than globally
    - [powerpc*] pseries: Enable RAS hotplug events later
    - Bluetooth: btusb: Use DMI matching for QCA reset_resume quirking
    - ixgbe: fix crash in build_skb Rx code path
    - [x86] tpm: st33zp24: fix potential buffer overruns caused by bit glitches
      on the bus
    - tpm: fix potential buffer overruns caused by bit glitches on the bus
    - [x86] tpm_i2c_infineon: fix potential buffer overruns caused by bit
      glitches on the bus
    - [x86] tpm_i2c_nuvoton: fix potential buffer overruns caused by bit
      glitches on the bus
    - [x86] tpm_tis: fix potential buffer overruns caused by bit glitches on
      the bus
    - ALSA: usb-audio: Add a quirck for B&W PX headphones
    - ALSA: control: Fix memory corruption risk in snd_ctl_elem_read
    - [x86] ALSA: x86: Fix missing spinlock and mutex initializations
    - ALSA: hda: Add a power_save blacklist
    - ALSA: hda - Fix pincfg at resume on Lenovo T470 dock
    - mmc: sdhci-pci: Fix S0i3 for Intel BYT-based controllers
    - [armhf,arm64] mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias
    - [armhf,arm64] mmc: dw_mmc: Avoid accessing registers in runtime suspended
      state
    - [armhf,arm64] mmc: dw_mmc: Factor out dw_mci_init_slot_caps
    - [armhf,arm64] mmc: dw_mmc: Fix out-of-bounds access for slot's caps
    - timers: Forward timer base before migrating timers
    - [hppa] Use cr16 interval timers unconditionally on qemu
    - [hppa] Reduce irq overhead when run in qemu
    - [hppa] Fix ordering of cache and TLB flushes
    - [hppa] Hide virtual kernel memory layout
    - btrfs: use proper endianness accessors for super_copy
    - block: fix the count of PGPGOUT for WRITE_SAME
    - block: kyber: fix domain token leak during requeue
    - block: pass inclusive 'lend' parameter to truncate_inode_pages_range
    - vfio: disable filesystem-dax page pinning
    - dax: fix vma_is_fsdax() helper
    - direct-io: Fix sleep in atomic due to sync AIO
    - [x86] xen: Zero MSR_IA32_SPEC_CTRL before suspend
    - [x86] cpu_entry_area: Sync cpu_entry_area to initial_page_table
    - bridge: check brport attr show in brport_show
    - fib_semantics: Don't match route with mismatching tclassid
    - hdlc_ppp: carrier detect ok, don't turn off negotiation
    - [arm64] net: amd-xgbe: fix comparison to bitshift when dealing with a mask
    - [armhf] net: ethernet: ti: cpsw: fix net watchdog timeout
    - net: fix race on decreasing number of TX queues
    - net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68
    - netlink: ensure to loop over all netns in genlmsg_multicast_allns()
    - net: sched: report if filter is too large to dump
    - ppp: prevent unregistered channels from connecting to PPP units
    - sctp: verify size of a new chunk in _sctp_make_chunk() (CVE-2018-5803)
    - udplite: fix partial checksum initialization
    - net/mlx5e: Fix TCP checksum in LRO buffers
    - sctp: fix dst refcnt leak in sctp_v4_get_dst
    - net/mlx5e: Specify numa node when allocating drop rq
    - net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT
    - tcp: Honor the eor bit in tcp_mtu_probe
    - rxrpc: Fix send in rxrpc_send_data_packet()
    - tcp_bbr: better deal with suboptimal GSO
    - doc: Change the min default value of tcp_wmem/tcp_rmem.
    - net/mlx5e: Fix loopback self test when GRO is off
    - net_sched: gen_estimator: fix broken estimators based on percpu stats
    - net/sched: cls_u32: fix cls_u32 on filter replace
    - sctp: do not pr_err for the duplicated node in transport rhlist
    - net: ipv4: Set addr_type in hash_keys for forwarded case
    - sctp: fix dst refcnt leak in sctp_v6_get_dst()
    - bridge: Fix VLAN reference count problem
    - net/mlx5e: Verify inline header size do not exceed SKB linear size
    - tls: Use correct sk->sk_prot for IPV6
    - [arm64] amd-xgbe: Restore PCI interrupt enablement setting on resume
    - cls_u32: fix use after free in u32_destroy_key()
    - netlink: put module reference if dump start fails
    - tcp: purge write queue upon RST
    - tuntap: correctly add the missing XDP flush
    - tuntap: disable preemption during XDP processing
    - virtio-net: disable NAPI only when enabled during XDP set
    - cxgb4: fix trailing zero in CIM LA dump
    - net/mlx5: Fix error handling when adding flow rules
    - net: phy: Restore phy_resume() locking assumption
    - tcp: tracepoint: only call trace_tcp_send_reset with full socket
    - l2tp: don't use inet_shutdown on tunnel destroy
    - l2tp: don't use inet_shutdown on ppp session destroy
    - l2tp: fix races with tunnel socket close
    - l2tp: fix race in pppol2tp_release with session object destroy
    - l2tp: fix tunnel lookup use-after-free race
    - [s390x] qeth: fix underestimated count of buffer elements
    - [s390x] qeth: fix SETIP command handling
    - [s390x] qeth: fix overestimated count of buffer elements
    - [s390x] qeth: fix IP removal on offline cards
    - [s390x] qeth: fix double-free on IP add/remove race
    - [s390x] Revert "s390/qeth: fix using of ref counter for rxip addresses"
    - [s390x] qeth: fix IP address lookup for L3 devices
    - [s390x] qeth: fix IPA command submission race
    - tcp: revert F-RTO middle-box workaround
    - tcp: revert F-RTO extension to detect more spurious timeouts
    - blk-mq: don't call io sched's .requeue_request when requeueing rq to
      ->dispatch
    - media: m88ds3103: don't call a non-initalized function
    - [x86] EDAC, sb_edac: Fix out of bound writes during DIMM configuration on
      KNL
    - [s390x] KVM: take care of clock-comparator sign control
    - [s390x] KVM: provide only a single function for setting the tod (fix SCK)
    - [s390x] KVM: consider epoch index on hotplugged CPUs
    - [s390x] KVM: consider epoch index on TOD clock syncs
    - nospec: Allow index argument to have const-qualified type
    - [x86] mm: Fix {pmd,pud}_{set,clear}_flags()
    - [armhf] orion: fix orion_ge00_switch_board_info initialization
    - [armhf] dts: rockchip: Remove 1.8 GHz operation point from phycore som
    - [armhf] mvebu: Fix broken PL310_ERRATA_753970 selects
    - [x86] KVM: Fix SMRAM accessing even if VM is shutdown
    - KVM: mmu: Fix overlap between public and private memslots
    - [x86] KVM: Remove indirect MSR op calls from SPEC_CTRL
    - [x86] KVM: move LAPIC initialization after VMCS creation
    - [x86] KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the
      RDMSR path as unlikely()
    - [x86] KVM: fix vcpu initialization with userspace lapic
    - [x86] KVM: remove WARN_ON() for when vm_munmap() fails
    - [x86] ACPI / bus: Parse tables as term_list for Dell XPS 9570 and
      Precision M5530
    - [armhf] dts: LogicPD SOM-LV: Fix I2C1 pinmux
    - [armhf] dts: LogicPD Torpedo: Fix I2C1 pinmux
    - [powerpc*] 64s/radix: Boot-time NULL pointer protection using a guard-PID
    - md: only allow remove_and_add_spares when no sync_thread running.
    - [x86] platform: dell-laptop: fix kbd_get_state's request value
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.9
    - bpf: fix mlock precharge on arraymaps
    - bpf: fix memory leak in lpm_trie map_free callback function
    - bpf: fix rcu lockdep warning for lpm_trie map_free callback
    - [amd64] bpf: implement retpoline for tail call (CVE-2017-5715)
    - [arm64] bpf: fix out of bounds access in tail call
    - bpf: add schedule points in percpu arrays management
    - bpf: allow xadd only on aligned memory
    - [powerpc*] bpf, ppc64: fix out of bounds access in tail call
    - scsi: mpt3sas: fix oops in error handlers after shutdown/unload
    - scsi: mpt3sas: wait for and flush running commands on shutdown/unload
    - [x86] KVM: fix backward migration with async_PF
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.10
    - RDMA/ucma: Limit possible option size
    - RDMA/ucma: Check that user doesn't overflow QP state
    - RDMA/mlx5: Fix integer overflow while resizing CQ
    - bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in
      __cpu_map_entry_alloc()
    - IB/uverbs: Improve lockdep_check
    - mac80211_hwsim: don't use WQ_MEM_RECLAIM
    - [x86] drm/i915: Check for fused or unused pipes
    - [x86] drm/i915/audio: fix check for av_enc_map overflow
    - [x86] drm/i915: Fix rsvd2 mask when out-fence is returned
    - [x86] drm/i915: Clear the in-use marker on execbuf failure
    - [x86] drm/i915: Disable DC states around GMBUS on GLK
    - [x86] drm/i915: Update watermark state correctly in sanitize_watermarks
    - [x86] drm/i915: Try EDID bitbanging on HDMI after failed read
    - [x86] drm/i915/perf: fix perf stream opening lock
    - scsi: core: Avoid that ATA error handling can trigger a kernel hang or
      oops (Closes: #891467)
    - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
    - [x86] drm/i915: Always call to intel_display_set_init_power() in
      resume_early.
    - workqueue: Allow retrieval of current task's work struct
    - drm: Allow determining if current task is output poll worker
    - drm/nouveau: Fix deadlock on runtime suspend
    - drm/radeon: Fix deadlock on runtime suspend
    - drm/amdgpu: Fix deadlock on runtime suspend
    - drm/nouveau: prefer XBGR2101010 for addfb ioctl
    - drm/amd/powerplay/smu7: allow mclk switching with no displays
    - drm/amd/powerplay/vega10: allow mclk switching with no displays
    - Revert "drm/radeon/pm: autoswitch power state when in balanced mode"
    - drm/amd/display: check for ipp before calling cursor operations
    - drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE
    - drm/amd/powerplay: fix power over limit on Fiji
    - drm/amd/display: Default HDMI6G support to true. Log VBIOS table error.
    - drm/amdgpu: used cached pcie gen info for SI (v2)
    - drm/amdgpu: Notify sbios device ready before send request
    - drm/radeon: fix KV harvesting
    - drm/amdgpu: fix KV harvesting
    - drm/amdgpu:Correct max uvd handles
    - drm/amdgpu:Always save uvd vcpu_bo in VM Mode
    - ovl: redirect_dir=nofollow should not follow redirect for opaque lower
    - [mips*/octeon] irq: Check for null return on kzalloc allocation
    - PCI: dwc: Fix enumeration end when reaching root subordinate
    - Revert "Input: synaptics - Lenovo Thinkpad T460p devices should use RMI"
    - bug: use %pB in BUG and stack protector failure
    - lib/bug.c: exclude non-BUG/WARN exceptions from report_bug()
    - mm/memblock.c: hardcode the end_pfn being -1
    - Documentation/sphinx: Fix Directive import error
    - loop: Fix lost writes caused by missing flag
    - virtio_ring: fix num_free handling in error case
    - [x390x] KVM: fix memory overwrites when not using SCA entries
    - [arm64] mm: fix thinko in non-global page table attribute check
    - IB/core: Fix missing RDMA cgroups release in case of failure to register
      device
    - Revert "nvme: create 'slaves' and 'holders' entries for hidden
      controllers"
    - kbuild: Handle builtin dtb file names containing hyphens
    - dm bufio: avoid false-positive Wmaybe-uninitialized warning
    - IB/mlx5: Fix incorrect size of klms in the memory region
    - bcache: fix crashes in duplicate cache device register
    - bcache: don't attach backing with duplicate UUID
    - [x86] MCE: Save microcode revision in machine check records
    - [x86] MCE: Serialize sysfs changes (CVE-2018-7995)
    - perf tools: Fix trigger class trigger_on()
    - [x86] spectre_v2: Don't check microcode versions when running under
      hypervisors
    - ALSA: hda/realtek - Add support headset mode for DELL WYSE
    - ALSA: hda/realtek - Add headset mode support for Dell laptop
    - ALSA: hda/realtek: Limit mic boost on T480
    - ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520
    - ALSA: hda/realtek - Make dock sound work on ThinkPad L570
    - ALSA: seq: Don't allow resizing pool in use
    - ALSA: seq: More protection for concurrent write and ioctl races
    - ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines
    - ALSA: hda: add dock and led support for HP EliteBook 820 G3
    - ALSA: hda: add dock and led support for HP ProBook 640 G2
    - scsi: qla2xxx: Fix NULL pointer crash due to probe failure
    - scsi: qla2xxx: Fix recursion while sending terminate exchange
    - dt-bindings: Document mti,mips-cpc binding
    - nospec: Kill array_index_nospec_mask_check()
    - nospec: Include <asm/barrier.h> dependency
    - [x86] entry: Reduce the code footprint of the 'idtentry' macro
    - [x86] entry/64: Use 'xorl' for faster register clearing
    - [x86] mm: Remove stale comment about KMEMCHECK
    - [x86] asm: Improve how GEN_*_SUFFIXED_RMWcc() specify clobbers
    - [x86] IO-APIC: Avoid warning in 32-bit builds
    - [x86] LDT: Avoid warning in 32-bit builds with older gcc
    - x86-64/realmode: Add instruction suffix
    - Revert "x86/retpoline: Simplify vmexit_fill_RSB()"
    - [x86] speculation: Use IBRS if available before calling into firmware
    - [x86] retpoline: Support retpoline builds with Clang
    - [x86] speculation, objtool: Annotate indirect calls/jumps for objtool
    - [x86] speculation: Move firmware_restrict_branch_speculation_*() from C
      to CPP
    - [x86] paravirt, objtool: Annotate indirect calls
    - [x86] boot, objtool: Annotate indirect jump in secondary_startup_64()
    - [x86] mm/sme, objtool: Annotate indirect call in sme_encrypt_execute()
    - objtool: Use existing global variables for options
    - objtool: Add retpoline validation
    - objtool: Add module specific retpoline rules
    - objtool, retpolines: Integrate objtool with retpoline support more
      closely
    - objtool: Fix another switch table detection issue
    - objtool: Fix 32-bit build
    - [x86] kprobes: Fix kernel crash when probing .entry_trampoline code
    - watchdog: hpwdt: SMBIOS check
    - watchdog: hpwdt: Check source of NMI
    - watchdog: hpwdt: fix unused variable warning
    - watchdog: hpwdt: Remove legacy NMI sourcing.
    - netfilter: add back stackpointer size checks (CVE-2018-1065)
    - netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
    - netfilter: xt_hashlimit: fix lock imbalance
    - netfilter: x_tables: fix missing timer initialization in xt_LED
    - netfilter: nat: cope with negative port range
    - netfilter: IDLETIMER: be syzkaller friendly
    - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
      (CVE-2018-1068)
    - netfilter: bridge: ebt_among: add missing match size checks
    - netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
    - netfilter: use skb_to_full_sk in ip6_route_me_harder
    - tpm_tis: Move ilb_base_addr to tpm_tis_data
    - tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd()
    - tpm: delete the TPM_TIS_CLK_ENABLE flag
    - tpm: remove unused variables
    - tpm: only attempt to disable the LPC CLKRUN if is already enabled
    - [x86] xen: Calculate __max_logical_packages on PV domains
    - scsi: qla2xxx: Fix system crash for Notify ack timeout handling
    - scsi: qla2xxx: Fix gpnid error processing
    - scsi: qla2xxx: Move session delete to driver work queue
    - scsi: qla2xxx: Skip IRQ affinity for Target QPairs
    - scsi: qla2xxx: Fix re-login for Nport Handle in use
    - scsi: qla2xxx: Retry switch command on time out
    - scsi: qla2xxx: Serialize GPNID for multiple RSCN
    - scsi: qla2xxx: Fix login state machine stuck at GPDB
    - scsi: qla2xxx: Fix NPIV host cleanup in target mode
    - scsi: qla2xxx: Relogin to target port on a cable swap
    - scsi: qla2xxx: Fix Relogin being triggered too fast
    - scsi: qla2xxx: Fix PRLI state check
    - scsi: qla2xxx: Fix abort command deadlock due to spinlock
    - scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport
    - scsi: qla2xxx: Fix scan state field for fcport
    - scsi: qla2xxx: Clear loop id after delete
    - scsi: qla2xxx: Defer processing of GS IOCB calls
    - scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout.
    - scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref
    - scsi: qla2xxx: Fix memory leak in dual/target mode
    - NFS: Fix an incorrect type in struct nfs_direct_req
    - pNFS: Prevent the layout header refcount going to zero in pnfs_roc()
    - NFS: Fix unstable write completion
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.11
    - [x86] Treat R_X86_64_PLT32 as R_X86_64_PC32
    - usb: host: xhci-rcar: add support for r8a77965
    - xhci: Fix front USB ports on ASUS PRIME B350M-A
    - xhci: fix endpoint context tracer output
    - [sh4] serial: sh-sci: prevent lockup on full TTY buffers
    - tty/serial: atmel: add new version check for usart
    - uas: fix comparison for error code
    - [x86] staging: comedi: fix comedi_nsamples_left.
    - USB: storage: Add JMicron bridge 152d:2567 to unusual_devs.h
    - usbip: vudc: fix null pointer dereference on udc->lock
    - usb: quirks: add control message delay for 1b1c:1b20
    - usb: usbmon: Read text within supplied buffer size
    - usb: gadget: f_fs: Fix use-after-free in ffs_fs_kill_sb()
    - [arm64,armhf] usb: dwc3: Fix lock-up on ID change during system
      suspend/resume
    - serial: 8250_pci: Add Brainboxes UC-260 4 port serial device
    - serial: core: mark port as initialized in autoconfig
    - earlycon: add reg-offset to physical address before mapping
    - dm mpath: fix passing integrity data
    - Revert "btrfs: use proper endianness accessors for super_copy"
    - gfs2: Clean up {lookup,fillup}_metapath
    - gfs2: Fixes to "Implement iomap for block_map" (2)
    - [armhf] spi: imx: Fix failure path leak on GPIO request error correctly
    - HID: multitouch: Only look at non touch fields in first packet of a
      frame
    - [powerpc*] KVM: Book3S HV: Avoid shifts by negative amounts
    - drm/edid: set ELD connector type in drm_edid_to_eld()
    - dma-buf/fence: Fix lock inversion within dma-fence-array
    - video/hdmi: Allow "empty" HDMI infoframes
    - [powerpc*] KVM: Book3S HV: Fix typo in kvmppc_hv_get_dirty_log_radix()
    - HID: elo: clear BTN_LEFT mapping
    - iwlwifi: mvm: rs: don't override the rate history in the search cycle
    - [armhf] dts: exynos: Correct Trats2 panel reset line
    - drm/amdgpu: fix get_max_engine_clock_in_mhz
    - USB: ledtrig-usbport: fix of-node leak
    - dt-bindings: serial: Add common rs485 binding for RTS polarity
    - sched: Stop switched_to_rt() from sending IPIs to offline CPUs
    - sched: Stop resched_cpu() from sending IPIs to offline CPUs
    - crypto: chelsio - Fix an error code in chcr_hash_dma_map()
    - crypto: keywrap - Add missing ULL suffixes for 64-bit constants
    - crypto: cavium - fix memory leak on info
    - test_firmware: fix setting old custom fw path back on exit
    - drm/vblank: Fix vblank timestamp debugs
    - net: ieee802154: adf7242: Fix bug if defined DEBUG
    - perf report: Fix -D output for user metadata events
    - net: xfrm: allow clearing socket xfrm policies.
    - gpiolib: don't allow OPEN_DRAIN & OPEN_SOURCE flags simultaneously
    - mtd: nand: fix interpretation of NAND_CMD_NONE in nand_command[_lp]()
    - [arm64] net: thunderx: Set max queue count taking XDP_TX into account
    - [armhf] dts: am335x-pepper: Fix the audio CODEC's reset pin
    - [armhf] dts: omap3-n900: Fix the audio CODEC's reset pin
    - mtd: nand: ifc: update bufnum mask for ver >= 2.0.0
    - userns: Don't fail follow_automount based on s_user_ns
    - xfrm: Fix xfrm_replay_overflow_offload_esn
    - leds: pm8058: Silence pointer to integer size warning
    - bpf: fix stack state printing in verifier log
    - [armhf] drm/etnaviv: make THERMAL selectable
    - ath10k: update tdls teardown state to target
    - cpufreq: Fix governor module removal race
    - [x86] KVM: Restart the guest when insn_len is zero and SEV is enabled
    - drm/amdgpu:fix random missing of FLR NOTIFY
    - scsi: lpfc: Fix crash during driver unload with running nvme traffic
    - scsi: ses: don't ask for diagnostic pages repeatedly during probe
    - [armhf] drm/sun4i: Fix format mask in DE2 driver
    - [s390x] perf annotate: Fix unnecessary memory allocation for s390x
    - perf annotate: Fix objdump comment parsing for Intel mov dissassembly
    - iwlwifi: mvm: avoid dumping assert log when device is stopped
    - drm/amdgpu:fix virtual dce bug
    - drm/amdgpu: fix amdgpu_sync_resv v2
    - bnxt_en: Uninitialized variable in bnxt_tc_parse_actions()
    - [arm64] clk: qcom: msm8916: fix mnd_width for codec_digcodec
    - mwifiex: cfg80211: do not change virtual interface during scan
      processing
    - ath10k: fix invalid STS_CAP_OFFSET_MASK
    - tools/usbip: fixes build with musl libc toolchain
    - [armhf] spi: sun6i: disable/unprepare clocks on remove
    - bnxt_en: Don't print "Link speed -1 no longer supported" messages.
    - scsi: core: scsi_get_device_flags_keyed(): Always return device flags
    - scsi: devinfo: apply to HP XP the same flags as Hitachi VSP
    - scsi: dh: add new rdac devices
    - media: vsp1: Prevent suspending and resuming DRM pipelines
    - dm raid: fix raid set size revalidation
    - media: cpia2: Fix a couple off by one bugs
    - [arm*] media: davinci: vpif_capture: add NULL check on devm_kzalloc
      return value
    - virtio_net: Disable interrupts if napi_complete_done rescheduled napi
    - net: sched: drop qdisc_reset from dev_graft_qdisc
    - veth: set peer GSO values
    - [x86] drm/amdkfd: Fix memory leaks in kfd topology
    - [powerpc*] modules: Don't try to restore r2 after a sibling call
    - [powerpc/powerpc64,ppc64*] Don't trace irqs-off at interrupt return to
      soft-disabled context
    - [arm64] dts: renesas: salvator-common: Add EthernetAVB PHY reset
    - agp/intel: Flush all chipset writes after updating the GGTT
    - mac80211_hwsim: enforce PS_MANUAL_POLL to be set after PS_ENABLED
    - mac80211: remove BUG() when interface type is invalid
    - crypto: caam/qi - use correct print specifier for size_t
    - mmc: mmc_test: Ensure command queue is disabled for testing
    - Fix misannotated out-of-line _copy_to_user()
    - ipvlan: add L2 check for packets arriving via virtual devices
    - locking/locktorture: Fix num reader/writer corner cases
    - ima: relax requiring a file signature for new files with zero length
    - IB/mlx5: revisit -Wmaybe-uninitialized warning
    - [arm64] dmaengine: qcom_hidma: check pending interrupts
    - [x86] drm/i915/glk: Disable Guc and HuC on GLK

  [ Ben Hutchings ]
  * aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier
  * aufs: Update support patchset to aufs4.15-20180219 (no functional change)
  * debian/control: Point Vcs URLs to Salsa
  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_SST_TOPLEVEL,
    SND_SOC_INTEL_HASWELL, SND_SOC_INTEL_BAYTRAIL, SND_SST_ATOM_HIFI2_PLATFORM,
    SND_SOC_INTEL_SKYLAKE as modules; re-enable dependent board drivers
    (Closes: #892629)
  * firmware_class: Refer to Debian wiki page when logging missing firmware
    (Closes: #888405)
  * amdgpu: Abort probing if firmware is not installed, as we do in radeon
  * Bump ABI to 2
  * [amd64] udeb: Add vmd to scsi-modules, required for NVMe on some systems
    (Closes: #891482)
  * udeb: Update patterns for PHY modules included in usb-modules
    (Closes: #893154)

  [ Uwe Kleine-König ]
  * netfilter: enable NFT_FIB_NETDEV as module

  [ Thadeu Lima de Souza Cascardo ]
  * [powerpc,ppc64el,ppc64] Enable CRASH_DUMP (Closes: #883432)

  [ Bastian Blank ]
  * Drop note about Xen from long descriptions.

  [ Vagrant Cascadian ]
  * [arm64] Enable ROCKCHIP_IODOMAIN as a module, to enable PCIe reset.
  * [arm64] Enable REGULATOR_FAN53555 as a module, enabling cpufreq to
    work on rk3399 A72 cores.
  * [arm64] Apply patch from linux-next to fix eMMC corruption on
    Odroid-C2 (Closes: #879072).

  [ Salvatore Bonaccorso ]
  * mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl()
    (CVE-2018-8087)

[dgit import unpatched linux 4.15.11-1]