Cloud Kernel Release 16 is ready, this is another regular release with several architectural updates as well as a bunch of bug fixes.

Highlights

• Bump to kernel 4.19.67 LTS;
• Add Intel Cooper Lake CPU support;
• ARM64 enhancements;

Enhancements

• configs: compile mouse/cirrus driver as modules for qboot optimization
• configs: enable torture test for kernel-debug
• x86/mm/cpa: Improve large page preservation handling
• e1000e: increase pause and refresh time (Miguel Bernal Marin)
• reduce e1000e boot time by tightening sleep ranges (Arjan van de Ven)

Bug Fixes

• ovl: fix regression caused by overlapping layers detection (Amir Goldstein)
• sched/psi: Correct overly pessimistic size calculation (Miles Chen)
• sched/psi: Do not require setsched permission from the trigger creator (Suren Baghdasaryan)
• sched/psi: Reduce psimon FIFO priority (Peter Zijlstra)
• blk-cgroup: turn on psi memstall stuff (Josef Bacik)
• KVM: coalesced_mmio: add bounds checking (Matt Delco) {CVE-2019-14821}
• sched/fair: Don't assign runtime for throttled cfs_rq (Liangyan)
• zswap: use movable memory if zpool support allocate movable memory (Hui Zhu)
• zpool: add malloc_support_movable to zpool_driver (Hui Zhu)
• net/rds: Fix info leak in rds6_inc_info_copy() (Ka-Cheong Poon) {CVE-2019-16714}
• ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang) {CVE-2019-12381}
• efi/x86/Add missing error handling to old_memmap 1:1 mapping code (Gen Zhang) {CVE-2019-12380}
• ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang) {CVE-2019-12378}
• scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() (Gen Zhang) {CVE-2019-12456}
• clk-sunxi: fix a missing-check bug in sunxi_divs_clk_setup() (Gen Zhang) {CVE-2019-12455}
• powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property() (Gen Zhang) {CVE-2019-12614}
• vhost: make sure log_num < in_num (yongduan) {CVE-2019-14835}
• psi: get poll_work to run when calling poll syscall next time (Jason Xing)