This is the start of the stable review cycle for the 5.10.41 release.
There are 9 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 29 May 2021 15:11:29 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.41-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.41-rc1
Dongliang Mu <mudongliangabcd(a)gmail.com>
NFC: nci: fix memory leak in nci_allocate_device
Dave Rigby <d.rigby(a)me.com>
perf unwind: Set userdata for all __report_module() paths
Jan Kratochvil <jan.kratochvil(a)redhat.com>
perf unwind: Fix separate debug info files when using elfutils' libdw's unwinder
Wanpeng Li <wanpengli(a)tencent.com>
KVM: x86: Defer vtime accounting 'til after IRQ handling
Wanpeng Li <wanpengli(a)tencent.com>
context_tracking: Move guest exit vtime accounting to separate helpers
Wanpeng Li <wanpengli(a)tencent.com>
context_tracking: Move guest exit context tracking to separate helpers
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: No need to simulate speculative domain for immediates
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Fix mask direction swap upon off reg sign change
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Wrap aux data inside bpf_sanitize_info container
-------------
Diffstat:
Makefile | 4 ++--
arch/x86/kvm/svm/svm.c | 6 +++---
arch/x86/kvm/vmx/vmx.c | 6 +++---
arch/x86/kvm/x86.c | 9 ++++++++
include/linux/context_tracking.h | 25 ++++++++++++++++++----
include/net/nfc/nci_core.h | 1 +
kernel/bpf/verifier.c | 46 ++++++++++++++++++++++++----------------
net/nfc/nci/core.c | 1 +
net/nfc/nci/hci.c | 5 +++++
tools/perf/util/unwind-libdw.c | 35 ++++++++++++++++++++++++++----
10 files changed, 104 insertions(+), 34 deletions(-)
In AP mode WPA-PSK connections were not established.
The reason was that the AP was sending the first message
of the 4 way handshake encrypted, even though no key had
(correctly) yet been set.
Fix this by adding an extra check that we have a key.
The redpine downstream out of tree driver does it this way too.
Signed-off-by: Martin Fuzzey <martin.fuzzey(a)flowbird.group>
CC: stable(a)vger.kernel.org
---
drivers/net/wireless/rsi/rsi_91x_hal.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/net/wireless/rsi/rsi_91x_hal.c b/drivers/net/wireless/rsi/rsi_91x_hal.c
index ce98921..ef84262 100644
--- a/drivers/net/wireless/rsi/rsi_91x_hal.c
+++ b/drivers/net/wireless/rsi/rsi_91x_hal.c
@@ -203,6 +203,7 @@ int rsi_prepare_data_desc(struct rsi_common *common, struct sk_buff *skb)
wh->frame_control |= cpu_to_le16(RSI_SET_PS_ENABLE);
if ((!(info->flags & IEEE80211_TX_INTFL_DONT_ENCRYPT)) &&
+ (info->control.hw_key) &&
(common->secinfo.security_enable)) {
if (rsi_is_cipher_wep(common))
ieee80211_size += 4;
--
1.9.1
commit cf6d100dd238 ("drm/rockchip: dsi: add dual mipi support") added
this devcnt field and call to component_del(). However, these both
appear to be erroneous changes left over from an earlier version of the
patch. In the version merged, nothing ever modifies devcnt, meaning
component_del() runs unconditionally and in addition to the
component_del() calls in dw_mipi_dsi_rockchip_host_detach(). The second
call fails to delete anything and produces a warning in dmesg.
If we look at the previous version of the patch[1], however, we see that
it had logic to calculate devcnt and call component_add() in certain
situations. This was removed in v6, and the fact that the deletion code
was not appears to have been an oversight.
[1] https://patchwork.kernel.org/project/dri-devel/patch/20180821140515.22246-8…
Fixes: cf6d100dd238 ("drm/rockchip: dsi: add dual mipi support")
Cc: stable(a)vger.kernel.org
Signed-off-by: Thomas Hebb <tommyhebb(a)gmail.com>
---
drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c | 4 ----
1 file changed, 4 deletions(-)
diff --git a/drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c b/drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c
index 24a71091759c..8cc81d5b82f0 100644
--- a/drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c
+++ b/drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c
@@ -243,7 +243,6 @@ struct dw_mipi_dsi_rockchip {
struct dw_mipi_dsi *dmd;
const struct rockchip_dw_dsi_chip_data *cdata;
struct dw_mipi_dsi_plat_data pdata;
- int devcnt;
};
struct dphy_pll_parameter_map {
@@ -1121,9 +1120,6 @@ static int dw_mipi_dsi_rockchip_remove(struct platform_device *pdev)
{
struct dw_mipi_dsi_rockchip *dsi = platform_get_drvdata(pdev);
- if (dsi->devcnt == 0)
- component_del(dsi->dev, &dw_mipi_dsi_rockchip_ops);
-
dw_mipi_dsi_remove(dsi->dmd);
return 0;
--
2.30.0
This is the start of the stable review cycle for the 5.4.123 release.
There are 7 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 29 May 2021 15:11:29 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.123-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.4.123-rc1
Dongliang Mu <mudongliangabcd(a)gmail.com>
NFC: nci: fix memory leak in nci_allocate_device
Dave Rigby <d.rigby(a)me.com>
perf unwind: Set userdata for all __report_module() paths
Jan Kratochvil <jan.kratochvil(a)redhat.com>
perf unwind: Fix separate debug info files when using elfutils' libdw's unwinder
Jack Pham <jackp(a)codeaurora.org>
usb: dwc3: gadget: Enable suspend events
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: No need to simulate speculative domain for immediates
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Fix mask direction swap upon off reg sign change
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Wrap aux data inside bpf_sanitize_info container
-------------
Diffstat:
Makefile | 4 ++--
drivers/usb/dwc3/gadget.c | 4 ++++
include/net/nfc/nci_core.h | 1 +
kernel/bpf/verifier.c | 46 +++++++++++++++++++++++++-----------------
net/nfc/nci/core.c | 1 +
net/nfc/nci/hci.c | 5 +++++
tools/perf/util/unwind-libdw.c | 35 ++++++++++++++++++++++++++++----
7 files changed, 72 insertions(+), 24 deletions(-)
There exists a possible scenario in which dwc3_gadget_init() can fail:
during during host -> peripheral mode switch in dwc3_set_mode(), and
a pending gadget driver fails to bind. Then, if the DRD undergoes
another mode switch from peripheral->host the resulting
dwc3_gadget_exit() will attempt to reference an invalid and dangling
dwc->gadget pointer as well as call dma_free_coherent() on unmapped
DMA pointers.
The exact scenario can be reproduced as follows:
- Start DWC3 in peripheral mode
- Configure ConfigFS gadget with FunctionFS instance (or use g_ffs)
- Run FunctionFS userspace application (open EPs, write descriptors, etc)
- Bind gadget driver to DWC3's UDC
- Switch DWC3 to host mode
=> dwc3_gadget_exit() is called. usb_del_gadget() will put the
ConfigFS driver instance on the gadget_driver_pending_list
- Stop FunctionFS application (closes the ep files)
- Switch DWC3 to peripheral mode
=> dwc3_gadget_init() fails as usb_add_gadget() calls
check_pending_gadget_drivers() and attempts to rebind the UDC
to the ConfigFS gadget but fails with -19 (-ENODEV) because the
FFS instance is not in FFS_ACTIVE state (userspace has not
re-opened and written the descriptors yet, i.e. desc_ready!=0).
- Switch DWC3 back to host mode
=> dwc3_gadget_exit() is called again, but this time dwc->gadget
is invalid.
Although it can be argued that userspace should take responsibility
for ensuring that the FunctionFS application be ready prior to
allowing the composite driver bind to the UDC, failure to do so
should not result in a panic from the kernel driver.
Fix this by setting dwc->gadget to NULL in the failure path of
dwc3_gadget_init() and add a check to dwc3_gadget_exit() to bail out
unless the gadget pointer is valid.
Fixes: e81a7018d93a ("usb: dwc3: allocate gadget structure dynamically")
Cc: <stable(a)vger.kernel.org>
Reviewed-by: Peter Chen <peter.chen(a)kernel.org>
Signed-off-by: Jack Pham <jackp(a)codeaurora.org>
---
v2: Fixed commit message to refer to FFS_ACTIVE state; added
Peter's Reviewed-by tag.
drivers/usb/dwc3/gadget.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/drivers/usb/dwc3/gadget.c b/drivers/usb/dwc3/gadget.c
index 612825a39f82..65d9b7227752 100644
--- a/drivers/usb/dwc3/gadget.c
+++ b/drivers/usb/dwc3/gadget.c
@@ -4046,6 +4046,7 @@ int dwc3_gadget_init(struct dwc3 *dwc)
dwc3_gadget_free_endpoints(dwc);
err4:
usb_put_gadget(dwc->gadget);
+ dwc->gadget = NULL;
err3:
dma_free_coherent(dwc->sysdev, DWC3_BOUNCE_SIZE, dwc->bounce,
dwc->bounce_addr);
@@ -4065,6 +4066,9 @@ int dwc3_gadget_init(struct dwc3 *dwc)
void dwc3_gadget_exit(struct dwc3 *dwc)
{
+ if (!dwc->gadget)
+ return;
+
usb_del_gadget(dwc->gadget);
dwc3_gadget_free_endpoints(dwc);
usb_put_gadget(dwc->gadget);
--
2.24.0
This is the start of the stable review cycle for the 5.12.8 release.
There are 7 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 29 May 2021 15:11:29 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.12.8-rc1…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.12.8-rc1
Dongliang Mu <mudongliangabcd(a)gmail.com>
NFC: nci: fix memory leak in nci_allocate_device
Wanpeng Li <wanpengli(a)tencent.com>
KVM: x86: Defer vtime accounting 'til after IRQ handling
Wanpeng Li <wanpengli(a)tencent.com>
context_tracking: Move guest exit vtime accounting to separate helpers
Wanpeng Li <wanpengli(a)tencent.com>
context_tracking: Move guest exit context tracking to separate helpers
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: No need to simulate speculative domain for immediates
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Fix mask direction swap upon off reg sign change
Daniel Borkmann <daniel(a)iogearbox.net>
bpf: Wrap aux data inside bpf_sanitize_info container
-------------
Diffstat:
Makefile | 4 ++--
arch/x86/kvm/svm/svm.c | 6 +++---
arch/x86/kvm/vmx/vmx.c | 6 +++---
arch/x86/kvm/x86.c | 9 ++++++++
include/linux/context_tracking.h | 25 ++++++++++++++++++----
include/net/nfc/nci_core.h | 1 +
kernel/bpf/verifier.c | 46 ++++++++++++++++++++++++----------------
net/nfc/nci/core.c | 1 +
net/nfc/nci/hci.c | 5 +++++
9 files changed, 73 insertions(+), 30 deletions(-)
I'm announcing the release of the 5.12.8 kernel.
All users of the 5.12 kernel series must upgrade.
The updated 5.12.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.12.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 -
arch/x86/kvm/svm/svm.c | 6 ++---
arch/x86/kvm/vmx/vmx.c | 6 ++---
arch/x86/kvm/x86.c | 9 +++++++
include/linux/context_tracking.h | 25 +++++++++++++++++----
include/net/nfc/nci_core.h | 1
kernel/bpf/verifier.c | 46 +++++++++++++++++++++++----------------
net/nfc/nci/core.c | 1
net/nfc/nci/hci.c | 5 ++++
9 files changed, 72 insertions(+), 29 deletions(-)
Daniel Borkmann (3):
bpf: Wrap aux data inside bpf_sanitize_info container
bpf: Fix mask direction swap upon off reg sign change
bpf: No need to simulate speculative domain for immediates
Dongliang Mu (1):
NFC: nci: fix memory leak in nci_allocate_device
Greg Kroah-Hartman (1):
Linux 5.12.8
Wanpeng Li (3):
context_tracking: Move guest exit context tracking to separate helpers
context_tracking: Move guest exit vtime accounting to separate helpers
KVM: x86: Defer vtime accounting 'til after IRQ handling
I'm announcing the release of the 5.10.41 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 -
arch/x86/kvm/svm/svm.c | 6 ++---
arch/x86/kvm/vmx/vmx.c | 6 ++---
arch/x86/kvm/x86.c | 9 +++++++
include/linux/context_tracking.h | 25 +++++++++++++++++----
include/net/nfc/nci_core.h | 1
kernel/bpf/verifier.c | 46 +++++++++++++++++++++++----------------
net/nfc/nci/core.c | 1
net/nfc/nci/hci.c | 5 ++++
tools/perf/util/unwind-libdw.c | 35 ++++++++++++++++++++++++++---
10 files changed, 103 insertions(+), 33 deletions(-)
Daniel Borkmann (3):
bpf: Wrap aux data inside bpf_sanitize_info container
bpf: Fix mask direction swap upon off reg sign change
bpf: No need to simulate speculative domain for immediates
Dave Rigby (1):
perf unwind: Set userdata for all __report_module() paths
Dongliang Mu (1):
NFC: nci: fix memory leak in nci_allocate_device
Greg Kroah-Hartman (1):
Linux 5.10.41
Jan Kratochvil (1):
perf unwind: Fix separate debug info files when using elfutils' libdw's unwinder
Wanpeng Li (3):
context_tracking: Move guest exit context tracking to separate helpers
context_tracking: Move guest exit vtime accounting to separate helpers
KVM: x86: Defer vtime accounting 'til after IRQ handling