May 2022 - Linux-stable-mirror

[PATCH AUTOSEL 5.15 01/27] gfs2: assign rgrp glock before compute_bitstructs

by Sasha Levin

From: Bob Peterson <rpeterso(a)redhat.com> [ Upstream commit 428f651cb80b227af47fc302e4931791f2fb4741 ] Before this patch, function read_rindex_entry called compute_bitstructs before it allocated a glock for the rgrp. But if compute_bitstructs found a problem with the rgrp, it called gfs2_consist_rgrpd, and that called gfs2_dump_glock for rgd->rd_gl which had not yet been assigned. read_rindex_entry compute_bitstructs gfs2_consist_rgrpd gfs2_dump_glock <---------rgd->rd_gl was not set. This patch changes read_rindex_entry so it assigns an rgrp glock before calling compute_bitstructs so gfs2_dump_glock does not reference an unassigned pointer. If an error is discovered, the glock must also be put, so a new goto and label were added. Reported-by: syzbot+c6fd14145e2f62ca0784(a)syzkaller.appspotmail.com Signed-off-by: Bob Peterson <rpeterso(a)redhat.com> Signed-off-by: Andreas Gruenbacher <agruenba(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- fs/gfs2/rgrp.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/fs/gfs2/rgrp.c b/fs/gfs2/rgrp.c index c3b00ba92ed2..e21f8e10d70b 100644 --- a/fs/gfs2/rgrp.c +++ b/fs/gfs2/rgrp.c @@ -922,15 +922,15 @@ static int read_rindex_entry(struct gfs2_inode *ip) spin_lock_init(&rgd->rd_rsspin); mutex_init(&rgd->rd_mutex); - error = compute_bitstructs(rgd); - if (error) - goto fail; - error = gfs2_glock_get(sdp, rgd->rd_addr, &gfs2_rgrp_glops, CREATE, &rgd->rd_gl); if (error) goto fail; + error = compute_bitstructs(rgd); + if (error) + goto fail_glock; + rgd->rd_rgl = (struct gfs2_rgrp_lvb *)rgd->rd_gl->gl_lksb.sb_lvbptr; rgd->rd_flags &= ~(GFS2_RDF_UPTODATE | GFS2_RDF_PREFERRED); if (rgd->rd_data > sdp->sd_max_rg_data) @@ -944,6 +944,7 @@ static int read_rindex_entry(struct gfs2_inode *ip) } error = 0; /* someone else read in the rgrp; free it and ignore it */ +fail_glock: gfs2_glock_put(rgd->rd_gl); fail: -- 2.35.1

3 years, 7 months

2
30
0 0

[PATCH] ceph: fix possible NULL pointer dereference of the ci

by Xiubo Li

When unmounting and if there still have some caps or capsnaps flushing still not get the acks it will wait and dump them, but for the capsnaps they didn't initialize the ->ci, so when deferencing the ->ci we will see the kernel crash: kernel: ceph: dump_cap_flushes: still waiting for cap flushes through 45572: kernel: ceph: 5000000008b:fffffffffffffffe Fw 23183 0 0 kernel: ceph: 5000000008a:fffffffffffffffe Fw 23184 0 0 kernel: ceph: 50000000089:fffffffffffffffe Fw 23185 0 0 kernel: ceph: 50000000084:fffffffffffffffe Fw 23189 0 0 kernel: ceph: 5000000007a:fffffffffffffffe Fw 23199 0 0 kernel: ceph: 50000000094:fffffffffffffffe Fw 23374 0 0 kernel: ceph: 50000000092:fffffffffffffffe Fw 23377 0 0 kernel: ceph: 50000000091:fffffffffffffffe Fw 23378 0 0 kernel: ceph: 5000000008e:fffffffffffffffe Fw 23380 0 0 kernel: ceph: 50000000087:fffffffffffffffe Fw 23382 0 0 kernel: ceph: 50000000086:fffffffffffffffe Fw 23383 0 0 kernel: ceph: 50000000083:fffffffffffffffe Fw 23384 0 0 kernel: ceph: 50000000082:fffffffffffffffe Fw 23385 0 0 kernel: ceph: 50000000081:fffffffffffffffe Fw 23386 0 0 kernel: ceph: 50000000080:fffffffffffffffe Fw 23387 0 0 kernel: ceph: 5000000007e:fffffffffffffffe Fw 23389 0 0 kernel: ceph: 5000000007b:fffffffffffffffe Fw 23392 0 0 kernel: BUG: kernel NULL pointer dereference, address: 0000000000000780 kernel: #PF: supervisor read access in kernel mode kernel: #PF: error_code(0x0000) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0000 [#1] PREEMPT SMP PTI kernel: CPU: 3 PID: 46268 Comm: umount Tainted: G S 5.18.0-rc2-ceph-g1771083b2f18 #1 kernel: Hardware name: Supermicro SYS-5018R-WR/X10SRW-F, BIOS 2.0 12/17/2015 kernel: RIP: 0010:ceph_mdsc_sync.cold.64+0x77/0xc3 [ceph] kernel: RSP: 0018:ffffc90009c4fda8 EFLAGS: 00010212 kernel: RAX: 0000000000000000 RBX: ffff8881abf63000 RCX: 0000000000000000 kernel: RDX: 0000000000000000 RSI: ffffffff823932ad RDI: 0000000000000000 kernel: RBP: ffff8881abf634f0 R08: 0000000000005dc7 R09: c0000000ffffdfff kernel: R10: 0000000000000001 R11: ffffc90009c4fbc8 R12: 0000000000000001 kernel: R13: 000000000000b204 R14: ffffffffa0ab3598 R15: ffff88815d36a110 kernel: FS: 00007f50eb25e080(0000) GS:ffff88885fcc0000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000000780 CR3: 0000000116ea2003 CR4: 00000000003706e0 kernel: DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kernel: DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 kernel: Call Trace: kernel: <TASK> kernel: ? schedstat_stop+0x10/0x10 kernel: ceph_sync_fs+0x2c/0x100 [ceph] kernel: sync_filesystem+0x6d/0x90 kernel: generic_shutdown_super+0x22/0x120 kernel: kill_anon_super+0x14/0x30 kernel: ceph_kill_sb+0x36/0x90 [ceph] kernel: deactivate_locked_super+0x29/0x60 kernel: cleanup_mnt+0xb8/0x140 kernel: task_work_run+0x6d/0xb0 kernel: exit_to_user_mode_prepare+0x226/0x230 kernel: syscall_exit_to_user_mode+0x25/0x60 kernel: do_syscall_64+0x40/0x80 kernel: entry_SYSCALL_64_after_hwframe+0x44/0xae Cc: stable(a)vger.kernel.org https://tracker.ceph.com/issues/55332 Signed-off-by: Xiubo Li <xiubli(a)redhat.com> --- fs/ceph/mds_client.c | 5 +++-- fs/ceph/snap.c | 1 + 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/fs/ceph/mds_client.c b/fs/ceph/mds_client.c index 46a13ea9d284..e8c87dea0551 100644 --- a/fs/ceph/mds_client.c +++ b/fs/ceph/mds_client.c @@ -2001,10 +2001,11 @@ static void dump_cap_flushes(struct ceph_mds_client *mdsc, u64 want_tid) list_for_each_entry(cf, &mdsc->cap_flush_list, g_list) { if (cf->tid > want_tid) break; - pr_info("%llx:%llx %s %llu %llu %d\n", + pr_info("%llx:%llx %s %llu %llu %d%s\n", ceph_vinop(&cf->ci->vfs_inode), ceph_cap_string(cf->caps), cf->tid, - cf->ci->i_last_cap_flush_ack, cf->wake); + cf->ci->i_last_cap_flush_ack, cf->wake, + cf->is_capsnap ? " is_capsnap" : ""); } spin_unlock(&mdsc->cap_dirty_lock); } diff --git a/fs/ceph/snap.c b/fs/ceph/snap.c index 322ee5add942..db1433ce666e 100644 --- a/fs/ceph/snap.c +++ b/fs/ceph/snap.c @@ -585,6 +585,7 @@ static void ceph_queue_cap_snap(struct ceph_inode_info *ci, ceph_cap_string(dirty), capsnap->need_flush ? "" : "no_flush"); ihold(inode); + capsnap->cap_flush.ci = ci; capsnap->follows = old_snapc->seq; capsnap->issued = __ceph_caps_issued(ci, NULL); capsnap->dirty = dirty; -- 2.36.0.rc1

3 years, 7 months

2
4
0 0

[PATCH 2/2] ext4: Avoid cycles in directory h-tree

by Jan Kara

A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its hands while doing a node split and consequently accessing unallocated memory. Fix the problem by verifying traversed block numbers are unique. CC: stable(a)vger.kernel.org Signed-off-by: Jan Kara <jack(a)suse.cz> --- fs/ext4/namei.c | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/fs/ext4/namei.c b/fs/ext4/namei.c index 2a55f23e4524..2ca99f1569c0 100644 --- a/fs/ext4/namei.c +++ b/fs/ext4/namei.c @@ -777,12 +777,14 @@ static struct dx_frame * dx_probe(struct ext4_filename *fname, struct inode *dir, struct dx_hash_info *hinfo, struct dx_frame *frame_in) { - unsigned count, indirect; + unsigned count, indirect, level, i; struct dx_entry *at, *entries, *p, *q, *m; struct dx_root *root; struct dx_frame *frame = frame_in; struct dx_frame *ret_err = ERR_PTR(ERR_BAD_DX_DIR); u32 hash; + ext4_lblk_t block; + ext4_lblk_t blocks[EXT4_HTREE_LEVEL]; memset(frame_in, 0, EXT4_HTREE_LEVEL * sizeof(frame_in[0])); frame->bh = ext4_read_dirblock(dir, 0, INDEX); @@ -854,6 +856,8 @@ dx_probe(struct ext4_filename *fname, struct inode *dir, } dxtrace(printk("Look up %x", hash)); + level = 0; + blocks[0] = 0; while (1) { count = dx_get_count(entries); if (!count || count > dx_get_limit(entries)) { @@ -882,15 +886,27 @@ dx_probe(struct ext4_filename *fname, struct inode *dir, dx_get_block(at))); frame->entries = entries; frame->at = at; - if (!indirect--) + + block = dx_get_block(at); + for (i = 0; i <= level; i++) { + if (blocks[i] == block) { + ext4_warning_inode(dir, + "dx entry: tree cycle block %u points back to block %u", + blocks[level], block); + goto fail; + } + } + if (++level > indirect) return frame; + blocks[level] = block; frame++; - frame->bh = ext4_read_dirblock(dir, dx_get_block(at), INDEX); + frame->bh = ext4_read_dirblock(dir, block, INDEX); if (IS_ERR(frame->bh)) { ret_err = (struct dx_frame *) frame->bh; frame->bh = NULL; goto fail; } + entries = ((struct dx_node *) frame->bh->b_data)->entries; if (dx_get_limit(entries) != dx_node_limit(dir)) { -- 2.35.3

3 years, 7 months

1
0
0 0

[PATCH 2/2] ext4: Avoid cycles in directory h-tree

by Jan Kara

A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its hands while doing a node split and consequently accessing unallocated memory. Fix the problem by verifying traversed block numbers are unique. CC: stable(a)vger.kernel.org Signed-off-by: Jan Kara <jack(a)suse.cz> --- fs/ext4/namei.c | 24 ++++++++++++++++++++---- 1 file changed, 20 insertions(+), 4 deletions(-) diff --git a/fs/ext4/namei.c b/fs/ext4/namei.c index ca6ee9940599..06441ad6104d 100644 --- a/fs/ext4/namei.c +++ b/fs/ext4/namei.c @@ -777,12 +777,14 @@ static struct dx_frame * dx_probe(struct ext4_filename *fname, struct inode *dir, struct dx_hash_info *hinfo, struct dx_frame *frame_in) { - unsigned count, indirect; + unsigned count, indirect, level, i; struct dx_entry *at, *entries, *p, *q, *m; struct dx_root *root; struct dx_frame *frame = frame_in; struct dx_frame *ret_err = ERR_PTR(ERR_BAD_DX_DIR); u32 hash; + ext4_lblk_t block; + ext4_lblk_t blocks[EXT4_HTREE_LEVEL]; memset(frame_in, 0, EXT4_HTREE_LEVEL * sizeof(frame_in[0])); frame->bh = ext4_read_dirblock(dir, 0, INDEX); @@ -854,6 +856,8 @@ dx_probe(struct ext4_filename *fname, struct inode *dir, } dxtrace(printk("Look up %x", hash)); + level = 0; + blocks[0] = 0; while (1) { count = dx_get_count(entries); if (!count || count > dx_get_limit(entries)) { @@ -882,15 +886,27 @@ dx_probe(struct ext4_filename *fname, struct inode *dir, dx_get_block(at))); frame->entries = entries; frame->at = at; - if (!indirect--) + + block = dx_get_block(at); + for (i = 0; i <= level; i++) { + if (blocks[i] == block) { + ext4_warning_inode(dir, + "dx entry: tree cycle block %u points back to block %u", + blocks[level], block); + goto fail; + } + } + blocks[++level] = block; + if (level > indirect) return frame; frame++; - frame->bh = ext4_read_dirblock(dir, dx_get_block(at), INDEX); + frame->bh = ext4_read_dirblock(dir, block, INDEX); if (IS_ERR(frame->bh)) { ret_err = (struct dx_frame *) frame->bh; frame->bh = NULL; goto fail; } + entries = ((struct dx_node *) frame->bh->b_data)->entries; if (dx_get_limit(entries) != dx_node_limit(dir)) { @@ -1278,7 +1294,7 @@ static int dx_make_map(struct inode *dir, struct buffer_head *bh, count++; cond_resched(); } - de = ext4_next_entry(de, blocksize); + de = ext4_next_entry(de, dir->i_sb->s_blocksize); } return count; } -- 2.34.1

3 years, 7 months

2
2
0 0

[PATCH 1/2] ext4: Verify dir block before splitting it

by Jan Kara

Before splitting a directory block verify its directory entries are sane so that the splitting code does not access memory it should not. CC: stable(a)vger.kernel.org Signed-off-by: Jan Kara <jack(a)suse.cz> --- fs/ext4/namei.c | 30 ++++++++++++++++++++---------- 1 file changed, 20 insertions(+), 10 deletions(-) diff --git a/fs/ext4/namei.c b/fs/ext4/namei.c index 767b4bfe39c3..ca6ee9940599 100644 --- a/fs/ext4/namei.c +++ b/fs/ext4/namei.c @@ -277,9 +277,9 @@ static struct dx_frame *dx_probe(struct ext4_filename *fname, struct dx_hash_info *hinfo, struct dx_frame *frame); static void dx_release(struct dx_frame *frames); -static int dx_make_map(struct inode *dir, struct ext4_dir_entry_2 *de, - unsigned blocksize, struct dx_hash_info *hinfo, - struct dx_map_entry map[]); +static int dx_make_map(struct inode *dir, struct buffer_head *bh, + struct dx_hash_info *hinfo, + struct dx_map_entry *map_tail); static void dx_sort_map(struct dx_map_entry *map, unsigned count); static struct ext4_dir_entry_2 *dx_move_dirents(struct inode *dir, char *from, char *to, struct dx_map_entry *offsets, @@ -1249,15 +1249,23 @@ static inline int search_dirblock(struct buffer_head *bh, * Create map of hash values, offsets, and sizes, stored at end of block. * Returns number of entries mapped. */ -static int dx_make_map(struct inode *dir, struct ext4_dir_entry_2 *de, - unsigned blocksize, struct dx_hash_info *hinfo, +static int dx_make_map(struct inode *dir, struct buffer_head *bh, + struct dx_hash_info *hinfo, struct dx_map_entry *map_tail) { int count = 0; - char *base = (char *) de; + struct ext4_dir_entry_2 *de = (struct ext4_dir_entry_2 *)bh->b_data; + unsigned int buflen = bh->b_size; + char *base = bh->b_data; struct dx_hash_info h = *hinfo; - while ((char *) de < base + blocksize) { + if (ext4_has_metadata_csum(dir->i_sb)) + buflen -= sizeof(struct ext4_dir_entry_tail); + + while ((char *) de < base + buflen) { + if (ext4_check_dir_entry(dir, NULL, de, bh, base, buflen, + ((char *)de) - base)) + return -EFSCORRUPTED; if (de->name_len && de->inode) { if (ext4_hash_in_dirent(dir)) h.hash = EXT4_DIRENT_HASH(de); @@ -1270,7 +1278,6 @@ static int dx_make_map(struct inode *dir, struct ext4_dir_entry_2 *de, count++; cond_resched(); } - /* XXX: do we need to check rec_len == 0 case? -Chris */ de = ext4_next_entry(de, blocksize); } return count; @@ -1943,8 +1950,11 @@ static struct ext4_dir_entry_2 *do_split(handle_t *handle, struct inode *dir, /* create map in the end of data2 block */ map = (struct dx_map_entry *) (data2 + blocksize); - count = dx_make_map(dir, (struct ext4_dir_entry_2 *) data1, - blocksize, hinfo, map); + count = dx_make_map(dir, *bh, hinfo, map); + if (count < 0) { + err = count; + goto journal_error; + } map -= count; dx_sort_map(map, count); /* Ensure that neither split block is over half full */ -- 2.34.1

3 years, 7 months

2
2
0 0

Linux 5.17.9

by Greg Kroah-Hartman

I'm announcing the release of the 5.17.9 kernel. All users of the 5.17 kernel series must upgrade. The updated 5.17.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.17.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/include/asm/io.h | 3 arch/arm/mm/ioremap.c | 8 ++ arch/arm64/include/asm/io.h | 4 + arch/arm64/kernel/Makefile | 4 + arch/arm64/kernel/vdso/Makefile | 3 arch/arm64/kernel/vdso32/Makefile | 3 arch/arm64/mm/ioremap.c | 8 ++ arch/powerpc/kvm/book3s_32_sr.S | 26 +++++- arch/s390/Makefile | 10 ++ arch/x86/mm/init_64.c | 5 - drivers/base/firmware_loader/main.c | 17 ++++ drivers/dma-buf/dma-buf.c | 8 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 8 -- drivers/gpu/drm/nouveau/nouveau_backlight.c | 9 +- drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c | 2 drivers/gpu/drm/vc4/vc4_hdmi.c | 1 drivers/gpu/drm/vmwgfx/vmwgfx_cmd.c | 13 ++- drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 8 ++ drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 28 +++++-- drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 26 ++++-- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 8 +- drivers/hwmon/Kconfig | 2 drivers/hwmon/asus_wmi_sensors.c | 2 drivers/hwmon/f71882fg.c | 5 - drivers/hwmon/tmp401.c | 11 ++ drivers/infiniband/hw/irdma/cm.c | 7 - drivers/interconnect/core.c | 8 +- drivers/iommu/arm/arm-smmu/arm-smmu-nvidia.c | 30 ++++++++ drivers/net/dsa/bcm_sf2.c | 3 drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 4 - drivers/net/ethernet/broadcom/genet/bcmgenet.c | 4 + drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 10 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 27 +++---- drivers/net/ethernet/intel/ice/ice.h | 1 drivers/net/ethernet/intel/ice/ice_idc.c | 25 ++++-- drivers/net/ethernet/intel/ice/ice_main.c | 2 drivers/net/ethernet/intel/ice/ice_ptp.c | 10 ++ drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 68 +++++++++++++----- drivers/net/ethernet/mediatek/mtk_ppe.c | 2 drivers/net/ethernet/mellanox/mlxsw/spectrum_ipip.c | 11 -- drivers/net/ethernet/mscc/ocelot_flower.c | 5 - drivers/net/ethernet/mscc/ocelot_vcap.c | 9 ++ drivers/net/ethernet/pensando/ionic/ionic_bus_pci.c | 3 drivers/net/ethernet/sfc/ef10.c | 5 + drivers/net/ethernet/sfc/efx_channels.c | 7 + drivers/net/ethernet/sfc/ptp.c | 14 +++ drivers/net/ethernet/sfc/ptp.h | 1 drivers/net/ethernet/xilinx/xilinx_emaclite.c | 15 ---- drivers/net/phy/micrel.c | 7 + drivers/net/phy/phy.c | 7 + drivers/net/phy/sfp.c | 12 ++- drivers/net/wireless/ath/ath11k/core.c | 1 drivers/net/wireless/ath/ath11k/core.h | 13 ++- drivers/net/wireless/ath/ath11k/mac.c | 71 +++++++------------ drivers/net/wireless/ath/ath11k/mac.h | 2 drivers/net/wireless/ath/ath11k/reg.c | 43 +++++++---- drivers/net/wireless/ath/ath11k/reg.h | 2 drivers/net/wireless/ath/ath11k/wmi.c | 16 +++- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 2 drivers/net/wireless/mac80211_hwsim.c | 3 drivers/platform/surface/aggregator/core.c | 2 drivers/s390/net/ctcm_mpc.c | 6 - drivers/s390/net/ctcm_sysfs.c | 5 - drivers/s390/net/lcs.c | 7 + drivers/slimbus/qcom-ctrl.c | 4 - drivers/tty/n_gsm.c | 20 +++-- drivers/tty/serial/8250/8250_mtk.c | 22 +++-- drivers/tty/serial/digicolor-usart.c | 5 - drivers/tty/serial/fsl_lpuart.c | 18 ++-- drivers/usb/class/cdc-wdm.c | 1 drivers/usb/gadget/function/f_uvc.c | 25 ++++++ drivers/usb/gadget/function/uvc.h | 2 drivers/usb/gadget/function/uvc_v4l2.c | 3 drivers/usb/host/xhci-mtk-sch.c | 16 +--- drivers/usb/serial/option.c | 4 + drivers/usb/serial/pl2303.c | 1 drivers/usb/serial/pl2303.h | 1 drivers/usb/serial/qcserial.c | 2 drivers/usb/typec/tcpm/tcpci.c | 2 drivers/usb/typec/tcpm/tcpci_mt6360.c | 26 ++++++ drivers/video/fbdev/efifb.c | 9 ++ drivers/video/fbdev/simplefb.c | 8 +- drivers/video/fbdev/vesafb.c | 8 +- fs/ceph/file.c | 16 +++- fs/fs-writeback.c | 4 + fs/gfs2/bmap.c | 11 +- fs/io_uring.c | 7 + fs/nfs/fs_context.c | 2 fs/notify/fanotify/fanotify_user.c | 13 +++ fs/proc/fd.c | 23 +++++- include/linux/bio.h | 5 + include/linux/netdev_features.h | 4 - include/linux/sunrpc/clnt.h | 1 include/net/inet_hashtables.h | 2 include/net/secure_seq.h | 4 - include/net/tc_act/tc_pedit.h | 1 include/uapi/linux/virtio_ids.h | 14 +-- kernel/cgroup/cpuset.c | 7 + kernel/irq/irqdesc.c | 1 lib/dim/net_dim.c | 44 +++++------ mm/huge_memory.c | 7 + mm/kfence/core.c | 11 ++ mm/memory-failure.c | 15 ---- mm/mremap.c | 2 net/batman-adv/fragmentation.c | 11 ++ net/core/secure_seq.c | 16 ++-- net/dsa/port.c | 1 net/ipv4/inet_hashtables.c | 42 +++++++---- net/ipv4/ping.c | 12 ++- net/ipv4/route.c | 1 net/ipv6/inet6_hashtables.c | 4 - net/mac80211/mlme.c | 6 + net/netlink/af_netlink.c | 1 net/rds/tcp.c | 12 ++- net/rds/tcp.h | 2 net/rds/tcp_connect.c | 5 + net/rds/tcp_listen.c | 5 + net/sched/act_pedit.c | 26 +++++- net/smc/smc_rx.c | 4 - net/sunrpc/auth_gss/gss_rpc_upcall.c | 1 net/sunrpc/clnt.c | 33 ++++++++ net/tls/tls_device.c | 3 sound/soc/codecs/max98090.c | 5 + sound/soc/soc-ops.c | 18 ++++ sound/soc/sof/sof-pci-dev.c | 5 + tools/perf/tests/shell/test_arm_coresight.sh | 1 tools/testing/selftests/vm/Makefile | 10 +- 129 files changed, 912 insertions(+), 379 deletions(-) Adrian-Ken Rueegsegger (1): x86/mm: Fix marking of unused sub-pmd ranges Ajit Kumar Pandey (1): ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback Alex Deucher (1): Revert "drm/amd/pm: keep the BACO feature enabled for suspend" Alexander Graf (1): KVM: PPC: Book3S PR: Enable MSR_DR for switch_mmu_context() Alexandra Winter (3): s390/ctcm: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/lcs: fix variable dereferenced before check Amir Goldstein (1): fanotify: do not allow setting dirent events in mask of non-dir Amit Cohen (1): mlxsw: Avoid warning during ip6gre device removal Anatolii Gerasymenko (1): ice: clear stale Tx queue settings before configuring Andreas Gruenbacher (1): gfs2: Fix filesystem block deallocation for short writes AngeloGioacchino Del Regno (2): serial: 8250_mtk: Fix UART_EFR register address serial: 8250_mtk: Fix register address for XON/XOFF character Ashish Mhetre (1): iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu Camel Guo (1): hwmon: (tmp401) Add OF device ID table Charan Teja Reddy (1): dma-buf: call dma_buf_stats_setup after dmabuf is in valid list ChiYuan Huang (1): usb: typec: tcpci_mt6360: Update for BMC PHY setting Christophe JAILLET (1): drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() Chunfeng Yun (1): usb: xhci-mtk: fix fs isoc's transfer error Dan Aloni (1): nfs: fix broken handling of the softreval mount option Dan Vacura (1): usb: gadget: uvc: allow for application to cleanly shutdown Daniel Starke (3): tty: n_gsm: fix buffer over-read in gsm_dlci_data() tty: n_gsm: fix mux activation issues in gsm_config() tty: n_gsm: fix invalid gsmtty_write_room() result Denis Pauk (1): hwmon: (asus_wmi_sensors) Fix CROSSHAIR VI HERO name Duoming Zhou (1): RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() Eric Dumazet (2): netlink: do not reset transport header in netlink_recvmsg() tcp: resalt the secret every 10 seconds Ethan Yang (1): USB: serial: qcserial: add support for Sierra Wireless EM7590 Fabio Estevam (2): net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 net: phy: micrel: Pass .probe for KS8737 Florian Fainelli (2): net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() Francesco Dolcini (1): net: phy: Fix race condition on link status change Greg Kroah-Hartman (1): Linux 5.17.9 Guangguan Wang (1): net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Guenter Roeck (1): iwlwifi: iwl-dbg: Use del_timer_sync() before freeing Hui Tang (1): drm/vc4: hdmi: Fix build error for implicit function declaration Hyeonggon Yoo (1): mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool Indan Zupancic (1): fsl_lpuart: Don't enable interrupts too early Ivan Vecera (1): ice: Fix race during aux device (un)plugging Javier Martinez Canillas (4): fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove fbdev: efifb: Fix a use-after-free due early fb_info cleanup Jeff Layton (1): ceph: fix setting of xattrs on async created inodes Jens Axboe (1): io_uring: assign non-fixed early for async work Jeremy Linton (1): perf tests: Fix coresight `perf test` failure. Jesse Brandeburg (1): dim: initialize all struct fields Ji-Ze Hong (Peter Hong) (1): hwmon: (f71882fg) Fix negative temperature Jing Xia (1): writeback: Avoid skipping inode writeback Joel Savitz (1): selftests: vm: Makefile: rename TARGETS to VMTARGETS Joey Gouly (1): arm64: vdso: fix makefile dependency on vdso.so Johannes Berg (1): mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Kalesh Singh (1): procfs: prevent unprivileged processes accessing fdinfo dir Kees Cook (1): net: chelsio: cxgb4: Avoid potential negative array offset Lokesh Dhoundiyal (1): ipv4: drop dst in multicast routing path Lukas Wunner (1): genirq: Remove WARN_ON_ONCE() in generic_handle_domain_irq() Manikanta Pubbisetty (1): mac80211: Reset MBSSID parameters upon connection Manuel Ullmann (1): net: atlantic: always deep reset on pm op, fixing up my null deref regression Mark Brown (3): ASoC: max98090: Reject invalid values in custom control put() ASoC: max98090: Generate notifications on changes for custom control ASoC: ops: Validate input values in snd_soc_put_volsw_range() Matthew Hagan (1): net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT Matthew Wilcox (Oracle) (1): block: Do not call folio_next() on an unreferenced folio Maxim Mikityanskiy (1): tls: Fix context leak on tls_device_down Maximilian Luz (1): platform/surface: aggregator: Fix initialization order when compiling as builtin module Miaoqian Lin (1): slimbus: qcom: Fix IRQ check in qcom_slim_probe Michal Michalik (1): ice: fix PTP stale Tx timestamps cleanup Mike Rapoport (1): arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map Naoya Horiguchi (1): mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() Nicolas Dichtel (1): ping: fix address binding wrt vrf Niels Dossche (1): mm: mremap: fix sign for EFAULT error return value Paolo Abeni (1): net/sched: act_pedit: really ensure the skb is writable Randy Dunlap (1): hwmon: (ltq-cputemp) restrict it to SOC_XWAY Robin Murphy (1): drm/nouveau/tegra: Stop using iommu_present() Scott Chen (1): USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov (1): usb: cdc-wdm: fix reading stuck on device close Shravya Kumbham (1): net: emaclite: Don't advertise 1000BASE-T and do auto negotiation Shunsuke Mie (1): virtio: fix virtio transitional ids Stephen Boyd (1): interconnect: Restore sync state by ignoring ipa-virt in provider count Sven Eckelmann (1): batman-adv: Don't skb_split skbuffs with frag_list Sven Schnelle (1): s390: disable -Warray-bounds Sven Schwermer (2): USB: serial: option: add Fibocom L610 modem USB: serial: option: add Fibocom MA510 modem Taehee Yoo (2): net: sfc: fix memory leak due to ptp channel net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Tariq Toukan (1): net: Fix features skip in for_each_netdev_feature() Tetsuo Handa (1): net: rds: use maybe_get_net() when acquiring refcount on TCP sockets Thiébaud Weksteen (1): firmware_loader: use kernel credentials when reading firmware Trond Myklebust (1): SUNRPC: Ensure that the gssproxy client can start in a connected state Uwe Kleine-König (1): usb: typec: tcpci: Don't skip cleanup in .remove() on error Vladimir Oltean (5): net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters net: dsa: flush switchdev workqueue on bridge join error path Waiman Long (1): cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Wan Jiabing (1): net: phy: micrel: Fix incorrect variable type in micrel Wen Gong (1): ath11k: reduce the wait time of 11d scan and hw scan while add interface Willy Tarreau (6): secure_seq: use the 64 bits of the siphash for port offset calculation tcp: use different parts of the port_offset for index and offset tcp: add small random increments to the source port tcp: dynamically allocate the perturb table used by source ports tcp: increase source port perturb table to 2^16 tcp: drop the hash_32() part from the index calculation Xiaomeng Tong (1): i40e: i40e_main: fix a missing check on list iterator Xu Yu (2): Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" mm/huge_memory: do not overkill when splitting huge_zero_page Yang Yingliang (3): ionic: fix missing pci_release_regions() on error in ionic_probe() net: ethernet: mediatek: ppe: fix wrong size passed to memset() tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Zack Rusin (3): drm/vmwgfx: Fix fencing on SVGAv3 drm/vmwgfx: Disable command buffers on svga3 without gbobjects drm/vmwgfx: Initialize drm_mode_fb_cmd2

3 years, 7 months

1
1
0 0

Linux 5.10.117

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.117 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/include/asm/io.h | 3 + arch/arm/mm/ioremap.c | 8 +++ arch/arm64/include/asm/io.h | 4 + arch/arm64/mm/ioremap.c | 9 +++ arch/s390/Makefile | 10 ++++ drivers/base/firmware_loader/main.c | 17 +++++++ drivers/gpu/drm/nouveau/nouveau_backlight.c | 9 ++- drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c | 2 drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 drivers/hwmon/Kconfig | 2 drivers/hwmon/f71882fg.c | 5 +- drivers/hwmon/tmp401.c | 11 ++++ drivers/net/dsa/bcm_sf2.c | 3 + drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 4 - drivers/net/ethernet/broadcom/genet/bcmgenet.c | 4 + drivers/net/ethernet/intel/i40e/i40e_main.c | 27 +++++------ drivers/net/ethernet/mscc/ocelot_flower.c | 5 +- drivers/net/ethernet/mscc/ocelot_vcap.c | 9 +++ drivers/net/ethernet/pensando/ionic/ionic_bus_pci.c | 3 - drivers/net/ethernet/sfc/ef10.c | 5 ++ drivers/net/ethernet/sfc/efx_channels.c | 21 ++++---- drivers/net/ethernet/sfc/ptp.c | 14 +++++ drivers/net/ethernet/sfc/ptp.h | 1 drivers/net/ethernet/xilinx/xilinx_emaclite.c | 15 ------ drivers/net/phy/phy.c | 45 ++++++++++++++++--- drivers/net/phy/sfp.c | 12 ++++- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 2 drivers/net/wireless/mac80211_hwsim.c | 3 + drivers/s390/net/ctcm_mpc.c | 6 -- drivers/s390/net/ctcm_sysfs.c | 5 +- drivers/s390/net/lcs.c | 7 +- drivers/slimbus/qcom-ctrl.c | 4 - drivers/tty/n_gsm.c | 12 +++-- drivers/tty/serial/8250/8250_mtk.c | 22 +++++---- drivers/tty/serial/digicolor-usart.c | 5 -- drivers/usb/class/cdc-wdm.c | 1 drivers/usb/gadget/function/f_uvc.c | 32 ++++++++++++- drivers/usb/gadget/function/uvc.h | 2 drivers/usb/gadget/function/uvc_v4l2.c | 3 - drivers/usb/serial/option.c | 4 + drivers/usb/serial/pl2303.c | 1 drivers/usb/serial/pl2303.h | 1 drivers/usb/serial/qcserial.c | 2 drivers/usb/typec/tcpm/tcpci.c | 2 drivers/usb/typec/tcpm/tcpci_mt6360.c | 26 ++++++++++ fs/ceph/file.c | 16 +++++- fs/file_table.c | 1 fs/gfs2/bmap.c | 11 ++-- fs/io_uring.c | 2 fs/nfs/fs_context.c | 2 include/linux/netdev_features.h | 4 - include/linux/sunrpc/xprtsock.h | 1 include/net/tc_act/tc_pedit.h | 1 include/trace/events/sunrpc.h | 1 kernel/cgroup/cpuset.c | 7 ++ lib/dim/net_dim.c | 44 +++++++++--------- net/batman-adv/fragmentation.c | 11 ++++ net/core/secure_seq.c | 12 +++-- net/ipv4/ping.c | 15 +++++- net/ipv4/route.c | 1 net/mac80211/mlme.c | 6 ++ net/netlink/af_netlink.c | 1 net/sched/act_pedit.c | 26 +++++++++- net/smc/smc_rx.c | 4 - net/sunrpc/rpc_pipe.c | 1 net/sunrpc/xprt.c | 36 +++++++-------- net/sunrpc/xprtsock.c | 37 ++++++++++----- net/tls/tls_device.c | 3 + sound/soc/codecs/max98090.c | 5 +- sound/soc/soc-ops.c | 18 +++++++ tools/testing/selftests/vm/Makefile | 10 ++-- 72 files changed, 485 insertions(+), 183 deletions(-) Alexandra Winter (3): s390/ctcm: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/lcs: fix variable dereferenced before check Andreas Gruenbacher (1): gfs2: Fix filesystem block deallocation for short writes AngeloGioacchino Del Regno (2): serial: 8250_mtk: Fix UART_EFR register address serial: 8250_mtk: Fix register address for XON/XOFF character Camel Guo (1): hwmon: (tmp401) Add OF device ID table ChiYuan Huang (1): usb: typec: tcpci_mt6360: Update for BMC PHY setting Christophe JAILLET (1): drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() Dan Aloni (1): nfs: fix broken handling of the softreval mount option Dan Vacura (1): usb: gadget: uvc: allow for application to cleanly shutdown Daniel Starke (1): tty: n_gsm: fix mux activation issues in gsm_config() Eric Dumazet (2): netlink: do not reset transport header in netlink_recvmsg() tcp: resalt the secret every 10 seconds Ethan Yang (1): USB: serial: qcserial: add support for Sierra Wireless EM7590 Florian Fainelli (2): net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() Francesco Dolcini (1): net: phy: Fix race condition on link status change Greg Kroah-Hartman (1): Linux 5.10.117 Guangguan Wang (1): net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Guenter Roeck (1): iwlwifi: iwl-dbg: Use del_timer_sync() before freeing Gustavo A. R. Silva (1): SUNRPC: Fix fall-through warnings for Clang Jeff Layton (1): ceph: fix setting of xattrs on async created inodes Jens Axboe (1): io_uring: always use original task when preparing req identity Jesse Brandeburg (1): dim: initialize all struct fields Ji-Ze Hong (Peter Hong) (1): hwmon: (f71882fg) Fix negative temperature Jiapeng Chong (1): sfc: Use swap() instead of open coding it Joel Savitz (1): selftests: vm: Makefile: rename TARGETS to VMTARGETS Johannes Berg (1): mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Lokesh Dhoundiyal (1): ipv4: drop dst in multicast routing path Manikanta Pubbisetty (1): mac80211: Reset MBSSID parameters upon connection Manuel Ullmann (1): net: atlantic: always deep reset on pm op, fixing up my null deref regression Mark Brown (3): ASoC: max98090: Reject invalid values in custom control put() ASoC: max98090: Generate notifications on changes for custom control ASoC: ops: Validate input values in snd_soc_put_volsw_range() Matthew Hagan (1): net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT Maxim Mikityanskiy (1): tls: Fix context leak on tls_device_down Miaoqian Lin (1): slimbus: qcom: Fix IRQ check in qcom_slim_probe Michael Tretter (1): usb: gadget: uvc: rename function to be more consistent Mike Rapoport (1): arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map Nicolas Dichtel (1): ping: fix address binding wrt vrf Paolo Abeni (1): net/sched: act_pedit: really ensure the skb is writable Randy Dunlap (1): hwmon: (ltq-cputemp) restrict it to SOC_XWAY Robin Murphy (1): drm/nouveau/tegra: Stop using iommu_present() Scott Chen (1): USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov (1): usb: cdc-wdm: fix reading stuck on device close Shravya Kumbham (1): net: emaclite: Don't advertise 1000BASE-T and do auto negotiation Sven Eckelmann (1): batman-adv: Don't skb_split skbuffs with frag_list Sven Schnelle (1): s390: disable -Warray-bounds Sven Schwermer (2): USB: serial: option: add Fibocom L610 modem USB: serial: option: add Fibocom MA510 modem Taehee Yoo (2): net: sfc: fix memory leak due to ptp channel net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Tariq Toukan (1): net: Fix features skip in for_each_netdev_feature() Thiébaud Weksteen (1): firmware_loader: use kernel credentials when reading firmware Trond Myklebust (4): SUNRPC: Clean up scheduling of autoclose SUNRPC: Prevent immediate close+reconnect SUNRPC: Don't call connect() more than once on a TCP socket SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() Uwe Kleine-König (1): usb: typec: tcpci: Don't skip cleanup in .remove() on error Vladimir Oltean (4): net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters Waiman Long (1): cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Xiaomeng Tong (1): i40e: i40e_main: fix a missing check on list iterator Yang Yingliang (2): ionic: fix missing pci_release_regions() on error in ionic_probe() tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Zack Rusin (1): drm/vmwgfx: Initialize drm_mode_fb_cmd2

3 years, 7 months

1
1
0 0

Linux 5.15.41

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.41 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/include/asm/io.h | 3 + arch/arm/mm/ioremap.c | 8 +++ arch/arm64/include/asm/io.h | 4 + arch/arm64/kernel/Makefile | 4 + arch/arm64/kernel/vdso/Makefile | 3 - arch/arm64/kernel/vdso32/Makefile | 3 - arch/arm64/mm/ioremap.c | 8 +++ arch/powerpc/kvm/book3s_32_sr.S | 26 +++++++++-- arch/s390/Makefile | 10 ++++ arch/x86/mm/init_64.c | 5 +- drivers/base/firmware_loader/main.c | 17 +++++++ drivers/dma-buf/dma-buf.c | 8 +-- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 8 --- drivers/gpu/drm/nouveau/nouveau_backlight.c | 9 ++- drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c | 2 drivers/gpu/drm/vc4/vc4_hdmi.c | 1 drivers/gpu/drm/vmwgfx/vmwgfx_cmd.c | 13 +++-- drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 8 +++ drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 28 +++++++++--- drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 26 +++++++---- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 8 ++- drivers/hwmon/Kconfig | 2 drivers/hwmon/f71882fg.c | 5 +- drivers/hwmon/tmp401.c | 11 ++++ drivers/infiniband/hw/irdma/cm.c | 7 --- drivers/interconnect/core.c | 8 +++ drivers/iommu/arm/arm-smmu/arm-smmu-nvidia.c | 30 ++++++++++++ drivers/net/dsa/bcm_sf2.c | 3 + drivers/net/ethernet/aquantia/atlantic/aq_pci_func.c | 4 - drivers/net/ethernet/broadcom/genet/bcmgenet.c | 4 + drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 10 ++-- drivers/net/ethernet/intel/i40e/i40e_main.c | 27 ++++++----- drivers/net/ethernet/intel/ice/ice.h | 1 drivers/net/ethernet/intel/ice/ice_idc.c | 25 +++++++--- drivers/net/ethernet/intel/ice/ice_main.c | 2 drivers/net/ethernet/intel/ice/ice_ptp.c | 10 +++- drivers/net/ethernet/mediatek/mtk_ppe.c | 2 drivers/net/ethernet/mscc/ocelot_flower.c | 5 +- drivers/net/ethernet/mscc/ocelot_vcap.c | 9 +++ drivers/net/ethernet/pensando/ionic/ionic_bus_pci.c | 3 - drivers/net/ethernet/sfc/ef10.c | 5 ++ drivers/net/ethernet/sfc/efx_channels.c | 21 ++++----- drivers/net/ethernet/sfc/ptp.c | 14 +++++- drivers/net/ethernet/sfc/ptp.h | 1 drivers/net/ethernet/xilinx/xilinx_emaclite.c | 15 ------ drivers/net/phy/micrel.c | 5 +- drivers/net/phy/phy.c | 7 ++- drivers/net/phy/sfp.c | 12 ++++- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 2 drivers/net/wireless/mac80211_hwsim.c | 3 + drivers/platform/surface/aggregator/core.c | 2 drivers/s390/net/ctcm_mpc.c | 6 -- drivers/s390/net/ctcm_sysfs.c | 5 +- drivers/s390/net/lcs.c | 7 +-- drivers/slimbus/qcom-ctrl.c | 4 - drivers/tty/n_gsm.c | 13 +++-- drivers/tty/serial/8250/8250_mtk.c | 22 +++++---- drivers/tty/serial/digicolor-usart.c | 5 -- drivers/tty/serial/fsl_lpuart.c | 18 +++---- drivers/usb/class/cdc-wdm.c | 1 drivers/usb/gadget/function/f_uvc.c | 32 ++++++++++++- drivers/usb/gadget/function/uvc.h | 2 drivers/usb/gadget/function/uvc_v4l2.c | 3 - drivers/usb/host/xhci-mtk-sch.c | 16 +++--- drivers/usb/serial/option.c | 4 + drivers/usb/serial/pl2303.c | 1 drivers/usb/serial/pl2303.h | 1 drivers/usb/serial/qcserial.c | 2 drivers/usb/typec/tcpm/tcpci.c | 2 drivers/usb/typec/tcpm/tcpci_mt6360.c | 26 +++++++++++ drivers/video/fbdev/efifb.c | 9 +++ drivers/video/fbdev/simplefb.c | 8 +++ drivers/video/fbdev/vesafb.c | 8 +++ fs/ceph/file.c | 16 +++++- fs/file_table.c | 1 fs/fs-writeback.c | 4 + fs/gfs2/bmap.c | 11 ++-- fs/nfs/fs_context.c | 2 fs/proc/fd.c | 23 +++++++++ include/linux/netdev_features.h | 4 - include/linux/sunrpc/clnt.h | 1 include/net/inet_hashtables.h | 2 include/net/secure_seq.h | 4 - include/net/tc_act/tc_pedit.h | 1 include/trace/events/sunrpc.h | 1 include/uapi/linux/virtio_ids.h | 14 +++--- kernel/cgroup/cpuset.c | 7 ++- lib/dim/net_dim.c | 44 +++++++++---------- mm/huge_memory.c | 7 ++- mm/memory-failure.c | 15 ------ net/batman-adv/fragmentation.c | 11 ++++ net/core/secure_seq.c | 16 ++++-- net/ipv4/inet_hashtables.c | 42 +++++++++++------- net/ipv4/ping.c | 15 +++++- net/ipv4/route.c | 1 net/ipv6/inet6_hashtables.c | 4 - net/mac80211/mlme.c | 6 ++ net/netlink/af_netlink.c | 1 net/sched/act_pedit.c | 26 +++++++++-- net/smc/smc_rx.c | 4 - net/sunrpc/auth_gss/gss_rpc_upcall.c | 1 net/sunrpc/clnt.c | 33 ++++++++++++++ net/sunrpc/xprt.c | 7 --- net/sunrpc/xprtsock.c | 16 +++++- net/tls/tls_device.c | 3 + sound/soc/codecs/max98090.c | 5 +- sound/soc/soc-ops.c | 18 +++++++ sound/soc/sof/sof-pci-dev.c | 5 ++ tools/testing/selftests/vm/Makefile | 10 ++-- 111 files changed, 741 insertions(+), 296 deletions(-) Adrian-Ken Rueegsegger (1): x86/mm: Fix marking of unused sub-pmd ranges Ajit Kumar Pandey (1): ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback Alex Deucher (1): Revert "drm/amd/pm: keep the BACO feature enabled for suspend" Alexander Graf (1): KVM: PPC: Book3S PR: Enable MSR_DR for switch_mmu_context() Alexandra Winter (3): s390/ctcm: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/lcs: fix variable dereferenced before check Andreas Gruenbacher (1): gfs2: Fix filesystem block deallocation for short writes AngeloGioacchino Del Regno (2): serial: 8250_mtk: Fix UART_EFR register address serial: 8250_mtk: Fix register address for XON/XOFF character Ashish Mhetre (1): iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu Camel Guo (1): hwmon: (tmp401) Add OF device ID table Charan Teja Reddy (1): dma-buf: call dma_buf_stats_setup after dmabuf is in valid list ChiYuan Huang (1): usb: typec: tcpci_mt6360: Update for BMC PHY setting Christophe JAILLET (1): drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() Chunfeng Yun (1): usb: xhci-mtk: fix fs isoc's transfer error Dan Aloni (1): nfs: fix broken handling of the softreval mount option Dan Vacura (1): usb: gadget: uvc: allow for application to cleanly shutdown Daniel Starke (2): tty: n_gsm: fix buffer over-read in gsm_dlci_data() tty: n_gsm: fix mux activation issues in gsm_config() Duoming Zhou (1): RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() Eric Dumazet (2): netlink: do not reset transport header in netlink_recvmsg() tcp: resalt the secret every 10 seconds Ethan Yang (1): USB: serial: qcserial: add support for Sierra Wireless EM7590 Fabio Estevam (2): net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 net: phy: micrel: Pass .probe for KS8737 Florian Fainelli (2): net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() Francesco Dolcini (1): net: phy: Fix race condition on link status change Greg Kroah-Hartman (1): Linux 5.15.41 Guangguan Wang (1): net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Guenter Roeck (1): iwlwifi: iwl-dbg: Use del_timer_sync() before freeing Hui Tang (1): drm/vc4: hdmi: Fix build error for implicit function declaration Indan Zupancic (1): fsl_lpuart: Don't enable interrupts too early Ivan Vecera (1): ice: Fix race during aux device (un)plugging Javier Martinez Canillas (4): fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove fbdev: efifb: Fix a use-after-free due early fb_info cleanup Jeff Layton (1): ceph: fix setting of xattrs on async created inodes Jesse Brandeburg (1): dim: initialize all struct fields Ji-Ze Hong (Peter Hong) (1): hwmon: (f71882fg) Fix negative temperature Jiapeng Chong (1): sfc: Use swap() instead of open coding it Jing Xia (1): writeback: Avoid skipping inode writeback Joel Savitz (1): selftests: vm: Makefile: rename TARGETS to VMTARGETS Joey Gouly (1): arm64: vdso: fix makefile dependency on vdso.so Johannes Berg (1): mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Kalesh Singh (1): procfs: prevent unprivileged processes accessing fdinfo dir Kees Cook (1): net: chelsio: cxgb4: Avoid potential negative array offset Lokesh Dhoundiyal (1): ipv4: drop dst in multicast routing path Manikanta Pubbisetty (1): mac80211: Reset MBSSID parameters upon connection Manuel Ullmann (1): net: atlantic: always deep reset on pm op, fixing up my null deref regression Mark Brown (3): ASoC: max98090: Reject invalid values in custom control put() ASoC: max98090: Generate notifications on changes for custom control ASoC: ops: Validate input values in snd_soc_put_volsw_range() Matthew Hagan (1): net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT Maxim Mikityanskiy (1): tls: Fix context leak on tls_device_down Maximilian Luz (1): platform/surface: aggregator: Fix initialization order when compiling as builtin module Miaoqian Lin (1): slimbus: qcom: Fix IRQ check in qcom_slim_probe Michael Tretter (1): usb: gadget: uvc: rename function to be more consistent Michal Michalik (1): ice: fix PTP stale Tx timestamps cleanup Mike Rapoport (1): arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map Naoya Horiguchi (1): mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() Nicolas Dichtel (1): ping: fix address binding wrt vrf Paolo Abeni (1): net/sched: act_pedit: really ensure the skb is writable Randy Dunlap (1): hwmon: (ltq-cputemp) restrict it to SOC_XWAY Robin Murphy (1): drm/nouveau/tegra: Stop using iommu_present() Scott Chen (1): USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov (1): usb: cdc-wdm: fix reading stuck on device close Shravya Kumbham (1): net: emaclite: Don't advertise 1000BASE-T and do auto negotiation Shunsuke Mie (1): virtio: fix virtio transitional ids Stephen Boyd (1): interconnect: Restore sync state by ignoring ipa-virt in provider count Sven Eckelmann (1): batman-adv: Don't skb_split skbuffs with frag_list Sven Schnelle (1): s390: disable -Warray-bounds Sven Schwermer (2): USB: serial: option: add Fibocom L610 modem USB: serial: option: add Fibocom MA510 modem Taehee Yoo (2): net: sfc: fix memory leak due to ptp channel net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Tariq Toukan (1): net: Fix features skip in for_each_netdev_feature() Thiébaud Weksteen (1): firmware_loader: use kernel credentials when reading firmware Trond Myklebust (2): SUNRPC: Ensure that the gssproxy client can start in a connected state SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() Uwe Kleine-König (1): usb: typec: tcpci: Don't skip cleanup in .remove() on error Vladimir Oltean (4): net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters Waiman Long (1): cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Willy Tarreau (6): secure_seq: use the 64 bits of the siphash for port offset calculation tcp: use different parts of the port_offset for index and offset tcp: add small random increments to the source port tcp: dynamically allocate the perturb table used by source ports tcp: increase source port perturb table to 2^16 tcp: drop the hash_32() part from the index calculation Xiaomeng Tong (1): i40e: i40e_main: fix a missing check on list iterator Xu Yu (2): Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" mm/huge_memory: do not overkill when splitting huge_zero_page Yang Yingliang (3): ionic: fix missing pci_release_regions() on error in ionic_probe() net: ethernet: mediatek: ppe: fix wrong size passed to memset() tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Zack Rusin (3): drm/vmwgfx: Fix fencing on SVGAv3 drm/vmwgfx: Disable command buffers on svga3 without gbobjects drm/vmwgfx: Initialize drm_mode_fb_cmd2

3 years, 7 months

1
1
0 0

[PATCH 4.9 00/19] 4.9.315-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.9.315 release. There are 19 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 18 May 2022 19:36:02 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.315-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.9.315-rc1 Yang Yingliang <yangyingliang(a)huawei.com> tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Nicolas Dichtel <nicolas.dichtel(a)6wind.com> ping: fix address binding wrt vrf Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom MA510 modem Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom L610 modem Ethan Yang <etyang(a)sierrawireless.com> USB: serial: qcserial: add support for Sierra Wireless EM7590 Scott Chen <scott(a)labau.com.tw> USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov <ryazanov.s.a(a)gmail.com> usb: cdc-wdm: fix reading stuck on device close Mark Brown <broonie(a)kernel.org> ASoC: ops: Validate input values in snd_soc_put_volsw_range() Mark Brown <broonie(a)kernel.org> ASoC: max98090: Generate notifications on changes for custom control Mark Brown <broonie(a)kernel.org> ASoC: max98090: Reject invalid values in custom control put() Ji-Ze Hong (Peter Hong) <hpeter(a)gmail.com> hwmon: (f71882fg) Fix negative temperature Taehee Yoo <ap420073(a)gmail.com> net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Alexandra Winter <wintera(a)linux.ibm.com> s390/lcs: fix variable dereferenced before check Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix potential memory leak Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix variable dereferenced before check Johannes Berg <johannes.berg(a)intel.com> mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Eric Dumazet <edumazet(a)google.com> netlink: do not reset transport header in netlink_recvmsg() Lokesh Dhoundiyal <lokesh.dhoundiyal(a)alliedtelesis.co.nz> ipv4: drop dst in multicast routing path Tariq Toukan <tariqt(a)nvidia.com> net: Fix features skip in for_each_netdev_feature() ------------- Diffstat: Makefile | 4 ++-- drivers/hwmon/f71882fg.c | 5 +++-- drivers/net/ethernet/sfc/ef10.c | 5 +++++ drivers/net/wireless/mac80211_hwsim.c | 3 +++ drivers/s390/net/ctcm_mpc.c | 6 +----- drivers/s390/net/ctcm_sysfs.c | 5 +++-- drivers/s390/net/lcs.c | 7 ++++--- drivers/tty/serial/digicolor-usart.c | 2 +- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/serial/option.c | 4 ++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 ++ include/linux/netdev_features.h | 4 ++-- net/ipv4/ping.c | 12 +++++++++++- net/ipv4/route.c | 1 + net/netlink/af_netlink.c | 1 - sound/soc/codecs/max98090.c | 5 ++++- sound/soc/soc-ops.c | 18 +++++++++++++++++- 19 files changed, 66 insertions(+), 21 deletions(-)

3 years, 7 months

7
25
0 0

[PATCH 4.14 00/25] 4.14.280-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.14.280 release. There are 25 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 18 May 2022 19:36:02 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.280-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.14.280-rc1 Yang Yingliang <yangyingliang(a)huawei.com> tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Nicolas Dichtel <nicolas.dichtel(a)6wind.com> ping: fix address binding wrt vrf Zack Rusin <zackr(a)vmware.com> drm/vmwgfx: Initialize drm_mode_fb_cmd2 Waiman Long <longman(a)redhat.com> cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom MA510 modem Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom L610 modem Ethan Yang <etyang(a)sierrawireless.com> USB: serial: qcserial: add support for Sierra Wireless EM7590 Scott Chen <scott(a)labau.com.tw> USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov <ryazanov.s.a(a)gmail.com> usb: cdc-wdm: fix reading stuck on device close Eric Dumazet <edumazet(a)google.com> tcp: resalt the secret every 10 seconds Mark Brown <broonie(a)kernel.org> ASoC: ops: Validate input values in snd_soc_put_volsw_range() Mark Brown <broonie(a)kernel.org> ASoC: max98090: Generate notifications on changes for custom control Mark Brown <broonie(a)kernel.org> ASoC: max98090: Reject invalid values in custom control put() Ji-Ze Hong (Peter Hong) <hpeter(a)gmail.com> hwmon: (f71882fg) Fix negative temperature Taehee Yoo <ap420073(a)gmail.com> net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Alexandra Winter <wintera(a)linux.ibm.com> s390/lcs: fix variable dereferenced before check Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix potential memory leak Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix variable dereferenced before check Randy Dunlap <rdunlap(a)infradead.org> hwmon: (ltq-cputemp) restrict it to SOC_XWAY Johannes Berg <johannes.berg(a)intel.com> mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Eric Dumazet <edumazet(a)google.com> netlink: do not reset transport header in netlink_recvmsg() Lokesh Dhoundiyal <lokesh.dhoundiyal(a)alliedtelesis.co.nz> ipv4: drop dst in multicast routing path Tariq Toukan <tariqt(a)nvidia.com> net: Fix features skip in for_each_netdev_feature() Sven Eckelmann <sven(a)narfation.org> batman-adv: Don't skb_split skbuffs with frag_list ------------- Diffstat: Makefile | 4 ++-- drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 +- drivers/hwmon/Kconfig | 2 +- drivers/hwmon/f71882fg.c | 5 +++-- drivers/net/ethernet/sfc/ef10.c | 5 +++++ drivers/net/wireless/mac80211_hwsim.c | 3 +++ drivers/s390/net/ctcm_mpc.c | 6 +----- drivers/s390/net/ctcm_sysfs.c | 5 +++-- drivers/s390/net/lcs.c | 7 ++++--- drivers/tty/serial/digicolor-usart.c | 2 +- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/serial/option.c | 4 ++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 ++ include/linux/netdev_features.h | 4 ++-- kernel/cgroup/cpuset.c | 7 +++++-- net/batman-adv/fragmentation.c | 11 +++++++++++ net/core/secure_seq.c | 12 +++++++++--- net/ipv4/ping.c | 12 +++++++++++- net/ipv4/route.c | 1 + net/netlink/af_netlink.c | 1 - net/smc/smc_rx.c | 4 ++-- sound/soc/codecs/max98090.c | 5 ++++- sound/soc/soc-ops.c | 18 +++++++++++++++++- 25 files changed, 95 insertions(+), 30 deletions(-)

3 years, 7 months

4
28
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror May 2022