May 2022 - Linux-stable-mirror

by Greg Kroah-Hartman

I'm announcing the release of the 4.19.244 kernel. All users of the 4.19 kernel series must upgrade. The updated 4.19.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 +- arch/mips/generic/board-ocelot_pcb123.its.S | 10 +++++----- arch/s390/Makefile | 10 ++++++++++ drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 +- drivers/hwmon/Kconfig | 2 +- drivers/hwmon/f71882fg.c | 5 +++-- drivers/hwmon/tmp401.c | 11 +++++++++++ drivers/net/ethernet/sfc/ef10.c | 5 +++++ drivers/net/wireless/mac80211_hwsim.c | 3 +++ drivers/s390/net/ctcm_mpc.c | 6 +----- drivers/s390/net/ctcm_sysfs.c | 5 +++-- drivers/s390/net/lcs.c | 7 ++++--- drivers/slimbus/qcom-ctrl.c | 4 ++-- drivers/tty/serial/digicolor-usart.c | 2 +- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/serial/option.c | 4 ++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 ++ drivers/usb/typec/tcpci.c | 2 +- fs/gfs2/bmap.c | 11 +++++------ include/linux/netdev_features.h | 4 ++-- include/net/tc_act/tc_pedit.h | 1 + kernel/cgroup/cpuset.c | 7 +++++-- net/batman-adv/fragmentation.c | 11 +++++++++++ net/core/secure_seq.c | 12 +++++++++--- net/ipv4/ping.c | 12 +++++++++++- net/ipv4/route.c | 1 + net/netlink/af_netlink.c | 1 - net/sched/act_pedit.c | 26 ++++++++++++++++++++++---- net/smc/smc_rx.c | 4 ++-- sound/soc/codecs/max98090.c | 5 ++++- sound/soc/soc-ops.c | 18 +++++++++++++++++- 33 files changed, 151 insertions(+), 47 deletions(-) Alexandra Winter (3): s390/ctcm: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/lcs: fix variable dereferenced before check Andreas Gruenbacher (1): gfs2: Fix filesystem block deallocation for short writes Camel Guo (1): hwmon: (tmp401) Add OF device ID table Eric Dumazet (2): netlink: do not reset transport header in netlink_recvmsg() tcp: resalt the secret every 10 seconds Ethan Yang (1): USB: serial: qcserial: add support for Sierra Wireless EM7590 Greg Kroah-Hartman (1): Linux 4.19.244 Guangguan Wang (1): net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Ji-Ze Hong (Peter Hong) (1): hwmon: (f71882fg) Fix negative temperature Johannes Berg (1): mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Lokesh Dhoundiyal (1): ipv4: drop dst in multicast routing path Mark Brown (3): ASoC: max98090: Reject invalid values in custom control put() ASoC: max98090: Generate notifications on changes for custom control ASoC: ops: Validate input values in snd_soc_put_volsw_range() Miaoqian Lin (1): slimbus: qcom: Fix IRQ check in qcom_slim_probe Nicolas Dichtel (1): ping: fix address binding wrt vrf Paolo Abeni (1): net/sched: act_pedit: really ensure the skb is writable Randy Dunlap (1): hwmon: (ltq-cputemp) restrict it to SOC_XWAY Scott Chen (1): USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov (1): usb: cdc-wdm: fix reading stuck on device close Sudip Mukherjee (1): MIPS: fix allmodconfig build with latest mkimage Sven Eckelmann (1): batman-adv: Don't skb_split skbuffs with frag_list Sven Schnelle (1): s390: disable -Warray-bounds Sven Schwermer (2): USB: serial: option: add Fibocom L610 modem USB: serial: option: add Fibocom MA510 modem Taehee Yoo (1): net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Tariq Toukan (1): net: Fix features skip in for_each_netdev_feature() Uwe Kleine-König (1): usb: typec: tcpci: Don't skip cleanup in .remove() on error Waiman Long (1): cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Yang Yingliang (1): tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Zack Rusin (1): drm/vmwgfx: Initialize drm_mode_fb_cmd2

2 years, 7 months

1
1
0 0

Linux 4.14.280

by Greg Kroah-Hartman

I'm announcing the release of the 4.14.280 kernel. All users of the 4.14 kernel series must upgrade. The updated 4.14.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.14.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 +- drivers/hwmon/Kconfig | 2 +- drivers/hwmon/f71882fg.c | 5 +++-- drivers/net/ethernet/sfc/ef10.c | 5 +++++ drivers/net/wireless/mac80211_hwsim.c | 3 +++ drivers/s390/net/ctcm_mpc.c | 6 +----- drivers/s390/net/ctcm_sysfs.c | 5 +++-- drivers/s390/net/lcs.c | 7 ++++--- drivers/tty/serial/digicolor-usart.c | 2 +- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/serial/option.c | 4 ++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 ++ include/linux/netdev_features.h | 4 ++-- kernel/cgroup/cpuset.c | 7 +++++-- net/batman-adv/fragmentation.c | 11 +++++++++++ net/core/secure_seq.c | 12 +++++++++--- net/ipv4/ping.c | 12 +++++++++++- net/ipv4/route.c | 1 + net/netlink/af_netlink.c | 1 - net/smc/smc_rx.c | 4 ++-- sound/soc/codecs/max98090.c | 5 ++++- sound/soc/soc-ops.c | 18 +++++++++++++++++- 25 files changed, 94 insertions(+), 29 deletions(-) Alexandra Winter (3): s390/ctcm: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/lcs: fix variable dereferenced before check Eric Dumazet (2): netlink: do not reset transport header in netlink_recvmsg() tcp: resalt the secret every 10 seconds Ethan Yang (1): USB: serial: qcserial: add support for Sierra Wireless EM7590 Greg Kroah-Hartman (1): Linux 4.14.280 Guangguan Wang (1): net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Ji-Ze Hong (Peter Hong) (1): hwmon: (f71882fg) Fix negative temperature Johannes Berg (1): mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Lokesh Dhoundiyal (1): ipv4: drop dst in multicast routing path Mark Brown (3): ASoC: max98090: Reject invalid values in custom control put() ASoC: max98090: Generate notifications on changes for custom control ASoC: ops: Validate input values in snd_soc_put_volsw_range() Nicolas Dichtel (1): ping: fix address binding wrt vrf Randy Dunlap (1): hwmon: (ltq-cputemp) restrict it to SOC_XWAY Scott Chen (1): USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov (1): usb: cdc-wdm: fix reading stuck on device close Sven Eckelmann (1): batman-adv: Don't skb_split skbuffs with frag_list Sven Schwermer (2): USB: serial: option: add Fibocom L610 modem USB: serial: option: add Fibocom MA510 modem Taehee Yoo (1): net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Tariq Toukan (1): net: Fix features skip in for_each_netdev_feature() Waiman Long (1): cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Yang Yingliang (1): tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Zack Rusin (1): drm/vmwgfx: Initialize drm_mode_fb_cmd2

2 years, 7 months

1
1
0 0

Linux 4.9.315

by Greg Kroah-Hartman

I'm announcing the release of the 4.9.315 kernel. All users of the 4.9 kernel series must upgrade. The updated 4.9.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.9.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 +- drivers/hwmon/f71882fg.c | 5 +++-- drivers/net/ethernet/sfc/ef10.c | 5 +++++ drivers/net/wireless/mac80211_hwsim.c | 3 +++ drivers/s390/net/ctcm_mpc.c | 6 +----- drivers/s390/net/ctcm_sysfs.c | 5 +++-- drivers/s390/net/lcs.c | 7 ++++--- drivers/tty/serial/digicolor-usart.c | 2 +- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/serial/option.c | 4 ++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 ++ include/linux/netdev_features.h | 4 ++-- net/ipv4/ping.c | 12 +++++++++++- net/ipv4/route.c | 1 + net/netlink/af_netlink.c | 1 - sound/soc/codecs/max98090.c | 5 ++++- sound/soc/soc-ops.c | 18 +++++++++++++++++- 19 files changed, 65 insertions(+), 20 deletions(-) Alexandra Winter (3): s390/ctcm: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/lcs: fix variable dereferenced before check Eric Dumazet (1): netlink: do not reset transport header in netlink_recvmsg() Ethan Yang (1): USB: serial: qcserial: add support for Sierra Wireless EM7590 Greg Kroah-Hartman (1): Linux 4.9.315 Ji-Ze Hong (Peter Hong) (1): hwmon: (f71882fg) Fix negative temperature Johannes Berg (1): mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Lokesh Dhoundiyal (1): ipv4: drop dst in multicast routing path Mark Brown (3): ASoC: max98090: Reject invalid values in custom control put() ASoC: max98090: Generate notifications on changes for custom control ASoC: ops: Validate input values in snd_soc_put_volsw_range() Nicolas Dichtel (1): ping: fix address binding wrt vrf Scott Chen (1): USB: serial: pl2303: add device id for HP LM930 Display Sergey Ryazanov (1): usb: cdc-wdm: fix reading stuck on device close Sven Schwermer (2): USB: serial: option: add Fibocom L610 modem USB: serial: option: add Fibocom MA510 modem Taehee Yoo (1): net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Tariq Toukan (1): net: Fix features skip in for_each_netdev_feature() Yang Yingliang (1): tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()

2 years, 7 months

1
1
0 0

[PATCH 1/1] platform/chrome: check *dest of memcpy

by Yuanjun Gong

From: Gong Yuanjun <ruc_gongyuanjun(a)163.com> In regulator/cros-ec-regulator.c, cros_ec_cmd is sometimes called with *indata set to NULL. static int cros_ec_regulator_enable(struct regulator_dev *dev){ ... cros_ec_cmd(data->ec_dev, 0, EC_CMD_REGULATOR_ENABLE, &cmd, sizeof(cmd), NULL, 0) ...} Don't do memcpy if indata is NULL. Signed-off-by: Gong Yuanjun <ruc_gongyuanjun(a)163.com> --- drivers/platform/chrome/cros_ec_proto.c | 2 +- drivers/regulator/cros-ec-regulator.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/platform/chrome/cros_ec_proto.c b/drivers/platform/chrome/cros_ec_proto.c index c4caf2e2de82..da175c57cff7 100644 --- a/drivers/platform/chrome/cros_ec_proto.c +++ b/drivers/platform/chrome/cros_ec_proto.c @@ -938,7 +938,7 @@ int cros_ec_command(struct cros_ec_device *ec_dev, if (ret < 0) goto error; - if (insize) + if (indata && insize) memcpy(indata, msg->data, insize); error: kfree(msg); diff --git a/drivers/regulator/cros-ec-regulator.c b/drivers/regulator/cros-ec-regulator.c index c4754f3cf233..1c7ff085e492 100644 --- a/drivers/regulator/cros-ec-regulator.c +++ b/drivers/regulator/cros-ec-regulator.c @@ -44,7 +44,7 @@ static int cros_ec_cmd(struct cros_ec_device *ec, u32 version, u32 command, if (ret < 0) goto cleanup; - if (insize) + if (indata && insize) memcpy(indata, msg->data, insize); cleanup: -- 2.17.1

2 years, 7 months

3
2
0 0

[PATCH v6,3/4] drm/mediatek: keep dsi as LP00 before dcs cmds transfer

by xinlei.lee＠mediatek.com

From: Jitao Shi <jitao.shi(a)mediatek.com> To comply with the panel sequence, hold the mipi signal to LP00 before the dcs cmds transmission, and pull the mipi signal high from LP00 to LP11 until the start of the dcs cmds transmission. The normal panel timing is : (1) pp1800 DC pull up (2) avdd & avee AC pull high (3) lcm_reset pull high -> pull low -> pull high (4) Pull MIPI signal high (LP11) -> initial code -> send video data(HS mode) The power-off sequence is reversed. If dsi is not in cmd mode, then dsi will pull the mipi signal high in the mtk_output_dsi_enable function. The delay in lane_ready func is the reaction time of dsi_rx after pulling up the mipi signal. Fixes: 2dd8075d2185 ("drm/mediatek: mtk_dsi: Use the drm_panel_bridge API") Cc: <stable(a)vger.kernel.org> # 6.6.x: b255d51e3967: sched: Modify dsi funcs to atomic operations Cc: <stable(a)vger.kernel.org> # 6.6.x: 72c69c977502: sched: Separate poweron/poweroff from enable/disable and define new funcs Cc: <stable(a)vger.kernel.org> # 6.6.x Signed-off-by: Jitao Shi <jitao.shi(a)mediatek.com> Signed-off-by: Xinlei Lee <xinlei.lee(a)mediatek.com> Reviewed-by: AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> --- drivers/gpu/drm/mediatek/mtk_dsi.c | 28 +++++++++++++++++++++------- 1 file changed, 21 insertions(+), 7 deletions(-) diff --git a/drivers/gpu/drm/mediatek/mtk_dsi.c b/drivers/gpu/drm/mediatek/mtk_dsi.c index d9a6b928dba8..25e84d9426bf 100644 --- a/drivers/gpu/drm/mediatek/mtk_dsi.c +++ b/drivers/gpu/drm/mediatek/mtk_dsi.c @@ -203,6 +203,7 @@ struct mtk_dsi { struct mtk_phy_timing phy_timing; int refcount; bool enabled; + bool lanes_ready; u32 irq_data; wait_queue_head_t irq_wait_queue; const struct mtk_dsi_driver_data *driver_data; @@ -661,18 +662,11 @@ static int mtk_dsi_poweron(struct mtk_dsi *dsi) mtk_dsi_reset_engine(dsi); mtk_dsi_phy_timconfig(dsi); - mtk_dsi_rxtx_control(dsi); - usleep_range(30, 100); - mtk_dsi_reset_dphy(dsi); mtk_dsi_ps_control_vact(dsi); mtk_dsi_set_vm_cmd(dsi); mtk_dsi_config_vdo_timing(dsi); mtk_dsi_set_interrupt_enable(dsi); - mtk_dsi_clk_ulp_mode_leave(dsi); - mtk_dsi_lane0_ulp_mode_leave(dsi); - mtk_dsi_clk_hs_mode(dsi, 0); - return 0; err_disable_engine_clk: clk_disable_unprepare(dsi->engine_clk); @@ -701,6 +695,23 @@ static void mtk_dsi_poweroff(struct mtk_dsi *dsi) clk_disable_unprepare(dsi->digital_clk); phy_power_off(dsi->phy); + + dsi->lanes_ready = false; +} + +static void mtk_dsi_lane_ready(struct mtk_dsi *dsi) +{ + if (!dsi->lanes_ready) { + dsi->lanes_ready = true; + mtk_dsi_rxtx_control(dsi); + usleep_range(30, 100); + mtk_dsi_reset_dphy(dsi); + mtk_dsi_clk_ulp_mode_leave(dsi); + mtk_dsi_lane0_ulp_mode_leave(dsi); + mtk_dsi_clk_hs_mode(dsi, 0); + msleep(20); + /* The reaction time after pulling up the mipi signal for dsi_rx */ + } } static void mtk_output_dsi_enable(struct mtk_dsi *dsi) @@ -708,6 +719,7 @@ static void mtk_output_dsi_enable(struct mtk_dsi *dsi) if (dsi->enabled) return; + mtk_dsi_lane_ready(dsi); mtk_dsi_set_mode(dsi); mtk_dsi_clk_hs_mode(dsi, 1); @@ -1017,6 +1029,8 @@ static ssize_t mtk_dsi_host_transfer(struct mipi_dsi_host *host, if (MTK_DSI_HOST_IS_READ(msg->type)) irq_flag |= LPRX_RD_RDY_INT_FLAG; + mtk_dsi_lane_ready(dsi); + ret = mtk_dsi_host_send_cmd(dsi, msg, irq_flag); if (ret) goto restore_dsi_mode; -- 2.18.0

2 years, 7 months

2
1
0 0

[PATCH 5.17 000/114] 5.17.9-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.17.9 release. There are 114 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 18 May 2022 19:36:02 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.17.9-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.17.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.17.9-rc1 Hyeonggon Yoo <42.hyeyoo(a)gmail.com> mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool Wan Jiabing <wanjiabing(a)vivo.com> net: phy: micrel: Fix incorrect variable type in micrel Naoya Horiguchi <naoya.horiguchi(a)nec.com> mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() Charan Teja Reddy <quic_charante(a)quicinc.com> dma-buf: call dma_buf_stats_setup after dmabuf is in valid list Alex Deucher <alexander.deucher(a)amd.com> Revert "drm/amd/pm: keep the BACO feature enabled for suspend" Zack Rusin <zackr(a)vmware.com> drm/vmwgfx: Initialize drm_mode_fb_cmd2 Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Ensure that the gssproxy client can start in a connected state Fabio Estevam <festevam(a)denx.de> net: phy: micrel: Pass .probe for KS8737 Fabio Estevam <festevam(a)denx.de> net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 Mike Rapoport <rppt(a)kernel.org> arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map Wen Gong <quic_wgong(a)quicinc.com> ath11k: reduce the wait time of 11d scan and hw scan while add interface Nicolas Dichtel <nicolas.dichtel(a)6wind.com> ping: fix address binding wrt vrf Waiman Long <longman(a)redhat.com> cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Jing Xia <jing.xia(a)unisoc.com> writeback: Avoid skipping inode writeback Francesco Dolcini <francesco.dolcini(a)toradex.com> net: phy: Fix race condition on link status change Manuel Ullmann <labre(a)posteo.de> net: atlantic: always deep reset on pm op, fixing up my null deref regression Xiaomeng Tong <xiam0nd.tong(a)gmail.com> i40e: i40e_main: fix a missing check on list iterator Robin Murphy <robin.murphy(a)arm.com> drm/nouveau/tegra: Stop using iommu_present() Zack Rusin <zackr(a)vmware.com> drm/vmwgfx: Disable command buffers on svga3 without gbobjects Niels Dossche <dossche.niels(a)gmail.com> mm: mremap: fix sign for EFAULT error return value Xu Yu <xuyu(a)linux.alibaba.com> mm/huge_memory: do not overkill when splitting huge_zero_page Xu Yu <xuyu(a)linux.alibaba.com> Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" Jeff Layton <jlayton(a)kernel.org> ceph: fix setting of xattrs on async created inodes AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> serial: 8250_mtk: Fix register address for XON/XOFF character AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> serial: 8250_mtk: Fix UART_EFR register address Lukas Wunner <lukas(a)wunner.de> genirq: Remove WARN_ON_ONCE() in generic_handle_domain_irq() Indan Zupancic <Indan.Zupancic(a)mep-info.com> fsl_lpuart: Don't enable interrupts too early Miaoqian Lin <linmq006(a)gmail.com> slimbus: qcom: Fix IRQ check in qcom_slim_probe Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom MA510 modem Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom L610 modem Ethan Yang <etyang(a)sierrawireless.com> USB: serial: qcserial: add support for Sierra Wireless EM7590 Scott Chen <scott(a)labau.com.tw> USB: serial: pl2303: add device id for HP LM930 Display ChiYuan Huang <cy_huang(a)richtek.com> usb: typec: tcpci_mt6360: Update for BMC PHY setting Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> usb: typec: tcpci: Don't skip cleanup in .remove() on error Sergey Ryazanov <ryazanov.s.a(a)gmail.com> usb: cdc-wdm: fix reading stuck on device close Dan Vacura <w36195(a)motorola.com> usb: gadget: uvc: allow for application to cleanly shutdown Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix invalid gsmtty_write_room() result Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix mux activation issues in gsm_config() Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix buffer over-read in gsm_dlci_data() Yang Yingliang <yangyingliang(a)huawei.com> tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Adrian-Ken Rueegsegger <ken(a)codelabs.ch> x86/mm: Fix marking of unused sub-pmd ranges Chunfeng Yun <chunfeng.yun(a)mediatek.com> usb: xhci-mtk: fix fs isoc's transfer error Alexander Graf <graf(a)amazon.com> KVM: PPC: Book3S PR: Enable MSR_DR for switch_mmu_context() Thiébaud Weksteen <tweek(a)google.com> firmware_loader: use kernel credentials when reading firmware Jeremy Linton <jeremy.linton(a)arm.com> perf tests: Fix coresight `perf test` failure. Stephen Boyd <swboyd(a)chromium.org> interconnect: Restore sync state by ignoring ipa-virt in provider count Matthew Wilcox (Oracle) <willy(a)infradead.org> block: Do not call folio_next() on an unreferenced folio Willy Tarreau <w(a)1wt.eu> tcp: drop the hash_32() part from the index calculation Willy Tarreau <w(a)1wt.eu> tcp: increase source port perturb table to 2^16 Willy Tarreau <w(a)1wt.eu> tcp: dynamically allocate the perturb table used by source ports Willy Tarreau <w(a)1wt.eu> tcp: add small random increments to the source port Eric Dumazet <edumazet(a)google.com> tcp: resalt the secret every 10 seconds Willy Tarreau <w(a)1wt.eu> tcp: use different parts of the port_offset for index and offset Willy Tarreau <w(a)1wt.eu> secure_seq: use the 64 bits of the siphash for port offset calculation Matthew Hagan <mnhagan88(a)gmail.com> net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT Shravya Kumbham <shravya.kumbham(a)xilinx.com> net: emaclite: Don't advertise 1000BASE-T and do auto negotiation Jens Axboe <axboe(a)kernel.dk> io_uring: assign non-fixed early for async work Ajit Kumar Pandey <AjitKumar.Pandey(a)amd.com> ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback Sven Schnelle <svens(a)linux.ibm.com> s390: disable -Warray-bounds Mark Brown <broonie(a)kernel.org> ASoC: ops: Validate input values in snd_soc_put_volsw_range() Mark Brown <broonie(a)kernel.org> ASoC: max98090: Generate notifications on changes for custom control Mark Brown <broonie(a)kernel.org> ASoC: max98090: Reject invalid values in custom control put() Ashish Mhetre <amhetre(a)nvidia.com> iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu Duoming Zhou <duoming(a)zju.edu.cn> RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() Ji-Ze Hong (Peter Hong) <hpeter(a)gmail.com> hwmon: (f71882fg) Fix negative temperature Denis Pauk <pauk.denis(a)gmail.com> hwmon: (asus_wmi_sensors) Fix CROSSHAIR VI HERO name Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix filesystem block deallocation for short writes Zack Rusin <zackr(a)vmware.com> drm/vmwgfx: Fix fencing on SVGAv3 Maxim Mikityanskiy <maximmi(a)nvidia.com> tls: Fix context leak on tls_device_down Taehee Yoo <ap420073(a)gmail.com> net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Florian Fainelli <f.fainelli(a)gmail.com> net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() Amit Cohen <amcohen(a)nvidia.com> mlxsw: Avoid warning during ip6gre device removal Hui Tang <tanghui20(a)huawei.com> drm/vc4: hdmi: Fix build error for implicit function declaration Florian Fainelli <f.fainelli(a)gmail.com> net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral Yang Yingliang <yangyingliang(a)huawei.com> net: ethernet: mediatek: ppe: fix wrong size passed to memset() Paolo Abeni <pabeni(a)redhat.com> net/sched: act_pedit: really ensure the skb is writable Alexandra Winter <wintera(a)linux.ibm.com> s390/lcs: fix variable dereferenced before check Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix potential memory leak Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix variable dereferenced before check Shunsuke Mie <mie(a)igel.co.jp> virtio: fix virtio transitional ids Joey Gouly <joey.gouly(a)arm.com> arm64: vdso: fix makefile dependency on vdso.so Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: flush switchdev workqueue on bridge join error path Joel Savitz <jsavitz(a)redhat.com> selftests: vm: Makefile: rename TARGETS to VMTARGETS Kalesh Singh <kaleshsingh(a)google.com> procfs: prevent unprivileged processes accessing fdinfo dir Randy Dunlap <rdunlap(a)infradead.org> hwmon: (ltq-cputemp) restrict it to SOC_XWAY Jesse Brandeburg <jesse.brandeburg(a)intel.com> dim: initialize all struct fields Yang Yingliang <yangyingliang(a)huawei.com> ionic: fix missing pci_release_regions() on error in ionic_probe() Dan Aloni <dan.aloni(a)vastdata.com> nfs: fix broken handling of the softreval mount option Johannes Berg <johannes.berg(a)intel.com> mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Amir Goldstein <amir73il(a)gmail.com> fanotify: do not allow setting dirent events in mask of non-dir Taehee Yoo <ap420073(a)gmail.com> net: sfc: fix memory leak due to ptp channel Javier Martinez Canillas <javierm(a)redhat.com> fbdev: efifb: Fix a use-after-free due early fb_info cleanup Kees Cook <keescook(a)chromium.org> net: chelsio: cxgb4: Avoid potential negative array offset Eric Dumazet <edumazet(a)google.com> netlink: do not reset transport header in netlink_recvmsg() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() Lokesh Dhoundiyal <lokesh.dhoundiyal(a)alliedtelesis.co.nz> ipv4: drop dst in multicast routing path Michal Michalik <michal.michalik(a)intel.com> ice: fix PTP stale Tx timestamps cleanup Anatolii Gerasymenko <anatolii.gerasymenko(a)intel.com> ice: clear stale Tx queue settings before configuring Ivan Vecera <ivecera(a)redhat.com> ice: Fix race during aux device (un)plugging Maximilian Luz <luzmaximilian(a)gmail.com> platform/surface: aggregator: Fix initialization order when compiling as builtin module Javier Martinez Canillas <javierm(a)redhat.com> fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove Javier Martinez Canillas <javierm(a)redhat.com> fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove Javier Martinez Canillas <javierm(a)redhat.com> fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted Tariq Toukan <tariqt(a)nvidia.com> net: Fix features skip in for_each_netdev_feature() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: rds: use maybe_get_net() when acquiring refcount on TCP sockets Manikanta Pubbisetty <quic_mpubbise(a)quicinc.com> mac80211: Reset MBSSID parameters upon connection Camel Guo <camel.guo(a)axis.com> hwmon: (tmp401) Add OF device ID table Guenter Roeck <linux(a)roeck-us.net> iwlwifi: iwl-dbg: Use del_timer_sync() before freeing Sven Eckelmann <sven(a)narfation.org> batman-adv: Don't skb_split skbuffs with frag_list ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/io.h | 3 + arch/arm/mm/ioremap.c | 8 +++ arch/arm64/include/asm/io.h | 4 ++ arch/arm64/kernel/Makefile | 4 ++ arch/arm64/kernel/vdso/Makefile | 3 - arch/arm64/kernel/vdso32/Makefile | 3 - arch/arm64/mm/ioremap.c | 8 +++ arch/powerpc/kvm/book3s_32_sr.S | 26 ++++++-- arch/s390/Makefile | 10 +++ arch/x86/mm/init_64.c | 5 +- drivers/base/firmware_loader/main.c | 17 ++++++ drivers/dma-buf/dma-buf.c | 8 +-- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 8 +-- drivers/gpu/drm/nouveau/nouveau_backlight.c | 9 +-- drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c | 2 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 1 + drivers/gpu/drm/vmwgfx/vmwgfx_cmd.c | 13 ++-- drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 8 +++ drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 28 ++++++--- drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 26 +++++--- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 8 ++- drivers/hwmon/Kconfig | 2 +- drivers/hwmon/asus_wmi_sensors.c | 2 +- drivers/hwmon/f71882fg.c | 5 +- drivers/hwmon/tmp401.c | 11 ++++ drivers/infiniband/hw/irdma/cm.c | 7 +-- drivers/interconnect/core.c | 8 ++- drivers/iommu/arm/arm-smmu/arm-smmu-nvidia.c | 30 +++++++++ drivers/net/dsa/bcm_sf2.c | 3 + .../net/ethernet/aquantia/atlantic/aq_pci_func.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 4 ++ drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 10 +-- drivers/net/ethernet/intel/i40e/i40e_main.c | 27 ++++---- drivers/net/ethernet/intel/ice/ice.h | 1 + drivers/net/ethernet/intel/ice/ice_idc.c | 25 +++++--- drivers/net/ethernet/intel/ice/ice_main.c | 2 + drivers/net/ethernet/intel/ice/ice_ptp.c | 10 ++- drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 68 +++++++++++++++------ drivers/net/ethernet/mediatek/mtk_ppe.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_ipip.c | 11 +--- drivers/net/ethernet/mscc/ocelot_flower.c | 5 +- drivers/net/ethernet/mscc/ocelot_vcap.c | 9 ++- .../net/ethernet/pensando/ionic/ionic_bus_pci.c | 3 +- drivers/net/ethernet/sfc/ef10.c | 5 ++ drivers/net/ethernet/sfc/efx_channels.c | 7 ++- drivers/net/ethernet/sfc/ptp.c | 14 ++++- drivers/net/ethernet/sfc/ptp.h | 1 + drivers/net/ethernet/xilinx/xilinx_emaclite.c | 15 ----- drivers/net/phy/micrel.c | 7 ++- drivers/net/phy/phy.c | 7 ++- drivers/net/phy/sfp.c | 12 +++- drivers/net/wireless/ath/ath11k/core.c | 1 + drivers/net/wireless/ath/ath11k/core.h | 13 +++- drivers/net/wireless/ath/ath11k/mac.c | 71 +++++++++------------- drivers/net/wireless/ath/ath11k/mac.h | 2 +- drivers/net/wireless/ath/ath11k/reg.c | 43 ++++++++----- drivers/net/wireless/ath/ath11k/reg.h | 2 +- drivers/net/wireless/ath/ath11k/wmi.c | 16 ++++- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 2 +- drivers/net/wireless/mac80211_hwsim.c | 3 + drivers/platform/surface/aggregator/core.c | 2 +- drivers/s390/net/ctcm_mpc.c | 6 +- drivers/s390/net/ctcm_sysfs.c | 5 +- drivers/s390/net/lcs.c | 7 ++- drivers/slimbus/qcom-ctrl.c | 4 +- drivers/tty/n_gsm.c | 20 +++--- drivers/tty/serial/8250/8250_mtk.c | 22 ++++--- drivers/tty/serial/digicolor-usart.c | 5 +- drivers/tty/serial/fsl_lpuart.c | 18 +++--- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/gadget/function/f_uvc.c | 25 ++++++++ drivers/usb/gadget/function/uvc.h | 2 + drivers/usb/gadget/function/uvc_v4l2.c | 3 +- drivers/usb/host/xhci-mtk-sch.c | 16 +++-- drivers/usb/serial/option.c | 4 ++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 + drivers/usb/typec/tcpm/tcpci.c | 2 +- drivers/usb/typec/tcpm/tcpci_mt6360.c | 26 ++++++++ drivers/video/fbdev/efifb.c | 9 ++- drivers/video/fbdev/simplefb.c | 8 ++- drivers/video/fbdev/vesafb.c | 8 ++- fs/ceph/file.c | 16 ++++- fs/fs-writeback.c | 4 ++ fs/gfs2/bmap.c | 11 ++-- fs/io_uring.c | 7 ++- fs/nfs/fs_context.c | 2 +- fs/notify/fanotify/fanotify_user.c | 13 ++++ fs/proc/fd.c | 23 ++++++- include/linux/bio.h | 5 +- include/linux/netdev_features.h | 4 +- include/linux/sunrpc/clnt.h | 1 + include/net/inet_hashtables.h | 2 +- include/net/secure_seq.h | 4 +- include/net/tc_act/tc_pedit.h | 1 + include/uapi/linux/virtio_ids.h | 14 ++--- kernel/cgroup/cpuset.c | 7 ++- kernel/irq/irqdesc.c | 1 - lib/dim/net_dim.c | 44 +++++++------- mm/huge_memory.c | 7 ++- mm/kfence/core.c | 11 ++++ mm/memory-failure.c | 15 +---- mm/mremap.c | 2 +- net/batman-adv/fragmentation.c | 11 ++++ net/core/secure_seq.c | 16 +++-- net/dsa/port.c | 1 + net/ipv4/inet_hashtables.c | 42 ++++++++----- net/ipv4/ping.c | 12 +++- net/ipv4/route.c | 1 + net/ipv6/inet6_hashtables.c | 4 +- net/mac80211/mlme.c | 6 ++ net/netlink/af_netlink.c | 1 - net/rds/tcp.c | 12 +++- net/rds/tcp.h | 2 +- net/rds/tcp_connect.c | 5 +- net/rds/tcp_listen.c | 5 +- net/sched/act_pedit.c | 26 ++++++-- net/smc/smc_rx.c | 4 +- net/sunrpc/auth_gss/gss_rpc_upcall.c | 1 + net/sunrpc/clnt.c | 33 ++++++++++ net/tls/tls_device.c | 3 + sound/soc/codecs/max98090.c | 5 +- sound/soc/soc-ops.c | 18 +++++- sound/soc/sof/sof-pci-dev.c | 5 ++ tools/perf/tests/shell/test_arm_coresight.sh | 1 - tools/testing/selftests/vm/Makefile | 10 +-- 129 files changed, 913 insertions(+), 380 deletions(-)

2 years, 7 months

11
124
0 0

[PATCH 4.19 00/32] 4.19.244-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.19.244 release. There are 32 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 18 May 2022 19:36:02 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.244-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.19.244-rc1 Yang Yingliang <yangyingliang(a)huawei.com> tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Nicolas Dichtel <nicolas.dichtel(a)6wind.com> ping: fix address binding wrt vrf Sudip Mukherjee <sudipm.mukherjee(a)gmail.com> MIPS: fix allmodconfig build with latest mkimage Zack Rusin <zackr(a)vmware.com> drm/vmwgfx: Initialize drm_mode_fb_cmd2 Waiman Long <longman(a)redhat.com> cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Miaoqian Lin <linmq006(a)gmail.com> slimbus: qcom: Fix IRQ check in qcom_slim_probe Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom MA510 modem Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom L610 modem Ethan Yang <etyang(a)sierrawireless.com> USB: serial: qcserial: add support for Sierra Wireless EM7590 Scott Chen <scott(a)labau.com.tw> USB: serial: pl2303: add device id for HP LM930 Display Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> usb: typec: tcpci: Don't skip cleanup in .remove() on error Sergey Ryazanov <ryazanov.s.a(a)gmail.com> usb: cdc-wdm: fix reading stuck on device close Eric Dumazet <edumazet(a)google.com> tcp: resalt the secret every 10 seconds Sven Schnelle <svens(a)linux.ibm.com> s390: disable -Warray-bounds Mark Brown <broonie(a)kernel.org> ASoC: ops: Validate input values in snd_soc_put_volsw_range() Mark Brown <broonie(a)kernel.org> ASoC: max98090: Generate notifications on changes for custom control Mark Brown <broonie(a)kernel.org> ASoC: max98090: Reject invalid values in custom control put() Ji-Ze Hong (Peter Hong) <hpeter(a)gmail.com> hwmon: (f71882fg) Fix negative temperature Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix filesystem block deallocation for short writes Taehee Yoo <ap420073(a)gmail.com> net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Paolo Abeni <pabeni(a)redhat.com> net/sched: act_pedit: really ensure the skb is writable Alexandra Winter <wintera(a)linux.ibm.com> s390/lcs: fix variable dereferenced before check Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix potential memory leak Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix variable dereferenced before check Randy Dunlap <rdunlap(a)infradead.org> hwmon: (ltq-cputemp) restrict it to SOC_XWAY Johannes Berg <johannes.berg(a)intel.com> mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Eric Dumazet <edumazet(a)google.com> netlink: do not reset transport header in netlink_recvmsg() Lokesh Dhoundiyal <lokesh.dhoundiyal(a)alliedtelesis.co.nz> ipv4: drop dst in multicast routing path Tariq Toukan <tariqt(a)nvidia.com> net: Fix features skip in for_each_netdev_feature() Camel Guo <camel.guo(a)axis.com> hwmon: (tmp401) Add OF device ID table Sven Eckelmann <sven(a)narfation.org> batman-adv: Don't skb_split skbuffs with frag_list ------------- Diffstat: Makefile | 4 ++-- arch/mips/generic/board-ocelot_pcb123.its.S | 10 +++++----- arch/s390/Makefile | 10 ++++++++++ drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 +- drivers/hwmon/Kconfig | 2 +- drivers/hwmon/f71882fg.c | 5 +++-- drivers/hwmon/tmp401.c | 11 +++++++++++ drivers/net/ethernet/sfc/ef10.c | 5 +++++ drivers/net/wireless/mac80211_hwsim.c | 3 +++ drivers/s390/net/ctcm_mpc.c | 6 +----- drivers/s390/net/ctcm_sysfs.c | 5 +++-- drivers/s390/net/lcs.c | 7 ++++--- drivers/slimbus/qcom-ctrl.c | 4 ++-- drivers/tty/serial/digicolor-usart.c | 2 +- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/serial/option.c | 4 ++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 ++ drivers/usb/typec/tcpci.c | 2 +- fs/gfs2/bmap.c | 11 +++++------ include/linux/netdev_features.h | 4 ++-- include/net/tc_act/tc_pedit.h | 1 + kernel/cgroup/cpuset.c | 7 +++++-- net/batman-adv/fragmentation.c | 11 +++++++++++ net/core/secure_seq.c | 12 +++++++++--- net/ipv4/ping.c | 12 +++++++++++- net/ipv4/route.c | 1 + net/netlink/af_netlink.c | 1 - net/sched/act_pedit.c | 26 ++++++++++++++++++++++---- net/smc/smc_rx.c | 4 ++-- sound/soc/codecs/max98090.c | 5 ++++- sound/soc/soc-ops.c | 18 +++++++++++++++++- 33 files changed, 152 insertions(+), 48 deletions(-)

2 years, 7 months

8
39
0 0

[PATCH 5.10 00/68] 5.10.117-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.117 release. There are 68 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 18 May 2022 21:35:34 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.117-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.117-rc2 Gustavo A. R. Silva <gustavoars(a)kernel.org> SUNRPC: Fix fall-through warnings for Clang Jens Axboe <axboe(a)kernel.dk> io_uring: always use original task when preparing req identity Dan Vacura <w36195(a)motorola.com> usb: gadget: uvc: allow for application to cleanly shutdown Michael Tretter <m.tretter(a)pengutronix.de> usb: gadget: uvc: rename function to be more consistent Nicolas Dichtel <nicolas.dichtel(a)6wind.com> ping: fix address binding wrt vrf Mike Rapoport <rppt(a)kernel.org> arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map Francesco Dolcini <francesco.dolcini(a)toradex.com> net: phy: Fix race condition on link status change Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Don't call connect() more than once on a TCP socket Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Prevent immediate close+reconnect Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Clean up scheduling of autoclose Zack Rusin <zackr(a)vmware.com> drm/vmwgfx: Initialize drm_mode_fb_cmd2 Waiman Long <longman(a)redhat.com> cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() Manuel Ullmann <labre(a)posteo.de> net: atlantic: always deep reset on pm op, fixing up my null deref regression Xiaomeng Tong <xiam0nd.tong(a)gmail.com> i40e: i40e_main: fix a missing check on list iterator Robin Murphy <robin.murphy(a)arm.com> drm/nouveau/tegra: Stop using iommu_present() Jeff Layton <jlayton(a)kernel.org> ceph: fix setting of xattrs on async created inodes AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> serial: 8250_mtk: Fix register address for XON/XOFF character AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> serial: 8250_mtk: Fix UART_EFR register address Miaoqian Lin <linmq006(a)gmail.com> slimbus: qcom: Fix IRQ check in qcom_slim_probe Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom MA510 modem Sven Schwermer <sven.schwermer(a)disruptive-technologies.com> USB: serial: option: add Fibocom L610 modem Ethan Yang <etyang(a)sierrawireless.com> USB: serial: qcserial: add support for Sierra Wireless EM7590 Scott Chen <scott(a)labau.com.tw> USB: serial: pl2303: add device id for HP LM930 Display ChiYuan Huang <cy_huang(a)richtek.com> usb: typec: tcpci_mt6360: Update for BMC PHY setting Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> usb: typec: tcpci: Don't skip cleanup in .remove() on error Sergey Ryazanov <ryazanov.s.a(a)gmail.com> usb: cdc-wdm: fix reading stuck on device close Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix mux activation issues in gsm_config() Yang Yingliang <yangyingliang(a)huawei.com> tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() Thiébaud Weksteen <tweek(a)google.com> firmware_loader: use kernel credentials when reading firmware Eric Dumazet <edumazet(a)google.com> tcp: resalt the secret every 10 seconds Matthew Hagan <mnhagan88(a)gmail.com> net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT Shravya Kumbham <shravya.kumbham(a)xilinx.com> net: emaclite: Don't advertise 1000BASE-T and do auto negotiation Sven Schnelle <svens(a)linux.ibm.com> s390: disable -Warray-bounds Mark Brown <broonie(a)kernel.org> ASoC: ops: Validate input values in snd_soc_put_volsw_range() Mark Brown <broonie(a)kernel.org> ASoC: max98090: Generate notifications on changes for custom control Mark Brown <broonie(a)kernel.org> ASoC: max98090: Reject invalid values in custom control put() Ji-Ze Hong (Peter Hong) <hpeter(a)gmail.com> hwmon: (f71882fg) Fix negative temperature Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix filesystem block deallocation for short writes Maxim Mikityanskiy <maximmi(a)nvidia.com> tls: Fix context leak on tls_device_down Taehee Yoo <ap420073(a)gmail.com> net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending Florian Fainelli <f.fainelli(a)gmail.com> net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() Florian Fainelli <f.fainelli(a)gmail.com> net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral Paolo Abeni <pabeni(a)redhat.com> net/sched: act_pedit: really ensure the skb is writable Alexandra Winter <wintera(a)linux.ibm.com> s390/lcs: fix variable dereferenced before check Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix potential memory leak Alexandra Winter <wintera(a)linux.ibm.com> s390/ctcm: fix variable dereferenced before check Joel Savitz <jsavitz(a)redhat.com> selftests: vm: Makefile: rename TARGETS to VMTARGETS Randy Dunlap <rdunlap(a)infradead.org> hwmon: (ltq-cputemp) restrict it to SOC_XWAY Jesse Brandeburg <jesse.brandeburg(a)intel.com> dim: initialize all struct fields Yang Yingliang <yangyingliang(a)huawei.com> ionic: fix missing pci_release_regions() on error in ionic_probe() Dan Aloni <dan.aloni(a)vastdata.com> nfs: fix broken handling of the softreval mount option Johannes Berg <johannes.berg(a)intel.com> mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection Taehee Yoo <ap420073(a)gmail.com> net: sfc: fix memory leak due to ptp channel Jiapeng Chong <jiapeng.chong(a)linux.alibaba.com> sfc: Use swap() instead of open coding it Eric Dumazet <edumazet(a)google.com> netlink: do not reset transport header in netlink_recvmsg() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() Lokesh Dhoundiyal <lokesh.dhoundiyal(a)alliedtelesis.co.nz> ipv4: drop dst in multicast routing path Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups Vladimir Oltean <vladimir.oltean(a)nxp.com> net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted Tariq Toukan <tariqt(a)nvidia.com> net: Fix features skip in for_each_netdev_feature() Manikanta Pubbisetty <quic_mpubbise(a)quicinc.com> mac80211: Reset MBSSID parameters upon connection Camel Guo <camel.guo(a)axis.com> hwmon: (tmp401) Add OF device ID table Guenter Roeck <linux(a)roeck-us.net> iwlwifi: iwl-dbg: Use del_timer_sync() before freeing Sven Eckelmann <sven(a)narfation.org> batman-adv: Don't skb_split skbuffs with frag_list ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/io.h | 3 ++ arch/arm/mm/ioremap.c | 8 ++++ arch/arm64/include/asm/io.h | 4 ++ arch/arm64/mm/ioremap.c | 9 +++++ arch/s390/Makefile | 10 +++++ drivers/base/firmware_loader/main.c | 17 ++++++++ drivers/gpu/drm/nouveau/nouveau_backlight.c | 9 +++-- drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 2 +- drivers/hwmon/Kconfig | 2 +- drivers/hwmon/f71882fg.c | 5 ++- drivers/hwmon/tmp401.c | 11 ++++++ drivers/net/dsa/bcm_sf2.c | 3 ++ .../net/ethernet/aquantia/atlantic/aq_pci_func.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 4 ++ drivers/net/ethernet/intel/i40e/i40e_main.c | 27 ++++++------- drivers/net/ethernet/mscc/ocelot_flower.c | 5 ++- drivers/net/ethernet/mscc/ocelot_vcap.c | 9 ++++- .../net/ethernet/pensando/ionic/ionic_bus_pci.c | 3 +- drivers/net/ethernet/sfc/ef10.c | 5 +++ drivers/net/ethernet/sfc/efx_channels.c | 21 +++++----- drivers/net/ethernet/sfc/ptp.c | 14 ++++++- drivers/net/ethernet/sfc/ptp.h | 1 + drivers/net/ethernet/xilinx/xilinx_emaclite.c | 15 -------- drivers/net/phy/phy.c | 45 +++++++++++++++++++--- drivers/net/phy/sfp.c | 12 +++++- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 2 +- drivers/net/wireless/mac80211_hwsim.c | 3 ++ drivers/s390/net/ctcm_mpc.c | 6 +-- drivers/s390/net/ctcm_sysfs.c | 5 ++- drivers/s390/net/lcs.c | 7 ++-- drivers/slimbus/qcom-ctrl.c | 4 +- drivers/tty/n_gsm.c | 12 ++++-- drivers/tty/serial/8250/8250_mtk.c | 22 ++++++----- drivers/tty/serial/digicolor-usart.c | 5 +-- drivers/usb/class/cdc-wdm.c | 1 + drivers/usb/gadget/function/f_uvc.c | 32 +++++++++++++-- drivers/usb/gadget/function/uvc.h | 2 + drivers/usb/gadget/function/uvc_v4l2.c | 3 +- drivers/usb/serial/option.c | 4 ++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 2 + drivers/usb/typec/tcpm/tcpci.c | 2 +- drivers/usb/typec/tcpm/tcpci_mt6360.c | 26 +++++++++++++ fs/ceph/file.c | 16 ++++++-- fs/file_table.c | 1 + fs/gfs2/bmap.c | 11 +++--- fs/io_uring.c | 2 +- fs/nfs/fs_context.c | 2 +- include/linux/netdev_features.h | 4 +- include/linux/sunrpc/xprtsock.h | 1 + include/net/tc_act/tc_pedit.h | 1 + include/trace/events/sunrpc.h | 1 - kernel/cgroup/cpuset.c | 7 +++- lib/dim/net_dim.c | 44 ++++++++++----------- net/batman-adv/fragmentation.c | 11 ++++++ net/core/secure_seq.c | 12 ++++-- net/ipv4/ping.c | 15 +++++++- net/ipv4/route.c | 1 + net/mac80211/mlme.c | 6 +++ net/netlink/af_netlink.c | 1 - net/sched/act_pedit.c | 26 +++++++++++-- net/smc/smc_rx.c | 4 +- net/sunrpc/rpc_pipe.c | 1 + net/sunrpc/xprt.c | 36 ++++++++--------- net/sunrpc/xprtsock.c | 37 ++++++++++++------ net/tls/tls_device.c | 3 ++ sound/soc/codecs/max98090.c | 5 ++- sound/soc/soc-ops.c | 18 ++++++++- tools/testing/selftests/vm/Makefile | 10 ++--- 72 files changed, 486 insertions(+), 184 deletions(-)

2 years, 7 months

8
7
0 0

[PATCH 4.9] floppy: use a statically allocated error counter

by Denis Efremov

From: Willy Tarreau <w(a)1wt.eu> commit f71f01394f742fc4558b3f9f4c7ef4c4cf3b07c8 upstream. Interrupt handler bad_flp_intr() may cause a UAF on the recently freed request just to increment the error count. There's no point keeping that one in the request anyway, and since the interrupt handler uses a static pointer to the error which cannot be kept in sync with the pending request, better make it use a static error counter that's reset for each new request. This reset now happens when entering redo_fd_request() for a new request via set_next_request(). One initial concern about a single error counter was that errors on one floppy drive could be reported on another one, but this problem is not real given that the driver uses a single drive at a time, as that PC-compatible controllers also have this limitation by using shared signals. As such the error count is always for the "current" drive. Reported-by: Minh Yuan <yuanmingbuaa(a)gmail.com> Suggested-by: Linus Torvalds <torvalds(a)linuxfoundation.org> Tested-by: Denis Efremov <efremov(a)linux.com> Signed-off-by: Willy Tarreau <w(a)1wt.eu> Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org> Signed-off-by: Denis Efremov <efremov(a)linux.com> --- drivers/block/floppy.c | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/drivers/block/floppy.c b/drivers/block/floppy.c index cfe1bfb3c20e..216ee1057b12 100644 --- a/drivers/block/floppy.c +++ b/drivers/block/floppy.c @@ -516,8 +516,8 @@ static unsigned long fdc_busy; static DECLARE_WAIT_QUEUE_HEAD(fdc_wait); static DECLARE_WAIT_QUEUE_HEAD(command_done); -/* Errors during formatting are counted here. */ -static int format_errors; +/* errors encountered on the current (or last) request */ +static int floppy_errors; /* Format request descriptor. */ static struct format_descr format_req; @@ -537,7 +537,6 @@ static struct format_descr format_req; static char *floppy_track_buffer; static int max_buffer_sectors; -static int *errors; typedef void (*done_f)(int); static const struct cont_t { void (*interrupt)(void); @@ -1426,7 +1425,7 @@ static int interpret_errors(void) if (DP->flags & FTD_MSG) DPRINT("Over/Underrun - retrying\n"); bad = 0; - } else if (*errors >= DP->max_errors.reporting) { + } else if (floppy_errors >= DP->max_errors.reporting) { print_errors(); } if (ST2 & ST2_WC || ST2 & ST2_BC) @@ -2049,7 +2048,7 @@ static void bad_flp_intr(void) if (!next_valid_format()) return; } - err_count = ++(*errors); + err_count = ++floppy_errors; INFBOUND(DRWE->badness, err_count); if (err_count > DP->max_errors.abort) cont->done(0); @@ -2194,9 +2193,8 @@ static int do_format(int drive, struct format_descr *tmp_format_req) return -EINVAL; } format_req = *tmp_format_req; - format_errors = 0; cont = &format_cont; - errors = &format_errors; + floppy_errors = 0; ret = wait_til_done(redo_format, true); if (ret == -EINTR) return -EINTR; @@ -2679,7 +2677,7 @@ static int make_raw_rw_request(void) */ if (!direct || (indirect * 2 > direct * 3 && - *errors < DP->max_errors.read_track && + floppy_errors < DP->max_errors.read_track && ((!probing || (DP->read_track & (1 << DRS->probed_format)))))) { max_size = blk_rq_sectors(current_req); @@ -2812,8 +2810,10 @@ static int set_next_request(void) fdc_queue = 0; if (q) { current_req = blk_fetch_request(q); - if (current_req) + if (current_req) { + floppy_errors = 0; break; + } } } while (fdc_queue != old_pos); @@ -2873,7 +2873,6 @@ static void redo_fd_request(void) _floppy = floppy_type + DP->autodetect[DRS->probed_format]; } else probing = 0; - errors = &(current_req->errors); tmp = make_raw_rw_request(); if (tmp < 2) { request_done(tmp); -- 2.35.3

2 years, 7 months

1
0
0 0

[PATCH 4.19] floppy: use a statically allocated error counter

by Denis Efremov

From: Willy Tarreau <w(a)1wt.eu> commit f71f01394f742fc4558b3f9f4c7ef4c4cf3b07c8 upstream. Interrupt handler bad_flp_intr() may cause a UAF on the recently freed request just to increment the error count. There's no point keeping that one in the request anyway, and since the interrupt handler uses a static pointer to the error which cannot be kept in sync with the pending request, better make it use a static error counter that's reset for each new request. This reset now happens when entering redo_fd_request() for a new request via set_next_request(). One initial concern about a single error counter was that errors on one floppy drive could be reported on another one, but this problem is not real given that the driver uses a single drive at a time, as that PC-compatible controllers also have this limitation by using shared signals. As such the error count is always for the "current" drive. Reported-by: Minh Yuan <yuanmingbuaa(a)gmail.com> Suggested-by: Linus Torvalds <torvalds(a)linuxfoundation.org> Tested-by: Denis Efremov <efremov(a)linux.com> Signed-off-by: Willy Tarreau <w(a)1wt.eu> Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org> Signed-off-by: Denis Efremov <efremov(a)linux.com> --- drivers/block/floppy.c | 17 +++++++---------- 1 file changed, 7 insertions(+), 10 deletions(-) diff --git a/drivers/block/floppy.c b/drivers/block/floppy.c index 97c8fc4d6e7b..0e66314415c5 100644 --- a/drivers/block/floppy.c +++ b/drivers/block/floppy.c @@ -520,8 +520,8 @@ static unsigned long fdc_busy; static DECLARE_WAIT_QUEUE_HEAD(fdc_wait); static DECLARE_WAIT_QUEUE_HEAD(command_done); -/* Errors during formatting are counted here. */ -static int format_errors; +/* errors encountered on the current (or last) request */ +static int floppy_errors; /* Format request descriptor. */ static struct format_descr format_req; @@ -541,7 +541,6 @@ static struct format_descr format_req; static char *floppy_track_buffer; static int max_buffer_sectors; -static int *errors; typedef void (*done_f)(int); static const struct cont_t { void (*interrupt)(void); @@ -1434,7 +1433,7 @@ static int interpret_errors(void) if (DP->flags & FTD_MSG) DPRINT("Over/Underrun - retrying\n"); bad = 0; - } else if (*errors >= DP->max_errors.reporting) { + } else if (floppy_errors >= DP->max_errors.reporting) { print_errors(); } if (ST2 & ST2_WC || ST2 & ST2_BC) @@ -2054,7 +2053,7 @@ static void bad_flp_intr(void) if (!next_valid_format()) return; } - err_count = ++(*errors); + err_count = ++floppy_errors; INFBOUND(DRWE->badness, err_count); if (err_count > DP->max_errors.abort) cont->done(0); @@ -2199,9 +2198,8 @@ static int do_format(int drive, struct format_descr *tmp_format_req) return -EINVAL; } format_req = *tmp_format_req; - format_errors = 0; cont = &format_cont; - errors = &format_errors; + floppy_errors = 0; ret = wait_til_done(redo_format, true); if (ret == -EINTR) return -EINTR; @@ -2684,7 +2682,7 @@ static int make_raw_rw_request(void) */ if (!direct || (indirect * 2 > direct * 3 && - *errors < DP->max_errors.read_track && + floppy_errors < DP->max_errors.read_track && ((!probing || (DP->read_track & (1 << DRS->probed_format)))))) { max_size = blk_rq_sectors(current_req); @@ -2818,7 +2816,7 @@ static int set_next_request(void) if (q) { current_req = blk_fetch_request(q); if (current_req) { - current_req->error_count = 0; + floppy_errors = 0; break; } } @@ -2880,7 +2878,6 @@ static void redo_fd_request(void) _floppy = floppy_type + DP->autodetect[DRS->probed_format]; } else probing = 0; - errors = &(current_req->error_count); tmp = make_raw_rw_request(); if (tmp < 2) { request_done(tmp); -- 2.35.3

2 years, 7 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror May 2022