July 2022 - Linux-stable-mirror

by Greg Kroah-Hartman

I'm announcing the release of the 5.18.10 kernel. All users of the 5.18 kernel series must upgrade. The updated 5.18.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.18.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/xen/p2m.c | 6 arch/parisc/kernel/asm-offsets.c | 5 arch/parisc/kernel/unaligned.c | 2 arch/powerpc/Kconfig | 4 arch/powerpc/include/asm/bpf_perf_event.h | 9 arch/powerpc/include/uapi/asm/bpf_perf_event.h | 9 arch/powerpc/kernel/prom_init_check.sh | 2 arch/powerpc/mm/mem.c | 33 ++ arch/powerpc/mm/nohash/book3e_pgtable.c | 6 arch/s390/Kconfig | 1 arch/s390/crypto/arch_random.c | 217 --------------- arch/s390/include/asm/archrandom.h | 14 arch/s390/kernel/setup.c | 5 drivers/acpi/acpi_video.c | 13 drivers/block/xen-blkfront.c | 56 ++- drivers/cpufreq/amd-pstate.c | 24 + drivers/cpufreq/qcom-cpufreq-hw.c | 6 drivers/cpufreq/qoriq-cpufreq.c | 1 drivers/devfreq/event/exynos-ppmu.c | 8 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 1 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 drivers/gpu/drm/i915/gem/i915_gem_context.c | 5 drivers/gpu/drm/i915/i915_driver.c | 34 +- drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 3 drivers/gpu/drm/msm/msm_gem_submit.c | 2 drivers/hwmon/ibmaem.c | 12 drivers/hwmon/occ/common.c | 5 drivers/hwmon/occ/common.h | 3 drivers/hwmon/occ/p8_i2c.c | 13 drivers/hwmon/occ/p9_sbe.c | 7 drivers/infiniband/core/cm.c | 4 drivers/infiniband/hw/qedr/qedr.h | 1 drivers/infiniband/hw/qedr/verbs.c | 4 drivers/md/dm-raid.c | 34 +- drivers/md/raid5.c | 1 drivers/net/bonding/bond_3ad.c | 3 drivers/net/bonding/bond_alb.c | 2 drivers/net/caif/caif_virtio.c | 10 drivers/net/dsa/bcm_sf2.c | 5 drivers/net/dsa/hirschmann/hellcreek_ptp.c | 1 drivers/net/dsa/ocelot/felix_vsc9959.c | 4 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c | 14 drivers/net/ethernet/microchip/sparx5/sparx5_switchdev.c | 18 + drivers/net/ethernet/smsc/epic100.c | 4 drivers/net/phy/ax88796b.c | 6 drivers/net/phy/dp83822.c | 4 drivers/net/phy/phy.c | 23 + drivers/net/phy/phy_device.c | 23 + drivers/net/tun.c | 15 - drivers/net/usb/asix.h | 3 drivers/net/usb/asix_common.c | 1 drivers/net/usb/ax88179_178a.c | 101 +++++- drivers/net/usb/usbnet.c | 4 drivers/net/virtio_net.c | 8 drivers/net/xen-netfront.c | 56 +++ drivers/nfc/nfcmrvl/i2c.c | 6 drivers/nfc/nfcmrvl/spi.c | 6 drivers/nfc/nxp-nci/i2c.c | 3 drivers/nvdimm/bus.c | 4 drivers/nvme/host/pci.c | 5 drivers/nvme/target/configfs.c | 20 + drivers/nvme/target/core.c | 6 drivers/nvme/target/nvmet.h | 1 drivers/nvme/target/passthru.c | 55 +++ drivers/nvme/target/tcp.c | 23 - drivers/platform/x86/Kconfig | 2 drivers/platform/x86/ideapad-laptop.c | 29 +- drivers/platform/x86/panasonic-laptop.c | 84 ++++- drivers/platform/x86/thinkpad_acpi.c | 1 drivers/vdpa/mlx5/net/mlx5_vnet.c | 2 fs/ceph/caps.c | 1 fs/cifs/connect.c | 2 fs/io_uring.c | 4 fs/ksmbd/smb2pdu.c | 43 ++ fs/ksmbd/vfs.c | 12 fs/nfs/nfs4proc.c | 19 - fs/nfs/nfs4state.c | 1 fs/nfsd/vfs.c | 11 fs/notify/fanotify/fanotify_user.c | 34 +- fs/read_write.c | 77 +++-- include/linux/dim.h | 2 include/linux/fanotify.h | 4 include/linux/netdevice.h | 2 include/linux/phy.h | 6 include/uapi/drm/drm_fourcc.h | 4 include/uapi/linux/mptcp.h | 9 lib/sbitmap.c | 5 net/ipv4/ip_tunnel_core.c | 2 net/ipv4/tcp_ipv4.c | 6 net/ipv6/addrconf.c | 8 net/ipv6/route.c | 9 net/ipv6/seg6_hmac.c | 1 net/ipv6/sit.c | 8 net/mptcp/protocol.c | 5 net/mptcp/protocol.h | 2 net/mptcp/subflow.c | 52 +++ net/netfilter/nft_set_hash.c | 2 net/rose/rose_timer.c | 34 +- net/sched/act_api.c | 22 - net/sunrpc/xdr.c | 2 net/tipc/node.c | 41 +- tools/testing/selftests/net/bpf/Makefile | 2 tools/testing/selftests/net/mptcp/diag.sh | 48 ++- tools/testing/selftests/net/mptcp/mptcp_connect.c | 2 tools/testing/selftests/net/mptcp/mptcp_inq.c | 2 tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 2 tools/testing/selftests/net/udpgso_bench.sh | 2 110 files changed, 1012 insertions(+), 588 deletions(-) Alan Adamson (1): nvmet: add a clear_ids attribute for passthru targets Alex Deucher (2): drm/amdgpu: fix adev variable used in amdgpu_device_gpu_recover() Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" Alexey Khoroshilov (1): NFSD: restore EINVAL error translation in nfsd_commit() Amir Goldstein (2): vfs: fix copy_file_range() regression in cross-fs copies fanotify: refine the validation checks on non-dir inode mask Aneesh Kumar K.V (1): powerpc/memhotplug: Add add_pages override for PPC Anshuman Gupta (1): drm/i915/dgfx: Disable d3cold at gfx root port Carlos Llamas (1): drm/fourcc: fix integer type usage in uapi header Casper Andersson (2): net: sparx5: Add handling of host MDB entries net: sparx5: mdb add/del handle non-sparx5 devices Chris Ye (1): nvdimm: Fix badblocks clear off-by-one error Christophe Leroy (1): powerpc/book3e: Fix PUD allocation size in map_kernel_page() Chuck Lever (1): SUNRPC: Fix READ_PLUS crasher Coleman Dietsch (1): selftests net: fix kselftest net fatal error Dan Carpenter (1): net: fix IFF_TX_SKB_NO_LINEAR definition Dimitris Michailidis (1): selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test Doug Berger (1): net: dsa: bcm_sf2: force pause link settings Duoming Zhou (1): net: rose: fix UAF bugs caused by timer handler Eddie James (1): hwmon: (occ) Prevent power cap command overwriting poll response Eli Cohen (1): vdpa/mlx5: Update Control VQ callback information Enguerrand de Ribaucourt (2): net: dp83822: disable false carrier interrupt net: dp83822: disable rx error interrupt Eric Dumazet (4): net: bonding: fix possible NULL deref in rlb code tcp: add a missing nf_reset_ct() in 3WHS handling tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() ipv6: fix lockdep splat in in6_dump_addrs() Greg Kroah-Hartman (1): Linux 5.18.10 Hans de Goede (7): platform/x86: ideapad-laptop: Add Ideapad 5 15ITL05 to ideapad_dytc_v4_allow_table[] ACPI: video: Change how we determine if brightness key-presses are handled platform/x86: ideapad-laptop: Add allow_v4_dytc module parameter platform/x86: panasonic-laptop: sort includes alphabetically platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" platform/x86: panasonic-laptop: don't report duplicate brightness key-presses platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses Heinz Mauelshagen (1): dm raid: fix accesses beyond end of raid member array Helge Deller (2): parisc: Fix vDSO signal breakage on 32-bit kernel parisc/unaligned: Fix emulate_ldw() breakage Jakub Kicinski (3): net: tun: unlink NAPI from device on destruction net: tun: stop NAPI when detaching queues net: tun: avoid disabling NAPI twice Jan Beulich (1): xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() Jason A. Donenfeld (2): ksmbd: use vfs_llseek instead of dereferencing NULL s390/archrandom: simplify back to earlier design and initialize earlier Jason Wang (2): virtio-net: fix race between ndo_open() and virtio_device_ready() caif_virtio: fix race between virtio_device_ready() and ndo_open() Jean Delvare (1): platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource Jeff Layton (1): ceph: wait on async create before checking caps for syncfs Jens Axboe (1): io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio Jinzhou Su (1): cpufreq: amd-pstate: Add resume and suspend callbacks Jose Alonso (1): net: usb: ax88179_178a: Fix packet receiving Kamal Heib (1): RDMA/qedr: Fix reporting QP timeout attribute Krzysztof Kozlowski (1): nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Lamarque Vieira Souza (1): nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 Liam Howlett (1): powerpc/prom_init: Fix kernel config grep Liang He (2): net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c Lukas Wunner (1): net: phy: Don't trigger state machine while in suspend Masahiro Yamada (1): s390: remove unneeded 'select BUILD_BIN2C' Mat Martineau (1): selftests: mptcp: Initialize variables to quiet gcc 12 warnings Miaoqian Lin (2): RDMA/cm: Fix memory leak in ib_cm_insert_listen PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events Michael Walle (1): NFC: nxp-nci: Don't issue a zero length i2c_master_read() Mikulas Patocka (1): dm raid: fix KASAN warning in raid5_add_disks Namjae Jeon (2): ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA Naveen N. Rao (1): powerpc/bpf: Fix use of user_pt_regs in uapi NeilBrown (1): NFS: restore module put when manager exits. Nicolas Dichtel (1): ipv6: take care of disable_policy when restoring routes Oleksandr Tyshchenko (1): xen/arm: Fix race in RB-tree based P2M accounting Oleksij Rempel (3): net: usb: asix: do not force pause frames support net: asix: fix "can't send until first packet is send" issue net: phy: ax88772a: fix lost pause advertisement configuration Oliver Neukum (1): usbnet: fix memory allocation in helpers Ossama Othman (1): mptcp: fix conflict with <netinet/in.h> Pablo Greco (1): nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) Pablo Neira Ayuso (1): netfilter: nft_dynset: restore set element counter when failing to update Paolo Abeni (2): mptcp: fix race on unaccepted mptcp sockets selftests: mptcp: more stable diag tests Petr Machata (1): mlxsw: spectrum_router: Fix rollback in tunnel next hop init Rob Clark (1): drm/msm/gem: Fix error return on fence id alloc fail Roger Pau Monne (4): xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted Ruili Ji (1): drm/amdgpu: To flush tlb for MMHUB of RAVEN series Sagi Grimberg (1): nvmet-tcp: fix regression in data_digest calculation Scott Mayhew (1): NFSv4: Add an fattr allocation to _nfs4_discover_trunking() Stefan Seyfried (1): platform/x86: panasonic-laptop: de-obfuscate button codes Stephen Boyd (2): cpufreq: qcom-hw: Don't do lmh things without a throttle interrupt drm/msm/dpu: Increment vsync_cnt before waking up userspace Steve French (1): cifs: fix minor compile warning Tao Liu (1): linux/dim: Fix divide by 0 in RDMA DIM Tong Zhang (1): epic100: fix use after free on rmmod Victor Nogueira (1): net/sched: act_api: Notify user space if any actions were flushed before error Vladimir Oltean (1): net: dsa: felix: fix race between reading PSFP stats and port stats Xin Long (1): tipc: move bc link creation back to tipc_node_create Yang Yingliang (1): hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Yevhen Orlov (1): net: bonding: fix use-after-free after 802.3ad slave unbind YueHaibing (1): net: ipv6: unexport __init-annotated seg6_hmac_net_init() katrinzhou (2): ipv6/sit: fix ipip6_tunnel_get_prl return value drm/i915/gem: add missing else wuchi (1): lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch()

2 years, 6 months

1
1
0 0

Linux 5.15.53

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.53 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ MAINTAINERS | 1 Makefile | 2 arch/arm/xen/p2m.c | 6 arch/powerpc/Kconfig | 4 arch/powerpc/include/asm/bpf_perf_event.h | 9 arch/powerpc/include/uapi/asm/bpf_perf_event.h | 9 arch/powerpc/kernel/prom_init_check.sh | 2 arch/powerpc/mm/mem.c | 33 + arch/powerpc/mm/nohash/book3e_pgtable.c | 6 arch/s390/Kconfig | 1 arch/s390/crypto/arch_random.c | 217 ------------- arch/s390/include/asm/archrandom.h | 14 arch/s390/kernel/setup.c | 5 drivers/acpi/acpi_video.c | 13 drivers/block/xen-blkfront.c | 56 ++- drivers/clocksource/timer-ixp4xx.c | 1 drivers/cpufreq/qoriq-cpufreq.c | 1 drivers/devfreq/event/exynos-ppmu.c | 8 drivers/fsi/fsi-occ.c | 54 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 1 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 drivers/gpu/drm/i915/gem/i915_gem_context.c | 5 drivers/gpu/drm/msm/msm_gem_submit.c | 2 drivers/hwmon/ibmaem.c | 12 drivers/hwmon/occ/common.c | 31 - drivers/hwmon/occ/common.h | 4 drivers/hwmon/occ/p8_i2c.c | 26 - drivers/hwmon/occ/p9_sbe.c | 9 drivers/infiniband/core/cm.c | 4 drivers/infiniband/hw/qedr/qedr.h | 1 drivers/infiniband/hw/qedr/verbs.c | 4 drivers/md/dm-raid.c | 34 +- drivers/md/raid5.c | 1 drivers/net/bonding/bond_3ad.c | 3 drivers/net/bonding/bond_alb.c | 2 drivers/net/caif/caif_virtio.c | 10 drivers/net/dsa/bcm_sf2.c | 5 drivers/net/dsa/hirschmann/hellcreek_ptp.c | 1 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c | 14 drivers/net/ethernet/smsc/epic100.c | 4 drivers/net/phy/ax88796b.c | 6 drivers/net/phy/dp83822.c | 4 drivers/net/phy/phy.c | 23 + drivers/net/phy/phy_device.c | 23 + drivers/net/tun.c | 15 drivers/net/usb/asix.h | 3 drivers/net/usb/asix_common.c | 1 drivers/net/usb/ax88179_178a.c | 101 ++++-- drivers/net/usb/qmi_wwan.c | 1 drivers/net/usb/usbnet.c | 4 drivers/net/virtio_net.c | 8 drivers/net/xen-netfront.c | 56 +++ drivers/nfc/nfcmrvl/i2c.c | 6 drivers/nfc/nfcmrvl/spi.c | 6 drivers/nfc/nxp-nci/i2c.c | 3 drivers/nvdimm/bus.c | 4 drivers/nvme/host/pci.c | 5 drivers/platform/x86/Kconfig | 2 drivers/platform/x86/panasonic-laptop.c | 84 ++++- drivers/vdpa/mlx5/net/mlx5_vnet.c | 2 fs/io_uring.c | 4 fs/ksmbd/smb2pdu.c | 43 +- fs/ksmbd/vfs.c | 12 fs/nfsd/vfs.c | 11 fs/read_write.c | 77 ++-- include/linux/dim.h | 2 include/linux/netdevice.h | 2 include/linux/phy.h | 6 include/uapi/drm/drm_fourcc.h | 4 net/ipv4/ip_tunnel_core.c | 2 net/ipv4/tcp_ipv4.c | 4 net/ipv6/addrconf.c | 8 net/ipv6/route.c | 9 net/ipv6/seg6_hmac.c | 1 net/ipv6/sit.c | 8 net/netfilter/nft_set_hash.c | 2 net/rose/rose_timer.c | 34 +- net/sched/act_api.c | 22 - net/sunrpc/xdr.c | 2 net/tipc/node.c | 41 +- tools/testing/selftests/bpf/test_verifier.c | 28 + tools/testing/selftests/net/mptcp/diag.sh | 48 ++ tools/testing/selftests/net/udpgso_bench.sh | 2 tools/testing/selftests/rseq/Makefile | 2 tools/testing/selftests/rseq/basic_percpu_ops_test.c | 5 tools/testing/selftests/rseq/compiler.h | 30 + tools/testing/selftests/rseq/param_test.c | 8 tools/testing/selftests/rseq/rseq-abi.h | 151 +++++++++ tools/testing/selftests/rseq/rseq-arm.h | 110 +++--- tools/testing/selftests/rseq/rseq-arm64.h | 79 +++- tools/testing/selftests/rseq/rseq-generic-thread-pointer.h | 25 + tools/testing/selftests/rseq/rseq-mips.h | 71 +--- tools/testing/selftests/rseq/rseq-ppc-thread-pointer.h | 30 + tools/testing/selftests/rseq/rseq-ppc.h | 128 +++++-- tools/testing/selftests/rseq/rseq-s390.h | 55 ++- tools/testing/selftests/rseq/rseq-skip.h | 2 tools/testing/selftests/rseq/rseq-thread-pointer.h | 19 + tools/testing/selftests/rseq/rseq-x86-thread-pointer.h | 40 ++ tools/testing/selftests/rseq/rseq-x86.h | 200 ++++++++--- tools/testing/selftests/rseq/rseq.c | 165 ++++----- tools/testing/selftests/rseq/rseq.h | 30 + 102 files changed, 1595 insertions(+), 905 deletions(-) Alex Deucher (1): Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" Alexey Khoroshilov (1): NFSD: restore EINVAL error translation in nfsd_commit() Amir Goldstein (1): vfs: fix copy_file_range() regression in cross-fs copies Aneesh Kumar K.V (1): powerpc/memhotplug: Add add_pages override for PPC Carlos Llamas (1): drm/fourcc: fix integer type usage in uapi header Chris Ye (1): nvdimm: Fix badblocks clear off-by-one error Christophe Leroy (1): powerpc/book3e: Fix PUD allocation size in map_kernel_page() Chuck Lever (1): SUNRPC: Fix READ_PLUS crasher Dan Carpenter (1): net: fix IFF_TX_SKB_NO_LINEAR definition Daniele Palmas (1): net: usb: qmi_wwan: add Telit 0x1070 composition Dimitris Michailidis (1): selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test Doug Berger (1): net: dsa: bcm_sf2: force pause link settings Duoming Zhou (1): net: rose: fix UAF bugs caused by timer handler Eddie James (3): fsi: occ: Force sequence numbering per OCC hwmon: (occ) Remove sequence numbering and checksum calculation hwmon: (occ) Prevent power cap command overwriting poll response Eli Cohen (1): vdpa/mlx5: Update Control VQ callback information Enguerrand de Ribaucourt (2): net: dp83822: disable false carrier interrupt net: dp83822: disable rx error interrupt Eric Dumazet (4): net: bonding: fix possible NULL deref in rlb code tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() ipv6: fix lockdep splat in in6_dump_addrs() tcp: add a missing nf_reset_ct() in 3WHS handling Greg Kroah-Hartman (2): clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() Linux 5.15.53 Hans de Goede (5): ACPI: video: Change how we determine if brightness key-presses are handled platform/x86: panasonic-laptop: sort includes alphabetically platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" platform/x86: panasonic-laptop: don't report duplicate brightness key-presses platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses Heinz Mauelshagen (1): dm raid: fix accesses beyond end of raid member array Jakub Kicinski (3): net: tun: unlink NAPI from device on destruction net: tun: stop NAPI when detaching queues net: tun: avoid disabling NAPI twice Jan Beulich (1): xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() Jason A. Donenfeld (2): ksmbd: use vfs_llseek instead of dereferencing NULL s390/archrandom: simplify back to earlier design and initialize earlier Jason Wang (2): virtio-net: fix race between ndo_open() and virtio_device_ready() caif_virtio: fix race between virtio_device_ready() and ndo_open() Jens Axboe (1): io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio Jose Alonso (1): net: usb: ax88179_178a: Fix packet receiving Kamal Heib (1): RDMA/qedr: Fix reporting QP timeout attribute Krzysztof Kozlowski (1): nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Kumar Kartikeya Dwivedi (1): selftests/bpf: Add test_verifier support to fixup kfunc call insns Lamarque Vieira Souza (1): nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 Leah Rumancik (1): MAINTAINERS: add Leah as xfs maintainer for 5.15.y Liam Howlett (1): powerpc/prom_init: Fix kernel config grep Liang He (2): net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c Lukas Wunner (1): net: phy: Don't trigger state machine while in suspend Masahiro Yamada (1): s390: remove unneeded 'select BUILD_BIN2C' Mathieu Desnoyers (15): selftests/rseq: introduce own copy of rseq uapi header selftests/rseq: Remove useless assignment to cpu variable selftests/rseq: Remove volatile from __rseq_abi selftests/rseq: Introduce rseq_get_abi() helper selftests/rseq: Introduce thread pointer getters selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store selftests/rseq: Fix ppc32 offsets by using long rather than off_t selftests/rseq: Fix warnings about #if checks of undefined tokens selftests/rseq: Remove arm/mips asm goto compiler work-around selftests/rseq: Fix: work-around asm goto compiler bugs selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area selftests/rseq: Change type of rseq_offset to ptrdiff_t Miaoqian Lin (2): RDMA/cm: Fix memory leak in ib_cm_insert_listen PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events Michael Walle (1): NFC: nxp-nci: Don't issue a zero length i2c_master_read() Mikulas Patocka (1): dm raid: fix KASAN warning in raid5_add_disks Namjae Jeon (2): ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA Naveen N. Rao (1): powerpc/bpf: Fix use of user_pt_regs in uapi Nicolas Dichtel (1): ipv6: take care of disable_policy when restoring routes Oleksandr Tyshchenko (1): xen/arm: Fix race in RB-tree based P2M accounting Oleksij Rempel (3): net: usb: asix: do not force pause frames support net: asix: fix "can't send until first packet is send" issue net: phy: ax88772a: fix lost pause advertisement configuration Oliver Neukum (1): usbnet: fix memory allocation in helpers Pablo Greco (1): nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) Pablo Neira Ayuso (1): netfilter: nft_dynset: restore set element counter when failing to update Paolo Abeni (1): selftests: mptcp: more stable diag tests Petr Machata (1): mlxsw: spectrum_router: Fix rollback in tunnel next hop init Rob Clark (1): drm/msm/gem: Fix error return on fence id alloc fail Roger Pau Monne (4): xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted Ruili Ji (1): drm/amdgpu: To flush tlb for MMHUB of RAVEN series Shuah Khan (1): selftests/rseq: remove ARRAY_SIZE define from individual tests Stefan Seyfried (1): platform/x86: panasonic-laptop: de-obfuscate button codes Tao Liu (1): linux/dim: Fix divide by 0 in RDMA DIM Tong Zhang (1): epic100: fix use after free on rmmod Victor Nogueira (1): net/sched: act_api: Notify user space if any actions were flushed before error Xin Long (1): tipc: move bc link creation back to tipc_node_create Yang Yingliang (1): hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Yevhen Orlov (1): net: bonding: fix use-after-free after 802.3ad slave unbind YueHaibing (1): net: ipv6: unexport __init-annotated seg6_hmac_net_init() katrinzhou (2): ipv6/sit: fix ipip6_tunnel_get_prl return value drm/i915/gem: add missing else

2 years, 6 months

1
1
0 0

Linux 5.10.129

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.129 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/xen/p2m.c | 6 arch/powerpc/include/asm/bpf_perf_event.h | 9 arch/powerpc/include/uapi/asm/bpf_perf_event.h | 9 arch/powerpc/kernel/prom_init_check.sh | 2 arch/powerpc/mm/nohash/book3e_pgtable.c | 6 arch/s390/Kconfig | 1 arch/s390/crypto/arch_random.c | 111 ------- arch/s390/include/asm/archrandom.h | 13 arch/s390/kernel/setup.c | 5 drivers/block/xen-blkfront.c | 56 ++- drivers/clocksource/timer-ixp4xx.c | 1 drivers/cpufreq/qoriq-cpufreq.c | 1 drivers/devfreq/event/exynos-ppmu.c | 8 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 3 drivers/hwmon/ibmaem.c | 12 drivers/infiniband/core/cm.c | 4 drivers/infiniband/hw/qedr/qedr.h | 1 drivers/infiniband/hw/qedr/verbs.c | 4 drivers/md/dm-raid.c | 34 +- drivers/md/raid5.c | 1 drivers/net/bonding/bond_3ad.c | 3 drivers/net/bonding/bond_alb.c | 2 drivers/net/caif/caif_virtio.c | 10 drivers/net/dsa/bcm_sf2.c | 5 drivers/net/ethernet/smsc/epic100.c | 4 drivers/net/phy/dp83822.c | 4 drivers/net/tun.c | 15 drivers/net/usb/ax88179_178a.c | 101 ++++-- drivers/net/usb/qmi_wwan.c | 2 drivers/net/usb/usbnet.c | 4 drivers/net/virtio_net.c | 8 drivers/net/xen-netfront.c | 56 +++ drivers/nfc/nfcmrvl/i2c.c | 6 drivers/nfc/nfcmrvl/spi.c | 6 drivers/nfc/nxp-nci/i2c.c | 3 drivers/nvdimm/bus.c | 4 drivers/nvme/host/pci.c | 3 drivers/xen/gntdev-common.h | 7 drivers/xen/gntdev.c | 140 ++++++--- fs/io_uring.c | 4 fs/iomap/buffered-io.c | 7 fs/nfsd/vfs.c | 3 fs/xfs/libxfs/xfs_btree.c | 12 fs/xfs/libxfs/xfs_sb.c | 16 - fs/xfs/xfs_aops.c | 17 - fs/xfs/xfs_error.c | 2 fs/xfs/xfs_reflink.c | 3 fs/xfs/xfs_super.c | 120 ++++--- fs/xfs/xfs_trans.c | 23 - fs/xfs/xfs_trans.h | 30 + include/linux/dim.h | 2 net/ipv4/ip_tunnel_core.c | 2 net/ipv4/tcp_ipv4.c | 4 net/ipv6/addrconf.c | 4 net/ipv6/route.c | 9 net/ipv6/seg6_hmac.c | 1 net/ipv6/sit.c | 10 net/netfilter/nft_set_hash.c | 2 net/rose/rose_timer.c | 34 +- net/sched/act_api.c | 22 - net/sunrpc/xdr.c | 2 net/tipc/node.c | 41 +- tools/testing/selftests/net/udpgso_bench.sh | 2 tools/testing/selftests/rseq/Makefile | 2 tools/testing/selftests/rseq/basic_percpu_ops_test.c | 5 tools/testing/selftests/rseq/compiler.h | 30 + tools/testing/selftests/rseq/param_test.c | 8 tools/testing/selftests/rseq/rseq-abi.h | 151 +++++++++ tools/testing/selftests/rseq/rseq-arm.h | 110 +++---- tools/testing/selftests/rseq/rseq-arm64.h | 79 +++-- tools/testing/selftests/rseq/rseq-generic-thread-pointer.h | 25 + tools/testing/selftests/rseq/rseq-mips.h | 71 +--- tools/testing/selftests/rseq/rseq-ppc-thread-pointer.h | 30 + tools/testing/selftests/rseq/rseq-ppc.h | 128 +++++--- tools/testing/selftests/rseq/rseq-s390.h | 55 ++- tools/testing/selftests/rseq/rseq-skip.h | 2 tools/testing/selftests/rseq/rseq-thread-pointer.h | 19 + tools/testing/selftests/rseq/rseq-x86-thread-pointer.h | 40 ++ tools/testing/selftests/rseq/rseq-x86.h | 200 ++++++++----- tools/testing/selftests/rseq/rseq.c | 165 +++++----- tools/testing/selftests/rseq/rseq.h | 30 + 82 files changed, 1426 insertions(+), 768 deletions(-) Alexey Khoroshilov (1): NFSD: restore EINVAL error translation in nfsd_commit() Anthony Iliopoulos (1): xfs: fix xfs_trans slab cache name Carlo Lobrano (1): net: usb: qmi_wwan: add Telit 0x1060 composition Chris Ye (1): nvdimm: Fix badblocks clear off-by-one error Christophe Leroy (1): powerpc/book3e: Fix PUD allocation size in map_kernel_page() Chuck Lever (1): SUNRPC: Fix READ_PLUS crasher Daniele Palmas (1): net: usb: qmi_wwan: add Telit 0x1070 composition Darrick J. Wong (1): xfs: fix xfs_reflink_unshare usage of filemap_write_and_wait_range Dave Chinner (2): xfs: use current->journal_info for detecting transaction recursion xfs: update superblock counters correctly for !lazysbcount Demi Marie Obenour (1): xen/gntdev: Avoid blocking in unmap_grant_pages() Dimitris Michailidis (1): selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test Doug Berger (1): net: dsa: bcm_sf2: force pause link settings Duoming Zhou (1): net: rose: fix UAF bugs caused by timer handler Enguerrand de Ribaucourt (2): net: dp83822: disable false carrier interrupt net: dp83822: disable rx error interrupt Eric Dumazet (3): net: bonding: fix possible NULL deref in rlb code tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() tcp: add a missing nf_reset_ct() in 3WHS handling Gao Xiang (1): xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX Greg Kroah-Hartman (2): clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() Linux 5.10.129 Heinz Mauelshagen (1): dm raid: fix accesses beyond end of raid member array Jakub Kicinski (3): net: tun: unlink NAPI from device on destruction net: tun: stop NAPI when detaching queues net: tun: avoid disabling NAPI twice Jan Beulich (1): xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() Jason A. Donenfeld (1): s390/archrandom: simplify back to earlier design and initialize earlier Jason Wang (2): virtio-net: fix race between ndo_open() and virtio_device_ready() caif_virtio: fix race between virtio_device_ready() and ndo_open() Jens Axboe (1): io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio Jose Alonso (1): net: usb: ax88179_178a: Fix packet receiving Kamal Heib (1): RDMA/qedr: Fix reporting QP timeout attribute Krzysztof Kozlowski (1): nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Liam Howlett (1): powerpc/prom_init: Fix kernel config grep Liang He (1): drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c Masahiro Yamada (1): s390: remove unneeded 'select BUILD_BIN2C' Mathieu Desnoyers (15): selftests/rseq: introduce own copy of rseq uapi header selftests/rseq: Remove useless assignment to cpu variable selftests/rseq: Remove volatile from __rseq_abi selftests/rseq: Introduce rseq_get_abi() helper selftests/rseq: Introduce thread pointer getters selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store selftests/rseq: Fix ppc32 offsets by using long rather than off_t selftests/rseq: Fix warnings about #if checks of undefined tokens selftests/rseq: Remove arm/mips asm goto compiler work-around selftests/rseq: Fix: work-around asm goto compiler bugs selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area selftests/rseq: Change type of rseq_offset to ptrdiff_t Miaoqian Lin (2): RDMA/cm: Fix memory leak in ib_cm_insert_listen PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events Michael Walle (1): NFC: nxp-nci: Don't issue a zero length i2c_master_read() Mikulas Patocka (1): dm raid: fix KASAN warning in raid5_add_disks Naveen N. Rao (1): powerpc/bpf: Fix use of user_pt_regs in uapi Nicolas Dichtel (1): ipv6: take care of disable_policy when restoring routes Oleksandr Tyshchenko (1): xen/arm: Fix race in RB-tree based P2M accounting Oliver Neukum (1): usbnet: fix memory allocation in helpers Pablo Greco (1): nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) Pablo Neira Ayuso (1): netfilter: nft_dynset: restore set element counter when failing to update Pavel Reichl (2): xfs: rename variable mp to parsing_mp xfs: Skip repetitive warnings about mount options Roger Pau Monne (4): xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted Ruili Ji (1): drm/amdgpu: To flush tlb for MMHUB of RAVEN series Shuah Khan (1): selftests/rseq: remove ARRAY_SIZE define from individual tests Tao Liu (1): linux/dim: Fix divide by 0 in RDMA DIM Tong Zhang (1): epic100: fix use after free on rmmod Victor Nogueira (1): net/sched: act_api: Notify user space if any actions were flushed before error Xin Long (1): tipc: move bc link creation back to tipc_node_create Yang Yingliang (1): hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Yevhen Orlov (1): net: bonding: fix use-after-free after 802.3ad slave unbind YueHaibing (1): net: ipv6: unexport __init-annotated seg6_hmac_net_init() katrinzhou (1): ipv6/sit: fix ipip6_tunnel_get_prl return value kernel test robot (1): sit: use min

2 years, 6 months

1
1
0 0

Linux 5.4.204

by Greg Kroah-Hartman

I'm announcing the release of the 5.4.204 kernel. All users of the 5.4 kernel series must upgrade. The updated 5.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/xen/p2m.c | 6 arch/powerpc/include/asm/bpf_perf_event.h | 9 arch/powerpc/include/uapi/asm/bpf_perf_event.h | 9 arch/powerpc/kernel/prom_init_check.sh | 2 arch/s390/Kconfig | 1 arch/s390/crypto/arch_random.c | 111 ----- arch/s390/include/asm/archrandom.h | 21 - arch/s390/kernel/setup.c | 5 drivers/block/xen-blkfront.c | 56 ++ drivers/clocksource/timer-ixp4xx.c | 1 drivers/devfreq/event/exynos-ppmu.c | 8 drivers/hwmon/ibmaem.c | 12 drivers/infiniband/hw/qedr/qedr.h | 1 drivers/infiniband/hw/qedr/verbs.c | 4 drivers/md/dm-raid.c | 34 - drivers/md/raid5.c | 1 drivers/net/bonding/bond_3ad.c | 3 drivers/net/bonding/bond_alb.c | 2 drivers/net/caif/caif_virtio.c | 10 drivers/net/dsa/bcm_sf2.c | 5 drivers/net/tun.c | 15 drivers/net/usb/ax88179_178a.c | 101 ++++- drivers/net/usb/qmi_wwan.c | 2 drivers/net/usb/usbnet.c | 4 drivers/net/virtio_net.c | 8 drivers/net/xen-netfront.c | 52 ++ drivers/nfc/nfcmrvl/i2c.c | 6 drivers/nfc/nfcmrvl/spi.c | 6 drivers/nfc/nxp-nci/i2c.c | 3 drivers/nvdimm/bus.c | 4 drivers/xen/gntdev-common.h | 8 drivers/xen/gntdev.c | 147 +++++-- include/linux/dim.h | 2 net/ipv6/addrconf.c | 4 net/ipv6/route.c | 9 net/ipv6/seg6_hmac.c | 1 net/ipv6/sit.c | 10 net/netfilter/nft_set_hash.c | 2 net/rose/rose_timer.c | 34 + net/sched/act_api.c | 22 - net/sunrpc/xdr.c | 2 tools/testing/selftests/net/udpgso_bench.sh | 2 tools/testing/selftests/rseq/Makefile | 2 tools/testing/selftests/rseq/basic_percpu_ops_test.c | 5 tools/testing/selftests/rseq/compiler.h | 30 + tools/testing/selftests/rseq/param_test.c | 8 tools/testing/selftests/rseq/rseq-abi.h | 151 +++++++ tools/testing/selftests/rseq/rseq-arm.h | 110 ++--- tools/testing/selftests/rseq/rseq-arm64.h | 79 ++-- tools/testing/selftests/rseq/rseq-generic-thread-pointer.h | 25 + tools/testing/selftests/rseq/rseq-mips.h | 71 --- tools/testing/selftests/rseq/rseq-ppc-thread-pointer.h | 30 + tools/testing/selftests/rseq/rseq-ppc.h | 128 ++++-- tools/testing/selftests/rseq/rseq-s390.h | 55 ++ tools/testing/selftests/rseq/rseq-skip.h | 2 tools/testing/selftests/rseq/rseq-thread-pointer.h | 19 + tools/testing/selftests/rseq/rseq-x86-thread-pointer.h | 40 ++ tools/testing/selftests/rseq/rseq-x86.h | 247 +++++++++---- tools/testing/selftests/rseq/rseq.c | 165 ++++---- tools/testing/selftests/rseq/rseq.h | 30 + 61 files changed, 1289 insertions(+), 655 deletions(-) Carlo Lobrano (1): net: usb: qmi_wwan: add Telit 0x1060 composition Chris Ye (1): nvdimm: Fix badblocks clear off-by-one error Chuck Lever (1): SUNRPC: Fix READ_PLUS crasher Daniele Palmas (1): net: usb: qmi_wwan: add Telit 0x1070 composition Demi Marie Obenour (1): xen/gntdev: Avoid blocking in unmap_grant_pages() Dimitris Michailidis (1): selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test Doug Berger (1): net: dsa: bcm_sf2: force pause link settings Duoming Zhou (1): net: rose: fix UAF bugs caused by timer handler Eric Dumazet (1): net: bonding: fix possible NULL deref in rlb code Greg Kroah-Hartman (2): clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() Linux 5.4.204 Heinz Mauelshagen (1): dm raid: fix accesses beyond end of raid member array Jakub Kicinski (3): net: tun: unlink NAPI from device on destruction net: tun: stop NAPI when detaching queues net: tun: avoid disabling NAPI twice Jason A. Donenfeld (1): s390/archrandom: simplify back to earlier design and initialize earlier Jason Wang (2): virtio-net: fix race between ndo_open() and virtio_device_ready() caif_virtio: fix race between virtio_device_ready() and ndo_open() Jose Alonso (1): net: usb: ax88179_178a: Fix packet receiving Kamal Heib (1): RDMA/qedr: Fix reporting QP timeout attribute Krzysztof Kozlowski (1): nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Liam Howlett (1): powerpc/prom_init: Fix kernel config grep Masahiro Yamada (1): s390: remove unneeded 'select BUILD_BIN2C' Mathieu Desnoyers (15): selftests/rseq: introduce own copy of rseq uapi header selftests/rseq: Remove useless assignment to cpu variable selftests/rseq: Remove volatile from __rseq_abi selftests/rseq: Introduce rseq_get_abi() helper selftests/rseq: Introduce thread pointer getters selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store selftests/rseq: Fix ppc32 offsets by using long rather than off_t selftests/rseq: Fix warnings about #if checks of undefined tokens selftests/rseq: Remove arm/mips asm goto compiler work-around selftests/rseq: Fix: work-around asm goto compiler bugs selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area selftests/rseq: Change type of rseq_offset to ptrdiff_t Miaoqian Lin (1): PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events Michael Walle (1): NFC: nxp-nci: Don't issue a zero length i2c_master_read() Mikulas Patocka (1): dm raid: fix KASAN warning in raid5_add_disks Naveen N. Rao (1): powerpc/bpf: Fix use of user_pt_regs in uapi Nicolas Dichtel (1): ipv6: take care of disable_policy when restoring routes Oleksandr Tyshchenko (1): xen/arm: Fix race in RB-tree based P2M accounting Oliver Neukum (1): usbnet: fix memory allocation in helpers Pablo Neira Ayuso (1): netfilter: nft_dynset: restore set element counter when failing to update Peter Oskolkov (1): rseq/selftests,x86_64: Add rseq_offset_deref_addv() Roger Pau Monne (4): xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted Shuah Khan (1): selftests/rseq: remove ARRAY_SIZE define from individual tests Tao Liu (1): linux/dim: Fix divide by 0 in RDMA DIM Victor Nogueira (1): net/sched: act_api: Notify user space if any actions were flushed before error Yang Yingliang (1): hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Yevhen Orlov (1): net: bonding: fix use-after-free after 802.3ad slave unbind YueHaibing (1): net: ipv6: unexport __init-annotated seg6_hmac_net_init() katrinzhou (1): ipv6/sit: fix ipip6_tunnel_get_prl return value kernel test robot (1): sit: use min

2 years, 6 months

1
1
0 0

Linux 4.19.251

by Greg Kroah-Hartman

I'm announcing the release of the 4.19.251 kernel. All users of the 4.19 kernel series must upgrade. The updated 4.19.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/xen/p2m.c | 6 - arch/s390/crypto/arch_random.c | 111 --------------------- arch/s390/include/asm/archrandom.h | 21 ++-- arch/s390/kernel/setup.c | 5 drivers/block/xen-blkfront.c | 56 +++++++--- drivers/hwmon/ibmaem.c | 12 +- drivers/infiniband/hw/qedr/qedr.h | 1 drivers/infiniband/hw/qedr/verbs.c | 4 drivers/md/dm-raid.c | 34 +++--- drivers/md/raid5.c | 1 drivers/net/bonding/bond_3ad.c | 3 drivers/net/bonding/bond_alb.c | 2 drivers/net/caif/caif_virtio.c | 10 + drivers/net/dsa/bcm_sf2.c | 5 drivers/net/tun.c | 15 ++ drivers/net/usb/ax88179_178a.c | 101 ++++++++++++++----- drivers/net/usb/qmi_wwan.c | 2 drivers/net/usb/usbnet.c | 4 drivers/net/virtio_net.c | 8 + drivers/net/xen-netfront.c | 52 +++++++++ drivers/nfc/nfcmrvl/i2c.c | 6 - drivers/nfc/nfcmrvl/spi.c | 6 - drivers/nfc/nxp-nci/i2c.c | 3 drivers/nvdimm/bus.c | 4 drivers/xen/gntdev-common.h | 8 + drivers/xen/gntdev.c | 146 +++++++++++++++++++--------- net/ipv6/seg6_hmac.c | 1 net/ipv6/sit.c | 10 - net/netfilter/nft_set_hash.c | 2 net/rose/rose_timer.c | 34 +++--- net/sunrpc/xdr.c | 2 tools/testing/selftests/net/udpgso_bench.sh | 2 33 files changed, 405 insertions(+), 274 deletions(-) Carlo Lobrano (1): net: usb: qmi_wwan: add Telit 0x1060 composition Chris Ye (1): nvdimm: Fix badblocks clear off-by-one error Chuck Lever (1): SUNRPC: Fix READ_PLUS crasher Daniele Palmas (1): net: usb: qmi_wwan: add Telit 0x1070 composition Demi Marie Obenour (1): xen/gntdev: Avoid blocking in unmap_grant_pages() Dimitris Michailidis (1): selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test Doug Berger (1): net: dsa: bcm_sf2: force pause link settings Duoming Zhou (1): net: rose: fix UAF bugs caused by timer handler Eric Dumazet (1): net: bonding: fix possible NULL deref in rlb code Greg Kroah-Hartman (1): Linux 4.19.251 Heinz Mauelshagen (1): dm raid: fix accesses beyond end of raid member array Jakub Kicinski (3): net: tun: unlink NAPI from device on destruction net: tun: stop NAPI when detaching queues net: tun: avoid disabling NAPI twice Jason A. Donenfeld (1): s390/archrandom: simplify back to earlier design and initialize earlier Jason Wang (2): virtio-net: fix race between ndo_open() and virtio_device_ready() caif_virtio: fix race between virtio_device_ready() and ndo_open() Jose Alonso (1): net: usb: ax88179_178a: Fix packet receiving Kamal Heib (1): RDMA/qedr: Fix reporting QP timeout attribute Krzysztof Kozlowski (1): nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Michael Walle (1): NFC: nxp-nci: Don't issue a zero length i2c_master_read() Mikulas Patocka (1): dm raid: fix KASAN warning in raid5_add_disks Oleksandr Tyshchenko (1): xen/arm: Fix race in RB-tree based P2M accounting Oliver Neukum (1): usbnet: fix memory allocation in helpers Pablo Neira Ayuso (1): netfilter: nft_dynset: restore set element counter when failing to update Roger Pau Monne (4): xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted Yang Yingliang (1): hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Yevhen Orlov (1): net: bonding: fix use-after-free after 802.3ad slave unbind YueHaibing (1): net: ipv6: unexport __init-annotated seg6_hmac_net_init() katrinzhou (1): ipv6/sit: fix ipip6_tunnel_get_prl return value kernel test robot (1): sit: use min

2 years, 6 months

1
1
0 0

Linux 4.14.287

by Greg Kroah-Hartman

I'm announcing the release of the 4.14.287 kernel. All users of the 4.14 kernel series must upgrade. The updated 4.14.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.14.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/xen/p2m.c | 6 + arch/s390/crypto/arch_random.c | 20 ----- arch/s390/include/asm/archrandom.h | 32 +++----- arch/s390/kernel/setup.c | 5 + drivers/block/xen-blkfront.c | 49 +++++++----- drivers/hwmon/ibmaem.c | 12 ++- drivers/infiniband/hw/qedr/qedr.h | 1 drivers/infiniband/hw/qedr/verbs.c | 4 - drivers/md/dm-raid.c | 34 ++++---- drivers/md/raid5.c | 1 drivers/net/bonding/bond_3ad.c | 3 drivers/net/bonding/bond_alb.c | 2 drivers/net/caif/caif_virtio.c | 10 ++ drivers/net/usb/ax88179_178a.c | 101 +++++++++++++++++++------ drivers/net/usb/qmi_wwan.c | 2 drivers/net/usb/usbnet.c | 4 - drivers/net/xen-netfront.c | 52 ++++++++++++- drivers/nfc/nfcmrvl/i2c.c | 6 - drivers/nfc/nfcmrvl/spi.c | 6 - drivers/nfc/nxp-nci/i2c.c | 3 drivers/nvdimm/bus.c | 4 - drivers/xen/gntdev.c | 145 ++++++++++++++++++++++++++----------- include/linux/skbuff.h | 1 net/core/skbuff.c | 9 +- net/ipv6/seg6_hmac.c | 1 net/ipv6/sit.c | 10 +- net/netfilter/nft_set_hash.c | 2 net/rose/rose_timer.c | 34 ++++---- net/sunrpc/xdr.c | 2 30 files changed, 376 insertions(+), 187 deletions(-) Carlo Lobrano (1): net: usb: qmi_wwan: add Telit 0x1060 composition Chris Ye (1): nvdimm: Fix badblocks clear off-by-one error Chuck Lever (1): SUNRPC: Fix READ_PLUS crasher Daniele Palmas (1): net: usb: qmi_wwan: add Telit 0x1070 composition Demi Marie Obenour (1): xen/gntdev: Avoid blocking in unmap_grant_pages() Duoming Zhou (1): net: rose: fix UAF bugs caused by timer handler Eric Dumazet (1): net: bonding: fix possible NULL deref in rlb code Greg Kroah-Hartman (1): Linux 4.14.287 Heinz Mauelshagen (1): dm raid: fix accesses beyond end of raid member array Ilya Lesokhin (1): net: Rename and export copy_skb_header Jason A. Donenfeld (1): s390/archrandom: simplify back to earlier design and initialize earlier Jason Wang (1): caif_virtio: fix race between virtio_device_ready() and ndo_open() Jose Alonso (1): net: usb: ax88179_178a: Fix packet receiving Kamal Heib (1): RDMA/qedr: Fix reporting QP timeout attribute Krzysztof Kozlowski (1): nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Michael Walle (1): NFC: nxp-nci: Don't issue a zero length i2c_master_read() Mikulas Patocka (1): dm raid: fix KASAN warning in raid5_add_disks Oleksandr Tyshchenko (1): xen/arm: Fix race in RB-tree based P2M accounting Oliver Neukum (1): usbnet: fix memory allocation in helpers Pablo Neira Ayuso (1): netfilter: nft_dynset: restore set element counter when failing to update Roger Pau Monne (4): xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted Yang Yingliang (1): hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Yevhen Orlov (1): net: bonding: fix use-after-free after 802.3ad slave unbind YueHaibing (1): net: ipv6: unexport __init-annotated seg6_hmac_net_init() katrinzhou (1): ipv6/sit: fix ipip6_tunnel_get_prl return value kernel test robot (1): sit: use min

2 years, 6 months

1
1
0 0

Linux 4.9.322

by Greg Kroah-Hartman

I'm announcing the release of the 4.9.322 kernel. All users of the 4.9 kernel series must upgrade. The updated 4.9.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.9.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/xen/p2m.c | 6 - arch/powerpc/include/asm/ppc-opcode.h | 4 arch/powerpc/platforms/powernv/powernv.h | 2 arch/powerpc/platforms/powernv/rng.c | 91 ++++++++++++++++--- arch/powerpc/platforms/powernv/setup.c | 2 drivers/block/xen-blkfront.c | 52 +++++++---- drivers/hwmon/ibmaem.c | 12 +- drivers/md/raid5.c | 1 drivers/net/bonding/bond_3ad.c | 3 drivers/net/bonding/bond_alb.c | 2 drivers/net/caif/caif_virtio.c | 10 +- drivers/net/usb/ax88179_178a.c | 101 ++++++++++++++++----- drivers/net/usb/qmi_wwan.c | 6 + drivers/net/usb/usbnet.c | 23 +++- drivers/net/xen-netfront.c | 55 +++++++++++ drivers/nfc/nfcmrvl/i2c.c | 6 - drivers/nfc/nfcmrvl/spi.c | 6 - drivers/nfc/nxp-nci/i2c.c | 3 drivers/xen/gntdev.c | 144 +++++++++++++++++++++---------- include/linux/skbuff.h | 1 net/core/skbuff.c | 9 + net/ipv6/sit.c | 10 -- net/netfilter/nft_set_hash.c | 2 net/rose/rose_timer.c | 34 ++++--- net/sunrpc/xdr.c | 2 26 files changed, 439 insertions(+), 150 deletions(-) Carlo Lobrano (1): net: usb: qmi_wwan: add Telit 0x1060 composition Chuck Lever (1): SUNRPC: Fix READ_PLUS crasher Daniele Palmas (3): net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition net: usb: qmi_wwan: add Telit 0x1070 composition Demi Marie Obenour (1): xen/gntdev: Avoid blocking in unmap_grant_pages() Duoming Zhou (1): net: rose: fix UAF bugs caused by timer handler Eric Dumazet (1): net: bonding: fix possible NULL deref in rlb code Greg Kroah-Hartman (1): Linux 4.9.322 Ilya Lesokhin (1): net: Rename and export copy_skb_header Jason A. Donenfeld (1): powerpc/powernv: wire up rng during setup_arch Jason Wang (1): caif_virtio: fix race between virtio_device_ready() and ndo_open() Jose Alonso (1): net: usb: ax88179_178a: Fix packet receiving Jörgen Storvist (1): qmi_wwan: Added support for Telit LN940 series Krzysztof Kozlowski (1): nfc: nfcmrvl: Fix irq_of_parse_and_map() return value Michael Walle (1): NFC: nxp-nci: Don't issue a zero length i2c_master_read() Mikulas Patocka (1): dm raid: fix KASAN warning in raid5_add_disks Oleksandr Tyshchenko (1): xen/arm: Fix race in RB-tree based P2M accounting Oliver Neukum (2): usbnet: make sure no NULL pointer is passed through usbnet: fix memory allocation in helpers Pablo Neira Ayuso (1): netfilter: nft_dynset: restore set element counter when failing to update Roger Pau Monne (4): xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted Yang Yingliang (1): hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Yevhen Orlov (1): net: bonding: fix use-after-free after 802.3ad slave unbind katrinzhou (1): ipv6/sit: fix ipip6_tunnel_get_prl return value kernel test robot (1): sit: use min

2 years, 6 months

1
1
0 0

[PATCH 5.10-stable 5.4-stable 4.19-stable 4.14-stable] mm/slub: add missing TID updates on slab deactivation

by Vlastimil Babka

From: Jann Horn <jannh(a)google.com> commit eeaa345e128515135ccb864c04482180c08e3259 upstream. The fastpath in slab_alloc_node() assumes that c->slab is stable as long as the TID stays the same. However, two places in __slab_alloc() currently don't update the TID when deactivating the CPU slab. If multiple operations race the right way, this could lead to an object getting lost; or, in an even more unlikely situation, it could even lead to an object being freed onto the wrong slab's freelist, messing up the `inuse` counter and eventually causing a page to be freed to the page allocator while it still contains slab objects. (I haven't actually tested these cases though, this is just based on looking at the code. Writing testcases for this stuff seems like it'd be a pain...) The race leading to state inconsistency is (all operations on the same CPU and kmem_cache): - task A: begin do_slab_free(): - read TID - read pcpu freelist (==NULL) - check `slab == c->slab` (true) - [PREEMPT A->B] - task B: begin slab_alloc_node(): - fastpath fails (`c->freelist` is NULL) - enter __slab_alloc() - slub_get_cpu_ptr() (disables preemption) - enter ___slab_alloc() - take local_lock_irqsave() - read c->freelist as NULL - get_freelist() returns NULL - write `c->slab = NULL` - drop local_unlock_irqrestore() - goto new_slab - slub_percpu_partial() is NULL - get_partial() returns NULL - slub_put_cpu_ptr() (enables preemption) - [PREEMPT B->A] - task A: finish do_slab_free(): - this_cpu_cmpxchg_double() succeeds() - [CORRUPT STATE: c->slab==NULL, c->freelist!=NULL] From there, the object on c->freelist will get lost if task B is allowed to continue from here: It will proceed to the retry_load_slab label, set c->slab, then jump to load_freelist, which clobbers c->freelist. But if we instead continue as follows, we get worse corruption: - task A: run __slab_free() on object from other struct slab: - CPU_PARTIAL_FREE case (slab was on no list, is now on pcpu partial) - task A: run slab_alloc_node() with NUMA node constraint: - fastpath fails (c->slab is NULL) - call __slab_alloc() - slub_get_cpu_ptr() (disables preemption) - enter ___slab_alloc() - c->slab is NULL: goto new_slab - slub_percpu_partial() is non-NULL - set c->slab to slub_percpu_partial(c) - [CORRUPT STATE: c->slab points to slab-1, c->freelist has objects from slab-2] - goto redo - node_match() fails - goto deactivate_slab - existing c->freelist is passed into deactivate_slab() - inuse count of slab-1 is decremented to account for object from slab-2 At this point, the inuse count of slab-1 is 1 lower than it should be. This means that if we free all allocated objects in slab-1 except for one, SLUB will think that slab-1 is completely unused, and may free its page, leading to use-after-free. Fixes: c17dda40a6a4e ("slub: Separate out kmem_cache_cpu processing from deactivate_slab") Fixes: 03e404af26dc2 ("slub: fast release on full slab") Cc: stable(a)vger.kernel.org Signed-off-by: Jann Horn <jannh(a)google.com> Acked-by: Christoph Lameter <cl(a)linux.com> Acked-by: David Rientjes <rientjes(a)google.com> Reviewed-by: Muchun Song <songmuchun(a)bytedance.com> Tested-by: Hyeonggon Yoo <42.hyeyoo(a)gmail.com> Signed-off-by: Vlastimil Babka <vbabka(a)suse.cz> Link: https://lore.kernel.org/r/20220608182205.2945720-1-jannh@google.com --- mm/slub.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mm/slub.c b/mm/slub.c index 1384dc906833..b395ef064544 100644 --- a/mm/slub.c +++ b/mm/slub.c @@ -2297,6 +2297,7 @@ static void deactivate_slab(struct kmem_cache *s, struct page *page, c->page = NULL; c->freelist = NULL; + c->tid = next_tid(c->tid); } /* @@ -2430,8 +2431,6 @@ static inline void flush_slab(struct kmem_cache *s, struct kmem_cache_cpu *c) { stat(s, CPUSLAB_FLUSH); deactivate_slab(s, c->page, c->freelist, c); - - c->tid = next_tid(c->tid); } /* @@ -2717,6 +2716,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node, if (!freelist) { c->page = NULL; + c->tid = next_tid(c->tid); stat(s, DEACTIVATE_BYPASS); goto new_slab; } -- 2.36.1

2 years, 6 months

1
0
0 0

[PATCH 5.15-stable] mm/slub: add missing TID updates on slab deactivation

by Vlastimil Babka

From: Jann Horn <jannh(a)google.com> commit eeaa345e128515135ccb864c04482180c08e3259 upstream. The fastpath in slab_alloc_node() assumes that c->slab is stable as long as the TID stays the same. However, two places in __slab_alloc() currently don't update the TID when deactivating the CPU slab. If multiple operations race the right way, this could lead to an object getting lost; or, in an even more unlikely situation, it could even lead to an object being freed onto the wrong slab's freelist, messing up the `inuse` counter and eventually causing a page to be freed to the page allocator while it still contains slab objects. (I haven't actually tested these cases though, this is just based on looking at the code. Writing testcases for this stuff seems like it'd be a pain...) The race leading to state inconsistency is (all operations on the same CPU and kmem_cache): - task A: begin do_slab_free(): - read TID - read pcpu freelist (==NULL) - check `slab == c->slab` (true) - [PREEMPT A->B] - task B: begin slab_alloc_node(): - fastpath fails (`c->freelist` is NULL) - enter __slab_alloc() - slub_get_cpu_ptr() (disables preemption) - enter ___slab_alloc() - take local_lock_irqsave() - read c->freelist as NULL - get_freelist() returns NULL - write `c->slab = NULL` - drop local_unlock_irqrestore() - goto new_slab - slub_percpu_partial() is NULL - get_partial() returns NULL - slub_put_cpu_ptr() (enables preemption) - [PREEMPT B->A] - task A: finish do_slab_free(): - this_cpu_cmpxchg_double() succeeds() - [CORRUPT STATE: c->slab==NULL, c->freelist!=NULL] From there, the object on c->freelist will get lost if task B is allowed to continue from here: It will proceed to the retry_load_slab label, set c->slab, then jump to load_freelist, which clobbers c->freelist. But if we instead continue as follows, we get worse corruption: - task A: run __slab_free() on object from other struct slab: - CPU_PARTIAL_FREE case (slab was on no list, is now on pcpu partial) - task A: run slab_alloc_node() with NUMA node constraint: - fastpath fails (c->slab is NULL) - call __slab_alloc() - slub_get_cpu_ptr() (disables preemption) - enter ___slab_alloc() - c->slab is NULL: goto new_slab - slub_percpu_partial() is non-NULL - set c->slab to slub_percpu_partial(c) - [CORRUPT STATE: c->slab points to slab-1, c->freelist has objects from slab-2] - goto redo - node_match() fails - goto deactivate_slab - existing c->freelist is passed into deactivate_slab() - inuse count of slab-1 is decremented to account for object from slab-2 At this point, the inuse count of slab-1 is 1 lower than it should be. This means that if we free all allocated objects in slab-1 except for one, SLUB will think that slab-1 is completely unused, and may free its page, leading to use-after-free. Fixes: c17dda40a6a4e ("slub: Separate out kmem_cache_cpu processing from deactivate_slab") Fixes: 03e404af26dc2 ("slub: fast release on full slab") Cc: stable(a)vger.kernel.org Signed-off-by: Jann Horn <jannh(a)google.com> Acked-by: Christoph Lameter <cl(a)linux.com> Acked-by: David Rientjes <rientjes(a)google.com> Reviewed-by: Muchun Song <songmuchun(a)bytedance.com> Tested-by: Hyeonggon Yoo <42.hyeyoo(a)gmail.com> Signed-off-by: Vlastimil Babka <vbabka(a)suse.cz> Link: https://lore.kernel.org/r/20220608182205.2945720-1-jannh@google.com --- mm/slub.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/mm/slub.c b/mm/slub.c index b75eebc0350e..519bbbad7b2f 100644 --- a/mm/slub.c +++ b/mm/slub.c @@ -2935,6 +2935,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node, if (!freelist) { c->page = NULL; + c->tid = next_tid(c->tid); local_unlock_irqrestore(&s->cpu_slab->lock, flags); stat(s, DEACTIVATE_BYPASS); goto new_slab; @@ -2967,6 +2968,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node, freelist = c->freelist; c->page = NULL; c->freelist = NULL; + c->tid = next_tid(c->tid); local_unlock_irqrestore(&s->cpu_slab->lock, flags); deactivate_slab(s, page, freelist); -- 2.36.1

2 years, 6 months

1
0
0 0

Good Morning

by Martin Derick

-- Dear Friend, I and my committee members have a need for an individual/ company. Who is willing to partner with us, in having some funds procured overseas. I will send more details, on the project. As soon as I receive your reply. Best Regards, Martin Derick.

2 years, 6 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror July 2022