July 2022 - Linux-stable-mirror

[PATCH 5.10 000/105] 5.10.134-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.134 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 29 Jul 2022 16:09:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.134-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.134-rc1 Christoph Hellwig <hch(a)lst.de> block-crypto-fallback: use a bio_set for splitting bios Ming Lei <ming.lei(a)redhat.com> block: fix memory leak of bvec Linus Torvalds <torvalds(a)linux-foundation.org> watch-queue: remove spurious double semicolon Jose Alonso <joalonsof(a)gmail.com> net: usb: ax88179_178a needs FLAG_SEND_ZLP Jiri Slaby <jirislaby(a)kernel.org> tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() Jiri Slaby <jirislaby(a)kernel.org> tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() Jiri Slaby <jirislaby(a)kernel.org> tty: drop tty_schedule_flip() Jiri Slaby <jirislaby(a)kernel.org> tty: the rest, stop using tty_schedule_flip() Jiri Slaby <jirislaby(a)kernel.org> tty: drivers/tty/, stop using tty_schedule_flip() Linus Torvalds <torvalds(a)linux-foundation.org> watchqueue: make sure to serialize 'wqueue->defunct' properly Kees Cook <keescook(a)chromium.org> x86/alternative: Report missing return thunk details Peter Zijlstra <peterz(a)infradead.org> x86/amd: Use IBPB for firmware calls Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Fix sco_send_frame returning skb->len Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix passing NULL to PTR_ERR Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmmsg helper Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmsg helper Takashi Iwai <tiwai(a)suse.de> ALSA: memalloc: Align buffer allocations in page size Peter Zijlstra <peterz(a)infradead.org> bitfield.h: Fix "type of reg too small for mask" test Wang ShaoBo <bobo.shaobowang(a)huawei.com> drm/imx/dcss: fix unused but set variable warnings Alexander Aring <aahringo(a)redhat.com> dlm: fix pending remove if msg allocation fails Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts Juri Lelli <juri.lelli(a)redhat.com> sched/deadline: Fix BUG_ON condition for deboosted tasks Eric Dumazet <edumazet(a)google.com> bpf: Make sure mac_header was set before using it Wang Cheng <wanngchenng(a)gmail.com> mm/mempolicy: fix uninit-value in mpol_rebind_policy() Alexey Kardashevskiy <aik(a)ozlabs.ru> KVM: Don't null dereference ops->destroy Marc Kleine-Budde <mkl(a)pengutronix.de> spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_max_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_rfc1337. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_stdurg. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_retrans_collapse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_recovery. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_early_retrans. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl knobs related to SYN option. Kuniyuki Iwashima <kuniyu(a)amazon.com> udp: Fix a data-race around sysctl_udp_l3mdev_accept. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_prot_sock. Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. Liang He <windhl(a)126.com> drm/imx/dcss: Add missing of_node_put() in fail path Hristo Venev <hristo(a)venev.name> be2net: Fix buffer overflow in be_get_module_eeprom Haibo Chen <haibo.chen(a)nxp.com> gpio: pca953x: use the correct register address when regcache sync during init Haibo Chen <haibo.chen(a)nxp.com> gpio: pca953x: use the correct range when do regmap sync Haibo Chen <haibo.chen(a)nxp.com> gpio: pca953x: only use single read/write for No AI mode Piotr Skajewski <piotrx.skajewski(a)intel.com> ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero Dawid Lukwinski <dawid.lukwinski(a)intel.com> i40e: Fix erroneous adapter reinitialization during recovery process Przemyslaw Patynowski <przemyslawx.patynowski(a)intel.com> iavf: Fix handling of dummy receive descriptors Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_fastopen. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_max_syn_backlog. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_tw_reuse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_notsent_lowat. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around some timeout sysctl knobs. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_syncookies. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around keepalive sysctl knobs. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix data-races around sysctl_igmp_max_msf. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix a data-race around sysctl_igmp_max_memberships. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix data-races around sysctl_igmp_llm_reports. Tariq Toukan <tariqt(a)nvidia.com> net/tls: Fix race in TLS device down flow Junxiao Chang <junxiao.chang(a)intel.com> net: stmmac: fix dma queue left shift overflow issue Robert Hancock <robert.hancock(a)calian.com> i2c: cadence: Change large transfer count reset logic to be unconditional Biao Huang <biao.huang(a)mediatek.com> net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_interval. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_threshold. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_min_snd_mss. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_base_mss. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_mtu_probing. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix a data-race around sysctl_fwmark_reflect. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix a data-race around sysctl_ip_autobind_reuse. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_nonlocal_bind. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_fwd_update_priority. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_fwd_use_pmtu. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_no_pmtu_disc. Lennert Buytenhek <buytenh(a)wantstofly.org> igc: Reinstate IGC_REMOVED logic and implement it properly Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/display: add quirk handling for stutter mode Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() William Dean <williamsukatube(a)gmail.com> pinctrl: ralink: Check for null return of devm_kcalloc Miaoqian Lin <linmq006(a)gmail.com> power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe Hangyu Hua <hbh25y(a)gmail.com> xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() Pali Rohár <pali(a)kernel.org> serial: mvebu-uart: correctly report configured baudrate value Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix interrupt mapping for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix multi-MSI to allow more than one MSI vector Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" Fedor Pchelkin <pchelkin(a)ispras.ru> net: inline rollback_registered_many() Fedor Pchelkin <pchelkin(a)ispras.ru> net: move rollback_registered_many() Fedor Pchelkin <pchelkin(a)ispras.ru> net: inline rollback_registered() Fedor Pchelkin <pchelkin(a)ispras.ru> net: move net_set_todo inside rollback_registered() Fedor Pchelkin <pchelkin(a)ispras.ru> net: make sure devices go through netdev_wait_all_refs Fedor Pchelkin <pchelkin(a)ispras.ru> net: make free_netdev() more lenient with unregistering devices Fedor Pchelkin <pchelkin(a)ispras.ru> docs: net: explain struct net_device lifetime Christoph Hellwig <hch(a)lst.de> block: fix bounce_clone_bio for passthrough bios Christoph Hellwig <hch(a)lst.de> block: split bio_kmalloc from bio_alloc_bioset Demi Marie Obenour <demi(a)invisiblethingslab.com> xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE Lee Jones <lee(a)kernel.org> io_uring: Use original task for req identity in io_identity_cow() Eric Snowberg <eric.snowberg(a)oracle.com> lockdown: Fix kexec lockdown bypass with ima policy Ido Schimmel <idosch(a)nvidia.com> mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication Ben Dooks <ben.dooks(a)codethink.co.uk> riscv: add as-options for modules with assembly compontents Fabien Dessenne <fabien.dessenne(a)foss.st.com> pinctrl: stm32: fix optional IRQ support to gpios ------------- Diffstat: Documentation/networking/netdevices.rst | 171 ++++++++++++++- Makefile | 4 +- arch/alpha/kernel/srmcons.c | 2 +- arch/m68k/Kconfig.bus | 2 +- arch/riscv/Makefile | 1 + arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/mshyperv.h | 7 - arch/x86/include/asm/nospec-branch.h | 2 + arch/x86/kernel/alternative.c | 4 +- arch/x86/kernel/cpu/bugs.c | 14 +- block/bio.c | 166 ++++++++------- block/blk-crypto-fallback.c | 12 +- block/bounce.c | 17 +- drivers/accessibility/speakup/spk_ttyio.c | 4 +- drivers/gpio/gpio-pca953x.c | 22 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 33 +++ drivers/gpu/drm/imx/dcss/dcss-dev.c | 3 + drivers/gpu/drm/imx/dcss/dcss-plane.c | 2 - drivers/i2c/busses/i2c-cadence.c | 30 +-- .../chelsio/inline_crypto/chtls/chtls_cm.c | 6 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 10 +- drivers/net/ethernet/emulex/benet/be_cmds.h | 2 +- drivers/net/ethernet/emulex/benet/be_ethtool.c | 31 +-- drivers/net/ethernet/intel/i40e/i40e_main.c | 13 +- drivers/net/ethernet/intel/iavf/iavf_txrx.c | 5 +- drivers/net/ethernet/intel/igc/igc_main.c | 3 + drivers/net/ethernet/intel/igc/igc_regs.h | 5 +- drivers/net/ethernet/intel/ixgbe/ixgbe.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 + drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 6 + .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 3 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 17 +- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 +- drivers/net/usb/ax88179_178a.c | 20 +- drivers/pci/controller/pci-hyperv.c | 99 +++++++-- drivers/pinctrl/stm32/pinctrl-stm32.c | 18 +- drivers/power/reset/arm-versatile-reboot.c | 1 + drivers/s390/char/keyboard.h | 4 +- drivers/spi/spi-bcm2835.c | 12 +- drivers/staging/mt7621-pinctrl/pinctrl-rt2880.c | 2 + drivers/tty/cyclades.c | 6 +- drivers/tty/goldfish.c | 2 +- drivers/tty/moxa.c | 4 +- drivers/tty/pty.c | 14 +- drivers/tty/serial/lpc32xx_hs.c | 2 +- drivers/tty/serial/mvebu-uart.c | 25 +-- drivers/tty/tty_buffer.c | 66 ++++-- drivers/tty/vt/keyboard.c | 6 +- drivers/tty/vt/vt.c | 2 +- drivers/xen/gntdev.c | 3 +- fs/dlm/lock.c | 3 +- fs/io_uring.c | 2 +- include/linux/bio.h | 6 +- include/linux/bitfield.h | 19 +- include/linux/tty_flip.h | 4 +- include/net/bluetooth/bluetooth.h | 65 ++++++ include/net/inet_sock.h | 5 +- include/net/ip.h | 6 +- include/net/tcp.h | 18 +- include/net/udp.h | 2 +- kernel/bpf/core.c | 8 +- kernel/events/core.c | 45 ++-- kernel/sched/deadline.c | 5 +- kernel/watch_queue.c | 53 +++-- mm/mempolicy.c | 2 +- net/8021q/vlan.c | 4 +- net/bluetooth/rfcomm/core.c | 50 ++++- net/bluetooth/rfcomm/sock.c | 46 +--- net/bluetooth/sco.c | 30 +-- net/core/dev.c | 233 ++++++++++----------- net/core/filter.c | 4 +- net/core/rtnetlink.c | 23 +- net/core/secure_seq.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/fib_semantics.c | 2 +- net/ipv4/icmp.c | 2 +- net/ipv4/igmp.c | 25 ++- net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/ip_forward.c | 2 +- net/ipv4/ip_sockglue.c | 6 +- net/ipv4/route.c | 2 +- net/ipv4/syncookies.c | 9 +- net/ipv4/sysctl_net_ipv4.c | 6 +- net/ipv4/tcp.c | 10 +- net/ipv4/tcp_fastopen.c | 9 +- net/ipv4/tcp_input.c | 51 +++-- net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/tcp_metrics.c | 3 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/tcp_output.c | 29 +-- net/ipv4/tcp_recovery.c | 6 +- net/ipv4/tcp_timer.c | 20 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/syncookies.c | 3 +- net/sctp/protocol.c | 2 +- net/smc/smc_llc.c | 2 +- net/tls/tls_device.c | 8 +- net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_state.c | 2 +- security/integrity/ima/ima_policy.c | 4 + sound/core/memalloc.c | 1 + virt/kvm/kvm_main.c | 5 +- 103 files changed, 1115 insertions(+), 649 deletions(-)

3 years, 4 months

8
116
0 0

Dear victim,

by mrs.sophia.robin

Dear victim, this Is National Crime Investigation Center USA. In our Investigation from banks on International and National Funds Transfer (INFT) protocols In The past 10 years from all banks Worldwide. We have come across your contact details and record with One of this Bank. in view of The carried Investigations, we have Contacted you confidentially for vital Information toward your transactions with This bank. It was clear That The bank have delayed Your payment Thereby looking for a means to divert your fund to Different Individual account not belonging to you. How ever, all bank officials who mishandled your Transaction has been Duly sacked and management dissolved and dismissed from bank work as a Result of This attempt. Upon our Investigation conclusion, we found Out that your Transaction was Legitimate and for This reason, a Compensation Amount of $3,150,567.00 (Three million one hundred and Fifty thousand, five hundred and sixty seven dollars) has been Allocated to you for Immediate payment through our accredited bank, Platinum Federal Credit Union USA. Kindly contact the compensation paying officer with The below details. Email: mrs.sophiar.robin424(a)gmail.com, Yours Sincerely mrs.sophiar.robin,

3 years, 4 months

1
0
0 0

[PATCH 5.15 000/202] 5.15.58-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.58 release. There are 202 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 30 Jul 2022 13:32:45 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.58-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.58-rc2 Hayden Goodfellow <Hayden.Goodfellow(a)amd.com> drm/amd/display: Fix wrong format specifier in amdgpu_dm.c Peter Zijlstra <peterz(a)infradead.org> x86/entry_32: Fix segment exceptions Dan Carpenter <dan.carpenter(a)oracle.com> drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() Jan Beulich <jbeulich(a)suse.com> x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() Maxim Levitsky <mlevitsk(a)redhat.com> KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness Nick Desaulniers <ndesaulniers(a)google.com> x86/extable: Prefer local labels in .set directives José Expósito <jose.exposito89(a)gmail.com> drm/amd/display: invalid parameter check in dmub_hpd_callback Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Don't lock connection_mutex for DMUB HPD Linus Torvalds <torvalds(a)linux-foundation.org> watch-queue: remove spurious double semicolon Jose Alonso <joalonsof(a)gmail.com> net: usb: ax88179_178a needs FLAG_SEND_ZLP Jiri Slaby <jirislaby(a)kernel.org> tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() Jiri Slaby <jirislaby(a)kernel.org> tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() Jiri Slaby <jirislaby(a)kernel.org> tty: drop tty_schedule_flip() Jiri Slaby <jirislaby(a)kernel.org> tty: the rest, stop using tty_schedule_flip() Jiri Slaby <jirislaby(a)kernel.org> tty: drivers/tty/, stop using tty_schedule_flip() Linus Torvalds <torvalds(a)linux-foundation.org> watchqueue: make sure to serialize 'wqueue->defunct' properly Kees Cook <keescook(a)chromium.org> x86/alternative: Report missing return thunk details Peter Zijlstra <peterz(a)infradead.org> x86/amd: Use IBPB for firmware calls Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Fix surface optimization regression on Carrizo Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Optimize bandwidth on following fast update Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Reset DMCUB before HW init Sungjong Seo <sj1557.seo(a)samsung.com> exfat: use updated exfat_chain directly during renaming Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Fix sco_send_frame returning skb->len Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix passing NULL to PTR_ERR Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmmsg helper Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmsg helper Johannes Berg <johannes.berg(a)intel.com> um: virtio_uml: Fix broken device handling in time-travel Vincent Whitchurch <vincent.whitchurch(a)axis.com> um: virtio_uml: Allow probing from devicetree Wonhyuk Yang <vvghjk1234(a)gmail.com> tracing: Fix return value of trace_pid_write() Steven Rostedt (VMware) <rostedt(a)goodmis.org> tracing: Place trace_pid_list logic into abstract functions Steven Rostedt (Google) <rostedt(a)goodmis.org> tracing: Have event format check not flag %p* on __get_dynamic_array() Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: fix referencing wrong parent directory information after renaming Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - re-enable registration of algorithms Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - add param check for DH Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - add param check for RSA Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - remove dma_free_coherent() for DH Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - remove dma_free_coherent() for RSA Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix memory leak in RSA Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - add backlog mechanism Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - refactor submission logic Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - use pre-allocated buffers in datapath Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - set to zero DH parameters before free Johannes Berg <johannes.berg(a)intel.com> iwlwifi: fw: uefi: add missing include guards Felix Fietkau <nbd(a)nbd.name> mt76: fix use-after-free by removing a non-RCU wcid pointer Kishon Vijay Abraham I <kishon(a)ti.com> xhci: Set HCD flag to defer primary roothub registration Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: dbc: create and remove dbc structure in dbgtty driver. Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: dbc: refactor xhci_dbc_init() Sean Christopherson <seanjc(a)google.com> KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses Peter Zijlstra <peterz(a)infradead.org> x86/futex: Remove .fixup usage Peter Zijlstra <peterz(a)infradead.org> x86/msr: Remove .fixup usage Peter Zijlstra <peterz(a)infradead.org> x86/extable: Extend extable functionality Peter Zijlstra <peterz(a)infradead.org> x86/entry_32: Remove .fixup usage Peter Zijlstra <peterz(a)infradead.org> bitfield.h: Fix "type of reg too small for mask" test Thomas Gleixner <tglx(a)linutronix.de> x86/extable: Provide EX_TYPE_DEFAULT_MCE_SAFE and EX_TYPE_FAULT_MCE_SAFE Thomas Gleixner <tglx(a)linutronix.de> x86/extable: Rework the exception table mechanics Thomas Gleixner <tglx(a)linutronix.de> x86/mce: Deduplicate exception handling Thomas Gleixner <tglx(a)linutronix.de> x86/extable: Get rid of redundant macros Thomas Gleixner <tglx(a)linutronix.de> x86/extable: Tidy up redundant handler functions Peter Zijlstra <peterz(a)infradead.org> x86/uaccess: Implement macros for CMPXCHG on user addresses Alexander Aring <aahringo(a)redhat.com> dlm: fix pending remove if msg allocation fails Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts Juri Lelli <juri.lelli(a)redhat.com> sched/deadline: Fix BUG_ON condition for deboosted tasks Eric Dumazet <edumazet(a)google.com> bpf: Make sure mac_header was set before using it Wang Cheng <wanngchenng(a)gmail.com> mm/mempolicy: fix uninit-value in mpol_rebind_policy() Alexey Kardashevskiy <aik(a)ozlabs.ru> KVM: Don't null dereference ops->destroy Marc Kleine-Budde <mkl(a)pengutronix.de> spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers Gavin Shan <gshan(a)redhat.com> KVM: selftests: Fix target thread to be migrated in rseq_test Srinivas Neeli <srinivas.neeli(a)xilinx.com> gpio: gpio-xilinx: Fix integer overflow Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_max_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_abort_on_overflow. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_rfc1337. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_stdurg. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_retrans_collapse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_recovery. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_early_retrans. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl knobs related to SYN option. Kuniyuki Iwashima <kuniyu(a)amazon.com> udp: Fix a data-race around sysctl_udp_l3mdev_accept. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_prot_sock. Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. Liang He <windhl(a)126.com> drm/imx/dcss: Add missing of_node_put() in fail path Oleksij Rempel <linux(a)rempel-privat.de> net: dsa: vitesse-vsc73xx: silent spi_device_id warnings Oleksij Rempel <linux(a)rempel-privat.de> net: dsa: sja1105: silent spi_device_id warnings Hristo Venev <hristo(a)venev.name> be2net: Fix buffer overflow in be_get_module_eeprom Haibo Chen <haibo.chen(a)nxp.com> gpio: pca953x: use the correct register address when regcache sync during init Haibo Chen <haibo.chen(a)nxp.com> gpio: pca953x: use the correct range when do regmap sync Haibo Chen <haibo.chen(a)nxp.com> gpio: pca953x: only use single read/write for No AI mode Wong Vee Khee <vee.khee.wong(a)linux.intel.com> net: stmmac: remove redunctant disable xPCS EEE call Piotr Skajewski <piotrx.skajewski(a)intel.com> ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero Dawid Lukwinski <dawid.lukwinski(a)intel.com> i40e: Fix erroneous adapter reinitialization during recovery process Vladimir Oltean <vladimir.oltean(a)nxp.com> pinctrl: armada-37xx: use raw spinlocks for regmap to avoid invalid wait context Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: armada-37xx: Convert to use dev_err_probe() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: armada-37xx: Make use of the devm_platform_ioremap_resource() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: armada-37xx: Use temporary variable for struct device Przemyslaw Patynowski <przemyslawx.patynowski(a)intel.com> iavf: Fix handling of dummy receive descriptors Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_fastopen. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_max_syn_backlog. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_tw_reuse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_notsent_lowat. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around some timeout sysctl knobs. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_migrate_req. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_syncookies. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around keepalive sysctl knobs. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix data-races around sysctl_igmp_max_msf. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix a data-race around sysctl_igmp_max_memberships. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix data-races around sysctl_igmp_llm_reports. Tariq Toukan <tariqt(a)nvidia.com> net/tls: Fix race in TLS device down flow Junxiao Chang <junxiao.chang(a)intel.com> net: stmmac: fix dma queue left shift overflow issue Adrian Hunter <adrian.hunter(a)intel.com> perf tests: Fix Convert perf time to TSC test for hybrid Robert Hancock <robert.hancock(a)calian.com> i2c: cadence: Change large transfer count reset logic to be unconditional Vadim Pasternak <vadimp(a)nvidia.com> i2c: mlxcpld: Fix register setting for 400KHz frequency Menglong Dong <imagedong(a)tencent.com> net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core() Menglong Dong <imagedong(a)tencent.com> net: ipv4: use kfree_skb_reason() in ip_rcv_core() Menglong Dong <imagedong(a)tencent.com> net: netfilter: use kfree_drop_reason() for NF_DROP Menglong Dong <imagedong(a)tencent.com> net: skb_drop_reason: add document for drop reasons Menglong Dong <imagedong(a)tencent.com> net: socket: rename SKB_DROP_REASON_SOCKET_FILTER Menglong Dong <imagedong(a)tencent.com> net: skb: use kfree_skb_reason() in __udp4_lib_rcv() Menglong Dong <imagedong(a)tencent.com> net: skb: use kfree_skb_reason() in tcp_v4_rcv() Menglong Dong <imagedong(a)tencent.com> net: skb: introduce kfree_skb_reason() Liang He <windhl(a)126.com> net: dsa: microchip: ksz_common: Fix refcount leak bug Sascha Hauer <s.hauer(a)pengutronix.de> mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times Dario Binacchi <dario.binacchi(a)amarulasolutions.com> mtd: rawnand: gpmi: validate controller clock rate Biao Huang <biao.huang(a)mediatek.com> net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow Biao Huang <biao.huang(a)mediatek.com> net: stmmac: fix pm runtime issue in stmmac_dvr_remove() Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_interval. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_threshold. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_min_snd_mss. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_base_mss. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_mtu_probing. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_l3mdev_accept. Eric Dumazet <edumazet(a)google.com> tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix a data-race around sysctl_fwmark_reflect. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix a data-race around sysctl_ip_autobind_reuse. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_nonlocal_bind. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_fwd_update_priority. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_fwd_use_pmtu. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_no_pmtu_disc. Lennert Buytenhek <buytenh(a)wantstofly.org> igc: Reinstate IGC_REMOVED logic and implement it properly Sasha Neftin <sasha.neftin(a)intel.com> Revert "e1000e: Fix possible HW unit hang after an s0ix exit" Sasha Neftin <sasha.neftin(a)intel.com> e1000e: Enable GPT clock before sending message to CSME Israel Rukshin <israelr(a)nvidia.com> nvme: fix block device naming collision Christoph Hellwig <hch(a)lst.de> nvme: check for duplicate identifiers earlier Bjorn Andersson <bjorn.andersson(a)linaro.org> scsi: ufs: core: Drop loglevel of WriteBoost message Ming Lei <ming.lei(a)redhat.com> scsi: megaraid: Clear READ queue map's nr_queues Fangzhi Zuo <Jerry.Zuo(a)amd.com> drm/amd/display: Ignore First MST Sideband Message Return Error Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/display: add quirk handling for stutter mode Wayne Lin <Wayne.Lin(a)amd.com> drm/amd/display: Fork thread to offload work of hpd_rx_irq Wayne Lin <Wayne.Lin(a)amd.com> drm/amd/display: Add option to defer works of hpd_rx_irq Jude Shih <shenshih(a)amd.com> drm/amd/display: Support for DMUB HPD interrupt handling Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_ecn. Xiaoming Ni <nixiaoming(a)huawei.com> sysctl: move some boundary constants from sysctl.c to sysctl_vals Suren Baghdasaryan <surenb(a)google.com> mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30% Dongli Zhang <dongli.zhang(a)oracle.com> net: tun: split run_ebpf_filter() and pskb_trim() into different "if statement" Eric Dumazet <edumazet(a)google.com> ipv4/tcp: do not use per netns ctl sockets Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() William Dean <williamsukatube(a)gmail.com> pinctrl: ralink: Check for null return of devm_kcalloc Arınç ÜNAL <arinc.unal(a)arinc9.com> pinctrl: ralink: rename pinctrl-rt2880 to pinctrl-ralink Arınç ÜNAL <arinc.unal(a)arinc9.com> pinctrl: ralink: rename MT7628(an) functions to MT76X8 Mustafa Ismail <mustafa.ismail(a)intel.com> RDMA/irdma: Fix sleep from invalid context BUG Mustafa Ismail <mustafa.ismail(a)intel.com> RDMA/irdma: Do not advertise 1GB page size for x722 Miaoqian Lin <linmq006(a)gmail.com> power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe Hangyu Hua <hbh25y(a)gmail.com> xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_default_ttl. Hayes Wang <hayeswang(a)realtek.com> r8152: fix a WOL issue Dan Carpenter <dan.carpenter(a)oracle.com> xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() Brian Foster <bfoster(a)redhat.com> xfs: fix perag reference leak on iteration race with growfs Brian Foster <bfoster(a)redhat.com> xfs: terminate perag iteration reliably on agcount Brian Foster <bfoster(a)redhat.com> xfs: rename the next_agno perag iteration variable Brian Foster <bfoster(a)redhat.com> xfs: fold perag loop iteration logic into helper function Darrick J. Wong <djwong(a)kernel.org> xfs: fix maxlevels comparisons in the btree staging code Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> mt76: mt7921: Fix the error handling path of mt7921_pci_probe() Sean Wang <sean.wang(a)mediatek.com> mt76: mt7921e: fix possible probe failure after reboot Sean Wang <sean.wang(a)mediatek.com> mt76: mt7921: use physical addr to unify register access Sean Wang <sean.wang(a)mediatek.com> Revert "mt76: mt7921e: fix possible probe failure after reboot" Sean Wang <sean.wang(a)mediatek.com> Revert "mt76: mt7921: Fix the error handling path of mt7921_pci_probe()" Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> batman-adv: Use netif_rx_any_context() any. Pali Rohár <pali(a)kernel.org> serial: mvebu-uart: correctly report configured baudrate value Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix interrupt mapping for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix multi-MSI to allow more than one MSI vector Oleksandr Tymoshenko <ovt(a)google.com> Revert "selftest/vm: verify mmap addr in mremap_test" Oleksandr Tymoshenko <ovt(a)google.com> Revert "selftest/vm: verify remap destination address in mremap_test" Daniele Palmas <dnlplm(a)gmail.com> bus: mhi: host: pci_generic: add Telit FN990 Daniele Palmas <dnlplm(a)gmail.com> bus: mhi: host: pci_generic: add Telit FN980 v1 hardware revision Christian König <christian.koenig(a)amd.com> drm/ttm: fix locking in vmap/vunmap TTM GEM helpers Eric Snowberg <eric.snowberg(a)oracle.com> lockdown: Fix kexec lockdown bypass with ima policy Ido Schimmel <idosch(a)nvidia.com> mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication Ben Dooks <ben.dooks(a)codethink.co.uk> riscv: add as-options for modules with assembly compontents Fabien Dessenne <fabien.dessenne(a)foss.st.com> pinctrl: stm32: fix optional IRQ support to gpios ------------- Diffstat: Documentation/admin-guide/sysctl/vm.rst | 2 +- Makefile | 4 +- arch/alpha/kernel/srmcons.c | 2 +- arch/riscv/Makefile | 1 + arch/um/drivers/virtio_uml.c | 81 +++- arch/x86/entry/entry_32.S | 35 +- arch/x86/include/asm/asm.h | 85 ++-- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/extable.h | 44 +- arch/x86/include/asm/extable_fixup_types.h | 58 +++ arch/x86/include/asm/fpu/internal.h | 4 +- arch/x86/include/asm/futex.h | 28 +- arch/x86/include/asm/insn-eval.h | 2 + arch/x86/include/asm/mshyperv.h | 7 - arch/x86/include/asm/msr.h | 30 +- arch/x86/include/asm/nospec-branch.h | 2 + arch/x86/include/asm/segment.h | 2 +- arch/x86/include/asm/uaccess.h | 142 +++++++ arch/x86/kernel/alternative.c | 4 +- arch/x86/kernel/cpu/bugs.c | 14 +- arch/x86/kernel/cpu/mce/core.c | 40 +- arch/x86/kernel/cpu/mce/internal.h | 10 - arch/x86/kernel/cpu/mce/severity.c | 23 +- arch/x86/kvm/x86.c | 35 +- arch/x86/lib/insn-eval.c | 71 ++-- arch/x86/mm/extable.c | 193 +++++---- arch/x86/net/bpf_jit_comp.c | 11 +- drivers/accessibility/speakup/spk_ttyio.c | 4 +- drivers/bus/mhi/pci_generic.c | 79 ++++ drivers/crypto/qat/qat_4xxx/adf_drv.c | 7 - drivers/crypto/qat/qat_common/Makefile | 1 + drivers/crypto/qat/qat_common/adf_transport.c | 11 + drivers/crypto/qat/qat_common/adf_transport.h | 1 + .../crypto/qat/qat_common/adf_transport_internal.h | 1 + drivers/crypto/qat/qat_common/qat_algs.c | 138 ++++--- drivers/crypto/qat/qat_common/qat_algs_send.c | 86 ++++ drivers/crypto/qat/qat_common/qat_algs_send.h | 11 + drivers/crypto/qat/qat_common/qat_asym_algs.c | 304 +++++++------- drivers/crypto/qat/qat_common/qat_crypto.c | 10 +- drivers/crypto/qat/qat_common/qat_crypto.h | 39 ++ drivers/gpio/gpio-pca953x.c | 22 +- drivers/gpio/gpio-xilinx.c | 2 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 446 +++++++++++++++++++-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 97 ++++- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 17 + drivers/gpu/drm/amd/display/dc/core/dc.c | 24 +- drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 89 ++-- drivers/gpu/drm/amd/display/dc/dc_link.h | 9 +- drivers/gpu/drm/drm_gem_ttm_helper.c | 9 +- drivers/gpu/drm/imx/dcss/dcss-dev.c | 3 + drivers/i2c/busses/i2c-cadence.c | 30 +- drivers/i2c/busses/i2c-mlxcpld.c | 2 +- drivers/infiniband/hw/irdma/cm.c | 50 --- drivers/infiniband/hw/irdma/i40iw_hw.c | 1 + drivers/infiniband/hw/irdma/icrdma_hw.c | 1 + drivers/infiniband/hw/irdma/irdma.h | 1 + drivers/infiniband/hw/irdma/verbs.c | 4 +- drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c | 28 +- drivers/net/dsa/microchip/ksz_common.c | 5 +- drivers/net/dsa/sja1105/sja1105_main.c | 16 + drivers/net/dsa/vitesse-vsc73xx-spi.c | 10 + .../chelsio/inline_crypto/chtls/chtls_cm.c | 8 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 10 +- drivers/net/ethernet/emulex/benet/be_cmds.h | 2 +- drivers/net/ethernet/emulex/benet/be_ethtool.c | 31 +- drivers/net/ethernet/intel/e1000e/hw.h | 1 - drivers/net/ethernet/intel/e1000e/ich8lan.c | 4 - drivers/net/ethernet/intel/e1000e/ich8lan.h | 1 - drivers/net/ethernet/intel/e1000e/netdev.c | 30 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 13 +- drivers/net/ethernet/intel/iavf/iavf_txrx.c | 5 +- drivers/net/ethernet/intel/igc/igc_main.c | 3 + drivers/net/ethernet/intel/igc/igc_regs.h | 5 +- drivers/net/ethernet/intel/ixgbe/ixgbe.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 + drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 6 + .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 9 +- drivers/net/ethernet/netronome/nfp/flower/action.c | 2 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 3 + .../net/ethernet/stmicro/stmmac/stmmac_ethtool.c | 8 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 22 +- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 +- drivers/net/tun.c | 5 +- drivers/net/usb/ax88179_178a.c | 20 +- drivers/net/usb/r8152.c | 16 +- drivers/net/wireless/intel/iwlwifi/fw/uefi.h | 5 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 2 +- drivers/net/wireless/mediatek/mt76/mt76.h | 2 +- drivers/net/wireless/mediatek/mt76/mt7603/main.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7615/main.c | 2 +- drivers/net/wireless/mediatek/mt76/mt76x02_util.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7915/main.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7921/main.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 30 +- drivers/net/wireless/mediatek/mt76/mt7921/mt7921.h | 1 + drivers/net/wireless/mediatek/mt76/mt7921/pci.c | 30 +- drivers/net/wireless/mediatek/mt76/mt7921/regs.h | 22 +- drivers/net/wireless/mediatek/mt76/tx.c | 9 +- drivers/nvme/host/core.c | 19 +- drivers/pci/controller/pci-hyperv.c | 106 ++++- drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 97 +++-- drivers/pinctrl/ralink/Kconfig | 16 +- drivers/pinctrl/ralink/Makefile | 2 +- drivers/pinctrl/ralink/pinctrl-mt7620.c | 252 ++++++------ drivers/pinctrl/ralink/pinctrl-mt7621.c | 30 +- .../ralink/{pinctrl-rt2880.c => pinctrl-ralink.c} | 92 ++--- .../pinctrl/ralink/{pinmux.h => pinctrl-ralink.h} | 16 +- drivers/pinctrl/ralink/pinctrl-rt288x.c | 20 +- drivers/pinctrl/ralink/pinctrl-rt305x.c | 44 +- drivers/pinctrl/ralink/pinctrl-rt3883.c | 28 +- drivers/pinctrl/stm32/pinctrl-stm32.c | 18 +- drivers/power/reset/arm-versatile-reboot.c | 1 + drivers/s390/char/keyboard.h | 4 +- drivers/scsi/megaraid/megaraid_sas_base.c | 3 + drivers/scsi/ufs/ufshcd.c | 2 +- drivers/spi/spi-bcm2835.c | 12 +- drivers/tty/goldfish.c | 2 +- drivers/tty/moxa.c | 4 +- drivers/tty/pty.c | 14 +- drivers/tty/serial/lpc32xx_hs.c | 2 +- drivers/tty/serial/mvebu-uart.c | 25 +- drivers/tty/tty.h | 3 + drivers/tty/tty_buffer.c | 66 ++- drivers/tty/vt/keyboard.c | 6 +- drivers/tty/vt/vt.c | 2 +- drivers/usb/host/xhci-dbgcap.c | 135 +++---- drivers/usb/host/xhci-dbgcap.h | 13 +- drivers/usb/host/xhci-dbgtty.c | 22 +- drivers/usb/host/xhci.c | 6 +- fs/dlm/lock.c | 3 +- fs/exfat/namei.c | 31 +- fs/proc/proc_sysctl.c | 2 +- fs/xfs/libxfs/xfs_ag.h | 36 +- fs/xfs/libxfs/xfs_btree_staging.c | 4 +- fs/xfs/xfs_ioctl.c | 2 +- fs/xfs/xfs_ioctl.h | 5 +- include/linux/bitfield.h | 19 +- include/linux/skbuff.h | 47 ++- include/linux/sysctl.h | 13 +- include/linux/tty_flip.h | 1 - include/net/bluetooth/bluetooth.h | 65 +++ include/net/inet_hashtables.h | 2 +- include/net/inet_sock.h | 12 +- include/net/ip.h | 6 +- include/net/netns/ipv4.h | 1 - include/net/route.h | 2 +- include/net/tcp.h | 18 +- include/net/udp.h | 2 +- include/trace/events/skb.h | 48 ++- kernel/bpf/core.c | 8 +- kernel/events/core.c | 45 ++- kernel/sched/deadline.c | 5 +- kernel/sysctl.c | 44 +- kernel/trace/Makefile | 1 + kernel/trace/ftrace.c | 6 +- kernel/trace/pid_list.c | 160 ++++++++ kernel/trace/pid_list.h | 13 + kernel/trace/trace.c | 84 ++-- kernel/trace/trace.h | 14 +- kernel/trace/trace_events.c | 13 +- kernel/watch_queue.c | 53 ++- mm/mempolicy.c | 2 +- net/batman-adv/bridge_loop_avoidance.c | 2 +- net/bluetooth/rfcomm/core.c | 50 ++- net/bluetooth/rfcomm/sock.c | 46 +-- net/bluetooth/sco.c | 30 +- net/core/dev.c | 3 +- net/core/drop_monitor.c | 10 +- net/core/filter.c | 4 +- net/core/secure_seq.c | 4 +- net/core/skbuff.c | 12 +- net/core/sock_reuseport.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/fib_semantics.c | 2 +- net/ipv4/icmp.c | 2 +- net/ipv4/igmp.c | 25 +- net/ipv4/inet_connection_sock.c | 5 +- net/ipv4/ip_forward.c | 2 +- net/ipv4/ip_input.c | 26 +- net/ipv4/ip_sockglue.c | 8 +- net/ipv4/netfilter/nf_reject_ipv4.c | 4 +- net/ipv4/proc.c | 2 +- net/ipv4/route.c | 10 +- net/ipv4/syncookies.c | 11 +- net/ipv4/sysctl_net_ipv4.c | 8 +- net/ipv4/tcp.c | 13 +- net/ipv4/tcp_fastopen.c | 9 +- net/ipv4/tcp_input.c | 53 ++- net/ipv4/tcp_ipv4.c | 77 ++-- net/ipv4/tcp_metrics.c | 3 +- net/ipv4/tcp_minisocks.c | 4 +- net/ipv4/tcp_output.c | 31 +- net/ipv4/tcp_recovery.c | 6 +- net/ipv4/tcp_timer.c | 30 +- net/ipv4/udp.c | 10 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/syncookies.c | 3 +- net/netfilter/core.c | 3 +- net/netfilter/nf_synproxy_core.c | 2 +- net/sctp/protocol.c | 2 +- net/smc/smc_llc.c | 2 +- net/tls/tls_device.c | 8 +- net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_state.c | 2 +- scripts/sorttable.c | 4 +- security/integrity/ima/ima_policy.c | 4 + tools/perf/tests/perf-time-to-tsc.c | 18 +- tools/testing/selftests/kvm/rseq_test.c | 8 +- tools/testing/selftests/vm/mremap_test.c | 53 --- virt/kvm/kvm_main.c | 5 +- 210 files changed, 3381 insertions(+), 1897 deletions(-)

3 years, 4 months

7
6
0 0

[PATCH] x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available

by Thadeu Lima de Souza Cascardo

Some cloud hypervisors do not provide IBPB on very recent CPU processors, including AMD processors affected by Retbleed. Using IBPB before firmware calls on such systems would cause a GPF at boot like the one below. Do not enable such calls when IBPB support is not present. [ 0.997530] EFI Variables Facility v0.08 2004-May-17 [ 0.998866] general protection fault, maybe for address 0x1: 0000 [#1] PREEMPT SMP NOPTI [ 1.000393] CPU: 0 PID: 24 Comm: kworker/u2:1 Not tainted 5.19.0-rc8+ #7 [ 1.000393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015 [ 1.000393] Workqueue: efi_rts_wq efi_call_rts [ 1.000393] RIP: 0010:efi_call_rts+0x66e/0x8a0 [ 1.000393] Code: e8 37 33 58 ff 41 bf 48 00 00 00 49 89 c0 44 89 f9 48 83 c8 01 4c 89 c2 48 c1 ea 20 66 90 b9 49 00 00 00 b8 01 00 00 00 31 d2 <0f> 30 e8 7b 9f 5d ff e8 f6 f8 ff ff 4c 89 f1 4c 89 ea 4c 89 e6 48 [ 1.000393] RSP: 0018:ffffb373800d7e38 EFLAGS: 00010246 [ 1.000393] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000049 [ 1.000393] RDX: 0000000000000000 RSI: ffff94fbc19d8fe0 RDI: ffff94fbc1b2b300 [ 1.000393] RBP: ffffb373800d7e70 R08: 0000000000000000 R09: 0000000000000000 [ 1.000393] R10: 000000000000000b R11: 000000000000000b R12: ffffb3738001fd78 [ 1.000393] R13: ffff94fbc2fcfc00 R14: ffffb3738001fd80 R15: 0000000000000048 [ 1.000393] FS: 0000000000000000(0000) GS:ffff94fc3da00000(0000) knlGS:0000000000000000 [ 1.000393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1.000393] CR2: ffff94fc30201000 CR3: 000000006f610000 CR4: 00000000000406f0 [ 1.000393] Call Trace: [ 1.000393] <TASK> [ 1.000393] ? __wake_up+0x13/0x20 [ 1.000393] process_one_work+0x21f/0x3f0 [ 1.000393] worker_thread+0x50/0x3e0 [ 1.000393] ? rescuer_thread+0x3a0/0x3a0 [ 1.000393] kthread+0xee/0x120 [ 1.000393] ? kthread_complete_and_exit+0x20/0x20 [ 1.000393] ret_from_fork+0x22/0x30 [ 1.000393] </TASK> [ 1.000393] Modules linked in: [ 1.037117] ---[ end trace 0000000000000000 ]--- [ 1.038324] RIP: 0010:efi_call_rts+0x66e/0x8a0 [ 1.039650] Code: e8 37 33 58 ff 41 bf 48 00 00 00 49 89 c0 44 89 f9 48 83 c8 01 4c 89 c2 48 c1 ea 20 66 90 b9 49 00 00 00 b8 01 00 00 00 31 d2 <0f> 30 e8 7b 9f 5d ff e8 f6 f8 ff ff 4c 89 f1 4c 89 ea 4c 89 e6 48 [ 1.044235] RSP: 0018:ffffb373800d7e38 EFLAGS: 00010246 [ 1.045513] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000049 [ 1.047260] RDX: 0000000000000000 RSI: ffff94fbc19d8fe0 RDI: ffff94fbc1b2b300 [ 1.049014] RBP: ffffb373800d7e70 R08: 0000000000000000 R09: 0000000000000000 [ 1.050762] R10: 000000000000000b R11: 000000000000000b R12: ffffb3738001fd78 [ 1.052521] R13: ffff94fbc2fcfc00 R14: ffffb3738001fd80 R15: 0000000000000048 [ 1.054243] FS: 0000000000000000(0000) GS:ffff94fc3da00000(0000) knlGS:0000000000000000 [ 1.056228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1.057632] CR2: ffff94fc30201000 CR3: 000000006f610000 CR4: 00000000000406f0 [ 1.059393] note: kworker/u2:1[24] exited with preempt_count 2 Fixes: 28a99e95f55c ("x86/amd: Use IBPB for firmware calls") Reported-by: Dimitri John Ledkov <dimitri.ledkov(a)canonical.com> Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo(a)canonical.com> Cc: Peter Zijlstra (Intel) <peterz(a)infradead.org> Cc: Borislav Petkov <bp(a)suse.de> Cc: <stable(a)vger.kernel.org> --- arch/x86/kernel/cpu/bugs.c | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/x86/kernel/cpu/bugs.c b/arch/x86/kernel/cpu/bugs.c index 6454bc767f0f..6761668100b9 100644 --- a/arch/x86/kernel/cpu/bugs.c +++ b/arch/x86/kernel/cpu/bugs.c @@ -1520,6 +1520,7 @@ static void __init spectre_v2_select_mitigation(void) * enable IBRS around firmware calls. */ if (boot_cpu_has_bug(X86_BUG_RETBLEED) && + boot_cpu_has(X86_FEATURE_IBPB) && (boot_cpu_data.x86_vendor == X86_VENDOR_AMD || boot_cpu_data.x86_vendor == X86_VENDOR_HYGON)) { -- 2.34.1

3 years, 4 months

3
2
0 0

[PATCH V2 1/1] serial: fsl_lpuart: zero out parity bit in CS7 mode

by Shenwei Wang

The LPUART hardware doesn't zero out the parity bit on the received characters. This behavior won't impact the use cases of CS8 because the parity bit is the 9th bit which is not currently used by software. But the parity bit for CS7 must be zeroed out by software in order to get the correct raw data. Signed-off-by: Shenwei Wang <shenwei.wang(a)nxp.com> --- changes in v2 - remove the "inline" keyword from the function of lpuart_tty_insert_flip_string; changes in v1 - fix the code indent and whitespace issue; drivers/tty/serial/fsl_lpuart.c | 26 ++++++++++++++++++++++++-- 1 file changed, 24 insertions(+), 2 deletions(-) diff --git a/drivers/tty/serial/fsl_lpuart.c b/drivers/tty/serial/fsl_lpuart.c index fc7d235a1e270..afa0f941c862f 100644 --- a/drivers/tty/serial/fsl_lpuart.c +++ b/drivers/tty/serial/fsl_lpuart.c @@ -274,6 +274,8 @@ struct lpuart_port { int rx_dma_rng_buf_len; unsigned int dma_tx_nents; wait_queue_head_t dma_wait; + bool is_cs7; /* Set to true when character size is 7 */ + /* and the parity is enabled */ }; struct lpuart_soc_data { @@ -1022,6 +1024,9 @@ static void lpuart32_rxint(struct lpuart_port *sport) flg = TTY_OVERRUN; } + if (sport->is_cs7) + rx &= 0x7F; + if (tty_insert_flip_char(port, rx, flg) == 0) sport->port.icount.buf_overrun++; } @@ -1107,6 +1112,17 @@ static void lpuart_handle_sysrq(struct lpuart_port *sport) } } +static int lpuart_tty_insert_flip_string(struct tty_port *port, + unsigned char *chars, size_t size, bool is_cs7) +{ + int i; + + if (is_cs7) + for (i = 0; i < size; i++) + chars[i] &= 0x7F; + return tty_insert_flip_string(port, chars, size); +} + static void lpuart_copy_rx_to_tty(struct lpuart_port *sport) { struct tty_port *port = &sport->port.state->port; @@ -1217,7 +1233,8 @@ static void lpuart_copy_rx_to_tty(struct lpuart_port *sport) if (ring->head < ring->tail) { count = sport->rx_sgl.length - ring->tail; - copied = tty_insert_flip_string(port, ring->buf + ring->tail, count); + copied = lpuart_tty_insert_flip_string(port, ring->buf + ring->tail, + count, sport->is_cs7); if (copied != count) sport->port.icount.buf_overrun++; ring->tail = 0; @@ -1227,7 +1244,8 @@ static void lpuart_copy_rx_to_tty(struct lpuart_port *sport) /* Finally we read data from tail to head */ if (ring->tail < ring->head) { count = ring->head - ring->tail; - copied = tty_insert_flip_string(port, ring->buf + ring->tail, count); + copied = lpuart_tty_insert_flip_string(port, ring->buf + ring->tail, + count, sport->is_cs7); if (copied != count) sport->port.icount.buf_overrun++; /* Wrap ring->head if needed */ @@ -2066,6 +2084,7 @@ lpuart32_set_termios(struct uart_port *port, struct ktermios *termios, ctrl = old_ctrl = lpuart32_read(&sport->port, UARTCTRL); bd = lpuart32_read(&sport->port, UARTBAUD); modem = lpuart32_read(&sport->port, UARTMODIR); + sport->is_cs7 = false; /* * only support CS8 and CS7, and for CS7 must enable PE. * supported mode: @@ -2184,6 +2203,9 @@ lpuart32_set_termios(struct uart_port *port, struct ktermios *termios, lpuart32_write(&sport->port, ctrl, UARTCTRL); /* restore control register */ + if ((ctrl & (UARTCTRL_PE | UARTCTRL_M)) == UARTCTRL_PE) + sport->is_cs7 = true; + if (old && sport->lpuart_dma_rx_use) { if (!lpuart_start_rx_dma(sport)) rx_dma_timer_init(sport); -- 2.25.1

3 years, 4 months

3
5
0 0

[PATCH 5.10] block: fix null-deref in percpu_ref_put

by Zhang Wensheng

From: Zhang Wensheng <zhangwensheng5(a)huawei.com> In the use of q_usage_counter of request_queue, blk_cleanup_queue using "wait_event(q->mq_freeze_wq, percpu_ref_is_zero(&q->q_usage_counter))" to wait q_usage_counter becoming zero. however, if the q_usage_counter becoming zero quickly, and percpu_ref_exit will execute and ref->data will be freed, maybe another process will cause a null-defef problem like below: CPU0 CPU1 blk_cleanup_queue blk_freeze_queue blk_mq_freeze_queue_wait scsi_end_request percpu_ref_get ... percpu_ref_put atomic_long_sub_and_test percpu_ref_exit ref->data -> NULL ref->data->release(ref) -> null-deref Fix it by setting flag(QUEUE_FLAG_USAGE_COUNT_SYNC) to add synchronization mechanism, when ref->data->release is called, the flag will be setted, and the "wait_event" in blk_mq_freeze_queue_wait must wait flag becoming true as well, which will limit percpu_ref_exit to execute ahead of time. Signed-off-by: Zhang Wensheng <zhangwensheng5(a)huawei.com> --- block/blk-core.c | 4 +++- block/blk-mq.c | 7 +++++++ include/linux/blk-mq.h | 1 + include/linux/blkdev.h | 2 ++ 4 files changed, 13 insertions(+), 1 deletion(-) diff --git a/block/blk-core.c b/block/blk-core.c index 26664f2a139e..238d0f3cd279 100644 --- a/block/blk-core.c +++ b/block/blk-core.c @@ -385,7 +385,8 @@ void blk_cleanup_queue(struct request_queue *q) * prevent that blk_mq_run_hw_queues() accesses the hardware queues * after draining finished. */ - blk_freeze_queue(q); + blk_freeze_queue_start(q); + blk_mq_freeze_queue_wait_sync(q); rq_qos_exit(q); @@ -500,6 +501,7 @@ static void blk_queue_usage_counter_release(struct percpu_ref *ref) struct request_queue *q = container_of(ref, struct request_queue, q_usage_counter); + blk_queue_flag_set(QUEUE_FLAG_USAGE_COUNT_SYNC, q); wake_up_all(&q->mq_freeze_wq); } diff --git a/block/blk-mq.c b/block/blk-mq.c index c5d82b21a1cc..15c4e4530c87 100644 --- a/block/blk-mq.c +++ b/block/blk-mq.c @@ -134,6 +134,7 @@ void blk_freeze_queue_start(struct request_queue *q) { mutex_lock(&q->mq_freeze_lock); if (++q->mq_freeze_depth == 1) { + blk_queue_flag_clear(QUEUE_FLAG_USAGE_COUNT_SYNC, q); percpu_ref_kill(&q->q_usage_counter); mutex_unlock(&q->mq_freeze_lock); if (queue_is_mq(q)) @@ -144,6 +145,12 @@ void blk_freeze_queue_start(struct request_queue *q) } EXPORT_SYMBOL_GPL(blk_freeze_queue_start); +void blk_mq_freeze_queue_wait_sync(struct request_queue *q) +{ + wait_event(q->mq_freeze_wq, percpu_ref_is_zero(&q->q_usage_counter) && + test_bit(QUEUE_FLAG_USAGE_COUNT_SYNC, &q->queue_flags)); +} + void blk_mq_freeze_queue_wait(struct request_queue *q) { wait_event(q->mq_freeze_wq, percpu_ref_is_zero(&q->q_usage_counter)); diff --git a/include/linux/blk-mq.h b/include/linux/blk-mq.h index f8ea27423d1d..95b2c904375f 100644 --- a/include/linux/blk-mq.h +++ b/include/linux/blk-mq.h @@ -522,6 +522,7 @@ void blk_mq_freeze_queue(struct request_queue *q); void blk_mq_unfreeze_queue(struct request_queue *q); void blk_freeze_queue_start(struct request_queue *q); void blk_mq_freeze_queue_wait(struct request_queue *q); +void blk_mq_freeze_queue_wait_sync(struct request_queue *q); int blk_mq_freeze_queue_wait_timeout(struct request_queue *q, unsigned long timeout); diff --git a/include/linux/blkdev.h b/include/linux/blkdev.h index 98fdf5a31fd6..b61461e3a734 100644 --- a/include/linux/blkdev.h +++ b/include/linux/blkdev.h @@ -629,6 +629,8 @@ struct request_queue { #define QUEUE_FLAG_RQ_ALLOC_TIME 27 /* record rq->alloc_time_ns */ #define QUEUE_FLAG_HCTX_ACTIVE 28 /* at least one blk-mq hctx is active */ #define QUEUE_FLAG_NOWAIT 29 /* device supports NOWAIT */ +/* sync for q_usage_counter */ +#define QUEUE_FLAG_USAGE_COUNT_SYNC 30 #define QUEUE_FLAG_MQ_DEFAULT ((1 << QUEUE_FLAG_IO_STAT) | \ (1 << QUEUE_FLAG_SAME_COMP) | \ -- 2.31.1

3 years, 4 months

2
1
0 0

[PATCH v3] ksmbd: prevent out of bound read for SMB2_WRITE

by Namjae Jeon

OOB read memory can be written to a file, if DataOffset is 0 and Length is too large in SMB2_WRITE request of compound request. To prevent this, when checking the length of the data area of SMB2_WRITE in smb2_get_data_area_len(), let the minimum of DataOffset be the size of SMB2 header + the size of SMB2_WRITE header. This bug can lead an oops looking something like: [ 798.008715] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0xd3d/0x14b0 [ 798.008724] Read of size 252 at addr ffff88800f863e90 by task kworker/0:2/2859 ... [ 798.008754] Call Trace: [ 798.008756] <TASK> [ 798.008759] dump_stack_lvl+0x49/0x5f [ 798.008764] print_report.cold+0x5e/0x5cf [ 798.008768] ? __filemap_get_folio+0x285/0x6d0 [ 798.008774] ? copy_page_from_iter_atomic+0xd3d/0x14b0 [ 798.008777] kasan_report+0xaa/0x120 [ 798.008781] ? copy_page_from_iter_atomic+0xd3d/0x14b0 [ 798.008784] kasan_check_range+0x100/0x1e0 [ 798.008788] memcpy+0x24/0x60 [ 798.008792] copy_page_from_iter_atomic+0xd3d/0x14b0 [ 798.008795] ? pagecache_get_page+0x53/0x160 [ 798.008799] ? iov_iter_get_pages_alloc+0x1590/0x1590 [ 798.008803] ? ext4_write_begin+0xfc0/0xfc0 [ 798.008807] ? current_time+0x72/0x210 [ 798.008811] generic_perform_write+0x2c8/0x530 [ 798.008816] ? filemap_fdatawrite_wbc+0x180/0x180 [ 798.008820] ? down_write+0xb4/0x120 [ 798.008824] ? down_write_killable+0x130/0x130 [ 798.008829] ext4_buffered_write_iter+0x137/0x2c0 [ 798.008833] ext4_file_write_iter+0x40b/0x1490 [ 798.008837] ? __fsnotify_parent+0x275/0xb20 [ 798.008842] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 798.008846] ? ext4_buffered_write_iter+0x2c0/0x2c0 [ 798.008851] __kernel_write+0x3a1/0xa70 [ 798.008855] ? __x64_sys_preadv2+0x160/0x160 [ 798.008860] ? security_file_permission+0x4a/0xa0 [ 798.008865] kernel_write+0xbb/0x360 [ 798.008869] ksmbd_vfs_write+0x27e/0xb90 [ksmbd] [ 798.008881] ? ksmbd_vfs_read+0x830/0x830 [ksmbd] [ 798.008892] ? _raw_read_unlock+0x2a/0x50 [ 798.008896] smb2_write+0xb45/0x14e0 [ksmbd] [ 798.008909] ? __kasan_check_write+0x14/0x20 [ 798.008912] ? _raw_spin_lock_bh+0xd0/0xe0 [ 798.008916] ? smb2_read+0x15e0/0x15e0 [ksmbd] [ 798.008927] ? memcpy+0x4e/0x60 [ 798.008931] ? _raw_spin_unlock+0x19/0x30 [ 798.008934] ? ksmbd_smb2_check_message+0x16af/0x2350 [ksmbd] [ 798.008946] ? _raw_spin_lock_bh+0xe0/0xe0 [ 798.008950] handle_ksmbd_work+0x30e/0x1020 [ksmbd] [ 798.008962] process_one_work+0x778/0x11c0 [ 798.008966] ? _raw_spin_lock_irq+0x8e/0xe0 [ 798.008970] worker_thread+0x544/0x1180 [ 798.008973] ? __cpuidle_text_end+0x4/0x4 [ 798.008977] kthread+0x282/0x320 [ 798.008982] ? process_one_work+0x11c0/0x11c0 [ 798.008985] ? kthread_complete_and_exit+0x30/0x30 [ 798.008989] ret_from_fork+0x1f/0x30 [ 798.008995] </TASK> Fixes: e2f34481b24d ("cifsd: add server-side procedures for SMB3") Cc: stable(a)vger.kernel.org Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-17817 Signed-off-by: Hyunchul Lee <hyc.lee(a)gmail.com> Acked-by: Namjae Jeon <linkinjeon(a)kernel.org> --- v2: - add missing fixes and stable tags. v3: - fix sparse warnings reported from kernel test robot. fs/ksmbd/smb2misc.c | 7 +++++-- fs/ksmbd/smb2pdu.c | 8 +++----- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/fs/ksmbd/smb2misc.c b/fs/ksmbd/smb2misc.c index f8f456377a51..aa1e663d9deb 100644 --- a/fs/ksmbd/smb2misc.c +++ b/fs/ksmbd/smb2misc.c @@ -136,8 +136,11 @@ static int smb2_get_data_area_len(unsigned int *off, unsigned int *len, *len = le16_to_cpu(((struct smb2_read_req *)hdr)->ReadChannelInfoLength); break; case SMB2_WRITE: - if (((struct smb2_write_req *)hdr)->DataOffset) { - *off = le16_to_cpu(((struct smb2_write_req *)hdr)->DataOffset); + if (((struct smb2_write_req *)hdr)->DataOffset || + ((struct smb2_write_req *)hdr)->Length) { + *off = max_t(unsigned int, + le16_to_cpu(((struct smb2_write_req *)hdr)->DataOffset), + offsetof(struct smb2_write_req, Buffer)); *len = le32_to_cpu(((struct smb2_write_req *)hdr)->Length); break; } diff --git a/fs/ksmbd/smb2pdu.c b/fs/ksmbd/smb2pdu.c index 7ecb6d87ae3e..ea47aa0262ee 100644 --- a/fs/ksmbd/smb2pdu.c +++ b/fs/ksmbd/smb2pdu.c @@ -6514,14 +6514,12 @@ int smb2_write(struct ksmbd_work *work) writethrough = true; if (is_rdma_channel == false) { - if ((u64)le16_to_cpu(req->DataOffset) + length > - get_rfc1002_len(work->request_buf)) { - pr_err("invalid write data offset %u, smb_len %u\n", - le16_to_cpu(req->DataOffset), - get_rfc1002_len(work->request_buf)); + if (le16_to_cpu(req->DataOffset) < + offsetof(struct smb2_write_req, Buffer)) { err = -EINVAL; goto out; } + data_buf = (char *)(((char *)&req->hdr.ProtocolId) + le16_to_cpu(req->DataOffset)); -- 2.25.1

3 years, 4 months

1
1
0 0

stable-rc/linux-5.10.y baseline: 73 runs, 8 regressions (v5.10.133-102-g3dbf5c047ca92)

by kernelci.org bot

stable-rc/linux-5.10.y baseline: 73 runs, 8 regressions (v5.10.133-102-g3dbf5c047ca92) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv2 | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 qemu_arm64-virt-gicv2 | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 qemu_arm64-virt-gicv2-uefi | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 qemu_arm64-virt-gicv2-uefi | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 qemu_arm64-virt-gicv3 | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 qemu_arm64-virt-gicv3 | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 qemu_arm64-virt-gicv3-uefi | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 qemu_arm64-virt-gicv3-uefi | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/job/stable-rc/branch/linux-5.10.y/kernel/v5.10.13… Test: baseline Tree: stable-rc Branch: linux-5.10.y Describe: v5.10.133-102-g3dbf5c047ca92 URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git SHA: 3dbf5c047ca925a0666cd82f39563e9921294ca6 Test Regressions ---------------- platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv2 | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9dbf633c0da57daf056 Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9dbf633c0da57daf057 new failure (last pass: v5.10.101-87-g1f48487c6f05) platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv2 | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9c9dfce33566fdaf056 Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9c9dfce33566fdaf057 new failure (last pass: v5.10.101-87-g1f48487c6f05) platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv2-uefi | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9d9dfce33566fdaf05b Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9d9dfce33566fdaf05c new failure (last pass: v5.10.101-87-g1f48487c6f05) platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv2-uefi | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9d699a2abae91daf057 Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9d699a2abae91daf058 new failure (last pass: v5.10.101-87-g1f48487c6f05) platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv3 | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9d71c97fdb547daf05b Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9d71c97fdb547daf05c new failure (last pass: v5.10.101-87-g1f48487c6f05) platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv3 | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9c828500a760adaf05a Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9c828500a760adaf05b new failure (last pass: v5.10.101-87-g1f48487c6f05) platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv3-uefi | arm64 | lab-broonie | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9d828500a760adaf060 Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9d828500a760adaf061 new failure (last pass: v5.10.101-87-g1f48487c6f05) platform | arch | lab | compiler | defconfig | regressions ---------------------------+-------+---------------+----------+----------------------------+------------ qemu_arm64-virt-gicv3-uefi | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62e2e9c2a28ef9f66adaf176 Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.133-102-g3dbf5c0… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.login: https://kernelci.org/test/case/id/62e2e9c2a28ef9f66adaf177 new failure (last pass: v5.10.101-87-g1f48487c6f05)

3 years, 4 months

1
0
0 0

[PATCH 5.4 00/87] 5.4.208-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.4.208 release. There are 87 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 29 Jul 2022 16:09:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.208-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.4.208-rc1 Jan Beulich <jbeulich(a)suse.com> x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() Jose Alonso <joalonsof(a)gmail.com> net: usb: ax88179_178a needs FLAG_SEND_ZLP Jiri Slaby <jslaby(a)suse.cz> tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() Jiri Slaby <jslaby(a)suse.cz> tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() Jiri Slaby <jslaby(a)suse.cz> tty: drop tty_schedule_flip() Jiri Slaby <jslaby(a)suse.cz> tty: the rest, stop using tty_schedule_flip() Jiri Slaby <jslaby(a)suse.cz> tty: drivers/tty/, stop using tty_schedule_flip() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Fix sco_send_frame returning skb->len Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix passing NULL to PTR_ERR Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmmsg helper Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmsg helper Takashi Iwai <tiwai(a)suse.de> ALSA: memalloc: Align buffer allocations in page size Peter Zijlstra <peterz(a)infradead.org> bitfield.h: Fix "type of reg too small for mask" test Thomas Gleixner <tglx(a)linutronix.de> x86/mce: Deduplicate exception handling Michel Lespinasse <walken(a)google.com> mmap locking API: initial implementation as rwsem wrappers Peter Zijlstra <peterz(a)infradead.org> x86/uaccess: Implement macros for CMPXCHG on user addresses Al Viro <viro(a)zeniv.linux.org.uk> x86: get rid of small constant size cases in raw_copy_{to,from}_user() Will Deacon <will(a)kernel.org> locking/refcount: Consolidate implementations of refcount_t Will Deacon <will(a)kernel.org> locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions Will Deacon <will(a)kernel.org> locking/refcount: Move saturation warnings out of line Will Deacon <will(a)kernel.org> locking/refcount: Improve performance of generic REFCOUNT_FULL code Will Deacon <will(a)kernel.org> locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the <linux/refcount.h> header Will Deacon <will(a)kernel.org> locking/refcount: Remove unused refcount_*_checked() variants Will Deacon <will(a)kernel.org> locking/refcount: Ensure integer operands are treated as signed Will Deacon <will(a)kernel.org> locking/refcount: Define constants for saturation and max refcount values GUO Zihua <guozihua(a)huawei.com> ima: remove the IMA_TEMPLATE Kconfig option Alexander Aring <aahringo(a)redhat.com> dlm: fix pending remove if msg allocation fails Eric Dumazet <edumazet(a)google.com> bpf: Make sure mac_header was set before using it Wang Cheng <wanngchenng(a)gmail.com> mm/mempolicy: fix uninit-value in mpol_rebind_policy() Marc Kleine-Budde <mkl(a)pengutronix.de> spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_max_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_rfc1337. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_stdurg. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_retrans_collapse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_recovery. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_early_retrans. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl knobs related to SYN option. Kuniyuki Iwashima <kuniyu(a)amazon.com> udp: Fix a data-race around sysctl_udp_l3mdev_accept. Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. Hristo Venev <hristo(a)venev.name> be2net: Fix buffer overflow in be_get_module_eeprom Haibo Chen <haibo.chen(a)nxp.com> gpio: pca953x: only use single read/write for No AI mode Piotr Skajewski <piotrx.skajewski(a)intel.com> ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero Dawid Lukwinski <dawid.lukwinski(a)intel.com> i40e: Fix erroneous adapter reinitialization during recovery process Przemyslaw Patynowski <przemyslawx.patynowski(a)intel.com> iavf: Fix handling of dummy receive descriptors Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_fastopen. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_max_syn_backlog. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_tw_reuse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_notsent_lowat. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around some timeout sysctl knobs. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_syncookies. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix a data-race around sysctl_igmp_max_memberships. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix data-races around sysctl_igmp_llm_reports. Tariq Toukan <tariqt(a)nvidia.com> net/tls: Fix race in TLS device down flow Junxiao Chang <junxiao.chang(a)intel.com> net: stmmac: fix dma queue left shift overflow issue Robert Hancock <robert.hancock(a)calian.com> i2c: cadence: Change large transfer count reset logic to be unconditional Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_interval. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_threshold. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_min_snd_mss. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_base_mss. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_mtu_probing. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix a data-race around sysctl_fwmark_reflect. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_nonlocal_bind. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_fwd_use_pmtu. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_no_pmtu_disc. Lennert Buytenhek <buytenh(a)wantstofly.org> igc: Reinstate IGC_REMOVED logic and implement it properly Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() William Dean <williamsukatube(a)gmail.com> pinctrl: ralink: Check for null return of devm_kcalloc Miaoqian Lin <linmq006(a)gmail.com> power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe Hangyu Hua <hbh25y(a)gmail.com> xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() Pali Rohár <pali(a)kernel.org> serial: mvebu-uart: correctly report configured baudrate value Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix interrupt mapping for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix multi-MSI to allow more than one MSI vector Demi Marie Obenour <demi(a)invisiblethingslab.com> xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE Eric Snowberg <eric.snowberg(a)oracle.com> lockdown: Fix kexec lockdown bypass with ima policy Ido Schimmel <idosch(a)nvidia.com> mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication Ben Dooks <ben.dooks(a)codethink.co.uk> riscv: add as-options for modules with assembly compontents Fabien Dessenne <fabien.dessenne(a)foss.st.com> pinctrl: stm32: fix optional IRQ support to gpios ------------- Diffstat: Makefile | 4 +- arch/Kconfig | 21 -- arch/alpha/kernel/srmcons.c | 2 +- arch/arm/Kconfig | 1 - arch/arm64/Kconfig | 1 - arch/riscv/Makefile | 1 + arch/s390/configs/debug_defconfig | 1 - arch/x86/Kconfig | 1 - arch/x86/include/asm/asm.h | 6 - arch/x86/include/asm/refcount.h | 126 ---------- arch/x86/include/asm/uaccess.h | 154 +++++++++++- arch/x86/include/asm/uaccess_32.h | 27 --- arch/x86/include/asm/uaccess_64.h | 108 +-------- arch/x86/kernel/cpu/mce/core.c | 34 +-- arch/x86/mm/extable.c | 49 ---- drivers/crypto/chelsio/chtls/chtls_cm.c | 6 +- drivers/gpio/gpio-pca953x.c | 3 + drivers/gpu/drm/i915/Kconfig.debug | 1 - drivers/i2c/busses/i2c-cadence.c | 30 +-- drivers/misc/lkdtm/refcount.c | 8 - drivers/net/ethernet/emulex/benet/be_cmds.c | 10 +- drivers/net/ethernet/emulex/benet/be_cmds.h | 2 +- drivers/net/ethernet/emulex/benet/be_ethtool.c | 31 ++- drivers/net/ethernet/intel/i40e/i40e_main.c | 13 +- drivers/net/ethernet/intel/iavf/iavf_txrx.c | 5 +- drivers/net/ethernet/intel/igc/igc_regs.h | 2 + drivers/net/ethernet/intel/ixgbe/ixgbe.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 + drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 6 + .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 2 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 3 + drivers/net/usb/ax88179_178a.c | 16 +- drivers/pci/controller/pci-hyperv.c | 100 ++++++-- drivers/pinctrl/stm32/pinctrl-stm32.c | 18 +- drivers/power/reset/arm-versatile-reboot.c | 1 + drivers/s390/char/keyboard.h | 4 +- drivers/spi/spi-bcm2835.c | 12 +- drivers/staging/mt7621-pinctrl/pinctrl-rt2880.c | 2 + drivers/staging/speakup/spk_ttyio.c | 4 +- drivers/tty/cyclades.c | 6 +- drivers/tty/goldfish.c | 2 +- drivers/tty/moxa.c | 4 +- drivers/tty/pty.c | 14 +- drivers/tty/serial/lpc32xx_hs.c | 2 +- drivers/tty/serial/mvebu-uart.c | 25 +- drivers/tty/tty_buffer.c | 66 +++-- drivers/tty/vt/keyboard.c | 6 +- drivers/tty/vt/vt.c | 2 +- drivers/xen/gntdev.c | 3 +- fs/dlm/lock.c | 3 +- include/linux/bitfield.h | 19 +- include/linux/mm.h | 1 + include/linux/mmap_lock.h | 54 +++++ include/linux/refcount.h | 269 ++++++++++++++++++--- include/linux/tty_flip.h | 4 +- include/net/bluetooth/bluetooth.h | 65 +++++ include/net/inet_sock.h | 5 +- include/net/ip.h | 4 +- include/net/tcp.h | 9 +- include/net/udp.h | 2 +- kernel/bpf/core.c | 8 +- kernel/events/core.c | 45 ++-- lib/refcount.c | 255 +++---------------- mm/mempolicy.c | 2 +- net/bluetooth/rfcomm/core.c | 50 +++- net/bluetooth/rfcomm/sock.c | 46 +--- net/bluetooth/sco.c | 30 +-- net/core/filter.c | 4 +- net/core/secure_seq.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/fib_semantics.c | 2 +- net/ipv4/icmp.c | 2 +- net/ipv4/igmp.c | 23 +- net/ipv4/route.c | 2 +- net/ipv4/syncookies.c | 9 +- net/ipv4/tcp.c | 10 +- net/ipv4/tcp_fastopen.c | 4 +- net/ipv4/tcp_input.c | 51 ++-- net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/tcp_metrics.c | 3 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/tcp_output.c | 29 +-- net/ipv4/tcp_recovery.c | 6 +- net/ipv4/tcp_timer.c | 20 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/syncookies.c | 3 +- net/sctp/protocol.c | 2 +- net/tls/tls_device.c | 8 +- net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_state.c | 2 +- security/integrity/ima/Kconfig | 12 +- security/integrity/ima/ima_policy.c | 4 + sound/core/memalloc.c | 1 + 93 files changed, 1046 insertions(+), 990 deletions(-)

3 years, 4 months

7
93
0 0

[PATCH 4.19 00/62] 4.19.254-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.19.254 release. There are 62 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 29 Jul 2022 16:09:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.254-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.19.254-rc1 Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix interrupt mapping for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI Jeffrey Hugo <quic_jhugo(a)quicinc.com> PCI: hv: Fix multi-MSI to allow more than one MSI vector Jose Alonso <joalonsof(a)gmail.com> net: usb: ax88179_178a needs FLAG_SEND_ZLP Jiri Slaby <jslaby(a)suse.cz> tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() Jiri Slaby <jslaby(a)suse.cz> tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() Jiri Slaby <jslaby(a)suse.cz> tty: drop tty_schedule_flip() Jiri Slaby <jslaby(a)suse.cz> tty: the rest, stop using tty_schedule_flip() Jiri Slaby <jslaby(a)suse.cz> tty: drivers/tty/, stop using tty_schedule_flip() Pali Rohár <pali(a)kernel.org> serial: mvebu-uart: correctly report configured baudrate value Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Fix sco_send_frame returning skb->len Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix passing NULL to PTR_ERR Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmmsg helper Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Add bt_skb_sendmsg helper Takashi Iwai <tiwai(a)suse.de> ALSA: memalloc: Align buffer allocations in page size GUO Zihua <guozihua(a)huawei.com> ima: remove the IMA_TEMPLATE Kconfig option Alexander Aring <aahringo(a)redhat.com> dlm: fix pending remove if msg allocation fails Tony Fischetti <tony.fischetti(a)gmail.com> HID: add ALWAYS_POLL quirk to lenovo pixart mouse Benjamin Tissoires <benjamin.tissoires(a)redhat.com> HID: multitouch: add support for the Smart Tech panel Mikael Wikström <leakim.wikstrom(a)gmail.com> HID: multitouch: Lenovo X1 Tablet Gen3 trackpoint and buttons Benjamin Tissoires <benjamin.tissoires(a)redhat.com> HID: multitouch: simplify the application retrieval Xiaomeng Tong <xiam0nd.tong(a)gmail.com> tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator Jyri Sarha <jsarha(a)ti.com> drm/tilcdc: Remove obsolete crtc_mode_valid() hack Eric Dumazet <edumazet(a)google.com> bpf: Make sure mac_header was set before using it Wang Cheng <wanngchenng(a)gmail.com> mm/mempolicy: fix uninit-value in mpol_rebind_policy() Jason A. Donenfeld <Jason(a)zx2c4.com> Revert "Revert "char/random: silence a lockdep splat with printk()"" Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_max_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_rfc1337. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_stdurg. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_retrans_collapse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_recovery. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_early_retrans. Hristo Venev <hristo(a)venev.name> be2net: Fix buffer overflow in be_get_module_eeprom Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_fastopen. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_tw_reuse. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_notsent_lowat. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around some timeout sysctl knobs. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_reordering. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix a data-race around sysctl_igmp_max_memberships. Kuniyuki Iwashima <kuniyu(a)amazon.com> igmp: Fix data-races around sysctl_igmp_llm_reports. Tariq Toukan <tariqt(a)nvidia.com> net/tls: Fix race in TLS device down flow Junxiao Chang <junxiao.chang(a)intel.com> net: stmmac: fix dma queue left shift overflow issue Robert Hancock <robert.hancock(a)calian.com> i2c: cadence: Change large transfer count reset logic to be unconditional Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_interval. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix a data-race around sysctl_tcp_probe_threshold. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix data-races around sysctl_tcp_mtu_probing. Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix a data-race around sysctl_fwmark_reflect. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_nonlocal_bind. Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: Fix data-races around sysctl_ip_fwd_use_pmtu. Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() William Dean <williamsukatube(a)gmail.com> pinctrl: ralink: Check for null return of devm_kcalloc Miaoqian Lin <linmq006(a)gmail.com> power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe Hangyu Hua <hbh25y(a)gmail.com> xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() Demi Marie Obenour <demi(a)invisiblethingslab.com> xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE Ben Dooks <ben.dooks(a)codethink.co.uk> riscv: add as-options for modules with assembly compontents ------------- Diffstat: Makefile | 4 +- arch/alpha/kernel/srmcons.c | 2 +- arch/riscv/Makefile | 1 + drivers/char/random.c | 4 +- drivers/gpu/drm/tilcdc/tilcdc_crtc.c | 28 +++--- drivers/gpu/drm/tilcdc/tilcdc_drv.c | 1 - drivers/gpu/drm/tilcdc/tilcdc_drv.h | 2 - drivers/gpu/drm/tilcdc/tilcdc_external.c | 96 +++---------------- drivers/gpu/drm/tilcdc/tilcdc_external.h | 1 - drivers/gpu/drm/tilcdc/tilcdc_panel.c | 9 -- drivers/gpu/drm/tilcdc/tilcdc_tfp410.c | 9 -- drivers/hid/hid-ids.h | 2 + drivers/hid/hid-multitouch.c | 112 +++++++++++++--------- drivers/hid/hid-quirks.c | 1 + drivers/i2c/busses/i2c-cadence.c | 30 +----- drivers/net/ethernet/emulex/benet/be_cmds.c | 10 +- drivers/net/ethernet/emulex/benet/be_cmds.h | 2 +- drivers/net/ethernet/emulex/benet/be_ethtool.c | 31 +++--- drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 3 + drivers/net/usb/ax88179_178a.c | 16 ++-- drivers/pci/controller/pci-hyperv.c | 100 +++++++++++++++---- drivers/power/reset/arm-versatile-reboot.c | 1 + drivers/s390/char/keyboard.h | 4 +- drivers/staging/mt7621-pinctrl/pinctrl-rt2880.c | 2 + drivers/staging/speakup/spk_ttyio.c | 4 +- drivers/tty/cyclades.c | 6 +- drivers/tty/goldfish.c | 2 +- drivers/tty/moxa.c | 4 +- drivers/tty/pty.c | 14 +-- drivers/tty/serial/lpc32xx_hs.c | 2 +- drivers/tty/serial/mvebu-uart.c | 25 ++--- drivers/tty/tty_buffer.c | 66 ++++++++----- drivers/tty/vt/keyboard.c | 6 +- drivers/tty/vt/vt.c | 2 +- drivers/xen/gntdev.c | 3 +- fs/dlm/lock.c | 3 +- include/linux/tty_flip.h | 4 +- include/net/bluetooth/bluetooth.h | 65 +++++++++++++ include/net/inet_sock.h | 5 +- include/net/ip.h | 4 +- include/net/tcp.h | 9 +- kernel/bpf/core.c | 8 +- kernel/events/core.c | 45 ++++++--- mm/mempolicy.c | 2 +- net/bluetooth/rfcomm/core.c | 50 ++++++++-- net/bluetooth/rfcomm/sock.c | 46 ++------- net/bluetooth/sco.c | 30 ++---- net/ipv4/af_inet.c | 2 +- net/ipv4/igmp.c | 23 +++-- net/ipv4/route.c | 2 +- net/ipv4/tcp.c | 10 +- net/ipv4/tcp_fastopen.c | 4 +- net/ipv4/tcp_input.c | 19 ++-- net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/tcp_metrics.c | 3 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/tcp_output.c | 14 +-- net/ipv4/tcp_recovery.c | 6 +- net/ipv4/tcp_timer.c | 14 +-- net/sctp/protocol.c | 2 +- net/tls/tls_device.c | 8 +- net/xfrm/xfrm_policy.c | 5 +- security/integrity/ima/Kconfig | 12 +-- sound/core/memalloc.c | 1 + 64 files changed, 555 insertions(+), 450 deletions(-)

3 years, 4 months

7
68
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror July 2022