I'm announcing the release of the 5.10.171 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2
arch/arm/boot/dts/rk3288.dtsi | 1
arch/arm64/boot/dts/rockchip/rk3328-roc-cc.dts | 2
drivers/acpi/nfit/core.c | 2
drivers/gpu/drm/virtio/virtgpu_object.c | 5 +-
drivers/hid/hid-core.c | 3 +
drivers/infiniband/hw/hfi1/user_exp_rcv.c | 9 ----
drivers/md/md.c | 1
drivers/tty/vt/vc_screen.c | 7 +--
drivers/usb/core/hub.c | 5 --
drivers/usb/core/sysfs.c | 5 --
drivers/usb/gadget/function/u_serial.c | 23 ++++++++--
drivers/usb/serial/option.c | 4 +
fs/btrfs/send.c | 6 +-
io_uring/io_uring.c | 25 +++++++----
net/caif/caif_socket.c | 1
net/core/filter.c | 4 -
net/core/neighbour.c | 18 ++++++--
net/core/stream.c | 1
net/xfrm/xfrm_interface.c | 54 +++++++++++++++++++++++--
net/xfrm/xfrm_policy.c | 3 +
scripts/tags.sh | 11 +++--
22 files changed, 138 insertions(+), 54 deletions(-)
Alan Stern (1):
USB: core: Don't hold device lock while reading the "descriptors" sysfs file
Benedict Wong (1):
Fix XFRM-I support for nested ESP tunnels
Bing-Jhong Billy Jheng (1):
io_uring: add missing lock in io_get_file_fixed
Carlos Llamas (1):
scripts/tags.sh: fix incompatibility with PCRE2
Cristian Ciocaltea (1):
scripts/tags.sh: Invoke 'realpath' via 'xargs'
David Sloan (1):
md: Flush workqueue md_rdev_misc_wq in md_alloc()
David Sterba (1):
btrfs: send: limit number of clones and allocated memory size
Dean Luick (1):
IB/hfi1: Assign npages earlier
Dmitry Osipenko (1):
drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
Florian Zumbiehl (1):
USB: serial: option: add support for VW/Skoda "Carstick LTE"
Greg Kroah-Hartman (1):
Linux 5.10.171
Johan Jonker (1):
ARM: dts: rockchip: add power-domains property to dp node on rk3288
Julian Anastasov (1):
neigh: make sure used and confirmed times are valid
Krzysztof Kozlowski (1):
arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
Kuniyuki Iwashima (1):
net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
Martin KaFai Lau (1):
bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
Miaoqian Lin (1):
drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
Prashanth K (1):
usb: gadget: u_serial: Add null pointer check in gserial_resume
Thomas Weißschuh (1):
vc_screen: don't clobber return value in vcs_read
Vishal Verma (1):
ACPI: NFIT: fix a potential deadlock during NFIT teardown
Xin Zhao (1):
HID: core: Fix deadloop in hid_apply_multiplier.
I'm announcing the release of the 5.4.234 kernel.
All users of the 5.4 kernel series must upgrade.
The updated 5.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 +-
arch/arm/boot/dts/rk3288.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328-roc-cc.dts | 2 --
drivers/acpi/nfit/core.c | 2 +-
drivers/dma/sh/rcar-dmac.c | 5 ++++-
drivers/hid/hid-core.c | 3 +++
drivers/infiniband/hw/hfi1/user_exp_rcv.c | 9 ++-------
drivers/tty/vt/vc_screen.c | 7 ++++---
drivers/usb/core/hub.c | 5 ++---
drivers/usb/core/sysfs.c | 5 -----
drivers/usb/serial/option.c | 4 ++++
fs/btrfs/send.c | 6 +++---
net/caif/caif_socket.c | 1 +
net/core/filter.c | 4 ++--
net/core/neighbour.c | 18 +++++++++++++++---
net/core/stream.c | 1 -
16 files changed, 43 insertions(+), 32 deletions(-)
Alan Stern (1):
USB: core: Don't hold device lock while reading the "descriptors" sysfs file
David Sterba (1):
btrfs: send: limit number of clones and allocated memory size
Dean Luick (1):
IB/hfi1: Assign npages earlier
Florian Zumbiehl (1):
USB: serial: option: add support for VW/Skoda "Carstick LTE"
Greg Kroah-Hartman (1):
Linux 5.4.234
Jiasheng Jiang (1):
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
Johan Jonker (1):
ARM: dts: rockchip: add power-domains property to dp node on rk3288
Julian Anastasov (1):
neigh: make sure used and confirmed times are valid
Krzysztof Kozlowski (1):
arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
Kuniyuki Iwashima (1):
net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
Martin KaFai Lau (1):
bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
Thomas Weißschuh (1):
vc_screen: don't clobber return value in vcs_read
Vishal Verma (1):
ACPI: NFIT: fix a potential deadlock during NFIT teardown
Xin Zhao (1):
HID: core: Fix deadloop in hid_apply_multiplier.
I'm announcing the release of the 4.19.275 kernel.
All users of the 4.19 kernel series must upgrade.
The updated 4.19.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 +-
arch/arm/boot/dts/rk3288.dtsi | 1 +
drivers/acpi/nfit/core.c | 2 +-
drivers/dma/sh/rcar-dmac.c | 5 ++++-
drivers/infiniband/hw/hfi1/user_exp_rcv.c | 9 ++-------
drivers/tty/vt/vc_screen.c | 7 ++++---
drivers/usb/core/hub.c | 5 ++---
drivers/usb/core/sysfs.c | 5 -----
drivers/usb/serial/option.c | 4 ++++
fs/btrfs/send.c | 6 +++---
net/caif/caif_socket.c | 1 +
net/core/stream.c | 1 -
12 files changed, 23 insertions(+), 25 deletions(-)
Alan Stern (1):
USB: core: Don't hold device lock while reading the "descriptors" sysfs file
David Sterba (1):
btrfs: send: limit number of clones and allocated memory size
Dean Luick (1):
IB/hfi1: Assign npages earlier
Florian Zumbiehl (1):
USB: serial: option: add support for VW/Skoda "Carstick LTE"
Greg Kroah-Hartman (1):
Linux 4.19.275
Jiasheng Jiang (1):
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
Johan Jonker (1):
ARM: dts: rockchip: add power-domains property to dp node on rk3288
Kuniyuki Iwashima (1):
net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
Thomas Weißschuh (1):
vc_screen: don't clobber return value in vcs_read
Vishal Verma (1):
ACPI: NFIT: fix a potential deadlock during NFIT teardown
This is the start of the stable review cycle for the 5.15.97 release.
There are 22 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 03 Mar 2023 18:06:43 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.97-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.15.97-rc1
Alan Stern <stern(a)rowland.harvard.edu>
USB: core: Don't hold device lock while reading the "descriptors" sysfs file
Prashanth K <quic_prashk(a)quicinc.com>
usb: gadget: u_serial: Add null pointer check in gserial_resume
Florian Zumbiehl <florz(a)florz.de>
USB: serial: option: add support for VW/Skoda "Carstick LTE"
Heikki Krogerus <heikki.krogerus(a)linux.intel.com>
usb: dwc3: pci: add support for the Intel Meteor Lake-M
Carlos Llamas <cmllamas(a)google.com>
scripts/tags.sh: fix incompatibility with PCRE2
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
scripts/tags.sh: Invoke 'realpath' via 'xargs'
Thomas Weißschuh <linux(a)weissschuh.net>
vc_screen: don't clobber return value in vcs_read
Kuniyuki Iwashima <kuniyu(a)amazon.com>
net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
Martin KaFai Lau <martin.lau(a)kernel.org>
bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
Sergio Paracuellos <sergio.paracuellos(a)gmail.com>
staging: mt7621-dts: change palmbus address to lower case
Kan Liang <kan.liang(a)linux.intel.com>
x86/cpu: Add Lunar Lake M
Xin Zhao <xnzhao(a)google.com>
HID: core: Fix deadloop in hid_apply_multiplier.
Julian Anastasov <ja(a)ssi.bg>
neigh: make sure used and confirmed times are valid
Dean Luick <dean.luick(a)cornelisnetworks.com>
IB/hfi1: Assign npages earlier
Jack Yu <jack.yu(a)realtek.com>
ASoC: rt715-sdca: fix clock stop prepare timeout issue
David Sterba <dsterba(a)suse.com>
btrfs: send: limit number of clones and allocated memory size
Vishal Verma <vishal.l.verma(a)intel.com>
ACPI: NFIT: fix a potential deadlock during NFIT teardown
Takahiro Fujii <fujii(a)xaxxi.net>
HID: elecom: add support for TrackBall 056E:011C
Johan Jonker <jbx6244(a)gmail.com>
ARM: dts: rockchip: add power-domains property to dp node on rk3288
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
Benedict Wong <benedictwong(a)google.com>
Fix XFRM-I support for nested ESP tunnels
Neel Patel <neel(a)pensando.io>
ionic: refactor use of ionic_rx_fill()
-------------
Diffstat:
Makefile | 4 +-
arch/arm/boot/dts/rk3288.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3328-roc-cc.dts | 2 -
arch/x86/include/asm/intel-family.h | 2 +
drivers/acpi/nfit/core.c | 2 +-
drivers/hid/hid-core.c | 3 ++
drivers/hid/hid-elecom.c | 16 ++++++-
drivers/hid/hid-ids.h | 3 +-
drivers/hid/hid-quirks.c | 3 +-
drivers/infiniband/hw/hfi1/user_exp_rcv.c | 9 +---
drivers/net/ethernet/pensando/ionic/ionic_txrx.c | 23 +++++-----
drivers/staging/mt7621-dts/gbpc1.dts | 2 +-
drivers/tty/vt/vc_screen.c | 7 +--
drivers/usb/core/hub.c | 5 +--
drivers/usb/core/sysfs.c | 5 ---
drivers/usb/dwc3/dwc3-pci.c | 4 ++
drivers/usb/gadget/function/u_serial.c | 23 ++++++++--
drivers/usb/serial/option.c | 4 ++
fs/btrfs/send.c | 6 +--
net/caif/caif_socket.c | 1 +
net/core/filter.c | 4 +-
net/core/neighbour.c | 18 ++++++--
net/core/stream.c | 1 -
net/xfrm/xfrm_interface.c | 54 ++++++++++++++++++++++--
net/xfrm/xfrm_policy.c | 3 ++
scripts/tags.sh | 11 +++--
sound/soc/codecs/rt715-sdca-sdw.c | 2 +-
27 files changed, 157 insertions(+), 61 deletions(-)
The quilt patch titled
Subject: fs/cramfs/inode.c: initialize file_ra_state
has been removed from the -mm tree. Its filename was
fs-cramfs-inodec-initialize-file_ra_state.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Andrew Morton <akpm(a)linux-foundation.org>
Subject: fs/cramfs/inode.c: initialize file_ra_state
Date: Sun Feb 26 12:31:11 PM PST 2023
file_ra_state_init() assumes that the file_ra_state has been zeroed out.
Fixes a KMSAN used-unintialized issue (at least).
Fixes: cf948cbc35e80 ("cramfs: read_mapping_page() is synchronous")
Reported-by: syzbot <syzbot+8ce7f8308d91e6b8bbe2(a)syzkaller.appspotmail.com>
Link: https://lkml.kernel.org/r/0000000000008f74e905f56df987@google.com
Cc: Matthew Wilcox <willy(a)infradead.org>
Cc: Nicolas Pitre <nico(a)fluxnic.net>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
--- a/fs/cramfs/inode.c~fs-cramfs-inodec-initialize-file_ra_state
+++ a/fs/cramfs/inode.c
@@ -183,7 +183,7 @@ static void *cramfs_blkdev_read(struct s
unsigned int len)
{
struct address_space *mapping = sb->s_bdev->bd_inode->i_mapping;
- struct file_ra_state ra;
+ struct file_ra_state ra = {};
struct page *pages[BLKS_PER_BUF];
unsigned i, blocknr, buffer;
unsigned long devsize;
_
Patches currently in -mm which might be from akpm(a)linux-foundation.org are
mm-page_alloc-reduce-page-alloc-free-sanity-checks-checkpatch-fixes.patch
mm-page_alloc-reduce-page-alloc-free-sanity-checks-fix.patch
mm-userfaultfd-support-wp-on-multiple-vmas-fix.patch
The quilt patch titled
Subject: fs: hfsplus: fix UAF issue in hfsplus_put_super
has been removed from the -mm tree. Its filename was
fs-hfsplus-fix-uaf-issue-in-hfsplus_put_super.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Dongliang Mu <mudongliangabcd(a)gmail.com>
Subject: fs: hfsplus: fix UAF issue in hfsplus_put_super
Date: Sun, 26 Feb 2023 20:49:47 +0800
The current hfsplus_put_super first calls hfs_btree_close on
sbi->ext_tree, then invokes iput on sbi->hidden_dir, resulting in an
use-after-free issue in hfsplus_release_folio.
As shown in hfsplus_fill_super, the error handling code also calls iput
before hfs_btree_close.
To fix this error, we move all iput calls before hfsplus_btree_close.
Note that this patch is tested on Syzbot.
Link: https://lkml.kernel.org/r/20230226124948.3175736-1-mudongliangabcd@gmail.com
Reported-by: syzbot+57e3e98f7e3b80f64d56(a)syzkaller.appspotmail.com
Tested-by: Dongliang Mu <mudongliangabcd(a)gmail.com>
Signed-off-by: Dongliang Mu <mudongliangabcd(a)gmail.com>
Cc: Bart Van Assche <bvanassche(a)acm.org>
Cc: Jens Axboe <axboe(a)kernel.dk>
Cc: Muchun Song <songmuchun(a)bytedance.com>
Cc: Roman Gushchin <roman.gushchin(a)linux.dev>
Cc: "Theodore Ts'o" <tytso(a)mit.edu>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
--- a/fs/hfsplus/super.c~fs-hfsplus-fix-uaf-issue-in-hfsplus_put_super
+++ a/fs/hfsplus/super.c
@@ -295,11 +295,11 @@ static void hfsplus_put_super(struct sup
hfsplus_sync_fs(sb, 1);
}
+ iput(sbi->alloc_file);
+ iput(sbi->hidden_dir);
hfs_btree_close(sbi->attr_tree);
hfs_btree_close(sbi->cat_tree);
hfs_btree_close(sbi->ext_tree);
- iput(sbi->alloc_file);
- iput(sbi->hidden_dir);
kfree(sbi->s_vhdr_buf);
kfree(sbi->s_backup_vhdr_buf);
unload_nls(sbi->nls);
_
Patches currently in -mm which might be from mudongliangabcd(a)gmail.com are
The quilt patch titled
Subject: panic: fix the panic_print NMI backtrace setting
has been removed from the -mm tree. Its filename was
panic-fixes-the-panic_print-nmi-backtrace-setting.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: "Guilherme G. Piccoli" <gpiccoli(a)igalia.com>
Subject: panic: fix the panic_print NMI backtrace setting
Date: Sun, 26 Feb 2023 13:08:38 -0300
Commit 8d470a45d1a6 ("panic: add option to dump all CPUs backtraces in
panic_print") introduced a setting for the "panic_print" kernel parameter
to allow users to request a NMI backtrace on panic. Problem is that the
panic_print handling happens after the secondary CPUs are already
disabled, hence this option ended-up being kind of a no-op - kernel skips
the NMI trace in idling CPUs, which is the case of offline CPUs.
Fix it by checking the NMI backtrace bit in the panic_print prior to the
CPU disabling function.
Link: https://lkml.kernel.org/r/20230226160838.414257-1-gpiccoli@igalia.com
Fixes: 8d470a45d1a6 ("panic: add option to dump all CPUs backtraces in panic_print")
Signed-off-by: Guilherme G. Piccoli <gpiccoli(a)igalia.com>
Cc: <stable(a)vger.kernel.org>
Cc: Baoquan He <bhe(a)redhat.com>
Cc: Dave Young <dyoung(a)redhat.com>
Cc: Feng Tang <feng.tang(a)intel.com>
Cc: HATAYAMA Daisuke <d.hatayama(a)jp.fujitsu.com>
Cc: Hidehiro Kawai <hidehiro.kawai.ez(a)hitachi.com>
Cc: Kees Cook <keescook(a)chromium.org>
Cc: Michael Kelley <mikelley(a)microsoft.com>
Cc: Petr Mladek <pmladek(a)suse.com>
Cc: Vivek Goyal <vgoyal(a)redhat.com>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
--- a/kernel/panic.c~panic-fixes-the-panic_print-nmi-backtrace-setting
+++ a/kernel/panic.c
@@ -212,9 +212,6 @@ static void panic_print_sys_info(bool co
return;
}
- if (panic_print & PANIC_PRINT_ALL_CPU_BT)
- trigger_all_cpu_backtrace();
-
if (panic_print & PANIC_PRINT_TASK_INFO)
show_state();
@@ -244,6 +241,30 @@ void check_panic_on_warn(const char *ori
origin, limit);
}
+/*
+ * Helper that triggers the NMI backtrace (if set in panic_print)
+ * and then performs the secondary CPUs shutdown - we cannot have
+ * the NMI backtrace after the CPUs are off!
+ */
+static void panic_other_cpus_shutdown(bool crash_kexec)
+{
+ if (panic_print & PANIC_PRINT_ALL_CPU_BT)
+ trigger_all_cpu_backtrace();
+
+ /*
+ * Note that smp_send_stop() is the usual SMP shutdown function,
+ * which unfortunately may not be hardened to work in a panic
+ * situation. If we want to do crash dump after notifier calls
+ * and kmsg_dump, we will need architecture dependent extra
+ * bits in addition to stopping other CPUs, hence we rely on
+ * crash_smp_send_stop() for that.
+ */
+ if (!crash_kexec)
+ smp_send_stop();
+ else
+ crash_smp_send_stop();
+}
+
/**
* panic - halt the system
* @fmt: The text string to print
@@ -334,23 +355,10 @@ void panic(const char *fmt, ...)
*
* Bypass the panic_cpu check and call __crash_kexec directly.
*/
- if (!_crash_kexec_post_notifiers) {
+ if (!_crash_kexec_post_notifiers)
__crash_kexec(NULL);
- /*
- * Note smp_send_stop is the usual smp shutdown function, which
- * unfortunately means it may not be hardened to work in a
- * panic situation.
- */
- smp_send_stop();
- } else {
- /*
- * If we want to do crash dump after notifier calls and
- * kmsg_dump, we will need architecture dependent extra
- * works in addition to stopping other CPUs.
- */
- crash_smp_send_stop();
- }
+ panic_other_cpus_shutdown(_crash_kexec_post_notifiers);
/*
* Run any panic handlers, including those that might need to
_
Patches currently in -mm which might be from gpiccoli(a)igalia.com are
I've been trying to reach you but all to no avail, please contact me on my private Email: Yuansusan-006(a)outlook.com
I have an important thing to discuss with you.
?
--
ATTENZIONE:
Le informazioni contenute in questo messaggio sono confidenziali
e non possono essere rivelate o utilizzate se non dal destinatario del messaggio.
Se il messaggio è stato ricevuto per errore, prego di comunicarlo immediatamente.