May 2023 - Linux-stable-mirror

by Greg Kroah-Hartman

I'm announcing the release of the 6.3.5 kernel. All users of the 6.3 kernel series must upgrade. The updated 6.3.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.3.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/usb/cdns,usb3.yaml | 2 Makefile | 2 arch/arm/boot/dts/imx6qdl-mba6.dtsi | 1 arch/arm64/boot/dts/freescale/imx8mn-var-som.dtsi | 8 arch/arm64/boot/dts/freescale/imx8mp.dtsi | 2 arch/m68k/kernel/signal.c | 14 arch/parisc/Kconfig | 4 arch/parisc/include/asm/cacheflush.h | 4 arch/parisc/kernel/alternative.c | 2 arch/parisc/kernel/cache.c | 5 arch/parisc/kernel/process.c | 11 arch/parisc/kernel/traps.c | 8 arch/x86/events/intel/uncore_snbep.c | 11 arch/x86/kernel/cpu/topology.c | 5 arch/x86/kernel/dumpstack.c | 7 arch/x86/mm/init.c | 25 + arch/x86/pci/xen.c | 8 arch/xtensa/kernel/signal.c | 35 +- arch/xtensa/kernel/xtensa_ksyms.c | 4 arch/xtensa/lib/Makefile | 2 arch/xtensa/lib/bswapdi2.S | 21 + arch/xtensa/lib/bswapsi2.S | 16 + block/blk-map.c | 2 drivers/android/binder.c | 28 + drivers/android/binder_alloc.c | 64 +--- drivers/android/binder_alloc.h | 4 drivers/android/binder_alloc_selftest.c | 2 drivers/char/tpm/tpm-chip.c | 52 ++- drivers/char/tpm/tpm-interface.c | 10 drivers/char/tpm/tpm.h | 1 drivers/char/tpm/tpm_tis.c | 2 drivers/char/tpm/tpm_tis_core.c | 187 ++++++------ drivers/char/tpm/tpm_tis_core.h | 3 drivers/cxl/core/mbox.c | 15 drivers/cxl/core/pci.c | 112 ++++++- drivers/cxl/cxl.h | 1 drivers/cxl/cxlmem.h | 2 drivers/cxl/cxlpci.h | 2 drivers/cxl/mem.c | 3 drivers/cxl/pci.c | 6 drivers/cxl/port.c | 20 - drivers/firmware/arm_ffa/bus.c | 19 - drivers/firmware/arm_ffa/driver.c | 6 drivers/gpio/gpio-mockup.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c | 9 drivers/gpu/drm/amd/amdgpu/psp_v10_0.c | 8 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 drivers/gpu/drm/amd/pm/amdgpu_pm.c | 12 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 1 drivers/gpu/drm/drm_managed.c | 22 - drivers/gpu/drm/mgag200/mgag200_mode.c | 5 drivers/gpu/drm/radeon/radeon_irq_kms.c | 10 drivers/hwtracing/coresight/coresight-tmc-etr.c | 2 drivers/irqchip/irq-mips-gic.c | 32 +- drivers/media/radio/radio-shark.c | 10 drivers/media/radio/radio-shark2.c | 10 drivers/mmc/core/block.c | 5 drivers/mmc/host/sdhci-esdhc-imx.c | 18 - drivers/net/bonding/bond_main.c | 8 drivers/net/ethernet/3com/3c589_cs.c | 11 drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 4 drivers/net/ethernet/mediatek/mtk_eth_soc.c | 8 drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 3 drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 4 drivers/net/ethernet/mellanox/mlx5/core/en/txrx.h | 2 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 23 - drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 19 - drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c | 16 - drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 4 drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 7 drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.c | 70 +++- drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.h | 1 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 drivers/net/ethernet/mellanox/mlx5/core/steering/dr_cmd.c | 4 drivers/net/ethernet/mellanox/mlx5/core/steering/dr_ste.c | 3 drivers/net/ethernet/microchip/lan966x/lan966x_main.c | 10 drivers/net/ethernet/nvidia/forcedeth.c | 1 drivers/net/phy/mscc/mscc_main.c | 1 drivers/net/team/team.c | 7 drivers/net/usb/cdc_ncm.c | 24 - drivers/net/wireless/realtek/rtw89/mac.c | 4 drivers/net/wireless/realtek/rtw89/mac.h | 2 drivers/net/wireless/realtek/rtw89/rtw8852b.c | 22 - drivers/platform/mellanox/mlxbf-pmc.c | 5 drivers/platform/x86/intel/ifs/load.c | 2 drivers/platform/x86/intel/speed_select_if/isst_if_common.c | 12 drivers/power/supply/axp288_fuel_gauge.c | 2 drivers/power/supply/bq24190_charger.c | 1 drivers/power/supply/bq25890_charger.c | 5 drivers/power/supply/bq27xxx_battery.c | 175 ++++++----- drivers/power/supply/bq27xxx_battery_i2c.c | 3 drivers/power/supply/mt6360_charger.c | 4 drivers/power/supply/power_supply_leds.c | 5 drivers/power/supply/sbs-charger.c | 2 drivers/regulator/mt6359-regulator.c | 7 drivers/regulator/pca9450-regulator.c | 4 drivers/tee/optee/smc_abi.c | 4 drivers/thermal/intel/int340x_thermal/int3400_thermal.c | 4 drivers/usb/core/usb.c | 76 ++++ drivers/usb/dwc3/core.h | 2 drivers/usb/dwc3/gadget.c | 10 drivers/usb/misc/sisusbvga/sisusbvga.c | 14 drivers/video/fbdev/udlfb.c | 13 drivers/watchdog/sp5100_tco.c | 4 drivers/xen/pvcalls-back.c | 9 fs/btrfs/disk-io.c | 9 fs/cifs/dfs.c | 2 fs/cifs/file.c | 3 fs/cifs/fs_context.c | 8 fs/ocfs2/namei.c | 2 fs/ocfs2/xattr.c | 30 + fs/xfs/libxfs/xfs_bmap.c | 1 include/drm/drm_managed.h | 18 + include/linux/arm_ffa.h | 1 include/linux/fs.h | 42 +- include/linux/if_team.h | 1 include/linux/mlx5/mlx5_ifc.h | 4 include/linux/mm.h | 16 + include/linux/msi.h | 9 include/linux/power/bq27xxx_battery.h | 4 include/linux/tpm.h | 14 include/linux/usb.h | 5 include/net/bonding.h | 1 include/net/ip.h | 2 include/net/page_pool.h | 18 - include/uapi/linux/in.h | 1 include/uapi/sound/skl-tplg-interface.h | 3 kernel/bpf/hashtab.c | 6 kernel/bpf/verifier.c | 2 kernel/irq/msi.c | 4 lib/debugobjects.c | 2 mm/page_alloc.c | 10 mm/sparse-vmemmap.c | 3 mm/zsmalloc.c | 36 -- net/core/page_pool.c | 28 + net/core/skbuff.c | 4 net/ipv4/ip_sockglue.c | 12 net/ipv4/raw.c | 5 net/ipv4/udplite.c | 2 net/ipv6/exthdrs_core.c | 2 net/ipv6/raw.c | 3 net/ipv6/udplite.c | 2 net/sctp/transport.c | 11 net/smc/af_smc.c | 9 net/smc/smc_core.c | 1 net/sunrpc/sched.c | 5 sound/hda/hdac_device.c | 2 sound/pci/hda/patch_ca0132.c | 1 sound/pci/hda/patch_realtek.c | 2 sound/soc/codecs/lpass-tx-macro.c | 5 sound/soc/codecs/rt5682-i2c.c | 4 sound/soc/codecs/rt5682.c | 6 sound/soc/codecs/rt5682.h | 1 sound/soc/intel/avs/apl.c | 6 sound/soc/intel/avs/messages.h | 2 tools/testing/cxl/Kbuild | 1 tools/testing/cxl/test/mem.c | 1 tools/testing/cxl/test/mock.c | 15 tools/testing/selftests/net/fib_tests.sh | 2 160 files changed, 1321 insertions(+), 581 deletions(-) Adam Stylinski (1): ALSA: hda/ca0132: add quirk for EVGA X299 DARK Alan Stern (4): fbdev: udlfb: Fix endpoint check USB: core: Add routines for endpoint checks in old drivers USB: sisusbvga: Add endpoint checks media: radio-shark: Add endpoint checks Alex Deucher (1): drm/radeon: reintroduce radeon_dp_work_func content Alexander Stein (2): regulator: pca9450: Fix BUCK2 enable_mask ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator Amadeusz Sławiński (1): ASoC: Intel: avs: Access path components under lock Aneesh Kumar K.V (1): mm/vmemmap/devdax: fix kernel crash when probing devdax devices Anton Protopopov (1): bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps Anuj Gupta (1): block: fix bio-cache for passthru IO Arınç ÜNAL (1): net: ethernet: mtk_eth_soc: fix QoS on DSA MAC on non MTK_NETSYS_V2 SoCs Bin Li (1): ALSA: hda/realtek: Enable headset onLenovo M70/M90 Carlos Llamas (5): Revert "binder_alloc: add missing mmap_lock calls when using the VMA" Revert "android: binder: stop saving a pointer to the VMA" binder: add lockless binder_alloc_(set|get)_vma() binder: fix UAF caused by faulty buffer cleanup binder: fix UAF of alloc->vma in race with munmap() Cezary Rojewski (2): ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg ASoC: Intel: avs: Fix declaration of enum avs_channel_config Christian Loehle (1): mmc: block: ensure error propagation for non-blk Christophe JAILLET (2): forcedeth: Fix an error handling path in nv_probe() 3c589_cs: Fix an error handling path in tc589_probe() Daisuke Nojiri (1): power: supply: sbs-charger: Fix INHIBITED bit for Status reg Dan Carpenter (3): coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() platform/mellanox: mlxbf-pmc: fix sscanf() error checking Dan Williams (1): cxl/port: Enable the HDM decoder capability for switch ports Dave Chinner (1): xfs: fix livelock in delayed allocation at ENOSPC Dave Hansen (1): x86/mm: Avoid incomplete Global INVLPG flushes Dave Jiang (2): cxl: Wait Memory_Info_Valid before access memory related info cxl: Move cxl_await_media_ready() to before capacity info retrieval David Arcari (1): platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain David Epping (1): net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE David Howells (1): cifs: Fix cifs_limit_bvec_subset() to correctly check the maxmimum size Erez Shitrit (1): net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs Etienne Carriere (1): optee: fix uninited async notif value Evan Quan (1): drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 Fangzhi Zuo (1): drm/amd/display: Have Payload Properly Created After Resume Finn Thain (1): m68k: Move signal frame following exception on 68020/030 Frank Li (1): dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type Gavrilov Ilia (1): ipv6: Fix out-of-bounds access in ipv6_find_tlv() Greg Kroah-Hartman (2): Revert "arm64: dts: imx8mp: Drop simple-bus from fsl,imx8mp-media-blk-ctrl" Linux 6.3.5 Gregory Oakes (1): watchdog: sp5100_tco: Immediately trigger upon starting. Haibo Chen (1): mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works Hans de Goede (12): power: supply: axp288_fuel_gauge: Fix external_power_changed race power: supply: bq25890: Fix external_power_changed race power: supply: leds: Fix blink to LED on transition power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() power: supply: bq27xxx: Move bq27xxx_battery_update() down power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize power: supply: bq25890: Call power_supply_changed() after updating input current or voltage power: supply: bq24190: Call power_supply_changed() after updating input current Hao Ge (1): fs: fix undefined behavior in bit shift for SB_NOUSER Helge Deller (6): parisc: Use num_present_cpus() in alternative patching code parisc: Handle kgdb breakpoints only in kernel context parisc: Fix flush_dcache_page() for usage from irq context parisc: Allow to reboot machine after system halt parisc: Enable LOCKDEP support parisc: Handle kprobes breakpoints only in kernel context Horatiu Vultur (1): lan966x: Fix unloading/loading of the driver Hugo Villeneuve (1): arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay Jack Xiao (1): drm/amd/amdgpu: limit one queue per gang Jakub Kicinski (1): net/mlx5e: do as little as possible in napi poll when budget is 0 Jarkko Sakkinen (3): tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers tpm: Prevent hwrng from activating during resume Jesse Zhang (1): drm/amdgpu: don't enable secure display on incompatible platforms Jiaxun Yang (2): irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable irqchip/mips-gic: Use raw spinlock for gic_lock Jocelyn Falempe (1): drm/mgag200: Fix gamma lut not initialized. Jonatas Esteves (1): drm/amd/pm: Fix output of pp_od_clk_voltage Josef Bacik (1): btrfs: use nofs when cleaning up aborted transactions Kan Liang (1): perf/x86/uncore: Correct the number of CHAs on SPR Kang Chen (1): power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe Kuniyuki Iwashima (1): udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). Lino Sanfilippo (3): tpm, tpm_tis: Avoid cache incoherency in test for interrupts tpm, tpm_tis: Only handle supported interrupts tpm, tpm_tis: startup chip before testing for interrupts Linyu Yuan (1): usb: dwc3: fix gadget mode suspend interrupt handler issue Matthew Auld (1): drm: fix drmm_mutex_init() Matthias Kaehlcke (1): ASoC: rt5682: Disable jack detection interrupt during suspend Max Filippov (2): xtensa: fix signal delivery to FDPIC process xtensa: add __bswap{si,di}2 helpers Maximilian Heyne (1): x86/pci/xen: populate MSI sysfs entries Nhat Pham (1): zsmalloc: move LRU update from zs_map_object() to zs_malloc() Nicolas Dichtel (1): ipv{4,6}/raw: fix output xfrm lookup wrt protocol Paulo Alcantara (1): cifs: fix smb1 mount regression Ping-Ke Shih (1): wifi: rtw89: 8852b: adjust quota to avoid SER L1 caused by access null page Po-Hsu Lin (1): selftests: fib_tests: mute cleanup error message Pratyush Yadav (1): net: fix skb leak in __skb_tstamp_tx() Rahul Rameshbabu (1): net/mlx5e: Fix SQ wake logic in ptp napi_poll context Ravulapati Vishnu Vardhan Rao (1): ASoC: lpass: Fix for KASAN use_after_free out of bounds Roberto Sassu (1): ocfs2: Switch to security_inode_init_security() Roi Dayan (1): net/mlx5: Fix error message when failing to allocate device memory Sen Chu (1): regulator: mt6359: add read check for PMIC MT6359 Shay Drory (4): net/mlx5: Handle pairing of E-switch via uplink un/load APIs net/mlx5: Collect command failures data only for known commands net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device net/mlx5: Devcom, serialize devcom registration Srinivas Pandruvada (1): thermal: intel: int340x: Add new line for UUID display Steve French (1): cifs: mapchars mount option ignored Steve Wahl (1): platform/x86: ISST: Remove 8 socket limit Sudeep Holla (3): firmware: arm_ffa: Check if ffa_driver remove is present before executing firmware: arm_ffa: Fix FFA device names for logical partitions firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors Sunil Goutham (1): octeontx2-pf: Fix TSOv6 offload Taehee Yoo (1): net: fix stack overflow when LRO is disabled for virtual interfaces Takashi Iwai (1): ALSA: hda: Fix unhandled register update during auto-suspend period Tetsuo Handa (1): debugobjects: Don't wake up kswapd from fill_pool() Trond Myklebust (1): SUNRPC: Don't change task->tk_status after the call to rpc_exit_task Tudor Ambarus (1): net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Vernon Lovejoy (1): x86/show_trace_log_lvl: Ensure stack pointer is aligned, again Vlad Buslov (2): net/mlx5e: Fix deadlock in tc route query code net/mlx5e: Use correct encap attribute during invalidation Wen Gu (1): net/smc: Reset connection when trying to use SMCRv2 fails. Will Deacon (1): bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields Xin Long (1): sctp: fix an issue that plpmtu can never go to complete state Yevgeny Kliteynik (1): net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE Yunsheng Lin (1): page_pool: fix inconsistency for page_pool_ring_[un]lock() Zev Weiss (1): gpio: mockup: Fix mode of debugfs files Zhang Rui (1): x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms

1 year, 8 months

1
1
0 0

Linux 6.1.31

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.31 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/usb/cdns,usb3.yaml | 2 Makefile | 2 arch/arm/boot/dts/imx6qdl-mba6.dtsi | 1 arch/arm64/boot/dts/freescale/imx8mn-var-som.dtsi | 8 arch/arm64/mm/copypage.c | 5 arch/m68k/kernel/signal.c | 14 arch/parisc/Kconfig | 4 arch/parisc/include/asm/cacheflush.h | 4 arch/parisc/kernel/alternative.c | 2 arch/parisc/kernel/cache.c | 5 arch/parisc/kernel/process.c | 11 arch/parisc/kernel/traps.c | 8 arch/x86/events/intel/uncore_snbep.c | 11 arch/x86/kernel/cpu/topology.c | 5 arch/x86/kernel/dumpstack.c | 7 arch/x86/mm/init.c | 25 + arch/x86/pci/xen.c | 8 arch/xtensa/kernel/signal.c | 35 +- arch/xtensa/kernel/xtensa_ksyms.c | 4 arch/xtensa/lib/Makefile | 2 arch/xtensa/lib/bswapdi2.S | 21 + arch/xtensa/lib/bswapsi2.S | 16 + drivers/android/binder.c | 28 + drivers/android/binder_alloc.c | 64 +--- drivers/android/binder_alloc.h | 4 drivers/android/binder_alloc_selftest.c | 2 drivers/char/tpm/tpm-chip.c | 52 ++- drivers/char/tpm/tpm-interface.c | 10 drivers/char/tpm/tpm.h | 1 drivers/char/tpm/tpm_tis.c | 2 drivers/char/tpm/tpm_tis_core.c | 187 ++++++------ drivers/char/tpm/tpm_tis_core.h | 3 drivers/cxl/core/pci.c | 85 ++++- drivers/cxl/cxlpci.h | 2 drivers/firmware/arm_ffa/bus.c | 19 - drivers/firmware/arm_ffa/driver.c | 6 drivers/gpio/gpio-mockup.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c | 9 drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 1 drivers/gpu/drm/amd/display/dc/core/dc_link.c | 9 drivers/gpu/drm/amd/display/dc/dc_types.h | 6 drivers/gpu/drm/amd/include/mes_v11_api_def.h | 6 drivers/gpu/drm/amd/pm/amdgpu_pm.c | 12 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 1 drivers/gpu/drm/drm_managed.c | 22 - drivers/gpu/drm/mgag200/mgag200_mode.c | 5 drivers/gpu/drm/radeon/radeon_irq_kms.c | 10 drivers/hwtracing/coresight/coresight-tmc-etr.c | 2 drivers/irqchip/irq-mips-gic.c | 32 +- drivers/media/radio/radio-shark.c | 10 drivers/media/radio/radio-shark2.c | 10 drivers/mmc/core/block.c | 5 drivers/mmc/host/sdhci-esdhc-imx.c | 18 - drivers/net/bonding/bond_main.c | 8 drivers/net/dsa/mv88e6xxx/chip.c | 2 drivers/net/dsa/mv88e6xxx/port.c | 9 drivers/net/dsa/mv88e6xxx/port.h | 2 drivers/net/ethernet/3com/3c589_cs.c | 11 drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 4 drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 3 drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 4 drivers/net/ethernet/mellanox/mlx5/core/en/txrx.h | 2 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 23 - drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 19 - drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c | 16 - drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 4 drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 7 drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.c | 70 +++- drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.h | 1 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 drivers/net/ethernet/mellanox/mlx5/core/steering/dr_cmd.c | 4 drivers/net/ethernet/mellanox/mlx5/core/steering/dr_ste.c | 3 drivers/net/ethernet/microchip/lan966x/lan966x_main.c | 10 drivers/net/ethernet/nvidia/forcedeth.c | 1 drivers/net/phy/mscc/mscc_main.c | 1 drivers/net/team/team.c | 7 drivers/net/usb/cdc_ncm.c | 24 - drivers/platform/mellanox/mlxbf-pmc.c | 5 drivers/platform/x86/hp/hp-wmi.c | 2 drivers/platform/x86/intel/ifs/load.c | 2 drivers/platform/x86/intel/speed_select_if/isst_if_common.c | 12 drivers/power/supply/axp288_fuel_gauge.c | 2 drivers/power/supply/bq24190_charger.c | 1 drivers/power/supply/bq25890_charger.c | 5 drivers/power/supply/bq27xxx_battery.c | 175 ++++++----- drivers/power/supply/bq27xxx_battery_i2c.c | 3 drivers/power/supply/mt6360_charger.c | 4 drivers/power/supply/power_supply_leds.c | 5 drivers/power/supply/sbs-charger.c | 2 drivers/regulator/mt6359-regulator.c | 7 drivers/regulator/pca9450-regulator.c | 4 drivers/tee/optee/smc_abi.c | 4 drivers/usb/core/usb.c | 76 ++++ drivers/usb/dwc3/core.h | 2 drivers/usb/dwc3/gadget.c | 10 drivers/usb/misc/sisusbvga/sisusb.c | 14 drivers/video/fbdev/udlfb.c | 13 drivers/watchdog/sp5100_tco.c | 4 drivers/xen/pvcalls-back.c | 9 fs/btrfs/disk-io.c | 9 fs/cifs/fs_context.c | 8 fs/ocfs2/namei.c | 2 fs/ocfs2/xattr.c | 30 + include/drm/drm_managed.h | 18 + include/linux/arm_ffa.h | 1 include/linux/fs.h | 42 +- include/linux/if_team.h | 1 include/linux/mlx5/mlx5_ifc.h | 4 include/linux/msi.h | 9 include/linux/power/bq27xxx_battery.h | 4 include/linux/tpm.h | 14 include/linux/usb.h | 5 include/net/bonding.h | 1 include/uapi/sound/skl-tplg-interface.h | 3 kernel/bpf/hashtab.c | 6 kernel/bpf/verifier.c | 2 kernel/irq/msi.c | 4 lib/debugobjects.c | 2 net/core/skbuff.c | 56 +-- net/ipv4/udplite.c | 2 net/ipv6/exthdrs_core.c | 2 net/ipv6/udplite.c | 2 net/sctp/transport.c | 11 net/smc/af_smc.c | 9 net/smc/smc_core.c | 1 net/sunrpc/sched.c | 5 sound/hda/hdac_device.c | 2 sound/pci/hda/patch_ca0132.c | 1 sound/pci/hda/patch_realtek.c | 2 sound/soc/codecs/lpass-tx-macro.c | 5 sound/soc/codecs/rt5682-i2c.c | 4 sound/soc/codecs/rt5682.c | 6 sound/soc/codecs/rt5682.h | 1 sound/soc/intel/avs/apl.c | 6 sound/soc/intel/avs/messages.h | 2 tools/testing/selftests/memfd/fuse_test.c | 1 tools/testing/selftests/net/fib_tests.sh | 2 138 files changed, 1200 insertions(+), 510 deletions(-) Adam Stylinski (1): ALSA: hda/ca0132: add quirk for EVGA X299 DARK Alan Stern (4): fbdev: udlfb: Fix endpoint check USB: core: Add routines for endpoint checks in old drivers USB: sisusbvga: Add endpoint checks media: radio-shark: Add endpoint checks Alex Deucher (1): drm/radeon: reintroduce radeon_dp_work_func content Alexander Stein (2): regulator: pca9450: Fix BUCK2 enable_mask ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator Amadeusz Sławiński (1): ASoC: Intel: avs: Access path components under lock Anton Protopopov (1): bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps Bin Li (1): ALSA: hda/realtek: Enable headset onLenovo M70/M90 Carlos Llamas (5): Revert "binder_alloc: add missing mmap_lock calls when using the VMA" Revert "android: binder: stop saving a pointer to the VMA" binder: add lockless binder_alloc_(set|get)_vma() binder: fix UAF caused by faulty buffer cleanup binder: fix UAF of alloc->vma in race with munmap() Cezary Rojewski (2): ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg ASoC: Intel: avs: Fix declaration of enum avs_channel_config Christian Loehle (1): mmc: block: ensure error propagation for non-blk Christophe JAILLET (2): forcedeth: Fix an error handling path in nv_probe() 3c589_cs: Fix an error handling path in tc589_probe() Daisuke Nojiri (1): power: supply: sbs-charger: Fix INHIBITED bit for Status reg Dan Carpenter (3): coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() platform/mellanox: mlxbf-pmc: fix sscanf() error checking Dave Hansen (1): x86/mm: Avoid incomplete Global INVLPG flushes Dave Jiang (1): cxl: Wait Memory_Info_Valid before access memory related info David Arcari (1): platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain David Epping (1): net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE Erez Shitrit (1): net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs Etienne Carriere (1): optee: fix uninited async notif value Evan Quan (1): drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 Finn Thain (1): m68k: Move signal frame following exception on 68020/030 Frank Li (1): dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type Gavrilov Ilia (1): ipv6: Fix out-of-bounds access in ipv6_find_tlv() Greg Kroah-Hartman (1): Linux 6.1.31 Gregory Oakes (1): watchdog: sp5100_tco: Immediately trigger upon starting. Haibo Chen (1): mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works Hans de Goede (13): platform/x86: hp-wmi: Fix cast to smaller integer type warning power: supply: axp288_fuel_gauge: Fix external_power_changed race power: supply: bq25890: Fix external_power_changed race power: supply: leds: Fix blink to LED on transition power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() power: supply: bq27xxx: Move bq27xxx_battery_update() down power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize power: supply: bq25890: Call power_supply_changed() after updating input current or voltage power: supply: bq24190: Call power_supply_changed() after updating input current Hao Ge (1): fs: fix undefined behavior in bit shift for SB_NOUSER Hardik Garg (1): selftests/memfd: Fix unknown type name build failure Helge Deller (6): parisc: Use num_present_cpus() in alternative patching code parisc: Handle kgdb breakpoints only in kernel context parisc: Fix flush_dcache_page() for usage from irq context parisc: Allow to reboot machine after system halt parisc: Enable LOCKDEP support parisc: Handle kprobes breakpoints only in kernel context Horatiu Vultur (1): lan966x: Fix unloading/loading of the driver Hugo Villeneuve (1): arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay Jack Xiao (3): drm/amd/amdgpu: update mes11 api def drm/amdgpu/mes11: enable reg active poll drm/amd/amdgpu: limit one queue per gang Jakub Kicinski (1): net/mlx5e: do as little as possible in napi poll when budget is 0 Jarkko Sakkinen (3): tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers tpm: Prevent hwrng from activating during resume Jiaxun Yang (2): irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable irqchip/mips-gic: Use raw spinlock for gic_lock Jocelyn Falempe (1): drm/mgag200: Fix gamma lut not initialized. Jonatas Esteves (1): drm/amd/pm: Fix output of pp_od_clk_voltage Josef Bacik (1): btrfs: use nofs when cleaning up aborted transactions Kan Liang (1): perf/x86/uncore: Correct the number of CHAs on SPR Kang Chen (1): power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe Kees Cook (1): skbuff: Proactively round up to kmalloc bucket size Kuniyuki Iwashima (1): udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). Lino Sanfilippo (3): tpm, tpm_tis: Avoid cache incoherency in test for interrupts tpm, tpm_tis: Only handle supported interrupts tpm, tpm_tis: startup chip before testing for interrupts Linyu Yuan (1): usb: dwc3: fix gadget mode suspend interrupt handler issue Matthew Auld (1): drm: fix drmm_mutex_init() Matthias Kaehlcke (1): ASoC: rt5682: Disable jack detection interrupt during suspend Max Filippov (2): xtensa: fix signal delivery to FDPIC process xtensa: add __bswap{si,di}2 helpers Maximilian Heyne (1): x86/pci/xen: populate MSI sysfs entries Peter Collingbourne (1): arm64: Also reset KASAN tag if page is not PG_mte_tagged Po-Hsu Lin (1): selftests: fib_tests: mute cleanup error message Pratyush Yadav (1): net: fix skb leak in __skb_tstamp_tx() Rahul Rameshbabu (1): net/mlx5e: Fix SQ wake logic in ptp napi_poll context Ravulapati Vishnu Vardhan Rao (1): ASoC: lpass: Fix for KASAN use_after_free out of bounds Roberto Sassu (1): ocfs2: Switch to security_inode_init_security() Robin Chen (1): drm/amd/display: hpd rx irq not working with eDP interface Roi Dayan (1): net/mlx5: Fix error message when failing to allocate device memory Sen Chu (1): regulator: mt6359: add read check for PMIC MT6359 Shay Drory (4): net/mlx5: Handle pairing of E-switch via uplink un/load APIs net/mlx5: Collect command failures data only for known commands net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device net/mlx5: Devcom, serialize devcom registration Steffen Bätz (1): net: dsa: mv88e6xxx: Add RGMII delay to 88E6320 Steve French (1): cifs: mapchars mount option ignored Steve Wahl (1): platform/x86: ISST: Remove 8 socket limit Sudeep Holla (3): firmware: arm_ffa: Check if ffa_driver remove is present before executing firmware: arm_ffa: Fix FFA device names for logical partitions firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors Sunil Goutham (1): octeontx2-pf: Fix TSOv6 offload Taehee Yoo (1): net: fix stack overflow when LRO is disabled for virtual interfaces Takashi Iwai (1): ALSA: hda: Fix unhandled register update during auto-suspend period Tetsuo Handa (1): debugobjects: Don't wake up kswapd from fill_pool() Trond Myklebust (1): SUNRPC: Don't change task->tk_status after the call to rpc_exit_task Tudor Ambarus (1): net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Vernon Lovejoy (1): x86/show_trace_log_lvl: Ensure stack pointer is aligned, again Vlad Buslov (2): net/mlx5e: Fix deadlock in tc route query code net/mlx5e: Use correct encap attribute during invalidation Wen Gu (1): net/smc: Reset connection when trying to use SMCRv2 fails. Will Deacon (1): bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields Xin Long (1): sctp: fix an issue that plpmtu can never go to complete state Yevgeny Kliteynik (1): net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE Zev Weiss (1): gpio: mockup: Fix mode of debugfs files Zhang Rui (1): x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms

1 year, 8 months

1
1
0 0

Linux 5.15.114

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.114 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/ata/ahci-ceva.txt | 63 ---- Documentation/devicetree/bindings/ata/ceva,ahci-1v84.yaml | 189 ++++++++++++++ Documentation/devicetree/bindings/usb/cdns,usb3.yaml | 2 Makefile | 2 arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 2 arch/arm64/boot/dts/freescale/imx8mn-var-som.dtsi | 8 arch/arm64/mm/copypage.c | 3 arch/m68k/kernel/signal.c | 14 - arch/parisc/include/asm/cacheflush.h | 5 arch/parisc/kernel/cache.c | 5 arch/parisc/kernel/process.c | 11 arch/parisc/kernel/traps.c | 4 arch/x86/events/intel/uncore_snbep.c | 11 arch/x86/include/asm/intel-family.h | 5 arch/x86/kernel/cpu/topology.c | 5 arch/x86/kernel/dumpstack.c | 7 arch/x86/mm/init.c | 25 + drivers/firmware/arm_ffa/bus.c | 19 + drivers/firmware/arm_ffa/driver.c | 6 drivers/gpio/gpio-mockup.c | 2 drivers/hwtracing/coresight/coresight-tmc-etr.c | 2 drivers/media/radio/radio-shark.c | 10 drivers/media/radio/radio-shark2.c | 10 drivers/mmc/host/sdhci-esdhc-imx.c | 18 - drivers/net/bonding/bond_main.c | 8 drivers/net/ethernet/3com/3c589_cs.c | 11 drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 4 drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c | 16 - drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.c | 3 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 drivers/net/ethernet/mellanox/mlx5/core/steering/dr_cmd.c | 4 drivers/net/ethernet/mellanox/mlx5/core/steering/dr_ste.c | 3 drivers/net/ethernet/nvidia/forcedeth.c | 1 drivers/net/phy/mscc/mscc_main.c | 1 drivers/net/team/team.c | 7 drivers/net/usb/cdc_ncm.c | 24 + drivers/platform/mellanox/mlxbf-pmc.c | 5 drivers/power/supply/bq27xxx_battery.c | 60 ++-- drivers/power/supply/bq27xxx_battery_i2c.c | 3 drivers/power/supply/mt6360_charger.c | 4 drivers/power/supply/power_supply_leds.c | 5 drivers/power/supply/sbs-charger.c | 2 drivers/regulator/mt6359-regulator.c | 7 drivers/regulator/pca9450-regulator.c | 4 drivers/spi/spi-fsl-cpm.c | 23 + drivers/spi/spi-fsl-spi.c | 53 +-- drivers/usb/core/usb.c | 76 +++++ drivers/usb/dwc3/core.h | 2 drivers/usb/dwc3/gadget.c | 10 drivers/usb/gadget/composite.c | 18 + drivers/usb/gadget/configfs.c | 3 drivers/usb/gadget/udc/core.c | 27 ++ drivers/usb/gadget/udc/trace.h | 5 drivers/usb/misc/sisusbvga/sisusb.c | 14 + drivers/video/fbdev/udlfb.c | 13 drivers/watchdog/sp5100_tco.c | 4 drivers/xen/pvcalls-back.c | 9 fs/btrfs/disk-io.c | 9 fs/cifs/fs_context.c | 8 fs/ocfs2/namei.c | 2 fs/ocfs2/xattr.c | 30 +- include/linux/arm_ffa.h | 1 include/linux/fs.h | 42 +-- include/linux/if_team.h | 1 include/linux/mlx5/mlx5_ifc.h | 4 include/linux/power/bq27xxx_battery.h | 1 include/linux/usb.h | 5 include/linux/usb/composite.h | 2 include/linux/usb/gadget.h | 8 include/net/bonding.h | 1 include/uapi/sound/skl-tplg-interface.h | 3 kernel/bpf/verifier.c | 2 lib/debugobjects.c | 2 net/core/skbuff.c | 4 net/ipv4/udplite.c | 2 net/ipv6/exthdrs_core.c | 2 net/ipv6/udplite.c | 2 net/sctp/transport.c | 11 sound/hda/hdac_device.c | 2 sound/pci/hda/patch_ca0132.c | 1 sound/pci/hda/patch_realtek.c | 2 sound/soc/codecs/lpass-tx-macro.c | 5 sound/soc/codecs/rt5682-i2c.c | 4 sound/soc/codecs/rt5682.c | 6 sound/soc/codecs/rt5682.h | 1 tools/testing/selftests/memfd/fuse_test.c | 1 tools/testing/selftests/net/fib_tests.sh | 2 87 files changed, 788 insertions(+), 237 deletions(-) Adam Stylinski (1): ALSA: hda/ca0132: add quirk for EVGA X299 DARK Alan Stern (4): fbdev: udlfb: Fix endpoint check USB: core: Add routines for endpoint checks in old drivers USB: sisusbvga: Add endpoint checks media: radio-shark: Add endpoint checks Alexander Stein (1): regulator: pca9450: Fix BUCK2 enable_mask Bin Li (1): ALSA: hda/realtek: Enable headset onLenovo M70/M90 Cezary Rojewski (1): ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg Christophe JAILLET (2): forcedeth: Fix an error handling path in nv_probe() 3c589_cs: Fix an error handling path in tc589_probe() Christophe Leroy (2): spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: fsl-cpm: Use 16 bit mode for large transfers with even size Daisuke Nojiri (1): power: supply: sbs-charger: Fix INHIBITED bit for Status reg Dan Carpenter (3): coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() platform/mellanox: mlxbf-pmc: fix sscanf() error checking Dave Hansen (1): x86/mm: Avoid incomplete Global INVLPG flushes David Epping (1): net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE Elson Roy Serrao (1): usb: gadget: Properly configure the device for remote wakeup Erez Shitrit (1): net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs Finn Thain (1): m68k: Move signal frame following exception on 68020/030 Frank Li (1): dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type Gavrilov Ilia (1): ipv6: Fix out-of-bounds access in ipv6_find_tlv() Greg Kroah-Hartman (1): Linux 5.15.114 Gregory Oakes (1): watchdog: sp5100_tco: Immediately trigger upon starting. Haibo Chen (1): mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works Hans de Goede (5): power: supply: leds: Fix blink to LED on transition power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() Hao Ge (1): fs: fix undefined behavior in bit shift for SB_NOUSER Hardik Garg (1): selftests/memfd: Fix unknown type name build failure Helge Deller (3): parisc: Handle kgdb breakpoints only in kernel context parisc: Allow to reboot machine after system halt parisc: Fix flush_dcache_page() for usage from irq context Hugo Villeneuve (1): arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay Jakub Kicinski (1): net/mlx5e: do as little as possible in napi poll when budget is 0 Josef Bacik (1): btrfs: use nofs when cleaning up aborted transactions Kan Liang (1): perf/x86/uncore: Correct the number of CHAs on SPR Kang Chen (1): power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe Kuniyuki Iwashima (1): udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). Linyu Yuan (1): usb: dwc3: fix gadget mode suspend interrupt handler issue Matthias Kaehlcke (1): ASoC: rt5682: Disable jack detection interrupt during suspend Michal Simek (1): dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries Olivier Moysan (1): ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 Peter Collingbourne (1): arm64: Also reset KASAN tag if page is not PG_mte_tagged Piyush Mehta (1): dt-bindings: ata: ahci-ceva: convert to yaml Po-Hsu Lin (1): selftests: fib_tests: mute cleanup error message Pratyush Yadav (1): net: fix skb leak in __skb_tstamp_tx() Ravulapati Vishnu Vardhan Rao (1): ASoC: lpass: Fix for KASAN use_after_free out of bounds Roberto Sassu (1): ocfs2: Switch to security_inode_init_security() Roi Dayan (1): net/mlx5: Fix error message when failing to allocate device memory Sen Chu (1): regulator: mt6359: add read check for PMIC MT6359 Shay Drory (1): net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device Steve French (1): cifs: mapchars mount option ignored Sudeep Holla (3): firmware: arm_ffa: Check if ffa_driver remove is present before executing firmware: arm_ffa: Fix FFA device names for logical partitions firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors Sunil Goutham (1): octeontx2-pf: Fix TSOv6 offload Taehee Yoo (1): net: fix stack overflow when LRO is disabled for virtual interfaces Takashi Iwai (1): ALSA: hda: Fix unhandled register update during auto-suspend period Tetsuo Handa (1): debugobjects: Don't wake up kswapd from fill_pool() Tudor Ambarus (1): net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Vernon Lovejoy (1): x86/show_trace_log_lvl: Ensure stack pointer is aligned, again Will Deacon (1): bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields Xin Long (1): sctp: fix an issue that plpmtu can never go to complete state Yevgeny Kliteynik (1): net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE Zev Weiss (1): gpio: mockup: Fix mode of debugfs files Zhang Rui (1): x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms

1 year, 8 months

1
1
0 0

[PATCH] ext4: fix race condition between buffer write and page_mkwrite

by Baokun Li

Syzbot reported a BUG_ON: ================================================================== EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ------------[ cut here ]------------ kernel BUG at fs/ext4/ext4_jbd2.c:53! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 494 Comm: syz-executor.0 6.1.0-rc7-syzkaller-ga4412fdd49dc #0 RIP: 0010:__ext4_journal_stop+0x1b3/0x1c0 [...] Call Trace: ext4_write_inline_data_end+0xa39/0xdf0 ext4_da_write_end+0x1e2/0x950 generic_perform_write+0x401/0x5f0 ext4_buffered_write_iter+0x35f/0x640 ext4_file_write_iter+0x198/0x1cd0 vfs_write+0x8b5/0xef0 [...] ================================================================== The above BUG_ON is triggered by the following race: cpu1 cpu2 ________________________|________________________ ksys_write vfs_write new_sync_write ext4_file_write_iter ext4_buffered_write_iter generic_perform_write ext4_da_write_begin do_fault do_page_mkwrite ext4_page_mkwrite ext4_convert_inline_data ext4_convert_inline_data_nolock ext4_destroy_inline_data_nolock //clear EXT4_STATE_MAY_INLINE_DATA ext4_map_blocks --> return error ext4_test_inode_state(inode, EXT4_STATE_MAY_INLINE_DATA) ext4_block_write_begin ext4_restore_inline_data // set EXT4_STATE_MAY_INLINE_DATA ext4_da_write_end ext4_test_inode_state(inode, EXT4_STATE_MAY_INLINE_DATA) ext4_write_inline_data_end handle=NULL ext4_journal_stop(handle) __ext4_journal_stop ext4_put_nojournal(handle) ref_cnt = (unsigned long)handle BUG_ON(ref_cnt == 0) ---> BUG_ON The root cause of this problem is that the ext4_convert_inline_data() in ext4_page_mkwrite() does not grab i_rwsem, so it may race with ext4_buffered_write_iter() and cause the write_begin() and write_end() functions to be inconsistent and trigger BUG_ON. To solve the above issue, we cannot add inode_lock directly to ext4_page_mkwrite(), because this function is a hot path and frequent calls to inode_lock will cause performance degradation for multi-threaded reads and writes. Hence, we move ext4_convert_inline_data() to ext4_file_mmap(), and only when inline_data is enabled and mmap a file in shared write mode, we hold the lock to convert, which can reduce the impact on performance. Reported-by: Jun Nie <jun.nie(a)linaro.org> Closes: https://lore.kernel.org/lkml/63903521.5040307@huawei.com/t/ Reported-by: syzbot+a158d886ca08a3fecca4(a)syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?id=899b37f20ce4072bcdfecfe1647b39602e956e… Fixes: 7b4cc9787fe3 ("ext4: evict inline data when writing to memory map") CC: stable(a)vger.kernel.org # 4.12+ Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- fs/ext4/file.c | 24 +++++++++++++++++++++++- fs/ext4/inode.c | 4 ---- 2 files changed, 23 insertions(+), 5 deletions(-) diff --git a/fs/ext4/file.c b/fs/ext4/file.c index d101b3b0c7da..7a04376c33f2 100644 --- a/fs/ext4/file.c +++ b/fs/ext4/file.c @@ -795,7 +795,8 @@ static const struct vm_operations_struct ext4_file_vm_ops = { static int ext4_file_mmap(struct file *file, struct vm_area_struct *vma) { struct inode *inode = file->f_mapping->host; - struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb); + struct super_block *sb = inode->i_sb; + struct ext4_sb_info *sbi = EXT4_SB(sb); struct dax_device *dax_dev = sbi->s_daxdev; if (unlikely(ext4_forced_shutdown(sbi))) @@ -808,6 +809,27 @@ static int ext4_file_mmap(struct file *file, struct vm_area_struct *vma) if (!daxdev_mapping_supported(vma, dax_dev)) return -EOPNOTSUPP; + /* + * Writing via mmap has no logic to handle inline data, so we + * need to call ext4_convert_inline_data() to convert the inode + * to normal format before doing so, otherwise a BUG_ON will be + * triggered in ext4_writepages() due to the + * EXT4_STATE_MAY_INLINE_DATA flag. Moreover, we need to grab + * i_rwsem during conversion, since clearing and setting the + * inline data flag may race with ext4_buffered_write_iter() + * to trigger a BUG_ON. + */ + if (ext4_has_feature_inline_data(sb) && + vma->vm_flags & VM_SHARED && vma->vm_flags & VM_WRITE) { + int err; + + inode_lock(inode); + err = ext4_convert_inline_data(inode); + inode_unlock(inode); + if (err) + return err; + } + file_accessed(file); if (IS_DAX(file_inode(file))) { vma->vm_ops = &ext4_dax_vm_ops; diff --git a/fs/ext4/inode.c b/fs/ext4/inode.c index ce5f21b6c2b3..31844c4ec9fe 100644 --- a/fs/ext4/inode.c +++ b/fs/ext4/inode.c @@ -6043,10 +6043,6 @@ vm_fault_t ext4_page_mkwrite(struct vm_fault *vmf) filemap_invalidate_lock_shared(mapping); - err = ext4_convert_inline_data(inode); - if (err) - goto out_ret; - /* * On data journalling we skip straight to the transaction handle: * there's no delalloc; page truncated will be checked later; the -- 2.31.1

1 year, 8 months

2
6
0 0

stable-rc/queue/5.15 build: 179 builds: 3 failed, 176 passed, 10 errors, 5 warnings (v5.15.112-273-g7774fe74177e)

by kernelci.org bot

stable-rc/queue/5.15 build: 179 builds: 3 failed, 176 passed, 10 errors, 5 warnings (v5.15.112-273-g7774fe74177e) Full Build Summary: https://kernelci.org/build/stable-rc/branch/queue%2F5.15/kernel/v5.15.112-2… Tree: stable-rc Branch: queue/5.15 Git Describe: v5.15.112-273-g7774fe74177e Git Commit: 7774fe74177e19a34f0e6274b0e64bdcdad3e3d7 Git URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git Built: 7 unique architectures Build Failures Detected: mips: decstation_64_defconfig: (gcc-10) FAIL ip27_defconfig: (gcc-10) FAIL ip28_defconfig: (gcc-10) FAIL Errors and Warnings Detected: arc: tinyconfig (gcc-10): 1 warning arm64: arm: i386: mips: 32r2el_defconfig (gcc-10): 1 warning bigsur_defconfig (gcc-10): 1 error cavium_octeon_defconfig (gcc-10): 1 error decstation_64_defconfig (gcc-10): 1 error fuloong2e_defconfig (gcc-10): 1 error ip32_defconfig (gcc-10): 1 error lemote2f_defconfig (gcc-10): 1 error loongson2k_defconfig (gcc-10): 1 error loongson3_defconfig (gcc-10): 1 error nlm_xlp_defconfig (gcc-10): 1 error rm200_defconfig (gcc-10): 1 warning sb1250_swarm_defconfig (gcc-10): 1 error riscv: x86_64: x86_64_defconfig (gcc-10): 1 warning x86_64_defconfig+x86-chromebook (gcc-10): 1 warning Errors summary: 10 expr: syntax error: unexpected argument ‘0xffffffff80000000’ Warnings summary: 2 arch/x86/kernel/smp.o: warning: objtool: sysvec_reboot()+0x45: unreachable instruction 1 drivers/block/paride/bpck.c:32: warning: "PC" redefined 1 arch/mips/boot/dts/img/boston.dts:128.19-178.5: Warning (pci_device_reg): /pci@14000000/pci2_root@0,0,0: PCI unit address format error, expected "0,0" 1 arch/arc/Makefile:26: ** WARNING ** CONFIG_ARC_TUNE_MCPU flag '' is unknown, fallback to '' Section mismatches summary: 1 WARNING: modpost: vmlinux.o(___ksymtab_gpl+ixp4xx_irq_init+0x0): Section mismatch in reference from the variable __ksymtab_ixp4xx_irq_init to the function .init.text:ixp4xx_irq_init() 1 WARNING: modpost: vmlinux.o(___ksymtab+prom_init_numa_memory+0x0): Section mismatch in reference from the variable __ksymtab_prom_init_numa_memory to the function .init.text:prom_init_numa_memory() ================================================================================ Detailed per-defconfig build reports: -------------------------------------------------------------------------------- 32r2el_defconfig (mips, gcc-10) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: arch/mips/boot/dts/img/boston.dts:128.19-178.5: Warning (pci_device_reg): /pci@14000000/pci2_root@0,0,0: PCI unit address format error, expected "0,0" -------------------------------------------------------------------------------- allnoconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (x86_64, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (i386, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- am200epdkit_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ar7_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- aspeed_g4_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- aspeed_g5_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- assabet_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- at91_dt_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ath25_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ath79_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- axm55xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- axs103_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- axs103_smp_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- badge4_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bcm2835_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bcm47xx_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bcm63xx_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bigsur_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- bmips_be_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bmips_stb_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- capcella_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cavium_octeon_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- cerfcube_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ci20_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cm_x300_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cobalt_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- colibri_pxa270_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- colibri_pxa300_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- collie_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- corgi_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cu1000-neo_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cu1830-neo_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- davinci_all_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- db1xxx_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- decstation_64_defconfig (mips, gcc-10) — FAIL, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- decstation_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- decstation_r4k_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- defconfig (riscv, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- defconfig (arm64, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- defconfig+arm64-chromebook (arm64, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- dove_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- e55_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ep93xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- eseries_pxa_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- exynos_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ezx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- footbridge_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- fuloong2e_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- gcw0_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- gemini_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- gpr_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- h3600_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- h5000_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- hackkit_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- haps_hs_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- haps_hs_smp_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- hisi_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- hsdk_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- i386_defconfig (i386, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- imote2_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- imx_v4_v5_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- imx_v6_v7_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- integrator_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- iop32x_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ip22_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ip27_defconfig (mips, gcc-10) — FAIL, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ip28_defconfig (mips, gcc-10) — FAIL, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ip32_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- ixp4xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches Section mismatches: WARNING: modpost: vmlinux.o(___ksymtab_gpl+ixp4xx_irq_init+0x0): Section mismatch in reference from the variable __ksymtab_ixp4xx_irq_init to the function .init.text:ixp4xx_irq_init() -------------------------------------------------------------------------------- jazz_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- jmr3927_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- jornada720_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- keystone_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lart_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lemote2f_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- loongson1b_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- loongson1c_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- loongson2k_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- loongson3_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ Section mismatches: WARNING: modpost: vmlinux.o(___ksymtab+prom_init_numa_memory+0x0): Section mismatch in reference from the variable __ksymtab_prom_init_numa_memory to the function .init.text:prom_init_numa_memory() -------------------------------------------------------------------------------- lpc18xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lpc32xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lpd270_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lubbock_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- magician_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mainstone_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- malta_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- malta_kvm_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- malta_qemu_32r6_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltaaprp_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltasmvp_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltasmvp_eva_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltaup_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltaup_xpa_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- milbeaut_m10v_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mini2440_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mmp2_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- moxart_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mpc30x_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mps2_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mtx1_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- multi_v4t_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- multi_v5_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- multi_v7_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mvebu_v5_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mvebu_v7_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mxs_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- neponset_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- netwinder_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nhk8815_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nlm_xlp_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- nlm_xlr_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nommu_k210_defconfig (riscv, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nommu_k210_sdcard_defconfig (riscv, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nsimosci_hs_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nsimosci_hs_smp_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- omap1_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- omap2plus_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- omega2p_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- orion5x_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- oxnas_v6_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- palmz72_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pcm027_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pic32mzda_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pleb_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pxa168_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pxa255-idp_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pxa3xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pxa910_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pxa_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- qcom_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- qi_lb60_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rb532_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rbtx49xx_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- realview_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rm200_defconfig (mips, gcc-10) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: drivers/block/paride/bpck.c:32: warning: "PC" redefined -------------------------------------------------------------------------------- rs90_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rt305x_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rv32_defconfig (riscv, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- s3c2410_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- s3c6400_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- s5pv210_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- sama5_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- sama7_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- sb1250_swarm_defconfig (mips, gcc-10) — PASS, 1 error, 0 warnings, 0 section mismatches Errors: expr: syntax error: unexpected argument ‘0xffffffff80000000’ -------------------------------------------------------------------------------- shannon_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- shmobile_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- simpad_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- socfpga_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- spear13xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- spear3xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- spear6xx_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- spitz_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- stm32_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- sunxi_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tb0219_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tb0226_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tb0287_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tct_hammer_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tegra_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tinyconfig (arc, gcc-10) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: arch/arc/Makefile:26: ** WARNING ** CONFIG_ARC_TUNE_MCPU flag '' is unknown, fallback to '' -------------------------------------------------------------------------------- tinyconfig (x86_64, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tinyconfig (i386, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- trizeps4_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- u8500_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- vdk_hs38_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- vdk_hs38_smp_defconfig (arc, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- versatile_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- vexpress_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- vf610m4_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- viper_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- vocore2_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- vt8500_v6_v7_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- workpad_defconfig (mips, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- x86_64_defconfig (x86_64, gcc-10) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: arch/x86/kernel/smp.o: warning: objtool: sysvec_reboot()+0x45: unreachable instruction -------------------------------------------------------------------------------- x86_64_defconfig+x86-chromebook (x86_64, gcc-10) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: arch/x86/kernel/smp.o: warning: objtool: sysvec_reboot()+0x45: unreachable instruction -------------------------------------------------------------------------------- xcep_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- zeus_defconfig (arm, gcc-10) — PASS, 0 errors, 0 warnings, 0 section mismatches --- For more info write to <info(a)kernelci.org>

1 year, 8 months

1
0
0 0

[PATCH 4.19 0/1] Hardening against CVE-2023-2002

by Dragos-Marian Panait

The following commit is needed to harden against CVE-2023-2002: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… Ruihan Li (1): bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) base-commit: 3f57fb8b1bd06b277556601133823bec370d723f -- 2.40.1

1 year, 8 months

1
1
0 0

Linux 5.10.181

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.181 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/usb/cdns,usb3.yaml | 2 Makefile | 2 arch/arm/boot/dts/stm32mp15-pinctrl.dtsi | 2 arch/arm/mach-sa1100/jornada720_ssp.c | 5 arch/arm64/boot/dts/freescale/imx8mn-var-som.dtsi | 8 arch/arm64/boot/dts/qcom/msm8996.dtsi | 3 arch/arm64/include/asm/hyp_image.h | 3 arch/arm64/kernel/image-vars.h | 11 arch/arm64/kvm/hyp/nvhe/Makefile | 4 arch/m68k/kernel/signal.c | 14 arch/parisc/include/asm/cacheflush.h | 5 arch/parisc/kernel/cache.c | 5 arch/parisc/kernel/process.c | 11 arch/parisc/kernel/traps.c | 4 arch/powerpc/mm/book3s64/radix_pgtable.c | 4 arch/x86/include/asm/intel-family.h | 5 arch/x86/kernel/cpu/topology.c | 5 arch/x86/kernel/dumpstack.c | 7 arch/x86/mm/init.c | 25 + drivers/acpi/acpica/dbnames.c | 3 drivers/acpi/acpica/dswstate.c | 11 drivers/acpi/ec.c | 1 drivers/base/core.c | 7 drivers/base/regmap/regcache.c | 6 drivers/block/null_blk/main.c | 5 drivers/bluetooth/btbcm.c | 47 ++ drivers/char/tpm/tpm_tis.c | 16 drivers/clk/tegra/clk-tegra20.c | 28 - drivers/firmware/arm_sdei.c | 37 + drivers/gpio/gpio-mockup.c | 2 drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 7 drivers/gpu/drm/amd/display/dc/dce/dce_transform.c | 5 drivers/gpu/drm/drm_mipi_dsi.c | 2 drivers/gpu/drm/exynos/exynos_drm_g2d.h | 4 drivers/gpu/drm/i915/display/intel_dp.c | 5 drivers/gpu/drm/msm/disp/dpu1/dpu_hw_intf.c | 5 drivers/gpu/drm/msm/dp/dp_audio.c | 12 drivers/gpu/drm/msm/dp/dp_audio.h | 2 drivers/gpu/drm/msm/dp/dp_display.c | 1 drivers/gpu/drm/tegra/sor.c | 2 drivers/hid/hid-logitech-hidpp.c | 53 ++ drivers/hid/wacom.h | 3 drivers/hid/wacom_sys.c | 2 drivers/hid/wacom_wac.c | 80 ++-- drivers/hwtracing/coresight/coresight-tmc-etr.c | 2 drivers/infiniband/core/user_mad.c | 23 - drivers/input/joystick/xpad.c | 5 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 19 drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 16 drivers/mcb/mcb-pci.c | 27 + drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 2 drivers/media/radio/radio-shark.c | 10 drivers/media/radio/radio-shark2.c | 10 drivers/memstick/host/r592.c | 2 drivers/message/fusion/mptlan.c | 2 drivers/mfd/dln2.c | 1 drivers/net/bonding/bond_main.c | 8 drivers/net/can/kvaser_pciefd.c | 51 +- drivers/net/ethernet/3com/3c589_cs.c | 11 drivers/net/ethernet/broadcom/genet/bcmgenet.c | 9 drivers/net/ethernet/freescale/fec_main.c | 15 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 15 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 4 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h | 5 drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 5 drivers/net/ethernet/intel/igb/e1000_mac.c | 4 drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 4 drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c | 16 drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.c | 3 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 drivers/net/ethernet/mellanox/mlx5/core/steering/dr_ste.c | 3 drivers/net/ethernet/nvidia/forcedeth.c | 1 drivers/net/ethernet/pasemi/pasemi_mac.c | 2 drivers/net/ethernet/sun/cassini.c | 2 drivers/net/ipvlan/ipvlan_core.c | 6 drivers/net/mdio/mdio-mvusb.c | 11 drivers/net/phy/dp83867.c | 22 + drivers/net/phy/mscc/mscc_main.c | 1 drivers/net/tap.c | 10 drivers/net/team/team.c | 7 drivers/net/usb/cdc_ncm.c | 24 - drivers/net/wireless/ath/ath.h | 12 drivers/net/wireless/ath/ath11k/dp_rx.c | 9 drivers/net/wireless/ath/key.c | 2 drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 13 drivers/net/wireless/intel/iwlwifi/dvm/sta.c | 5 drivers/net/wireless/intel/iwlwifi/mvm/nvm.c | 10 drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 3 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 2 drivers/phy/st/phy-miphy28lp.c | 42 -- drivers/power/supply/bq27xxx_battery.c | 41 +- drivers/power/supply/bq27xxx_battery_i2c.c | 3 drivers/power/supply/power_supply_leds.c | 5 drivers/power/supply/sbs-charger.c | 2 drivers/remoteproc/stm32_rproc.c | 8 drivers/s390/cio/qdio.h | 25 - drivers/s390/cio/qdio_main.c | 62 +-- drivers/scsi/lpfc/lpfc_debugfs.c | 7 drivers/scsi/storvsc_drv.c | 8 drivers/spi/spi-fsl-cpm.c | 23 + drivers/spi/spi-fsl-spi.c | 53 +- drivers/spi/spi-imx.c | 24 - drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 6 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 5 drivers/target/iscsi/iscsi_target.c | 6 drivers/tty/serial/8250/8250_core.c | 1 drivers/tty/serial/8250/8250_exar.c | 68 ++- drivers/tty/serial/8250/8250_pci.c | 5 drivers/tty/serial/arc_uart.c | 7 drivers/tty/vt/vc_screen.c | 11 drivers/usb/class/usbtmc.c | 2 drivers/usb/core/usb.c | 76 +++ drivers/usb/dwc3/debugfs.c | 109 +++++ drivers/usb/gadget/function/u_ether.c | 3 drivers/usb/host/uhci-pci.c | 10 drivers/usb/misc/sisusbvga/sisusb.c | 14 drivers/usb/storage/scsiglue.c | 28 + drivers/usb/typec/altmodes/displayport.c | 4 drivers/usb/typec/tcpm/tcpm.c | 16 drivers/video/fbdev/arcfb.c | 15 drivers/video/fbdev/udlfb.c | 13 drivers/watchdog/sp5100_tco.c | 4 drivers/xen/pvcalls-back.c | 9 fs/btrfs/disk-io.c | 64 +++ fs/btrfs/disk-io.h | 2 fs/btrfs/free-space-cache.c | 7 fs/btrfs/inode-map.c | 55 -- fs/btrfs/inode-map.h | 3 fs/btrfs/inode.c | 12 fs/ceph/snap.c | 13 fs/ext2/ext2.h | 1 fs/ext2/super.c | 7 fs/ext4/balloc.c | 18 fs/ext4/ext4.h | 25 - fs/ext4/ialloc.c | 12 fs/ext4/mballoc.c | 238 ++++++++---- fs/ext4/mmp.c | 39 + fs/ext4/super.c | 28 - fs/ext4/sysfs.c | 2 fs/f2fs/checkpoint.c | 12 fs/f2fs/data.c | 3 fs/gfs2/glops.c | 3 fs/hfsplus/inode.c | 28 + fs/nilfs2/inode.c | 18 fs/ocfs2/namei.c | 2 fs/ocfs2/xattr.c | 30 + fs/statfs.c | 4 include/linux/cpuhotplug.h | 1 include/linux/device.h | 1 include/linux/dim.h | 3 include/linux/fs.h | 42 +- include/linux/if_team.h | 1 include/linux/if_vlan.h | 17 include/linux/power/bq27xxx_battery.h | 1 include/linux/sched/task_stack.h | 2 include/linux/usb.h | 5 include/net/bonding.h | 1 include/net/ip_vs.h | 6 include/net/netns/ipv4.h | 1 include/net/sch_generic.h | 5 include/net/sock.h | 2 include/net/tcp.h | 1 include/net/xfrm.h | 2 include/uapi/sound/skl-tplg-interface.h | 3 kernel/bpf/bpf_local_storage.c | 16 kernel/bpf/verifier.c | 2 kernel/rcu/refscale.c | 2 kernel/rcu/tree_exp.h | 6 lib/cpu_rmap.c | 5 lib/debugobjects.c | 2 lib/dim/dim.c | 5 lib/dim/net_dim.c | 3 lib/dim/rdma_dim.c | 3 mm/backing-dev.c | 1 net/8021q/vlan_dev.c | 4 net/bluetooth/l2cap_core.c | 1 net/bridge/br_forward.c | 2 net/bridge/br_private_tunnel.h | 8 net/can/isotp.c | 2 net/can/j1939/socket.c | 2 net/core/datagram.c | 15 net/core/dev.c | 4 net/core/skbuff.c | 4 net/core/stream.c | 12 net/ipv4/af_inet.c | 2 net/ipv4/ip_output.c | 2 net/ipv4/tcp.c | 23 - net/ipv4/tcp_bpf.c | 2 net/ipv4/tcp_input.c | 4 net/ipv4/tcp_ipv4.c | 68 +-- net/ipv4/udplite.c | 2 net/ipv6/exthdrs_core.c | 2 net/ipv6/ip6_gre.c | 13 net/ipv6/tcp_ipv6.c | 5 net/ipv6/udplite.c | 2 net/key/af_key.c | 12 net/llc/af_llc.c | 8 net/mac80211/trace.h | 2 net/netfilter/core.c | 6 net/netfilter/ipvs/ip_vs_sync.c | 2 net/netfilter/nf_conntrack_standalone.c | 3 net/netfilter/nft_set_rbtree.c | 20 - net/netlink/af_netlink.c | 8 net/nsh/nsh.c | 8 net/packet/af_packet.c | 6 net/sched/act_mirred.c | 44 +- net/smc/smc_close.c | 4 net/smc/smc_rx.c | 4 net/smc/smc_tx.c | 4 net/socket.c | 2 net/sunrpc/svc.c | 2 net/tipc/bearer.c | 17 net/tipc/bearer.h | 13 net/tipc/crypto.h | 6 net/tipc/link.c | 9 net/tipc/name_distr.h | 2 net/tipc/name_table.h | 9 net/tipc/socket.c | 4 net/tipc/subscr.h | 11 net/tipc/udp_media.c | 5 net/tls/tls_main.c | 3 net/unix/af_unix.c | 22 - net/vmw_vsock/af_vsock.c | 2 net/xfrm/xfrm_interface.c | 54 -- net/xfrm/xfrm_policy.c | 9 samples/bpf/hbm.c | 1 scripts/recordmcount.c | 6 sound/firewire/digi00x/digi00x-stream.c | 4 sound/hda/hdac_device.c | 2 sound/pci/hda/hda_generic.c | 7 sound/pci/hda/patch_ca0132.c | 1 sound/pci/hda/patch_hdmi.c | 5 sound/pci/hda/patch_realtek.c | 7 sound/usb/format.c | 1 tools/power/cpupower/utils/idle_monitor/mperf_monitor.c | 31 - tools/testing/selftests/memfd/fuse_test.c | 1 tools/testing/selftests/net/fib_tests.sh | 2 tools/testing/selftests/net/forwarding/tc_actions.sh | 48 ++ 238 files changed, 2059 insertions(+), 904 deletions(-) Adam Stylinski (1): ALSA: hda/ca0132: add quirk for EVGA X299 DARK Ai Chao (1): ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 Alain Volmat (1): phy: st: miphy28lp: use _poll_timeout functions for waits Alan Stern (5): USB: usbtmc: Fix direction for 0-length ioctl control messages fbdev: udlfb: Fix endpoint check USB: core: Add routines for endpoint checks in old drivers USB: sisusbvga: Add endpoint checks media: radio-shark: Add endpoint checks Aleksandr Loktionov (1): igb: fix bit_shift to be in [1..8] range Alexander Stein (1): regmap: cache: Return error in cache sync operations for REGCACHE_NONE Andreas Gruenbacher (1): gfs2: Fix inode height consistency check Andrew Davis (1): serial: 8250_exar: Add support for USR298x PCI Modems Andy Shevchenko (1): serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards Armin Wolf (1): ACPI: EC: Fix oops when removing custom query handlers Arnaud Pouliquen (1): remoteproc: stm32_rproc: Add mutex protection for workqueue Arnd Bergmann (3): clk: tegra20: fix gcc-7 constant overflow warning drm/exynos: fix g2d_open/close helper function definitions bridge: always declare tunnel functions Austin Kim (1): ext4: remove an unused variable warning with CONFIG_QUOTA=n Badhri Jagan Sridharan (1): usb: typec: altmodes/displayport: fix pin_assignment_show Bastien Nocera (2): HID: logitech-hidpp: Don't use the USB serial for USB devices HID: logitech-hidpp: Reconcile USB and Unifying serials Bin Li (1): ALSA: hda/realtek: Enable headset onLenovo M70/M90 Cezary Rojewski (1): ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg Chaitanya Kulkarni (1): null_blk: Always check queue mode setting from configfs Chao Yu (1): f2fs: fix to drop all dirty pages during umount() if cp_error is set Christophe JAILLET (4): net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() cassini: Fix a memory leak in the error handling path of cas_init_one() forcedeth: Fix an error handling path in nv_probe() 3c589_cs: Fix an error handling path in tc589_probe() Christophe Leroy (2): spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: fsl-cpm: Use 16 bit mode for large transfers with even size Chuck Lever (1): SUNRPC: Fix trace_svc_register() call site Chunguang Xu (1): ext4: remove redundant mb_regenerate_buddy() Daisuke Nojiri (1): power: supply: sbs-charger: Fix INHIBITED bit for Status reg Dan Carpenter (3): ALSA: firewire-digi00x: prevent potential use after free coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() Daniel Gabay (1): wifi: iwlwifi: pcie: fix possible NULL pointer dereference Dave Hansen (1): x86/mm: Avoid incomplete Global INVLPG flushes David Epping (1): net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE Davide Caratti (2): net/sched: act_mirred: better wording on protection against excessive stack growth act_mirred: use the backlog for nested calls to mirred ingress Dmitry Bogdanov (1): scsi: target: iscsit: Free cmds before session free Dong Chenchen (1): net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() Duoming Zhou (1): media: netup_unidvb: fix use-after-free at del_timer() Eli Cohen (1): lib: cpu_rmap: Avoid use after free on rmap->obj array entries Erez Shitrit (1): net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs Eric Dumazet (9): netlink: annotate accesses to nlk->cb_running net: annotate sk->sk_err write from do_recvmmsg() net: deal with most data-races in sk_wait_event() net: add vlan_get_protocol_and_depth() helper tcp: add annotations around sk->sk_shutdown accesses net: datagram: fix data-races in datagram_poll() ipv4/tcp: do not use per netns ctl sockets tcp: fix possible sk_priority leak in tcp_v4_send_reset() vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() Filipe Manana (1): btrfs: fix space cache inconsistency after error loading it from disk Finn Thain (1): m68k: Move signal frame following exception on 68020/030 Florian Fainelli (2): net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() net: bcmgenet: Restore phy_stop() depending upon suspend/close Florian Westphal (2): netfilter: conntrack: fix possible bug_on with enable_hooks=1 netfilter: nft_set_rbtree: fix null deref on element insertion Frank Li (1): dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type Frank Wang (1): usb: typec: tcpm: fix multiple times discover svids error Gavrilov Ilia (1): ipv6: Fix out-of-bounds access in ipv6_find_tlv() George Kennedy (1): vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF Greg Kroah-Hartman (1): Linux 5.10.181 Greg Thelen (1): writeback, cgroup: remove extra percpu_ref_exit() Gregory Oakes (1): watchdog: sp5100_tco: Immediately trigger upon starting. Grygorii Strashko (1): net: phy: dp83867: add w/a for packet errors seen with short cables Gustavo A. R. Silva (1): RDMA/core: Fix multiple -Warray-bounds warnings Hans de Goede (6): wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set power: supply: leds: Fix blink to LED on transition power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix poll_interval handling and races on remove Hao Ge (1): fs: fix undefined behavior in bit shift for SB_NOUSER Hao Zeng (2): samples/bpf: Fix fout leak in hbm's run_bpf_prog recordmcount: Fix memory leaks in the uwrite function Hardik Garg (1): selftests/memfd: Fix unknown type name build failure Harshad Shirwadkar (2): ext4: drop s_mb_bal_lock and convert protected fields to atomic ext4: add mballoc stats proc file Hector Martin (1): wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Heiko Carstens (2): s390/qdio: get rid of register asm s390/qdio: fix do_sqbs() inline assembly constraint Helge Deller (3): parisc: Handle kgdb breakpoints only in kernel context parisc: Allow to reboot machine after system halt parisc: Fix flush_dcache_page() for usage from irq context Hugo Villeneuve (1): arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay Hyunwoo Kim (1): wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf Ilya Leoshkevich (1): statfs: enforce statfs[64] structure initialization Ioana Ciornei (1): driver core: add a helper to setup both the of_node and fwnode of a device Jakub Kicinski (1): net/mlx5e: do as little as possible in napi poll when budget is 0 Jan Kara (2): ext4: fix lockdep warning when enabling MMP ext2: Check block size validity during mount Jason Gerecke (2): HID: wacom: generic: Set battery quirk only when we see battery data HID: wacom: Force pen out of prox if no events have been received in a while Jeremy Soller (1): ALSA: hda/realtek: Add quirk for Clevo L140AU Jerry Snitselaar (1): tpm/tpm_tis: Disable interrupts for more Lenovo devices Jie Wang (1): net: hns3: fix reset delay time to avoid configuration timeout Jijie Shao (1): net: hns3: fix sending pfc frames after reset issue Jimmy Assarsson (6): can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() can: kvaser_pciefd: Call request_irq() before enabling interrupts can: kvaser_pciefd: Empty SRB buffer in probe can: kvaser_pciefd: Clear listen-only bit if not explicitly requested can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt can: kvaser_pciefd: Disable interrupts in probe error path Johannes Berg (2): wifi: mac80211: fix min center freq offset tracing wifi: iwlwifi: mvm: don't trust firmware n_channels Josef Bacik (1): btrfs: use nofs when cleaning up aborted transactions Josh Poimboeuf (1): sched: Fix KCSAN noinstr violation Justin Tee (1): scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow Ke Zhang (1): serial: arc_uart: fix of_iomap leak in `arc_serial_probe` Kees Cook (1): wifi: ath: Silence memcpy run-time false positive warning Kemeng Shi (2): ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set ext4: set goal start correctly in ext4_mb_normalize_request Kevin Groeneveld (1): spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 Konrad Dybcio (1): arm64: dts: qcom: msm8996: Add missing DWC3 quirks Konrad Gräfe (1): usb: gadget: u_ether: Fix host MAC address case Kumar Kartikeya Dwivedi (1): bpf: Annotate data races in bpf_local_storage Kuniyuki Iwashima (4): net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). af_unix: Fix a data race of sk->sk_receive_queue->qlen. af_unix: Fix data races around sk->sk_shutdown. udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). Luke D. Jones (1): ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 Manivannan Sadhasivam (1): iommu/arm-smmu-qcom: Limit the SMR groups to 128 Marijn Suijten (1): drm/msm/dpu: Remove duplicate register defines from INTF Mario Limonciello (1): drm/amd: Fix an out of bounds error in BIOS parser Martin Willi (1): Revert "Fix XFRM-I support for nested ESP tunnels" Matthew Howell (1): serial: exar: Add support for Sealevel 7xxxC serial cards Maxime Bizon (1): usb-storage: fix deadlock when a scsi command timeouts more than once Menglong Dong (1): net: tap: check vlan with eth_type_vlan() method Michael Ellerman (1): powerpc/64s/radix: Fix soft dirty tracking Michael Kelley (1): scsi: storvsc: Don't pass unused PFNs to Hyper-V host Min Li (1): Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp Nagarajan Maran (1): wifi: ath11k: Fix SKB corruption in REO destination ring Nathan Chancellor (1): net: pasemi: Fix return type of pasemi_mac_start_tx() Nick Child (1): net: Catch invalid index in XPS mapping Nikhil Mahale (1): ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table Nikita Zhandarovich (1): drm/i915/dp: prevent potential div-by-zero Nikolay Borisov (2): btrfs: move btrfs_find_highest_objectid/btrfs_find_free_objectid to disk-io.c btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid Nur Hussein (1): drm/tegra: Avoid potential 32-bit integer overflow Ojaswin Mujoo (1): ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() Oliver Hartkopp (2): can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag Olivier Moysan (1): ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 Paolo Abeni (1): tcp: factor out __tcp_close() helper Paul E. McKenney (1): refscale: Move shutdown from wait_event() to wait_event_idle() Philipp Hortmann (1): staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE Pierre Gondois (1): firmware: arm_sdei: Fix sleep from invalid context BUG Ping Cheng (2): HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs HID: wacom: add three styli to wacom_intuos_get_tool_type Po-Hsu Lin (1): selftests: fib_tests: mute cleanup error message Pratyush Yadav (1): net: fix skb leak in __skb_tstamp_tx() Qiang Ning (1): mfd: dln2: Fix memory leak in dln2_probe() Randy Dunlap (2): ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings net/tipc: fix tipc header files for kernel-doc Roberto Sassu (1): ocfs2: Switch to security_inode_init_security() Rodrigo Siqueira (1): drm/amd/display: Use DC_LOG_DC in the trasform pixel function Rodríguez Barbarin, José Javier (1): mcb-pci: Reallocate memory region to avoid memory overlapping Roi Dayan (1): net/mlx5: Fix error message when failing to allocate device memory Roy Novich (1): linux/dim: Do nothing if no time delta between samples Ryan C. Underwood (1): ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 Ryusuke Konishi (1): nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() Sabrina Dubroca (1): xfrm: don't check the default policy if the policy allows the packet Saravana Kannan (1): drm/mipi-dsi: Set the fwnode for mipi_dsi_device Shay Drory (1): net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device Simon Horman (1): ipvs: Update width of source for ip_vs_sync_conn_options Srinivas Kandagatla (1): drm/msm/dp: unregister audio driver during unbind Sunil Goutham (1): octeontx2-pf: Fix TSOv6 offload Taehee Yoo (1): net: fix stack overflow when LRO is disabled for virtual interfaces Takashi Iwai (3): ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go ALSA: hda: Fix Oops by 9.1 surround channel names ALSA: hda: Fix unhandled register update during auto-suspend period Tamir Duberstein (1): ACPICA: Avoid undefined behavior: applying zero offset to null pointer Tetsuo Handa (2): fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() debugobjects: Don't wake up kswapd from fill_pool() Theodore Ts'o (3): ext4: reflect error codes from ext4_multi_mount_protect() to its callers ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled ext4: allow ext4_get_group_info() to fail Tobias Brunner (1): af_key: Reject optional tunnel/BEET mode templates in outbound policies Tomas Krcka (1): iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any Tony Lindgren (1): serial: 8250: Reinit port->pm on port specific driver unbind Tudor Ambarus (1): net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Udipto Goswami (1): usb: dwc3: debugfs: Resume dwc3 before accessing registers Uwe Kleine-König (1): net: fec: Better handle pm_runtime_get() failing in .remove() Vernon Lovejoy (1): x86/show_trace_log_lvl: Ensure stack pointer is aligned, again Vicki Pfau (1): Input: xpad - add constants for GIP interface numbers Vitaliy Tomin (1): serial: Add support for Advantech PCI-1611U card Weitao Wang (1): USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value Will Deacon (2): KVM: arm64: Link position-independent string routines into .hyp.text bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields Wyes Karny (1): cpupower: Make TSC read per CPU for Mperf monitor Xin Long (4): erspan: get the proto with the md version for collect_md tipc: add tipc_bearer_min_mtu to calculate min mtu tipc: do not update mtu if msg_max is too small in mtu negotiation tipc: check the bearer min mtu properly when setting it by netlink Xiubo Li (1): ceph: force updating the msg pointer in non-split case Zev Weiss (1): gpio: mockup: Fix mode of debugfs files Zhang Rui (1): x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms Zheng Wang (2): memstick: r592: Fix UAF bug in r592_remove due to race condition scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition Zhuang Shengen (1): vsock: avoid to close connected socket after the timeout Zongjie Li (1): fbdev: arcfb: Fix error handling in arcfb_probe() Zqiang (1): rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access sewookseo (1): net: Find dst with sk's xfrm policy not ctl_sk t.feng (1): ipvlan:Fix out-of-bounds caused by unclear skb->cb void0red (1): ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects wenxu (1): net/sched: act_mirred: refactor the handle of xmit

1 year, 8 months

1
1
0 0

[PATCH 6.1 0/1] Hardening against CVE-2023-2002

by Dragos-Marian Panait

The following commit is needed to harden against CVE-2023-2002: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… Ruihan Li (1): bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) base-commit: fa74641fb6b93a19ccb50579886ecc98320230f9 -- 2.40.1

1 year, 8 months

2
2
0 0

[PATCH 5.4 0/1] Hardening against CVE-2023-2002

by Dragos-Marian Panait

The following commit is needed to harden against CVE-2023-2002: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… Ruihan Li (1): bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) base-commit: f53660ec669f60c772fdf7d75d1c24d288547cee -- 2.40.1

1 year, 8 months

1
1
0 0

[PATCH 5.10 0/1] Hardening against CVE-2023-2002

by Dragos-Marian Panait

The following commit is needed to harden against CVE-2023-2002: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… Ruihan Li (1): bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() net/bluetooth/hci_sock.c | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) base-commit: 4c893ff55907c61456bcb917781c0dd687a1e123 -- 2.40.1

1 year, 8 months

1
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror May 2023