July 2024 - Linux-stable-mirror

[PATCH 4.19 5.4 5.10 5.15] net: relax socket state check at accept time.

by Nikolay Kuratov

[ Upstream commit 26afda78cda3da974fd4c287962c169e9462c495 ] Christoph reported the following splat: WARNING: CPU: 1 PID: 772 at net/ipv4/af_inet.c:761 __inet_accept+0x1f4/0x4a0 Modules linked in: CPU: 1 PID: 772 Comm: syz-executor510 Not tainted 6.9.0-rc7-g7da7119fe22b #56 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 04/01/2014 RIP: 0010:__inet_accept+0x1f4/0x4a0 net/ipv4/af_inet.c:759 Code: 04 38 84 c0 0f 85 87 00 00 00 41 c7 04 24 03 00 00 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 ec b7 da fd <0f> 0b e9 7f fe ff ff e8 e0 b7 da fd 0f 0b e9 fe fe ff ff 89 d9 80 RSP: 0018:ffffc90000c2fc58 EFLAGS: 00010293 RAX: ffffffff836bdd14 RBX: 0000000000000000 RCX: ffff888104668000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: dffffc0000000000 R08: ffffffff836bdb89 R09: fffff52000185f64 R10: dffffc0000000000 R11: fffff52000185f64 R12: dffffc0000000000 R13: 1ffff92000185f98 R14: ffff88810754d880 R15: ffff8881007b7800 FS: 000000001c772880(0000) GS:ffff88811b280000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb9fcf2e178 CR3: 00000001045d2002 CR4: 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> inet_accept+0x138/0x1d0 net/ipv4/af_inet.c:786 do_accept+0x435/0x620 net/socket.c:1929 __sys_accept4_file net/socket.c:1969 [inline] __sys_accept4+0x9b/0x110 net/socket.c:1999 __do_sys_accept net/socket.c:2016 [inline] __se_sys_accept net/socket.c:2013 [inline] __x64_sys_accept+0x7d/0x90 net/socket.c:2013 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x58/0x100 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x4315f9 Code: fd ff 48 81 c4 80 00 00 00 e9 f1 fe ff ff 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab b4 fd ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffdb26d9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b RAX: ffffffffffffffda RBX: 0000000000400300 RCX: 00000000004315f9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00000000006e1018 R08: 0000000000400300 R09: 0000000000400300 R10: 0000000000400300 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000040cdf0 R14: 000000000040ce80 R15: 0000000000000055 </TASK> The reproducer invokes shutdown() before entering the listener status. After commit 94062790aedb ("tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets"), the above causes the child to reach the accept syscall in FIN_WAIT1 status. Eric noted we can relax the existing assertion in __inet_accept() Reported-by: Christoph Paasch <cpaasch(a)apple.com> Closes: https://github.com/multipath-tcp/mptcp_net-next/issues/490 Suggested-by: Eric Dumazet <edumazet(a)google.com> Fixes: 94062790aedb ("tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets") Link: https://lore.kernel.org/r/23ab880a44d8cfd967e84de8b93dbf48848e3d8c.17162996… Link: https://lore.kernel.org/linux-cve-announce/2024062136-CVE-2024-36484-375b@g… Signed-off-by: Nikolay Kuratov <kniv(a)yandex-team.ru> --- net/ipv4/af_inet.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/net/ipv4/af_inet.c b/net/ipv4/af_inet.c index 475a19db3713..ce42626663de 100644 --- a/net/ipv4/af_inet.c +++ b/net/ipv4/af_inet.c @@ -758,7 +758,9 @@ int inet_accept(struct socket *sock, struct socket *newsock, int flags, sock_rps_record_flow(sk2); WARN_ON(!((1 << sk2->sk_state) & (TCPF_ESTABLISHED | TCPF_SYN_RECV | - TCPF_CLOSE_WAIT | TCPF_CLOSE))); + TCPF_FIN_WAIT1 | TCPF_FIN_WAIT2 | + TCPF_CLOSING | TCPF_CLOSE_WAIT | + TCPF_CLOSE))); sock_graft(sk2, newsock); -- 2.34.1

5 months, 2 weeks

2
1
0 0

Linux 6.9.11

by Greg Kroah-Hartman

I'm announcing the release of the 6.9.11 kernel. All users of the 6.9 kernel series must upgrade. The updated 6.9.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.9.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/cdrom/cdrom-standard.rst | 4 Makefile | 2 arch/arm64/kernel/armv8_deprecated.c | 3 arch/loongarch/boot/dts/loongson-2k0500-ref.dts | 4 arch/loongarch/boot/dts/loongson-2k1000-ref.dts | 4 arch/loongarch/boot/dts/loongson-2k2000-ref.dts | 2 arch/mips/kernel/syscalls/syscall_o32.tbl | 2 arch/powerpc/kernel/eeh_pe.c | 7 arch/powerpc/kvm/book3s_64_vio.c | 18 arch/powerpc/platforms/pseries/setup.c | 4 arch/riscv/kernel/stacktrace.c | 3 drivers/acpi/ac.c | 4 drivers/acpi/ec.c | 9 drivers/acpi/sbs.c | 4 drivers/block/loop.c | 23 drivers/block/null_blk/main.c | 4 drivers/bluetooth/btnxpuart.c | 2 drivers/clk/qcom/apss-ipq-pll.c | 2 drivers/firmware/efi/libstub/zboot.lds | 1 drivers/gpio/gpio-pca953x.c | 2 drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 15 drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 5 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 52 + drivers/gpu/drm/amd/display/dc/dml/dcn32/display_mode_vba_32.c | 3 drivers/gpu/drm/amd/display/dc/dml/dcn35/dcn35_fpu.c | 2 drivers/gpu/drm/amd/display/dc/dml/dcn351/dcn351_fpu.c | 2 drivers/gpu/drm/amd/display/dc/dml2/dml2_translation_helper.c | 1 drivers/gpu/drm/amd/display/dc/dml2/dml2_utils.c | 2 drivers/gpu/drm/amd/include/pptable.h | 91 +-- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 13 drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 5 drivers/gpu/drm/amd/pm/swsmu/inc/pmfw_if/smu_v14_0_0_ppsmc.h | 4 drivers/gpu/drm/amd/pm/swsmu/inc/smu_types.h | 4 drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c | 73 ++ drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 drivers/gpu/drm/exynos/exynos_dp.c | 1 drivers/gpu/drm/mediatek/mtk_drm_drv.c | 8 drivers/gpu/drm/radeon/radeon_gem.c | 2 drivers/gpu/drm/renesas/shmobile/shmob_drm_drv.c | 8 drivers/gpu/drm/vmwgfx/Kconfig | 2 drivers/hid/hid-debug.c | 2 drivers/hid/hid-ids.h | 2 drivers/hid/hid-input.c | 13 drivers/input/joystick/xpad.c | 1 drivers/input/mouse/elantech.c | 31 + drivers/input/serio/i8042-acpipnpio.h | 18 drivers/input/touchscreen/ads7846.c | 12 drivers/input/touchscreen/silead.c | 19 drivers/misc/mei/main.c | 2 drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 2 drivers/net/ethernet/ibm/ibmvnic.c | 12 drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 1 drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 10 drivers/net/ethernet/marvell/octeontx2/nic/otx2_reg.h | 55 +- drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 2 drivers/net/ethernet/marvell/octeontx2/nic/qos.c | 3 drivers/net/usb/qmi_wwan.c | 2 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 16 drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 47 + drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c | 13 drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 6 drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 8 drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 12 drivers/net/wireless/intel/iwlwifi/mvm/sta.h | 5 drivers/nvme/host/core.c | 1 drivers/nvme/host/fabrics.c | 6 drivers/nvme/host/nvme.h | 2 drivers/nvme/target/core.c | 1 drivers/nvme/target/fabrics-cmd-auth.c | 3 drivers/nvme/target/fabrics-cmd.c | 6 drivers/of/irq.c | 143 ++--- drivers/of/of_private.h | 3 drivers/parport/parport_amiga.c | 8 drivers/perf/riscv_pmu_sbi.c | 2 drivers/platform/mellanox/nvsw-sn2201.c | 5 drivers/platform/x86/amd/hsmp.c | 50 + drivers/platform/x86/lg-laptop.c | 89 +-- drivers/platform/x86/wireless-hotkey.c | 2 drivers/pnp/base.h | 1 drivers/s390/char/sclp.c | 1 drivers/scsi/device_handler/scsi_dh_alua.c | 31 - drivers/scsi/libsas/sas_internal.h | 14 drivers/scsi/qedf/qedf.h | 1 drivers/scsi/qedf/qedf_main.c | 47 + drivers/scsi/sr.h | 2 drivers/scsi/sr_ioctl.c | 5 drivers/spi/spi-davinci.c | 6 drivers/spi/spi-imx.c | 2 drivers/spi/spi-mux.c | 1 drivers/spi/spi.c | 6 drivers/tee/optee/ffa_abi.c | 12 drivers/vfio/device_cdev.c | 7 drivers/vfio/group.c | 7 drivers/vfio/pci/vfio_pci_core.c | 271 ++-------- drivers/vfio/vfio_main.c | 44 + fs/btrfs/btrfs_inode.h | 10 fs/btrfs/file.c | 16 fs/btrfs/ordered-data.c | 31 + fs/btrfs/qgroup.c | 4 fs/btrfs/ref-verify.c | 9 fs/btrfs/scrub.c | 24 fs/cachefiles/cache.c | 45 + fs/cachefiles/ondemand.c | 74 +- fs/cachefiles/volume.c | 1 fs/dcache.c | 31 - fs/erofs/zmap.c | 2 fs/file.c | 4 fs/hfsplus/xattr.c | 2 fs/iomap/buffered-io.c | 3 fs/netfs/buffered_write.c | 4 fs/netfs/fscache_volume.c | 14 fs/netfs/internal.h | 2 fs/nfs/dir.c | 27 fs/nfs/nfs4proc.c | 1 fs/nfs/pagelist.c | 5 fs/nfs/symlink.c | 2 fs/smb/client/cifsfs.c | 2 fs/smb/client/file.c | 4 fs/smb/common/smb2pdu.h | 34 + fs/smb/server/smb2pdu.c | 9 include/linux/cdrom.h | 2 include/linux/fscache-cache.h | 6 include/linux/page_ref.h | 49 - include/linux/pnp.h | 2 include/linux/spi/spi.h | 5 include/linux/vfio.h | 1 include/linux/vfio_pci_core.h | 2 include/net/bluetooth/hci_sync.h | 2 include/sound/dmaengine_pcm.h | 1 include/trace/events/fscache.h | 4 include/uapi/linux/input-event-codes.h | 2 io_uring/register.c | 4 kernel/workqueue.c | 51 + lib/Kconfig | 8 lib/closure.c | 10 mm/filemap.c | 10 mm/gup.c | 2 net/bluetooth/hci_core.c | 76 -- net/bluetooth/hci_sync.c | 13 net/bluetooth/l2cap_core.c | 3 net/bluetooth/l2cap_sock.c | 14 net/ipv6/ila/ila_lwt.c | 7 net/ipv6/rpl_iptunnel.c | 14 net/mac80211/cfg.c | 5 net/mac80211/ieee80211_i.h | 2 net/mac80211/main.c | 11 net/mac80211/mesh.c | 1 net/mac80211/scan.c | 31 - net/mac80211/util.c | 4 net/mac802154/tx.c | 8 net/wireless/rdev-ops.h | 6 net/wireless/scan.c | 59 +- scripts/kconfig/expr.c | 29 - scripts/kconfig/expr.h | 1 scripts/kconfig/gconf.c | 3 scripts/kconfig/menu.c | 2 sound/core/pcm_dmaengine.c | 22 sound/core/pcm_native.c | 2 sound/pci/hda/Kconfig | 2 sound/pci/hda/cs35l41_hda_property.c | 8 sound/pci/hda/cs35l56_hda.c | 5 sound/pci/hda/patch_realtek.c | 9 sound/soc/amd/yc/acp6x-mach.c | 7 sound/soc/codecs/cs35l56-shared.c | 4 sound/soc/codecs/es8326.c | 8 sound/soc/codecs/rt722-sdca-sdw.c | 4 sound/soc/intel/avs/topology.c | 19 sound/soc/intel/boards/bytcr_rt5640.c | 11 sound/soc/soc-generic-dmaengine-pcm.c | 8 sound/soc/soc-topology.c | 29 - sound/soc/sof/intel/hda-pcm.c | 6 sound/soc/sof/sof-audio.c | 2 sound/soc/ti/davinci-mcasp.c | 9 sound/soc/ti/omap-hdmi.c | 6 tools/power/cpupower/utils/helpers/amd.c | 26 tools/testing/selftests/bpf/config | 3 tools/testing/selftests/bpf/prog_tests/tc_links.c | 61 ++ tools/testing/selftests/cachestat/test_cachestat.c | 1 tools/testing/selftests/filesystems/overlayfs/dev_in_maps.c | 1 tools/testing/selftests/futex/functional/Makefile | 2 tools/testing/selftests/net/openvswitch/ovs-dpctl.py | 2 tools/testing/selftests/openat2/openat2_test.c | 1 tools/testing/selftests/timens/exec.c | 6 tools/testing/selftests/timens/timer.c | 2 tools/testing/selftests/timens/timerfd.c | 2 tools/testing/selftests/timens/vfork_exec.c | 4 tools/testing/selftests/vDSO/parse_vdso.c | 16 tools/testing/selftests/vDSO/vdso_standalone_test_x86.c | 18 188 files changed, 1713 insertions(+), 879 deletions(-) Adrian Moreno (1): selftests: openvswitch: Set value to nla flags. Aivaz Latypov (1): ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx Alex Williamson (3): vfio: Create vfio_fs_type with inode per device vfio/pci: Use unmap_mapping_range() vfio/pci: Insert full vma on mmap'd MMIO fault Alexander Stein (1): Input: ads7846 - use spi_device_id table Alexander Usyskin (1): mei: demote client disconnect warning on suspend to debug Alexey Makhalov (1): drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency Alvin Lee (1): drm/amd/display: Account for cursor prefetch BW in DML1 mode support Amadeusz Sławiński (3): ASoC: topology: Fix references to freed memory ASoC: Intel: avs: Fix route override ASoC: topology: Do not assign fields that are already set Andreas Hindborg (1): null_blk: fix validation of block size Andy Shevchenko (1): PNP: Hide pnp_bus_type from the non-PNP code Anjali K (1): powerpc/pseries: Whitelist dtl slub object for copying to userspace Armin Wolf (6): ACPI: EC: Abort address space access upon error ACPI: EC: Avoid returning AE_OK on errors in address space handler platform/x86: wireless-hotkey: Add support for LG Airplane Button platform/x86: lg-laptop: Remove LGEX0815 hotkey handling platform/x86: lg-laptop: Change ACPI device id platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB Arnd Bergmann (1): mips: fix compat_sys_lseek syscall Aryan Srivastava (1): net: mvpp2: fill-in dev_port attribute Aseda Aboagye (2): input: Add event code for accessibility key input: Add support for "Do Not Disturb" Ayala Beker (1): wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option Baokun Li (5): cachefiles: add consistency check for copen/cread cachefiles: make on-demand read killable netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() cachefiles: fix slab-use-after-free in fscache_withdraw_volume() cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() Bastien Curutchet (1): spi: davinci: Unset POWERDOWN bit when releasing resources Benjamin Berg (1): wifi: iwlwifi: mvm: remove stale STA link data during restart Boyang Yu (1): nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA. Chen Ni (2): can: kvaser_usb: fix return value for hif_usb_send_regout platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources Christian Brauner (1): fs: better handle deep ancestor chains in is_subdir() Chunguang Xu (2): nvme-fabrics: use reserved tag for reg read/write command nvme: avoid double free special payload Cyril Hrubis (1): loop: Disable fallocate() zero and discard if not supported Daniel Borkmann (1): selftests/bpf: Extend tcx tests to cover late tcx_entry release Daniel Gabay (1): wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK Daniel Miess (1): drm/amd/display: Change dram_clock_latency to 34us for dcn351 Daniel Wagner (1): nvmet: always initialize cqe.result Daniele Palmas (1): net: usb: qmi_wwan: add Telit FN912 compositions David Lechner (1): spi: mux: set ctlr->bits_per_word_mask Dhananjay Ugwekar (1): tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs Dmitry Antipov (2): wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() wifi: cfg80211: wext: add extra SIOCSIWSCAN data check Dmitry Mastykin (1): NFSv4: Fix memory leak in nfs4_set_security_label Dmitry Savin (1): ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x Gen4 Douglas Anderson (2): drm: renesas: shmobile: Call drm_atomic_helper_shutdown() at shutdown time drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time Edward Adam Davis (2): bluetooth/l2cap: sync sock recv cb and release hfsplus: fix uninit-value in copy_name Emmanuel Grumbach (1): wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL Eric Dumazet (2): net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() ila: block BH in ila_output() Fangzhi Zuo (1): drm/amd/display: Update efficiency bandwidth for dcn351 Filipe Manana (3): btrfs: ensure fast fsync waits for ordered extents after a write failure btrfs: qgroup: fix quota root leak after quota disable failure btrfs: fix uninitialized return value in the ref-verify tool Gabor Juhos (1): clk: qcom: apss-ipq-pll: remove 'config_ctl_hi_val' from Stromer pll configs Ganesh Goudar (1): powerpc/eeh: avoid possible crash when edev->pdev changes Gao Xiang (1): erofs: ensure m_llen is reset to 0 if metadata is invalid Greg Kroah-Hartman (1): Linux 6.9.11 Hagar Hemdan (1): io_uring: fix possible deadlock in io_register_iowq_max_workers() Hans de Goede (1): Input: silead - Always support 10 fingers Harish Kasiviswanathan (1): drm/amdgpu: Indicate CU havest info to CP Heiko Carstens (1): s390/sclp: Fix sclp_init() cleanup on failure Huacai Chen (1): LoongArch: Fix GMAC's phy-mode definitions in dts Ian Ray (1): gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ilan Peer (1): wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill Jack Yu (2): ASoC: rt722-sdca-sdw: add silence detection register as volatile ASoC: rt722-sdca-sdw: add debounce time for type detection Jai Luthra (2): ALSA: dmaengine: Synchronize dma channel after drop() ASoC: ti: davinci-mcasp: Set min period size using FIFO config Jan Kara (1): nfs: Avoid flushing many pages with NFS_FILE_SYNC Johannes Berg (6): wifi: mac80211: apply mcast rate only if interface is up wifi: mac80211: handle tasklet frames before stopping wifi: cfg80211: fix 6 GHz scan request building wifi: iwlwifi: mvm: handle BA session teardown in RF-kill wifi: cfg80211: wext: set ssids=NULL for passive scans wifi: mac80211: disable softirqs for queued frame handling John Hubbard (3): selftests/futex: pass _GNU_SOURCE without a value to the compiler selftest/timerns: fix clang build failures for abs() calls selftests/vDSO: fix clang build errors and warnings Jonathan Denose (1): Input: elantech - fix touchpad state on resume for Lenovo N24 Justin Stitt (1): scsi: sr: Fix unintentional arithmetic wraparound Kailang Yang (1): ALSA: hda/realtek: Add more codec ID to no shutup pins list Kent Overstreet (1): closures: Change BUG_ON() to WARN_ON() Kenton Groombridge (1): wifi: mac80211: Avoid address calculations via out of bounds array indexing Krzysztof Kozlowski (1): drm/exynos: dp: drop driver owner initialization Li Ma (1): drm/amd/swsmu: add MALL init support workaround for smu_v14_0_1 Likun Gao (1): drm/amdgpu: init TA fw for psp v14 Linus Torvalds (1): cpumask: limit FORCE_NR_CPUS to just the UP case Louis Dalibard (1): HID: Ignore battery for ELAN touchscreens 2F2C and 4116 Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix deadlock Luke D. Jones (1): Input: xpad - add support for ASUS ROG RAIKIRI PRO Marc Zyngier (1): of/irq: Disable "interrupt-map" parsing for PASEMI Nemo Mark-PK Tsai (1): tee: optee: ffa: Fix missing-field-initializers warning Martin Wilck (1): scsi: core: alua: I/O errors for ALUA state transitions Masahiro Yamada (2): kconfig: gconf: give a proper initial state to the Save button kconfig: remove wrong expr_trans_bool() Michael Ellerman (4): selftests: cachestat: Fix build warnings on ppc64 selftests/openat2: Fix build warnings on ppc64 selftests/overlayfs: Fix build error on ppc64 KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Namjae Jeon (1): ksmbd: return FILE_DEVICE_DISK instead of super magic Nathan Chancellor (1): efi/libstub: zboot.lds: Discard .discard sections Neeraj Sanjay Kale (1): Bluetooth: btnxpuart: Enable Power Save feature on startup Nick Child (1): ibmvnic: Add tx check to prevent skb leak Nicolas Escande (1): wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata Patrice Chotard (1): spi: Fix OCTAL mode support Paul Hsieh (1): drm/amd/display: change dram_clock_latency to 34us for dcn35 Peter Ujfalusi (2): ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES Pierre-Eric Pelloux-Prayer (1): drm/radeon: check bo_va->bo is non-NULL before using it Primoz Fiser (1): ASoC: ti: omap-hdmi: Fix too long driver name Puranjay Mohan (1): riscv: stacktrace: fix usage of ftrace_graph_ret_addr() Qu Wenruo (1): btrfs: scrub: handle RST lookup error correctly Ratheesh Kannoth (1): octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver Richard Fitzgerald (1): ASoC: cs35l56: Disconnect ASP1 TX sources when ASP1 DAI is hooked up Ritesh Harjani (IBM) (1): iomap: Fix iomap_adjust_read_range for plen calculation Rob Herring (Arm) (1): of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() Roman Li (1): drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport Sagi Grimberg (1): nfs: propagate readlink errors in nfs_symlink_filler Samuel Holland (1): drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus Saurav Kashyap (3): scsi: qedf: Don't process stag work during unload and recovery scsi: qedf: Wait for stag work during unload scsi: qedf: Set qed_slowpath_params to zero before use Scott Mayhew (1): nfs: don't invalidate dentries on transient errors Shengjiu Wang (1): ALSA: dmaengine_pcm: terminate dmaengine before synchronize Simon Trimmer (2): ALSA: hda: cs35l56: Fix lifecycle of codec pointer ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE Stefan Binding (4): ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5 ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4 ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4 Steve French (1): cifs: fix noisy message on copy_file_range Suma Hegde (1): platform/x86/amd/hsmp: Check HSMP support on AMD family of processors Takashi Iwai (2): ALSA: PCM: Allow resume only for suspended streams ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE Tasos Sahanidis (1): drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds Tejun Heo (1): workqueue: Refactor worker ID formatting and make wq_worker_comm() use full ID string Tetsuo Handa (1): Bluetooth: hci_core: cancel all works upon hci_unregister_dev() Thomas GENTY (1): bytcr_rt5640 : inverse jack detect for Archos 101 cesium Thomas Weißschuh (1): ACPI: AC: Properly notify powermanagement core about changes Tobias Jakobi (2): drm: panel-orientation-quirks: Add quirk for Aya Neo KUN Input: i8042 - add Ayaneo Kun to i8042 quirk table Tom Chung (2): drm/amd/display: Add refresh rate range check drm/amd/display: Fix refresh rate range for some panel Uwe Kleine-König (2): parport: amiga: Mark driver struct with __refdata to prevent section mismatch spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices Vyacheslav Frantsishko (1): ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA Wei Li (1): arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process Xingui Yang (1): scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Yang Shi (1): mm: page_ref: remove folio_try_get_rcu() Yedidya Benshimol (2): wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd Yunshui Jiang (1): net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() Yuntao Wang (1): fs/file: fix the check in find_next_fd() Zhang Yi (1): ASoC: codecs: ES8326: Solve headphone detection issue Zizhi Wo (1): cachefiles: Set object to close if ondemand_id < 0 in copen

5 months, 2 weeks

1
1
0 0

Linux 6.6.42

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.42 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/cdrom/cdrom-standard.rst | 4 Makefile | 2 arch/arm/include/asm/uaccess.h | 14 arch/arm64/kernel/armv8_deprecated.c | 3 arch/mips/kernel/syscalls/syscall_o32.tbl | 2 arch/powerpc/kernel/eeh_pe.c | 7 arch/powerpc/kvm/book3s_64_vio.c | 18 - arch/powerpc/platforms/pseries/setup.c | 4 arch/riscv/kernel/stacktrace.c | 3 drivers/acpi/ec.c | 9 drivers/block/null_blk/main.c | 4 drivers/bluetooth/btnxpuart.c | 2 drivers/firmware/efi/libstub/zboot.lds | 1 drivers/gpio/gpio-pca953x.c | 2 drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 15 - drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 52 +++ drivers/gpu/drm/amd/display/dc/dml/dcn32/display_mode_vba_32.c | 3 drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 drivers/gpu/drm/exynos/exynos_dp.c | 1 drivers/gpu/drm/mediatek/mtk_drm_drv.c | 8 drivers/gpu/drm/radeon/radeon_gem.c | 2 drivers/gpu/drm/vmwgfx/Kconfig | 2 drivers/hid/hid-debug.c | 2 drivers/hid/hid-ids.h | 2 drivers/hid/hid-input.c | 13 drivers/input/joystick/xpad.c | 1 drivers/input/mouse/elantech.c | 31 ++ drivers/input/serio/i8042-acpipnpio.h | 18 + drivers/input/touchscreen/ads7846.c | 12 drivers/input/touchscreen/silead.c | 19 - drivers/misc/mei/main.c | 2 drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 2 drivers/net/ethernet/ibm/ibmvnic.c | 12 drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 10 drivers/net/ethernet/marvell/octeontx2/nic/otx2_reg.h | 55 +-- drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 2 drivers/net/ethernet/marvell/octeontx2/nic/qos.c | 3 drivers/net/usb/qmi_wwan.c | 2 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 16 - drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 47 ++- drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c | 13 drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 8 drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 12 drivers/net/wireless/intel/iwlwifi/mvm/sta.h | 5 drivers/nvme/host/core.c | 1 drivers/nvme/host/nvme.h | 2 drivers/nvme/target/core.c | 1 drivers/nvme/target/fabrics-cmd-auth.c | 3 drivers/nvme/target/fabrics-cmd.c | 6 drivers/of/irq.c | 143 +++++----- drivers/of/of_private.h | 3 drivers/perf/riscv_pmu_sbi.c | 2 drivers/platform/mellanox/nvsw-sn2201.c | 5 drivers/platform/x86/lg-laptop.c | 89 ++---- drivers/platform/x86/wireless-hotkey.c | 2 drivers/s390/char/sclp.c | 1 drivers/scsi/device_handler/scsi_dh_alua.c | 31 +- drivers/scsi/libsas/sas_internal.h | 14 drivers/scsi/qedf/qedf.h | 1 drivers/scsi/qedf/qedf_main.c | 47 +++ drivers/scsi/sr.h | 2 drivers/scsi/sr_ioctl.c | 5 drivers/spi/spi-imx.c | 2 drivers/spi/spi-mux.c | 1 drivers/spi/spi.c | 6 drivers/tee/optee/ffa_abi.c | 12 fs/afs/write.c | 2 fs/btrfs/qgroup.c | 4 fs/cachefiles/cache.c | 45 +++ fs/cachefiles/ondemand.c | 74 +++-- fs/cachefiles/volume.c | 1 fs/dcache.c | 31 -- fs/erofs/zmap.c | 2 fs/file.c | 4 fs/fscache/internal.h | 2 fs/fscache/volume.c | 14 fs/hfsplus/xattr.c | 2 fs/iomap/buffered-io.c | 3 fs/locks.c | 9 fs/nfs/dir.c | 27 - fs/nfs/nfs4proc.c | 1 fs/nfs/pagelist.c | 5 fs/nfs/symlink.c | 2 fs/smb/client/cifsfs.c | 2 fs/smb/client/file.c | 4 fs/smb/common/smb2pdu.h | 34 ++ fs/smb/server/smb2pdu.c | 9 include/linux/cdrom.h | 2 include/linux/fscache-cache.h | 6 include/linux/page_ref.h | 49 --- include/linux/spi/spi.h | 5 include/net/bluetooth/hci_sync.h | 2 include/sound/dmaengine_pcm.h | 1 include/trace/events/fscache.h | 4 include/uapi/linux/input-event-codes.h | 2 lib/Kconfig | 8 mm/filemap.c | 10 mm/gup.c | 2 net/bluetooth/hci_core.c | 76 +---- net/bluetooth/hci_sync.c | 13 net/bluetooth/l2cap_core.c | 3 net/bluetooth/l2cap_sock.c | 14 net/ipv6/ila/ila_lwt.c | 7 net/ipv6/rpl_iptunnel.c | 14 net/mac80211/cfg.c | 5 net/mac80211/ieee80211_i.h | 2 net/mac80211/main.c | 11 net/mac80211/mesh.c | 1 net/mac80211/scan.c | 14 net/mac80211/util.c | 4 net/mac802154/tx.c | 8 net/wireless/rdev-ops.h | 6 net/wireless/scan.c | 59 ++-- scripts/kconfig/expr.c | 29 -- scripts/kconfig/expr.h | 1 scripts/kconfig/gconf.c | 3 scripts/kconfig/menu.c | 2 sound/core/pcm_dmaengine.c | 22 + sound/core/pcm_native.c | 2 sound/pci/hda/Kconfig | 2 sound/pci/hda/cs35l56_hda.c | 5 sound/pci/hda/patch_realtek.c | 7 sound/soc/amd/yc/acp6x-mach.c | 7 sound/soc/codecs/rt722-sdca-sdw.c | 4 sound/soc/intel/boards/bytcr_rt5640.c | 11 sound/soc/soc-generic-dmaengine-pcm.c | 8 sound/soc/soc-topology.c | 29 +- sound/soc/sof/intel/hda-pcm.c | 6 sound/soc/sof/sof-audio.c | 2 sound/soc/ti/davinci-mcasp.c | 9 sound/soc/ti/omap-hdmi.c | 6 tools/power/cpupower/utils/helpers/amd.c | 26 + tools/testing/selftests/bpf/config | 3 tools/testing/selftests/bpf/prog_tests/tc_links.c | 61 ++++ tools/testing/selftests/cachestat/test_cachestat.c | 1 tools/testing/selftests/futex/functional/Makefile | 2 tools/testing/selftests/net/openvswitch/ovs-dpctl.py | 2 tools/testing/selftests/openat2/openat2_test.c | 1 tools/testing/selftests/timens/exec.c | 6 tools/testing/selftests/timens/timer.c | 2 tools/testing/selftests/timens/timerfd.c | 2 tools/testing/selftests/timens/vfork_exec.c | 4 tools/testing/selftests/vDSO/parse_vdso.c | 16 - tools/testing/selftests/vDSO/vdso_standalone_test_x86.c | 18 + 144 files changed, 1167 insertions(+), 567 deletions(-) Adrian Moreno (1): selftests: openvswitch: Set value to nla flags. Aivaz Latypov (1): ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx Alexander Stein (1): Input: ads7846 - use spi_device_id table Alexander Usyskin (1): mei: demote client disconnect warning on suspend to debug Alexey Makhalov (1): drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency Alvin Lee (1): drm/amd/display: Account for cursor prefetch BW in DML1 mode support Amadeusz Sławiński (2): ASoC: topology: Fix references to freed memory ASoC: topology: Do not assign fields that are already set Andreas Hindborg (1): null_blk: fix validation of block size Anjali K (1): powerpc/pseries: Whitelist dtl slub object for copying to userspace Armin Wolf (6): ACPI: EC: Abort address space access upon error ACPI: EC: Avoid returning AE_OK on errors in address space handler platform/x86: wireless-hotkey: Add support for LG Airplane Button platform/x86: lg-laptop: Remove LGEX0815 hotkey handling platform/x86: lg-laptop: Change ACPI device id platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB Arnd Bergmann (1): mips: fix compat_sys_lseek syscall Aseda Aboagye (2): input: Add event code for accessibility key input: Add support for "Do Not Disturb" Ayala Beker (1): wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option Baokun Li (5): cachefiles: add consistency check for copen/cread cachefiles: make on-demand read killable netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() cachefiles: fix slab-use-after-free in fscache_withdraw_volume() cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() Benjamin Berg (1): wifi: iwlwifi: mvm: remove stale STA link data during restart Boyang Yu (1): nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA. Chen Ni (2): can: kvaser_usb: fix return value for hif_usb_send_regout platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources Christian Brauner (1): fs: better handle deep ancestor chains in is_subdir() Chunguang Xu (1): nvme: avoid double free special payload Daniel Borkmann (1): selftests/bpf: Extend tcx tests to cover late tcx_entry release Daniel Gabay (1): wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK Daniel Wagner (1): nvmet: always initialize cqe.result Daniele Palmas (1): net: usb: qmi_wwan: add Telit FN912 compositions David Lechner (1): spi: mux: set ctlr->bits_per_word_mask Dhananjay Ugwekar (1): tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs Dmitry Antipov (2): wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() wifi: cfg80211: wext: add extra SIOCSIWSCAN data check Dmitry Mastykin (1): NFSv4: Fix memory leak in nfs4_set_security_label Douglas Anderson (1): drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time Edward Adam Davis (2): bluetooth/l2cap: sync sock recv cb and release hfsplus: fix uninit-value in copy_name Emmanuel Grumbach (1): wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL Eric Dumazet (2): net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() ila: block BH in ila_output() Filipe Manana (1): btrfs: qgroup: fix quota root leak after quota disable failure Ganesh Goudar (1): powerpc/eeh: avoid possible crash when edev->pdev changes Gao Xiang (1): erofs: ensure m_llen is reset to 0 if metadata is invalid Greg Kroah-Hartman (1): Linux 6.6.42 Hans de Goede (1): Input: silead - Always support 10 fingers Harish Kasiviswanathan (1): drm/amdgpu: Indicate CU havest info to CP Heiko Carstens (1): s390/sclp: Fix sclp_init() cleanup on failure Ian Ray (1): gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ilan Peer (1): wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill Jack Yu (2): ASoC: rt722-sdca-sdw: add silence detection register as volatile ASoC: rt722-sdca-sdw: add debounce time for type detection Jai Luthra (2): ALSA: dmaengine: Synchronize dma channel after drop() ASoC: ti: davinci-mcasp: Set min period size using FIFO config Jan Kara (1): nfs: Avoid flushing many pages with NFS_FILE_SYNC Jann Horn (1): filelock: Remove locks reliably when fcntl/close race is detected Johannes Berg (6): wifi: mac80211: apply mcast rate only if interface is up wifi: mac80211: handle tasklet frames before stopping wifi: cfg80211: fix 6 GHz scan request building wifi: iwlwifi: mvm: handle BA session teardown in RF-kill wifi: cfg80211: wext: set ssids=NULL for passive scans wifi: mac80211: disable softirqs for queued frame handling John Hubbard (3): selftests/futex: pass _GNU_SOURCE without a value to the compiler selftest/timerns: fix clang build failures for abs() calls selftests/vDSO: fix clang build errors and warnings Jonathan Denose (1): Input: elantech - fix touchpad state on resume for Lenovo N24 Justin Stitt (1): scsi: sr: Fix unintentional arithmetic wraparound Kailang Yang (1): ALSA: hda/realtek: Add more codec ID to no shutup pins list Krzysztof Kozlowski (1): drm/exynos: dp: drop driver owner initialization Linus Torvalds (1): cpumask: limit FORCE_NR_CPUS to just the UP case Louis Dalibard (1): HID: Ignore battery for ELAN touchscreens 2F2C and 4116 Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix deadlock Luke D. Jones (1): Input: xpad - add support for ASUS ROG RAIKIRI PRO Marc Zyngier (1): of/irq: Disable "interrupt-map" parsing for PASEMI Nemo Mark-PK Tsai (1): tee: optee: ffa: Fix missing-field-initializers warning Martin Wilck (1): scsi: core: alua: I/O errors for ALUA state transitions Masahiro Yamada (3): kconfig: gconf: give a proper initial state to the Save button kconfig: remove wrong expr_trans_bool() ARM: 9324/1: fix get_user() broken with veneer Michael Ellerman (3): selftests: cachestat: Fix build warnings on ppc64 selftests/openat2: Fix build warnings on ppc64 KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Namjae Jeon (1): ksmbd: return FILE_DEVICE_DISK instead of super magic Nathan Chancellor (1): efi/libstub: zboot.lds: Discard .discard sections Neeraj Sanjay Kale (1): Bluetooth: btnxpuart: Enable Power Save feature on startup Nick Child (1): ibmvnic: Add tx check to prevent skb leak Nicolas Escande (1): wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata Patrice Chotard (1): spi: Fix OCTAL mode support Peter Ujfalusi (2): ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES Pierre-Eric Pelloux-Prayer (1): drm/radeon: check bo_va->bo is non-NULL before using it Primoz Fiser (1): ASoC: ti: omap-hdmi: Fix too long driver name Puranjay Mohan (1): riscv: stacktrace: fix usage of ftrace_graph_ret_addr() Ratheesh Kannoth (1): octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver Ritesh Harjani (IBM) (1): iomap: Fix iomap_adjust_read_range for plen calculation Rob Herring (Arm) (1): of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() Sagi Grimberg (1): nfs: propagate readlink errors in nfs_symlink_filler Samuel Holland (1): drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus Saurav Kashyap (3): scsi: qedf: Don't process stag work during unload and recovery scsi: qedf: Wait for stag work during unload scsi: qedf: Set qed_slowpath_params to zero before use Scott Mayhew (1): nfs: don't invalidate dentries on transient errors Shengjiu Wang (1): ALSA: dmaengine_pcm: terminate dmaengine before synchronize Simon Trimmer (2): ALSA: hda: cs35l56: Fix lifecycle of codec pointer ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE Stefan Binding (1): ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 Steve French (1): cifs: fix noisy message on copy_file_range Takashi Iwai (2): ALSA: PCM: Allow resume only for suspended streams ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE Tetsuo Handa (1): Bluetooth: hci_core: cancel all works upon hci_unregister_dev() Thomas GENTY (1): bytcr_rt5640 : inverse jack detect for Archos 101 cesium Tobias Jakobi (2): drm: panel-orientation-quirks: Add quirk for Aya Neo KUN Input: i8042 - add Ayaneo Kun to i8042 quirk table Tom Chung (2): drm/amd/display: Add refresh rate range check drm/amd/display: Fix refresh rate range for some panel Uwe Kleine-König (1): spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices Vyacheslav Frantsishko (1): ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA Wei Li (1): arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process Xingui Yang (1): scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Yang Shi (1): mm: page_ref: remove folio_try_get_rcu() Yedidya Benshimol (2): wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd Yunshui Jiang (1): net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() Yuntao Wang (1): fs/file: fix the check in find_next_fd() Zizhi Wo (1): cachefiles: Set object to close if ondemand_id < 0 in copen

5 months, 2 weeks

1
1
0 0

Linux 6.1.101

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.101 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/include/asm/uaccess.h | 14 arch/mips/kernel/syscalls/syscall_o32.tbl | 2 arch/powerpc/kernel/eeh_pe.c | 7 arch/powerpc/kvm/book3s_64_vio.c | 18 - arch/powerpc/platforms/pseries/setup.c | 4 arch/riscv/kernel/stacktrace.c | 3 drivers/acpi/ec.c | 9 drivers/block/null_blk/main.c | 4 drivers/firmware/efi/libstub/zboot.lds | 1 drivers/gpio/gpio-pca953x.c | 2 drivers/gpu/drm/amd/display/dc/dml/dcn32/display_mode_vba_32.c | 3 drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 drivers/gpu/drm/radeon/radeon_gem.c | 2 drivers/gpu/drm/vmwgfx/Kconfig | 2 drivers/hid/hid-ids.h | 2 drivers/hid/hid-input.c | 4 drivers/input/mouse/elantech.c | 31 ++ drivers/input/serio/i8042-acpipnpio.h | 18 + drivers/input/touchscreen/silead.c | 19 - drivers/misc/mei/main.c | 2 drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 2 drivers/net/ethernet/ibm/ibmvnic.c | 12 drivers/net/usb/qmi_wwan.c | 2 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 16 - drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 2 drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 8 drivers/nvme/host/core.c | 1 drivers/nvme/target/core.c | 1 drivers/nvme/target/fabrics-cmd-auth.c | 3 drivers/nvme/target/fabrics-cmd.c | 6 drivers/of/irq.c | 143 +++++----- drivers/of/of_private.h | 3 drivers/perf/riscv_pmu_sbi.c | 2 drivers/platform/mellanox/nvsw-sn2201.c | 5 drivers/platform/x86/lg-laptop.c | 89 ++---- drivers/platform/x86/wireless-hotkey.c | 2 drivers/s390/char/sclp.c | 1 drivers/scsi/device_handler/scsi_dh_alua.c | 31 +- drivers/scsi/libsas/sas_internal.h | 14 drivers/scsi/qedf/qedf.h | 1 drivers/scsi/qedf/qedf_main.c | 47 +++ drivers/spi/spi-imx.c | 2 drivers/spi/spi-mux.c | 1 drivers/tee/optee/ffa_abi.c | 12 fs/btrfs/qgroup.c | 4 fs/cachefiles/cache.c | 45 +++ fs/cachefiles/ondemand.c | 74 +++-- fs/cachefiles/volume.c | 1 fs/dcache.c | 31 -- fs/erofs/zmap.c | 2 fs/file.c | 4 fs/fscache/internal.h | 2 fs/fscache/volume.c | 14 fs/hfsplus/xattr.c | 2 fs/iomap/buffered-io.c | 3 fs/locks.c | 9 fs/nfs/dir.c | 27 - fs/nfs/nfs4proc.c | 1 fs/nfs/symlink.c | 2 fs/smb/client/cifsfs.c | 2 fs/smb/common/smb2pdu.h | 34 ++ fs/smb/server/smb2pdu.c | 9 include/linux/fscache-cache.h | 6 include/linux/minmax.h | 89 ++++-- include/net/bluetooth/hci_sync.h | 2 include/sound/dmaengine_pcm.h | 1 include/trace/events/fscache.h | 4 mm/damon/core.c | 21 + net/bluetooth/hci_core.c | 76 +---- net/bluetooth/hci_sync.c | 13 net/bluetooth/l2cap_core.c | 3 net/bluetooth/l2cap_sock.c | 14 net/ipv6/ila/ila_lwt.c | 7 net/ipv6/rpl_iptunnel.c | 14 net/mac80211/cfg.c | 5 net/mac80211/ieee80211_i.h | 2 net/mac80211/main.c | 11 net/mac80211/mesh.c | 1 net/mac80211/scan.c | 14 net/mac80211/util.c | 4 net/mac802154/tx.c | 8 net/wireless/rdev-ops.h | 6 net/wireless/scan.c | 59 ++-- scripts/gcc-plugins/gcc-common.h | 4 scripts/kconfig/expr.c | 29 -- scripts/kconfig/expr.h | 1 scripts/kconfig/gconf.c | 3 scripts/kconfig/menu.c | 2 sound/core/pcm_dmaengine.c | 22 + sound/core/pcm_native.c | 2 sound/pci/hda/patch_realtek.c | 5 sound/soc/amd/yc/acp6x-mach.c | 7 sound/soc/intel/boards/bytcr_rt5640.c | 11 sound/soc/soc-generic-dmaengine-pcm.c | 8 sound/soc/soc-topology.c | 29 +- sound/soc/sof/sof-audio.c | 2 sound/soc/ti/davinci-mcasp.c | 9 sound/soc/ti/omap-hdmi.c | 6 tools/power/cpupower/utils/helpers/amd.c | 26 + tools/testing/selftests/futex/functional/Makefile | 2 tools/testing/selftests/openat2/openat2_test.c | 1 tools/testing/selftests/vDSO/parse_vdso.c | 16 - tools/testing/selftests/vDSO/vdso_standalone_test_x86.c | 18 + 104 files changed, 934 insertions(+), 456 deletions(-) Aivaz Latypov (1): ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx Alexander Usyskin (1): mei: demote client disconnect warning on suspend to debug Alexey Makhalov (1): drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency Alvin Lee (1): drm/amd/display: Account for cursor prefetch BW in DML1 mode support Amadeusz Sławiński (2): ASoC: topology: Fix references to freed memory ASoC: topology: Do not assign fields that are already set Andreas Hindborg (1): null_blk: fix validation of block size Andy Shevchenko (1): minmax: fix header inclusions Anjali K (1): powerpc/pseries: Whitelist dtl slub object for copying to userspace Armin Wolf (6): ACPI: EC: Abort address space access upon error ACPI: EC: Avoid returning AE_OK on errors in address space handler platform/x86: wireless-hotkey: Add support for LG Airplane Button platform/x86: lg-laptop: Remove LGEX0815 hotkey handling platform/x86: lg-laptop: Change ACPI device id platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB Arnd Bergmann (1): mips: fix compat_sys_lseek syscall Ayala Beker (1): wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option Baokun Li (5): cachefiles: add consistency check for copen/cread cachefiles: make on-demand read killable netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() cachefiles: fix slab-use-after-free in fscache_withdraw_volume() cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() Chen Ni (2): can: kvaser_usb: fix return value for hif_usb_send_regout platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources Christian Brauner (1): fs: better handle deep ancestor chains in is_subdir() Chunguang Xu (1): nvme: avoid double free special payload Daniel Gabay (1): wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK Daniel Wagner (1): nvmet: always initialize cqe.result Daniele Palmas (1): net: usb: qmi_wwan: add Telit FN912 compositions David Laight (3): minmax: allow min()/max()/clamp() if the arguments have the same signedness. minmax: allow comparisons of 'int' against 'unsigned char/short' minmax: relax check to allow comparison between unsigned arguments and signed constants David Lechner (1): spi: mux: set ctlr->bits_per_word_mask Dhananjay Ugwekar (1): tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs Dmitry Antipov (2): wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() wifi: cfg80211: wext: add extra SIOCSIWSCAN data check Dmitry Mastykin (1): NFSv4: Fix memory leak in nfs4_set_security_label Edward Adam Davis (2): bluetooth/l2cap: sync sock recv cb and release hfsplus: fix uninit-value in copy_name Eric Dumazet (2): net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() ila: block BH in ila_output() Filipe Manana (1): btrfs: qgroup: fix quota root leak after quota disable failure Ganesh Goudar (1): powerpc/eeh: avoid possible crash when edev->pdev changes Gao Xiang (1): erofs: ensure m_llen is reset to 0 if metadata is invalid Greg Kroah-Hartman (1): Linux 6.1.101 Hans de Goede (1): Input: silead - Always support 10 fingers Heiko Carstens (1): s390/sclp: Fix sclp_init() cleanup on failure Ian Ray (1): gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ilan Peer (1): wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill Jai Luthra (2): ALSA: dmaengine: Synchronize dma channel after drop() ASoC: ti: davinci-mcasp: Set min period size using FIFO config Jann Horn (1): filelock: Remove locks reliably when fcntl/close race is detected Jason A. Donenfeld (2): minmax: sanity check constant bounds when clamping minmax: clamp more efficiently by avoiding extra comparison Johannes Berg (5): wifi: mac80211: apply mcast rate only if interface is up wifi: mac80211: handle tasklet frames before stopping wifi: cfg80211: fix 6 GHz scan request building wifi: cfg80211: wext: set ssids=NULL for passive scans wifi: mac80211: disable softirqs for queued frame handling John Hubbard (2): selftests/futex: pass _GNU_SOURCE without a value to the compiler selftests/vDSO: fix clang build errors and warnings Jonathan Denose (1): Input: elantech - fix touchpad state on resume for Lenovo N24 Kailang Yang (1): ALSA: hda/realtek: Add more codec ID to no shutup pins list Kees Cook (1): gcc-plugins: Rename last_stmt() for GCC 14+ Louis Dalibard (1): HID: Ignore battery for ELAN touchscreens 2F2C and 4116 Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix deadlock Marc Zyngier (1): of/irq: Disable "interrupt-map" parsing for PASEMI Nemo Mark-PK Tsai (1): tee: optee: ffa: Fix missing-field-initializers warning Martin Wilck (1): scsi: core: alua: I/O errors for ALUA state transitions Masahiro Yamada (3): kconfig: gconf: give a proper initial state to the Save button kconfig: remove wrong expr_trans_bool() ARM: 9324/1: fix get_user() broken with veneer Michael Ellerman (2): selftests/openat2: Fix build warnings on ppc64 KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Namjae Jeon (1): ksmbd: return FILE_DEVICE_DISK instead of super magic Nathan Chancellor (1): efi/libstub: zboot.lds: Discard .discard sections Nick Child (1): ibmvnic: Add tx check to prevent skb leak Nicolas Escande (1): wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata Peter Ujfalusi (1): ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback Pierre-Eric Pelloux-Prayer (1): drm/radeon: check bo_va->bo is non-NULL before using it Primoz Fiser (1): ASoC: ti: omap-hdmi: Fix too long driver name Puranjay Mohan (1): riscv: stacktrace: fix usage of ftrace_graph_ret_addr() Ritesh Harjani (IBM) (1): iomap: Fix iomap_adjust_read_range for plen calculation Rob Herring (Arm) (1): of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() Sagi Grimberg (1): nfs: propagate readlink errors in nfs_symlink_filler Samuel Holland (1): drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus Saurav Kashyap (3): scsi: qedf: Don't process stag work during unload and recovery scsi: qedf: Wait for stag work during unload scsi: qedf: Set qed_slowpath_params to zero before use Scott Mayhew (1): nfs: don't invalidate dentries on transient errors SeongJae Park (1): mm/damon/core: merge regions aggressively when max_nr_regions is unmet Shengjiu Wang (1): ALSA: dmaengine_pcm: terminate dmaengine before synchronize Steve French (1): cifs: fix noisy message on copy_file_range Takashi Iwai (1): ALSA: PCM: Allow resume only for suspended streams Tetsuo Handa (1): Bluetooth: hci_core: cancel all works upon hci_unregister_dev() Thomas GENTY (1): bytcr_rt5640 : inverse jack detect for Archos 101 cesium Tobias Jakobi (2): drm: panel-orientation-quirks: Add quirk for Aya Neo KUN Input: i8042 - add Ayaneo Kun to i8042 quirk table Uwe Kleine-König (1): spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices Vyacheslav Frantsishko (1): ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA Xingui Yang (1): scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Yedidya Benshimol (2): wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd Yunshui Jiang (1): net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() Yuntao Wang (1): fs/file: fix the check in find_next_fd() Zizhi Wo (1): cachefiles: Set object to close if ondemand_id < 0 in copen

5 months, 2 weeks

1
1
0 0

+ nilfs2-handle-inconsistent-state-in-nilfs_btnode_create_block.patch added to mm-hotfixes-unstable branch

by Andrew Morton

The patch titled Subject: nilfs2: handle inconsistent state in nilfs_btnode_create_block() has been added to the -mm mm-hotfixes-unstable branch. Its filename is nilfs2-handle-inconsistent-state-in-nilfs_btnode_create_block.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-hotfixes-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Subject: nilfs2: handle inconsistent state in nilfs_btnode_create_block() Date: Thu, 25 Jul 2024 14:20:07 +0900 Syzbot reported that a buffer state inconsistency was detected in nilfs_btnode_create_block(), triggering a kernel bug. It is not appropriate to treat this inconsistency as a bug; it can occur if the argument block address (the buffer index of the newly created block) is a virtual block number and has been reallocated due to corruption of the bitmap used to manage its allocation state. So, modify nilfs_btnode_create_block() and its callers to treat it as a possible filesystem error, rather than triggering a kernel bug. Link: https://lkml.kernel.org/r/20240725052007.4562-1-konishi.ryusuke@gmail.com Fixes: a60be987d45d ("nilfs2: B-tree node cache") Signed-off-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Reported-by: syzbot+89cc4f2324ed37988b60(a)syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=89cc4f2324ed37988b60 Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- fs/nilfs2/btnode.c | 25 ++++++++++++++++++++----- fs/nilfs2/btree.c | 4 ++-- 2 files changed, 22 insertions(+), 7 deletions(-) --- a/fs/nilfs2/btnode.c~nilfs2-handle-inconsistent-state-in-nilfs_btnode_create_block +++ a/fs/nilfs2/btnode.c @@ -51,12 +51,21 @@ nilfs_btnode_create_block(struct address bh = nilfs_grab_buffer(inode, btnc, blocknr, BIT(BH_NILFS_Node)); if (unlikely(!bh)) - return NULL; + return ERR_PTR(-ENOMEM); if (unlikely(buffer_mapped(bh) || buffer_uptodate(bh) || buffer_dirty(bh))) { - brelse(bh); - BUG(); + /* + * The block buffer at the specified new address was already + * in use. This can happen if it is a virtual block number + * and has been reallocated due to corruption of the bitmap + * used to manage its allocation state (if not, the buffer + * clearing of an abandoned b-tree node is missing somewhere). + */ + nilfs_error(inode->i_sb, + "state inconsistency probably due to duplicate use of b-tree node block address %llu (ino=%lu)", + (unsigned long long)blocknr, inode->i_ino); + goto failed; } memset(bh->b_data, 0, i_blocksize(inode)); bh->b_bdev = inode->i_sb->s_bdev; @@ -67,6 +76,12 @@ nilfs_btnode_create_block(struct address folio_unlock(bh->b_folio); folio_put(bh->b_folio); return bh; + +failed: + folio_unlock(bh->b_folio); + folio_put(bh->b_folio); + brelse(bh); + return ERR_PTR(-EIO); } int nilfs_btnode_submit_block(struct address_space *btnc, __u64 blocknr, @@ -217,8 +232,8 @@ retry: } nbh = nilfs_btnode_create_block(btnc, newkey); - if (!nbh) - return -ENOMEM; + if (IS_ERR(nbh)) + return PTR_ERR(nbh); BUG_ON(nbh == obh); ctxt->newbh = nbh; --- a/fs/nilfs2/btree.c~nilfs2-handle-inconsistent-state-in-nilfs_btnode_create_block +++ a/fs/nilfs2/btree.c @@ -63,8 +63,8 @@ static int nilfs_btree_get_new_block(con struct buffer_head *bh; bh = nilfs_btnode_create_block(btnc, ptr); - if (!bh) - return -ENOMEM; + if (IS_ERR(bh)) + return PTR_ERR(bh); set_buffer_nilfs_volatile(bh); *bhp = bh; _ Patches currently in -mm which might be from konishi.ryusuke(a)gmail.com are nilfs2-handle-inconsistent-state-in-nilfs_btnode_create_block.patch

5 months, 2 weeks

1
0
0 0

[PATCH 6.1 000/105] 6.1.101-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.101 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 25 Jul 2024 18:03:27 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.101-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.101-rc1 Baokun Li <libaokun1(a)huawei.com> cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() Baokun Li <libaokun1(a)huawei.com> cachefiles: fix slab-use-after-free in fscache_withdraw_volume() Baokun Li <libaokun1(a)huawei.com> netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: disable softirqs for queued frame handling Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: wext: set ssids=NULL for passive scans Marc Zyngier <maz(a)kernel.org> of/irq: Disable "interrupt-map" parsing for PASEMI Nemo Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix deadlock Masahiro Yamada <masahiroy(a)kernel.org> ARM: 9324/1: fix get_user() broken with veneer Steve French <stfrench(a)microsoft.com> cifs: fix noisy message on copy_file_range David Lechner <dlechner(a)baylibre.com> spi: mux: set ctlr->bits_per_word_mask Edward Adam Davis <eadavis(a)qq.com> hfsplus: fix uninit-value in copy_name John Hubbard <jhubbard(a)nvidia.com> selftests/vDSO: fix clang build errors and warnings Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return FILE_DEVICE_DISK instead of super magic Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices Puranjay Mohan <puranjay(a)kernel.org> riscv: stacktrace: fix usage of ftrace_graph_ret_addr() Samuel Holland <samuel.holland(a)sifive.com> drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus Daniel Gabay <daniel.gabay(a)intel.com> wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK Christian Brauner <brauner(a)kernel.org> fs: better handle deep ancestor chains in is_subdir() Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/radeon: check bo_va->bo is non-NULL before using it Alvin Lee <alvin.lee2(a)amd.com> drm/amd/display: Account for cursor prefetch BW in DML1 mode support Gao Xiang <xiang(a)kernel.org> erofs: ensure m_llen is reset to 0 if metadata is invalid Edward Adam Davis <eadavis(a)qq.com> bluetooth/l2cap: sync sock recv cb and release Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> Bluetooth: hci_core: cancel all works upon hci_unregister_dev() Mark-PK Tsai <mark-pk.tsai(a)mediatek.com> tee: optee: ffa: Fix missing-field-initializers warning Xingui Yang <yangxingui(a)huawei.com> scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Ganesh Goudar <ganeshgr(a)linux.ibm.com> powerpc/eeh: avoid possible crash when edev->pdev changes Anjali K <anjalik(a)linux.ibm.com> powerpc/pseries: Whitelist dtl slub object for copying to userspace Yunshui Jiang <jiangyunshui(a)kylinos.cn> net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() Daniele Palmas <dnlplm(a)gmail.com> net: usb: qmi_wwan: add Telit FN912 compositions Vyacheslav Frantsishko <itmymaill(a)gmail.com> ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA Shengjiu Wang <shengjiu.wang(a)nxp.com> ALSA: dmaengine_pcm: terminate dmaengine before synchronize Aivaz Latypov <reichaivaz(a)gmail.com> ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx Takashi Iwai <tiwai(a)suse.de> ALSA: PCM: Allow resume only for suspended streams Nick Child <nnac123(a)linux.ibm.com> ibmvnic: Add tx check to prevent skb leak Filipe Manana <fdmanana(a)suse.com> btrfs: qgroup: fix quota root leak after quota disable failure Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Change ACPI device id Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Remove LGEX0815 hotkey handling Armin Wolf <W_Armin(a)gmx.de> platform/x86: wireless-hotkey: Add support for LG Airplane Button Chen Ni <nichen(a)iscas.ac.cn> platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources Heiko Carstens <hca(a)linux.ibm.com> s390/sclp: Fix sclp_init() cleanup on failure Ian Ray <ian.ray(a)gehealthcare.com> gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Chen Ni <nichen(a)iscas.ac.cn> can: kvaser_usb: fix return value for hif_usb_send_regout Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback Primoz Fiser <primoz.fiser(a)norik.com> ASoC: ti: omap-hdmi: Fix too long driver name Jai Luthra <j-luthra(a)ti.com> ASoC: ti: davinci-mcasp: Set min period size using FIFO config Jai Luthra <j-luthra(a)ti.com> ALSA: dmaengine: Synchronize dma channel after drop() Thomas GENTY <tomlohave(a)gmail.com> bytcr_rt5640 : inverse jack detect for Archos 101 cesium Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Do not assign fields that are already set Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Fix references to freed memory Tobias Jakobi <tjakobi(a)math.uni-bielefeld.de> Input: i8042 - add Ayaneo Kun to i8042 quirk table Jonathan Denose <jdenose(a)google.com> Input: elantech - fix touchpad state on resume for Lenovo N24 Arnd Bergmann <arnd(a)arndb.de> mips: fix compat_sys_lseek syscall Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek: Add more codec ID to no shutup pins list Alexey Makhalov <alexey.makhalov(a)broadcom.com> drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency Michael Ellerman <mpe(a)ellerman.id.au> KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Dmitry Antipov <dmantipov(a)yandex.ru> wifi: cfg80211: wext: add extra SIOCSIWSCAN data check Daniel Wagner <dwagner(a)suse.de> nvmet: always initialize cqe.result Chunguang Xu <chunguang.xu(a)shopee.com> nvme: avoid double free special payload Tobias Jakobi <tjakobi(a)math.uni-bielefeld.de> drm: panel-orientation-quirks: Add quirk for Aya Neo KUN Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> iomap: Fix iomap_adjust_read_range for plen calculation Alexander Usyskin <alexander.usyskin(a)intel.com> mei: demote client disconnect warning on suspend to debug Yuntao Wang <yuntao.wang(a)linux.dev> fs/file: fix the check in find_next_fd() Baokun Li <libaokun1(a)huawei.com> cachefiles: make on-demand read killable Zizhi Wo <wozizhi(a)huawei.com> cachefiles: Set object to close if ondemand_id < 0 in copen Baokun Li <libaokun1(a)huawei.com> cachefiles: add consistency check for copen/cread Scott Mayhew <smayhew(a)redhat.com> nfs: don't invalidate dentries on transient errors Sagi Grimberg <sagi(a)grimberg.me> nfs: propagate readlink errors in nfs_symlink_filler Dmitry Mastykin <mastichi(a)gmail.com> NFSv4: Fix memory leak in nfs4_set_security_label Louis Dalibard <ontake(a)ontake.dev> HID: Ignore battery for ELAN touchscreens 2F2C and 4116 Masahiro Yamada <masahiroy(a)kernel.org> kconfig: remove wrong expr_trans_bool() Masahiro Yamada <masahiroy(a)kernel.org> kconfig: gconf: give a proper initial state to the Save button Andreas Hindborg <a.hindborg(a)samsung.com> null_blk: fix validation of block size Eric Dumazet <edumazet(a)google.com> ila: block BH in ila_output() Eric Dumazet <edumazet(a)google.com> net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() Hans de Goede <hdegoede(a)redhat.com> Input: silead - Always support 10 fingers Rob Herring (Arm) <robh(a)kernel.org> of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() John Hubbard <jhubbard(a)nvidia.com> selftests/futex: pass _GNU_SOURCE without a value to the compiler Michael Ellerman <mpe(a)ellerman.id.au> selftests/openat2: Fix build warnings on ppc64 Dmitry Antipov <dmantipov(a)yandex.ru> wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() Ilan Peer <ilan.peer(a)intel.com> wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill Ayala Beker <ayala.beker(a)intel.com> wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option Yedidya Benshimol <yedidya.ben.shimol(a)intel.com> wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd Yedidya Benshimol <yedidya.ben.shimol(a)intel.com> wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fix 6 GHz scan request building Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: handle tasklet frames before stopping Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: apply mcast rate only if interface is up Nicolas Escande <nico.escande(a)gmail.com> wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata Dhananjay Ugwekar <Dhananjay.Ugwekar(a)amd.com> tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs Armin Wolf <W_Armin(a)gmx.de> ACPI: EC: Avoid returning AE_OK on errors in address space handler Armin Wolf <W_Armin(a)gmx.de> ACPI: EC: Abort address space access upon error Nathan Chancellor <nathan(a)kernel.org> efi/libstub: zboot.lds: Discard .discard sections Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Set qed_slowpath_params to zero before use Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Wait for stag work during unload Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Don't process stag work during unload and recovery Martin Wilck <martin.wilck(a)suse.com> scsi: core: alua: I/O errors for ALUA state transitions Jann Horn <jannh(a)google.com> filelock: Remove locks reliably when fcntl/close race is detected Kees Cook <keescook(a)chromium.org> gcc-plugins: Rename last_stmt() for GCC 14+ SeongJae Park <sj(a)kernel.org> mm/damon/core: merge regions aggressively when max_nr_regions is unmet David Laight <David.Laight(a)ACULAB.COM> minmax: relax check to allow comparison between unsigned arguments and signed constants David Laight <David.Laight(a)ACULAB.COM> minmax: allow comparisons of 'int' against 'unsigned char/short' David Laight <David.Laight(a)ACULAB.COM> minmax: allow min()/max()/clamp() if the arguments have the same signedness. Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> minmax: fix header inclusions Jason A. Donenfeld <Jason(a)zx2c4.com> minmax: clamp more efficiently by avoiding extra comparison Jason A. Donenfeld <Jason(a)zx2c4.com> minmax: sanity check constant bounds when clamping ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/uaccess.h | 14 +- arch/mips/kernel/syscalls/syscall_o32.tbl | 2 +- arch/powerpc/kernel/eeh_pe.c | 7 +- arch/powerpc/kvm/book3s_64_vio.c | 18 ++- arch/powerpc/platforms/pseries/setup.c | 4 +- arch/riscv/kernel/stacktrace.c | 3 +- drivers/acpi/ec.c | 9 +- drivers/block/null_blk/main.c | 4 +- drivers/firmware/efi/libstub/zboot.lds | 1 + drivers/gpio/gpio-pca953x.c | 2 + .../amd/display/dc/dml/dcn32/display_mode_vba_32.c | 3 + drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 + drivers/gpu/drm/radeon/radeon_gem.c | 2 +- drivers/gpu/drm/vmwgfx/Kconfig | 2 +- drivers/hid/hid-ids.h | 2 + drivers/hid/hid-input.c | 4 + drivers/input/mouse/elantech.c | 31 +++++ drivers/input/serio/i8042-acpipnpio.h | 18 ++- drivers/input/touchscreen/silead.c | 19 +-- drivers/misc/mei/main.c | 2 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 2 +- drivers/net/ethernet/ibm/ibmvnic.c | 12 ++ drivers/net/usb/qmi_wwan.c | 2 + drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 16 ++- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 8 +- drivers/nvme/host/core.c | 1 + drivers/nvme/target/core.c | 1 + drivers/nvme/target/fabrics-cmd-auth.c | 3 - drivers/nvme/target/fabrics-cmd.c | 6 - drivers/of/irq.c | 143 +++++++++++---------- drivers/of/of_private.h | 3 + drivers/perf/riscv_pmu_sbi.c | 2 +- drivers/platform/mellanox/nvsw-sn2201.c | 5 +- drivers/platform/x86/lg-laptop.c | 89 +++++-------- drivers/platform/x86/wireless-hotkey.c | 2 + drivers/s390/char/sclp.c | 1 + drivers/scsi/device_handler/scsi_dh_alua.c | 31 +++-- drivers/scsi/libsas/sas_internal.h | 14 ++ drivers/scsi/qedf/qedf.h | 1 + drivers/scsi/qedf/qedf_main.c | 47 ++++++- drivers/spi/spi-imx.c | 2 +- drivers/spi/spi-mux.c | 1 + drivers/tee/optee/ffa_abi.c | 12 +- fs/btrfs/qgroup.c | 4 +- fs/cachefiles/cache.c | 45 ++++++- fs/cachefiles/ondemand.c | 74 ++++++++--- fs/cachefiles/volume.c | 1 - fs/dcache.c | 31 ++--- fs/erofs/zmap.c | 2 + fs/file.c | 4 +- fs/fscache/internal.h | 2 - fs/fscache/volume.c | 14 ++ fs/hfsplus/xattr.c | 2 +- fs/iomap/buffered-io.c | 3 +- fs/locks.c | 9 +- fs/nfs/dir.c | 27 ++-- fs/nfs/nfs4proc.c | 1 + fs/nfs/symlink.c | 2 +- fs/smb/client/cifsfs.c | 2 +- fs/smb/common/smb2pdu.h | 34 +++++ fs/smb/server/smb2pdu.c | 9 +- include/linux/fscache-cache.h | 6 + include/linux/minmax.h | 87 +++++++++---- include/net/bluetooth/hci_sync.h | 2 + include/sound/dmaengine_pcm.h | 1 + include/trace/events/fscache.h | 4 + mm/damon/core.c | 21 ++- net/bluetooth/hci_core.c | 76 ++++------- net/bluetooth/hci_sync.c | 13 ++ net/bluetooth/l2cap_core.c | 3 + net/bluetooth/l2cap_sock.c | 14 +- net/ipv6/ila/ila_lwt.c | 7 +- net/ipv6/rpl_iptunnel.c | 14 +- net/mac80211/cfg.c | 5 +- net/mac80211/ieee80211_i.h | 2 + net/mac80211/main.c | 11 +- net/mac80211/mesh.c | 1 + net/mac80211/scan.c | 14 +- net/mac80211/util.c | 4 + net/mac802154/tx.c | 8 +- net/wireless/rdev-ops.h | 6 +- net/wireless/scan.c | 59 ++++++--- scripts/gcc-plugins/gcc-common.h | 4 + scripts/kconfig/expr.c | 29 ----- scripts/kconfig/expr.h | 1 - scripts/kconfig/gconf.c | 3 +- scripts/kconfig/menu.c | 2 - sound/core/pcm_dmaengine.c | 22 ++++ sound/core/pcm_native.c | 2 + sound/pci/hda/patch_realtek.c | 5 + sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/intel/boards/bytcr_rt5640.c | 11 ++ sound/soc/soc-generic-dmaengine-pcm.c | 8 ++ sound/soc/soc-topology.c | 29 +++-- sound/soc/sof/sof-audio.c | 2 +- sound/soc/ti/davinci-mcasp.c | 9 +- sound/soc/ti/omap-hdmi.c | 6 +- tools/power/cpupower/utils/helpers/amd.c | 26 +++- tools/testing/selftests/futex/functional/Makefile | 2 +- tools/testing/selftests/openat2/openat2_test.c | 1 + tools/testing/selftests/vDSO/parse_vdso.c | 16 ++- .../selftests/vDSO/vdso_standalone_test_x86.c | 18 ++- 104 files changed, 934 insertions(+), 456 deletions(-)

5 months, 2 weeks

11
115
0 0

[PATCH 6.6 000/129] 6.6.42-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.42 release. There are 129 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 25 Jul 2024 18:03:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.42-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.42-rc1 Baokun Li <libaokun1(a)huawei.com> cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() Baokun Li <libaokun1(a)huawei.com> cachefiles: fix slab-use-after-free in fscache_withdraw_volume() Baokun Li <libaokun1(a)huawei.com> netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: disable softirqs for queued frame handling Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: wext: set ssids=NULL for passive scans Marc Zyngier <maz(a)kernel.org> of/irq: Disable "interrupt-map" parsing for PASEMI Nemo Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix deadlock Yang Shi <yang(a)os.amperecomputing.com> mm: page_ref: remove folio_try_get_rcu() Masahiro Yamada <masahiroy(a)kernel.org> ARM: 9324/1: fix get_user() broken with veneer Steve French <stfrench(a)microsoft.com> cifs: fix noisy message on copy_file_range Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE David Lechner <dlechner(a)baylibre.com> spi: mux: set ctlr->bits_per_word_mask Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Extend tcx tests to cover late tcx_entry release Edward Adam Davis <eadavis(a)qq.com> hfsplus: fix uninit-value in copy_name John Hubbard <jhubbard(a)nvidia.com> selftests/vDSO: fix clang build errors and warnings John Hubbard <jhubbard(a)nvidia.com> selftest/timerns: fix clang build failures for abs() calls Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return FILE_DEVICE_DISK instead of super magic Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices Puranjay Mohan <puranjay(a)kernel.org> riscv: stacktrace: fix usage of ftrace_graph_ret_addr() Samuel Holland <samuel.holland(a)sifive.com> drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus Daniel Gabay <daniel.gabay(a)intel.com> wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK Christian Brauner <brauner(a)kernel.org> fs: better handle deep ancestor chains in is_subdir() Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/radeon: check bo_va->bo is non-NULL before using it Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Fix refresh rate range for some panel Alvin Lee <alvin.lee2(a)amd.com> drm/amd/display: Account for cursor prefetch BW in DML1 mode support Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Add refresh rate range check Gao Xiang <xiang(a)kernel.org> erofs: ensure m_llen is reset to 0 if metadata is invalid Edward Adam Davis <eadavis(a)qq.com> bluetooth/l2cap: sync sock recv cb and release Neeraj Sanjay Kale <neeraj.sanjaykale(a)nxp.com> Bluetooth: btnxpuart: Enable Power Save feature on startup Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> Bluetooth: hci_core: cancel all works upon hci_unregister_dev() Mark-PK Tsai <mark-pk.tsai(a)mediatek.com> tee: optee: ffa: Fix missing-field-initializers warning Xingui Yang <yangxingui(a)huawei.com> scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Ganesh Goudar <ganeshgr(a)linux.ibm.com> powerpc/eeh: avoid possible crash when edev->pdev changes Anjali K <anjalik(a)linux.ibm.com> powerpc/pseries: Whitelist dtl slub object for copying to userspace Yunshui Jiang <jiangyunshui(a)kylinos.cn> net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() Daniele Palmas <dnlplm(a)gmail.com> net: usb: qmi_wwan: add Telit FN912 compositions Vyacheslav Frantsishko <itmymaill(a)gmail.com> ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA Shengjiu Wang <shengjiu.wang(a)nxp.com> ALSA: dmaengine_pcm: terminate dmaengine before synchronize Aivaz Latypov <reichaivaz(a)gmail.com> ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx Takashi Iwai <tiwai(a)suse.de> ALSA: PCM: Allow resume only for suspended streams Nick Child <nnac123(a)linux.ibm.com> ibmvnic: Add tx check to prevent skb leak Filipe Manana <fdmanana(a)suse.com> btrfs: qgroup: fix quota root leak after quota disable failure Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Change ACPI device id Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Remove LGEX0815 hotkey handling Armin Wolf <W_Armin(a)gmx.de> platform/x86: wireless-hotkey: Add support for LG Airplane Button Chen Ni <nichen(a)iscas.ac.cn> platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources Heiko Carstens <hca(a)linux.ibm.com> s390/sclp: Fix sclp_init() cleanup on failure Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver Ian Ray <ian.ray(a)gehealthcare.com> gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Chen Ni <nichen(a)iscas.ac.cn> can: kvaser_usb: fix return value for hif_usb_send_regout Alexander Stein <alexander.stein(a)ew.tq-group.com> Input: ads7846 - use spi_device_id table Boyang Yu <yuboyang(a)dapustor.com> nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA. Jack Yu <jack.yu(a)realtek.com> ASoC: rt722-sdca-sdw: add debounce time for type detection Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback Primoz Fiser <primoz.fiser(a)norik.com> ASoC: ti: omap-hdmi: Fix too long driver name Jai Luthra <j-luthra(a)ti.com> ASoC: ti: davinci-mcasp: Set min period size using FIFO config Jai Luthra <j-luthra(a)ti.com> ALSA: dmaengine: Synchronize dma channel after drop() Thomas GENTY <tomlohave(a)gmail.com> bytcr_rt5640 : inverse jack detect for Archos 101 cesium Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Do not assign fields that are already set Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Fix references to freed memory Luke D. Jones <luke(a)ljones.dev> Input: xpad - add support for ASUS ROG RAIKIRI PRO Jack Yu <jack.yu(a)realtek.com> ASoC: rt722-sdca-sdw: add silence detection register as volatile Tobias Jakobi <tjakobi(a)math.uni-bielefeld.de> Input: i8042 - add Ayaneo Kun to i8042 quirk table Jonathan Denose <jdenose(a)google.com> Input: elantech - fix touchpad state on resume for Lenovo N24 Arnd Bergmann <arnd(a)arndb.de> mips: fix compat_sys_lseek syscall Simon Trimmer <simont(a)opensource.cirrus.com> ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Indicate CU havest info to CP Adrian Moreno <amorenoz(a)redhat.com> selftests: openvswitch: Set value to nla flags. Linus Torvalds <torvalds(a)linux-foundation.org> cpumask: limit FORCE_NR_CPUS to just the UP case Patrice Chotard <patrice.chotard(a)foss.st.com> spi: Fix OCTAL mode support Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek: Add more codec ID to no shutup pins list Alexey Makhalov <alexey.makhalov(a)broadcom.com> drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency Michael Ellerman <mpe(a)ellerman.id.au> KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Stefan Binding <sbinding(a)opensource.cirrus.com> ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 Dmitry Antipov <dmantipov(a)yandex.ru> wifi: cfg80211: wext: add extra SIOCSIWSCAN data check Simon Trimmer <simont(a)opensource.cirrus.com> ALSA: hda: cs35l56: Fix lifecycle of codec pointer Daniel Wagner <dwagner(a)suse.de> nvmet: always initialize cqe.result Chunguang Xu <chunguang.xu(a)shopee.com> nvme: avoid double free special payload Douglas Anderson <dianders(a)chromium.org> drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time Tobias Jakobi <tjakobi(a)math.uni-bielefeld.de> drm: panel-orientation-quirks: Add quirk for Aya Neo KUN Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> drm/exynos: dp: drop driver owner initialization Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> iomap: Fix iomap_adjust_read_range for plen calculation Alexander Usyskin <alexander.usyskin(a)intel.com> mei: demote client disconnect warning on suspend to debug Yuntao Wang <yuntao.wang(a)linux.dev> fs/file: fix the check in find_next_fd() Baokun Li <libaokun1(a)huawei.com> cachefiles: make on-demand read killable Zizhi Wo <wozizhi(a)huawei.com> cachefiles: Set object to close if ondemand_id < 0 in copen Baokun Li <libaokun1(a)huawei.com> cachefiles: add consistency check for copen/cread Scott Mayhew <smayhew(a)redhat.com> nfs: don't invalidate dentries on transient errors Jan Kara <jack(a)suse.cz> nfs: Avoid flushing many pages with NFS_FILE_SYNC Sagi Grimberg <sagi(a)grimberg.me> nfs: propagate readlink errors in nfs_symlink_filler Dmitry Mastykin <mastichi(a)gmail.com> NFSv4: Fix memory leak in nfs4_set_security_label Louis Dalibard <ontake(a)ontake.dev> HID: Ignore battery for ELAN touchscreens 2F2C and 4116 Aseda Aboagye <aaboagye(a)chromium.org> input: Add support for "Do Not Disturb" Aseda Aboagye <aaboagye(a)chromium.org> input: Add event code for accessibility key Masahiro Yamada <masahiroy(a)kernel.org> kconfig: remove wrong expr_trans_bool() Masahiro Yamada <masahiroy(a)kernel.org> kconfig: gconf: give a proper initial state to the Save button Andreas Hindborg <a.hindborg(a)samsung.com> null_blk: fix validation of block size Wei Li <liwei391(a)huawei.com> arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process Eric Dumazet <edumazet(a)google.com> ila: block BH in ila_output() Eric Dumazet <edumazet(a)google.com> net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() Hans de Goede <hdegoede(a)redhat.com> Input: silead - Always support 10 fingers Rob Herring (Arm) <robh(a)kernel.org> of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() John Hubbard <jhubbard(a)nvidia.com> selftests/futex: pass _GNU_SOURCE without a value to the compiler Michael Ellerman <mpe(a)ellerman.id.au> selftests/openat2: Fix build warnings on ppc64 Michael Ellerman <mpe(a)ellerman.id.au> selftests: cachestat: Fix build warnings on ppc64 Dmitry Antipov <dmantipov(a)yandex.ru> wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() Ilan Peer <ilan.peer(a)intel.com> wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill Ayala Beker <ayala.beker(a)intel.com> wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mvm: handle BA session teardown in RF-kill Yedidya Benshimol <yedidya.ben.shimol(a)intel.com> wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd Benjamin Berg <benjamin.berg(a)intel.com> wifi: iwlwifi: mvm: remove stale STA link data during restart Yedidya Benshimol <yedidya.ben.shimol(a)intel.com> wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fix 6 GHz scan request building Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: handle tasklet frames before stopping Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: apply mcast rate only if interface is up Nicolas Escande <nico.escande(a)gmail.com> wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata Dhananjay Ugwekar <Dhananjay.Ugwekar(a)amd.com> tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs Armin Wolf <W_Armin(a)gmx.de> ACPI: EC: Avoid returning AE_OK on errors in address space handler Armin Wolf <W_Armin(a)gmx.de> ACPI: EC: Abort address space access upon error Nathan Chancellor <nathan(a)kernel.org> efi/libstub: zboot.lds: Discard .discard sections Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Set qed_slowpath_params to zero before use Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Wait for stag work during unload Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Don't process stag work during unload and recovery Justin Stitt <justinstitt(a)google.com> scsi: sr: Fix unintentional arithmetic wraparound Martin Wilck <martin.wilck(a)suse.com> scsi: core: alua: I/O errors for ALUA state transitions Jann Horn <jannh(a)google.com> filelock: Remove locks reliably when fcntl/close race is detected ------------- Diffstat: Documentation/cdrom/cdrom-standard.rst | 4 +- Makefile | 4 +- arch/arm/include/asm/uaccess.h | 14 +- arch/arm64/kernel/armv8_deprecated.c | 3 + arch/mips/kernel/syscalls/syscall_o32.tbl | 2 +- arch/powerpc/kernel/eeh_pe.c | 7 +- arch/powerpc/kvm/book3s_64_vio.c | 18 ++- arch/powerpc/platforms/pseries/setup.c | 4 +- arch/riscv/kernel/stacktrace.c | 3 +- drivers/acpi/ec.c | 9 +- drivers/block/null_blk/main.c | 4 +- drivers/bluetooth/btnxpuart.c | 2 +- drivers/firmware/efi/libstub/zboot.lds | 1 + drivers/gpio/gpio-pca953x.c | 2 + drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 15 ++- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 52 +++++++- .../amd/display/dc/dml/dcn32/display_mode_vba_32.c | 3 + drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 + drivers/gpu/drm/exynos/exynos_dp.c | 1 - drivers/gpu/drm/mediatek/mtk_drm_drv.c | 8 ++ drivers/gpu/drm/radeon/radeon_gem.c | 2 +- drivers/gpu/drm/vmwgfx/Kconfig | 2 +- drivers/hid/hid-debug.c | 2 + drivers/hid/hid-ids.h | 2 + drivers/hid/hid-input.c | 13 ++ drivers/input/joystick/xpad.c | 1 + drivers/input/mouse/elantech.c | 31 +++++ drivers/input/serio/i8042-acpipnpio.h | 18 ++- drivers/input/touchscreen/ads7846.c | 12 +- drivers/input/touchscreen/silead.c | 19 +-- drivers/misc/mei/main.c | 2 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 2 +- drivers/net/ethernet/ibm/ibmvnic.c | 12 ++ .../ethernet/marvell/octeontx2/nic/otx2_common.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_reg.h | 55 ++++---- .../net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 2 +- drivers/net/ethernet/marvell/octeontx2/nic/qos.c | 3 +- drivers/net/usb/qmi_wwan.c | 2 + drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 16 ++- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 47 ++++++- drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 8 +- drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 12 +- drivers/net/wireless/intel/iwlwifi/mvm/sta.h | 5 + drivers/nvme/host/core.c | 1 + drivers/nvme/host/nvme.h | 2 +- drivers/nvme/target/core.c | 1 + drivers/nvme/target/fabrics-cmd-auth.c | 3 - drivers/nvme/target/fabrics-cmd.c | 6 - drivers/of/irq.c | 143 +++++++++++---------- drivers/of/of_private.h | 3 + drivers/perf/riscv_pmu_sbi.c | 2 +- drivers/platform/mellanox/nvsw-sn2201.c | 5 +- drivers/platform/x86/lg-laptop.c | 89 +++++-------- drivers/platform/x86/wireless-hotkey.c | 2 + drivers/s390/char/sclp.c | 1 + drivers/scsi/device_handler/scsi_dh_alua.c | 31 +++-- drivers/scsi/libsas/sas_internal.h | 14 ++ drivers/scsi/qedf/qedf.h | 1 + drivers/scsi/qedf/qedf_main.c | 47 ++++++- drivers/scsi/sr.h | 2 +- drivers/scsi/sr_ioctl.c | 5 +- drivers/spi/spi-imx.c | 2 +- drivers/spi/spi-mux.c | 1 + drivers/spi/spi.c | 6 +- drivers/tee/optee/ffa_abi.c | 12 +- fs/afs/write.c | 2 +- fs/btrfs/qgroup.c | 4 +- fs/cachefiles/cache.c | 45 ++++++- fs/cachefiles/ondemand.c | 74 ++++++++--- fs/cachefiles/volume.c | 1 - fs/dcache.c | 31 ++--- fs/erofs/zmap.c | 2 + fs/file.c | 4 +- fs/fscache/internal.h | 2 - fs/fscache/volume.c | 14 ++ fs/hfsplus/xattr.c | 2 +- fs/iomap/buffered-io.c | 3 +- fs/locks.c | 9 +- fs/nfs/dir.c | 27 ++-- fs/nfs/nfs4proc.c | 1 + fs/nfs/pagelist.c | 5 + fs/nfs/symlink.c | 2 +- fs/smb/client/cifsfs.c | 2 +- fs/smb/client/file.c | 4 +- fs/smb/common/smb2pdu.h | 34 +++++ fs/smb/server/smb2pdu.c | 9 +- include/linux/cdrom.h | 2 +- include/linux/fscache-cache.h | 6 + include/linux/page_ref.h | 49 +------ include/linux/spi/spi.h | 5 +- include/net/bluetooth/hci_sync.h | 2 + include/sound/dmaengine_pcm.h | 1 + include/trace/events/fscache.h | 4 + include/uapi/linux/input-event-codes.h | 2 + lib/Kconfig | 8 +- mm/filemap.c | 10 +- mm/gup.c | 2 +- net/bluetooth/hci_core.c | 76 ++++------- net/bluetooth/hci_sync.c | 13 ++ net/bluetooth/l2cap_core.c | 3 + net/bluetooth/l2cap_sock.c | 14 +- net/ipv6/ila/ila_lwt.c | 7 +- net/ipv6/rpl_iptunnel.c | 14 +- net/mac80211/cfg.c | 5 +- net/mac80211/ieee80211_i.h | 2 + net/mac80211/main.c | 11 +- net/mac80211/mesh.c | 1 + net/mac80211/scan.c | 14 +- net/mac80211/util.c | 4 + net/mac802154/tx.c | 8 +- net/wireless/rdev-ops.h | 6 +- net/wireless/scan.c | 59 ++++++--- scripts/kconfig/expr.c | 29 ----- scripts/kconfig/expr.h | 1 - scripts/kconfig/gconf.c | 3 +- scripts/kconfig/menu.c | 2 - sound/core/pcm_dmaengine.c | 22 ++++ sound/core/pcm_native.c | 2 + sound/pci/hda/Kconfig | 2 + sound/pci/hda/cs35l56_hda.c | 5 + sound/pci/hda/patch_realtek.c | 7 + sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/rt722-sdca-sdw.c | 4 +- sound/soc/intel/boards/bytcr_rt5640.c | 11 ++ sound/soc/soc-generic-dmaengine-pcm.c | 8 ++ sound/soc/soc-topology.c | 29 +++-- sound/soc/sof/intel/hda-pcm.c | 6 + sound/soc/sof/sof-audio.c | 2 +- sound/soc/ti/davinci-mcasp.c | 9 +- sound/soc/ti/omap-hdmi.c | 6 +- tools/power/cpupower/utils/helpers/amd.c | 26 +++- tools/testing/selftests/bpf/config | 3 + tools/testing/selftests/bpf/prog_tests/tc_links.c | 61 +++++++++ tools/testing/selftests/cachestat/test_cachestat.c | 1 + tools/testing/selftests/futex/functional/Makefile | 2 +- .../testing/selftests/net/openvswitch/ovs-dpctl.py | 2 +- tools/testing/selftests/openat2/openat2_test.c | 1 + tools/testing/selftests/timens/exec.c | 6 +- tools/testing/selftests/timens/timer.c | 2 +- tools/testing/selftests/timens/timerfd.c | 2 +- tools/testing/selftests/timens/vfork_exec.c | 4 +- tools/testing/selftests/vDSO/parse_vdso.c | 16 ++- .../selftests/vDSO/vdso_standalone_test_x86.c | 18 ++- 144 files changed, 1168 insertions(+), 568 deletions(-)

5 months, 2 weeks

14
143
0 0

[PATCH 6.9 000/163] 6.9.11-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.9.11 release. There are 163 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 25 Jul 2024 18:01:03 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.9.11-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.9.11-rc1 Baokun Li <libaokun1(a)huawei.com> cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() Baokun Li <libaokun1(a)huawei.com> cachefiles: fix slab-use-after-free in fscache_withdraw_volume() Baokun Li <libaokun1(a)huawei.com> netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: disable softirqs for queued frame handling Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: wext: set ssids=NULL for passive scans Marc Zyngier <maz(a)kernel.org> of/irq: Disable "interrupt-map" parsing for PASEMI Nemo Dmitry Savin <envelsavinds(a)gmail.com> ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x Gen4 Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix deadlock Yang Shi <yang(a)os.amperecomputing.com> mm: page_ref: remove folio_try_get_rcu() Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE David Lechner <dlechner(a)baylibre.com> spi: mux: set ctlr->bits_per_word_mask Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Extend tcx tests to cover late tcx_entry release Edward Adam Davis <eadavis(a)qq.com> hfsplus: fix uninit-value in copy_name John Hubbard <jhubbard(a)nvidia.com> selftests/vDSO: fix clang build errors and warnings John Hubbard <jhubbard(a)nvidia.com> selftest/timerns: fix clang build failures for abs() calls Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return FILE_DEVICE_DISK instead of super magic Bastien Curutchet <bastien.curutchet(a)bootlin.com> spi: davinci: Unset POWERDOWN bit when releasing resources Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices Puranjay Mohan <puranjay(a)kernel.org> riscv: stacktrace: fix usage of ftrace_graph_ret_addr() Samuel Holland <samuel.holland(a)sifive.com> drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus Daniel Gabay <daniel.gabay(a)intel.com> wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK Christian Brauner <brauner(a)kernel.org> fs: better handle deep ancestor chains in is_subdir() Filipe Manana <fdmanana(a)suse.com> btrfs: fix uninitialized return value in the ref-verify tool Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/radeon: check bo_va->bo is non-NULL before using it Roman Li <Roman.Li(a)amd.com> drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport Fangzhi Zuo <Jerry.Zuo(a)amd.com> drm/amd/display: Update efficiency bandwidth for dcn351 Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Fix refresh rate range for some panel Alvin Lee <alvin.lee2(a)amd.com> drm/amd/display: Account for cursor prefetch BW in DML1 mode support Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Add refresh rate range check Gao Xiang <xiang(a)kernel.org> erofs: ensure m_llen is reset to 0 if metadata is invalid Edward Adam Davis <eadavis(a)qq.com> bluetooth/l2cap: sync sock recv cb and release Neeraj Sanjay Kale <neeraj.sanjaykale(a)nxp.com> Bluetooth: btnxpuart: Enable Power Save feature on startup Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> Bluetooth: hci_core: cancel all works upon hci_unregister_dev() Mark-PK Tsai <mark-pk.tsai(a)mediatek.com> tee: optee: ffa: Fix missing-field-initializers warning Xingui Yang <yangxingui(a)huawei.com> scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Ganesh Goudar <ganeshgr(a)linux.ibm.com> powerpc/eeh: avoid possible crash when edev->pdev changes Anjali K <anjalik(a)linux.ibm.com> powerpc/pseries: Whitelist dtl slub object for copying to userspace Yunshui Jiang <jiangyunshui(a)kylinos.cn> net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() Gabor Juhos <j4g8y7(a)gmail.com> clk: qcom: apss-ipq-pll: remove 'config_ctl_hi_val' from Stromer pll configs Daniele Palmas <dnlplm(a)gmail.com> net: usb: qmi_wwan: add Telit FN912 compositions Vyacheslav Frantsishko <itmymaill(a)gmail.com> ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA Li Ma <li.ma(a)amd.com> drm/amd/swsmu: add MALL init support workaround for smu_v14_0_1 Shengjiu Wang <shengjiu.wang(a)nxp.com> ALSA: dmaengine_pcm: terminate dmaengine before synchronize Aivaz Latypov <reichaivaz(a)gmail.com> ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx Takashi Iwai <tiwai(a)suse.de> ALSA: PCM: Allow resume only for suspended streams Nick Child <nnac123(a)linux.ibm.com> ibmvnic: Add tx check to prevent skb leak Filipe Manana <fdmanana(a)suse.com> btrfs: qgroup: fix quota root leak after quota disable failure Qu Wenruo <wqu(a)suse.com> btrfs: scrub: handle RST lookup error correctly Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Change ACPI device id Armin Wolf <W_Armin(a)gmx.de> platform/x86: lg-laptop: Remove LGEX0815 hotkey handling Armin Wolf <W_Armin(a)gmx.de> platform/x86: wireless-hotkey: Add support for LG Airplane Button Chen Ni <nichen(a)iscas.ac.cn> platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources Heiko Carstens <hca(a)linux.ibm.com> s390/sclp: Fix sclp_init() cleanup on failure Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver Ian Ray <ian.ray(a)gehealthcare.com> gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Aryan Srivastava <aryan.srivastava(a)alliedtelesis.co.nz> net: mvpp2: fill-in dev_port attribute Chen Ni <nichen(a)iscas.ac.cn> can: kvaser_usb: fix return value for hif_usb_send_regout Alexander Stein <alexander.stein(a)ew.tq-group.com> Input: ads7846 - use spi_device_id table Boyang Yu <yuboyang(a)dapustor.com> nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA. Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Disconnect ASP1 TX sources when ASP1 DAI is hooked up Jack Yu <jack.yu(a)realtek.com> ASoC: rt722-sdca-sdw: add debounce time for type detection Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback Primoz Fiser <primoz.fiser(a)norik.com> ASoC: ti: omap-hdmi: Fix too long driver name Jai Luthra <j-luthra(a)ti.com> ASoC: ti: davinci-mcasp: Set min period size using FIFO config Jai Luthra <j-luthra(a)ti.com> ALSA: dmaengine: Synchronize dma channel after drop() Thomas GENTY <tomlohave(a)gmail.com> bytcr_rt5640 : inverse jack detect for Archos 101 cesium Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Do not assign fields that are already set Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: Intel: avs: Fix route override Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Fix references to freed memory Luke D. Jones <luke(a)ljones.dev> Input: xpad - add support for ASUS ROG RAIKIRI PRO Zhang Yi <zhangyi(a)everest-semi.com> ASoC: codecs: ES8326: Solve headphone detection issue Jack Yu <jack.yu(a)realtek.com> ASoC: rt722-sdca-sdw: add silence detection register as volatile Tobias Jakobi <tjakobi(a)math.uni-bielefeld.de> Input: i8042 - add Ayaneo Kun to i8042 quirk table Jonathan Denose <jdenose(a)google.com> Input: elantech - fix touchpad state on resume for Lenovo N24 Tejun Heo <tj(a)kernel.org> workqueue: Refactor worker ID formatting and make wq_worker_comm() use full ID string Kent Overstreet <kent.overstreet(a)linux.dev> closures: Change BUG_ON() to WARN_ON() Arnd Bergmann <arnd(a)arndb.de> mips: fix compat_sys_lseek syscall Simon Trimmer <simont(a)opensource.cirrus.com> ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE Likun Gao <Likun.Gao(a)amd.com> drm/amdgpu: init TA fw for psp v14 Paul Hsieh <paul.hsieh(a)amd.com> drm/amd/display: change dram_clock_latency to 34us for dcn35 Daniel Miess <daniel.miess(a)amd.com> drm/amd/display: Change dram_clock_latency to 34us for dcn351 Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Indicate CU havest info to CP Adrian Moreno <amorenoz(a)redhat.com> selftests: openvswitch: Set value to nla flags. Linus Torvalds <torvalds(a)linux-foundation.org> cpumask: limit FORCE_NR_CPUS to just the UP case Patrice Chotard <patrice.chotard(a)foss.st.com> spi: Fix OCTAL mode support Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek: Add more codec ID to no shutup pins list Alexey Makhalov <alexey.makhalov(a)broadcom.com> drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency Michael Ellerman <mpe(a)ellerman.id.au> KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Kenton Groombridge <concord(a)gentoo.org> wifi: mac80211: Avoid address calculations via out of bounds array indexing Stefan Binding <sbinding(a)opensource.cirrus.com> ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4 Stefan Binding <sbinding(a)opensource.cirrus.com> ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 Stefan Binding <sbinding(a)opensource.cirrus.com> ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4 Stefan Binding <sbinding(a)opensource.cirrus.com> ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5 Dmitry Antipov <dmantipov(a)yandex.ru> wifi: cfg80211: wext: add extra SIOCSIWSCAN data check Simon Trimmer <simont(a)opensource.cirrus.com> ALSA: hda: cs35l56: Fix lifecycle of codec pointer Cyril Hrubis <chrubis(a)suse.cz> loop: Disable fallocate() zero and discard if not supported Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Insert full vma on mmap'd MMIO fault Daniel Wagner <dwagner(a)suse.de> nvmet: always initialize cqe.result Chunguang Xu <chunguang.xu(a)shopee.com> nvme: avoid double free special payload Douglas Anderson <dianders(a)chromium.org> drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time Douglas Anderson <dianders(a)chromium.org> drm: renesas: shmobile: Call drm_atomic_helper_shutdown() at shutdown time Tobias Jakobi <tjakobi(a)math.uni-bielefeld.de> drm: panel-orientation-quirks: Add quirk for Aya Neo KUN Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> drm/exynos: dp: drop driver owner initialization Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> iomap: Fix iomap_adjust_read_range for plen calculation Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> parport: amiga: Mark driver struct with __refdata to prevent section mismatch Alexander Usyskin <alexander.usyskin(a)intel.com> mei: demote client disconnect warning on suspend to debug Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Use unmap_mapping_range() Alex Williamson <alex.williamson(a)redhat.com> vfio: Create vfio_fs_type with inode per device Yuntao Wang <yuntao.wang(a)linux.dev> fs/file: fix the check in find_next_fd() Baokun Li <libaokun1(a)huawei.com> cachefiles: make on-demand read killable Zizhi Wo <wozizhi(a)huawei.com> cachefiles: Set object to close if ondemand_id < 0 in copen Baokun Li <libaokun1(a)huawei.com> cachefiles: add consistency check for copen/cread Scott Mayhew <smayhew(a)redhat.com> nfs: don't invalidate dentries on transient errors Jan Kara <jack(a)suse.cz> nfs: Avoid flushing many pages with NFS_FILE_SYNC Sagi Grimberg <sagi(a)grimberg.me> nfs: propagate readlink errors in nfs_symlink_filler Dmitry Mastykin <mastichi(a)gmail.com> NFSv4: Fix memory leak in nfs4_set_security_label Louis Dalibard <ontake(a)ontake.dev> HID: Ignore battery for ELAN touchscreens 2F2C and 4116 Aseda Aboagye <aaboagye(a)chromium.org> input: Add support for "Do Not Disturb" Aseda Aboagye <aaboagye(a)chromium.org> input: Add event code for accessibility key Masahiro Yamada <masahiroy(a)kernel.org> kconfig: remove wrong expr_trans_bool() Masahiro Yamada <masahiroy(a)kernel.org> kconfig: gconf: give a proper initial state to the Save button Andreas Hindborg <a.hindborg(a)samsung.com> null_blk: fix validation of block size Tasos Sahanidis <tasos(a)tasossah.com> drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds Wei Li <liwei391(a)huawei.com> arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process Hagar Hemdan <hagarhem(a)amazon.com> io_uring: fix possible deadlock in io_register_iowq_max_workers() Eric Dumazet <edumazet(a)google.com> ila: block BH in ila_output() Eric Dumazet <edumazet(a)google.com> net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() Suma Hegde <suma.hegde(a)amd.com> platform/x86/amd/hsmp: Check HSMP support on AMD family of processors Hans de Goede <hdegoede(a)redhat.com> Input: silead - Always support 10 fingers Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Fix GMAC's phy-mode definitions in dts Chunguang Xu <chunguang.xu(a)shopee.com> nvme-fabrics: use reserved tag for reg read/write command Rob Herring (Arm) <robh(a)kernel.org> of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() John Hubbard <jhubbard(a)nvidia.com> selftests/futex: pass _GNU_SOURCE without a value to the compiler Michael Ellerman <mpe(a)ellerman.id.au> selftests/overlayfs: Fix build error on ppc64 Michael Ellerman <mpe(a)ellerman.id.au> selftests/openat2: Fix build warnings on ppc64 Michael Ellerman <mpe(a)ellerman.id.au> selftests: cachestat: Fix build warnings on ppc64 Dmitry Antipov <dmantipov(a)yandex.ru> wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() Ilan Peer <ilan.peer(a)intel.com> wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill Ayala Beker <ayala.beker(a)intel.com> wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mvm: handle BA session teardown in RF-kill Yedidya Benshimol <yedidya.ben.shimol(a)intel.com> wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd Benjamin Berg <benjamin.berg(a)intel.com> wifi: iwlwifi: mvm: remove stale STA link data during restart Yedidya Benshimol <yedidya.ben.shimol(a)intel.com> wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fix 6 GHz scan request building Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: handle tasklet frames before stopping Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: apply mcast rate only if interface is up Nicolas Escande <nico.escande(a)gmail.com> wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata Thomas Weißschuh <linux(a)weissschuh.net> ACPI: AC: Properly notify powermanagement core about changes Andy Shevchenko <andy.shevchenko(a)gmail.com> PNP: Hide pnp_bus_type from the non-PNP code Dhananjay Ugwekar <Dhananjay.Ugwekar(a)amd.com> tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs Filipe Manana <fdmanana(a)suse.com> btrfs: ensure fast fsync waits for ordered extents after a write failure Armin Wolf <W_Armin(a)gmx.de> ACPI: EC: Avoid returning AE_OK on errors in address space handler Armin Wolf <W_Armin(a)gmx.de> ACPI: EC: Abort address space access upon error Nathan Chancellor <nathan(a)kernel.org> efi/libstub: zboot.lds: Discard .discard sections Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Set qed_slowpath_params to zero before use Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Wait for stag work during unload Saurav Kashyap <skashyap(a)marvell.com> scsi: qedf: Don't process stag work during unload and recovery Justin Stitt <justinstitt(a)google.com> scsi: sr: Fix unintentional arithmetic wraparound Martin Wilck <martin.wilck(a)suse.com> scsi: core: alua: I/O errors for ALUA state transitions Steve French <stfrench(a)microsoft.com> cifs: fix noisy message on copy_file_range ------------- Diffstat: Documentation/cdrom/cdrom-standard.rst | 4 +- Makefile | 4 +- arch/arm64/kernel/armv8_deprecated.c | 3 + arch/loongarch/boot/dts/loongson-2k0500-ref.dts | 4 +- arch/loongarch/boot/dts/loongson-2k1000-ref.dts | 4 +- arch/loongarch/boot/dts/loongson-2k2000-ref.dts | 2 +- arch/mips/kernel/syscalls/syscall_o32.tbl | 2 +- arch/powerpc/kernel/eeh_pe.c | 7 +- arch/powerpc/kvm/book3s_64_vio.c | 18 +- arch/powerpc/platforms/pseries/setup.c | 4 +- arch/riscv/kernel/stacktrace.c | 3 +- drivers/acpi/ac.c | 4 +- drivers/acpi/ec.c | 9 +- drivers/acpi/sbs.c | 4 +- drivers/block/loop.c | 23 ++ drivers/block/null_blk/main.c | 4 +- drivers/bluetooth/btnxpuart.c | 2 +- drivers/clk/qcom/apss-ipq-pll.c | 2 - drivers/firmware/efi/libstub/zboot.lds | 1 + drivers/gpio/gpio-pca953x.c | 2 + drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 15 +- drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 5 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 52 +++- .../amd/display/dc/dml/dcn32/display_mode_vba_32.c | 3 + .../gpu/drm/amd/display/dc/dml/dcn35/dcn35_fpu.c | 2 +- .../gpu/drm/amd/display/dc/dml/dcn351/dcn351_fpu.c | 2 +- .../amd/display/dc/dml2/dml2_translation_helper.c | 1 + drivers/gpu/drm/amd/display/dc/dml2/dml2_utils.c | 2 +- drivers/gpu/drm/amd/include/pptable.h | 91 +++---- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 13 + drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 5 + .../amd/pm/swsmu/inc/pmfw_if/smu_v14_0_0_ppsmc.h | 4 +- drivers/gpu/drm/amd/pm/swsmu/inc/smu_types.h | 4 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c | 73 ++++++ drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 + drivers/gpu/drm/exynos/exynos_dp.c | 1 - drivers/gpu/drm/mediatek/mtk_drm_drv.c | 8 + drivers/gpu/drm/radeon/radeon_gem.c | 2 +- drivers/gpu/drm/renesas/shmobile/shmob_drm_drv.c | 8 + drivers/gpu/drm/vmwgfx/Kconfig | 2 +- drivers/hid/hid-debug.c | 2 + drivers/hid/hid-ids.h | 2 + drivers/hid/hid-input.c | 13 + drivers/input/joystick/xpad.c | 1 + drivers/input/mouse/elantech.c | 31 +++ drivers/input/serio/i8042-acpipnpio.h | 18 +- drivers/input/touchscreen/ads7846.c | 12 +- drivers/input/touchscreen/silead.c | 19 +- drivers/misc/mei/main.c | 2 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 2 +- drivers/net/ethernet/ibm/ibmvnic.c | 12 + drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 1 + .../ethernet/marvell/octeontx2/nic/otx2_common.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_reg.h | 55 ++-- .../net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 2 +- drivers/net/ethernet/marvell/octeontx2/nic/qos.c | 3 +- drivers/net/usb/qmi_wwan.c | 2 + drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 16 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 47 +++- drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 6 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 8 +- drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 12 +- drivers/net/wireless/intel/iwlwifi/mvm/sta.h | 5 + drivers/nvme/host/core.c | 1 + drivers/nvme/host/fabrics.c | 6 +- drivers/nvme/host/nvme.h | 2 +- drivers/nvme/target/core.c | 1 + drivers/nvme/target/fabrics-cmd-auth.c | 3 - drivers/nvme/target/fabrics-cmd.c | 6 - drivers/of/irq.c | 143 ++++++----- drivers/of/of_private.h | 3 + drivers/parport/parport_amiga.c | 8 +- drivers/perf/riscv_pmu_sbi.c | 2 +- drivers/platform/mellanox/nvsw-sn2201.c | 5 +- drivers/platform/x86/amd/hsmp.c | 50 +++- drivers/platform/x86/lg-laptop.c | 89 +++---- drivers/platform/x86/wireless-hotkey.c | 2 + drivers/pnp/base.h | 1 + drivers/s390/char/sclp.c | 1 + drivers/scsi/device_handler/scsi_dh_alua.c | 31 ++- drivers/scsi/libsas/sas_internal.h | 14 ++ drivers/scsi/qedf/qedf.h | 1 + drivers/scsi/qedf/qedf_main.c | 47 +++- drivers/scsi/sr.h | 2 +- drivers/scsi/sr_ioctl.c | 5 +- drivers/spi/spi-davinci.c | 6 + drivers/spi/spi-imx.c | 2 +- drivers/spi/spi-mux.c | 1 + drivers/spi/spi.c | 6 +- drivers/tee/optee/ffa_abi.c | 12 +- drivers/vfio/device_cdev.c | 7 + drivers/vfio/group.c | 7 + drivers/vfio/pci/vfio_pci_core.c | 277 +++++---------------- drivers/vfio/vfio_main.c | 44 ++++ fs/btrfs/btrfs_inode.h | 10 + fs/btrfs/file.c | 16 ++ fs/btrfs/ordered-data.c | 31 +++ fs/btrfs/qgroup.c | 4 +- fs/btrfs/ref-verify.c | 9 +- fs/btrfs/scrub.c | 26 +- fs/cachefiles/cache.c | 45 +++- fs/cachefiles/ondemand.c | 74 ++++-- fs/cachefiles/volume.c | 1 - fs/dcache.c | 31 ++- fs/erofs/zmap.c | 2 + fs/file.c | 4 +- fs/hfsplus/xattr.c | 2 +- fs/iomap/buffered-io.c | 3 +- fs/netfs/buffered_write.c | 4 +- fs/netfs/fscache_volume.c | 14 ++ fs/netfs/internal.h | 2 - fs/nfs/dir.c | 27 +- fs/nfs/nfs4proc.c | 1 + fs/nfs/pagelist.c | 5 + fs/nfs/symlink.c | 2 +- fs/smb/client/cifsfs.c | 2 +- fs/smb/client/file.c | 4 +- fs/smb/common/smb2pdu.h | 34 +++ fs/smb/server/smb2pdu.c | 9 +- include/linux/cdrom.h | 2 +- include/linux/fscache-cache.h | 6 + include/linux/page_ref.h | 49 +--- include/linux/pnp.h | 2 - include/linux/spi/spi.h | 5 +- include/linux/vfio.h | 1 + include/linux/vfio_pci_core.h | 2 - include/net/bluetooth/hci_sync.h | 2 + include/sound/dmaengine_pcm.h | 1 + include/trace/events/fscache.h | 4 + include/uapi/linux/input-event-codes.h | 2 + io_uring/register.c | 4 + kernel/workqueue.c | 51 ++-- lib/Kconfig | 8 +- lib/closure.c | 10 +- mm/filemap.c | 10 +- mm/gup.c | 2 +- net/bluetooth/hci_core.c | 76 ++---- net/bluetooth/hci_sync.c | 13 + net/bluetooth/l2cap_core.c | 3 + net/bluetooth/l2cap_sock.c | 14 +- net/ipv6/ila/ila_lwt.c | 7 +- net/ipv6/rpl_iptunnel.c | 14 +- net/mac80211/cfg.c | 5 +- net/mac80211/ieee80211_i.h | 2 + net/mac80211/main.c | 11 +- net/mac80211/mesh.c | 1 + net/mac80211/scan.c | 31 ++- net/mac80211/util.c | 4 + net/mac802154/tx.c | 8 +- net/wireless/rdev-ops.h | 6 +- net/wireless/scan.c | 59 +++-- scripts/kconfig/expr.c | 29 --- scripts/kconfig/expr.h | 1 - scripts/kconfig/gconf.c | 3 +- scripts/kconfig/menu.c | 2 - sound/core/pcm_dmaengine.c | 22 ++ sound/core/pcm_native.c | 2 + sound/pci/hda/Kconfig | 2 + sound/pci/hda/cs35l41_hda_property.c | 8 + sound/pci/hda/cs35l56_hda.c | 5 + sound/pci/hda/patch_realtek.c | 9 + sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/cs35l56-shared.c | 4 + sound/soc/codecs/es8326.c | 8 +- sound/soc/codecs/rt722-sdca-sdw.c | 4 +- sound/soc/intel/avs/topology.c | 19 +- sound/soc/intel/boards/bytcr_rt5640.c | 11 + sound/soc/soc-generic-dmaengine-pcm.c | 8 + sound/soc/soc-topology.c | 29 ++- sound/soc/sof/intel/hda-pcm.c | 6 + sound/soc/sof/sof-audio.c | 2 +- sound/soc/ti/davinci-mcasp.c | 9 +- sound/soc/ti/omap-hdmi.c | 6 +- tools/power/cpupower/utils/helpers/amd.c | 26 +- tools/testing/selftests/bpf/config | 3 + tools/testing/selftests/bpf/prog_tests/tc_links.c | 61 +++++ tools/testing/selftests/cachestat/test_cachestat.c | 1 + .../selftests/filesystems/overlayfs/dev_in_maps.c | 1 + tools/testing/selftests/futex/functional/Makefile | 2 +- .../testing/selftests/net/openvswitch/ovs-dpctl.py | 2 +- tools/testing/selftests/openat2/openat2_test.c | 1 + tools/testing/selftests/timens/exec.c | 6 +- tools/testing/selftests/timens/timer.c | 2 +- tools/testing/selftests/timens/timerfd.c | 2 +- tools/testing/selftests/timens/vfork_exec.c | 4 +- tools/testing/selftests/vDSO/parse_vdso.c | 16 +- .../selftests/vDSO/vdso_standalone_test_x86.c | 18 +- 188 files changed, 1718 insertions(+), 884 deletions(-)

5 months, 2 weeks

13
176
0 0

[PATCH v3] EDAC/ti: Fix possible null pointer dereference in _emif_get_id()

by Ma Ke

In _emif_get_id(), of_get_address() may return NULL which is later dereferenced. Fix this bug by adding NULL check. Found by code review. Cc: stable(a)vger.kernel.org Fixes: 86a18ee21e5e ("EDAC, ti: Add support for TI keystone and DRA7xx EDAC") Signed-off-by: Ma Ke <make24(a)iscas.ac.cn> --- Changes in v3: - added the patch operations omitted in PATCH v2 RESEND compared to PATCH v2. Sorry for my oversight. Changes in v2: - added Cc stable line. --- drivers/edac/ti_edac.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/drivers/edac/ti_edac.c b/drivers/edac/ti_edac.c index 29723c9592f7..6f3da8d99eab 100644 --- a/drivers/edac/ti_edac.c +++ b/drivers/edac/ti_edac.c @@ -207,6 +207,9 @@ static int _emif_get_id(struct device_node *node) int my_id = 0; addrp = of_get_address(node, 0, NULL, NULL); + if (!addrp) + return -EINVAL; + my_addr = (u32)of_translate_address(node, addrp); for_each_matching_node(np, ti_edac_of_match) { @@ -214,6 +217,9 @@ static int _emif_get_id(struct device_node *node) continue; addrp = of_get_address(np, 0, NULL, NULL); + if (!addrp) + return -EINVAL; + addr = (u32)of_translate_address(np, addrp); edac_printk(KERN_INFO, EDAC_MOD_NAME, -- 2.25.1

5 months, 2 weeks

1
0
0 0

[PATCH v4] drm/client: fix null pointer dereference in drm_client_modeset_probe

by Ma Ke

In drm_client_modeset_probe(), the return value of drm_mode_duplicate() is assigned to modeset->mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd. Cc: stable(a)vger.kernel.org Fixes: cf13909aee05 ("drm/fb-helper: Move out modeset config code") Signed-off-by: Ma Ke <make24(a)iscas.ac.cn> --- Changes in v4: - modified patch, set ret and break to handle error rightly. Changes in v3: - modified patch as suggestions, returned error directly when failing to get modeset->mode. Changes in v2: - added the recipient's email address, due to the prolonged absence of a response from the recipients. - added Cc stable. --- drivers/gpu/drm/drm_client_modeset.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/gpu/drm/drm_client_modeset.c b/drivers/gpu/drm/drm_client_modeset.c index 31af5cf37a09..cee5eafbfb81 100644 --- a/drivers/gpu/drm/drm_client_modeset.c +++ b/drivers/gpu/drm/drm_client_modeset.c @@ -880,6 +880,11 @@ int drm_client_modeset_probe(struct drm_client_dev *client, unsigned int width, kfree(modeset->mode); modeset->mode = drm_mode_duplicate(dev, mode); + if (!modeset->mode) { + ret = -ENOMEM; + break; + } + drm_connector_get(connector); modeset->connectors[modeset->num_connectors++] = connector; modeset->x = offset->x; -- 2.25.1

5 months, 2 weeks

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror July 2024