The patch below does not apply to the 4.14-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
>From f9a7082327e26f54067a49cac2316d31e0cc8ba7 Mon Sep 17 00:00:00 2001
From: Johan Hovold <johan(a)kernel.org>
Date: Mon, 27 Aug 2018 10:21:47 +0200
Subject: [PATCH] drm/msm: fix OF child-node lookup
Use the new of_get_compatible_child() helper to lookup the legacy
pwrlevels child node instead of using of_find_compatible_node(), which
searches the entire tree from a given start node and thus can return an
unrelated (i.e. non-child) node.
This also addresses a potential use-after-free (e.g. after probe
deferral) as the tree-wide helper drops a reference to its first
argument (i.e. the probed device's node).
While at it, also fix the related child-node reference leak.
Fixes: e2af8b6b0ca1 ("drm/msm: gpu: Use OPP tables if we can")
Cc: stable <stable(a)vger.kernel.org> # 4.12
Cc: Jordan Crouse <jcrouse(a)codeaurora.org>
Cc: Rob Clark <robdclark(a)gmail.com>
Cc: David Airlie <airlied(a)linux.ie>
Signed-off-by: Johan Hovold <johan(a)kernel.org>
Signed-off-by: Rob Herring <robh(a)kernel.org>
diff --git a/drivers/gpu/drm/msm/adreno/adreno_gpu.c b/drivers/gpu/drm/msm/adreno/adreno_gpu.c
index da1363a0c54d..93d70f4a2154 100644
--- a/drivers/gpu/drm/msm/adreno/adreno_gpu.c
+++ b/drivers/gpu/drm/msm/adreno/adreno_gpu.c
@@ -633,8 +633,7 @@ static int adreno_get_legacy_pwrlevels(struct device *dev)
struct device_node *child, *node;
int ret;
- node = of_find_compatible_node(dev->of_node, NULL,
- "qcom,gpu-pwrlevels");
+ node = of_get_compatible_child(dev->of_node, "qcom,gpu-pwrlevels");
if (!node) {
dev_err(dev, "Could not find the GPU powerlevels\n");
return -ENXIO;
@@ -655,6 +654,8 @@ static int adreno_get_legacy_pwrlevels(struct device *dev)
dev_pm_opp_add(dev, val, 0);
}
+ of_node_put(node);
+
return 0;
}
From: Alek Du <alek.du(a)intel.com>
We observed some premature timeouts on a virtualization platform, the log
is like this:
case 1:
[159525.255629] mmc1: Internal clock never stabilised.
[159525.255818] mmc1: sdhci: ============ SDHCI REGISTER DUMP ===========
[159525.256049] mmc1: sdhci: Sys addr: 0x00000000 | Version: 0x00001002
...
[159525.257205] mmc1: sdhci: Wake-up: 0x00000000 | Clock: 0x0000fa03
>From the clock control register dump, we are pretty sure the clock was
stablized.
case 2:
[ 914.550127] mmc1: Reset 0x2 never completed.
[ 914.550321] mmc1: sdhci: ============ SDHCI REGISTER DUMP ===========
[ 914.550608] mmc1: sdhci: Sys addr: 0x00000010 | Version: 0x00001002
After checking the sdhci code, we found the timeout check actually has a
little window that the CPU can be scheduled out and when it comes back,
the original time set or check is not valid.
Fixes: 5a436cc0af62 ("mmc: sdhci: Optimize delay loops")
Cc: stable(a)vger.kernel.org # v4.12+
Signed-off-by: Alek Du <alek.du(a)intel.com>
---
drivers/mmc/host/sdhci.c | 18 +++++++++++++-----
1 file changed, 13 insertions(+), 5 deletions(-)
diff --git a/drivers/mmc/host/sdhci.c b/drivers/mmc/host/sdhci.c
index 99bdae53fa2e..451b08a818a9 100644
--- a/drivers/mmc/host/sdhci.c
+++ b/drivers/mmc/host/sdhci.c
@@ -216,8 +216,12 @@ void sdhci_reset(struct sdhci_host *host, u8 mask)
timeout = ktime_add_ms(ktime_get(), 100);
/* hw clears the bit when it's done */
- while (sdhci_readb(host, SDHCI_SOFTWARE_RESET) & mask) {
- if (ktime_after(ktime_get(), timeout)) {
+ while (1) {
+ bool timedout = ktime_after(ktime_get(), timeout);
+
+ if (!(sdhci_readb(host, SDHCI_SOFTWARE_RESET) & mask))
+ break;
+ if (timedout) {
pr_err("%s: Reset 0x%x never completed.\n",
mmc_hostname(host->mmc), (int)mask);
sdhci_dumpregs(host);
@@ -1608,9 +1612,13 @@ void sdhci_enable_clk(struct sdhci_host *host, u16 clk)
/* Wait max 20 ms */
timeout = ktime_add_ms(ktime_get(), 20);
- while (!((clk = sdhci_readw(host, SDHCI_CLOCK_CONTROL))
- & SDHCI_CLOCK_INT_STABLE)) {
- if (ktime_after(ktime_get(), timeout)) {
+ while (1) {
+ bool timedout = ktime_after(ktime_get(), timeout);
+
+ clk = sdhci_readw(host, SDHCI_CLOCK_CONTROL);
+ if (clk & SDHCI_CLOCK_INT_STABLE)
+ break;
+ if (timedout) {
pr_err("%s: Internal clock never stabilised.\n",
mmc_hostname(host->mmc));
sdhci_dumpregs(host);
--
2.17.1
From: Markus Hofstaetter <markus.hofstaetter(a)ait.ac.at>
commit f16703360da7731a057df2ffa902306819c22398 upstream.
Some PWMs are disabled by default or the default pin setting
does not match the LED_OFF state (e.g., active-low leds).
Hence, the driver may end up reporting 0 brightness, but
the leds are actually on using full brightness, because
it never enforces its default configuration.
So enforce it by calling led_pwm_set() after successfully
registering the device.
Tested on a Phytec phyFLEX i.MX6Q board based on kernel
v3.19.5.
Signed-off-by: Markus Hofstaetter <markus.hofstaetter(a)ait.ac.at>
Tested-by: Markus Hofstaetter <markus.hofstaetter(a)ait.ac.at>
Signed-off-by: Jacek Anaszewski <j.anaszewski(a)samsung.com>
Signed-off-by: Krzysztof Kozlowski <krzk(a)kernel.org>
---
drivers/leds/leds-pwm.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/leds/leds-pwm.c b/drivers/leds/leds-pwm.c
index 1d07e3e83d29..3149dbece146 100644
--- a/drivers/leds/leds-pwm.c
+++ b/drivers/leds/leds-pwm.c
@@ -132,6 +132,7 @@ static int led_pwm_add(struct device *dev, struct led_pwm_priv *priv,
ret = led_classdev_register(dev, &led_data->cdev);
if (ret == 0) {
priv->num_leds++;
+ led_pwm_set(&led_data->cdev, led_data->cdev.brightness);
} else {
dev_err(dev, "failed to register PWM led for %s: %d\n",
led->name, ret);
--
2.7.4
The patch below does not apply to the 4.4-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
>From db7a691a1551a748cb92d9c89c6b190ea87e28d5 Mon Sep 17 00:00:00 2001
From: Michael Guralnik <michaelgur(a)mellanox.com>
Date: Wed, 21 Nov 2018 15:03:54 +0200
Subject: [PATCH] IB/mlx5: Avoid load failure due to unknown link width
If the firmware reports a connection width that is not 1x, 4x, 8x or 12x
it causes the driver to fail during initialization.
To prevent this failure every time a new width is introduced to the RDMA
stack, we will set a default 4x width for these widths which ar unknown to
the driver.
This is needed to allow to run old kernels with new firmware.
Cc: <stable(a)vger.kernel.org> # 4.1
Fixes: 1b5daf11b015 ("IB/mlx5: Avoid using the MAD_IFC command under ISSI > 0 mode")
Signed-off-by: Michael Guralnik <michaelgur(a)mellanox.com>
Reviewed-by: Majd Dibbiny <majd(a)mellanox.com>
Signed-off-by: Leon Romanovsky <leonro(a)mellanox.com>
Signed-off-by: Jason Gunthorpe <jgg(a)mellanox.com>
diff --git a/drivers/infiniband/hw/mlx5/main.c b/drivers/infiniband/hw/mlx5/main.c
index e9c428071df3..3569fda07e07 100644
--- a/drivers/infiniband/hw/mlx5/main.c
+++ b/drivers/infiniband/hw/mlx5/main.c
@@ -1094,31 +1094,26 @@ enum mlx5_ib_width {
MLX5_IB_WIDTH_12X = 1 << 4
};
-static int translate_active_width(struct ib_device *ibdev, u8 active_width,
+static void translate_active_width(struct ib_device *ibdev, u8 active_width,
u8 *ib_width)
{
struct mlx5_ib_dev *dev = to_mdev(ibdev);
- int err = 0;
- if (active_width & MLX5_IB_WIDTH_1X) {
+ if (active_width & MLX5_IB_WIDTH_1X)
*ib_width = IB_WIDTH_1X;
- } else if (active_width & MLX5_IB_WIDTH_2X) {
- mlx5_ib_dbg(dev, "active_width %d is not supported by IB spec\n",
- (int)active_width);
- err = -EINVAL;
- } else if (active_width & MLX5_IB_WIDTH_4X) {
+ else if (active_width & MLX5_IB_WIDTH_4X)
*ib_width = IB_WIDTH_4X;
- } else if (active_width & MLX5_IB_WIDTH_8X) {
+ else if (active_width & MLX5_IB_WIDTH_8X)
*ib_width = IB_WIDTH_8X;
- } else if (active_width & MLX5_IB_WIDTH_12X) {
+ else if (active_width & MLX5_IB_WIDTH_12X)
*ib_width = IB_WIDTH_12X;
- } else {
- mlx5_ib_dbg(dev, "Invalid active_width %d\n",
+ else {
+ mlx5_ib_dbg(dev, "Invalid active_width %d, setting width to default value: 4x\n",
(int)active_width);
- err = -EINVAL;
+ *ib_width = IB_WIDTH_4X;
}
- return err;
+ return;
}
static int mlx5_mtu_to_ib_mtu(int mtu)
@@ -1225,10 +1220,8 @@ static int mlx5_query_hca_port(struct ib_device *ibdev, u8 port,
if (err)
goto out;
- err = translate_active_width(ibdev, ib_link_width_oper,
- &props->active_width);
- if (err)
- goto out;
+ translate_active_width(ibdev, ib_link_width_oper, &props->active_width);
+
err = mlx5_query_port_ib_proto_oper(mdev, &props->active_speed, port);
if (err)
goto out;
The patch below does not apply to the 4.14-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
>From 3054426dc68e5d63aa6a6e9b91ac4ec78e3f3805 Mon Sep 17 00:00:00 2001
From: Pavankumar Kondeti <pkondeti(a)codeaurora.org>
Date: Tue, 30 Oct 2018 12:24:33 +0530
Subject: [PATCH] sched, trace: Fix prev_state output in sched_switch
tracepoint
commit 3f5fe9fef5b2 ("sched/debug: Fix task state recording/printout")
tried to fix the problem introduced by a previous commit efb40f588b43
("sched/tracing: Fix trace_sched_switch task-state printing"). However
the prev_state output in sched_switch is still broken.
task_state_index() uses fls() which considers the LSB as 1. Left
shifting 1 by this value gives an incorrect mapping to the task state.
Fix this by decrementing the value returned by __get_task_state()
before shifting.
Link: http://lkml.kernel.org/r/1540882473-1103-1-git-send-email-pkondeti@codeauro…
Cc: stable(a)vger.kernel.org
Fixes: 3f5fe9fef5b2 ("sched/debug: Fix task state recording/printout")
Signed-off-by: Pavankumar Kondeti <pkondeti(a)codeaurora.org>
Signed-off-by: Steven Rostedt (VMware) <rostedt(a)goodmis.org>
diff --git a/include/trace/events/sched.h b/include/trace/events/sched.h
index f07b270d4fc4..9a4bdfadab07 100644
--- a/include/trace/events/sched.h
+++ b/include/trace/events/sched.h
@@ -107,6 +107,8 @@ DEFINE_EVENT(sched_wakeup_template, sched_wakeup_new,
#ifdef CREATE_TRACE_POINTS
static inline long __trace_sched_switch_state(bool preempt, struct task_struct *p)
{
+ unsigned int state;
+
#ifdef CONFIG_SCHED_DEBUG
BUG_ON(p != current);
#endif /* CONFIG_SCHED_DEBUG */
@@ -118,7 +120,15 @@ static inline long __trace_sched_switch_state(bool preempt, struct task_struct *
if (preempt)
return TASK_REPORT_MAX;
- return 1 << task_state_index(p);
+ /*
+ * task_state_index() uses fls() and returns a value from 0-8 range.
+ * Decrement it by 1 (except TASK_RUNNING state i.e 0) before using
+ * it for left shift operation to get the correct task->state
+ * mapping.
+ */
+ state = task_state_index(p);
+
+ return state ? (1 << (state - 1)) : state;
}
#endif /* CREATE_TRACE_POINTS */
On Sun, Dec 2, 2018 at 4:51 PM Sasha Levin <sashal(a)kernel.org> wrote:
>
> This is a note to let you know that I've just added the patch titled
>
> libceph: implement CEPHX_V2 calculation mode
>
> to the 4.14-stable tree which can be found at:
> http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=sum…
>
> The filename of the patch is:
> libceph-implement-cephx_v2-calculation-mode.patch
> and it can be found in the queue-4.14 subdirectory.
>
> If you, or anyone else, feels it should not be added to the stable tree,
> please let <stable(a)vger.kernel.org> know about it.
>
>
>
> commit 14735e0afb6ed378becd0dedf37d1e5ddfa12084
> Author: Ilya Dryomov <idryomov(a)gmail.com>
> Date: Fri Jul 27 19:25:32 2018 +0200
>
> libceph: implement CEPHX_V2 calculation mode
>
> commit cc255c76c70f7a87d97939621eae04b600d9f4a1 upstream.
>
> Derive the signature from the entire buffer (both AES cipher blocks)
> instead of using just the first half of the first block, leaving out
> data_crc entirely.
>
> This addresses CVE-2018-1129.
>
> Link: http://tracker.ceph.com/issues/24837
> Signed-off-by: Ilya Dryomov <idryomov(a)gmail.com>
> Reviewed-by: Sage Weil <sage(a)redhat.com>
> Signed-off-by: Ben Hutchings <ben.hutchings(a)codethink.co.uk>
> Signed-off-by: Sasha Levin <sashal(a)kernel.org>
Hi Sasha,
The CVEs mentioned in this series are server side and CEPHX_V2 is
probably more of a new feature than a security fix. That said, I don't
object to including it in 4.14.z. If you do, please pick up the
remaining two patches for interoperability:
f1d10e046379 libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()
130f52f2b203 libceph: check authorizer reply/challenge length before reading
Thanks,
Ilya
Intel Merrifield has a reduced size of FIFO used in iDMA 32-bit controller,
i.e. 512 bytes instead of 1024.
Fix this by partitioning it as 64 bytes per channel.
Note, in the future we might switch to 'fifo-size' property instead of
hard coded value.
Fixes: 199244d69458 ("dmaengine: dw: add support of iDMA 32-bit hardware")
Signed-off-by: Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
Cc: stable(a)vger.kernel.org
---
drivers/dma/dw/core.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/drivers/dma/dw/core.c b/drivers/dma/dw/core.c
index 2c5ca1961256..dc053e62f894 100644
--- a/drivers/dma/dw/core.c
+++ b/drivers/dma/dw/core.c
@@ -1061,12 +1061,12 @@ static void dwc_issue_pending(struct dma_chan *chan)
/*
* Program FIFO size of channels.
*
- * By default full FIFO (1024 bytes) is assigned to channel 0. Here we
+ * By default full FIFO (512 bytes) is assigned to channel 0. Here we
* slice FIFO on equal parts between channels.
*/
static void idma32_fifo_partition(struct dw_dma *dw)
{
- u64 value = IDMA32C_FP_PSIZE_CH0(128) | IDMA32C_FP_PSIZE_CH1(128) |
+ u64 value = IDMA32C_FP_PSIZE_CH0(64) | IDMA32C_FP_PSIZE_CH1(64) |
IDMA32C_FP_UPDATE;
u64 fifo_partition = 0;
@@ -1079,7 +1079,7 @@ static void idma32_fifo_partition(struct dw_dma *dw)
/* Fill FIFO_PARTITION high bits (Channels 2..3, 6..7) */
fifo_partition |= value << 32;
- /* Program FIFO Partition registers - 128 bytes for each channel */
+ /* Program FIFO Partition registers - 64 bytes per channel */
idma32_writeq(dw, FIFO_PARTITION1, fifo_partition);
idma32_writeq(dw, FIFO_PARTITION0, fifo_partition);
}
--
2.19.2
This is the start of the stable review cycle for the 4.9.143 release.
There are 50 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu Dec 6 10:36:59 UTC 2018.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.143-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 4.9.143-rc1
Chris Fries <cfries(a)google.com>
kbuild: Set KBUILD_CFLAGS before incl. arch Makefile
Ard Biesheuvel <ard.biesheuvel(a)linaro.org>
efi/libstub: Make file I/O chunking x86-specific
Arnd Bergmann <arnd(a)arndb.de>
workqueue: avoid clang warning
Stefan Agner <stefan(a)agner.ch>
ARM: trusted_foundations: do not use naked function
Stefan Agner <stefan(a)agner.ch>
bus: arm-cci: remove unnecessary unreachable()
Stefan Agner <stefan(a)agner.ch>
ARM: 8767/1: add support for building ARM kernel with clang
Stefan Agner <stefan(a)agner.ch>
ARM: 8766/1: drop no-thumb-interwork in EABI mode
Alistair Strachan <astrachan(a)google.com>
efi/libstub: arm: support building with clang
YueHaibing <yuehaibing(a)huawei.com>
misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
Dexuan Cui <decui(a)microsoft.com>
Drivers: hv: vmbus: check the creation_status in vmbus_establish_gpadl()
Yu Zhao <yuzhao(a)google.com>
mm: use swp_offset as key in shmem_replace_page()
Martin Kelly <martin(a)martingkelly.com>
iio:st_magn: Fix enable device after trigger
Felipe Balbi <felipe.balbi(a)linux.intel.com>
Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
Michael Niewöhner <linux(a)mniewoehner.de>
usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
Kai-Heng Feng <kai.heng.feng(a)canonical.com>
USB: usb-storage: Add new IDs to ums-realtek
Josef Bacik <josef(a)toxicpanda.com>
btrfs: release metadata before running delayed refs
Richard Genoud <richard.genoud(a)gmail.com>
dmaengine: at_hdmac: fix module unloading
Richard Genoud <richard.genoud(a)gmail.com>
dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
Pan Bian <bianpan2016(a)163.com>
ext2: fix potential use after free
Takashi Iwai <tiwai(a)suse.de>
ALSA: sparc: Fix invalid snd_free_pages() at error path
Takashi Iwai <tiwai(a)suse.de>
ALSA: control: Fix race between adding and removing a user element
Takashi Iwai <tiwai(a)suse.de>
ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
Takashi Iwai <tiwai(a)suse.de>
ALSA: wss: Fix invalid snd_free_pages() at error path
Maximilian Heyne <mheyne(a)amazon.de>
fs: fix lost error code in dio_complete
Jiri Olsa <jolsa(a)kernel.org>
perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts()
Jiri Olsa <jolsa(a)kernel.org>
perf/x86/intel: Move branch tracing setup to the Intel-specific source file
Filipe Manana <fdmanana(a)suse.com>
Btrfs: ensure path name is null terminated at btrfs_control_ioctl
Max Filippov <jcmvbkbc(a)gmail.com>
xtensa: fix coprocessor context offset definitions
Max Filippov <jcmvbkbc(a)gmail.com>
xtensa: enable coprocessors that are being flushed
Wanpeng Li <wanpengli(a)tencent.com>
KVM: X86: Fix scan ioapic use-before-initialization
Jim Mattson <jmattson(a)google.com>
kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb
Junaid Shahid <junaids(a)google.com>
kvm: mmu: Fix race in emulated page table writes
Bernd Eckstein <3erndeckstein(a)gmail.com>
usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
Julian Wiedmann <jwi(a)linux.ibm.com>
s390/qeth: fix length check in SNMP processing
Pan Bian <bianpan2016(a)163.com>
rapidio/rionet: do not free skb before reading its length
Petr Machata <petrm(a)mellanox.com>
net: skb_scrub_packet(): Scrub offload_fwd_mark
Sasha Levin <sashal(a)kernel.org>
Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"
Matthias Schwarzott <zzam(a)gentoo.org>
media: em28xx: Fix use-after-free when disconnecting
Hugh Dickins <hughd(a)google.com>
mm/khugepaged: collapse_shmem() do not crash on Compound
Hugh Dickins <hughd(a)google.com>
mm/khugepaged: collapse_shmem() without freezing new_page
Hugh Dickins <hughd(a)google.com>
mm/khugepaged: minor reorderings in collapse_shmem()
Hugh Dickins <hughd(a)google.com>
mm/khugepaged: collapse_shmem() remember to clear holes
Hugh Dickins <hughd(a)google.com>
mm/khugepaged: fix crashes due to misaccounted holes
Mike Rapoport <rppt(a)linux.vnet.ibm.com>
shmem: introduce shmem_inode_acct_block
Mike Rapoport <rppt(a)linux.vnet.ibm.com>
shmem: shmem_charge: verify max_block is not exceeded before inode update
Hugh Dickins <hughd(a)google.com>
mm/khugepaged: collapse_shmem() stop if punched or truncated
Hugh Dickins <hughd(a)google.com>
mm/huge_memory: fix lockdep complaint on 32-bit i_size_read()
Hugh Dickins <hughd(a)google.com>
mm/huge_memory: splitting set mapping+index before unfreeze
Konstantin Khlebnikov <khlebnikov(a)yandex-team.ru>
mm/huge_memory.c: reorder operations in __split_huge_page_tail()
Hugh Dickins <hughd(a)google.com>
mm/huge_memory: rename freeze_page() to unmap_page()
-------------
Diffstat:
Makefile | 69 ++++++-------
arch/arm/Makefile | 2 +-
arch/arm/boot/compressed/Makefile | 2 +-
arch/arm/firmware/trusted_foundations.c | 14 ++-
arch/x86/events/core.c | 20 ----
arch/x86/events/intel/core.c | 52 +++++++---
arch/x86/events/perf_event.h | 13 ++-
arch/x86/kvm/mmu.c | 27 ++----
arch/x86/kvm/svm.c | 20 +++-
arch/x86/kvm/x86.c | 3 +-
arch/xtensa/kernel/asm-offsets.c | 16 +--
arch/xtensa/kernel/process.c | 5 +-
drivers/bus/arm-cci.c | 2 -
drivers/dma/at_hdmac.c | 10 +-
drivers/firmware/efi/libstub/Makefile | 3 +-
drivers/firmware/efi/libstub/efi-stub-helper.c | 11 ++-
drivers/hv/channel.c | 8 ++
drivers/iio/magnetometer/st_magn_buffer.c | 12 +--
drivers/media/usb/em28xx/em28xx-dvb.c | 3 +-
drivers/misc/mic/scif/scif_rma.c | 2 +-
drivers/net/rionet.c | 2 +-
drivers/net/usb/ipheth.c | 10 +-
drivers/net/wireless/ti/wlcore/cmd.c | 6 --
drivers/s390/net/qeth_core_main.c | 27 +++---
drivers/usb/core/quirks.c | 3 +
drivers/usb/dwc3/gadget.c | 5 -
drivers/usb/storage/unusual_realtek.h | 10 ++
fs/btrfs/super.c | 1 +
fs/btrfs/transaction.c | 6 +-
fs/direct-io.c | 4 +-
fs/ext2/xattr.c | 2 +-
include/linux/workqueue.h | 4 +-
mm/huge_memory.c | 79 +++++++--------
mm/khugepaged.c | 129 ++++++++++++++-----------
mm/shmem.c | 97 ++++++++++---------
net/core/skbuff.c | 4 +
sound/core/control.c | 80 ++++++++-------
sound/isa/wss/wss_lib.c | 2 -
sound/pci/ac97/ac97_codec.c | 2 +-
sound/sparc/cs4231.c | 8 +-
40 files changed, 424 insertions(+), 351 deletions(-)
Hello,
We ran automated tests on a recent commit from this kernel tree:
Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
Commit: 61c68f2a2af0 Linux 4.19.7
The results of these automated tests are provided below.
Overall result: PASSED
Patch merge: OK
Compile: OK
Kernel tests: OK
Please reply to this email if you have any questions about the tests that we
ran or if you have any suggestions on how to make future tests more effective.
,-. ,-.
( C ) ( K ) Continuous
`-',-.`-' Kernel
( I ) Integration
`-'
______________________________________________________________________________
Compile testing
---------------
We compiled the kernel for 2 architectures:
aarch64:
make options: make INSTALL_MOD_STRIP=1 -j56 targz-pkg
configuration: https://artifacts.cki-project.org/builds/aarch64/61c68f2a2af0f3dc531053524f…
x86_64:
make options: make INSTALL_MOD_STRIP=1 -j56 targz-pkg
configuration: https://artifacts.cki-project.org/builds/x86_64/61c68f2a2af0f3dc531053524f9…
Hardware testing
----------------
We booted each kernel and ran the following tests:
arm64:
/distribution/kpkginstall (boot test)
LTP lite - release 20180515
xfstests: ext4
xfstests: xfs
/kernel/misc/amtu
x86_64:
/distribution/kpkginstall (boot test)
LTP lite - release 20180515
xfstests: ext4
xfstests: xfs
/kernel/misc/amtu
I'm announcing the release of the 4.14.86 kernel.
All users of the 4.14 kernel series must upgrade.
The updated 4.14.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.14.y
and can be browsed at the normal kernel.org git web browser:
http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/kernel-parameters.txt | 56
Documentation/userspace-api/spec_ctrl.rst | 9
Makefile | 2
arch/arm/boot/dts/rk3288-veyron.dtsi | 6
arch/arm64/boot/dts/rockchip/rk3399-puma-haikou.dts | 2
arch/x86/Kconfig | 12
arch/x86/Makefile | 5
arch/x86/events/core.c | 20
arch/x86/events/intel/core.c | 52
arch/x86/events/perf_event.h | 13
arch/x86/include/asm/cpufeatures.h | 2
arch/x86/include/asm/msr-index.h | 5
arch/x86/include/asm/nospec-branch.h | 44
arch/x86/include/asm/spec-ctrl.h | 20
arch/x86/include/asm/switch_to.h | 3
arch/x86/include/asm/thread_info.h | 20
arch/x86/include/asm/tlbflush.h | 8
arch/x86/kernel/cpu/amd.c | 4
arch/x86/kernel/cpu/bugs.c | 510 ++++++-
arch/x86/kernel/cpu/common.c | 9
arch/x86/kernel/cpu/mcheck/mce_amd.c | 19
arch/x86/kernel/fpu/signal.c | 4
arch/x86/kernel/process.c | 101 +
arch/x86/kernel/process.h | 39
arch/x86/kernel/process_32.c | 10
arch/x86/kernel/process_64.c | 10
arch/x86/kvm/cpuid.c | 10
arch/x86/kvm/mmu.c | 27
arch/x86/kvm/svm.c | 28
arch/x86/kvm/x86.c | 4
arch/x86/mm/tlb.c | 115 +
arch/xtensa/kernel/asm-offsets.c | 16
arch/xtensa/kernel/process.c | 5
arch/xtensa/kernel/ptrace.c | 42
drivers/android/binder.c | 21
drivers/android/binder_alloc.c | 14
drivers/android/binder_alloc.h | 3
drivers/dma/at_hdmac.c | 10
drivers/hv/channel.c | 8
drivers/iio/magnetometer/st_magn_buffer.c | 12
drivers/media/usb/em28xx/em28xx-dvb.c | 3
drivers/misc/mic/scif/scif_rma.c | 2
drivers/mtd/ubi/vtbl.c | 20
drivers/net/ethernet/cavium/thunder/nicvf_main.c | 9
drivers/net/ethernet/cavium/thunder/nicvf_queues.c | 4
drivers/net/rionet.c | 2
drivers/net/usb/ipheth.c | 10
drivers/net/virtio_net.c | 13
drivers/net/wireless/ath/wil6210/wmi.c | 8
drivers/net/wireless/ti/wlcore/cmd.c | 6
drivers/pci/dwc/pci-layerscape.c | 2
drivers/s390/net/qeth_core_main.c | 27
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 2
drivers/staging/vc04_services/interface/vchiq_arm/vchiq_arm.c | 7
drivers/usb/core/quirks.c | 3
drivers/usb/dwc3/gadget.c | 5
drivers/usb/storage/unusual_realtek.h | 10
fs/btrfs/Makefile | 2
fs/btrfs/disk-io.c | 153 --
fs/btrfs/extent-tree.c | 86 +
fs/btrfs/relocation.c | 1
fs/btrfs/super.c | 1
fs/btrfs/transaction.c | 6
fs/btrfs/tree-checker.c | 649 ++++++++++
fs/btrfs/tree-checker.h | 38
fs/btrfs/volumes.c | 30
fs/btrfs/volumes.h | 2
fs/ceph/mds_client.c | 11
fs/direct-io.c | 4
fs/ext2/xattr.c | 2
fs/f2fs/checkpoint.c | 43
fs/f2fs/data.c | 52
fs/f2fs/f2fs.h | 41
fs/f2fs/file.c | 21
fs/f2fs/inode.c | 78 +
fs/f2fs/node.c | 11
fs/f2fs/recovery.c | 6
fs/f2fs/segment.c | 13
fs/f2fs/segment.h | 24
fs/f2fs/super.c | 96 +
fs/xfs/libxfs/xfs_attr.c | 9
include/linux/bpf_verifier.h | 1
include/linux/ceph/auth.h | 8
include/linux/ceph/ceph_features.h | 7
include/linux/ceph/messenger.h | 6
include/linux/ceph/msgr.h | 2
include/linux/jump_label.h | 7
include/linux/ptrace.h | 4
include/linux/sched.h | 9
include/linux/sched/smt.h | 20
include/linux/skbuff.h | 18
include/net/tls.h | 4
include/uapi/linux/btrfs_tree.h | 1
include/uapi/linux/prctl.h | 1
kernel/bpf/verifier.c | 62
kernel/cpu.c | 14
kernel/jump_label.c | 12
kernel/sched/core.c | 19
kernel/sched/fair.c | 4
kernel/sched/sched.h | 4
lib/test_kmod.c | 1
mm/huge_memory.c | 79 -
mm/khugepaged.c | 129 +
mm/shmem.c | 12
net/ceph/auth.c | 16
net/ceph/auth_x.c | 223 ++-
net/ceph/auth_x_protocol.h | 7
net/ceph/messenger.c | 93 -
net/ceph/osd_client.c | 11
net/core/skbuff.c | 4
net/packet/af_packet.c | 4
net/tls/tls_main.c | 124 +
net/tls/tls_sw.c | 13
scripts/Makefile.build | 2
sound/core/control.c | 80 -
sound/isa/wss/wss_lib.c | 2
sound/pci/ac97/ac97_codec.c | 2
sound/pci/hda/patch_realtek.c | 9
sound/sparc/cs4231.c | 8
119 files changed, 2926 insertions(+), 908 deletions(-)
Alexei Starovoitov (1):
bpf: Prevent memory disambiguation attack
Anisse Astier (1):
ALSA: hda/realtek - fix headset mic detection for MSI MS-B171
Arnd Bergmann (1):
btrfs: tree-checker: use %zu format string for size_t
Ben Hutchings (1):
f2fs: Add sanity_check_inode() function
Ben Wolsieffer (1):
staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION
Bernd Eckstein (1):
usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
Boris Pismenny (1):
tls: Use correct sk->sk_prot for IPV6
Borislav Petkov (1):
x86/MCE/AMD: Fix the thresholding machinery initialization order
Chao Yu (9):
f2fs: clean up with is_valid_blkaddr()
f2fs: introduce and spread verify_blkaddr
f2fs: fix to do sanity check with secs_per_zone
f2fs: fix to do sanity check with extra_attr feature
f2fs: fix to do sanity check with user_block_count
f2fs: fix to do sanity check with node footer and iblocks
f2fs: fix to do sanity check with block address in main area
f2fs: fix to do sanity check with i_extra_isize
f2fs: fix to do sanity check with cp_pack_start_sum
Christoph Muellner (1):
arm64: dts: rockchip: Fix PCIe reset polarity for rk3399-puma-haikou.
Darrick J. Wong (1):
xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE
David Sterba (1):
btrfs: tree-check: reduce stack consumption in check_dir_item
Dexuan Cui (1):
Drivers: hv: vmbus: check the creation_status in vmbus_establish_gpadl()
Felipe Balbi (1):
Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
Filipe Manana (1):
Btrfs: ensure path name is null terminated at btrfs_control_ioctl
Greg Kroah-Hartman (1):
Linux 4.14.86
Gu Jinxiang (1):
btrfs: validate type when reading a chunk
Heiko Stuebner (1):
ARM: dts: rockchip: Remove @0 from the veyron memory node
Hou Zhiqiang (1):
PCI: layerscape: Fix wrong invocation of outbound window disable accessor
Hugh Dickins (9):
mm/huge_memory: rename freeze_page() to unmap_page()
mm/huge_memory: splitting set mapping+index before unfreeze
mm/huge_memory: fix lockdep complaint on 32-bit i_size_read()
mm/khugepaged: collapse_shmem() stop if punched or truncated
mm/khugepaged: fix crashes due to misaccounted holes
mm/khugepaged: collapse_shmem() remember to clear holes
mm/khugepaged: minor reorderings in collapse_shmem()
mm/khugepaged: collapse_shmem() without freezing new_page
mm/khugepaged: collapse_shmem() do not crash on Compound
Ilya Dryomov (8):
libceph: store ceph_auth_handshake pointer in ceph_connection
libceph: factor out __prepare_write_connect()
libceph: factor out __ceph_x_decrypt()
libceph: factor out encrypt_authorizer()
libceph: add authorizer challenge
libceph: implement CEPHX_V2 calculation mode
libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()
libceph: check authorizer reply/challenge length before reading
Ilya Lesokhin (4):
tls: Add function to update the TLS socket configuration
tls: Fix TLS ulp context leak, when TLS_TX setsockopt is not used.
tls: Avoid copying crypto_info again after cipher_type check.
tls: don't override sk_write_space if tls_set_sw_offload fails.
Jaegeuk Kim (3):
f2fs: sanity check on sit entry
f2fs: enhance sanity_check_raw_super() to avoid potential overflow
f2fs: fix missing up_read
Jason Wang (2):
virtio-net: disable guest csum during XDP set
virtio-net: fail XDP set if guest csum is negotiated
Jim Mattson (1):
kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb
Jiri Kosina (3):
x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
x86/speculation: Apply IBPB more strictly to avoid cross-process data leak
x86/speculation: Propagate information about RSB filling mitigation to sysfs
Jiri Olsa (2):
perf/x86/intel: Move branch tracing setup to the Intel-specific source file
perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts()
Josef Bacik (1):
btrfs: release metadata before running delayed refs
Julian Wiedmann (1):
s390/qeth: fix length check in SNMP processing
Junaid Shahid (1):
kvm: mmu: Fix race in emulated page table writes
Kai-Heng Feng (1):
USB: usb-storage: Add new IDs to ums-realtek
Kailang Yang (1):
ALSA: hda/realtek - Support ALC300
Konrad Rzeszutek Wilk (3):
x86/bugs: Add AMD's variant of SSB_NO
x86/bugs: Add AMD's SPEC_CTRL MSR usage
x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features
Konstantin Khlebnikov (1):
mm/huge_memory.c: reorder operations in __split_huge_page_tail()
Larry Finger (1):
staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station
Lior David (1):
wil6210: missing length check in wmi_set_ie
Liran Alon (1):
KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
Lorenzo Bianconi (2):
net: thunderx: set xdp_prog to NULL if bpf_prog_add fails
net: thunderx: set tso_hdrs pointer to NULL in nicvf_free_snd_queue
Luis Chamberlain (1):
lib/test_kmod.c: fix rmmod double free
Martin Kelly (1):
iio:st_magn: Fix enable device after trigger
Matthias Schwarzott (1):
media: em28xx: Fix use-after-free when disconnecting
Max Filippov (3):
xtensa: enable coprocessors that are being flushed
xtensa: fix coprocessor context offset definitions
xtensa: fix coprocessor part of ptrace_{get,set}xregs
Maximilian Heyne (1):
fs: fix lost error code in dio_complete
Michael Niewöhner (1):
usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
Pan Bian (3):
rapidio/rionet: do not free skb before reading its length
btrfs: relocation: set trans to be NULL after ending transaction
ext2: fix potential use after free
Peter Zijlstra (1):
sched/core: Fix cpu.max vs. cpuhotplug deadlock
Peter Zijlstra (Intel) (1):
sched/smt: Make sched_smt_present track topology
Petr Machata (1):
net: skb_scrub_packet(): Scrub offload_fwd_mark
Qu Wenruo (13):
btrfs: Verify that every chunk has corresponding block group at mount time
btrfs: Refactor check_leaf function for later expansion
btrfs: Check if item pointer overlaps with the item itself
btrfs: Add sanity check for EXTENT_DATA when reading out leaf
btrfs: Add checker for EXTENT_CSUM
btrfs: Move leaf and node validation checker to tree-checker.c
btrfs: tree-checker: Enhance btrfs_check_node output
btrfs: tree-checker: Fix false panic for sanity test
btrfs: tree-checker: Add checker for dir item
btrfs: tree-checker: Verify block_group_item
btrfs: tree-checker: Detect invalid and empty essential trees
btrfs: Check that each block group has corresponding chunk at mount time
btrfs: tree-checker: Check level for leaves and nodes
Richard Genoud (2):
dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
dmaengine: at_hdmac: fix module unloading
Richard Weinberger (1):
ubi: Initialize Fastmap checkmapping correctly
Sasha Levin (1):
Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"
Sebastian Andrzej Siewior (1):
x86/fpu: Disable bottom halves while loading FPU registers
Shaokun Zhang (1):
btrfs: tree-checker: Fix misleading group system information
Takashi Iwai (4):
ALSA: wss: Fix invalid snd_free_pages() at error path
ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
ALSA: control: Fix race between adding and removing a user element
ALSA: sparc: Fix invalid snd_free_pages() at error path
Thomas Gleixner (21):
x86/speculation: Rename SSBD update functions
x86/Kconfig: Select SCHED_SMT if SMP enabled
sched/smt: Expose sched_smt_present static key
x86/speculation: Rework SMT state change
x86/l1tf: Show actual SMT state
x86/speculation: Reorder the spec_v2 code
x86/speculation: Mark string arrays const correctly
x86/speculataion: Mark command line parser data __initdata
x86/speculation: Unify conditional spectre v2 print functions
x86/speculation: Add command line control for indirect branch speculation
x86/process: Consolidate and simplify switch_to_xtra() code
x86/speculation: Avoid __switch_to_xtra() calls
x86/speculation: Prepare for conditional IBPB in switch_mm()
ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS
x86/speculation: Split out TIF update
x86/speculation: Prevent stale SPEC_CTRL msr content
x86/speculation: Prepare arch_smt_update() for PRCTL mode
x86/speculation: Add prctl() control for indirect branch speculation
x86/speculation: Enable prctl mode for spectre_v2_user
x86/speculation: Add seccomp Spectre v2 user space protection mode
x86/speculation: Provide IBPB always command line options
Tim Chen (7):
x86/speculation: Update the TIF_SSBD comment
x86/speculation: Clean up spectre_v2_parse_cmdline()
x86/speculation: Remove unnecessary ret variable in cpu_show_common()
x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common()
x86/speculation: Disable STIBP when enhanced IBRS is in use
x86/speculation: Reorganize speculation control MSRs update
x86/speculation: Prepare for per task indirect branch speculation control
Todd Kjos (1):
binder: fix race that allows malicious free of live buffer
Tom Lendacky (2):
x86/bugs: Update when to check for the LS_CFG SSBD mitigation
x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR
Vakul Garg (1):
net/tls: Fixed return value when tls_complete_pending_work() fails
Wanpeng Li (1):
KVM: X86: Fix scan ioapic use-before-initialization
Willem de Bruijn (1):
packet: copy user buffers before orphan or clone
Yu Zhao (1):
mm: use swp_offset as key in shmem_replace_page()
YueHaibing (1):
misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
Yunlei He (1):
f2fs: check blkaddr more accuratly before issue a bio
Zhenzhong Duan (3):
x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC variant
x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support
x86/retpoline: Remove minimal retpoline support