This is the start of the stable review cycle for the 6.6.62 release.
There are 48 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sun, 17 Nov 2024 06:37:07 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.62-rc1…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.6.62-rc1
Linus Torvalds <torvalds(a)linux-foundation.org>
9p: fix slab cache name creation for real
Hugh Dickins <hughd(a)google.com>
mm/thp: fix deferred split unqueue naming and locking
Kefeng Wang <wangkefeng.wang(a)huawei.com>
mm: refactor folio_undo_large_rmappable()
Matthew Wilcox (Oracle) <willy(a)infradead.org>
mm: always initialise folio->_deferred_list
Matthew Wilcox (Oracle) <willy(a)infradead.org>
mm: support order-1 folios in the page cache
Ryan Roberts <ryan.roberts(a)arm.com>
mm/readahead: do not allow order-1 folio
Hugh Dickins <hughd(a)google.com>
mm: add page_rmappable_folio() wrapper
Qun-Wei Lin <qun-wei.lin(a)mediatek.com>
mm: krealloc: Fix MTE false alarm in __do_krealloc
Hagar Hemdan <hagarhem(a)amazon.com>
io_uring: fix possible deadlock in io_register_iowq_max_workers()
Hou Tao <houtao1(a)huawei.com>
bpf: Check validity of link->type in bpf_link_show_fdinfo()
Reinhard Speyerer <rspmn(a)arcor.de>
net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_micfil: Add sample rate constraint
Yanteng Si <siyanteng(a)cqsoftware.com.cn>
LoongArch: Use "Exception return address" to comment ERA
Jack Yu <jack.yu(a)realtek.com>
ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
Cyan Yang <cyan.yang(a)sifive.com>
RISCV: KVM: use raw_spinlock for critical section in imsic
Hans de Goede <hdegoede(a)redhat.com>
HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
Kenneth Albanowski <kenalba(a)chromium.org>
HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
Alessandro Zanni <alessandro.zanni87(a)gmail.com>
fs: Fix uninitialized value issue in from_kuid and from_kgid
Ilya Dudikov <ilyadud(a)mail.ru>
ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
Christian Heusel <christian(a)heusel.eu>
ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
Jiawei Ye <jiawei.ye(a)foxmail.com>
bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
Zijian Zhang <zijianzhang(a)bytedance.com>
bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
Yuan Can <yuancan(a)huawei.com>
vDPA/ifcvf: Fix pci_read_config_byte() return code handling
Breno Leitao <leitao(a)debian.org>
nvme/host: Fix RCU list traversal to use SRCU primitive
Kuniyuki Iwashima <kuniyu(a)amazon.com>
smb: client: Fix use-after-free of network namespace.
Nilay Shroff <nilay(a)linux.ibm.com>
nvme: make keep-alive synchronous operation
Nilay Shroff <nilay(a)linux.ibm.com>
nvme-loop: flush off pending I/O while shutting down loop controller
Linus Walleij <linus.walleij(a)linaro.org>
net: phy: mdio-bcm-unimac: Add BCM6846 support
Michael Ellerman <mpe(a)ellerman.id.au>
powerpc/powernv: Free name on error in opal_event_init()
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Accounting pdd vram_usage for svm
Keith Busch <kbusch(a)kernel.org>
nvme-multipath: defer partition scanning
Will Deacon <will(a)kernel.org>
kasan: Disable Software Tag-Based KASAN with GCC
Showrya M N <showrya(a)chelsio.com>
RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
Ian Forbes <ian.forbes(a)broadcom.com>
drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS
Julian Vetter <jvetter(a)kalrayinc.com>
sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Disable hash algorithms
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: api - Fix liveliness check in crypto_alg_tested
Rik van Riel <riel(a)surriel.com>
bpf: use kvzmalloc to allocate BPF verifier environment
Greg Joyce <gjoyce(a)linux.ibm.com>
nvme: disable CC.CRIME (NVME_CC_CRIME)
Robin Murphy <robin.murphy(a)arm.com>
iommu/arm-smmu: Clarify MMU-500 CPRE workaround
WangYuli <wangyuli(a)uniontech.com>
HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
Stefan Blum <stefanblum2004(a)gmail.com>
HID: multitouch: Add support for B2402FVA track point
SurajSonawane2415 <surajsonawane0215(a)gmail.com>
block: Fix elevator_get_default() checking for NULL q->tag_set
Hannes Reinecke <hare(a)suse.de>
nvme: tcp: avoid race between queue_lock lock and destroy
Sergey Matsievskiy <matsievskiysv(a)gmail.com>
irqchip/ocelot: Fix trigger register address
Eduard Zingerman <eddyz87(a)gmail.com>
selftests/bpf: Verify that sync_linked_regs preserves subreg_def
Pedro Falcato <pedro.falcato(a)gmail.com>
9p: Avoid creating multiple slab caches with the same name
Dominique Martinet <asmadeus(a)codewreck.org>
9p: v9fs_fid_find: also lookup by inode if not found dentry
-------------
Diffstat:
Makefile | 4 +-
arch/loongarch/include/asm/loongarch.h | 2 +-
arch/powerpc/platforms/powernv/opal-irqchip.c | 1 +
arch/riscv/kvm/aia_imsic.c | 8 +--
block/elevator.c | 4 +-
crypto/algapi.c | 2 +-
drivers/crypto/marvell/cesa/hash.c | 12 ++--
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 6 +-
drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_process.c | 4 +-
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 26 +++++++++
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 3 -
drivers/hid/hid-ids.h | 1 +
drivers/hid/hid-lenovo.c | 8 +++
drivers/hid/hid-multitouch.c | 13 +++++
drivers/infiniband/sw/siw/siw_qp_tx.c | 2 +
drivers/iommu/arm/arm-smmu/arm-smmu-impl.c | 4 +-
drivers/irqchip/irq-mscc-ocelot.c | 4 +-
drivers/net/mdio/mdio-bcm-unimac.c | 1 +
drivers/net/usb/qmi_wwan.c | 1 +
drivers/nvme/host/core.c | 52 +++++++++--------
drivers/nvme/host/multipath.c | 33 +++++++++++
drivers/nvme/host/nvme.h | 1 +
drivers/nvme/host/tcp.c | 7 ++-
drivers/nvme/target/loop.c | 13 +++++
drivers/vdpa/ifcvf/ifcvf_base.c | 2 +-
fs/9p/fid.c | 5 +-
fs/ocfs2/file.c | 9 ++-
fs/smb/client/connect.c | 14 ++++-
include/net/tls.h | 12 +++-
io_uring/io_uring.c | 5 ++
kernel/bpf/syscall.c | 14 +++--
kernel/bpf/verifier.c | 4 +-
lib/Kconfig.kasan | 7 ++-
mm/filemap.c | 2 -
mm/huge_memory.c | 59 ++++++++++++-------
mm/hugetlb.c | 1 +
mm/internal.h | 27 ++++++++-
mm/memcontrol.c | 29 ++++++++++
mm/mempolicy.c | 17 +-----
mm/page_alloc.c | 21 +++----
mm/readahead.c | 11 +---
mm/slab_common.c | 2 +-
net/9p/client.c | 12 +++-
net/core/filter.c | 2 +-
sound/Kconfig | 2 +-
sound/soc/amd/yc/acp6x-mach.c | 14 +++++
sound/soc/codecs/rt722-sdca-sdw.c | 2 +-
sound/soc/fsl/fsl_micfil.c | 38 ++++++++++++
.../selftests/bpf/progs/verifier_scalar_ids.c | 67 ++++++++++++++++++++++
52 files changed, 456 insertions(+), 144 deletions(-)
The advertised resizable BAR size was fixed in commit 72e34b8593e0 ("PCI:
dwc: endpoint: Fix advertised resizable BAR size").
Commit 867ab111b242 ("PCI: dwc: ep: Add a generic dw_pcie_ep_linkdown() API
to handle Link Down event") was included shortly after this, and moved the
code to another function. When the code was moved, this fix was mistakenly
lost.
According to the spec, it is illegal to not have a bit set in
PCI_REBAR_CAP, and 1 MB is the smallest size allowed.
Set bit 4 in PCI_REBAR_CAP, so that we actually advertise support for a
1 MB BAR size.
Cc: stable(a)vger.kernel.org
Fixes: 867ab111b242 ("PCI: dwc: ep: Add a generic dw_pcie_ep_linkdown() API to handle Link Down event")
Signed-off-by: Niklas Cassel <cassel(a)kernel.org>
---
drivers/pci/controller/dwc/pcie-designware-ep.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/pci/controller/dwc/pcie-designware-ep.c b/drivers/pci/controller/dwc/pcie-designware-ep.c
index 43ba5c6738df1..cc8ff4a014368 100644
--- a/drivers/pci/controller/dwc/pcie-designware-ep.c
+++ b/drivers/pci/controller/dwc/pcie-designware-ep.c
@@ -689,7 +689,7 @@ static void dw_pcie_ep_init_non_sticky_registers(struct dw_pcie *pci)
* for 1 MB BAR size only.
*/
for (i = 0; i < nbars; i++, offset += PCI_REBAR_CTRL)
- dw_pcie_writel_dbi(pci, offset + PCI_REBAR_CAP, 0x0);
+ dw_pcie_writel_dbi(pci, offset + PCI_REBAR_CAP, BIT(4));
}
dw_pcie_setup(pci);
--
2.47.0
Hi,
Please backport commit:
0faf84caee63 ("cpufreq: Replace deprecated strncpy() with strscpy()")
to stable trees 5.10.y, 5.15.y, 6.1.y and 6.6.y. This commit fixes possible
Buffer not null terminated of "policy->last_governor" and "default_governor"
in __cpufreq_offline() and cpufreq_core_init().
This bug was discovered and resolved using Coverity Static Analysis
Security Testing (SAST) by Synopsys, Inc.
Amazon Web Services Development Center Germany GmbH
Krausenstr. 38
10117 Berlin
Geschaeftsfuehrung: Christian Schlaeger, Jonathan Weiss
Eingetragen am Amtsgericht Charlottenburg unter HRB 257764 B
Sitz: Berlin
Ust-ID: DE 365 538 597
From: Chuck Lever <chuck.lever(a)oracle.com>
Address several bugs in v6.6's libfs/shmemfs, including
CVE-2024-46701.
Link: https://lore.kernel.org/stable/976C0DD5-4337-4C7D-92C6-A38C2EC335A4@oracle.…
I'm still running the usual set of regression tests, but so far this
set looks stable. I'm interested in hearing review comments and test
results.
Branch for testing: https://git.kernel.org/pub/scm/linux/kernel/git/cel/linux.git/log/?h=nfsd-6…
Chuck Lever (5):
libfs: Define a minimum directory offset
libfs: Add simple_offset_empty()
libfs: Fix simple_offset_rename_exchange()
libfs: Add simple_offset_rename() API
shmem: Fix shmem_rename2()
yangerkun (1):
libfs: fix infinite directory reads for offset dir
fs/libfs.c | 135 +++++++++++++++++++++++++++++++++++++--------
include/linux/fs.h | 3 +
mm/shmem.c | 7 +--
3 files changed, 119 insertions(+), 26 deletions(-)
--
2.47.0
The patch titled
Subject: mm: revert "mm: shmem: fix data-race in shmem_getattr()"
has been added to the -mm mm-hotfixes-unstable branch. Its filename is
mm-revert-mm-shmem-fix-data-race-in-shmem_getattr.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-hotfixes-unstable branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Andrew Morton <akpm(a)linux-foundation.org>
Subject: mm: revert "mm: shmem: fix data-race in shmem_getattr()"
Date: Fri Nov 15 04:57:24 PM PST 2024
Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as
suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over
NFS.
Link: https://lkml.kernel.org/r/ZzdxKF39VEmXSSyN@tissot.1015granger.net [1]
Fixes: https://lkml.kernel.org/r/ZzdxKF39VEmXSSyN@tissot.1015granger.net
Cc: Chuck Lever <chuck.lever(a)oracle.com>
Cc: Hugh Dickins <hughd(a)google.com>
Cc: Jeongjun Park <aha310510(a)gmail.com>
Cc: Yu Zhao <yuzhao(a)google.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/shmem.c | 2 --
1 file changed, 2 deletions(-)
--- a/mm/shmem.c~mm-revert-mm-shmem-fix-data-race-in-shmem_getattr
+++ a/mm/shmem.c
@@ -1166,9 +1166,7 @@ static int shmem_getattr(struct mnt_idma
stat->attributes_mask |= (STATX_ATTR_APPEND |
STATX_ATTR_IMMUTABLE |
STATX_ATTR_NODUMP);
- inode_lock_shared(inode);
generic_fillattr(idmap, request_mask, inode, stat);
- inode_unlock_shared(inode);
if (shmem_huge_global_enabled(inode, 0, 0, false, NULL, 0))
stat->blksize = HPAGE_PMD_SIZE;
_
Patches currently in -mm which might be from akpm(a)linux-foundation.org are
fs-proc-vmcorec-fix-warning-when-config_mmu=n.patch
mm-revert-mm-shmem-fix-data-race-in-shmem_getattr.patch