- Linux-stable-mirror - lists.linaro.org

FAILED: patch "[PATCH] mptcp: update local address flags when setting it" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x e0266319413d5d687ba7b6df7ca99e4b9724a4f2 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024111758-headcount-securely-4e49@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From e0266319413d5d687ba7b6df7ca99e4b9724a4f2 Mon Sep 17 00:00:00 2001 From: Geliang Tang <geliang(a)kernel.org> Date: Tue, 12 Nov 2024 20:18:33 +0100 Subject: [PATCH] mptcp: update local address flags when setting it Just like in-kernel pm, when userspace pm does set_flags, it needs to send out MP_PRIO signal, and also modify the flags of the corresponding address entry in the local address list. This patch implements the missing logic. Traverse all address entries on userspace_pm_local_addr_list to find the local address entry, if bkup is true, set the flags of this entry with FLAG_BACKUP, otherwise, clear FLAG_BACKUP. Fixes: 892f396c8e68 ("mptcp: netlink: issue MP_PRIO signals from userspace PMs") Cc: stable(a)vger.kernel.org Signed-off-by: Geliang Tang <tanggeliang(a)kylinos.cn> Reviewed-by: Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Signed-off-by: Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Link: https://patch.msgid.link/20241112-net-mptcp-misc-6-12-pm-v1-1-b835580cefa8@… Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> diff --git a/net/mptcp/pm_userspace.c b/net/mptcp/pm_userspace.c index 56dfea9862b7..3f888bfe1462 100644 --- a/net/mptcp/pm_userspace.c +++ b/net/mptcp/pm_userspace.c @@ -560,6 +560,7 @@ int mptcp_userspace_pm_set_flags(struct sk_buff *skb, struct genl_info *info) struct nlattr *token = info->attrs[MPTCP_PM_ATTR_TOKEN]; struct nlattr *attr = info->attrs[MPTCP_PM_ATTR_ADDR]; struct net *net = sock_net(skb->sk); + struct mptcp_pm_addr_entry *entry; struct mptcp_sock *msk; int ret = -EINVAL; struct sock *sk; @@ -601,6 +602,17 @@ int mptcp_userspace_pm_set_flags(struct sk_buff *skb, struct genl_info *info) if (loc.flags & MPTCP_PM_ADDR_FLAG_BACKUP) bkup = 1; + spin_lock_bh(&msk->pm.lock); + list_for_each_entry(entry, &msk->pm.userspace_pm_local_addr_list, list) { + if (mptcp_addresses_equal(&entry->addr, &loc.addr, false)) { + if (bkup) + entry->flags |= MPTCP_PM_ADDR_FLAG_BACKUP; + else + entry->flags &= ~MPTCP_PM_ADDR_FLAG_BACKUP; + } + } + spin_unlock_bh(&msk->pm.lock); + lock_sock(sk); ret = mptcp_pm_nl_mp_prio_send_ack(msk, &loc.addr, &rem.addr, bkup); release_sock(sk);

3 months, 1 week

1
0
0 0

FAILED: patch "[PATCH] mm: page_alloc: move mlocked flag clearance into" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x 66edc3a5894c74f8887c8af23b97593a0dd0df4d # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024111716-active-chess-e47f@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 66edc3a5894c74f8887c8af23b97593a0dd0df4d Mon Sep 17 00:00:00 2001 From: Roman Gushchin <roman.gushchin(a)linux.dev> Date: Wed, 6 Nov 2024 19:53:54 +0000 Subject: [PATCH] mm: page_alloc: move mlocked flag clearance into free_pages_prepare() Syzbot reported a bad page state problem caused by a page being freed using free_page() still having a mlocked flag at free_pages_prepare() stage: BUG: Bad page state in process syz.5.504 pfn:61f45 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61f45 flags: 0xfff00000080204(referenced|workingset|mlocked|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000080204 0000000000000000 dead000000000122 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), pid 8443, tgid 8442 (syz.5.504), ts 201884660643, free_ts 201499827394 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1537 prep_new_page mm/page_alloc.c:1545 [inline] get_page_from_freelist+0x303f/0x3190 mm/page_alloc.c:3457 __alloc_pages_noprof+0x292/0x710 mm/page_alloc.c:4733 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265 kvm_coalesced_mmio_init+0x1f/0xf0 virt/kvm/coalesced_mmio.c:99 kvm_create_vm virt/kvm/kvm_main.c:1235 [inline] kvm_dev_ioctl_create_vm virt/kvm/kvm_main.c:5488 [inline] kvm_dev_ioctl+0x12dc/0x2240 virt/kvm/kvm_main.c:5530 __do_compat_sys_ioctl fs/ioctl.c:1007 [inline] __se_compat_sys_ioctl+0x510/0xc90 fs/ioctl.c:950 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386 do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e page last free pid 8399 tgid 8399 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_folios+0xf12/0x18d0 mm/page_alloc.c:2686 folios_put_refs+0x76c/0x860 mm/swap.c:1007 free_pages_and_swap_cache+0x5c8/0x690 mm/swap_state.c:335 __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline] tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:366 [inline] tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373 tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465 exit_mmap+0x496/0xc40 mm/mmap.c:1926 __mmput+0x115/0x390 kernel/fork.c:1348 exit_mm+0x220/0x310 kernel/exit.c:571 do_exit+0x9b2/0x28e0 kernel/exit.c:926 do_group_exit+0x207/0x2c0 kernel/exit.c:1088 __do_sys_exit_group kernel/exit.c:1099 [inline] __se_sys_exit_group kernel/exit.c:1097 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1097 x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Modules linked in: CPU: 0 UID: 0 PID: 8442 Comm: syz.5.504 Not tainted 6.12.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 bad_page+0x176/0x1d0 mm/page_alloc.c:501 free_page_is_bad mm/page_alloc.c:918 [inline] free_pages_prepare mm/page_alloc.c:1100 [inline] free_unref_page+0xed0/0xf20 mm/page_alloc.c:2638 kvm_destroy_vm virt/kvm/kvm_main.c:1327 [inline] kvm_put_kvm+0xc75/0x1350 virt/kvm/kvm_main.c:1386 kvm_vcpu_release+0x54/0x60 virt/kvm/kvm_main.c:4143 __fput+0x23f/0x880 fs/file_table.c:431 task_work_run+0x24f/0x310 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0xa2f/0x28e0 kernel/exit.c:939 do_group_exit+0x207/0x2c0 kernel/exit.c:1088 __do_sys_exit_group kernel/exit.c:1099 [inline] __se_sys_exit_group kernel/exit.c:1097 [inline] __ia32_sys_exit_group+0x3f/0x40 kernel/exit.c:1097 ia32_sys_call+0x2624/0x2630 arch/x86/include/generated/asm/syscalls_32.h:253 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386 do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf745d579 Code: Unable to access opcode bytes at 0xf745d54f. RSP: 002b:00000000f75afd6c EFLAGS: 00000206 ORIG_RAX: 00000000000000fc RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f744cff4 RBP: 00000000f717ae61 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 </TASK> The problem was originally introduced by commit b109b87050df ("mm/munlock: replace clear_page_mlock() by final clearance"): it was focused on handling pagecache and anonymous memory and wasn't suitable for lower level get_page()/free_page() API's used for example by KVM, as with this reproducer. Fix it by moving the mlocked flag clearance down to free_page_prepare(). The bug itself if fairly old and harmless (aside from generating these warnings), aside from a small memory leak - "bad" pages are stopped from being allocated again. Link: https://lkml.kernel.org/r/20241106195354.270757-1-roman.gushchin@linux.dev Fixes: b109b87050df ("mm/munlock: replace clear_page_mlock() by final clearance") Signed-off-by: Roman Gushchin <roman.gushchin(a)linux.dev> Reported-by: syzbot+e985d3026c4fd041578e(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/6729f475.050a0220.701a.0019.GAE@google.com Acked-by: Hugh Dickins <hughd(a)google.com> Cc: Matthew Wilcox <willy(a)infradead.org> Cc: Sean Christopherson <seanjc(a)google.com> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> diff --git a/mm/page_alloc.c b/mm/page_alloc.c index c6c7bb3ea71b..216fbbfbedcf 100644 --- a/mm/page_alloc.c +++ b/mm/page_alloc.c @@ -1048,6 +1048,7 @@ __always_inline bool free_pages_prepare(struct page *page, bool skip_kasan_poison = should_skip_kasan_poison(page); bool init = want_init_on_free(); bool compound = PageCompound(page); + struct folio *folio = page_folio(page); VM_BUG_ON_PAGE(PageTail(page), page); @@ -1057,6 +1058,20 @@ __always_inline bool free_pages_prepare(struct page *page, if (memcg_kmem_online() && PageMemcgKmem(page)) __memcg_kmem_uncharge_page(page, order); + /* + * In rare cases, when truncation or holepunching raced with + * munlock after VM_LOCKED was cleared, Mlocked may still be + * found set here. This does not indicate a problem, unless + * "unevictable_pgs_cleared" appears worryingly large. + */ + if (unlikely(folio_test_mlocked(folio))) { + long nr_pages = folio_nr_pages(folio); + + __folio_clear_mlocked(folio); + zone_stat_mod_folio(folio, NR_MLOCK, -nr_pages); + count_vm_events(UNEVICTABLE_PGCLEARED, nr_pages); + } + if (unlikely(PageHWPoison(page)) && !order) { /* Do not let hwpoison pages hit pcplists/buddy */ reset_page_owner(page, order); diff --git a/mm/swap.c b/mm/swap.c index b8e3259ea2c4..59f30a981c6f 100644 --- a/mm/swap.c +++ b/mm/swap.c @@ -78,20 +78,6 @@ static void __page_cache_release(struct folio *folio, struct lruvec **lruvecp, lruvec_del_folio(*lruvecp, folio); __folio_clear_lru_flags(folio); } - - /* - * In rare cases, when truncation or holepunching raced with - * munlock after VM_LOCKED was cleared, Mlocked may still be - * found set here. This does not indicate a problem, unless - * "unevictable_pgs_cleared" appears worryingly large. - */ - if (unlikely(folio_test_mlocked(folio))) { - long nr_pages = folio_nr_pages(folio); - - __folio_clear_mlocked(folio); - zone_stat_mod_folio(folio, NR_MLOCK, -nr_pages); - count_vm_events(UNEVICTABLE_PGCLEARED, nr_pages); - } } /*

3 months, 1 week

1
0
0 0

FAILED: patch "[PATCH] KVM: nVMX: Treat vpid01 as current if L2 is active, but with" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x 2657b82a78f18528bef56dc1b017158490970873 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024111738-mystified-chunk-c6a7@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 2657b82a78f18528bef56dc1b017158490970873 Mon Sep 17 00:00:00 2001 From: Sean Christopherson <seanjc(a)google.com> Date: Thu, 31 Oct 2024 13:20:11 -0700 Subject: [PATCH] KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled When getting the current VPID, e.g. to emulate a guest TLB flush, return vpid01 if L2 is running but with VPID disabled, i.e. if VPID is disabled in vmcs12. Architecturally, if VPID is disabled, then the guest and host effectively share VPID=0. KVM emulates this behavior by using vpid01 when running an L2 with VPID disabled (see prepare_vmcs02_early_rare()), and so KVM must also treat vpid01 as the current VPID while L2 is active. Unconditionally treating vpid02 as the current VPID when L2 is active causes KVM to flush TLB entries for vpid02 instead of vpid01, which results in TLB entries from L1 being incorrectly preserved across nested VM-Enter to L2 (L2=>L1 isn't problematic, because the TLB flush after nested VM-Exit flushes vpid01). The bug manifests as failures in the vmx_apicv_test KVM-Unit-Test, as KVM incorrectly retains TLB entries for the APIC-access page across a nested VM-Enter. Opportunisticaly add comments at various touchpoints to explain the architectural requirements, and also why KVM uses vpid01 instead of vpid02. All credit goes to Chao, who root caused the issue and identified the fix. Link: https://lore.kernel.org/all/ZwzczkIlYGX+QXJz@intel.com Fixes: 2b4a5a5d5688 ("KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST") Cc: stable(a)vger.kernel.org Cc: Like Xu <like.xu.linux(a)gmail.com> Debugged-by: Chao Gao <chao.gao(a)intel.com> Reviewed-by: Chao Gao <chao.gao(a)intel.com> Tested-by: Chao Gao <chao.gao(a)intel.com> Link: https://lore.kernel.org/r/20241031202011.1580522-1-seanjc@google.com Signed-off-by: Sean Christopherson <seanjc(a)google.com> diff --git a/arch/x86/kvm/vmx/nested.c b/arch/x86/kvm/vmx/nested.c index a8e7bc04d9bf..931a7361c30f 100644 --- a/arch/x86/kvm/vmx/nested.c +++ b/arch/x86/kvm/vmx/nested.c @@ -1197,11 +1197,14 @@ static void nested_vmx_transition_tlb_flush(struct kvm_vcpu *vcpu, kvm_hv_nested_transtion_tlb_flush(vcpu, enable_ept); /* - * If vmcs12 doesn't use VPID, L1 expects linear and combined mappings - * for *all* contexts to be flushed on VM-Enter/VM-Exit, i.e. it's a - * full TLB flush from the guest's perspective. This is required even - * if VPID is disabled in the host as KVM may need to synchronize the - * MMU in response to the guest TLB flush. + * If VPID is disabled, then guest TLB accesses use VPID=0, i.e. the + * same VPID as the host, and so architecturally, linear and combined + * mappings for VPID=0 must be flushed at VM-Enter and VM-Exit. KVM + * emulates L2 sharing L1's VPID=0 by using vpid01 while running L2, + * and so KVM must also emulate TLB flush of VPID=0, i.e. vpid01. This + * is required if VPID is disabled in KVM, as a TLB flush (there are no + * VPIDs) still occurs from L1's perspective, and KVM may need to + * synchronize the MMU in response to the guest TLB flush. * * Note, using TLB_FLUSH_GUEST is correct even if nested EPT is in use. * EPT is a special snowflake, as guest-physical mappings aren't @@ -2315,6 +2318,17 @@ static void prepare_vmcs02_early_rare(struct vcpu_vmx *vmx, vmcs_write64(VMCS_LINK_POINTER, INVALID_GPA); + /* + * If VPID is disabled, then guest TLB accesses use VPID=0, i.e. the + * same VPID as the host. Emulate this behavior by using vpid01 for L2 + * if VPID is disabled in vmcs12. Note, if VPID is disabled, VM-Enter + * and VM-Exit are architecturally required to flush VPID=0, but *only* + * VPID=0. I.e. using vpid02 would be ok (so long as KVM emulates the + * required flushes), but doing so would cause KVM to over-flush. E.g. + * if L1 runs L2 X with VPID12=1, then runs L2 Y with VPID12 disabled, + * and then runs L2 X again, then KVM can and should retain TLB entries + * for VPID12=1. + */ if (enable_vpid) { if (nested_cpu_has_vpid(vmcs12) && vmx->nested.vpid02) vmcs_write16(VIRTUAL_PROCESSOR_ID, vmx->nested.vpid02); @@ -5950,6 +5964,12 @@ static int handle_invvpid(struct kvm_vcpu *vcpu) return nested_vmx_fail(vcpu, VMXERR_INVALID_OPERAND_TO_INVEPT_INVVPID); + /* + * Always flush the effective vpid02, i.e. never flush the current VPID + * and never explicitly flush vpid01. INVVPID targets a VPID, not a + * VMCS, and so whether or not the current vmcs12 has VPID enabled is + * irrelevant (and there may not be a loaded vmcs12). + */ vpid02 = nested_get_vpid02(vcpu); switch (type) { case VMX_VPID_EXTENT_INDIVIDUAL_ADDR: diff --git a/arch/x86/kvm/vmx/vmx.c b/arch/x86/kvm/vmx/vmx.c index 81ed596e4454..9886d67d9512 100644 --- a/arch/x86/kvm/vmx/vmx.c +++ b/arch/x86/kvm/vmx/vmx.c @@ -3216,7 +3216,7 @@ void vmx_flush_tlb_all(struct kvm_vcpu *vcpu) static inline int vmx_get_current_vpid(struct kvm_vcpu *vcpu) { - if (is_guest_mode(vcpu)) + if (is_guest_mode(vcpu) && nested_cpu_has_vpid(get_vmcs12(vcpu))) return nested_get_vpid02(vcpu); return to_vmx(vcpu)->vpid; }

3 months, 1 week

1
0
0 0

FAILED: patch "[PATCH] mm: revert "mm: shmem: fix data-race in shmem_getattr()"" failed to apply to 4.19-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.19-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-4.19.y git checkout FETCH_HEAD git cherry-pick -x d1aa0c04294e29883d65eac6c2f72fe95cc7c049 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024111704-operator-cusp-93c5@gregkh' --subject-prefix 'PATCH 4.19.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d1aa0c04294e29883d65eac6c2f72fe95cc7c049 Mon Sep 17 00:00:00 2001 From: Andrew Morton <akpm(a)linux-foundation.org> Date: Fri, 15 Nov 2024 16:57:24 -0800 Subject: [PATCH] mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem". Link: https://lkml.kernel.org/r/ZzdxKF39VEmXSSyN@tissot.1015granger.net [1] Fixes: d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") Acked-by: Hugh Dickins <hughd(a)google.com> Cc: Chuck Lever <chuck.lever(a)oracle.com> Cc: Jeongjun Park <aha310510(a)gmail.com> Cc: Yu Zhao <yuzhao(a)google.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> diff --git a/mm/shmem.c b/mm/shmem.c index e87f5d6799a7..568bb290bdce 100644 --- a/mm/shmem.c +++ b/mm/shmem.c @@ -1166,9 +1166,7 @@ static int shmem_getattr(struct mnt_idmap *idmap, stat->attributes_mask |= (STATX_ATTR_APPEND | STATX_ATTR_IMMUTABLE | STATX_ATTR_NODUMP); - inode_lock_shared(inode); generic_fillattr(idmap, request_mask, inode, stat); - inode_unlock_shared(inode); if (shmem_huge_global_enabled(inode, 0, 0, false, NULL, 0)) stat->blksize = HPAGE_PMD_SIZE;

3 months, 1 week

1
0
0 0

FAILED: patch "[PATCH] mm: revert "mm: shmem: fix data-race in shmem_getattr()"" failed to apply to 5.4-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.4-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y git checkout FETCH_HEAD git cherry-pick -x d1aa0c04294e29883d65eac6c2f72fe95cc7c049 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024111703-shopper-overtly-8e35@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d1aa0c04294e29883d65eac6c2f72fe95cc7c049 Mon Sep 17 00:00:00 2001 From: Andrew Morton <akpm(a)linux-foundation.org> Date: Fri, 15 Nov 2024 16:57:24 -0800 Subject: [PATCH] mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem". Link: https://lkml.kernel.org/r/ZzdxKF39VEmXSSyN@tissot.1015granger.net [1] Fixes: d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") Acked-by: Hugh Dickins <hughd(a)google.com> Cc: Chuck Lever <chuck.lever(a)oracle.com> Cc: Jeongjun Park <aha310510(a)gmail.com> Cc: Yu Zhao <yuzhao(a)google.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> diff --git a/mm/shmem.c b/mm/shmem.c index e87f5d6799a7..568bb290bdce 100644 --- a/mm/shmem.c +++ b/mm/shmem.c @@ -1166,9 +1166,7 @@ static int shmem_getattr(struct mnt_idmap *idmap, stat->attributes_mask |= (STATX_ATTR_APPEND | STATX_ATTR_IMMUTABLE | STATX_ATTR_NODUMP); - inode_lock_shared(inode); generic_fillattr(idmap, request_mask, inode, stat); - inode_unlock_shared(inode); if (shmem_huge_global_enabled(inode, 0, 0, false, NULL, 0)) stat->blksize = HPAGE_PMD_SIZE;

3 months, 1 week

1
0
0 0

[PATCH 1/4] KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR

by Marc Zyngier

Make sure we filter out non-LPI invalidation when handling writes to GICR_INVLPIR. Fixes: 4645d11f4a553 ("KVM: arm64: vgic-v3: Implement MMIO-based LPI invalidation") Reported-by: Alexander Potapenko <glider(a)google.com> Tested-by: Alexander Potapenko <glider(a)google.com> Signed-off-by: Marc Zyngier <maz(a)kernel.org> Cc: stable(a)vger.kernel.org --- arch/arm64/kvm/vgic/vgic-mmio-v3.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/arch/arm64/kvm/vgic/vgic-mmio-v3.c b/arch/arm64/kvm/vgic/vgic-mmio-v3.c index 9e50928f5d7df..70a44852cbafe 100644 --- a/arch/arm64/kvm/vgic/vgic-mmio-v3.c +++ b/arch/arm64/kvm/vgic/vgic-mmio-v3.c @@ -530,6 +530,7 @@ static void vgic_mmio_write_invlpi(struct kvm_vcpu *vcpu, unsigned long val) { struct vgic_irq *irq; + u32 intid; /* * If the guest wrote only to the upper 32bit part of the @@ -541,9 +542,13 @@ static void vgic_mmio_write_invlpi(struct kvm_vcpu *vcpu, if ((addr & 4) || !vgic_lpis_enabled(vcpu)) return; + intid = lower_32_bits(val); + if (intid < VGIC_MIN_LPI) + return; + vgic_set_rdist_busy(vcpu, true); - irq = vgic_get_irq(vcpu->kvm, NULL, lower_32_bits(val)); + irq = vgic_get_irq(vcpu->kvm, NULL, intid); if (irq) { vgic_its_inv_lpi(vcpu->kvm, irq); vgic_put_irq(vcpu->kvm, irq); -- 2.39.2

3 months, 1 week

1
0
0 0

Linux 6.11.9

by Greg Kroah-Hartman

I'm announcing the release of the 6.11.9 kernel. All users of the 6.11 kernel series must upgrade. The updated 6.11.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.11.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/loongarch/include/asm/loongarch.h | 2 arch/loongarch/kvm/timer.c | 7 - arch/loongarch/kvm/vcpu.c | 2 arch/powerpc/platforms/powernv/opal-irqchip.c | 1 arch/riscv/kvm/aia_imsic.c | 8 - block/elevator.c | 4 crypto/algapi.c | 2 drivers/crypto/marvell/cesa/hash.c | 12 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 6 - drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 2 drivers/gpu/drm/amd/amdkfd/kfd_process.c | 4 drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 26 +++++ drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 4 drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 3 drivers/gpu/drm/xe/xe_device.c | 2 drivers/gpu/drm/xe/xe_force_wake.c | 12 +- drivers/gpu/drm/xe/xe_guc_ct.c | 18 +++ drivers/gpu/drm/xe/xe_guc_submit.c | 14 ++ drivers/gpu/drm/xe/xe_query.c | 6 - drivers/gpu/drm/xe/xe_sync.c | 3 drivers/hid/hid-ids.h | 2 drivers/hid/hid-lenovo.c | 8 + drivers/hid/hid-multitouch.c | 13 ++ drivers/hid/i2c-hid/i2c-hid-core.c | 10 + drivers/infiniband/sw/siw/siw_qp_tx.c | 2 drivers/iommu/arm/arm-smmu/arm-smmu-impl.c | 4 drivers/irqchip/irq-mscc-ocelot.c | 4 drivers/net/mdio/mdio-bcm-unimac.c | 1 drivers/net/usb/qmi_wwan.c | 1 drivers/nvme/host/core.c | 52 +++++----- drivers/nvme/host/multipath.c | 33 ++++++ drivers/nvme/host/nvme.h | 1 drivers/nvme/host/tcp.c | 7 - drivers/nvme/target/loop.c | 13 ++ drivers/nvme/target/passthru.c | 6 - drivers/pinctrl/intel/Kconfig | 1 drivers/pinctrl/pinctrl-aw9523.c | 6 - drivers/s390/crypto/ap_bus.c | 3 drivers/s390/crypto/ap_bus.h | 2 drivers/s390/crypto/ap_queue.c | 28 +++-- drivers/vdpa/ifcvf/ifcvf_base.c | 2 drivers/virtio/virtio_pci_common.c | 24 +++- drivers/virtio/virtio_pci_common.h | 1 drivers/virtio/virtio_pci_modern.c | 12 -- fs/9p/fid.c | 5 fs/afs/internal.h | 2 fs/afs/rxrpc.c | 83 +++++++++++----- fs/netfs/locking.c | 3 fs/ocfs2/file.c | 9 + fs/smb/client/connect.c | 14 ++ include/net/tls.h | 12 +- kernel/bpf/syscall.c | 14 +- kernel/bpf/verifier.c | 4 mm/slab_common.c | 2 net/9p/client.c | 12 ++ net/core/filter.c | 2 samples/landlock/sandboxer.c | 32 +++++- sound/Kconfig | 2 sound/pci/hda/patch_realtek.c | 29 +++++ sound/soc/amd/yc/acp6x-mach.c | 14 ++ sound/soc/codecs/aw88399.c | 2 sound/soc/codecs/lpass-rx-macro.c | 15 +- sound/soc/codecs/rt722-sdca-sdw.c | 2 sound/soc/fsl/fsl_micfil.c | 38 +++++++ sound/soc/intel/avs/core.c | 3 sound/soc/intel/avs/pcm.c | 19 +++ sound/soc/intel/avs/pcm.h | 16 +++ sound/soc/intel/common/soc-acpi-intel-lnl-match.c | 38 +++++++ tools/testing/selftests/bpf/prog_tests/fill_link_info.c | 9 + tools/testing/selftests/bpf/progs/verifier_scalar_ids.c | 67 ++++++++++++ 72 files changed, 664 insertions(+), 164 deletions(-) Alessandro Zanni (1): fs: Fix uninitialized value issue in from_kuid and from_kgid Alexey Klimov (1): ASoC: codecs: lpass-rx-macro: fix RXn(rx,n) macro for DSM_CTL and SEC7 regs Amadeusz Sławiński (1): ASoC: Intel: avs: Update stream status in a separate thread Andy Shevchenko (1): pinctrl: intel: platform: Add Panther Lake to the list of supported Badal Nilawar (1): drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout Baojun Xu (1): ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects Bartłomiej Maryńczak (1): HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad Breno Leitao (1): nvme/host: Fix RCU list traversal to use SRCU primitive Christian Heusel (1): ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA Cyan Yang (1): RISCV: KVM: use raw_spinlock for critical section in imsic David Howells (2): netfs: Downgrade i_rwsem for a buffered write afs: Fix lock recursion Derek Fang (1): ASoC: Intel: soc-acpi: lnl: Add match entry for TM2 laptops Dominique Martinet (1): 9p: v9fs_fid_find: also lookup by inode if not found dentry Eduard Zingerman (1): selftests/bpf: Verify that sync_linked_regs preserves subreg_def Feng Liu (1): virtio_pci: Fix admin vq cleanup by using correct info pointer Greg Joyce (1): nvme: disable CC.CRIME (NVME_CC_CRIME) Greg Kroah-Hartman (1): Linux 6.11.9 Hannes Reinecke (1): nvme: tcp: avoid race between queue_lock lock and destroy Hans de Goede (1): HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard Harald Freudenberger (1): s390/ap: Fix CCA crypto card behavior within protected execution environment Herbert Xu (2): crypto: api - Fix liveliness check in crypto_alg_tested crypto: marvell/cesa - Disable hash algorithms Hou Tao (1): bpf: Check validity of link->type in bpf_link_show_fdinfo() Huacai Chen (1): LoongArch: KVM: Mark hrtimer to expire in hard interrupt context Ian Forbes (1): drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS Ilya Dudikov (1): ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA Jack Yu (1): ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue Jiawei Ye (1): bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 Julian Vetter (1): sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML Keith Busch (1): nvme-multipath: defer partition scanning Kenneth Albanowski (1): HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad Kuniyuki Iwashima (1): smb: client: Fix use-after-free of network namespace. Linus Torvalds (1): 9p: fix slab cache name creation for real Linus Walleij (1): net: phy: mdio-bcm-unimac: Add BCM6846 support Lucas De Marchi (1): drm/xe/query: Increase timestamp width Matthieu Buffet (1): samples/landlock: Fix port parsing in sandboxer Michael Ellerman (1): powerpc/powernv: Free name on error in opal_event_init() Nilay Shroff (3): nvmet-passthru: clear EUID/NGUID/UUID while using loop target nvme-loop: flush off pending I/O while shutting down loop controller nvme: make keep-alive synchronous operation Nirmoy Das (2): drm/xe/ufence: Prefetch ufence addr to catch bogus address drm/xe: Don't restart parallel queues multiple times on GT reset Pedro Falcato (1): 9p: Avoid creating multiple slab caches with the same name Philip Yang (1): drm/amdkfd: Accounting pdd vram_usage for svm Qun-Wei Lin (1): mm: krealloc: Fix MTE false alarm in __do_krealloc Reinhard Speyerer (1): net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition Rik van Riel (1): bpf: use kvzmalloc to allocate BPF verifier environment Robin Murphy (1): iommu/arm-smmu: Clarify MMU-500 CPRE workaround Rosen Penev (1): pinctrl: aw9523: add missing mutex_destroy Sergey Matsievskiy (1): irqchip/ocelot: Fix trigger register address Shengjiu Wang (1): ASoC: fsl_micfil: Add sample rate constraint Showrya M N (1): RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES Shuicheng Lin (2): drm/xe: Enlarge the invalidation timeout from 150 to 500 drm/xe: Handle unreliable MMIO reads during forcewake Stefan Blum (1): HID: multitouch: Add support for B2402FVA track point SurajSonawane2415 (1): block: Fix elevator_get_default() checking for NULL q->tag_set Tyrone Wu (1): selftests/bpf: Assert link info uprobe_multi count & path_size if unset WangYuli (1): HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad Yanteng Si (1): LoongArch: Use "Exception return address" to comment ERA Yuan Can (1): vDPA/ifcvf: Fix pci_read_config_byte() return code handling Zhu Jun (1): ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function Zijian Zhang (1): bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx

3 months, 1 week

1
1
0 0

Linux 6.6.62

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.62 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/loongarch/include/asm/loongarch.h | 2 arch/powerpc/platforms/powernv/opal-irqchip.c | 1 arch/riscv/kvm/aia_imsic.c | 8 - block/elevator.c | 4 crypto/algapi.c | 2 drivers/crypto/marvell/cesa/hash.c | 12 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 6 - drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 2 drivers/gpu/drm/amd/amdkfd/kfd_process.c | 4 drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 26 ++++++ drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 4 drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 3 drivers/hid/hid-ids.h | 1 drivers/hid/hid-lenovo.c | 8 + drivers/hid/hid-multitouch.c | 13 +++ drivers/infiniband/sw/siw/siw_qp_tx.c | 2 drivers/iommu/arm/arm-smmu/arm-smmu-impl.c | 4 drivers/irqchip/irq-mscc-ocelot.c | 4 drivers/net/mdio/mdio-bcm-unimac.c | 1 drivers/net/usb/qmi_wwan.c | 1 drivers/nvme/host/core.c | 52 ++++++------ drivers/nvme/host/multipath.c | 33 +++++++ drivers/nvme/host/nvme.h | 1 drivers/nvme/host/tcp.c | 7 - drivers/nvme/target/loop.c | 13 +++ drivers/vdpa/ifcvf/ifcvf_base.c | 2 fs/9p/fid.c | 5 - fs/ocfs2/file.c | 9 +- fs/smb/client/connect.c | 14 ++- include/net/tls.h | 12 ++ io_uring/io_uring.c | 5 + kernel/bpf/syscall.c | 14 ++- kernel/bpf/verifier.c | 4 mm/filemap.c | 2 mm/huge_memory.c | 59 ++++++++------ mm/hugetlb.c | 1 mm/internal.h | 27 ++++++ mm/memcontrol.c | 29 ++++++ mm/mempolicy.c | 17 ---- mm/page_alloc.c | 21 +---- mm/readahead.c | 11 -- mm/slab_common.c | 2 net/9p/client.c | 12 ++ net/core/filter.c | 2 sound/Kconfig | 2 sound/soc/amd/yc/acp6x-mach.c | 14 +++ sound/soc/codecs/rt722-sdca-sdw.c | 2 sound/soc/fsl/fsl_micfil.c | 38 +++++++++ tools/testing/selftests/bpf/progs/verifier_scalar_ids.c | 67 ++++++++++++++++ 51 files changed, 450 insertions(+), 141 deletions(-) Alessandro Zanni (1): fs: Fix uninitialized value issue in from_kuid and from_kgid Breno Leitao (1): nvme/host: Fix RCU list traversal to use SRCU primitive Christian Heusel (1): ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA Cyan Yang (1): RISCV: KVM: use raw_spinlock for critical section in imsic Dominique Martinet (1): 9p: v9fs_fid_find: also lookup by inode if not found dentry Eduard Zingerman (1): selftests/bpf: Verify that sync_linked_regs preserves subreg_def Greg Joyce (1): nvme: disable CC.CRIME (NVME_CC_CRIME) Greg Kroah-Hartman (1): Linux 6.6.62 Hagar Hemdan (1): io_uring: fix possible deadlock in io_register_iowq_max_workers() Hannes Reinecke (1): nvme: tcp: avoid race between queue_lock lock and destroy Hans de Goede (1): HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard Herbert Xu (2): crypto: api - Fix liveliness check in crypto_alg_tested crypto: marvell/cesa - Disable hash algorithms Hou Tao (1): bpf: Check validity of link->type in bpf_link_show_fdinfo() Hugh Dickins (2): mm: add page_rmappable_folio() wrapper mm/thp: fix deferred split unqueue naming and locking Ian Forbes (1): drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS Ilya Dudikov (1): ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA Jack Yu (1): ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue Jiawei Ye (1): bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 Julian Vetter (1): sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML Kefeng Wang (1): mm: refactor folio_undo_large_rmappable() Keith Busch (1): nvme-multipath: defer partition scanning Kenneth Albanowski (1): HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad Kuniyuki Iwashima (1): smb: client: Fix use-after-free of network namespace. Linus Torvalds (1): 9p: fix slab cache name creation for real Linus Walleij (1): net: phy: mdio-bcm-unimac: Add BCM6846 support Matthew Wilcox (Oracle) (2): mm: support order-1 folios in the page cache mm: always initialise folio->_deferred_list Michael Ellerman (1): powerpc/powernv: Free name on error in opal_event_init() Nilay Shroff (2): nvme-loop: flush off pending I/O while shutting down loop controller nvme: make keep-alive synchronous operation Pedro Falcato (1): 9p: Avoid creating multiple slab caches with the same name Philip Yang (1): drm/amdkfd: Accounting pdd vram_usage for svm Qun-Wei Lin (1): mm: krealloc: Fix MTE false alarm in __do_krealloc Reinhard Speyerer (1): net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition Rik van Riel (1): bpf: use kvzmalloc to allocate BPF verifier environment Robin Murphy (1): iommu/arm-smmu: Clarify MMU-500 CPRE workaround Ryan Roberts (1): mm/readahead: do not allow order-1 folio Sergey Matsievskiy (1): irqchip/ocelot: Fix trigger register address Shengjiu Wang (1): ASoC: fsl_micfil: Add sample rate constraint Showrya M N (1): RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES Stefan Blum (1): HID: multitouch: Add support for B2402FVA track point SurajSonawane2415 (1): block: Fix elevator_get_default() checking for NULL q->tag_set WangYuli (1): HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad Yanteng Si (1): LoongArch: Use "Exception return address" to comment ERA Yuan Can (1): vDPA/ifcvf: Fix pci_read_config_byte() return code handling Zijian Zhang (1): bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx

3 months, 1 week

1
1
0 0

Linux 6.1.118

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.118 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/loongarch/include/asm/loongarch.h | 2 arch/powerpc/platforms/powernv/opal-irqchip.c | 1 block/elevator.c | 4 crypto/algapi.c | 2 drivers/crypto/marvell/cesa/hash.c | 12 - drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 14 - drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 2 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 4 drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_process.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 4 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 4 drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 3 drivers/hid/hid-ids.h | 1 drivers/hid/hid-lenovo.c | 8 drivers/hid/hid-multitouch.c | 13 + drivers/irqchip/irq-mscc-ocelot.c | 4 drivers/md/raid10.c | 23 +- drivers/net/usb/qmi_wwan.c | 1 drivers/nvme/host/core.c | 31 +-- drivers/nvme/host/multipath.c | 33 +++ drivers/nvme/host/nvme.h | 1 drivers/nvme/host/tcp.c | 7 drivers/platform/x86/x86-android-tablets.c | 3 drivers/vdpa/ifcvf/ifcvf_base.c | 2 fs/ext4/super.c | 2 fs/ntfs3/inode.c | 9 fs/ocfs2/file.c | 9 include/net/bluetooth/hci_core.h | 3 io_uring/io_uring.c | 5 kernel/bpf/verifier.c | 4 kernel/trace/trace_uprobe.c | 86 +++++---- mm/slab_common.c | 2 net/9p/client.c | 12 + net/bluetooth/af_bluetooth.c | 10 - net/bluetooth/hci_conn.c | 154 +++++++++++++---- net/bluetooth/hci_core.c | 50 +---- net/bluetooth/hci_event.c | 20 +- net/bluetooth/hci_sync.c | 44 +--- net/bluetooth/l2cap_core.c | 9 net/bluetooth/mgmt.c | 15 + net/core/filter.c | 2 sound/Kconfig | 2 47 files changed, 393 insertions(+), 238 deletions(-) Alessandro Zanni (1): fs: Fix uninitialized value issue in from_kuid and from_kgid Andrii Nakryiko (1): uprobes: encapsulate preparation of uprobe args buffer Greg Joyce (1): nvme: disable CC.CRIME (NVME_CC_CRIME) Greg Kroah-Hartman (6): Revert "Bluetooth: fix use-after-free in accessing skb after sending it" Revert "Bluetooth: hci_sync: Fix overwriting request callback" Revert "Bluetooth: af_bluetooth: Fix deadlock" Revert "Bluetooth: hci_core: Fix possible buffer overflow" Revert "Bluetooth: hci_conn: Consolidate code for aborting connections" Linux 6.1.118 Hagar Hemdan (1): io_uring: fix possible deadlock in io_register_iowq_max_workers() Hannes Reinecke (1): nvme: tcp: avoid race between queue_lock lock and destroy Hans de Goede (2): HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors Herbert Xu (2): crypto: api - Fix liveliness check in crypto_alg_tested crypto: marvell/cesa - Disable hash algorithms Ian Forbes (1): drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS Jiawei Ye (1): bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 Julian Vetter (1): sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML Keith Busch (1): nvme-multipath: defer partition scanning Kenneth Albanowski (1): HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad Konstantin Komarov (1): fs/ntfs3: Fix general protection fault in run_is_mapped_full Li Nan (1): md/raid10: improve code of mrdev in raid10_sync_request Linus Torvalds (1): 9p: fix slab cache name creation for real Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix uaf in l2cap_connect Michael Ellerman (1): powerpc/powernv: Free name on error in opal_event_init() Nilay Shroff (1): nvme: make keep-alive synchronous operation Pedro Falcato (1): 9p: Avoid creating multiple slab caches with the same name Philip Yang (1): drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Qiao Ma (1): uprobe: avoid out-of-bounds memory access of fetching args Qun-Wei Lin (1): mm: krealloc: Fix MTE false alarm in __do_krealloc Reinhard Speyerer (1): net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition Rik van Riel (1): bpf: use kvzmalloc to allocate BPF verifier environment Sergey Matsievskiy (1): irqchip/ocelot: Fix trigger register address Stefan Blum (1): HID: multitouch: Add support for B2402FVA track point SurajSonawane2415 (1): block: Fix elevator_get_default() checking for NULL q->tag_set WangYuli (1): HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad Xiaxi Shen (1): ext4: fix timer use-after-free on failed mount Yanteng Si (1): LoongArch: Use "Exception return address" to comment ERA Yuan Can (1): vDPA/ifcvf: Fix pci_read_config_byte() return code handling

3 months, 1 week

1
1
0 0

Linux 5.15.173

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.173 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 - arch/powerpc/platforms/powernv/opal-irqchip.c | 1 block/elevator.c | 4 +-- drivers/crypto/marvell/cesa/hash.c | 12 +++++------ drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 +-- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 4 ++- drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 3 -- drivers/hid/hid-ids.h | 1 drivers/hid/hid-lenovo.c | 8 +++++++ drivers/hid/hid-multitouch.c | 13 ++++++++++++ drivers/irqchip/irq-mscc-ocelot.c | 4 +-- drivers/md/raid10.c | 23 +++++++++++----------- drivers/net/usb/qmi_wwan.c | 1 drivers/vdpa/ifcvf/ifcvf_base.c | 2 - fs/ocfs2/file.c | 9 +++++--- fs/udf/directory.c | 27 ++++++++++++++++++-------- fs/udf/udfdecl.h | 2 - io_uring/io_uring.c | 5 ++++ kernel/bpf/verifier.c | 4 +-- mm/memory.c | 11 ++++++++++ mm/slab_common.c | 2 - net/9p/client.c | 12 ++++++++++- sound/Kconfig | 2 - 23 files changed, 110 insertions(+), 46 deletions(-) Alessandro Zanni (1): fs: Fix uninitialized value issue in from_kuid and from_kgid Greg Kroah-Hartman (1): Linux 5.15.173 Hagar Hemdan (1): io_uring: fix possible deadlock in io_register_iowq_max_workers() Hans de Goede (1): HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard Herbert Xu (1): crypto: marvell/cesa - Disable hash algorithms Ian Forbes (1): drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS Jan Kara (2): udf: Allocate name buffer in directory iterator on heap udf: Avoid directory type conversion failure due to ENOMEM Julian Vetter (1): sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML Kenneth Albanowski (1): HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad Li Nan (1): md/raid10: improve code of mrdev in raid10_sync_request Linus Torvalds (1): 9p: fix slab cache name creation for real Michael Ellerman (1): powerpc/powernv: Free name on error in opal_event_init() Pedro Falcato (1): 9p: Avoid creating multiple slab caches with the same name Qun-Wei Lin (1): mm: krealloc: Fix MTE false alarm in __do_krealloc Reinhard Speyerer (1): net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition Rik van Riel (1): bpf: use kvzmalloc to allocate BPF verifier environment Sergey Matsievskiy (1): irqchip/ocelot: Fix trigger register address Stefan Blum (1): HID: multitouch: Add support for B2402FVA track point SurajSonawane2415 (1): block: Fix elevator_get_default() checking for NULL q->tag_set WangYuli (1): HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad Yuan Can (1): vDPA/ifcvf: Fix pci_read_config_byte() return code handling Yuanzheng Song (1): mm/memory: add non-anonymous page check in the copy_present_page()

3 months, 1 week

1
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror