| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20170615193626.GA8179@1wt.eu>
Date: Thu, 15 Jun 2017 21:36:26 +0200
From: Willy Tarreau <w@....eu>
To: linux-kernel@...r.kernel.org, stable@...r.kernel.org
Subject: Linux 3.10.106
Linux 3.10.106 was just released. All users of the 3.10 kernel series must upgrade.
As a reminder, the 3.10.y extended LTS series is scheduled for end of
life on end of October 2017 so it may only get a few more versions.
Extended LTS kernels are generally not suitable for new deployments but
only to maintain existing systems under operational condition for the
time it takes to migrate to a newer version.
The patch and changelog will appear soon at the following locations:
https://www.kernel.org/pub/linux/kernel/v3.x/
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.106.xz
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.106.gz
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.106
The updated 3.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.10.y
http://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.10.y
The tree can be browsed on the git web interface:
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/?h=linux-3.10.y
Thanks to everyone involved,
Willy
---------
.../devicetree/bindings/clock/imx31-clock.txt | 2 +-
Documentation/kernel-parameters.txt | 4 +
Makefile | 2 +-
arch/arm/boot/dts/imx31.dtsi | 18 +--
arch/arm/kernel/ptrace.c | 2 +-
arch/arm/mach-ux500/pm.c | 4 +-
arch/arm64/include/uapi/asm/ptrace.h | 1 +
arch/arm64/kernel/ptrace.c | 11 +-
arch/cris/boot/rescue/Makefile | 8 ++
arch/m68k/include/asm/delay.h | 2 +-
arch/metag/lib/usercopy.c | 146 ++++++++++++++------
arch/mips/cavium-octeon/octeon-memcpy.S | 20 +--
arch/mips/configs/ip27_defconfig | 1 -
arch/mips/kernel/kgdb.c | 48 +++++--
arch/mips/kernel/process.c | 153 +++++++++++++--------
arch/powerpc/kernel/ibmebus.c | 16 ++-
arch/powerpc/kernel/idle_power7.S | 2 +-
arch/powerpc/kernel/misc_32.S | 2 +-
arch/powerpc/kernel/setup_64.c | 9 ++
arch/s390/boot/compressed/misc.c | 35 ++---
arch/x86/kernel/cpu/common.c | 2 +-
arch/x86/kernel/entry_32.S | 4 +-
arch/x86/kvm/emulate.c | 66 +++++++--
arch/x86/pci/xen.c | 23 +---
arch/x86/platform/goldfish/goldfish.c | 14 +-
crypto/Makefile | 7 +-
crypto/asymmetric_keys/rsa.c | 5 +-
crypto/authenc.c | 6 +-
crypto/authencesn.c | 8 +-
crypto/ccm.c | 4 +-
crypto/gcm.c | 2 +-
crypto/memneq.c | 138 +++++++++++++++++++
drivers/acpi/osl.c | 6 +-
drivers/char/Kconfig | 1 -
drivers/char/lp.c | 6 +-
drivers/clk/clk-wm831x.c | 2 +-
drivers/crypto/caam/caamalg.c | 4 +-
drivers/crypto/caam/caamhash.c | 1 +
drivers/gpu/drm/i915/intel_crt.c | 9 +-
drivers/gpu/drm/i915/intel_display.c | 4 +-
drivers/gpu/drm/nouveau/nv50_display.c | 2 +-
drivers/hv/hv.c | 5 +-
drivers/hv/hyperv_vmbus.h | 2 +-
drivers/hv/vmbus_drv.c | 4 +-
drivers/hwmon/ds620.c | 2 +-
drivers/i2c/busses/i2c-at91.c | 36 +++--
drivers/infiniband/core/mad.c | 2 +-
drivers/infiniband/core/multicast.c | 7 +-
drivers/infiniband/hw/mlx4/ah.c | 6 +-
drivers/infiniband/hw/mlx4/main.c | 8 +-
drivers/infiniband/ulp/ipoib/ipoib_cm.c | 12 +-
drivers/infiniband/ulp/ipoib/ipoib_main.c | 6 +-
drivers/input/misc/cm109.c | 4 +
drivers/input/misc/ims-pcu.c | 4 +
drivers/input/misc/yealink.c | 4 +
drivers/input/serio/i8042-x86ia64io.h | 6 +
drivers/input/tablet/hanwang.c | 3 +
drivers/iommu/amd_iommu.c | 2 +-
drivers/isdn/gigaset/bas-gigaset.c | 3 +
drivers/isdn/gigaset/ser-gigaset.c | 4 +-
drivers/md/dm.c | 55 ++++++++
drivers/media/i2c/Kconfig | 1 +
drivers/media/rc/ite-cir.c | 2 +
drivers/media/tuners/tuner-xc2028.c | 34 ++---
drivers/media/usb/uvc/uvc_queue.c | 2 +-
drivers/mfd/pm8921-core.c | 9 +-
drivers/mmc/card/mmc_test.c | 2 +-
drivers/mmc/host/mxs-mmc.c | 6 +-
drivers/mmc/host/ushc.c | 3 +
drivers/mtd/nand/Kconfig | 2 +-
drivers/net/ethernet/mellanox/mlx4/cq.c | 38 ++---
drivers/net/ethernet/mellanox/mlx4/en_rx.c | 8 +-
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 20 +--
drivers/net/phy/phy.c | 2 +-
drivers/net/tun.c | 12 +-
drivers/net/usb/pegasus.c | 29 +++-
drivers/net/usb/rtl8150.c | 34 ++++-
drivers/net/vxlan.c | 2 +-
drivers/net/wireless/ath/ath9k/ar9003_eeprom.h | 4 +-
drivers/pci/hotplug/rpadlpar_core.c | 10 +-
drivers/platform/goldfish/pdev_bus.c | 13 +-
drivers/platform/x86/intel_mid_powerbtn.c | 4 +-
drivers/s390/cio/qdio_thinint.c | 8 +-
drivers/s390/scsi/zfcp_dbf.c | 17 ++-
drivers/s390/scsi/zfcp_dbf.h | 41 +++++-
drivers/s390/scsi/zfcp_erp.c | 61 +++++++-
drivers/s390/scsi/zfcp_ext.h | 4 +-
drivers/s390/scsi/zfcp_fsf.c | 8 +-
drivers/s390/scsi/zfcp_fsf.h | 3 +-
drivers/s390/scsi/zfcp_reqlist.h | 30 +++-
drivers/s390/scsi/zfcp_scsi.c | 61 +++++++-
drivers/scsi/aacraid/src.c | 21 ++-
drivers/scsi/libsas/sas_ata.c | 2 +-
drivers/scsi/mvsas/mv_94xx.c | 2 +-
drivers/staging/iio/adc/ad7606_core.c | 2 +-
drivers/staging/vt6656/hostap.c | 3 +-
drivers/target/iscsi/iscsi_target_tpg.c | 1 -
drivers/tty/n_hdlc.c | 143 ++++++++++---------
drivers/usb/class/usbtmc.c | 9 +-
drivers/usb/core/config.c | 10 ++
drivers/usb/dwc3/gadget.c | 8 +-
drivers/usb/gadget/composite.c | 12 +-
drivers/usb/gadget/dummy_hcd.c | 6 +-
drivers/usb/host/ohci-q.c | 7 +-
drivers/usb/host/xhci-mem.c | 4 +-
drivers/usb/misc/idmouse.c | 3 +
drivers/usb/misc/iowarrior.c | 21 ++-
drivers/usb/misc/uss720.c | 5 +
drivers/usb/musb/musbhsdma.h | 2 +-
drivers/usb/serial/ark3116.c | 13 +-
drivers/usb/serial/ch341.c | 90 +++++++-----
drivers/usb/serial/cyberjack.c | 10 ++
drivers/usb/serial/digi_acceleport.c | 14 +-
drivers/usb/serial/ftdi_sio.c | 31 +++--
drivers/usb/serial/garmin_gps.c | 1 +
drivers/usb/serial/io_edgeport.c | 5 +
drivers/usb/serial/io_ti.c | 22 ++-
drivers/usb/serial/iuu_phoenix.c | 11 ++
drivers/usb/serial/keyspan_pda.c | 14 ++
drivers/usb/serial/kl5kusb105.c | 44 ++++--
drivers/usb/serial/kobil_sct.c | 12 ++
drivers/usb/serial/mos7720.c | 51 +++----
drivers/usb/serial/mos7840.c | 14 ++
drivers/usb/serial/omninet.c | 19 ++-
drivers/usb/serial/opticon.c | 2 +-
drivers/usb/serial/oti6858.c | 16 +++
drivers/usb/serial/pl2303.c | 8 ++
drivers/usb/serial/quatech2.c | 4 -
drivers/usb/serial/safe_serial.c | 5 +
drivers/usb/serial/spcp8x5.c | 22 ++-
drivers/usb/serial/ti_usb_3410_5052.c | 7 +
drivers/usb/wusbcore/wa-hc.c | 3 +
drivers/uwb/hwa-rc.c | 3 +
drivers/uwb/i1480/dfu/usb.c | 3 +
drivers/video/fbcmap.c | 26 ++--
fs/9p/acl.c | 40 +++---
fs/block_dev.c | 9 +-
fs/btrfs/acl.c | 6 +-
fs/btrfs/tree-log.c | 3 +-
fs/exec.c | 10 +-
fs/ext2/acl.c | 12 +-
fs/ext3/acl.c | 10 +-
fs/ext4/acl.c | 12 +-
fs/ext4/inline.c | 9 +-
fs/ext4/inode.c | 29 ++--
fs/ext4/mballoc.c | 4 +-
fs/f2fs/acl.c | 6 +-
fs/f2fs/debug.c | 1 +
fs/fuse/file.c | 6 +-
fs/generic_acl.c | 12 +-
fs/gfs2/acl.c | 14 +-
fs/jffs2/acl.c | 9 +-
fs/jfs/xattr.c | 5 +-
fs/nfs/nfs4filelayoutdev.c | 3 +-
fs/nfs/nfs4xdr.c | 2 +-
fs/ocfs2/acl.c | 20 +--
fs/ocfs2/ioctl.c | 129 ++++++-----------
fs/posix_acl.c | 31 +++++
fs/reiserfs/xattr_acl.c | 8 +-
fs/ubifs/tnc.c | 25 +++-
fs/xfs/xfs_acl.c | 15 +-
include/crypto/algapi.h | 18 ++-
include/linux/can/core.h | 7 +-
include/linux/cpu.h | 12 +-
include/linux/jump_label.h | 16 +++
include/linux/kvm_host.h | 7 +-
include/linux/lockd/lockd.h | 3 +-
include/linux/netdevice.h | 9 +-
include/linux/posix_acl.h | 1 +
include/net/cipso_ipv4.h | 4 +
include/rdma/ib_sa.h | 6 +-
include/trace/events/syscalls.h | 1 +
kernel/cpu.c | 3 +-
kernel/events/core.c | 5 +-
kernel/ptrace.c | 14 +-
kernel/rtmutex.c | 68 ++++++++-
kernel/sched/core.c | 6 +-
kernel/trace/ring_buffer.c | 24 +++-
kernel/trace/trace.c | 8 +-
mm/huge_memory.c | 19 ++-
mm/hugetlb.c | 37 +++--
mm/page_alloc.c | 17 ++-
net/can/af_can.c | 12 +-
net/can/af_can.h | 3 +-
net/can/bcm.c | 4 +-
net/can/gw.c | 2 +-
net/can/raw.c | 4 +-
net/ceph/osdmap.c | 1 -
net/core/dev.c | 58 +++++---
net/core/sock.c | 10 +-
net/dccp/input.c | 3 +-
net/dccp/ipv4.c | 3 +-
net/dccp/ipv6.c | 8 +-
net/ieee802154/6lowpan.c | 2 +-
net/ipv4/cipso_ipv4.c | 4 +
net/ipv4/igmp.c | 6 +-
net/ipv4/inet_connection_sock.c | 2 +
net/ipv4/ip_sockglue.c | 9 +-
net/ipv4/ip_vti.c | 1 -
net/ipv4/netfilter/arp_tables.c | 4 +-
net/ipv4/ping.c | 7 +-
net/ipv4/route.c | 1 +
net/ipv4/tcp.c | 6 +
net/ipv4/tcp_ipv4.c | 4 +-
net/ipv6/ip6_gre.c | 41 +++---
net/ipv6/ip6_offload.c | 1 +
net/ipv6/ip6_tunnel.c | 55 +++++---
net/ipv6/raw.c | 7 +-
net/ipv6/tcp_ipv6.c | 8 +-
net/l2tp/l2tp_core.c | 8 +-
net/l2tp/l2tp_core.h | 4 +-
net/l2tp/l2tp_debugfs.c | 10 +-
net/l2tp/l2tp_ip.c | 27 +++-
net/l2tp/l2tp_ip6.c | 2 +-
net/l2tp/l2tp_netlink.c | 7 +-
net/l2tp/l2tp_ppp.c | 10 +-
net/mac80211/mesh.c | 2 +-
net/packet/af_packet.c | 65 ++++++---
net/sched/act_api.c | 5 +-
net/sched/cls_api.c | 4 +-
net/sched/em_meta.c | 9 +-
net/sctp/associola.c | 131 +++++++++++-------
net/sctp/socket.c | 7 +-
net/socket.c | 4 +-
net/sunrpc/auth_gss/gss_rpc_xdr.c | 2 +-
net/sunrpc/auth_gss/svcauth_gss.c | 2 +-
net/unix/garbage.c | 18 +--
net/xfrm/xfrm_user.c | 9 +-
security/integrity/evm/evm_main.c | 3 +-
security/keys/gc.c | 2 +-
security/keys/keyctl.c | 20 +--
security/keys/process_keys.c | 44 +++---
security/selinux/hooks.c | 2 +-
sound/pci/ctxfi/cthw20k1.c | 19 +--
sound/pci/ctxfi/cthw20k2.c | 18 +--
sound/usb/card.c | 1 -
tools/perf/builtin-trace.c | 4 +-
tools/perf/util/trace-event-scripting.c | 6 +-
tools/testing/ktest/ktest.pl | 2 +-
virt/kvm/eventfd.c | 3 +
virt/kvm/kvm_main.c | 41 ++++--
241 files changed, 2490 insertions(+), 1138 deletions(-)
Summary of changes from 3.10.105 to 3.10.106
==============================================
Alan Stern (3):
USB: OHCI: Fix race between ED unlink and URB submission
USB: fix problems with duplicate endpoint addresses
USB: dummy-hcd: fix bug in stop_activity (handle ep0)
Aleksa Sarai (1):
fs: exec: apply CLOEXEC before changing dumpable task flags
Alex Porosanu (1):
crypto: caam - fix AEAD givenc descriptors
Alexander Popov (1):
tty: n_hdlc: get rid of racy n_hdlc.tbuf
Alexey Kodanev (1):
tcp: initialize max window for a new fastopen socket
Amos Kong (1):
kvm: exclude ioeventfd from counting kvm_io_range limit
Ander Conselvan de Oliveira (1):
drm/i915: Don't leak edid in intel_crt_detect_ddc()
Andrew Lunn (1):
ipv4: igmp: Allow removing groups from a removed interface
Andrey Konovalov (1):
dccp: fix freeing skb too early for IPV6_RECVPKTINFO
Andrey Ryabinin (1):
drm/i915: fix use-after-free in page_flip_completed()
Andrey Ulanov (1):
net: unix: properly re-increment inflight counter of GC discarded candidates
Andy Shevchenko (1):
platform/x86: intel_mid_powerbtn: Set IRQ_ONESHOT
Andy Whitcroft (2):
xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
Anoob Soman (1):
packet: Do not call fanout_release from atomic contexts
Arnaldo Carvalho de Melo (2):
perf scripting: Avoid leaking the scripting_context variable
perf trace: Use the syscall raw_syscalls:sys_enter timestamp
Arnd Bergmann (4):
scsi: mvsas: fix command_active typo
ARM: ux500: fix prcmu_is_cpu_in_wfi() calculation
s5k4ecgx: select CRC32 helper
MIPS: ip27: Disable qlge driver in defconfig
Bart Van Assche (2):
IB/mad: Fix an array index check
IB/multicast: Check ib_find_pkey() return value
Ben Hutchings (3):
ocfs2: do not write error flag to user structure we cannot copy from/to
pegasus: Use heap buffers for all register access
rtl8150: Use heap buffers for all register access
Benjamin Block (1):
scsi: zfcp: fix use-after-"free" in FC ingress path after TMF
Benjamin Herrenschmidt (1):
powerpc: Disable HFSCR[TM] if TM is not supported
Boris Brezillon (1):
m68k: Fix ndelay() macro
Chandan Rajendra (2):
ext4: fix mballoc breakage with 64k block size
ext4: fix stack memory corruption with 64k block size
Christian Lamparter (1):
ath9k: use correct OTP register offsets for the AR9340 and AR9550
Dan Carpenter (11):
ext4: return -ENOMEM instead of success
usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
target/iscsi: Fix double free in lio_target_tiqn_addtpg()
mmc: mmc_test: Uninitialized return value
ser_gigaset: return -ENOMEM on error instead of success
mfd: pm8921: Potential NULL dereference in pm8921_remove()
drm/nv50/disp: min/max are reversed in nv50_crtc_gamma_set()
ACPI / resources: free memory on error in add_region_before()
Staging: vt6655-6: potential NULL dereference in hostap_disable_hostapd()
xc2028: unlock on error in xc2028_set_config()
ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()
Dan Streetman (1):
xen: do not re-use pirq number cached in pci device msi msg data
Daniel Borkmann (3):
net, sched: fix soft lockup in tc_classify
net: 6lowpan: fix lowpan_header_create non-compression memcpy call
net: sctp: rework multihoming retransmission path selection to rfc4960
Darrick J. Wong (1):
ext4: reject inodes with negative size
Dave Jones (1):
ipv6: handle -EFAULT from skb_copy_bits
Dave Martin (4):
arm64/ptrace: Preserve previous registers for short regset write
arm64/ptrace: Avoid uninitialised struct padding in fpr_set()
arm64/ptrace: Reject attempts to set incomplete hardware breakpoint fields
ARM: 8643/3: arm/ptrace: Preserve previous registers for short regset write
David Hildenbrand (1):
KVM: kvm_io_bus_unregister_dev() should never fail
David Howells (2):
KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings
KEYS: Change the name of the dead type to ".dead" to prevent user access
Eric Biggers (2):
KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
ext4: mark inode dirty after converting inline directory
Eric Dumazet (15):
tcp: avoid infinite loop in tcp_splice_read()
gro: use min_t() in skb_gro_reset_offset()
net: fix harmonize_features() vs NETIF_F_HIGHDMA
net: use a work queue to defer net_disable_timestamp() work
ipv4: keep skb->dst around in presence of IP options
netlabel: out of bound access in cipso_v4_validate()
ip6_gre: fix ip6gre_err() invalid reads
l2tp: do not use udp_ioctl()
packet: fix races in fanout_add()
net: net_enable_timestamp() can be called from irq contexts
net: properly release sk_frag.page
ping: implement proper locking
can: Fix kernel panic at security_sock_rcv_skb
ipv6: fix ip6_tnl_parse_tlv_enc_lim()
dccp/tcp: do not inherit mc_list from parent
Eugenia Emantayev (1):
net/mlx4_en: Fix bad WQE issue
Eva Rachel Retuya (1):
staging: iio: ad7606: fix improper setting of oversampling pins
Felipe Balbi (1):
usb: dwc3: gadget: always unmap EP0 requests
Feras Daoud (1):
IB/ipoib: Fix deadlock between rmmod and set_mode
Florian Fainelli (1):
net: stmmac: Fix race between stmmac_drv_probe and stmmac_open
Geert Uytterhoeven (1):
char: Drop bogus dependency of DEVPORT on !M68K
Gu Zheng (1):
tmpfs: clear S_ISGID when setting posix ACLs
Guennadi Liakhovetski (1):
uvcvideo: Fix a wrong macro
Guenter Roeck (2):
cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected
hwmon: (ds620) Fix overflows seen when writing temperature limits
Guillaume Nault (1):
l2tp: take reference on sessions being dumped
Hauke Mehrtens (1):
mtd: nand: xway: disable module support
Herbert Xu (3):
gro: Enter slow-path if there is no tailroom
gro: Disable frag0 optimization on IPv6 ext headers
tun: Fix TUN_PKT_STRIP setting
Hongxu Jia (1):
netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel
Huang Rui (1):
iommu/amd: Fix the left value check of cmd buffer
Ilya Dryomov (1):
libceph: don't set weight to IN when OSD is destroyed
J. Bruce Fields (3):
svcrpc: don't leak contexts on PROC_DESTROY
svcrpc: fix oops in absence of krb5 module
NFSv4: fix getacl head length estimation
Jack Morgenstein (1):
net/mlx4_core: Fix racy CQ (Completion Queue) free
James Cowgill (1):
MIPS: OCTEON: Fix copy_from_user fault handling for large buffers
James Hogan (6):
metag/usercopy: Fix alignment error checking
metag/usercopy: Add early abort to copy_to_user
metag/usercopy: Set flags before ADDZ
metag/usercopy: Fix src fixup in from user rapf loops
metag/usercopy: Add missing fixups
MIPS: KGDB: Use kernel context for sleeping threads
James Yonan (1):
crypto: crypto_memneq - add equality testing of memory regions w/o timing leaks
Jan Kara (2):
posix_acl: Clear SGID bit when setting file permissions
ext4: fix data exposure after a crash
Jason Gunthorpe (1):
RDMA/core: Fix incorrect structure packing for booleans
Jiri Slaby (1):
TTY: n_hdlc, fix lockdep false positive
Johan Hovold (57):
USB: serial: kl5kusb105: fix open error path
USB: serial: omninet: fix NULL-derefs at open and disconnect
USB: serial: quatech2: fix sleep-while-atomic in close
USB: serial: pl2303: fix NULL-deref at open
USB: serial: keyspan_pda: verify endpoints at probe
USB: serial: spcp8x5: fix NULL-deref at open
USB: serial: io_ti: fix NULL-deref at open
USB: serial: io_ti: fix another NULL-deref at open
USB: serial: iuu_phoenix: fix NULL-deref at open
USB: serial: garmin_gps: fix memory leak on failed URB submit
USB: serial: ti_usb_3410_5052: fix NULL-deref at open
USB: serial: io_edgeport: fix NULL-deref at open
USB: serial: oti6858: fix NULL-deref at open
USB: serial: cyberjack: fix NULL-deref at open
USB: serial: kobil_sct: fix NULL-deref in write
USB: serial: mos7840: fix NULL-deref at open
USB: serial: mos7720: fix NULL-deref at open
USB: serial: mos7720: fix use-after-free on probe errors
USB: serial: mos7720: fix parport use-after-free on probe errors
USB: serial: mos7720: fix parallel probe
powerpc/pci/rpadlpar: Fix device reference leaks
USB: serial: kl5kusb105: fix line-state error handling
USB: serial: ch341: fix initial modem-control state
USB: serial: ch341: fix open error handling
USB: serial: ch341: fix control-message error handling
USB: serial: ch341: fix open and resume after B0
USB: serial: ch341: fix resume after reset
USB: serial: ch341: fix modem-control and B0 handling
powerpc/ibmebus: Fix further device reference leaks
powerpc/ibmebus: Fix device reference leaks in sysfs interface
USB: serial: mos7840: fix another NULL-deref at open
USB: serial: ftdi_sio: fix modem-status error handling
USB: serial: ftdi_sio: fix extreme low-latency setting
USB: serial: ftdi_sio: fix line-status over-reporting
USB: serial: spcp8x5: fix modem-status handling
USB: serial: opticon: fix CTS retrieval at open
USB: serial: ark3116: fix register-accessor error handling
USB: serial: digi_acceleport: fix OOB data sanity check
USB: serial: digi_acceleport: fix OOB-event processing
USB: serial: safe_serial: fix information leak in completion handler
USB: serial: omninet: fix reference leaks at open
USB: iowarrior: fix NULL-deref at probe
USB: iowarrior: fix NULL-deref in write
USB: serial: io_ti: fix NULL-deref in interrupt callback
USB: serial: io_ti: fix information leak in completion handler
isdn/gigaset: fix NULL-deref at probe
Input: ims-pcu - validate number of endpoints before using them
Input: hanwang - validate number of endpoints before using them
Input: yealink - validate number of endpoints before using them
Input: cm109 - validate number of endpoints before using them
USB: uss720: fix NULL-deref at probe
USB: idmouse: fix NULL-deref at probe
USB: wusbcore: fix NULL-deref at probe
uwb: i1480-dfu: fix NULL-deref at probe
uwb: hwa-rc: fix NULL-deref at probe
mmc: ushc: fix NULL-deref at probe
USB: usbtmc: add missing endpoint sanity check
John Garry (1):
scsi: libsas: fix ata xfer length
Jon Maxwell (1):
dccp/tcp: fix routing redirect race
Julian Anastasov (1):
ipv4: mask tos for input route
Julian Wiedmann (1):
s390/qdio: clear DSCI prior to scanning multiple input queues
Kees Cook (1):
fbdev: color map copying bounds checking
Keno Fischer (1):
mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp
Krzysztof Opasiak (1):
usb: gadget: composite: Test get_alt() presence instead of set_alt()
Larry Finger (1):
powerpc: Fix build warning on 32-bit PPC
Li RongQing (1):
ipv6: fix the use of pcpu_tstats in ip6_tunnel
Ludovic Desroches (1):
i2c: at91: manage unexpected RXRDY flag when starting a transfer
Lukasz Odzioba (1):
x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option
Maor Gottlieb (1):
IB/mlx4: Set traffic class in AH
Marcelo Henrique Cerri (1):
s390/decompressor: fix initrd corruption caused by bss clear
Marcelo Ricardo Leitner (2):
sctp: avoid BUG_ON on sctp_wait_for_sndbuf
sctp: deny peeloff operation on asocs with threads sleeping on it
Marcos Paulo de Souza (1):
Input: i8042 - add Pegatron touchpad to noloop table
Matthias Schiffer (1):
vxlan: correctly validate VXLAN ID against VXLAN_N_VID
Mauro Carvalho Chehab (1):
xc2028: avoid use after free
Maxime Jayat (1):
net: socket: fix recvmmsg not returning error from sock_error
Michal Hocko (1):
hotplug: Make register and unregister notifier API symmetric
Mike Kravetz (1):
mm/hugetlb.c: fix reservation race when freeing surplus pages
Miklos Szeredi (1):
fuse: add missing FR_FORCE
Mikulas Patocka (1):
dm: flush queued bios when process blocks to avoid deadlock
Nathan Sullivan (1):
net: phy: handle state correctly in phy_stop_machine
NeilBrown (2):
block_dev: don't test bdev->bd_contains when it is not stable
NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
Nicolai Stange (1):
f2fs: set ->owner for debugfs status file's file_operations
Nicolas Iooss (1):
ite-cir: initialize use_demodulator before using it
Oliver O'Halloran (1):
mm/init: fix zone boundary creation
Pan Bian (2):
USB: serial: kl5kusb105: abort on open exception path
clk: clk-wm831x: fix a logic error
Paolo Bonzini (1):
KVM: x86: fix emulation of "MOV SS, null selector"
Paul Burton (6):
MIPS: Clear ISA bit correctly in get_frame_info()
MIPS: Prevent unaligned accesses during stack unwinding
MIPS: Fix get_frame_info() handling of microMIPS function size
MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions
MIPS: Calculate microMIPS ra properly when unwinding the stack
MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps
Peter Xu (1):
KVM: x86: clear bus pointer when destroyed
Peter Zijlstra (2):
locking/static_keys: Add static_key_{en,dis}able() helpers
perf/core: Fix event inheritance on fork()
Philip Pettersson (1):
packet: fix race condition in packet_set_ring
Rabin Vincent (1):
block: protect iterate_bdevs() against concurrent close
Rafael J. Wysocki (2):
ACPI / PNP: Avoid conflicting resource reservations
ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage
Raghava Aditya Renukunta (1):
scsi: aacraid: Reorder Adapter status check
Richard Weinberger (1):
ubifs: Fix journal replay wrt. xattr nodes
Rik van Riel (1):
tracing: Add #undef to fix compile error
Robbie Ko (1):
Btrfs: fix tree search logic when replaying directory entry deletes
Robert Doebbelin (1):
fuse: do not use iocb after it may have been freed
Roman Mashak (1):
net sched actions: decrement module reference count after table flush.
Russell King (1):
crypto: caam - fix non-hmac hashes
Ryan Ware (1):
EVM: Use crypto_memneq() for digest comparisons
Saeed Mahameed (1):
IB/mlx4: Fix port query for 56Gb Ethernet links
Segher Boessenkool (1):
powerpc: Convert cmp to cmpd in idle enter sequence
Shmulik Ladkani (1):
net/sched: em_meta: Fix 'meta vlan' to correctly recognize zero VID frames
Stefan Wahren (1):
mmc: mxs-mmc: Fix additional cycles after transmission stop
Steffen Klassert (1):
vti4: Don't count header length twice.
Steffen Maier (3):
scsi: zfcp: do not trace pure benign residual HBA responses at default level
scsi: zfcp: fix rport unblock race with LUN recovery
scsi: zfcp: fix use-after-free by not tracing WKA port open/close on failed send
Stephen Smalley (1):
selinux: fix off-by-one in setprocattr
Steve Rutherford (1):
KVM: x86: Introduce segmented_write_std
Steven Rostedt (Red Hat) (1):
ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short jumps to it
Steven Rostedt (VMware) (3):
ktest: Fix child exit code processing
tracing: Allocate the snapshot buffer before enabling probe
ring-buffer: Have ring_buffer_iter_empty() return true when empty
Takashi Iwai (4):
ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
ALSA: ctxfi: Fallback DMA mask to 32bit
ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call
xc2028: Fix use-after-free bug properly
Thomas Gleixner (3):
locking/rtmutex: Prevent dequeue vs. unlock race
x86/platform/goldfish: Prevent unconditional loading
goldfish: Sanitize the broken interrupt handler
Thorsten Horstmann (1):
mac80211: Fix adding of mesh vendor IEs
Tony Lindgren (1):
usb: musb: Fix trying to free already-free IRQ 4
Trond Myklebust (1):
nlm: Ensure callback code also checks that the files match
Vitaly Kuznetsov (1):
Drivers: hv: avoid vfree() on crash
Vladimir Zapolskiy (3):
ARM: dts: imx31: fix clock control module interrupts description
ARM: dts: imx31: move CCM device node to AIPS2 bus devices
ARM: dts: imx31: fix AVIC base address
WANG Cong (1):
ping: fix a null pointer dereference
Wei Yongjun (1):
ring-buffer: Fix return value check in test_ringbuffer()
Willy Tarreau (2):
char: lp: fix possible integer overflow in lp_setup()
Linux 3.10.106
bsegall@...gle.com (1):
ptrace: fix PTRACE_LISTEN race corrupting task->state
Powered by blists - more mailing lists