| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20200929105930.172747117@linuxfoundation.org>
Date: Tue, 29 Sep 2020 12:59:04 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-kernel@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
torvalds@...ux-foundation.org, akpm@...ux-foundation.org,
linux@...ck-us.net, shuah@...nel.org, patches@...nelci.org,
ben.hutchings@...ethink.co.uk, lkft-triage@...ts.linaro.org,
pavel@...x.de, stable@...r.kernel.org
Subject: [PATCH 4.9 000/121] 4.9.238-rc1 review
This is the start of the stable review cycle for the 4.9.238 release.
There are 121 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 01 Oct 2020 10:59:03 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.238-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 4.9.238-rc1
Jiri Slaby <jslaby@...e.cz>
ata: sata_mv, avoid trigerrable BUG_ON
Jiri Slaby <jslaby@...e.cz>
ata: make qc_prep return ata_completion_errors
Jiri Slaby <jslaby@...e.cz>
ata: define AC_ERR_OK
Nick Desaulniers <ndesaulniers@...gle.com>
lib/string.c: implement stpcpy
Masami Hiramatsu <mhiramat@...nel.org>
kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
Wei Li <liwei391@...wei.com>
MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
Tom Rix <trix@...hat.com>
ALSA: asihpi: fix iounmap in error handler
Linus Lüssing <linus.luessing@...3.blue>
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
Sven Eckelmann <sven@...fation.org>
batman-adv: Add missing include for in_interrupt()
Eric Dumazet <edumazet@...gle.com>
mac802154: tx: fix use-after-free
Linus Lüssing <linus.luessing@...3.blue>
batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
Jing Xiangfeng <jingxiangfeng@...wei.com>
atm: eni: fix the missed pci_disable_device() for eni_init_one()
Linus Lüssing <ll@...onwunderlich.de>
batman-adv: bla: fix type misuse for backbone_gw hash indexing
Maximilian Luz <luzmaximilian@...il.com>
mwifiex: Increase AES key storage size to 256 bits
Tianjia Zhang <tianjia.zhang@...ux.alibaba.com>
clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init()
Tom Rix <trix@...hat.com>
ieee802154/adf7242: check status of adf7242_read_reg
Josh Poimboeuf <jpoimboe@...hat.com>
objtool: Fix noreturn detection for ignored functions
Hans de Goede <hdegoede@...hat.com>
i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices()
Ilya Leoshkevich <iii@...ux.ibm.com>
s390/init: add missing __init annotations
Zeng Tao <prime.zeng@...ilicon.com>
vfio/pci: fix racy on error and request eventfd ctx
Andy Lutomirski <luto@...nel.org>
selftests/x86/syscall_nt: Clear weird flags after each test
Zhang Xiaoxu <zhangxiaoxu5@...wei.com>
cifs: Fix double add page to memcg when cifs_readpages
Alex Williamson <alex.williamson@...hat.com>
vfio/pci: Clear error and request eventfd ctx after releasing
Thomas Gleixner <tglx@...utronix.de>
x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
Boris Brezillon <boris.brezillon@...labora.com>
mtd: parser: cmdline: Support MTD names containing one or more colons
Jeff Layton <jlayton@...nel.org>
ceph: fix potential race in ceph_check_caps
Dinghao Liu <dinghao.liu@....edu.cn>
mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
Adrian Hunter <adrian.hunter@...el.com>
perf kcore_copy: Fix module map when there are no modules loaded
Xie XiuQi <xiexiuqi@...wei.com>
perf util: Fix memory leak of prefix_if_not_in
Qian Cai <cai@....pw>
vfio/pci: fix memory leaks of eventfd ctx
David Sterba <dsterba@...e.com>
btrfs: don't force read-only after error in drop snapshot
Shreyas Joshi <shreyas.joshi@...mp.com>
printk: handle blank console arguments passed in.
Alexander Duyck <alexander.h.duyck@...ux.intel.com>
e1000: Do not perform reset in reset_task if we are already down
Colin Ian King <colin.king@...onical.com>
USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
Miklos Szeredi <mszeredi@...hat.com>
fuse: don't check refcount after stealing page
Takashi Iwai <tiwai@...e.de>
ALSA: hda: Fix potential race in unsol event handler
Jonathan Bakker <xc-racer2@...e.ca>
tty: serial: samsung: Correct clock selection logic
Tang Bin <tangbin@...s.chinamobile.com>
USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
Sonny Sasaka <sonnysasaka@...omium.org>
Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
Jonathan Bakker <xc-racer2@...e.ca>
phy: samsung: s5pv210-usb2: Add delay after reset
Cong Wang <xiyou.wangcong@...il.com>
atm: fix a memory leak of vcc->user_back
Krzysztof Kozlowski <krzk@...nel.org>
dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion
Madhuparna Bhowmik <madhuparnabhowmik10@...il.com>
drivers: char: tlclk.c: Avoid data race between init and interrupt handler
Douglas Anderson <dianders@...omium.org>
bdev: Reduce time holding bd_mutex in sync in blkdev_close()
Steve Rutherford <srutherford@...gle.com>
KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
Raviteja Narayanam <raviteja.narayanam@...inx.com>
serial: uartps: Wait for tx_empty in console setup
Shubhrajyoti Datta <shubhrajyoti.datta@...inx.com>
serial: uartps: Add a timeout to the tx empty wait
Jaewon Kim <jaewon31.kim@...sung.com>
mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
Xianting Tian <xianting_tian@....com>
mm/filemap.c: clear page error before actual read
Andreas Steinmetz <ast@...dv.de>
ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor
Liu Song <liu.song11@....com.cn>
ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
Chuck Lever <chuck.lever@...cle.com>
svcrdma: Fix leak of transport addresses
Christophe JAILLET <christophe.jaillet@...adoo.fr>
SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
Gabriel Ravier <gabravier@...il.com>
tools: gpio-hammer: Avoid potential overflow in main
Pratik Rajesh Sampat <psampat@...ux.ibm.com>
cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
Vignesh Raghavendra <vigneshr@...com>
serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
Peter Ujfalusi <peter.ujfalusi@...com>
serial: 8250_omap: Fix sleeping function called from invalid context during probe
Vignesh Raghavendra <vigneshr@...com>
serial: 8250_port: Don't service RX FIFO if throttled
Nathan Chancellor <natechancellor@...il.com>
tracing: Use address-of operator on section symbols
Stefan Berger <stefanb@...ux.ibm.com>
tpm: ibmvtpm: Wait for buffer to be set before proceeding
Darrick J. Wong <darrick.wong@...cle.com>
xfs: don't ever return a stale pointer from __xfs_dir3_free_read
Colin Ian King <colin.king@...onical.com>
media: tda10071: fix unsigned sign extension overflow
Howard Chung <howardchung@...gle.com>
Bluetooth: L2CAP: handle l2cap config request during open state
John Clements <john.clements@....com>
drm/amdgpu: increase atombios cmd timeout
Wen Yang <wenyang@...ux.alibaba.com>
timekeeping: Prevent 32bit truncation in scale64_check_overflow()
Alain Michaud <alainm@...omium.org>
Bluetooth: guard against controllers sending zero'd events
Takashi Iwai <tiwai@...e.de>
media: go7007: Fix URB type for interrupt handling
Dmitry Osipenko <digetx@...il.com>
dmaengine: tegra-apb: Prevent race conditions on channel's freeing
Thomas Gleixner <tglx@...utronix.de>
bpf: Remove recursion prevention from rcu free callback
Dave Hansen <dave.hansen@...ux.intel.com>
x86/pkeys: Add check for pkey "overflow"
Paolo Bonzini <pbonzini@...hat.com>
KVM: x86: fix incorrect comparison in trace event
Bart Van Assche <bvanassche@....org>
RDMA/rxe: Fix configuration of atomic queue pair attributes
Wen Yang <wen.yang99@....com.cn>
drm/omap: fix possible object reference leak
James Smart <jsmart2021@...il.com>
scsi: lpfc: Fix coverity errors in fmdi attribute handling
James Smart <jsmart2021@...il.com>
scsi: lpfc: Fix RQ buffer leakage when no IOCBs available
Vasily Averin <vvs@...tuozzo.com>
selinux: sel_avc_get_stat_idx should increase position index
Steve Grubb <sgrubb@...hat.com>
audit: CONFIG_CHANGE don't log internal bookkeeping as an event
Qian Cai <cai@....pw>
skbuff: fix a data race in skb_queue_len()
Mohan Kumar <mkumard@...dia.com>
ALSA: hda: Clear RIRB status before reading WP
Zhuang Yanying <ann.zhuangyanying@...wei.com>
KVM: fix overflow of zero page refcount with ksm running
Hillf Danton <hdanton@...a.com>
Bluetooth: prefetch channel before killing sock
Steven Price <steven.price@....com>
mm: pagewalk: fix termination condition in walk_pte_range()
Manish Mandlik <mmandlik@...gle.com>
Bluetooth: Fix refcount use-after-free issue
Mert Dirik <mertdirik@...il.com>
ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
Josef Bacik <jbacik@...com>
tracing: Set kernel_stack's caller size properly
Matthias Fend <matthias.fend@...fvision.net>
dmaengine: zynqmp_dma: fix burst length configuration
Rafael J. Wysocki <rafael.j.wysocki@...el.com>
ACPI: EC: Reference count query handlers under lock
Nikhil Devshatwar <nikhil.nd@...com>
media: ti-vpe: cal: Restrict DMA to avoid memory corruption
Marco Elver <elver@...gle.com>
seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
Vasily Averin <vvs@...tuozzo.com>
rt_cpu_seq_next should increase position index
Vasily Averin <vvs@...tuozzo.com>
neigh_stat_seq_next() should increase position index
Joe Perches <joe@...ches.com>
kernel/sys.c: avoid copying possible padding bytes in copy_to_user
Pavel Shilovsky <pshilov@...rosoft.com>
CIFS: Properly process SMB3 lease breaks
Kusanagi Kouichi <slash@...auone-net.jp>
debugfs: Fix !DEBUG_FS debugfs_create_automount
Christophe JAILLET <christophe.jaillet@...adoo.fr>
RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
Brian Foster <bfoster@...hat.com>
xfs: fix attr leaf header freemap.size underflow
Pan Bian <bianpan2016@....com>
RDMA/i40iw: Fix potential use after free
Guoju Fang <fangguoju@...il.com>
bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
Divya Indi <divya.indi@...cle.com>
tracing: Adding NULL checks for trace_array descriptor pointer
Lee Jones <lee.jones@...aro.org>
mfd: mfd-core: Protect against NULL call-back function pointer
Hou Tao <houtao1@...wei.com>
mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()
Stephen Kitt <steve@....org>
clk/ti/adpll: allocate room for terminating null
Dmitry Osipenko <digetx@...il.com>
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
Joakim Tjernlund <joakim.tjernlund@...inera.com>
ALSA: usb-audio: Add delay quirk for H570e USB headsets
Russell King <rmk+kernel@...linux.org.uk>
ASoC: kirkwood: fix IRQ error handling
Kangjie Lu <kjlu@....edu>
gma/gma500: fix a memory disclosure bug due to uninitialized bytes
Fuqian Huang <huangfq.daxian@...il.com>
m68k: q40: Fix info-leak in rtc_ioctl
Balsundar P <balsundar.p@...rosemi.com>
scsi: aacraid: fix illegal IO beyond last LBA
Lukas Wunner <lukas@...ner.de>
serial: 8250: Avoid error message on reprobe
Eric Dumazet <edumazet@...gle.com>
net: add __must_check to skb_put_padto()
Florian Fainelli <f.fainelli@...il.com>
net/hsr: Check skb_put_padto() return value
Florian Fainelli <f.fainelli@...il.com>
net: phy: Avoid NPD upon phy_detach() when driver is unbound
Michael Chan <michael.chan@...adcom.com>
bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex.
Xin Long <lucien.xin@...il.com>
tipc: use skb_unshare() instead in tipc_buf_append()
Wei Wang <weiwan@...gle.com>
ip: fix tos reflection in ack and reset packets
Dan Carpenter <dan.carpenter@...cle.com>
hdlc_ppp: add range checks in ppp_cp_parse_cr()
Ben Hutchings <ben@...adent.org.uk>
mtd: Fix comparison in map_word_andequal()
Shamir Rabinovitch <shamir.rabinovitch@...cle.com>
RDMA/ucma: ucma_context reference leak in error path
Muchun Song <songmuchun@...edance.com>
kprobes: fix kill kprobe which has been marked as gone
Rustam Kovhaev <rkovhaev@...il.com>
KVM: fix memory leak in kvm_io_bus_unregister_dev()
Mark Salyzyn <salyzyn@...roid.com>
af_key: pfkey_dump needs parameter validation
-------------
Diffstat:
Documentation/DocBook/libata.tmpl | 2 +-
Documentation/devicetree/bindings/sound/wm8994.txt | 18 ++-
Makefile | 4 +-
arch/m68k/q40/config.c | 1 +
arch/mips/include/asm/cpu-type.h | 1 +
arch/s390/kernel/setup.c | 6 +-
arch/x86/include/asm/nospec-branch.h | 4 +-
arch/x86/include/asm/pkeys.h | 5 +
arch/x86/kernel/fpu/xstate.c | 9 +-
arch/x86/kvm/mmutrace.h | 2 +-
arch/x86/kvm/x86.c | 10 +-
drivers/acpi/ec.c | 16 +--
drivers/ata/acard-ahci.c | 6 +-
drivers/ata/libahci.c | 6 +-
drivers/ata/libata-core.c | 9 +-
drivers/ata/libata-sff.c | 12 +-
drivers/ata/pata_macio.c | 6 +-
drivers/ata/pata_pxa.c | 8 +-
drivers/ata/pdc_adma.c | 7 +-
drivers/ata/sata_fsl.c | 4 +-
drivers/ata/sata_inic162x.c | 4 +-
drivers/ata/sata_mv.c | 34 ++---
drivers/ata/sata_nv.c | 18 +--
drivers/ata/sata_promise.c | 6 +-
drivers/ata/sata_qstor.c | 8 +-
drivers/ata/sata_rcar.c | 6 +-
drivers/ata/sata_sil.c | 8 +-
drivers/ata/sata_sil24.c | 6 +-
drivers/ata/sata_sx4.c | 6 +-
drivers/atm/eni.c | 2 +-
drivers/char/tlclk.c | 17 +--
drivers/char/tpm/tpm_ibmvtpm.c | 9 ++
drivers/char/tpm/tpm_ibmvtpm.h | 1 +
drivers/clk/ti/adpll.c | 11 +-
drivers/clocksource/h8300_timer8.c | 2 +-
drivers/cpufreq/powernv-cpufreq.c | 13 +-
drivers/devfreq/tegra-devfreq.c | 4 +-
drivers/dma/tegra20-apb-dma.c | 3 +-
drivers/dma/xilinx/zynqmp_dma.c | 24 ++--
drivers/gpu/drm/amd/amdgpu/atom.c | 4 +-
drivers/gpu/drm/gma500/cdv_intel_display.c | 2 +
drivers/gpu/drm/omapdrm/dss/omapdss-boot-init.c | 4 +-
drivers/i2c/i2c-core.c | 2 +-
drivers/infiniband/core/ucma.c | 6 +-
drivers/infiniband/hw/cxgb4/cm.c | 4 +-
drivers/infiniband/hw/i40iw/i40iw_cm.c | 2 +-
drivers/infiniband/sw/rxe/rxe_qp.c | 7 +-
drivers/md/bcache/bcache.h | 1 +
drivers/md/bcache/btree.c | 12 +-
drivers/md/bcache/super.c | 1 +
drivers/media/dvb-frontends/tda10071.c | 9 +-
drivers/media/platform/ti-vpe/cal.c | 6 +-
drivers/media/usb/go7007/go7007-usb.c | 4 +-
drivers/mfd/mfd-core.c | 10 ++
drivers/mtd/chips/cfi_cmdset_0002.c | 1 -
drivers/mtd/cmdlinepart.c | 23 +++-
drivers/mtd/nand/omap_elm.c | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 31 +++--
drivers/net/ethernet/intel/e1000/e1000_main.c | 18 ++-
drivers/net/ieee802154/adf7242.c | 4 +-
drivers/net/phy/phy_device.c | 3 +-
drivers/net/wan/hdlc_ppp.c | 16 ++-
drivers/net/wireless/ath/ar5523/ar5523.c | 2 +
drivers/net/wireless/marvell/mwifiex/fw.h | 2 +-
drivers/net/wireless/marvell/mwifiex/sta_cmdresp.c | 4 +-
drivers/phy/phy-s5pv210-usb2.c | 4 +
drivers/scsi/aacraid/aachba.c | 8 +-
drivers/scsi/lpfc/lpfc_ct.c | 137 +++++++++++----------
drivers/scsi/lpfc/lpfc_hw.h | 36 +++---
drivers/scsi/lpfc/lpfc_sli.c | 4 +
drivers/tty/serial/8250/8250_core.c | 11 +-
drivers/tty/serial/8250/8250_omap.c | 8 +-
drivers/tty/serial/8250/8250_port.c | 16 ++-
drivers/tty/serial/samsung.c | 8 +-
drivers/tty/serial/xilinx_uartps.c | 22 +++-
drivers/usb/host/ehci-mv.c | 8 +-
drivers/vfio/pci/vfio_pci.c | 13 ++
fs/block_dev.c | 10 ++
fs/btrfs/extent-tree.c | 2 -
fs/ceph/caps.c | 14 ++-
fs/cifs/cifsglob.h | 9 +-
fs/cifs/file.c | 21 ++--
fs/cifs/misc.c | 17 +--
fs/cifs/smb1ops.c | 8 +-
fs/cifs/smb2misc.c | 32 ++---
fs/cifs/smb2ops.c | 44 ++++---
fs/cifs/smb2pdu.h | 2 +-
fs/fuse/dev.c | 1 -
fs/ubifs/io.c | 16 ++-
fs/xfs/libxfs/xfs_attr_leaf.c | 4 +-
fs/xfs/libxfs/xfs_dir2_node.c | 1 +
include/linux/debugfs.h | 5 +-
include/linux/libata.h | 13 +-
include/linux/mtd/map.h | 2 +-
include/linux/seqlock.h | 11 +-
include/linux/skbuff.h | 16 ++-
kernel/audit_watch.c | 2 -
kernel/bpf/hashtab.c | 8 --
kernel/kprobes.c | 14 ++-
kernel/printk/printk.c | 3 +
kernel/sys.c | 4 +-
kernel/time/timekeeping.c | 3 +-
kernel/trace/trace.c | 5 +-
kernel/trace/trace_entries.h | 2 +-
kernel/trace/trace_events.c | 2 +
lib/string.c | 24 ++++
mm/filemap.c | 8 ++
mm/mmap.c | 2 +
mm/pagewalk.c | 4 +-
net/atm/lec.c | 6 +
net/batman-adv/bridge_loop_avoidance.c | 42 +++++--
net/batman-adv/bridge_loop_avoidance.h | 4 +-
net/batman-adv/routing.c | 4 +
net/batman-adv/soft-interface.c | 6 +-
net/bluetooth/hci_event.c | 25 +++-
net/bluetooth/l2cap_core.c | 29 +++--
net/bluetooth/l2cap_sock.c | 18 ++-
net/core/neighbour.c | 1 +
net/hsr/hsr_device.c | 3 +-
net/ipv4/ip_output.c | 3 +-
net/ipv4/route.c | 1 +
net/key/af_key.c | 7 ++
net/mac802154/tx.c | 8 +-
net/sunrpc/svc_xprt.c | 19 ++-
net/sunrpc/xprtrdma/svc_rdma_backchannel.c | 1 +
net/tipc/msg.c | 3 +-
net/unix/af_unix.c | 11 +-
security/selinux/selinuxfs.c | 1 +
sound/hda/hdac_bus.c | 4 +
sound/pci/asihpi/hpioctl.c | 4 +-
sound/pci/hda/hda_controller.c | 11 +-
sound/soc/kirkwood/kirkwood-dma.c | 2 +-
sound/usb/midi.c | 29 ++++-
sound/usb/quirks.c | 7 +-
tools/gpio/gpio-hammer.c | 17 ++-
tools/objtool/check.c | 2 +-
tools/perf/util/sort.c | 2 +-
tools/perf/util/symbol-elf.c | 7 ++
tools/testing/selftests/x86/syscall_nt.c | 1 +
virt/kvm/kvm_main.c | 22 ++--
140 files changed, 913 insertions(+), 468 deletions(-)
Powered by blists - more mailing lists