| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 13 Sep 2022 16:05:31 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-kernel@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
stable@...r.kernel.org, torvalds@...ux-foundation.org,
akpm@...ux-foundation.org, linux@...ck-us.net, shuah@...nel.org,
patches@...nelci.org, lkft-triage@...ts.linaro.org, pavel@...x.de,
jonathanh@...dia.com, f.fainelli@...il.com,
sudipm.mukherjee@...il.com, slade@...dewatkins.com
Subject: [PATCH 5.4 000/108] 5.4.212-rc1 review
This is the start of the stable review cycle for the 5.4.212 release.
There are 108 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 15 Sep 2022 14:03:27 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.212-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 5.4.212-rc1
Yang Ling <gnaygnil@...il.com>
MIPS: loongson32: ls1c: Fix hang during startup
Peter Zijlstra <peterz@...radead.org>
x86/nospec: Fix i386 RSB stuffing
Toke Høiland-Jørgensen <toke@...e.dk>
sch_sfb: Also store skb len before calling child enqueue
Neal Cardwell <ncardwell@...gle.com>
tcp: fix early ETIMEDOUT after spurious non-SACK RTO
Sagi Grimberg <sagi@...mberg.me>
nvme-tcp: fix UAF when detecting digest errors
Chris Mi <cmi@...dia.com>
RDMA/mlx5: Set local port to one when accessing counters
David Lebrun <dlebrun@...gle.com>
ipv6: sr: fix out-of-bounds read when setting HMAC data.
Linus Walleij <linus.walleij@...aro.org>
RDMA/siw: Pass a pointer to virt_to_page()
Ivan Vecera <ivecera@...hat.com>
i40e: Fix kernel crash during module removal
Dan Carpenter <dan.carpenter@...cle.com>
tipc: fix shift wrapping bug in map_get()
Toke Høiland-Jørgensen <toke@...e.dk>
sch_sfb: Don't assume the skb is still around after enqueueing to child
David Howells <dhowells@...hat.com>
afs: Use the operation issue time instead of the reply time for callbacks
David Howells <dhowells@...hat.com>
rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
David Leadbeater <dgl@....cx>
netfilter: nf_conntrack_irc: Fix forged IP logic
Harsh Modi <harshmodi@...gle.com>
netfilter: br_netfilter: Drop dst references before setting.
Chengchang Tang <tangchengchang@...wei.com>
RDMA/hns: Fix supported page size
Liang He <windhl@....com>
soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
Michael Guralnik <michaelgur@...dia.com>
RDMA/cma: Fix arguments order in net device validation
Andrew Halaney <ahalaney@...hat.com>
regulator: core: Clean up on enable failure
Marco Felsch <m.felsch@...gutronix.de>
ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
David Howells <dhowells@...hat.com>
smb3: missing inode locks in punch hole
Tejun Heo <tj@...nel.org>
cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
Tejun Heo <tj@...nel.org>
cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
Michal Koutný <mkoutny@...e.com>
cgroup: Optimize single thread migration
Yang Yingliang <yangyingliang@...wei.com>
scsi: lpfc: Add missing destroy_workqueue() in error path
Sreekanth Reddy <sreekanth.reddy@...adcom.com>
scsi: mpt3sas: Fix use-after-free warning
Bart Van Assche <bvanassche@....org>
nvmet: fix a use-after-free
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
debugfs: add debugfs_lookup_and_remove()
Christian A. Ehrhardt <lk@...e.de>
kprobes: Prohibit probes in gate area
Dongxiang Ke <kdx.glider@...il.com>
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
Pattara Teerapong <pteerapong@...omium.org>
ALSA: aloop: Fix random zeros in capture data when using jiffies timer
Tasos Sahanidis <tasos@...ossah.com>
ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
Qu Huang <jinsdb@....com>
drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
Yang Yingliang <yangyingliang@...wei.com>
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
Mark Brown <broonie@...nel.org>
arm64/signal: Raise limit on stack frames
Sudeep Holla <sudeep.holla@....com>
arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
Helge Deller <deller@....de>
parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
Li Qiong <liqiong@...china.com>
parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
Zhenneng Li <lizhenneng@...inos.cn>
drm/radeon: add a force flush to delay work when radeon
Candice Li <candice.li@....com>
drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
Jeffy Chen <jeffy.chen@...k-chips.com>
drm/gem: Fix GEM handle release errors
Guixin Liu <kanie@...ux.alibaba.com>
scsi: megaraid_sas: Fix double kfree()
Johan Hovold <johan@...nel.org>
USB: serial: ch341: fix disabled rx timer on older devices
Johan Hovold <johan@...nel.org>
USB: serial: ch341: fix lost character on LCR updates
Johan Hovold <johan+linaro@...nel.org>
usb: dwc3: disable USB core PHY management
Johan Hovold <johan+linaro@...nel.org>
usb: dwc3: fix PHY disable sequence
Anand Jain <anand.jain@...cle.com>
btrfs: harden identification of a stale device
Diego Santa Cruz <Diego.SantaCruz@...netix.com>
drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
Takashi Iwai <tiwai@...e.de>
ALSA: seq: Fix data-race at module auto-loading
Takashi Iwai <tiwai@...e.de>
ALSA: seq: oss: Fix data-race for max_midi_devs access
Miquel Raynal <miquel.raynal@...tlin.com>
net: mac802154: Fix a condition in the receive path
Nicolas Dichtel <nicolas.dichtel@...nd.com>
ip: fix triggering of 'icmp redirect'
Siddh Raman Pant <code@...dh.me>
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
Isaac J. Manjarres <isaacmanjarres@...gle.com>
driver core: Don't probe devices after bus_type.match() probe deferral
Krishna Kurapati <quic_kriskura@...cinc.com>
usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
Alan Stern <stern@...land.harvard.edu>
USB: core: Prevent nested device-reset calls
Josh Poimboeuf <jpoimboe@...nel.org>
s390: fix nospec table alignments
Gerald Schaefer <gerald.schaefer@...ux.ibm.com>
s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
Witold Lipieta <witold.lipieta@...umatec.com>
usb-storage: Add ignore-residue quirk for NXP PN7462AU
Thierry GUIBERT <thierry.guibert@...ix-rouge.fr>
USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
Heiner Kallweit <hkallweit1@...il.com>
usb: dwc2: fix wrong order of phy_power_on and phy_init
Pablo Sun <pablo.sun@...iatek.com>
usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
Slark Xiao <slark_xiao@....com>
USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
Yonglin Tan <yonglin.tan@...look.com>
USB: serial: option: add Quectel EM060K modem
Yan Xinyu <sdlyyxy@...t.edu.cn>
USB: serial: option: add support for OPPO R11 diag port
Johan Hovold <johan@...nel.org>
USB: serial: cp210x: add Decagon UCA device id
Mathias Nyman <mathias.nyman@...ux.intel.com>
xhci: Add grace period after xHC start to prevent premature runtime suspend.
Mika Westerberg <mika.westerberg@...ux.intel.com>
thunderbolt: Use the actual buffer in tb_async_error()
Haibo Chen <haibo.chen@....com>
gpio: pca953x: Add mutex_lock for regcache sync in PM
Armin Wolf <W_Armin@....de>
hwmon: (gpio-fan) Fix array out of bounds access
Stefan Wahren <stefan.wahren@...e.com>
clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
Peter Robinson <pbrobinson@...il.com>
Input: rk805-pwrkey - fix module autoloading
Chen-Yu Tsai <wenst@...omium.org>
clk: core: Fix runtime PM sequence in clk_core_unprepare()
Stephen Boyd <sboyd@...nel.org>
Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
Chen-Yu Tsai <wenst@...omium.org>
clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
Colin Ian King <colin.i.king@...il.com>
drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
Johan Hovold <johan+linaro@...nel.org>
usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
Carlos Llamas <cmllamas@...gle.com>
binder: fix UAF of ref->proc caused by race condition
Niek Nooijens <niek.nooijens@...on.com>
USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
Johan Hovold <johan+linaro@...nel.org>
misc: fastrpc: fix memory corruption on open
Johan Hovold <johan+linaro@...nel.org>
misc: fastrpc: fix memory corruption on probe
Marcus Folkesson <marcus.folkesson@...il.com>
iio: adc: mcp3911: use correct formula for AD conversion
Tetsuo Handa <penguin-kernel@...ove.SAKURA.ne.jp>
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
Sherry Sun <sherry.sun@....com>
tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
Helge Deller <deller@....de>
vt: Clear selection before changing the font
Masahiro Yamada <masahiroy@...nel.org>
powerpc: align syscall table for ppc32
Dan Carpenter <dan.carpenter@...cle.com>
staging: rtl8712: fix use after free bugs
Shenwei Wang <shenwei.wang@....com>
serial: fsl_lpuart: RS485 RTS polariy is inverse
Yacan Liu <liuyacan@...p.netease.com>
net/smc: Remove redundant refcount increase
Jakub Kicinski <kuba@...nel.org>
Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
Eric Dumazet <edumazet@...gle.com>
tcp: annotate data-race around challenge_timestamp
Toke Høiland-Jørgensen <toke@...e.dk>
sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
Cong Wang <cong.wang@...edance.com>
kcm: fix strp_init() order and cleanup
Duoming Zhou <duoming@....edu.cn>
ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
Zhengchao Shao <shaozhengchao@...wei.com>
net: sched: tbf: don't call qdisc_put() while holding tree lock
Mathias Nyman <mathias.nyman@...ux.intel.com>
Revert "xhci: turn off port power in shutdown"
Dan Carpenter <dan.carpenter@...cle.com>
wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
Lin Ma <linma@....edu.cn>
ieee802154/adf7242: defer destroy_workqueue call
Marcus Folkesson <marcus.folkesson@...il.com>
iio: adc: mcp3911: make use of the sign bit
Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
Douglas Anderson <dianders@...omium.org>
drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
sunliming <sunliming@...inos.cn>
drm/msm/dsi: fix the inconsistent indenting
Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@...oirfairelinux.com>
net: dp83822: disable false carrier interrupt
Yee Lee <yee.lee@...iatek.com>
Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
Linus Torvalds <torvalds@...ux-foundation.org>
fs: only do a memory barrier for the first set_buffer_uptodate()
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()
Stanislaw Gruszka <stf_xl@...pl>
wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
Hyunwoo Kim <imv4bel@...il.com>
efi: capsule-loader: Fix use-after-free in efi_capsule_write
-------------
Diffstat:
Makefile | 4 +-
arch/arm/boot/dts/imx6qdl-kontron-samx6i.dtsi | 10 ---
arch/arm64/kernel/cacheinfo.c | 6 +-
arch/arm64/kernel/signal.c | 2 +-
arch/mips/loongson32/ls1c/board.c | 1 -
arch/parisc/kernel/head.S | 43 +++++++++-
arch/powerpc/kernel/systbl.S | 1 +
arch/s390/include/asm/hugetlb.h | 6 +-
arch/s390/kernel/vmlinux.lds.S | 1 +
arch/x86/include/asm/nospec-branch.h | 14 ++++
drivers/android/binder.c | 12 +++
drivers/base/dd.c | 10 +++
drivers/clk/bcm/clk-raspberrypi.c | 2 +-
drivers/clk/clk.c | 3 +-
drivers/firmware/efi/capsule-loader.c | 31 ++------
drivers/gpio/gpio-pca953x.c | 8 +-
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 3 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v1_0.c | 1 +
drivers/gpu/drm/drm_gem.c | 17 +---
drivers/gpu/drm/drm_internal.h | 4 +-
drivers/gpu/drm/drm_prime.c | 20 +++--
drivers/gpu/drm/i915/display/intel_quirks.c | 3 +
drivers/gpu/drm/i915/gvt/handlers.c | 2 +-
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 2 +-
drivers/gpu/drm/msm/dsi/phy/dsi_phy.c | 2 +-
drivers/gpu/drm/radeon/radeon_device.c | 3 +
drivers/hwmon/gpio-fan.c | 3 +
drivers/iio/adc/mcp3911.c | 19 +++--
drivers/infiniband/core/cma.c | 4 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 2 +-
drivers/infiniband/hw/mlx5/mad.c | 6 ++
drivers/infiniband/sw/siw/siw_qp_tx.c | 18 ++++-
drivers/input/joystick/iforce/iforce-serio.c | 6 +-
drivers/input/joystick/iforce/iforce-usb.c | 8 +-
drivers/input/joystick/iforce/iforce.h | 6 ++
drivers/input/misc/rk805-pwrkey.c | 1 +
drivers/misc/fastrpc.c | 12 ++-
drivers/net/ethernet/intel/i40e/i40e_client.c | 5 +-
drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c | 4 +-
drivers/net/ethernet/rocker/rocker_ofdpa.c | 2 +-
drivers/net/ieee802154/adf7242.c | 3 +-
drivers/net/phy/dp83822.c | 1 -
drivers/net/wireless/intel/iwlegacy/4965-rs.c | 5 +-
drivers/nvme/host/tcp.c | 2 +-
drivers/nvme/target/core.c | 6 +-
drivers/parisc/ccio-dma.c | 11 ++-
drivers/platform/x86/pmc_atom.c | 2 +-
drivers/regulator/core.c | 9 ++-
drivers/scsi/lpfc/lpfc_init.c | 5 +-
drivers/scsi/megaraid/megaraid_sas_fusion.c | 1 -
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +-
drivers/soc/bcm/brcmstb/pm/pm-arm.c | 50 +++++++++---
drivers/staging/rtl8712/rtl8712_cmd.c | 36 ---------
drivers/thunderbolt/ctl.c | 2 +-
drivers/tty/serial/fsl_lpuart.c | 5 +-
drivers/tty/vt/vt.c | 12 ++-
drivers/usb/class/cdc-acm.c | 3 +
drivers/usb/core/hub.c | 10 +++
drivers/usb/dwc2/platform.c | 8 +-
drivers/usb/dwc3/core.c | 19 ++---
drivers/usb/dwc3/dwc3-qcom.c | 14 +++-
drivers/usb/dwc3/host.c | 11 +++
drivers/usb/gadget/function/storage_common.c | 6 +-
drivers/usb/host/xhci-hub.c | 13 +++-
drivers/usb/host/xhci.c | 19 ++---
drivers/usb/host/xhci.h | 4 +-
drivers/usb/serial/ch341.c | 15 +++-
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 6 ++
drivers/usb/serial/option.c | 15 ++++
drivers/usb/storage/unusual_devs.h | 7 ++
drivers/usb/typec/altmodes/displayport.c | 4 +-
drivers/video/fbdev/chipsfb.c | 1 +
fs/afs/flock.c | 2 +-
fs/afs/fsclient.c | 2 +-
fs/afs/internal.h | 3 +-
fs/afs/rxrpc.c | 7 +-
fs/afs/yfsclient.c | 3 +-
fs/btrfs/volumes.c | 44 +++++++++--
fs/cifs/smb2ops.c | 10 +--
fs/debugfs/inode.c | 22 ++++++
include/linux/buffer_head.h | 11 +++
include/linux/debugfs.h | 6 ++
include/linux/platform_data/x86/pmc_atom.h | 6 +-
include/linux/usb.h | 2 +
include/linux/usb/typec_dp.h | 5 ++
kernel/cgroup/cgroup-internal.h | 5 +-
kernel/cgroup/cgroup-v1.c | 5 +-
kernel/cgroup/cgroup.c | 91 ++++++++++++++++++----
kernel/cgroup/cpuset.c | 3 +-
kernel/kprobes.c | 1 +
mm/kmemleak.c | 8 +-
net/bridge/br_netfilter_hooks.c | 2 +
net/bridge/br_netfilter_ipv6.c | 1 +
net/ipv4/fib_frontend.c | 4 +-
net/ipv4/tcp_input.c | 29 ++++---
net/ipv6/seg6.c | 5 ++
net/kcm/kcmsock.c | 15 ++--
net/mac80211/ibss.c | 4 +
net/mac802154/rx.c | 2 +-
net/netfilter/nf_conntrack_irc.c | 5 +-
net/rxrpc/rxkad.c | 2 +-
net/sched/sch_sfb.c | 13 ++--
net/sched/sch_tbf.c | 4 +-
net/smc/af_smc.c | 1 -
net/tipc/monitor.c | 2 +-
net/wireless/debugfs.c | 3 +-
sound/core/seq/oss/seq_oss_midi.c | 2 +
sound/core/seq/seq_clientmgr.c | 12 ++-
sound/drivers/aloop.c | 7 +-
sound/pci/emu10k1/emupcm.c | 2 +-
sound/usb/stream.c | 2 +-
113 files changed, 663 insertions(+), 307 deletions(-)
Powered by blists - more mailing lists