| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 9 Nov 2022 09:26:53 +0100
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
patches@...ts.linux.dev, linux-kernel@...r.kernel.org,
torvalds@...ux-foundation.org, akpm@...ux-foundation.org,
linux@...ck-us.net, shuah@...nel.org, patches@...nelci.org,
lkft-triage@...ts.linaro.org, pavel@...x.de, jonathanh@...dia.com,
f.fainelli@...il.com, sudipm.mukherjee@...il.com,
srw@...dewatkins.net
Subject: [PATCH 5.10 000/117] 5.10.154-rc2 review
This is the start of the stable review cycle for the 5.10.154 release.
There are 117 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 11 Nov 2022 08:21:58 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.154-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 5.10.154-rc2
Vasily Averin <vvs@...tuozzo.com>
ipc: remove memcg accounting for sops objects in do_semtimedop()
Dokyung Song <dokyung.song@...il.com>
wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
Ville Syrjälä <ville.syrjala@...ux.intel.com>
drm/i915/sdvo: Setup DDC fully before output init
Ville Syrjälä <ville.syrjala@...ux.intel.com>
drm/i915/sdvo: Filter out invalid outputs more sensibly
Brian Norris <briannorris@...omium.org>
drm/rockchip: dsi: Force synchronous probe
Matthew Wilcox (Oracle) <willy@...radead.org>
ext4,f2fs: fix readahead of verity data
Maxim Levitsky <mlevitsk@...hat.com>
KVM: x86: emulator: update the emulation mode after CR0 write
Maxim Levitsky <mlevitsk@...hat.com>
KVM: x86: emulator: introduce emulator_recalc_and_set_mode
Maxim Levitsky <mlevitsk@...hat.com>
KVM: x86: emulator: em_sysexit should update ctxt->mode
Jim Mattson <jmattson@...gle.com>
KVM: x86: Mask off reserved bits in CPUID.80000001H
Jim Mattson <jmattson@...gle.com>
KVM: x86: Mask off reserved bits in CPUID.80000008H
Jim Mattson <jmattson@...gle.com>
KVM: x86: Mask off reserved bits in CPUID.8000001AH
Jim Mattson <jmattson@...gle.com>
KVM: x86: Mask off reserved bits in CPUID.80000006H
Luís Henriques <lhenriques@...e.de>
ext4: fix BUG_ON() when directory entry has invalid rec_len
Ye Bin <yebin10@...wei.com>
ext4: fix warning in 'ext4_da_release_space'
Helge Deller <deller@....de>
parisc: Avoid printing the hardware path twice
Helge Deller <deller@....de>
parisc: Export iosapic_serial_irq() symbol for serial port driver
Helge Deller <deller@....de>
parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
Kan Liang <kan.liang@...ux.intel.com>
perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
Kan Liang <kan.liang@...ux.intel.com>
perf/x86/intel: Fix pebs event constraints for ICL
Ard Biesheuvel <ardb@...nel.org>
efi: random: Use 'ACPI reclaim' memory for random seed
Ard Biesheuvel <ardb@...nel.org>
efi: random: reduce seed size to 32 bytes
Miklos Szeredi <mszeredi@...hat.com>
fuse: add file_modified() to fallocate
Gaosheng Cui <cuigaosheng1@...wei.com>
capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
Zheng Yejian <zhengyejian1@...wei.com>
tracing/histogram: Update document for KEYS_MAX size
Rasmus Villemoes <linux@...musvillemoes.dk>
tools/nolibc/string: Fix memcmp() implementation
Li Qiang <liq3ea@....com>
kprobe: reverse kp->flags when arm_kprobe failed
Shang XiaoJing <shangxiaojing@...wei.com>
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
Kuniyuki Iwashima <kuniyu@...zon.com>
tcp/udp: Make early_demux back namespacified.
Li Huafei <lihuafei1@...wei.com>
ftrace: Fix use-after-free for dynamic ftrace_ops
David Sterba <dsterba@...e.com>
btrfs: fix type of parameter generation in btrfs_get_dentry
James Clark <james.clark@....com>
coresight: cti: Fix hang in cti_disable_hw()
Carlos Llamas <cmllamas@...gle.com>
binder: fix UAF of alloc->vma in race with munmap()
Vasily Averin <vvs@...tuozzo.com>
memcg: enable accounting of ipc resources
Sascha Hauer <s.hauer@...gutronix.de>
mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times
Kuniyuki Iwashima <kuniyu@...zon.com>
tcp/udp: Fix memory leak in ipv6_renew_options().
Eric Biggers <ebiggers@...gle.com>
fscrypt: fix keyring memory leak on mount failure
Eric Biggers <ebiggers@...gle.com>
fscrypt: stop using keyrings subsystem for fscrypt_master_key
Eric Biggers <ebiggers@...gle.com>
fscrypt: simplify master key locking
John Veness <john-linux@...ago.org.uk>
ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
Yu Kuai <yukuai3@...wei.com>
block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
Luiz Augusto von Dentz <luiz.von.dentz@...el.com>
Bluetooth: L2CAP: Fix attempting to access uninitialized memory
Luiz Augusto von Dentz <luiz.von.dentz@...el.com>
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
Chen Zhongjin <chenzhongjin@...wei.com>
i2c: piix4: Fix adapter not be removed in piix4_remove()
Cristian Marussi <cristian.marussi@....com>
arm64: dts: juno: Add thermal critical trip points
Cristian Marussi <cristian.marussi@....com>
firmware: arm_scmi: Make Rx chan_setup fail on memory errors
Cristian Marussi <cristian.marussi@....com>
firmware: arm_scmi: Suppress the driver's bind attributes
Tim Harvey <tharvey@...eworks.com>
ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
Jerry Snitselaar <jsnitsel@...hat.com>
efi/tpm: Pass correct address to memblock_reserve
Martin Tůma <martin.tuma@...iteqautomotive.com>
i2c: xiic: Add platform module alias
Danijel Slivka <danijel.slivka@....com>
drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
Samuel Bailey <samuel.bailey1@...il.com>
HID: saitek: add madcatz variant of MMO7 mouse device ID
Uday Shankar <ushankar@...estorage.com>
scsi: core: Restrict legal sdev_state transitions via sysfs
Ashish Kalra <ashish.kalra@....com>
ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
Hangyu Hua <hbh25y@...il.com>
media: meson: vdec: fix possible refcount leak in vdec_probe()
Hans Verkuil <hverkuil-cisco@...all.nl>
media: dvb-frontends/drxk: initialize err to 0
Hans Verkuil <hverkuil-cisco@...all.nl>
media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
Hans Verkuil <hverkuil-cisco@...all.nl>
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
Laurent Pinchart <laurent.pinchart@...asonboard.com>
media: rkisp1: Zero v4l2_subdev_format fields in when validating links
Laurent Pinchart <laurent.pinchart@...asonboard.com>
media: rkisp1: Initialize color space on resizer sink and source pads
Peter Oberparleiter <oberpar@...ux.ibm.com>
s390/boot: add secure boot trailer
Mario Limonciello <mario.limonciello@....com>
xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
Linus Walleij <linus.walleij@...aro.org>
mtd: parsers: bcm47xxpart: Fix halfblock reads
Rafał Miłecki <rafal@...ecki.pl>
mtd: parsers: bcm47xxpart: print correct offset on read error
Helge Deller <deller@....de>
fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
Helge Deller <deller@....de>
video/fbdev/stifb: Implement the stifb_fillrect() function
Patrick Thompson <ptf@...gle.com>
mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
Jisheng Zhang <Jisheng.Zhang@...aptics.com>
mmc: sdhci-pci: Avoid comma separated statements
Sascha Hauer <s.hauer@...gutronix.de>
mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
Johan Hovold <johan+linaro@...nel.org>
drm/msm/hdmi: fix IRQ lifetime
Daniel Thompson <daniel.thompson@...aro.org>
drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag
Zhengchao Shao <shaozhengchao@...wei.com>
ipv6: fix WARNING in ip6_route_net_exit_late()
Chen Zhongjin <chenzhongjin@...wei.com>
net, neigh: Fix null-ptr-deref in neigh_table_clear()
Gaosheng Cui <cuigaosheng1@...wei.com>
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
Zhengchao Shao <shaozhengchao@...wei.com>
Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
Maxim Mikityanskiy <maxtram95@...il.com>
Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
Filipe Manana <fdmanana@...e.com>
btrfs: fix ulist leaks in error paths of qgroup self tests
Filipe Manana <fdmanana@...e.com>
btrfs: fix inode list leak during backref walking at find_parent_nodes()
Filipe Manana <fdmanana@...e.com>
btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
Yang Yingliang <yangyingliang@...wei.com>
isdn: mISDN: netjet: fix wrong check of device registration
Yang Yingliang <yangyingliang@...wei.com>
mISDN: fix possible memory leak in mISDN_register_device()
Zhang Qilong <zhangqilong3@...wei.com>
rose: Fix NULL pointer dereference in rose_send_frame()
Zhengchao Shao <shaozhengchao@...wei.com>
ipvs: fix WARNING in ip_vs_app_net_cleanup()
Zhengchao Shao <shaozhengchao@...wei.com>
ipvs: fix WARNING in __ip_vs_cleanup_batch()
Jason A. Donenfeld <Jason@...c4.com>
ipvs: use explicitly signed chars
Pablo Neira Ayuso <pablo@...filter.org>
netfilter: nf_tables: release flow rule object from commit path
Ziyang Xuan <william.xuanziyang@...wei.com>
net: tun: fix bugs for oversize packet when napi frags enabled
Dan Carpenter <dan.carpenter@...cle.com>
net: sched: Fix use after free in red_enqueue()
Sergey Shtylyov <s.shtylyov@....ru>
ata: pata_legacy: fix pdc20230_set_piomode()
Zhang Changzhong <zhangchangzhong@...wei.com>
net: fec: fix improper use of NETDEV_TX_BUSY
Shang XiaoJing <shangxiaojing@...wei.com>
nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
Shang XiaoJing <shangxiaojing@...wei.com>
nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
Shang XiaoJing <shangxiaojing@...wei.com>
nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
wengjianfeng <wengjianfeng@...ong.com>
NFC: nxp-nci: remove unnecessary labels
Shang XiaoJing <shangxiaojing@...wei.com>
nfc: fdp: Fix potential memory leak in fdp_nci_send()
Krzysztof Kozlowski <krzysztof.kozlowski@...onical.com>
nfc: fdp: drop ftrace-like debugging messages
Dan Carpenter <dan.carpenter@...cle.com>
RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
Chen Zhongjin <chenzhongjin@...wei.com>
RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
Chen Zhongjin <chenzhongjin@...wei.com>
net: dsa: Fix possible memory leaks in dsa_loop_init()
Zhang Xiaoxu <zhangxiaoxu5@...wei.com>
nfs4: Fix kmemleak when allocate slot failed
Trond Myklebust <trond.myklebust@...merspace.com>
NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
Trond Myklebust <trond.myklebust@...merspace.com>
NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
Trond Myklebust <trond.myklebust@...merspace.com>
NFSv4: Fix a potential state reclaim deadlock
Dean Luick <dean.luick@...nelisnetworks.com>
IB/hfi1: Correctly move list in sc_disable()
Håkon Bugge <haakon.bugge@...cle.com>
RDMA/cma: Use output interface for net_dev check
Alexander Graf <graf@...zon.com>
KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
Alexander Graf <graf@...zon.com>
KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
Aaron Lewis <aaronlewis@...gle.com>
KVM: x86: Protect the unused bits in MSR exiting flags
Zhang Rui <rui.zhang@...el.com>
x86/topology: Fix duplicated core ID within a package
Zhang Rui <rui.zhang@...el.com>
x86/topology: Fix multiple packages shown on a single-package system
Yazen Ghannam <yazen.ghannam@....com>
x86/topology: Set cpu_die_id only if DIE_TYPE found
Sean Christopherson <seanjc@...gle.com>
KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1)
Sean Christopherson <seanjc@...gle.com>
KVM: x86: Trace re-injected exceptions
Sean Christopherson <seanjc@...gle.com>
KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
Sean Christopherson <seanjc@...gle.com>
KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01
Lukas Wunner <lukas@...ner.de>
serial: ar933x: Deassert Transmit Enable on ->rs485_config()
Maciej W. Rozycki <macro@...am.me.uk>
serial: 8250: Let drivers request full 16550A feature probing
-------------
Diffstat:
Documentation/trace/histogram.rst | 2 +-
Makefile | 4 +-
arch/arm/boot/dts/imx6qdl-gw5910.dtsi | 2 +-
arch/arm/boot/dts/imx6qdl-gw5913.dtsi | 2 +-
arch/arm64/boot/dts/arm/juno-base.dtsi | 14 +
arch/parisc/include/asm/hardware.h | 12 +-
arch/parisc/kernel/drivers.c | 14 +-
arch/s390/boot/compressed/vmlinux.lds.S | 13 +-
arch/x86/events/intel/core.c | 1 +
arch/x86/events/intel/ds.c | 9 +-
arch/x86/kernel/cpu/topology.c | 26 +-
arch/x86/kvm/cpuid.c | 8 +-
arch/x86/kvm/emulate.c | 102 +++--
arch/x86/kvm/trace.h | 12 +-
arch/x86/kvm/vmx/nested.c | 30 +-
arch/x86/kvm/vmx/vmx.h | 6 +-
arch/x86/kvm/x86.c | 134 +++++-
block/bfq-iosched.c | 4 +-
drivers/acpi/apei/ghes.c | 2 +-
drivers/android/binder_alloc.c | 6 +-
drivers/ata/pata_legacy.c | 5 +-
drivers/firmware/arm_scmi/driver.c | 9 +-
drivers/firmware/efi/efi.c | 2 +-
drivers/firmware/efi/libstub/random.c | 7 +-
drivers/firmware/efi/tpm.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 6 +
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 4 +
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +-
drivers/gpu/drm/i915/display/intel_sdvo.c | 58 ++-
drivers/gpu/drm/msm/hdmi/hdmi.c | 4 +-
drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c | 6 +
drivers/hid/hid-ids.h | 1 +
drivers/hid/hid-quirks.c | 1 +
drivers/hid/hid-saitek.c | 2 +
drivers/hwtracing/coresight/coresight-cti-core.c | 5 -
drivers/i2c/busses/i2c-piix4.c | 1 +
drivers/i2c/busses/i2c-xiic.c | 1 +
drivers/infiniband/core/cma.c | 2 +-
drivers/infiniband/core/device.c | 10 +-
drivers/infiniband/core/nldev.c | 2 +-
drivers/infiniband/hw/hfi1/pio.c | 3 +-
drivers/infiniband/hw/qedr/main.c | 9 +-
drivers/isdn/hardware/mISDN/netjet.c | 2 +-
drivers/isdn/mISDN/core.c | 5 +-
drivers/media/cec/platform/cros-ec/cros-ec-cec.c | 2 +
drivers/media/cec/platform/s5p/s5p_cec.c | 2 +
drivers/media/dvb-frontends/drxk_hard.c | 2 +-
drivers/mmc/host/sdhci-esdhc-imx.c | 17 +-
drivers/mmc/host/sdhci-pci-core.c | 14 +-
drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c | 6 +-
drivers/mtd/parsers/bcm47xxpart.c | 4 +-
drivers/net/dsa/dsa_loop.c | 25 +-
drivers/net/ethernet/freescale/fec_main.c | 4 +-
drivers/net/phy/mdio_bus.c | 2 +-
drivers/net/tun.c | 3 +-
.../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 4 +
drivers/nfc/fdp/fdp.c | 39 +-
drivers/nfc/fdp/fdp.h | 1 -
drivers/nfc/fdp/i2c.c | 12 +-
drivers/nfc/nfcmrvl/i2c.c | 7 +-
drivers/nfc/nxp-nci/core.c | 46 +-
drivers/nfc/s3fwrn5/core.c | 8 +-
drivers/parisc/iosapic.c | 1 +
drivers/scsi/scsi_sysfs.c | 8 +
drivers/staging/media/meson/vdec/vdec.c | 2 +
drivers/staging/media/rkisp1/rkisp1-capture.c | 7 +-
drivers/staging/media/rkisp1/rkisp1-resizer.c | 4 +
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/8250/Kconfig | 2 +-
drivers/tty/serial/ar933x_uart.c | 5 +
drivers/usb/host/xhci-pci.c | 32 +-
drivers/video/fbdev/stifb.c | 46 +-
fs/btrfs/backref.c | 54 ++-
fs/btrfs/export.c | 2 +-
fs/btrfs/export.h | 2 +-
fs/btrfs/tests/qgroup-tests.c | 20 +-
fs/crypto/fscrypt_private.h | 80 ++--
fs/crypto/hooks.c | 8 +-
fs/crypto/keyring.c | 495 +++++++++++----------
fs/crypto/keysetup.c | 85 ++--
fs/crypto/policy.c | 8 +-
fs/ext4/migrate.c | 3 +-
fs/ext4/namei.c | 10 +-
fs/ext4/verity.c | 3 +-
fs/f2fs/verity.c | 3 +-
fs/fuse/file.c | 4 +
fs/nfs/delegation.c | 36 +-
fs/nfs/nfs4client.c | 1 +
fs/nfs/nfs4state.c | 2 +
fs/super.c | 3 +-
include/acpi/ghes.h | 2 +-
include/linux/efi.h | 2 +-
include/linux/fs.h | 2 +-
include/linux/fscrypt.h | 4 +-
include/linux/serial_core.h | 3 +-
include/net/protocol.h | 4 -
include/net/tcp.h | 2 +-
include/net/udp.h | 1 +
ipc/msg.c | 2 +-
ipc/sem.c | 6 +-
ipc/shm.c | 2 +-
kernel/kprobes.c | 5 +-
kernel/trace/ftrace.c | 16 +-
kernel/trace/kprobe_event_gen_test.c | 18 +-
net/bluetooth/l2cap_core.c | 77 +++-
net/core/neighbour.c | 2 +-
net/ipv4/af_inet.c | 14 +-
net/ipv4/ip_input.c | 37 +-
net/ipv4/sysctl_net_ipv4.c | 59 +--
net/ipv6/ip6_input.c | 26 +-
net/ipv6/ipv6_sockglue.c | 7 +
net/ipv6/route.c | 14 +-
net/ipv6/tcp_ipv6.c | 9 +-
net/ipv6/udp.c | 9 +-
net/netfilter/ipvs/ip_vs_app.c | 10 +-
net/netfilter/ipvs/ip_vs_conn.c | 30 +-
net/netfilter/nf_tables_api.c | 6 +-
net/rose/rose_link.c | 3 +
net/sched/sch_red.c | 4 +-
security/commoncap.c | 6 +-
sound/usb/quirks-table.h | 52 +++
sound/usb/quirks.c | 1 +
tools/include/nolibc/nolibc.h | 4 +-
123 files changed, 1285 insertions(+), 837 deletions(-)
Powered by blists - more mailing lists