| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 6 Dec 2022 17:39:55 +0100
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
patches@...ts.linux.dev, linux-kernel@...r.kernel.org,
torvalds@...ux-foundation.org, akpm@...ux-foundation.org,
linux@...ck-us.net, shuah@...nel.org, patches@...nelci.org,
lkft-triage@...ts.linaro.org, pavel@...x.de, jonathanh@...dia.com,
f.fainelli@...il.com, sudipm.mukherjee@...il.com,
srw@...dewatkins.net, rwarsow@....de
Subject: [PATCH 5.15 000/121] 5.15.82-rc3 review
This is the start of the stable review cycle for the 5.15.82 release.
There are 121 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 08 Dec 2022 16:34:23 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.82-rc3.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 5.15.82-rc3
Linus Torvalds <torvalds@...ux-foundation.org>
proc: proc_skip_spaces() shouldn't think it is working on C strings
Linus Torvalds <torvalds@...ux-foundation.org>
proc: avoid integer type confusion in get_proc_long
Jann Horn <jannh@...gle.com>
ipc/sem: Fix dangling sem_array access in semtimedop race
Zhang Xiaoxu <zhangxiaoxu5@...wei.com>
Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
Jan Dabros <jsd@...ihalf.com>
char: tpm: Protect tpm_pm_suspend with locks
Conor Dooley <conor.dooley@...rochip.com>
Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
Vishal Verma <vishal.l.verma@...el.com>
ACPI: HMAT: Fix initiator registration for single-initiator systems
Vishal Verma <vishal.l.verma@...el.com>
ACPI: HMAT: remove unnecessary variable initialization
Andrew Lunn <andrew@...n.ch>
i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
Yuan Can <yuancan@...wei.com>
i2c: npcm7xx: Fix error handling in npcm_i2c_init()
Lukas Wunner <lukas@...ner.de>
serial: stm32: Deassert Transmit Enable on ->rs485_config()
Marek Vasut <marex@...x.de>
serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode
Marek Vasut <marex@...x.de>
serial: stm32: Factor out GPIO RTS toggling into separate function
Ido Schimmel <idosch@...dia.com>
ipv4: Fix route deletion when nexthop info is not specified
David Ahern <dsahern@...nel.org>
ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
Nikolay Aleksandrov <razor@...ckwall.org>
selftests: net: fix nexthop warning cleanup double ip typo
Nikolay Aleksandrov <razor@...ckwall.org>
selftests: net: add delete nexthop route warning test
Lee Jones <lee@...nel.org>
Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
Helge Deller <deller@....de>
parisc: Increase FRAME_WARN to 2048 bytes on parisc
Gavin Shan <gshan@...hat.com>
mm: migrate: fix THP's mapcount on isolation
Hugh Dickins <hughd@...gle.com>
mm: __isolate_lru_page_prepare() in isolate_migratepages_block()
Xiongfeng Wang <wangxiongfeng2@...wei.com>
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
Xiongfeng Wang <wangxiongfeng2@...wei.com>
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
Caleb Sander <csander@...estorage.com>
nvme: fix SRCU protection of nvme_ns_head list
Guo Ren <guoren@...ux.alibaba.com>
riscv: kexec: Fixup irq controller broken in kexec crash path
Jisheng Zhang <jszhang@...nel.org>
riscv: fix race when vmap stack overflow
Alexandre Ghiti <alexghiti@...osinc.com>
riscv: Sync efi page table's kernel mappings before switching
Maxim Korotkov <korotkov.maxim.s@...il.com>
pinctrl: single: Fix potential division by zero
Mark Brown <broonie@...nel.org>
ASoC: ops: Fix bounds check for _sx controls
Kazuki Takiguchi <takiguchi.kazuki171@...il.com>
KVM: x86/mmu: Fix race condition in direct_page_fault
Lin Ma <linma@....edu.cn>
io_uring/poll: fix poll_refs race with cancelation
Pavel Begunkov <asml.silence@...il.com>
io_uring: make poll refs more robust
Pavel Begunkov <asml.silence@...il.com>
io_uring: cmpxchg for poll arm refs release
Pavel Begunkov <asml.silence@...il.com>
io_uring: fix tw losing poll events
Pavel Begunkov <asml.silence@...il.com>
io_uring: update res mask in io_poll_check_events
Steven Rostedt (Google) <rostedt@...dmis.org>
tracing: Free buffers when a used dynamic event is removed
Steven Rostedt (Google) <rostedt@...dmis.org>
tracing: Fix race where histograms can be called before the event
Daniel Bristot de Oliveira <bristot@...nel.org>
tracing/osnoise: Fix duration type
Janusz Krzysztofik <janusz.krzysztofik@...ux.intel.com>
drm/i915: Never return 0 if not all requests retired
Janusz Krzysztofik <janusz.krzysztofik@...ux.intel.com>
drm/i915: Fix negative value passed as remaining time
Leo Liu <leo.liu@....com>
drm/amdgpu: enable Vangogh VCN indirect sram mode
Lee Jones <lee@...nel.org>
drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
Adrian Hunter <adrian.hunter@...el.com>
mmc: sdhci: Fix voltage switch delay
Wenchao Chen <wenchao.chen@...soc.com>
mmc: sdhci-sprd: Fix no reset data and command after voltage switch
Sebastian Falbesoner <sebastian.falbesoner@...il.com>
mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
Christian Löhle <CLoehle@...erstone.com>
mmc: core: Fix ambiguous TRIM and DISCARD arg
Ye Bin <yebin10@...wei.com>
mmc: mmc_test: Fix removal of debugfs file
Goh, Wei Sheng <wei.sheng.goh@...el.com>
net: stmmac: Set MAC's flow control register to reflect current settings
Linus Torvalds <torvalds@...ux-foundation.org>
v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
pinctrl: intel: Save and restore pins in "direct IRQ" mode
Pawan Gupta <pawan.kumar.gupta@...ux.intel.com>
x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
ZhangPeng <zhangpeng362@...wei.com>
nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
Tiezhu Yang <yangtiezhu@...ngson.cn>
tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
Steven Rostedt (Google) <rostedt@...dmis.org>
error-injection: Add prompt for function error injection
Takashi Sakamoto <o-takashi@...amocchi.jp>
ALSA: dice: fix regression for Lexicon I-ONIX FW810S
Björn Töpel <bjorn@...osinc.com>
riscv: mm: Proper page permissions after initmem free
Jisheng Zhang <jszhang@...nel.org>
riscv: vdso: fix section overlapping under some conditions
Yang Yingliang <yangyingliang@...wei.com>
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
Phil Auld <pauld@...hat.com>
hwmon: (coretemp) Check for null before removing sysfs attrs
Yoshihiro Shimoda <yoshihiro.shimoda.uh@...esas.com>
net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
Zhengchao Shao <shaozhengchao@...wei.com>
sctp: fix memory leak in sctp_stream_outq_migrate()
Willem de Bruijn <willemb@...gle.com>
packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
Shigeru Yoshida <syoshida@...hat.com>
net: tun: Fix use-after-free in tun_detach()
David Howells <dhowells@...hat.com>
afs: Fix fileserver probe RTT handling
Yang Yingliang <yangyingliang@...wei.com>
net: mdiobus: fix unbalanced node reference count
YueHaibing <yuehaibing@...wei.com>
net: hsr: Fix potential use-after-free
Xin Long <lucien.xin@...il.com>
tipc: re-fetch skb cb after tipc_msg_validate
Jerry Ray <jerry.ray@...rochip.com>
dsa: lan9303: Correct stat name
M Chetan Kumar <m.chetan.kumar@...ux.intel.com>
net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type
M Chetan Kumar <m.chetan.kumar@...ux.intel.com>
net: wwan: iosm: fix kernel test robot reported error
Yuri Karpov <YKarpov@...ras.ru>
net: ethernet: nixge: fix NULL dereference
Wang Hai <wanghai38@...wei.com>
net/9p: Fix a potential socket leak in p9_socket_open
Yuan Can <yuancan@...wei.com>
net: net_netdev: Fix error handling in ntb_netdev_init_module()
Zhang Changzhong <zhangchangzhong@...wei.com>
net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe()
Yang Yingliang <yangyingliang@...wei.com>
net: phy: fix null-ptr-deref while probe() failed
Lorenzo Bianconi <lorenzo@...nel.org>
wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
Johannes Berg <johannes.berg@...el.com>
wifi: cfg80211: don't allow multi-BSSID in S1G
Johannes Berg <johannes.berg@...el.com>
wifi: cfg80211: fix buffer overflow in elem comparison
Izabela Bakollari <ibakolla@...hat.com>
aquantia: Do not purge addresses when setting the number of rings
Duoming Zhou <duoming@....edu.cn>
qlcnic: fix sleep-in-atomic-context bugs caused by msleep
Jiasheng Jiang <jiasheng@...as.ac.cn>
can: m_can: Add check for devm_clk_get
Zhang Changzhong <zhangchangzhong@...wei.com>
can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods
Zhang Changzhong <zhangchangzhong@...wei.com>
can: etas_es58x: es58x_init_netdev(): free netdev when register_candev()
Zhang Changzhong <zhangchangzhong@...wei.com>
can: cc770: cc770_isa_probe(): add missing free_cc770dev()
Zhang Changzhong <zhangchangzhong@...wei.com>
can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
Roi Dayan <roid@...dia.com>
net/mlx5e: Fix use-after-free when reverting termination table
YueHaibing <yuehaibing@...wei.com>
net/mlx5: Fix uninitialized variable bug in outlen_write()
YueHaibing <yuehaibing@...wei.com>
net/mlx5: DR, Fix uninitialized var warning
Yevgeny Kliteynik <kliteyn@...dia.com>
net/mlx5: DR, Rename list field in matcher struct to list_node
Wang Hai <wanghai38@...wei.com>
e100: Fix possible use after free in e100_xmit_prepare
Yuan Can <yuancan@...wei.com>
iavf: Fix error handling in iavf_init_module()
Minghao Chi <chi.minghao@....com.cn>
iavf: remove redundant ret variable
Yuan Can <yuancan@...wei.com>
fm10k: Fix error handling in fm10k_init_module()
Shang XiaoJing <shangxiaojing@...wei.com>
i40e: Fix error handling in i40e_init_module()
Shang XiaoJing <shangxiaojing@...wei.com>
ixgbevf: Fix resource leak in ixgbevf_init_module()
Yang Yingliang <yangyingliang@...wei.com>
of: property: decrement node refcount in of_fwnode_get_reference_args()
Wei Yongjun <weiyongjun1@...wei.com>
nvmem: rmem: Fix return value check in rmem_read()
Xu Kuohai <xukuohai@...wei.com>
bpf: Do not copy spin lock field from user in bpf_selem_alloc
Gaosheng Cui <cuigaosheng1@...wei.com>
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
Yang Yingliang <yangyingliang@...wei.com>
hwmon: (i5500_temp) fix missing pci_disable_device()
Ninad Malwade <nmalwade@...dia.com>
hwmon: (ina3221) Fix shunt sum critical calculation
Derek Nguyen <derek.nguyen@...lins.com>
hwmon: (ltc2947) fix temperature scaling
Hou Tao <houtao1@...wei.com>
libbpf: Handle size overflow for ringbuf mmap
Michael Grzeschik <m.grzeschik@...gutronix.de>
ARM: at91: rm9200: fix usb device clock id
Srikar Dronamraju <srikar@...ux.vnet.ibm.com>
scripts/faddr2line: Fix regression in name resolution on ppc64le
Hou Tao <houtao1@...wei.com>
bpf, perf: Use subprog name when reporting subprog ksymbol
Paul Gazzillo <paul@...zz.com>
iio: light: rpr0521: add missing Kconfig dependencies
Wei Yongjun <weiyongjun1@...wei.com>
iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
Wei Yongjun <weiyongjun1@...wei.com>
iio: health: afe4403: Fix oob read in afe4403_read_raw
Alex Deucher <alexander.deucher@....com>
drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read"
Claudio Suarez <cssk@...-c.es>
drm/amdgpu: update drm_display_info correctly when the edid is read
Lyude Paul <lyude@...hat.com>
drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
ChenXiaoSong <chenxiaosong2@...wei.com>
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
Nikolay Borisov <nborisov@...e.com>
btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
Frieder Schrempf <frieder.schrempf@...tron.de>
spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
Anand Jain <anand.jain@...cle.com>
btrfs: free btrfs_path before copying inodes to userspace
David Sterba <dsterba@...e.com>
btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino
Gao Xiang <hsiangkao@...ux.alibaba.com>
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
Chris Wilson <chris.p.wilson@...el.com>
drm/i915/gt: Use i915_vm_put on ppgtt_create error paths
Maarten Lankhorst <maarten.lankhorst@...ux.intel.com>
drm/i915: Create a dummy object for gen6 ppgtt
Catalin Marinas <catalin.marinas@....com>
arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored
-------------
Diffstat:
Makefile | 4 +-
arch/arm/boot/dts/at91rm9200.dtsi | 2 +-
arch/arm64/kernel/mte.c | 9 +-
arch/arm64/mm/mteswap.c | 7 +-
arch/riscv/include/asm/asm.h | 1 +
arch/riscv/include/asm/efi.h | 6 +-
arch/riscv/include/asm/pgalloc.h | 11 +-
arch/riscv/kernel/entry.S | 13 ++
arch/riscv/kernel/machine_kexec.c | 35 ++++++
arch/riscv/kernel/setup.c | 9 +-
arch/riscv/kernel/traps.c | 18 +++
arch/riscv/kernel/vdso/Makefile | 1 +
arch/x86/include/asm/nospec-branch.h | 2 +-
arch/x86/kernel/cpu/bugs.c | 21 ++--
arch/x86/kernel/process.c | 2 +-
arch/x86/kvm/mmu/mmu.c | 12 +-
drivers/acpi/numa/hmat.c | 27 ++--
drivers/char/tpm/tpm-interface.c | 5 +-
drivers/clk/at91/at91rm9200.c | 2 +-
drivers/clocksource/timer-riscv.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 3 +
drivers/gpu/drm/amd/display/Kconfig | 7 ++
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 +-
drivers/gpu/drm/drm_dp_mst_topology.c | 2 +-
drivers/gpu/drm/i915/gem/i915_gem_internal.c | 44 ++++---
drivers/gpu/drm/i915/gt/gen6_ppgtt.c | 137 ++++++++++++---------
drivers/gpu/drm/i915/gt/gen6_ppgtt.h | 1 -
drivers/gpu/drm/i915/gt/gen8_ppgtt.c | 56 +++++----
drivers/gpu/drm/i915/gt/intel_gt.c | 9 +-
drivers/gpu/drm/i915/gt/intel_gt_requests.c | 2 +-
drivers/gpu/drm/i915/gt/intel_gtt.c | 3 +
drivers/gpu/drm/i915/i915_drv.h | 4 +
drivers/hwmon/coretemp.c | 9 +-
drivers/hwmon/i5500_temp.c | 2 +-
drivers/hwmon/ibmpex.c | 1 +
drivers/hwmon/ina3221.c | 4 +-
drivers/hwmon/ltc2947-core.c | 2 +-
drivers/i2c/busses/i2c-imx.c | 6 +-
drivers/i2c/busses/i2c-npcm7xx.c | 11 +-
drivers/iio/health/afe4403.c | 5 +-
drivers/iio/health/afe4404.c | 12 +-
drivers/iio/light/Kconfig | 2 +
drivers/input/touchscreen/raydium_i2c_ts.c | 4 +-
drivers/iommu/intel/dmar.c | 1 +
drivers/iommu/intel/iommu.c | 4 +-
drivers/media/common/videobuf2/frame_vector.c | 53 ++------
drivers/mmc/core/core.c | 9 +-
drivers/mmc/core/mmc_test.c | 3 +-
drivers/mmc/host/sdhci-esdhc-imx.c | 2 +-
drivers/mmc/host/sdhci-sprd.c | 4 +-
drivers/mmc/host/sdhci.c | 61 +++++++--
drivers/mmc/host/sdhci.h | 2 +
drivers/net/can/cc770/cc770_isa.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/can/m_can/m_can_pci.c | 9 +-
drivers/net/can/sja1000/sja1000_isa.c | 10 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 5 +-
drivers/net/dsa/lan9303-core.c | 2 +-
.../net/ethernet/aquantia/atlantic/aq_ethtool.c | 5 +-
drivers/net/ethernet/aquantia/atlantic/aq_main.c | 4 +-
drivers/net/ethernet/aquantia/atlantic/aq_main.h | 2 +
drivers/net/ethernet/intel/e100.c | 5 +-
drivers/net/ethernet/intel/fm10k/fm10k_main.c | 10 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 11 +-
drivers/net/ethernet/intel/iavf/iavf_main.c | 8 +-
drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 4 +-
.../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 2 +
.../mellanox/mlx5/core/steering/dr_matcher.c | 26 ++--
.../mellanox/mlx5/core/steering/dr_table.c | 7 +-
.../mellanox/mlx5/core/steering/dr_types.h | 2 +-
drivers/net/ethernet/ni/nixge.c | 29 ++---
.../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +-
drivers/net/ethernet/renesas/ravb_main.c | 1 +
drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 2 +
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 12 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +-
drivers/net/mdio/fwnode_mdio.c | 2 +-
drivers/net/ntb_netdev.c | 9 +-
drivers/net/phy/phy_device.c | 2 +
drivers/net/tun.c | 4 +-
drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 3 +-
drivers/net/wwan/iosm/iosm_ipc_protocol.h | 2 +-
drivers/nvme/host/core.c | 2 +-
drivers/nvme/host/multipath.c | 3 +
drivers/nvmem/rmem.c | 4 +-
drivers/of/property.c | 4 +-
drivers/pinctrl/intel/pinctrl-intel.c | 27 +++-
drivers/pinctrl/pinctrl-single.c | 2 +-
drivers/spi/spi-imx.c | 3 +-
drivers/tty/serial/stm32-usart.c | 131 ++++++++++++++------
drivers/tty/serial/stm32-usart.h | 1 +
fs/afs/fs_probe.c | 4 +-
fs/btrfs/backref.c | 25 +++-
fs/btrfs/backref.h | 3 +-
fs/btrfs/ioctl.c | 38 ++----
fs/btrfs/qgroup.c | 22 ++--
fs/erofs/inode.c | 2 +-
fs/io_uring.c | 57 +++++++--
fs/nilfs2/dat.c | 7 ++
include/linux/mmc/mmc.h | 2 +-
include/linux/swap.h | 1 -
include/net/sctp/stream_sched.h | 2 +
ipc/sem.c | 3 +-
kernel/bpf/bpf_local_storage.c | 2 +-
kernel/events/core.c | 2 +-
kernel/sysctl.c | 30 ++---
kernel/trace/trace_dynevent.c | 2 +
kernel/trace/trace_events.c | 11 +-
kernel/trace/trace_events_hist.c | 3 +
kernel/trace/trace_osnoise.c | 6 +-
lib/Kconfig.debug | 14 ++-
mm/compaction.c | 67 +++++++---
mm/vmscan.c | 101 +++------------
net/9p/trans_fd.c | 4 +-
net/hsr/hsr_forward.c | 5 +-
net/ipv4/fib_semantics.c | 10 +-
net/mac80211/airtime.c | 3 +
net/packet/af_packet.c | 6 +-
net/sctp/stream.c | 25 ++--
net/sctp/stream_sched.c | 5 +
net/sctp/stream_sched_prio.c | 19 +++
net/sctp/stream_sched_rr.c | 5 +
net/tipc/crypto.c | 3 +
net/wireless/scan.c | 10 +-
scripts/faddr2line | 7 +-
sound/firewire/dice/dice-stream.c | 12 +-
sound/soc/soc-ops.c | 2 +-
tools/lib/bpf/ringbuf.c | 12 +-
tools/testing/selftests/net/fib_nexthops.sh | 30 +++++
tools/vm/slabinfo-gnuplot.sh | 4 +-
132 files changed, 1052 insertions(+), 558 deletions(-)
Powered by blists - more mailing lists