| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20230403140403.549815164@linuxfoundation.org>
Date: Mon, 3 Apr 2023 16:07:52 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
patches@...ts.linux.dev, linux-kernel@...r.kernel.org,
torvalds@...ux-foundation.org, akpm@...ux-foundation.org,
linux@...ck-us.net, shuah@...nel.org, patches@...nelci.org,
lkft-triage@...ts.linaro.org, pavel@...x.de, jonathanh@...dia.com,
f.fainelli@...il.com, sudipm.mukherjee@...il.com,
srw@...dewatkins.net, rwarsow@....de
Subject: [PATCH 5.4 000/104] 5.4.240-rc1 review
This is the start of the stable review cycle for the 5.4.240 release.
There are 104 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 05 Apr 2023 14:03:18 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.240-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 5.4.240-rc1
Andreas Gruenbacher <agruenba@...hat.com>
gfs2: Always check inode size of inline inodes
Cristian Marussi <cristian.marussi@....com>
firmware: arm_scmi: Fix device node validation for mailbox transport
Eric Dumazet <edumazet@...gle.com>
net: sched: fix race condition in qdisc_graft()
Eric Dumazet <edumazet@...gle.com>
net_sched: add __rcu annotation to netdev->qdisc
Ye Bin <yebin10@...wei.com>
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
Anand Jain <anand.jain@...cle.com>
btrfs: scan device in non-exclusive mode
Heiko Carstens <hca@...ux.ibm.com>
s390/uaccess: add missing earlyclobber annotations to __clear_user()
Lucas Stach <l.stach@...gutronix.de>
drm/etnaviv: fix reference leak when mmaping imported buffer
Takashi Iwai <tiwai@...e.de>
ALSA: usb-audio: Fix regression on detection of Roland VS-100
Takashi Iwai <tiwai@...e.de>
ALSA: hda/conexant: Partial revert of a quirk for Lenovo
Trond Myklebust <trond.myklebust@...merspace.com>
NFSv4: Fix hangs when recovering open state after a server reboot
Johan Hovold <johan+linaro@...nel.org>
pinctrl: at91-pio4: fix domain name assignment
Juergen Gross <jgross@...e.com>
xen/netback: don't do grant copy across page boundary
Hans de Goede <hdegoede@...hat.com>
Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
David Disseldorp <ddiss@...e.de>
cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
Paulo Alcantara <pc@...guebit.com>
cifs: prevent infinite recursion in CIFSGetDFSRefer()
Jason A. Donenfeld <Jason@...c4.com>
Input: focaltech - use explicitly signed char type
msizanoen <msizanoen@...labs.xyz>
Input: alps - fix compatibility with -funsigned-char
Horatiu Vultur <horatiu.vultur@...rochip.com>
pinctrl: ocelot: Fix alt mode for ocelot
Lorenzo Bianconi <lorenzo@...nel.org>
net: mvneta: make tx buffer array agnostic
Steffen Bätz <steffen@...osonix.de>
net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
Kalesh AP <kalesh-anakkur.purayil@...adcom.com>
bnxt_en: Fix typo in PCI id to device description string mapping
Radoslaw Tyl <radoslawx.tyl@...el.com>
i40e: fix registers dump after run ethtool adapter self test
Tony Krowiak <akrowiak@...ux.ibm.com>
s390/vfio-ap: fix memory leak in vfio_ap device driver
Ivan Orlov <ivan.orlov0322@...il.com>
can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
Faicker Mo <faicker.mo@...oud.cn>
net/net_failover: fix txq exceeding warning
Christophe JAILLET <christophe.jaillet@...adoo.fr>
regulator: Handle deferred clk
Colin Ian King <colin.king@...onical.com>
regulator: fix spelling mistake "Cant" -> "Can't"
SongJingyi <u201912584@...t.edu.cn>
ptp_qoriq: fix memory leak in probe()
Tomas Henzl <thenzl@...hat.com>
scsi: megaraid_sas: Fix crash after a double completion
Arseniy Krasnov <avkrasnov@...rdevices.ru>
mtd: rawnand: meson: invalidate cache on polling ECC bit
Álvaro Fernández Rojas <noltari@...il.com>
mips: bmips: BCM6358: disable RAC flush for TP1
Christoph Hellwig <hch@....de>
dma-mapping: drop the dev argument to arch_sync_dma_for_*
Harshit Mogalapalli <harshit.m.mogalapalli@...cle.com>
ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
Wei Chen <harperchen1110@...il.com>
fbdev: au1200fb: Fix potential divide by zero
Wei Chen <harperchen1110@...il.com>
fbdev: lxfb: Fix potential divide by zero
Wei Chen <harperchen1110@...il.com>
fbdev: intelfb: Fix potential divide by zero
Wei Chen <harperchen1110@...il.com>
fbdev: nvidia: Fix potential divide by zero
Linus Torvalds <torvalds@...ux-foundation.org>
sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
Wei Chen <harperchen1110@...il.com>
fbdev: tgafb: Fix potential divide by zero
Kuninori Morimoto <kuninori.morimoto.gx@...esas.com>
ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
Kuninori Morimoto <kuninori.morimoto.gx@...esas.com>
ALSA: asihpi: check pao in control_message()
NeilBrown <neilb@...e.de>
md: avoid signed overflow in slot_store()
Ivan Bornyakov <i.bornyakov@...rotek.ru>
bus: imx-weim: fix branch condition evaluates to a garbage value
Eric Biggers <ebiggers@...gle.com>
fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
Jan Kara via Ocfs2-devel <ocfs2-devel@....oracle.com>
ocfs2: fix data corruption after failed write
George Kennedy <george.kennedy@...cle.com>
tun: avoid double free in tun_free_netdev
Vincent Guittot <vincent.guittot@...aro.org>
sched/fair: Sanitize vruntime of entity being migrated
Zhang Qiao <zhangqiao22@...wei.com>
sched/fair: sanitize vruntime of entity being placed
Mikulas Patocka <mpatocka@...hat.com>
dm crypt: add cond_resched() to dmcrypt_write()
Jiasheng Jiang <jiasheng@...as.ac.cn>
dm stats: check for and propagate alloc_percpu failure
Wei Chen <harperchen1110@...il.com>
i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
Ryusuke Konishi <konishi.ryusuke@...il.com>
nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
Felix Fietkau <nbd@....name>
wifi: mac80211: fix qos on mesh interfaces
Xu Yang <xu.yang_2@....com>
usb: chipidea: core: fix possible concurrent when switch role
Xu Yang <xu.yang_2@....com>
usb: chipdea: core: fix return -EINVAL if request role is the same with current role
Pawel Laszczak <pawell@...ence.com>
usb: cdns3: Fix issue with using incorrect PCI device function
Coly Li <colyli@...e.de>
dm thin: fix deadlock when swapping to thin device
Lin Ma <linma@....edu.cn>
igb: revert rtnl_lock() that causes deadlock
Nathan Huckleberry <nhuck@...gle.com>
fsverity: Remove WQ_UNBOUND from fsverity read workqueue
Alvin Šipraga <alsi@...g-olufsen.dk>
usb: gadget: u_audio: don't let userspace block driver unbind
Joel Selvaraj <joelselvaraj.oss@...il.com>
scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
Shyam Prasad N <sprasad@...rosoft.com>
cifs: empty interface list when server doesn't support query interfaces
Al Viro <viro@...iv.linux.org.uk>
sh: sanitize the flags on sigreturn
Enrico Sau <enrico.sau@...il.com>
net: usb: qmi_wwan: add Telit 0x1080 composition
Enrico Sau <enrico.sau@...il.com>
net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
Jakob Koschel <jkl820.git@...il.com>
scsi: lpfc: Avoid usage of list iterator variable after loop
Adrien Thierry <athierry@...hat.com>
scsi: ufs: core: Add soft dependency on governor_simpleondemand
Maurizio Lombardi <mlombard@...hat.com>
scsi: target: iscsi: Fix an error message in iscsi_check_key()
Lorenz Bauer <lorenz.bauer@...valent.com>
selftests/bpf: check that modifier resolves after pointer
Michael Schmitz <schmitzmic@...il.com>
m68k: Only force 030 bus error if PC not in exception table
Alexander Aring <aahringo@...hat.com>
ca8210: fix mac_len negative array access
Alexandre Ghiti <alex@...ti.fr>
riscv: Bump COMMAND_LINE_SIZE value to 1024
Mario Limonciello <mario.limonciello@....com>
thunderbolt: Use const qualifier for `ring_interrupt_index`
Yaroslav Furman <yaro330@...il.com>
uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
Nilesh Javali <njavali@...vell.com>
scsi: qla2xxx: Perform lockless command completion in abort path
Frank Crawford <frank@...wford.emu.id.au>
hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
Tzung-Bi Shih <tzungbi@...nel.org>
platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
Zheng Wang <zyytlz.wz@....com>
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
Stephan Gerhold <stephan.gerhold@...nkonzept.com>
Bluetooth: btqcomsmd: Fix command timeout after setting BD address
Liang He <windhl@....com>
net: mdio: thunder: Add missing fwnode_handle_put()
Arınç ÜNAL <arinc.unal@...nc9.com>
net: dsa: mt7530: move setting ssc_delta to PHY_INTERFACE_MODE_TRGMII case
Roger Pau Monne <roger.pau@...rix.com>
hvc/xen: prevent concurrent accesses to the shared ring
Caleb Sander <csander@...estorage.com>
nvme-tcp: fix nvme_tcp_term_pdu to match spec
Zhang Changzhong <zhangchangzhong@...wei.com>
net/sonic: use dma_mapping_error() for error check
Eric Dumazet <edumazet@...gle.com>
erspan: do not use skb_mac_header() in ndo_start_xmit()
Li Zetao <lizetao1@...wei.com>
atm: idt77252: fix kmemleak when rmmod idt77252
Maher Sanalla <msanalla@...dia.com>
net/mlx5: Read the TC mapping of all priorities on ETS query
Daniel Borkmann <daniel@...earbox.net>
bpf: Adjust insufficient default bpf_jit_limit
David Howells <dhowells@...hat.com>
keys: Do not cache key in task struct if key is requested from kernel thread
Geoff Levand <geoff@...radead.org>
net/ps3_gelic_net: Use dma_mapping_error
Geoff Levand <geoff@...radead.org>
net/ps3_gelic_net: Fix RX sk_buff length
Zheng Wang <zyytlz.wz@....com>
net: qcom/emac: Fix use after free bug in emac_remove due to race condition
Zheng Wang <zyytlz.wz@....com>
xirc2ps_cs: Fix use after free bug in xirc2ps_detach
Daniil Tatianin <d-tatianin@...dex-team.ru>
qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
Szymon Heidrich <szymon.heidrich@...il.com>
net: usb: smsc95xx: Limit packet length to skb->len
Yu Kuai <yukuai3@...wei.com>
scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
Alexander Stein <alexander.stein@...tq-group.com>
i2c: imx-lpi2c: check only for enabled interrupt flags
Akihiko Odaki <akihiko.odaki@...nix.com>
igbvf: Regard vf reset nack as success
Gaosheng Cui <cuigaosheng1@...wei.com>
intel/igbvf: free irq on the error path in igbvf_request_msix()
Alexander Lobakin <aleksander.lobakin@...el.com>
iavf: fix non-tunneled IPv6 UDP packet type and hashing
Alexander Lobakin <aleksander.lobakin@...el.com>
iavf: fix inverted Rx hash condition leading to disabled hash
Zheng Wang <zyytlz.wz@....com>
power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
Hangyu Hua <hbh25y@...il.com>
net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
-------------
Diffstat:
Makefile | 4 +-
arch/arc/mm/dma.c | 8 +-
arch/arm/mm/dma-mapping.c | 8 +-
arch/arm/xen/mm.c | 12 +--
arch/arm64/mm/dma-mapping.c | 8 +-
arch/c6x/mm/dma-coherent.c | 14 +--
arch/csky/mm/dma-mapping.c | 8 +-
arch/hexagon/kernel/dma.c | 4 +-
arch/ia64/mm/init.c | 4 +-
arch/m68k/kernel/dma.c | 4 +-
arch/m68k/kernel/traps.c | 4 +-
arch/microblaze/kernel/dma.c | 14 +--
arch/mips/bmips/dma.c | 7 +-
arch/mips/bmips/setup.c | 8 ++
arch/mips/jazz/jazzdma.c | 17 ++--
arch/mips/mm/dma-noncoherent.c | 12 +--
arch/nds32/kernel/dma.c | 8 +-
arch/nios2/mm/dma-mapping.c | 8 +-
arch/openrisc/kernel/dma.c | 2 +-
arch/parisc/kernel/pci-dma.c | 8 +-
arch/powerpc/mm/dma-noncoherent.c | 8 +-
arch/riscv/include/uapi/asm/setup.h | 8 ++
arch/s390/lib/uaccess.c | 2 +-
arch/sh/include/asm/processor_32.h | 1 +
arch/sh/kernel/dma-coherent.c | 6 +-
arch/sh/kernel/signal_32.c | 3 +
arch/sparc/kernel/ioport.c | 4 +-
arch/xtensa/kernel/pci-dma.c | 8 +-
drivers/atm/idt77252.c | 11 +++
drivers/bluetooth/btqcomsmd.c | 17 +++-
drivers/bluetooth/btsdio.c | 1 +
drivers/bus/imx-weim.c | 2 +-
drivers/firmware/arm_scmi/driver.c | 37 +++++++
drivers/gpu/drm/etnaviv/etnaviv_gem_prime.c | 10 +-
drivers/hwmon/it87.c | 4 +-
drivers/i2c/busses/i2c-imx-lpi2c.c | 4 +
drivers/i2c/busses/i2c-xgene-slimpro.c | 3 +
drivers/input/mouse/alps.c | 16 +--
drivers/input/mouse/focaltech.c | 8 +-
drivers/input/touchscreen/goodix.c | 14 ++-
drivers/iommu/dma-iommu.c | 10 +-
drivers/md/dm-crypt.c | 1 +
drivers/md/dm-stats.c | 7 +-
drivers/md/dm-stats.h | 2 +-
drivers/md/dm-thin.c | 2 +
drivers/md/dm.c | 4 +-
drivers/md/md.c | 3 +
drivers/mtd/nand/raw/meson_nand.c | 8 +-
drivers/net/dsa/mt7530.c | 9 +-
drivers/net/dsa/mv88e6xxx/chip.c | 9 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 +-
drivers/net/ethernet/intel/i40e/i40e_diag.c | 11 ++-
drivers/net/ethernet/intel/i40e/i40e_diag.h | 2 +-
drivers/net/ethernet/intel/iavf/iavf_common.c | 2 +-
drivers/net/ethernet/intel/iavf/iavf_txrx.c | 2 +-
drivers/net/ethernet/intel/igb/igb_main.c | 2 -
drivers/net/ethernet/intel/igbvf/netdev.c | 8 +-
drivers/net/ethernet/intel/igbvf/vf.c | 13 ++-
drivers/net/ethernet/marvell/mvneta.c | 66 ++++++++-----
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 6 +-
drivers/net/ethernet/natsemi/sonic.c | 4 +-
drivers/net/ethernet/qlogic/qed/qed_sriov.c | 5 +-
drivers/net/ethernet/qualcomm/emac/emac.c | 6 ++
drivers/net/ethernet/toshiba/ps3_gelic_net.c | 41 ++++----
drivers/net/ethernet/toshiba/ps3_gelic_net.h | 5 +-
drivers/net/ethernet/xircom/xirc2ps_cs.c | 5 +
drivers/net/ieee802154/ca8210.c | 5 +-
drivers/net/net_failover.c | 8 +-
drivers/net/phy/mdio-thunder.c | 1 +
drivers/net/tun.c | 109 +++++++++++----------
drivers/net/usb/cdc_mbim.c | 5 +
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/usb/smsc95xx.c | 6 ++
drivers/net/xen-netback/common.h | 2 +-
drivers/net/xen-netback/netback.c | 25 ++++-
drivers/pinctrl/pinctrl-at91-pio4.c | 1 -
drivers/pinctrl/pinctrl-ocelot.c | 2 +-
drivers/platform/chrome/cros_ec_chardev.c | 2 +-
drivers/power/supply/da9150-charger.c | 1 +
drivers/ptp/ptp_qoriq.c | 2 +-
drivers/regulator/fixed.c | 4 +-
drivers/s390/crypto/vfio_ap_drv.c | 3 +-
drivers/scsi/device_handler/scsi_dh_alua.c | 6 +-
drivers/scsi/lpfc/lpfc_sli.c | 8 +-
drivers/scsi/megaraid/megaraid_sas_fusion.c | 4 +-
drivers/scsi/qla2xxx/qla_os.c | 11 +++
drivers/scsi/scsi_devinfo.c | 1 +
drivers/scsi/ufs/ufshcd.c | 1 +
drivers/target/iscsi/iscsi_target_parameters.c | 12 ++-
drivers/thunderbolt/nhi.c | 2 +-
drivers/tty/hvc/hvc_xen.c | 19 +++-
drivers/usb/cdns3/cdns3-pci-wrap.c | 5 +
drivers/usb/chipidea/ci.h | 2 +
drivers/usb/chipidea/core.c | 11 ++-
drivers/usb/chipidea/otg.c | 5 +-
drivers/usb/gadget/function/u_audio.c | 2 +-
drivers/usb/storage/unusual_uas.h | 7 ++
drivers/video/fbdev/au1200fb.c | 3 +
drivers/video/fbdev/geode/lxfb_core.c | 3 +
drivers/video/fbdev/intelfb/intelfbdrv.c | 3 +
drivers/video/fbdev/nvidia/nvidia.c | 2 +
drivers/video/fbdev/tgafb.c | 3 +
drivers/xen/swiotlb-xen.c | 8 +-
fs/btrfs/volumes.c | 11 ++-
fs/cifs/cifsfs.h | 5 +-
fs/cifs/cifssmb.c | 9 +-
fs/cifs/smb2ops.c | 2 +-
fs/ext4/inode.c | 3 +-
fs/gfs2/aops.c | 2 -
fs/gfs2/bmap.c | 3 -
fs/gfs2/glops.c | 3 +
fs/nfs/nfs4proc.c | 5 +-
fs/nilfs2/ioctl.c | 2 +-
fs/ocfs2/aops.c | 18 +++-
fs/verity/enable.c | 24 ++---
fs/verity/verify.c | 12 +--
include/linux/dma-noncoherent.h | 20 ++--
include/linux/netdevice.h | 2 +-
include/linux/nvme-tcp.h | 5 +-
include/xen/swiotlb-xen.h | 8 +-
kernel/bpf/core.c | 2 +-
kernel/compat.c | 2 +-
kernel/dma/direct.c | 14 +--
kernel/sched/core.c | 7 +-
kernel/sched/fair.c | 54 +++++++++-
net/can/bcm.c | 16 +--
net/core/rtnetlink.c | 6 +-
net/ipv4/ip_gre.c | 4 +-
net/ipv6/ip6_gre.c | 4 +-
net/mac80211/wme.c | 6 +-
net/sched/cls_api.c | 6 +-
net/sched/sch_api.c | 25 ++---
net/sched/sch_generic.c | 22 +++--
net/tls/tls_main.c | 9 +-
security/keys/request_key.c | 9 +-
sound/pci/asihpi/hpi6205.c | 2 +-
sound/pci/hda/patch_ca0132.c | 4 +-
sound/pci/hda/patch_conexant.c | 6 +-
sound/usb/format.c | 8 +-
tools/testing/selftests/bpf/test_btf.c | 28 ++++++
140 files changed, 834 insertions(+), 399 deletions(-)
Powered by blists - more mailing lists