lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20240911130535.165892968@linuxfoundation.org>
Date: Wed, 11 Sep 2024 15:07:08 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	patches@...ts.linux.dev,
	linux-kernel@...r.kernel.org,
	torvalds@...ux-foundation.org,
	akpm@...ux-foundation.org,
	linux@...ck-us.net,
	shuah@...nel.org,
	patches@...nelci.org,
	lkft-triage@...ts.linaro.org,
	pavel@...x.de,
	jonathanh@...dia.com,
	f.fainelli@...il.com,
	sudipm.mukherjee@...il.com,
	srw@...dewatkins.net,
	rwarsow@....de,
	conor@...nel.org,
	allen.lkml@...il.com,
	broonie@...nel.org
Subject: [PATCH 5.15 000/212] 5.15.167-rc2 review

This is the start of the stable review cycle for the 5.15.167 release.
There are 212 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 13 Sep 2024 13:05:05 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.167-rc2.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@...uxfoundation.org>
    Linux 5.15.167-rc2

Felix Fietkau <nbd@....name>
    udp: fix receiving fraglist GSO packets

Shakeel Butt <shakeel.butt@...ux.dev>
    memcg: protect concurrent access to mem_cgroup_idr

Filipe Manana <fdmanana@...e.com>
    btrfs: fix race between direct IO write and fsync when using same fd

Daniel Borkmann <daniel@...earbox.net>
    net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket

Thomas Gleixner <tglx@...utronix.de>
    x86/mm: Fix PTI for i386 some more

Willem de Bruijn <willemb@...gle.com>
    net: drop bad gso csum_start and offset in virtio_net_hdr

Yan Zhai <yan@...udflare.com>
    gso: fix dodgy bit handling for GSO_UDP_L4

Yuri Benditovich <yuri.benditovich@...nix.com>
    net: change maximum number of UDP segments to 128

Willem de Bruijn <willemb@...gle.com>
    net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation

Krzysztof Kozlowski <krzysztof.kozlowski@...aro.org>
    gpio: rockchip: fix OF node leak in probe()

Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
    drm/i915/fence: Mark debug_fence_free() with __maybe_unused

Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
    drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused

Matteo Martelli <matteomartelli3@...il.com>
    ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode

Maurizio Lombardi <mlombard@...hat.com>
    nvmet-tcp: fix kernel crash if commands allocation fails

Jonathan Cameron <Jonathan.Cameron@...wei.com>
    arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry

James Morse <james.morse@....com>
    arm64: acpi: Move get_cpu_for_acpi_id() to a header

Jonathan Cameron <Jonathan.Cameron@...wei.com>
    ACPI: processor: Fix memory leaks in error paths of processor_add()

Jonathan Cameron <Jonathan.Cameron@...wei.com>
    ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()

Nicholas Piggin <npiggin@...il.com>
    workqueue: Improve scalability of workqueue watchdog touch

Nicholas Piggin <npiggin@...il.com>
    workqueue: wq_watchdog_touch is always called with valid CPU

Ryusuke Konishi <konishi.ryusuke@...il.com>
    nilfs2: protect references to superblock parameters exposed in sysfs

Qing Wang <wangqing@...o.com>
    nilfs2: replace snprintf in show functions with sysfs_emit

Dan Carpenter <dan.carpenter@...aro.org>
    ksmbd: Unlock on in ksmbd_tcp_set_interfaces()

Namjae Jeon <linkinjeon@...nel.org>
    ksmbd: unset the binding mark of a reused connection

Peter Zijlstra <peterz@...radead.org>
    perf/aux: Fix AUX buffer serialization

Sven Schnelle <svens@...ux.ibm.com>
    uprobes: Use kzalloc to allocate xol area

Daniel Lezcano <daniel.lezcano@...aro.org>
    clocksource/drivers/timer-of: Remove percpu irq related code

Jacky Bai <ping.bai@....com>
    clocksource/drivers/imx-tpm: Fix next event not taking effect sometime

Jacky Bai <ping.bai@....com>
    clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX

David Fernandez Gonzalez <david.fernandez.gonzalez@...cle.com>
    VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

Naman Jain <namjain@...ux.microsoft.com>
    Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic

Saurabh Sengar <ssengar@...ux.microsoft.com>
    uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

Geert Uytterhoeven <geert+renesas@...der.be>
    nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc

Carlos Llamas <cmllamas@...gle.com>
    binder: fix UAF caused by offsets overwrite

Faisal Hassan <quic_faisalh@...cinc.com>
    usb: dwc3: core: update LC timer as per USB Spec V3.2

Dumitru Ceclan <mitrutzceclan@...il.com>
    iio: adc: ad7124: fix chip ID mismatch

Dumitru Ceclan <mitrutzceclan@...il.com>
    iio: adc: ad7124: fix config comparison

Matteo Martelli <matteomartelli3@...il.com>
    iio: fix scale application in iio_convert_raw_to_processed_unlocked

David Lechner <dlechner@...libre.com>
    iio: buffer-dmaengine: fix releasing dma channel on error

Aleksandr Mishin <amishin@...rgos.ru>
    staging: iio: frequency: ad9834: Validate frequency parameter value

Ronnie Sahlberg <lsahlber@...hat.com>
    cifs: Check the lease context if we actually got a lease

Trond Myklebust <trond.myklebust@...merspace.com>
    NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations

Michael Ellerman <mpe@...erman.id.au>
    ata: pata_macio: Use WARN instead of BUG

Jiaxun Yang <jiaxun.yang@...goat.com>
    MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed

Kent Overstreet <kent.overstreet@...ux.dev>
    lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

Stefan Wiehler <stefan.wiehler@...ia.com>
    of/irq: Prevent device address out-of-bounds read in interrupt map walk

Phillip Lougher <phillip@...ashfs.org.uk>
    Squashfs: sanity check symbolic link size

Oliver Neukum <oneukum@...e.com>
    usbnet: ipheth: race between ipheth_close and error handling

Dmitry Torokhov <dmitry.torokhov@...il.com>
    Input: uinput - reject requests with unreasonable number of slots

Olivier Sobrie <olivier@...rie.be>
    HID: amd_sfh: free driver_data after destroying hid device

Camila Alvarez <cam.alvarez.i@...il.com>
    HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup

Heiko Carstens <hca@...ux.ibm.com>
    s390/vmlinux.lds.S: Move ro_after_init section behind rodata section

David Sterba <dsterba@...e.com>
    btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()

Zenghui Yu <yuzenghui@...wei.com>
    kselftests: dmabuf-heaps: Ensure the driver name is null-terminated

Jarkko Nikula <jarkko.nikula@...ux.intel.com>
    i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup

Vladimir Oltean <vladimir.oltean@....com>
    net: dpaa: avoid on-stack arrays of NR_CPUS elements

Dan Williams <dan.j.williams@...el.com>
    PCI: Add missing bridge lock to pci_bus_lock()

yang.zhang <yang.zhang@...intek.com>
    riscv: set trap vector earlier

Filipe Manana <fdmanana@...e.com>
    btrfs: replace BUG_ON() with error handling at update_ref_for_cow()

Josef Bacik <josef@...icpanda.com>
    btrfs: clean up our handling of refs == 0 in snapshot delete

Josef Bacik <josef@...icpanda.com>
    btrfs: replace BUG_ON with ASSERT in walk_down_proc()

Konstantin Komarov <almaz.alexandrovich@...agon-software.com>
    fs/ntfs3: Check more cases when directory is corrupted

Zqiang <qiang.zhang1211@...il.com>
    smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()

Sascha Hauer <s.hauer@...gutronix.de>
    wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()

Yicong Yang <yangyicong@...ilicon.com>
    dma-mapping: benchmark: Don't starve others when doing the test

Luis Henriques (SUSE) <luis.henriques@...ux.dev>
    ext4: fix possible tid_t sequence overflows

Yifan Zha <Yifan.Zha@....com>
    drm/amdgpu: Set no_hw_access when VF request full GPU fails

Andreas Ziegler <ziegler.andreas@...mens.com>
    libbpf: Add NULL checks to bpf_object__{prev_map,next_map}

Guenter Roeck <linux@...ck-us.net>
    hwmon: (w83627ehf) Fix underflows seen when writing limit attributes

Guenter Roeck <linux@...ck-us.net>
    hwmon: (nct6775-core) Fix underflows seen when writing limit attributes

Guenter Roeck <linux@...ck-us.net>
    hwmon: (lm95234) Fix underflows seen when writing limit attributes

Guenter Roeck <linux@...ck-us.net>
    hwmon: (adc128d818) Fix underflows seen when writing limit attributes

Krishna Kumar <krishnak@...ux.ibm.com>
    pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

Zijun Hu <quic_zijuhu@...cinc.com>
    devres: Initialize an uninitialized struct member

Johannes Berg <johannes.berg@...el.com>
    um: line: always fill *error_out in setup_one_line()

Waiman Long <longman@...hat.com>
    cgroup: Protect css->cgroup write under css_set_lock

Jacob Pan <jacob.jun.pan@...ux.intel.com>
    iommu/vt-d: Handle volatile descriptor status read

Benjamin Marzinski <bmarzins@...hat.com>
    dm init: Handle minors larger than 255

Amadeusz Sławiński <amadeuszx.slawinski@...ux.intel.com>
    ASoC: topology: Properly initialize soc_enum values

Pawel Dembicki <paweldembicki@...il.com>
    net: dsa: vsc73xx: fix possible subblocks range of CAPT block

Jonas Gorski <jonas.gorski@...dn.de>
    net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN

Kuniyuki Iwashima <kuniyu@...zon.com>
    fou: Fix null-ptr-deref in GRO.

Eric Dumazet <edumazet@...gle.com>
    gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers

Eric Dumazet <edumazet@...gle.com>
    gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers

Guillaume Nault <gnault@...hat.com>
    bareudp: Fix device stats updates.

Oliver Neukum <oneukum@...e.com>
    usbnet: modern method to get random MAC

Jakub Kicinski <kuba@...nel.org>
    net: usb: don't write directly to netdev->dev_addr

Larysa Zaremba <larysa.zaremba@...el.com>
    ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset

Dan Carpenter <dan.carpenter@...aro.org>
    igc: Unlock on error in igc_io_resume()

Cong Wang <cong.wang@...edance.com>
    tcp_bpf: fix return value of tcp_bpf_sendmsg()

Aleksandr Mishin <amishin@...rgos.ru>
    platform/x86: dell-smbios: Fix error path in dell_smbios_init()

Daiwei Li <daiweili@...gle.com>
    igb: Fix not clearing TimeSync interrupts for 82580

Simon Horman <horms@...nel.org>
    can: m_can: Release irq on error in m_can_open

Kuniyuki Iwashima <kuniyu@...zon.com>
    can: bcm: Remove proc entry when dev is unregistered.

Marek Olšák <marek.olsak@....com>
    drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6

Jules Irenge <jbi.octave@...il.com>
    pcmcia: Use resource_size function on resource object

Chen Ni <nichen@...as.ac.cn>
    media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse

Kishon Vijay Abraham I <kishon@...com>
    PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)

Hans Verkuil <hverkuil-cisco@...all.nl>
    media: vivid: don't set HDMI TX controls if there are no HDMI outputs

Alex Hung <alex.hung@....com>
    drm/amd/display: Check HDCP returned status

Shantanu Goel <sgoel01@...oo.com>
    usb: uas: set host status byte on data completion error

Arend van Spriel <arend.vanspriel@...adcom.com>
    wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3

Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
    leds: spi-byte: Call of_node_put() on error path

Hans Verkuil <hverkuil-cisco@...all.nl>
    media: vivid: fix wrong sizeimage value for mplane

Jan Kara <jack@...e.cz>
    udf: Avoid excessive partition lengths

Yunjian Wang <wangyunjian@...wei.com>
    netfilter: nf_conncount: fix wrong variable type

Jernej Skrabec <jernej.skrabec@...il.com>
    iommu: sun50i: clear bypass register

Kuniyuki Iwashima <kuniyu@...zon.com>
    af_unix: Remove put_pid()/put_cred() in copy_peercred().

Pali Rohár <pali@...nel.org>
    irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1

Konstantin Andreev <andreev@...mel.ru>
    smack: unix sockets: fix accept()ed socket label

Takashi Iwai <tiwai@...e.de>
    ALSA: hda: Add input value sanity checks to HDMI channel map controls

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: send ACK on an active subflow

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pr_debug: add missing \n at the end

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: skip connecting to already established sf

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: do not remove already closed subflows

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: ADD_ADDR 0 is not a new address

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: close subflow when receiving TCP+FIN

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: avoid duplicated SUB_CLOSED events

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: avoid possible UaF when selecting endp

Paolo Abeni <pabeni@...hat.com>
    mptcp: constify a bunch of of helpers

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: fullmesh: select the right ID later

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: only decrement add_addr_accepted for MPJ req

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    mptcp: pm: re-using ID of unused flushed subflows

Ryusuke Konishi <konishi.ryusuke@...il.com>
    nilfs2: fix state management in error path of log writing function

Ryusuke Konishi <konishi.ryusuke@...il.com>
    nilfs2: fix missing cleanup on rollforward recovery error

Toke Høiland-Jørgensen <toke@...hat.com>
    sched: sch_cake: fix bulk flow accounting logic for host fairness

Eric Dumazet <edumazet@...gle.com>
    ila: call nf_unregister_net_hooks() sooner

Zheng Yejian <zhengyejian@...weicloud.com>
    tracing: Avoid possible softlockup in tracing_iter_reset()

Simon Arlott <simon@...iron.net>
    can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open

Satya Priya Kakitapalli <quic_skakitap@...cinc.com>
    clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled

Satya Priya Kakitapalli <quic_skakitap@...cinc.com>
    clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API

Satya Priya Kakitapalli <quic_skakitap@...cinc.com>
    clk: qcom: clk-alpha-pll: Fix the pll post div mask

Jann Horn <jannh@...gle.com>
    fuse: use unsigned type for getxattr/listxattr size truncation

Joanne Koong <joannelkoong@...il.com>
    fuse: update stats for pages in dropped aux writeback list

Seunghwan Baek <sh8267.baek@...sung.com>
    mmc: cqhci: Fix checking of CQHCI_HALT state

Liao Chen <liaochen4@...wei.com>
    mmc: sdhci-of-aspeed: fix module autoloading

Sam Protsenko <semen.protsenko@...aro.org>
    mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K

Luiz Augusto von Dentz <luiz.von.dentz@...el.com>
    Bluetooth: MGMT: Ignore keys being loaded with invalid type

Luiz Augusto von Dentz <luiz.von.dentz@...el.com>
    Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"

Georg Gottleuber <ggo@...edocomputers.com>
    nvme-pci: Add sleep quirk for Samsung 990 Evo

Roland Xu <mu001999@...look.com>
    rtmutex: Drop rt_mutex::wait_lock before scheduling

Ma Ke <make24@...as.ac.cn>
    irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()

Zheng Qixing <zhengqixing@...wei.com>
    ata: libata: Fix memory leak for error path in ata_host_alloc()

Maximilien Perreault <maximilienperreault@...il.com>
    ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx

Terry Cheong <htcheong@...omium.org>
    ALSA: hda/realtek: add patch for internal mic in Lenovo V145

Christoffer Sandberg <cs@...edo.de>
    ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices

Ravi Bangoria <ravi.bangoria@....com>
    KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing

Maxim Levitsky <mlevitsk@...hat.com>
    KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE

robelin <robelin@...dia.com>
    ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object

Stephen Hemminger <stephen@...workplumber.org>
    sch/netem: fix use after free in netem_dequeue

Richard Fitzgerald <rf@...nsource.cirrus.com>
    i2c: Use IS_REACHABLE() for substituting empty ACPI functions

Jan Kara <jack@...e.cz>
    ext4: handle redirtying in ext4_bio_write_page()

Jan Kara <jack@...e.cz>
    udf: Limit file size to 4TB

Eric Biggers <ebiggers@...gle.com>
    ext4: reject casefold inode flag without casefold feature

Nikita Kiryushin <kiryushin@...ud.ru>
    rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow

Breno Leitao <leitao@...ian.org>
    virtio_net: Fix napi_skb_cache_put warning

Bob Zhou <bob.zhou@....com>
    drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr

Ricardo Ribalda <ribalda@...omium.org>
    media: uvcvideo: Enforce alignment of frame and interval

Alex Hung <alex.hung@....com>
    drm/amd/display: Skip wbscl_set_scaler_filter if filter is null

Christoph Hellwig <hch@....de>
    block: remove the blk_flush_integrity call in blk_integrity_unregister

Johannes Berg <johannes.berg@...el.com>
    wifi: cfg80211: make hash table duplicates more survivable

Marek Vasut <marex@...x.de>
    drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ

Haoran Liu <liuhaoran14@....com>
    drm/meson: plane: Add error handling

Casey Schaufler <casey@...aufler-ca.com>
    smack: tcp: ipv4, fix incorrect labeling

Amir Goldstein <amir73il@...il.com>
    fsnotify: clear PARENT_WATCHED flags lazily

Abhishek Pandit-Subedi <abhishekpandit@...omium.org>
    usb: typec: ucsi: Fix null pointer dereference in trace

Simon Holesch <simon@...esch.de>
    usbip: Don't submit special requests twice

Frederic Weisbecker <frederic@...nel.org>
    rcu/nocb: Remove buggy bypass lock contention mitigation

Shannon Nelson <shannon.nelson@....com>
    ionic: fix potential irq name truncation

Michael Margolin <mrgolin@...zon.com>
    RDMA/efa: Properly handle unexpected AQ completions

Richard Maina <quic_rmaina@...cinc.com>
    hwspinlock: Introduce hwspin_lock_bust()

Aleksandr Mishin <amishin@...rgos.ru>
    PCI: al: Check IORESOURCE_BUS existence during probe

Jagadeesh Kona <quic_jkona@...cinc.com>
    cpufreq: scmi: Avoid overflow of target_freq in fast switch

Shahar S Matityahu <shahar.s.matityahu@...el.com>
    wifi: iwlwifi: remove fw_running op

Tao Zhou <tao.zhou1@....com>
    drm/amdgpu: update type of buf size to u32 for eeprom functions

Jesse Zhang <jesse.zhang@....com>
    drm/amd/pm: check negtive return for table entries

Jesse Zhang <jesse.zhang@....com>
    drm/amdgpu: the warning dereferencing obj for nbio_v7_4

Jesse Zhang <jesse.zhang@....com>
    drm/amd/pm: check specific index for aldebaran

Jesse Zhang <jesse.zhang@....com>
    drm/amdgpu: fix the waring dereferencing hive

Ma Jun <Jun.Ma2@....com>
    drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs

Leesoo Ahn <lsahn@...eel.net>
    apparmor: fix possible NULL pointer dereference

Michael Chen <michael.chen@....com>
    drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device

Tim Huang <Tim.Huang@....com>
    drm/amdgpu: fix mc_data out-of-bounds read warning

Tim Huang <Tim.Huang@....com>
    drm/amdgpu: fix ucode out-of-bounds read warning

Ma Jun <Jun.Ma2@....com>
    drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

Ma Jun <Jun.Ma2@....com>
    drm/amdgpu: Fix out-of-bounds write warning

Ma Jun <Jun.Ma2@....com>
    drm/amdgpu/pm: Fix uninitialized variable agc_btc_response

Ma Jun <Jun.Ma2@....com>
    drm/amdgpu/pm: Fix uninitialized variable warning for smu10

Asad Kamal <asad.kamal@....com>
    drm/amd/amdgpu: Check tbo resource pointer

Hersen Wu <hersenxs.wu@....com>
    drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create

Alex Hung <alex.hung@....com>
    drm/amd/display: Check msg_id before processing transcation

Alex Hung <alex.hung@....com>
    drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]

Hersen Wu <hersenxs.wu@....com>
    drm/amd/display: Add array index check for hdcp ddc access

Hersen Wu <hersenxs.wu@....com>
    drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6

Alex Hung <alex.hung@....com>
    drm/amd/display: Check gpio_id before used as array index

Zhigang Luo <Zhigang.Luo@....com>
    drm/amdgpu: avoid reading vf2pf info size from FB

Tim Huang <Tim.Huang@....com>
    drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr

Tim Huang <Tim.Huang@....com>
    drm/amdgpu: fix uninitialized scalar variable warning

Jesse Zhang <jesse.zhang@....com>
    drm/amd/pm: fix the Out-of-bounds read warning

Jesse Zhang <jesse.zhang@....com>
    drm/amd/pm: fix warning using uninitialized value of max_vid_step

Tim Huang <Tim.Huang@....com>
    drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr

Ma Jun <Jun.Ma2@....com>
    drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc

Tim Huang <Tim.Huang@....com>
    drm/amdgpu: fix overflowed array index read warning

Alvin Lee <alvin.lee2@....com>
    drm/amd/display: Assign linear_pitch_alignment even for VM

Ma Jun <Jun.Ma2@....com>
    drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr

ZHANG Yuntian <yt@...xa.com>
    net: usb: qmi_wwan: add MeiG Smart SRM825L

Rik van Riel <riel@...riel.com>
    dma-debug: avoid deadlock between dma debug vs printk and netconsole

Richard Fitzgerald <rf@...nsource.cirrus.com>
    i2c: Fix conditional for substituting empty ACPI functions

Takashi Iwai <tiwai@...e.de>
    ALSA: hda/conexant: Mute speakers at suspend / shutdown

Takashi Iwai <tiwai@...e.de>
    ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown

Philip Mueller <philm@...jaro.org>
    drm: panel-orientation-quirks: Add quirk for OrangePi Neo


-------------

Diffstat:

 Documentation/locking/hwspinlock.rst               |  11 ++
 Makefile                                           |   4 +-
 arch/arm64/include/asm/acpi.h                      |  12 ++
 arch/arm64/kernel/acpi_numa.c                      |  11 --
 arch/mips/kernel/cevt-r4k.c                        |  15 +-
 arch/riscv/kernel/head.S                           |   3 +
 arch/s390/kernel/vmlinux.lds.S                     |   9 ++
 arch/um/drivers/line.c                             |   2 +
 arch/x86/kvm/svm/svm.c                             |  15 ++
 arch/x86/mm/pti.c                                  |  45 ++++--
 block/blk-integrity.c                              |   2 -
 drivers/acpi/acpi_processor.c                      |  15 +-
 drivers/android/binder.c                           |   1 +
 drivers/ata/libata-core.c                          |   4 +-
 drivers/ata/pata_macio.c                           |   7 +-
 drivers/base/devres.c                              |   1 +
 drivers/clk/qcom/clk-alpha-pll.c                   |   9 +-
 drivers/clocksource/timer-imx-tpm.c                |  16 +-
 drivers/clocksource/timer-of.c                     |  17 +-
 drivers/clocksource/timer-of.h                     |   1 -
 drivers/cpufreq/scmi-cpufreq.c                     |   4 +-
 drivers/gpio/gpio-rockchip.c                       |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_afmt.c           |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c       |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c            |   3 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_display.c        |   3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_eeprom.c         |   6 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_eeprom.h         |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c            |   3 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c           |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c           |   8 +-
 drivers/gpu/drm/amd/amdgpu/df_v1_7.c               |   2 +
 drivers/gpu/drm/amd/amdgpu/nbio_v7_4.c             |   2 +-
 drivers/gpu/drm/amd/amdkfd/kfd_crat.h              |   2 -
 drivers/gpu/drm/amd/amdkfd/kfd_topology.c          |   3 +-
 drivers/gpu/drm/amd/amdkfd/kfd_topology.h          |   5 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   5 +-
 .../drm/amd/display/dc/clk_mgr/dcn21/rn_clk_mgr.c  |   3 +-
 drivers/gpu/drm/amd/display/dc/core/dc.c           |   1 +
 .../gpu/drm/amd/display/dc/dcn20/dcn20_dwb_scl.c   |   3 +
 drivers/gpu/drm/amd/display/dc/gpio/gpio_service.c |  17 +-
 drivers/gpu/drm/amd/display/dc/hdcp/hdcp_msg.c     |  17 +-
 .../drm/amd/display/modules/hdcp/hdcp1_execution.c |  15 +-
 .../gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c    |  28 +++-
 drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c    |  13 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c    |   5 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c   |  29 +++-
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c    |   2 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c    |  15 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c  |  90 ++++++++---
 .../gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c  |  20 ++-
 .../gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c  |  31 +++-
 .../drm/amd/pm/powerplay/smumgr/vega10_smumgr.c    |   6 +-
 drivers/gpu/drm/amd/pm/swsmu/smu13/aldebaran_ppt.c |   3 +-
 drivers/gpu/drm/bridge/tc358767.c                  |   2 +-
 drivers/gpu/drm/drm_panel_orientation_quirks.c     |   6 +
 drivers/gpu/drm/i915/i915_sw_fence.c               |   8 +-
 drivers/gpu/drm/meson/meson_plane.c                |  17 +-
 drivers/hid/amd-sfh-hid/amd_sfh_hid.c              |   4 +-
 drivers/hid/hid-cougar.c                           |   2 +-
 drivers/hv/vmbus_drv.c                             |   1 +
 drivers/hwmon/adc128d818.c                         |   4 +-
 drivers/hwmon/lm95234.c                            |   9 +-
 drivers/hwmon/nct6775.c                            |   2 +-
 drivers/hwmon/w83627ehf.c                          |   4 +-
 drivers/hwspinlock/hwspinlock_core.c               |  28 ++++
 drivers/hwspinlock/hwspinlock_internal.h           |   3 +
 drivers/i3c/master/mipi-i3c-hci/dma.c              |   5 +-
 drivers/iio/adc/ad7124.c                           |  27 ++--
 drivers/iio/buffer/industrialio-buffer-dmaengine.c |   4 +-
 drivers/iio/inkern.c                               |   8 +-
 drivers/infiniband/hw/efa/efa_com.c                |  30 ++--
 drivers/input/misc/uinput.c                        |  14 ++
 drivers/iommu/intel/dmar.c                         |   2 +-
 drivers/iommu/sun50i-iommu.c                       |   1 +
 drivers/irqchip/irq-armada-370-xp.c                |   4 +
 drivers/irqchip/irq-gic-v2m.c                      |   6 +-
 drivers/leds/leds-spi-byte.c                       |   6 +-
 drivers/md/dm-init.c                               |   4 +-
 drivers/media/platform/qcom/camss/camss.c          |   5 +-
 drivers/media/test-drivers/vivid/vivid-vid-cap.c   |  17 +-
 drivers/media/test-drivers/vivid/vivid-vid-out.c   |  16 +-
 drivers/media/usb/uvc/uvc_driver.c                 |  18 ++-
 drivers/misc/vmw_vmci/vmci_resource.c              |   3 +-
 drivers/mmc/host/cqhci-core.c                      |   2 +-
 drivers/mmc/host/dw_mmc.c                          |   4 +-
 drivers/mmc/host/sdhci-of-aspeed.c                 |   1 +
 drivers/net/bareudp.c                              |  22 +--
 drivers/net/can/m_can/m_can.c                      |   5 +-
 drivers/net/can/spi/mcp251x.c                      |   2 +-
 drivers/net/dsa/vitesse-vsc73xx-core.c             |  10 +-
 drivers/net/ethernet/freescale/dpaa/dpaa_eth.c     |  20 ++-
 drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c |  10 +-
 drivers/net/ethernet/intel/ice/ice_lib.c           |  12 +-
 drivers/net/ethernet/intel/igb/igb_main.c          |  10 ++
 drivers/net/ethernet/intel/igc/igc_main.c          |   1 +
 drivers/net/ethernet/pensando/ionic/ionic_lif.c    |   2 +-
 drivers/net/geneve.c                               |   8 +-
 drivers/net/usb/ch9200.c                           |   4 +-
 drivers/net/usb/cx82310_eth.c                      |   5 +-
 drivers/net/usb/ipheth.c                           |   2 +-
 drivers/net/usb/kaweth.c                           |   3 +-
 drivers/net/usb/mcs7830.c                          |   4 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/usb/sierra_net.c                       |   6 +-
 drivers/net/usb/sr9700.c                           |   4 +-
 drivers/net/usb/sr9800.c                           |   5 +-
 drivers/net/usb/usbnet.c                           |  15 +-
 drivers/net/virtio_net.c                           |   8 +-
 .../broadcom/brcm80211/brcmsmac/mac80211_if.c      |   1 +
 drivers/net/wireless/intel/iwlwifi/fw/debugfs.c    |   3 +-
 drivers/net/wireless/intel/iwlwifi/fw/runtime.h    |   1 -
 drivers/net/wireless/intel/iwlwifi/mvm/ops.c       |   6 -
 drivers/net/wireless/marvell/mwifiex/main.h        |   3 +
 drivers/nvme/host/pci.c                            |  11 ++
 drivers/nvme/target/tcp.c                          |   4 +-
 drivers/nvmem/core.c                               |   6 +-
 drivers/of/irq.c                                   |  15 +-
 drivers/pci/controller/dwc/pci-keystone.c          |  44 +++++-
 drivers/pci/controller/dwc/pcie-al.c               |  16 +-
 drivers/pci/hotplug/pnv_php.c                      |   3 +-
 drivers/pci/pci.c                                  |  35 +++--
 drivers/pcmcia/yenta_socket.c                      |   6 +-
 drivers/platform/x86/dell/dell-smbios-base.c       |   5 +-
 drivers/staging/iio/frequency/ad9834.c             |   2 +-
 drivers/uio/uio_hv_generic.c                       |  11 +-
 drivers/usb/dwc3/core.c                            |  15 ++
 drivers/usb/dwc3/core.h                            |   2 +
 drivers/usb/storage/uas.c                          |   1 +
 drivers/usb/typec/ucsi/ucsi.h                      |   2 +-
 drivers/usb/usbip/stub_rx.c                        |  77 +++++----
 fs/btrfs/ctree.c                                   |  12 +-
 fs/btrfs/ctree.h                                   |   1 -
 fs/btrfs/extent-tree.c                             |  32 +++-
 fs/btrfs/file.c                                    |  25 ++-
 fs/btrfs/inode.c                                   |   2 +-
 fs/btrfs/transaction.h                             |   6 +
 fs/cifs/smb2ops.c                                  |  24 ++-
 fs/ext4/fast_commit.c                              |   8 +-
 fs/ext4/inode.c                                    |   5 +-
 fs/ext4/page-io.c                                  |  14 +-
 fs/fuse/file.c                                     |   8 +-
 fs/fuse/xattr.c                                    |   4 +-
 fs/ksmbd/smb2pdu.c                                 |   4 +
 fs/ksmbd/transport_tcp.c                           |   4 +-
 fs/nfs/super.c                                     |   2 +
 fs/nilfs2/recovery.c                               |  35 ++++-
 fs/nilfs2/segment.c                                |  10 +-
 fs/nilfs2/sysfs.c                                  | 117 ++++++++------
 fs/notify/fsnotify.c                               |  31 ++--
 fs/notify/fsnotify.h                               |   2 +-
 fs/notify/mark.c                                   |  32 +++-
 fs/ntfs3/dir.c                                     |  52 +++---
 fs/squashfs/inode.c                                |   7 +-
 fs/udf/super.c                                     |  24 ++-
 include/linux/fsnotify_backend.h                   |   8 +-
 include/linux/hwspinlock.h                         |   6 +
 include/linux/i2c.h                                |   2 +-
 include/linux/udp.h                                |   2 +-
 include/linux/virtio_net.h                         |  35 +++--
 include/net/bluetooth/hci_core.h                   |   5 -
 kernel/cgroup/cgroup.c                             |   2 +-
 kernel/dma/debug.c                                 |   5 +-
 kernel/dma/map_benchmark.c                         |  16 ++
 kernel/events/core.c                               |  18 ++-
 kernel/events/internal.h                           |   1 +
 kernel/events/ring_buffer.c                        |   2 +
 kernel/events/uprobes.c                            |   3 +-
 kernel/locking/rtmutex.c                           |   9 +-
 kernel/rcu/tasks.h                                 |   2 +-
 kernel/rcu/tree.h                                  |   1 -
 kernel/rcu/tree_nocb.h                             |  32 +---
 kernel/smp.c                                       |   1 +
 kernel/trace/trace.c                               |   2 +
 kernel/workqueue.c                                 |  14 +-
 lib/generic-radix-tree.c                           |   2 +
 mm/memcontrol.c                                    |  23 ++-
 net/8021q/vlan_core.c                              |   7 +-
 net/bluetooth/mgmt.c                               |  60 +++----
 net/bluetooth/smp.c                                |   7 -
 net/bridge/br_fdb.c                                |   6 +-
 net/can/bcm.c                                      |   4 +
 net/ethernet/eth.c                                 |   7 +-
 net/ipv4/af_inet.c                                 |  19 +--
 net/ipv4/fou.c                                     |  54 ++++---
 net/ipv4/gre_offload.c                             |  12 +-
 net/ipv4/tcp_bpf.c                                 |   2 +-
 net/ipv4/tcp_offload.c                             |   3 +
 net/ipv4/udp_offload.c                             |  22 ++-
 net/ipv6/ila/ila.h                                 |   1 +
 net/ipv6/ila/ila_main.c                            |   6 +
 net/ipv6/ila/ila_xlat.c                            |  13 +-
 net/ipv6/ip6_offload.c                             |  14 +-
 net/ipv6/udp_offload.c                             |   2 -
 net/mptcp/options.c                                |  44 +++---
 net/mptcp/pm.c                                     |  36 +++--
 net/mptcp/pm_netlink.c                             | 174 +++++++++++++--------
 net/mptcp/protocol.c                               |  61 +++++---
 net/mptcp/protocol.h                               |  28 ++--
 net/mptcp/sockopt.c                                |   4 +-
 net/mptcp/subflow.c                                |  56 ++++---
 net/netfilter/nf_conncount.c                       |   8 +-
 net/sched/sch_cake.c                               |  11 +-
 net/sched/sch_netem.c                              |   9 +-
 net/sunrpc/xprtsock.c                              |   7 +
 net/unix/af_unix.c                                 |   9 +-
 net/wireless/scan.c                                |  46 ++++--
 security/apparmor/apparmorfs.c                     |   4 +
 security/smack/smack_lsm.c                         |  14 +-
 sound/hda/hdmi_chmap.c                             |  18 +++
 sound/pci/hda/hda_generic.c                        |  63 ++++++++
 sound/pci/hda/hda_generic.h                        |   1 +
 sound/pci/hda/patch_conexant.c                     |  13 ++
 sound/pci/hda/patch_realtek.c                      |  10 ++
 sound/soc/soc-dapm.c                               |   1 +
 sound/soc/soc-topology.c                           |   2 +
 sound/soc/sunxi/sun4i-i2s.c                        | 143 ++++++++---------
 tools/lib/bpf/libbpf.c                             |   4 +-
 tools/testing/selftests/dmabuf-heaps/dmabuf-heap.c |   4 +-
 tools/testing/selftests/net/udpgso.c               |   2 +-
 221 files changed, 1930 insertions(+), 988 deletions(-)



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ