lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20240911130536.697107864@linuxfoundation.org>
Date: Wed, 11 Sep 2024 15:07:26 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	patches@...ts.linux.dev,
	linux-kernel@...r.kernel.org,
	torvalds@...ux-foundation.org,
	akpm@...ux-foundation.org,
	linux@...ck-us.net,
	shuah@...nel.org,
	patches@...nelci.org,
	lkft-triage@...ts.linaro.org,
	pavel@...x.de,
	jonathanh@...dia.com,
	f.fainelli@...il.com,
	sudipm.mukherjee@...il.com,
	srw@...dewatkins.net,
	rwarsow@....de,
	conor@...nel.org,
	allen.lkml@...il.com,
	broonie@...nel.org
Subject: [PATCH 6.1 000/186] 6.1.110-rc2 review

This is the start of the stable review cycle for the 6.1.110 release.
There are 186 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 13 Sep 2024 13:05:08 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.110-rc2.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@...uxfoundation.org>
    Linux 6.1.110-rc2

Miklos Szeredi <mszeredi@...hat.com>
    fuse: add feature flag for expire-only

Peng Wu <wupeng58@...wei.com>
    regulator: of: fix a NULL vs IS_ERR() check in of_regulator_bulk_get_all()

Shakeel Butt <shakeel.butt@...ux.dev>
    memcg: protect concurrent access to mem_cgroup_idr

Yonghong Song <yhs@...com>
    bpf: Silence a warning in btf_type_id_size()

Filipe Manana <fdmanana@...e.com>
    btrfs: fix race between direct IO write and fsync when using same fd

Thomas Gleixner <tglx@...utronix.de>
    x86/mm: Fix PTI for i386 some more

Li Nan <linan122@...wei.com>
    ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()

Liao Chen <liaochen4@...wei.com>
    gpio: modepin: Enable module autoloading

Krzysztof Kozlowski <krzysztof.kozlowski@...aro.org>
    gpio: rockchip: fix OF node leak in probe()

Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
    drm/i915/fence: Mark debug_fence_free() with __maybe_unused

Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
    drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused

Matteo Martelli <matteomartelli3@...il.com>
    ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode

Chen-Yu Tsai <wenst@...omium.org>
    ASoc: SOF: topology: Clear SOF link platform name upon unload

Maurizio Lombardi <mlombard@...hat.com>
    nvmet-tcp: fix kernel crash if commands allocation fails

Mohan Kumar <mkumard@...dia.com>
    ASoC: tegra: Fix CBB error during probe()

Christophe Leroy <christophe.leroy@...roup.eu>
    powerpc/64e: Define mmu_pte_psize static

Michael Ellerman <mpe@...erman.id.au>
    powerpc/64e: split out nohash Book3E 64-bit code

Michael Ellerman <mpe@...erman.id.au>
    powerpc/64e: remove unused IBM HTW code

Marek Olšák <marek.olsak@....com>
    drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes

Aurabindo Pillai <aurabindo.pillai@....com>
    drm/amd: Add gfx12 swizzle mode defs

Marc Kleine-Budde <mkl@...gutronix.de>
    can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd

Marc Kleine-Budde <mkl@...gutronix.de>
    can: mcp251xfd: clarify the meaning of timestamp

Marc Kleine-Budde <mkl@...gutronix.de>
    can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum

Marc Kleine-Budde <mkl@...gutronix.de>
    can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function

Jonathan Cameron <Jonathan.Cameron@...wei.com>
    arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry

James Morse <james.morse@....com>
    arm64: acpi: Move get_cpu_for_acpi_id() to a header

Jonathan Cameron <Jonathan.Cameron@...wei.com>
    ACPI: processor: Fix memory leaks in error paths of processor_add()

Jonathan Cameron <Jonathan.Cameron@...wei.com>
    ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()

Nicholas Piggin <npiggin@...il.com>
    workqueue: Improve scalability of workqueue watchdog touch

Nicholas Piggin <npiggin@...il.com>
    workqueue: wq_watchdog_touch is always called with valid CPU

Souradeep Chakrabarti <schakrabarti@...ux.microsoft.com>
    net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup

yangyun <yangyun50@...wei.com>
    fuse: fix memory leak in fuse_create_open

Miklos Szeredi <mszeredi@...hat.com>
    fuse: add request extension

Dharmendra Singh <dsingh@....com>
    fuse: allow non-extending parallel direct writes on the same file

Miklos Szeredi <mszeredi@...hat.com>
    fuse: add "expire only" mode to FUSE_NOTIFY_INVAL_ENTRY

Peter Zijlstra <peterz@...radead.org>
    perf/aux: Fix AUX buffer serialization

Sven Schnelle <svens@...ux.ibm.com>
    uprobes: Use kzalloc to allocate xol area

Daniel Lezcano <daniel.lezcano@...aro.org>
    clocksource/drivers/timer-of: Remove percpu irq related code

Jacky Bai <ping.bai@....com>
    clocksource/drivers/imx-tpm: Fix next event not taking effect sometime

Jacky Bai <ping.bai@....com>
    clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX

David Fernandez Gonzalez <david.fernandez.gonzalez@...cle.com>
    VMCI: Fix use-after-free when removing resource in vmci_resource_remove()

Naman Jain <namjain@...ux.microsoft.com>
    Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic

Saurabh Sengar <ssengar@...ux.microsoft.com>
    uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

Geert Uytterhoeven <geert+renesas@...der.be>
    nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc

Carlos Llamas <cmllamas@...gle.com>
    binder: fix UAF caused by offsets overwrite

Faisal Hassan <quic_faisalh@...cinc.com>
    usb: dwc3: core: update LC timer as per USB Spec V3.2

Dumitru Ceclan <mitrutzceclan@...il.com>
    iio: adc: ad7124: fix chip ID mismatch

Guillaume Stols <gstols@...libre.com>
    iio: adc: ad7606: remove frstdata check for serial mode

Dumitru Ceclan <mitrutzceclan@...il.com>
    iio: adc: ad7124: fix config comparison

Matteo Martelli <matteomartelli3@...il.com>
    iio: fix scale application in iio_convert_raw_to_processed_unlocked

David Lechner <dlechner@...libre.com>
    iio: buffer-dmaengine: fix releasing dma channel on error

Aleksandr Mishin <amishin@...rgos.ru>
    staging: iio: frequency: ad9834: Validate frequency parameter value

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    tcp: process the 3rd ACK with sk_socket for TFO/MPTCP

Michal Koutný <mkoutny@...e.com>
    io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads

Jens Axboe <axboe@...nel.dk>
    io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    selftests: mptcp: join: check re-re-adding ID 0 signal

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    selftests: mptcp: join: validate event numbers

Matthieu Baerts (NGI0) <matttbe@...nel.org>
    selftests: mptcp: fix backport issues

Trond Myklebust <trond.myklebust@...merspace.com>
    NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations

Michael Ellerman <mpe@...erman.id.au>
    ata: pata_macio: Use WARN instead of BUG

Jiaxun Yang <jiaxun.yang@...goat.com>
    MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed

Kent Overstreet <kent.overstreet@...ux.dev>
    lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

Stefan Wiehler <stefan.wiehler@...ia.com>
    of/irq: Prevent device address out-of-bounds read in interrupt map walk

Phillip Lougher <phillip@...ashfs.org.uk>
    Squashfs: sanity check symbolic link size

Oliver Neukum <oneukum@...e.com>
    usbnet: ipheth: race between ipheth_close and error handling

Dmitry Torokhov <dmitry.torokhov@...il.com>
    Input: uinput - reject requests with unreasonable number of slots

Olivier Sobrie <olivier@...rie.be>
    HID: amd_sfh: free driver_data after destroying hid device

Camila Alvarez <cam.alvarez.i@...il.com>
    HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup

Heiko Carstens <hca@...ux.ibm.com>
    s390/vmlinux.lds.S: Move ro_after_init section behind rodata section

David Sterba <dsterba@...e.com>
    btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()

Zenghui Yu <yuzenghui@...wei.com>
    kselftests: dmabuf-heaps: Ensure the driver name is null-terminated

Jarkko Nikula <jarkko.nikula@...ux.intel.com>
    i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup

Vladimir Oltean <vladimir.oltean@....com>
    net: dpaa: avoid on-stack arrays of NR_CPUS elements

Kuniyuki Iwashima <kuniyu@...zon.com>
    tcp: Don't drop SYN+ACK for simultaneous connect().

Dan Williams <dan.j.williams@...el.com>
    PCI: Add missing bridge lock to pci_bus_lock()

yang.zhang <yang.zhang@...intek.com>
    riscv: set trap vector earlier

Filipe Manana <fdmanana@...e.com>
    btrfs: replace BUG_ON() with error handling at update_ref_for_cow()

Josef Bacik <josef@...icpanda.com>
    btrfs: clean up our handling of refs == 0 in snapshot delete

Josef Bacik <josef@...icpanda.com>
    btrfs: replace BUG_ON with ASSERT in walk_down_proc()

Konstantin Komarov <almaz.alexandrovich@...agon-software.com>
    fs/ntfs3: Check more cases when directory is corrupted

Zqiang <qiang.zhang1211@...il.com>
    smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()

Sascha Hauer <s.hauer@...gutronix.de>
    wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()

Yicong Yang <yangyicong@...ilicon.com>
    dma-mapping: benchmark: Don't starve others when doing the test

Luis Henriques (SUSE) <luis.henriques@...ux.dev>
    ext4: fix possible tid_t sequence overflows

Yifan Zha <Yifan.Zha@....com>
    drm/amdgpu: Set no_hw_access when VF request full GPU fails

Andreas Ziegler <ziegler.andreas@...mens.com>
    libbpf: Add NULL checks to bpf_object__{prev_map,next_map}

Guenter Roeck <linux@...ck-us.net>
    hwmon: (w83627ehf) Fix underflows seen when writing limit attributes

Guenter Roeck <linux@...ck-us.net>
    hwmon: (nct6775-core) Fix underflows seen when writing limit attributes

Guenter Roeck <linux@...ck-us.net>
    hwmon: (lm95234) Fix underflows seen when writing limit attributes

Guenter Roeck <linux@...ck-us.net>
    hwmon: (adc128d818) Fix underflows seen when writing limit attributes

Hareshx Sankar Raj <hareshx.sankar.raj@...el.com>
    crypto: qat - fix unintentional re-enabling of error interrupts

Krishna Kumar <krishnak@...ux.ibm.com>
    pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

Zijun Hu <quic_zijuhu@...cinc.com>
    devres: Initialize an uninitialized struct member

Johannes Berg <johannes.berg@...el.com>
    um: line: always fill *error_out in setup_one_line()

Waiman Long <longman@...hat.com>
    cgroup: Protect css->cgroup write under css_set_lock

Jacob Pan <jacob.jun.pan@...ux.intel.com>
    iommu/vt-d: Handle volatile descriptor status read

Benjamin Marzinski <bmarzins@...hat.com>
    dm init: Handle minors larger than 255

Amadeusz Sławiński <amadeuszx.slawinski@...ux.intel.com>
    ASoC: topology: Properly initialize soc_enum values

Sean Anderson <sean.anderson@...ux.dev>
    phy: zynqmp: Take the phy mutex in xlate

Richard Fitzgerald <rf@...nsource.cirrus.com>
    firmware: cs_dsp: Don't allow writes to read-only controls

Pawel Dembicki <paweldembicki@...il.com>
    net: dsa: vsc73xx: fix possible subblocks range of CAPT block

Jonas Gorski <jonas.gorski@...dn.de>
    net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN

Kuniyuki Iwashima <kuniyu@...zon.com>
    fou: Fix null-ptr-deref in GRO.

Guillaume Nault <gnault@...hat.com>
    bareudp: Fix device stats updates.

Oliver Neukum <oneukum@...e.com>
    usbnet: modern method to get random MAC

Larysa Zaremba <larysa.zaremba@...el.com>
    ice: do not bring the VSI up, if it was down before the XDP setup

Maciej Fijalkowski <maciej.fijalkowski@...el.com>
    ice: allow hot-swapping XDP programs

Maciej Fijalkowski <maciej.fijalkowski@...el.com>
    ice: Use ice_max_xdp_frame_size() in ice_xdp_setup_prog()

Dan Carpenter <dan.carpenter@...aro.org>
    igc: Unlock on error in igc_io_resume()

Douglas Anderson <dianders@...omium.org>
    regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR

Corentin Labbe <clabbe@...libre.com>
    regulator: Add of_regulator_bulk_get_all

Aleksandr Mishin <amishin@...rgos.ru>
    platform/x86: dell-smbios: Fix error path in dell_smbios_init()

Dawid Osuchowski <dawid.osuchowski@...ux.intel.com>
    ice: Add netif_device_attach/detach into PF reset flow

Daiwei Li <daiweili@...gle.com>
    igb: Fix not clearing TimeSync interrupts for 82580

David Howells <dhowells@...hat.com>
    cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region

Andreas Hindborg <a.hindborg@...sung.com>
    rust: kbuild: fix export of bss symbols

Matthew Maurer <mmaurer@...gle.com>
    rust: Use awk instead of recent xargs

Marc Kleine-Budde <mkl@...gutronix.de>
    can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode

Simon Horman <horms@...nel.org>
    can: m_can: Release irq on error in m_can_open

Kuniyuki Iwashima <kuniyu@...zon.com>
    can: bcm: Remove proc entry when dev is unregistered.

Marek Olšák <marek.olsak@....com>
    drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6

Alex Hung <alex.hung@....com>
    drm/amd/display: Check denominator pbn_div before used

Jules Irenge <jbi.octave@...il.com>
    pcmcia: Use resource_size function on resource object

Chen Ni <nichen@...as.ac.cn>
    media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse

Dmitry Torokhov <dmitry.torokhov@...il.com>
    Input: ili210x - use kvmalloc() to allocate buffer for firmware update

Kishon Vijay Abraham I <kishon@...com>
    PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)

Hans Verkuil <hverkuil-cisco@...all.nl>
    media: vivid: don't set HDMI TX controls if there are no HDMI outputs

Danijel Slivka <danijel.slivka@....com>
    drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts

Hawking Zhang <Hawking.Zhang@....com>
    drm/amdgpu: Fix smatch static checker warning

Alex Hung <alex.hung@....com>
    drm/amd/display: Check HDCP returned status

Ma Ke <make24@...as.ac.cn>
    usb: gadget: aspeed_udc: validate endpoint index for ast udc

Shantanu Goel <sgoel01@...oo.com>
    usb: uas: set host status byte on data completion error

Arend van Spriel <arend.vanspriel@...adcom.com>
    wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3

Andy Shevchenko <andriy.shevchenko@...ux.intel.com>
    leds: spi-byte: Call of_node_put() on error path

Hans Verkuil <hverkuil-cisco@...all.nl>
    media: vivid: fix wrong sizeimage value for mplane

Konstantin Komarov <almaz.alexandrovich@...agon-software.com>
    fs/ntfs3: One more reason to mark inode bad

Jan Kara <jack@...e.cz>
    udf: Avoid excessive partition lengths

Yunjian Wang <wangyunjian@...wei.com>
    netfilter: nf_conncount: fix wrong variable type

Jernej Skrabec <jernej.skrabec@...il.com>
    iommu: sun50i: clear bypass register

Brian Johannesmeyer <bjohannesmeyer@...il.com>
    x86/kmsan: Fix hook for unaligned accesses

Kuniyuki Iwashima <kuniyu@...zon.com>
    af_unix: Remove put_pid()/put_cred() in copy_peercred().

Pali Rohár <pali@...nel.org>
    irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1

Alexey Dobriyan <adobriyan@...il.com>
    ELF: fix kernel.randomize_va_space double read

Konstantin Andreev <andreev@...mel.ru>
    smack: unix sockets: fix accept()ed socket label

Takashi Iwai <tiwai@...e.de>
    ALSA: hda: Add input value sanity checks to HDMI channel map controls

Takashi Iwai <tiwai@...e.de>
    ALSA: control: Apply sanity check of input values for user elements

Ryusuke Konishi <konishi.ryusuke@...il.com>
    nilfs2: fix state management in error path of log writing function

Ryusuke Konishi <konishi.ryusuke@...il.com>
    nilfs2: protect references to superblock parameters exposed in sysfs

Ryusuke Konishi <konishi.ryusuke@...il.com>
    nilfs2: fix missing cleanup on rollforward recovery error

Toke Høiland-Jørgensen <toke@...hat.com>
    sched: sch_cake: fix bulk flow accounting logic for host fairness

Eric Dumazet <edumazet@...gle.com>
    ila: call nf_unregister_net_hooks() sooner

Cong Wang <cong.wang@...edance.com>
    tcp_bpf: fix return value of tcp_bpf_sendmsg()

Alex Deucher <alexander.deucher@....com>
    Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"

Mitchell Levy <levymitchell0@...il.com>
    x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported

Matt Johnston <matt@...econstruct.com.au>
    net: mctp-serial: Fix missing escapes on transmit

Zheng Yejian <zhengyejian@...weicloud.com>
    tracing: Avoid possible softlockup in tracing_iter_reset()

Brian Norris <briannorris@...omium.org>
    spi: rockchip: Resolve unbalanced runtime PM / system PM handling

Simon Arlott <simon@...iron.net>
    can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open

Satya Priya Kakitapalli <quic_skakitap@...cinc.com>
    clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled

Satya Priya Kakitapalli <quic_skakitap@...cinc.com>
    clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API

Satya Priya Kakitapalli <quic_skakitap@...cinc.com>
    clk: qcom: clk-alpha-pll: Fix the pll post div mask

Jann Horn <jannh@...gle.com>
    fuse: use unsigned type for getxattr/listxattr size truncation

Joanne Koong <joannelkoong@...il.com>
    fuse: update stats for pages in dropped aux writeback list

Seunghwan Baek <sh8267.baek@...sung.com>
    mmc: cqhci: Fix checking of CQHCI_HALT state

Liao Chen <liaochen4@...wei.com>
    mmc: sdhci-of-aspeed: fix module autoloading

Sam Protsenko <semen.protsenko@...aro.org>
    mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K

Jonathan Bell <jonathan@...pberrypi.com>
    mmc: core: apply SD quirks earlier during probe

Luiz Augusto von Dentz <luiz.von.dentz@...el.com>
    Bluetooth: MGMT: Ignore keys being loaded with invalid type

Luiz Augusto von Dentz <luiz.von.dentz@...el.com>
    Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"

Georg Gottleuber <ggo@...edocomputers.com>
    nvme-pci: Add sleep quirk for Samsung 990 Evo

Roland Xu <mu001999@...look.com>
    rtmutex: Drop rt_mutex::wait_lock before scheduling

Thomas Gleixner <tglx@...utronix.de>
    x86/kaslr: Expose and use the end of the physical memory address space

Ma Ke <make24@...as.ac.cn>
    irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()

Kan Liang <kan.liang@...ux.intel.com>
    perf/x86/intel: Limit the period on Haswell

Kirill A. Shutemov <kirill.shutemov@...ux.intel.com>
    x86/tdx: Fix data leak in mmio_read()

Zheng Qixing <zhengqixing@...wei.com>
    ata: libata: Fix memory leak for error path in ata_host_alloc()

Dan Carpenter <dan.carpenter@...aro.org>
    ksmbd: Unlock on in ksmbd_tcp_set_interfaces()

Namjae Jeon <linkinjeon@...nel.org>
    ksmbd: unset the binding mark of a reused connection

Maximilien Perreault <maximilienperreault@...il.com>
    ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx

Terry Cheong <htcheong@...omium.org>
    ALSA: hda/realtek: add patch for internal mic in Lenovo V145

Christoffer Sandberg <cs@...edo.de>
    ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices

Ravi Bangoria <ravi.bangoria@....com>
    KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing

Maxim Levitsky <mlevitsk@...hat.com>
    KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE

Sean Christopherson <seanjc@...gle.com>
    KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS

robelin <robelin@...dia.com>
    ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object

Stephen Hemminger <stephen@...workplumber.org>
    sch/netem: fix use after free in netem_dequeue


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/include/asm/acpi.h                      |  12 +
 arch/arm64/kernel/acpi_numa.c                      |  11 -
 arch/mips/kernel/cevt-r4k.c                        |  15 +-
 arch/powerpc/include/asm/nohash/mmu-e500.h         |   3 +-
 arch/powerpc/mm/nohash/Makefile                    |   2 +-
 arch/powerpc/mm/nohash/tlb.c                       | 398 +--------------------
 arch/powerpc/mm/nohash/tlb_64e.c                   | 361 +++++++++++++++++++
 arch/powerpc/mm/nohash/tlb_low_64e.S               | 195 ----------
 arch/riscv/kernel/head.S                           |   3 +
 arch/s390/kernel/vmlinux.lds.S                     |   9 +
 arch/um/drivers/line.c                             |   2 +
 arch/x86/coco/tdx/tdx.c                            |   1 -
 arch/x86/events/intel/core.c                       |  23 +-
 arch/x86/include/asm/fpu/types.h                   |   7 +
 arch/x86/include/asm/page_64.h                     |   1 +
 arch/x86/include/asm/pgtable_64_types.h            |   4 +
 arch/x86/kernel/fpu/xstate.c                       |   3 +
 arch/x86/kernel/fpu/xstate.h                       |   4 +-
 arch/x86/kvm/svm/svm.c                             |  15 +
 arch/x86/kvm/x86.c                                 |   2 +
 arch/x86/lib/iomem.c                               |   5 +-
 arch/x86/mm/init_64.c                              |   4 +
 arch/x86/mm/kaslr.c                                |  34 +-
 arch/x86/mm/pti.c                                  |  45 ++-
 drivers/acpi/acpi_processor.c                      |  15 +-
 drivers/android/binder.c                           |   1 +
 drivers/ata/libata-core.c                          |   4 +-
 drivers/ata/pata_macio.c                           |   7 +-
 drivers/base/devres.c                              |   1 +
 drivers/block/ublk_drv.c                           |   2 +
 drivers/clk/qcom/clk-alpha-pll.c                   |   9 +-
 drivers/clocksource/timer-imx-tpm.c                |  16 +-
 drivers/clocksource/timer-of.c                     |  17 +-
 drivers/clocksource/timer-of.h                     |   1 -
 drivers/crypto/qat/qat_common/adf_gen2_pfvf.c      |   4 +-
 .../crypto/qat/qat_dh895xcc/adf_dh895xcc_hw_data.c |   8 +-
 drivers/firmware/cirrus/cs_dsp.c                   |   3 +
 drivers/gpio/gpio-rockchip.c                       |   1 +
 drivers/gpio/gpio-zynqmp-modepin.c                 |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_display.c        |  30 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c           |   4 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |   8 +-
 drivers/gpu/drm/amd/amdgpu/ih_v6_0.c               |  28 ++
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   2 +-
 .../drm/amd/display/modules/hdcp/hdcp1_execution.c |  15 +-
 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c          |   6 +-
 drivers/gpu/drm/i915/i915_sw_fence.c               |   8 +-
 drivers/hid/amd-sfh-hid/amd_sfh_hid.c              |   4 +-
 drivers/hid/hid-cougar.c                           |   2 +-
 drivers/hv/vmbus_drv.c                             |   1 +
 drivers/hwmon/adc128d818.c                         |   4 +-
 drivers/hwmon/lm95234.c                            |   9 +-
 drivers/hwmon/nct6775-core.c                       |   2 +-
 drivers/hwmon/w83627ehf.c                          |   4 +-
 drivers/i3c/master/mipi-i3c-hci/dma.c              |   5 +-
 drivers/iio/adc/ad7124.c                           |  27 +-
 drivers/iio/adc/ad7606.c                           |  28 +-
 drivers/iio/adc/ad7606.h                           |   2 +
 drivers/iio/adc/ad7606_par.c                       |  46 ++-
 drivers/iio/buffer/industrialio-buffer-dmaengine.c |   4 +-
 drivers/iio/inkern.c                               |   8 +-
 drivers/input/misc/uinput.c                        |  14 +
 drivers/input/touchscreen/ili210x.c                |   6 +-
 drivers/iommu/intel/dmar.c                         |   2 +-
 drivers/iommu/sun50i-iommu.c                       |   1 +
 drivers/irqchip/irq-armada-370-xp.c                |   4 +
 drivers/irqchip/irq-gic-v2m.c                      |   6 +-
 drivers/leds/leds-spi-byte.c                       |   6 +-
 drivers/md/dm-init.c                               |   4 +-
 drivers/media/platform/qcom/camss/camss.c          |   5 +-
 drivers/media/test-drivers/vivid/vivid-vid-cap.c   |  17 +-
 drivers/media/test-drivers/vivid/vivid-vid-out.c   |  16 +-
 drivers/misc/vmw_vmci/vmci_resource.c              |   3 +-
 drivers/mmc/core/quirks.h                          |  22 +-
 drivers/mmc/core/sd.c                              |   4 +
 drivers/mmc/host/cqhci-core.c                      |   2 +-
 drivers/mmc/host/dw_mmc.c                          |   4 +-
 drivers/mmc/host/sdhci-of-aspeed.c                 |   1 +
 drivers/net/bareudp.c                              |  22 +-
 drivers/net/can/m_can/m_can.c                      |   5 +-
 drivers/net/can/spi/mcp251x.c                      |   2 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c     |  28 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-ram.c      |  11 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c     |  23 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c       | 165 ++++++---
 drivers/net/can/spi/mcp251xfd/mcp251xfd-tef.c      |   2 +-
 .../net/can/spi/mcp251xfd/mcp251xfd-timestamp.c    |  22 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd.h          |  42 ++-
 drivers/net/dsa/vitesse-vsc73xx-core.c             |  10 +-
 drivers/net/ethernet/freescale/dpaa/dpaa_eth.c     |  20 +-
 drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c |  10 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |  61 ++--
 drivers/net/ethernet/intel/igb/igb_main.c          |  10 +
 drivers/net/ethernet/intel/igc/igc_main.c          |   1 +
 drivers/net/ethernet/microsoft/mana/mana.h         |   2 +
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  22 +-
 drivers/net/mctp/mctp-serial.c                     |   4 +-
 drivers/net/usb/ipheth.c                           |   2 +-
 drivers/net/usb/usbnet.c                           |  11 +-
 .../broadcom/brcm80211/brcmsmac/mac80211_if.c      |   1 +
 drivers/net/wireless/marvell/mwifiex/main.h        |   3 +
 drivers/nvme/host/pci.c                            |  11 +
 drivers/nvme/target/tcp.c                          |   4 +-
 drivers/nvmem/core.c                               |   6 +-
 drivers/of/irq.c                                   |  15 +-
 drivers/pci/controller/dwc/pci-keystone.c          |  44 ++-
 drivers/pci/hotplug/pnv_php.c                      |   3 +-
 drivers/pci/pci.c                                  |  35 +-
 drivers/pcmcia/yenta_socket.c                      |   6 +-
 drivers/phy/xilinx/phy-zynqmp.c                    |   1 +
 drivers/platform/x86/dell/dell-smbios-base.c       |   5 +-
 drivers/regulator/of_regulator.c                   |  92 +++++
 drivers/spi/spi-rockchip.c                         |  23 +-
 drivers/staging/iio/frequency/ad9834.c             |   2 +-
 drivers/uio/uio_hv_generic.c                       |  11 +-
 drivers/usb/dwc3/core.c                            |  15 +
 drivers/usb/dwc3/core.h                            |   2 +
 drivers/usb/gadget/udc/aspeed_udc.c                |   2 +
 drivers/usb/storage/uas.c                          |   1 +
 fs/binfmt_elf.c                                    |   5 +-
 fs/btrfs/ctree.c                                   |  12 +-
 fs/btrfs/ctree.h                                   |   1 -
 fs/btrfs/extent-tree.c                             |  32 +-
 fs/btrfs/file.c                                    |  25 +-
 fs/btrfs/inode.c                                   |   2 +-
 fs/btrfs/transaction.h                             |   6 +
 fs/ext4/fast_commit.c                              |   8 +-
 fs/fuse/dev.c                                      |   6 +-
 fs/fuse/dir.c                                      |  72 ++--
 fs/fuse/file.c                                     |  51 ++-
 fs/fuse/fuse_i.h                                   |   8 +-
 fs/fuse/inode.c                                    |   3 +-
 fs/fuse/xattr.c                                    |   4 +-
 fs/nfs/super.c                                     |   2 +
 fs/nilfs2/recovery.c                               |  35 +-
 fs/nilfs2/segment.c                                |  10 +-
 fs/nilfs2/sysfs.c                                  |  43 ++-
 fs/ntfs3/dir.c                                     |  52 +--
 fs/ntfs3/frecord.c                                 |   4 +-
 fs/smb/client/smb2ops.c                            |  16 +-
 fs/smb/server/smb2pdu.c                            |   4 +
 fs/smb/server/transport_tcp.c                      |   4 +-
 fs/squashfs/inode.c                                |   7 +-
 fs/udf/super.c                                     |  15 +
 include/linux/mm.h                                 |   4 +
 include/linux/regulator/consumer.h                 |  16 +
 include/net/bluetooth/hci_core.h                   |   5 -
 include/uapi/drm/drm_fourcc.h                      |  18 +
 include/uapi/linux/fuse.h                          |  46 ++-
 io_uring/io-wq.c                                   |  16 +-
 io_uring/sqpoll.c                                  |   1 -
 kernel/bpf/btf.c                                   |  13 +-
 kernel/cgroup/cgroup.c                             |   2 +-
 kernel/dma/map_benchmark.c                         |  16 +
 kernel/events/core.c                               |  18 +-
 kernel/events/internal.h                           |   1 +
 kernel/events/ring_buffer.c                        |   2 +
 kernel/events/uprobes.c                            |   3 +-
 kernel/locking/rtmutex.c                           |   9 +-
 kernel/resource.c                                  |   6 +-
 kernel/smp.c                                       |   1 +
 kernel/trace/trace.c                               |   2 +
 kernel/workqueue.c                                 |  14 +-
 lib/generic-radix-tree.c                           |   2 +
 mm/memcontrol.c                                    |  22 +-
 mm/memory_hotplug.c                                |   2 +-
 mm/sparse.c                                        |   2 +-
 net/bluetooth/mgmt.c                               |  60 ++--
 net/bluetooth/smp.c                                |   7 -
 net/bridge/br_fdb.c                                |   6 +-
 net/can/bcm.c                                      |   4 +
 net/ipv4/fou.c                                     |  29 +-
 net/ipv4/tcp_bpf.c                                 |   2 +-
 net/ipv4/tcp_input.c                               |   6 +
 net/ipv6/ila/ila.h                                 |   1 +
 net/ipv6/ila/ila_main.c                            |   6 +
 net/ipv6/ila/ila_xlat.c                            |  13 +-
 net/netfilter/nf_conncount.c                       |   8 +-
 net/sched/sch_cake.c                               |  11 +-
 net/sched/sch_netem.c                              |   9 +-
 net/unix/af_unix.c                                 |   9 +-
 rust/Makefile                                      |   4 +-
 security/smack/smack_lsm.c                         |  12 +-
 sound/core/control.c                               |   6 +-
 sound/hda/hdmi_chmap.c                             |  18 +
 sound/pci/hda/patch_conexant.c                     |  11 +
 sound/pci/hda/patch_realtek.c                      |  10 +
 sound/soc/soc-dapm.c                               |   1 +
 sound/soc/soc-topology.c                           |   2 +
 sound/soc/sof/topology.c                           |   2 +
 sound/soc/sunxi/sun4i-i2s.c                        | 143 ++++----
 sound/soc/tegra/tegra210_ahub.c                    |  12 +-
 tools/lib/bpf/libbpf.c                             |   4 +-
 tools/testing/selftests/dmabuf-heaps/dmabuf-heap.c |   4 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    | 234 ++++++++----
 tools/testing/selftests/net/mptcp/mptcp_lib.sh     |  15 +
 197 files changed, 2269 insertions(+), 1402 deletions(-)



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ