| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20250122073830.779239943@linuxfoundation.org>
Date: Wed, 22 Jan 2025 09:03:53 +0100
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: stable@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
patches@...ts.linux.dev,
linux-kernel@...r.kernel.org,
torvalds@...ux-foundation.org,
akpm@...ux-foundation.org,
linux@...ck-us.net,
shuah@...nel.org,
patches@...nelci.org,
lkft-triage@...ts.linaro.org,
pavel@...x.de,
jonathanh@...dia.com,
f.fainelli@...il.com,
sudipm.mukherjee@...il.com,
srw@...dewatkins.net,
rwarsow@....de,
conor@...nel.org,
hargar@...rosoft.com,
broonie@...nel.org
Subject: [PATCH 5.15 000/127] 5.15.177-rc2 review
This is the start of the stable review cycle for the 5.15.177 release.
There are 127 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 24 Jan 2025 07:38:04 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.177-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Linux 5.15.177-rc2
Wang Liang <wangliang74@...wei.com>
net: fix data-races around sk->sk_forward_alloc
Suraj Sonawane <surajsonawane0215@...il.com>
scsi: sg: Fix slab-use-after-free read in sg_release()
Juergen Gross <jgross@...e.com>
x86/xen: fix SLS mitigation in xen_hypercall_iret()
Youzhong Yang <youzhong@...il.com>
nfsd: add list_head nf_gc to struct nfsd_file
Eric Dumazet <edumazet@...gle.com>
ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
Stefano Garzarella <sgarzare@...hat.com>
vsock/virtio: discard packets if the transport changes
Tejun Heo <tj@...nel.org>
blk-cgroup: Fix UAF in blkcg_unpin_online()
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Revert "regmap: detach regmap from dev on regmap_exit"
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Revert "drm/amdgpu: rework resume handling for display (v2)"
Javier Carrasco <javier.carrasco.cruz@...il.com>
iio: adc: rockchip_saradc: fix information leak in triggered buffer
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@....com>
iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@....com>
iio: imu: inv_icm42600: fix spi burst write not supported
Terry Tritton <terry.tritton@...aro.org>
Revert "PCI: Use preserve_config in place of pci_flags"
Ville Syrjälä <ville.syrjala@...ux.intel.com>
drm/i915/fb: Relax clear color alignment to 64 bytes
Koichiro Den <koichiro.den@...onical.com>
hrtimers: Handle CPU state correctly on hotplug
Yogesh Lal <quic_ylal@...cinc.com>
irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
Zhongqiu Han <quic_zhonhan@...cinc.com>
gpiolib: cdev: Fix use after free in lineinfo_changed_notify
Rik van Riel <riel@...riel.com>
fs/proc: fix softlockup in __read_vmcore (part 2)
Marco Nelissen <marco.nelissen@...il.com>
filemap: avoid truncating 64-bit offset to 32 bits
Stefano Garzarella <sgarzare@...hat.com>
vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
Stefano Garzarella <sgarzare@...hat.com>
vsock: reset socket state when de-assigning the transport
Stefano Garzarella <sgarzare@...hat.com>
vsock/virtio: cancel close work in the destructor
Heiner Kallweit <hkallweit1@...il.com>
net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
Juergen Gross <jgross@...e.com>
x86/asm: Make serialize() always_inline
Kairui Song <kasong@...cent.com>
zram: fix potential UAF of zram table
Luis Chamberlain <mcgrof@...nel.org>
nvmet: propagate npwg topology
Oleg Nesterov <oleg@...hat.com>
poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()
Hans de Goede <hdegoede@...hat.com>
ACPI: resource: acpi_dev_irq_override(): Check DMI match last
David Howells <dhowells@...hat.com>
kheaders: Ignore silly-rename files
Zhang Kunbo <zhangkunbo@...wei.com>
fs: fix missing declaration of init_files
Leo Stone <leocstone@...il.com>
hfs: Sanity check the root record
Lizhi Xu <lizhi.xu@...driver.com>
mac802154: check local interfaces before deleting sdata list
Wolfram Sang <wsa+renesas@...g-engineering.com>
i2c: rcar: fix NACK handling when being a target
Wolfram Sang <wsa+renesas@...g-engineering.com>
i2c: mux: demux-pinctrl: check initial mux selection, too
Pratyush Yadav <pratyush@...nel.org>
Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
David Lechner <dlechner@...libre.com>
hwmon: (tmp513) Fix division of negative numbers
Maíra Canal <mcanal@...lia.com>
drm/v3d: Ensure job pointer is set to NULL after job completion
Patrisious Haddad <phaddad@...dia.com>
net/mlx5: Fix RDMA TX steering prio
Maor Gottlieb <maorg@...dia.com>
net/mlx5: Refactor mlx5_get_flow_namespace
Aharon Landau <aharonl@...dia.com>
net/mlx5: Add priorities for counters in RDMA namespaces
Sean Anderson <sean.anderson@...ux.dev>
net: xilinx: axienet: Fix IRQ coalescing packet count overflow
Dan Carpenter <dan.carpenter@...aro.org>
nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
Kuniyuki Iwashima <kuniyu@...zon.com>
gtp: Destroy device along with udp socket's netns dismantle.
Kuniyuki Iwashima <kuniyu@...zon.com>
gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
Eric Dumazet <edumazet@...gle.com>
gtp: use exit_batch_rtnl() method
Eric Dumazet <edumazet@...gle.com>
net: add exit_batch_rtnl() method
Artem Chernyshev <artem.chernyshev@...-soft.ru>
pktgen: Avoid out-of-bounds access in get_imix_entries
Michal Luczaj <mhal@...x.co>
bpf: Fix bpf_sk_select_reuseport() memory leak
Sudheer Kumar Doredla <s-doredla@...com>
net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
Justin Chen <justinpopo6@...il.com>
phy: usb: Fix clock imbalance for suspend/resume
Justin Chen <justinpopo6@...il.com>
phy: usb: Use slow clock for wake enabled suspend
Paolo Abeni <pabeni@...hat.com>
mptcp: fix TCP options overflow.
Geliang Tang <geliang.tang@...e.com>
mptcp: drop port parameter of mptcp_pm_add_addr_signal
Dennis Lam <dennis.lamerice@...il.com>
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
Joseph Qi <joseph.qi@...ux.alibaba.com>
ocfs2: correct return value of ocfs2_local_free_info()
Justin Chen <justin.chen@...adcom.com>
phy: usb: Toggle the PHY power during init
Al Cooper <alcooperx@...il.com>
phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers
Andrea della Porta <andrea.porta@...e.com>
of: address: Preserve the flags portion on 1:1 dma-ranges mapping
Rob Herring <robh@...nel.org>
of: address: Store number of bus flag cells rather than bool
Herve Codina <herve.codina@...tlin.com>
of: address: Remove duplicated functions
Herve Codina <herve.codina@...tlin.com>
of: address: Fix address translation when address-size is greater than 2
Rob Herring <robh@...nel.org>
of/address: Add support for 3 address cell bus
Rob Herring <robh@...nel.org>
of: unittest: Add bus address range parsing tests
Peter Geis <pgwipeout@...il.com>
arm64: dts: rockchip: add hevc power domain clock to rk3328
Yu Kuai <yukuai3@...wei.com>
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
Uwe Kleine-König <u.kleine-koenig@...libre.com>
iio: adc: ad7124: Disable all channels at probe time
Joe Hattori <joe@...is.s.u-tokyo.ac.jp>
iio: inkern: call iio_device_put() only on mapped devices
Joe Hattori <joe@...is.s.u-tokyo.ac.jp>
iio: adc: at91: call input_free_device() on allocated iio_dev
Fabio Estevam <festevam@...il.com>
iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
Carlos Song <carlos.song@....com>
iio: gyro: fxas21002c: Fix missing data update in trigger handler
Javier Carrasco <javier.carrasco.cruz@...il.com>
iio: adc: ti-ads8688: fix information leak in triggered buffer
Javier Carrasco <javier.carrasco.cruz@...il.com>
iio: imu: kmx61: fix information leak in triggered buffer
Javier Carrasco <javier.carrasco.cruz@...il.com>
iio: light: vcnl4035: fix information leak in triggered buffer
Javier Carrasco <javier.carrasco.cruz@...il.com>
iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
Javier Carrasco <javier.carrasco.cruz@...il.com>
iio: pressure: zpa2326: fix information leak in triggered buffer
Akash M <akash.m5@...sung.com>
usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
Prashanth K <quic_prashk@...cinc.com>
usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
Ma Ke <make_ruc2021@....com>
usb: fix reference leak in usb_new_device()
Kai-Heng Feng <kaihengf@...dia.com>
USB: core: Disable LPM only for non-suspended ports
Jun Yan <jerrysteve1101@...il.com>
USB: usblp: return error when setting unsupported protocol
Lianqin Hu <hulianqin@...o.com>
usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null
Li Huafei <lihuafei1@...wei.com>
topology: Keep the cpumask unchanged when printing cpumap
André Draszik <andre.draszik@...aro.org>
usb: dwc3: gadget: fix writing NYET threshold
Johan Hovold <johan@...nel.org>
USB: serial: cp210x: add Phoenix Contact UPS Device
Lubomir Rintel <lrintel@...hat.com>
usb-storage: Add max sectors quirk for Nokia 208
Zicheng Qu <quzicheng@...wei.com>
staging: iio: ad9832: Correct phase range check
Zicheng Qu <quzicheng@...wei.com>
staging: iio: ad9834: Correct phase range check
Michal Hrusecky <michal.hrusecky@...ris.com>
USB: serial: option: add Neoway N723-EA support
Chukun Pan <amadeus@....edu.cn>
USB: serial: option: add MeiG Smart SRM815
Gui-Dong Han <2045gemini@...il.com>
md/raid5: fix atomicity violation in raid5_cache_count
Kuan-Wei Chiu <visitorckw@...il.com>
scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
Kairui Song <kasong@...cent.com>
zram: fix uninitialized ZRAM not releasing backing device
Dominique Martinet <dominique.martinet@...ark-techno.com>
zram: check comp is non-NULL before calling comp_destroy
Sergey Senozhatsky <senozhatsky@...omium.org>
drivers/block/zram/zram_drv.c: do not keep dangling zcomp pointer after zram reset
Melissa Wen <mwen@...lia.com>
drm/amd/display: increase MAX_SURFACES to the value supported by hw
Hans de Goede <hdegoede@...hat.com>
ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
Hans de Goede <hdegoede@...hat.com>
ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
Nam Cao <namcao@...utronix.de>
riscv: Fix sleeping in invalid context in die()
Roman Li <Roman.Li@....com>
drm/amd/display: Add check for granularity in dml ceil/floor helpers
Matthieu Baerts (NGI0) <matttbe@...nel.org>
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
Matthieu Baerts (NGI0) <matttbe@...nel.org>
sctp: sysctl: udp_port: avoid using current->nsproxy
Matthieu Baerts (NGI0) <matttbe@...nel.org>
sctp: sysctl: auth_enable: avoid using current->nsproxy
Matthieu Baerts (NGI0) <matttbe@...nel.org>
sctp: sysctl: rto_min/max: avoid using current->nsproxy
Matthieu Baerts (NGI0) <matttbe@...nel.org>
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
Mikulas Patocka <mpatocka@...hat.com>
dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
Krister Johansen <kjlx@...pleofstupid.com>
dm thin: make get_first_thin use rcu-safe list first function
David Howells <dhowells@...hat.com>
afs: Fix the maximum cell name length
Wentao Liang <liangwentao@...as.ac.cn>
ksmbd: fix a missing return value check bug
Jason-JH.Lin <jason-jh.lin@...iatek.com>
drm/mediatek: Add support for 180-degree rotation in the display driver
Pablo Neira Ayuso <pablo@...filter.org>
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Pablo Neira Ayuso <pablo@...filter.org>
netfilter: nf_tables: imbalance in flowtable binding
Benjamin Coddington <bcodding@...hat.com>
tls: Fix tls_sw_sendmsg error handling
Anumula Murali Mohan Reddy <anumula@...lsio.com>
cxgb4: Avoid removal of uninserted tid
Kalesh AP <kalesh-anakkur.purayil@...adcom.com>
bnxt_en: Fix possible memory leak when hwrm_req_replace fails
Eric Dumazet <edumazet@...gle.com>
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
Zhongqiu Duan <dzq.aishenghu0@...il.com>
tcp/dccp: allow a connection when sk_max_ack_backlog is zero
Jason Xing <kernelxing@...cent.com>
tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
Antonio Pastor <antonio.pastor@...il.com>
net: 802: LLC+SNAP OID:PID lookup on start of skb data
Keisuke Nishimura <keisuke.nishimura@...ia.fr>
ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
Chen-Yu Tsai <wenst@...omium.org>
ASoC: mediatek: disable buffer pre-allocation
Yuezhang Mo <Yuezhang.Mo@...y.com>
exfat: fix the infinite loop in __exfat_free_cluster()
Yuezhang Mo <Yuezhang.Mo@...y.com>
exfat: fix the infinite loop in exfat_readdir()
Ming-Hung Tsai <mtsai@...hat.com>
dm array: fix cursor index when skipping across block boundaries
Ming-Hung Tsai <mtsai@...hat.com>
dm array: fix unreleased btree blocks on closing a faulty array cursor
Ming-Hung Tsai <mtsai@...hat.com>
dm array: fix releasing a faulty array block twice in dm_array_cursor_end
Zhang Yi <yi.zhang@...wei.com>
jbd2: flush filesystem device before updating tail sequence
Max Kellermann <max.kellermann@...os.com>
ceph: give up on paths longer than PATH_MAX
-------------
Diffstat:
Makefile | 4 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 1 +
arch/riscv/kernel/traps.c | 6 +-
arch/x86/include/asm/special_insns.h | 2 +-
arch/x86/xen/xen-asm.S | 2 +-
block/bfq-iosched.c | 12 ++-
drivers/acpi/resource.c | 24 ++++-
drivers/base/regmap/regmap.c | 12 ---
drivers/base/topology.c | 24 ++++-
drivers/block/zram/zram_drv.c | 24 ++---
drivers/gpio/gpiolib-cdev.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 45 +--------
drivers/gpu/drm/amd/display/dc/dc.h | 2 +-
.../gpu/drm/amd/display/dc/dml/dml_inline_defs.h | 8 ++
drivers/gpu/drm/i915/display/intel_fb.c | 2 +-
drivers/gpu/drm/mediatek/mtk_disp_ovl.c | 12 ++-
drivers/gpu/drm/v3d/v3d_irq.c | 4 +
drivers/hwmon/tmp513.c | 7 +-
drivers/i2c/busses/i2c-rcar.c | 20 +++-
drivers/i2c/muxes/i2c-demux-pinctrl.c | 4 +-
drivers/iio/adc/ad7124.c | 3 +
drivers/iio/adc/at91_adc.c | 2 +-
drivers/iio/adc/rockchip_saradc.c | 2 +
drivers/iio/adc/ti-ads124s08.c | 4 +-
drivers/iio/adc/ti-ads8688.c | 2 +-
drivers/iio/dummy/iio_simple_dummy_buffer.c | 2 +-
drivers/iio/gyro/fxas21002c_core.c | 11 ++-
drivers/iio/imu/inv_icm42600/inv_icm42600.h | 1 +
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 18 +++-
drivers/iio/imu/inv_icm42600/inv_icm42600_spi.c | 3 +-
drivers/iio/imu/kmx61.c | 2 +-
drivers/iio/inkern.c | 2 +-
drivers/iio/light/vcnl4035.c | 2 +-
drivers/iio/pressure/zpa2326.c | 2 +
drivers/irqchip/irq-gic-v3.c | 2 +-
drivers/md/dm-ebs-target.c | 2 +-
drivers/md/dm-thin.c | 5 +-
drivers/md/persistent-data/dm-array.c | 19 ++--
drivers/md/raid5.c | 14 +--
drivers/mtd/spi-nor/core.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 19 +---
drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 3 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 5 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 95 ++++++++++++++----
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 3 +-
drivers/net/ethernet/ti/cpsw_ale.c | 14 +--
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 6 ++
drivers/net/gtp.c | 42 ++++----
drivers/net/ieee802154/ca8210.c | 6 +-
drivers/nvme/target/io-cmd-bdev.c | 2 +-
drivers/of/address.c | 76 ++++++++++----
drivers/of/unittest-data/tests-address.dtsi | 9 +-
drivers/of/unittest.c | 109 +++++++++++++++++++++
drivers/pci/controller/pci-host-common.c | 4 +
drivers/pci/probe.c | 20 ++--
drivers/phy/broadcom/phy-brcm-usb-init-synopsys.c | 53 ++++++++--
drivers/phy/broadcom/phy-brcm-usb-init.h | 1 -
drivers/phy/broadcom/phy-brcm-usb.c | 8 +-
drivers/scsi/sg.c | 2 +-
drivers/staging/iio/frequency/ad9832.c | 2 +-
drivers/staging/iio/frequency/ad9834.c | 2 +-
drivers/usb/class/usblp.c | 7 +-
drivers/usb/core/hub.c | 6 +-
drivers/usb/core/port.c | 7 +-
drivers/usb/dwc3/core.h | 1 +
drivers/usb/dwc3/gadget.c | 4 +-
drivers/usb/gadget/function/f_fs.c | 2 +-
drivers/usb/gadget/function/f_uac2.c | 1 +
drivers/usb/gadget/function/u_serial.c | 8 +-
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/option.c | 4 +-
drivers/usb/storage/unusual_devs.h | 7 ++
fs/afs/afs.h | 2 +-
fs/afs/afs_vl.h | 1 +
fs/afs/vl_alias.c | 8 +-
fs/afs/vlclient.c | 2 +-
fs/ceph/mds_client.c | 9 +-
fs/exfat/dir.c | 3 +-
fs/exfat/fatent.c | 10 ++
fs/file.c | 1 +
fs/hfs/super.c | 4 +-
fs/jbd2/commit.c | 4 +-
fs/ksmbd/smb2pdu.c | 3 +
fs/nfsd/filecache.c | 18 ++--
fs/nfsd/filecache.h | 1 +
fs/ocfs2/quota_global.c | 2 +-
fs/ocfs2/quota_local.c | 10 +-
fs/proc/vmcore.c | 2 +
include/linux/blk-cgroup.h | 6 +-
include/linux/hrtimer.h | 1 +
include/linux/mlx5/device.h | 2 +
include/linux/mlx5/fs.h | 2 +
include/linux/poll.h | 10 +-
include/net/inet_connection_sock.h | 2 +-
include/net/net_namespace.h | 3 +
kernel/cpu.c | 2 +-
kernel/gen_kheaders.sh | 1 +
kernel/time/hrtimer.c | 11 ++-
mm/filemap.c | 2 +-
net/802/psnap.c | 4 +-
net/core/filter.c | 30 +++---
net/core/net_namespace.c | 31 +++++-
net/core/pktgen.c | 6 +-
net/dccp/ipv6.c | 2 +-
net/ipv6/route.c | 2 +-
net/ipv6/tcp_ipv6.c | 4 +-
net/mac802154/iface.c | 4 +
net/mptcp/options.c | 12 ++-
net/mptcp/pm.c | 7 +-
net/mptcp/protocol.h | 2 +-
net/netfilter/nf_conntrack_core.c | 5 +-
net/netfilter/nf_tables_api.c | 15 ++-
net/sched/cls_flow.c | 3 +-
net/sctp/sysctl.c | 14 +--
net/tls/tls_sw.c | 2 +-
net/vmw_vsock/af_vsock.c | 18 ++++
net/vmw_vsock/virtio_transport_common.c | 38 ++++---
scripts/sorttable.h | 6 +-
.../soc/mediatek/common/mtk-afe-platform-driver.c | 4 +-
119 files changed, 830 insertions(+), 347 deletions(-)
Powered by blists - more mailing lists