[PATCH 3.18 00/69] 3.18.89-stable review

From: Greg Kroah-Hartman
Date: Mon Dec 18 2017 - 10:49:07 EST


This is the start of the stable review cycle for the 3.18.89 release.
There are 69 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Dec 20 15:26:44 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.89-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 3.18.89-rc1

Bin Liu <b-liu@xxxxxx>
usb: musb: da8xx: fix babble condition handling

Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx>
ath9k: fix tx99 potential info leak

Alexander Duyck <alexander.h.duyck@xxxxxxxxx>
macvlan: Only deliver one copy of the frame to the macvlan interface

Jan Kara <jack@xxxxxxx>
udf: Avoid overflow when session starts at large offset

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
scsi: bfa: integer overflow in debugfs

Kurt Garloff <garloff@xxxxxxx>
scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry

NeilBrown <neilb@xxxxxxxx>
raid5: Set R5_Expanded on parity devices as well as data.

Linus Walleij <linus.walleij@xxxxxxxxxx>
pinctrl: adi2: Fix Kconfig build problem

nixiaoming <nixiaoming@xxxxxxxxxx>
tty fix oops when rmmod 8250

Alex Williamson <alex.williamson@xxxxxxxxxx>
PCI: Detach driver before procfs & sysfs teardown on device remove

Brian Foster <bfoster@xxxxxxxxxx>
xfs: fix log block underflow during recovery cycle verification

tang.junhui <tang.junhui@xxxxxxxxxx>
bcache: fix wrong cache_misses statistics

Liang Chen <liangchen.linux@xxxxxxxxx>
bcache: explicitly destroy mutex while exiting

Bob Peterson <rpeterso@xxxxxxxxxx>
GFS2: Take inode off order_write list when setting jdata flag

Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
thermal/drivers/step_wise: Fix temperature regulation misbehavior

Gao Feng <gfree.wind@xxxxxxxxxxx>
ppp: Destroy the mutex when cleanup

MichaÅ MirosÅaw <mirq-linux@xxxxxxxxxxxx>
clk: tegra: Fix cclk_lp divisor register

Jan Kara <jack@xxxxxxx>
mm: Handle 0 flags in _calc_vm_trans() macro

Suzuki K Poulose <suzuki.poulose@xxxxxxx>
arm-ccn: perf: Prevent module unload while PMU is in use

Jiang Yi <jiangyilism@xxxxxxxxx>
target/file: Do not return error for UNMAP if length is zero

tangwenji <tang.wenji@xxxxxxxxxx>
target:fix condition return in core_pr_dump_initiator_port()

tangwenji <tang.wenji@xxxxxxxxxx>
iscsi-target: fix memory leak in lio_target_tiqn_addtpg()

Bart Van Assche <bart.vanassche@xxxxxxx>
target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()

Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
platform/x86: sony-laptop: Fix error handling in sony_nc_setup_rfkill()

Christophe Leroy <christophe.leroy@xxxxxx>
powerpc/ipic: Fix status get and status clear

William A. Kennington III <wak@xxxxxxxxxx>
powerpc/opal: Fix EBUSY bug in acquiring tokens

Shriya <shriyak@xxxxxxxxxxxxxxxxxx>
powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo

Qiang <zhengqiang10@xxxxxxxxxx>
PCI/PME: Handle invalid data when reading Root Status

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
video: fbdev: au1200fb: Return an error code if a memory allocation fails

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
video: fbdev: au1200fb: Release some resources if a memory allocation fails

Ladislav Michl <ladis@xxxxxxxxxxxxxx>
video: udlfb: Fix read EDID timeout

Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
fbdev: controlfb: Add missing modes to fix out of bounds access

Mike Christie <mchristi@xxxxxxxxxx>
target: Use system workqueue for ALUA transitions

Zygo Blaxell <ce3g8jdj@xxxxxxxxxxxxxxxxxxxxx>
btrfs: add missing memset while reading compressed inline extents

Olga Kornievskaia <kolga@xxxxxxxxxx>
NFSv4.1 respect server's max size in CREATE_SESSION

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
perf symbols: Fix symbols__fixup_end heuristic for corner cases

David Howells <dhowells@xxxxxxxxxx>
afs: Fix afs_kill_pages()

David Howells <dhowells@xxxxxxxxxx>
afs: Fix page leak in afs_write_begin()

Marc Dionne <marc.dionne@xxxxxxxxxxxx>
afs: Populate and use client modification time

David Howells <dhowells@xxxxxxxxxx>
afs: Fix the maths in afs_fs_store_data()

David Howells <dhowells@xxxxxxxxxx>
afs: Flush outstanding writes when an fd is closed

Marc Dionne <marc.dionne@xxxxxxxxxxxx>
afs: Adjust mode bits processing

Marc Dionne <marc.dionne@xxxxxxxxxxxx>
afs: Populate group ID from vnode status

David Howells <dhowells@xxxxxxxxxx>
afs: Fix missing put_page()

Alex Deucher <alexander.deucher@xxxxxxx>
drm/radeon: reinstate oland workaround for sclk

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
sched/deadline: Use deadline instead of period when calculating overflow

Alex Deucher <alexander.deucher@xxxxxxx>
drm/radeon/si: add dpm quirk for Oland

Stafford Horne <shorne@xxxxxxxxx>
openrisc: fix issue handling 8 byte get_user calls

Vlad Yasevich <vyasevich@xxxxxxxxx>
net: Resend IGMP memberships upon peer notification.

Matthias Kaehlcke <mka@xxxxxxxxxxxx>
dmaengine: Fix array index out of bounds warning in __get_unmap_pool()

Johan Hovold <johan@xxxxxxxxxx>
net: wimax/i2400m: fix NULL-deref at probe

Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list

NeilBrown <neilb@xxxxxxxx>
NFSD: fix nfsd_reset_versions for NFSv4.

NeilBrown <neilb@xxxxxxxx>
NFSD: fix nfsd_minorversion(.., NFSD_AVAIL)

Doug Berger <opendmb@xxxxxxxxx>
net: bcmgenet: Power up the internal PHY before probing the MII

Doug Berger <opendmb@xxxxxxxxx>
net: bcmgenet: correct MIB access of UniMAC RUNT counters

Doug Berger <opendmb@xxxxxxxxx>
net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values

Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
usb: phy: isp1301: Add OF device ID table

Ilan peer <ilan.peer@xxxxxxxxx>
mac80211: Fix addition of mesh configuration element

David Howells <dhowells@xxxxxxxxxx>
KEYS: Don't permit request_key() to construct a new keyring

David Jeffery <djeffery@xxxxxxxxxx>
Don't leak a key reference if request_key() tries to use a revoked keyring

Chandan Rajendra <chandan@xxxxxxxxxxxxxxxxxx>
ext4: fix crash when a directory's i_size is too small

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: Don't add a virt_dev to the devs array before it's fully allocated

Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: core: prevent malicious bNumInterfaces overflow

David Kozub <zub@xxxxxxxxxxxxxxxxxx>
USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID

NeilBrown <neilb@xxxxxxxx>
autofs: fix careless error in recent commit

Eric Biggers <ebiggers@xxxxxxxxxx>
crypto: salsa20 - fix blkcipher_walk API usage

Eric Biggers <ebiggers@xxxxxxxxxx>
crypto: hmac - require that the underlying hash algorithm is unkeyed


-------------

Diffstat:

Makefile | 4 +-
arch/blackfin/Kconfig | 7 ++-
arch/blackfin/Kconfig.debug | 1 +
arch/openrisc/include/asm/uaccess.h | 2 +-
arch/powerpc/platforms/powernv/opal-async.c | 6 +-
arch/powerpc/platforms/powernv/setup.c | 2 +-
arch/powerpc/sysdev/ipic.c | 4 +-
arch/x86/crypto/salsa20_glue.c | 7 ---
crypto/hmac.c | 6 +-
crypto/salsa20_generic.c | 7 ---
crypto/shash.c | 5 +-
drivers/bus/arm-ccn.c | 1 +
drivers/clk/tegra/clk-tegra30.c | 2 +-
drivers/dma/dmaengine.c | 2 +
drivers/gpu/drm/radeon/si_dpm.c | 10 ++++
drivers/input/serio/i8042-x86ia64io.h | 7 +++
drivers/md/bcache/request.c | 6 +-
drivers/md/bcache/super.c | 6 +-
drivers/md/raid5.c | 5 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 79 ++++++++++++++++++++++----
drivers/net/ethernet/broadcom/genet/bcmgenet.h | 10 +++-
drivers/net/macvlan.c | 2 +-
drivers/net/ppp/ppp_generic.c | 1 +
drivers/net/wimax/i2400m/usb.c | 3 +
drivers/net/wireless/ath/ath9k/tx99.c | 5 ++
drivers/pci/pcie/pme.c | 5 +-
drivers/pci/remove.c | 2 +-
drivers/pinctrl/Kconfig | 3 +-
drivers/platform/x86/sony-laptop.c | 14 +++--
drivers/scsi/bfa/bfad_debugfs.c | 5 +-
drivers/scsi/scsi_devinfo.c | 2 +-
drivers/target/iscsi/iscsi_target.c | 3 +-
drivers/target/iscsi/iscsi_target_configfs.c | 3 +-
drivers/target/target_core_alua.c | 8 +--
drivers/target/target_core_file.c | 4 ++
drivers/target/target_core_pr.c | 4 +-
drivers/thermal/step_wise.c | 11 ++--
drivers/usb/core/config.c | 4 +-
drivers/usb/host/xhci-mem.c | 15 +++--
drivers/usb/musb/da8xx.c | 10 +++-
drivers/usb/phy/phy-isp1301.c | 7 +++
drivers/usb/storage/unusual_devs.h | 7 +++
drivers/usb/storage/unusual_uas.h | 7 +++
drivers/usb/usbip/stub_tx.c | 7 +++
drivers/video/fbdev/au1200fb.c | 7 ++-
drivers/video/fbdev/controlfb.h | 2 +
drivers/video/fbdev/udlfb.c | 10 ++--
fs/afs/file.c | 1 +
fs/afs/fsclient.c | 20 +++----
fs/afs/inode.c | 4 +-
fs/afs/internal.h | 1 +
fs/afs/security.c | 7 ++-
fs/afs/write.c | 32 +++++++++--
fs/autofs4/waitq.c | 1 -
fs/btrfs/inode.c | 14 +++++
fs/ext4/namei.c | 4 ++
fs/gfs2/file.c | 4 +-
fs/nfs/nfs4client.c | 4 +-
fs/nfsd/nfssvc.c | 30 +++++-----
fs/proc/proc_tty.c | 3 +-
fs/udf/super.c | 2 +-
fs/xfs/xfs_log_recover.c | 2 +-
include/crypto/internal/hash.h | 8 +++
include/linux/mman.h | 3 +-
kernel/sched/deadline.c | 8 +--
net/core/dev.c | 1 +
net/mac80211/mesh.c | 2 -
security/keys/request_key.c | 4 ++
tools/perf/util/symbol.c | 2 +-
69 files changed, 352 insertions(+), 135 deletions(-)