[PATCH 4.9 00/65] 4.9.87-stable review

From: Greg Kroah-Hartman
Date: Fri Mar 09 2018 - 19:21:49 EST


This is the start of the stable review cycle for the 4.9.87 release.
There are 65 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Mon Mar 12 00:18:06 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.87-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.9.87-rc1

Ernesto A. FernÃndez <ernesto.mnd.fernandez@xxxxxxxxx>
btrfs: preserve i_mode if __btrfs_set_acl() fails

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf, ppc64: fix out of bounds access in tail call

Eric Dumazet <edumazet@xxxxxxxxxx>
bpf: add schedule points in percpu arrays management

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf, arm64: fix out of bounds access in tail call

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf, x64: implement retpoline for tail call

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: fix mlock precharge on arraymaps

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: fix wrong exposure of map_flags into fdinfo for lpm

Dan Williams <dan.j.williams@xxxxxxxxx>
mpls, nospec: Sanitize array index in mpls_label_ok()

David Ahern <dsahern@xxxxxxxxx>
net: mpls: Pull common label check into helper

Alexey Kodanev <alexey.kodanev@xxxxxxxxxx>
sctp: verify size of a new chunk in _sctp_make_chunk()

Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx>
s390/qeth: fix IPA command submission race

Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx>
s390/qeth: fix IP address lookup for L3 devices

Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx>
s390/qeth: fix double-free on IP add/remove race

Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx>
s390/qeth: fix IP removal on offline cards

Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx>
s390/qeth: fix overestimated count of buffer elements

Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx>
s390/qeth: fix SETIP command handling

Ursula Braun <ubraun@xxxxxxxxxxxxxxxxxx>
s390/qeth: fix underestimated count of buffer elements

Alexey Kodanev <alexey.kodanev@xxxxxxxxxx>
sctp: fix dst refcnt leak in sctp_v6_get_dst()

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp_bbr: better deal with suboptimal GSO

David Howells <dhowells@xxxxxxxxxx>
rxrpc: Fix send in rxrpc_send_data_packet()

Ilya Lesokhin <ilyal@xxxxxxxxxxxx>
tcp: Honor the eor bit in tcp_mtu_probe

Heiner Kallweit <hkallweit1@xxxxxxxxx>
net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT

Shalom Toledo <shalomt@xxxxxxxxxxxx>
mlxsw: spectrum_switchdev: Check success of FDB add operation

Tommi Rantala <tommi.t.rantala@xxxxxxxxx>
sctp: fix dst refcnt leak in sctp_v4_get_dst

Alexey Kodanev <alexey.kodanev@xxxxxxxxxx>
udplite: fix partial checksum initialization

Guillaume Nault <g.nault@xxxxxxxxxxxx>
ppp: prevent unregistered channels from connecting to PPP units

Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
netlink: ensure to loop over all netns in genlmsg_multicast_allns()

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net: fix race on decreasing number of TX queues

Arnd Bergmann <arnd@xxxxxxxx>
ipv6 sit: work around bogus gcc-8 -Wrestrict warning

Denis Du <dudenis2000@xxxxxxxx>
hdlc_ppp: carrier detect ok, don't turn off negotiation

Stefano Brivio <sbrivio@xxxxxxxxxx>
fib_semantics: Don't match route with mismatching tclassid

Xin Long <lucien.xin@xxxxxxxxx>
bridge: check brport attr show in brport_show

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
x86/apic/vector: Handle legacy irq data correctly

Jason A. Donenfeld <Jason@xxxxxxxxx>
netlink: put module reference if dump start fails

NeilBrown <neilb@xxxxxxxx>
md: only allow remove_and_add_spares when no sync_thread running.

Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
x86/speculation: Use Indirect Branch Prediction Barrier in context switch

Andy Lutomirski <luto@xxxxxxxxxx>
x86/mm: Give each mm TLB flush generation a unique ID

Adam Ford <aford173@xxxxxxxxx>
ARM: dts: LogicPD Torpedo: Fix I2C1 pinmux

Adam Ford <aford173@xxxxxxxxx>
ARM: dts: LogicPD SOM-LV: Fix I2C1 pinmux

Mike Snitzer <snitzer@xxxxxxxxxx>
dm io: fix duplicate bio completion due to missing ref count

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
PCI/ASPM: Deal with missing root ports in link state handling

Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the RDMSR path as unlikely()

Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM/x86: Remove indirect MSR op calls from SPEC_CTRL

Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
KVM: mmu: Fix overlap between public and private memslots

Arnd Bergmann <arnd@xxxxxxxx>
ARM: kvm: fix building with gcc-8

Ulf Magnusson <ulfalizer@xxxxxxxxx>
ARM: mvebu: Fix broken PL310_ERRATA_753970 selects

Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
nospec: Allow index argument to have const-qualified type

Mauro Carvalho Chehab <mchehab@xxxxxxxxxx>
media: m88ds3103: don't call a non-initalized function

Sebastian Panceac <sebastian@xxxxxxxx>
x86/platform/intel-mid: Handle Intel Edison reboot correctly

Juergen Gross <jgross@xxxxxxxx>
x86/xen: Zero MSR_IA32_SPEC_CTRL before suspend

Dan Williams <dan.j.williams@xxxxxxxxx>
dax: fix vma_is_fsdax() helper

Viresh Kumar <viresh.kumar@xxxxxxxxxx>
cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()

John David Anglin <dave.anglin@xxxxxxxx>
parisc: Fix ordering of cache and TLB flushes

Lingutla Chandrasekhar <clingutla@xxxxxxxxxxxxxx>
timers: Forward timer base before migrating timers

Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda - Fix pincfg at resume on Lenovo T470 dock

Hans de Goede <hdegoede@xxxxxxxxxx>
ALSA: hda: Add a power_save blacklist

Erik Veijola <erik.veijola@xxxxxxxxx>
ALSA: usb-audio: Add a quirck for B&W PX headphones

Alexander Steffen <Alexander.Steffen@xxxxxxxxxxxx>
tpm-dev-common: Reject too short writes

Alexander Steffen <Alexander.Steffen@xxxxxxxxxxxx>
tpm_tis_spi: Use DMA-safe memory for SPI transfers

Arnd Bergmann <arnd@xxxxxxxx>
tpm: constify transmit data pointers

Jeremy Boone <jeremy.boone@xxxxxxxxxxxxxx>
tpm_tis: fix potential buffer overruns caused by bit glitches on the bus

Jeremy Boone <jeremy.boone@xxxxxxxxxxxxxx>
tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus

Jeremy Boone <jeremy.boone@xxxxxxxxxxxxxx>
tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus

Jeremy Boone <jeremy.boone@xxxxxxxxxxxxxx>
tpm: st33zp24: fix potential buffer overruns caused by bit glitches on the bus


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/logicpd-som-lv.dtsi | 9 +-
arch/arm/boot/dts/logicpd-torpedo-som.dtsi | 8 ++
arch/arm/kvm/hyp/Makefile | 5 +
arch/arm/kvm/hyp/banked-sr.c | 4 +
arch/arm/mach-mvebu/Kconfig | 4 +-
arch/arm64/net/bpf_jit_comp.c | 5 +-
arch/parisc/include/asm/cacheflush.h | 1 +
arch/parisc/kernel/cache.c | 57 +++++-----
arch/parisc/kernel/pacache.S | 22 ++++
arch/powerpc/net/bpf_jit_comp64.c | 1 +
arch/x86/include/asm/mmu.h | 15 ++-
arch/x86/include/asm/mmu_context.h | 5 +
arch/x86/include/asm/nospec-branch.h | 37 +++++++
arch/x86/include/asm/tlbflush.h | 2 +
arch/x86/kernel/apic/vector.c | 14 +--
arch/x86/kvm/svm.c | 9 +-
arch/x86/kvm/vmx.c | 9 +-
arch/x86/mm/tlb.c | 33 ++++++
arch/x86/net/bpf_jit_comp.c | 9 +-
arch/x86/platform/intel-mid/intel-mid.c | 2 +-
arch/x86/xen/suspend.c | 16 +++
drivers/char/tpm/st33zp24/st33zp24.c | 4 +-
drivers/char/tpm/tpm-dev.c | 6 ++
drivers/char/tpm/tpm_i2c_infineon.c | 5 +-
drivers/char/tpm/tpm_i2c_nuvoton.c | 8 +-
drivers/char/tpm/tpm_tis.c | 2 +-
drivers/char/tpm/tpm_tis_core.c | 9 +-
drivers/char/tpm/tpm_tis_core.h | 4 +-
drivers/char/tpm/tpm_tis_spi.c | 48 +++++----
drivers/cpufreq/s3c24xx-cpufreq.c | 8 +-
drivers/md/dm-io.c | 1 +
drivers/md/md.c | 4 +
drivers/media/dvb-frontends/m88ds3103.c | 7 +-
.../ethernet/mellanox/mlxsw/spectrum_switchdev.c | 29 ++++-
drivers/net/phy/phy.c | 2 +-
drivers/net/ppp/ppp_generic.c | 9 ++
drivers/net/wan/hdlc_ppp.c | 5 +-
drivers/pci/pcie/aspm.c | 8 +-
drivers/s390/net/qeth_core.h | 7 +-
drivers/s390/net/qeth_core_main.c | 43 ++++----
drivers/s390/net/qeth_l3.h | 34 +++++-
drivers/s390/net/qeth_l3_main.c | 119 +++++++++------------
fs/btrfs/acl.c | 6 +-
include/linux/fs.h | 2 +-
include/linux/nospec.h | 3 +-
include/net/udplite.h | 1 +
kernel/bpf/arraymap.c | 35 +++---
kernel/bpf/stackmap.c | 1 +
kernel/time/timer.c | 6 ++
net/bridge/br_sysfs_if.c | 3 +
net/core/dev.c | 11 +-
net/ipv4/fib_semantics.c | 5 +
net/ipv4/route.c | 8 +-
net/ipv4/tcp_output.c | 33 +++++-
net/ipv4/udp.c | 5 +
net/ipv6/ip6_checksum.c | 5 +
net/ipv6/sit.c | 2 +-
net/mpls/af_mpls.c | 36 ++++---
net/netlink/af_netlink.c | 4 +-
net/netlink/genetlink.c | 12 ++-
net/rxrpc/output.c | 2 +-
net/sctp/ipv6.c | 10 +-
net/sctp/protocol.c | 10 +-
net/sctp/sm_make_chunk.c | 7 +-
sound/pci/hda/hda_intel.c | 38 ++++++-
sound/pci/hda/patch_realtek.c | 3 +-
sound/usb/quirks-table.h | 47 ++++++++
virt/kvm/kvm_main.c | 3 +-
69 files changed, 687 insertions(+), 244 deletions(-)