[PATCH 5.4 00/63] 5.4.190-rc1 review

From: Greg Kroah-Hartman
Date: Mon Apr 18 2022 - 09:22:21 EST

This is the start of the stable review cycle for the 5.4.190 release.
There are 63 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 20 Apr 2022 12:11:14 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.190-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 5.4.190-rc1

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: Fix UAF bugs in ax25 timers

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: Fix NULL pointer dereferences in ax25 timers

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: fix NPD bug in ax25_disconnect

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: fix UAF bug in ax25_send_control()

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: Fix refcount leaks caused by ax25_cb_del()

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: fix UAF bugs of net_device caused by rebinding operation

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: fix reference count leaks of ax25_dev

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: add refcount in ax25_dev to avoid UAF bugs

Chao Gao <chao.gao@xxxxxxxxx>
dma-direct: avoid redundant memory sync for swiotlb

Martin Povišer <povik+lin@xxxxxxxxxxx>
i2c: pasemi: Wait for write xfers to finish

Nadav Amit <namit@xxxxxxxxxx>
smp: Fix offline cpu check in flush_smp_call_function_queue()

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm integrity: fix memory corruption when tag_size is less than digest size

Nathan Chancellor <nathan@xxxxxxxxxx>
ARM: davinci: da850-evm: Avoid NULL pointer dereference

Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
tick/nohz: Use WARN_ON_ONCE() to prevent console saturation

Rei Yamamoto <yamamoto.rei@xxxxxxxxxxxxxx>
genirq/affinity: Consider that CPUs on nodes can be unbalanced

Melissa Wen <mwen@xxxxxxxxxx>
drm/amd/display: don't ignore alpha property on pre-multiplied mode

Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
ipv6: fix panic when forwarding a pkt with no in6 dev

Fabio M. De Francesco <fmdefrancesco@xxxxxxxxx>
ALSA: pcm: Test for "silence" field in struct "pcm_format_data"

Tim Crawford <tcrawford@xxxxxxxxxxxx>
ALSA: hda/realtek: Add quirk for Clevo PD50PNT

Naohiro Aota <naohiro.aota@xxxxxxx>
btrfs: mark resumed async balance as writing

Nathan Chancellor <nathan@xxxxxxxxxx>
btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()

Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
ath9k: Fix usage of driver-private space in tx_info

Toke Høiland-Jørgensen <toke@xxxxxxx>
ath9k: Properly clear TX status area before reporting to mac80211

Jason A. Donenfeld <Jason@xxxxxxxxx>
gcc-plugins: latent_entropy: use /dev/urandom

Oliver Upton <oupton@xxxxxxxxxx>
KVM: Don't create VM debugfs files outside of the VM directory

Patrick Wang <patrick.wang.shcn@xxxxxxxxx>
mm: kmemleak: take a full lowmem check in kmemleak_*_phys()

Juergen Gross <jgross@xxxxxxxx>
mm, page_alloc: fix build_zonerefs_node()

Borislav Petkov <bp@xxxxxxx>
perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant

Duoming Zhou <duoming@xxxxxxxxxx>
drivers: net: slip: fix NPD bug in sl_tx_timeout()

Chandrakanth patil <chandrakanth.patil@xxxxxxxxxxxx>
scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan

Alexey Galakhov <agalakhov@xxxxxxxxx>
scsi: mvsas: Add PCI ID of RocketRaid 2640

Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit

Roman Li <Roman.Li@xxxxxxx>
drm/amd/display: Fix allocate_mst_payload assert on resume

Marcin Kozlowski <marcinguy@xxxxxxxxx>
net: usb: aqc111: Fix out-of-bounds accesses in RX fixup

Steve Capper <steve.capper@xxxxxxx>
tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry

Joey Gouly <joey.gouly@xxxxxxx>
arm64: alternatives: mark patch_alternative() as `noinstr`

Jonathan Bakker <xc-racer2@xxxxxxx>
regulator: wm8994: Add an off-on delay for WM8994 variant

Leo Ruan <tingquan.ruan@xxxxxxxxxxxx>
gpu: ipu-v3: Fix dev_dbg frequency output

Christian Lamparter <chunkeey@xxxxxxxxx>
ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
net: micrel: fix KS8851_MLL Kconfig

Tyrel Datwyler <tyreld@xxxxxxxxxxxxx>
scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024

Xiaoguang Wang <xiaoguang.wang@xxxxxxxxxxxxxxxxx>
scsi: target: tcmu: Fix possible page UAF

Michael Kelley <mikelley@xxxxxxxxxxxxx>
Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer

QintaoShen <unSimple1993@xxxxxxx>
drm/amdkfd: Check for potential null return of kmalloc_array()

Tushar Patel <tushar.patel@xxxxxxx>
drm/amdkfd: Fix Incorrect VMIDs passed to HWS

Leo (Hanghong) Ma <hanghong.ma@xxxxxxx>
drm/amd/display: Update VTEM Infopacket definition

Charlene Liu <Charlene.Liu@xxxxxxx>
drm/amd/display: fix audio format not updated after edid updated

Aurabindo Pillai <aurabindo.pillai@xxxxxxx>
drm/amd: Add USBC connector ID

Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx>
cifs: potential buffer overflow in handling symlinks

Lin Ma <linma@xxxxxxxxxx>
nfc: nci: add flush_workqueue to prevent uaf

Athira Rajeev <atrajeev@xxxxxxxxxxxxxxxxxx>
testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set

Petr Malat <oss@xxxxxxxxx>
sctp: Initialize daddr on peeled off socket

Karsten Graul <kgraul@xxxxxxxxxxxxx>
net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()

Stephen Boyd <swboyd@xxxxxxxxxxxx>
drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()

Rameshkumar Sundaram <quic_ramess@xxxxxxxxxxx>
cfg80211: hold bss_lock while updating nontrans_list

Benedikt Spranger <b.spranger@xxxxxxxxxxxxx>
net/sched: taprio: Check if socket flags are valid

Dinh Nguyen <dinguyen@xxxxxxxxxx>
net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
net/sched: fix initialization order when updating chain 0 head

Vadim Pasternak <vadimp@xxxxxxxxxx>
mlxsw: i2c: Fix initialization error flow

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
gpiolib: acpi: use correct format characters

Guillaume Nault <gnault@xxxxxxxxxx>
veth: Ensure eth header is in skb's linear part

Vlad Buslov <vladbu@xxxxxxxxxx>
net/sched: flower: fix parsing of ethertype following VLAN header

Miaoqian Lin <linmq006@xxxxxxxxx>
memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe


-------------

Diffstat:

Makefile | 4 +-
arch/arm/mach-davinci/board-da850-evm.c | 4 +-
arch/arm64/kernel/alternative.c | 6 +--
arch/powerpc/include/asm/page.h | 6 ++-
drivers/ata/libata-core.c | 3 ++
drivers/gpio/gpiolib-acpi.c | 4 +-
drivers/gpu/drm/amd/amdgpu/ObjectID.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 11 ++----
drivers/gpu/drm/amd/amdkfd/kfd_events.c | 2 +
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 +-
drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 4 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 14 ++++---
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14 ++++---
.../amd/display/modules/info_packet/info_packet.c | 5 ++-
drivers/gpu/drm/msm/dsi/dsi_manager.c | 2 +-
drivers/gpu/ipu-v3/ipu-di.c | 5 ++-
drivers/hv/ring_buffer.c | 11 +++++-
drivers/i2c/busses/i2c-pasemi.c | 6 +++
drivers/md/dm-integrity.c | 7 +++-
drivers/memory/atmel-ebi.c | 23 ++++++++---
drivers/net/ethernet/mellanox/mlxsw/i2c.c | 1 +
drivers/net/ethernet/micrel/Kconfig | 1 +
drivers/net/ethernet/stmicro/stmmac/altr_tse_pcs.c | 8 ----
drivers/net/ethernet/stmicro/stmmac/altr_tse_pcs.h | 4 ++
.../net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 13 +++----
drivers/net/slip/slip.c | 2 +-
drivers/net/usb/aqc111.c | 9 ++++-
drivers/net/veth.c | 2 +-
drivers/net/wireless/ath/ath9k/main.c | 2 +-
drivers/net/wireless/ath/ath9k/xmit.c | 33 ++++++++++------
drivers/perf/fsl_imx8_ddr_perf.c | 2 +-
drivers/regulator/wm8994-regulator.c | 42 +++++++++++++++++++--
drivers/scsi/ibmvscsi_tgt/ibmvscsi_tgt.c | 2 +-
drivers/scsi/megaraid/megaraid_sas.h | 3 ++
drivers/scsi/megaraid/megaraid_sas_base.c | 7 ++++
drivers/scsi/mvsas/mv_init.c | 1 +
drivers/target/target_core_user.c | 3 +-
fs/btrfs/block-group.c | 4 --
fs/btrfs/volumes.c | 2 +
fs/cifs/link.c | 3 ++
include/asm-generic/tlb.h | 10 +++--
include/net/ax25.h | 12 ++++++
include/net/flow_dissector.h | 2 +
kernel/dma/direct.c | 3 +-
kernel/irq/affinity.c | 5 ++-
kernel/smp.c | 2 +-
kernel/time/tick-sched.c | 2 +-
mm/kmemleak.c | 8 ++--
mm/page_alloc.c | 2 +-
net/ax25/af_ax25.c | 38 +++++++++++++++----
net/ax25/ax25_dev.c | 28 +++++++++++---
net/ax25/ax25_route.c | 13 ++++++-
net/ax25/ax25_subr.c | 20 +++++++---
net/core/flow_dissector.c | 1 +
net/ipv6/ip6_output.c | 2 +-
net/nfc/nci/core.c | 4 ++
net/sched/cls_api.c | 2 +-
net/sched/cls_flower.c | 18 ++++++---
net/sched/sch_taprio.c | 3 +-
net/sctp/socket.c | 2 +-
net/smc/smc_pnet.c | 5 ++-
net/wireless/scan.c | 2 +
scripts/gcc-plugins/latent_entropy_plugin.c | 44 +++++++++++++---------
sound/core/pcm_misc.c | 2 +-
sound/pci/hda/patch_realtek.c | 1 +
tools/testing/selftests/mqueue/mq_perf_tests.c | 25 ++++++++----
virt/kvm/kvm_main.c | 10 ++++-
68 files changed, 386 insertions(+), 161 deletions(-)