[PATCH 3.18 00/49] 3.18.54-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 3.18.54 release.
There are 49 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat May 20 13:16:30 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.54-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 3.18.54-rc1

Kangjie Lu <kangjielu@xxxxxxxxx>
    ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt

Kangjie Lu <kangjielu@xxxxxxxxx>
    ALSA: timer: Fix leak in events via snd_timer_user_ccallback

Kangjie Lu <kangjielu@xxxxxxxxx>
    ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: timer: Fix race among timer ioctls

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: seq: Fix race at timer setup and close

Jann Horn <jannh@xxxxxxxxxx>
    sched: panic on corrupted stack end

BjÃrn Mork <bjorn@xxxxxxx>
    cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind

Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx>
    HID: core: prevent out-of-bound readings

WANG Cong <xiyou.wangcong@xxxxxxxxx>
    ppp: defer netns reference release for ppp channel

Rainer Weikusat <rweikusat@xxxxxxxxxxxxxxxxxxxxxxx>
    af_unix: Guard against other == sk in unix_dgram_sendmsg

Eric Dumazet <edumazet@xxxxxxxxxx>
    ipv6: sctp: fix lockdep splat in sctp_v6_get_dst()

Eric Dumazet <edumazet@xxxxxxxxxx>
    ipv6: sctp: add rcu protection around np->opt

Calvin Owens <calvinowens@xxxxxx>
    sg: Fix double-free when drives detach during SG_IO

Lukas Czerner <lczerner@xxxxxxxxxx>
    ext4: fix potential use after free in __ext4_journal_stop

David Howells <dhowells@xxxxxxxxxx>
    KEYS: Fix ASN.1 indefinite length object parsing

David Howells <dhowells@xxxxxxxxxx>
    ASN.1: Fix non-match detection failure on data overrun

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    perf: Fix race in swevent hash

Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
    arm64: perf: reject groups spanning multiple HW PMUs

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    perf: Fix event->ctx locking

Mark Rutland <mark.rutland@xxxxxxx>
    arm64: make sys_call_table const

Szymon Janc <szymon.janc@xxxxxxxxxxx>
    Bluetooth: Fix user channel for 32bit userspace on 64bit kernel

Johan Hovold <johan@xxxxxxxxxx>
    serial: omap: suspend device on probe errors

Johan Hovold <johan@xxxxxxxxxx>
    serial: omap: fix runtime-pm handling on unbind

NeilBrown <neilb@xxxxxxxx>
    md/raid1: avoid reusing a resync bio after error handling.

Jason A. Donenfeld <Jason@xxxxxxxxx>
    padata: free correct variable

BjÃrn Jacke <bj@xxxxxxxxx>
    CIFS: add misssing SFM mapping for doublequote

BjÃrn Jacke <bj@xxxxxxxxx>
    CIFS: fix mapping of SFM_SPACE and SFM_PERIOD

Steve French <smfrench@xxxxxxxxx>
    SMB3: Work around mount failure when using SMB3 dialect to Macs

Steve French <smfrench@xxxxxxxxx>
    Set unicode flag on cifs echo request to avoid Mac error

Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
    fs/block_dev: always invalidate cleancache in invalidate_bdev()

Luis Henriques <lhenriques@xxxxxxxx>
    ceph: fix memory leak in __ceph_setxattr()

Michal Hocko <mhocko@xxxxxxxx>
    fs/xattr.c: zero out memory copied to userspace in getxattr

Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
    IB/mlx4: Fix ib device initialization error flow

Shamir Rabinovitch <shamir.rabinovitch@xxxxxxxxxx>
    IB/IPoIB: ibX: failed to create mcg debug file

Somasundaram Krishnasamy <somasundaram.krishnasamy@xxxxxxxxxx>
    dm era: save spacemap metadata root after the pre-commit

Richard Weinberger <richard@xxxxxx>
    um: Fix PTRACE_POKEUSER on x86_64

Ashish Kalra <ashish@xxxxxxxxxxxxxx>
    x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup

Maksim Salau <maksim.salau@xxxxxxxxx>
    usb: misc: legousbtower: Fix buffers on stack

Guenter Roeck <linux@xxxxxxxxxxxx>
    usb: hub: Do not attempt to autosuspend disconnected devices

Gustavo A. R. Silva <garsilva@xxxxxxxxxxxxxx>
    usb: misc: add missing continue in switch

Ian Abbott <abbotti@xxxxxxxxx>
    staging: comedi: jr3_pci: cope with jiffies wraparound

Ian Abbott <abbotti@xxxxxxxxx>
    staging: comedi: jr3_pci: fix possible null pointer dereference

Johan Hovold <johan@xxxxxxxxxx>
    staging: gdm724x: gdm_mux: fix use-after-free on module unload

Malcolm Priestley <tvboxspy@xxxxxxxxx>
    staging: vt6656: use off stack for out buffer USB transfers.

Malcolm Priestley <tvboxspy@xxxxxxxxx>
    staging: vt6656: use off stack for in buffer USB transfers.

Ajay Kaher <ajay.kaher@xxxxxxxxxxx>
    USB: Proper handling of Race Condition when two USB class drivers try to call init_usb_class simultaneously

Marek Vasut <marex@xxxxxxx>
    USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit

Peter Chen <peter.chen@xxxxxxx>
    usb: host: xhci: print correct command ring address

Bart Van Assche <bart.vanassche@xxxxxxxxxxx>
    target/fileio: Fix zero-length READ and WRITE handling


-------------

Diffstat:

 Makefile                                  |   4 +-
 arch/arm64/kernel/perf_event.c            |  21 ++-
 arch/arm64/kernel/sys.c                   |   2 +-
 arch/x86/boot/boot.h                      |   2 +-
 arch/x86/um/ptrace_64.c                   |   2 +-
 drivers/hid/hid-core.c                    |   3 +
 drivers/infiniband/hw/mlx4/main.c         |   1 +
 drivers/infiniband/ulp/ipoib/ipoib_fs.c   |   3 +
 drivers/infiniband/ulp/ipoib/ipoib_main.c |  44 ++++-
 drivers/infiniband/ulp/ipoib/ipoib_vlan.c |   3 -
 drivers/md/dm-era-target.c                |   8 +-
 drivers/md/raid1.c                        |   2 +
 drivers/net/ppp/ppp_generic.c             |   5 +-
 drivers/net/usb/cdc_ncm.c                 |  20 +--
 drivers/scsi/sg.c                         |   8 +-
 drivers/staging/comedi/drivers/jr3_pci.c  |  13 +-
 drivers/staging/gdm724x/gdm_mux.c         |   3 +-
 drivers/staging/vt6656/usbpipe.c          |  31 +++-
 drivers/target/target_core_file.c         |   3 +-
 drivers/tty/serial/omap-serial.c          |   9 +-
 drivers/usb/core/driver.c                 |   3 +
 drivers/usb/core/file.c                   |   9 +-
 drivers/usb/core/hub.c                    |   6 +
 drivers/usb/host/xhci-mem.c               |   2 +-
 drivers/usb/misc/legousbtower.c           |  37 +++--
 drivers/usb/misc/usbtest.c                |   1 +
 drivers/usb/serial/ftdi_sio.c             |   1 +
 drivers/usb/serial/ftdi_sio_ids.h         |   6 +
 fs/block_dev.c                            |  11 +-
 fs/ceph/xattr.c                           |   3 +
 fs/cifs/cifs_unicode.c                    |   6 +
 fs/cifs/cifs_unicode.h                    |   5 +-
 fs/cifs/cifssmb.c                         |   3 +
 fs/cifs/smb2pdu.c                         |  14 +-
 fs/ext4/ext4_jbd2.c                       |   6 +-
 fs/xattr.c                                |   2 +-
 kernel/events/core.c                      | 264 +++++++++++++++++++++++-------
 kernel/padata.c                           |   2 +-
 kernel/sched/core.c                       |   3 +-
 lib/asn1_decoder.c                        |  21 +--
 net/bluetooth/hci_sock.c                  |   3 +-
 net/sctp/ipv6.c                           |  16 +-
 net/unix/af_unix.c                        |   7 +-
 sound/core/seq/seq_queue.c                |   2 +
 sound/core/timer.c                        |  35 ++--
 45 files changed, 482 insertions(+), 173 deletions(-)