[PATCH 4.9 00/96] 4.9.103-stable review

From: Greg Kroah-Hartman
Date: Thu May 24 2018 - 04:55:19 EST


This is the start of the stable review cycle for the 4.9.103 release.
There are 96 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat May 26 09:35:42 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.103-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.9.103-rc1

Colin Ian King <colin.king@xxxxxxxxxxxxx>
rtc: tx4939: avoid unintended sign extension on a 24 bit shift

Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx>
rtc: hctosys: Ensure system time doesn't overflow time_t

Bryan O'Donoghue <pure.logic@xxxxxxxxxxxxxxxxx>
rtc: snvs: Fix usage of snvs_rtc_enable

Vignesh R <vigneshr@xxxxxx>
serial: 8250: Don't service RX FIFO if interrupts are disabled

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
serial: arc_uart: Fix out-of-bounds access through DT alias

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
serial: fsl_lpuart: Fix out-of-bounds access through DT alias

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
serial: imx: Fix out-of-bounds access through serial port index

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
serial: mxs-auart: Fix out-of-bounds access through serial port index

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
serial: samsung: Fix out-of-bounds access through serial port index

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
serial: xuartps: Fix out-of-bounds access through DT alias

Colin Ian King <colin.king@xxxxxxxxxxxxx>
media: cx25821: prevent out-of-bounds read on array card

Hans Verkuil <hverkuil@xxxxxxxxx>
media: vivid: fix incorrect capabilities for radio

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
media: vb2: Fix videobuf2 to map correct area

Arnd Bergmann <arnd@xxxxxxxx>
media: s3c-camif: fix out-of-bounds array access

Brad Love <brad@xxxxxxxxxxxxxxxx>
media: cx23885: Override 888 ImpactVCBe crystal frequency

Mauro Carvalho Chehab <mchehab@xxxxxxxxxx>
media: dmxdev: fix error code for invalid ioctls

Andrzej Hajda <a.hajda@xxxxxxxxxxx>
clk: samsung: exynos3250: Fix PLL rates

Andrzej Hajda <a.hajda@xxxxxxxxxxx>
clk: samsung: exynos5250: Fix PLL rates

Andrzej Hajda <a.hajda@xxxxxxxxxxx>
clk: samsung: exynos5433: Fix PLL rates

Andrzej Hajda <a.hajda@xxxxxxxxxxx>
clk: samsung: exynos5260: Fix PLL rates

Andrzej Hajda <a.hajda@xxxxxxxxxxx>
clk: samsung: exynos7: Fix PLL rates

Andrzej Hajda <a.hajda@xxxxxxxxxxx>
clk: samsung: s3c2410: Fix PLL rates

Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
clk: rockchip: Prevent calculating mmc phase if clock rate is zero

Brad Love <brad@xxxxxxxxxxxxxxxx>
media: cx23885: Set subdev host data to clk_freq pointer

Marcel Ziswiler <marcel@xxxxxxxxxxxx>
clk: tegra: Fix pll_u rate configuration

Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
clk: Don't show the incorrect clock phase

Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228

Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx>
ASoC: samsung: i2s: Ensure the RCLK rate is properly determined

Ranjani Sridharan <ranjani.sridharan@xxxxxxxxxxxxxxx>
ASoC: topology: create TLV data for dapm widgets

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read()

James Smart <jsmart2021@xxxxxxxxx>
scsi: lpfc: Fix frequency of Release WQE CQEs

James Smart <jsmart2021@xxxxxxxxx>
scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing

James Smart <jsmart2021@xxxxxxxxx>
scsi: lpfc: Fix issue_lip if link is disabled

Wilfried Weissmann <wilfried.weissmann@xxxxxx>
scsi: mvsas: fix wrong endianness of sgpio api

Dave Carroll <david.carroll@xxxxxxxxxxxxx>
scsi: aacraid: Insure command thread is not recursively stopped

Jeremy Cline <jeremy@xxxxxxxxxx>
scsi: sd: Keep disk read-only when re-reading partition

Hannes Reinecke <hare@xxxxxxx>
scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM

Manish Rangankar <manish.rangankar@xxxxxxxxxx>
scsi: qla4xxx: skip error recovery in case of register disconnect.

Meelis Roos <mroos@xxxxxxxx>
scsi: aacraid: fix shutdown crash when init fails

Michael Kelley (EOSG) <Michael.H.Kelley@xxxxxxxxxxxxx>
scsi: storvsc: Increase cmd_per_lun for higher speed devices

Bart Van Assche <bart.vanassche@xxxxxxx>
scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
scsi: sym53c8xx_2: iterator underflow in sym_getsync()

Chad Dupuis <chad.dupuis@xxxxxxxxxx>
scsi: bnx2fc: Fix check in SCSI completion handler for timed out request

Sujit Reddy Thumma <sthumma@xxxxxxxxxxxxxx>
scsi: ufs: Enable quirk to ignore sending WRITE_SAME command

Arnd Bergmann <arnd@xxxxxxxx>
scsi: fas216: fix sense buffer initialization

Peter Robinson <pbrobinson@xxxxxxxxx>
crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss

NeilBrown <neilb@xxxxxxxx>
staging: lustre: lmv: correctly iput lmo_root

Colin Ian King <colin.king@xxxxxxxxxxxxx>
staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr

NeilBrown <neilb@xxxxxxxx>
staging: lustre: fix bug in osc_enter_cache_try

Larry Finger <Larry.Finger@xxxxxxxxxxxx>
Bluetooth: btusb: Add device ID for RTL8822BE

Brad Love <brad@xxxxxxxxxxxxxxxx>
media: em28xx: USB bulk packet size fix

Chris Dickens <christopher.a.dickens@xxxxxxxxx>
usb: gadget: composite: fix incorrect handling of OS desc requests

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
usb: gadget: udc: change comparison to bitshift when dealing with a mask

Lars-Peter Clausen <lars@xxxxxxxxxx>
usb: gadget: ffs: Execute copy_to_user() with USER_DS set

Lars-Peter Clausen <lars@xxxxxxxxxx>
usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS

Minas Harutyunyan <hminas@xxxxxxxxxxxx>
usb: dwc2: host: Fix transaction errors in host mode

Grigor Tovmasyan <Grigor.Tovmasyan@xxxxxxxxxxxx>
usb: dwc2: Fix interval type issue

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: zero usb device slot_id member when disabling and freeing a xhci slot

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
usb: dwc3: Add SoftReset PHY synchonization delay

Nobutaka Okabe <nob77413@xxxxxxxxx>
ALSA: usb-audio: Add native DSD support for Luxman DA-06

Vicente Bergas <vicencb@xxxxxxxxx>
Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB

Giuseppe Lippolis <giu.lippolis@xxxxxxxxx>
net-usb: add qmi_wwan if on lte modem wistron neweb d18q1

Torsten Hilbrich <torsten.hilbrich@xxxxxxxxxxx>
net/usb/qmi_wwan.c: Add USB id for lt4120 modem

Fredrik Noring <noring@xxxxxxxxxx>
USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM

Dominik Bozek <dominikx.bozek@xxxxxxxxx>
usb: cdc_acm: prevent race at write to acm while system resumes

Vardan Mikayelyan <mvardan@xxxxxxxxxxxx>
usb: dwc2: Fix dwc2_hsotg_core_init_disconnected()

Stefan Agner <stefan@xxxxxxxx>
usb: gadget: fsl_udc_core: fix ep valid checks

Manu Gautam <mgautam@xxxxxxxxxxxxxx>
usb: gadget: core: Fix use-after-free of usb_request

Roger Quadros <rogerq@xxxxxx>
usb: dwc3: omap: don't miss events during suspend/resume

Brian Norris <briannorris@xxxxxxxxxxxx>
usb: dwc3: Undo PHY init if soft reset fails

John Keeping <john@xxxxxxxxxxxx>
usb: gadget: f_uac2: fix bFirstInterface in composite gadget

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
x86/kexec: Avoid double free_page() upon do_kexec_load() failure

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
hfsplus: stop workqueue when fill_super() failed

Johannes Berg <johannes.berg@xxxxxxxxx>
cfg80211: limit wiphy names to 128 bytes

Jens Remus <jremus@xxxxxxxxxxxxx>
scsi: zfcp: fix infinite iteration on ERP ready list

Alexander Potapenko <glider@xxxxxxxxxx>
scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()

Jason Yan <yanaijie@xxxxxxxxxx>
scsi: libsas: defer ata device eh commands to libata

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390: use expoline thunks in the BPF JIT

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390: extend expoline to BC instructions

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390: move spectre sysfs attribute code

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390/kernel: use expoline for indirect branches

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390/ftrace: use expoline for indirect branches

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390/lib: use expoline for indirect branches

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390/crc32-vx: use expoline for indirect branches

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390: move expoline assembler macros to a header

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390: add assembler macros for CPU alternatives

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
ext2: fix a block leak

hpreg@xxxxxxxxxx <hpreg@xxxxxxxxxx>
vmxnet3: use DMA memory barriers where required

hpreg@xxxxxxxxxx <hpreg@xxxxxxxxxx>
vmxnet3: set the DMA mask before the first DMA map operation

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: purge write queue in tcp_connect_init()

Eric Dumazet <edumazet@xxxxxxxxxx>
sock_diag: fix use-after-free read in __sk_free

Willem de Bruijn <willemb@xxxxxxxxxx>
packet: in packet_snd start writing at link layer allocation

Willem de Bruijn <willemb@xxxxxxxxxx>
net: test tailroom before appending to linear skb

Tarick Bedeir <tarick@xxxxxxxxxx>
net/mlx4_core: Fix error handling in mlx4_init_port_info.


-------------

Diffstat:

Makefile | 4 +-
arch/s390/crypto/crc32be-vx.S | 5 +-
arch/s390/crypto/crc32le-vx.S | 4 +-
arch/s390/include/asm/alternative-asm.h | 108 +++++++++++++
arch/s390/include/asm/nospec-insn.h | 195 +++++++++++++++++++++++
arch/s390/kernel/Makefile | 1 +
arch/s390/kernel/asm-offsets.c | 1 +
arch/s390/kernel/base.S | 24 +--
arch/s390/kernel/entry.S | 105 +++---------
arch/s390/kernel/mcount.S | 14 +-
arch/s390/kernel/nospec-branch.c | 43 +++--
arch/s390/kernel/nospec-sysfs.c | 21 +++
arch/s390/kernel/reipl.S | 7 +-
arch/s390/kernel/swsusp.S | 9 +-
arch/s390/lib/mem.S | 9 +-
arch/s390/net/bpf_jit.S | 16 +-
arch/s390/net/bpf_jit_comp.c | 63 +++++++-
arch/x86/kernel/machine_kexec_32.c | 6 +-
arch/x86/kernel/machine_kexec_64.c | 4 +-
drivers/bluetooth/btusb.c | 6 +
drivers/clk/clk.c | 3 +
drivers/clk/rockchip/clk-mmc-phase.c | 23 +++
drivers/clk/rockchip/clk-rk3228.c | 2 +-
drivers/clk/samsung/clk-exynos3250.c | 4 +-
drivers/clk/samsung/clk-exynos5250.c | 8 +-
drivers/clk/samsung/clk-exynos5260.c | 2 +-
drivers/clk/samsung/clk-exynos5433.c | 12 +-
drivers/clk/samsung/clk-exynos7.c | 2 +-
drivers/clk/samsung/clk-s3c2410.c | 16 +-
drivers/clk/tegra/clk-pll.c | 2 +
drivers/crypto/sunxi-ss/sun4i-ss-core.c | 1 +
drivers/media/dvb-core/dmxdev.c | 2 +-
drivers/media/pci/cx23885/cx23885-cards.c | 4 +
drivers/media/pci/cx23885/cx23885-core.c | 10 ++
drivers/media/pci/cx25821/cx25821-core.c | 7 +-
drivers/media/platform/s3c-camif/camif-capture.c | 7 +-
drivers/media/platform/vivid/vivid-ctrls.c | 2 +
drivers/media/usb/em28xx/em28xx.h | 2 +-
drivers/media/v4l2-core/videobuf2-vmalloc.c | 2 +-
drivers/message/fusion/mptctl.c | 2 +
drivers/net/ethernet/mellanox/mlx4/main.c | 4 +-
drivers/net/usb/qmi_wwan.c | 4 +
drivers/net/vmxnet3/vmxnet3_drv.c | 72 ++++++---
drivers/rtc/hctosys.c | 5 +
drivers/rtc/rtc-snvs.c | 15 +-
drivers/rtc/rtc-tx4939.c | 6 +-
drivers/s390/scsi/zfcp_dbf.c | 23 ++-
drivers/s390/scsi/zfcp_ext.h | 5 +-
drivers/s390/scsi/zfcp_scsi.c | 14 +-
drivers/scsi/aacraid/commsup.c | 4 +-
drivers/scsi/aacraid/linit.c | 5 +-
drivers/scsi/arm/fas216.c | 2 +-
drivers/scsi/bnx2fc/bnx2fc_io.c | 1 +
drivers/scsi/libsas/sas_scsi_host.c | 33 ++--
drivers/scsi/lpfc/lpfc_attr.c | 5 +
drivers/scsi/lpfc/lpfc_hbadisc.c | 5 +-
drivers/scsi/lpfc/lpfc_sli.c | 2 +
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +-
drivers/scsi/mvsas/mv_94xx.c | 23 +--
drivers/scsi/qla2xxx/qla_isr.c | 6 +-
drivers/scsi/qla4xxx/ql4_def.h | 2 +
drivers/scsi/qla4xxx/ql4_os.c | 46 ++++++
drivers/scsi/sd.c | 3 +-
drivers/scsi/sg.c | 2 +-
drivers/scsi/storvsc_drv.c | 2 +-
drivers/scsi/sym53c8xx_2/sym_hipd.c | 2 +-
drivers/scsi/ufs/ufshcd.c | 2 +
drivers/staging/lustre/lustre/include/obd.h | 2 +-
drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +-
drivers/staging/lustre/lustre/osc/osc_cache.c | 2 +-
drivers/staging/rtl8192u/r8192U_core.c | 2 +
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/arc_uart.c | 5 +
drivers/tty/serial/fsl_lpuart.c | 4 +
drivers/tty/serial/imx.c | 6 +
drivers/tty/serial/mxs-auart.c | 4 +
drivers/tty/serial/samsung.c | 4 +
drivers/tty/serial/xilinx_uartps.c | 2 +-
drivers/usb/class/cdc-acm.c | 9 +-
drivers/usb/dwc2/core.h | 2 +-
drivers/usb/dwc2/gadget.c | 12 +-
drivers/usb/dwc2/hcd.c | 14 +-
drivers/usb/dwc3/core.c | 16 +-
drivers/usb/dwc3/core.h | 2 +
drivers/usb/dwc3/dwc3-omap.c | 16 ++
drivers/usb/gadget/composite.c | 40 +++--
drivers/usb/gadget/function/f_fs.c | 6 +-
drivers/usb/gadget/function/f_uac2.c | 2 +
drivers/usb/gadget/udc/core.c | 2 +-
drivers/usb/gadget/udc/fsl_udc_core.c | 4 +-
drivers/usb/gadget/udc/goku_udc.h | 2 +-
drivers/usb/host/ohci-hcd.c | 3 +-
drivers/usb/host/xhci-mem.c | 2 +
fs/ext2/inode.c | 10 --
fs/hfsplus/super.c | 1 +
include/linux/usb/composite.h | 3 +
include/uapi/linux/nl80211.h | 2 +
net/core/sock.c | 2 +-
net/ipv4/ip_output.c | 3 +-
net/ipv4/tcp_output.c | 7 +-
net/ipv6/ip6_output.c | 3 +-
net/packet/af_packet.c | 4 +-
net/wireless/core.c | 3 +
sound/soc/au1x/ac97c.c | 6 +-
sound/soc/samsung/i2s.c | 13 +-
sound/soc/soc-topology.c | 3 +
sound/usb/quirks.c | 29 ++--
107 files changed, 975 insertions(+), 335 deletions(-)