[PATCH 4.14 00/80] 4.14.134-stable review

From: Greg Kroah-Hartman
Date: Wed Jul 17 2019 - 23:22:14 EST

This is the start of the stable review cycle for the 4.14.134 release.
There are 80 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat 20 Jul 2019 02:59:27 AM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.134-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.14.134-rc1

Dave Airlie <airlied@xxxxxxxxxx>
drm/udl: move to embedding drm device inside udl device.

Dave Airlie <airlied@xxxxxxxxxx>
drm/udl: introduce a macro to convert dev to udl.

Haren Myneni <haren@xxxxxxxxxxxxxxxxxx>
crypto/NX: Set receive window credits to max number of CRBs in RxFIFO

Julian Wiedmann <jwi@xxxxxxxxxxxxx>
s390/qdio: don't touch the dsci in tiqdio_add_input_queues()

Julian Wiedmann <jwi@xxxxxxxxxxxxx>
s390/qdio: (re-)initialize tiqdio list entries

Heiko Carstens <heiko.carstens@xxxxxxxxxx>
s390: fix stfle zero padding

Arnd Bergmann <arnd@xxxxxxxx>
ARC: hide unused function unw_hdr_alloc

Vinod Koul <vkoul@xxxxxxxxxx>
linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL

Eiichi Tsukata <devel@xxxxxxxxxxxx>
cpu/hotplug: Fix out-of-bounds read when setting fail state

Kirill A. Shutemov <kirill@xxxxxxxxxxxxx>
x86/boot/64: Fix crash if kernel image crosses page table boundary

Milan Broz <gmazyland@xxxxxxxxx>
dm verity: use message limit for data block corruption message

SÃbastien Szymanski <sebastien.szymanski@xxxxxxxxxxxx>
ARM: dts: imx6ul: fix PWM[1-4] interrupts

Sergej Benilov <sergej.benilov@xxxxxxxxxxxxxx>
sis900: fix TX completion

Takashi Iwai <tiwai@xxxxxxx>
ppp: mppe: Add softdep to arc4

Petr Oros <poros@xxxxxxxxxx>
be2net: fix link failure after ethtool offline test

Arnd Bergmann <arnd@xxxxxxxx>
ARM: omap2: remove incorrect __init annotation

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/core: Fix perf_sample_regs_user() mm check

Hans de Goede <hdegoede@xxxxxxxxxx>
efi/bgrt: Drop BGRT status field reserved bits check

Tony Lindgren <tony@xxxxxxxxxxx>
clk: ti: clkctrl: Fix returning uninitialized data

Sean Young <sean@xxxxxxxx>
MIPS: Remove superfluous check for __linux__

Vishnu DASA <vdasa@xxxxxxxxxx>
VMCI: Fix integer overflow in VMCI handle arrays

Christian Lamparter <chunkeey@xxxxxxxxx>
carl9170: fix misuse of device driver API

Todd Kjos <tkjos@xxxxxxxxxxx>
binder: fix memory leak in error path

Ian Abbott <abbotti@xxxxxxxxx>
staging: comedi: amplc_pci230: fix null pointer deref on interrupt

Ian Abbott <abbotti@xxxxxxxxx>
staging: comedi: dt282x: fix a null pointer deref on interrupt

Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
usb: renesas_usbhs: add a workaround for a race condition of workqueue

Kiruthika Varadarajan <Kiruthika.Varadarajan@xxxxxxxxxx>
usb: gadget: ether: Fix race between gether_disconnect and rx_submit

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
p54usb: Fix race between disconnect and firmware loading

Oliver Barta <o.barta89@xxxxxxxxx>
Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"

JÃrgen Storvist <jorgen.storvist@xxxxxxxxx>
USB: serial: option: add support for GosunCn ME3630 RNDIS mode

Andreas Fritiofson <andreas.fritiofson@xxxxxxxx>
USB: serial: ftdi_sio: add ID for isodebug v1

Brian Norris <briannorris@xxxxxxxxxxxx>
mwifiex: Don't abort on small, spec-compliant vendor IEs

Takashi Iwai <tiwai@xxxxxxx>
mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()

Takashi Iwai <tiwai@xxxxxxx>
mwifiex: Abort at too short BSS descriptor element

Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx>
Documentation: Add section about CPU vulnerabilities for Spectre

Dianzhang Chen <dianzhangchen0@xxxxxxxxx>
x86/tls: Fix possible spectre-v1 in do_get_thread_area()

Dianzhang Chen <dianzhangchen0@xxxxxxxxx>
x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()

Douglas Anderson <dianders@xxxxxxxxxxxx>
block, bfq: NULL out the bic when it's no longer valid

Kailang Yang <kailang@xxxxxxxxxxx>
ALSA: hda/realtek - Headphone Mic can't record after S3

Steven J. Magnani <steve.magnani@xxxxxxxxxxxxxxx>
udf: Fix incorrect final NOT_ALLOCATED (hole) extent length

Hongjie Fang <hongjiefang@xxxxxxxxxxxx>
fscrypt: don't set policy for a dead directory

Lin Yi <teroincn@xxxxxxx>
net :sunrpc :clnt :Fix xps refcount imbalance on the error path

Rasmus Villemoes <rasmus.villemoes@xxxxxxxxx>
net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()

yangerkun <yangerkun@xxxxxxxxxx>
quota: fix a problem about transfer quota

Colin Ian King <colin.king@xxxxxxxxxxxxx>
net: lio_core: fix potential sign-extension overflow on large shift

Xin Long <lucien.xin@xxxxxxxxx>
ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
drm: return -EFAULT if copy_to_user() fails

Mauro S. M. Rodrigues <maurosr@xxxxxxxxxxxxxxxxxx>
bnx2x: Check if transceiver implements DDM before access

Mariusz Tkaczyk <mariusz.tkaczyk@xxxxxxxxx>
md: fix for divide error in status_resync

Reinhard Speyerer <rspmn@xxxxxxxx>
qmi_wwan: extend permitted QMAP mux_id value range

Reinhard Speyerer <rspmn@xxxxxxxx>
qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode

Reinhard Speyerer <rspmn@xxxxxxxx>
qmi_wwan: add support for QMAP padding in the RX path

Yibo Zhao <yiboz@xxxxxxxxxxxxxx>
mac80211: only warn once on chanctx_conf being NULL

Bartosz Golaszewski <bgolaszewski@xxxxxxxxxxxx>
ARM: davinci: da8xx: specify dma_coherent_mask for lcdc

Bartosz Golaszewski <bgolaszewski@xxxxxxxxxxxx>
ARM: davinci: da850-evm: call regulator_has_full_constraints()

Ido Schimmel <idosch@xxxxxxxxxxxx>
mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed

Dave Martin <Dave.Martin@xxxxxxx>
KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy

Anson Huang <anson.huang@xxxxxxx>
Input: imx_keypad - make sure keyboard can always wake up system

Teresa Remmet <t.remmet@xxxxxxxxx>
ARM: dts: am335x phytec boards: Fix cd-gpios active level

Thomas Falcon <tlfalcon@xxxxxxxxxxxxx>
ibmvnic: Refresh device multicast list after reset

YueHaibing <yuehaibing@xxxxxxxxxx>
can: af_can: Fix error path of can_init()

Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx>
can: m_can: implement errata "Needless activation of MRAF irq"

Sean Nyekjaer <sean@xxxxxxxxxx>
can: mcp251x: add support for mcp25625

Sean Nyekjaer <sean@xxxxxxxxxx>
dt-bindings: can: mcp251x: add mcp25625 support

Guillaume Nault <gnault@xxxxxxxxxx>
netfilter: ipv6: nf_defrag: accept duplicate fragments again

Guillaume Nault <gnault@xxxxxxxxxx>
netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments

Jia-Ju Bai <baijiaju1990@xxxxxxxxx>
iwlwifi: Fix double-free problems in iwl_req_fw_callback()

Takashi Iwai <tiwai@xxxxxxx>
mwifiex: Fix possible buffer overflows at parsing bss descriptor

Pradeep Kumar Chitrapu <pradeepc@xxxxxxxxxxxxxx>
mac80211: free peer keys before vif down in mesh

Thomas Pedersen <thomas@xxxxxxxx>
mac80211: mesh: fix RCU warning

Melissa Wen <melissa.srw@xxxxxxxxx>
staging:iio:ad7150: fix threshold mode config bit

John Fastabend <john.fastabend@xxxxxxxxx>
bpf: sockmap, fix use after free from sleep in psock backlog workqueue

Chang-Hsien Tsai <luke.tw@xxxxxxxxx>
samples, bpf: fix to change the buffer size for read()

Aaron Ma <aaron.ma@xxxxxxxxxxxxx>
Input: elantech - enable middle button support on 2 ThinkPads

Christophe Leroy <christophe.leroy@xxxxxx>
crypto: talitos - rename alternative AEAD algos.

James Morse <james.morse@xxxxxxx>
drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT

Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header

Cole Rogers <colerogers@xxxxxxxxxxx>
Input: synaptics - enable SMBUS on T480 thinkpad trackpad

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
e1000e: start network tx queue only when link is up

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
Revert "e1000e: fix cyclic resets at link up with active tx"


-------------

Diffstat:

Documentation/ABI/testing/sysfs-class-net-qmi | 4 +-
Documentation/admin-guide/hw-vuln/index.rst | 1 +
Documentation/admin-guide/hw-vuln/spectre.rst | 697 +++++++++++++++++++++
.../bindings/net/can/microchip,mcp251x.txt | 1 +
Documentation/userspace-api/spec_ctrl.rst | 2 +
Makefile | 4 +-
arch/arc/kernel/unwind.c | 9 +-
arch/arm/boot/dts/am335x-pcm-953.dtsi | 2 +-
arch/arm/boot/dts/am335x-wega.dtsi | 2 +-
arch/arm/boot/dts/imx6ul.dtsi | 8 +-
arch/arm/mach-davinci/board-da850-evm.c | 2 +
arch/arm/mach-davinci/devices-da8xx.c | 3 +
arch/arm/mach-omap2/prm3xxx.c | 2 +-
arch/mips/include/uapi/asm/sgidefs.h | 8 -
arch/s390/include/asm/facility.h | 21 +-
arch/x86/kernel/head64.c | 17 +-
arch/x86/kernel/ptrace.c | 5 +-
arch/x86/kernel/tls.c | 9 +-
block/bfq-iosched.c | 1 +
drivers/android/binder.c | 4 +-
drivers/base/cacheinfo.c | 3 +-
drivers/clk/ti/clkctrl.c | 7 +-
drivers/crypto/nx/nx-842-powernv.c | 8 +-
drivers/crypto/talitos.c | 16 +-
drivers/firmware/efi/efi-bgrt.c | 5 -
drivers/gpu/drm/drm_bufs.c | 5 +-
drivers/gpu/drm/drm_ioc32.c | 5 +-
drivers/gpu/drm/udl/udl_drv.c | 56 +-
drivers/gpu/drm/udl/udl_drv.h | 9 +-
drivers/gpu/drm/udl/udl_fb.c | 12 +-
drivers/gpu/drm/udl/udl_main.c | 35 +-
drivers/input/keyboard/imx_keypad.c | 18 +-
drivers/input/mouse/elantech.c | 2 +
drivers/input/mouse/synaptics.c | 1 +
drivers/md/dm-verity-target.c | 4 +-
drivers/md/md.c | 36 +-
drivers/misc/vmw_vmci/vmci_context.c | 80 +--
drivers/misc/vmw_vmci/vmci_handle_array.c | 38 +-
drivers/misc/vmw_vmci/vmci_handle_array.h | 29 +-
drivers/net/can/m_can/m_can.c | 21 +
drivers/net/can/spi/Kconfig | 5 +-
drivers/net/can/spi/mcp251x.c | 25 +-
drivers/net/dsa/mv88e6xxx/global1_vtu.c | 2 +-
.../net/ethernet/broadcom/bnx2x/bnx2x_ethtool.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 1 +
drivers/net/ethernet/cavium/liquidio/lio_core.c | 2 +-
drivers/net/ethernet/emulex/benet/be_ethtool.c | 28 +-
drivers/net/ethernet/ibm/ibmvnic.c | 3 +
drivers/net/ethernet/intel/e1000e/netdev.c | 21 +-
drivers/net/ethernet/mellanox/mlxsw/reg.h | 2 +-
drivers/net/ethernet/sis/sis900.c | 16 +-
drivers/net/ppp/ppp_mppe.c | 1 +
drivers/net/usb/qmi_wwan.c | 27 +-
drivers/net/wireless/ath/carl9170/usb.c | 39 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 1 -
drivers/net/wireless/intersil/p54/p54usb.c | 43 +-
drivers/net/wireless/marvell/mwifiex/fw.h | 12 +-
drivers/net/wireless/marvell/mwifiex/ie.c | 45 +-
drivers/net/wireless/marvell/mwifiex/scan.c | 31 +-
drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 4 +-
drivers/net/wireless/marvell/mwifiex/wmm.c | 2 +-
drivers/s390/cio/qdio_setup.c | 2 +
drivers/s390/cio/qdio_thinint.c | 5 +-
drivers/staging/comedi/drivers/amplc_pci230.c | 3 +-
drivers/staging/comedi/drivers/dt282x.c | 3 +-
drivers/staging/iio/cdc/ad7150.c | 19 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/usb/gadget/function/u_ether.c | 6 +-
drivers/usb/renesas_usbhs/fifo.c | 34 +-
drivers/usb/serial/ftdi_sio.c | 1 +
drivers/usb/serial/ftdi_sio_ids.h | 6 +
drivers/usb/serial/option.c | 1 +
fs/crypto/policy.c | 2 +
fs/quota/dquot.c | 4 +-
fs/udf/inode.c | 93 ++-
include/linux/cpuhotplug.h | 1 +
include/linux/kernel.h | 3 +-
include/linux/vmw_vmci_defs.h | 11 +-
include/net/ip6_tunnel.h | 9 +-
include/uapi/linux/nilfs2_ondisk.h | 24 +-
kernel/cpu.c | 3 +
kernel/events/core.c | 2 +-
net/can/af_can.c | 24 +-
net/core/skbuff.c | 1 +
net/ipv6/netfilter/nf_conntrack_reasm.c | 22 +-
net/mac80211/ieee80211_i.h | 2 +-
net/mac80211/mesh.c | 6 +-
net/sunrpc/clnt.c | 1 +
samples/bpf/bpf_load.c | 2 +-
sound/pci/hda/patch_realtek.c | 2 +-
virt/kvm/arm/vgic/vgic-its.c | 1 +
91 files changed, 1393 insertions(+), 408 deletions(-)