[PATCH 5.4 00/66] 5.4.1-stable review

From: Greg Kroah-Hartman
Date: Wed Nov 27 2019 - 16:17:30 EST


This is the start of the stable review cycle for the 5.4.1 release.
There are 66 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 29 Nov 2019 20:18:09 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.1-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 5.4.1-rc1

Michael Ellerman <mpe@xxxxxxxxxxxxxx>
KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel

Michael Ellerman <mpe@xxxxxxxxxxxxxx>
powerpc/book3s64: Fix link stack flush on context switch

Bernd Porr <mail@xxxxxxxxxxxxxxx>
staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error

Aleksander Morgado <aleksander@xxxxxxxxxxxxx>
USB: serial: option: add support for Foxconn T77W968 LTE modules

Aleksander Morgado <aleksander@xxxxxxxxxxxxx>
USB: serial: option: add support for DW5821e with eSIM support

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: mos7840: fix remote wakeup

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: mos7720: fix remote wakeup

Pavel LÃbl <pavel@xxxxxxxx>
USB: serial: mos7840: add USB ID to support Moxa UPort 2210

Oliver Neukum <oneukum@xxxxxxxx>
appledisplay: fix error handling in the scheduled work

Oliver Neukum <oneukum@xxxxxxxx>
USB: chaoskey: fix error case of a timeout

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
usb-serial: cp201x: support Mark-10 digital force gauge

Suwan Kim <suwan.kim027@xxxxxxxxx>
usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()

Hewenliang <hewenliang4@xxxxxxxxxx>
usbip: tools: fix fd leakage in the function of read_attr_usbip_status

Oliver Neukum <oneukum@xxxxxxxx>
USBIP: add config dependency for SGL_ALLOC

Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs

A Sun <as1033x@xxxxxxxxxxx>
media: mceusb: fix out of bounds read in MCE receiver buffer

Sean Young <sean@xxxxxxxx>
media: imon: invalid dereference in imon_touch_event

Vito Caputo <vcaputo@xxxxxxxxxxx>
media: cxusb: detect cxusb_ctrl_msg error in query

Oliver Neukum <oneukum@xxxxxxxx>
media: b2c2-flexcop-usb: add sanity checking

Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
media: uvcvideo: Fix error path in control parsing failure

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Prevent exit livelock

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Provide distinct return value when owner is exiting

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Add mutex around futex exit

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Provide state handling for exec() as well

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Sanitize exit state handling

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Mark the begin of futex exit explicitly

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Set task::futex_state to DEAD right after handling futex exit

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Split futex_mm_release() for exit/exec

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
exit/exec: Seperate mm_release()

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Replace PF_EXITPIDONE with a state

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
futex: Move futex exit handling into futex code

Kai Shen <shenkai8@xxxxxxxxxx>
cpufreq: Add NULL checks to show() and store() methods of cpufreq

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
media: usbvision: Fix races among open, close, and disconnect

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
media: usbvision: Fix invalid accesses after device disconnect

Alexander Popov <alex.popov@xxxxxxxxx>
media: vivid: Fix wrong locking that causes race conditions on streaming stop

Vandana BN <bnvandana@xxxxxxxxx>
media: vivid: Set vid_cap_streaming and vid_out_streaming to true

Geoffrey D. Bennett <g@xxxxx>
ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data

Takashi Iwai <tiwai@xxxxxxx>
ALSA: usb-audio: Fix NULL dereference at parsing BADD

Yang Tao <yang.tao172@xxxxxxxxxx>
futex: Prevent robust futex exit race

Andy Lutomirski <luto@xxxxxxxxxx>
x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3

Ingo Molnar <mingo@xxxxxxxxxx>
x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise

Andy Lutomirski <luto@xxxxxxxxxx>
selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel

Andy Lutomirski <luto@xxxxxxxxxx>
selftests/x86/mov_ss_trap: Fix the SYSENTER test

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/entry/32: Fix NMI vs ESPFIX

Andy Lutomirski <luto@xxxxxxxxxx>
x86/entry/32: Unwind the ESPFIX stack earlier on exception entry

Andy Lutomirski <luto@xxxxxxxxxx>
x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL

Andy Lutomirski <luto@xxxxxxxxxx>
x86/entry/32: Use %ss segment where required

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/entry/32: Fix IRET exception

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
x86/cpu_entry_area: Add guard page for entry stack on 32bit

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
x86/pti/32: Size initial_page_table correctly

Andy Lutomirski <luto@xxxxxxxxxx>
x86/doublefault/32: Fix stack canaries in the double fault handler

Jan Beulich <jbeulich@xxxxxxxx>
x86/xen/32: Simplify ring check in xen_iret_crit_fixup()

Jan Beulich <jbeulich@xxxxxxxx>
x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout

Jan Beulich <jbeulich@xxxxxxxx>
x86/stackframe/32: Repair 32-bit Xen PV

Navid Emamdoost <navid.emamdoost@xxxxxxxxx>
nbd: prevent memory leak

Waiman Long <longman@xxxxxxxxxx>
x86/speculation: Fix redundant MDS mitigation message

Waiman Long <longman@xxxxxxxxxx>
x86/speculation: Fix incorrect MDS/TAA mitigation status

Alexander Kapshuk <alexander.kapshuk@xxxxxxxxx>
x86/insn: Fix awk regexp warnings

John Pittman <jpittman@xxxxxxxxxx>
md/raid10: prevent access of uninitialized resync_pages offset

Mike Snitzer <snitzer@xxxxxxxxxx>
Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"

Adam Ford <aford173@xxxxxxxxx>
Revert "Bluetooth: hci_ll: set operational frequency earlier"

Christian Lamparter <chunkeey@xxxxxxxxx>
ath10k: restore QCA9880-AR1A (v1) detection

Bjorn Andersson <bjorn.andersson@xxxxxxxxxx>
ath10k: Fix HOST capability QMI incompatibility

Hui Peng <benquike@xxxxxxxxx>
ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe

Denis Efremov <efremov@xxxxxxxxx>
ath9k_hw: fix uninitialized variable data

Tomas Bortoli <tomasbortoli@xxxxxxxxx>
Bluetooth: Fix invalid-free in bcsp_close()


-------------

Diffstat:

Documentation/admin-guide/hw-vuln/mds.rst | 7 +-
.../admin-guide/hw-vuln/tsx_async_abort.rst | 5 +-
Documentation/admin-guide/kernel-parameters.txt | 11 +
.../bindings/net/wireless/qcom,ath10k.txt | 6 +
Makefile | 4 +-
arch/powerpc/include/asm/asm-prototypes.h | 3 +
arch/powerpc/include/asm/security_features.h | 3 +
arch/powerpc/kernel/entry_64.S | 6 +
arch/powerpc/kernel/security.c | 57 +++-
arch/powerpc/kvm/book3s_hv_rmhandlers.S | 30 ++
arch/x86/entry/entry_32.S | 211 +++++++++-----
arch/x86/include/asm/cpu_entry_area.h | 18 +-
arch/x86/include/asm/pgtable_32_types.h | 8 +-
arch/x86/include/asm/segment.h | 12 +
arch/x86/kernel/cpu/bugs.c | 30 +-
arch/x86/kernel/doublefault.c | 3 +
arch/x86/kernel/head_32.S | 10 +
arch/x86/mm/cpu_entry_area.c | 4 +-
arch/x86/tools/gen-insn-attr-x86.awk | 4 +-
arch/x86/xen/xen-asm_32.S | 75 ++---
drivers/block/nbd.c | 5 +-
drivers/bluetooth/hci_bcsp.c | 3 +
drivers/bluetooth/hci_ll.c | 39 ++-
drivers/cpufreq/cpufreq.c | 6 +
drivers/md/dm-crypt.c | 9 +-
drivers/md/raid10.c | 2 +-
drivers/media/platform/vivid/vivid-kthread-cap.c | 8 +-
drivers/media/platform/vivid/vivid-kthread-out.c | 8 +-
drivers/media/platform/vivid/vivid-sdr-cap.c | 8 +-
drivers/media/platform/vivid/vivid-vid-cap.c | 3 -
drivers/media/platform/vivid/vivid-vid-out.c | 3 -
drivers/media/rc/imon.c | 3 +-
drivers/media/rc/mceusb.c | 141 ++++++---
drivers/media/usb/b2c2/flexcop-usb.c | 3 +
drivers/media/usb/dvb-usb/cxusb.c | 3 +-
drivers/media/usb/usbvision/usbvision-video.c | 29 +-
drivers/media/usb/uvc/uvc_driver.c | 28 +-
drivers/net/wireless/ath/ath10k/pci.c | 36 ++-
drivers/net/wireless/ath/ath10k/qmi.c | 13 +-
drivers/net/wireless/ath/ath10k/qmi_wlfw_v01.c | 22 ++
drivers/net/wireless/ath/ath10k/qmi_wlfw_v01.h | 1 +
drivers/net/wireless/ath/ath10k/snoc.c | 11 +
drivers/net/wireless/ath/ath10k/snoc.h | 1 +
drivers/net/wireless/ath/ath10k/usb.c | 8 +
drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 2 +-
drivers/staging/comedi/drivers/usbduxfast.c | 21 +-
drivers/usb/misc/appledisplay.c | 8 +-
drivers/usb/misc/chaoskey.c | 24 +-
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/mos7720.c | 4 -
drivers/usb/serial/mos7840.c | 16 +-
drivers/usb/serial/option.c | 7 +
drivers/usb/usbip/Kconfig | 1 +
drivers/usb/usbip/stub_rx.c | 50 ++--
fs/exec.c | 2 +-
include/linux/compat.h | 2 -
include/linux/futex.h | 40 ++-
include/linux/sched.h | 3 +-
include/linux/sched/mm.h | 6 +-
kernel/exit.c | 30 +-
kernel/fork.c | 40 +--
kernel/futex.c | 324 ++++++++++++++++++---
sound/pci/hda/patch_hdmi.c | 22 --
sound/usb/mixer.c | 3 +
sound/usb/mixer_scarlett_gen2.c | 36 +--
tools/arch/x86/tools/gen-insn-attr-x86.awk | 4 +-
tools/testing/selftests/x86/mov_ss_trap.c | 3 +-
tools/testing/selftests/x86/sigreturn.c | 13 +
tools/usb/usbip/libsrc/usbip_host_common.c | 2 +-
69 files changed, 1091 insertions(+), 473 deletions(-)