[PATCH 4.19 00/92] 4.19.126-rc2 review

From: Greg Kroah-Hartman
Date: Tue Jun 02 2020 - 06:24:49 EST


This is the start of the stable review cycle for the 4.19.126 release.
There are 92 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 04 Jun 2020 10:16:52 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.126-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.19.126-rc2

Liviu Dudau <liviu@xxxxxxxxxxx>
mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build

Qiushi Wu <wu000273@xxxxxxx>
bonding: Fix reference count leak in bond_sysfs_slave_add.

Eric Dumazet <edumazet@xxxxxxxxxx>
crypto: chelsio/chtls: properly set tp->lsndtime

Qiushi Wu <wu000273@xxxxxxx>
qlcnic: fix missing release in qlcnic_83xx_interrupt_test.

BjÃrn TÃpel <bjorn.topel@xxxxxxxxx>
xsk: Add overflow check for u64 division, stored into u32

Michael Chan <michael.chan@xxxxxxxxxxxx>
bnxt_en: Fix accumulation of bp->net_stats_prev.

Xin Long <lucien.xin@xxxxxxxxx>
esp6: get the right proto for transport mode in esp6_gso_encap

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nfnetlink_cthelper: unbreak userspace helper support

Phil Sutter <phil@xxxxxx>
netfilter: ipset: Fix subcounter update skip

Michael Braun <michael-dev@xxxxxxxxxxxxx>
netfilter: nft_reject_bridge: enable reject with bridge vlan

Xin Long <lucien.xin@xxxxxxxxx>
ip_vti: receive ipip packet by calling ip_tunnel_rcv

Jeremy Sowden <jeremy@xxxxxxxxxx>
vti4: eliminated some duplicate code.

Antony Antony <antony@xxxxxxxxxxx>
xfrm: fix error in comment

Xin Long <lucien.xin@xxxxxxxxx>
xfrm: fix a NULL-ptr deref in xfrm_local_error

Xin Long <lucien.xin@xxxxxxxxx>
xfrm: fix a warning in xfrm_policy_insert_list

Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
xfrm interface: fix oops when deleting a x-netns interface

Xin Long <lucien.xin@xxxxxxxxx>
xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output

Xin Long <lucien.xin@xxxxxxxxx>
xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
copy_xstate_to_kernel(): don't leave parts of destination uninitialized

Alexander Dahl <post@xxxxxxxxxxx>
x86/dma: Fix max PFN arithmetic overflow on 32 bit systems

Linus LÃssing <ll@xxxxxxxxxxxxxxxxxx>
mac80211: mesh: fix discovery timer re-arming issue / crash

Jason Gunthorpe <jgg@xxxxxxxx>
RDMA/core: Fix double destruction of uobject

Sarthak Garg <sartgarg@xxxxxxxxxxxxxx>
mmc: core: Fix recursive locking issue in CQE recovery path

Helge Deller <deller@xxxxxx>
parisc: Fix kernel panic in mem_init()

Qiushi Wu <wu000273@xxxxxxx>
iommu: Fix reference count leak in iommu_group_alloc.

Arnd Bergmann <arnd@xxxxxxxx>
include/asm-generic/topology.h: guard cpumask_of_node() macro argument

Alexander Potapenko <glider@xxxxxxxxxx>
fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()

Valentine Fatiev <valentinef@xxxxxxxxxxxx>
IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode

Jerry Lee <leisurelysw24@xxxxxxxxx>
libceph: ignore pool overlay and cache logic on redirects

Kailang Yang <kailang@xxxxxxxxxxx>
ALSA: hda/realtek - Add new codec supported for ALC287

Takashi Iwai <tiwai@xxxxxxx>
ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
exec: Always set cap_ambient in cap_bprm_set_creds

Chris Chiu <chiu@xxxxxxxxxxxx>
ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC

Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround

Changming Liu <liu.changm@xxxxxxxxxxxxxxxx>
ALSA: hwdep: fix a left shifting 1 by 31 UB bug

Qiushi Wu <wu000273@xxxxxxx>
RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe()

Peng Hao <richard.peng@xxxxxxxx>
mmc: block: Fix use-after-free issue for rpmb

Hamish Martin <hamish.martin@xxxxxxxxxxxxxxxxxxx>
ARM: dts: bcm: HR2: Fix PPI interrupt types

Vincent Stehlà <vincent.stehle@xxxxxxxxxxx>
ARM: dts: bcm2835-rpi-zero-w: Fix led polarity

Robert Beckett <bob.beckett@xxxxxxxxxxxxx>
ARM: dts/imx6q-bx50v3: Set display interface clock parents

Kaike Wan <kaike.wan@xxxxxxxxx>
IB/qib: Call kobject_put() when kobject_init_and_add() fails

Takashi Iwai <tiwai@xxxxxxx>
gpio: exar: Fix bad handling for ida_simple_get error path

Russell King <rmk+kernel@xxxxxxxxxxxxxxx>
ARM: uaccess: fix DACR mismatch with nested exceptions

Russell King <rmk+kernel@xxxxxxxxxxxxxxx>
ARM: uaccess: integrate uaccess_save and uaccess_restore

Russell King <rmk+kernel@xxxxxxxxxxxxxxx>
ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h

Stefan Agner <stefan@xxxxxxxx>
ARM: 8843/1: use unified assembler in headers

Åukasz Stelmach <l.stelmach@xxxxxxxxxxx>
ARM: 8970/1: decompressor: increase tag size

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()

Evan Green <evgreen@xxxxxxxxxxxx>
Input: synaptics-rmi4 - really fix attn_data use-after-free

Kevin Locke <kevin@xxxxxxxxxxxxxxx>
Input: i8042 - add ThinkPad S230u to i8042 reset list

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
Input: dlink-dir685-touchkeys - fix a typo in driver name

Åukasz Patron <priv.luk@xxxxxxxxx>
Input: xpad - add custom init packet for Xbox One S controllers

Brendan Shanks <bshanks@xxxxxxxxxxxxxxx>
Input: evdev - call input_flush_device() on release(), not flush()

James Hilliard <james.hilliard1@xxxxxxxxx>
Input: usbtouchscreen - add support for BonXeon TP

Matteo Croce <mcroce@xxxxxxxxxx>
samples: bpf: Fix build error

Steve French <stfrench@xxxxxxxxxxxxx>
cifs: Fix null pointer check in cifs_read

Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
riscv: stacktrace: Fix undefined reference to `walk_stackframe'

Denis V. Lunev <den@xxxxxxxxxx>
IB/i40iw: Remove bogus call to netdev_master_upper_dev_get()

Arnd Bergmann <arnd@xxxxxxxx>
net: freescale: select CONFIG_FIXED_PHY where needed

Masahiro Yamada <masahiroy@xxxxxxxxxx>
usb: gadget: legacy: fix redundant initialization warnings

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
usb: dwc3: pci: Enable extcon driver for Intel Merrifield

Lei Xue <carmark.dlut@xxxxxxxxx>
cachefiles: Fix race between read_waiter and read_copier involving op->to_do

Bob Peterson <rpeterso@xxxxxxxxxx>
gfs2: move privileged user check to gfs2_quota_lock_check

Chuhong Yuan <hslester96@xxxxxxxxx>
net: microchip: encx24j600: add missed kthread_stop

Andrew Oakley <andrew@xxxxxxxxxxxxx>
ALSA: usb-audio: add mapping for ASRock TRX40 Creator

Stephen Warren <swarren@xxxxxxxxxx>
gpio: tegra: mask GPIO IRQs during IRQ shutdown

Johan Jonker <jbx6244@xxxxxxxxx>
ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi

Johan Jonker <jbx6244@xxxxxxxxx>
ARM: dts: rockchip: swap clock-names of gpu nodes

Johan Jonker <jbx6244@xxxxxxxxx>
arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node

Johan Jonker <jbx6244@xxxxxxxxx>
arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts

Johan Jonker <jbx6244@xxxxxxxxx>
ARM: dts: rockchip: fix phy nodename for rk3228-evb

Jiri Pirko <jiri@xxxxxxxxxxxx>
mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails

Qiushi Wu <wu000273@xxxxxxx>
net/mlx4_core: fix a memory leak bug.

Qiushi Wu <wu000273@xxxxxxx>
net: sun: fix missing release regions in cas_init_one().

Roi Dayan <roid@xxxxxxxxxxxx>
net/mlx5: Annotate mutex destroy for root ns

Moshe Shemesh <moshe@xxxxxxxxxxxx>
net/mlx5e: Update netdev txq on completions during closure

Jere LeppÃnen <jere.leppanen@xxxxxxxxx>
sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed

Neil Horman <nhorman@xxxxxxxxxxxxx>
sctp: Don't add the shutdown timer if its already been added

Marc Payne <marc.payne@xxxxxxxxxxxx>
r8152: support additional Microsoft Surface Ethernet Adapter variant

Roman Mashak <mrv@xxxxxxxxxxxx>
net sched: fix reporting the first-time use timestamp

Yuqi Jin <jinyuqi@xxxxxxxxxx>
net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()"

Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxx>
net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()

Moshe Shemesh <moshe@xxxxxxxxxxxx>
net/mlx5: Add command entry handling completion

Vadim Fedorenko <vfedorenko@xxxxxxxx>
net: ipip: fix wrong address family in init error path

Martin KaFai Lau <kafai@xxxxxx>
net: inet_csk: Fix so_reuseport bind-address cache in tb->fast*

Boris Sukholitko <boris.sukholitko@xxxxxxxxxxxx>
__netif_receive_skb_core: pass skb by reference

DENG Qingfang <dqfext@xxxxxxxxx>
net: dsa: mt7530: fix roaming from DSA user ports

Vladimir Oltean <vladimir.oltean@xxxxxxx>
dpaa_eth: fix usage as DSA master, try 3

Eric Dumazet <edumazet@xxxxxxxxxx>
ax25: fix setsockopt(SO_BINDTODEVICE)


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/compressed/vmlinux.lds.S | 2 +-
arch/arm/boot/dts/bcm-hr2.dtsi | 6 +-
arch/arm/boot/dts/bcm2835-rpi-zero-w.dts | 2 +-
arch/arm/boot/dts/imx6q-b450v3.dts | 7 --
arch/arm/boot/dts/imx6q-b650v3.dts | 7 --
arch/arm/boot/dts/imx6q-b850v3.dts | 11 --
arch/arm/boot/dts/imx6q-bx50v3.dtsi | 15 +++
arch/arm/boot/dts/rk3036.dtsi | 2 +-
arch/arm/boot/dts/rk3228-evb.dts | 2 +-
arch/arm/boot/dts/rk322x.dtsi | 6 +-
arch/arm/boot/dts/rk3xxx.dtsi | 2 +-
arch/arm/include/asm/assembler.h | 83 +--------------
arch/arm/include/asm/uaccess-asm.h | 117 +++++++++++++++++++++
arch/arm/include/asm/vfpmacros.h | 8 +-
arch/arm/kernel/entry-armv.S | 11 +-
arch/arm/kernel/entry-header.S | 9 +-
arch/arm/lib/bitops.h | 8 +-
arch/arm64/boot/dts/rockchip/rk3328-evb.dts | 2 +-
arch/arm64/boot/dts/rockchip/rk3399.dtsi | 8 +-
arch/parisc/mm/init.c | 2 +-
arch/riscv/kernel/stacktrace.c | 2 +-
arch/x86/include/asm/dma.h | 2 +-
arch/x86/kernel/fpu/xstate.c | 86 ++++++++-------
drivers/crypto/chelsio/chtls/chtls_io.c | 2 +-
drivers/gpio/gpio-exar.c | 7 +-
drivers/gpio/gpio-tegra.c | 1 +
drivers/infiniband/core/rdma_core.c | 19 ++--
drivers/infiniband/hw/i40iw/i40iw_cm.c | 8 --
drivers/infiniband/hw/qib/qib_sysfs.c | 9 +-
drivers/infiniband/hw/vmw_pvrdma/pvrdma_main.c | 2 +-
drivers/infiniband/ulp/ipoib/ipoib.h | 4 +
drivers/infiniband/ulp/ipoib/ipoib_cm.c | 15 +--
drivers/infiniband/ulp/ipoib/ipoib_ib.c | 9 +-
drivers/infiniband/ulp/ipoib/ipoib_main.c | 10 +-
drivers/input/evdev.c | 19 +---
drivers/input/joystick/xpad.c | 12 +++
drivers/input/keyboard/dlink-dir685-touchkeys.c | 2 +-
drivers/input/rmi4/rmi_driver.c | 5 +-
drivers/input/serio/i8042-x86ia64io.h | 7 ++
drivers/input/touchscreen/usbtouchscreen.c | 1 +
drivers/iommu/iommu.c | 2 +-
drivers/mmc/core/block.c | 2 +-
drivers/mmc/core/queue.c | 13 +--
drivers/net/bonding/bond_sysfs_slave.c | 4 +-
drivers/net/dsa/mt7530.c | 9 +-
drivers/net/dsa/mt7530.h | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 +-
drivers/net/ethernet/freescale/Kconfig | 2 +
drivers/net/ethernet/freescale/dpaa/Kconfig | 1 +
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/fw.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 14 +++
drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 6 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 6 ++
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 14 ++-
drivers/net/ethernet/mellanox/mlxsw/switchx2.c | 8 ++
drivers/net/ethernet/microchip/encx24j600.c | 5 +-
.../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +-
drivers/net/ethernet/sun/cassini.c | 3 +-
drivers/net/usb/cdc_ether.c | 11 +-
drivers/net/usb/r8152.c | 1 +
drivers/usb/dwc3/dwc3-pci.c | 1 +
drivers/usb/gadget/legacy/inode.c | 3 +-
fs/binfmt_elf.c | 2 +-
fs/cachefiles/rdwr.c | 2 +-
fs/cifs/file.c | 2 +-
fs/gfs2/quota.c | 3 +-
fs/gfs2/quota.h | 3 +-
include/asm-generic/topology.h | 2 +-
include/linux/mlx5/driver.h | 1 +
include/linux/mm.h | 15 ++-
include/linux/netfilter/nf_conntrack_pptp.h | 2 +-
include/net/act_api.h | 3 +-
include/rdma/uverbs_std_types.h | 2 +-
include/uapi/linux/xfrm.h | 2 +-
mm/vmalloc.c | 2 +-
net/ax25/af_ax25.c | 6 +-
net/bridge/netfilter/nft_reject_bridge.c | 6 ++
net/ceph/osd_client.c | 4 +-
net/core/dev.c | 20 +++-
net/dsa/tag_mtk.c | 15 +++
net/ipv4/inet_connection_sock.c | 43 ++++----
net/ipv4/ip_vti.c | 75 +++++++------
net/ipv4/ipip.c | 2 +-
net/ipv4/netfilter/nf_nat_pptp.c | 7 +-
net/ipv4/route.c | 14 ++-
net/ipv6/esp6_offload.c | 9 +-
net/mac80211/mesh_hwmp.c | 7 ++
net/netfilter/ipset/ip_set_list_set.c | 2 +-
net/netfilter/nf_conntrack_pptp.c | 62 ++++++-----
net/netfilter/nfnetlink_cthelper.c | 3 +-
net/qrtr/qrtr.c | 2 +-
net/sctp/sm_sideeffect.c | 14 ++-
net/sctp/sm_statefuns.c | 9 +-
net/xdp/xdp_umem.c | 8 +-
net/xfrm/xfrm_input.c | 2 +-
net/xfrm/xfrm_interface.c | 21 ++++
net/xfrm/xfrm_output.c | 15 +--
net/xfrm/xfrm_policy.c | 7 +-
samples/bpf/lwt_len_hist_user.c | 2 -
security/commoncap.c | 1 +
sound/core/hwdep.c | 4 +-
sound/pci/hda/patch_realtek.c | 39 +++++--
sound/usb/mixer.c | 8 ++
sound/usb/mixer_maps.c | 24 +++++
sound/usb/quirks-table.h | 26 +++++
107 files changed, 723 insertions(+), 427 deletions(-)