[PATCH 4.14 00/75] 4.14.249-rc1 review

From: Greg Kroah-Hartman
Date: Mon Oct 04 2021 - 09:03:15 EST


This is the start of the stable review cycle for the 4.14.249 release.
There are 75 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 06 Oct 2021 12:50:17 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.249-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.14.249-rc1

Yanfei Xu <yanfei.xu@xxxxxxxxxxxxx>
net: mdiobus: Fix memory leak in __mdiobus_register

Anirudh Rayabharam <mail@xxxxxxxxxxxxx>
HID: usbhid: free raw_report buffers in usbhid_stop

Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
netfilter: ipset: Fix oversized kvmalloc() calls

F.A.Sulaiman <asha.16@xxxxxxxxxxxxxxx>
HID: betop: fix slab-out-of-bounds Write in betop_probe

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

Dongliang Mu <mudongliangabcd@xxxxxxxxx>
usb: hso: remove the bailout parameter

Dongliang Mu <mudongliangabcd@xxxxxxxxx>
usb: hso: fix error handling code of hso_create_net_device

Oliver Neukum <oneukum@xxxxxxxx>
hso: fix bailout in error case of probe

Suzuki K Poulose <suzuki.poulose@xxxxxxx>
arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55

Alex Sverdlin <alexander.sverdlin@xxxxxxxxx>
ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE

Alex Sverdlin <alexander.sverdlin@xxxxxxxxx>
ARM: 9079/1: ftrace: Add MODULE_PLTS support

Alex Sverdlin <alexander.sverdlin@xxxxxxxxx>
ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()

Alex Sverdlin <alexander.sverdlin@xxxxxxxxx>
ARM: 9077/1: PLT: Move struct plt_entries definition to header

Sai Krishna Potthuri <lakshmi.sai.krishna.potthuri@xxxxxxxxxx>
EDAC/synopsys: Fix wrong value type assignment for edac_mode

Eric Dumazet <edumazet@xxxxxxxxxx>
net: udp: annotate data race around udp_sk(sk)->corkflag

yangerkun <yangerkun@xxxxxxxxxx>
ext4: fix potential infinite loop in ext4_dx_readdir()

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix module reference leak

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix missing allocation-failure check

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix tty-registration error handling

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix tty registration race

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix stack information leak

Eric Dumazet <edumazet@xxxxxxxxxx>
af_unix: fix races in sk_peer_pid and sk_peer_cred accesses

Rahul Lakkireddy <rahul.lakkireddy@xxxxxxxxxxx>
scsi: csiostor: Add module softdep on cxgb4

Jacob Keller <jacob.e.keller@xxxxxxxxx>
e100: fix buffer overrun in e100_get_regs

Jacob Keller <jacob.e.keller@xxxxxxxxx>
e100: fix length calculation in e100_get_regs_len

Paul Fertser <fercerpav@xxxxxxxxx>
hwmon: (tmp421) fix rounding for negative values

Xin Long <lucien.xin@xxxxxxxxx>
sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb

Lorenzo Bianconi <lorenzo@xxxxxxxxxx>
mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap

Chih-Kang Chang <gary.chang@xxxxxxxxxxx>
mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug

Andrea Claudi <aclaudi@xxxxxxxxxx>
ipvs: check that ip_vs_conn_tab_bits is between 8 and 20

Johannes Berg <johannes.berg@xxxxxxxxx>
mac80211: fix use-after-free in CCMP/GCMP RX

James Morse <james.morse@xxxxxxx>
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

Kevin Hao <haokexin@xxxxxxxxx>
cpufreq: schedutil: Use kobject release() method to free sugov_tunables

Igor Matheus Andrade Torrente <igormtorrente@xxxxxxxxx>
tty: Fix out-of-bound vmalloc access in imageblit

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
qnx4: work around gcc false positive warning bug

Juergen Gross <jgross@xxxxxxxx>
xen/balloon: fix balloon kthread freezing

Evan Wang <xswang@xxxxxxxxxxx>
PCI: aardvark: Fix checking for PIO status

Pali Rohár <pali@xxxxxxxxxx>
PCI: aardvark: Fix checking for PIO Non-posted Request

Pali Rohár <pali@xxxxxxxxxx>
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
spi: Fix tegra20 build with CONFIG_PM=n

Guenter Roeck <linux@xxxxxxxxxxxx>
net: 6pack: Fix tx timeout and slot time

Guenter Roeck <linux@xxxxxxxxxxxx>
alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile

Dan Li <ashimida@xxxxxxxxxxxxxxxxx>
arm64: Mark __stack_chk_guard as __ro_after_init

Helge Deller <deller@xxxxxx>
parisc: Use absolute_pointer() to define PAGE0

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
qnx4: avoid stringop-overread errors

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
sparc: avoid stringop-overread errors

Guenter Roeck <linux@xxxxxxxxxxxx>
net: i825xx: Use absolute_pointer for memcpy from fixed memory location

Guenter Roeck <linux@xxxxxxxxxxxx>
compiler.h: Introduce absolute_pointer macro

Juergen Gross <jgross@xxxxxxxx>
xen/balloon: use a kernel thread instead a workqueue

Guenter Roeck <linux@xxxxxxxxxxxx>
m68k: Double cast io functions to unsigned long

Jesper Nilsson <jesper.nilsson@xxxxxxxx>
net: stmmac: allow CSR clock of 300MHz

Tong Zhang <ztong0001@xxxxxxxxx>
net: macb: fix use after free on rmmod

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
blktrace: Fix uaf in blk_trace access after removing by sysfs

Christoph Hellwig <hch@xxxxxx>
md: fix a lock order reversal in md_alloc

Kaige Fu <kaige.fu@xxxxxxxxxxxxxxxxx>
irqchip/gic-v3-its: Fix potential VPE leak on error

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
thermal/core: Potential buffer overflow in thermal_build_list_of_policies()

Baokun Li <libaokun1@xxxxxxxxxx>
scsi: iscsi: Adjust iface sysfs attr detection

Aya Levin <ayal@xxxxxxxxxx>
net/mlx4_en: Don't allow aRFS for encapsulated packets

Michael Chan <michael.chan@xxxxxxxxxxxx>
bnxt_en: Fix TX timeout when TX ring size is set to the smallest

Johan Hovold <johan@xxxxxxxxxx>
net: hso: fix muxed tty registration

Pali Rohár <pali@xxxxxxxxxx>
serial: mvebu-uart: fix driver's tx_empty callback

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
mcb: fix error handling in mcb_alloc_bus()

Slark Xiao <slark_xiao@xxxxxxx>
USB: serial: option: add device id for Foxconn T99W265

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
USB: serial: option: remove duplicate USB device ID

Carlo Lobrano <c.lobrano@xxxxxxxxx>
USB: serial: option: add Telit LN920 compositions

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
USB: serial: mos7840: remove duplicated 0xac24 device ID

Julian Sikorski <belegdol@xxxxxxxxx>
Re-enable UAS for LaCie Rugged USB3-FW with fk quirk

Johan Hovold <johan@xxxxxxxxxx>
staging: greybus: uart: fix tty use after free

Uwe Brandt <uwe.brandt@xxxxxxxxx>
USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter

Ondrej Zary <linux@xxxxxxx>
usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c

Jan Beulich <jbeulich@xxxxxxxx>
xen/x86: fix PV trap handling on secondary processors

Steve French <stfrench@xxxxxxxxxxxxx>
cifs: fix incorrect check for null pointer in header_assemble

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
usb: gadget: r8a66597: fix a loop in set_feature()

Wengang Wang <wen.gang.wang@xxxxxxxxxx>
ocfs2: drop acl cache for directories too


-------------

Diffstat:

Makefile | 4 +-
arch/alpha/include/asm/io.h | 6 +-
arch/arm/include/asm/ftrace.h | 3 +
arch/arm/include/asm/insn.h | 8 +--
arch/arm/include/asm/module.h | 10 ++++
arch/arm/kernel/ftrace.c | 50 ++++++++++++----
arch/arm/kernel/insn.c | 19 ++++---
arch/arm/kernel/module-plts.c | 49 ++++++++++++----
arch/arm64/Kconfig | 2 +-
arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 11 +++-
arch/arm64/kernel/process.c | 2 +-
arch/arm64/mm/proc.S | 4 +-
arch/m68k/include/asm/raw_io.h | 20 +++----
arch/parisc/include/asm/page.h | 2 +-
arch/sparc/kernel/mdesc.c | 3 +-
arch/x86/xen/enlighten_pv.c | 15 +++--
drivers/cpufreq/cpufreq_governor_attr_set.c | 2 +-
drivers/crypto/ccp/ccp-ops.c | 14 +++--
drivers/edac/synopsys_edac.c | 2 +-
drivers/hid/hid-betopff.c | 13 ++++-
drivers/hid/usbhid/hid-core.c | 13 ++++-
drivers/hwmon/tmp421.c | 24 +++-----
drivers/ipack/devices/ipoctal.c | 63 +++++++++++++++------
drivers/irqchip/irq-gic-v3-its.c | 2 +-
drivers/mcb/mcb-core.c | 12 ++--
drivers/md/md.c | 5 --
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 +--
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 5 ++
drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 2 +-
drivers/net/ethernet/cadence/macb_pci.c | 2 +-
drivers/net/ethernet/i825xx/82596.c | 2 +-
drivers/net/ethernet/intel/e100.c | 22 +++++---
drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 3 +
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 2 +-
drivers/net/hamradio/6pack.c | 4 +-
drivers/net/phy/mdio_bus.c | 1 +
drivers/net/usb/hso.c | 45 +++++++++------
drivers/pci/host/pci-aardvark.c | 64 ++++++++++++++++++---
drivers/scsi/csiostor/csio_init.c | 1 +
drivers/scsi/scsi_transport_iscsi.c | 8 +--
drivers/spi/spi-tegra20-slink.c | 4 +-
drivers/staging/greybus/uart.c | 62 ++++++++++----------
drivers/thermal/thermal_core.c | 7 +--
drivers/tty/serial/mvebu-uart.c | 2 +-
drivers/tty/vt/vt.c | 21 ++++++-
drivers/usb/gadget/udc/r8a66597-udc.c | 2 +-
drivers/usb/musb/tusb6010.c | 1 +
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/mos7840.c | 2 -
drivers/usb/serial/option.c | 11 +++-
drivers/usb/storage/unusual_devs.h | 9 ++-
drivers/usb/storage/unusual_uas.h | 2 +-
drivers/xen/balloon.c | 62 ++++++++++++++------
fs/cifs/connect.c | 5 +-
fs/ext4/dir.c | 6 +-
fs/ocfs2/dlmglue.c | 3 +-
fs/qnx4/dir.c | 69 +++++++++++++++++------
include/linux/compiler.h | 2 +
include/net/sock.h | 2 +
kernel/sched/cpufreq_schedutil.c | 16 ++++--
kernel/trace/blktrace.c | 8 +++
net/core/sock.c | 32 +++++++++--
net/ipv4/udp.c | 10 ++--
net/ipv6/udp.c | 2 +-
net/mac80211/tx.c | 12 ++++
net/mac80211/wpa.c | 6 ++
net/netfilter/ipset/ip_set_hash_gen.h | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 4 ++
net/sctp/input.c | 2 +-
net/unix/af_unix.c | 34 +++++++++--
70 files changed, 653 insertions(+), 277 deletions(-)