[PATCH 4.19 000/239] 4.19.226-rc1 review
From: Greg Kroah-Hartman
Date: Mon Jan 24 2022 - 14:41:39 EST
This is the start of the stable review cycle for the 4.19.226 release.
There are 239 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 26 Jan 2022 18:39:11 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.226-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.19.226-rc1
Amir Goldstein <amir73il@xxxxxxxxx>
fuse: fix live lock in fuse_iget()
Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: fix bad inode
Ben Hutchings <ben@xxxxxxxxxxxxxxx>
mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue
Doyle, Patrick <pdoyle@xxxxxxxxxx>
mtd: nand: bbt: Fix corner case in bad block table handling
Miaoqian Lin <linmq006@xxxxxxxxx>
lib82596: Fix IRQ check in sni_82596_probe
Matthias Schiffer <matthias.schiffer@xxxxxxxxxxxxxxx>
scripts/dtc: dtx_diff: remove broken example from help text
Sergey Shtylyov <s.shtylyov@xxxxxx>
bcmgenet: add WOL IRQ check
Kevin Bracey <kevin@xxxxxxxxx>
net_sched: restore "mpu xxx" handling
Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Fix lld view setting
Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Print debug message after realeasing the lock
Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_xdmac: Don't start transactions at tx_submit level
Guillaume Nault <gnault@xxxxxxxxxx>
libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
Eric Dumazet <edumazet@xxxxxxxxxx>
netns: add schedule point in ops_exit_list()
Laurence de Bruxelles <lfdebrux@xxxxxxxxx>
rtc: pxa: fix null pointer dereference
Robert Hancock <robert.hancock@xxxxxxxxxx>
net: axienet: fix number of TX ring slots for available check
Robert Hancock <robert.hancock@xxxxxxxxxx>
net: axienet: Wait for PhyRstCmplt after core reset
Eric Dumazet <edumazet@xxxxxxxxxx>
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
Miaoqian Lin <linmq006@xxxxxxxxx>
parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
Tobias Waldekranz <tobias@xxxxxxxxxxxxxx>
net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
Tobias Waldekranz <tobias@xxxxxxxxxxxxxx>
powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
Anders Roxell <anders.roxell@xxxxxxxxxx>
powerpc/cell: Fix clang -Wimplicit-fallthrough warning
Amelie Delaunay <amelie.delaunay@xxxxxxxxxxx>
dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
Chengguang Xu <cgxu519@xxxxxxxxxxxx>
RDMA/rxe: Fix a typo in opcode name
Yixing Liu <liuyixing1@xxxxxxxxxx>
RDMA/hns: Modify the mapping attribute of doorbell to device
Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization
Suresh Udipi <sudipi@xxxxxxxxxxxxxx>
media: rcar-csi2: Optimize the selection PHTW register
Ben Hutchings <ben@xxxxxxxxxxxxxxx>
firmware: Update Kconfig help text for Google firmware
Tony Lindgren <tony@xxxxxxxxxxx>
ARM: dts: Fix vcsi regulator to be always-on for droid4 to prevent hangs
Christian König <christian.koenig@xxxxxxx>
drm/radeon: fix error handling in radeon_driver_open_kms
Pascal Paillet <p.paillet@xxxxxx>
regulator: core: Let boot-on regulators be powered off
KaiChieh Chuang <kaichieh.chuang@xxxxxxxxxxxx>
ASoC: dpcm: prevent snd_soc_dpcm use after free
Marek Vasut <marex@xxxxxxx>
crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
Theodore Ts'o <tytso@xxxxxxx>
ext4: don't use the orphan list when migrating an inode
Ye Bin <yebin10@xxxxxxxxxx>
ext4: Fix BUG_ON in ext4_bread when write quota data
Luís Henriques <lhenriques@xxxxxxx>
ext4: set csum seed in tmp inode while migrating to extents
Jan Kara <jack@xxxxxxx>
ext4: make sure quota gets properly shutdown on error
Jan Kara <jack@xxxxxxx>
ext4: make sure to reset inode lockdep class when quota enabling fails
Lucas Stach <l.stach@xxxxxxxxxxxxxx>
drm/etnaviv: limit submit sizes
Alexander Gordeev <agordeev@xxxxxxxxxxxxx>
s390/mm: fix 2KB pgtable release race
Ilan Peer <ilan.peer@xxxxxxxxx>
iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
Andrey Ryabinin <arbn@xxxxxxxxxxxxxxx>
cputime, cpuacct: Include guest time in user time in cpuacct.stat
Lukas Wunner <lukas@xxxxxxxxx>
serial: Fix incorrect rs485 polarity on uart open
Petr Cvachoucek <cvachoucek@xxxxxxxxx>
ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
Arnaud Pouliquen <arnaud.pouliquen@xxxxxxxxxxx>
rpmsg: core: Clean up resources on announce_create failure.
Yauhen Kharuzhy <jekhor@xxxxxxxxx>
power: bq25890: Enable continuous conversion for ADC at charging
Tzung-Bi Shih <tzungbi@xxxxxxxxxx>
ASoC: mediatek: mt8173: fix device_node leak
Christoph Hellwig <hch@xxxxxx>
scsi: sr: Don't use GFP_DMA
Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
MIPS: Octeon: Fix build errors using clang
Lakshmi Sowjanya D <lakshmi.sowjanya.d@xxxxxxxxx>
i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
Ye Guojin <ye.guojin@xxxxxxxxxx>
MIPS: OCTEON: add put_device() after of_find_device_by_node()
Hari Bathini <hbathini@xxxxxxxxxxxxx>
powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Set upper limit of processed events
Christophe Leroy <christophe.leroy@xxxxxxxxxx>
w1: Misuse of get_user()/put_user() reported by sparse
Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx>
i2c: mpc: Correct I2C reset procedure
Michael Ellerman <mpe@xxxxxxxxxxxxxx>
powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
Heiner Kallweit <hkallweit1@xxxxxxxxx>
i2c: i801: Don't silently correct invalid transfer size
Nicholas Piggin <npiggin@xxxxxxxxx>
powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/btext: add missing of_node_put
Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/cell: add missing of_node_put
Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/powernv: add missing of_node_put
Julia Lawall <Julia.Lawall@xxxxxxx>
powerpc/6xx: add missing of_node_put
John David Anglin <dave.anglin@xxxxxxxx>
parisc: Avoid calling faulthandler_disabled() twice
Lukas Wunner <lukas@xxxxxxxxx>
serial: core: Keep mctrl register state and cached copy in sync
Lukas Wunner <lukas@xxxxxxxxx>
serial: pl010: Drop CR register reset on set_termios
Konrad Dybcio <konrad.dybcio@xxxxxxxxxxxxxx>
regulator: qcom_smd: Align probe function with rpmh-regulator
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: gemini: allow any RGMII interface mode
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: phy: marvell: configure RGMII delays for 88E1118
Joe Thornber <ejt@xxxxxxxxxx>
dm space map common: add bounds check to sm_ll_lookup_bitmap()
Joe Thornber <ejt@xxxxxxxxxx>
dm btree: add a defensive bounds check to insert_at()
Ping-Ke Shih <pkshih@xxxxxxxxxxx>
mac80211: allow non-standard VHT MCS-10/11
Florian Fainelli <f.fainelli@xxxxxxxxx>
net: mdio: Demote probed message to debug print
Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: remove BUG_ON(!eie) in find_parent_nodes
Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: remove BUG_ON() in find_parent_nodes()
Thomas Weißschuh <linux@xxxxxxxxxxxxxx>
ACPI: battery: Add the ThinkPad "Not Charging" quirk
Zongmin Zhou <zhouzongmin@xxxxxxxxxx>
drm/amdgpu: fixup bad vram size on gmc v8
Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPICA: Utilities: Avoid deleting the same object twice in a row
Mark Langsdorf <mlangsdo@xxxxxxxxxx>
ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
Kyeong Yoo <kyeong.yoo@xxxxxxxxxxxxxxxxxxx>
jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
um: registers: Rename function names to avoid conflicts and build problems
Ilan Peer <ilan.peer@xxxxxxxxx>
iwlwifi: mvm: Fix calculation of frame length
Johannes Berg <johannes.berg@xxxxxxxxx>
iwlwifi: remove module loading failure message
Johannes Berg <johannes.berg@xxxxxxxxx>
iwlwifi: fix leaks/bad data after failed firmware load
Zekun Shen <bruceshenzk@xxxxxxxxx>
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
Thierry Reding <treding@xxxxxxxxxx>
arm64: tegra: Adjust length of CCPLEX cluster MMIO region
Paul Moore <paul@xxxxxxxxxxxxxx>
audit: ensure userspace is penalized the same as the kernel when under pressure
Ulf Hansson <ulf.hansson@xxxxxxxxxx>
mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
Zhou Qingyang <zhou1615@xxxxxxx>
media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()
Sean Young <sean@xxxxxxxx>
media: igorplugusb: receiver overflow should be reported
Alistair Francis <alistair@xxxxxxxxxxxxx>
HID: quirks: Allow inverting the absolute X/Y values
Paolo Abeni <pabeni@xxxxxxxxxx>
bpf: Do not WARN in bpf_warn_invalid_xdp_action()
Suresh Kumar <surkumar@xxxxxxxxxx>
net: bonding: debug: avoid printing debug logs when bond is not notifying peers
Borislav Petkov <bp@xxxxxxx>
x86/mce: Mark mce_read_aux() noinstr
Borislav Petkov <bp@xxxxxxx>
x86/mce: Mark mce_end() noinstr
Borislav Petkov <bp@xxxxxxx>
x86/mce: Mark mce_panic() noinstr
Antoine Tenart <atenart@xxxxxxxxxx>
net-sysfs: update the queue counts in the unregistration path
Sebastian Gottschall <s.gottschall@xxxxxxxxxx>
ath10k: Fix tx hanging
Johannes Berg <johannes.berg@xxxxxxxxx>
iwlwifi: mvm: synchronize with FW after multicast commands
Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx>
media: m920x: don't use stack on USB reads
Zhou Qingyang <zhou1615@xxxxxxx>
media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach()
James Hilliard <james.hilliard1@xxxxxxxxx>
media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
Xiongwei Song <sxwjean@xxxxxxxxx>
floppy: Add max size check for user space request
Neal Liu <neal_liu@xxxxxxxxxxxxxx>
usb: uhci: add aspeed ast2600 uhci support
Zekun Shen <bruceshenzk@xxxxxxxxx>
rsi: Fix out-of-bounds read in rsi_read_pkt()
Zekun Shen <bruceshenzk@xxxxxxxxx>
mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx>
HSI: core: Fix return freed object in hsi_new_client
Hans de Goede <hdegoede@xxxxxxxxxx>
gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
Martyn Welch <martyn.welch@xxxxxxxxxxxxx>
drm/bridge: megachips: Ensure both bridges are probed before registration
Danielle Ratson <danieller@xxxxxxxxxx>
mlxsw: pci: Add shutdown method in PCI driver
Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
Zheyu Ma <zheyuma97@xxxxxxxxx>
media: b2c2: Add missing check in flexcop_pci_isr:
José Expósito <jose.exposito89@xxxxxxxxx>
HID: apple: Do not reset quirks when the Fn key is not found
Pavankumar Kondeti <quic_pkondeti@xxxxxxxxxxx>
usb: gadget: f_fs: Use stream_open() for endpoint files
Ben Skeggs <bskeggs@xxxxxxxxxx>
drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
Zekun Shen <bruceshenzk@xxxxxxxxx>
ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
Alexander Aring <aahringo@xxxxxxxxxx>
fs: dlm: filter user dlm messages for kernel locks
Wei Yongjun <weiyongjun1@xxxxxxxxxx>
Bluetooth: Fix debugfs entry leak in hci_register_dev()
Kamal Heib <kamalheib1@xxxxxxxxx>
RDMA/cxgb4: Set queue pair state when being queried
Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
mips: bcm63xx: add support for clk_set_parent()
Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
mips: lantiq: add support for clk_set_parent()
Wei Yongjun <weiyongjun1@xxxxxxxxxx>
misc: lattice-ecp3-config: Fix task hung when firmware load failed
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
ASoC: samsung: idma: Check of ioremap return value
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
ASoC: mediatek: Check for error clk pointer
Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx>
iommu/iova: Fix race between FQ timeout and teardown
Arnd Bergmann <arnd@xxxxxxxx>
dmaengine: pxa/mmp: stop referencing config->slave_id
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
ASoC: rt5663: Handle device_property_read_u32_array error codes
Avihai Horon <avihaih@xxxxxxxxxx>
RDMA/core: Let ib_find_gid() continue search even after empty entry
Bart Van Assche <bvanassche@xxxxxxx>
scsi: ufs: Fix race conditions related to driver data
Hector Martin <marcan@xxxxxxxxx>
iommu/io-pgtable-arm: Fix table descriptor paddr formatting
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
uio: uio_dmem_genirq: Catch the Exception
Kees Cook <keescook@xxxxxxxxxxxx>
char/mwave: Adjust io port register size
Bixuan Cui <cuibixuan@xxxxxxxxxxxxxxxxx>
ALSA: oss: fix compile error when OSS_DEBUG is enabled
Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
Peiwei Hu <jlu.hpw@xxxxxxxxxxx>
powerpc/prom_init: Fix improper check of prom_getprop()
Kamal Heib <kamalheib1@xxxxxxxxx>
RDMA/hns: Validate the pkey index
Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
Takashi Iwai <tiwai@xxxxxxx>
ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
Takashi Iwai <tiwai@xxxxxxx>
ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
Jan Kara <jack@xxxxxxx>
ext4: avoid trim error on fs with small groups
Pavel Skripkin <paskripkin@xxxxxxxxx>
net: mcs7830: handle usb read errors properly
Dominik Brodowski <linux@xxxxxxxxxxxxxxxxxxxx>
pcmcia: fix setting of kthread task states
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
can: xilinx_can: xcan_probe(): check for error irq
Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: softing: softing_startstop(): fix set but not used variable warning
Chen Jun <chenjun102@xxxxxxxxxx>
tpm: add request_locality before write TPM_INT_ENABLE
Miaoqian Lin <linmq006@xxxxxxxxx>
spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
Bluetooth: hci_bcm: Check for error irq
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
fsl/fman: Check for null pointer after calling devm_ioremap
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
staging: greybus: audio: Check null pointer
Eric Dumazet <edumazet@xxxxxxxxxx>
ppp: ensure minimum packet size in ppp_write()
Xin Xiong <xiongx18@xxxxxxxxxxxx>
netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
Zhou Qingyang <zhou1615@xxxxxxx>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region()
Zhou Qingyang <zhou1615@xxxxxxx>
pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region()
Zhang Zixun <zhang133010@xxxxxxxxxx>
x86/mce/inject: Avoid out-of-bounds write when setting flags
Sergey Shtylyov <s.shtylyov@xxxxxx>
mmc: meson-mx-sdio: add IRQ check
Marek Behún <kabel@xxxxxxxxxx>
ARM: dts: armada-38x: Add generic compatible to UART nodes
Wei Yongjun <weiyongjun1@xxxxxxxxxx>
usb: ftdi-elan: fix memory leak on device disconnect
Antony Antony <antony.antony@xxxxxxxxxxx>
xfrm: state and policy should fail if XFRMA_IF_ID 0
Antony Antony <antony.antony@xxxxxxxxxxx>
xfrm: interface with if_id 0 should return error
Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx>
drm/msm/dpu: fix safe status debugfs file
Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
Wang Hai <wanghai38@xxxxxxxxxx>
media: msi001: fix possible null-ptr-deref in msi001_probe()
Anton Vasilyev <vasilyev@xxxxxxxxx>
media: dw2102: Fix use after free
Nicolas Toromanoff <nicolas.toromanoff@xxxxxxxxxxx>
crypto: stm32/cryp - fix double pm exit
Eric Dumazet <edumazet@xxxxxxxxxx>
xfrm: fix a small bug in xfrm_sa_len()
Li Hua <hucool.lihua@xxxxxxxxxx>
sched/rt: Try to restart rt period timer when rt runtime exceeded
Robert Schlabbach <robert_s@xxxxxxx>
media: si2157: Fix "warm" tuner state detection
Zhou Qingyang <zhou1615@xxxxxxx>
media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
Zhou Qingyang <zhou1615@xxxxxxx>
media: dib8000: Fix a memleak in dib8000_init()
Tasos Sahanidis <tasos@xxxxxxxxxxxx>
floppy: Fix hang in watchdog when disk is ejected
Lino Sanfilippo <LinoSanfilippo@xxxxxx>
serial: amba-pl011: do not request memory region twice
Lizhi Hou <lizhi.hou@xxxxxxxxxx>
tty: serial: uartlite: allow 64 bit address
Zhou Qingyang <zhou1615@xxxxxxx>
drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms()
Zhou Qingyang <zhou1615@xxxxxxx>
drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode()
Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx>
arm64: dts: qcom: msm8916: fix MMC controller aliases
Florian Westphal <fw@xxxxxxxxx>
netfilter: bridge: add support for pppoe filtering
Dafna Hirschfeld <dafna.hirschfeld@xxxxxxxxxxxxx>
media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
Yang Yingliang <yangyingliang@xxxxxxxxxx>
media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
Suresh Udipi <sudipi@xxxxxxxxxxxxxx>
media: rcar-csi2: Correct the selection of hsfreqrange
Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
tty: serial: atmel: Call dma_async_issue_pending()
Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
tty: serial: atmel: Check return code of dmaengine_submit()
Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx>
crypto: qce - fix uaf on qce_ahash_register_one
Wang Hai <wanghai38@xxxxxxxxxx>
media: dmxdev: fix UAF when dvb_register_device() fails
Jens Wiklander <jens.wiklander@xxxxxxxxxx>
tee: fix put order in teedev_close_context()
Pavel Skripkin <paskripkin@xxxxxxxxx>
Bluetooth: stop proccessing malicious adv data
Christian Hewitt <christianshewitt@xxxxxxxxx>
arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
Dongliang Mu <mudongliangabcd@xxxxxxxxx>
media: em28xx: fix memory leak in em28xx_init_dev
Dillon Min <dillon.minfei@xxxxxxxxx>
media: videobuf2: Fix the size printk format
Bryan O'Donoghue <bryan.odonoghue@xxxxxxxxxx>
wcn36xx: Release DMA channel descriptor allocations
Bryan O'Donoghue <bryan.odonoghue@xxxxxxxxxx>
wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
Maxime Ripard <maxime@xxxxxxxxxx>
clk: bcm-2835: Remove rounding up the dividers
Maxime Ripard <maxime@xxxxxxxxxx>
clk: bcm-2835: Pick the closest clock rate
Wang Hai <wanghai38@xxxxxxxxxx>
Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
Brian Norris <briannorris@xxxxxxxxxxxx>
drm/panel: innolux-p079zca: Delete panel on attach() failure
Gang Li <ligang.bdlg@xxxxxxxxxxxxx>
shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
Yifeng Li <tomli@xxxxxxxx>
PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
Christophe Leroy <christophe.leroy@xxxxxxxxxx>
lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
Johan Hovold <johan@xxxxxxxxxx>
can: softing_cs: softingcs_probe(): fix memleak on registration failure
Johan Hovold <johan@xxxxxxxxxx>
media: stk1160: fix control-message timeouts
Johan Hovold <johan@xxxxxxxxxx>
media: pvrusb2: fix control-message timeouts
Johan Hovold <johan@xxxxxxxxxx>
media: redrat3: fix control-message timeouts
Michael Kuron <michael.kuron@xxxxxxxxx>
media: dib0700: fix undefined behavior in tuner shutdown
Johan Hovold <johan@xxxxxxxxxx>
media: s2255: fix control-message timeouts
Johan Hovold <johan@xxxxxxxxxx>
media: cpia2: fix control-message timeouts
Johan Hovold <johan@xxxxxxxxxx>
media: em28xx: fix control-message timeouts
Johan Hovold <johan@xxxxxxxxxx>
media: mceusb: fix control-message timeouts
Johan Hovold <johan@xxxxxxxxxx>
media: flexcop-usb: fix control-message timeouts
Mateusz Jończyk <mat.jonczyk@xxxxx>
rtc: cmos: take rtc_lock while reading from CMOS
Lucas De Marchi <lucas.demarchi@xxxxxxxxx>
x86/gpu: Reserve stolen memory for first integrated Intel GPU
Stefan Riedmueller <s.riedmueller@xxxxxxxxx>
mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
Chao Yu <chao@xxxxxxxxxx>
f2fs: fix to do sanity check in is_alive()
Jason Gerecke <killertofu@xxxxxxxxx>
HID: wacom: Avoid using stale array indicies to read contact count
Jason Gerecke <killertofu@xxxxxxxxx>
HID: wacom: Ignore the confidence flag when a touch is removed
Jason Gerecke <killertofu@xxxxxxxxx>
HID: wacom: Reset expected and received contact counts at the same time
Jann Horn <jannh@xxxxxxxxxx>
HID: uhid: Fix worker destroying device without any protection
Christian Lachner <gladiac@xxxxxxxxx>
ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows
Johan Hovold <johan@xxxxxxxxxx>
firmware: qemu_fw_cfg: fix kobject leak in probe error path
Johan Hovold <johan@xxxxxxxxxx>
firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
Johan Hovold <johan@xxxxxxxxxx>
firmware: qemu_fw_cfg: fix sysfs information leak
Larry Finger <Larry.Finger@xxxxxxxxxxxx>
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
Johan Hovold <johan@xxxxxxxxxx>
media: uvcvideo: fix division by zero at stream start
Eric Farman <farman@xxxxxxxxxxxxx>
KVM: s390: Clarify SIGP orders versus STOP/RESTART
Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
Nathan Chancellor <nathan@xxxxxxxxxx>
kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test
Nathan Chancellor <nathan@xxxxxxxxxx>
drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
Nathan Chancellor <nathan@xxxxxxxxxx>
staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn()
Eric Biggers <ebiggers@xxxxxxxxxx>
random: fix data race on crng init time
Eric Biggers <ebiggers@xxxxxxxxxx>
random: fix data race on crng_node_pool
Brian Silverman <brian.silverman@xxxxxxxxxxxxxxxxx>
can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data
Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
Daniel Borkmann <daniel@xxxxxxxxxxxxx>
veth: Do not record rx queue hint in veth_xmit
Thomas Gleixner <tglx@xxxxxxxxxxxxx>
can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: core: Fix bug in resuming hub's handling of wakeup requests
Johan Hovold <johan@xxxxxxxxxx>
Bluetooth: bfusb: fix division by zero in send path
-------------
Diffstat:
Documentation/admin-guide/hw-vuln/spectre.rst | 2 +-
Makefile | 6 +-
arch/arm/Kconfig.debug | 14 +-
arch/arm/boot/dts/armada-38x.dtsi | 4 +-
arch/arm/boot/dts/motorola-cpcap-mapphone.dtsi | 4 +-
arch/arm/include/debug/imx-uart.h | 18 +-
arch/arm64/boot/dts/amlogic/meson-gxbb-wetek.dtsi | 1 +
arch/arm64/boot/dts/nvidia/tegra186.dtsi | 2 +-
arch/arm64/boot/dts/qcom/msm8916.dtsi | 4 +-
arch/mips/bcm63xx/clk.c | 6 +
arch/mips/cavium-octeon/octeon-platform.c | 2 +
arch/mips/cavium-octeon/octeon-usb.c | 1 +
arch/mips/include/asm/octeon/cvmx-bootinfo.h | 4 +-
arch/mips/lantiq/clk.c | 6 +
arch/mips/mm/gup.c | 9 +-
arch/parisc/kernel/traps.c | 2 +-
arch/powerpc/boot/dts/fsl/qoriq-fman3l-0.dtsi | 2 +
arch/powerpc/kernel/btext.c | 4 +-
arch/powerpc/kernel/prom_init.c | 2 +-
arch/powerpc/kernel/smp.c | 32 ++
arch/powerpc/kernel/watchdog.c | 41 ++-
arch/powerpc/platforms/cell/iommu.c | 1 +
arch/powerpc/platforms/cell/pervasive.c | 1 +
arch/powerpc/platforms/embedded6xx/hlwd-pic.c | 1 +
arch/powerpc/platforms/powernv/opal-lpc.c | 1 +
arch/s390/kvm/interrupt.c | 7 +
arch/s390/kvm/kvm-s390.c | 9 +-
arch/s390/kvm/kvm-s390.h | 1 +
arch/s390/kvm/sigp.c | 28 ++
arch/s390/mm/gup.c | 9 +-
arch/s390/mm/pgalloc.c | 4 +-
arch/sh/mm/gup.c | 9 +-
arch/sparc/mm/gup.c | 9 +-
arch/um/include/shared/registers.h | 4 +-
arch/um/os-Linux/registers.c | 4 +-
arch/um/os-Linux/start_up.c | 2 +-
arch/x86/kernel/cpu/mcheck/mce-inject.c | 2 +-
arch/x86/kernel/cpu/mcheck/mce.c | 31 +-
arch/x86/kernel/early-quirks.c | 10 +-
arch/x86/um/syscalls_64.c | 3 +-
drivers/acpi/acpica/exoparg1.c | 3 +-
drivers/acpi/acpica/hwesleep.c | 4 +-
drivers/acpi/acpica/hwsleep.c | 4 +-
drivers/acpi/acpica/hwxfsleep.c | 2 -
drivers/acpi/acpica/utdelete.c | 1 +
drivers/acpi/battery.c | 22 ++
drivers/block/floppy.c | 6 +-
drivers/bluetooth/bfusb.c | 3 +
drivers/bluetooth/hci_bcm.c | 7 +-
drivers/char/mwave/3780i.h | 2 +-
drivers/char/random.c | 61 ++--
drivers/char/tpm/tpm_tis_core.c | 8 +
drivers/clk/bcm/clk-bcm2835.c | 13 +-
drivers/crypto/qce/sha.c | 2 +-
drivers/crypto/stm32/stm32-cryp.c | 2 -
drivers/crypto/stm32/stm32_crc32.c | 4 +-
drivers/dma/at_xdmac.c | 32 +-
drivers/dma/mmp_pdma.c | 6 -
drivers/dma/pxa_dma.c | 7 -
drivers/dma/stm32-mdma.c | 2 +-
drivers/firmware/google/Kconfig | 6 +-
drivers/firmware/qemu_fw_cfg.c | 20 +-
drivers/gpio/gpiolib-acpi.c | 15 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 6 +
drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c | 13 +-
.../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 40 ++-
drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c | 6 +
drivers/gpu/drm/i915/intel_pm.c | 6 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 4 +-
drivers/gpu/drm/nouveau/nvkm/subdev/pmu/base.c | 37 ++-
drivers/gpu/drm/panel/panel-innolux-p079zca.c | 10 +-
drivers/gpu/drm/radeon/radeon_kms.c | 42 +--
drivers/hid/hid-apple.c | 2 +-
drivers/hid/hid-input.c | 6 +
drivers/hid/uhid.c | 29 +-
drivers/hid/wacom_wac.c | 39 ++-
drivers/hsi/hsi_core.c | 1 +
drivers/i2c/busses/i2c-designware-pcidrv.c | 8 +-
drivers/i2c/busses/i2c-i801.c | 15 +-
drivers/i2c/busses/i2c-mpc.c | 23 +-
drivers/infiniband/core/device.c | 3 +-
drivers/infiniband/hw/cxgb4/qp.c | 1 +
drivers/infiniband/hw/hns/hns_roce_main.c | 5 +-
drivers/infiniband/sw/rxe/rxe_opcode.c | 2 +-
drivers/iommu/io-pgtable-arm.c | 9 +-
drivers/iommu/iova.c | 3 +-
drivers/md/persistent-data/dm-btree.c | 8 +-
drivers/md/persistent-data/dm-space-map-common.c | 5 +
drivers/media/common/saa7146/saa7146_fops.c | 2 +-
.../media/common/videobuf2/videobuf2-dma-contig.c | 8 +-
drivers/media/dvb-core/dmxdev.c | 18 +-
drivers/media/dvb-frontends/dib8000.c | 4 +-
drivers/media/pci/b2c2/flexcop-pci.c | 3 +
drivers/media/pci/saa7146/hexium_gemini.c | 7 +-
drivers/media/pci/saa7146/hexium_orion.c | 8 +-
drivers/media/pci/saa7146/mxb.c | 8 +-
drivers/media/platform/coda/imx-vdoa.c | 6 +-
.../media/platform/mtk-vcodec/mtk_vcodec_enc_drv.c | 2 +-
drivers/media/platform/rcar-vin/rcar-csi2.c | 18 +-
drivers/media/radio/si470x/radio-si470x-i2c.c | 3 +-
drivers/media/rc/igorplugusb.c | 4 +-
drivers/media/rc/mceusb.c | 8 +-
drivers/media/rc/redrat3.c | 22 +-
drivers/media/tuners/msi001.c | 7 +
drivers/media/tuners/si2157.c | 2 +-
drivers/media/usb/b2c2/flexcop-usb.c | 10 +-
drivers/media/usb/b2c2/flexcop-usb.h | 12 +-
drivers/media/usb/cpia2/cpia2_usb.c | 4 +-
drivers/media/usb/dvb-usb/dib0700_core.c | 2 -
drivers/media/usb/dvb-usb/dw2102.c | 338 +++++++++++++--------
drivers/media/usb/dvb-usb/m920x.c | 12 +-
drivers/media/usb/em28xx/em28xx-cards.c | 18 +-
drivers/media/usb/em28xx/em28xx-core.c | 4 +-
drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 8 +-
drivers/media/usb/s2255/s2255drv.c | 4 +-
drivers/media/usb/stk1160/stk1160-core.c | 4 +-
drivers/media/usb/uvc/uvc_video.c | 4 +
drivers/media/usb/uvc/uvcvideo.h | 2 +-
drivers/mfd/intel-lpss-acpi.c | 7 +-
drivers/misc/lattice-ecp3-config.c | 12 +-
drivers/misc/lkdtm/Makefile | 2 +-
drivers/mmc/core/sdio.c | 4 +-
drivers/mmc/host/meson-mx-sdio.c | 5 +
drivers/mtd/nand/bbt.c | 2 +-
drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c | 9 -
drivers/net/bonding/bond_main.c | 6 +-
drivers/net/can/softing/softing_cs.c | 2 +-
drivers/net/can/softing/softing_fw.c | 11 +-
drivers/net/can/usb/gs_usb.c | 5 +-
drivers/net/can/xilinx_can.c | 7 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10 +-
drivers/net/ethernet/chelsio/libcxgb/libcxgb_cm.c | 3 +-
drivers/net/ethernet/cortina/gemini.c | 9 +-
drivers/net/ethernet/freescale/fman/mac.c | 21 +-
drivers/net/ethernet/freescale/xgmac_mdio.c | 3 +-
drivers/net/ethernet/i825xx/sni_82596.c | 3 +-
drivers/net/ethernet/mellanox/mlxsw/pci.c | 1 +
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 14 +-
drivers/net/phy/marvell.c | 6 +
drivers/net/phy/mdio_bus.c | 2 +-
drivers/net/ppp/ppp_generic.c | 7 +-
drivers/net/usb/mcs7830.c | 12 +-
drivers/net/veth.c | 1 -
drivers/net/wireless/ath/ar5523/ar5523.c | 4 +
drivers/net/wireless/ath/ath10k/htt_tx.c | 3 +
drivers/net/wireless/ath/ath10k/txrx.c | 2 -
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +
drivers/net/wireless/ath/wcn36xx/dxe.c | 5 +
drivers/net/wireless/ath/wcn36xx/smd.c | 4 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 17 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 17 ++
drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c | 27 ++
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/marvell/mwifiex/usb.c | 3 +-
.../net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1 +
drivers/net/wireless/rsi/rsi_91x_main.c | 4 +
drivers/net/wireless/rsi/rsi_91x_usb.c | 1 -
drivers/net/wireless/rsi/rsi_usb.h | 2 +
drivers/parisc/pdc_stable.c | 4 +-
drivers/pci/quirks.c | 3 +
drivers/pcmcia/cs.c | 8 +-
drivers/pcmcia/rsrc_nonstatic.c | 6 +
drivers/power/supply/bq25890_charger.c | 4 +-
drivers/regulator/core.c | 4 +-
drivers/regulator/qcom_smd-regulator.c | 100 ++++--
drivers/rpmsg/rpmsg_core.c | 20 +-
drivers/rtc/rtc-cmos.c | 3 +
drivers/rtc/rtc-pxa.c | 4 +
drivers/scsi/sr.c | 2 +-
drivers/scsi/sr_vendor.c | 4 +-
drivers/scsi/ufs/tc-dwc-g210-pci.c | 1 -
drivers/scsi/ufs/ufshcd-pltfrm.c | 2 -
drivers/scsi/ufs/ufshcd.c | 7 +
drivers/soc/mediatek/mtk-scpsys.c | 15 +-
drivers/spi/spi-meson-spifc.c | 1 +
drivers/staging/greybus/audio_topology.c | 15 +
drivers/staging/wlan-ng/hfa384x_usb.c | 22 +-
drivers/tee/tee_core.c | 4 +-
drivers/tty/serial/amba-pl010.c | 3 -
drivers/tty/serial/amba-pl011.c | 27 +-
drivers/tty/serial/atmel_serial.c | 14 +
drivers/tty/serial/serial_core.c | 7 +-
drivers/tty/serial/uartlite.c | 2 +-
drivers/uio/uio_dmem_genirq.c | 6 +-
drivers/usb/core/hcd.c | 9 +-
drivers/usb/core/hub.c | 7 +-
drivers/usb/gadget/function/f_fs.c | 4 +-
drivers/usb/host/uhci-platform.c | 3 +-
drivers/usb/misc/ftdi-elan.c | 1 +
drivers/w1/slaves/w1_ds28e04.c | 26 +-
fs/btrfs/backref.c | 21 +-
fs/dlm/lock.c | 9 +
fs/ext4/ioctl.c | 2 -
fs/ext4/mballoc.c | 8 +
fs/ext4/migrate.c | 23 +-
fs/ext4/super.c | 25 +-
fs/f2fs/gc.c | 3 +
fs/fuse/acl.c | 6 +
fs/fuse/dir.c | 40 ++-
fs/fuse/file.c | 27 +-
fs/fuse/fuse_i.h | 13 +
fs/fuse/inode.c | 2 +-
fs/fuse/xattr.c | 9 +
fs/jffs2/file.c | 40 ++-
fs/orangefs/orangefs-bufmap.c | 7 +-
fs/ubifs/super.c | 1 -
include/acpi/actypes.h | 10 +-
include/linux/hid.h | 2 +
include/net/sch_generic.h | 5 +
include/sound/soc.h | 2 +
kernel/audit.c | 18 +-
kernel/sched/cputime.c | 4 +-
kernel/sched/rt.c | 23 +-
mm/shmem.c | 37 ++-
net/bluetooth/cmtp/core.c | 4 +-
net/bluetooth/hci_core.c | 1 +
net/bluetooth/hci_event.c | 8 +-
net/bridge/br_netfilter_hooks.c | 7 +-
net/can/bcm.c | 156 ++++------
net/core/filter.c | 6 +-
net/core/net-sysfs.c | 3 +
net/core/net_namespace.c | 4 +-
net/ipv4/netfilter/ipt_CLUSTERIP.c | 5 +-
net/mac80211/rx.c | 2 +-
net/nfc/llcp_sock.c | 5 +
net/sched/sch_generic.c | 1 +
net/unix/garbage.c | 14 +-
net/unix/scm.c | 6 +-
net/xfrm/xfrm_interface.c | 14 +-
net/xfrm/xfrm_user.c | 23 +-
scripts/dtc/dtx_diff | 8 +-
sound/core/jack.c | 3 +
sound/core/oss/pcm_oss.c | 2 +-
sound/core/pcm.c | 6 +-
sound/core/seq/seq_queue.c | 14 +-
sound/pci/hda/hda_codec.c | 3 +
sound/pci/hda/patch_realtek.c | 30 +-
sound/soc/codecs/rt5663.c | 12 +-
sound/soc/mediatek/mt8173/mt8173-max98090.c | 3 +
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5514.c | 2 +
sound/soc/mediatek/mt8173/mt8173-rt5650-rt5676.c | 2 +
sound/soc/mediatek/mt8173/mt8173-rt5650.c | 2 +
sound/soc/samsung/idma.c | 2 +
sound/soc/soc-core.c | 1 +
sound/soc/soc-pcm.c | 40 ++-
sound/soc/uniphier/Kconfig | 2 -
246 files changed, 1866 insertions(+), 872 deletions(-)