[PATCH 4.19 00/79] 4.19.257-rc1 review

From: Greg Kroah-Hartman
Date: Tue Sep 13 2022 - 11:12:35 EST

This is the start of the stable review cycle for the 4.19.257 release.
There are 79 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 15 Sep 2022 14:03:27 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.


greg k-h

Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.19.257-rc1

NeilBrown <neilb@xxxxxxx>
SUNRPC: use _bh spinlocking on ->transport_lock

Yang Ling <gnaygnil@xxxxxxxxx>
MIPS: loongson32: ls1c: Fix hang during startup

Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx>
x86/nospec: Fix i386 RSB stuffing

Johan Hovold <johan@xxxxxxxxxx>
usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: ch341: fix disabled rx timer on older devices

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: ch341: fix lost character on LCR updates

Johan Hovold <johan@xxxxxxxxxx>
usb: dwc3: fix PHY disable sequence

Toke Høiland-Jørgensen <toke@xxxxxxx>
sch_sfb: Also store skb len before calling child enqueue

Neal Cardwell <ncardwell@xxxxxxxxxx>
tcp: fix early ETIMEDOUT after spurious non-SACK RTO

Chris Mi <cmi@xxxxxxxxxx>
RDMA/mlx5: Set local port to one when accessing counters

David Lebrun <dlebrun@xxxxxxxxxx>
ipv6: sr: fix out-of-bounds read when setting HMAC data.

Ivan Vecera <ivecera@xxxxxxxxxx>
i40e: Fix kernel crash during module removal

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
tipc: fix shift wrapping bug in map_get()

Toke Høiland-Jørgensen <toke@xxxxxxx>
sch_sfb: Don't assume the skb is still around after enqueueing to child

David Leadbeater <dgl@xxxxxx>
netfilter: nf_conntrack_irc: Fix forged IP logic

Harsh Modi <harshmodi@xxxxxxxxxx>
netfilter: br_netfilter: Drop dst references before setting.

Liang He <windhl@xxxxxxx>
soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs

Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxx>
scsi: mpt3sas: Fix use-after-free warning

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
debugfs: add debugfs_lookup_and_remove()

Christian A. Ehrhardt <lk@xxxxxxx>
kprobes: Prohibit probes in gate area

Dongxiang Ke <kdx.glider@xxxxxxxxx>
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

Pattara Teerapong <pteerapong@xxxxxxxxxxxx>
ALSA: aloop: Fix random zeros in capture data when using jiffies timer

Tasos Sahanidis <tasos@xxxxxxxxxxxx>
ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()

Qu Huang <jinsdb@xxxxxxx>
drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly

Yang Yingliang <yangyingliang@xxxxxxxxxx>
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()

Mark Brown <broonie@xxxxxxxxxx>
arm64/signal: Raise limit on stack frames

Sudeep Holla <sudeep.holla@xxxxxxx>
arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

Helge Deller <deller@xxxxxx>
parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines

Li Qiong <liqiong@xxxxxxxxxxxx>
parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()

Zhenneng Li <lizhenneng@xxxxxxxxxx>
drm/radeon: add a force flush to delay work when radeon

Candice Li <candice.li@xxxxxxx>
drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Fix data-race at module auto-loading

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: oss: Fix data-race for max_midi_devs access

Miquel Raynal <miquel.raynal@xxxxxxxxxxx>
net: mac802154: Fix a condition in the receive path

Siddh Raman Pant <code@xxxxxxxx>
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

Krishna Kurapati <quic_kriskura@xxxxxxxxxxx>
usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: core: Prevent nested device-reset calls

Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
s390: fix nospec table alignments

Gerald Schaefer <gerald.schaefer@xxxxxxxxxxxxx>
s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages

Witold Lipieta <witold.lipieta@xxxxxxxxxxxxx>
usb-storage: Add ignore-residue quirk for NXP PN7462AU

Thierry GUIBERT <thierry.guibert@xxxxxxxxxxxxxx>
USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)

Heiner Kallweit <hkallweit1@xxxxxxxxx>
usb: dwc2: fix wrong order of phy_power_on and phy_init

Pablo Sun <pablo.sun@xxxxxxxxxxxx>
usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles

Slark Xiao <slark_xiao@xxxxxxx>
USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode

Yonglin Tan <yonglin.tan@xxxxxxxxxxx>
USB: serial: option: add Quectel EM060K modem

Yan Xinyu <sdlyyxy@xxxxxxxxxxx>
USB: serial: option: add support for OPPO R11 diag port

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: cp210x: add Decagon UCA device id

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: Add grace period after xHC start to prevent premature runtime suspend.

Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
thunderbolt: Use the actual buffer in tb_async_error()

Armin Wolf <W_Armin@xxxxxx>
hwmon: (gpio-fan) Fix array out of bounds access

Peter Robinson <pbrobinson@xxxxxxxxx>
Input: rk805-pwrkey - fix module autoloading

Chen-Yu Tsai <wenst@xxxxxxxxxxxx>
clk: core: Fix runtime PM sequence in clk_core_unprepare()

Stephen Boyd <sboyd@xxxxxxxxxx>
Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"

Chen-Yu Tsai <wenst@xxxxxxxxxxxx>
clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops

Colin Ian King <colin.i.king@xxxxxxxxx>
drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"

Carlos Llamas <cmllamas@xxxxxxxxxx>
binder: fix UAF of ref->proc caused by race condition

Niek Nooijens <niek.nooijens@xxxxxxxxx>
USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id

Helge Deller <deller@xxxxxx>
vt: Clear selection before changing the font

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
staging: rtl8712: fix use after free bugs

Shenwei Wang <shenwei.wang@xxxxxxx>
serial: fsl_lpuart: RS485 RTS polariy is inverse

Yacan Liu <liuyacan@xxxxxxxxxxxxxxxx>
net/smc: Remove redundant refcount increase

Jakub Kicinski <kuba@xxxxxxxxxx>
Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: annotate data-race around challenge_timestamp

Toke Høiland-Jørgensen <toke@xxxxxxx>
sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb

Cong Wang <cong.wang@xxxxxxxxxxxxx>
kcm: fix strp_init() order and cleanup

Duoming Zhou <duoming@xxxxxxxxxx>
ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
Revert "xhci: turn off port power in shutdown"

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()

Lin Ma <linma@xxxxxxxxxx>
ieee802154/adf7242: defer destroy_workqueue call

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask

Douglas Anderson <dianders@xxxxxxxxxxxx>
drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg

sunliming <sunliming@xxxxxxxxxx>
drm/msm/dsi: fix the inconsistent indenting

Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@xxxxxxxxxxxxxxxxxxxx>
net: dp83822: disable false carrier interrupt

Yee Lee <yee.lee@xxxxxxxxxxxx>
Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
fs: only do a memory barrier for the first set_buffer_uptodate()

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()

Stanislaw Gruszka <stf_xl@xxxxx>
wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()

Hyunwoo Kim <imv4bel@xxxxxxxxx>
efi: capsule-loader: Fix use-after-free in efi_capsule_write

Isaac J. Manjarres <isaacmanjarres@xxxxxxxxxx>
driver core: Don't probe devices after bus_type.match() probe deferral



Makefile | 4 +-
arch/arm64/kernel/cacheinfo.c | 6 ++-
arch/arm64/kernel/signal.c | 2 +-
arch/mips/loongson32/ls1c/board.c | 1 -
arch/parisc/kernel/head.S | 43 ++++++++++++++++++-
arch/s390/include/asm/hugetlb.h | 6 ++-
arch/s390/kernel/vmlinux.lds.S | 1 +
arch/x86/include/asm/nospec-branch.h | 14 ++++++
drivers/android/binder.c | 12 ++++++
drivers/base/dd.c | 10 +++++
drivers/clk/clk.c | 3 +-
drivers/firmware/efi/capsule-loader.c | 31 +++-----------
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 3 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v1_0.c | 1 +
drivers/gpu/drm/i915/gvt/handlers.c | 2 +-
drivers/gpu/drm/msm/dsi/dsi_cfg.c | 2 +-
drivers/gpu/drm/msm/dsi/phy/dsi_phy.c | 2 +-
drivers/gpu/drm/radeon/radeon_device.c | 3 ++
drivers/hwmon/gpio-fan.c | 3 ++
drivers/infiniband/hw/mlx5/mad.c | 6 +++
drivers/input/misc/rk805-pwrkey.c | 1 +
drivers/net/ethernet/intel/i40e/i40e_client.c | 5 ++-
drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c | 4 +-
drivers/net/ethernet/rocker/rocker_ofdpa.c | 2 +-
drivers/net/ieee802154/adf7242.c | 3 +-
drivers/net/phy/dp83822.c | 1 -
drivers/net/wireless/intel/iwlegacy/4965-rs.c | 5 +--
drivers/parisc/ccio-dma.c | 11 +++--
drivers/platform/x86/pmc_atom.c | 2 +-
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +-
drivers/soc/bcm/brcmstb/pm/pm-arm.c | 50 +++++++++++++++++-----
drivers/staging/rtl8712/rtl8712_cmd.c | 36 ----------------
drivers/thunderbolt/ctl.c | 2 +-
drivers/tty/serial/fsl_lpuart.c | 4 +-
drivers/tty/vt/vt.c | 12 ++++--
drivers/usb/class/cdc-acm.c | 3 ++
drivers/usb/core/hub.c | 10 +++++
drivers/usb/dwc2/platform.c | 8 ++--
drivers/usb/dwc3/core.c | 19 ++++----
drivers/usb/dwc3/dwc3-qcom.c | 14 +++++-
drivers/usb/dwc3/host.c | 1 +
drivers/usb/gadget/function/storage_common.c | 6 ++-
drivers/usb/host/xhci-hub.c | 13 +++++-
drivers/usb/host/xhci.c | 19 +++-----
drivers/usb/host/xhci.h | 4 +-
drivers/usb/serial/ch341.c | 15 ++++++-
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 6 +++
drivers/usb/serial/option.c | 15 +++++++
drivers/usb/storage/unusual_devs.h | 7 +++
drivers/usb/typec/altmodes/displayport.c | 4 +-
drivers/video/fbdev/chipsfb.c | 1 +
fs/debugfs/inode.c | 22 ++++++++++
include/linux/buffer_head.h | 11 +++++
include/linux/debugfs.h | 6 +++
include/linux/platform_data/x86/pmc_atom.h | 6 ++-
include/linux/usb.h | 2 +
include/linux/usb/typec_dp.h | 5 +++
kernel/kprobes.c | 1 +
mm/kmemleak.c | 8 ++--
net/bridge/br_netfilter_hooks.c | 2 +
net/bridge/br_netfilter_ipv6.c | 1 +
net/ipv4/tcp_input.c | 29 +++++++++----
net/ipv6/seg6.c | 5 +++
net/kcm/kcmsock.c | 15 +++----
net/mac80211/ibss.c | 4 ++
net/mac802154/rx.c | 2 +-
net/netfilter/nf_conntrack_irc.c | 5 ++-
net/sched/sch_sfb.c | 13 +++---
net/smc/af_smc.c | 1 -
net/sunrpc/xprt.c | 4 +-
net/tipc/monitor.c | 2 +-
net/wireless/debugfs.c | 3 +-
sound/core/seq/oss/seq_oss_midi.c | 2 +
sound/core/seq/seq_clientmgr.c | 12 +++---
sound/drivers/aloop.c | 7 +--
sound/pci/emu10k1/emupcm.c | 2 +-
sound/usb/stream.c | 2 +-
79 files changed, 422 insertions(+), 193 deletions(-)