[PATCH 6.1 00/39] 6.1.118-rc1 review

From: Greg Kroah-Hartman
Date: Fri Nov 15 2024 - 01:53:06 EST


This is the start of the stable review cycle for the 6.1.118 release.
There are 39 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 17 Nov 2024 06:37:07 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.118-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.1.118-rc1

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
9p: fix slab cache name creation for real

Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx>
fs/ntfs3: Fix general protection fault in run_is_mapped_full

Hans de Goede <hdegoede@xxxxxxxxxx>
platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors

Qun-Wei Lin <qun-wei.lin@xxxxxxxxxxxx>
mm: krealloc: Fix MTE false alarm in __do_krealloc

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: L2CAP: Fix uaf in l2cap_connect

Xiaxi Shen <shenxiaxi26@xxxxxxxxx>
ext4: fix timer use-after-free on failed mount

Philip Yang <Philip.Yang@xxxxxxx>
drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer

Qiao Ma <mqaio@xxxxxxxxxxxxxxxxx>
uprobe: avoid out-of-bounds memory access of fetching args

Andrii Nakryiko <andrii@xxxxxxxxxx>
uprobes: encapsulate preparation of uprobe args buffer

Hagar Hemdan <hagarhem@xxxxxxxxxx>
io_uring: fix possible deadlock in io_register_iowq_max_workers()

Li Nan <linan122@xxxxxxxxxx>
md/raid10: improve code of mrdev in raid10_sync_request

Reinhard Speyerer <rspmn@xxxxxxxx>
net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition

Yanteng Si <siyanteng@xxxxxxxxxxxxxxxxx>
LoongArch: Use "Exception return address" to comment ERA

Hans de Goede <hdegoede@xxxxxxxxxx>
HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard

Kenneth Albanowski <kenalba@xxxxxxxxxxxx>
HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad

Alessandro Zanni <alessandro.zanni87@xxxxxxxxx>
fs: Fix uninitialized value issue in from_kuid and from_kgid

Jiawei Ye <jiawei.ye@xxxxxxxxxxx>
bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6

Yuan Can <yuancan@xxxxxxxxxx>
vDPA/ifcvf: Fix pci_read_config_byte() return code handling

Nilay Shroff <nilay@xxxxxxxxxxxxx>
nvme: make keep-alive synchronous operation

Michael Ellerman <mpe@xxxxxxxxxxxxxx>
powerpc/powernv: Free name on error in opal_event_init()

Keith Busch <kbusch@xxxxxxxxxx>
nvme-multipath: defer partition scanning

Will Deacon <will@xxxxxxxxxx>
kasan: Disable Software Tag-Based KASAN with GCC

Ian Forbes <ian.forbes@xxxxxxxxxxxx>
drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS

Julian Vetter <jvetter@xxxxxxxxxxxxx>
sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: marvell/cesa - Disable hash algorithms

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: api - Fix liveliness check in crypto_alg_tested

Rik van Riel <riel@xxxxxxxxxxx>
bpf: use kvzmalloc to allocate BPF verifier environment

Greg Joyce <gjoyce@xxxxxxxxxxxxx>
nvme: disable CC.CRIME (NVME_CC_CRIME)

WangYuli <wangyuli@xxxxxxxxxxxxx>
HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad

Stefan Blum <stefanblum2004@xxxxxxxxx>
HID: multitouch: Add support for B2402FVA track point

SurajSonawane2415 <surajsonawane0215@xxxxxxxxx>
block: Fix elevator_get_default() checking for NULL q->tag_set

Hannes Reinecke <hare@xxxxxxx>
nvme: tcp: avoid race between queue_lock lock and destroy

Sergey Matsievskiy <matsievskiysv@xxxxxxxxx>
irqchip/ocelot: Fix trigger register address

Pedro Falcato <pedro.falcato@xxxxxxxxx>
9p: Avoid creating multiple slab caches with the same name

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "Bluetooth: hci_conn: Consolidate code for aborting connections"

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "Bluetooth: hci_core: Fix possible buffer overflow"

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "Bluetooth: af_bluetooth: Fix deadlock"

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "Bluetooth: hci_sync: Fix overwriting request callback"

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "Bluetooth: fix use-after-free in accessing skb after sending it"


-------------

Diffstat:

Makefile | 4 +-
arch/loongarch/include/asm/loongarch.h | 2 +-
arch/powerpc/platforms/powernv/opal-irqchip.c | 1 +
block/elevator.c | 4 +-
crypto/algapi.c | 2 +-
drivers/crypto/marvell/cesa/hash.c | 12 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 14 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_device.c | 4 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_process.c | 2 +-
.../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 4 +-
drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 3 -
drivers/hid/hid-ids.h | 1 +
drivers/hid/hid-lenovo.c | 8 ++
drivers/hid/hid-multitouch.c | 13 ++
drivers/irqchip/irq-mscc-ocelot.c | 4 +-
drivers/md/raid10.c | 23 +--
drivers/net/usb/qmi_wwan.c | 1 +
drivers/nvme/host/core.c | 31 ++--
drivers/nvme/host/multipath.c | 33 +++++
drivers/nvme/host/nvme.h | 1 +
drivers/nvme/host/tcp.c | 7 +-
drivers/platform/x86/x86-android-tablets.c | 3 +-
drivers/vdpa/ifcvf/ifcvf_base.c | 2 +-
fs/ext4/super.c | 2 +-
fs/ntfs3/inode.c | 9 ++
fs/ocfs2/file.c | 9 +-
include/net/bluetooth/hci_core.h | 3 +-
io_uring/io_uring.c | 5 +
kernel/bpf/verifier.c | 4 +-
kernel/trace/trace_uprobe.c | 86 +++++------
lib/Kconfig.kasan | 7 +-
mm/slab_common.c | 2 +-
net/9p/client.c | 12 +-
net/bluetooth/af_bluetooth.c | 10 +-
net/bluetooth/hci_conn.c | 158 ++++++++++++++++-----
net/bluetooth/hci_core.c | 50 +++----
net/bluetooth/hci_event.c | 20 +--
net/bluetooth/hci_sync.c | 44 ++----
net/bluetooth/l2cap_core.c | 9 --
net/bluetooth/mgmt.c | 15 +-
net/core/filter.c | 2 +-
sound/Kconfig | 2 +-
48 files changed, 401 insertions(+), 243 deletions(-)