[PATCH 6.1 00/92] 6.1.125-rc1 review

From: Greg Kroah-Hartman
Date: Wed Jan 15 2025 - 05:40:40 EST


This is the start of the stable review cycle for the 6.1.125 release.
There are 92 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 17 Jan 2025 10:34:58 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.125-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.1.125-rc1

Biju Das <biju.das.jz@xxxxxxxxxxxxxx>
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()

Ahmad Fatoum <a.fatoum@xxxxxxxxxxxxxx>
drm: bridge: adv7511: use dev_err_probe in probe function

Dennis Lam <dennis.lamerice@xxxxxxxxx>
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv

Joseph Qi <joseph.qi@xxxxxxxxxxxxxxxxx>
ocfs2: correct return value of ocfs2_local_free_info()

Andrea della Porta <andrea.porta@xxxxxxxx>
of: address: Preserve the flags portion on 1:1 dma-ranges mapping

Rob Herring <robh@xxxxxxxxxx>
of: address: Store number of bus flag cells rather than bool

Herve Codina <herve.codina@xxxxxxxxxxx>
of: address: Remove duplicated functions

Herve Codina <herve.codina@xxxxxxxxxxx>
of: address: Fix address translation when address-size is greater than 2

Rob Herring <robh@xxxxxxxxxx>
of/address: Add support for 3 address cell bus

Rob Herring <robh@xxxxxxxxxx>
of: unittest: Add bus address range parsing tests

Peter Geis <pgwipeout@xxxxxxxxx>
arm64: dts: rockchip: add hevc power domain clock to rk3328

Yu Kuai <yukuai3@xxxxxxxxxx>
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()

Jesse Taube <Mr.Bossman075@xxxxxxxxx>
ARM: dts: imxrt1050: Fix clocks for mmc

Jens Axboe <axboe@xxxxxxxxx>
io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period

Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxx>
iio: adc: ad7124: Disable all channels at probe time

Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx>
iio: inkern: call iio_device_put() only on mapped devices

Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx>
iio: adc: at91: call input_free_device() on allocated iio_dev

Fabio Estevam <festevam@xxxxxxxxx>
iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()

Carlos Song <carlos.song@xxxxxxx>
iio: gyro: fxas21002c: Fix missing data update in trigger handler

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
iio: adc: ti-ads8688: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
iio: imu: kmx61: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
iio: light: vcnl4035: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
iio: pressure: zpa2326: fix information leak in triggered buffer

Akash M <akash.m5@xxxxxxxxxxx>
usb: gadget: f_fs: Remove WARN_ON in functionfs_bind

Prashanth K <quic_prashk@xxxxxxxxxxx>
usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints

Ma Ke <make_ruc2021@xxxxxxx>
usb: fix reference leak in usb_new_device()

Kai-Heng Feng <kaihengf@xxxxxxxxxx>
USB: core: Disable LPM only for non-suspended ports

Jun Yan <jerrysteve1101@xxxxxxxxx>
USB: usblp: return error when setting unsupported protocol

Prashanth K <quic_prashk@xxxxxxxxxxx>
usb: dwc3-am62: Disable autosuspend during remove

Lianqin Hu <hulianqin@xxxxxxxx>
usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null

Rengarajan S <rengarajan.s@xxxxxxxxxxxxx>
misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config

Rengarajan S <rengarajan.s@xxxxxxxxxxxxx>
misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

Li Huafei <lihuafei1@xxxxxxxxxx>
topology: Keep the cpumask unchanged when printing cpumap

André Draszik <andre.draszik@xxxxxxxxxx>
usb: dwc3: gadget: fix writing NYET threshold

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: cp210x: add Phoenix Contact UPS Device

Lubomir Rintel <lrintel@xxxxxxxxxx>
usb-storage: Add max sectors quirk for Nokia 208

Zicheng Qu <quzicheng@xxxxxxxxxx>
staging: iio: ad9832: Correct phase range check

Zicheng Qu <quzicheng@xxxxxxxxxx>
staging: iio: ad9834: Correct phase range check

Michal Hrusecky <michal.hrusecky@xxxxxxxxxx>
USB: serial: option: add Neoway N723-EA support

Chukun Pan <amadeus@xxxxxxxxxx>
USB: serial: option: add MeiG Smart SRM815

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: Fix overloading of MEM_UNINIT's meaning

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: Add MEM_WRITE attribute

Milan Broz <gmazyland@xxxxxxxxx>
dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)

Melissa Wen <mwen@xxxxxxxxxx>
drm/amd/display: increase MAX_SURFACES to the value supported by hw

Hans de Goede <hdegoede@xxxxxxxxxx>
ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]

Hans de Goede <hdegoede@xxxxxxxxxx>
ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]

Nam Cao <namcao@xxxxxxxxxxxxx>
riscv: Fix sleeping in invalid context in die()

Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx>
thermal: of: fix OF node leak in of_thermal_zone_find()

Roman Li <Roman.Li@xxxxxxx>
drm/amd/display: Add check for granularity in dml ceil/floor helpers

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
sctp: sysctl: udp_port: avoid using current->nsproxy

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
sctp: sysctl: auth_enable: avoid using current->nsproxy

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
sctp: sysctl: rto_min/max: avoid using current->nsproxy

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY

Krister Johansen <kjlx@xxxxxxxxxxxxxxxxxx>
dm thin: make get_first_thin use rcu-safe list first function

Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx>
cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu

He Wang <xw897002528@xxxxxxxxx>
ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked

David Howells <dhowells@xxxxxxxxxx>
afs: Fix the maximum cell name length

Wentao Liang <liangwentao@xxxxxxxxxxx>
ksmbd: fix a missing return value check bug

Liankun Yang <liankun.yang@xxxxxxxxxxxx>
drm/mediatek: Add return value check when reading DPCD

Liankun Yang <liankun.yang@xxxxxxxxxxxx>
drm/mediatek: Fix mode valid issue for dp

Liankun Yang <liankun.yang@xxxxxxxxxxxx>
drm/mediatek: Fix YCbCr422 color format issue for DP

Arnd Bergmann <arnd@xxxxxxxx>
drm/mediatek: stop selecting foreign drivers

Chenguang Zhao <zhaochenguang@xxxxxxxxxx>
net/mlx5: Fix variable not being completed when function returns

Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
sched: sch_cake: add bounds checks to host bulk flow fairness counts

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: conntrack: clamp maximum hashtable size to INT_MAX

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_tables: imbalance in flowtable binding

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Fix not setting Random Address when required

Benjamin Coddington <bcodding@xxxxxxxxxx>
tls: Fix tls_sw_sendmsg error handling

Przemyslaw Korba <przemyslaw.korba@xxxxxxxxx>
ice: fix incorrect PHY settings for 100 GB/s

Anumula Murali Mohan Reddy <anumula@xxxxxxxxxxx>
cxgb4: Avoid removal of uninserted tid

Kalesh AP <kalesh-anakkur.purayil@xxxxxxxxxxxx>
bnxt_en: Fix possible memory leak when hwrm_req_replace fails

Eric Dumazet <edumazet@xxxxxxxxxx>
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute

Zhongqiu Duan <dzq.aishenghu0@xxxxxxxxx>
tcp/dccp: allow a connection when sk_max_ack_backlog is zero

Jason Xing <kernelxing@xxxxxxxxxxx>
tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog

Antonio Pastor <antonio.pastor@xxxxxxxxx>
net: 802: LLC+SNAP OID:PID lookup on start of skb data

Keisuke Nishimura <keisuke.nishimura@xxxxxxxx>
ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()

Chen-Yu Tsai <wenst@xxxxxxxxxxxx>
ASoC: mediatek: disable buffer pre-allocation

Kuan-Wei Chiu <visitorckw@xxxxxxxxx>
scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity

Yuezhang Mo <Yuezhang.Mo@xxxxxxxx>
exfat: fix the infinite loop in __exfat_free_cluster()

Yuezhang Mo <Yuezhang.Mo@xxxxxxxx>
exfat: fix the infinite loop in exfat_readdir()

Ming-Hung Tsai <mtsai@xxxxxxxxxx>
dm array: fix cursor index when skipping across block boundaries

Ming-Hung Tsai <mtsai@xxxxxxxxxx>
dm array: fix unreleased btree blocks on closing a faulty array cursor

Ming-Hung Tsai <mtsai@xxxxxxxxxx>
dm array: fix releasing a faulty array block twice in dm_array_cursor_end

Zhang Yi <yi.zhang@xxxxxxxxxx>
jbd2: flush filesystem device before updating tail sequence

Zhang Yi <yi.zhang@xxxxxxxxxx>
jbd2: increase IO priority for writing revoke records

Qun-Wei Lin <qun-wei.lin@xxxxxxxxxxxx>
sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers

Michal Luczaj <mhal@xxxxxxx>
bpf, sockmap: Fix race between element replace and close()

Max Kellermann <max.kellermann@xxxxxxxxx>
ceph: give up on paths longer than PATH_MAX


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/imxrt1050.dtsi | 2 +-
arch/arm64/boot/dts/rockchip/rk3328.dtsi | 1 +
arch/riscv/kernel/traps.c | 6 +-
block/bfq-iosched.c | 12 +-
drivers/acpi/resource.c | 18 +++
drivers/base/topology.c | 24 +++-
drivers/cpuidle/cpuidle-riscv-sbi.c | 4 +-
drivers/gpu/drm/amd/display/dc/dc.h | 2 +-
.../gpu/drm/amd/display/dc/dml/dml_inline_defs.h | 8 ++
drivers/gpu/drm/bridge/adv7511/adv7511_drv.c | 8 +-
drivers/gpu/drm/bridge/adv7511/adv7533.c | 22 ++--
drivers/gpu/drm/mediatek/Kconfig | 5 -
drivers/gpu/drm/mediatek/mtk_dp.c | 46 ++++---
drivers/iio/adc/ad7124.c | 3 +
drivers/iio/adc/at91_adc.c | 2 +-
drivers/iio/adc/ti-ads124s08.c | 4 +-
drivers/iio/adc/ti-ads8688.c | 2 +-
drivers/iio/dummy/iio_simple_dummy_buffer.c | 2 +-
drivers/iio/gyro/fxas21002c_core.c | 11 +-
drivers/iio/imu/kmx61.c | 2 +-
drivers/iio/inkern.c | 2 +-
drivers/iio/light/vcnl4035.c | 2 +-
drivers/iio/pressure/zpa2326.c | 2 +
drivers/md/dm-ebs-target.c | 2 +-
drivers/md/dm-thin.c | 5 +-
drivers/md/dm-verity-fec.c | 39 ++++--
drivers/md/persistent-data/dm-array.c | 19 +--
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 4 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 3 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 5 +-
drivers/net/ethernet/intel/ice/ice_ptp_consts.h | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 1 +
drivers/net/ieee802154/ca8210.c | 6 +-
drivers/of/address.c | 76 ++++++++---
drivers/of/unittest-data/tests-address.dtsi | 9 +-
drivers/of/unittest.c | 109 ++++++++++++++++
drivers/staging/iio/frequency/ad9832.c | 2 +-
drivers/staging/iio/frequency/ad9834.c | 2 +-
drivers/thermal/thermal_of.c | 1 +
drivers/usb/class/usblp.c | 7 +-
drivers/usb/core/hub.c | 6 +-
drivers/usb/core/port.c | 7 +-
drivers/usb/dwc3/core.h | 1 +
drivers/usb/dwc3/dwc3-am62.c | 1 +
drivers/usb/dwc3/gadget.c | 4 +-
drivers/usb/gadget/function/f_fs.c | 2 +-
drivers/usb/gadget/function/f_uac2.c | 1 +
drivers/usb/gadget/function/u_serial.c | 8 +-
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/option.c | 4 +-
drivers/usb/storage/unusual_devs.h | 7 ++
fs/afs/afs.h | 2 +-
fs/afs/afs_vl.h | 1 +
fs/afs/vl_alias.c | 8 +-
fs/afs/vlclient.c | 2 +-
fs/ceph/mds_client.c | 9 +-
fs/exfat/dir.c | 3 +-
fs/exfat/fatent.c | 10 ++
fs/jbd2/commit.c | 4 +-
fs/jbd2/revoke.c | 2 +-
fs/ocfs2/quota_global.c | 2 +-
fs/ocfs2/quota_local.c | 10 +-
fs/smb/server/smb2pdu.c | 3 +
fs/smb/server/vfs.c | 3 +-
include/linux/bpf.h | 14 ++-
include/linux/sched/task_stack.h | 2 +
include/net/inet_connection_sock.h | 2 +-
io_uring/io_uring.c | 13 +-
kernel/bpf/helpers.c | 10 +-
kernel/bpf/ringbuf.c | 2 +-
kernel/bpf/syscall.c | 2 +-
kernel/bpf/verifier.c | 76 ++++++-----
kernel/trace/bpf_trace.c | 4 +-
net/802/psnap.c | 4 +-
net/bluetooth/hci_sync.c | 11 +-
net/core/filter.c | 4 +-
net/core/sock_map.c | 6 +-
net/ipv4/tcp_ipv4.c | 2 +-
net/netfilter/nf_conntrack_core.c | 5 +-
net/netfilter/nf_tables_api.c | 15 ++-
net/sched/cls_flow.c | 3 +-
net/sched/sch_cake.c | 140 +++++++++++----------
net/sctp/sysctl.c | 14 ++-
net/tls/tls_sw.c | 2 +-
scripts/sorttable.h | 6 +-
.../soc/mediatek/common/mtk-afe-platform-driver.c | 4 +-
87 files changed, 624 insertions(+), 306 deletions(-)