[PATCH 4.14 130/159] scsi: bfa: fix type conversion warning

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 48d83282db077f93b2cf40de120f4d6f29eb293b upstream. A regression fix introduced a harmless type mismatch warning: drivers/scsi/bfa/bfad_bsg.c: In function

[PATCH 4.14 130/159] scsi: bfa: fix type conversion warning

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 48d83282db077f93b2cf40de120f4d6f29eb293b upstream. A regression fix introduced a harmless type mismatch warning: drivers/scsi/bfa/bfad_bsg.c: In function

[PATCH 4.14 133/159] xfrm: Fix xfrm_input() to verify state is valid when (encap_type < 0)

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Aviv Heller [ Upstream commit 4ce3dbe397d7b6b15f272ae757c78c35e9e4b61d ] Code path when (encap_type < 0) does not verify the state is valid before progressing. This will

[PATCH 4.14 133/159] xfrm: Fix xfrm_input() to verify state is valid when (encap_type < 0)

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Aviv Heller [ Upstream commit 4ce3dbe397d7b6b15f272ae757c78c35e9e4b61d ] Code path when (encap_type < 0) does not verify the state is valid before progressing. This will result in a crash

[PATCH 4.14 128/159] scsi: lpfc: Use after free in lpfc_rq_buf_free()

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit 9816ef6ecbc102b9bcbb1d83e12c7fb19924f38c ] The error message dereferences "rqb_entry" so we need to print it first and then free the

[PATCH 4.14 128/159] scsi: lpfc: Use after free in lpfc_rq_buf_free()

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit 9816ef6ecbc102b9bcbb1d83e12c7fb19924f38c ] The error message dereferences "rqb_entry" so we need to print it first and then free the buffer. Fixes:

[PATCH 4.14 136/159] staging: ccree: Uninitialized return in ssi_ahash_import()

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit aece09024414b54158e03aa45f4a4436e7cb996c ] The return value isn't initialized on some success paths. Fixes: c5f39d07860c ("staging:

[PATCH 4.14 136/159] staging: ccree: Uninitialized return in ssi_ahash_import()

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit aece09024414b54158e03aa45f4a4436e7cb996c ] The return value isn't initialized on some success paths. Fixes: c5f39d07860c ("staging: ccree: fix leak of

[PATCH 4.14 140/159] xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Steffen Klassert [ Upstream commit 732706afe1cc46ef48493b3d2b69c98f36314ae4 ] On policies with a transport mode template, we pass the addresses from the flowi

[PATCH 4.14 138/159] spi: sun4i: disable clocks in the remove function

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takuo Koguchi [ Upstream commit c810daba0ab5226084a56893a789af427a801146 ] mclk and hclk need to be disabled. Since pm_runtime_disable does not disable the clocks,

[PATCH 4.14 140/159] xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Steffen Klassert [ Upstream commit 732706afe1cc46ef48493b3d2b69c98f36314ae4 ] On policies with a transport mode template, we pass the addresses from the flowi to xfrm_state_find(), assuming

[PATCH 4.14 138/159] spi: sun4i: disable clocks in the remove function

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takuo Koguchi [ Upstream commit c810daba0ab5226084a56893a789af427a801146 ] mclk and hclk need to be disabled. Since pm_runtime_disable does not disable the clocks, use

[PATCH 4.14 142/159] ASoC: rsnd: ssi: fix race condition in rsnd_ssi_pointer_update

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jiada Wang [ Upstream commit 33f801366bdf3f8b67dfe325b84f4051a090d01e ] Currently there is race condition between set of byte_pos and wrap it around when new buffer

[PATCH 4.14 142/159] ASoC: rsnd: ssi: fix race condition in rsnd_ssi_pointer_update

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jiada Wang [ Upstream commit 33f801366bdf3f8b67dfe325b84f4051a090d01e ] Currently there is race condition between set of byte_pos and wrap it around when new buffer starts. If .pointer is

[PATCH 4.14 144/159] dmaengine: jz4740: disable/unprepare clk if probe fails

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Jordan [ Upstream commit eb9436966fdc84cebdf222952a99898ab46d9bb0 ] in error path of jz4740_dma_probe(), call clk_disable_unprepare() to clean up. Found

[PATCH 4.14 144/159] dmaengine: jz4740: disable/unprepare clk if probe fails

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Jordan [ Upstream commit eb9436966fdc84cebdf222952a99898ab46d9bb0 ] in error path of jz4740_dma_probe(), call clk_disable_unprepare() to clean up. Found by Linux Driver Verification

[PATCH 4.14 145/159] usb: dwc3: gadget: Wait longer for controller to end command processing

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Vincent Pelletier [ Upstream commit 8722e095f5a44d0e409e45c5ddc2ee9cf589c777 ] DWC3_DEPCMD_ENDTRANSFER has been witnessed to require around 600 iterations before

[PATCH 4.14 145/159] usb: dwc3: gadget: Wait longer for controller to end command processing

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Vincent Pelletier [ Upstream commit 8722e095f5a44d0e409e45c5ddc2ee9cf589c777 ] DWC3_DEPCMD_ENDTRANSFER has been witnessed to require around 600 iterations before controller would become idle

[PATCH 4.14 147/159] mm/early_ioremap: Fix boot hang with earlyprintk=efi,keep

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dave Young [ Upstream commit 7f6f60a1ba52538c16f26930bfbcfe193d9d746a ] earlyprintk=efi,keep does not work any more with a warning in mm/early_ioremap.c:

[PATCH 4.14 147/159] mm/early_ioremap: Fix boot hang with earlyprintk=efi,keep

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dave Young [ Upstream commit 7f6f60a1ba52538c16f26930bfbcfe193d9d746a ] earlyprintk=efi,keep does not work any more with a warning in mm/early_ioremap.c: WARN_ON(system_state !=

[PATCH 4.14 151/159] PCI: rcar: Fix use-after-free in probe error path

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Geert Uytterhoeven [ Upstream commit 0c31f1d7be1b5c4858b1d714dcefa25f41428cab ] If CONFIG_DEBUG_SLAB=y, and no PCIe card is inserted, the kernel crashes during probe

[PATCH 4.14 151/159] PCI: rcar: Fix use-after-free in probe error path

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Geert Uytterhoeven [ Upstream commit 0c31f1d7be1b5c4858b1d714dcefa25f41428cab ] If CONFIG_DEBUG_SLAB=y, and no PCIe card is inserted, the kernel crashes during probe on r8a7791/koelsch:

Re: [PATCH 1/3] memory: brcmstb: dpfe: properly mask vendor error bits

2018-02-23 Thread Florian Fainelli
On Tue, 13 Feb 2018 12:40:38 -0800, Markus Mayer wrote: > We were printing the entire 32 bit register rather than just the lower > 8 bits. Anything above bit 7 is reserved and may be any random value. > > Fixes: 2f330caff577 ("memory: brcmstb: Add driver for DPFE") >

[PATCH 4.14 116/159] net: qualcomm: rmnet: Fix leak on transmit failure

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Subash Abhinov Kasiviswanathan [ Upstream commit c20a548792f15f8d8e38cd74356301c6db0d241f ] If a skb in transmit path does not have sufficient headroom to add the

Re: [PATCH 1/3] memory: brcmstb: dpfe: properly mask vendor error bits

2018-02-23 Thread Florian Fainelli
On Tue, 13 Feb 2018 12:40:38 -0800, Markus Mayer wrote: > We were printing the entire 32 bit register rather than just the lower > 8 bits. Anything above bit 7 is reserved and may be any random value. > > Fixes: 2f330caff577 ("memory: brcmstb: Add driver for DPFE") > Signed-off-by: Markus Mayer

[PATCH 4.14 116/159] net: qualcomm: rmnet: Fix leak on transmit failure

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Subash Abhinov Kasiviswanathan [ Upstream commit c20a548792f15f8d8e38cd74356301c6db0d241f ] If a skb in transmit path does not have sufficient headroom to add the map header, the skb is not

[PATCH 4.14 120/159] btrfs: Fix possible off-by-one in btrfs_search_path_in_tree

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Borisov [ Upstream commit c8bcbfbd239ed60a6562964b58034ac8a25f4c31 ] The name char array passed to btrfs_search_path_in_tree is of size BTRFS_INO_LOOKUP_PATH_MAX

[PATCH 4.14 120/159] btrfs: Fix possible off-by-one in btrfs_search_path_in_tree

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Borisov [ Upstream commit c8bcbfbd239ed60a6562964b58034ac8a25f4c31 ] The name char array passed to btrfs_search_path_in_tree is of size BTRFS_INO_LOOKUP_PATH_MAX (4080). So the

[GIT PULL] Security subsystem fixes for v4.16-rc3

2018-02-23 Thread James Morris
Please pull these updates, which include: - Keys fixes via David Howells: "Here's a collection of fixes for Linux keyrings, mostly thanks to Eric Biggers, if you could pass them along to Linus. They include: (1) Fix some PKCS#7 verification issues. (2) Fix handling of unsupported

Re: [PATCH 2/3] memory: brcmstb: dpfe: fix type declaration of variable "ret"

2018-02-23 Thread Florian Fainelli
On Tue, 13 Feb 2018 12:40:39 -0800, Markus Mayer wrote: > In some functions, variable "ret" should be ssize_t, so we fix it. > > Fixes: 2f330caff577 ("memory: brcmstb: Add driver for DPFE") > Signed-off-by: Markus Mayer > --- Applied to drivers/fixes,

[GIT PULL] Security subsystem fixes for v4.16-rc3

2018-02-23 Thread James Morris
Please pull these updates, which include: - Keys fixes via David Howells: "Here's a collection of fixes for Linux keyrings, mostly thanks to Eric Biggers, if you could pass them along to Linus. They include: (1) Fix some PKCS#7 verification issues. (2) Fix handling of unsupported

Re: [PATCH 2/3] memory: brcmstb: dpfe: fix type declaration of variable "ret"

2018-02-23 Thread Florian Fainelli
On Tue, 13 Feb 2018 12:40:39 -0800, Markus Mayer wrote: > In some functions, variable "ret" should be ssize_t, so we fix it. > > Fixes: 2f330caff577 ("memory: brcmstb: Add driver for DPFE") > Signed-off-by: Markus Mayer > --- Applied to drivers/fixes, thanks! -- Florian

[PATCH 4.14 153/159] hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jia-Ju Bai [ Upstream commit 6e266610eb6553cfb7e7eb5d11914bd01509c406 ] The driver may sleep under a spinlock. The function call path is: rr_close (acquire the

[PATCH 4.14 153/159] hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jia-Ju Bai [ Upstream commit 6e266610eb6553cfb7e7eb5d11914bd01509c406 ] The driver may sleep under a spinlock. The function call path is: rr_close (acquire the spinlock) free_irq --> may

[PATCH 4.14 155/159] drm/i915: fix intel_backlight_device_register declaration

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit ac29fc66855b79c2960c63a4a66952d5b721d698 upstream. The alternative intel_backlight_device_register() definition apparently never got used, but I have now

[PATCH 4.14 155/159] drm/i915: fix intel_backlight_device_register declaration

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit ac29fc66855b79c2960c63a4a66952d5b721d698 upstream. The alternative intel_backlight_device_register() definition apparently never got used, but I have now run into a case

[PATCH 4.14 156/159] crypto: s5p-sss - Fix kernel Oops in AES-ECB mode

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kamil Konieczny commit c927b080c67e3e97193c81fc1d27f4251bf4e036 upstream. In AES-ECB mode crypt is done with key only, so any use of IV can cause kernel Oops.

Re: `do_IRQ: 1.55 No irq handler for vector` on ASRock E350M1

2018-02-23 Thread Borislav Petkov
On Fri, Feb 23, 2018 at 07:18:34PM +0100, Thomas Gleixner wrote: > Borislav is seeing similar issues on larger AMD machines. The interrupt > seems to come from BIOS/microcode during bringup of secondary CPUs and we > have no idea why. Paul, can you boot 4.14 and grep your dmesg for something

Re: `do_IRQ: 1.55 No irq handler for vector` on ASRock E350M1

2018-02-23 Thread Borislav Petkov
On Fri, Feb 23, 2018 at 07:18:34PM +0100, Thomas Gleixner wrote: > Borislav is seeing similar issues on larger AMD machines. The interrupt > seems to come from BIOS/microcode during bringup of secondary CPUs and we > have no idea why. Paul, can you boot 4.14 and grep your dmesg for something

[PATCH 4.14 156/159] crypto: s5p-sss - Fix kernel Oops in AES-ECB mode

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kamil Konieczny commit c927b080c67e3e97193c81fc1d27f4251bf4e036 upstream. In AES-ECB mode crypt is done with key only, so any use of IV can cause kernel Oops. Use IV only in AES-CBC and

[PATCH 4.14 154/159] crypto: talitos - fix Kernel Oops on hashing an empty file

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: LEROY Christophe commit 87a81dce53b1ea61acaeefa5191a0376a2d1d721 upstream. Performing the hash of an empty file leads to a kernel Oops [ 44.504600] Unable to

[PATCH 4.14 154/159] crypto: talitos - fix Kernel Oops on hashing an empty file

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: LEROY Christophe commit 87a81dce53b1ea61acaeefa5191a0376a2d1d721 upstream. Performing the hash of an empty file leads to a kernel Oops [ 44.504600] Unable to handle kernel paging request

[PATCH 4.14 157/159] mei: me: add cannon point device ids

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Usyskin commit f8f4aa68a8ae98ed79c8fee3488c38a2f5d2de8c upstream. Add CNP LP and CNP H device ids for cannon lake and coffee lake platforms. Cc:

[PATCH 4.14 157/159] mei: me: add cannon point device ids

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Usyskin commit f8f4aa68a8ae98ed79c8fee3488c38a2f5d2de8c upstream. Add CNP LP and CNP H device ids for cannon lake and coffee lake platforms. Cc: 4.14+ Signed-off-by: Alexander

[PATCH 4.14 158/159] mei: me: add cannon point device ids for 4th device

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tomas Winkler commit 2a4ac172c2f257d28c47b90c9e381bec31edcc44 upstream. Add cannon point device ids for 4th (itouch) device. Cc: 4.14+

[PATCH 4.14 158/159] mei: me: add cannon point device ids for 4th device

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tomas Winkler commit 2a4ac172c2f257d28c47b90c9e381bec31edcc44 upstream. Add cannon point device ids for 4th (itouch) device. Cc: 4.14+ Signed-off-by: Tomas Winkler Signed-off-by: Greg

[PATCH 4.15 10/45] blk_rq_map_user_iov: fix error override

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Douglas Gilbert commit 69e0927b3774563c19b5fb32e91d75edc147fb62 upstream. During stress tests by syzkaller on the sg driver the block layer infrequently returns EINVAL.

[PATCH 4.15 10/45] blk_rq_map_user_iov: fix error override

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Douglas Gilbert commit 69e0927b3774563c19b5fb32e91d75edc147fb62 upstream. During stress tests by syzkaller on the sg driver the block layer infrequently returns EINVAL. Closer inspection

[PATCH 4.15 12/45] kcov: detect double association with a single task

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit a77660d231f8b3d84fd23ed482e0964f7aa546d6 upstream. Currently KCOV_ENABLE does not check if the current task is already associated with another kcov

[PATCH 4.15 12/45] kcov: detect double association with a single task

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit a77660d231f8b3d84fd23ed482e0964f7aa546d6 upstream. Currently KCOV_ENABLE does not check if the current task is already associated with another kcov descriptor. As the

[PATCH 4.15 13/45] netfilter: x_tables: fix int overflow in xt_alloc_table_info()

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit 889c604fd0b5f6d3b8694ade229ee44124de1127 upstream. syzkaller triggered OOM kills by passing ipt_replace.size = -1 to IPT_SO_SET_REPLACE. The root

[PATCH 4.15 13/45] netfilter: x_tables: fix int overflow in xt_alloc_table_info()

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit 889c604fd0b5f6d3b8694ade229ee44124de1127 upstream. syzkaller triggered OOM kills by passing ipt_replace.size = -1 to IPT_SO_SET_REPLACE. The root cause is that

Re: [PATCH v12 10/11] sparc64: Add support for ADI (Application Data Integrity)

2018-02-23 Thread David Miller
st ERROR on v4.16-rc2] >> [cannot apply to next-20180222] >> [if your patch is applied to the wrong git tree, please drop us a note >> to help improve the system] >> url: >> https://github.com/0day-ci/linux/commits/Khalid-Aziz/Application-Data-Integrity-feature-introduced

Re: [PATCH v12 10/11] sparc64: Add support for ADI (Application Data Integrity)

2018-02-23 Thread David Miller
t; [cannot apply to next-20180222] >> [if your patch is applied to the wrong git tree, please drop us a note >> to help improve the system] >> url: >> https://github.com/0day-ci/linux/commits/Khalid-Aziz/Application-Data-Integrity-feature-introduced-by-SPARC-M7/20180223-071725 &g

[PATCH 4.14 152/159] powerpc/perf/imc: Fix nest-imc cpuhotplug callback failure

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Anju T Sudhakar [ Upstream commit ad2b6e01024ef23bddc3ce0bcb115ecd8c520b7e ] Oops is observed during boot: Faulting instruction address: 0xc0248340 cpu

[PATCH 4.14 152/159] powerpc/perf/imc: Fix nest-imc cpuhotplug callback failure

2018-02-23 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Anju T Sudhakar [ Upstream commit ad2b6e01024ef23bddc3ce0bcb115ecd8c520b7e ] Oops is observed during boot: Faulting instruction address: 0xc0248340 cpu 0x0: Vector: 380 (Data

[PATCH 4.15 14/45] netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit da17c73b6eb74aad3c3c0654394635675b623b3e upstream. It looks like syzbot found its way into netfilter territory. Issue here is that @name comes from

[PATCH 4.15 14/45] netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit da17c73b6eb74aad3c3c0654394635675b623b3e upstream. It looks like syzbot found its way into netfilter territory. Issue here is that @name comes from user space and might

[PATCH 4.15 17/45] netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Cong Wang commit ba7cd5d95f25cc6005f687dabdb4e7a6063adda9 upstream. xt_cgroup_info_v1->priv is an internal pointer only used for kernel, we should not trust what

[PATCH 4.15 15/45] netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit 1a38956cce5eabd7b74f94bab70265e4df83165e upstream. Commit 136e92bbec0a switched local_nodes from an array to a bitmask but did not add proper bounds

[PATCH 4.15 17/45] netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Cong Wang commit ba7cd5d95f25cc6005f687dabdb4e7a6063adda9 upstream. xt_cgroup_info_v1->priv is an internal pointer only used for kernel, we should not trust what user-space provides.

[PATCH 4.15 15/45] netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit 1a38956cce5eabd7b74f94bab70265e4df83165e upstream. Commit 136e92bbec0a switched local_nodes from an array to a bitmask but did not add proper bounds checks. As the result

[PATCH 4.15 16/45] netfilter: on sockopt() acquire sock lock only in the required scope

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni commit 3f34cfae1238848fd53f25e5c8fd59da57901f4b upstream. Syzbot reported several deadlocks in the netfilter area caused by rtnl lock and socket lock being

[PATCH 4.15 16/45] netfilter: on sockopt() acquire sock lock only in the required scope

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Abeni commit 3f34cfae1238848fd53f25e5c8fd59da57901f4b upstream. Syzbot reported several deadlocks in the netfilter area caused by rtnl lock and socket lock being acquired with a

[PATCH 4.15 19/45] rds: tcp: correctly sequence cleanup on netns deletion.

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Sowmini Varadhan commit 681648e67d43cf269c5590ecf021ed481f4551fc upstream. Commit 8edc3affc077 ("rds: tcp: Take explicit refcounts on struct net") introduces a

[PATCH 4.15 19/45] rds: tcp: correctly sequence cleanup on netns deletion.

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Sowmini Varadhan commit 681648e67d43cf269c5590ecf021ed481f4551fc upstream. Commit 8edc3affc077 ("rds: tcp: Take explicit refcounts on struct net") introduces a regression in rds-tcp netns

[PATCH 4.15 20/45] rds: tcp: atomically purge entries from rds_tcp_conn_list during netns delete

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Sowmini Varadhan commit f10b4cff98c6977668434fbf5dd58695eeca2897 upstream. The rds_tcp_kill_sock() function parses the rds_tcp_conn_list to find the

[PATCH 4.15 20/45] rds: tcp: atomically purge entries from rds_tcp_conn_list during netns delete

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Sowmini Varadhan commit f10b4cff98c6977668434fbf5dd58695eeca2897 upstream. The rds_tcp_kill_sock() function parses the rds_tcp_conn_list to find the rds_connection entries marked for deletion

[PATCH 4.15 22/45] net_sched: gen_estimator: fix lockdep splat

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 40ca54e3a686f13117f3de0c443f8026dadf7c44 upstream. syzbot reported a lockdep splat in gen_new_estimator() / est_fetch_counters() when attempting to

[PATCH 4.15 22/45] net_sched: gen_estimator: fix lockdep splat

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 40ca54e3a686f13117f3de0c443f8026dadf7c44 upstream. syzbot reported a lockdep splat in gen_new_estimator() / est_fetch_counters() when attempting to lock est->stats_lock.

[PATCH 4.15 23/45] soc: qcom: rmtfs_mem: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Jesse Chan commit 3b229bdb54cc83061b4b7840e3532316cb1ac7ce upstream. This change resolves a new compile-time warning when built as a loadable module: WARNING: modpost:

[PATCH 4.15 23/45] soc: qcom: rmtfs_mem: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Jesse Chan commit 3b229bdb54cc83061b4b7840e3532316cb1ac7ce upstream. This change resolves a new compile-time warning when built as a loadable module: WARNING: modpost: missing

[PATCH 4.15 05/45] selinux: skip bounded transition processing if the policy isnt loaded

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Paul Moore commit 4b14752ec4e0d87126e636384cf37c8dd9df157c upstream. We can't do anything reasonable in security_bounded_transition() if we don't have a policy loaded,

[PATCH 4.15 05/45] selinux: skip bounded transition processing if the policy isnt loaded

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Paul Moore commit 4b14752ec4e0d87126e636384cf37c8dd9df157c upstream. We can't do anything reasonable in security_bounded_transition() if we don't have a policy loaded, and in fact we could

[PATCH 4.15 03/45] ptr_ring: try vmalloc() when kmalloc() fails

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang commit 0bf7800f1799b5b1fd7d4f024e9ece53ac489011 upstream. This patch switch to use kvmalloc_array() for using a vmalloc() fallback to help in case kmalloc()

[PATCH 4.15 03/45] ptr_ring: try vmalloc() when kmalloc() fails

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang commit 0bf7800f1799b5b1fd7d4f024e9ece53ac489011 upstream. This patch switch to use kvmalloc_array() for using a vmalloc() fallback to help in case kmalloc() fails. Reported-by:

[PATCH 4.15 07/45] crypto: x86/twofish-3way - Fix %rbp usage

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers commit d8c7fe9f2a486a6e5f0d5229ca43807af5ab22c6 upstream. Using %rbp as a temporary register breaks frame pointer convention and breaks stack traces when

[PATCH 4.15 07/45] crypto: x86/twofish-3way - Fix %rbp usage

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers commit d8c7fe9f2a486a6e5f0d5229ca43807af5ab22c6 upstream. Using %rbp as a temporary register breaks frame pointer convention and breaks stack traces when unwinding from an

[PATCH 4.15 08/45] staging: android: ion: Add __GFP_NOWARN for system contig heap

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit 0c75f10312a35b149b2cebb1832316b35c2337ca upstream. syzbot reported a warning from Ion: WARNING: CPU: 1 PID: 3485 at mm/page_alloc.c:3926 ...

[PATCH 4.15 08/45] staging: android: ion: Add __GFP_NOWARN for system contig heap

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit 0c75f10312a35b149b2cebb1832316b35c2337ca upstream. syzbot reported a warning from Ion: WARNING: CPU: 1 PID: 3485 at mm/page_alloc.c:3926 ...

Re: [Xen-devel] [RFC PATCH v2 2/9] hyper_dmabuf: architecture specification and reference guide

2018-02-23 Thread Dongwon Kim
Thanks for your comment, Roger I will try to polish this doc and resubmit. (I put some comments below as well.) On Fri, Feb 23, 2018 at 04:15:00PM +, Roger Pau Monné wrote: > On Tue, Feb 13, 2018 at 05:50:01PM -0800, Dongwon Kim wrote: > > Reference document for hyper_DMABUF driver > > > >

Re: [Xen-devel] [RFC PATCH v2 2/9] hyper_dmabuf: architecture specification and reference guide

2018-02-23 Thread Dongwon Kim
Thanks for your comment, Roger I will try to polish this doc and resubmit. (I put some comments below as well.) On Fri, Feb 23, 2018 at 04:15:00PM +, Roger Pau Monné wrote: > On Tue, Feb 13, 2018 at 05:50:01PM -0800, Dongwon Kim wrote: > > Reference document for hyper_DMABUF driver > > > >

[PATCH 4.15 09/45] staging: android: ion: Switch from WARN to pr_warn

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit e4e179a844f52e907e550f887d0a2171f1508af1 upstream. Syzbot reported a warning with Ion: WARNING: CPU: 0 PID: 3502 at

[PATCH 4.15 09/45] staging: android: ion: Switch from WARN to pr_warn

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Laura Abbott commit e4e179a844f52e907e550f887d0a2171f1508af1 upstream. Syzbot reported a warning with Ion: WARNING: CPU: 0 PID: 3502 at drivers/staging/android/ion/ion-ioctl.c:73

[PATCH 4.15 25/45] video: fbdev/mmp: add MODULE_LICENSE

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit c1530ac5a3ce93a1f02adabc4508b5fbf862dfe2 upstream. Kbuild complains about the lack of a license tag in this driver: WARNING: modpost: missing

[PATCH 4.15 25/45] video: fbdev/mmp: add MODULE_LICENSE

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit c1530ac5a3ce93a1f02adabc4508b5fbf862dfe2 upstream. Kbuild complains about the lack of a license tag in this driver: WARNING: modpost: missing MODULE_LICENSE() in

[PATCH 4.15 36/45] staging: iio: ad5933: switch buffer mode to software

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Alexandru Ardelean commit 7d2b8e6aaf9ee87910c2337e1c59bb5d3e3ba8c5 upstream. Since commit 152a6a884ae1 ("staging:iio:accel:sca3000 move to hybrid hard / soft

[PATCH 4.15 36/45] staging: iio: ad5933: switch buffer mode to software

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Alexandru Ardelean commit 7d2b8e6aaf9ee87910c2337e1c59bb5d3e3ba8c5 upstream. Since commit 152a6a884ae1 ("staging:iio:accel:sca3000 move to hybrid hard / soft buffer design.") the buffer

[PATCH 4.15 35/45] staging: iio: adc: ad7192: fix external frequency setting

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Alexandru Ardelean commit e31b617d0a63c6558485aaa730fd162faa95a766 upstream. The external clock frequency was set only when selecting the internal clock, which

[PATCH 4.15 35/45] staging: iio: adc: ad7192: fix external frequency setting

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Alexandru Ardelean commit e31b617d0a63c6558485aaa730fd162faa95a766 upstream. The external clock frequency was set only when selecting the internal clock, which is fixed at 4.9152 Mhz. This

[PATCH 4.15 42/45] crypto: s5p-sss - Fix kernel Oops in AES-ECB mode

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Kamil Konieczny commit c927b080c67e3e97193c81fc1d27f4251bf4e036 upstream. In AES-ECB mode crypt is done with key only, so any use of IV can cause kernel Oops.

[PATCH 4.15 41/45] usbip: keep usbip_device sockfd state in sync with tcp_socket

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan commit 009f41aed4b3e11e6dc1e3c07377a10c20f1a5ed upstream. Keep usbip_device sockfd state in sync with tcp_socket. When tcp_socket is reset to null, reset

[PATCH 4.15 39/45] xhci: xhci debugfs device nodes werent removed after device plugged out

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Zhengjun Xing commit 8c5a93ebf7ac56d47f879b3c7c2f8c83b40c2cdb upstream. There is a bug after plugged out USB device, the device and its ep00 nodes are still

[PATCH 4.15 42/45] crypto: s5p-sss - Fix kernel Oops in AES-ECB mode

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Kamil Konieczny commit c927b080c67e3e97193c81fc1d27f4251bf4e036 upstream. In AES-ECB mode crypt is done with key only, so any use of IV can cause kernel Oops. Use IV only in AES-CBC and

[PATCH 4.15 41/45] usbip: keep usbip_device sockfd state in sync with tcp_socket

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan commit 009f41aed4b3e11e6dc1e3c07377a10c20f1a5ed upstream. Keep usbip_device sockfd state in sync with tcp_socket. When tcp_socket is reset to null, reset sockfd to -1 to keep it in

[PATCH 4.15 39/45] xhci: xhci debugfs device nodes werent removed after device plugged out

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Zhengjun Xing commit 8c5a93ebf7ac56d47f879b3c7c2f8c83b40c2cdb upstream. There is a bug after plugged out USB device, the device and its ep00 nodes are still kept, we need to remove the nodes

[PATCH 4.15 40/45] xhci: fix xhci debugfs errors in xhci_stop

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Zhengjun Xing commit 11cd764dc9a030991880ad4d51db93918afa5822 upstream. In function xhci_stop, xhci_debugfs_exit called before xhci_mem_cleanup.

[PATCH 4.15 40/45] xhci: fix xhci debugfs errors in xhci_stop

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Zhengjun Xing commit 11cd764dc9a030991880ad4d51db93918afa5822 upstream. In function xhci_stop, xhci_debugfs_exit called before xhci_mem_cleanup. xhci_debugfs_exit removed the xhci debugfs

[PATCH 4.15 26/45] ARM: 8743/1: bL_switcher: add MODULE_LICENSE tag

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit a21b4c10c7bf5b58112afa20d6fa829e8d74e3e6 upstream. Without this tag, we get a build warning: WARNING: modpost: missing MODULE_LICENSE() in

[PATCH 4.15 26/45] ARM: 8743/1: bL_switcher: add MODULE_LICENSE tag

2018-02-23 Thread Greg Kroah-Hartman
4.15-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit a21b4c10c7bf5b58112afa20d6fa829e8d74e3e6 upstream. Without this tag, we get a build warning: WARNING: modpost: missing MODULE_LICENSE() in

<    8   9   10   11   12   13   14   15   16   17   >