[PATCH 4.19 63/68] selftests: firmware: fix verify_reqs() return value

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Luis Chamberlain commit 344c0152d878922365464b7140c74c2a5e073d99 upstream. commit a6a9be9270c87 ("selftests: firmware: return Kselftest Skip code for skipped tests") by Shuah modified failures

[PATCH 4.19 52/68] net: sched: act_tunnel_key: fix NULL pointer dereference during init

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Vlad Buslov [ Upstream commit a3df633a3c92bb96b06552c3f828d7c267774379 ] Metadata pointer is only initialized for action TCA_TUNNEL_KEY_ACT_SET, but it is unconditionally dereferenced in tunne

[PATCH 4.19 57/68] applicom: Fix potential Spectre v1 vulnerabilities

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit d7ac3c6ef5d8ce14b6381d52eb7adafdd6c8bb3c upstream. IndexCard is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant

[PATCH 4.19 39/68] xen-netback: dont populate the hash cache on XenBus disconnect

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Igor Druzhinin [ Upstream commit a2288d4e355992d369c50c45d017a85f6061ff71 ] Occasionally, during the disconnection procedure on XenBus which includes hash cache deinitialization there might be

[PATCH 4.19 55/68] tracing: Fix event filters and triggers to handle negative numbers

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Pavel Tikhomirov commit 6a072128d262d2b98d31626906a96700d1fc11eb upstream. Then tracing syscall exit event it is extremely useful to filter exit codes equal to some negative value, to react on

[PATCH 4.19 56/68] usb: xhci: Fix for Enabling USB ROLE SWITCH QUIRK on INTEL_SUNRISEPOINT_LP_XHCI

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Balaji Manoharan commit 8fde481ef3674ae5ad0dbfef4df18ff507c5675a upstream. This fix enables USB role feature on intel commercial nuc platform which is based on Kabylake chipset. Signed-off-by

[PATCH 4.19 53/68] x86/CPU/AMD: Set the CPB bit unconditionally on F17h

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jiaxun Yang commit 0237199186e7a4aa5310741f0a6498a20c820fd7 upstream. Some F17h models do not have CPB set in CPUID even though the CPU supports it. Set the feature bit unconditionally on all

[PATCH 4.19 54/68] x86/boot/compressed/64: Do not read legacy ROM on EFI system

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Kirill A. Shutemov commit 6f913de3231e1d70a871135b38219da7810df218 upstream. EFI systems do not necessarily provide a legacy ROM. If the ROM is missing the memory is not mapped at all. Trying

[PATCH 4.19 50/68] net/sched: act_ipt: fix refcount leak when replace fails

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Davide Caratti [ Upstream commit 8f67c90ee9148eab3d2b4393c3cf76489b27f87c ] After commit 4e8ddd7f1758 ("net: sched: don't release reference on action overwrite"), the error path of all actions

[PATCH 4.19 08/68] staging: comedi: ni_660x: fix missing break in switch statement

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 479826cc86118e0d87e5cefb3df5b748e0480924 upstream. Add missing break statement in order to prevent the code from falling through to the default case and return -EINV

[PATCH 4.19 49/68] net: dsa: mv88e6xxx: prevent interrupt storm caused by mv88e6390x_port_set_cmode

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Heiner Kallweit [ Upstream commit ed8fe20205ac054bf585156709de3913d1890f30 ] When debugging another issue I faced an interrupt storm in this driver (88E6390, port 9 in SGMII mode), consisting

[PATCH 4.19 06/68] staging: erofs: fix illegal address access under memory pressure

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gao Xiang commit 1e5ceeab6929585512c63d05911d6657064abf7b upstream. Considering a read request with two decompressed file pages, If a decompression work cannot be started on the previous page

[PATCH 4.19 48/68] net: dsa: mv88e6xxx: power serdes on/off for 10G interfaces on 6390X

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Maxime Chevallier [ Upstream commit d235c48b40d399328585a68f3f9bf7cc3062d586 ] Upon setting the cmode on 6390 and 6390X, the associated serdes interfaces must be powered off/on. Both 6390X an

[PATCH 4.19 00/68] 4.19.28-stable review

This is the start of the stable review cycle for the 4.19.28 release. There are 68 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun Mar 10 12:48:45 UTC 2019. Anything receiv

[PATCH 4.19 38/68] tun: fix blocking read

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Timur Celik [ Upstream commit 71828b2240692cec0e68b8d867bc00e1745e7fae ] This patch moves setting of the current state into the loop. Otherwise the task may end up in a busy wait loop if none

[PATCH 4.19 05/68] USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Mans Rullgard commit 8d7fa3d4ea3f0ca69554215e87411494e6346fdc upstream. This adds the USB ID of the Hjelmslund Electronics USB485 Iso stick. Signed-off-by: Mans Rullgard Cc: stable Signed-o

[PATCH 4.19 36/68] net: socket: set sock->sk to NULL after calling proto_ops::release()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers [ Upstream commit ff7b11aa481f682e0e9711abfeb7d03f5cd612bf ] Commit 9060cb719e61 ("net: crypto set sk to NULL when af_alg_release.") fixed a use-after-free in sockfs_setattr() whe

[PATCH 4.19 07/68] staging: erofs: compressed_pages should not be accessed again after freed

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gao Xiang commit af692e117cb8cd9d3d844d413095775abc1217f9 upstream. This patch resolves the following page use-after-free issue, z_erofs_vle_unzip: ... for (i = 0; i < nr_pages; ++i) {

[PATCH 4.19 03/68] USB: serial: option: add Telit ME910 ECM composition

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Daniele Palmas commit 6431866b6707d27151be381252d6eef13025cfce upstream. This patch adds Telit ME910 family ECM composition 0x1102. Signed-off-by: Daniele Palmas Cc: stable Signed-off-by: J

[PATCH 4.19 34/68] net: phy: phylink: fix uninitialized variable in phylink_get_mac_state

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Heiner Kallweit [ Upstream commit d25ed413d5e51644e18f66e34eec049f17a7abcb ] When debugging an issue I found implausible values in state->pause. Reason in that state->pause isn't initialized a

[PATCH 4.19 04/68] USB: serial: cp210x: add ID for Ingenico 3070

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ivan Mironov commit dd9d3d86b08d6a106830364879c42c78db85389c upstream. Here is how this device appears in kernel log: usb 3-1: new full-speed USB device number 18 using xhci_hcd

[PATCH 4.19 35/68] net: sit: fix memory leak in sit_init_net()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Mao Wenan [ Upstream commit 07f12b26e21ab359261bf75cfcb424fdc7daeb6d ] If register_netdev() is failed to register sitn->fb_tunnel_dev, it will go to err_reg_dev and forget to free netdev(sitn-

[PATCH 4.19 22/68] tipc: fix RDM/DGRAM connect() regression

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Erik Hugne [ Upstream commit 0e63208915a8d7590d0a6218dadb2a6a00ac705a ] Fix regression bug introduced in commit 365ad353c256 ("tipc: reduce risk of user starvation during link congestion") On

[PATCH 4.19 23/68] bnxt_en: Drop oversize TX packets to prevent errors.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Michael Chan [ Upstream commit 2b3c6885386020b1b9d92d45e8349637e27d1f66 ] There have been reports of oversize UDP packets being sent to the driver to be transmitted, causing error conditions.

[PATCH 4.19 33/68] net: phy: Micrel KSZ8061: link failure after cable connect

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Rajasingh Thavamani [ Upstream commit 232ba3a51cc224b339c7114888ed7f0d4d95695e ] With Micrel KSZ8061 PHY, the link may occasionally not come up after Ethernet cable connect. The vendor's (Micr

[PATCH 4.19 29/68] net: dsa: mv88e6xxx: Fix u64 statistics

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Lunn [ Upstream commit 6e46e2d821bb22b285ae8187959096b65d063b0d ] The switch maintains u64 counters for the number of octets sent and received. These are kept as two u32's which need to

[PATCH 4.19 26/68] ipv4: Add ICMPv6 support when parse route ipproto

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hangbin Liu [ Upstream commit 5e1a99eae84999a2536f50a0beaf5d5262337f40 ] For ip rules, we need to use 'ipproto ipv6-icmp' to match ICMPv6 headers. But for ip -6 route, currently we only suppor

[PATCH 4.19 30/68] netlabel: fix out-of-bounds memory accesses

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Paul Moore [ Upstream commit 5578de4834fe0f2a34fedc7374be691443396d1f ] There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().

[PATCH 4.19 28/68] net: dsa: mv88e6xxx: Fix statistics on mv88e6161

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Lunn [ Upstream commit a6da21bb0eae459a375d5bd48baed821d14301d0 ] Despite what the datesheet says, the silicon implements the older way of snapshoting the statistics. Change the op. Re

[PATCH 4.19 21/68] team: Free BPF filter when unregistering netdev

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ido Schimmel [ Upstream commit 692c31bd4054212312396b1d303bffab2c5b93a7 ] When team is used in loadbalance mode a BPF filter can be used to provide a hash which will determine the Tx port. Wh

[PATCH 4.19 25/68] hv_netvsc: Fix IP header checksum for coalesced packets

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Haiyang Zhang [ Upstream commit bf48648d650db1146b75b9bd358502431e86cf4f ] Incoming packets may have IP header checksum verified by the host. They may not have IP header checksum computed afte

[PATCH 4.19 24/68] geneve: correctly handle ipv6.disable module parameter

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Benc [ Upstream commit cf1c9ccba7308e48a68fa77f476287d9d614e4c7 ] When IPv6 is compiled but disabled at runtime, geneve_sock_add returns -EAFNOSUPPORT. For metadata based tunnels, this ca

[PATCH 4.20 35/76] net: dsa: mv88e6xxx: Fix statistics on mv88e6161

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Lunn [ Upstream commit a6da21bb0eae459a375d5bd48baed821d14301d0 ] Despite what the datesheet says, the silicon implements the older way of snapshoting the statistics. Change the op. Re

[PATCH 4.19 16/68] net: sched: put back q.qlen into a single location

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 46b1c18f9deb326a7e18348e668e4c7ab7c7458b ] In the series fc8b81a5981f ("Merge branch 'lockless-qdisc-series'") John made the assumption that the data path had no

[PATCH 4.19 19/68] sctp: call iov_iter_revert() after sending ABORT

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 901efe12318b1ea8d3e2c88a7b75ed6e6d5d7245 ] The user msg is also copied to the abort packet when doing SCTP_ABORT in sctp_sendmsg_check_sflags(). When SCTP_SENDALL is

[PATCH 4.19 02/68] staging: erofs: fix mis-acted TAIL merging behavior

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gao Xiang commit a112152f6f3a2a88caa6f414d540bd49e406af60 upstream. EROFS has an optimized path called TAIL merging, which is designed to merge multiple reads and the corresponding decompressi

[PATCH 4.19 18/68] qmi_wwan: Add support for Quectel EG12/EM12

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Kristian Evensen [ Upstream commit 822e44b45eb991c63487c5e2ce7d636411870a8d ] Quectel EG12 (module)/EM12 (M.2 card) is a Cat. 12 LTE modem. The modem behaves in the same way as the EP06, so th

[PATCH 4.19 20/68] sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Kai-Heng Feng [ Upstream commit b33b7cd6fd86478dd2890a9abeb6f036aa01fdf7 ] Some sky2 chips fire IRQ after S3, before the driver is fully resumed: [ 686.804877] do_IRQ: 1.37 No irq handler for

[PATCH 4.20 75/76] scsi: core: reset host byte in DID_NEXUS_FAILURE case

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Martin Wilck commit 4a067cf823d9d8e50d41cfb618011c0d4a969c72 upstream. Up to 4.12, __scsi_error_from_host_byte() would reset the host byte to DID_OK for various cases including DID_NEXUS_FAILU

[PATCH 4.20 39/76] net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails

4.20-stable review patch. If anyone has any objections, please let me know. -- From: YueHaibing [ Upstream commit 58bdd544e2933a21a51eecf17c3f5f94038261b5 ] KASAN report this: BUG: KASAN: null-ptr-deref in nfc_llcp_build_gb+0x37f/0x540 [nfc] Read of size 3 at addr 000

[PATCH 4.20 38/76] net: netem: fix skb length BUG_ON in __skb_to_sgvec

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Sheng Lan [ Upstream commit 5845f706388a4cde0f6b80f9e5d33527e942b7d9 ] It can be reproduced by following steps: 1. virtio_net NIC is configured with gso/tso on 2. configure nginx as http serve

[PATCH 4.20 76/76] bpf: fix sanitation rewrite in case of non-pointers

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann commit 3612af783cf52c74a031a2f11b82247b2599d3cd upstream. Marek reported that he saw an issue with the below snippet in that timing measurements where off when loaded as unpriv

[PATCH 4.20 30/76] bnxt_en: Drop oversize TX packets to prevent errors.

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Michael Chan [ Upstream commit 2b3c6885386020b1b9d92d45e8349637e27d1f66 ] There have been reports of oversize UDP packets being sent to the driver to be transmitted, causing error conditions.

[PATCH 4.19 01/68] cpufreq: Use struct kobj_attribute instead of struct global_attr

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Viresh Kumar commit 625c85a62cb7d3c79f6e16de3cfa972033658250 upstream. The cpufreq_global_kobject is created using kobject_create_and_add() helper, which assigns the kobj_type as dynamic_kobj_

[PATCH 4.20 37/76] netlabel: fix out-of-bounds memory accesses

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Paul Moore [ Upstream commit 5578de4834fe0f2a34fedc7374be691443396d1f ] There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().

[PATCH 4.20 36/76] net: dsa: mv88e6xxx: Fix u64 statistics

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Lunn [ Upstream commit 6e46e2d821bb22b285ae8187959096b65d063b0d ] The switch maintains u64 counters for the number of octets sent and received. These are kept as two u32's which need to

[PATCH 4.19 11/68] staging: android: ashmem: Dont call fallocate() with ashmem_mutex held.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit fb4415a12632f0b9078a0aa80c16745d48fcfc74 upstream. syzbot is hitting lockdep warnings [1][2][3]. This patch tries to fix the warning by eliminating ashmem_shrink_scan() =>

[PATCH 4.19 12/68] staging: android: ashmem: Avoid range_alloc() allocation with ashmem_mutex held.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit ecd182cbf4e107928077866399100228d2359c60 upstream. ashmem_pin() is calling range_shrink() without checking whether range_alloc() succeeded. Also, doing memory allocation wi

[PATCH 4.19 10/68] staging: android: ion: fix sys heap pools gfp_flags

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Qing Xia commit 9bcf065e28122588a6cbee08cf847826dacbb438 upstream. In the first loop, gfp_flags will be modified to high_order_gfp_flags, and there will be no chance to change back to low_orde

[PATCH 4.20 67/76] aio: Fix locking in aio_poll()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Bart Van Assche commit d3d6a18d7d351cbcc9b33dbedf710e65f8ce1595 upstream. wake_up_locked() may but does not have to be called with interrupts disabled. Since the fuse filesystem calls wake_up_

[PATCH 4.20 34/76] lan743x: Fix TX Stall Issue

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Bryan Whitehead [ Upstream commit 90490ef7269906423a1c1b917fc24be8b1602658 ] It has been observed that tx queue stalls while downloading from certain web sites (example www.speedtest.net) The

[PATCH 4.20 74/76] exec: Fix mem leak in kernel_read_file

4.20-stable review patch. If anyone has any objections, please let me know. -- From: YueHaibing commit f612acfae86af7ecad754ae6a46019be9da05b8e upstream. syzkaller report this: BUG: memory leak unreferenced object 0xc9000488d000 (size 9195520): comm "syz-executor.0", pid

[PATCH 4.20 68/76] xtensa: fix get_wchan

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Max Filippov commit d90b88fd3653f1fb66ecc6571b860d5a5749fa56 upstream. Stack unwinding is implemented incorrectly in xtensa get_wchan: instead of extracting a0 and a1 registers from the spill

[PATCH 4.20 72/76] Bluetooth: btrtl: Restore old logic to assume firmware is already loaded

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Kai-Heng Feng commit 00df214b1faae520880cc5c57e206f21239ef741 upstream. Realtek bluetooth may not work after reboot: [ 12.446130] Bluetooth: hci0: RTL: rtl: unknown IC info, lmp subver a99e,

[PATCH 4.20 73/76] Bluetooth: Fix locking in bt_accept_enqueue() for BH context

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Matthias Kaehlcke commit c4f5627f7eeecde1bb6b646d8c0907b96dc2b2a6 upstream. With commit e16337622016 ("Bluetooth: Handle bt_accept_enqueue() socket atomically") lock_sock[_nested]() is used to

[PATCH 4.20 57/76] net/sched: act_ipt: fix refcount leak when replace fails

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Davide Caratti [ Upstream commit 8f67c90ee9148eab3d2b4393c3cf76489b27f87c ] After commit 4e8ddd7f1758 ("net: sched: don't release reference on action overwrite"), the error path of all actions

[PATCH 4.20 55/76] net: dsa: mv88e6xxx: power serdes on/off for 10G interfaces on 6390X

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Maxime Chevallier [ Upstream commit d235c48b40d399328585a68f3f9bf7cc3062d586 ] Upon setting the cmode on 6390 and 6390X, the associated serdes interfaces must be powered off/on. Both 6390X an

[PATCH 4.20 56/76] net: dsa: mv88e6xxx: prevent interrupt storm caused by mv88e6390x_port_set_cmode

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Heiner Kallweit [ Upstream commit ed8fe20205ac054bf585156709de3913d1890f30 ] When debugging another issue I faced an interrupt storm in this driver (88E6390, port 9 in SGMII mode), consisting

[PATCH 4.20 65/76] applicom: Fix potential Spectre v1 vulnerabilities

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit d7ac3c6ef5d8ce14b6381d52eb7adafdd6c8bb3c upstream. IndexCard is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant

[PATCH 4.20 60/76] x86/CPU/AMD: Set the CPB bit unconditionally on F17h

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jiaxun Yang commit 0237199186e7a4aa5310741f0a6498a20c820fd7 upstream. Some F17h models do not have CPB set in CPUID even though the CPU supports it. Set the feature bit unconditionally on all

[PATCH 4.20 54/76] ipv4: Pass original device to ip_rcv_finish_core

4.20-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit a1fd1ad2552fad9e649eeb85fd79301e2880a886 ] ip_route_input_rcu expects the original ingress device (e.g., for proper multicast handling). The skb->dev can be chang

[PATCH 4.20 64/76] usb: xhci: Fix for Enabling USB ROLE SWITCH QUIRK on INTEL_SUNRISEPOINT_LP_XHCI

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Balaji Manoharan commit 8fde481ef3674ae5ad0dbfef4df18ff507c5675a upstream. This fix enables USB role feature on intel commercial nuc platform which is based on Kabylake chipset. Signed-off-by

[PATCH 4.20 63/76] xhci: tegra: Prevent error pointer dereference

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Thierry Reding commit 0326ccb5feac6eac35ba6254260e2774277cd976 upstream. During initialization, the host and super-speed power domains will contain an ERR_PTR() encoded error code rather than

Re: [RFC PATCH V2 5/5] vhost: access vq metadata through kernel virtual address

On Fri, Mar 08, 2019 at 04:58:44PM +0800, Jason Wang wrote: > > On 2019/3/8 上午3:17, Jerome Glisse wrote: > > On Thu, Mar 07, 2019 at 12:56:45PM -0500, Michael S. Tsirkin wrote: > > > On Thu, Mar 07, 2019 at 10:47:22AM -0500, Michael S. Tsirkin wrote: > > > > On Wed, Mar 06, 2019 at 02:18:12AM -050

[PATCH 4.20 53/76] mpls: Return error for RTA_GATEWAY attribute

4.20-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit be48220edd48ca0d569782992840488a52373a24 ] MPLS does not support nexthops with an MPLS address family. Specifically, it does not handle RTA_GATEWAY attribute. Mak

[PATCH 4.20 52/76] ipv6: Return error for RTA_VIA attribute

4.20-stable review patch. If anyone has any objections, please let me know. -- From: David Ahern [ Upstream commit e3818541b49fb88650ba339d33cc53e4095da5b3 ] IPv6 currently does not support nexthops outside of the AF_INET6 family. Specifically, it does not handle RTA_VIA attri

[PATCH 4.20 31/76] geneve: correctly handle ipv6.disable module parameter

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Benc [ Upstream commit cf1c9ccba7308e48a68fa77f476287d9d614e4c7 ] When IPv6 is compiled but disabled at runtime, geneve_sock_add returns -EAFNOSUPPORT. For metadata based tunnels, this ca

[PATCH 4.20 42/76] net: sit: fix memory leak in sit_init_net()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Mao Wenan [ Upstream commit 07f12b26e21ab359261bf75cfcb424fdc7daeb6d ] If register_netdev() is failed to register sitn->fb_tunnel_dev, it will go to err_reg_dev and forget to free netdev(sitn-

[PATCH 4.20 00/76] 4.20.15-stable review

This is the start of the stable review cycle for the 4.20.15 release. There are 76 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun Mar 10 12:48:49 UTC 2019. Anything receiv

[PATCH 4.20 40/76] net: phy: Micrel KSZ8061: link failure after cable connect

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Rajasingh Thavamani [ Upstream commit 232ba3a51cc224b339c7114888ed7f0d4d95695e ] With Micrel KSZ8061 PHY, the link may occasionally not come up after Ethernet cable connect. The vendor's (Micr

[PATCH 4.20 50/76] net: avoid use IPCB in cipso_v4_error

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Nazarov Sergey [ Upstream commit 3da1ed7ac398f34fff1694017a07054d69c5f5c5 ] Extract IP options in cipso_v4_error and use __icmp_send. Signed-off-by: Sergey Nazarov Acked-by: Paul Moore Sign

[PATCH 4.20 49/76] net: Add __icmp_send helper.

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Nazarov Sergey [ Upstream commit 9ef6b42ad6fd7929dd1b6092cb02014e382c6a91 ] Add __icmp_send function having ip_options struct parameter Signed-off-by: Sergey Nazarov Reviewed-by: Paul Moore

[PATCH 4.20 43/76] net: socket: set sock->sk to NULL after calling proto_ops::release()

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers [ Upstream commit ff7b11aa481f682e0e9711abfeb7d03f5cd612bf ] Commit 9060cb719e61 ("net: crypto set sk to NULL when af_alg_release.") fixed a use-after-free in sockfs_setattr() whe

[PATCH 4.20 48/76] tun: remove unnecessary memory barrier

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Timur Celik [ Upstream commit ecef67cb10db7b83b3b71c61dbb29aa070ab0112 ] Replace set_current_state with __set_current_state since no memory barrier is needed at this point. Signed-off-by: Tim

[PATCH 4.20 44/76] tipc: fix race condition causing hung sendto

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Tung Nguyen [ Upstream commit bfd07f3dd4f111b884d7922b37eb239280f83d8c ] When sending multicast messages via blocking socket, if sending link is congested (tsk->cong_link_cnt is set to 1), the

[PATCH 4.20 08/76] staging: erofs: fix fast symlink w/o xattr when fs xattr is on

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Gao Xiang commit 7077fffcb0b0b65dc75e341306aeef4d0e7f2ec6 upstream. Currently, this will hit a BUG_ON for these symlinks as follows: - kernel message [ cut here ] kern

[PATCH 4.20 05/76] USB: serial: cp210x: add ID for Ingenico 3070

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Ivan Mironov commit dd9d3d86b08d6a106830364879c42c78db85389c upstream. Here is how this device appears in kernel log: usb 3-1: new full-speed USB device number 18 using xhci_hcd

[PATCH 4.20 04/76] USB: serial: option: add Telit ME910 ECM composition

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Daniele Palmas commit 6431866b6707d27151be381252d6eef13025cfce upstream. This patch adds Telit ME910 family ECM composition 0x1102. Signed-off-by: Daniele Palmas Cc: stable Signed-off-by: J

[PATCH 4.20 03/76] binder: create node flag to request senders security context

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Todd Kjos commit ec74136ded792deed80780a2f8baf3521eeb72f9 upstream. To allow servers to verify client identity, allow a node flag to be set that causes the sender's security context to be deli

[PATCH 4.20 06/76] USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Mans Rullgard commit 8d7fa3d4ea3f0ca69554215e87411494e6346fdc upstream. This adds the USB ID of the Hjelmslund Electronics USB485 Iso stick. Signed-off-by: Mans Rullgard Cc: stable Signed-o

[PATCH 4.20 09/76] staging: erofs: fix memleak of inodes shared xattr array

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Sheng Yong commit 3b1b5291f79d040d549d7c746669fc30e8045b9b upstream. If it fails to read a shared xattr page, the inode's shared xattr array is not freed. The next time the inode's xattr is ac

[PATCH 4.20 23/76] net: sched: put back q.qlen into a single location

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 46b1c18f9deb326a7e18348e668e4c7ab7c7458b ] In the series fc8b81a5981f ("Merge branch 'lockless-qdisc-series'") John made the assumption that the data path had no

[PATCH 4.20 29/76] tipc: fix RDM/DGRAM connect() regression

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Erik Hugne [ Upstream commit 0e63208915a8d7590d0a6218dadb2a6a00ac705a ] Fix regression bug introduced in commit 365ad353c256 ("tipc: reduce risk of user starvation during link congestion") On

[PATCH 4.20 22/76] net: mscc: Enable all ports in QSGMII

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Kavya Sree Kotagiri [ Upstream commit 084e5bb16bd7dc2b551bbd9fb358bf73e03ee8d8 ] When Ocelot phy-mode is QSGMII, all 4 ports involved in QSGMII shall be kept out of reset and Tx lanes shall be

[PATCH 4.20 24/76] net-sysfs: Fix mem leak in netdev_register_kobject

4.20-stable review patch. If anyone has any objections, please let me know. -- From: YueHaibing [ Upstream commit 895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab ] syzkaller report this: BUG: memory leak unreferenced object 0x88837a71a500 (size 256): comm "syz-executor.2", pid

[PATCH 4.20 25/76] qmi_wwan: Add support for Quectel EG12/EM12

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Kristian Evensen [ Upstream commit 822e44b45eb991c63487c5e2ce7d636411870a8d ] Quectel EG12 (module)/EM12 (M.2 card) is a Cat. 12 LTE modem. The modem behaves in the same way as the EP06, so th

[PATCH 4.20 28/76] team: Free BPF filter when unregistering netdev

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Ido Schimmel [ Upstream commit 692c31bd4054212312396b1d303bffab2c5b93a7 ] When team is used in loadbalance mode a BPF filter can be used to provide a hash which will determine the Tx port. Wh

[PATCH 4.20 27/76] sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Kai-Heng Feng [ Upstream commit b33b7cd6fd86478dd2890a9abeb6f036aa01fdf7 ] Some sky2 chips fire IRQ after S3, before the driver is fully resumed: [ 686.804877] do_IRQ: 1.37 No irq handler for

[PATCH 4.20 21/76] net: dsa: mv8e6xxx: fix number of internal PHYs for 88E6x90 family

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Heiner Kallweit [ Upstream commit 95150f29ae480276e76368cdf8a9524b5a96c0ca ] Ports 9 and 10 don't have internal PHY's but are (dependent on the version) SERDES/SGMII/XAUI/RXAUI ports. v2: - f

[PATCH 4.20 15/76] staging: android: ion: fix sys heap pools gfp_flags

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Qing Xia commit 9bcf065e28122588a6cbee08cf847826dacbb438 upstream. In the first loop, gfp_flags will be modified to high_order_gfp_flags, and there will be no chance to change back to low_orde

[PATCH 4.20 14/76] staging: wilc1000: fix to set correct value for vif_num

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Ajay Singh commit dda037057a572f5c82ac2499eb4e6fb17600ba3e upstream. Set correct value in '->vif_num' for the total number of interfaces and set '->idx' value using 'i'. Fixes: 735bb39ca3be (

[PATCH 4.20 13/76] staging: comedi: ni_660x: fix missing break in switch statement

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 479826cc86118e0d87e5cefb3df5b748e0480924 upstream. Add missing break statement in order to prevent the code from falling through to the default case and return -EINV

[PATCH 4.20 16/76] staging: android: ashmem: Dont call fallocate() with ashmem_mutex held.

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit fb4415a12632f0b9078a0aa80c16745d48fcfc74 upstream. syzbot is hitting lockdep warnings [1][2][3]. This patch tries to fix the warning by eliminating ashmem_shrink_scan() =>

[PATCH 4.20 19/76] net: dsa: mv88e6xxx: add call to mv88e6xxx_ports_cmode_init to probe for new DSA framework

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Heiner Kallweit [ Upstream commit 3acca1dd17060332cfab15693733cdaf9fba1c90 ] In the original patch I missed to add mv88e6xxx_ports_cmode_init() to the second probe function, the one for the ne

[PATCH 4.20 20/76] net: dsa: mv88e6xxx: handle unknown duplex modes gracefully in mv88e6xxx_port_set_duplex

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Heiner Kallweit [ Upstream commit c6195a8bdfc62a7cecf7df685e64847a4b700275 ] When testing another issue I faced the problem that mv88e6xxx_port_setup_mac() failed due to DUPLEX_UNKNOWN being p

[PATCH 4.20 17/76] staging: android: ashmem: Avoid range_alloc() allocation with ashmem_mutex held.

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit ecd182cbf4e107928077866399100228d2359c60 upstream. ashmem_pin() is calling range_shrink() without checking whether range_alloc() succeeded. Also, doing memory allocation wi

[PATCH 4.20 18/76] ip6mr: Do not call __IP6_INC_STATS() from preemptible context

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Ido Schimmel [ Upstream commit 87c11f1ddbbad38ad8bad47af133a8208985fbdf ] Similar to commit 44f49dd8b5a6 ("ipmr: fix possible race resulting from improper usage of IP_INC_STATS_BH() in preempt

[PATCH 4.20 02/76] staging: erofs: fix mis-acted TAIL merging behavior

4.20-stable review patch. If anyone has any objections, please let me know. -- From: Gao Xiang commit a112152f6f3a2a88caa6f414d540bd49e406af60 upstream. EROFS has an optimized path called TAIL merging, which is designed to merge multiple reads and the corresponding decompressi

[PATCH 5.0 34/46] applicom: Fix potential Spectre v1 vulnerabilities

5.0-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit d7ac3c6ef5d8ce14b6381d52eb7adafdd6c8bb3c upstream. IndexCard is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant

[PATCH 5.0 45/46] Bluetooth: Fix locking in bt_accept_enqueue() for BH context

5.0-stable review patch. If anyone has any objections, please let me know. -- From: Matthias Kaehlcke commit c4f5627f7eeecde1bb6b646d8c0907b96dc2b2a6 upstream. With commit e16337622016 ("Bluetooth: Handle bt_accept_enqueue() socket atomically") lock_sock[_nested]() is used to

<    2   3   4   5   6   7   8   9   10   >