[PATCH 4.9 085/171] rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 91a825290ca4eae88603bc811bf74a45f94a3f46 ] The function rds_ib_setup_qp is calling rds_ib_get_client_data and should correspondingly call rds_ib_dev_put. This call was lost in the non

[PATCH 4.9 083/171] ptr_ring: fix up after recent ptr_ring changes

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5790eabc6e7c3ce2d6ca2e3bbf4de467ce2b64b3 ] Add more stubs to make it build. Fixes: 81fbfe8a ("ptr_ring: use kmalloc_array()") Signed-off-by: Michael S. Tsirkin Signed-off-by: Sasha

[PATCH 4.9 081/171] usb: dwc3: omap: remove IRQ_NOAUTOEN used with shared irq

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit ee249b4554947de3be77be4e9e6077b20c0fe055 ] IRQ_NOAUTOEN cannot be used with shared IRQs, since commit 04c848d39879 ("genirq: Warn when IRQ_NOAUTOEN is used with shared interrupts") an

[PATCH 4.9 086/171] iio: adc: Revert "axp288: Drop bogus AXP288_ADC_TS_PIN_CTRL register modifications"

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 631b010abc5b57009c6a8328f51492665f6ef310 ] Inheriting the ADC BIAS current settings from the BIOS instead of hardcoding then causes the AXP288 to disable charging (I think it mis-dete

[PATCH 4.9 126/171] ARM: dts: imx53-qsb: disable 1.2GHz OPP

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit eea96566c189c77e5272585984eb2729881a2f1d ] The maximum CPU frequency for the i.MX53 QSB is 1GHz, so disable the 1.2GHz OPP. This makes the board work again with configs that have cpuf

[PATCH 4.9 121/171] x86/paravirt: Fix some warning messages

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 571d0563c8881595f4ab027aef9ed1c55e3e7b7c ] The first argument to WARN_ONCE() is a condition. Fixes: 5800dc5c19f3 ("x86/paravirt: Fix spectre-v2 mitigations for paravirt guests") Sig

[PATCH 4.9 127/171] rxrpc: Dont check RXRPC_CALL_TX_LAST after calling rxrpc_rotate_tx_window()

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c479d5f2c2e1ce609da08c075054440d97ddff52 ] We should only call the function to end a call's Tx phase if we rotated the marked-last packet out of the transmission buffer. Make rxrpc_r

[PATCH 4.9 116/171] xen-netfront: Fix mismatched rtnl_unlock

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cb257783c2927b73614b20f915a91ff78aa6f3e8 ] Fixes: f599c64fdf7d ("xen-netfront: Fix race between device setup and open") Reported-by: Ben Hutchings Signed-off-by: Ross Lagerwall Revi

[PATCH 4.9 113/171] test_bpf: Fix testing with CONFIG_BPF_JIT_ALWAYS_ON=y on other arches

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 52fda36d63bfc8c8e8ae5eda8eb5ac6f52cd67ed ] Function bpf_fill_maxinsns11 is designed to not be able to be JITed on x86_64. So, it fails when CONFIG_BPF_JIT_ALWAYS_ON=y, and commit 0958

[PATCH 4.9 075/171] net/mlx5: Fix driver load error flow when firmware is stuck

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 8ce59b16b4b6eacedaec1f7b652b4781cdbfe15f ] When wait for firmware init fails, previous code would mistakenly return success and cause inconsistency in the driver state. Fixes: 6c780a

[PATCH 4.9 115/171] sparc64: Fix regression in pmdp_invalidate().

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cfb61b5e3e09f8b49bc4d685429df75f45127adc ] pmdp_invalidate() was changed to update the pmd atomically (to not lose dirty/access bits) and return the original pmd value. However, in d

[PATCH 4.9 077/171] perf probe: Fix probe definition for inlined functions

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 7598f8bc1383ffd77686cb4e92e749bef3c75937 ] In commit 613f050d68a8 ("perf probe: Fix to probe on gcc generated functions in modules"), the offset from symbol is, incorrectly, added to

[PATCH 4.9 152/171] ip6_tunnel: Fix encapsulation layout

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit d4d576f5ab7edcb757bb33e6a5600666a0b1232d ] Commit 058214a4d1df ("ip6_tun: Add infrastructure for doing encapsulation") added the ip6_tnl_encap() call in ip6_tnl

[PATCH 4.9 141/171] net: socket: fix a missing-check bug

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Wenwen Wang [ Upstream commit b6168562c8ce2bd5a30e213021650422e08764dc ] In ethtool_ioctl(), the ioctl command 'ethcmd' is checked through a switch statement to see whether it is necessary to p

[PATCH 4.9 106/171] iio: pressure: zpa2326: Remove always-true check which confuses gcc

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f61dfff2f5b9fcb087bf5c444bc44b444709588f ] With gcc 4.1.2: drivers/iio/pressure/zpa2326.c: In function ‘zpa2326_wait_oneshot_completion’: drivers/iio/pressure/zpa2326.c:868:

[PATCH 4.9 129/171] net: ena: fix NULL dereference due to untimely napi initialization

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 78a55d05def95144ca5fa9a64c49b2a0636a9866 ] napi poll functions should be initialized before running request_irq(), to handle a rare condition where there is a pending interrupt, causi

[PATCH 4.9 132/171] Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"

4.9-stable review patch. If anyone has any objections, please let me know. -- This reverts commit ad8b1ffc3efae2f65080bdb11145c87d299b8f9a. >From Florian Westphal : It causes kernel crash for locally generated ipv6 fragments when netfilter ipv6 defragmentation i

[PATCH 4.9 108/171] macsec: fix memory leaks when skb_to_sgvec fails

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5aba2ba5030b66a6f8c93049b718556f9aacd7c6 ] Fixes: cda7ea690350 ("macsec: check return value of skb_to_sgvec always") Signed-off-by: Sabrina Dubroca Signed-off-by: David S. Miller Si

[PATCH 4.9 104/171] drm/msm: Fix possible null dereference on failure of get_pages()

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3976626ea3d2011f8fd3f3a47070a8b792018253 ] Commit 62e3a3e342af changed get_pages() to initialise msm_gem_object::pages before trying to initialise msm_gem_object::sgt, so that put_pag

[PATCH 4.14 10/31] xfs: truncate transaction does not modify the inobt

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a606ebdb859e78beb757dfefa08001df366e2ef5 ] The truncate transaction does not ever modify the inode btree, but includes an associated log reservation. Update xfs_calc_itruncate_reserv

[PATCH 4.14 01/31] eeprom: at24: Add support for address-width property

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a2b3bf4846e5eed62ea6abb096af2c950961033c ] Provide a flexible way to determine the addressing bits of eeprom. Pass the addressing bits to driver through address-width property. Sign

[PATCH 4.14 18/31] cdc-acm: do not reset notification buffer index upon urb unlinking

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Herzog commit dae3ddba36f8c337fb59cef07d564da6fc9b7551 upstream. Resetting the write index of the notification buffer on urb unlink (e.g. closing a cdc-acm device from userspace) may le

[PATCH 4.9 138/171] llc: set SOCK_RCU_FREE in llc_sap_add_socket()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Cong Wang [ Upstream commit 5a8e7aea953bdb6d4da13aff6f1e7f9c62023499 ] WHen an llc sock is added into the sk_laddr_hash of an llc_sap, it is not marked with SOCK_RCU_FREE. This causes that the

[PATCH 4.14 02/31] vfs: swap names of {do,vfs}_clone_file_range()

4.14-stable review patch. If anyone has any objections, please let me know. -- commit a725356b6659469d182d662f22d770d83d3bc7b5 upstream. Commit 031a072a0b8a ("vfs: call vfs_clone_file_range() under freeze protection") created a wrapper do_clone_file_range() around vfs_clone_file

[PATCH 4.9 164/171] usb: gadget: storage: Fix Spectre v1 vulnerability

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 9ae24af3669111d418242caec8dd4ebd9ba26860 upstream. num can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant 1

[PATCH 4.9 167/171] sched/fair: Fix throttle_list starvation with low CFS quota

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Phil Auld commit baa9be4ffb55876923dc9716abc0a448e510ba30 upstream. With a very low cpu.cfs_quota_us setting, such as the minimum of 1000, distribute_cfs_runtime may not empty the throttled_lis

[PATCH 4.9 131/171] mtd: spi-nor: Add support for is25wp series chips

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d616f81cdd2a21edfa90a595a4e9b143f5ba8414 ] Added support for is25wp032, is25wp064 and is25wp128. Signed-off-by: Kimmo Rautkoski Reviewed-by: Marek Vasut Signed-off-by: Boris Brezil

[PATCH 4.14 19/31] cdc-acm: correct counting of UART states in serial state notification

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Herzog commit f976d0e5747ca65ccd0fb2a4118b193d70aa1836 upstream. The usb standard ("Universal Serial Bus Class Definitions for Communication Devices") distiguishes between "consistent s

[PATCH 4.9 161/171] RDMA/ucma: Fix Spectre v1 vulnerability

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit a3671a4f973ee9d9621d60166cc3b037c397d604 upstream. hdr.cmd can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre varian

[PATCH 4.14 15/31] drm: fb-helper: Reject all pixel format changing requests

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eugeniy Paltsev commit db05c481977599236f12a85e55de9f5ab37b0a2c upstream. drm fbdev emulation doesn't support changing the pixel format at all, so reject all pixel format changing requests. C

[PATCH 4.9 155/171] ahci: dont ignore result code of ahci_reset_controller()

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d312fefea8387503375f728855c9a62de20c9665 ] ahci_pci_reset_controller() calls ahci_reset_controller(), which may fail, but ignores the result code and always returns success. This may

[PATCH 4.9 137/171] ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit ee1abcf689353f36d9322231b4320926096bdee0 ] Commit a61bbcf28a8c ("[NET]: Store skb->timestamp as offset to a base timestamp") introduces a neighbour control buff

[PATCH 4.9 165/171] USB: fix the usbfs flag sanitization for control transfers

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 665c365a77fbfeabe52694aedf3446d5f2f1ce42 upstream. Commit 7a68d9fb8510 ("USB: usbdevfs: sanitize flags more") checks the transfer flags for URBs submitted from userspace via u

[PATCH 4.9 154/171] crypto: shash - Fix a sleep-in-atomic bug in shash_setkey_unaligned

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 9039f3ef446e9ffa200200c934f049add9e58426 ] The SCTP program may sleep under a spinlock, and the function call path is: sctp_generate_t3_rtx_event (acquire the spinlock) sctp_do_sm

[PATCH 4.14 21/31] usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan (Samsung OSG) commit 81f7567c51ad97668d1c3a48e8ecc482e64d4161 upstream. vhci_hub_control() accesses port_status array with out of bounds port value. Fix it to reference port_status[

[PATCH 4.14 25/31] sched/fair: Fix throttle_list starvation with low CFS quota

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Phil Auld commit baa9be4ffb55876923dc9716abc0a448e510ba30 upstream. With a very low cpu.cfs_quota_us setting, such as the minimum of 1000, distribute_cfs_runtime may not empty the throttled_li

[PATCH 4.14 04/31] USB: serial: option: add two-endpoints device-id flag

4.14-stable review patch. If anyone has any objections, please let me know. -- commit 35aecc02b5b621782111f64cbb032c7f6a90bb32 upstream Allow matching on interfaces having two endpoints by adding a new device-id flag. This allows for the handling of devices whose interface numb

[PATCH 4.18 12/34] drm: fb-helper: Reject all pixel format changing requests

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eugeniy Paltsev commit db05c481977599236f12a85e55de9f5ab37b0a2c upstream. drm fbdev emulation doesn't support changing the pixel format at all, so reject all pixel format changing requests. C

[PATCH 4.14 28/31] x86/percpu: Fix this_cpu_read()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit b59167ac7bafd804c91e49ad53c6d33a7394d4c8 upstream. Eric reported that a sequence count loop using this_cpu_read() got optimized out. This is wrong, this_cpu_read() must i

[PATCH 4.14 26/31] x86/tsc: Force inlining of cyc2ns bits

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 4907c68abd3f60f650f98d5a69d4ec77c0bde44f upstream. Looking at the asm for native_sched_clock() I noticed we don't inline enough. Mostly caused by sharing code with cyc2ns

[PATCH 4.14 27/31] x86, hibernate: Fix nosave_regions setup for hibernation

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Zhimin Gu commit cc55f7537db6af371e9c1c6a71161ee40f918824 upstream. On 32bit systems, nosave_regions(non RAM areas) located between max_low_pfn and max_pfn are not excluded from hibernation sn

[PATCH 4.18 14/34] IB/ucm: Fix Spectre v1 vulnerability

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 0295e39595e1146522f2722715dba7f7fba42217 upstream. hdr.cmd can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre varia

[PATCH 4.18 01/34] eeprom: at24: Add support for address-width property

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a2b3bf4846e5eed62ea6abb096af2c950961033c ] Provide a flexible way to determine the addressing bits of eeprom. Pass the addressing bits to driver through address-width property. Sign

[PATCH 4.18 16/34] cdc-acm: correct counting of UART states in serial state notification

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Herzog commit f976d0e5747ca65ccd0fb2a4118b193d70aa1836 upstream. The usb standard ("Universal Serial Bus Class Definitions for Communication Devices") distiguishes between "consistent s

[PATCH 4.14 20/31] cdc-acm: fix race between reset and control messaging

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 9397940ed812b942c520e0c25ed4b2c64d57e8b9 upstream. If a device splits up a control message and a reset() happens between the parts, the message is lost and already recieve

[PATCH 4.18 19/34] usb: gadget: storage: Fix Spectre v1 vulnerability

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 9ae24af3669111d418242caec8dd4ebd9ba26860 upstream. num can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant 1

[PATCH 4.18 02/34] vfs: swap names of {do,vfs}_clone_file_range()

4.18-stable review patch. If anyone has any objections, please let me know. -- commit a725356b6659469d182d662f22d770d83d3bc7b5 upstream. Commit 031a072a0b8a ("vfs: call vfs_clone_file_range() under freeze protection") created a wrapper do_clone_file_range() around vfs_clone_file

[PATCH 4.18 17/34] cdc-acm: fix race between reset and control messaging

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 9397940ed812b942c520e0c25ed4b2c64d57e8b9 upstream. If a device splits up a control message and a reset() happens between the parts, the message is lost and already recieve

[PATCH 4.18 27/34] drm/sun4i: Fix an ulong overflow in the dotclock driver

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit e84cb605e02f1b3d0aee8d7157419cd8aaa06038 upstream. The calculated ideal rate can easily overflow an unsigned long, thus making the best div selection buggy as soon as no

[PATCH 4.18 34/34] x86/fpu: Fix i486 + no387 boot crash by only saving FPU registers on context switch if there is an FPU

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Andrzej Siewior commit 2224d616528194b02424c91c2ee254b3d29942c3 upstream. Booting an i486 with "no387 nofxsr" ends with with the following crash: math_emulate: 0060:c101987d K

[PATCH 4.18 04/34] gpio: mxs: Get rid of external API call

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 833eacc7b5913da9896bacd30db7d490aa777868 ] The MXS driver was calling back into the GPIO API from its irqchip. This is not very elegant, as we are a driver, let's just shortcut back

[PATCH 4.18 18/34] usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan (Samsung OSG) commit 81f7567c51ad97668d1c3a48e8ecc482e64d4161 upstream. vhci_hub_control() accesses port_status array with out of bounds port value. Fix it to reference port_status[

[PATCH 4.18 24/34] tracing: Fix synthetic event to accept unsigned modifier

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Masami Hiramatsu commit 282447ba6b00c64678ffdf964f44e5c8b1c68377 upstream. Fix synthetic event to accept unsigned modifier for its field type correctly. Currently, synthetic_events interface

[PATCH 4.18 08/34] fscache: Fix out of bound read in long cookie keys

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Sandeen commit fa520c47eaa15b9baa8ad66ac18da4a31679693b upstream. fscache_set_key() can incur an out-of-bounds read, reported by KASAN: BUG: KASAN: slab-out-of-bounds in fscache_alloc_c

[PATCH 4.18 28/34] sched/fair: Fix throttle_list starvation with low CFS quota

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Phil Auld commit baa9be4ffb55876923dc9716abc0a448e510ba30 upstream. With a very low cpu.cfs_quota_us setting, such as the minimum of 1000, distribute_cfs_runtime may not empty the throttled_li

[PATCH 4.18 25/34] tracing: Fix synthetic event to allow semicolon at end

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Masami Hiramatsu commit a360d9e4016c1fcf41553b37ad496870dc5723d0 upstream. Fix synthetic event to allow independent semicolon at end. The synthetic_events interface accepts a semicolon after

[PATCH 4.18 00/34] 4.18.18-stable review

This is the start of the stable review cycle for the 4.18.18 release. There are 34 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Nov 10 21:51:21 UTC 2018. Anything receiv

[PATCH 4.18 31/34] x86/percpu: Fix this_cpu_read()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit b59167ac7bafd804c91e49ad53c6d33a7394d4c8 upstream. Eric reported that a sequence count loop using this_cpu_read() got optimized out. This is wrong, this_cpu_read() must i

[PATCH 4.18 09/34] ptp: fix Spectre v1 vulnerability

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit efa61c8cf2950ab5c0e66cff3cabe2a2b24e81ba upstream. pin_index can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre var

[PATCH 4.18 26/34] Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mikhail Nikiforov commit 13c1c5e4d7f887cba36c5e3df3faa22071c1469f upstream. Add ELAN061C to the ACPI table to support Elan touchpad found in Lenovo IdeaPad 330-15IGM. Signed-off-by: Mikhail N

[PATCH 4.18 33/34] x86/swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Hellwig commit 485734f3fc77c1eb77ffe138c027b9a4bf0178f3 upstream. We already build the swiotlb code for 32-bit kernels with PAE support, but the code to actually use swiotlb has only

[PATCH 4.18 29/34] x86/tsc: Force inlining of cyc2ns bits

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 4907c68abd3f60f650f98d5a69d4ec77c0bde44f upstream. Looking at the asm for native_sched_clock() I noticed we don't inline enough. Mostly caused by sharing code with cyc2ns

[PATCH 4.18 30/34] x86, hibernate: Fix nosave_regions setup for hibernation

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Zhimin Gu commit cc55f7537db6af371e9c1c6a71161ee40f918824 upstream. On 32bit systems, nosave_regions(non RAM areas) located between max_low_pfn and max_pfn are not excluded from hibernation sn

[PATCH 4.18 32/34] x86/time: Correct the attribute on jiffies definition

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nathan Chancellor commit 53c13ba8ed39e89f21a0b98f4c8a241bb44e483d upstream. Clang warns that the declaration of jiffies in include/linux/jiffies.h doesn't match the definition in arch/x86/time

[PATCH 4.18 07/34] cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 169b803397499be85bdd1e3d07d6f5e3d4bd669e upstream. the victim might've been rmdir'ed just before the lock_rename(); unlike the normal callers, we do not look the source up after

[PATCH 4.18 06/34] fscache: Fix incomplete initialisation of inline key space

4.18-stable review patch. If anyone has any objections, please let me know. -- From: David Howells commit 1ff22883b0b2f7a73eb2609ffe879c9fd96f6328 upstream. The inline key in struct rxrpc_cookie is insufficiently initialized, zeroing only 3 of the 4 slots, therefore an index_k

[PATCH 4.18 03/34] bpf: fix partial copy of map_ptr when dst is scalar

4.18-stable review patch. If anyone has any objections, please let me know. -- commit 0962590e553331db2cc0aef2dc35c57f6300dbbe upstream. ALU operations on pointers such as scalar_reg += map_value_ptr are handled in adjust_ptr_min_max_vals(). Problem is however that map_ptr and r

[PATCH 4.18 22/34] USB: fix the usbfs flag sanitization for control transfers

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 665c365a77fbfeabe52694aedf3446d5f2f1ce42 upstream. Commit 7a68d9fb8510 ("USB: usbdevfs: sanitize flags more") checks the transfer flags for URBs submitted from userspace via

[PATCH 4.18 23/34] block: dont deal with discard limit in blkdev_issue_discard()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit 744889b7cbb56a64f957e65ade7cb65fe3f35714 upstream. blk_queue_split() does respect this limit via bio splitting, so no need to do that in blkdev_issue_discard(), then we can ali

[PATCH 4.18 05/34] clk: sunxi-ng: sun4i: Set VCO and PLL bias current to lowest setting

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Chen-Yu Tsai commit 80a6ec7d5e1653208eb53f6738620dab98f6f50e upstream. The default mid-level PLL bias current setting interferes with sigma delta modulation. This manifests as decreased audio

[PATCH 4.18 21/34] usb: xhci: pci: Enable Intel USB role mux on Apollo Lake platforms

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Heikki Krogerus commit c02588a352defaf985fc1816eb6232663159e1b8 upstream. Intel Apollo Lake has the same internal USB role mux as Intel Cherry Trail. Cc: Signed-off-by: Heikki Krogerus Sign

[PATCH 4.18 20/34] usb: roles: intel_xhci: Fix Unbalanced pm_runtime_enable

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Wan Ahmad Zainie commit 009b1948e153ae448f62f1887e2b58d0e05db51b upstream. Add missing pm_runtime_disable() to remove(), in order to avoid an Unbalanced pm_runtime_enable when the module is re

[PATCH 4.14 29/31] x86/time: Correct the attribute on jiffies definition

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Nathan Chancellor commit 53c13ba8ed39e89f21a0b98f4c8a241bb44e483d upstream. Clang warns that the declaration of jiffies in include/linux/jiffies.h doesn't match the definition in arch/x86/time

[PATCH 4.14 22/31] usb: gadget: storage: Fix Spectre v1 vulnerability

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 9ae24af3669111d418242caec8dd4ebd9ba26860 upstream. num can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant 1

[PATCH 4.14 24/31] Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Mikhail Nikiforov commit 13c1c5e4d7f887cba36c5e3df3faa22071c1469f upstream. Add ELAN061C to the ACPI table to support Elan touchpad found in Lenovo IdeaPad 330-15IGM. Signed-off-by: Mikhail N

[PATCH 4.14 23/31] USB: fix the usbfs flag sanitization for control transfers

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 665c365a77fbfeabe52694aedf3446d5f2f1ce42 upstream. Commit 7a68d9fb8510 ("USB: usbdevfs: sanitize flags more") checks the transfer flags for URBs submitted from userspace via

[PATCH 4.18 10/34] drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Kai-Heng Feng commit 0711a43b6d84ff9189adfbf83c8bbf56eef794bf upstream. There's another panel that reports "DFP 1.x compliant TMDS" but it supports 6bpc instead of 8 bpc. Apply 6 bpc quirk fo

[PATCH 4.18 15/34] cdc-acm: do not reset notification buffer index upon urb unlinking

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Herzog commit dae3ddba36f8c337fb59cef07d564da6fc9b7551 upstream. Resetting the write index of the notification buffer on urb unlink (e.g. closing a cdc-acm device from userspace) may le

[PATCH 4.18 11/34] drm/edid: VSDB yCBCr420 Deep Color mode bit definitions

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Clint Taylor commit 9068e02f58740778d8270840657f1e250a2cc60f upstream. HDMI Forum VSDB YCBCR420 deep color capability bits are 2:0. Correct definitions in the header for the mask to work corre

[PATCH 4.14 31/31] net: fs_enet: do not call phy_stop() in interrupts

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f8b39039cbf2a15f2b8c9f081e1cbd5dee00aaf5 ] In case of TX timeout, fs_timeout() calls phy_stop(), which triggers the following BUG_ON() as we are in interrupt. [92708.199889] kernel

[PATCH 4.18 13/34] RDMA/ucma: Fix Spectre v1 vulnerability

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit a3671a4f973ee9d9621d60166cc3b037c397d604 upstream. hdr.cmd can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre varia

Re: [PATCH v2] PCI/MSI: Don't touch MSI bits when the PCI device is disconnected

On Thu, Nov 08, 2018 at 02:09:17PM -0600, Bjorn Helgaas wrote: > [+cc Jonathan, Greg, Lukas, Russell, Sam, Oliver for discussion about > PCI error recovery in general] > > On Wed, Nov 07, 2018 at 05:42:57PM -0600, Bjorn Helgaas wrote: > > On Tue, Sep 18, 2018 at 05:15:00PM -0500, Alexandru Gagniuc

[PATCH 4.14 00/31] 4.14.80-stable review

This is the start of the stable review cycle for the 4.14.80 release. There are 31 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Nov 10 21:51:09 UTC 2018. Anything receiv

[PATCH 4.14 30/31] x86/fpu: Fix i486 + no387 boot crash by only saving FPU registers on context switch if there is an FPU

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Andrzej Siewior commit 2224d616528194b02424c91c2ee254b3d29942c3 upstream. Booting an i486 with "no387 nofxsr" ends with with the following crash: math_emulate: 0060:c101987d K

[PATCH 4.14 06/31] Revert "ARM: tegra: Fix ULPI regression on Tegra20"

4.14-stable review patch. If anyone has any objections, please let me know. -- This reverts commit b39ac54215190bc178ae7de799e74d327a3c1a33. The issue was fixed by upstream commit 5d797111afe1 ("clk: tegra: Add quirk for getting CDEV1/2 clocks on Tegra20"). Signed-off-by: Sasha

[PATCH 4.14 05/31] bpf: fix partial copy of map_ptr when dst is scalar

4.14-stable review patch. If anyone has any objections, please let me know. -- commit 0962590e553331db2cc0aef2dc35c57f6300dbbe upstream. ALU operations on pointers such as scalar_reg += map_value_ptr are handled in adjust_ptr_min_max_vals(). Problem is however that map_ptr and r

[PATCH 4.14 03/31] USB: serial: option: improve Quectel EP06 detection

4.14-stable review patch. If anyone has any objections, please let me know. -- commit 36cae568404a298a19a6e8a3f18641075d4cab04 upstream The Quectel EP06 (and EM06/EG06) LTE modem supports updating the USB configuration, without the VID/PID or configuration number changing. When

[PATCH 4.14 09/31] gpio: mxs: Get rid of external API call

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 833eacc7b5913da9896bacd30db7d490aa777868 ] The MXS driver was calling back into the GPIO API from its irqchip. This is not very elegant, as we are a driver, let's just shortcut back

[PATCH 4.14 08/31] fsnotify: fix ignore mask logic in fsnotify()

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 9bdda4e9cf2dcecb60a0683b10ffb8cd7e5f2f45 ] Commit 92183a42898d ("fsnotify: fix ignore mask logic in send_to_group()") acknoledges the use case of ignoring an event on an inode mark,

[PATCH 4.14 07/31] clk: tegra: Add quirk for getting CDEV1/2 clocks on Tegra20

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5d797111afe12e488e08432fd9b372fae2cc7e93 ] CDEV1 and CDEV2 clocks are a bit special case, their parent clock is created by the pinctrl driver. It should be possible for clk user to r

linux-next: Signed-off-by missing for commit in the rdma tree

Hi all, Commit 5736c7c499f1 ("RDMA/rxe: Distinguish between down links and disabled links") is missing a Signed-off-by from its committer. -- Cheers, Stephen Rothwell pgpt_d59gvFav.pgp Description: OpenPGP digital signature

[PATCH 4.14 14/31] drm/edid: VSDB yCBCr420 Deep Color mode bit definitions

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Clint Taylor commit 9068e02f58740778d8270840657f1e250a2cc60f upstream. HDMI Forum VSDB YCBCR420 deep color capability bits are 2:0. Correct definitions in the header for the mask to work corre

[PATCH 4.14 12/31] ptp: fix Spectre v1 vulnerability

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit efa61c8cf2950ab5c0e66cff3cabe2a2b24e81ba upstream. pin_index can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre var

[PATCH 4.14 16/31] RDMA/ucma: Fix Spectre v1 vulnerability

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit a3671a4f973ee9d9621d60166cc3b037c397d604 upstream. hdr.cmd can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre varia

[PATCH 4.14 17/31] IB/ucm: Fix Spectre v1 vulnerability

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 0295e39595e1146522f2722715dba7f7fba42217 upstream. hdr.cmd can be indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre varia

[PATCH 4.14 13/31] drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kai-Heng Feng commit 0711a43b6d84ff9189adfbf83c8bbf56eef794bf upstream. There's another panel that reports "DFP 1.x compliant TMDS" but it supports 6bpc instead of 8 bpc. Apply 6 bpc quirk fo

[PATCH 4.9 170/171] net: fs_enet: do not call phy_stop() in interrupts

4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f8b39039cbf2a15f2b8c9f081e1cbd5dee00aaf5 ] In case of TX timeout, fs_timeout() calls phy_stop(), which triggers the following BUG_ON() as we are in interrupt. [92708.199889] kernel B

[PATCH 4.9 163/171] cdc-acm: correct counting of UART states in serial state notification

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Herzog commit f976d0e5747ca65ccd0fb2a4118b193d70aa1836 upstream. The usb standard ("Universal Serial Bus Class Definitions for Communication Devices") distiguishes between "consistent si

[PATCH 4.14 11/31] cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 169b803397499be85bdd1e3d07d6f5e3d4bd669e upstream. the victim might've been rmdir'ed just before the lock_rename(); unlike the normal callers, we do not look the source up after

[PATCH 4.9 169/171] x86/time: Correct the attribute on jiffies definition

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Nathan Chancellor commit 53c13ba8ed39e89f21a0b98f4c8a241bb44e483d upstream. Clang warns that the declaration of jiffies in include/linux/jiffies.h doesn't match the definition in arch/x86/time/

  1   2   3   4   5   6   7   8   9   10   >