Linux 3.18.25

ipv6: clean up dev_snmp6 proc entry when we fail to initialize inet6_dev Sasha Levin (3): RDS: verify the underlying transport exists before creating a connection Revert "net: Fix skb_set_peeked use-after-free bug" Linux 3.18.25 Shaohua Li (1): workqueue: make s

Re: Bad backport of "net: Fix skb_set_peeked use-after-free bug" in 3.18.23

On 12/13/2015 09:44 PM, Paul Mackerras wrote: > Commit d9a1133495b4 ("net: Fix skb_set_peeked use-after-free bug") in > 3.18.23 claims to be a backport of commit a0a2a6602496, but in fact > the patch is identical to commit 738ac1ebb96d ("net: Clone skb before > setting peeked flag"), which is the

[added to the 3.18 stable tree] module: Fix locking in symbol_put_addr()

ss()") Cc: sta...@kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- kernel/module.c | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/kernel/module.c b/kernel/module.c index c353707..3da0c00 100644 --- a/kernel/module.c +++ b/kernel/module.c @

[added to the 3.18 stable tree] workqueue: make sure delayed work run in local cpu

020071] [] ret_from_fork+0x3f/0x70 [ 28.020071] [] ?kthread_create_on_node+0x200/0x200 Signed-off-by: Shaohua Li <s...@fb.com> Signed-off-by: Tejun Heo <t...@kernel.org> Cc: stable@vger.kernel.org # v2.6.31+ Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- kernel/workqueu

[added to the 3.18 stable tree] ASoC: wm8904: Correct number of EQ registers

g came about because the registers start at EQ1 not zero. The bug is relatively harmless as the extra register written is an unused one. Signed-off-by: Charles Keepax <ckee...@opensource.wolfsonmicro.com> Signed-off-by: Mark Brown <broo...@kernel.org> Cc: stable@vger.kernel.org Signed-o

[added to the 3.18 stable tree] drm/radeon: add pm sysfs files late

meant that in some cases the driver was not finished initializing before external tools tried to use them which could result in a crash depending on the timing. Signed-off-by: Alex Deucher <alexander.deuc...@amd.com> Cc: stable@vger.kernel.org Signed-off-by: Sasha Levin <sasha.l

[added to the 3.18 stable tree] vhost/scsi: potential memory corruption

(256) elements so anything higher than 255 then it is invalid. I have made that the limit now. In vhost_scsi_send_evt() we mask away values higher than 255, but now that the limit has changed, we don't need the mask. Signed-off-by: Dan Carpenter <dan.carpen...@oracle.com> Signed-off-by: Nicholas Belli

[added to the 3.18 stable tree] md/raid5: fix locking in handle_stripe_clean_event()

els to stable. Signed-off-by: Roman Gushchin <kl...@yandex-team.ru> Fixes: 566c09c53455 ("raid5: relieve lock contention in get_active_stripe()") Signed-off-by: NeilBrown <ne...@suse.com> Cc: Shaohua Li <s...@kernel.org> Cc: <stable@vger.kernel.org> # 3.13 - 4.2 Sig

[added to the 3.18 stable tree] mvsas: Fix NULL pointer dereference in mvs_slot_task_free

om> Reviewed-by: Tomas Henzl <the...@redhat.com> Reviewed-by: Johannes Thumshirn <jthumsh...@suse.de> Cc: stable@vger.kernel.org Signed-off-by: James Bottomley <jbottom...@odin.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/scsi/mvsas/mv_sas.c | 2 ++

[added to the 3.18 stable tree] xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing)

Avery <cathy.av...@oracle.com> Signed-off-by: Konrad Rzeszutek Wilk <konrad.w...@oracle.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/block/xen-blkfront.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/block/xen-blkfront.c b/driv

[added to the 3.18 stable tree] Revert "ARM64: unwind: Fix PC calculation"

Will Deacon <will.dea...@arm.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/arm64/kernel/stacktrace.c | 6 +- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/arch/arm64/kernel/stacktrace.c b/arch/arm64/kernel/stacktrace.c index 407991b..ccb6078 100644

[added to the 3.18 stable tree] IB/cm: Fix rb-tree duplicate free and use-after-free

CH] IB: Add the kernel CM implementation') Signed-off-by: Doron Tsur <dor...@mellanox.com> Signed-off-by: Matan Barak <mat...@mellanox.com> Signed-off-by: Doug Ledford <dledf...@redhat.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/infiniband/core/cm.c |

[added to the 3.18 stable tree] serial: 8250_pci: Add support for 16 port Exar boards

Hartman <gre...@linuxfoundation.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/tty/serial/8250/8250_pci.c | 25 +++-- 1 file changed, 23 insertions(+), 2 deletions(-) diff --git a/drivers/tty/serial/8250/8250_pci.c b/drivers/tty/serial/8250/8250_pci.c index

[added to the 3.18 stable tree] iwlwifi: mvm: fix D3 firmware PN programming

.b...@intel.com> Signed-off-by: Luca Coelho <luciano.coe...@intel.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/net/wireless/iwlwifi/mvm/d3.c | 12 ++-- 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/drivers/net/wireless/iwlwifi/mv

[added to the 3.18 stable tree] l2tp: protect tunnel->del_work by ref_count

;del_work scheduled resulting in a zero pointer dereference. Signed-off-by: Alexander Couzens <lyn...@fe80.eu> Acked-by: James Chapman <jchap...@katalix.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/l2t

[added to the 3.18 stable tree] xhci: Add spurious wakeup quirk for LynxPoint-LP controllers

e -Mathias] Cc: stable <stable@vger.kernel.org> Signed-off-by: Mathias Nyman <mathias.ny...@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gre...@linuxfoundation.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/usb/host/xhci-pci.c | 1 + 1 file c

[added to the 3.18 stable tree] md/raid1: submit_bio_wait() returns 0 on success

d-off-by: Jes Sorensen <jes.soren...@redhat.com> Signed-off-by: NeilBrown <ne...@suse.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/md/raid1.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/md/raid1.c b/drivers/md/raid1.c index

[added to the 3.18 stable tree] net/unix: fix logic about sk_peek_offset

off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/unix/af_unix.c | 12 +++- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/net/unix/af_unix.c b/net/unix/af_unix.c index 30a705e..2ae4a59 100644 --- a/net/unix/

[added to the 3.18 stable tree] arm64: errata: use KBUILD_CFLAGS_MODULE for erratum #843419

by: Dann Frazier <dann.fraz...@canonical.com> Signed-off-by: Will Deacon <will.dea...@arm.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/arm64/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/arm64/Makefile b/arch/arm64/Makefile

[added to the 3.18 stable tree] skbuff: Fix skb checksum partial check.

checksum. Fixes: 6ae459bda ("skbuff: Fix skb checksum flag on skb pull") Reported-by: Andrew Vagin <ava...@odin.com> Signed-off-by: Pravin B Shelar <pshe...@nicira.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@ora

[added to the 3.18 stable tree] ext4: allocate entire range in zero range

possible. Signed-off-by: Lukas Czerner <lczer...@redhat.com> Signed-off-by: Theodore Ts'o <ty...@mit.edu> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- fs/ext4/extents.c | 31 +++ 1 file changed, 19 insertions(+), 12 deletions(-) diff --g

[added to the 3.18 stable tree] crypto: ahash - ensure statesize is non-zero

stable@vger.kernel.org Signed-off-by: Russell King <rmk+ker...@arm.linux.org.uk> Signed-off-by: Herbert Xu <herb...@gondor.apana.org.au> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- crypto/ahash.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a

[added to the 3.18 stable tree] iio: mxs-lradc: Fix temperature offset

Vasut <ma...@denx.de> Cc: <stable@vger.kernel.org> Signed-off-by: Jonathan Cameron <ji...@kernel.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/staging/iio/adc/mxs-lradc.c | 9 + 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/driver

[added to the 3.18 stable tree] drm/nouveau/gem: return only valid domain when there's only one

: Ilia Mirkin <imir...@alum.mit.edu> Signed-off-by: Ben Skeggs <bske...@redhat.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/gpu/drm/nouveau/nouveau_gem.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/nouveau/nouveau_

[added to the 3.18 stable tree] sfc: Fix memcpy() with const destination compiler warning.

David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/net/ethernet/sfc/selftest.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/ethernet/sfc/selftest.c b/drivers/net/ethernet/sfc/selftest.c in

[added to the 3.18 stable tree] crypto: api - Only abort operations on fatal signal

levant calls of signal_pending with fatal_signal_pending, and wait_for_completion_interruptible with wait_for_completion_killable, respectively. Cc: stable@vger.kernel.org Signed-off-by: Herbert Xu <herb...@gondor.apana.org.au> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- c

[added to the 3.18 stable tree] crypto: sparc - initialize blkcipher.ivsize

vector, but no space has been allocated for it. This clobbers adjacent memory. Cc: stable@vger.kernel.org Signed-off-by: Dave Kleikamp <dave.kleik...@oracle.com> Signed-off-by: Herbert Xu <herb...@gondor.apana.org.au> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/sparc/cr

[added to the 3.18 stable tree] dm btree remove: fix a bug when rebalancing nodes after removal

by: Joe Thornber <e...@redhat.com> Signed-off-by: Mike Snitzer <snit...@redhat.com> Cc: stable@vger.kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/md/persistent-data/dm-btree-remove.c | 17 +++-- 1 file changed, 11 insertions(+), 6 del

[added to the 3.18 stable tree] i2c: s3c2410: enable RuntimePM before registering to the core

ernel.org> Signed-off-by: Wolfram Sang <w...@the-dreams.de> Cc: sta...@kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/i2c/busses/i2c-s3c2410.c | 8 +--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/drivers/i2c/busses/i2c-s3c2410.c b/dr

[added to the 3.18 stable tree] rbd: require stable pages if message data CRCs are enabled

retty much gone (only ca 1-2 / month / OSD). Cc: stable@vger.kernel.org # 3.9+, needs backporting Signed-off-by: Ronny Hegewald <ronny.hegew...@online.de> [idryo...@gmail.com: require stable pages only in crc case, changelog] Signed-off-by: Ilya Dryomov <idryo...@gmail.com> Signed-off-b

[added to the 3.18 stable tree] drm/radeon: don't try to recreate sysfs entries on resume

caused by: 51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5 Signed-off-by: Alex Deucher <alexander.deuc...@amd.com> Cc: stable@vger.kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/gpu/drm/radeon/radeon.h| 1 + drivers/gpu/drm/radeon/radeon_pm.c | 35 +-- 2

[added to the 3.18 stable tree] Revert "md: allow a partially recovered device to be hot-added to an array."

stable@vger.kernel.org (3.14+) Fixes: 7eb418851f32 ("md: allow a partially recovered device to be hot-added to an array.") Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/md/md.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/md/m

[added to the 3.18 stable tree] ext4: fix loss of delalloc extent info in ext4_zero_range()

; Signed-off-by: Theodore Ts'o <ty...@mit.edu> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- fs/ext4/extents.c | 13 - 1 file changed, 13 deletions(-) diff --git a/fs/ext4/extents.c b/fs/ext4/extents.c index 786dd45..b95c320 100644 --- a/fs/ext4/extents.c +++ b/fs/ex

[added to the 3.18 stable tree] ath9k: declare required extra tx headroom

align it). Since it didn't declare this extra required headroom, this led to some nasty issues like randomly dropped packets in some setups. Cc: stable@vger.kernel.org Signed-off-by: Felix Fietkau <n...@openwrt.org> Signed-off-by: Kalle Valo <kv...@codeaurora.org> Signed-off-by: Sas

[added to the 3.18 stable tree] drm/nouveau/fbcon: take runpm reference when userspace has an open fd

y: Ben Skeggs <bske...@redhat.com> Cc: stable@vger.kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 24 1 file changed, 24 insertions(+) diff --git a/drivers/gpu/drm/nouveau/nouveau_fbcon.c b/drive

[added to the 3.18 stable tree] skbuff: Fix skb checksum flag on skb pull

5/0xa0 [] irq_exit+0x8e/0xb0 [] do_IRQ+0x63/0xe0 [] common_interrupt+0x6e/0x6e Reported-by: Anupam Chanda <acha...@vmware.com> Signed-off-by: Pravin B Shelar <pshe...@nicira.com> Acked-by: Tom Herbert <t...@herbertland.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed

[added to the 3.18 stable tree] iwlwifi: fix firmware filename for 3160

Luca Coelho <luciano.coe...@intel.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/net/wireless/iwlwifi/iwl-7000.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/net/wireless/iwlwifi/iwl-7000.c b/drivers/net/wireless/iwlwifi/iwl-7000.c index b04b8

[added to the 3.18 stable tree] iwlwifi: dvm: fix D3 firmware PN programming

.b...@intel.com> Signed-off-by: Luca Coelho <luciano.coe...@intel.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/net/wireless/iwlwifi/dvm/lib.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/wireless/iwlwifi/dvm/lib.c b/drivers/

[added to the 3.18 stable tree] md/raid10: submit_bio_wait() returns 0 on success

d-off-by: Jes Sorensen <jes.soren...@redhat.com> Signed-off-by: NeilBrown <ne...@suse.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/md/raid10.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/md/raid10.c b/drivers/md/raid10.c index

[added to the 3.18 stable tree] serial: 8250_pci: Add support for 12 port Exar boards

to act as a single 12 port chip. This works the same way as the combining two XR17V358 chips. But the reported device id then is 0x4358. Signed-off-by: Soeren Grunewald <soeren.grunew...@desy.de> Signed-off-by: Greg Kroah-Hartman <gre...@linuxfoundation.org> Signed-off-by: Sas

[added to the 3.18 stable tree] iwlwifi: pci: add a few more PCI subvendor IDs for the 7265 series

0x095B device ID. Cc: <sta...@vger.kernerl.org> [3.13+] Reported-by: Jeremy <jeremy.bomk...@gmail.com> Signed-off-by: Luca Coelho <luciano.coe...@intel.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/net/wireless/iwlwifi/pcie/drv.c | 5 + 1 file change

[added to the 3.18 stable tree] rbd: fix double free on rbd_dev->header_name

<idryo...@gmail.com> Reviewed-by: Alex Elder <el...@linaro.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/block/rbd.c | 1 - 1 file changed, 1 deletion(-) diff --git a/drivers/block/rbd.c b/drivers/block/rbd.c index dc1ca84..7327c36 100644 --- a/drivers/block/r

[added to the 3.18 stable tree] dm thin: fix missing pool reference count decrement in pool_ctr error path

hold passed") Signed-off-by: Mike Snitzer <snit...@redhat.com> Cc: stable@vger.kernel.org # 3.10+ Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/md/dm-thin.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/md/dm-thin.c b/drivers/md/dm-t

[added to the 3.18 stable tree] powerpc/rtas: Validate rtas.entry before calling enter_rtas()

Signed-off-by: Michael Ellerman <m...@ellerman.id.au> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/powerpc/kernel/rtas.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/arch/powerpc/kernel/rtas.c b/arch/powerpc/kernel/rtas.c index af0dafa..79c459a 100644 --- a

[added to the 3.18 stable tree] xhci: handle no ping response error properly

ble@vger.kernel.org> Signed-off-by: Mathias Nyman <mathias.ny...@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gre...@linuxfoundation.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/usb/host/xhci-ring.c | 20 +++- 1 file changed, 15 i

[added to the 3.18 stable tree] power: bq24190_charger: suppress build warning

gned-off-by: Sebastian Reichel <s...@kernel.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/power/bq24190_charger.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/power/bq24190_charger.c b/drivers/power/bq24190_charger.c index e4c95e1..

[added to the 3.18 stable tree] lib/radix-tree.c: change to simpler include

rew Morton <a...@linux-foundation.org> Signed-off-by: Linus Torvalds <torva...@linux-foundation.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- lib/radix-tree.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/radix-tree.c b/lib/radix-tree.c index

[added to the 3.18 stable tree] drm/i915: Restore lost DPLL register write on gen2-4

ni Nikula <jani.nik...@intel.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/gpu/drm/i915/intel_display.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/drivers/gpu/drm/i915/intel_display.c b/drivers/gpu/drm/i915/intel_display.c index 448327f..60c68e3c 100

[added to the 3.18 stable tree] dm btree: fix leak of bufio-backed block in btree_split_beneath error path

oe Thornber <thorn...@redhat.com> Cc: stable@vger.kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/md/persistent-data/dm-btree.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/md/persistent-data/dm-btree.c b/drivers/md/persistent

[added to the 3.18 stable tree] ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings

malloc, ethtool_get_strings, then copy_to_user sequence. Avoid this by using kcalloc to zero fill the copied buffer. Signed-off-by: Joe Perches <j...@perches.com> Acked-by: Ben Hutchings <b...@decadent.org.uk> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin

[added to the 3.18 stable tree] ppp: don't override sk->sk_state in pppoe_flush_dev()

;c...@irc.lg.ua> Signed-off-by: Guillaume Nault <g.na...@alphalink.fr> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/net/ppp/pppoe.c | 1 - 1 file changed, 1 deletion(-) diff --git a/drivers/net/ppp/pppoe.c b/drivers/n

[added to the 3.18 stable tree] iwlwifi: pcie: support 7265-D devices

e same PCI IDs as 7265) and change the configuration for them taking the differences (currently only the firmware image) into account. Signed-off-by: Johannes Berg <johannes.b...@intel.com> Signed-off-by: Emmanuel Grumbach <emmanuel.grumb...@intel.com> Signed-off-by: Sasha Levin <s

[added to the 3.18 stable tree] i2c: rcar: enable RuntimePM before registering to the core

lt;w...@the-dreams.de> Cc: sta...@kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/i2c/busses/i2c-rcar.c | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/drivers/i2c/busses/i2c-rcar.c b/drivers/i2c/busses/i2c-rcar.c index d826e82..47bd421 1

[added to the 3.18 stable tree] i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348

Roskin <plros...@gmail.com> Signed-off-by: Mika Westerberg <mika.westerb...@linux.intel.com> Tested-by: Pavel Roskin <plros...@gmail.com> Signed-off-by: Wolfram Sang <w...@the-dreams.de> Cc: sta...@kernel.org Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers

[added to the 3.18 stable tree] iommu/amd: Don't clear DTE flags when modifying it

le@vger.kernel.org Signed-off-by: Joerg Roedel <jroe...@suse.de> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/iommu/amd_iommu.c | 4 ++-- drivers/iommu/amd_iommu_types.h | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/drivers/iommu/amd_iommu

[added to the 3.18 stable tree] mm: make sendfile(2) killable

ile loop terminates early. Signed-off-by: Jan Kara <j...@suse.com> Reported-by: Dmitry Vyukov <dvyu...@google.com> Cc: Al Viro <v...@zeniv.linux.org.uk> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <a...@linux-foundation.org> Signed-off-by: Linus Torvalds <

[added to the 3.18 stable tree] jbd2: avoid infinite loop when destroying aborted journal

8f0a Signed-off-by: Jan Kara <j...@suse.com> Signed-off-by: Theodore Ts'o <ty...@mit.edu> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- fs/jbd2/checkpoint.c | 39 +-- fs/jbd2/commit.c | 2 +- fs/jbd2/journal.c| 11 ++-

[added to the 3.18 stable tree] net: add pfmemalloc check in sk_add_backlog()

eduma...@google.com> Reported-by: Greg Thelen <gthe...@google.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- include/net/sock.h | 8 1 file changed, 8 insertions(+) diff --git a/include/net/sock.h b/include/

[added to the 3.18 stable tree] af_unix: Convert the unix_sk macro to an inline function for type safety

static inline function to enjoy complaints by the compiler when misusing the API. Signed-off-by: Aaron Conole <acon...@bytheb.org> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- include/net/af_unix.h | 6 +- 1 fi

[added to the 3.18 stable tree] af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag

ctions. This was tested using the python socketpair python code attached to the bugzilla issue. Signed-off-by: Aaron Conole <acon...@bytheb.org> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/unix/af_unix.c | 14 ++

Stable maintainer tools

Hi all, As I've started working on maintaining stable kernels I found that it's nearly impossible to assure the correctness of the resulting kernel without a fair amount of tools to help with the job. Every missing commit means that there's an unfix bug, which may be critical. Likewise, every

Re: Linux 3.18.24

On 11/04/2015 04:44 AM, William Dauchy wrote: > Hi Sasha, > > I think there might be a problem with the changelog on kernel.org > https://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.24 > it shows the entry of tty only. > > Best regards, > Hey William, There was a problem reported with

Linux 3.18.24

power management code Sasha Levin (3): Linux 3.18.23 Revert "tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c" Linux 3.18.24 Sebastian Ott (1): s390/sclp: fix compile error Shaohua Li (1): x86/apic: Serialize LVTT and TSC_DEA

Re: [PATCH -stable 3.18, backport] ipmr: fix possible race resulting from improper usage of IP_INC_STATS_BH() in preemptible context.

On 11/02/2015 10:32 PM, Ani Sinha wrote: > On Mon, Nov 2, 2015 at 4:50 PM, Eric Dumazet wrote: >> > On Mon, 2015-11-02 at 16:40 -0800, Ani Sinha wrote: >>> >> [ Upstream commit 44f49dd8b5a606870a1f2 ] >> > >> > Please carefully read Documentation/networking/netdev-FAQ.txt

Re: commit af32cc7b causes stalls on 3.18.23

On 10/31/2015 01:37 AM, Corey Wright wrote: > On Fri, 30 Oct 2015 22:07:24 -0400 > Sasha Levin <sasha.le...@oracle.com> wrote: > >> > On 10/30/2015 09:56 PM, Corey Wright wrote: >>> > > Running applications under GNU Screen causes the 3.18.23 kernel to &g

Re: commit af32cc7b causes stalls on 3.18.23

On 10/30/2015 09:56 PM, Corey Wright wrote: > Running applications under GNU Screen causes the 3.18.23 kernel to stall and > the application to hang. Reverting commit af32cc7b, ie "tty: fix stall caused > by missing memory barrier in drivers/tty/n_tty.c", fixes the problem. Hi Corey, Does doing

[added to the 3.18 stable tree] tg3: Fix temperature reporting

haran <prash...@broadcom.com> Cc: Michael Chan <mc...@broadcom.com> Cc: stable@vger.kernel.org [v3.6+] Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/net/ethernet/broadcom/tg3.c | 2 +- 1 file changed,

[added to the 3.18 stable tree] arm64: kconfig: Move LIST_POISON to a safe value

value that is not mappable by user-space exploits. Cc: <stable@vger.kernel.org> Acked-by: Catalin Marinas <catalin.mari...@arm.com> Signed-off-by: Thierry Strudel <tstru...@google.com> Signed-off-by: Jeff Vander Stoep <je...@google.com> Signed-off-by: Will Deacon <will.dea

[added to the 3.18 stable tree] blk-mq: fix buffer overflow when reading sysfs file of 'pending'

] task: 8802161cc000 ti: 88021b4a8000 task.ti: 88021b4a8000^M [ 359.055693] RIP: 0010:[] [] __kmalloc+0xe8/0x152^M Cc: <stable@vger.kernel.org> Signed-off-by: Ming Lei <ming@canonical.com> Signed-off-by: Jens Axboe <ax...@fb.com> Signed-off-by: Sasha Levin <sasha.l

[added to the 3.18 stable tree] arm64: errata: add module build workaround for erratum #843419

affected modules. Cc: <stable@vger.kernel.org> Acked-by: Catalin Marinas <catalin.mari...@arm.com> Signed-off-by: Will Deacon <will.dea...@arm.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/arm64/Kconfig | 16 arch/arm64/Makefile

[added to the 3.18 stable tree] arm64: compat: fix vfp save/restore across signal handlers in big-endian

lt;stable@vger.kernel.org> Reviewed-by: Catalin Marinas <catalin.mari...@arm.com> Signed-off-by: Will Deacon <will.dea...@arm.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/arm64/kernel/signal32.c | 47 +--- 1 file changed,

[added to the 3.18 stable tree] arm64: head.S: initialise mdcr_el2 in el2_setup

ernel.org> Acked-by: Marc Zyngier <marc.zyng...@arm.com> Signed-off-by: Will Deacon <will.dea...@arm.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/arm64/kernel/head.S | 5 + 1 file changed, 5 insertions(+) diff --git a/arch/arm64/kernel/head.S b/arch/arm

[added to the 3.18 stable tree] powerpc/mm: Recompute hash value after a failed update

Reviewed-by: Paul Mackerras <pau...@samba.org> Signed-off-by: Michael Ellerman <m...@ellerman.id.au> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/powerpc/mm/hugepage-hash64.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/arch/powerpc/mm/hugepage-h

[added to the 3.18 stable tree] [media] rc-core: fix remove uevent generation

red so checking for its presence only means that no remove uevent will be generated. Cc: sta...@kernel.org Signed-off-by: David Härdeman <da...@hardeman.nu> Signed-off-by: Mauro Carvalho Chehab <mche...@osg.samsung.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- driver

[added to the 3.18 stable tree] powerpc/rtas: Introduce rtas_get_sensor_fast() for IRQ handlers

Nathan Fontenot <nf...@linux.vnet.ibm.com> Signed-off-by: Michael Ellerman <m...@ellerman.id.au> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/powerpc/include/asm/rtas.h | 1 + arch/powerpc/kernel/rtas.c | 17 + arch/powerpc/platforms/

[added to the 3.18 stable tree] Input: evdev - do not report errors form flush()

mitry.torok...@gmail.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/input/evdev.c | 13 - 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/drivers/input/evdev.c b/drivers/input/evdev.c index 8afa28e..928dec3 100644 --- a/drivers/input/ev

[added to the 3.18 stable tree] arm64: KVM: Disable virtual timer even if the guest is not using it

viewed-by: Christoffer Dall <christoffer.d...@linaro.org> Signed-off-by: Marc Zyngier <marc.zyng...@arm.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- arch/arm64/kvm/hyp.S | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/arch/arm64/kvm/hyp.S b/ar

[added to the 3.18 stable tree] Add radeon suspend/resume quirk for HP Compaq dc5750.

Factor machine fails to resume from suspend. Adding a quirk similar to other devices avoids the problem and the system resumes properly. Signed-off-by: Jeffery Miller <jmil...@neverware.com> Signed-off-by: Alex Deucher <alexander.deuc...@amd.com> Cc: stable@vger.kernel.org Signed-off-by: Sas

[added to the 3.18 stable tree] mac80211: enable assoc check for mesh interfaces

Signed-off-by: Bob Copeland <m...@bobcopeland.com> Signed-off-by: Johannes Berg <johannes.b...@intel.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/mac80211/tx.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/net/mac80211/tx.c b/net/mac80211/tx.c index 80ce44f

[added to the 3.18 stable tree] ALSA: hda - Enable headphone jack detect on old Fujitsu laptops

dphone jack but currently the driver disables it. It's partly intentionally, as non-working jack detect was reported in the past. Let's enable now. Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=102501 Cc: <stable@vger.kernel.org> Signed-off-by: Takashi Iwai <ti...@suse.de> Si

[added to the 3.18 stable tree] powerpc/mm: Fix pte_pagesize_index() crash on 4K w/64K hash

302 ("powerpc/mm: Increase the slice range to 64TB") Reported-by: Cyril Bur <cyril...@gmail.com> Signed-off-by: Michael Ellerman <m...@ellerman.id.au> Reviewed-by: Aneesh Kumar K.V <aneesh.ku...@linux.vnet.ibm.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com>

[added to the 3.18 stable tree] ALSA: hda - Use ALC880_FIXUP_FUJITSU for FSC Amilo M1437

entry. Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=102501 Cc: <stable@vger.kernel.org> Signed-off-by: Takashi Iwai <ti...@suse.de> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- sound/pci/hda/patch_realtek.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

[added to the 3.18 stable tree] CIFS: fix type confusion in copy offload ioctl

k this, an attacker would have to guess the target_tcon pointer (but guessing wrong doesn't cause a crash, it just returns an error code) and win a narrow race. CC: Stable <stable@vger.kernel.org> Signed-off-by: Jann Horn <j...@thejh.net> Signed-off-by: Steve French <smfre...@gma

[added to the 3.18 stable tree] unshare: Unsharing a thread does not require unsharing a vm

stable@vger.kernel.org Fixes: b2e0d98705e60e45bbb3c0032c48824ad7ae0704 userns: Implement unshare of the user namespace Reported-by: Ricky Zhou <ric...@chromium.org> Reported-by: Kees Cook <keesc...@chromium.org> Reviewed-by: Kees Cook <keesc...@chromium.org> Signed-off-by: "Eric W. Biederman" <

[added to the 3.18 stable tree] openvswitch: Zero flows on allocation.

Jesse Gross <je...@nicira.com> Acked-by: Pravin B Shelar <pshe...@nicira.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/openvswitch/datapath.c | 4 ++-- net/openvswitch/flow_table.c | 23 -

[added to the 3.18 stable tree] fib_rules: fix fib rule dumps across multiple skbs

avid S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/core/fib_rules.c | 14 +- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/net/core/fib_rules.c b/net/core/fib_rules.c index 185c341..aeedc3a 100644 --- a/net/c

[added to the 3.18 stable tree] ipv6: fix exthdrs offload registration in out_rt path

Fixes: 3336288a9fea ("ipv6: Switch to using new offload infrastructure.") Signed-off-by: Daniel Borkmann <dan...@iogearbox.net> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/ipv6/exthdrs_offload.c | 2 +-

[added to the 3.18 stable tree] net/ipv6: Correct PIM6 mrt_lock handling

ichard.la...@alliedtelesis.co.nz> Acked-by: Cong Wang <cw...@twopensource.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/ipv6/ip6mr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/ipv6/ip6mr.c b/

[added to the 3.18 stable tree] [media] v4l: omap3isp: Fix sub-device power management code

mche...@osg.samsung.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/media/platform/omap3isp/isp.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/media/platform/omap3isp/isp.c b/drivers/media/platform/omap3isp/isp.c index 72265e5..233

[added to the 3.18 stable tree] parisc: Use double word condition in 64bit CAS operation

uot; instruction. A double word comparison is needed. This fixes the 64-bit LWS CAS operation on 64-bit kernels. I can now enable 64-bit atomic support in GCC. Cc: <stable@vger.kernel.org> Signed-off-by: John David Anglin Signed-off-by: Helge Deller <del...@gmx.de> Signed-o

[added to the 3.18 stable tree] ip6_gre: release cached dst on tunnel removal

...@6wind.com> Signed-off-by: Nicolas Dichtel <nicolas.dich...@6wind.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/ipv6/ip6_gre.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/ipv

[added to the 3.18 stable tree] if_link: Add an additional parameter to ifla_vf_info for RSS querying

ov <vl...@cloudius-systems.com> Tested-by: Phil Schmitt <phillip.j.schm...@intel.com> Signed-off-by: Jeff Kirsher <jeffrey.t.kirs...@intel.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- include/linux/if_link.h | 1 + include/linux/netdevice.h|

[added to the 3.18 stable tree] NFS: nfs_set_pgio_error sometimes misses errors

igned-off-by: Trond Myklebust <trond.mykleb...@primarydata.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- fs/nfs/pagelist.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fs/nfs/pagelist.c b/fs/nfs/pagelist.c index ed0db61..92dd2ec 100644 --- a/fs/nfs/pa

[added to the 3.18 stable tree] mmc: core: fix race condition in mmc_wait_data_done

awn@rock-chips.com> Fixes: 2220eedfd7ae ("mmc: fix async request mechanism ") Signed-off-by: Shawn Lin <shawn@rock-chips.com> Signed-off-by: Ulf Hansson <ulf.hans...@linaro.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/mmc/core/core.

[added to the 3.18 stable tree] IB/uverbs: Fix race between ib_uverbs_open and remove_one

anox.com> Reviewed-by: Jason Gunthorpe <jguntho...@obsidianresearch.com> Signed-off-by: Doug Ledford <dledf...@redhat.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/infiniband/core/uverbs.h | 3 ++- drivers/infiniband/core/uverbs_main.c | 43 +++

[added to the 3.18 stable tree] IB/mlx4: Forbid using sysfs to change RoCE pkeys

dd iov directory in sysfs under the ib device') Signed-off-by: Jack Morgenstein <ja...@dev.mellanox.co.il> Signed-off-by: Or Gerlitz <ogerl...@mellanox.com> Signed-off-by: Doug Ledford <dledf...@redhat.com> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- drivers/

[added to the 3.18 stable tree] hfs,hfsplus: cache pages correctly between bnode_create and bnode_free

out page_cache_release() in bnode_release() (which should be spanned by !REF_PAGES) was never enabled. References: [1]: Michael Fox, Apr 2013 http://www.spinics.net/lists/linux-fsdevel/msg63807.html ("hfsplus volume suddenly inaccessable after 'hfs: recoff %d too large'") Sasha Levin, Feb

[added to the 3.18 stable tree] hfs: fix B-tree corruption after insertion at position 0

: Christoph Hellwig <h...@infradead.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <a...@linux-foundation.org> Signed-off-by: Linus Torvalds <torva...@linux-foundation.org> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- fs/hfs/brec.c | 20 +++---

[added to the 3.18 stable tree] bna: fix interrupts storm caused by erroneous packets

nd again. Fixes: e29aa33 ("bna: Enable Multi Buffer RX") Signed-off-by: Ivan Vecera <ivec...@redhat.com> Acked-by: Rasesh Mody <rasesh.m...@qlogic.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- driv

[added to the 3.18 stable tree] packet: missing dev_put() in packet_do_bind()

: Lars Westerhoff <lars.westerh...@newtec.eu> Signed-off-by: Dan Carpenter <dan.carpen...@oracle.com> Reviewed-by: Daniel Borkmann <dbork...@redhat.com> Signed-off-by: David S. Miller <da...@davemloft.net> Signed-off-by: Sasha Levin <sasha.le...@oracle.com> --- net/pac

  1   2   3   4   5   6   7   8   9   10   >