Linux 5.10.100
Greg Kroah-Hartman
maintainerI'm announcing the release of the 5.10.100 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 +- arch/s390/kvm/kvm-s390.c | 2 ++ crypto/algapi.c | 1 + crypto/api.c | 1 - drivers/mmc/host/moxart-mmc.c | 2 +- net/tipc/link.c | 9 +++++++-- net/tipc/monitor.c | 2 ++ 7 files changed, 14 insertions(+), 5 deletions(-)
Greg Kroah-Hartman (2):
moxart: fix potential use-after-free on remove path Linux 5.10.100
Herbert Xu (1):
crypto: api - Move cryptomgr soft dependency into algapi
Janis Schoetterl-Glausch (1):
KVM: s390: Return error on SIDA memop on normal guest
Jon Maloy (1):
tipc: improve size validations for received domain records
Greg Kroah-Hartman
maintainerMakefile +1 -1
@@ -1,7 +1,7 @@ # SPDX-License-Identifier: GPL-2.0 VERSION = 5 PATCHLEVEL = 10 -SUBLEVEL = 99 +SUBLEVEL = 100 EXTRAVERSION = NAME = Dare mighty things
arch/s390/kvm/kvm-s390.c +2 -0
@@ -4654,6 +4654,8 @@ static long kvm_s390_guest_sida_op(struct kvm_vcpu *vcpu,return -EINVAL ;if (mop->size + mop->sida_offset >sida_size (vcpu->arch.sie_block))return -E2BIG ; +if (!kvm_s390_pv_cpu_is_protected (vcpu)) +return -EINVAL ;switch (mop->op) {case KVM_S390_MEMOP_SIDA_READ :
crypto/algapi.c +1 -0
@@ -1295,3 +1295,4 @@ module_exit(crypto_algapi_exit);MODULE_LICENSE ("GPL" );MODULE_DESCRIPTION ("Cryptographic algorithms API" ); +MODULE_SOFTDEP ("pre: cryptomgr" );
crypto/api.c +0 -1
@@ -603,4 +603,3 @@ EXPORT_SYMBOL_GPL(crypto_req_done);MODULE_DESCRIPTION ("Cryptographic core API" );MODULE_LICENSE ("GPL" ); -MODULE_SOFTDEP ("pre: cryptomgr" );
drivers/mmc/host/moxart-mmc.c +1 -1
@@ -708,12 +708,12 @@ static int moxart_remove(struct platform_device *pdev)if (!IS_ERR_OR_NULL (host->dma_chan_rx))dma_release_channel (host->dma_chan_rx);mmc_remove_host (mmc); -mmc_free_host (mmc);writel (0 , host->base +REG_INTERRUPT_MASK );writel (0 , host->base +REG_POWER_CONTROL );writel (readl (host->base +REG_CLOCK_CONTROL ) |CLK_OFF , host->base +REG_CLOCK_CONTROL ); +mmc_free_host (mmc);return 0 ; }
net/tipc/link.c +7 -2
@@ -2159,7 +2159,7 @@ static int tipc_link_proto_rcv(struct tipc_link *l, struct sk_buff *skb,struct tipc_msg *hdr =buf_msg (skb);struct tipc_gap_ack_blks *ga =NULL ;bool reply =msg_probe (hdr), retransmitted = false; -u16 dlen =msg_data_sz (hdr), glen =0 ; +u32 dlen =msg_data_sz (hdr), glen =0 ;u16 peers_snd_nxt =msg_next_sent (hdr);u16 peers_tol =msg_link_tolerance (hdr);u16 peers_prio =msg_linkprio (hdr);
@@ -2173,6 +2173,10 @@ static int tipc_link_proto_rcv(struct tipc_link *l, struct sk_buff *skb,void *data;trace_tipc_proto_rcv (skb, false, l->name); + +if (dlen >U16_MAX ) + goto exit; +if (tipc_link_is_blocked (l) || !xmitq) goto exit;
@@ -2268,7 +2272,8 @@ static int tipc_link_proto_rcv(struct tipc_link *l, struct sk_buff *skb,/* Receive Gap ACK blocks from peer if any */ glen =tipc_get_gap_ack_blks (&ga, l, hdr, true); - +if (glen > dlen) +break ;tipc_mon_rcv (l->net, data + glen, dlen - glen, l->addr, &l->mon_state, l->bearer_id);
net/tipc/monitor.c +2 -0
@@ -465,6 +465,8 @@ void tipc_mon_rcv(struct net *net, void *data, u16 dlen, u32 addr, state->probing = false;/* Sanity check received domain record */ +if (new_member_cnt >MAX_MON_DOMAIN ) +return ;if (dlen <dom_rec_len (arrv_dom,0 ))return ;if (dlen !=dom_rec_len (arrv_dom, new_member_cnt))