Skip to content

4.2.8-stable review

Greg Kroah-Hartman lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest59 of 61 patches 2 repliesIn review

59 of 61 patches are in this archive. The cover letter announces 61.

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/61af-unix: fix use-after-free with concurrent readers while splicingnet/unix/af_unix.c+18 -00 replies
2/61af_unix: dont append consumed skbs to sk_receive_queuenet/unix/af_unix.c+1 -00 replies
3/61af_unix: take receive queue lock while appending new skbnet/unix/af_unix.c+4 -10 replies
4/61unix: avoid use-after-free in ep_remove_wait_queueinclude/net/af_unix.h net/unix/af_unix.c+165 -190 replies
5/61af-unix: passcred support for sendpagenet/unix/af_unix.c+64 -150 replies
6/61ipv6: Avoid creating RTF_CACHE from a rt that is not managed by fib6 treenet/ipv6/route.c+7 -10 replies
7/61ipv6: Check expire on DST_NOCACHE routenet/ipv6/route.c+10 -10 replies
8/61ipv6: Check rt->dst.from for the DST_NOCACHE routeinclude/net/ip6_fib.h net/ipv6/route.c+4 -20 replies
9/61tools/net: Use include/uapi with __EXPORTED_HEADERS__tools/net/Makefile+4 -30 replies
10/61packet: do skb_probe_transport_header when we actually have datanet/packet/af_packet.c+3 -20 replies
11/61packet: always probe for transport headernet/packet/af_packet.c+3 -40 replies
12/61packet: only allow extra vlan len on ethernet devicesnet/packet/af_packet.c+25 -350 replies
13/61packet: infer protocol from ethernet header if unsetnet/packet/af_packet.c+11 -00 replies
14/61packet: fix tpacket_snd max frame lennet/packet/af_packet.c+5 -40 replies
15/61sctp: translate host order to network order when setting a hmacidnet/sctp/auth.c+2 -20 replies
16/61net/mlx4_core: Fix sleeping while holding spinlock at rem_slave_countersdrivers/net/ethernet/mellanox/mlx4/resource_tracker.c+27 -120 replies
17/61ip_tunnel: disable preemption when updating per-cpu tstatsinclude/net/ip6_tunnel.h include/net/ip_tunnels.h+4 -20 replies
18/61net: switchdev: fix return code of fdb_dump stubinclude/net/switchdev.h+1 -10 replies
19/61net: thunder: Check for driver data in nicvf_remove()drivers/net/ethernet/cavium/thunder/nicvf_main.c+6 -10 replies
20/61snmp: Remove duplicate OUTMCAST stat incrementnet/ipv6/mcast.c+0 -20 replies
22/61tcp: md5: fix lockdep annotationnet/ipv4/tcp_ipv4.c+2 -10 replies
23/61tcp: disable Fast Open on timeouts after handshakenet/ipv4/tcp_timer.c+12 -00 replies
24/61tcp: fix potential huge kmalloc() calls in TCP_REPAIRnet/ipv4/tcp_input.c+19 -30 replies
25/61tcp: initialize tp->copied_seq in case of cross SYN connectionnet/ipv4/tcp_input.c+1 -00 replies
26/61net, scm: fix PaX detected msg_controllen overflow in scm_detach_fdsnet/core/scm.c+2 -00 replies
27/61net: ipmr: fix static mfc/dev leaks on table destructionnet/ipv4/ipmr.c+8 -70 replies
28/61net: ip6mr: fix static mfc/dev leaks on table destructionnet/ipv6/ip6mr.c+8 -70 replies
29/61broadcom: fix PHY_ID_BCM5481 entry in the id tabledrivers/net/phy/broadcom.c+1 -10 replies
30/61ipv6: distinguish frag queues by device for multicast and link-local packetsinclude/net/ipv6.h net/ipv6/netfilter/nf_conntrack_reasm.c net/ipv6/reassembly.c+11 -50 replies
31/61RDS: fix race condition when sending a message on unbound socketnet/rds/connection.c net/rds/send.c+3 -70 replies
32/61bpf, array: fix heap out-of-bounds access when updating elementskernel/bpf/arraymap.c+1 -10 replies
33/61ipv6: add complete rcu protection around np->optinclude/linux/ipv6.h include/net/ipv6.h net/dccp/ipv6.c +10 more+122 -520 replies
34/61net/neighbour: fix crash at dumping device-agnostic proxy entriesnet/core/neighbour.c+2 -20 replies
35/61ipv6: sctp: implement sctp_v6_destroy_sock()net/sctp/socket.c+8 -10 replies
36/61net_sched: fix qdisc_tree_decrease_qlen() racesinclude/net/sch_generic.h net/sched/sch_api.c net/sched/sch_generic.c +2 more+26 -140 replies
37/61via-rhine: fix VLAN receive handling regression.drivers/net/ethernet/via/via-rhine.c+2 -10 replies
38/61btrfs: fix resending received snapshot with parentfs/btrfs/send.c+8 -20 replies
39/61btrfs: check unsupported filters in balance argumentsfs/btrfs/ioctl.c fs/btrfs/volumes.h+13 -00 replies
40/61Btrfs: fix file corruption and data loss after cloning inline extentsfs/btrfs/ioctl.c+152 -430 replies
41/61Btrfs: fix truncation of compressed and inlined extentsfs/btrfs/inode.c+68 -140 replies
43/61Btrfs: fix race leading to incorrect item deletion when dropping extentsfs/btrfs/file.c+12 -40 replies
44/61Btrfs: fix race leading to BUG_ON when running delalloc for nodatacowfs/btrfs/inode.c+8 -20 replies
45/61Btrfs: fix race when listing an inodes xattrsfs/btrfs/xattr.c+3 -10 replies
46/61btrfs: fix signed overflows in btrfs_sync_filefs/btrfs/file.c+7 -30 replies
47/61rbd: dont put snap_context twice in rbd_queue_workfn()drivers/block/rbd.c+1 -00 replies
48/61ext4 crypto: fix memory leak in ext4_bio_write_page()fs/ext4/page-io.c+4 -10 replies
49/61ext4 crypto: replace some BUG_ON()s with error checksfs/ext4/crypto.c fs/ext4/crypto_fname.c fs/ext4/crypto_key.c +1 more+15 -70 replies
50/61ext4: fix potential use after free in __ext4_journal_stopfs/ext4/ext4_jbd2.c+3 -30 replies
51/61ext4, jbd2: ensure entering into panic after recording an error in superblockfs/ext4/super.c fs/jbd2/journal.c include/linux/jbd2.h+16 -30 replies
52/61firewire: ohci: fix JMicron JMB38x IT context discoverydrivers/firewire/ohci.c+5 -00 replies
53/61nfsd: serialize state seqid morphing operationsfs/nfsd/nfs4state.c fs/nfsd/state.h+38 -140 replies
54/61nfsd: eliminate sending duplicate and repeated delegationsfs/nfsd/nfs4state.c+84 -100 replies
55/61debugfs: fix refcount imbalance in start_creatingfs/debugfs/inode.c+5 -10 replies
56/61nfs4: start callback_ident at idr 1fs/nfs/nfs4client.c+1 -10 replies
57/61nfs: if we have no valid attrs, then dont declare the attribute cache validfs/nfs/inode.c+5 -10 replies
58/61ocfs2: fix umask ignored issuefs/ocfs2/namei.c+2 -00 replies
59/61ceph: fix message length computationfs/ceph/mds_client.c+1 -10 replies
60/61ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codecsound/pci/hda/patch_hdmi.c+2 -10 replies
61/61cobalt: fix Kconfig dependencydrivers/media/pci/cobalt/Kconfig+1 -10 replies

Reviews trailers per patch

26 of 59 patches have a Reviewed-by or Acked-by.

PatchEric DumazetJason BaronDaniel BorkmannJason WangWillem de BruijnNeil HormanVlad YasevichHannes Frederic SowaPavel EmelyanovDmitry VyukovCong WangVegard NossumSasha LevinSantosh ShilimkarFilipe MananaEd TomlinsonAndreas DilgerHobin WooAndrew W ElbleSteve FrenchMoni ShouaJiri PirkoFrancois RomieuAlexei StarovoitovJosh Durgin
1/61A-b
2/61A-b
3/61A-b
4/61R-b
5/61
6/61
7/61
8/61
9/61A-b
10/61A-b
11/61A-b
12/61A-b
13/61A-b
14/61A-b
15/61A-b A-b
16/61T-b
17/61A-b
18/61A-b
19/61
20/61
22/61
23/61
24/61A-b
25/61T-b
26/61R-b
27/61R-b
28/61R-b
29/61
30/61
31/61R-b R-b A-b
32/61A-b
33/61A-b
34/61
35/61A-b
36/61
37/61A-b
38/61R-b T-b
39/61
40/61
41/61
43/61
44/61
45/61
46/61
47/61R-b
48/61
49/61
50/61R-b
51/61T-b
52/61
53/61Reported-and-Tested-by
54/61
55/61
56/61
57/61R-b
58/61
59/61
60/61
61/61

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 25 reviewers.

Read the v1 thread

Cover letter [PATCH 4.2 00/61] 4.2.8-stable review

===================
NOTE:
This is the last 4.2.y kernel to be released, unless something major comes up, it is end-of-life after this release. Everyone should have moved to 4.3.y by now, you have been warned.
===================

This is the start of the stable review cycle for the 4.2.8 release. There are 61 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Mon Dec 14 20:04:13 UTC 2015. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.2.8-rc1.gz

and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.2.8-rc1

Hans Verkuil <[email protected]>
cobalt: fix Kconfig dependency

Lu, Han <[email protected]>
ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codec

Arnd Bergmann <[email protected]>
ceph: fix message length computation

Junxiao Bi <[email protected]>
ocfs2: fix umask ignored issue

Jeff Layton <[email protected]>
nfs: if we have no valid attrs, then don't declare the attribute cache valid

Benjamin Coddington <[email protected]>
nfs4: start callback_ident at idr 1

Daniel Borkmann <[email protected]>
debugfs: fix refcount imbalance in start_creating

Andrew Elble <[email protected]>
nfsd: eliminate sending duplicate and repeated delegations

Jeff Layton <[email protected]>
nfsd: serialize state seqid morphing operations

Stefan Richter <[email protected]>
firewire: ohci: fix JMicron JMB38x IT context discovery

Daeho Jeong <[email protected]>
ext4, jbd2: ensure entering into panic after recording an error in superblock

Lukas Czerner <[email protected]>
ext4: fix potential use after free in __ext4_journal_stop

Theodore Ts'o <[email protected]>
ext4 crypto: replace some BUG_ON()'s with error checks

Theodore Ts'o <[email protected]>
ext4 crypto: fix memory leak in ext4_bio_write_page()

Ilya Dryomov <[email protected]>
rbd: don't put snap_context twice in rbd_queue_workfn()

David Sterba <[email protected]>
btrfs: fix signed overflows in btrfs_sync_file

Filipe Manana <[email protected]>
Btrfs: fix race when listing an inode's xattrs

Filipe Manana <[email protected]>
Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow

Filipe Manana <[email protected]>
Btrfs: fix race leading to incorrect item deletion when dropping extents

Filipe Manana <[email protected]>
Btrfs: fix regression when running delayed references

Filipe Manana <[email protected]>
Btrfs: fix truncation of compressed and inlined extents

Filipe Manana <[email protected]>
Btrfs: fix file corruption and data loss after cloning inline extents

David Sterba <[email protected]>
btrfs: check unsupported filters in balance arguments

Robin Ruede <[email protected]>
btrfs: fix resending received snapshot with parent

Andrej Ota <[email protected]>
via-rhine: fix VLAN receive handling regression.

Eric Dumazet <[email protected]>
net_sched: fix qdisc_tree_decrease_qlen() races

Eric Dumazet <[email protected]>
ipv6: sctp: implement sctp_v6_destroy_sock()

Konstantin Khlebnikov <[email protected]>
net/neighbour: fix crash at dumping device-agnostic proxy entries

Eric Dumazet <[email protected]>

    ipv6: add complete rcu protection around np->opt

Daniel Borkmann <[email protected]>
bpf, array: fix heap out-of-bounds access when updating elements

Quentin Casasnovas <[email protected]>
RDS: fix race condition when sending a message on unbound socket

Michal Kubeček <[email protected]>
ipv6: distinguish frag queues by device for multicast and link-local packets

Aaro Koskinen <[email protected]>
broadcom: fix PHY_ID_BCM5481 entry in the id table

Nikolay Aleksandrov <[email protected]>
net: ip6mr: fix static mfc/dev leaks on table destruction

Nikolay Aleksandrov <[email protected]>
net: ipmr: fix static mfc/dev leaks on table destruction

Daniel Borkmann <[email protected]>
net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds

Eric Dumazet <[email protected]>

    tcp: initialize tp->copied_seq in case of cross SYN connection

Eric Dumazet <[email protected]>
tcp: fix potential huge kmalloc() calls in TCP_REPAIR

Yuchung Cheng <[email protected]>
tcp: disable Fast Open on timeouts after handshake

Eric Dumazet <[email protected]>
tcp: md5: fix lockdep annotation

Bjørn Mork <[email protected]>
net: qmi_wwan: add XS Stick W100-2 from 4G Systems

Neil Horman <[email protected]>
snmp: Remove duplicate OUTMCAST stat increment

Pavel Fedin <[email protected]>
net: thunder: Check for driver data in nicvf_remove()

Dragos Tatulea <[email protected]>
net: switchdev: fix return code of fdb_dump stub

Jason A. Donenfeld <[email protected]>
ip_tunnel: disable preemption when updating per-cpu tstats

Eran Ben Elisha <[email protected]>
net/mlx4_core: Fix sleeping while holding spinlock at rem_slave_counters

lucien <[email protected]>
sctp: translate host order to network order when setting a hmacid

Daniel Borkmann <[email protected]>
packet: fix tpacket_snd max frame len

Daniel Borkmann <[email protected]>
packet: infer protocol from ethernet header if unset

Daniel Borkmann <[email protected]>
packet: only allow extra vlan len on ethernet devices

Daniel Borkmann <[email protected]>
packet: always probe for transport header

Daniel Borkmann <[email protected]>
packet: do skb_probe_transport_header when we actually have data

Kamal Mostafa <[email protected]>
tools/net: Use include/uapi with __EXPORTED_HEADERS__

Martin KaFai Lau <[email protected]>

    ipv6: Check rt->dst.from for the DST_NOCACHE route

Martin KaFai Lau <[email protected]>
ipv6: Check expire on DST_NOCACHE route

Martin KaFai Lau <[email protected]>
ipv6: Avoid creating RTF_CACHE from a rt that is not managed by fib6 tree

Hannes Frederic Sowa <[email protected]>
af-unix: passcred support for sendpage

Rainer Weikusat <[email protected]>
unix: avoid use-after-free in ep_remove_wait_queue

Hannes Frederic Sowa <[email protected]>
af_unix: take receive queue lock while appending new skb

Hannes Frederic Sowa <[email protected]>
af_unix: don't append consumed skbs to sk_receive_queue

Hannes Frederic Sowa <[email protected]>
af-unix: fix use-after-free with concurrent readers while splicing

-------------

Diffstat:

 Makefile                                           |   4 +-
 drivers/block/rbd.c                                |   1 +
 drivers/firewire/ohci.c                            |   5 +
 drivers/media/pci/cobalt/Kconfig                   |   2 +-
 drivers/net/ethernet/cavium/thunder/nicvf_main.c   |   7 +-
 .../net/ethernet/mellanox/mlx4/resource_tracker.c  |  39 ++-
 drivers/net/ethernet/via/via-rhine.c               |   3 +-
 drivers/net/phy/broadcom.c                         |   2 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 fs/btrfs/delayed-ref.c                             | 113 ++++++++
 fs/btrfs/extent-tree.c                             |  14 +
 fs/btrfs/file.c                                    |  26 +-
 fs/btrfs/inode.c                                   |  92 +++++--
 fs/btrfs/ioctl.c                                   | 200 ++++++++++----
 fs/btrfs/send.c                                    |  10 +-
 fs/btrfs/volumes.h                                 |   8 +
 fs/btrfs/xattr.c                                   |   4 +-
 fs/ceph/mds_client.c                               |   2 +-
 fs/debugfs/inode.c                                 |   6 +-
 fs/ext4/crypto.c                                   |   1 -
 fs/ext4/crypto_fname.c                             |   2 -
 fs/ext4/crypto_key.c                               |  16 +-
 fs/ext4/crypto_policy.c                            |   3 +-
 fs/ext4/ext4_jbd2.c                                |   6 +-
 fs/ext4/page-io.c                                  |   5 +-
 fs/ext4/super.c                                    |  12 +-
 fs/jbd2/journal.c                                  |   6 +-
 fs/nfs/inode.c                                     |   6 +-
 fs/nfs/nfs4client.c                                |   2 +-
 fs/nfsd/nfs4state.c                                | 127 +++++++--
 fs/nfsd/state.h                                    |  19 +-
 fs/ocfs2/namei.c                                   |   2 +
 include/linux/ipv6.h                               |   2 +-
 include/linux/jbd2.h                               |   1 +
 include/net/af_unix.h                              |   1 +
 include/net/ip6_fib.h                              |   3 +-
 include/net/ip6_tunnel.h                           |   3 +-
 include/net/ip_tunnels.h                           |   3 +-
 include/net/ipv6.h                                 |  22 +-
 include/net/sch_generic.h                          |   3 +
 include/net/switchdev.h                            |   2 +-
 kernel/bpf/arraymap.c                              |   2 +-
 net/core/neighbour.c                               |   4 +-
 net/core/scm.c                                     |   2 +
 net/dccp/ipv6.c                                    |  33 ++-
 net/ipv4/ipmr.c                                    |  15 +-
 net/ipv4/tcp_input.c                               |  23 +-
 net/ipv4/tcp_ipv4.c                                |   3 +-
 net/ipv4/tcp_timer.c                               |  12 +
 net/ipv6/af_inet6.c                                |  13 +-
 net/ipv6/datagram.c                                |   4 +-
 net/ipv6/exthdrs.c                                 |   3 +-
 net/ipv6/inet6_connection_sock.c                   |  11 +-
 net/ipv6/ip6mr.c                                   |  15 +-
 net/ipv6/ipv6_sockglue.c                           |  33 ++-
 net/ipv6/mcast.c                                   |   2 -
 net/ipv6/netfilter/nf_conntrack_reasm.c            |   5 +-
 net/ipv6/raw.c                                     |   8 +-
 net/ipv6/reassembly.c                              |  10 +-
 net/ipv6/route.c                                   |  22 +-
 net/ipv6/syncookies.c                              |   2 +-
 net/ipv6/tcp_ipv6.c                                |  28 +-
 net/ipv6/udp.c                                     |   8 +-
 net/l2tp/l2tp_ip6.c                                |   8 +-
 net/packet/af_packet.c                             |  86 ++++---
 net/rds/connection.c                               |   6 -
 net/rds/send.c                                     |   4 +-
 net/sched/sch_api.c                                |  27 +-
 net/sched/sch_generic.c                            |   2 +-
 net/sched/sch_mq.c                                 |   4 +-
 net/sched/sch_mqprio.c                             |   4 +-
 net/sctp/auth.c                                    |   4 +-
 net/sctp/socket.c                                  |   9 +-
 net/unix/af_unix.c                                 | 286 ++++++++++++++++++---
 sound/pci/hda/patch_hdmi.c                         |   3 +-
 tools/net/Makefile                                 |   7 +-
 76 files changed, 1173 insertions(+), 321 deletions(-)