Skip to content

3.14.59-stable review

Greg Kroah-Hartman lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest45 of 47 patches 2 repliesIn review

45 of 47 patches are in this archive. The cover letter announces 47.

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/47unix: avoid use-after-free in ep_remove_wait_queueinclude/net/af_unix.h net/unix/af_unix.c+165 -190 replies
2/47tools/net: Use include/uapi with __EXPORTED_HEADERS__tools/net/Makefile+4 -30 replies
3/47packet: do skb_probe_transport_header when we actually have datanet/packet/af_packet.c+3 -20 replies
4/47packet: always probe for transport headernet/packet/af_packet.c+3 -40 replies
5/47packet: infer protocol from ethernet header if unsetnet/packet/af_packet.c+11 -00 replies
6/47sctp: translate host order to network order when setting a hmacidnet/sctp/auth.c+2 -20 replies
7/47ip_tunnel: disable preemption when updating per-cpu tstatsinclude/net/ip6_tunnel.h include/net/ip_tunnels.h+4 -20 replies
8/47snmp: Remove duplicate OUTMCAST stat incrementnet/ipv6/mcast.c+0 -20 replies
10/47tcp: md5: fix lockdep annotationnet/ipv4/tcp_ipv4.c+2 -10 replies
11/47tcp: initialize tp->copied_seq in case of cross SYN connectionnet/ipv4/tcp_input.c+1 -00 replies
12/47net, scm: fix PaX detected msg_controllen overflow in scm_detach_fdsnet/core/scm.c+2 -00 replies
13/47net: ipmr: fix static mfc/dev leaks on table destructionnet/ipv4/ipmr.c+8 -70 replies
14/47net: ip6mr: fix static mfc/dev leaks on table destructionnet/ipv6/ip6mr.c+8 -70 replies
15/47broadcom: fix PHY_ID_BCM5481 entry in the id tabledrivers/net/phy/broadcom.c+1 -10 replies
16/47ipv6: distinguish frag queues by device for multicast and link-local packetsinclude/net/ipv6.h net/ipv6/netfilter/nf_conntrack_reasm.c net/ipv6/reassembly.c+11 -50 replies
17/47ipv6: sctp: implement sctp_v6_destroy_sock()net/sctp/socket.c+8 -10 replies
18/47Btrfs: fix race leading to incorrect item deletion when dropping extentsfs/btrfs/file.c+12 -40 replies
19/47Btrfs: fix race leading to BUG_ON when running delalloc for nodatacowfs/btrfs/inode.c+8 -20 replies
20/47ext4: fix potential use after free in __ext4_journal_stopfs/ext4/ext4_jbd2.c+3 -30 replies
21/47ext4, jbd2: ensure entering into panic after recording an error in superblockfs/ext4/super.c fs/jbd2/journal.c include/linux/jbd2.h+16 -30 replies
22/47firewire: ohci: fix JMicron JMB38x IT context discoverydrivers/firewire/ohci.c+5 -00 replies
23/47nfs4: start callback_ident at idr 1fs/nfs/nfs4client.c+1 -10 replies
24/47nfs: if we have no valid attrs, then dont declare the attribute cache validfs/nfs/inode.c+5 -10 replies
25/47ocfs2: fix umask ignored issuefs/ocfs2/namei.c+2 -00 replies
26/47USB: cdc_acm: Ignore Infineon Flash Loader utilitydrivers/usb/class/cdc-acm.c+5 -00 replies
27/47USB: serial: Another Infineon flash loader USB IDdrivers/usb/serial/usb-serial-simple.c+1 -00 replies
28/47USB: cp210x: Remove CP2110 ID from compatibility listdrivers/usb/serial/cp210x.c+0 -10 replies
29/47USB: add quirk for devices with broken LPMdrivers/usb/core/hub.c drivers/usb/core/quirks.c include/linux/usb/quirks.h+15 -10 replies
30/47USB: whci-hcd: add check for dma mapping errordrivers/usb/host/whci/qset.c+4 -00 replies
31/47usb: Use the USB_SS_MULT() macro to decode burst multiplier for log messagedrivers/usb/core/config.c+2 -10 replies
32/47gre6: allow to update all parameters via rtnlnet/ipv6/ip6_gre.c+3 -50 replies
33/47atl1c: Improve driver not to do order 4 GFP_ATOMIC allocationdrivers/net/ethernet/atheros/atl1c/atl1c_main.c+3 -40 replies
34/47sctp: use the same clock as if sock source timestamps were onnet/sctp/sm_make_chunk.c+2 -20 replies
35/47sctp: update the netstamp_needed counter when copying socketsinclude/net/sock.h net/core/sock.c net/sctp/socket.c+5 -20 replies
36/47ipv6: sctp: clone options to avoid use after freenet/sctp/ipv6.c+8 -00 replies
38/47sh_eth: fix kernel oops in skb_put()drivers/net/ethernet/renesas/sh_eth.c+2 -20 replies
39/47vlan: Fix untag operations of stacked vlans with REORDER_HEADER offnet/core/skbuff.c+2 -10 replies
40/47skbuff: Fix offset error in skb_reorder_vlan_headernet/core/skbuff.c+1 -10 replies
41/47pptp: verify sockaddr_len in pptp_bind() and pptp_connect()drivers/net/ppp/pptp.c+6 -00 replies
42/47bluetooth: Validate socket address length in sco_sock_bind().net/bluetooth/sco.c+3 -00 replies
43/47af_unix: Revert lock_interruptible in stream receive codenet/unix/af_unix.c+3 -100 replies
44/47KEYS: Fix race between key destruction and finding a keyring by namesecurity/keys/gc.c+4 -40 replies
45/47KEYS: Fix crash when attempt to garbage collect an uninstantiated keyringsecurity/keys/gc.c+4 -20 replies
46/47KEYS: Fix race between read and revokesecurity/keys/keyctl.c+9 -90 replies
47/47KEYS: Fix keyring ref leak in join_session_keyring()security/keys/process_keys.c+1 -00 replies

Reviews trailers per patch

19 of 45 patches have a Reviewed-by or Acked-by.

PatchDaniel BorkmannJason WangHannes Frederic SowaCong WangSteve FrenchDaniele PalmasVlad YasevichDmitry VyukovDon ZickusPrarit BhargavaJarod WilsonJason BaronWillem de BruijnNeil HormanAndreas DilgerHobin WooMichal Hocko
1/47R-b
2/47A-b
3/47A-b
4/47A-b
5/47A-b
6/47A-b A-b
7/47A-b
8/47
10/47
11/47T-b
12/47R-b
13/47R-b
14/47R-b
15/47
16/47
17/47A-b
18/47
19/47
20/47R-b
21/47T-b
22/47
23/47
24/47R-b
25/47
26/47T-b
27/47T-b
28/47
29/47
30/47
31/47
32/47
33/47A-b
34/47A-b
35/47A-b
36/47A-b
38/47
39/47
40/47
41/47
42/47
43/47A-b
44/47
45/47T-b
46/47T-b
47/47A-b A-b A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 17 reviewers.

Read the v1 thread

Cover letter [PATCH 3.14 00/47] 3.14.59-stable review

This is the start of the stable review cycle for the 3.14.59 release. There are 47 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri Jan 22 21:54:28 UTC 2016. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.14.59-rc1.gz

and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 3.14.59-rc1

Yevgeny Pats <[email protected]>
KEYS: Fix keyring ref leak in join_session_keyring()

David Howells <[email protected]>
KEYS: Fix race between read and revoke

David Howells <[email protected]>
KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring

David Howells <[email protected]>
KEYS: Fix race between key destruction and finding a keyring by name

Rainer Weikusat <[email protected]>
af_unix: Revert 'lock_interruptible' in stream receive code

David S. Miller <[email protected]>
bluetooth: Validate socket address length in sco_sock_bind().

WANG Cong <[email protected]>
pptp: verify sockaddr_len in pptp_bind() and pptp_connect()

Vlad Yasevich <[email protected]>
skbuff: Fix offset error in skb_reorder_vlan_header

Vlad Yasevich <[email protected]>
vlan: Fix untag operations of stacked vlans with REORDER_HEADER off

Sergei Shtylyov <[email protected]>
sh_eth: fix kernel oops in skb_put()

Hannes Frederic Sowa <[email protected]>
net: add validation for the socket syscall protocol argument

Eric Dumazet <[email protected]>
ipv6: sctp: clone options to avoid use after free

Marcelo Ricardo Leitner <[email protected]>
sctp: update the netstamp_needed counter when copying sockets

Marcelo Ricardo Leitner <[email protected]>
sctp: use the same clock as if sock source timestamps were on

Pavel Machek <[email protected]>
atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation

Nicolas Dichtel <[email protected]>
gre6: allow to update all parameters via rtnl

Ben Hutchings <[email protected]>
usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message

Alexey Khoroshilov <[email protected]>
USB: whci-hcd: add check for dma mapping error

Alan Stern <[email protected]>
USB: add quirk for devices with broken LPM

Konstantin Shkolnyy <[email protected]>

    USB: cp210x: Remove CP2110 ID from compatibility list

Jonas Jonsson <[email protected]>
USB: serial: Another Infineon flash loader USB ID

Jonas Jonsson <[email protected]>
USB: cdc_acm: Ignore Infineon Flash Loader utility

Junxiao Bi <[email protected]>
ocfs2: fix umask ignored issue

Jeff Layton <[email protected]>
nfs: if we have no valid attrs, then don't declare the attribute cache valid

Benjamin Coddington <[email protected]>
nfs4: start callback_ident at idr 1

Stefan Richter <[email protected]>
firewire: ohci: fix JMicron JMB38x IT context discovery

Daeho Jeong <[email protected]>
ext4, jbd2: ensure entering into panic after recording an error in superblock

Lukas Czerner <[email protected]>
ext4: fix potential use after free in __ext4_journal_stop

Filipe Manana <[email protected]>
Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow

Filipe Manana <[email protected]>
Btrfs: fix race leading to incorrect item deletion when dropping extents

Eric Dumazet <[email protected]>
ipv6: sctp: implement sctp_v6_destroy_sock()

Michal Kubeček <[email protected]>
ipv6: distinguish frag queues by device for multicast and link-local packets

Aaro Koskinen <[email protected]>
broadcom: fix PHY_ID_BCM5481 entry in the id table

Nikolay Aleksandrov <[email protected]>
net: ip6mr: fix static mfc/dev leaks on table destruction

Nikolay Aleksandrov <[email protected]>
net: ipmr: fix static mfc/dev leaks on table destruction

Daniel Borkmann <[email protected]>
net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds

Eric Dumazet <[email protected]>

    tcp: initialize tp->copied_seq in case of cross SYN connection

Eric Dumazet <[email protected]>
tcp: md5: fix lockdep annotation

Bjørn Mork <[email protected]>
net: qmi_wwan: add XS Stick W100-2 from 4G Systems

Neil Horman <[email protected]>
snmp: Remove duplicate OUTMCAST stat increment

Jason A. Donenfeld <[email protected]>
ip_tunnel: disable preemption when updating per-cpu tstats

lucien <[email protected]>
sctp: translate host order to network order when setting a hmacid

Daniel Borkmann <[email protected]>
packet: infer protocol from ethernet header if unset

Daniel Borkmann <[email protected]>
packet: always probe for transport header

Daniel Borkmann <[email protected]>
packet: do skb_probe_transport_header when we actually have data

Kamal Mostafa <[email protected]>
tools/net: Use include/uapi with __EXPORTED_HEADERS__

Rainer Weikusat <[email protected]>
unix: avoid use-after-free in ep_remove_wait_queue

-------------

Diffstat:

 Makefile                                        |   4 +-
 drivers/firewire/ohci.c                         |   5 +
 drivers/net/ethernet/atheros/atl1c/atl1c_main.c |   7 +-
 drivers/net/ethernet/renesas/sh_eth.c           |   4 +-
 drivers/net/phy/broadcom.c                      |   2 +-
 drivers/net/ppp/pptp.c                          |   6 +
 drivers/net/usb/qmi_wwan.c                      |   1 +
 drivers/usb/class/cdc-acm.c                     |   5 +
 drivers/usb/core/config.c                       |   3 +-
 drivers/usb/core/hub.c                          |   7 +-
 drivers/usb/core/quirks.c                       |   6 +
 drivers/usb/host/whci/qset.c                    |   4 +
 drivers/usb/serial/cp210x.c                     |   1 -
 drivers/usb/serial/usb-serial-simple.c          |   1 +
 fs/btrfs/file.c                                 |  16 +-
 fs/btrfs/inode.c                                |  10 +-
 fs/ext4/ext4_jbd2.c                             |   6 +-
 fs/ext4/super.c                                 |  12 +-
 fs/jbd2/journal.c                               |   6 +-
 fs/nfs/inode.c                                  |   6 +-
 fs/nfs/nfs4client.c                             |   2 +-
 fs/ocfs2/namei.c                                |   2 +
 include/linux/jbd2.h                            |   1 +
 include/linux/usb/quirks.h                      |   3 +
 include/net/af_unix.h                           |   1 +
 include/net/ip6_tunnel.h                        |   3 +-
 include/net/ip_tunnels.h                        |   3 +-
 include/net/ipv6.h                              |   1 +
 include/net/sock.h                              |   3 +
 net/ax25/af_ax25.c                              |   3 +
 net/bluetooth/sco.c                             |   3 +
 net/core/scm.c                                  |   2 +
 net/core/skbuff.c                               |   3 +-
 net/core/sock.c                                 |   2 -
 net/decnet/af_decnet.c                          |   3 +
 net/ipv4/af_inet.c                              |   3 +
 net/ipv4/ipmr.c                                 |  15 +-
 net/ipv4/tcp_input.c                            |   1 +
 net/ipv4/tcp_ipv4.c                             |   3 +-
 net/ipv6/af_inet6.c                             |   3 +
 net/ipv6/ip6_gre.c                              |   8 +-
 net/ipv6/ip6mr.c                                |  15 +-
 net/ipv6/mcast.c                                |   2 -
 net/ipv6/netfilter/nf_conntrack_reasm.c         |   5 +-
 net/ipv6/reassembly.c                           |  10 +-
 net/irda/af_irda.c                              |   3 +
 net/packet/af_packet.c                          |  19 ++-
 net/sctp/auth.c                                 |   4 +-
 net/sctp/ipv6.c                                 |   8 +
 net/sctp/sm_make_chunk.c                        |   4 +-
 net/sctp/socket.c                               |  12 +-
 net/unix/af_unix.c                              | 196 ++++++++++++++++++++----
 security/keys/gc.c                              |  10 +-
 security/keys/keyctl.c                          |  18 +--
 security/keys/process_keys.c                    |   1 +
 tools/net/Makefile                              |   7 +-
 56 files changed, 382 insertions(+), 112 deletions(-)