Skip to content

3.18.57-stable review

Greg Kroah-Hartman kernel-hardening lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest43 of 45 patches 2 repliesIn review

43 of 45 patches are in this archive. The cover letter announces 45.

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/45bnx2x: Fix Multi-Cosdrivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c+1 -10 replies
2/45ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()net/ipv6/xfrm6_mode_ro.c net/ipv6/xfrm6_mode_transport.c+4 -00 replies
3/45cxgb4: avoid enabling napi twice to the same queuedrivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c+4 -00 replies
4/45tcp: disallow cwnd undo when switching congestion controlnet/ipv4/tcp_cong.c+1 -00 replies
5/45ipv6: Fix leak in ipv6_gso_segment().net/ipv6/ip6_offload.c+3 -10 replies
6/45net: ping: do not abuse udp_poll()include/net/ipv6.h net/ipv4/af_inet.c net/ipv6/ping.c +1 more+4 -30 replies
7/45net: ethoc: enable NAPI before poll may be scheduleddrivers/net/ethernet/ethoc.c+2 -10 replies
8/45serial: ifx6x60: fix use-after-free on module unloaddrivers/tty/serial/ifx6x60.c+1 -10 replies
9/45KEYS: fix dereferencing NULL payload with nonzero lengthsecurity/keys/keyctl.c+2 -20 replies
10/45KEYS: fix freeing uninitialized memory in key_update()security/keys/key.c+2 -30 replies
11/45crypto: gcm - wait for crypto op not signal safecrypto/gcm.c+2 -40 replies
12/45nfsd4: fix null dereference on replayfs/nfsd/nfs4proc.c+6 -70 replies
15/45arm: KVM: Allow unaligned accesses at HYParch/arm/kvm/init.S+2 -30 replies
16/45dmaengine: ep93xx: Always start from BASE0drivers/dma/ep93xx_dma.c+2 -00 replies
17/45ext4: fix SEEK_HOLEfs/ext4/file.c+14 -360 replies
18/45ext4: keep existing extra fields when inode expandsfs/ext4/inode.c+3 -20 replies
19/45usb: gadget: f_mass_storage: Serialize wake and sleep executiondrivers/usb/gadget/function/f_mass_storage.c+11 -20 replies
20/45usb: chipidea: udc: fix NULL pointer dereference if udc_start faileddrivers/usb/chipidea/udc.c+6 -20 replies
21/45usb: chipidea: debug: check before accessing ci_roledrivers/usb/chipidea/debug.c+2 -10 replies
22/45staging/lustre/lov: remove set_fs() call from lov_getstripe()drivers/staging/lustre/lustre/lov/lov_pack.c+0 -90 replies
23/45iio: proximity: as3935: fix AS3935_INT maskdrivers/iio/proximity/as3935.c+2 -20 replies
24/45drivers: char: random: add get_random_long()drivers/char/random.c include/linux/random.h+23 -00 replies
25/45random: properly align get_random_int_hashdrivers/char/random.c+3 -10 replies
26/45stackprotector: Increase the per-task stack canarys random range from 32 bits to 64 bits on 64-bit platformskernel/fork.c+1 -10 replies
27/45btrfs: use correct types for page indices in btrfs_page_exists_in_rangefs/btrfs/inode.c+2 -20 replies
28/45btrfs: fix memory leak in update_space_info failure pathfs/btrfs/extent-tree.c+1 -00 replies
29/45scsi: qla2xxx: dont disable a not previously enabled PCI devicedrivers/scsi/qla2xxx/qla_os.c+4 -40 replies
30/45powerpc/eeh: Avoid use after free in eeh_handle_special_event()arch/powerpc/kernel/eeh_driver.c+15 -40 replies
31/45powerpc/numa: Fix percpu allocations to be NUMA awarearch/powerpc/include/asm/topology.h arch/powerpc/kernel/setup_64.c+16 -20 replies
32/45perf/core: Drop kernel samples even though :u is specifiedkernel/events/core.c+21 -00 replies
33/45drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c+2 -00 replies
34/45drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()drivers/gpu/drm/vmwgfx/vmwgfx_surface.c+3 -00 replies
35/45ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECTsound/core/timer.c+1 -00 replies
36/45ASoC: Fix use-after-free at card unregistrationsound/soc/soc-core.c+3 -20 replies
37/45drivers: char: mem: Fix wraparound check to allow mappings up to the enddrivers/char/mem.c+1 -10 replies
38/45serial: sh-sci: Fix panic when serial console and DMA are enableddrivers/tty/serial/sh-sci.c+6 -40 replies
39/45arm64: hw_breakpoint: fix watchpoint matching for tagged pointersarch/arm64/include/asm/uaccess.h arch/arm64/kernel/hw_breakpoint.c include/linux/bitops.h+21 -10 replies
40/45arm64: entry: improve data abort handling of tagged pointersarch/arm64/include/asm/asm-uaccess.h arch/arm64/kernel/entry.S+17 -20 replies
41/45RDMA/qib,hfi1: Fix MR reference count leak on write with immediatedrivers/infiniband/hw/qib/qib_rc.c+3 -10 replies
42/45tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()kernel/trace/trace.c+1 -10 replies
43/45usercopy: Adjust tests to deal with SMAP/PANlib/test_user_copy.c+18 -20 replies
44/45arm64: ensure extension of smp_store_release valuearch/arm64/include/asm/barrier.h+8 -20 replies
45/45mlx5: stop including <asm-generic/kmap_types.h>drivers/infiniband/hw/mlx5/main.c drivers/net/ethernet/mellanox/mlx5/core/cmd.c drivers/net/ethernet/mellanox/mlx5/core/main.c +1 more+4 -40 replies

Reviews trailers per patch

18 of 43 patches have a Reviewed-by or Acked-by.

PatchCraig GallekLorenzo ColittiTobias KlauserFlorian FainelliArjan van de VenRik van RielKees CookGavin ShanNicholas PigginAlexander PotapenkoAlan SternMark RutlandWill DeaconSinclair YehRobert JarzmikDave MartinAndreas DilgerLi WeiTadeusz StrukDennis DalessandroLiu BoBart Van AsscheGiridhar Malavali
1/45
2/45A-b
3/45
4/45
5/45
6/45A-b T-b
7/45R-b R-b
8/45
9/45
10/45
11/45
12/45
15/45
16/45
17/45
18/45
19/45A-b
20/45
21/45
22/45R-b R-b
23/45
24/45A-b
25/45
26/45A-b A-b A-b
27/45R-b
28/45R-b
29/45R-b R-b
30/45R-b
31/45R-b
32/45
33/45R-b
34/45R-b
35/45T-b
36/45Reported-and-tested-by
37/45
38/45
39/45A-b A-b
40/45A-b R-b
41/45T-b R-b
42/45
43/45
44/45A-b
45/45

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 23 reviewers.

Read the v1 thread

Cover letter [PATCH 3.18 00/45] 3.18.57-stable review

This is the start of the stable review cycle for the 3.18.57 release. There are 45 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed Jun 14 15:25:35 UTC 2017. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.57-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 3.18.57-rc1

Christoph Hellwig <[email protected]>
mlx5: stop including <asm-generic/kmap_types.h>

Mark Rutland <[email protected]>
arm64: ensure extension of smp_store_release value

Kees Cook <[email protected]>
usercopy: Adjust tests to deal with SMAP/PAN

Amey Telawane <[email protected]>
tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()

Mike Marciniszyn <[email protected]>
RDMA/qib,hfi1: Fix MR reference count leak on write with immediate

Kristina Martsenko <[email protected]>
arm64: entry: improve data abort handling of tagged pointers

Kristina Martsenko <[email protected]>
arm64: hw_breakpoint: fix watchpoint matching for tagged pointers

Takatoshi Akiyama <[email protected]>
serial: sh-sci: Fix panic when serial console and DMA are enabled

Julius Werner <[email protected]>
drivers: char: mem: Fix wraparound check to allow mappings up to the end

Takashi Iwai <[email protected]>
ASoC: Fix use-after-free at card unregistration

Takashi Iwai <[email protected]>
ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT

Vladis Dronov <[email protected]>
drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()

Dan Carpenter <[email protected]>
drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()

Jin Yao <[email protected]>
perf/core: Drop kernel samples even though :u is specified

Michael Ellerman <[email protected]>
powerpc/numa: Fix percpu allocations to be NUMA aware

Russell Currey <[email protected]>
powerpc/eeh: Avoid use after free in eeh_handle_special_event()

Johannes Thumshirn <[email protected]>
scsi: qla2xxx: don't disable a not previously enabled PCI device

Jeff Mahoney <[email protected]>
btrfs: fix memory leak in update_space_info failure path

David Sterba <[email protected]>
btrfs: use correct types for page indices in btrfs_page_exists_in_range

Daniel Micay <[email protected]>
stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms

Eric Biggers <[email protected]>
random: properly align get_random_int_hash

Daniel Cashman <[email protected]>
drivers: char: random: add get_random_long()

Matt Ranostay <[email protected]>

    iio: proximity: as3935: fix AS3935_INT mask

Oleg Drokin <[email protected]>
staging/lustre/lov: remove set_fs() call from lov_getstripe()

Michael Thalmeier <[email protected]>
usb: chipidea: debug: check before accessing ci_role

Jisheng Zhang <[email protected]>
usb: chipidea: udc: fix NULL pointer dereference if udc_start failed

Thinh Nguyen <[email protected]>
usb: gadget: f_mass_storage: Serialize wake and sleep execution

Konstantin Khlebnikov <[email protected]>
ext4: keep existing extra fields when inode expands

Jan Kara <[email protected]>
ext4: fix SEEK_HOLE

Alexander Sverdlin <[email protected]>
dmaengine: ep93xx: Always start from BASE0

Marc Zyngier <[email protected]>
arm: KVM: Allow unaligned accesses at HYP

Wanpeng Li <[email protected]>
KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation

Paolo Bonzini <[email protected]>
kvm: async_pf: fix rcu_irq_enter() with irqs enabled

J. Bruce Fields <[email protected]>
nfsd4: fix null dereference on replay

Gilad Ben-Yossef <[email protected]>
crypto: gcm - wait for crypto op not signal safe

Eric Biggers <[email protected]>
KEYS: fix freeing uninitialized memory in key_update()

Eric Biggers <[email protected]>
KEYS: fix dereferencing NULL payload with nonzero length

Johan Hovold <[email protected]>
serial: ifx6x60: fix use-after-free on module unload

Max Filippov <[email protected]>
net: ethoc: enable NAPI before poll may be scheduled

Eric Dumazet <[email protected]>
net: ping: do not abuse udp_poll()

David S. Miller <[email protected]>
ipv6: Fix leak in ipv6_gso_segment().

Yuchung Cheng <[email protected]>
tcp: disallow cwnd undo when switching congestion control

Ganesh Goudar <[email protected]>
cxgb4: avoid enabling napi twice to the same queue

Ben Hutchings <[email protected]>
ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

Mintz, Yuval <[email protected]>
bnx2x: Fix Multi-Cos

-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/arm/kvm/init.S                                |  5 +--
 arch/arm64/include/asm/asm-uaccess.h               | 13 ++++++
 arch/arm64/include/asm/barrier.h                   | 10 ++++-
 arch/arm64/include/asm/uaccess.h                   |  8 ++++
 arch/arm64/kernel/entry.S                          |  6 ++-
 arch/arm64/kernel/hw_breakpoint.c                  |  3 +-
 arch/powerpc/include/asm/topology.h                | 14 ++++++
 arch/powerpc/kernel/eeh_driver.c                   | 19 ++++++--
 arch/powerpc/kernel/setup_64.c                     |  4 +-
 arch/x86/kernel/kvm.c                              |  2 +-
 arch/x86/kvm/cpuid.c                               | 20 +++++----
 crypto/gcm.c                                       |  6 +--
 drivers/char/mem.c                                 |  2 +-
 drivers/char/random.c                              | 26 ++++++++++-
 drivers/dma/ep93xx_dma.c                           |  2 +
 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c               |  2 +
 drivers/gpu/drm/vmwgfx/vmwgfx_surface.c            |  3 ++
 drivers/iio/proximity/as3935.c                     |  4 +-
 drivers/infiniband/hw/mlx5/main.c                  |  2 +-
 drivers/infiniband/hw/qib/qib_rc.c                 |  4 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c    |  2 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c    |  4 ++
 drivers/net/ethernet/ethoc.c                       |  3 +-
 drivers/net/ethernet/mellanox/mlx5/core/cmd.c      |  2 +-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |  2 +-
 .../net/ethernet/mellanox/mlx5/core/pagealloc.c    |  2 +-
 drivers/scsi/qla2xxx/qla_os.c                      |  8 ++--
 drivers/staging/lustre/lustre/lov/lov_pack.c       |  9 ----
 drivers/tty/serial/ifx6x60.c                       |  2 +-
 drivers/tty/serial/sh-sci.c                        | 10 +++--
 drivers/usb/chipidea/debug.c                       |  3 +-
 drivers/usb/chipidea/udc.c                         |  8 +++-
 drivers/usb/gadget/function/f_mass_storage.c       | 13 +++++-
 fs/btrfs/extent-tree.c                             |  1 +
 fs/btrfs/inode.c                                   |  4 +-
 fs/ext4/file.c                                     | 50 ++++++----------------
 fs/ext4/inode.c                                    |  5 ++-
 fs/nfsd/nfs4proc.c                                 | 13 +++---
 include/linux/bitops.h                             | 11 +++++
 include/linux/random.h                             |  1 +
 include/net/ipv6.h                                 |  1 +
 kernel/events/core.c                               | 21 +++++++++
 kernel/fork.c                                      |  2 +-
 kernel/trace/trace.c                               |  2 +-
 lib/test_user_copy.c                               | 20 ++++++++-
 net/ipv4/af_inet.c                                 |  2 +-
 net/ipv4/tcp_cong.c                                |  1 +
 net/ipv6/ip6_offload.c                             |  4 +-
 net/ipv6/ping.c                                    |  2 +-
 net/ipv6/raw.c                                     |  2 +-
 net/ipv6/xfrm6_mode_ro.c                           |  2 +
 net/ipv6/xfrm6_mode_transport.c                    |  2 +
 security/keys/key.c                                |  5 +--
 security/keys/keyctl.c                             |  4 +-
 sound/core/timer.c                                 |  1 +
 sound/soc/soc-core.c                               |  5 ++-
 57 files changed, 262 insertions(+), 126 deletions(-)