Skip to content

4.9.53-stable review

Greg Kroah-Hartman kernel-hardening linux-api linux-mm lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest58 of 64 patches 4 repliesIn review

58 of 64 patches are in this archive. The cover letter announces 64.

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/64cifs: release cifs root_cred after exit_cifsfs/cifs/cifsfs.c+1 -10 replies
2/64cifs: release auth_key.response for reconnect.fs/cifs/connect.c+8 -00 replies
3/64fs/proc: Report eip/esp in /prod/PID/stat for coredumpingfs/proc/array.c+9 -00 replies
4/64mac80211: fix VLAN handling with TXQsinclude/net/mac80211.h net/mac80211/iface.c net/mac80211/tx.c+46 -220 replies
5/64mac80211_hwsim: Use proper TX powerdrivers/net/wireless/mac80211_hwsim.c+0 -20 replies
6/64mac80211: flush hw_roc_start work before cancelling the ROCnet/mac80211/offchannel.c+2 -00 replies
7/64genirq: Make sparse_irq_lock protect what it should protectkernel/irq/irqdesc.c+7 -170 replies
8/64KVM: PPC: Book3S: Fix race and leak in kvm_vm_ioctl_create_spapr_tce()arch/powerpc/kvm/book3s_64_vio.c+32 -240 replies
9/64KVM: PPC: Book3S HV: Protect updates to spapr_tce_tables listarch/powerpc/kvm/book3s_64_vio.c+3 -00 replies
10/64tracing: Fix trace_pipe behavior for instance traceskernel/trace/trace.c+1 -10 replies
11/64tracing: Erase irqsoff trace with empty writekernel/trace/trace.c+8 -20 replies
12/64md/raid5: fix a race condition in stripe batchdrivers/md/raid5.c+8 -20 replies
13/64md/raid5: preserve STRIPE_ON_UNPLUG_LIST in break_stripe_batch_listdrivers/md/raid5.c+2 -10 replies
14/64scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesnt parse nlmsg properlydrivers/scsi/scsi_transport_iscsi.c+1 -10 replies
15/64drm/radeon: disable hard reset in hibernate for APUsdrivers/gpu/drm/radeon/radeon_device.c+1 -10 replies
16/64crypto: drbg - fix freeing of resourcescrypto/drbg.c+4 -40 replies
17/64crypto: talitos - Dont provide setkey for non hmac hashing algs.drivers/crypto/talitos.c+2 -10 replies
18/64crypto: talitos - fix sha224drivers/crypto/talitos.c+2 -20 replies
19/64crypto: talitos - fix hashingdrivers/crypto/talitos.c+1 -10 replies
20/64security/keys: properly zero out sensitive key material in big_keysecurity/keys/big_key.c+6 -60 replies
21/64security/keys: rewrite all of big_key cryptosecurity/keys/Kconfig security/keys/big_key.c+58 -700 replies
22/64KEYS: fix writing past end of user-supplied buffer in keyring_read()security/keys/keyring.c+5 -90 replies
23/64KEYS: prevent creating a different users keyringsinclude/linux/key.h security/keys/internal.h security/keys/key.c +2 more+23 -120 replies
24/64KEYS: prevent KEYCTL_READ on negative keysecurity/keys/keyctl.c+5 -00 replies
25/64powerpc/pseries: Fix parent_dn reference leak in add_dt_node()arch/powerpc/platforms/pseries/mobility.c+3 -10 replies
26/64powerpc/tm: Flush TM only if CPU has TM featurearch/powerpc/kernel/ptrace.c+1 -10 replies
27/64powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGSarch/powerpc/kernel/entry_64.S+12 -80 replies
28/64s390/mm: fix write access check in gup_huge_pmd()arch/s390/mm/gup.c+3 -40 replies
29/64PM: core: Fix device_pm_check_callbacks()drivers/base/power/main.c+6 -30 replies
30/64Fix SMB3.1.1 guest authentication to Sambafs/cifs/smb2pdu.c+1 -10 replies
31/64SMB3: Warn user if trying to sign connection that authenticated as guestfs/cifs/smb2pdu.c+2 -00 replies
32/64SMB: Validate negotiate (to protect against downgrade) even if signing offfs/cifs/smb2pdu.c+12 -50 replies
33/64SMB3: Dont ignore O_SYNC/O_DSYNC and O_DIRECT flagsfs/cifs/file.c+7 -00 replies
34/64vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsetsfs/read_write.c+2 -20 replies
35/64nl80211: check for the required netlink attributes presencenet/wireless/nl80211.c+3 -00 replies
36/64bsg-lib: dont free job in bsg_prepare_jobblock/bsg-lib.c+0 -10 replies
37/64iw_cxgb4: remove the stid on listen create failuredrivers/infiniband/hw/cxgb4/cm.c+1 -10 replies
38/64iw_cxgb4: put ep reference in pass_accept_req()drivers/infiniband/hw/cxgb4/cm.c+1 -10 replies
39/64selftests/seccomp: Support glibc 2.26 siginfo_t.htools/testing/selftests/seccomp/seccomp_bpf.c+13 -50 replies
40/64seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter()kernel/seccomp.c+16 -70 replies
41/64arm64: Make sure SPsel is always setarch/arm64/kernel/head.S+1 -00 replies
42/64arm64: fault: Route pte translation faults via do_translation_faultarch/arm64/mm/fault.c+1 -10 replies
46/64kvm/x86: Handle async PF in RCU read-side critical sectionsarch/x86/kernel/kvm.c+2 -10 replies
48/64kvm: nVMX: Dont allow L2 to access the hardware CR8arch/x86/kvm/vmx.c+5 -00 replies
49/64xfs: validate bdev support for DAX inode flagfs/xfs/xfs_ioctl.c+2 -10 replies
50/64etnaviv: fix gem object list corruptiondrivers/gpu/drm/etnaviv/etnaviv_gem.c+3 -00 replies
51/64PCI: Fix race condition with driver_overridedrivers/pci/pci-sysfs.c+9 -20 replies
52/64btrfs: fix NULL pointer dereference from free_reloc_roots()fs/btrfs/relocation.c+1 -10 replies
53/64btrfs: propagate error to btrfs_cmp_data_prepare callerfs/btrfs/ioctl.c+1 -10 replies
54/64btrfs: prevent to set invalid default subvolidfs/btrfs/ioctl.c+4 -00 replies
55/64x86/mm: Fix fault error path using unsafe vma pointerarch/x86/mm/fault.c+24 -230 replies
56/64x86/fpu: Dont let userspace set bogus xcomp_bvarch/x86/kernel/fpu/regset.c arch/x86/kernel/fpu/signal.c+11 -20 replies
57/64gfs2: Fix debugfs glocks dumpfs/gfs2/glock.c+5 -110 replies
58/64timer/sysclt: Restrict timer migration sysctl values to 0 and 1kernel/sysctl.c kernel/time/timer.c+3 -10 replies
61/64cxl: Fix driver use countdrivers/misc/cxl/api.c drivers/misc/cxl/file.c+11 -10 replies
62/64KVM: VMX: use cmpxchg64arch/x86/kvm/vmx.c+6 -60 replies
63/64video: fbdev: aty: do not leak uninitialized padding in clk to userspacedrivers/video/fbdev/aty/atyfb_base.c+1 -10 replies
64/64swiotlb-xen: implement xen_swiotlb_dma_mmap callbackarch/arm/xen/mm.c drivers/xen/swiotlb-xen.c include/xen/swiotlb-xen.h+25 -00 replies

Reviews trailers per patch

21 of 58 patches have a Reviewed-by or Acked-by.

PatchAndy LutomirskiEric BiggersCyril BurJeremy AllisonStefan MetzmacherRonnie SahlbergChristoph HellwigDarrick J. WongKees CookRik van RielDave HansenStephane ThiellChris LeechPavel ShilovskyHuang YingDavid GibsonDavid HildenbrandNikolay BorisovDavid SterbaQu WenruoSeth ForsheeMark RutlandMing LeiAndrew Donnellan
1/64R-b
2/64R-b
3/64R-b
4/64
5/64
6/64
7/64Reported-and-tested-by
8/64
9/64R-b
10/64
11/64
12/64Reported-and-tested-by
13/64
14/64A-b
15/64
16/64
17/64
18/64
19/64
20/64R-b
21/64R-b
22/64
23/64
24/64
25/64
26/64R-b
27/64
28/64
29/64
30/64R-b
31/64R-b
32/64R-b A-b R-b
33/64R-b R-b
34/64
35/64
36/64R-b
37/64
38/64
39/64T-b
40/64
41/64A-b
42/64
46/64
48/64R-b
49/64R-b R-b
50/64
51/64
52/64R-b R-b
53/64R-b
54/64R-b R-b
55/64
56/64R-b R-b A-b
57/64
58/64
61/64A-b
62/64
63/64
64/64

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 24 reviewers.

Read the v1 thread

Cover letter [PATCH 4.9 00/64] 4.9.53-stable review

This is the start of the stable review cycle for the 4.9.53 release. There are 64 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu Oct 5 11:42:06 UTC 2017. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.53-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.9.53-rc1

Stefano Stabellini <[email protected]>
swiotlb-xen: implement xen_swiotlb_dma_mmap callback

Vladis Dronov <[email protected]>
video: fbdev: aty: do not leak uninitialized padding in clk to userspace

Paolo Bonzini <[email protected]>
KVM: VMX: use cmpxchg64

Frederic Barrat <[email protected]>
cxl: Fix driver use count

Haozhong Zhang <[email protected]>
KVM: VMX: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt

Haozhong Zhang <[email protected]>
KVM: VMX: do not change SN bit in vmx_update_pi_irte()

Myungho Jung <[email protected]>
timer/sysclt: Restrict timer migration sysctl values to 0 and 1

Andreas Gruenbacher <[email protected]>
gfs2: Fix debugfs glocks dump

Eric Biggers <[email protected]>
x86/fpu: Don't let userspace set bogus xcomp_bv

Laurent Dufour <[email protected]>
x86/mm: Fix fault error path using unsafe vma pointer

satoru takeuchi <[email protected]>
btrfs: prevent to set invalid default subvolid

Naohiro Aota <[email protected]>
btrfs: propagate error to btrfs_cmp_data_prepare caller

Naohiro Aota <[email protected]>
btrfs: fix NULL pointer dereference from free_reloc_roots()

Nicolai Stange <[email protected]>
PCI: Fix race condition with driver_override

Lucas Stach <[email protected]>
etnaviv: fix gem object list corruption

Ross Zwisler <[email protected]>
xfs: validate bdev support for DAX inode flag

Jim Mattson <[email protected]>
kvm: nVMX: Don't allow L2 to access the hardware CR8

Jan H. Schönherr <[email protected]>
KVM: VMX: Do not BUG() on out-of-bounds guest IRQ

Boqun Feng <[email protected]>
kvm/x86: Handle async PF in RCU read-side critical sections

Paolo Bonzini <[email protected]>
KVM: VMX: simplify and fix vmx_vcpu_pi_load

Paolo Bonzini <[email protected]>
KVM: VMX: avoid double list add with VT-d posted interrupts

Paolo Bonzini <[email protected]>
KVM: VMX: extract __pi_post_block

Will Deacon <[email protected]>
arm64: fault: Route pte translation faults via do_translation_fault

Marc Zyngier <[email protected]>
arm64: Make sure SPsel is always set

Oleg Nesterov <[email protected]>
seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter()

Kees Cook <[email protected]>
selftests/seccomp: Support glibc 2.26 siginfo_t.h

Steve Wise <[email protected]>
iw_cxgb4: put ep reference in pass_accept_req()

Steve Wise <[email protected]>
iw_cxgb4: remove the stid on listen create failure

Christoph Hellwig <[email protected]>
bsg-lib: don't free job in bsg_prepare_job

Vladis Dronov <[email protected]>
nl80211: check for the required netlink attributes presence

Andreas Gruenbacher <[email protected]>
vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets

Steve French <[email protected]>
SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags

Steve French <[email protected]>
SMB: Validate negotiate (to protect against downgrade) even if signing off

Steve French <[email protected]>
SMB3: Warn user if trying to sign connection that authenticated as guest

Steve French <[email protected]>
Fix SMB3.1.1 guest authentication to Samba

Rafael J. Wysocki <[email protected]>
PM: core: Fix device_pm_check_callbacks()

Gerald Schaefer <[email protected]>
s390/mm: fix write access check in gup_huge_pmd()

Naveen N. Rao <[email protected]>
powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS

Gustavo Romero <[email protected]>
powerpc/tm: Flush TM only if CPU has TM feature

Tyrel Datwyler <[email protected]>
powerpc/pseries: Fix parent_dn reference leak in add_dt_node()

Eric Biggers <[email protected]>
KEYS: prevent KEYCTL_READ on negative key

Eric Biggers <[email protected]>
KEYS: prevent creating a different user's keyrings

Eric Biggers <[email protected]>
KEYS: fix writing past end of user-supplied buffer in keyring_read()

Jason A. Donenfeld <[email protected]>
security/keys: rewrite all of big_key crypto

Jason A. Donenfeld <[email protected]>
security/keys: properly zero out sensitive key material in big_key

LEROY Christophe <[email protected]>
crypto: talitos - fix hashing

LEROY Christophe <[email protected]>
crypto: talitos - fix sha224

LEROY Christophe <[email protected]>
crypto: talitos - Don't provide setkey for non hmac hashing algs.

Stephan Mueller <[email protected]>
crypto: drbg - fix freeing of resources

Alex Deucher <[email protected]>
drm/radeon: disable hard reset in hibernate for APUs

Xin Long <[email protected]>
scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly

Dennis Yang <[email protected]>
md/raid5: preserve STRIPE_ON_UNPLUG_LIST in break_stripe_batch_list

Shaohua Li <[email protected]>
md/raid5: fix a race condition in stripe batch

Bo Yan <[email protected]>
tracing: Erase irqsoff trace with empty write

Tahsin Erdogan <[email protected]>
tracing: Fix trace_pipe behavior for instance traces

Paul Mackerras <[email protected]>
KVM: PPC: Book3S HV: Protect updates to spapr_tce_tables list

Paul Mackerras <[email protected]>
KVM: PPC: Book3S: Fix race and leak in kvm_vm_ioctl_create_spapr_tce()

Thomas Gleixner <[email protected]>
genirq: Make sparse_irq_lock protect what it should protect

Avraham Stern <[email protected]>
mac80211: flush hw_roc_start work before cancelling the ROC

Beni Lev <[email protected]>
mac80211_hwsim: Use proper TX power

Johannes Berg <[email protected]>
mac80211: fix VLAN handling with TXQs

John Ogness <[email protected]>
fs/proc: Report eip/esp in /prod/PID/stat for coredumping

Shu Wang <[email protected]>
cifs: release auth_key.response for reconnect.

Shu Wang <[email protected]>
cifs: release cifs root_cred after exit_cifs

-------------

Diffstat:

 Makefile                                      |   4 +-
 arch/arm/xen/mm.c                             |   1 +
 arch/arm64/kernel/head.S                      |   1 +
 arch/arm64/mm/fault.c                         |   2 +-
 arch/powerpc/kernel/entry_64.S                |  20 ++-
 arch/powerpc/kernel/ptrace.c                  |   2 +-
 arch/powerpc/kvm/book3s_64_vio.c              |  57 +++---
 arch/powerpc/platforms/pseries/mobility.c     |   4 +-
 arch/s390/mm/gup.c                            |   7 +-
 arch/x86/kernel/fpu/regset.c                  |   9 +-
 arch/x86/kernel/fpu/signal.c                  |   4 +
 arch/x86/kernel/kvm.c                         |   3 +-
 arch/x86/kvm/vmx.c                            | 240 ++++++++++++++------------
 arch/x86/mm/fault.c                           |  47 ++---
 block/bsg-lib.c                               |   1 -
 crypto/drbg.c                                 |   8 +-
 drivers/base/power/main.c                     |   9 +-
 drivers/crypto/talitos.c                      |   9 +-
 drivers/gpu/drm/etnaviv/etnaviv_gem.c         |   3 +
 drivers/gpu/drm/radeon/radeon_device.c        |   2 +-
 drivers/infiniband/hw/cxgb4/cm.c              |   4 +-
 drivers/md/raid5.c                            |  13 +-
 drivers/misc/cxl/api.c                        |   4 +
 drivers/misc/cxl/file.c                       |   8 +-
 drivers/net/wireless/mac80211_hwsim.c         |   2 -
 drivers/pci/pci-sysfs.c                       |  11 +-
 drivers/scsi/scsi_transport_iscsi.c           |   2 +-
 drivers/video/fbdev/aty/atyfb_base.c          |   2 +-
 drivers/xen/swiotlb-xen.c                     |  19 ++
 fs/btrfs/ioctl.c                              |   6 +-
 fs/btrfs/relocation.c                         |   2 +-
 fs/cifs/cifsfs.c                              |   2 +-
 fs/cifs/connect.c                             |   8 +
 fs/cifs/file.c                                |   7 +
 fs/cifs/smb2pdu.c                             |  21 ++-
 fs/gfs2/glock.c                               |  16 +-
 fs/proc/array.c                               |   9 +
 fs/read_write.c                               |   4 +-
 fs/xfs/xfs_ioctl.c                            |   3 +-
 include/linux/key.h                           |   2 +
 include/net/mac80211.h                        |  15 +-
 include/xen/swiotlb-xen.h                     |   5 +
 kernel/irq/irqdesc.c                          |  24 +--
 kernel/seccomp.c                              |  23 ++-
 kernel/sysctl.c                               |   2 +
 kernel/time/timer.c                           |   2 +-
 kernel/trace/trace.c                          |  12 +-
 net/mac80211/iface.c                          |  17 +-
 net/mac80211/offchannel.c                     |   2 +
 net/mac80211/tx.c                             |  36 +++-
 net/wireless/nl80211.c                        |   3 +
 security/keys/Kconfig                         |   4 +-
 security/keys/big_key.c                       | 138 +++++++--------
 security/keys/internal.h                      |   2 +-
 security/keys/key.c                           |   2 +
 security/keys/keyctl.c                        |   5 +
 security/keys/keyring.c                       |  37 ++--
 security/keys/process_keys.c                  |   6 +-
 tools/testing/selftests/seccomp/seccomp_bpf.c |  18 +-
 59 files changed, 549 insertions(+), 382 deletions(-)