Skip to content

4.14.14-stable review

Greg Kroah-Hartman linux-acpi linux-efi linux-mips linux-mm linux-pm linux-security-module lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest118 patches 19 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/118dm bufio: fix shrinker scans when (nr_to_scan < retain_target)drivers/md/dm-bufio.c+6 -20 replies
2/118KVM: Fix stack-out-of-bounds read in write_mmioarch/x86/kvm/x86.c include/trace/events/kvm.h virt/kvm/arm/mmio.c+12 -90 replies
3/118can: vxcan: improve handling of missing peer name attributedrivers/net/can/vxcan.c+1 -10 replies
4/118can: gs_usb: fix return value of the "set_bittiming" callbackdrivers/net/can/usb/gs_usb.c+1 -10 replies
5/118IB/srpt: Disable RDMA access by the initiatordrivers/infiniband/ulp/srpt/ib_srpt.c+1 -20 replies
6/118IB/srpt: Fix ACL lookup during logindrivers/infiniband/ulp/srpt/ib_srpt.c+1 -10 replies
7/118MIPS: Validate PR_SET_FP_MODE prctl(2) requests against the ABI of the taskarch/mips/kernel/process.c+12 -00 replies
8/118MIPS: Factor out NT_PRFPREG regset access helpersarch/mips/kernel/ptrace.c+83 -250 replies
9/118MIPS: Guard against any partial write attempt with PTRACE_SETREGSETarch/mips/kernel/ptrace.c+11 -10 replies
10/118MIPS: Consistently handle buffer counter with PTRACE_SETREGSETarch/mips/kernel/ptrace.c+1 -10 replies
11/118MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSAarch/mips/kernel/ptrace.c+36 -110 replies
12/118MIPS: Also verify sizeof `elf_fpreg_t with PTRACE_SETREGSETarch/mips/kernel/ptrace.c+1 -00 replies
13/118MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accessesarch/mips/kernel/ptrace.c+3 -00 replies
14/118cgroup: fix css_task_iter crash on CSS_TASK_ITER_PROCkernel/cgroup/cgroup.c+6 -80 replies
15/118kvm: vmx: Scrub hardware GPRs at VM-exitarch/x86/kvm/svm.c arch/x86/kvm/vmx.c+32 -10 replies
16/118platform/x86: wmi: Call acpi_wmi_init() laterdrivers/platform/x86/wmi.c+1 -10 replies
17/118iw_cxgb4: only call the cq comp_handler when the cq is armeddrivers/infiniband/hw/cxgb4/ev.c drivers/infiniband/hw/cxgb4/qp.c+17 -110 replies
18/118iw_cxgb4: atomically flush the qpdrivers/infiniband/hw/cxgb4/qp.c+11 -80 replies
19/118iw_cxgb4: only clear the ARMED bit if a notification is neededdrivers/infiniband/hw/cxgb4/qp.c+4 -40 replies
20/118iw_cxgb4: reflect the original WR opcode in drain cqesdrivers/infiniband/hw/cxgb4/cq.c drivers/infiniband/hw/cxgb4/iw_cxgb4.h drivers/infiniband/hw/cxgb4/qp.c +1 more+50 -110 replies
21/118iw_cxgb4: when flushing, complete all wrs in a chaindrivers/infiniband/hw/cxgb4/qp.c+26 -20 replies
22/118x86/acpi: Handle SCI interrupts above legacy space gracefullyarch/x86/kernel/acpi/boot.c+33 -10 replies
23/118ALSA: pcm: Remove incorrect snd_BUG_ON() usagessound/core/oss/pcm_oss.c sound/core/pcm_lib.c+2 -30 replies
24/118ALSA: pcm: Workaround for weird PulseAudio behavior on rewind errorsound/core/pcm_native.c+7 -20 replies
25/118ALSA: pcm: Add missing error checks in OSS emulation plugin buildersound/core/oss/pcm_plugin.c+11 -30 replies
26/118ALSA: pcm: Abort properly at pending signal in OSS read/write loopssound/core/oss/pcm_oss.c+8 -00 replies
27/118ALSA: pcm: Allow aborting mutex lock at OSS read/write loopssound/core/oss/pcm_oss.c+21 -150 replies
28/118ALSA: aloop: Release cable upon open error pathsound/drivers/aloop.c+25 -130 replies
29/118ALSA: aloop: Fix inconsistent format due to incomplete rulesound/drivers/aloop.c+6 -70 replies
30/118ALSA: aloop: Fix racy hw constraints adjustmentsound/drivers/aloop.c+21 -300 replies
31/118x86/acpi: Reduce code duplication in mp_override_legacy_irq()arch/x86/kernel/acpi/boot.c+5 -220 replies
32/1188021q: fix a memory leak for VLAN 0 devicenet/8021q/vlan.c+1 -60 replies
33/118ip6_tunnel: disable dst caching if tunnel is dual-stacknet/ipv6/ip6_tunnel.c+5 -40 replies
34/118net: core: fix module type in sock_diag_bindnet/core/sock_diag.c+1 -10 replies
35/118phylink: ensure we report link down when LOS asserteddrivers/net/phy/phylink.c+1 -20 replies
36/118RDS: Heap OOB write in rds_message_alloc_sgs()net/rds/rdma.c+3 -00 replies
37/118RDS: null pointer dereference in rds_atomic_free_opnet/rds/rdma.c+1 -00 replies
38/118net: fec: restore dev_id in the cases of probe errordrivers/net/ethernet/freescale/fec_main.c+1 -00 replies
39/118net: fec: defer probe if regulator is not readydrivers/net/ethernet/freescale/fec_main.c+4 -00 replies
40/118net: fec: free/restore resource in related probe error pathesdrivers/net/ethernet/freescale/fec_main.c+2 -20 replies
41/118sctp: do not retransmit upon FragNeeded if PMTU discovery is disablednet/sctp/input.c+12 -120 replies
42/118sctp: fix the handling of ICMP Frag Needed for too small MTUsinclude/net/sctp/structs.h net/sctp/input.c net/sctp/transport.c+26 -130 replies
43/118sh_eth: fix TSU resource handlingdrivers/net/ethernet/renesas/sh_eth.c+22 -30 replies
44/118net: stmmac: enable EEE in MII, GMII or RGMII onlydrivers/net/ethernet/stmicro/stmmac/stmmac_main.c+6 -00 replies
45/118sh_eth: fix SH7757 GEther initializationdrivers/net/ethernet/renesas/sh_eth.c include/linux/sh_eth.h+2 -30 replies
46/118ipv6: fix possible mem leaks in ipv6_make_skb()net/ipv6/ip6_output.c+3 -20 replies
47/118ethtool: do not print warning for applications using legacy APInet/core/ethtool.c+2 -130 replies
48/118mlxsw: spectrum_router: Fix NULL pointer derefdrivers/net/ethernet/mellanox/mlxsw/spectrum_router.c+1 -10 replies
49/118net/sched: Fix update of lastuse in act modules implementing stats_updatenet/sched/act_gact.c net/sched/act_mirred.c+2 -20 replies
50/118ipv6: sr: fix TLVs not being copied using setsockoptnet/ipv6/exthdrs.c+9 -00 replies
51/118mlxsw: spectrum: Relax sanity checks during enslavementdrivers/net/ethernet/mellanox/mlxsw/spectrum.c drivers/net/ethernet/mellanox/mlxsw/spectrum.h drivers/net/ethernet/mellanox/mlxsw/spectrum_switchdev.c+17 -20 replies
52/118sfp: fix sfp-bus oops when removing socket/upstreamdrivers/net/phy/sfp-bus.c+4 -20 replies
53/118Revert "Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find.""net/xfrm/xfrm_policy.c+11 -188 replies
54/118membarrier: Disable preemption when calling smp_call_function_many()kernel/sched/membarrier.c+2 -00 replies
55/118crypto: algapi - fix NULL dereference in crypto_remove_spawns()crypto/algapi.c+12 -00 replies
56/118mmc: renesas_sdhi: Add MODULE_LICENSEdrivers/mmc/host/renesas_sdhi_core.c+3 -00 replies
57/118rbd: reacquire lock should update lock owner client iddrivers/block/rbd.c+11 -50 replies
58/118rbd: set max_segments to USHRT_MAXdrivers/block/rbd.c+1 -10 replies
59/118iwlwifi: pcie: fix DMA memory mapping / unmappingdrivers/net/wireless/intel/iwlwifi/pcie/internal.h drivers/net/wireless/intel/iwlwifi/pcie/tx-gen2.c drivers/net/wireless/intel/iwlwifi/pcie/tx.c+14 -150 replies
60/118x86/microcode/intel: Extend BDW late-loading with a revision checkarch/x86/kernel/cpu/microcode/intel.c+11 -20 replies
61/118KVM: x86: Add memory barrier on vmcs field lookuparch/x86/kvm/vmx.c+10 -20 replies
62/118KVM: PPC: Book3S PR: Fix WIMG handling under pHyparch/powerpc/kvm/book3s_64_mmu.c arch/powerpc/kvm/book3s_pr.c+3 -00 replies
63/118KVM: PPC: Book3S HV: Drop prepare_done from struct kvm_resize_hptarch/powerpc/kvm/book3s_64_mmu_hv.c+27 -170 replies
64/118KVM: PPC: Book3S HV: Fix use after free in case of multiple resize requestsarch/powerpc/kvm/book3s_64_mmu_hv.c+37 -170 replies
65/118KVM: PPC: Book3S HV: Always flush TLB in kvmppc_alloc_reset_hpt()arch/powerpc/kvm/book3s_64_mmu_hv.c+4 -20 replies
66/118drm/vmwgfx: Dont cache framebuffer mapsdrivers/gpu/drm/vmwgfx/vmwgfx_kms.c drivers/gpu/drm/vmwgfx/vmwgfx_kms.h drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c+13 -360 replies
67/118drm/vmwgfx: Potential off by one in vmw_view_add()drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c+2 -00 replies
68/118drm/i915/gvt: Clear the shadow page table entry after post-syncdrivers/gpu/drm/i915/gvt/gtt.c+4 -10 replies
69/118drm/i915: Whitelist SLICE_COMMON_ECO_CHICKEN1 on Geminilake.drivers/gpu/drm/i915/i915_reg.h drivers/gpu/drm/i915/intel_engine_cs.c+7 -00 replies
70/118drm/i915: Move init_clock_gating() back to where it wasdrivers/gpu/drm/i915/intel_display.c drivers/gpu/drm/i915/intel_pm.c+30 -280 replies
71/118drm/i915: Fix init_clock_gating for resumedrivers/gpu/drm/i915/i915_drv.c+1 -00 replies
72/118bpf: prevent out-of-bounds speculationinclude/linux/bpf.h kernel/bpf/arraymap.c kernel/bpf/verifier.c+74 -110 replies
73/118bpf, array: fix overflow in max_entries and undefined behavior in index_maskkernel/bpf/arraymap.c+15 -30 replies
74/118bpf: arsh is not supported in 32 bit alu thus reject itkernel/bpf/verifier.c tools/testing/selftests/bpf/test_verifier.c+45 -00 replies
75/118USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQdrivers/usb/serial/cp210x.c+1 -00 replies
76/118USB: serial: cp210x: add new device ID ELV ALC 8xxxdrivers/usb/serial/cp210x.c+1 -00 replies
77/118usb: misc: usb3503: make sure reset is low for at least 100usdrivers/usb/misc/usb3503.c+2 -00 replies
78/118USB: fix usbmon BUG triggerdrivers/usb/mon/mon_bin.c+7 -10 replies
79/118USB: UDC core: fix double-free in usb_add_gadget_udc_releasedrivers/usb/gadget/udc/core.c+13 -150 replies
80/118usbip: remove kernel addresses from usb device and urb debug msgsdrivers/usb/usbip/usbip_common.c+3 -140 replies
81/118usbip: fix vudc_rx: harden CMD_SUBMIT path to handle malicious inputdrivers/usb/usbip/vudc_rx.c+19 -00 replies
82/118usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer bufferdrivers/usb/usbip/vudc_tx.c+9 -20 replies
83/118staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctldrivers/staging/android/ashmem.c+2 -00 replies
84/118Bluetooth: Prevent stack info leak from the EFS element.net/bluetooth/l2cap_core.c+11 -90 replies
85/118uas: ignore UAS for Norelsys NS1068(X) chipsdrivers/usb/storage/unusual_uas.h+7 -00 replies
86/118mux: core: fix double get_device()drivers/mux/core.c+3 -10 replies
87/118kdump: write correct address of mem_section into vmcoreinfoinclude/linux/crash_core.h kernel/crash_core.c+3 -10 replies
88/118apparmor: fix ptrace label match when matching stacked labelssecurity/apparmor/include/perms.h security/apparmor/ipc.c+35 -210 replies
89/118e1000e: Fix e1000_check_for_copper_link_ich8lan return value.drivers/net/ethernet/intel/e1000e/ich8lan.c+8 -30 replies
90/118x86/pti: Unbreak EFI old_memmaparch/x86/platform/efi/efi_64.c+2 -00 replies
91/118x86/Documentation: Add PTI descriptionDocumentation/admin-guide/kernel-parameters.txt Documentation/x86/pti.txt+200 -70 replies
92/118x86/cpufeatures: Add X86_BUG_SPECTRE_V[12]arch/x86/include/asm/cpufeatures.h arch/x86/kernel/cpu/common.c+5 -00 replies
93/118sysfs/cpu: Add vulnerability folderDocumentation/ABI/testing/sysfs-devices-system-cpu drivers/base/Kconfig drivers/base/cpu.c +1 more+74 -00 replies
94/118x86/cpu: Implement CPU vulnerabilites sysfs functionsarch/x86/Kconfig arch/x86/kernel/cpu/bugs.c+30 -00 replies
95/118x86/tboot: Unbreak tboot with PTI enabledarch/x86/kernel/tboot.c+1 -00 replies
96/118x86/mm/pti: Remove dead logic in pti_user_pagetable_walk*()arch/x86/mm/pti.c+6 -260 replies
97/118x86/cpu/AMD: Make LFENCE a serializing instructionarch/x86/include/asm/msr-index.h arch/x86/kernel/cpu/amd.c+12 -00 replies
98/118x86/cpu/AMD: Use LFENCE_RDTSC in preference to MFENCE_RDTSCarch/x86/include/asm/msr-index.h arch/x86/kernel/cpu/amd.c+17 -20 replies
99/118sysfs/cpu: Fix typos in vulnerability documentationDocumentation/ABI/testing/sysfs-devices-system-cpu+2 -20 replies
100/118x86/alternatives: Fix optimize_nops() checkingarch/x86/kernel/alternative.c+5 -20 replies
101/118x86/pti: Make unpoison of pgd for trusted boot work for realarch/x86/kernel/tboot.c+11 -10 replies
102/118objtool: Detect jumps to retpoline thunkstools/objtool/check.c+7 -00 replies
103/118objtool: Allow alternatives to be ignoredtools/objtool/check.c tools/objtool/check.h+57 -70 replies
104/118x86/retpoline: Add initial retpoline supportarch/x86/Kconfig arch/x86/Makefile arch/x86/include/asm/asm-prototypes.h +5 more+231 -00 replies
105/118x86/spectre: Add boot time option to select Spectre v2 mitigationDocumentation/admin-guide/kernel-parameters.txt arch/x86/include/asm/nospec-branch.h arch/x86/kernel/cpu/bugs.c +1 more+195 -50 replies
106/118x86/retpoline/crypto: Convert crypto assembler indirect jumpsarch/x86/crypto/aesni-intel_asm.S arch/x86/crypto/camellia-aesni-avx-asm_64.S arch/x86/crypto/camellia-aesni-avx2-asm_64.S +1 more+9 -50 replies
107/118x86/retpoline/entry: Convert entry assembler indirect jumpsarch/x86/entry/entry_32.S arch/x86/entry/entry_64.S+12 -50 replies
108/118x86/retpoline/ftrace: Convert ftrace assembler indirect jumpsarch/x86/kernel/ftrace_32.S arch/x86/kernel/ftrace_64.S+8 -60 replies
109/118x86/retpoline/hyperv: Convert assembler indirect jumpsarch/x86/include/asm/mshyperv.h+10 -80 replies
110/118x86/retpoline/xen: Convert Xen hypercall indirect jumpsarch/x86/include/asm/xen/hypercall.h+3 -20 replies
111/118x86/retpoline/checksum32: Convert assembler indirect jumpsarch/x86/lib/checksum_32.S+4 -30 replies
112/118x86/retpoline/irq32: Convert assembler indirect jumpsarch/x86/kernel/irq_32.c+5 -40 replies
113/118x86/retpoline: Fill return stack buffer on vmexitarch/x86/include/asm/nospec-branch.h arch/x86/kvm/svm.c arch/x86/kvm/vmx.c+85 -10 replies
114/118selftests/x86: Add test_vsyscalltools/testing/selftests/x86/Makefile tools/testing/selftests/x86/test_vsyscall.c+501 -10 replies
115/118x86/pti: Fix !PCID and sanitize definesarch/x86/entry/calling.h arch/x86/include/asm/processor-flags.h arch/x86/include/asm/tlbflush.h+23 -210 replies
116/118security/Kconfig: Correct the Documentation reference for PTIsecurity/Kconfig+1 -10 replies
117/118x86,perf: Disable intel_bts when PTIarch/x86/events/intel/bts.c+18 -00 replies
118/118x86/retpoline: Remove compile time warningarch/x86/Makefile+0 -20 replies

Reviews trailers per patch

41 of 118 patches have a Reviewed-by or Acked-by.

PatchDarren KennyMarc ZyngierJonathan McDowellAbdul Lateef AttarRafael J. WysockiThomas GleixnerFlorian FainelliSantosh ShilimkarArnaud PatardMike MaloneyPaul BlakeyJiri PirkoDavid LebrunAlexander PetrovskiySharon, SaraTony LuckJim MattsonRuediger OertelGreg KurzSinclair YehThomas HellstromRodrigo ViviChris WilsonJohn FastabendPeter ChenFelipe BalbiHans de GoedeBaoquan HeDave YoungMatthew GarrettAaron BrownChristian HesseDimitri SivanichDave HansenGreg Kroah-HartmanKonrad Rzeszutek WilkReviewed-by: Borislav PetkovIngo MolnarArjan van de VenJuergen GrossPeter Zijlstra (Intel)Andy LutomirskiLinus TorvaldsPaul BurtonEric NorthupBenjamin SerebrinAndrew HonigSimon HormanWolfram SangAlex ElderAndrea ArcangeliRandy DunlapKees Cook
1/118
2/118R-b R-b T-b
3/118
4/118
5/118
6/118
7/118R-b
8/118
9/118
10/118
11/118
12/118
13/118
14/118
15/118R-b R-b R-b
16/118T-b
17/118
18/118
19/118
20/118
21/118
22/118T-b A-b
23/118
24/118
25/118
26/118
27/118
28/118
29/118
30/118
31/118A-b R-b
32/118
33/118
34/118
35/118R-b
36/118
37/118A-b
38/118
39/118
40/118
41/118
42/118
43/118
44/118T-b
45/118
46/118A-b
47/118
48/118
49/118R-b A-b
50/118A-b
51/118T-b
52/118R-b
53/118
54/118
55/118
56/118R-b A-b
57/118
58/118R-b
59/118R-b
60/118A-b
61/118R-b
62/118T-b R-b T-b
63/118
64/118
65/118
66/118R-b
67/118R-b
68/118
69/118A-b
70/118T-b R-b
71/118R-b R-b
72/118A-b
73/118
74/118
75/118
76/118
77/118
78/118
79/118R-b A-b
80/118
81/118
82/118
83/118
84/118
85/118A-b
86/118
87/118A-b A-b
88/118T-b
89/118T-b T-b
90/118T-b A-b
91/118R-b R-b
92/118
93/118R-b R-b
94/118R-b R-b
95/118
96/118
97/118R-b
98/118R-b
99/118
100/118
101/118R-b
102/118
103/118
104/118A-b A-b
105/118
106/118A-b A-b
107/118A-b A-b
108/118A-b A-b
109/118A-b A-b
110/118A-b A-b R-b
111/118A-b A-b
112/118A-b A-b
113/118T-b
114/118CSigned-off-by
115/118
116/118
117/118
118/118Requested-by

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 53 reviewers.

Read the v1 thread

Cover letter [PATCH 4.14 000/118] 4.14.14-stable review

This is the start of the stable review cycle for the 4.14.14 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed Jan 17 12:33:32 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.14-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.14.14-rc1

Thomas Gleixner <[email protected]>
x86/retpoline: Remove compile time warning

Peter Zijlstra <[email protected]>
x86,perf: Disable intel_bts when PTI

W. Trevor King <[email protected]>
security/Kconfig: Correct the Documentation reference for PTI

Thomas Gleixner <[email protected]>
x86/pti: Fix !PCID and sanitize defines

Andy Lutomirski <[email protected]>
selftests/x86: Add test_vsyscall

David Woodhouse <[email protected]>
x86/retpoline: Fill return stack buffer on vmexit

Andi Kleen <[email protected]>
x86/retpoline/irq32: Convert assembler indirect jumps

David Woodhouse <[email protected]>
x86/retpoline/checksum32: Convert assembler indirect jumps

David Woodhouse <[email protected]>
x86/retpoline/xen: Convert Xen hypercall indirect jumps

David Woodhouse <[email protected]>
x86/retpoline/hyperv: Convert assembler indirect jumps

David Woodhouse <[email protected]>
x86/retpoline/ftrace: Convert ftrace assembler indirect jumps

David Woodhouse <[email protected]>
x86/retpoline/entry: Convert entry assembler indirect jumps

David Woodhouse <[email protected]>
x86/retpoline/crypto: Convert crypto assembler indirect jumps

David Woodhouse <[email protected]>
x86/spectre: Add boot time option to select Spectre v2 mitigation

David Woodhouse <[email protected]>
x86/retpoline: Add initial retpoline support

Josh Poimboeuf <[email protected]>
objtool: Allow alternatives to be ignored

Josh Poimboeuf <[email protected]>
objtool: Detect jumps to retpoline thunks

Dave Hansen <[email protected]>
x86/pti: Make unpoison of pgd for trusted boot work for real

Borislav Petkov <[email protected]>
x86/alternatives: Fix optimize_nops() checking

David Woodhouse <[email protected]>
sysfs/cpu: Fix typos in vulnerability documentation

Tom Lendacky <[email protected]>
x86/cpu/AMD: Use LFENCE_RDTSC in preference to MFENCE_RDTSC

Tom Lendacky <[email protected]>
x86/cpu/AMD: Make LFENCE a serializing instruction

Jike Song <[email protected]>
x86/mm/pti: Remove dead logic in pti_user_pagetable_walk*()

Dave Hansen <[email protected]>
x86/tboot: Unbreak tboot with PTI enabled

Thomas Gleixner <[email protected]>
x86/cpu: Implement CPU vulnerabilites sysfs functions

Thomas Gleixner <[email protected]>
sysfs/cpu: Add vulnerability folder

David Woodhouse <[email protected]>

    x86/cpufeatures: Add X86_BUG_SPECTRE_V[12]

Dave Hansen <[email protected]>
x86/Documentation: Add PTI description

Jiri Kosina <[email protected]>
x86/pti: Unbreak EFI old_memmap

Benjamin Poirier <[email protected]>

    e1000e: Fix e1000_check_for_copper_link_ich8lan return value.

John Johansen <[email protected]>
apparmor: fix ptrace label match when matching stacked labels

Kirill A. Shutemov <[email protected]>
kdump: write correct address of mem_section into vmcoreinfo

Hans de Goede <[email protected]>
mux: core: fix double get_device()

Icenowy Zheng <[email protected]>
uas: ignore UAS for Norelsys NS1068(X) chips

Ben Seri <[email protected]>
Bluetooth: Prevent stack info leak from the EFS element.

Viktor Slavkovic <[email protected]>
staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl

Shuah Khan <[email protected]>
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer

Shuah Khan <[email protected]>
usbip: fix vudc_rx: harden CMD_SUBMIT path to handle malicious input

Shuah Khan <[email protected]>
usbip: remove kernel addresses from usb device and urb debug msgs

Alan Stern <[email protected]>
USB: UDC core: fix double-free in usb_add_gadget_udc_release

Pete Zaitcev <[email protected]>
USB: fix usbmon BUG trigger

Stefan Agner <[email protected]>
usb: misc: usb3503: make sure reset is low for at least 100us

Christian Holl <[email protected]>

    USB: serial: cp210x: add new device ID ELV ALC 8xxx

Diego Elio Pettenò <[email protected]>

    USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ

Daniel Borkmann <[email protected]>
bpf: arsh is not supported in 32 bit alu thus reject it

Daniel Borkmann <[email protected]>
bpf, array: fix overflow in max_entries and undefined behavior in index_mask

Alexei Starovoitov <[email protected]>
bpf: prevent out-of-bounds speculation

Ville Syrjälä <[email protected]>
drm/i915: Fix init_clock_gating for resume

Ville Syrjälä <[email protected]>
drm/i915: Move init_clock_gating() back to where it was

Kenneth Graunke <[email protected]>
drm/i915: Whitelist SLICE_COMMON_ECO_CHICKEN1 on Geminilake.

Zhi Wang <[email protected]>
drm/i915/gvt: Clear the shadow page table entry after post-sync

Dan Carpenter <[email protected]>
drm/vmwgfx: Potential off by one in vmw_view_add()

Thomas Hellstrom <[email protected]>
drm/vmwgfx: Don't cache framebuffer maps

David Gibson <[email protected]>
KVM: PPC: Book3S HV: Always flush TLB in kvmppc_alloc_reset_hpt()

Serhii Popovych <[email protected]>
KVM: PPC: Book3S HV: Fix use after free in case of multiple resize requests

Serhii Popovych <[email protected]>
KVM: PPC: Book3S HV: Drop prepare_done from struct kvm_resize_hpt

Alexey Kardashevskiy <[email protected]>
KVM: PPC: Book3S PR: Fix WIMG handling under pHyp

Andrew Honig <[email protected]>
KVM: x86: Add memory barrier on vmcs field lookup

Jia Zhang <[email protected]>
x86/microcode/intel: Extend BDW late-loading with a revision check

Emmanuel Grumbach <[email protected]>
iwlwifi: pcie: fix DMA memory mapping / unmapping

Ilya Dryomov <[email protected]>
rbd: set max_segments to USHRT_MAX

Florian Margaine <[email protected]>
rbd: reacquire lock should update lock owner client id

Masaharu Hayakawa <[email protected]>
mmc: renesas_sdhi: Add MODULE_LICENSE

Eric Biggers <[email protected]>
crypto: algapi - fix NULL dereference in crypto_remove_spawns()

Mathieu Desnoyers <[email protected]>
membarrier: Disable preemption when calling smp_call_function_many()

David S. Miller <[email protected]>
Revert "Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find.""

Russell King <[email protected]>
sfp: fix sfp-bus oops when removing socket/upstream

Ido Schimmel <[email protected]>
mlxsw: spectrum: Relax sanity checks during enslavement

Mathieu Xhonneux <[email protected]>
ipv6: sr: fix TLVs not being copied using setsockopt

Roi Dayan <[email protected]>
net/sched: Fix update of lastuse in act modules implementing stats_update

Ido Schimmel <[email protected]>
mlxsw: spectrum_router: Fix NULL pointer deref

Stephen Hemminger <[email protected]>
ethtool: do not print warning for applications using legacy API

Eric Dumazet <[email protected]>
ipv6: fix possible mem leaks in ipv6_make_skb()

Sergei Shtylyov <[email protected]>
sh_eth: fix SH7757 GEther initialization

Jerome Brunet <[email protected]>
net: stmmac: enable EEE in MII, GMII or RGMII only

Sergei Shtylyov <[email protected]>
sh_eth: fix TSU resource handling

Marcelo Ricardo Leitner <[email protected]>
sctp: fix the handling of ICMP Frag Needed for too small MTUs

Marcelo Ricardo Leitner <[email protected]>
sctp: do not retransmit upon FragNeeded if PMTU discovery is disabled

Fugang Duan <[email protected]>
net: fec: free/restore resource in related probe error pathes

Fugang Duan <[email protected]>
net: fec: defer probe if regulator is not ready

Fugang Duan <[email protected]>
net: fec: restore dev_id in the cases of probe error

Mohamed Ghannam <[email protected]>
RDS: null pointer dereference in rds_atomic_free_op

Mohamed Ghannam <[email protected]>
RDS: Heap OOB write in rds_message_alloc_sgs()

Russell King <[email protected]>
phylink: ensure we report link down when LOS asserted

Andrii Vladyka <[email protected]>
net: core: fix module type in sock_diag_bind

Eli Cooper <[email protected]>
ip6_tunnel: disable dst caching if tunnel is dual-stack

Cong Wang <[email protected]>
8021q: fix a memory leak for VLAN 0 device

Vikas C Sajjan <[email protected]>
x86/acpi: Reduce code duplication in mp_override_legacy_irq()

Takashi Iwai <[email protected]>
ALSA: aloop: Fix racy hw constraints adjustment

Takashi Iwai <[email protected]>
ALSA: aloop: Fix inconsistent format due to incomplete rule

Takashi Iwai <[email protected]>
ALSA: aloop: Release cable upon open error path

Takashi Iwai <[email protected]>
ALSA: pcm: Allow aborting mutex lock at OSS read/write loops

Takashi Iwai <[email protected]>
ALSA: pcm: Abort properly at pending signal in OSS read/write loops

Takashi Iwai <[email protected]>
ALSA: pcm: Add missing error checks in OSS emulation plugin builder

Takashi Iwai <[email protected]>
ALSA: pcm: Workaround for weird PulseAudio behavior on rewind error

Takashi Iwai <[email protected]>
ALSA: pcm: Remove incorrect snd_BUG_ON() usages

Vikas C Sajjan <[email protected]>
x86/acpi: Handle SCI interrupts above legacy space gracefully

Steve Wise <[email protected]>
iw_cxgb4: when flushing, complete all wrs in a chain

Steve Wise <[email protected]>
iw_cxgb4: reflect the original WR opcode in drain cqes

Steve Wise <[email protected]>
iw_cxgb4: only clear the ARMED bit if a notification is needed

Steve Wise <[email protected]>
iw_cxgb4: atomically flush the qp

Steve Wise <[email protected]>
iw_cxgb4: only call the cq comp_handler when the cq is armed

Rafael J. Wysocki <[email protected]>
platform/x86: wmi: Call acpi_wmi_init() later

Jim Mattson <[email protected]>
kvm: vmx: Scrub hardware GPRs at VM-exit

Tejun Heo <[email protected]>
cgroup: fix css_task_iter crash on CSS_TASK_ITER_PROC

Maciej W. Rozycki <[email protected]>
MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses

Maciej W. Rozycki <[email protected]>
MIPS: Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET

Maciej W. Rozycki <[email protected]>
MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSA

Maciej W. Rozycki <[email protected]>
MIPS: Consistently handle buffer counter with PTRACE_SETREGSET

Maciej W. Rozycki <[email protected]>
MIPS: Guard against any partial write attempt with PTRACE_SETREGSET

Maciej W. Rozycki <[email protected]>
MIPS: Factor out NT_PRFPREG regset access helpers

Maciej W. Rozycki <[email protected]>
MIPS: Validate PR_SET_FP_MODE prctl(2) requests against the ABI of the task

Bart Van Assche <[email protected]>
IB/srpt: Fix ACL lookup during login

Bart Van Assche <[email protected]>
IB/srpt: Disable RDMA access by the initiator

Wolfgang Grandegger <[email protected]>
can: gs_usb: fix return value of the "set_bittiming" callback

Oliver Hartkopp <[email protected]>
can: vxcan: improve handling of missing peer name attribute

Wanpeng Li <[email protected]>
KVM: Fix stack-out-of-bounds read in write_mmio

Suren Baghdasaryan <[email protected]>
dm bufio: fix shrinker scans when (nr_to_scan < retain_target)

-------------

Diffstat:

 Documentation/ABI/testing/sysfs-devices-system-cpu |  16 +
 Documentation/admin-guide/kernel-parameters.txt    |  49 +-
 Documentation/x86/pti.txt                          | 186 ++++++++
 Makefile                                           |   4 +-
 arch/mips/kernel/process.c                         |  12 +
 arch/mips/kernel/ptrace.c                          | 147 ++++--
 arch/powerpc/kvm/book3s_64_mmu.c                   |   1 +
 arch/powerpc/kvm/book3s_64_mmu_hv.c                |  90 ++--
 arch/powerpc/kvm/book3s_pr.c                       |   2 +
 arch/x86/Kconfig                                   |  14 +
 arch/x86/Makefile                                  |   8 +
 arch/x86/crypto/aesni-intel_asm.S                  |   5 +-
 arch/x86/crypto/camellia-aesni-avx-asm_64.S        |   3 +-
 arch/x86/crypto/camellia-aesni-avx2-asm_64.S       |   3 +-
 arch/x86/crypto/crc32c-pcl-intel-asm_64.S          |   3 +-
 arch/x86/entry/calling.h                           |  36 +-
 arch/x86/entry/entry_32.S                          |   5 +-
 arch/x86/entry/entry_64.S                          |  12 +-
 arch/x86/events/intel/bts.c                        |  18 +
 arch/x86/include/asm/asm-prototypes.h              |  25 ++
 arch/x86/include/asm/cpufeatures.h                 |   4 +
 arch/x86/include/asm/mshyperv.h                    |  18 +-
 arch/x86/include/asm/msr-index.h                   |   3 +
 arch/x86/include/asm/nospec-branch.h               | 214 +++++++++
 arch/x86/include/asm/processor-flags.h             |   2 +-
 arch/x86/include/asm/tlbflush.h                    |   6 +-
 arch/x86/include/asm/xen/hypercall.h               |   5 +-
 arch/x86/kernel/acpi/boot.c                        |  61 ++-
 arch/x86/kernel/alternative.c                      |   7 +-
 arch/x86/kernel/cpu/amd.c                          |  28 +-
 arch/x86/kernel/cpu/bugs.c                         | 185 ++++++++
 arch/x86/kernel/cpu/common.c                       |   3 +
 arch/x86/kernel/cpu/microcode/intel.c              |  13 +-
 arch/x86/kernel/ftrace_32.S                        |   6 +-
 arch/x86/kernel/ftrace_64.S                        |   8 +-
 arch/x86/kernel/irq_32.c                           |   9 +-
 arch/x86/kernel/tboot.c                            |  11 +
 arch/x86/kvm/svm.c                                 |  23 +
 arch/x86/kvm/vmx.c                                 |  30 +-
 arch/x86/kvm/x86.c                                 |   8 +-
 arch/x86/lib/Makefile                              |   1 +
 arch/x86/lib/checksum_32.S                         |   7 +-
 arch/x86/lib/retpoline.S                           |  48 ++
 arch/x86/mm/pti.c                                  |  32 +-
 arch/x86/platform/efi/efi_64.c                     |   2 +
 crypto/algapi.c                                    |  12 +
 drivers/base/Kconfig                               |   3 +
 drivers/base/cpu.c                                 |  48 ++
 drivers/block/rbd.c                                |  18 +-
 drivers/gpu/drm/i915/gvt/gtt.c                     |   5 +-
 drivers/gpu/drm/i915/i915_drv.c                    |   1 +
 drivers/gpu/drm/i915/i915_reg.h                    |   2 +
 drivers/gpu/drm/i915/intel_display.c               |  14 +-
 drivers/gpu/drm/i915/intel_engine_cs.c             |   5 +
 drivers/gpu/drm/i915/intel_pm.c                    |  44 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c            |   2 +
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c                |   6 -
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.h                |   2 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c               |  41 +-
 drivers/infiniband/hw/cxgb4/cq.c                   |   7 +-
 drivers/infiniband/hw/cxgb4/ev.c                   |   8 +-
 drivers/infiniband/hw/cxgb4/iw_cxgb4.h             |   2 -
 drivers/infiniband/hw/cxgb4/qp.c                   | 119 +++--
 drivers/infiniband/hw/cxgb4/t4.h                   |   6 +
 drivers/infiniband/ulp/srpt/ib_srpt.c              |   5 +-
 drivers/md/dm-bufio.c                              |   8 +-
 drivers/mmc/host/renesas_sdhi_core.c               |   3 +
 drivers/mux/core.c                                 |   4 +-
 drivers/net/can/usb/gs_usb.c                       |   2 +-
 drivers/net/can/vxcan.c                            |   2 +-
 drivers/net/ethernet/freescale/fec_main.c          |   7 +-
 drivers/net/ethernet/intel/e1000e/ich8lan.c        |  11 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.c     |  11 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.h     |   2 +
 .../net/ethernet/mellanox/mlxsw/spectrum_router.c  |   2 +-
 .../ethernet/mellanox/mlxsw/spectrum_switchdev.c   |   6 +
 drivers/net/ethernet/renesas/sh_eth.c              |  29 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |   6 +
 drivers/net/phy/phylink.c                          |   3 +-
 drivers/net/phy/sfp-bus.c                          |   6 +-
 drivers/net/wireless/intel/iwlwifi/pcie/internal.h |  10 +-
 drivers/net/wireless/intel/iwlwifi/pcie/tx-gen2.c  |  11 +-
 drivers/net/wireless/intel/iwlwifi/pcie/tx.c       |   8 +-
 drivers/platform/x86/wmi.c                         |   2 +-
 drivers/staging/android/ashmem.c                   |   2 +
 drivers/usb/gadget/udc/core.c                      |  28 +-
 drivers/usb/misc/usb3503.c                         |   2 +
 drivers/usb/mon/mon_bin.c                          |   8 +-
 drivers/usb/serial/cp210x.c                        |   2 +
 drivers/usb/storage/unusual_uas.h                  |   7 +
 drivers/usb/usbip/usbip_common.c                   |  17 +-
 drivers/usb/usbip/vudc_rx.c                        |  19 +
 drivers/usb/usbip/vudc_tx.c                        |  11 +-
 include/linux/bpf.h                                |   2 +
 include/linux/cpu.h                                |   7 +
 include/linux/crash_core.h                         |   2 +
 include/linux/sh_eth.h                             |   1 -
 include/net/sctp/structs.h                         |   2 +-
 include/trace/events/kvm.h                         |   7 +-
 kernel/bpf/arraymap.c                              |  61 ++-
 kernel/bpf/verifier.c                              |  41 ++
 kernel/cgroup/cgroup.c                             |  14 +-
 kernel/crash_core.c                                |   2 +-
 kernel/sched/membarrier.c                          |   2 +
 net/8021q/vlan.c                                   |   7 +-
 net/bluetooth/l2cap_core.c                         |  20 +-
 net/core/ethtool.c                                 |  15 +-
 net/core/sock_diag.c                               |   2 +-
 net/ipv6/exthdrs.c                                 |   9 +
 net/ipv6/ip6_output.c                              |   5 +-
 net/ipv6/ip6_tunnel.c                              |   9 +-
 net/rds/rdma.c                                     |   4 +
 net/sched/act_gact.c                               |   2 +-
 net/sched/act_mirred.c                             |   2 +-
 net/sctp/input.c                                   |  28 +-
 net/sctp/transport.c                               |  29 +-
 net/xfrm/xfrm_policy.c                             |  29 +-
 security/Kconfig                                   |   2 +-
 security/apparmor/include/perms.h                  |   3 +
 security/apparmor/ipc.c                            |  53 ++-
 sound/core/oss/pcm_oss.c                           |  41 +-
 sound/core/oss/pcm_plugin.c                        |  14 +-
 sound/core/pcm_lib.c                               |   4 +-
 sound/core/pcm_native.c                            |   9 +-
 sound/drivers/aloop.c                              |  98 ++--
 tools/objtool/check.c                              |  69 ++-
 tools/objtool/check.h                              |   2 +-
 tools/testing/selftests/bpf/test_verifier.c        |  40 ++
 tools/testing/selftests/x86/Makefile               |   2 +-
 tools/testing/selftests/x86/test_vsyscall.c        | 500 +++++++++++++++++++++
 virt/kvm/arm/mmio.c                                |   6 +-
 131 files changed, 2536 insertions(+), 561 deletions(-)

Read the cover letter in its thread