Skip to content

4.4.216-stable review

Greg Kroah-Hartman kernel-janitors linux-mips linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest72 patches 5 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/72iwlwifi: pcie: fix rb_allocator workqueue allocationdrivers/net/wireless/iwlwifi/pcie/rx.c+5 -10 replies
2/72ext4: fix potential race between online resizing and write operationsfs/ext4/balloc.c fs/ext4/ext4.h fs/ext4/resize.c +1 more+96 -240 replies
3/72ext4: fix potential race between s_flex_groups online resizing and accessfs/ext4/ext4.h fs/ext4/ialloc.c fs/ext4/mballoc.c +2 more+76 -370 replies
4/72ext4: fix potential race between s_group_info online resizing and accessfs/ext4/ext4.h fs/ext4/mballoc.c+39 -210 replies
5/72ipmi:ssif: Handle a possible NULL pointer referencedrivers/char/ipmi/ipmi_ssif.c+7 -30 replies
6/72mac80211: consider more elements in parsing CRCnet/mac80211/util.c+12 -60 replies
7/72cfg80211: check wiphy driver existence for drvinfo reportnet/wireless/ethtool.c+6 -20 replies
8/72cifs: Fix mode output in debugging statementsfs/cifs/cifsacl.c fs/cifs/connect.c fs/cifs/inode.c+4 -40 replies
9/72cfg80211: add missing policy for NL80211_ATTR_STATUS_CODEnet/wireless/nl80211.c+1 -00 replies
10/72sysrq: Restore original console_loglevel when sysrq disableddrivers/tty/sysrq.c+1 -00 replies
11/72sysrq: Remove duplicated sysrq messagedrivers/tty/sysrq.c+3 -40 replies
12/72net: fib_rules: Correctly set table field when table number exceeds 8 bitsnet/core/fib_rules.c+1 -10 replies
13/72net: phy: restore mdio regs in the iproc mdio driverdrivers/net/phy/mdio-bcm-iproc.c+20 -00 replies
14/72ipv6: Fix nlmsg_flags when splitting a multipath routenet/ipv6/route.c+1 -00 replies
15/72ipv6: Fix route replacement with dev-only routenet/ipv6/ip6_fib.c+4 -30 replies
16/72sctp: move the format error check out of __sctp_sf_do_9_1_abortnet/sctp/sm_statefuns.c+20 -70 replies
17/72nfc: pn544: Fix occasional HW initialization failuredrivers/nfc/pn544/i2c.c+1 -00 replies
18/72net: sched: correct flower port blockinginclude/net/flow_dissector.h net/sched/cls_flower.c+10 -00 replies
19/72ext4: potential crash on allocation error in ext4_alloc_flex_bg_array()fs/ext4/super.c+3 -30 replies
20/72audit: fix error handling in audit_data_to_entry()kernel/auditfilter.c+39 -320 replies
21/72HID: core: fix off-by-one memset in hid_report_raw_event()drivers/hid/hid-core.c+3 -10 replies
22/72HID: core: increase HID report buffer size to 8KiBinclude/linux/hid.h+1 -10 replies
23/72HID: hiddev: Fix race in in hiddev_disconnect()drivers/hid/usbhid/hiddev.c+1 -10 replies
24/72MIPS: VPE: Fix a double free and a memory leak in release_vpe()arch/mips/kernel/vpe.c+1 -10 replies
25/72i2c: jz4780: silence log flood on txabrtdrivers/i2c/busses/i2c-jz4780.c+2 -340 replies
26/72ecryptfs: Fix up bad backport of fe2e082f5da5b4a0a92ae32978f81507ef37ec66fs/ecryptfs/keystore.c+2 -20 replies
27/72include/linux/bitops.h: introduce BITS_PER_TYPEinclude/linux/bitops.h+2 -10 replies
28/72net: netlink: cap max groups which will be considered in netlink_bind()net/netlink/af_netlink.c+3 -20 replies
29/72namei: only return -ECHILD from follow_dotdot_rcu()fs/namei.c+1 -10 replies
30/72KVM: Check for a bad hva before dropping into the ghc slow pathvirt/kvm/kvm_main.c+6 -60 replies
31/72slip: stop double free sl->dev in slip_opendrivers/net/slip/slip.c+0 -10 replies
32/72mm: make page ref count overflow check tighter and more explicitinclude/linux/mm.h mm/internal.h+8 -30 replies
33/72mm: add try_get_page() helper functioninclude/linux/mm.h mm/internal.h+35 -00 replies
34/72mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepagesmm/gup.c+0 -30 replies
35/72mm, gup: ensure real head page is ref-counted when using hugepagesmm/gup.c+6 -60 replies
36/72mm: prevent get_user_pages() from overflowing page refcountarch/s390/mm/gup.c arch/x86/mm/gup.c include/linux/mm.h +2 more+65 -130 replies
37/72pipe: add pipe_buf_get() helperfs/fuse/dev.c fs/splice.c include/linux/pipe_fs_i.h+14 -30 replies
38/72fs: prevent page refcount overflow in pipe_buf_getfs/fuse/dev.c fs/pipe.c fs/splice.c +2 more+29 -150 replies
39/72audit: always check the netlink payload length in audit_receive_msg()kernel/audit.c+21 -190 replies
40/72serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDEdrivers/tty/serial/ar933x_uart.c+8 -00 replies
41/72usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flagsdrivers/usb/gadget/function/f_fs.c+3 -20 replies
42/72usb: gadget: serial: fix Tx stall after buffer overflowdrivers/usb/gadget/function/u_serial.c+3 -10 replies
43/72drm: msm: Fix return type of dsi_mgr_connector_mode_valid for kCFIdrivers/gpu/drm/msm/dsi/dsi_manager.c+1 -10 replies
44/72drm/msm/dsi: save pll state before dsi host is powered offdrivers/gpu/drm/msm/dsi/dsi_manager.c+5 -00 replies
45/72net: ks8851-ml: Remove 8-bit bus accessorsdrivers/net/ethernet/micrel/ks8851_mll.c+5 -400 replies
46/72net: ks8851-ml: Fix 16-bit data accessdrivers/net/ethernet/micrel/ks8851_mll.c+2 -20 replies
47/72net: ks8851-ml: Fix 16-bit IO operationdrivers/net/ethernet/micrel/ks8851_mll.c+2 -20 replies
48/72watchdog: da9062: do not ping the hw during stop()drivers/watchdog/da9062_wdt.c+0 -70 replies
49/72s390/cio: cio_ignore_proc_seq_next should increase position indexdrivers/s390/cio/blacklist.c+3 -20 replies
50/72cifs: dont leak -EAGAIN for stat() during reconnectfs/cifs/inode.c+5 -10 replies
51/72usb: storage: Add quirk for Samsung Fit flashdrivers/usb/storage/unusual_devs.h+6 -00 replies
52/72usb: quirks: add NO_LPM quirk for Logitech Screen Sharedrivers/usb/core/quirks.c+3 -00 replies
53/72usb: core: hub: do error out if usb_autopm_get_interface() failsdrivers/usb/core/hub.c+5 -10 replies
54/72usb: core: port: do error out if usb_autopm_get_interface() failsdrivers/usb/core/port.c+8 -20 replies
55/72vgacon: Fix a UAF in vgacon_invert_regiondrivers/video/console/vgacon.c+3 -00 replies
56/72fat: fix uninit-memory access for partial initialized inodefs/fat/inode.c+7 -120 replies
57/72vt: selection, close sel_buffer racedrivers/tty/vt/selection.c+15 -60 replies
58/72vt: selection, push console lock downdrivers/tty/vt/selection.c drivers/tty/vt/vt.c+12 -30 replies
59/72vt: selection, push sel_lock updrivers/tty/vt/selection.c+7 -90 replies
60/72dmaengine: tegra-apb: Fix use-after-freedrivers/dma/tegra20-apb-dma.c+0 -40 replies
61/72dmaengine: tegra-apb: Prevent race conditions of tasklet vs free listdrivers/dma/tegra20-apb-dma.c+1 -10 replies
62/72ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs outputsound/soc/soc-pcm.c+8 -80 replies
63/72ASoC: pcm512x: Fix unbalanced regulator enable call in probe error pathsound/soc/codecs/pcm512x.c+5 -30 replies
64/72ASoC: dapm: Correct DAPM handling of active widgets during shutdownsound/soc/soc-dapm.c+1 -10 replies
65/72RDMA/iwcm: Fix iwcm work deallocationdrivers/infiniband/core/iwcm.c+3 -10 replies
66/72RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen()drivers/infiniband/core/cm.c+1 -00 replies
67/72ARM: imx: build v7_cpu_resume() unconditionallyarch/arm/mach-imx/Makefile arch/arm/mach-imx/common.h arch/arm/mach-imx/resume-imx6.S +1 more+28 -160 replies
68/72hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT()drivers/hwmon/adt7462.c+1 -10 replies
69/72dmaengine: coh901318: Fix a double lock bug in dma_tc_handle()drivers/dma/coh901318.c+0 -40 replies
70/72powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systemsarch/powerpc/kernel/cputable.c+3 -10 replies
71/72dm cache: fix a crash due to incorrect work item cancellingdrivers/md/dm-cache-target.c+2 -20 replies
72/72crypto: algif_skcipher - use ZERO_OR_NULL_PTR in skcipher_recvmsg_asynccrypto/algif_skcipher.c+1 -10 replies

Reviews trailers per patch

31 of 72 patches have a Reviewed-by or Acked-by.

PatchSergey SenozhatskySteven Rostedt (VMware)Balbir SinghAndrew LunnFlorian FainelliH. Nikolaus SchallerMichal KubecekDavid AhernMatthew WilcoxSteve CapperChuanhong GuoMichał MirosławNick DesaulniersAmit PundirMichal NazarewiczGuenter RoeckPavel ShilovskyAurelien AptelMarcelo Ricardo LeitnerSuraj Jitindar SinghCong WangAlan SternCezary RojewskiJason GunthorpeDarrick J. WongLeonardo BrasJon HunterPierre-Louis BossartCornelia HuckKirill A. ShutemovJani Nikula
1/72
2/72
3/72
4/72R-b
5/72
6/72
7/72
8/72
9/72
10/72R-b R-b
11/72R-b
12/72
13/72R-b R-b
14/72R-b R-b
15/72R-b
16/72A-b
17/72
18/72A-b
19/72R-b
20/72
21/72
22/72
23/72
24/72
25/72T-b
26/72
27/72R-b
28/72
29/72
30/72
31/72
32/72A-b
33/72A-b
34/72A-b A-b
35/72A-b
36/72A-b
37/72
38/72
39/72
40/72T-b
41/72A-b
42/72R-b
43/72R-b T-b
44/72
45/72
46/72
47/72
48/72R-b
49/72R-b
50/72R-b R-b
51/72A-b
52/72
53/72A-b
54/72A-b
55/72
56/72
57/72
58/72
59/72
60/72A-b
61/72A-b
62/72A-b
63/72R-b
64/72
65/72R-b
66/72
67/72
68/72R-b
69/72
70/72R-b
71/72
72/72

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 31 reviewers.

Read the v1 thread

Cover letter [PATCH 4.4 00/72] 4.4.216-stable review

This is the start of the stable review cycle for the 4.4.216 release. There are 72 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 12 Mar 2020 12:34:10 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.216-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.4.216-rc1

yangerkun <[email protected]>
crypto: algif_skcipher - use ZERO_OR_NULL_PTR in skcipher_recvmsg_async

Mikulas Patocka <[email protected]>
dm cache: fix a crash due to incorrect work item cancelling

Desnes A. Nunes do Rosario <[email protected]>
powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems

Dan Carpenter <[email protected]>
dmaengine: coh901318: Fix a double lock bug in dma_tc_handle()

Dan Carpenter <[email protected]>

    hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT()

Ahmad Fatoum <[email protected]>
ARM: imx: build v7_cpu_resume() unconditionally

Jason Gunthorpe <[email protected]>
RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen()

Bernard Metzler <[email protected]>
RDMA/iwcm: Fix iwcm work deallocation

Charles Keepax <[email protected]>
ASoC: dapm: Correct DAPM handling of active widgets during shutdown

Matthias Reichl <[email protected]>
ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path

Takashi Iwai <[email protected]>
ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output

Dmitry Osipenko <[email protected]>
dmaengine: tegra-apb: Prevent race conditions of tasklet vs free list

Dmitry Osipenko <[email protected]>
dmaengine: tegra-apb: Fix use-after-free

Jiri Slaby <[email protected]>
vt: selection, push sel_lock up

Jiri Slaby <[email protected]>
vt: selection, push console lock down

Jiri Slaby <[email protected]>
vt: selection, close sel_buffer race

OGAWA Hirofumi <[email protected]>
fat: fix uninit-memory access for partial initialized inode

Zhang Xiaoxu <[email protected]>
vgacon: Fix a UAF in vgacon_invert_region

Eugeniu Rosca <[email protected]>
usb: core: port: do error out if usb_autopm_get_interface() fails

Eugeniu Rosca <[email protected]>
usb: core: hub: do error out if usb_autopm_get_interface() fails

Dan Lazewatsky <[email protected]>
usb: quirks: add NO_LPM quirk for Logitech Screen Share

Jim Lin <[email protected]>
usb: storage: Add quirk for Samsung Fit flash

Ronnie Sahlberg <[email protected]>
cifs: don't leak -EAGAIN for stat() during reconnect

Vasily Averin <[email protected]>
s390/cio: cio_ignore_proc_seq_next should increase position index

Marco Felsch <[email protected]>
watchdog: da9062: do not ping the hw during stop()

Marek Vasut <[email protected]>

    net: ks8851-ml: Fix 16-bit IO operation

Marek Vasut <[email protected]>

    net: ks8851-ml: Fix 16-bit data access

Marek Vasut <[email protected]>
net: ks8851-ml: Remove 8-bit bus accessors

Harigovindan P <[email protected]>
drm/msm/dsi: save pll state before dsi host is powered off

John Stultz <[email protected]>
drm: msm: Fix return type of dsi_mgr_connector_mode_valid for kCFI

Sergey Organov <[email protected]>
usb: gadget: serial: fix Tx stall after buffer overflow

Lars-Peter Clausen <[email protected]>
usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags

Daniel Golle <[email protected]>
serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE

Paul Moore <[email protected]>
audit: always check the netlink payload length in audit_receive_msg()

Matthew Wilcox <[email protected]>
fs: prevent page refcount overflow in pipe_buf_get

Miklos Szeredi <[email protected]>
pipe: add pipe_buf_get() helper

Linus Torvalds <[email protected]>
mm: prevent get_user_pages() from overflowing page refcount

Punit Agrawal <[email protected]>
mm, gup: ensure real head page is ref-counted when using hugepages

Will Deacon <[email protected]>
mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepages

Linus Torvalds <[email protected]>
mm: add 'try_get_page()' helper function

Linus Torvalds <[email protected]>
mm: make page ref count overflow check tighter and more explicit

yangerkun <[email protected]>

    slip: stop double free sl->dev in slip_open

Sean Christopherson <[email protected]>
KVM: Check for a bad hva before dropping into the ghc slow path

Aleksa Sarai <[email protected]>
namei: only return -ECHILD from follow_dotdot_rcu()

Nikolay Aleksandrov <[email protected]>
net: netlink: cap max groups which will be considered in netlink_bind()

Chris Wilson <[email protected]>
include/linux/bitops.h: introduce BITS_PER_TYPE

Nathan Chancellor <[email protected]>

    ecryptfs: Fix up bad backport of fe2e082f5da5b4a0a92ae32978f81507ef37ec66

Wolfram Sang <[email protected]>
i2c: jz4780: silence log flood on txabrt

Christophe JAILLET <[email protected]>
MIPS: VPE: Fix a double free and a memory leak in 'release_vpe()'

[email protected] <[email protected]>
HID: hiddev: Fix race in in hiddev_disconnect()

Johan Korsnes <[email protected]>
HID: core: increase HID report buffer size to 8KiB

Johan Korsnes <[email protected]>
HID: core: fix off-by-one memset in hid_report_raw_event()

Paul Moore <[email protected]>
audit: fix error handling in audit_data_to_entry()

Dan Carpenter <[email protected]>
ext4: potential crash on allocation error in ext4_alloc_flex_bg_array()

Jason Baron <[email protected]>
net: sched: correct flower port blocking

Dmitry Osipenko <[email protected]>
nfc: pn544: Fix occasional HW initialization failure

Xin Long <[email protected]>
sctp: move the format error check out of __sctp_sf_do_9_1_abort

Benjamin Poirier <[email protected]>
ipv6: Fix route replacement with dev-only route

Benjamin Poirier <[email protected]>
ipv6: Fix nlmsg_flags when splitting a multipath route

Arun Parameswaran <[email protected]>
net: phy: restore mdio regs in the iproc mdio driver

Jethro Beekman <[email protected]>
net: fib_rules: Correctly set table field when table number exceeds 8 bits

Petr Mladek <[email protected]>
sysrq: Remove duplicated sysrq message

Petr Mladek <[email protected]>
sysrq: Restore original console_loglevel when sysrq disabled

Sergey Matyukevich <[email protected]>
cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE

Frank Sorenson <[email protected]>
cifs: Fix mode output in debugging statements

Sergey Matyukevich <[email protected]>
cfg80211: check wiphy driver existence for drvinfo report

Johannes Berg <[email protected]>
mac80211: consider more elements in parsing CRC

Corey Minyard <[email protected]>
ipmi:ssif: Handle a possible NULL pointer reference

Suraj Jitindar Singh <[email protected]>
ext4: fix potential race between s_group_info online resizing and access

Suraj Jitindar Singh <[email protected]>
ext4: fix potential race between s_flex_groups online resizing and access

Theodore Ts'o <[email protected]>
ext4: fix potential race between online resizing and write operations

Johannes Berg <[email protected]>
iwlwifi: pcie: fix rb_allocator workqueue allocation

-------------

Diffstat:

 Makefile                                 |   4 +-
 arch/arm/mach-imx/Makefile               |   2 +
 arch/arm/mach-imx/common.h               |   4 +-
 arch/arm/mach-imx/resume-imx6.S          |  24 +++++++
 arch/arm/mach-imx/suspend-imx6.S         |  14 -----
 arch/mips/kernel/vpe.c                   |   2 +-
 arch/powerpc/kernel/cputable.c           |   4 +-
 arch/s390/mm/gup.c                       |   6 +-
 arch/x86/mm/gup.c                        |   9 ++-
 crypto/algif_skcipher.c                  |   2 +-
 drivers/char/ipmi/ipmi_ssif.c            |  10 ++-
 drivers/dma/coh901318.c                  |   4 --
 drivers/dma/tegra20-apb-dma.c            |   6 +-
 drivers/gpu/drm/msm/dsi/dsi_manager.c    |   7 ++-
 drivers/hid/hid-core.c                   |   4 +-
 drivers/hid/usbhid/hiddev.c              |   2 +-
 drivers/hwmon/adt7462.c                  |   2 +-
 drivers/i2c/busses/i2c-jz4780.c          |  36 +----------
 drivers/infiniband/core/cm.c             |   1 +
 drivers/infiniband/core/iwcm.c           |   4 +-
 drivers/md/dm-cache-target.c             |   4 +-
 drivers/net/ethernet/micrel/ks8851_mll.c |  53 +++-------------
 drivers/net/phy/mdio-bcm-iproc.c         |  20 ++++++
 drivers/net/slip/slip.c                  |   1 -
 drivers/net/wireless/iwlwifi/pcie/rx.c   |   6 +-
 drivers/nfc/pn544/i2c.c                  |   1 +
 drivers/s390/cio/blacklist.c             |   5 +-
 drivers/tty/serial/ar933x_uart.c         |   8 +++
 drivers/tty/sysrq.c                      |   8 +--
 drivers/tty/vt/selection.c               |  24 ++++++-
 drivers/tty/vt/vt.c                      |   2 -
 drivers/usb/core/hub.c                   |   6 +-
 drivers/usb/core/port.c                  |  10 ++-
 drivers/usb/core/quirks.c                |   3 +
 drivers/usb/gadget/function/f_fs.c       |   5 +-
 drivers/usb/gadget/function/u_serial.c   |   4 +-
 drivers/usb/storage/unusual_devs.h       |   6 ++
 drivers/video/console/vgacon.c           |   3 +
 drivers/watchdog/da9062_wdt.c            |   7 ---
 fs/cifs/cifsacl.c                        |   4 +-
 fs/cifs/connect.c                        |   2 +-
 fs/cifs/inode.c                          |   8 ++-
 fs/ecryptfs/keystore.c                   |   4 +-
 fs/ext4/balloc.c                         |  14 ++++-
 fs/ext4/ext4.h                           |  30 +++++++--
 fs/ext4/ialloc.c                         |  23 ++++---
 fs/ext4/mballoc.c                        |  61 ++++++++++++------
 fs/ext4/resize.c                         |  62 +++++++++++++++----
 fs/ext4/super.c                          | 103 +++++++++++++++++++++----------
 fs/fat/inode.c                           |  19 +++---
 fs/fuse/dev.c                            |  12 ++--
 fs/namei.c                               |   2 +-
 fs/pipe.c                                |   4 +-
 fs/splice.c                              |  12 +++-
 include/linux/bitops.h                   |   3 +-
 include/linux/hid.h                      |   2 +-
 include/linux/mm.h                       |  23 ++++++-
 include/linux/pipe_fs_i.h                |  17 ++++-
 include/net/flow_dissector.h             |   9 +++
 kernel/audit.c                           |  40 ++++++------
 kernel/auditfilter.c                     |  71 +++++++++++----------
 kernel/trace/trace.c                     |   6 +-
 mm/gup.c                                 |  51 ++++++++++-----
 mm/hugetlb.c                             |  16 ++++-
 mm/internal.h                            |  28 ++++++++-
 net/core/fib_rules.c                     |   2 +-
 net/ipv6/ip6_fib.c                       |   7 ++-
 net/ipv6/route.c                         |   1 +
 net/mac80211/util.c                      |  18 ++++--
 net/netlink/af_netlink.c                 |   5 +-
 net/sched/cls_flower.c                   |   1 +
 net/sctp/sm_statefuns.c                  |  27 +++++---
 net/wireless/ethtool.c                   |   8 ++-
 net/wireless/nl80211.c                   |   1 +
 sound/soc/codecs/pcm512x.c               |   8 ++-
 sound/soc/soc-dapm.c                     |   2 +-
 sound/soc/soc-pcm.c                      |  16 ++---
 virt/kvm/kvm_main.c                      |  12 ++--
 78 files changed, 684 insertions(+), 373 deletions(-)