Skip to content

4.19.240-rc1 review

Greg Kroah-Hartman linux-arm-kernel linux-cifs linux-tegra linux-wireless lkml netdev stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest53 patches 12 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/53etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overeadinclude/linux/etherdevice.h+2 -30 replies
2/53mm: page_alloc: fix building error on -Werror=array-comparemm/page_alloc.c+1 -10 replies
3/53tracing: Dump stacktrace trigger to the corresponding instancekernel/trace/trace_events_trigger.c+8 -10 replies
4/53can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error pathdrivers/net/can/usb/usb_8dev.c+14 -160 replies
5/53dm integrity: fix memory corruption when tag_size is less than digest sizedrivers/md/dm-integrity.c+5 -20 replies
6/53gfs2: assign rgrp glock before compute_bitstructsfs/gfs2/rgrp.c+5 -40 replies
7/53ALSA: usb-audio: Clear MIDI port active flag after drainingsound/usb/midi.c+1 -00 replies
8/53tcp: fix race condition when creating child sockets from syncookiesinclude/net/inet_hashtables.h net/dccp/ipv4.c net/dccp/ipv6.c +4 more+91 -160 replies
9/53tcp: Fix potential use-after-free due to double kfree()net/ipv4/tcp_ipv4.c+2 -20 replies
10/53ASoC: atmel: Remove system clock tree configuration for at91sam9g20eksound/soc/atmel/sam9g20_wm8731.c+0 -610 replies
11/53ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_componentsound/soc/codecs/msm8916-wcd-digital.c+8 -10 replies
12/53dmaengine: imx-sdma: Fix error checking in sdma_event_remapdrivers/dma/imx-sdma.c+2 -20 replies
13/53rxrpc: Restore removed timer deletionnet/rxrpc/net_ns.c+2 -00 replies
14/53net/packet: fix packet_sock xmit return value checkingnet/packet/af_packet.c+9 -40 replies
15/53net/sched: cls_u32: fix possible leak in u32_init_knode()net/sched/cls_u32.c+4 -40 replies
16/53netlink: reset network and mac headers in netlink_dump()net/netlink/af_netlink.c+7 -00 replies
17/53ARM: vexpress/spc: Avoid negative array index when !SMParch/arm/mach-vexpress/spc.c+1 -10 replies
18/53reset: tegra-bpmp: Restore Handle errors in BPMP responsedrivers/reset/tegra/reset-bpmp.c+8 -10 replies
19/53platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negativedrivers/platform/x86/samsung-laptop.c+0 -20 replies
20/53ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constantsound/usb/usbaudio.h+1 -10 replies
21/53vxlan: fix error return code in vxlan_fdb_appenddrivers/net/vxlan.c+2 -20 replies
22/53cifs: Check the IOCB_DIRECT flag, not O_DIRECTfs/cifs/cifsfs.c+1 -10 replies
23/53mt76: Fix undefined behavior due to shift overflowing the constantdrivers/net/wireless/mediatek/mt76/mt76x2_pci.c+1 -10 replies
24/53brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constantdrivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c+1 -10 replies
25/53dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c+6 -20 replies
26/53drm/msm/mdp5: check the return of kzalloc()drivers/gpu/drm/msm/disp/mdp5/mdp5_plane.c+3 -00 replies
27/53net: macb: Restart tx only if queue pointer is laggingdrivers/net/ethernet/cadence/macb_main.c+8 -00 replies
28/53stat: fix inconsistency between struct stat and struct compat_statarch/x86/include/asm/compat.h fs/stat.c+12 -130 replies
29/53ata: pata_marvell: Check the bmdma_addr beforing readingdrivers/ata/pata_marvell.c+2 -00 replies
30/53dma: at_xdmac: fix a missing check on list iteratordrivers/dma/at_xdmac.c+7 -50 replies
31/53drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialiseddrivers/gpu/drm/panel/panel-raspberrypi-touchscreen.c+1 -10 replies
32/53drm/panel/raspberrypi-touchscreen: Initialise the bridge in preparedrivers/gpu/drm/panel/panel-raspberrypi-touchscreen.c+9 -20 replies
33/53powerpc/perf: Fix power9 event alternativesarch/powerpc/perf/power9-pmu.c+4 -40 replies
34/53openvswitch: fix OOB access in reserve_sfa_size()net/openvswitch/flow_netlink.c+1 -10 replies
35/53ASoC: soc-dapm: fix two incorrect uses of list iteratorsound/soc/soc-dapm.c+2 -40 replies
36/53e1000e: Fix possible overflow in LTR decodingdrivers/net/ethernet/intel/e1000e/ich8lan.c+2 -20 replies
37/53ARC: entry: fix syscall_trace_exit argumentarch/arc/kernel/entry.S+1 -00 replies
38/53arm_pmu: Validate single/group leader eventsdrivers/perf/arm_pmu.c+4 -60 replies
39/53ext4: fix symlink file size not match to file contentfs/ext4/page-io.c+3 -10 replies
40/53ext4: limit length to bitmap_maxbytes - blocksize in punch_holefs/ext4/inode.c+10 -10 replies
41/53ext4: fix overhead calculation to account for the reserved gdt blocksfs/ext4/super.c+3 -10 replies
42/53ext4: force overhead calculation if the s_overhead_cluster makes no sensefs/ext4/super.c+12 -30 replies
43/53staging: ion: Prevent incorrect reference counting behavourdrivers/staging/android/ion/ion.c+3 -00 replies
44/53block/compat_ioctl: fix range check in BLKGETSIZEblock/compat_ioctl.c+1 -10 replies
45/53ax25: add refcount in ax25_dev to avoid UAF bugsinclude/net/ax25.h net/ax25/af_ax25.c net/ax25/ax25_dev.c +1 more+25 -20 replies
46/53ax25: fix reference count leaks of ax25_devinclude/net/ax25.h net/ax25/af_ax25.c net/ax25/ax25_dev.c +1 more+41 -190 replies
47/53ax25: fix UAF bugs of net_device caused by rebinding operationnet/ax25/af_ax25.c+4 -10 replies
48/53ax25: Fix refcount leaks caused by ax25_cb_del()net/ax25/af_ax25.c+11 -30 replies
49/53ax25: fix UAF bug in ax25_send_control()net/ax25/af_ax25.c+4 -40 replies
50/53ax25: fix NPD bug in ax25_disconnectnet/ax25/af_ax25.c+1 -10 replies
51/53ax25: Fix NULL pointer dereferences in ax25 timersnet/ax25/af_ax25.c net/ax25/ax25_subr.c+16 -80 replies
52/53ax25: Fix UAF bugs in ax25 timersnet/ax25/af_ax25.c+5 -00 replies
53/53Revert "net: micrel: fix KS8851_MLL Kconfig"drivers/net/ethernet/micrel/Kconfig+0 -10 replies

Reviews trailers per patch

17 of 53 patches have a Reviewed-by or Acked-by.

PatchLiviu DudauArend van SprielJan KaraBenjamin HerrenschmidtEric DumazetJon HunterThierry RedingCodrin CiubotariuDmitry BaryshkovJamal Hadi SalimDan CarpenterMarc Kleine-BuddeEelco ChaudronNaama MeirJames HutchinsonMadhavan SrinivasanHans de GoedeTom ZanussiMark RutlandClaudiu BezneaBart Van AsscheChaitanya KulkarniGuenter RoeckShuah KhanHulk RobotLinux Kernel Functional TestingSudip Mukherjee
SeriesT-b T-b T-b T-b T-b T-b
1/53T-b
2/53
3/53R-b T-b
4/53
5/53
6/53
7/53
8/53
9/53R-b R-b
10/53R-b
11/53
12/53
13/53R-b
14/53
15/53A-b
16/53
17/53A-b
18/53T-b R-b A-b
19/53R-b
20/53
21/53
22/53
23/53
24/53A-b
25/53
26/53R-b
27/53T-b R-b
28/53
29/53
30/53
31/53
32/53
33/53R-b
34/53A-b
35/53
36/53T-b T-b
37/53
38/53A-b
39/53R-b
40/53
41/53
42/53
43/53
44/53R-b R-b
45/53
46/53R-b
47/53
48/53
49/53
50/53
51/53
52/53
53/53

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 27 reviewers.

Read the v1 thread

Cover letter [PATCH 4.19 00/53] 4.19.240-rc1 review

This is the start of the stable review cycle for the 4.19.240 release. There are 53 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 28 Apr 2022 08:17:22 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.240-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.19.240-rc1

Marek Vasut <[email protected]>
Revert "net: micrel: fix KS8851_MLL Kconfig"

Duoming Zhou <[email protected]>
ax25: Fix UAF bugs in ax25 timers

Duoming Zhou <[email protected]>
ax25: Fix NULL pointer dereferences in ax25 timers

Duoming Zhou <[email protected]>
ax25: fix NPD bug in ax25_disconnect

Duoming Zhou <[email protected]>
ax25: fix UAF bug in ax25_send_control()

Duoming Zhou <[email protected]>
ax25: Fix refcount leaks caused by ax25_cb_del()

Duoming Zhou <[email protected]>
ax25: fix UAF bugs of net_device caused by rebinding operation

Duoming Zhou <[email protected]>
ax25: fix reference count leaks of ax25_dev

Duoming Zhou <[email protected]>
ax25: add refcount in ax25_dev to avoid UAF bugs

Khazhismel Kumykov <[email protected]>
block/compat_ioctl: fix range check in BLKGETSIZE

Lee Jones <[email protected]>
staging: ion: Prevent incorrect reference counting behavour

Theodore Ts'o <[email protected]>
ext4: force overhead calculation if the s_overhead_cluster makes no sense

Theodore Ts'o <[email protected]>
ext4: fix overhead calculation to account for the reserved gdt blocks

Tadeusz Struk <[email protected]>
ext4: limit length to bitmap_maxbytes - blocksize in punch_hole

Ye Bin <[email protected]>
ext4: fix symlink file size not match to file content

Rob Herring <[email protected]>
arm_pmu: Validate single/group leader events

Sergey Matyukevich <[email protected]>
ARC: entry: fix syscall_trace_exit argument

Sasha Neftin <[email protected]>
e1000e: Fix possible overflow in LTR decoding

Xiaomeng Tong <[email protected]>
ASoC: soc-dapm: fix two incorrect uses of list iterator

Paolo Valerio <[email protected]>
openvswitch: fix OOB access in reserve_sfa_size()

Athira Rajeev <[email protected]>
powerpc/perf: Fix power9 event alternatives

Dave Stevenson <[email protected]>
drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare

Dave Stevenson <[email protected]>
drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised

Xiaomeng Tong <[email protected]>
dma: at_xdmac: fix a missing check on list iterator

Zheyu Ma <[email protected]>
ata: pata_marvell: Check the 'bmdma_addr' beforing reading

Mikulas Patocka <[email protected]>
stat: fix inconsistency between struct stat and struct compat_stat

Tomas Melin <[email protected]>
net: macb: Restart tx only if queue pointer is lagging

Xiaoke Wang <[email protected]>
drm/msm/mdp5: check the return of kzalloc()

Lv Ruyi <[email protected]>
dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()

Borislav Petkov <[email protected]>
brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant

Borislav Petkov <[email protected]>
mt76: Fix undefined behavior due to shift overflowing the constant

David Howells <[email protected]>
cifs: Check the IOCB_DIRECT flag, not O_DIRECT

Hongbin Wang <[email protected]>
vxlan: fix error return code in vxlan_fdb_append

Borislav Petkov <[email protected]>
ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant

Jiapeng Chong <[email protected]>
platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative

Sameer Pujar <[email protected]>
reset: tegra-bpmp: Restore Handle errors in BPMP response

Kees Cook <[email protected]>
ARM: vexpress/spc: Avoid negative array index when !SMP

Eric Dumazet <[email protected]>
netlink: reset network and mac headers in netlink_dump()

Eric Dumazet <[email protected]>
net/sched: cls_u32: fix possible leak in u32_init_knode()

Hangbin Liu <[email protected]>
net/packet: fix packet_sock xmit return value checking

David Howells <[email protected]>
rxrpc: Restore removed timer deletion

Miaoqian Lin <[email protected]>
dmaengine: imx-sdma: Fix error checking in sdma_event_remap

Miaoqian Lin <[email protected]>
ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component

Mark Brown <[email protected]>
ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek

Kuniyuki Iwashima <[email protected]>
tcp: Fix potential use-after-free due to double kfree()

Ricardo Dias <[email protected]>
tcp: fix race condition when creating child sockets from syncookies

Takashi Iwai <[email protected]>
ALSA: usb-audio: Clear MIDI port active flag after draining

Bob Peterson <[email protected]>
gfs2: assign rgrp glock before compute_bitstructs

Mikulas Patocka <[email protected]>
dm integrity: fix memory corruption when tag_size is less than digest size

Hangyu Hua <[email protected]>
can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path

Daniel Bristot de Oliveira <[email protected]>
tracing: Dump stacktrace trigger to the corresponding instance

Xiongwei Song <[email protected]>
mm: page_alloc: fix building error on -Werror=array-compare

Kees Cook <[email protected]>
etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead

-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/arc/kernel/entry.S                            |  1 +
 arch/arm/mach-vexpress/spc.c                       |  2 +-
 arch/powerpc/perf/power9-pmu.c                     |  8 +--
 arch/x86/include/asm/compat.h                      |  6 +-
 block/compat_ioctl.c                               |  2 +-
 drivers/ata/pata_marvell.c                         |  2 +
 drivers/dma/at_xdmac.c                             | 12 ++--
 drivers/dma/imx-sdma.c                             |  4 +-
 drivers/gpu/drm/msm/disp/mdp5/mdp5_plane.c         |  3 +
 .../gpu/drm/panel/panel-raspberrypi-touchscreen.c  | 13 ++++-
 drivers/md/dm-integrity.c                          |  7 ++-
 drivers/net/can/usb/usb_8dev.c                     | 30 +++++-----
 drivers/net/ethernet/cadence/macb_main.c           |  8 +++
 drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c |  8 ++-
 drivers/net/ethernet/intel/e1000e/ich8lan.c        |  4 +-
 drivers/net/ethernet/micrel/Kconfig                |  1 -
 drivers/net/vxlan.c                                |  4 +-
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |  2 +-
 drivers/net/wireless/mediatek/mt76/mt76x2_pci.c    |  2 +-
 drivers/perf/arm_pmu.c                             | 10 ++--
 drivers/platform/x86/samsung-laptop.c              |  2 -
 drivers/reset/tegra/reset-bpmp.c                   |  9 ++-
 drivers/staging/android/ion/ion.c                  |  3 +
 fs/cifs/cifsfs.c                                   |  2 +-
 fs/ext4/inode.c                                    | 11 +++-
 fs/ext4/page-io.c                                  |  4 +-
 fs/ext4/super.c                                    | 19 ++++--
 fs/gfs2/rgrp.c                                     |  9 +--
 fs/stat.c                                          | 19 +++---
 include/linux/etherdevice.h                        |  5 +-
 include/net/ax25.h                                 | 12 ++++
 include/net/inet_hashtables.h                      |  5 +-
 kernel/trace/trace_events_trigger.c                |  9 ++-
 mm/page_alloc.c                                    |  2 +-
 net/ax25/af_ax25.c                                 | 38 +++++++++---
 net/ax25/ax25_dev.c                                | 28 +++++++--
 net/ax25/ax25_route.c                              | 13 ++++-
 net/ax25/ax25_subr.c                               | 20 +++++--
 net/dccp/ipv4.c                                    |  2 +-
 net/dccp/ipv6.c                                    |  2 +-
 net/ipv4/inet_connection_sock.c                    |  2 +-
 net/ipv4/inet_hashtables.c                         | 68 +++++++++++++++++++---
 net/ipv4/tcp_ipv4.c                                | 13 ++++-
 net/ipv6/tcp_ipv6.c                                | 13 ++++-
 net/netlink/af_netlink.c                           |  7 +++
 net/openvswitch/flow_netlink.c                     |  2 +-
 net/packet/af_packet.c                             | 13 +++--
 net/rxrpc/net_ns.c                                 |  2 +
 net/sched/cls_u32.c                                |  8 +--
 sound/soc/atmel/sam9g20_wm8731.c                   | 61 -------------------
 sound/soc/codecs/msm8916-wcd-digital.c             |  9 ++-
 sound/soc/soc-dapm.c                               |  6 +-
 sound/usb/midi.c                                   |  1 +
 sound/usb/usbaudio.h                               |  2 +-
 55 files changed, 359 insertions(+), 195 deletions(-)