Skip to content

6.6.47-rc1 review

Greg Kroah-Hartman linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest67 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/67exec: Fix ToCToU between perm check and set-uid/gid usagefs/exec.c+7 -10 replies
2/67ASoC: topology: Clean up route loadingsound/soc/soc-topology.c+8 -180 replies
3/67ASoC: topology: Fix route memory corruptionsound/soc/soc-topology.c+3 -90 replies
4/67LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.harch/loongarch/include/uapi/asm/unistd.h+1 -00 replies
5/67NFSD: Rewrite synopsis of nfsd_percpu_counters_init()fs/nfsd/stats.c fs/nfsd/stats.h+4 -40 replies
6/67NFSD: Fix frame size warning in svc_export_parse()fs/nfsd/export.c fs/nfsd/export.h fs/nfsd/stats.h+31 -170 replies
7/67sunrpc: dont change ->sv_stats if it doesnt existnet/sunrpc/svc.c+18 -90 replies
8/67nfsd: stop setting ->pg_stats for unused statsfs/lockd/svc.c fs/nfs/callback.c fs/nfsd/nfssvc.c+0 -110 replies
9/67sunrpc: pass in the sv_stats struct through svc_create_pooledfs/nfsd/nfssvc.c include/linux/sunrpc/svc.h net/sunrpc/svc.c+12 -70 replies
10/67sunrpc: remove ->pg_stats from svc_programfs/nfsd/nfssvc.c include/linux/sunrpc/svc.h+0 -20 replies
11/67sunrpc: use the struct net as the svc proc privatenet/sunrpc/stats.c+1 -10 replies
12/67nfsd: rename NFSD_NET_* to NFSD_STATS_*fs/nfsd/netns.h fs/nfsd/nfscache.c fs/nfsd/stats.h+7 -70 replies
13/67nfsd: expose /proc/net/sunrpc/nfsd in net namespacesfs/nfsd/nfsctl.c fs/nfsd/stats.c fs/nfsd/stats.h+15 -200 replies
14/67nfsd: make all of the nfsd stats per-network namespacefs/nfsd/cache.h fs/nfsd/netns.h fs/nfsd/nfs4proc.c +7 more+69 -960 replies
15/67nfsd: remove nfsd_stats, make th_cnt a global counterfs/nfsd/nfsd.h fs/nfsd/nfssvc.c fs/nfsd/stats.c +1 more+5 -100 replies
16/67nfsd: make svc_stat per-network namespace instead of globalfs/nfsd/netns.h fs/nfsd/nfsctl.c fs/nfsd/nfssvc.c +2 more+11 -90 replies
17/67mm: gup: stop abusing try_grab_foliomm/gup.c mm/huge_memory.c mm/hugetlb.c +1 more+135 -1280 replies
18/67nvme/pci: Add APST quirk for Lenovo N60z laptopdrivers/nvme/host/pci.c+7 -00 replies
19/67genirq/cpuhotplug: Skip suspended interrupts when restoring affinitykernel/irq/cpuhotplug.c kernel/irq/manage.c+16 -70 replies
20/67genirq/cpuhotplug: Retry with cpu_online_mask when migration failskernel/irq/cpuhotplug.c+16 -00 replies
21/67cgroup: Make operations on the cgroup root_list RCU safeinclude/linux/cgroup-defs.h kernel/cgroup/cgroup-internal.h kernel/cgroup/cgroup.c+19 -80 replies
22/67tcp_metrics: optimize tcp_metrics_flush_all()net/ipv4/tcp_metrics.c+5 -20 replies
23/67wifi: mac80211: take wiphy lock for MAC addr changenet/mac80211/iface.c+16 -30 replies
24/67wifi: mac80211: fix change_address deadlock during unregisternet/mac80211/iface.c+8 -00 replies
25/67fs: Convert to bdev_open_by_dev()fs/cramfs/inode.c fs/romfs/super.c fs/super.c +1 more+12 -80 replies
26/67jfs: Convert to bdev_open_by_dev()fs/jfs/jfs_logmgr.c fs/jfs/jfs_logmgr.h fs/jfs/jfs_mount.c+18 -160 replies
27/67jfs: fix log->bdev_handle null ptr deref in lbmStartIOfs/jfs/jfs_logmgr.c+5 -10 replies
28/67net: dont dump stack on queue timeoutnet/sched/sch_generic.c+3 -20 replies
29/67jfs: fix shift-out-of-bounds in dbJoinfs/jfs/jfs_dmap.c+7 -13 replies
30/67squashfs: squashfs_read_data need to check if the length is 0fs/squashfs/block.c+1 -10 replies
31/67Squashfs: fix variable overflow triggered by sysbotfs/squashfs/file.c fs/squashfs/file_direct.c+5 -40 replies
32/67reiserfs: fix uninit-value in comp_keysfs/reiserfs/stree.c+1 -10 replies
33/67erofs: avoid debugging output for (de)compressed datafs/erofs/decompressor.c+1 -70 replies
34/67net: tls, add test to capture error on large splicetools/testing/selftests/net/tls.c+14 -00 replies
35/67Input: bcm5974 - check endpoint type before starting trafficdrivers/input/mouse/bcm5974.c+20 -00 replies
36/67quota: Detect loops in quota treefs/quota/quota_tree.c fs/quota/quota_v2.c+105 -380 replies
37/67net:rds: Fix possible deadlock in rds_message_putnet/rds/recv.c+11 -20 replies
38/67net: sctp: fix skb leak in sctp_inq_free()net/sctp/inqueue.c+10 -40 replies
39/67pppoe: Fix memory leak in pppoe_sendmsg()drivers/net/ppp/pppoe.c+9 -140 replies
40/67bpf: Replace bpf_lpm_trie_key 0-length array with flexible arrayDocumentation/bpf/map_lpm_trie.rst include/uapi/linux/bpf.h kernel/bpf/lpm_trie.c +5 more+59 -250 replies
41/67bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.kernel/bpf/lpm_trie.c+9 -40 replies
42/67fs: Annotate struct file_handle with __counted_by() and use struct_size()fs/fhandle.c include/linux/fs.h+4 -40 replies
43/67mISDN: fix MISDN_TIME_STAMP handlingdrivers/isdn/mISDN/socket.c+5 -50 replies
44/67net: add copy_safe_from_sockptr() helperinclude/linux/sockptr.h+25 -00 replies
45/67nfc: llcp: fix nfc_llcp_setsockopt() unsafe copiesnet/nfc/llcp_sock.c+6 -60 replies
46/67Bluetooth: RFCOMM: Fix not validating setsockopt user inputnet/bluetooth/rfcomm/sock.c+5 -90 replies
47/67ext4: fold quota accounting into ext4_xattr_inode_lookup_create()fs/ext4/xattr.c+24 -260 replies
48/67ext4: do not create EA inode under buffer lockfs/ext4/xattr.c+53 -600 replies
49/67mm/page_table_check: support userfault wr-protect entriesDocumentation/mm/page_table_check.rst arch/x86/include/asm/pgtable.h mm/page_table_check.c+39 -180 replies
50/67wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM valuesnet/wireless/nl80211.c+5 -10 replies
51/67ext4: convert ext4_da_do_write_end() to take a foliofs/ext4/inode.c+10 -90 replies
52/67ext4: sanity check for NULL pointer after ext4_force_shutdownfs/buffer.c fs/ext4/inode.c+7 -00 replies
53/67bpf, net: Use DEV_STAT_INC()net/core/filter.c+4 -40 replies
54/67f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GCfs/f2fs/gc.c+10 -00 replies
55/67f2fs: fix to cover read extent cache access with lockfs/f2fs/extent_cache.c fs/f2fs/f2fs.h fs/f2fs/inode.c+25 -350 replies
56/67fou: remove warn in gue_gro_receive on unsupported protocolnet/ipv4/fou_core.c+1 -10 replies
57/67jfs: fix null ptr deref in dtInsertEntryfs/jfs/jfs_dtree.c+2 -00 replies
58/67jfs: Fix shift-out-of-bounds in dbDiscardAGfs/jfs/jfs_dmap.c+2 -00 replies
59/67fs/ntfs3: Do copy_to_user out of run_lockfs/ntfs3/frecord.c+72 -30 replies
60/67ALSA: usb: Fix UBSAN warning in parse_audio_unit()sound/usb/mixer.c+7 -00 replies
61/67binfmt_flat: Fix corruption when not offsetting data startfs/binfmt_flat.c+3 -10 replies
62/67Revert "jfs: fix shift-out-of-bounds in dbJoin"fs/jfs/jfs_dmap.c+1 -70 replies
63/67Revert "Input: bcm5974 - check endpoint type before starting traffic"drivers/input/mouse/bcm5974.c+0 -200 replies
64/67mm/debug_vm_pgtable: drop RANDOM_ORVALUE trickmm/debug_vm_pgtable.c+5 -260 replies
65/67cgroup: Move rcu_head up near the top of cgroup_rootinclude/linux/cgroup-defs.h+4 -40 replies
66/67KVM: arm64: Dont defer TLB invalidation when zapping table entriesarch/arm64/kvm/hyp/pgtable.c+3 -10 replies
67/67KVM: arm64: Dont pass a TLBI level hint when zapping table entriesarch/arm64/kvm/hyp/pgtable.c+7 -50 replies

Reviews trailers per patch

34 of 67 patches have a Reviewed-by or Acked-by.

PatchMarco VanottiJeff LaytonCezary Rojewski[email protected]Jan KaraJiri PirkoEric DumazetJamal Hadi SalimPhillip Lougher[email protected][email protected]Yue HuJakub Kicinski[email protected]Xin LongGuillaume NaultGustavo A. R. SilvaKrzysztof KozlowskiPasha TatashinDavid AhernNeal CardwellChristoph HellwigChristian BraunerDave KleikampDamien Le MoalGreg UngererMikhail GavrilovDavid HildenbrandYafang ShaoYosry AhmedMichal KoutnýShaoqin HuangMarc ZyngierChromeOS CQ TestPeter SchneiderFlorian FainelliLinux Kernel Functional TestingMark BrownJon HunterRon Economos
SeriesT-b T-b T-b T-b T-b T-b T-b
1/67T-b
2/67R-b
3/67
4/67
5/67R-b
6/67R-b
7/67R-b
8/67R-b
9/67R-b
10/67R-b
11/67R-b
12/67R-b
13/67R-b
14/67R-b
15/67R-b
16/67R-b
17/67
18/67
19/67
20/67
21/67
22/67R-b A-b
23/67
24/67
25/67A-b R-b
26/67A-b R-b A-b
27/67Reported-and-tested-by R-b
28/67R-b R-b R-b
29/67
30/67R-b
31/67
32/67Reported-and-tested-by
33/67Reported-and-tested-by R-b
34/67R-b
35/67Reported-and-tested-by
36/67
37/67
38/67A-b
39/67R-b
40/67A-b
41/67
42/67R-b
43/67
44/67
45/67R-b
46/67
47/67
48/67
49/67R-b
50/67
51/67R-b
52/67
53/67
54/67
55/67
56/67R-b
57/67
58/67
59/67
60/67
61/67R-b A-b
62/67
63/67
64/67R-b T-b A-b
65/67A-b R-b R-b
66/67R-b R-b
67/67R-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 40 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 00/67] 6.6.47-rc1 review

This is the start of the stable review cycle for the 6.6.47 release. There are 67 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 17 Aug 2024 13:18:17 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.47-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.47-rc1

Will Deacon <[email protected]>
KVM: arm64: Don't pass a TLBI level hint when zapping table entries

Will Deacon <[email protected]>
KVM: arm64: Don't defer TLB invalidation when zapping table entries

Waiman Long <[email protected]>
cgroup: Move rcu_head up near the top of cgroup_root

Peter Xu <[email protected]>
mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick

Javier Carrasco <[email protected]>
Revert "Input: bcm5974 - check endpoint type before starting traffic"

Dave Kleikamp <[email protected]>
Revert "jfs: fix shift-out-of-bounds in dbJoin"

Kees Cook <[email protected]>
binfmt_flat: Fix corruption when not offsetting data start

Takashi Iwai <[email protected]>
ALSA: usb: Fix UBSAN warning in parse_audio_unit()

Konstantin Komarov <[email protected]>
fs/ntfs3: Do copy_to_user out of run_lock

Pei Li <[email protected]>
jfs: Fix shift-out-of-bounds in dbDiscardAG

Edward Adam Davis <[email protected]>
jfs: fix null ptr deref in dtInsertEntry

Willem de Bruijn <[email protected]>
fou: remove warn in gue_gro_receive on unsupported protocol

Chao Yu <[email protected]>
f2fs: fix to cover read extent cache access with lock

Chao Yu <[email protected]>
f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC

yunshui <[email protected]>
bpf, net: Use DEV_STAT_INC()

Wojciech Gładysz <[email protected]>
ext4: sanity check for NULL pointer after ext4_force_shutdown

Matthew Wilcox (Oracle) <[email protected]>
ext4: convert ext4_da_do_write_end() to take a folio

Eric Dumazet <[email protected]>

    wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values

Peter Xu <[email protected]>
mm/page_table_check: support userfault wr-protect entries

Jan Kara <[email protected]>
ext4: do not create EA inode under buffer lock

Jan Kara <[email protected]>
ext4: fold quota accounting into ext4_xattr_inode_lookup_create()

Luiz Augusto von Dentz <[email protected]>
Bluetooth: RFCOMM: Fix not validating setsockopt user input

Eric Dumazet <[email protected]>
nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies

Eric Dumazet <[email protected]>
net: add copy_safe_from_sockptr() helper

Eric Dumazet <[email protected]>
mISDN: fix MISDN_TIME_STAMP handling

Gustavo A. R. Silva <[email protected]>
fs: Annotate struct file_handle with __counted_by() and use struct_size()

Alexei Starovoitov <[email protected]>
bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.

Kees Cook <[email protected]>
bpf: Replace bpf_lpm_trie_key 0-length array with flexible array

Gavrilov Ilia <[email protected]>
pppoe: Fix memory leak in pppoe_sendmsg()

Dmitry Antipov <[email protected]>
net: sctp: fix skb leak in sctp_inq_free()

Allison Henderson <[email protected]>
net:rds: Fix possible deadlock in rds_message_put

Jan Kara <[email protected]>
quota: Detect loops in quota tree

Javier Carrasco <[email protected]>
Input: bcm5974 - check endpoint type before starting traffic

John Fastabend <[email protected]>
net: tls, add test to capture error on large splice

Gao Xiang <[email protected]>
erofs: avoid debugging output for (de)compressed data

Edward Adam Davis <[email protected]>
reiserfs: fix uninit-value in comp_keys

Phillip Lougher <[email protected]>
Squashfs: fix variable overflow triggered by sysbot

Lizhi Xu <[email protected]>
squashfs: squashfs_read_data need to check if the length is 0

Manas Ghandat <[email protected]>
jfs: fix shift-out-of-bounds in dbJoin

Jakub Kicinski <[email protected]>
net: don't dump stack on queue timeout

Lizhi Xu <[email protected]>

    jfs: fix log->bdev_handle null ptr deref in lbmStartIO

Jan Kara <[email protected]>
jfs: Convert to bdev_open_by_dev()

Jan Kara <[email protected]>
fs: Convert to bdev_open_by_dev()

Johannes Berg <[email protected]>
wifi: mac80211: fix change_address deadlock during unregister

Johannes Berg <[email protected]>
wifi: mac80211: take wiphy lock for MAC addr change

Eric Dumazet <[email protected]>
tcp_metrics: optimize tcp_metrics_flush_all()

Yafang Shao <[email protected]>
cgroup: Make operations on the cgroup root_list RCU safe

Dongli Zhang <[email protected]>
genirq/cpuhotplug: Retry with cpu_online_mask when migration fails

David Stevens <[email protected]>
genirq/cpuhotplug: Skip suspended interrupts when restoring affinity

WangYuli <[email protected]>
nvme/pci: Add APST quirk for Lenovo N60z laptop

Yang Shi <[email protected]>
mm: gup: stop abusing try_grab_folio

Josef Bacik <[email protected]>
nfsd: make svc_stat per-network namespace instead of global

Josef Bacik <[email protected]>
nfsd: remove nfsd_stats, make th_cnt a global counter

Josef Bacik <[email protected]>
nfsd: make all of the nfsd stats per-network namespace

Josef Bacik <[email protected]>
nfsd: expose /proc/net/sunrpc/nfsd in net namespaces

Josef Bacik <[email protected]>
nfsd: rename NFSD_NET_* to NFSD_STATS_*

Josef Bacik <[email protected]>
sunrpc: use the struct net as the svc proc private

Josef Bacik <[email protected]>

    sunrpc: remove ->pg_stats from svc_program

Josef Bacik <[email protected]>
sunrpc: pass in the sv_stats struct through svc_create_pooled

Josef Bacik <[email protected]>

    nfsd: stop setting ->pg_stats for unused stats

Josef Bacik <[email protected]>

    sunrpc: don't change ->sv_stats if it doesn't exist

Chuck Lever <[email protected]>
NFSD: Fix frame size warning in svc_export_parse()

Chuck Lever <[email protected]>
NFSD: Rewrite synopsis of nfsd_percpu_counters_init()

Huacai Chen <[email protected]>
LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h

Amadeusz Sławiński <[email protected]>
ASoC: topology: Fix route memory corruption

Amadeusz Sławiński <[email protected]>
ASoC: topology: Clean up route loading

Kees Cook <[email protected]>
exec: Fix ToCToU between perm check and set-uid/gid usage

-------------

Diffstat:

 Documentation/bpf/map_lpm_trie.rst               |   2 +-
 Documentation/mm/page_table_check.rst            |   9 +-
 Makefile                                         |   4 +-
 arch/arm64/kvm/hyp/pgtable.c                     |  12 +-
 arch/loongarch/include/uapi/asm/unistd.h         |   1 +
 arch/x86/include/asm/pgtable.h                   |  18 +-
 drivers/isdn/mISDN/socket.c                      |  10 +-
 drivers/net/ppp/pppoe.c                          |  23 +--
 drivers/nvme/host/pci.c                          |   7 +
 fs/binfmt_flat.c                                 |   4 +-
 fs/buffer.c                                      |   2 +
 fs/cramfs/inode.c                                |   2 +-
 fs/erofs/decompressor.c                          |   8 +-
 fs/exec.c                                        |   8 +-
 fs/ext4/inode.c                                  |  24 ++-
 fs/ext4/xattr.c                                  | 155 +++++++-------
 fs/f2fs/extent_cache.c                           |  50 ++---
 fs/f2fs/f2fs.h                                   |   2 +-
 fs/f2fs/gc.c                                     |  10 +
 fs/f2fs/inode.c                                  |  10 +-
 fs/fhandle.c                                     |   6 +-
 fs/jfs/jfs_dmap.c                                |   2 +
 fs/jfs/jfs_dtree.c                               |   2 +
 fs/jfs/jfs_logmgr.c                              |  33 +--
 fs/jfs/jfs_logmgr.h                              |   2 +-
 fs/jfs/jfs_mount.c                               |   3 +-
 fs/lockd/svc.c                                   |   3 -
 fs/nfs/callback.c                                |   3 -
 fs/nfsd/cache.h                                  |   2 -
 fs/nfsd/export.c                                 |  32 ++-
 fs/nfsd/export.h                                 |   4 +-
 fs/nfsd/netns.h                                  |  25 ++-
 fs/nfsd/nfs4proc.c                               |   6 +-
 fs/nfsd/nfs4state.c                              |   3 +-
 fs/nfsd/nfscache.c                               |  40 +---
 fs/nfsd/nfsctl.c                                 |  16 +-
 fs/nfsd/nfsd.h                                   |   1 +
 fs/nfsd/nfsfh.c                                  |   3 +-
 fs/nfsd/nfssvc.c                                 |  14 +-
 fs/nfsd/stats.c                                  |  54 ++---
 fs/nfsd/stats.h                                  |  88 +++-----
 fs/nfsd/vfs.c                                    |   6 +-
 fs/ntfs3/frecord.c                               |  75 ++++++-
 fs/quota/quota_tree.c                            | 128 +++++++++---
 fs/quota/quota_v2.c                              |  15 +-
 fs/reiserfs/stree.c                              |   2 +-
 fs/romfs/super.c                                 |   2 +-
 fs/squashfs/block.c                              |   2 +-
 fs/squashfs/file.c                               |   3 +-
 fs/squashfs/file_direct.c                        |   6 +-
 fs/super.c                                       |  15 +-
 include/linux/cgroup-defs.h                      |   7 +-
 include/linux/fs.h                               |   3 +-
 include/linux/sockptr.h                          |  25 +++
 include/linux/sunrpc/svc.h                       |   5 +-
 include/uapi/linux/bpf.h                         |  19 +-
 kernel/bpf/lpm_trie.c                            |  33 +--
 kernel/cgroup/cgroup-internal.h                  |   3 +-
 kernel/cgroup/cgroup.c                           |  23 ++-
 kernel/irq/cpuhotplug.c                          |  27 ++-
 kernel/irq/manage.c                              |  12 +-
 mm/debug_vm_pgtable.c                            |  31 +--
 mm/gup.c                                         | 251 ++++++++++++-----------
 mm/huge_memory.c                                 |   6 +-
 mm/hugetlb.c                                     |   2 +-
 mm/internal.h                                    |   4 +-
 mm/page_table_check.c                            |  30 +++
 net/bluetooth/rfcomm/sock.c                      |  14 +-
 net/core/filter.c                                |   8 +-
 net/ipv4/fou_core.c                              |   2 +-
 net/ipv4/tcp_metrics.c                           |   7 +-
 net/mac80211/iface.c                             |  27 ++-
 net/nfc/llcp_sock.c                              |  12 +-
 net/rds/recv.c                                   |  13 +-
 net/sched/sch_generic.c                          |   5 +-
 net/sctp/inqueue.c                               |  14 +-
 net/sunrpc/stats.c                               |   2 +-
 net/sunrpc/svc.c                                 |  39 ++--
 net/wireless/nl80211.c                           |   6 +-
 samples/bpf/map_perf_test_user.c                 |   2 +-
 samples/bpf/xdp_router_ipv4_user.c               |   2 +-
 sound/soc/soc-topology.c                         |  32 +--
 sound/usb/mixer.c                                |   7 +
 tools/include/uapi/linux/bpf.h                   |  19 +-
 tools/testing/selftests/bpf/progs/map_ptr_kern.c |   2 +-
 tools/testing/selftests/bpf/test_lpm_map.c       |  18 +-
 tools/testing/selftests/net/tls.c                |  14 ++
 87 files changed, 987 insertions(+), 696 deletions(-)