This is the start of the stable review cycle for the 5.1.18 release.
There are 138 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sun 14 Jul 2019 12:14:36 PM UTC.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.1.18-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
linux-5.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 5.1.18-rc1
Arnd Bergmann <[email protected]>
staging: rtl8712: reduce stack usage, again
Dave Stevenson <[email protected]>
staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
Dave Stevenson <[email protected]>
staging: bcm2835-camera: Remove check of the number of buffers supplied
Dave Stevenson <[email protected]>
staging: bcm2835-camera: Ensure all buffers are returned on disable
Dave Stevenson <[email protected]>
staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
Colin Ian King <[email protected]>
staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
Nicolas Saenz Julienne <[email protected]>
staging: vchiq: make wait events interruptible
Nicolas Saenz Julienne <[email protected]>
staging: vchiq: revert "switch to wait_for_completion_killable"
Nicolas Saenz Julienne <[email protected]>
staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
Vishnu DASA <[email protected]>
VMCI: Fix integer overflow in VMCI handle arrays
Christian Lamparter <[email protected]>
carl9170: fix misuse of device driver API
Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: add missing vdda-supply
Todd Kjos <[email protected]>
binder: return errors from buffer copy functions
Todd Kjos <[email protected]>
binder: fix memory leak in error path
Nick Desaulniers <[email protected]>
lkdtm: support llvm-objcopy
Sebastian Parschauer <[email protected]>
HID: Add another Primax PIXART OEM mouse quirk
Sergio Paracuellos <[email protected]>
staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
Ian Abbott <[email protected]>
staging: comedi: amplc_pci230: fix null pointer deref on interrupt
Ajay Singh <[email protected]>
staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
Ian Abbott <[email protected]>
staging: comedi: dt282x: fix a null pointer deref on interrupt
Christian Lamparter <[email protected]>
p54: fix crash during initialization
Nikolaus Voss <[email protected]>
drivers/usb/typec/tps6598x.c: fix 4CC cmd write
Nikolaus Voss <[email protected]>
drivers/usb/typec/tps6598x.c: fix portinfo width
Yoshihiro Shimoda <[email protected]>
usb: renesas_usbhs: add a workaround for a race condition of workqueue
Martin Blumenstingl <[email protected]>
usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
Kiruthika Varadarajan <[email protected]>
usb: gadget: ether: Fix race between gether_disconnect and rx_submit
Fei Yang <[email protected]>
usb: gadget: f_fs: data_len used before properly set
Alan Stern <[email protected]>
p54usb: Fix race between disconnect and firmware loading
Oliver Barta <[email protected]>
Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
Jörgen Storvist <[email protected]>
USB: serial: option: add support for GosunCn ME3630 RNDIS mode
Andreas Fritiofson <[email protected]>
USB: serial: ftdi_sio: add ID for isodebug v1
Brian Norris <[email protected]>
mwifiex: Don't abort on small, spec-compliant vendor IEs
Takashi Iwai <[email protected]>
mwifiex: Abort at too short BSS descriptor element
Andy Lutomirski <[email protected]>
Documentation/admin: Remove the vsyscall=native documentation
Tim Chen <[email protected]>
Documentation: Add section about CPU vulnerabilities for Spectre
Dianzhang Chen <[email protected]>
x86/tls: Fix possible spectre-v1 in do_get_thread_area()
Dianzhang Chen <[email protected]>
x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
Song Liu <[email protected]>
perf header: Assign proper ff->ph in perf_event__synthesize_features()
Adrian Hunter <[email protected]>
perf thread-stack: Fix thread stack return from kernel for kernel-only case
John Garry <[email protected]>
perf pmu: Fix uncore PMU alias list for ARM64
Adrian Hunter <[email protected]>
perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
Adrian Hunter <[email protected]>
perf auxtrace: Fix itrace defaults for perf script
Adrian Hunter <[email protected]>
perf intel-pt: Fix itrace defaults for perf script
Douglas Anderson <[email protected]>
block, bfq: NULL out the bic when it's no longer valid
Vadim Sukhomlinov <[email protected]>
tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
Kees Cook <[email protected]>
tpm: Actually fail on TPM errors during "get random"
Kailang Yang <[email protected]>
ALSA: hda/realtek - Headphone Mic can't record after S3
Takashi Iwai <[email protected]>
ALSA: usb-audio: Fix parse of UAC2 Extension Units
Mauro Carvalho Chehab <[email protected]>
media: stv0297: fix frequency range limit
Steven J. Magnani <[email protected]>
udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
Hongjie Fang <[email protected]>
fscrypt: don't set policy for a dead directory
Benjamin Coddington <[email protected]>
NFS4: Only set creation opendata if O_CREAT
Andrew Jones <[email protected]>
KVM: arm/arm64: Fix emulated ptimer irq injection
Rasmus Villemoes <[email protected]>
net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
yangerkun <[email protected]>
quota: fix a problem about transfer quota
Christoph Hellwig <[email protected]>
powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
Nilesh Javali <[email protected]>
scsi: qedi: Check targetname while finding boot target information
Colin Ian King <[email protected]>
net: lio_core: fix potential sign-extension overflow on large shift
Xin Long <[email protected]>
ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
Dan Carpenter <[email protected]>
drm: return -EFAULT if copy_to_user() fails
Mauro S. M. Rodrigues <[email protected]>
bnx2x: Check if transceiver implements DDM before access
Mariusz Tkaczyk <[email protected]>
md: fix for divide error in status_resync
Mike Marciniszyn <[email protected]>
IB/hfi1: Handle port down properly in pio
Mike Marciniszyn <[email protected]>
IB/hfi1: Handle wakeup of orphaned QPs for pio
Mike Marciniszyn <[email protected]>
IB/hfi1: Wakeup QPs orphaned on wait list after flush
Mike Marciniszyn <[email protected]>
IB/hfi1: Use aborts to trigger RC throttling
Mike Marciniszyn <[email protected]>
IB/hfi1: Create inline to get extended headers
Wolfram Sang <[email protected]>
mmc: core: complete HS400 before checking status
Reinhard Speyerer <[email protected]>
qmi_wwan: extend permitted QMAP mux_id value range
Reinhard Speyerer <[email protected]>
qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
Reinhard Speyerer <[email protected]>
qmi_wwan: add support for QMAP padding in the RX path
Alexei Starovoitov <[email protected]>
bpf, x64: fix stack layout of JITed bpf code
Toshiaki Makita <[email protected]>
bpf, devmap: Add missing RCU read lock on flush
Toshiaki Makita <[email protected]>
bpf, devmap: Add missing bulk queue free
Toshiaki Makita <[email protected]>
bpf, devmap: Fix premature entry free on destroying map
Avraham Stern <[email protected]>
cfg80211: report measurement start TSF correctly
Mordechay Goodstein <[email protected]>
cfg80211: util: fix bit count off by one
Naftali Goldstein <[email protected]>
mac80211: do not start any work during reconfigure flow
Yibo Zhao <[email protected]>
mac80211: only warn once on chanctx_conf being NULL
Steve Longerbeam <[email protected]>
gpu: ipu-v3: image-convert: Fix image downsize coefficients
Steve Longerbeam <[email protected]>
gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
Steve Longerbeam <[email protected]>
gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
Bartosz Golaszewski <[email protected]>
ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
Bartosz Golaszewski <[email protected]>
ARM: davinci: da850-evm: call regulator_has_full_constraints()
Naveen N. Rao <[email protected]>
bpf: fix div64 overflow tests to properly detect errors
Vitaly Kuznetsov <[email protected]>
KVM: nVMX: use correct clean fields when copying from eVMCS
Ido Schimmel <[email protected]>
mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
Dave Martin <[email protected]>
KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
Ilya Maximets <[email protected]>
xdp: check device pointer before clearing
Anson Huang <[email protected]>
Input: imx_keypad - make sure keyboard can always wake up system
Nick Hu <[email protected]>
riscv: Fix udelay in RV32.
Qian Cai <[email protected]>
drm/vmwgfx: fix a warning due to missing dma_parms
Thomas Hellstrom <[email protected]>
drm/vmwgfx: Honor the sg list segment size limitation
Kevin Hilman <[email protected]>
RISC-V: defconfig: enable clocks, serial console
Heiko Carstens <[email protected]>
s390/boot: disable address-of-packed-member warning
Teresa Remmet <[email protected]>
ARM: dts: am335x phytec boards: Fix cd-gpios active level
Thomas Falcon <[email protected]>
ibmvnic: Fix unchecked return codes of memory allocations
Thomas Falcon <[email protected]>
ibmvnic: Refresh device multicast list after reset
Thomas Falcon <[email protected]>
ibmvnic: Do not close unopened driver during reset
Michael Schmitz <[email protected]>
net: phy: rename Asix Electronics PHY driver
Fabio Estevam <[email protected]>
can: flexcan: Remove unneeded registration message
YueHaibing <[email protected]>
can: af_can: Fix error path of can_init()
Eugen Hristev <[email protected]>
can: m_can: implement errata "Needless activation of MRAF irq"
Sean Nyekjaer <[email protected]>
can: mcp251x: add support for mcp25625
Sean Nyekjaer <[email protected]>
dt-bindings: can: mcp251x: add mcp25625 support
Guillaume Nault <[email protected]>
netfilter: ipv6: nf_defrag: accept duplicate fragments again
Srinivas Kandagatla <[email protected]>
soundwire: intel: set dai min and max channels correctly
Srinivas Kandagatla <[email protected]>
soundwire: stream: fix bad unlock balance
Krzesimir Nowak <[email protected]>
tools: bpftool: Fix JSON output when lookup fails
Guillaume Nault <[email protected]>
netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
Takashi Iwai <[email protected]>
mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
Jia-Ju Bai <[email protected]>
iwlwifi: Fix double-free problems in iwl_req_fw_callback()
Matt Chen <[email protected]>
iwlwifi: fix AX201 killer sku loading firmware issue
Shahar S Matityahu <[email protected]>
iwlwifi: clear persistence bit according to device family
Emmanuel Grumbach <[email protected]>
iwlwifi: fix load in rfkill flow for unified firmware
Luke Nelson <[email protected]>
bpf, riscv: clear high 32 bits for ALU32 add/sub/neg/lsh/rsh/arsh
Takashi Iwai <[email protected]>
mwifiex: Fix possible buffer overflows at parsing bss descriptor
Tony Lindgren <[email protected]>
ARM: dts: Drop bogus CLKSEL for timer12 on dra7
Pradeep Kumar Chitrapu <[email protected]>
mac80211: free peer keys before vif down in mesh
Thomas Pedersen <[email protected]>
mac80211: mesh: fix RCU warning
Melissa Wen <[email protected]>
staging:iio:ad7150: fix threshold mode config bit
Srinivas Kandagatla <[email protected]>
soundwire: stream: fix out of boundary access on port properties
John Fastabend <[email protected]>
bpf: sockmap, fix use after free from sleep in psock backlog workqueue
John Crispin <[email protected]>
mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
Jakub Sitnicki <[email protected]>
bpf: sockmap, restore sk_write_space when psock gets dropped
Björn Töpel <[email protected]>
bpf, riscv: clear target register high 32-bits for and/or/xor on ALU32
Matteo Croce <[email protected]>
samples, bpf: suppress compiler warning
Chang-Hsien Tsai <[email protected]>
samples, bpf: fix to change the buffer size for read()
Aaron Ma <[email protected]>
Input: elantech - enable middle button support on 2 ThinkPads
Florian Fainelli <[email protected]>
soc: bcm: brcmstb: biuctrl: Register writes require a barrier
Florian Fainelli <[email protected]>
soc: brcmstb: Fix error path for unsupported CPUs
Keerthy <[email protected]>
ARM: dts: dra71x: Disable usb4_tm target module
Keerthy <[email protected]>
ARM: dts: dra71x: Disable rtc target module
Keerthy <[email protected]>
ARM: dts: dra76x: Disable usb4_tm target module
Keerthy <[email protected]>
ARM: dts: dra76x: Disable rtc target module
Christophe Leroy <[email protected]>
crypto: talitos - rename alternative AEAD algos.
Eric Biggers <[email protected]>
crypto: lrw - use correct alignmask
Christophe Leroy <[email protected]>
crypto: talitos - fix hash on SEC1.
-------------
Diffstat:
Documentation/ABI/testing/sysfs-class-net-qmi | 4 +-
Documentation/admin-guide/hw-vuln/index.rst | 1 +
Documentation/admin-guide/hw-vuln/spectre.rst | 697 +++++++++++++++++++++
Documentation/admin-guide/kernel-parameters.txt | 6 -
.../bindings/net/can/microchip,mcp251x.txt | 1 +
Documentation/userspace-api/spec_ctrl.rst | 2 +
Makefile | 4 +-
arch/arm/boot/dts/am335x-pcm-953.dtsi | 2 +-
arch/arm/boot/dts/am335x-wega.dtsi | 2 +-
arch/arm/boot/dts/dra7-l4.dtsi | 4 +-
arch/arm/boot/dts/dra71-evm.dts | 2 +-
arch/arm/boot/dts/dra71x.dtsi | 17 +
arch/arm/boot/dts/dra76x.dtsi | 8 +
arch/arm/mach-davinci/board-da850-evm.c | 2 +
arch/arm/mach-davinci/devices-da8xx.c | 3 +
arch/powerpc/include/asm/page.h | 7 +
arch/powerpc/mm/mem.c | 3 +-
arch/powerpc/platforms/powermac/Kconfig | 1 +
arch/riscv/configs/defconfig | 4 +
arch/riscv/lib/delay.c | 2 +-
arch/riscv/net/bpf_jit_comp.c | 24 +
arch/s390/Makefile | 1 +
arch/x86/kernel/ptrace.c | 5 +-
arch/x86/kernel/tls.c | 9 +-
arch/x86/kvm/vmx/nested.c | 4 +-
arch/x86/net/bpf_jit_comp.c | 74 +--
block/bfq-iosched.c | 1 +
crypto/lrw.c | 2 +-
drivers/android/binder.c | 157 +++--
drivers/android/binder_alloc.c | 44 +-
drivers/android/binder_alloc.h | 22 +-
drivers/char/tpm/tpm-chip.c | 6 +-
drivers/char/tpm/tpm1-cmd.c | 7 +-
drivers/char/tpm/tpm2-cmd.c | 7 +-
drivers/crypto/talitos.c | 85 +--
drivers/gpu/drm/drm_bufs.c | 5 +-
drivers/gpu/drm/drm_ioc32.c | 5 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 3 +
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_buffer.c | 10 +-
drivers/gpu/ipu-v3/ipu-image-convert.c | 40 +-
drivers/hid/hid-ids.h | 1 +
drivers/hid/hid-quirks.c | 1 +
drivers/iio/adc/stm32-adc-core.c | 21 +-
drivers/infiniband/hw/hfi1/hfi.h | 31 +
drivers/infiniband/hw/hfi1/pio.c | 21 +-
drivers/infiniband/hw/hfi1/rc.c | 53 +-
drivers/infiniband/hw/hfi1/sdma.c | 17 +
drivers/infiniband/hw/hfi1/ud.c | 4 +-
drivers/infiniband/hw/hfi1/verbs.c | 14 +-
drivers/infiniband/hw/hfi1/verbs.h | 1 +
drivers/input/keyboard/imx_keypad.c | 18 +-
drivers/input/mouse/elantech.c | 2 +
drivers/md/md.c | 36 +-
drivers/media/dvb-frontends/stv0297.c | 2 +-
drivers/misc/lkdtm/Makefile | 3 +-
drivers/misc/vmw_vmci/vmci_context.c | 80 +--
drivers/misc/vmw_vmci/vmci_handle_array.c | 38 +-
drivers/misc/vmw_vmci/vmci_handle_array.h | 29 +-
drivers/mmc/core/mmc.c | 6 +-
drivers/net/can/flexcan.c | 3 -
drivers/net/can/m_can/m_can.c | 21 +
drivers/net/can/spi/Kconfig | 5 +-
drivers/net/can/spi/mcp251x.c | 25 +-
drivers/net/dsa/mv88e6xxx/global1_vtu.c | 2 +-
drivers/net/ethernet/8390/Kconfig | 2 +-
.../net/ethernet/broadcom/bnx2x/bnx2x_ethtool.c | 3 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 1 +
drivers/net/ethernet/cavium/liquidio/lio_core.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.c | 19 +-
drivers/net/ethernet/mellanox/mlxsw/reg.h | 2 +-
drivers/net/phy/Kconfig | 2 +-
drivers/net/phy/Makefile | 2 +-
drivers/net/phy/{asix.c => ax88796b.c} | 0
drivers/net/usb/qmi_wwan.c | 27 +-
drivers/net/wireless/ath/carl9170/usb.c | 39 +-
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 1 -
drivers/net/wireless/intel/iwlwifi/iwl-prph.h | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 23 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 2 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 17 +-
drivers/net/wireless/intel/iwlwifi/pcie/internal.h | 2 +-
drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 50 +-
drivers/net/wireless/intersil/p54/p54usb.c | 43 +-
drivers/net/wireless/intersil/p54/txrx.c | 5 +-
drivers/net/wireless/marvell/mwifiex/fw.h | 12 +-
drivers/net/wireless/marvell/mwifiex/ie.c | 47 +-
drivers/net/wireless/marvell/mwifiex/scan.c | 31 +-
drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 4 +-
drivers/net/wireless/marvell/mwifiex/wmm.c | 2 +-
drivers/scsi/qedi/qedi_main.c | 3 +
drivers/soc/bcm/brcmstb/biuctrl.c | 6 +-
drivers/soundwire/intel.c | 4 +-
drivers/soundwire/stream.c | 7 +-
drivers/staging/comedi/drivers/amplc_pci230.c | 3 +-
drivers/staging/comedi/drivers/dt282x.c | 3 +-
drivers/staging/fsl-dpaa2/ethsw/ethsw.c | 1 +
drivers/staging/iio/cdc/ad7150.c | 19 +-
drivers/staging/mt7621-pci/pci-mt7621.c | 2 +-
drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 157 +++--
.../vc04_services/bcm2835-camera/bcm2835-camera.c | 43 +-
.../vc04_services/bcm2835-camera/mmal-vchiq.c | 32 +-
.../vc04_services/bcm2835-camera/mmal-vchiq.h | 3 +
.../interface/vchiq_arm/vchiq_2835_arm.c | 2 +-
.../vc04_services/interface/vchiq_arm/vchiq_arm.c | 21 +-
.../vc04_services/interface/vchiq_arm/vchiq_core.c | 31 +-
.../vc04_services/interface/vchiq_arm/vchiq_util.c | 6 +-
drivers/staging/wilc1000/wilc_netdev.c | 12 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/usb/dwc2/core.c | 2 +-
drivers/usb/gadget/function/f_fs.c | 3 +-
drivers/usb/gadget/function/u_ether.c | 6 +-
drivers/usb/renesas_usbhs/fifo.c | 34 +-
drivers/usb/serial/ftdi_sio.c | 1 +
drivers/usb/serial/ftdi_sio_ids.h | 6 +
drivers/usb/serial/option.c | 1 +
drivers/usb/typec/tps6598x.c | 6 +-
fs/crypto/policy.c | 2 +
fs/nfs/nfs4proc.c | 20 +-
fs/quota/dquot.c | 4 +-
fs/udf/inode.c | 93 ++-
include/linux/skmsg.h | 2 +
include/linux/vmw_vmci_defs.h | 11 +-
include/net/ip6_tunnel.h | 9 +-
include/uapi/linux/usb/audio.h | 37 ++
kernel/bpf/devmap.c | 9 +-
net/can/af_can.c | 24 +-
net/core/skbuff.c | 1 +
net/ipv6/netfilter/nf_conntrack_reasm.c | 22 +-
net/mac80211/ieee80211_i.h | 9 +-
net/mac80211/mesh.c | 6 +-
net/mac80211/util.c | 4 +
net/wireless/pmsr.c | 4 +-
net/wireless/util.c | 4 +-
net/xdp/xdp_umem.c | 11 +-
samples/bpf/bpf_load.c | 2 +-
samples/bpf/task_fd_query_user.c | 2 +-
sound/pci/hda/patch_realtek.c | 2 +-
sound/usb/mixer.c | 16 +-
tools/bpf/bpftool/map.c | 2 +
tools/perf/Documentation/intel-pt.txt | 10 +-
tools/perf/util/auxtrace.c | 3 +-
tools/perf/util/header.c | 1 +
tools/perf/util/intel-pt.c | 3 +-
tools/perf/util/pmu.c | 28 +-
tools/perf/util/thread-stack.c | 30 +-
.../testing/selftests/bpf/verifier/div_overflow.c | 14 +-
virt/kvm/arm/arch_timer.c | 5 +-
virt/kvm/arm/vgic/vgic-its.c | 1 +
149 files changed, 2097 insertions(+), 775 deletions(-)
