[PATCH 4.4 033/137] mld, igmp: Fix reserved tailroom calculation

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Poirier [ Upstream commit 1837b2e2bcd23137766555a63867e649c0b637f0 ] The current reserved_tailroom calculation fails to take hlen and tlen into account. skb:

[PATCH 4.4 037/137] vxlan: fix missing options_len update on RX with collect metadata

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 4024fcf70556311521e7b6cf79fa50e16f31013a ] When signalling to metadata consumers that the metadata_dst entry carries additional GBP

[PATCH 4.4 058/137] farsync: fix off-by-one bug in fst_add_one

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann [ Upstream commit e725a66c0202b5f36c2f9d59d26a65c53bbf21f7 ] gcc-6 finds an out of bounds access in the fst_add_one function when calculating the end of the mmio

[PATCH 4.4 027/137] net: jme: fix suspend/resume on JMC260

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Diego Viola [ Upstream commit ee50c130c82175eaa0820c96b6d3763928af2241 ] The JMC260 network card fails to suspend/resume because the call to jme_start_irq() was too

[PATCH 4.5 122/124] HID: wacom: fix Bamboo ONE oops

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires commit 580549ef6b3e3fb3b958de490ca99f43a089a2cf upstream. Looks like recent changes in the Wacom driver made the Bamboo ONE crashes. The

[PATCH 4.4 061/137] tcp/dccp: remove obsolete WARN_ON() in icmp handlers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit e316ea62e3203d524ff0239a40c56d3a39ad1b5c ] Now SYN_RECV request sockets are installed in ehash table, an ICMP handler can find a request socket while another cpu

[PATCH 4.4 040/137] udp6: fix UDP/IPv6 encap resubmit path

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bill Sommerfeld [ Upstream commit 59dca1d8a6725a121dae6c452de0b2611d5865dc ] IPv4 interprets a negative return value from a protocol handler as a request to redispatch to a new protocol. In

[PATCH 4.4 030/137] net: qca_spi: clear IFF_TX_SKB_SHARING

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stefan Wahren [ Upstream commit a4690afeb0d2d7ba4d60dfa98a89f3bb1ce60ecd ] ether_setup sets IFF_TX_SKB_SHARING but this is not supported by qca_spi as it modifies the skb on xmit.

[PATCH 4.4 018/137] drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit f971f2263deaa4a441e377b385c11aee0f3b3f9a upstream. bug: https://bugs.freedesktop.org/show_bug.cgi?id=94692 Signed-off-by: Alex Deucher Signed-off-by: Greg Kroah-Hartman

[PATCH 4.4 033/137] mld, igmp: Fix reserved tailroom calculation

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Poirier [ Upstream commit 1837b2e2bcd23137766555a63867e649c0b637f0 ] The current reserved_tailroom calculation fails to take hlen and tlen into account. skb:

[PATCH 4.4 037/137] vxlan: fix missing options_len update on RX with collect metadata

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 4024fcf70556311521e7b6cf79fa50e16f31013a ] When signalling to metadata consumers that the metadata_dst entry carries additional GBP extension data for vxlan

[PATCH 4.4 058/137] farsync: fix off-by-one bug in fst_add_one

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann [ Upstream commit e725a66c0202b5f36c2f9d59d26a65c53bbf21f7 ] gcc-6 finds an out of bounds access in the fst_add_one function when calculating the end of the mmio area:

[PATCH 4.4 027/137] net: jme: fix suspend/resume on JMC260

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Diego Viola [ Upstream commit ee50c130c82175eaa0820c96b6d3763928af2241 ] The JMC260 network card fails to suspend/resume because the call to jme_start_irq() was too early, moving the call to

[PATCH 4.5 122/124] HID: wacom: fix Bamboo ONE oops

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires commit 580549ef6b3e3fb3b958de490ca99f43a089a2cf upstream. Looks like recent changes in the Wacom driver made the Bamboo ONE crashes. The tablet behaves as if it was a

[PATCH 4.4 041/137] tcp: fix tcpi_segs_in after connection establishment

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit a9d99ce28ed359d68cf6f3c1a69038aefedf6d6a ] If final packet (ACK) of 3WHS is lost, it appears we do not properly account the following

[PATCH 4.4 012/137] libnvdimm: fix smart data retrieval

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit 211291126698c8f047617565b2e2e7f822f86354 upstream. It appears that smart data retrieval has been broken the since the initial implementation. Fix

[PATCH 4.5 088/124] mac80211: avoid excessive stack usage in sta_info

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 0ef049dc1167fe834d0ad5d63f89eddc5c70f6e4 upstream. When CONFIG_OPTIMIZE_INLINING is set, the sta_info_insert_finish function consumes more stack than

[PATCH 4.4 012/137] libnvdimm: fix smart data retrieval

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit 211291126698c8f047617565b2e2e7f822f86354 upstream. It appears that smart data retrieval has been broken the since the initial implementation. Fix the payload size to be

[PATCH 4.5 088/124] mac80211: avoid excessive stack usage in sta_info

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 0ef049dc1167fe834d0ad5d63f89eddc5c70f6e4 upstream. When CONFIG_OPTIMIZE_INLINING is set, the sta_info_insert_finish function consumes more stack than normally, exceeding

[PATCH 4.4 041/137] tcp: fix tcpi_segs_in after connection establishment

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit a9d99ce28ed359d68cf6f3c1a69038aefedf6d6a ] If final packet (ACK) of 3WHS is lost, it appears we do not properly account the following incoming segment into

[PATCH 4.4 003/137] parisc: Avoid function pointers for kernel exception routines

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit e3893027a300927049efc1572f852201eb785142 upstream. We want to avoid the kernel module loader to create function pointers for the kernel fixup routines of

[PATCH 4.5 062/124] tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 5a5abb1fa3b05dd6aa821525832644c1e7d2905f ] Sasha Levin reported a suspicious rcu_dereference_protected() warning found while fuzzing

[PATCH 4.5 101/124] iio: gyro: bmg160: fix buffer read values

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit b475c59b113db1e66eb9527ffdec3c5241c847e5 upstream. When reading gyroscope axes using iio buffers, the values returned are always 0. In the interrupt

[PATCH 4.5 106/124] ext4 crypto: use dget_parent() in ext4_d_revalidate()

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 3d43bcfef5f0548845a425365011c499875491b0 upstream. This avoids potential problems caused by a race where the inode gets renamed out from its parent

[PATCH 4.5 083/124] [media] v4l: vsp1: Set the SRU CTRL0 register when starting the stream

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Laurent Pinchart commit f6acfcdc5b8cdc9ddd53a459361820b9efe958c4 upstream. Commit 58f896d859ce ("[media] v4l: vsp1: sru: Make the intensity

[PATCH 4.5 057/124] xfrm: Fix crash observed during device unregistration and decryption

4.5-stable review patch. If anyone has any objections, please let me know. -- From: "subas...@codeaurora.org" [ Upstream commit 071d36bf21bcc837be00cea55bcef8d129e7f609 ] A crash is observed when a decrypted packet is processed in receive path.

[PATCH 4.5 089/124] mac80211: fix ibss scan parameters

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Sara Sharon commit d321cd014e51baab475efbdec468255b9e0ec822 upstream. When joining IBSS a full scan should be initiated in order to search for existing cell, unless the

[PATCH 4.5 079/124] gpio: pxa: fix legacy non pinctrl aware builds

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Robert Jarzmik commit c4e5ffb6f224c1a4a9eaad82b19645ec22d1b24f upstream. In legacy pxa builds, ie. non device-tree and platform-data only builds, pinctrl is not yet

[PATCH 4.5 060/124] bridge: Allow set bridge ageing time when switchdev disabled

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Haishuang Yan [ Upstream commit 5e263f712691615fb802f06c98d7638c378f5d11 ] When NET_SWITCHDEV=n, switchdev_port_attr_set will return -EOPNOTSUPP, we should

[PATCH 4.4 005/137] parisc: Unbreak handling exceptions from kernel modules

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit 2ef4dfd9d9f288943e249b78365a69e3ea3ec072 upstream. Handling exceptions from modules never worked on parisc. It was just masked by the fact that exceptions

[PATCH 4.4 003/137] parisc: Avoid function pointers for kernel exception routines

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit e3893027a300927049efc1572f852201eb785142 upstream. We want to avoid the kernel module loader to create function pointers for the kernel fixup routines of get_user() and

[PATCH 4.5 062/124] tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann [ Upstream commit 5a5abb1fa3b05dd6aa821525832644c1e7d2905f ] Sasha Levin reported a suspicious rcu_dereference_protected() warning found while fuzzing with trinity that is

[PATCH 4.5 101/124] iio: gyro: bmg160: fix buffer read values

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit b475c59b113db1e66eb9527ffdec3c5241c847e5 upstream. When reading gyroscope axes using iio buffers, the values returned are always 0. In the interrupt handler, the return

[PATCH 4.5 106/124] ext4 crypto: use dget_parent() in ext4_d_revalidate()

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 3d43bcfef5f0548845a425365011c499875491b0 upstream. This avoids potential problems caused by a race where the inode gets renamed out from its parent directory and the

[PATCH 4.5 083/124] [media] v4l: vsp1: Set the SRU CTRL0 register when starting the stream

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Laurent Pinchart commit f6acfcdc5b8cdc9ddd53a459361820b9efe958c4 upstream. Commit 58f896d859ce ("[media] v4l: vsp1: sru: Make the intensity controllable during streaming") refactored the

[PATCH 4.5 060/124] bridge: Allow set bridge ageing time when switchdev disabled

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Haishuang Yan [ Upstream commit 5e263f712691615fb802f06c98d7638c378f5d11 ] When NET_SWITCHDEV=n, switchdev_port_attr_set will return -EOPNOTSUPP, we should ignore this error code and continue

[PATCH 4.4 005/137] parisc: Unbreak handling exceptions from kernel modules

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit 2ef4dfd9d9f288943e249b78365a69e3ea3ec072 upstream. Handling exceptions from modules never worked on parisc. It was just masked by the fact that exceptions from modules

[PATCH 4.5 057/124] xfrm: Fix crash observed during device unregistration and decryption

4.5-stable review patch. If anyone has any objections, please let me know. -- From: "subas...@codeaurora.org" [ Upstream commit 071d36bf21bcc837be00cea55bcef8d129e7f609 ] A crash is observed when a decrypted packet is processed in receive path. get_rps_cpus() tries to

[PATCH 4.5 089/124] mac80211: fix ibss scan parameters

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Sara Sharon commit d321cd014e51baab475efbdec468255b9e0ec822 upstream. When joining IBSS a full scan should be initiated in order to search for existing cell, unless the fixed_channel parameter

[PATCH 4.5 079/124] gpio: pxa: fix legacy non pinctrl aware builds

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Robert Jarzmik commit c4e5ffb6f224c1a4a9eaad82b19645ec22d1b24f upstream. In legacy pxa builds, ie. non device-tree and platform-data only builds, pinctrl is not yet available. As a

[PATCH 4.5 117/124] ALSA: hda - Fix regression of monitor_present flag in eld proc file

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Hyungwon Hwang commit 023d8218ec0dfc30e11d4ec54f640e8f127d1fbe upstream. The commit [bd48128539ab: ALSA: hda - Fix forgotten HDMI monitor_present update] covered the

[PATCH 4.4 000/137] 4.4.8-stable review

This is the start of the stable review cycle for the 4.4.8 release. There are 137 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Apr 20 02:24:01 UTC 2016. Anything

[PATCH 4.5 087/124] mac80211: properly deal with station hashtable insert errors

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 62b14b241ca6f790a17ccd9dd9f62ce1b006d406 upstream. The original hand-implemented hash-table in mac80211 couldn't result in insertion errors, and

[PATCH 4.5 100/124] iio: accel: bmc150: fix endianness when reading axes

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit 2215f31dc6f88634c1916362e922b1ecdce0a6b3 upstream. For big endian platforms, reading the axes will return invalid values. The device stores each

[PATCH 4.4 004/137] parisc: Fix kernel crash with reversed copy_from_user()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit ef72f3110d8b19f4c098a0bff7ed7d11945e70c6 upstream. The kernel module testcase (lib/test_user_copy.c) exhibited a kernel crash on parisc if the parameters for

[PATCH 4.5 078/124] pinctrl: freescale: imx: fix bogus check of of_iomap() return value

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Vladimir Zapolskiy commit 9a4f424531dabd877259ae0071b8bcc4dede9eb5 upstream. On error path of_iomap() returns NULL, hence IS_ERR() check is invalid and may cause a NULL pointer

[PATCH 4.5 103/124] sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Martin K. Petersen commit f08bb1e0dbdd0297258d0b8cd4dbfcc057e57b2a upstream. During revalidate we check whether device capacity has changed before we decide whether

[PATCH 4.5 073/124] MIPS: Fix MSA ld unaligned failure cases

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit fa8ff601d72bad3078ddf5ef17a5547700d06908 upstream. Copying the content of an MSA vector from user memory may involve TLB faults & mapping in pages.

[PATCH 4.5 117/124] ALSA: hda - Fix regression of monitor_present flag in eld proc file

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Hyungwon Hwang commit 023d8218ec0dfc30e11d4ec54f640e8f127d1fbe upstream. The commit [bd48128539ab: ALSA: hda - Fix forgotten HDMI monitor_present update] covered the missing update of

[PATCH 4.4 000/137] 4.4.8-stable review

This is the start of the stable review cycle for the 4.4.8 release. There are 137 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Apr 20 02:24:01 UTC 2016. Anything

[PATCH 4.5 087/124] mac80211: properly deal with station hashtable insert errors

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Berg commit 62b14b241ca6f790a17ccd9dd9f62ce1b006d406 upstream. The original hand-implemented hash-table in mac80211 couldn't result in insertion errors, and while converting to

[PATCH 4.5 100/124] iio: accel: bmc150: fix endianness when reading axes

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit 2215f31dc6f88634c1916362e922b1ecdce0a6b3 upstream. For big endian platforms, reading the axes will return invalid values. The device stores each axis value in a 16 bit

[PATCH 4.4 004/137] parisc: Fix kernel crash with reversed copy_from_user()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit ef72f3110d8b19f4c098a0bff7ed7d11945e70c6 upstream. The kernel module testcase (lib/test_user_copy.c) exhibited a kernel crash on parisc if the parameters for copy_from_user

[PATCH 4.5 078/124] pinctrl: freescale: imx: fix bogus check of of_iomap() return value

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Vladimir Zapolskiy commit 9a4f424531dabd877259ae0071b8bcc4dede9eb5 upstream. On error path of_iomap() returns NULL, hence IS_ERR() check is invalid and may cause a NULL pointer dereference,

[PATCH 4.5 103/124] sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Martin K. Petersen commit f08bb1e0dbdd0297258d0b8cd4dbfcc057e57b2a upstream. During revalidate we check whether device capacity has changed before we decide whether to output disk information

[PATCH 4.5 073/124] MIPS: Fix MSA ld unaligned failure cases

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit fa8ff601d72bad3078ddf5ef17a5547700d06908 upstream. Copying the content of an MSA vector from user memory may involve TLB faults & mapping in pages. This will fail when

[PATCH 4.5 108/124] ext4: use file_dentry()

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit c0a37d48788475d0a2cf4fbfaa28559a9de612fc upstream. EXT4 may be used as lower layer of overlayfs and accessing f_path.dentry can lead to a crash. Fix

[PATCH 4.5 066/124] ip6_tunnel: set rtnl_link_ops before calling register_netdevice

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Thadeu Lima de Souza Cascardo [ Upstream commit b6ee376cb0b7fb4e7e07d6cd248bd40436fb9ba6 ] When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set before

[PATCH 4.4 007/137] ALSA: hda - Asus N750JV external subwoofer fixup

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bobi Mihalca commit 70cf2cbd685e218c3ffd105d9fb6cf0f8d767481 upstream. ASUS N750JV needs the same fixup as N550 for enabling its subwoofer. Bugzilla:

[PATCH 4.5 022/124] drm/udl: Use unlocked gem unreferencing

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Vetter commit 72b9ff0612ad8fc969b910cd00ac16b57a1a9ba4 upstream. For drm_gem_object_unreference callers are required to hold dev->struct_mutex, which these paths

[PATCH 4.5 064/124] ipv4: l2tp: fix a potential issue in l2tp_ip_recv

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Haishuang Yan [ Upstream commit 5745b8232e942abd5e16e85fa9b27cc21324acf0 ] pskb_may_pull() can change skb->data, so we have to load ptr/optr at the right

[PATCH 4.5 108/124] ext4: use file_dentry()

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit c0a37d48788475d0a2cf4fbfaa28559a9de612fc upstream. EXT4 may be used as lower layer of overlayfs and accessing f_path.dentry can lead to a crash. Fix by replacing direct

[PATCH 4.5 066/124] ip6_tunnel: set rtnl_link_ops before calling register_netdevice

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Thadeu Lima de Souza Cascardo [ Upstream commit b6ee376cb0b7fb4e7e07d6cd248bd40436fb9ba6 ] When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set before ip6_tnl_create2 is

[PATCH 4.4 007/137] ALSA: hda - Asus N750JV external subwoofer fixup

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bobi Mihalca commit 70cf2cbd685e218c3ffd105d9fb6cf0f8d767481 upstream. ASUS N750JV needs the same fixup as N550 for enabling its subwoofer. Bugzilla:

[PATCH 4.5 022/124] drm/udl: Use unlocked gem unreferencing

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Vetter commit 72b9ff0612ad8fc969b910cd00ac16b57a1a9ba4 upstream. For drm_gem_object_unreference callers are required to hold dev->struct_mutex, which these paths don't. Enforcing this

[PATCH 4.5 064/124] ipv4: l2tp: fix a potential issue in l2tp_ip_recv

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Haishuang Yan [ Upstream commit 5745b8232e942abd5e16e85fa9b27cc21324acf0 ] pskb_may_pull() can change skb->data, so we have to load ptr/optr at the right place. Signed-off-by: Haishuang Yan

[PATCH 4.5 034/124] net: dsa: Fix cleanup resources upon module removal

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Neil Armstrong [ Upstream commit 04761890a7cec6a1ff9aafd909004da4fe8059db ] The initial commit badly merged into the dsa_resume method instead of the dsa_remove_dst

[PATCH 4.5 002/124] PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Nicolai Stange commit e54358915d0a00399c11c2c23ae1be674cba188a upstream. Despite what the DocBook comment to pkcs7_validate_trust() says, the *_trusted argument is never

[PATCH 4.5 009/124] ALSA: hda - Asus N750JV external subwoofer fixup

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Bobi Mihalca commit 70cf2cbd685e218c3ffd105d9fb6cf0f8d767481 upstream. ASUS N750JV needs the same fixup as N550 for enabling its subwoofer. Bugzilla:

[PATCH 4.5 046/124] farsync: fix off-by-one bug in fst_add_one

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann [ Upstream commit e725a66c0202b5f36c2f9d59d26a65c53bbf21f7 ] gcc-6 finds an out of bounds access in the fst_add_one function when calculating the end of the mmio

[PATCH 4.5 005/124] parisc: Avoid function pointers for kernel exception routines

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit e3893027a300927049efc1572f852201eb785142 upstream. We want to avoid the kernel module loader to create function pointers for the kernel fixup routines of

[PATCH 4.5 036/124] sh_eth: advance rxdesc later in sh_eth_ring_format()

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Sergei Shtylyov [ Upstream commit d0ba913488dc8c55d1880f5ed34f096dc45fb05d ] Iff dma_map_single() fails, 'rxdesc' should point to the last filled RX

[PATCH 4.5 044/124] net: Fix use after free in the recvmmsg exit path

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Arnaldo Carvalho de Melo [ Upstream commit 34b88a68f26a75e4fded796f1a49c40f82234b7d ] The syzkaller fuzzer hit the following use-after-free: Call Trace: []

[PATCH 4.5 038/124] qlcnic: Fix mailbox completion handling during spurious interrupt

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Rajesh Borundia [ Upstream commit 819bfe764dceec2f6b4551768453f374b4c60443 ] o While the driver is in the middle of a MB completion processing and it receives a

[PATCH 4.5 009/124] ALSA: hda - Asus N750JV external subwoofer fixup

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Bobi Mihalca commit 70cf2cbd685e218c3ffd105d9fb6cf0f8d767481 upstream. ASUS N750JV needs the same fixup as N550 for enabling its subwoofer. Bugzilla:

[PATCH 4.5 046/124] farsync: fix off-by-one bug in fst_add_one

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann [ Upstream commit e725a66c0202b5f36c2f9d59d26a65c53bbf21f7 ] gcc-6 finds an out of bounds access in the fst_add_one function when calculating the end of the mmio area:

[PATCH 4.5 005/124] parisc: Avoid function pointers for kernel exception routines

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Helge Deller commit e3893027a300927049efc1572f852201eb785142 upstream. We want to avoid the kernel module loader to create function pointers for the kernel fixup routines of get_user() and

[PATCH 4.5 036/124] sh_eth: advance rxdesc later in sh_eth_ring_format()

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Sergei Shtylyov [ Upstream commit d0ba913488dc8c55d1880f5ed34f096dc45fb05d ] Iff dma_map_single() fails, 'rxdesc' should point to the last filled RX descriptor, so that it can be marked as

[PATCH 4.5 044/124] net: Fix use after free in the recvmmsg exit path

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Arnaldo Carvalho de Melo [ Upstream commit 34b88a68f26a75e4fded796f1a49c40f82234b7d ] The syzkaller fuzzer hit the following use-after-free: Call Trace: []

[PATCH 4.5 038/124] qlcnic: Fix mailbox completion handling during spurious interrupt

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Rajesh Borundia [ Upstream commit 819bfe764dceec2f6b4551768453f374b4c60443 ] o While the driver is in the middle of a MB completion processing and it receives a spurious MB interrupt, it is

[PATCH 4.5 034/124] net: dsa: Fix cleanup resources upon module removal

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Neil Armstrong [ Upstream commit 04761890a7cec6a1ff9aafd909004da4fe8059db ] The initial commit badly merged into the dsa_resume method instead of the dsa_remove_dst method. As consequence, the

[PATCH 4.5 002/124] PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Nicolai Stange commit e54358915d0a00399c11c2c23ae1be674cba188a upstream. Despite what the DocBook comment to pkcs7_validate_trust() says, the *_trusted argument is never set to false.

[PATCH 4.5 051/124] qlge: Fix receive packets drop.

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Manish Chopra [ Upstream commit 2c9a266afefe137bff06bbe0fc48b4d3b3cb348c ] When running small packets [length < 256 bytes] traffic, packets were being dropped due to

[PATCH 4.5 048/124] net: mvneta: Fix spinlock usage

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Gregory CLEMENT [ Upstream commit 1c2722a975fdb8c90bc6ba8570b7fb62db4e2e9c ] In the previous patch, the spinlock was not initialized. While it didn't cause

[PATCH 4.5 026/124] drm/amd/powerplay: fix segment fault issue in multi-display case.

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Rex Zhu commit f9e9c08e20d71cabef7d5c2a7eb75e1d953dad16 upstream. Signed-off-by: Rex Zhu Reviewed-by: Junwei Zhang Signed-off-by: Alex

[PATCH 4.5 042/124] bridge: allow zero ageing time

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Hemminger [ Upstream commit 4c656c13b254d598e83e586b7b4d36a2043dad85 ] This fixes a regression in the bridge ageing time caused by: commit c62987bbd8a1 ("bridge:

[PATCH 4.5 049/124] ppp: ensure file->private_data cant be overridden

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit e8e56ffd9d2973398b60ece1f1bebb8d67b4d032 ] Locking ppp_mutex must be done before dereferencing file->private_data, otherwise it could be

[PATCH 4.5 051/124] qlge: Fix receive packets drop.

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Manish Chopra [ Upstream commit 2c9a266afefe137bff06bbe0fc48b4d3b3cb348c ] When running small packets [length < 256 bytes] traffic, packets were being dropped due to invalid data in those

[PATCH 4.5 048/124] net: mvneta: Fix spinlock usage

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Gregory CLEMENT [ Upstream commit 1c2722a975fdb8c90bc6ba8570b7fb62db4e2e9c ] In the previous patch, the spinlock was not initialized. While it didn't cause any trouble yet it could be a

[PATCH 4.5 026/124] drm/amd/powerplay: fix segment fault issue in multi-display case.

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Rex Zhu commit f9e9c08e20d71cabef7d5c2a7eb75e1d953dad16 upstream. Signed-off-by: Rex Zhu Reviewed-by: Junwei Zhang Signed-off-by: Alex Deucher Signed-off-by: Greg Kroah-Hartman ---

[PATCH 4.5 042/124] bridge: allow zero ageing time

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Hemminger [ Upstream commit 4c656c13b254d598e83e586b7b4d36a2043dad85 ] This fixes a regression in the bridge ageing time caused by: commit c62987bbd8a1 ("bridge: push bridge setting

[PATCH 4.5 049/124] ppp: ensure file->private_data cant be overridden

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Guillaume Nault [ Upstream commit e8e56ffd9d2973398b60ece1f1bebb8d67b4d032 ] Locking ppp_mutex must be done before dereferencing file->private_data, otherwise it could be modified before

[PATCH 4.5 019/124] compiler-gcc: disable -ftracer for __noclone functions

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Bonzini commit 95272c29378ee7dc15f43fa2758cb28a5913a06d upstream. -ftracer can duplicate asm blocks causing compilation to fail in noclone functions. For example,

[PATCH 3.14 36/37] [media] usbvision: fix crash on detecting device with invalid configuration

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Vladis Dronov commit fa52bd506f274b7619955917abfde355e3d19ffe upstream. The usbvision driver crashes when a specially crafted usb device with invalid number of interfaces

[PATCH 4.5 019/124] compiler-gcc: disable -ftracer for __noclone functions

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Bonzini commit 95272c29378ee7dc15f43fa2758cb28a5913a06d upstream. -ftracer can duplicate asm blocks causing compilation to fail in noclone functions. For example, KVM declares a global

[PATCH 3.14 36/37] [media] usbvision: fix crash on detecting device with invalid configuration

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Vladis Dronov commit fa52bd506f274b7619955917abfde355e3d19ffe upstream. The usbvision driver crashes when a specially crafted usb device with invalid number of interfaces or endpoints is

[PATCH 4.5 016/124] libnvdimm: fix smart data retrieval

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit 211291126698c8f047617565b2e2e7f822f86354 upstream. It appears that smart data retrieval has been broken the since the initial implementation. Fix

[PATCH 4.5 012/124] ALSA: hda - fix front mic problem for a HP desktop

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Hui Wang commit e549d190f7b5f94e9ab36bd965028112914d010d upstream. The front mic jack (pink color) can't detect any plug or unplug. After applying this fix, both

[PATCH 3.14 13/37] usbnet: cleanup after bind() in probe()

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum [ Upstream commit 1666984c8625b3db19a9abc298931d35ab7bc64b ] In case bind() works, but a later error forces bailing in probe() in error cases work and a timer

[PATCH 4.5 016/124] libnvdimm: fix smart data retrieval

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit 211291126698c8f047617565b2e2e7f822f86354 upstream. It appears that smart data retrieval has been broken the since the initial implementation. Fix the payload size to be

<    2   3   4   5   6   7   8   9   10   11   >