[PATCH 4.14 045/143] locking/ww_mutex: Fix runtime warning in the WW mutex selftest

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e4a02ed2aaf447fa849e3254bfdb3b9b01e1e520 ] If CONFIG_WW_MUTEX_SELFTEST=y is enabled, booting an image in an arm64 virtual machine results in the following traceback if 8 CPUs are

[PATCH 4.14 044/143] net: qualcomm: rmnet: Skip processing loopback packets

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a07f388e2cde2be74b263f85df6f672fea0305a1 ] RMNET RX handler was processing invalid packets that were originally sent on the real device and were looped back via dev_loopback_xmit().

[PATCH 4.14 046/143] be2net: dont flip hw_features when VXLANs are added/deleted

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 2d52527e80c2dc0c5f43f50adf183781262ec565 ] the be2net implementation of .ndo_tunnel_{add,del}() changes the value of NETIF_F_GSO_UDP_TUNNEL bit in 'features' and 'hw_features', but

[PATCH 4.14 047/143] net: cxgb3_main: fix a missing-check bug

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 2c05d88818ab6571816b93edce4d53703870d7ae ] In cxgb_extension_ioctl(), the command of the ioctl is firstly copied from the user-space buffer 'useraddr' to 'cmd' and checked through

[PATCH 4.14 048/143] yam: fix a missing-check bug

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 0781168e23a2fc8dceb989f11fc5b39b3ccacc35 ] In yam_ioctl(), the concrete ioctl command is firstly copied from the user-space buffer 'ifr->ifr_data' to 'ioctl_cmd' and checked through

[PATCH 4.14 045/143] locking/ww_mutex: Fix runtime warning in the WW mutex selftest

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e4a02ed2aaf447fa849e3254bfdb3b9b01e1e520 ] If CONFIG_WW_MUTEX_SELFTEST=y is enabled, booting an image in an arm64 virtual machine results in the following traceback if 8 CPUs are

[PATCH 4.14 044/143] net: qualcomm: rmnet: Skip processing loopback packets

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a07f388e2cde2be74b263f85df6f672fea0305a1 ] RMNET RX handler was processing invalid packets that were originally sent on the real device and were looped back via dev_loopback_xmit().

[PATCH 4.14 046/143] be2net: dont flip hw_features when VXLANs are added/deleted

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 2d52527e80c2dc0c5f43f50adf183781262ec565 ] the be2net implementation of .ndo_tunnel_{add,del}() changes the value of NETIF_F_GSO_UDP_TUNNEL bit in 'features' and 'hw_features', but

[PATCH 4.14 034/143] r8152: Check for supported Wake-on-LAN Modes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f2750df1548bd8a2b060eb609fc43ca82811af4c ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not

[PATCH 4.14 043/143] declance: Fix continuation with the adapter identification message

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit fe3a83af6a50199bf250fa331e94216912f79395 ] Fix a commit 4bcc595ccd80 ("printk: reinstate KERN_CONT for printing continuation lines") regression with the `declance' driver, which

[PATCH 4.14 015/143] arm64: hugetlb: Fix handling of young ptes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 469ed9d823b7d240d6b9574f061ded7c3834c167 ] In the contiguous bit hugetlb break-before-make code we assume that all hugetlb pages are young. In fact, remove_migration_pte is able to

[PATCH 4.14 006/143] cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 24f33e64fcd0d50a4b1a8e5b41bd0257aa66b0e8 ] Core regulatory hints didn't set wiphy_idx to WIPHY_IDX_INVALID. Since the regulatory request is zeroed, wiphy_idx was always implicitly

[PATCH 4.14 006/143] cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 24f33e64fcd0d50a4b1a8e5b41bd0257aa66b0e8 ] Core regulatory hints didn't set wiphy_idx to WIPHY_IDX_INVALID. Since the regulatory request is zeroed, wiphy_idx was always implicitly

[PATCH 4.14 043/143] declance: Fix continuation with the adapter identification message

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit fe3a83af6a50199bf250fa331e94216912f79395 ] Fix a commit 4bcc595ccd80 ("printk: reinstate KERN_CONT for printing continuation lines") regression with the `declance' driver, which

[PATCH 4.14 015/143] arm64: hugetlb: Fix handling of young ptes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 469ed9d823b7d240d6b9574f061ded7c3834c167 ] In the contiguous bit hugetlb break-before-make code we assume that all hugetlb pages are young. In fact, remove_migration_pte is able to

[PATCH 4.14 034/143] r8152: Check for supported Wake-on-LAN Modes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f2750df1548bd8a2b060eb609fc43ca82811af4c ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not

Re: [GIT PULL] sprd dts for kernel v4.20-rc1

On Thu, Oct 18, 2018 at 05:17:33PM +0800, Chunyan Zhang wrote: > Hi Arnd, > > For 4.20-rc1 there's one patch only for sprd devicetree, please pull from my > git tree: > > https://github.com/lyrazhang/linux.git m-v4.19-rc1 > > Please let me know if there's some problem. > > Thanks, > Chunyan >

[PATCH 4.14 032/143] lan78xx: Check for supported Wake-on-LAN modes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit eb9ad088f96653a26b340f7c447c44cf023d5cdc ] The driver supports a fair amount of Wake-on-LAN modes, but is not checking that the user specified one that is supported. Fixes:

Re: [GIT PULL] sprd dts for kernel v4.20-rc1

On Thu, Oct 18, 2018 at 05:17:33PM +0800, Chunyan Zhang wrote: > Hi Arnd, > > For 4.20-rc1 there's one patch only for sprd devicetree, please pull from my > git tree: > > https://github.com/lyrazhang/linux.git m-v4.19-rc1 > > Please let me know if there's some problem. > > Thanks, > Chunyan >

[PATCH 4.14 032/143] lan78xx: Check for supported Wake-on-LAN modes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit eb9ad088f96653a26b340f7c447c44cf023d5cdc ] The driver supports a fair amount of Wake-on-LAN modes, but is not checking that the user specified one that is supported. Fixes:

[PATCH 4.14 030/143] asix: Check for supported Wake-on-LAN modes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c4ce446e33d7a0e978256ac6fea4c80e59d9de5f ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the

Re: [PATCH] arm64: defconfig: Enable some IPMI configs

Hi John, On Fri, Oct 19, 2018 at 12:17:07AM +0800, John Garry wrote: > The arm64 port now runs on servers which use IPMI. This patch enables > relevant core configs to save manually enabling them when testing > mainline. > > Signed-off-by: John Garry I don't think these are required for

[PATCH 4.14 030/143] asix: Check for supported Wake-on-LAN modes

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c4ce446e33d7a0e978256ac6fea4c80e59d9de5f ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the

Re: [PATCH] arm64: defconfig: Enable some IPMI configs

Hi John, On Fri, Oct 19, 2018 at 12:17:07AM +0800, John Garry wrote: > The arm64 port now runs on servers which use IPMI. This patch enables > relevant core configs to save manually enabling them when testing > mainline. > > Signed-off-by: John Garry I don't think these are required for

[PATCH 4.14 021/143] mac80211_hwsim: do not omit multicast announce of first added radio

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 28ef8b49a338dc1844e86b7954cfffc7dfa2660a ] The allocation of hwsim radio identifiers uses a post-increment from 0, so the first radio has idx 0. This idx is explicitly excluded from

[PATCH 4.14 016/143] ARM: dts: BCM63xx: Fix incorrect interrupt specifiers

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3ab97942d0213b6583a5408630a8cbbfbf54730f ] A number of our interrupts were incorrectly specified, fix both the PPI and SPI interrupts to be correct. Fixes: b5762cacc411 ("ARM:

[PATCH 4.14 021/143] mac80211_hwsim: do not omit multicast announce of first added radio

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 28ef8b49a338dc1844e86b7954cfffc7dfa2660a ] The allocation of hwsim radio identifiers uses a post-increment from 0, so the first radio has idx 0. This idx is explicitly excluded from

[PATCH 4.14 016/143] ARM: dts: BCM63xx: Fix incorrect interrupt specifiers

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3ab97942d0213b6583a5408630a8cbbfbf54730f ] A number of our interrupts were incorrectly specified, fix both the PPI and SPI interrupts to be correct. Fixes: b5762cacc411 ("ARM:

[PATCH 4.14 019/143] soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift()

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 96fc74333f84cfdf8d434c6c07254e215e2aad00 ] There is a copy and paste bug so we accidentally use the RX_ shift when we're in TX_ mode. Fixes: bb8b2062aff3 ("fsl/qe: setup clock

[PATCH 4.14 017/143] net: macb: Clean 64b dma addresses if they are not detected

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e1e5d8a9fe737d94ccc0ccbaf0c97f69a8f3e000 ] Clear ADDR64 dma bit in DMACFG register in case that HW_DMA_CAP_64B is not detected on 64bit system. The issue was observed when

[PATCH 4.14 022/143] Bluetooth: SMP: fix crash in unpairing

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cb28c306b93b71f2741ce1a5a66289db26715f4d ] In case unpair_device() was called through mgmt interface at the same time when pairing was in progress, Bluetooth kernel module crash was

[PATCH 4.14 025/143] qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit db803f36e56f23b5a2266807e190d1dc11554d54 ] Clang complains when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_vf.c:686:6: warning:

Re: [PATCH v2] soc: ti: QMSS: Fix usage of irq_set_affinity_hint

On Wed, Oct 31, 2018 at 08:41:34AM +, Marc Zyngier wrote: > The Keystone QMSS driver is pretty damaged, in the sense that it > does things like this: > > irq_set_affinity_hint(irq, to_cpumask(_map)); > > where cpu_map is a local variable. As we leave the function, this > will point to

[PATCH 4.14 027/143] qed: Avoid constant logical operation warning in qed_vf_pf_acquire

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1c492a9d55ba99079210ed901dd8a5423f980487 ] Clang warns when a constant is used in a boolean context as it thinks a bitwise operation may have been intended.

[PATCH 4.14 026/143] qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d3a315795b4ce8b105a64a90699103121bde04a8 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_roce.c:153:12: warning:

[PATCH 4.14 008/143] cfg80211: Address some corner cases in scan result channel updating

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 119f94a6fefcc76d47075b83d2b73d04c895df78 ] cfg80211_get_bss_channel() is used to update the RX channel based on the available frame payload information (channel number from DSSS

[PATCH 4.14 024/143] qed: Avoid implicit enum conversion in qed_set_tunn_cls_info

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a898fba32229efd5e6b6154f83fa86a7145156b9 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_sp_commands.c:163:25:

[PATCH 4.14 028/143] qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 77f2d753819b7d50c16abfb778caf1fe075faed0 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_iwarp.c:1713:25: warning:

[PATCH 4.14 018/143] soc: fsl: qbman: qman: avoid allocating from non existing gen_pool

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 64e9e22e68512da8df3c9a7430f07621e48db3c2 ] If the qman driver didn't probe, calling qman_alloc_fqid_range, qman_alloc_pool_range or qman_alloc_cgrid_range (as done in dpaa_eth) will

[PATCH 4.14 020/143] nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 30fe6d50eb088783c8729c7d930f65296b2b3fa7 ] Use array_index_nospec() to sanitize ridx with respect to speculation. Signed-off-by: Masashi Honma Signed-off-by: Johannes Berg

[PATCH 4.14 018/143] soc: fsl: qbman: qman: avoid allocating from non existing gen_pool

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 64e9e22e68512da8df3c9a7430f07621e48db3c2 ] If the qman driver didn't probe, calling qman_alloc_fqid_range, qman_alloc_pool_range or qman_alloc_cgrid_range (as done in dpaa_eth) will

[PATCH 4.14 020/143] nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 30fe6d50eb088783c8729c7d930f65296b2b3fa7 ] Use array_index_nospec() to sanitize ridx with respect to speculation. Signed-off-by: Masashi Honma Signed-off-by: Johannes Berg

[PATCH 4.14 019/143] soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift()

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 96fc74333f84cfdf8d434c6c07254e215e2aad00 ] There is a copy and paste bug so we accidentally use the RX_ shift when we're in TX_ mode. Fixes: bb8b2062aff3 ("fsl/qe: setup clock

[PATCH 4.14 017/143] net: macb: Clean 64b dma addresses if they are not detected

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e1e5d8a9fe737d94ccc0ccbaf0c97f69a8f3e000 ] Clear ADDR64 dma bit in DMACFG register in case that HW_DMA_CAP_64B is not detected on 64bit system. The issue was observed when

[PATCH 4.14 022/143] Bluetooth: SMP: fix crash in unpairing

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cb28c306b93b71f2741ce1a5a66289db26715f4d ] In case unpair_device() was called through mgmt interface at the same time when pairing was in progress, Bluetooth kernel module crash was

[PATCH 4.14 025/143] qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit db803f36e56f23b5a2266807e190d1dc11554d54 ] Clang complains when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_vf.c:686:6: warning:

Re: [PATCH v2] soc: ti: QMSS: Fix usage of irq_set_affinity_hint

On Wed, Oct 31, 2018 at 08:41:34AM +, Marc Zyngier wrote: > The Keystone QMSS driver is pretty damaged, in the sense that it > does things like this: > > irq_set_affinity_hint(irq, to_cpumask(_map)); > > where cpu_map is a local variable. As we leave the function, this > will point to

[PATCH 4.14 027/143] qed: Avoid constant logical operation warning in qed_vf_pf_acquire

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1c492a9d55ba99079210ed901dd8a5423f980487 ] Clang warns when a constant is used in a boolean context as it thinks a bitwise operation may have been intended.

[PATCH 4.14 026/143] qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d3a315795b4ce8b105a64a90699103121bde04a8 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_roce.c:153:12: warning:

[PATCH 4.14 008/143] cfg80211: Address some corner cases in scan result channel updating

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 119f94a6fefcc76d47075b83d2b73d04c895df78 ] cfg80211_get_bss_channel() is used to update the RX channel based on the available frame payload information (channel number from DSSS

[PATCH 4.14 024/143] qed: Avoid implicit enum conversion in qed_set_tunn_cls_info

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a898fba32229efd5e6b6154f83fa86a7145156b9 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_sp_commands.c:163:25:

[PATCH 4.14 028/143] qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 77f2d753819b7d50c16abfb778caf1fe075faed0 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_iwarp.c:1713:25: warning:

[PATCH 4.14 004/143] xfrm: reset crypto_done when iterating over multiple input xfrms

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 782710e333a526780d65918d669cb96646983ba2 ] We only support one offloaded xfrm (we do not have devices that can handle more than one offload), so reset crypto_done in xfrm_input()

[PATCH 4.14 007/143] mac80211: fix pending queue hang due to TX_DROP

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 6eae4a6c2be387fec41b0d2782c4fffb57159498 ] In our environment running lots of mesh nodes, we are seeing the pending queue hang periodically, with the debugfs queues file showing

[PATCH 4.14 005/143] mac80211: Always report TX status

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 8682250b3c1b75a45feb7452bc413d004cfe3778 ] If a frame is dropped for any reason, mac80211 wouldn't report the TX status back to user space. As the user space may rely on the

[PATCH 4.14 004/143] xfrm: reset crypto_done when iterating over multiple input xfrms

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 782710e333a526780d65918d669cb96646983ba2 ] We only support one offloaded xfrm (we do not have devices that can handle more than one offload), so reset crypto_done in xfrm_input()

[PATCH 4.14 007/143] mac80211: fix pending queue hang due to TX_DROP

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 6eae4a6c2be387fec41b0d2782c4fffb57159498 ] In our environment running lots of mesh nodes, we are seeing the pending queue hang periodically, with the debugfs queues file showing

[PATCH 4.14 005/143] mac80211: Always report TX status

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 8682250b3c1b75a45feb7452bc413d004cfe3778 ] If a frame is dropped for any reason, mac80211 wouldn't report the TX status back to user space. As the user space may rely on the

[PATCH 4.14 002/143] xfrm6: call kfree_skb when skb is toobig

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 215ab0f021c9fea3c18b75e7d522400ee6a49990 ] After commit d6990976af7c5d8f55903bfb4289b6fb030bf754 ("vti6: fix PMTU caching and reporting on xmit"), some too big skbs might be

[PATCH 4.14 002/143] xfrm6: call kfree_skb when skb is toobig

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 215ab0f021c9fea3c18b75e7d522400ee6a49990 ] After commit d6990976af7c5d8f55903bfb4289b6fb030bf754 ("vti6: fix PMTU caching and reporting on xmit"), some too big skbs might be

[PATCH 4.14 003/143] xfrm: reset transport header back to network header after all input transforms ahave been applied

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit bfc0698bebcb16d19ecfc89574ad4d696955e5d3 ] A policy may have been set up with multiple transforms (e.g., ESP and ipcomp). In this situation, the ingress IPsec processing iterates in

[PATCH 4.14 003/143] xfrm: reset transport header back to network header after all input transforms ahave been applied

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit bfc0698bebcb16d19ecfc89574ad4d696955e5d3 ] A policy may have been set up with multiple transforms (e.g., ESP and ipcomp). In this situation, the ingress IPsec processing iterates in

[PATCH 4.14 001/143] xfrm: Validate address prefix lengths in the xfrm selector.

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 07bf7908950a8b14e81aa1807e3c667eab39287a ] We don't validate the address prefix lengths in the xfrm selector we got from userspace. This can lead to undefined behaviour in the

[PATCH 4.14 001/143] xfrm: Validate address prefix lengths in the xfrm selector.

4.14-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 07bf7908950a8b14e81aa1807e3c667eab39287a ] We don't validate the address prefix lengths in the xfrm selector we got from userspace. This can lead to undefined behaviour in the

[PATCH 4.18 126/150] net: ipmr: fix unresolved entry dumps

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov [ Upstream commit eddf016b910486d2123675a6b5fd7d64f77cdca8 ] If the skb space ends in an unresolved entry while dumping we'll miss some unresolved entries. The reason is

[PATCH 4.18 117/150] sctp: fix race on sctp_id2asoc

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Marcelo Ricardo Leitner [ Upstream commit b336decab22158937975293aea79396525f92bb3 ] syzbot reported an use-after-free involving sctp_id2asoc. Dmitry Vyukov helped to root cause it and it is

[PATCH 4.18 126/150] net: ipmr: fix unresolved entry dumps

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov [ Upstream commit eddf016b910486d2123675a6b5fd7d64f77cdca8 ] If the skb space ends in an unresolved entry while dumping we'll miss some unresolved entries. The reason is

[PATCH 4.18 117/150] sctp: fix race on sctp_id2asoc

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Marcelo Ricardo Leitner [ Upstream commit b336decab22158937975293aea79396525f92bb3 ] syzbot reported an use-after-free involving sctp_id2asoc. Dmitry Vyukov helped to root cause it and it is

[PATCH 4.18 124/150] ip6_tunnel: Fix encapsulation layout

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit d4d576f5ab7edcb757bb33e6a5600666a0b1232d ] Commit 058214a4d1df ("ip6_tun: Add infrastructure for doing encapsulation") added the ip6_tnl_encap() call in

[PATCH 4.18 125/150] openvswitch: Fix push/pop ethernet validation

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "Jaime Caama�o Ruiz" [ Upstream commit 46ebe2834ba5b541f28ee72e556a3fed42c47570 ] When there are both pop and push ethernet header actions among the actions to be applied to a packet, an

[PATCH 4.18 124/150] ip6_tunnel: Fix encapsulation layout

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Stefano Brivio [ Upstream commit d4d576f5ab7edcb757bb33e6a5600666a0b1232d ] Commit 058214a4d1df ("ip6_tun: Add infrastructure for doing encapsulation") added the ip6_tnl_encap() call in

[PATCH 4.18 125/150] openvswitch: Fix push/pop ethernet validation

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "Jaime Caama�o Ruiz" [ Upstream commit 46ebe2834ba5b541f28ee72e556a3fed42c47570 ] When there are both pop and push ethernet header actions among the actions to be applied to a packet, an

[PATCH 4.18 121/150] virtio_net: avoid using netif_tx_disable() for serializing tx routine

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ake Koomsin [ Upstream commit 05c998b738fdd3e5d6a257bcacc8f34b6284d795 ] Commit 713a98d90c5e ("virtio-net: serialize tx routine during reset") introduces netif_tx_disable() after

[PATCH 4.18 121/150] virtio_net: avoid using netif_tx_disable() for serializing tx routine

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ake Koomsin [ Upstream commit 05c998b738fdd3e5d6a257bcacc8f34b6284d795 ] Commit 713a98d90c5e ("virtio-net: serialize tx routine during reset") introduces netif_tx_disable() after

[PATCH 4.18 122/150] ethtool: fix a privilege escalation bug

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Wenwen Wang [ Upstream commit 58f5bbe331c566f49c9559568f982202a278aa78 ] In dev_ethtool(), the eth command 'ethcmd' is firstly copied from the use-space buffer 'useraddr' and checked to see

[PATCH 4.18 123/150] bonding: fix length of actor system

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Jungel [ Upstream commit 414dd6fb9a1a1b59983aea7bf0f79f0085ecc5b8 ] The attribute IFLA_BOND_AD_ACTOR_SYSTEM is sent to user space having the length of

[PATCH 4.18 122/150] ethtool: fix a privilege escalation bug

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Wenwen Wang [ Upstream commit 58f5bbe331c566f49c9559568f982202a278aa78 ] In dev_ethtool(), the eth command 'ethcmd' is firstly copied from the use-space buffer 'useraddr' and checked to see

[PATCH 4.18 123/150] bonding: fix length of actor system

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Jungel [ Upstream commit 414dd6fb9a1a1b59983aea7bf0f79f0085ecc5b8 ] The attribute IFLA_BOND_AD_ACTOR_SYSTEM is sent to user space having the length of

[PATCH 4.18 150/150] net: bridge: remove ipv6 zero address check in mcast queries

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov commit 0fe5119e267f3e3d8ac206895f5922195ec55a8a upstream. Recently a check was added which prevents marking of routers with zero source address, but for IPv6 that cannot

[PATCH 4.18 150/150] net: bridge: remove ipv6 zero address check in mcast queries

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov commit 0fe5119e267f3e3d8ac206895f5922195ec55a8a upstream. Recently a check was added which prevents marking of routers with zero source address, but for IPv6 that cannot

[PATCH 4.18 149/150] sparc: Throttle perf events properly.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 455adb3174d2c8518cef1a61140c211f6ac224d2 ] Like x86 and arm, call perf_sample_event_took() in perf event NMI interrupt handler. Signed-off-by: David S.

[PATCH 4.18 149/150] sparc: Throttle perf events properly.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 455adb3174d2c8518cef1a61140c211f6ac224d2 ] Like x86 and arm, call perf_sample_event_took() in perf event NMI interrupt handler. Signed-off-by: David S.

[PATCH 4.18 147/150] sparc: Fix single-pcr perf event counter management.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit cfdc3170d214046b9509183fe9b9544dc644d40b ] It is important to clear the hw->state value for non-stopped events when they are added into the PMU. Otherwise

[PATCH 4.18 148/150] sparc: Fix syscall fallback bugs in VDSO.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 776ca1543b5fe673aaf1beb244fcc2429d378083 ] First, the trap number for 32-bit syscalls is 0x10. Also, only negate the return value when syscall error is

[PATCH 4.18 147/150] sparc: Fix single-pcr perf event counter management.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit cfdc3170d214046b9509183fe9b9544dc644d40b ] It is important to clear the hw->state value for non-stopped events when they are added into the PMU. Otherwise

[PATCH 4.18 148/150] sparc: Fix syscall fallback bugs in VDSO.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 776ca1543b5fe673aaf1beb244fcc2429d378083 ] First, the trap number for 32-bit syscalls is 0x10. Also, only negate the return value when syscall error is

[PATCH 4.18 120/150] vhost: Fix Spectre V1 vulnerability

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang [ Upstream commit ff002269a4ee9c769dbf9365acef633ebcbd6cbe ] The idx in vhost_vring_ioctl() was controlled by userspace, hence a potential exploitation of the Spectre variant 1

[PATCH 4.18 146/150] sparc64: Wire up compat getpeername and getsockname.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 1f2b5b8e2df4591fbca430aff9c5a072dcc0f408 ] Fixes: 8b30ca73b7cc ("sparc: Add all necessary direct socket system calls.") Reported-by: Joseph Myers

[PATCH 4.18 145/150] sparc64: Set %l4 properly on trap return after handling signals.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit d1f1f98c6d1708a90436e1a3b2aff5e93946731b ] If we did some signal processing, we have to reload the pt_regs tstate register because it's value may have

[PATCH 4.18 120/150] vhost: Fix Spectre V1 vulnerability

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jason Wang [ Upstream commit ff002269a4ee9c769dbf9365acef633ebcbd6cbe ] The idx in vhost_vring_ioctl() was controlled by userspace, hence a potential exploitation of the Spectre variant 1

[PATCH 4.18 146/150] sparc64: Wire up compat getpeername and getsockname.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 1f2b5b8e2df4591fbca430aff9c5a072dcc0f408 ] Fixes: 8b30ca73b7cc ("sparc: Add all necessary direct socket system calls.") Reported-by: Joseph Myers

[PATCH 4.18 145/150] sparc64: Set %l4 properly on trap return after handling signals.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit d1f1f98c6d1708a90436e1a3b2aff5e93946731b ] If we did some signal processing, we have to reload the pt_regs tstate register because it's value may have

[PATCH 4.18 141/150] mlxsw: core: Fix devlink unregister flow

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Shalom Toledo [ Upstream commit a22712a962912faf257e857ab6857f56a93cfb34 ] After a failed reload, the driver is still registered to devlink, its devlink instance is still allocated and the

[PATCH 4.18 142/150] sparc64: Export __node_distance.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 2b4792eaa9f553764047d157365ed8b7787751a3 ] Some drivers reference it via node_distance(), for example the NVME host driver core. ERROR: "__node_distance"

[PATCH 4.18 140/150] net/mlx5: WQ, fixes for fragmented WQ buffers API

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tariq Toukan [ Upstream commit 37fdffb217a45609edccbb8b407d031143f551c0 ] mlx5e netdevice used to calculate fragment edges by a call to mlx5_wq_cyc_get_frag_size(). This calculation did not

[PATCH 4.18 140/150] net/mlx5: WQ, fixes for fragmented WQ buffers API

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tariq Toukan [ Upstream commit 37fdffb217a45609edccbb8b407d031143f551c0 ] mlx5e netdevice used to calculate fragment edges by a call to mlx5_wq_cyc_get_frag_size(). This calculation did not

[PATCH 4.18 141/150] mlxsw: core: Fix devlink unregister flow

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Shalom Toledo [ Upstream commit a22712a962912faf257e857ab6857f56a93cfb34 ] After a failed reload, the driver is still registered to devlink, its devlink instance is still allocated and the

[PATCH 4.18 142/150] sparc64: Export __node_distance.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 2b4792eaa9f553764047d157365ed8b7787751a3 ] Some drivers reference it via node_distance(), for example the NVME host driver core. ERROR: "__node_distance"

[PATCH 4.18 138/150] net: drop skb on failure in ip_check_defrag()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Cong Wang [ Upstream commit 7de414a9dd91426318df7b63da024b2b07e53df5 ] Most callers of pskb_trim_rcsum() simply drop the skb when it fails, however, ip_check_defrag() still continues to pass

[PATCH 4.18 143/150] sparc64: Make corrupted user stacks more debuggable.

4.18-stable review patch. If anyone has any objections, please let me know. -- From: David Miller [ Upstream commit 5b4fc3882a649c9411dd0dcad2ddb78e911d340e ] Right now if we get a corrupted user stack frame we do a do_exit(SIGILL) which is not helpful. If under a debugger,

<    2   3   4   5   6   7   8   9   10   11   >