[PATCH 4.4 105/137] usb: renesas_usbhs: fix to avoid using a disabled ep in usbhsg_queue_done()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yoshihiro Shimoda commit 4fccb0767fdbdb781a9c5b5c15ee7b219443c89d upstream. This patch fixes an issue that usbhsg_queue_done() may cause kernel panic when dma callback is running and

Re: binary execution from DAX mount hang since next-20160407

On Fri, Apr 15, 2016 at 4:38 PM, Hugh Dickins wrote: > On Fri, 15 Apr 2016, Xiong Zhou wrote: > >> Hi, all >> >> Since tag next-20160407 in linux-next repo, executing binary >> from/in DAX mount hangs. >> >> It does not hang if mount without dax option. >> It hangs with both xfs and ext4. >> It

[PATCH 4.4 081/137] USB: uas: Add a new NO_REPORT_LUNS quirk

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 1363074667a6b7d0507527742ccd7bbed5e3ceaa upstream. Add a new NO_REPORT_LUNS quirk and set it for Seagate drives with an usb-id of: 0bc2:331a, as these

[PATCH 4.4 106/137] iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 9b090a98e95c2530ef0ce474e3b6218621b8ae25 upstream. When CONFIG_IIO_TRIGGER is enabled but CONFIG_IIO_BUFFER is not, we get a build error in the st_magn

[PATCH 4.4 079/137] mpls: find_outdev: check for err ptr in addition to NULL check

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Roopa Prabhu [ Upstream commit 94a57f1f8a9de90ab4b0f8748361ff8be706c80c ] find_outdev calls inet{,6}_fib_lookup_dev() or dev_get_by_index() to find the output

[PATCH 4.4 081/137] USB: uas: Add a new NO_REPORT_LUNS quirk

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 1363074667a6b7d0507527742ccd7bbed5e3ceaa upstream. Add a new NO_REPORT_LUNS quirk and set it for Seagate drives with an usb-id of: 0bc2:331a, as these will fail to respond

[PATCH 4.4 106/137] iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 9b090a98e95c2530ef0ce474e3b6218621b8ae25 upstream. When CONFIG_IIO_TRIGGER is enabled but CONFIG_IIO_BUFFER is not, we get a build error in the st_magn driver:

[PATCH 4.4 079/137] mpls: find_outdev: check for err ptr in addition to NULL check

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Roopa Prabhu [ Upstream commit 94a57f1f8a9de90ab4b0f8748361ff8be706c80c ] find_outdev calls inet{,6}_fib_lookup_dev() or dev_get_by_index() to find the output device. In case of an error,

[PATCH 4.4 080/137] USB: uas: Limit qdepth at the scsi-host level

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 198de51dbc3454d95b015ca0a055b673f85f01bb upstream. Commit 64d513ac31bd ("scsi: use host wide tags by default") causes the SCSI core to queue more

[PATCH 4.4 083/137] KVM: x86: Inject pending interrupt even if pending nmi exist

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yuki Shibuya commit 321c5658c5e9192dea0d58ab67cf1791e45b2b26 upstream. Non maskable interrupts (NMI) are preferred to interrupts in current implementation. If a NMI

[PATCH 4.4 080/137] USB: uas: Limit qdepth at the scsi-host level

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 198de51dbc3454d95b015ca0a055b673f85f01bb upstream. Commit 64d513ac31bd ("scsi: use host wide tags by default") causes the SCSI core to queue more commands then we can

[PATCH 4.4 083/137] KVM: x86: Inject pending interrupt even if pending nmi exist

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yuki Shibuya commit 321c5658c5e9192dea0d58ab67cf1791e45b2b26 upstream. Non maskable interrupts (NMI) are preferred to interrupts in current implementation. If a NMI is pending and NMI is

[PATCH 4.4 076/137] ipv6: l2tp: fix a potential issue in l2tp_ip6_recv

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Haishuang Yan [ Upstream commit be447f305494e019dfc37ea4cdf3b0e4200b4eba ] pskb_may_pull() can change skb->data, so we have to load ptr/optr at the right

[PATCH 4.4 076/137] ipv6: l2tp: fix a potential issue in l2tp_ip6_recv

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Haishuang Yan [ Upstream commit be447f305494e019dfc37ea4cdf3b0e4200b4eba ] pskb_may_pull() can change skb->data, so we have to load ptr/optr at the right place. Signed-off-by: Haishuang Yan

[PATCH 4.4 084/137] KVM: x86: reduce default value of halt_poll_ns parameter

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Bonzini commit 14ebda3394fd3e5388747e742e510b0802a65d24 upstream. Windows lets applications choose the frequency of the timer tick, and in Windows 10 the maximum

[PATCH 4.4 111/137] fs: add file_dentry()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit d101a125954eae1d397adda94ca6319485a50493 upstream. This series fixes bugs in nfs and ext4 due to 4bacc9c9234c ("overlayfs: Make f_path always point to

[PATCH 4.4 084/137] KVM: x86: reduce default value of halt_poll_ns parameter

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Paolo Bonzini commit 14ebda3394fd3e5388747e742e510b0802a65d24 upstream. Windows lets applications choose the frequency of the timer tick, and in Windows 10 the maximum rate was changed from

[PATCH 4.4 111/137] fs: add file_dentry()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit d101a125954eae1d397adda94ca6319485a50493 upstream. This series fixes bugs in nfs and ext4 due to 4bacc9c9234c ("overlayfs: Make f_path always point to the overlay and

[PATCH 4.4 123/137] ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit f883982dc1b117f04579f0896821cd9f2e397f94 upstream. HP EliteBook 755 G2 with ALC3228 (ALC280) codec [103c:221c] requires the known fixup

[PATCH 4.4 123/137] ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit f883982dc1b117f04579f0896821cd9f2e397f94 upstream. HP EliteBook 755 G2 with ALC3228 (ALC280) codec [103c:221c] requires the known fixup (ALC269_FIXUP_HEADSET_MIC) for

[PATCH 4.4 125/137] ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T460s

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sven Eckelmann commit c636b95ec5980345674ad7960a3c67135a84b687 upstream. The Lenovo Thinkpad T460s requires the alc_fixup_tpt440_dock as well in order to get working sound

[PATCH 4.4 121/137] mmc: sdhci-pci: Add support and PCI IDs for more Broxton host controllers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 01d6b2a40a0fa73c90e05b1033f181a51fec9292 upstream. Add support and PCI IDs for more Broxton host controllers Other BXT IDs were added in v4.4 so

[PATCH 4.4 125/137] ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T460s

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sven Eckelmann commit c636b95ec5980345674ad7960a3c67135a84b687 upstream. The Lenovo Thinkpad T460s requires the alc_fixup_tpt440_dock as well in order to get working sound output on the

[PATCH 4.4 121/137] mmc: sdhci-pci: Add support and PCI IDs for more Broxton host controllers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 01d6b2a40a0fa73c90e05b1033f181a51fec9292 upstream. Add support and PCI IDs for more Broxton host controllers Other BXT IDs were added in v4.4 so cc'ing stable. This patch

[PATCH 4.4 126/137] ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit f03b24a851d32ca85dacab01785b24a7ee717d37 upstream. Phoenix Audio TMX320 gives the similar error when the sample rate is asked: usb 2-1.3: 2:1: cannot get

[PATCH 4.4 127/137] ALSA: usb-audio: Add a quirk for Plantronics BT300

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dennis Kadioglu commit b4203ff5464da00b7812e7b480192745b0d66bbf upstream. Plantronics BT300 does not support reading the sample rate which leads to many lines of "cannot get

[PATCH 4.4 128/137] ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang commit adcdd0d5a1cb779f6d455ae70882c19c527627a8 upstream. This is Dell usb dock audio workaround. It was fixed the master volume keep lower. [Some

[PATCH 4.4 112/137] nfs: use file_dentry()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit be62a1a8fd116f5cd9e53726601f970e16e17558 upstream. NFS may be used as lower layer of overlayfs and accessing f_path.dentry can lead to a crash. Fix

[PATCH 4.4 126/137] ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit f03b24a851d32ca85dacab01785b24a7ee717d37 upstream. Phoenix Audio TMX320 gives the similar error when the sample rate is asked: usb 2-1.3: 2:1: cannot get freq at ep 0x85

[PATCH 4.4 127/137] ALSA: usb-audio: Add a quirk for Plantronics BT300

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dennis Kadioglu commit b4203ff5464da00b7812e7b480192745b0d66bbf upstream. Plantronics BT300 does not support reading the sample rate which leads to many lines of "cannot get freq at ep 0x1".

[PATCH 4.4 128/137] ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang commit adcdd0d5a1cb779f6d455ae70882c19c527627a8 upstream. This is Dell usb dock audio workaround. It was fixed the master volume keep lower. [Some background: the patch

[PATCH 4.4 112/137] nfs: use file_dentry()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit be62a1a8fd116f5cd9e53726601f970e16e17558 upstream. NFS may be used as lower layer of overlayfs and accessing f_path.dentry can lead to a crash. Fix by replacing direct

[PATCH 4.4 129/137] HID: wacom: fix Bamboo ONE oops

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires commit 580549ef6b3e3fb3b958de490ca99f43a089a2cf upstream. Looks like recent changes in the Wacom driver made the Bamboo ONE crashes. The

[PATCH 4.4 132/137] Revert "PCI: Add helpers to manage pci_dev->irq and pci_dev->irq_managed"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Helgaas commit 67b4eab91caf2ad574cab1b17ae09180ea2e116e upstream. Revert 811a4e6fce09 ("PCI: Add helpers to manage pci_dev->irq and pci_dev->irq_managed"). This is

[PATCH 4.4 130/137] HID: usbhid: fix inconsistent reset/resume/reset-resume behavior

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 972e6a993f278b416a8ee3ec65475724fc36feb2 upstream. The usbhid driver has inconsistently duplicated code in its post-reset, resume, and reset-resume

[PATCH 4.4 131/137] Revert "x86/PCI: Dont alloc pcibios-irq when MSI is enabled"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Helgaas commit fe25d078874f2c29c38f4160467d74f5756537c9 upstream. Revert 8affb487d4a4 ("x86/PCI: Don't alloc pcibios-irq when MSI is enabled"). This is part of

[PATCH 4.4 129/137] HID: wacom: fix Bamboo ONE oops

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Tissoires commit 580549ef6b3e3fb3b958de490ca99f43a089a2cf upstream. Looks like recent changes in the Wacom driver made the Bamboo ONE crashes. The tablet behaves as if it was a

[PATCH 4.4 132/137] Revert "PCI: Add helpers to manage pci_dev->irq and pci_dev->irq_managed"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Helgaas commit 67b4eab91caf2ad574cab1b17ae09180ea2e116e upstream. Revert 811a4e6fce09 ("PCI: Add helpers to manage pci_dev->irq and pci_dev->irq_managed"). This is part of reverting

[PATCH 4.4 130/137] HID: usbhid: fix inconsistent reset/resume/reset-resume behavior

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 972e6a993f278b416a8ee3ec65475724fc36feb2 upstream. The usbhid driver has inconsistently duplicated code in its post-reset, resume, and reset-resume pathways.

[PATCH 4.4 131/137] Revert "x86/PCI: Dont alloc pcibios-irq when MSI is enabled"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Helgaas commit fe25d078874f2c29c38f4160467d74f5756537c9 upstream. Revert 8affb487d4a4 ("x86/PCI: Don't alloc pcibios-irq when MSI is enabled"). This is part of reverting 991de2e59090

[PATCH 4.4 114/137] ext4: add lockdep annotations for i_data_sem

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit daf647d2dd58cec59570d7698a45b98e580f2076 upstream. With the internal Quota feature, mke2fs creates empty quota inodes and quota usage tracking is enabled as

[PATCH 4.4 114/137] ext4: add lockdep annotations for i_data_sem

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit daf647d2dd58cec59570d7698a45b98e580f2076 upstream. With the internal Quota feature, mke2fs creates empty quota inodes and quota usage tracking is enabled as soon as the

[PATCH 4.4 136/137] [media] usbvision: fix crash on detecting device with invalid configuration

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vladis Dronov commit fa52bd506f274b7619955917abfde355e3d19ffe upstream. The usbvision driver crashes when a specially crafted usb device with invalid number of interfaces

[PATCH 4.4 115/137] ext4: ignore quota mount options if the quota feature is enabled

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit c325a67c72903e1cc30e990a15ce745bda0dbfde upstream. Previously, ext4 would fail the mount if the file system had the quota feature enabled and quota mount

[PATCH 4.4 113/137] btrfs: fix crash/invalid memory access on fsync when using overlayfs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit de17e793b104d690e1d007dfc5cb6b4f649598ca upstream. If the lower or upper directory of an overlayfs mount belong to a btrfs file system and we fsync the

[PATCH 4.4 136/137] [media] usbvision: fix crash on detecting device with invalid configuration

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vladis Dronov commit fa52bd506f274b7619955917abfde355e3d19ffe upstream. The usbvision driver crashes when a specially crafted usb device with invalid number of interfaces or endpoints is

[PATCH 4.4 115/137] ext4: ignore quota mount options if the quota feature is enabled

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit c325a67c72903e1cc30e990a15ce745bda0dbfde upstream. Previously, ext4 would fail the mount if the file system had the quota feature enabled and quota mount options (used for

[PATCH 4.4 113/137] btrfs: fix crash/invalid memory access on fsync when using overlayfs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit de17e793b104d690e1d007dfc5cb6b4f649598ca upstream. If the lower or upper directory of an overlayfs mount belong to a btrfs file system and we fsync the file through the

[PATCH 4.4 118/137] arm64: replace read_lock to rcu lock in call_step_hook

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yang Shi commit cf0a25436f05753aca5151891aea4fd130556e2a upstream. BUG: sleeping function called from invalid context at kernel/locking/rtmutex.c:917 in_atomic(): 1,

[PATCH 4.4 118/137] arm64: replace read_lock to rcu lock in call_step_hook

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yang Shi commit cf0a25436f05753aca5151891aea4fd130556e2a upstream. BUG: sleeping function called from invalid context at kernel/locking/rtmutex.c:917 in_atomic(): 1, irqs_disabled(): 128,

[PATCH 4.4 116/137] iommu: Dont overwrite domain pointer when there is no default_domain

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Joerg Roedel commit eebb8034a5be8c2177cbf07ca2ecd2ff8a058958 upstream. IOMMU drivers that do not support default domains, but make use of the the group->domain pointer can get

[PATCH 4.4 117/137] Btrfs: fix file/data loss caused by fsync after rename and new inode

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit 56f23fdbb600e6087db7b009775b95ce07cc3195 upstream. If we rename an inode A (be it a file or a directory), create a new inode B with the old name of

[PATCH 4.4 110/137] sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Martin K. Petersen commit f08bb1e0dbdd0297258d0b8cd4dbfcc057e57b2a upstream. During revalidate we check whether device capacity has changed before we decide whether

[PATCH 4.4 116/137] iommu: Dont overwrite domain pointer when there is no default_domain

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Joerg Roedel commit eebb8034a5be8c2177cbf07ca2ecd2ff8a058958 upstream. IOMMU drivers that do not support default domains, but make use of the the group->domain pointer can get that pointer

[PATCH 4.4 117/137] Btrfs: fix file/data loss caused by fsync after rename and new inode

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit 56f23fdbb600e6087db7b009775b95ce07cc3195 upstream. If we rename an inode A (be it a file or a directory), create a new inode B with the old name of inode A and under the

[PATCH 4.4 110/137] sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Martin K. Petersen commit f08bb1e0dbdd0297258d0b8cd4dbfcc057e57b2a upstream. During revalidate we check whether device capacity has changed before we decide whether to output disk information

[PATCH 4.4 135/137] [media] usbvision fix overflow of interfaces array

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 588afcc1c0e45358159090d95bf7b246fb67565f upstream. This fixes the crash reported in: http://seclists.org/bugtraq/2015/Oct/35 The interface number needs a

[PATCH 4.4 085/137] MIPS: Fix MSA ld unaligned failure cases

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit fa8ff601d72bad3078ddf5ef17a5547700d06908 upstream. Copying the content of an MSA vector from user memory may involve TLB faults & mapping in pages.

[PATCH 4.4 134/137] staging: android: ion: Set the length of the DMA sg entries in buffer

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Liviu Dudau commit 70bc916b2c80913753fb188d4daee50a64d21ba0 upstream. ion_buffer_create() will allocate a buffer and then create a DMA mapping for it, but it forgot to set

[PATCH 4.4 124/137] ALSA: hda - fix front mic problem for a HP desktop

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Hui Wang commit e549d190f7b5f94e9ab36bd965028112914d010d upstream. The front mic jack (pink color) can't detect any plug or unplug. After applying this fix, both

[PATCH 4.4 135/137] [media] usbvision fix overflow of interfaces array

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 588afcc1c0e45358159090d95bf7b246fb67565f upstream. This fixes the crash reported in: http://seclists.org/bugtraq/2015/Oct/35 The interface number needs a sanity check.

[PATCH 4.4 085/137] MIPS: Fix MSA ld unaligned failure cases

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit fa8ff601d72bad3078ddf5ef17a5547700d06908 upstream. Copying the content of an MSA vector from user memory may involve TLB faults & mapping in pages. This will fail when

[PATCH 4.4 134/137] staging: android: ion: Set the length of the DMA sg entries in buffer

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Liviu Dudau commit 70bc916b2c80913753fb188d4daee50a64d21ba0 upstream. ion_buffer_create() will allocate a buffer and then create a DMA mapping for it, but it forgot to set the length of the

[PATCH 4.4 124/137] ALSA: hda - fix front mic problem for a HP desktop

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Hui Wang commit e549d190f7b5f94e9ab36bd965028112914d010d upstream. The front mic jack (pink color) can't detect any plug or unplug. After applying this fix, both detecting function and

[PATCH 4.4 120/137] perf: Cure event->pending_disable race

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 28a967c3a2f99fa3b5f762f25cb2a319d933571b upstream. Because event_sched_out() checks event->pending_disable _before_ actually disabling the event, it

[PATCH 4.4 082/137] cdc-acm: fix NULL pointer reference

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 29c6dd591bbd592472247441de9fa694acdabae8 upstream. The union descriptor must be checked. Its usage was conditional before the parser was introduced. This

[PATCH 4.4 122/137] ALSA: hda - Fixup speaker pass-through control for nid 0x14 on ALC225

4.4-stable review patch. If anyone has any objections, please let me know. -- From: David Henningsson commit 2ae955774f29bbd7d16149cb0ae8d0319bf2ecc4 upstream. On one of the machines we enable, we found that the actual speaker volume did not

[PATCH 4.4 119/137] perf: Do not double free

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 130056275ade730e7a79c110212c8815202773ee upstream. In case of: err_file: fput(event_file), we'll end up calling perf_release() which in turn will

[PATCH 4.4 082/137] cdc-acm: fix NULL pointer reference

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Neukum commit 29c6dd591bbd592472247441de9fa694acdabae8 upstream. The union descriptor must be checked. Its usage was conditional before the parser was introduced. This is important,

[PATCH 4.4 122/137] ALSA: hda - Fixup speaker pass-through control for nid 0x14 on ALC225

4.4-stable review patch. If anyone has any objections, please let me know. -- From: David Henningsson commit 2ae955774f29bbd7d16149cb0ae8d0319bf2ecc4 upstream. On one of the machines we enable, we found that the actual speaker volume did not always correspond to the volume

[PATCH 4.4 119/137] perf: Do not double free

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 130056275ade730e7a79c110212c8815202773ee upstream. In case of: err_file: fput(event_file), we'll end up calling perf_release() which in turn will free the event. Do not

[PATCH 4.4 120/137] perf: Cure event->pending_disable race

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Peter Zijlstra commit 28a967c3a2f99fa3b5f762f25cb2a319d933571b upstream. Because event_sched_out() checks event->pending_disable _before_ actually disabling the event, it can happen that the

[PATCH 4.4 052/137] mlxsw: spectrum: Check requested ageing time is valid

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ido Schimmel [ Upstream commit 869f63a4d28144c03c8f4a4c0d1e8f31f8c11a10 ] Commit c62987bbd8a1 ("bridge: push bridge setting ageing_time down to switchdev") added a check

[PATCH 4.4 052/137] mlxsw: spectrum: Check requested ageing time is valid

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ido Schimmel [ Upstream commit 869f63a4d28144c03c8f4a4c0d1e8f31f8c11a10 ] Commit c62987bbd8a1 ("bridge: push bridge setting ageing_time down to switchdev") added a check for minimum and

[PATCH 4.4 108/137] iio: gyro: bmg160: fix buffer read values

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit b475c59b113db1e66eb9527ffdec3c5241c847e5 upstream. When reading gyroscope axes using iio buffers, the values returned are always 0. In the interrupt

[PATCH 4.4 046/137] bpf: avoid copying junk bytes in bpf_get_current_comm()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexei Starovoitov [ Upstream commit cdc4e47da8f4c32eeb6b2061a8a834f4362a12b7 ] Lots of places in the kernel use memcpy(buf, comm, TASK_COMM_LEN); but the result is typically

[PATCH 4.4 092/137] [media] au0828: Fix dev_state handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit e8e3039f5b941f7825d335f8ca11c12a8104db11 upstream. The au0828 dev_state is actually a bit mask. It should not be checking with "==" but,

[PATCH 4.4 094/137] [media] v4l: vsp1: Set the SRU CTRL0 register when starting the stream

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Laurent Pinchart commit f6acfcdc5b8cdc9ddd53a459361820b9efe958c4 upstream. Commit 58f896d859ce ("[media] v4l: vsp1: sru: Make the intensity

[PATCH 4.4 109/137] iio: gyro: bmg160: fix endianness when reading axes

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit 95e7ff034175db7d8aefabe7716c4d42bea24fde upstream. For big endian platforms, reading the axes will return invalid values. The device stores each

[PATCH 4.4 107/137] iio: accel: bmc150: fix endianness when reading axes

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit 2215f31dc6f88634c1916362e922b1ecdce0a6b3 upstream. For big endian platforms, reading the axes will return invalid values. The device stores each

[PATCH 4.4 108/137] iio: gyro: bmg160: fix buffer read values

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit b475c59b113db1e66eb9527ffdec3c5241c847e5 upstream. When reading gyroscope axes using iio buffers, the values returned are always 0. In the interrupt handler, the return

[PATCH 4.4 046/137] bpf: avoid copying junk bytes in bpf_get_current_comm()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexei Starovoitov [ Upstream commit cdc4e47da8f4c32eeb6b2061a8a834f4362a12b7 ] Lots of places in the kernel use memcpy(buf, comm, TASK_COMM_LEN); but the result is typically passed to

[PATCH 4.4 092/137] [media] au0828: Fix dev_state handling

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit e8e3039f5b941f7825d335f8ca11c12a8104db11 upstream. The au0828 dev_state is actually a bit mask. It should not be checking with "==" but, instead, with a logic and.

[PATCH 4.4 094/137] [media] v4l: vsp1: Set the SRU CTRL0 register when starting the stream

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Laurent Pinchart commit f6acfcdc5b8cdc9ddd53a459361820b9efe958c4 upstream. Commit 58f896d859ce ("[media] v4l: vsp1: sru: Make the intensity controllable during streaming") refactored the

[PATCH 4.4 109/137] iio: gyro: bmg160: fix endianness when reading axes

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit 95e7ff034175db7d8aefabe7716c4d42bea24fde upstream. For big endian platforms, reading the axes will return invalid values. The device stores each axis value in a 16 bit

[PATCH 4.4 107/137] iio: accel: bmc150: fix endianness when reading axes

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Irina Tirdea commit 2215f31dc6f88634c1916362e922b1ecdce0a6b3 upstream. For big endian platforms, reading the axes will return invalid values. The device stores each axis value in a 16 bit

[PATCH 4.4 090/137] pinctrl: freescale: imx: fix bogus check of of_iomap() return value

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vladimir Zapolskiy commit 9a4f424531dabd877259ae0071b8bcc4dede9eb5 upstream. On error path of_iomap() returns NULL, hence IS_ERR() check is invalid and may cause a NULL pointer

[PATCH 4.4 043/137] net: validate variable length ll headers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit 2793a23aacbd754dbbb5cb75093deb7e4103bace ] Netdevice parameter hard_header_len is variously interpreted both as an upper and lower bound

[PATCH 4.4 097/137] virtio: virtio 1.0 cs04 spec compliance for reset

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Michael S. Tsirkin commit 05dbcb430795b2e1fb1d5c757f8619d3dbed0a1c upstream. The spec says: after writing 0 to device_status, the driver MUST wait for a read of device_status

[PATCH 4.4 043/137] net: validate variable length ll headers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit 2793a23aacbd754dbbb5cb75093deb7e4103bace ] Netdevice parameter hard_header_len is variously interpreted both as an upper and lower bound on link layer header

[PATCH 4.4 097/137] virtio: virtio 1.0 cs04 spec compliance for reset

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Michael S. Tsirkin commit 05dbcb430795b2e1fb1d5c757f8619d3dbed0a1c upstream. The spec says: after writing 0 to device_status, the driver MUST wait for a read of device_status to return 0

[PATCH 4.4 090/137] pinctrl: freescale: imx: fix bogus check of of_iomap() return value

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vladimir Zapolskiy commit 9a4f424531dabd877259ae0071b8bcc4dede9eb5 upstream. On error path of_iomap() returns NULL, hence IS_ERR() check is invalid and may cause a NULL pointer dereference,

[PATCH 4.5 123/124] HID: usbhid: fix inconsistent reset/resume/reset-resume behavior

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 972e6a993f278b416a8ee3ec65475724fc36feb2 upstream. The usbhid driver has inconsistently duplicated code in its post-reset, resume, and reset-resume

[PATCH 4.4 036/137] ipv6: re-enable fragment header matching in ipv6_find_hdr

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal [ Upstream commit 5d150a985520bbe3cb2aa1ceef24a7e32f20c15f ] When ipv6_find_hdr is used to find a fragment header (caller specifies target NEXTHDR_FRAGMENT) we

[PATCH 4.4 036/137] ipv6: re-enable fragment header matching in ipv6_find_hdr

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal [ Upstream commit 5d150a985520bbe3cb2aa1ceef24a7e32f20c15f ] When ipv6_find_hdr is used to find a fragment header (caller specifies target NEXTHDR_FRAGMENT) we erronously

[PATCH 4.5 123/124] HID: usbhid: fix inconsistent reset/resume/reset-resume behavior

4.5-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 972e6a993f278b416a8ee3ec65475724fc36feb2 upstream. The usbhid driver has inconsistently duplicated code in its post-reset, resume, and reset-resume pathways.

[PATCH 4.4 061/137] tcp/dccp: remove obsolete WARN_ON() in icmp handlers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit e316ea62e3203d524ff0239a40c56d3a39ad1b5c ] Now SYN_RECV request sockets are installed in ehash table, an ICMP handler can find a request

[PATCH 4.4 040/137] udp6: fix UDP/IPv6 encap resubmit path

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bill Sommerfeld [ Upstream commit 59dca1d8a6725a121dae6c452de0b2611d5865dc ] IPv4 interprets a negative return value from a protocol handler as a request to redispatch

[PATCH 4.4 030/137] net: qca_spi: clear IFF_TX_SKB_SHARING

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stefan Wahren [ Upstream commit a4690afeb0d2d7ba4d60dfa98a89f3bb1ce60ecd ] ether_setup sets IFF_TX_SKB_SHARING but this is not supported by qca_spi as it modifies the

[PATCH 4.4 018/137] drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit f971f2263deaa4a441e377b385c11aee0f3b3f9a upstream. bug: https://bugs.freedesktop.org/show_bug.cgi?id=94692 Signed-off-by: Alex Deucher

<    1   2   3   4   5   6   7   8   9   10   >