[PATCH 3.18 37/68] perf inject: Copy events when reordering events in pipe mode

3.18-stable review patch. If anyone has any objections, please let me know. -- From: David Carrillo-Cisneros [ Upstream commit 1e0d4f0200e4dbdfc38d818f329d8a0955f7c6f5 ] __perf_session__process_pipe_events reuses the same memory buffer to process all events in the pipe. When

[PATCH 3.18 63/68] lock_parent() needs to recheck if dentry got __dentry_killed under it

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Al Viro commit 3b821409632ab778d46e807516b457dfa72736ed upstream. In case when dentry passed to lock_parent() is protected from freeing only by the fact that it's on a shrink list and trylock

[PATCH 4.4 017/134] ath10k: disallow DFS simulation if DFS channel is not enabled

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mohammed Shafi Shajakhan [ Upstream commit ca07baab0b1e627ae1d4a55d190fb1c9d32a3445 ] If DFS is not enabled in hostapd (ieee80211h=0) DFS channels shall not be available for use even though th

[PATCH 4.4 014/134] perf tools: Make perf_event__synthesize_mmap_events() scale

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stephane Eranian [ Upstream commit 88b897a30c525c2eee6e7f16e1e8d0f18830845e ] This patch significantly improves the execution time of perf_event__synthesize_mmap_events() when running perf rec

[PATCH 3.18 40/68] scsi: sg: close race condition in sg_remove_sfp_usercontext()

3.18-stable review patch. If anyone has any objections, please let me know. -- From: Hannes Reinecke [ Upstream commit 97d27b0dd015e980ade63fda111fd1353276e28b ] sg_remove_sfp_usercontext() is clearing any sg requests, but needs to take 'rq_list_lock' when modifying the list.

[PATCH 4.4 011/134] perf sort: Fix segfault with basic block cycles sort dimension

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Changbin Du [ Upstream commit 4b0b3aa6a2756e6115fdf275c521e4552a7082f3 ] Skip the sample which doesn't have branch_info to avoid segmentation fault: The fault can be reproduced by: perf re

[PATCH 4.4 019/134] HID: clamp input to logical range if no null state

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tomasz Kramkowski [ Upstream commit c3883fe06488a483658ba5d849b70e49bee15e7c ] This patch fixes an issue in drivers/hid/hid-input.c where values outside of the logical range are not clamped wh

[PATCH 4.4 023/134] of: fix of_device_get_modalias returned length when truncating buffers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Rob Herring [ Upstream commit bcf54d5385abaea9c8026aae6f4eeb348671a52d ] If the length of the modalias is greater than the buffer size, then the modalias is truncated. However the untruncated

[PATCH 4.4 030/134] sched: act_csum: dont mangle TCP and UDP GSO packets

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Davide Caratti [ Upstream commit add641e7dee31b36aee83412c29e39dd1f5e0c9c ] after act_csum computes the checksum on skbs carrying GSO TCP/UDP packets, subsequent segmentation fails because skb

[PATCH 4.4 009/134] PCI/MSI: Stop disabling MSI/MSI-X in pci_device_shutdown()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Prarit Bhargava [ Upstream commit fda78d7a0ead144f4b2cdb582dcba47911f4952c ] The pci_bus_type .shutdown method, pci_device_shutdown(), is called from device_shutdown() in the kernel restart an

[PATCH 4.4 004/134] staging: wilc1000: add check for kmalloc allocation failure.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Colin Ian King [ Upstream commit 6cc0c259d034c6ab48f4e12f505213988e73d380 ] Add a sanity check that wid.val has been allocated, fixes a null pointer deference on stamac when calling ether_add_

[PATCH 4.4 006/134] drm: qxl: Dont alloc fbdev if emulation is not supported

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Gabriel Krisman Bertazi [ Upstream commit 861078381ba56b56808113736000d9e7ead349c8 ] If fbdev emulation is disabled, the QXL shutdown path will try to clean a framebuffer that wasn't initializ

[PATCH 4.4 058/134] video: ARM CLCD: fix dma allocation size

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Liam Beguin [ Upstream commit 9a1c779e6b06855e41099caa6f15b3b584dfa88c ] This patch forces the frambuffer size to be aligned on kernel pages. During the board startup, the splash screed did a

[PATCH 4.4 055/134] scsi: ses: dont get power status of SES device slot on probe

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mauricio Faria de Oliveira [ Upstream commit 75106523f39751390b5789b36ee1d213b3af1945 ] The commit 08024885a2a3 ("ses: Add power_status to SES device slot") introduced the 'power_status' attri

[PATCH 4.4 053/134] ALSA: firewire-digi00x: handle all MIDI messages on streaming packets

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto [ Upstream commit 8820a4cf0cb4cd5c6540a9a18b2cedbdfd5a6891 ] At a commit 9dc5d31cdceb ("ALSA: firewire-digi00x: handle MIDI messages in isochronous packets"), a functionality

[PATCH 4.4 061/134] coresight: Fixes coresight DT parse to get correct output port ID.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mike Leach [ Upstream commit eeedc5421dd3b51de73e6106405c5c77f920f281 ] Corrected to get the port numbering to allow programmable replicator driver to operate correctly. By convention, CoreSi

[PATCH 4.4 063/134] MIPS: BPF: Fix multiple problems in JIT skb access helpers.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: David Daney [ Upstream commit a81507c79f4ae9a0f9fb1054b59b62a090620dd9 ] o Socket data is unsigned, so use unsigned accessors instructions. o Fix path result pointer generation arithmetic.

[PATCH 4.4 041/134] powerpc/mm/hugetlb: Filter out hugepage size not supported by page table layout

4.4-stable review patch. If anyone has any objections, please let me know. -- From: "Aneesh Kumar K.V" [ Upstream commit a525108cf1cc14651602d678da38fa627a76a724 ] Without this if firmware reports 1MB page size support we will crash trying to use 1MB as hugetlb page size. ec

[PATCH 4.4 035/134] driver: (adm1275) set the m,b and R coefficients correctly for power

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Shikhar Dogra [ Upstream commit 6faecba0b3da7b617bf72bef422bf0d3bb6dfe7d ] Seems like coefficient values for m, b and R under power have been put in the wrong order. Rearranging them properly

[PATCH 4.4 084/134] sched: Stop resched_cpu() from sending IPIs to offline CPUs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: "Paul E. McKenney" [ Upstream commit a0982dfa03efca6c239c52cabebcea4afb93ea6b ] The rcutorture test suite occasionally provokes a splat due to invoking resched_cpu() on an offline CPU: WARNIN

[PATCH 4.4 069/134] usb: gadget: dummy_hcd: Fix wrong power status bit clear/reset in dummy_hub_control()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yuyang Du [ Upstream commit 9f20dfb44d03745d0d3cef2ffb3abf8d8024fa61 ] This fixes the commit: 1cd8fd2887e1 ("usb: gadget: dummy_hcd: add SuperSpeed support"). In the case of ClearPortFeature

[PATCH 4.4 081/134] HID: elo: clear BTN_LEFT mapping

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Kosina [ Upstream commit 9abd04af951e5734c9d5cfee9b49790844b734cf ] ELO devices have one Button usage in GenDesk field, which makes hid-input map it to BTN_LEFT; that confuses userspace,

[PATCH 4.4 086/134] net: xfrm: allow clearing socket xfrm policies.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Lorenzo Colitti [ Upstream commit be8f8284cd897af2482d4e54fbc2bdfc15557259 ] Currently it is possible to add or update socket policies, but not clear them. Therefore, once a socket policy has

[PATCH 4.4 090/134] mtd: nand: ifc: update bufnum mask for ver >= 2.0.0

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jagdish Gediya [ Upstream commit bccb06c353af3764ca86d9da47652458e6c2eb41 ] Bufnum mask is used to calculate page position in the internal SRAM. As IFC version 2.0.0 has 16KB of internal SRAM

[PATCH 4.4 097/134] scsi: core: scsi_get_device_flags_keyed(): Always return device flags

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Bart Van Assche [ Upstream commit a44c9d36509c83cf64f33b93f6ab2e63822c01eb ] Since scsi_get_device_flags_keyed() callers do not check whether or not the returned value is an error code, change

[PATCH 4.4 100/134] media: cpia2: Fix a couple off by one bugs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter [ Upstream commit d5ac225c7d64c9c3ef821239edc035634e594ec9 ] The cam->buffers[] array has cam->num_frames elements so the > needs to be changed to >= to avoid going beyond the en

[PATCH 4.4 105/134] mac80211: remove BUG() when interface type is invalid

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Luca Coelho [ Upstream commit c7976f5272486e4ff406014c4b43e2fa3b70b052 ] In the ieee80211_setup_sdata() we check if the interface type is valid and, if not, call BUG(). This should never happ

[PATCH 4.4 103/134] agp/intel: Flush all chipset writes after updating the GGTT

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Chris Wilson [ Upstream commit 8516673a996870ea0ceb337ee4f83c33c5ec3111 ] Before accessing the GGTT we must flush the PTE writes and make them visible to the chipset, or else the indirect acce

[PATCH 4.4 078/134] wil6210: fix memory access violation in wil_memcpy_from/toio_32

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dedy Lansky [ Upstream commit 0f6edfe259d161580cb4870fcc46f5490f85 ] In case count is not multiple of 4, there is a read access in wil_memcpy_toio_32() from outside src buffer boundary. In

[PATCH 4.4 118/134] ALSA: seq: Fix possible UAF in snd_seq_check_queue()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit d0f833065221cbfcbadf19fd4102bcfa9330006a upstream. Although we've covered the races between concurrent write() and ioctl() in the previous patch series, there is still a pos

[PATCH 4.4 121/134] fs: Teach path_connected to handle nfs filesystems with multiple roots.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric W. Biederman commit 95dd77580ccd66a0da96e6d4696945b8cea39431 upstream. On nfsv2 and nfsv3 the nfs server can export subsets of the same filesystem and report the same filesystem identifier

[PATCH 4.4 133/134] usb: gadget: bdc: 64-bit pointer capability check

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Srinath Mannam commit c8e4e5bdb62a5ac6f860ebcaaf7b467b62f453f1 upstream. Corrected the register to check the 64-bit pointer capability state. 64-bit pointer implementation capability was checki

[PATCH 4.4 131/134] btrfs: Fix use-after-free when cleaning up fs_devs with a single stale device

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Borisov commit fd649f10c3d21ee9d7542c609f29978bdf73ab94 upstream. Commit 4fde46f0cc71 ("Btrfs: free the stale device") introduced btrfs_free_stale_device which iterates the device lists

[PATCH 4.4 112/134] selftests/x86: Add tests for the STR and SLDT instructions

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ricardo Neri commit a9e017d5619eb371460c8e516f4684def62bef3a upstream. The STR and SLDT instructions are not valid when running on virtual-8086 mode and generate an invalid operand exception. T

[PATCH 4.4 124/134] fs/aio: Use RCU accessors for kioctx_table->table[]

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit d0264c01e7587001a8c4608a5d1818dba9a4c11a upstream. While converting ioctx index from a list to a table, db446a08c23d ("aio: convert the ioctx list to table lookup v3") missed t

[PATCH 4.4 111/134] selftests/x86: Add tests for User-Mode Instruction Prevention

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ricardo Neri commit 9390afebe1d3f5a0be18b1afdd0ce09d67cebf9e upstream. Certain user space programs that run on virtual-8086 mode may utilize instructions protected by the User-Mode Instruction

[PATCH 4.9 001/241] blkcg: fix double free of new_blkg in blkcg_init_queue

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Hou Tao commit 9b54d816e00425c3a517514e0d677bb3cec49258 upstream. If blkg_create fails, new_blkg passed as an argument will be freed by blkg_create, so there is no need to free it again. Signe

[PATCH 4.9 020/241] x86/mm: Make mmap(MAP_32BIT) work correctly

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Safonov [ Upstream commit 3e6ef9c80946f781fc25e8490c9875b1d2b61158 ] mmap(MAP_32BIT) is broken due to the dependency on the TIF_ADDR32 thread flag. For 64bit applications MAP_32BIT wil

[PATCH 4.9 004/241] staging: speakup: Replace BUG_ON() with WARN_ON().

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Varsha Rao [ Upstream commit d351c2db5420bb17dcd2d9aac7ddb5f64c6d04b3 ] BUG_ON() is replaced with WARN_ON() and EINVAL is returned, when WARN_ON() is true. This fixes the following checkpatch

[PATCH 4.9 015/241] ath10k: fix a warning during channel switch with multiple vaps

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Mohammed Shafi Shajakhan [ Upstream commit c73f8c00330f59ce9b1ace9ff698aca83390d358 ] Doing a channel switch via hostapd_cli seems to update the new channel context for each VAP's appropriatel

[PATCH 4.9 009/241] ARM: dts: r8a7792: Remove unit-address and reg from integrated cache

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Geert Uytterhoeven [ Upstream commit a0504f0880c11da301dc2b5a5135bd02376e367e ] The Cortex-A15 cache controller is an integrated controller, and thus the device node representing it should not

[PATCH 4.9 007/241] drm: qxl: Dont alloc fbdev if emulation is not supported

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Gabriel Krisman Bertazi [ Upstream commit 861078381ba56b56808113736000d9e7ead349c8 ] If fbdev emulation is disabled, the QXL shutdown path will try to clean a framebuffer that wasn't initializ

Re: get_user_pages returning 0 (was Re: kernel BUG at drivers/vhost/vhost.c:LINE!)

On Mon, Mar 19, 2018 at 4:29 PM, David Sterba wrote: > On Mon, Mar 19, 2018 at 05:09:28PM +0200, Michael S. Tsirkin wrote: >> Hello! >> The following code triggered by syzbot >> >> r = get_user_pages_fast(log, 1, 1, &page); >> if (r < 0) >> return r; >> BU

[PATCH 4.9 025/241] i40e: fix ethtool to get EEPROM data from X722 interface

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Lihong Yang [ Upstream commit c271dd6c391b535226cf1a81aaad9f33cb5899d3 ] Currently ethtool -e will error out with a X722 interface as its EEPROM has a scope limit at offset 0x5B9FFF. This patc

[PATCH 4.9 051/241] [media] solo6x10: release vb2 buffers in solo_stop_streaming()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Anton Sviridenko [ Upstream commit 6e4c8480bd2eb95309ad3c875e11d2cad98f9188 ] Fixes warning that appears in dmesg after closing V4L2 userspace application that plays video from the display dev

[PATCH 4.9 050/241] of: fix of_device_get_modalias returned length when truncating buffers

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Rob Herring [ Upstream commit bcf54d5385abaea9c8026aae6f4eeb348671a52d ] If the length of the modalias is greater than the buffer size, then the modalias is truncated. However the untruncated

[PATCH 4.9 049/241] batman-adv: handle race condition for claims between gateways

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Andreas Pape [ Upstream commit a3a5129e122709306cfa6409781716c2933df99b ] Consider the following situation which has been found in a test setup: Gateway B has claimed client C and gateway A ha

[PATCH 4.9 056/241] timers, sched_clock: Update timeout for clock wrap

4.9-stable review patch. If anyone has any objections, please let me know. -- From: David Engraf [ Upstream commit 1b8955bc5ac575009835e371ae55e7f3af2197a9 ] The scheduler clock framework may not use the correct timeout for the clock wrap. This happens when a new clock driver

[PATCH 4.9 054/241] scsi: ipr: Fix missed EH wakeup

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Brian King [ Upstream commit 66a0d59cdd12546ddf01d229de28b07ccf6d637f ] Following a command abort or device reset, ipr's EH handlers wait for the commands getting aborted to get sent back from

[PATCH 4.9 028/241] drivers: net: xgene: Fix hardware checksum setting

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Quan Nguyen [ Upstream commit e026e700d940a1ea3d3bc84d92ac668b1f015462 ] This patch fixes the hardware checksum settings by properly program the classifier. Otherwise, packet may be received w

[PATCH 4.9 030/241] drivers: net: xgene: Fix wrong logical operation

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Quan Nguyen [ Upstream commit 11623fce0f9afef30c45e3f2120b063de3809a8f ] This patch fixes the wrong logical OR operation by changing it to bit-wise OR operation. Fixes: 3bb502f83080 ("drivers

[PATCH 4.9 023/241] eventpoll.h: fix epoll event masks

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Greg KH [ Upstream commit 6f051e4a685b768f3704c7c069aa1edee3010622 ] [resend due to me forgetting to cc: linux-api the first time around I posted these back on Feb 23] From: Greg Kroah-Hartma

[PATCH 4.9 087/241] braille-console: Fix value returned by _braille_console_setup

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Samuel Thibault [ Upstream commit 2ed2b8621be2708c0f6d61fe9841e9ad8b9753f0 ] commit bbeddf52adc1 ("printk: move braille console support into separate braille.[ch] files") introduced _braille_c

[PATCH 4.9 078/241] blk-throttle: make sure expire time isnt too big

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Shaohua Li [ Upstream commit 06cceedcca67a93ac7f7aa93bbd9980c7496d14e ] cgroup could be throttled to a limit but when all cgroups cross high limit, queue enters a higher state and so the group

[PATCH 4.9 085/241] PCI: Apply Cavium ACS quirk only to CN81xx/CN83xx/CN88xx devices

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Manish Jaggi [ Upstream commit b77d537d00d08fcf0bf641cd3491dd7df0ad1475 ] Only apply the Cavium ACS quirk to devices with ID in the range 0xa000-0xa0ff. These are the on-chip PCI devices for

[PATCH 4.9 093/241] ARM: dts: r7s72100: fix ethernet clock parent

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Chris Brandt [ Upstream commit 91a7c50cb4fabfba218549dfa84356069918bfbf ] Technically, the Ethernet block is run off the 133MHz Bus (B) clock, not the 33MHz Peripheral 0 (P0) clock. Fixes: 96

[PATCH 4.9 063/241] spi: omap2-mcspi: poll OMAP2_MCSPI_CHSTAT_RXS for PIO transfer

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Akinobu Mita [ Upstream commit 812613591cb652344186c4cd912304ed02138566 ] When running the spi-loopback-test with slower clock rate like 10 KHz, the test for 251 bytes transfer was failed. Th

[PATCH 4.9 069/241] perf buildid: Do not assume that readlink() returns a null terminated string

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tommi Rantala [ Upstream commit 5a2342111c68e623e27ee7ea3d0492d8dad6bda0 ] Valgrind was complaining: $ valgrind ./perf list >/dev/null ==11643== Memcheck, a memory error detector ==1164

[PATCH 4.9 065/241] dmaengine: imx-sdma: add 1ms delay to ensure SDMA channel is stopped

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jiada Wang [ Upstream commit 7f3ff14b7eb1ffad132117f08a1973b48e653d43 ] sdma_disable_channel() cannot ensure dma is stopped to access module's FIFOs. There is chance SDMA core is running and a

[PATCH 4.9 112/241] fm10k: correctly check if interface is removed

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Phil Turnbull [ Upstream commit 540fca35e38d15777b310f450f63f056e63039f5 ] FM10K_REMOVED expects a hardware address, not a 'struct fm10k_hw'. Fixes: 5cb8db4a4cbc ("fm10k: Add support for VF")

[PATCH 4.9 117/241] iommu/iova: Fix underflow bug in __alloc_and_insert_iova_range

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Nate Watterson [ Upstream commit 5016bdb796b3726eec043ca0ce3be981f712c756 ] Normally, calling alloc_iova() using an iova_domain with insufficient pfns remaining between start_pfn and dma_limit

[PATCH 4.9 110/241] ALSA: firewire-digi00x: add support for console models of Digi00x series

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Sakamoto [ Upstream commit 13e005f9f933a35b5e55c9d36f151efe2a8383ec ] Digi00x series includes two types of unit; rack and console. As long as reading information on config rom of Digi

[PATCH 4.9 123/241] drm/rockchip: vop: Enable pm domain before vop_initial

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jeffy Chen [ Upstream commit 5e570373c015b60a68828b1cd9d475cb33d3be4b ] We're trying to access vop registers here, so need to make sure the pm domain is on. Normally it should be enabled by t

[PATCH 4.9 107/241] reiserfs: Make cancel_old_flush() reliable

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara [ Upstream commit 71b0576bdb862e964a82c73327cdd1a249c53e67 ] Currently canceling of delayed work that flushes old data using cancel_old_flush() does not prevent work from being requeu

[PATCH 4.9 099/241] net/faraday: Add missing include of of.h

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Lunn [ Upstream commit d39004ab136ebb6949a7dda9d24376f3d6209295 ] Breaking the include loop netdevice.h, dsa.h, devlink.h broke this driver, it depends on includes brought in by these h

[PATCH 4.9 153/241] kprobes/x86: Set kprobes pages read-only

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Masami Hiramatsu [ Upstream commit d0381c81c2f782fa2131178d11e0cfb23d50d631 ] Set the pages which is used for kprobes' singlestep buffer and optprobe's trampoline instruction buffer to readonl

[PATCH 4.9 132/241] MIPS: r2-on-r6-emu: Clear BLTZALL and BGEZALL debugfs counters

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Aleksandar Markovic [ Upstream commit 411dac79cc2ed80f7e348ccc23eb4d8b0ba9f6d5 ] Add missing clearing of BLTZALL and BGEZALL emulation counters in function mipsr2_stats_clear_show(). Previous

[PATCH 4.9 159/241] ath10k: fix compile time sanity check for CE4 buffer size

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Mohammed Shafi Shajakhan [ Upstream commit 62ca0690cd495bb7c1414cdf0cf790c2922a1d79 ] In 'ath10k_ce_alloc_pipe' the compile time sanity check to ensure that there is sufficient buffers in CE4

[PATCH 4.9 161/241] wil6210: fix memory access violation in wil_memcpy_from/toio_32

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Dedy Lansky [ Upstream commit 0f6edfe259d161580cb4870fcc46f5490f85 ] In case count is not multiple of 4, there is a read access in wil_memcpy_toio_32() from outside src buffer boundary. In

[PATCH 4.9 155/241] clk: qcom: msm8996: Fix the vfe1 powerdomain name

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Rajendra Nayak [ Upstream commit a62ca337b36e31621b582cbe8f17d9404a48e120 ] Fix a typo which caused both vfe0 and vfe1 powerdomains to be named as vfe0. Signed-off-by: Rajendra Nayak Fixes:

[PATCH 4.9 166/241] HID: elo: clear BTN_LEFT mapping

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Kosina [ Upstream commit 9abd04af951e5734c9d5cfee9b49790844b734cf ] ELO devices have one Button usage in GenDesk field, which makes hid-input map it to BTN_LEFT; that confuses userspace,

[PATCH 4.9 177/241] ARM: dts: am335x-pepper: Fix the audio CODECs reset pin

4.9-stable review patch. If anyone has any objections, please let me know. -- From: "Andrew F. Davis" [ Upstream commit e153db03c6b7a035c797bcdf35262586f003ee93 ] The correct DT property for specifying a GPIO used for reset is "reset-gpios", fix this here. Fixes: 4341881d056

[PATCH 4.9 171/241] sched: Stop resched_cpu() from sending IPIs to offline CPUs

4.9-stable review patch. If anyone has any objections, please let me know. -- From: "Paul E. McKenney" [ Upstream commit a0982dfa03efca6c239c52cabebcea4afb93ea6b ] The rcutorture test suite occasionally provokes a splat due to invoking resched_cpu() on an offline CPU: WARNIN

[PATCH 4.9 173/241] net: ieee802154: adf7242: Fix bug if defined DEBUG

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Michael Hennerich [ Upstream commit 388b3b2b03701f3b3c10975c272892d7f78080df ] This fixes undefined reference to struct adf7242_local *lp in case DEBUG is defined. Signed-off-by: Michael Henn

[PATCH 4.9 195/241] scsi: devinfo: apply to HP XP the same flags as Hitachi VSP

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Xose Vazquez Perez [ Upstream commit b369a0471503130cfc74f9f62071db97f48948c3 ] Commit 56f3d383f37b ("scsi: scsi_devinfo: Add TRY_VPD_PAGES to HITACHI OPEN-V blacklist entry") modified some Hi

[PATCH 4.9 197/241] media: vsp1: Prevent suspending and resuming DRM pipelines

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Kieran Bingham [ Upstream commit a17d2d6cd9985ca09a9e384f1bc71d710f7e5203 ] When used as part of a display pipeline, the VSP is stopped and restarted explicitly by the DU from its suspend and

[PATCH 4.9 189/241] mwifiex: cfg80211: do not change virtual interface during scan processing

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Limin Zhu [ Upstream commit c61cfe49f0f0f0d1f8b56d0b045838d597e8c3a3 ] (1) Change virtual interface operation in cfg80211 process reset and reinitilize private data structure. (2) Scan result

[PATCH 4.9 200/241] drm/amdkfd: Fix memory leaks in kfd topology

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Yong Zhao [ Upstream commit 5108d768408abc80e4e8d99f5b406a73cb04056b ] Kobject created using kobject_create_and_add() can be freed using kobject_put() when there is no referenece any more. How

[PATCH 4.9 208/241] locking/locktorture: Fix num reader/writer corner cases

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Davidlohr Bueso [ Upstream commit 2ce77d16db4240dd2e422fc0a5c26d3e2ec03446 ] Things can explode for locktorture if the user does combinations of nwriters_stress=0 nreaders_stress=0. Fix this b

[PATCH 4.9 211/241] x86/boot/32: Fix UP boot on Quark and possibly other platforms

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit d2b6dc61a8dd3c429609b993778cb54e75a5c5f0 upstream. This partially reverts commit: 23b2a4ddebdd17f ("x86/boot/32: Defer resyncing initial_page_table until per-cpu is s

[PATCH 4.9 231/241] fs/aio: Use RCU accessors for kioctx_table->table[]

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit d0264c01e7587001a8c4608a5d1818dba9a4c11a upstream. While converting ioctx index from a list to a table, db446a08c23d ("aio: convert the ioctx list to table lookup v3") missed t

[PATCH 4.9 185/241] dmaengine: bcm2835-dma: Use vchan_terminate_vdesc() instead of desc_free

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Peter Ujfalusi [ Upstream commit de92436ac40ffe9933230aa503e24dbb5ede9201 ] To avoid race with vchan_complete, use the race free way to terminate running transfer. Implement the device_synchr

[PATCH 4.9 219/241] x86/speculation: Remove Skylake C2 from Speculation Control microcode blacklist

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Sergeyev commit e3b3121fa8da94cb20f9e0c64ab7981ae47fd085 upstream. In accordance with Intel's microcode revision guidance from March 6 MCU rev 0xc2 is cleared on both Skylake H/S and

[PATCH 4.9 233/241] scsi: sg: fix SG_DXFER_FROM_DEV transfers

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Thumshirn commit 68c59fcea1f2c6a54c62aa896cc623c1b5bc9b47 upstream. SG_DXFER_FROM_DEV transfers do not necessarily have a dxferp as we set it to NULL for the old sg_io read/write inter

[PATCH 4.9 241/241] usb: gadget: bdc: 64-bit pointer capability check

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Srinath Mannam commit c8e4e5bdb62a5ac6f860ebcaaf7b467b62f453f1 upstream. Corrected the register to check the 64-bit pointer capability state. 64-bit pointer implementation capability was checki

[PATCH 4.9 218/241] x86/speculation, objtool: Annotate indirect calls/jumps for objtool on 32-bit kernels

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Andy Whitcroft commit a14bff131108faf50cc0cf864589fd71ee216c96 upstream. In the following commit: 9e0e3c5130e9 ("x86/speculation, objtool: Annotate indirect calls/jumps for objtool") ... w

[PATCH 4.9 237/241] btrfs: Fix use-after-free when cleaning up fs_devs with a single stale device

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Borisov commit fd649f10c3d21ee9d7542c609f29978bdf73ab94 upstream. Commit 4fde46f0cc71 ("Btrfs: free the stale device") introduced btrfs_free_stale_device which iterates the device lists

[PATCH 4.14 15/41] ALSA: seq: Fix possible UAF in snd_seq_check_queue()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit d0f833065221cbfcbadf19fd4102bcfa9330006a upstream. Although we've covered the races between concurrent write() and ioctl() in the previous patch series, there is still a po

[PATCH 4.14 16/41] ALSA: seq: Clear client entry before deleting else at closing

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit a2ff19f7b70118ced291a28d5313469914de451b upstream. When releasing a client, we need to clear the clienttab[] entry at first, then call snd_seq_queue_client_leave(). Otherw

[PATCH 4.14 05/41] selftests/x86: Add tests for the STR and SLDT instructions

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ricardo Neri commit a9e017d5619eb371460c8e516f4684def62bef3a upstream. The STR and SLDT instructions are not valid when running on virtual-8086 mode and generate an invalid operand exception.

[PATCH 4.14 08/41] x86/speculation, objtool: Annotate indirect calls/jumps for objtool on 32-bit kernels

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Andy Whitcroft commit a14bff131108faf50cc0cf864589fd71ee216c96 upstream. In the following commit: 9e0e3c5130e9 ("x86/speculation, objtool: Annotate indirect calls/jumps for objtool") ...

[PATCH 4.14 37/41] scsi: qla2xxx: Fix NULL pointer access for fcport structure

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Quinn Tran commit 5c25d451163cab9be80744cbc5448d6b95ab8d1a upstream. when processing iocb in a timeout case, driver was trying to log messages without verifying if the fcport structure could h

[PATCH 4.14 28/41] RDMAVT: Fix synchronization around percpu_ref

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 74b44bbe80b4c62113ac1501482ea1ee40eb9d67 upstream. rvt_mregion uses percpu_ref for reference counting and RCU to protect accesses from lkey_table. When a rvt_mregion needs to

[PATCH 4.14 24/41] KVM: arm/arm64: vgic: Dont populate multiple LRs with the same vintid

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Marc Zyngier commit 16ca6a607d84bef0129698d8d808f501afd08d43 upstream. The vgic code is trying to be clever when injecting GICv2 SGIs, and will happily populate LRs with the same interrupt num

[PATCH 4.15 12/52] ALSA: hda - Revert power_save option default value

4.15-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 40088dc4e1ead7df31728c73f5b51d71da18831d upstream. With the commit 1ba8f9d30817 ("ALSA: hda: Add a power_save blacklist"), we changed the default value of power_save option

[PATCH 4.15 02/52] x86/cpufeatures: Add Intel PCONFIG cpufeature

4.15-stable review patch. If anyone has any objections, please let me know. -- From: Kirill A. Shutemov commit 7958b2246fadf54b7ff820a2a5a2c5ca1554716f upstream. CPUID.0x7.0x0:EDX[18] indicates whether Intel CPU support PCONFIG instruction. Signed-off-by: Kirill A. Shutemov

[PATCH 4.15 14/52] ALSA: seq: Clear client entry before deleting else at closing

4.15-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit a2ff19f7b70118ced291a28d5313469914de451b upstream. When releasing a client, we need to clear the clienttab[] entry at first, then call snd_seq_queue_client_leave(). Otherw

[PATCH 4.15 20/52] fs: Teach path_connected to handle nfs filesystems with multiple roots.

4.15-stable review patch. If anyone has any objections, please let me know. -- From: Eric W. Biederman commit 95dd77580ccd66a0da96e6d4696945b8cea39431 upstream. On nfsv2 and nfsv3 the nfs server can export subsets of the same filesystem and report the same filesystem identifie

[PATCH 4.15 03/52] selftests/x86/entry_from_vm86: Exit with 1 if we fail

4.15-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit 327d53d005ca47b10eae940616ed11c569f75a9b upstream. Fix a logic error that caused the test to exit with 0 even if test cases failed. Signed-off-by: Andy Lutomirski Cc:

[PATCH 4.15 05/52] x86/vm86/32: Fix POPF emulation

4.15-stable review patch. If anyone has any objections, please let me know. -- From: Andy Lutomirski commit b5069782453459f6ec1fdeb495d9901a4545fcb5 upstream. POPF would trap if VIP was set regardless of whether IF was set. Fix it. Suggested-by: Stas Sergeev Reported-by: Ba

  1   2   3   4   5   6   7   8   9   10   >