[PATCH 4.14 45/91] ALSA: seq: oss: Hardening for potential Spectre v1

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 8d218dd8116695ecda7164f97631c069938aa22e upstream. As Smatch recently suggested, a few places in OSS sequencer codes may expand the array directly from the

[PATCH 4.14 51/91] mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Joakim Tjernlund commit 6510bbc88e3258631831ade49033537081950605 upstream. Currently it is possible to read and/or write to suspend EB's. Writing /dev/mtdX or

[PATCH 4.14 50/91] mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Thor Thayer commit 47016b341fc3b3fd4909e058c6fa38f165b53646 upstream. The current Cadence QSPI driver caused a kernel panic when loading a Root Filesystem from

[PATCH 4.14 53/91] mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Joakim Tjernlund commit 7b70eb14392a7cf505f9b358d06c33b5af73d1e7 upstream. Currently it is possible to read and/or write to suspend EB's. Writing /dev/mtdX or

[PATCH 4.14 46/91] ALSA: hda: Hardening for potential Spectre v1

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 69fa6f19b95597618ab30438a27b67ad93daa7c7 upstream. As recently Smatch suggested, one place in HD-audio hwdep ioctl codes may expand the array directly from

[PATCH 4.14 52/91] mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Joakim Tjernlund commit 46a16a2283f9e678a4e26829175e0c37a5191860 upstream. Some Micron chips does not work well wrt Erase suspend for boot blocks. This avoids

Re: Hashed pointer issues

On Mon, Apr 30, 2018 at 1:01 PM Linus Torvalds < torva...@linux-foundation.org> wrote: > But if there are no actual users of get_random_bytes_arch(), maybe we can > just remove the fallback to the non-arch code, and add that return value > (and the __must_check()). Hmm. It is exported, so maybe

Re: [PATCH] sparc: vio: use put_device() instead of kfree()

From: Arvind Yadav Date: Wed, 25 Apr 2018 20:26:14 +0530 > Never directly free @dev after calling device_register(), even > if it returned an error. Always use put_device() to give up the > reference initialized. > > Signed-off-by: Arvind Yadav

Re: [PATCH net-next v6 0/3] kernel: add support to collect hardware logs in crash recovery kernel

Rahul Lakkireddy writes: > v6: > - Reworked device dump elf note name to contain vendor identifier. > - Added vmcoredd_header that precedes actual dump in the Elf Note. > - Device dump's name is moved inside vmcoredd_header. > - Added "CHELSIO" string as vendor

[PATCH 4.14 49/91] ALSA: hda/realtek - change the location for one of two front mics

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang commit 65811834ba56e9ed88117cf6c09880416c9951ab upstream. On this Lenovo ThinkCentre machine. There are two front mics, we change the location for one of

[PATCH 4.14 48/91] ALSA: hda/realtek - Update ALC255 depop optimize

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang commit ab3b8e5159b5335c81ba2d09ee5054d4a1b5a7a6 upstream. Add ALC255 its own depop functions for alc_init and alc_shutup. Assign it to ALC256 usage.

[PATCH 4.14 12/91] usbip: vhci_hcd: check rhport before using in vhci_hub_control()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan commit 5b22f676118ff25049382041da0db8012e57c9e8 upstream. Validate !rhport < 0 before using it to access port_status array. Signed-off-by: Shuah Khan

[PATCH 4.9 44/61] ARM: amba: Make driver_override output consistent with other buses

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Geert Uytterhoeven commit 5f53624662eaac89598641cee6cd54fc192572d9 upstream. For AMBA devices with unconfigured driver override, the "driver_override" sysfs virtual

[PATCH 4.9 43/61] PCI: aardvark: Fix PCIe Max Read Request Size setting

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Evan Wang commit fc31c4e347c9dad50544d01d5ee98b22c7df88bb upstream. There is an obvious typo issue in the definition of the PCIe maximum read request size: a bit shift is

Re: [PATCH 2/2] mm: Add kvmalloc_ab_c and kvzalloc_struct

On Mon, Apr 30, 2018 at 12:02:14PM -0700, Kees Cook wrote: > On Sun, Apr 29, 2018 at 1:30 PM, Matthew Wilcox wrote: > > On Sun, Apr 29, 2018 at 09:59:27AM -0700, Kees Cook wrote: > >> Did this ever happen? > > > > Not yet. I brought it up at LSFMM, and I'll repost the

[PATCH 4.14 15/91] USB: serial: simple: add libtransistor console

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Collin May commit fe710508b6ba9d28730f3021fed70e7043433b2e upstream. Add simple driver for libtransistor USB console. This device is implemented in software:

[PATCH 4.14 18/91] usb: typec: ucsi: Increase command completion timeout value

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Heikki Krogerus commit b1b59e16075f5e5da2943ce8de724ab96bc3c6c2 upstream. On some boards, under heavy load, the EC firmware is unable to complete commands

[PATCH 4.14 17/91] USB: serial: cp210x: add ID for NI USB serial console

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kyle Roeschley commit 1e23aace21515a8f7615a1de016c0ea8d4e0cc6e upstream. Added the USB VID and PID for the USB serial console on some National Instruments devices.

[PATCH 4.14 13/91] Revert "xhci: plat: Register shutdown for xhci_plat"

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman commit c20f53c58261b121d0989e147368803b9773b413 upstream. This reverts commit b07c12517f2aed0add8ce18146bb426b14099392 It is incomplete and

[PATCH 4.9 35/61] ALSA: hda/realtek - Add some fixes for ALC233

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Kailang Yang commit ea04a1dbf8b1d6af759d58e705636fde48583f8f upstream. Fill COEF to change EAPD to verb control. Assigned codec type. This is an additional fix over

[PATCH 4.9 50/61] libceph: reschedule a tick in finish_hunting()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 7b4c443d139f1d2b5570da475f7a9cbcef86740c upstream. If we go without an established session for a while, backoff delay will climb to 30 seconds. The

[PATCH 4.9 51/61] libceph: validate con->state at the top of try_write()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 9c55ad1c214d9f8c4594ac2c3fa392c1c32431a7 upstream. ceph_con_workfn() validates con->state before calling try_read() and then try_write(). However,

[PATCH 4.9 52/61] earlycon: Use a pointer table to fix __earlycon_table stride

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Kurtz commit dd709e72cb934eefd44de8d9969097173fbf45dc upstream. Commit 99492c39f39f ("earlycon: Fix __earlycon_table stride") tried to fix __earlycon_table stride

[PATCH 4.9 49/61] libceph: un-backoff on tick when we have a authenticated session

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit facb9f6eba3df4e8027301cc0e514dc582a1b366 upstream. This means that if we do some backoff, then authenticate, and are healthy for an extended period of

[PATCH 4.9 10/61] usbip: vhci_hcd: Fix usb device and sockfd leaks

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan commit 9020a7efe537856eb3e826ebebdf38a5d07a7857 upstream. vhci_hcd fails to do reset to put usb device and sockfd in the module remove/stop paths. Fix the

[PATCH 4.9 09/61] usbip: usbip_host: fix to hold parent lock for device_attach() calls

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan commit 4bfb141bc01312a817d36627cc47c93f801c216d upstream. usbip_host calls device_attach() without holding dev->parent lock. Fix it. Signed-off-by: Shuah

[PATCH 4.9 40/61] scsi: sd: Defer spinning up drive while SANITIZE is in progress

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Mahesh Rajashekhara commit 505aa4b6a8834a2300971c5220c380c3271ebde3 upstream. A drive being sanitized will return NOT READY / ASC 0x4 / ASCQ 0x1b ("LOGICAL

[PATCH 4.9 20/61] tty: Dont call panic() at tty_ldisc_init()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit 903f9db10f18f735e62ba447147b6c434b6af003 upstream. syzbot is reporting kernel panic [1] triggered by memory allocation failure at

[PATCH 4.9 22/61] tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit b2d89ad9c9682e795ed6eeb9ed455789ad6cedf1 upstream. At least on droid 4 with control channel in ADM mode, there is no response to Modem Status Command

[PATCH 4.9 21/61] tty: n_gsm: Fix long delays with control frame timeouts in ADM mode

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit e9ec22547986dd32c5c70da78107ce35dbff1344 upstream. Commit ea3d8465ab9b ("tty: n_gsm: Allow ADM response in addition to UA for control dlci") added

[PATCH 4.9 14/61] usb: core: Add quirk for HP v222w 16GB Mini

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Kamil Lulko commit 3180dabe08e3653bf0a838553905d88f3773f29c upstream. Add DELAY_INIT quirk to fix the following problem with HP v222w 16GB Mini: usb 1-3: unable to

[PATCH 4.4 16/44] tty: Dont call panic() at tty_ldisc_init()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit 903f9db10f18f735e62ba447147b6c434b6af003 upstream. syzbot is reporting kernel panic [1] triggered by memory allocation failure at

[PATCH 4.9 03/61] ext4: add validity checks for bitmap block numbers

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 7dac4a1726a9c64a517d595c40e95e2d0d135f6f upstream. An privileged attacker can cause a crash by mounting a crafted ext4 image which triggers a out-of-bounds

[PATCH 4.9 15/61] USB: Increment wakeup count on remote wakeup.

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Ravi Chandra Sadineni commit 83a62c51ba7b3c0bf45150c4eac7aefc6c785e94 upstream. On chromebooks we depend on wakeup count to identify the wakeup source. But currently

[PATCH 4.9 19/61] drm/virtio: fix vq wait_event condition

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Gerd Hoffmann commit d02d270014f70dcab0117776b81a37b6fca745ae upstream. Wait until we have enough space in the virt queue to actually queue up our request. Avoids the guest

Proposal

Hello Greetings to you today i asked before but i did't get a response please i know this might come to you as a surprise because you do not know me personally i have a business proposal for our mutual benefit please let me know if you are interested. Best Regards, Esentepe Mahallesi

Re: [PATCH] input/psmouse: Don't hold the mutex while calling ->disconnect

Hi Daniel, On Mon, Apr 30, 2018 at 09:56:49PM +0200, Daniel Vetter wrote: > At least trackpoint_disconnect wants to remove some sysfs files, and > we can't remove sysfs files while holding psmouse_mutex: > > == > WARNING: possible circular

Re: pciehp 0000:00:1c.0:pcie004: Timeout on hotplug command 0x1038 (issued 65284 msec ago)

On Mon, Apr 30, 2018 at 04:48:15PM -0400, Sinan Kaya wrote: > Bjorn, > > On 4/28/2018 9:03 AM, ok...@codeaurora.org wrote: > >> Hmm, if it is the remove() method then kexec does not use it.  kexec use > >> the shutdown() method instead.  I missed this details when I replied. > > > > Portdrv

Re: [PATCH 1/6] xen: Add RING_COPY_RESPONSE()

On 04/30/2018 05:01 PM, Marek Marczykowski-Górecki wrote: > Using RING_GET_RESPONSE() on a shared ring is easy to use incorrectly > (i.e., by not considering that the other end may alter the data in the > shared ring while it is being inspected). Safe usage of a response > generally requires

Re: Hashed pointer issues

On Mon, Apr 30, 2018 at 12:16:45PM -0700, Kees Cook wrote: > On Mon, Apr 30, 2018 at 12:00 PM, Linus Torvalds > wrote: > > On Mon, Apr 30, 2018 at 11:38 AM Kees Cook wrote: > > > >> Something like this? (Untested.) > > > > Looks workable. > >

Re: Bug? pcie_aspm=off cause less power consumption as default

On Friday 27 April 2018 14:53:13 Bjorn Helgaas wrote: > Can you apply the following patch and try just the "force powersave" > situation? Hi! You forgot to attach that patch. -- Pali Rohár pali.ro...@gmail.com signature.asc Description: PGP signature

Re: [PATCH 2/2] mm: Add kvmalloc_ab_c and kvzalloc_struct

On Mon, Apr 30, 2018 at 1:16 PM, Matthew Wilcox wrote: > On Mon, Apr 30, 2018 at 12:02:14PM -0700, Kees Cook wrote: >> For any longer multiplications, I've only found[1]: >> >> drivers/staging/rtl8188eu/os_dep/osdep_service.c: void **a = >> kzalloc(h * sizeof(void *) +

Re: [PATCH V2 2/9] staging: vchiq_arm: Clear VLA warning

On Sat, Apr 28, 2018 at 8:47 AM, Stefan Wahren wrote: > The kernel would like to have all stack VLA usage removed[1]. The array > here is fixed (declared with a const variable) but it appears like a VLA > to the compiler. Also, currently we are putting 768 bytes on the >

Re: [PATCH v14 0/9] Address error and recovery for AER and DPC

On Thu, Apr 26, 2018 at 11:00:52AM +0530, p...@codeaurora.org wrote: > On 2018-04-23 20:53, Oza Pawandeep wrote: > > This patch set brings in error handling support for DPC > > > > The current implementation of AER and error message broadcasting to the > > EP driver is tightly coupled and limited

Re: [PATCH v6 3/8] sysctl: Warn when a clamped sysctl parameter is set out of range

I like this series overall, thanks! No objections from me. One thing I noted, though: On Fri, Apr 27, 2018 at 2:00 PM, Waiman Long wrote: > if (param->min && *param->min > val) { > if (clamp) { > val =

[PATCH 10/14] rseq: selftests: Provide rseq library (v5)

This rseq helper library provides a user-space API to the rseq() system call. The rseq fast-path exposes the instruction pointer addresses where the rseq assembly blocks begin and end, as well as the associated abort instruction pointer, in the __rseq_table section. This section allows debuggers

[PATCH 14/14] rseq: selftests: Provide Makefile, scripts, gitignore (v2)

A run_param_test.sh script runs many variants of the parametrizable tests. Wire up the rseq Makefile, add directory entry into MAINTAINERS file. Signed-off-by: Mathieu Desnoyers CC: Shuah Khan CC: Russell King

[PATCH 12/14] rseq: selftests: Provide basic percpu ops test (v2)

"basic_percpu_ops_test" is a slightly more "realistic" variant, implementing a few simple per-cpu operations and testing their correctness. Signed-off-by: Mathieu Desnoyers CC: Shuah Khan CC: Russell King CC:

[PATCH 07/14] powerpc: Add support for restartable sequences

From: Boqun Feng Call the rseq_handle_notify_resume() function on return to userspace if TIF_NOTIFY_RESUME thread flag is set. Perform fixup on the pre-signal when a signal is delivered on top of a restartable sequence critical section. Signed-off-by: Boqun Feng

[PATCH 08/14] powerpc: Wire up restartable sequences system call

From: Boqun Feng Wire up the rseq system call on powerpc. This provides an ABI improving the speed of a user-space getcpu operation on powerpc by skipping the getcpu system call on the fast path, as well as improving the speed of user-space operations on per-cpu data

[PATCH 11/14] rseq: selftests: Provide basic test

"basic_test" only asserts that RSEQ works moderately correctly. E.g. that the CPUID pointer works. Signed-off-by: Mathieu Desnoyers CC: Shuah Khan CC: Russell King CC: Catalin Marinas CC:

[PATCH 09/14] selftests: lib.mk: Introduce OVERRIDE_TARGETS

Introduce OVERRIDE_TARGETS to allow tests to express dependencies on header files and .so, which require to override the selftests lib.mk targets. Signed-off-by: Mathieu Desnoyers Acked-by: Shuah Khan CC: Russell King

[PATCH 01/14] uapi headers: Provide types_32_64.h (v2)

Provide helper macros for fields which represent pointers in kernel-userspace ABI. This facilitates handling of 32-bit user-space by 64-bit kernels by defining those fields as 32-bit 0-padding and 32-bit integer on 32-bit architectures, which allows the kernel to treat those as 64-bit integers.

[PATCH 4.14 31/91] tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit b2d89ad9c9682e795ed6eeb9ed455789ad6cedf1 upstream. At least on droid 4 with control channel in ADM mode, there is no response to Modem Status Command

[PATCH 4.14 79/91] rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Piggin commit 682e6b4da5cbe8e9a53f979a58c2a9d7dc997175 upstream. The OPAL RTC driver does not sleep in case it gets OPAL_BUSY or OPAL_BUSY_EVENT from firmware,

[PATCH 4.14 59/91] ANDROID: binder: prevent transactions into own process.

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Martijn Coenen commit 7aa135fcf26377f92dc0680a57566b4c7f3e281b upstream. This can't happen with normal nodes (because you can't get a ref to a node you own), but it could

[PATCH 4.14 30/91] tty: n_gsm: Fix long delays with control frame timeouts in ADM mode

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit e9ec22547986dd32c5c70da78107ce35dbff1344 upstream. Commit ea3d8465ab9b ("tty: n_gsm: Allow ADM response in addition to UA for control dlci") added

[PATCH 4.14 33/91] tty: Use __GFP_NOFAIL for tty_ldisc_get()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit bcdd0ca8cb8730573afebcaae4138f8f4c8eaa20 upstream. syzbot is reporting crashes triggered by memory allocation fault injection at

[PATCH 4.14 56/91] scsi: sd: Defer spinning up drive while SANITIZE is in progress

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Mahesh Rajashekhara commit 505aa4b6a8834a2300971c5220c380c3271ebde3 upstream. A drive being sanitized will return NOT READY / ASC 0x4 / ASCQ 0x1b ("LOGICAL

[PATCH 4.14 20/91] USB: Increment wakeup count on remote wakeup.

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ravi Chandra Sadineni commit 83a62c51ba7b3c0bf45150c4eac7aefc6c785e94 upstream. On chromebooks we depend on wakeup count to identify the wakeup source. But

[PATCH 4.14 19/91] usb: core: Add quirk for HP v222w 16GB Mini

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kamil Lulko commit 3180dabe08e3653bf0a838553905d88f3773f29c upstream. Add DELAY_INIT quirk to fix the following problem with HP v222w 16GB Mini: usb 1-3: unable to

[PATCH 4.14 21/91] ALSA: usb-audio: Skip broken EU on Dell dock USB-audio

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 1d8d6428d1da642ddd75b0be2d1bb1123ff8e017 upstream. The Dell Dock USB-audio device with 0bda:4014 is behaving notoriously bad, and we have already applied

[PATCH 4.14 23/91] virtio_console: dont tie bufs to a vq

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Michael S. Tsirkin commit 2855b33514d290c51d52d94e25d3ef942cd4d578 upstream. an allocated buffer doesn't need to be tied to a vq - only vq->vdev is ever used. Pass the

[PATCH 4.14 22/91] virtio: add ability to iterate over vqs

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Michael S. Tsirkin commit 24a7e4d20783c0514850f24a5c41ede46ab058f0 upstream. For cleanup it's helpful to be able to simply scan all vqs and discard all data. Add an iterator

sar reporting zero cpu usage for everything

Thomas and Steven, I am running the 4.16 kernel and I found some odd behavior in sar. It shows zero usage time in ALL categories. 12:12:36CPU %user %nice %system %iowait%steal %idle 12:34:10all 0.00 0.00 0.00 0.00 0.00 0.00

[PATCH 4.14 04/91] ext4: add validity checks for bitmap block numbers

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 7dac4a1726a9c64a517d595c40e95e2d0d135f6f upstream. An privileged attacker can cause a crash by mounting a crafted ext4 image which triggers a out-of-bounds

[PATCH 4.9 47/61] crypto: drbg - set freed buffers to NULL

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Stephan Mueller commit eea0d3ea7546961f69f55b26714ac8fd71c7c020 upstream. During freeing of the internal buffers used by the DRBG, set the pointer to NULL. It is possible

[PATCH 4.9 61/61] powerpc/eeh: Fix race with driver un/bind

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Michael Neuling commit f0295e047fcf52ccb42561fb7de6942f5201b676 upstream. The current EEH callbacks can race with a driver unbind. This can result in a backtraces like this:

[PATCH 4.9 48/61] ASoC: fsl_esai: Fix divisor calculation failure at lower ratio

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Nicolin Chen commit c656941df9bc80f7ec65b92ca73c42f8b0b62628 upstream. When the desired ratio is less than 256, the savesub (tolerance) in the calculation would become

[PATCH 4.9 42/61] PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf()

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Victor Gu commit 4fa3999ee672c54a5498ce98e20fe3fdf9c1cbb4 upstream. When setting the PIO_ADDR_LS register during a configuration read, we were properly passing the device

[PATCH 4.9 58/61] x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 1a512c0882bd311c5b5561840fcfbe4c25b8f319 upstream. A bugfix broke the x32 shmid64_ds and msqid64_ds data structure layout (as seen from user space) a few

[PATCH 4.9 39/61] kobject: dont use WARN for registration failures

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit 3e14c6abbfb5c94506edda9d8e2c145d79375798 upstream. This WARNING proved to be noisy. The function still returns an error and callers should handle it.

[PATCH 4.9 53/61] cpufreq: powernv: Fix hardlockup due to synchronous smp_call in timer interrupt

4.9-stable review patch. If anyone has any objections, please let me know. -- From: Shilpasri G Bhat commit c0f7f5b6c69107ca92909512533e70258ee19188 upstream. gpstate_timer_handler() uses synchronous smp_call to set the pstate on the requested

[PATCH 4.4 39/44] libceph: validate con->state at the top of try_write()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 9c55ad1c214d9f8c4594ac2c3fa392c1c32431a7 upstream. ceph_con_workfn() validates con->state before calling try_read() and then try_write(). However,

[PATCH 4.4 40/44] x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 1a512c0882bd311c5b5561840fcfbe4c25b8f319 upstream. A bugfix broke the x32 shmid64_ds and msqid64_ds data structure layout (as seen from user space) a few

[PATCH 4.4 33/44] kobject: dont use WARN for registration failures

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Vyukov commit 3e14c6abbfb5c94506edda9d8e2c145d79375798 upstream. This WARNING proved to be noisy. The function still returns an error and callers should handle it.

[PATCH 4.4 12/44] ALSA: usb-audio: Skip broken EU on Dell dock USB-audio

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 1d8d6428d1da642ddd75b0be2d1bb1123ff8e017 upstream. The Dell Dock USB-audio device with 0bda:4014 is behaving notoriously bad, and we have already applied

Good News

You are a recipient to Mrs Julie Leach Donation of $2 million USD. Contact (julieleach...@gmail.com) for claims.

[PATCH 4.4 03/44] ext4: add validity checks for bitmap block numbers

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 7dac4a1726a9c64a517d595c40e95e2d0d135f6f upstream. An privileged attacker can cause a crash by mounting a crafted ext4 image which triggers a out-of-bounds

[PATCH 4.4 01/44] ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers commit 349fa7d6e1935f49bf4161c4900711b2989180a9 upstream. During the "insert range" fallocate operation, extents starting at the range offset are shifted

[PATCH 4.4 11/44] USB: Increment wakeup count on remote wakeup.

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ravi Chandra Sadineni commit 83a62c51ba7b3c0bf45150c4eac7aefc6c785e94 upstream. On chromebooks we depend on wakeup count to identify the wakeup source. But currently

[PATCH 4.4 15/44] drm/virtio: fix vq wait_event condition

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Gerd Hoffmann commit d02d270014f70dcab0117776b81a37b6fca745ae upstream. Wait until we have enough space in the virt queue to actually queue up our request. Avoids the guest

Re: [PATCH v3] init: Fix false positives in W+X checking

On 4/30/2018 12:40 PM, Kees Cook wrote: On Mon, Apr 30, 2018 at 10:19 AM, Laura Abbott wrote: On 04/30/2018 08:59 AM, Jeffrey Hugo wrote: load_module() creates W+X mappings via __vmalloc_node_range() (from layout_and_allocate()->move_module()->module_alloc()) by using

Re: [PATCH v2] mm: vmalloc: Clean up vunmap to avoid pgtable ops twice

On Mon, 16 Apr 2018 16:29:02 +0530 Chintan Pandya wrote: > vunmap does page table clear operations twice in the > case when DEBUG_PAGEALLOC_ENABLE_DEFAULT is enabled. > > So, clean up the code as that is unintended. > > As a perf gain, we save few us. Below ftrace data

[PATCH 4.14 29/91] tty: Dont call panic() at tty_ldisc_init()

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit 903f9db10f18f735e62ba447147b6c434b6af003 upstream. syzbot is reporting kernel panic [1] triggered by memory allocation failure at

Re: [PATCH 2/3] platform: move the early platform device support to arch/sh

Hi Bartosz, I love your patch! Yet something to improve: [auto build test ERROR on linus/master] [also build test ERROR on v4.17-rc3 next-20180430] [if your patch is applied to the wrong git tree, please drop us a note to help improve the system] url: https://github.com/0day-ci/linux

[PATCH 2/6] xen-netfront: copy response out of shared buffer before accessing it

Make local copy of the response, otherwise backend might modify it while frontend is already processing it - leading to time of check / time of use issue. This is complementary to XSA155. Cc: sta...@vger.kernel.org Signed-off-by: Marek Marczykowski-Górecki ---

Re: [PATCH] drm/vc4: make function vc4_allocate_bin_bo static

Vaishali Thakkar writes: > Sparse complains with following warning: > drivers/gpu/drm/vc4/vc4_v3d.c:222:1: warning: symbol > 'vc4_allocate_bin_bo' was not declared. Should it be static? > > Make vc4_allocate_bin static as it is not used outside of > vc4_v3d.c. > >

[PATCH 5/6] xen-blkfront: make local copy of response before using it

Data on the shared page can be changed at any time by the backend. Make a local copy, which is no longer controlled by the backend. And only then access it. This is complementary to XSA155. CC: sta...@vger.kernel.org Signed-off-by: Marek Marczykowski-Górecki ---

Re: [PATCH 2/2] drm/panel: Enable DSI transactions on the RPi panel.

Thierry Reding writes: > [ Unknown signature status ] > On Tue, Oct 31, 2017 at 12:32:58PM -0700, Eric Anholt wrote: >> It turns out that I had just mistaken what type of write the register >> writes were supposed to be, using DCS instead of generic long writes. >> >>

[PATCH 0/6] Fix XSA-155-like bugs in frontend drivers

Patches in original Xen Security Advisory 155 cared only about backend drivers while leaving frontend patches to be "developed and released (publicly) after the embargo date". This is said series. Marek Marczykowski-Górecki (6): xen: Add RING_COPY_RESPONSE() xen-netfront: copy response out of

[PATCH 3/6] xen-netfront: do not use data already exposed to backend

Backend may freely modify anything on shared page, so use data which was supposed to be written there, instead of reading it back from the shared page. This is complementary to XSA155. CC: sta...@vger.kernel.org Signed-off-by: Marek Marczykowski-Górecki ---

Re: [PATCH 2/2] mm: Add kvmalloc_ab_c and kvzalloc_struct

On 2018-04-30 22:16, Matthew Wilcox wrote: > On Mon, Apr 30, 2018 at 12:02:14PM -0700, Kees Cook wrote: >> >> Getting the constant ordering right could be part of the macro >> definition, maybe? i.e.: >> >> static inline void *kmalloc_ab(size_t a, size_t b, gfp_t flags) >> { >> if

[GIT PULL 3/3] bcm2835-defconfig-64-next-2018-04-30

The following changes since commit 60cc43fc888428bb2f18f08997432d426a243338: Linux 4.17-rc1 (2018-04-15 18:24:20 -0700) are available in the Git repository at: git://github.com/anholt/linux tags/bcm2835-defconfig-64-next-2018-04-30 for you to fetch changes up to

[GIT PULL 2/3] bcm2835-defconfig-next-2018-04-30

The following changes since commit 60cc43fc888428bb2f18f08997432d426a243338: Linux 4.17-rc1 (2018-04-15 18:24:20 -0700) are available in the Git repository at: git://github.com/anholt/linux tags/bcm2835-defconfig-next-2018-04-30 for you to fetch changes up to

Re: pciehp 0000:00:1c.0:pcie004: Timeout on hotplug command 0x1038 (issued 65284 msec ago)

On Mon, Apr 30, 2018 at 05:27:32PM -0400, Sinan Kaya wrote: > On 4/30/2018 5:17 PM, Bjorn Helgaas wrote: > How about remove() only if MSI is disabled? Most root port interrupts > are MSI based anyhow. I think the code is perfectly fine as it is and doesn't need to nor should be modified. We

Re: [PATCH 1/6] xen: Add RING_COPY_RESPONSE()

On 04/30/2018 05:27 PM, Marek Marczykowski-Górecki wrote: > On Mon, Apr 30, 2018 at 05:25:52PM -0400, Boris Ostrovsky wrote: >> Also, perhaps the two can be collapsed together, along the lines of >> >> #define RING_COPY_(action, _r, _idx, _msg) do {  \ >>     /* Use

[PATCH RESEND] connector: add parent pid and tgid to coredump and exit events

The intention is to get notified of process failures as soon as possible, before a possible core dumping (which could be very long) (e.g. in some process-manager). Coredump and exit process events are perfect for such use cases (see 2b5faa4c553f "connector: Added coredumping event to the process

[REBASED PATCH 2/2] usbip: usbip_host: run rebind from exit when module is removed

After removing usbip_host module, devices it releases are left without a driver. For example, when a keyboard or a mass storage device are bound to usbip_host when it is removed, these devices are no longer bound to any driver. Fix it to run device_attach() from the module exit routine to restore

[PATCH 13/14] rseq: selftests: Provide parametrized tests (v2)

"param_test" is a parametrizable restartable sequences test. See the "--help" output for usage. "param_test_benchmark" is the same as "param_test", but it removes testing book-keeping code to allow accurate benchmarks. "param_test_compare_twice" is the same as "param_test", but it performs each

  1   2   3   4   5   6   7   8   9   10   >