This is the start of the stable review cycle for the 5.15.159 release.
There are 168 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 16 May 2024 10:09:32 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.159-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <[email protected]>
Linux 5.15.159-rc1
Johan Hovold <[email protected]>
Bluetooth: qca: fix firmware check error path
Johan Hovold <[email protected]>
Bluetooth: qca: fix NVM configuration parsing
Johan Hovold <[email protected]>
Bluetooth: qca: add missing firmware sanity checks
Johan Hovold <[email protected]>
regulator: core: fix debugfs creation regression
Lakshmi Yadlapati <[email protected]>
hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
Thadeu Lima de Souza Cascardo <[email protected]>
net: fix out-of-bounds access in ops_init
Zack Rusin <[email protected]>
drm/vmwgfx: Fix invalid reads in fence signaled events
Alexander Usyskin <[email protected]>
mei: me: add lunar lake point M DID
Viken Dadhaniya <[email protected]>
slimbus: qcom-ngd-ctrl: Add timeout for wait operation
Jim Cromie <[email protected]>
dyndbg: fix old BUG_ON in >control parser
Joao Paulo Goncalves <[email protected]>
ASoC: ti: davinci-mcasp: Fix race condition during probe
Sameer Pujar <[email protected]>
ASoC: tegra: Fix DSPK 16-bit playback
Doug Berger <[email protected]>
net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
Paolo Abeni <[email protected]>
tipc: fix UAF in error path
Hans de Goede <[email protected]>
iio: accel: mxc4005: Interrupt handling fixes
Ramona Gradinariu <[email protected]>
iio:imu: adis16475: Fix sync mode setting
Javier Carrasco <[email protected]>
dt-bindings: iio: health: maxim,max30102: fix compatible check
Paolo Abeni <[email protected]>
mptcp: ensure snd_nxt is properly initialized on connect
Dominique Martinet <[email protected]>
btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
Aman Dhoot <[email protected]>
ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
Thinh Nguyen <[email protected]>
usb: dwc3: core: Prevent phy suspend during init
Thinh Nguyen <[email protected]>
usb: xhci-plat: Don't include xhci.h
Chris Wulff <[email protected]>
usb: gadget: f_fs: Fix a race condition when processing setup packets.
Peter Korsgaard <[email protected]>
usb: gadget: composite: fix OS descriptors w_value logic
Guenter Roeck <[email protected]>
usb: ohci: Prevent missed ohci interrupts
Alan Stern <[email protected]>
usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
Christian A. Ehrhardt <[email protected]>
usb: typec: ucsi: Fix connector check on init
Christian A. Ehrhardt <[email protected]>
usb: typec: ucsi: Check for notifications after init
Rob Herring <[email protected]>
arm64: dts: qcom: Fix 'interrupt-map' parent address cells
Linus Torvalds <[email protected]>
Reapply "drm/qxl: simplify qxl_fence_wait"
Thanassis Avgerinos <[email protected]>
firewire: nosy: ensure user_length is taken into account when fetching packet contents
Dmitry Antipov <[email protected]>
btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
Vanshidhar Konda <[email protected]>
ACPI: CPPC: Fix access width used for PCC registers
Jarred White <[email protected]>
ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
Easwar Hariharan <[email protected]>
Revert "Revert "ACPI: CPPC: Use access_width over bit_width for system memory accesses""
Gabe Teeger <[email protected]>
drm/amd/display: Atom Integrated System Info v2_2 for DCN35
Douglas Anderson <[email protected]>
drm/connector: Add \n to message about demoting connector force-probes
Jerome Brunet <[email protected]>
drm/meson: dw-hdmi: add bandgap setting for g12
Jerome Brunet <[email protected]>
drm/meson: dw-hdmi: power up phy on device init
Yonglong Liu <[email protected]>
net: hns3: fix port vlan filter not disabled issue
Jian Shen <[email protected]>
net: hns3: split function hclge_init_vlan_config()
Peiyang Wang <[email protected]>
net: hns3: use appropriate barrier function after setting a bit value
Peiyang Wang <[email protected]>
net: hns3: change type of numa_node_mask as nodemask_t
Jie Wang <[email protected]>
net: hns3: refactor hclge_cmd_send with new hclge_comm_cmd_send API
Jie Wang <[email protected]>
net: hns3: create new set of unified hclge_comm_cmd_send APIs
Jie Wang <[email protected]>
net: hns3: create new cmdq hardware description structure hclge_comm_hw
Jie Wang <[email protected]>
net: hns3: refactor hns3 makefile to support hns3_common module
Jian Shen <[email protected]>
net: hns3: direct return when receive a unknown mailbox message
Hao Lan <[email protected]>
net: hns3: refactor function hclge_mbx_handler()
Guangbin Huang <[email protected]>
net: hns3: add query vf ring and vector map relation
Yufeng Mo <[email protected]>
net: hns3: add log for workqueue scheduled late
Peiyang Wang <[email protected]>
net: hns3: using user configure after hardware reset
Guangbin Huang <[email protected]>
net: hns3: PF support get unicast MAC address space assigned by firmware
Eric Dumazet <[email protected]>
ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
Felix Fietkau <[email protected]>
net: bridge: fix corrupted ethernet header on multicast-to-unicast
Eric Dumazet <[email protected]>
phonet: fix rtm_phonet_notify() skb allocation
Aleksa Savic <[email protected]>
hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
Aleksa Savic <[email protected]>
hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
Aleksa Savic <[email protected]>
hwmon: (corsair-cpro) Use a separate buffer for sending commands
Roded Zats <[email protected]>
rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
Duoming Zhou <[email protected]>
Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
Duoming Zhou <[email protected]>
Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
Kuniyuki Iwashima <[email protected]>
tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
Eric Dumazet <[email protected]>
tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
Boy.Wu <[email protected]>
ARM: 9381/1: kasan: clear stale stack poison
Paul Davey <[email protected]>
xfrm: Preserve vlan tags for transport mode software GRO
Al Viro <[email protected]>
qibfs: fix dentry leak
Neil Armstrong <[email protected]>
ASoC: meson: axg-tdm-interface: Fix formatters in trigger"
Neil Armstrong <[email protected]>
ASoC: meson: axg-card: Fix nonatomic links
John Fastabend <[email protected]>
bpf, sockmap: Improved check for empty queue
John Fastabend <[email protected]>
bpf, sockmap: Reschedule is now done through backlog
John Fastabend <[email protected]>
bpf, sockmap: Convert schedule_work into delayed_work
John Fastabend <[email protected]>
bpf, sockmap: Handle fin correctly
John Fastabend <[email protected]>
bpf, sockmap: TCP data stall on recv before accept
Vanillan Wang <[email protected]>
net:usb:qmi_wwan: support Rolling modules
Lyude Paul <[email protected]>
drm/nouveau/dp: Don't probe eDP ports twice harder
Joakim Sindholt <[email protected]>
fs/9p: drop inodes immediately on non-.L too
Stephen Boyd <[email protected]>
clk: Don't hold prepare_lock when calling kref_put()
Andy Shevchenko <[email protected]>
gpio: crystalcove: Use -ENOTSUPP consistently
Andy Shevchenko <[email protected]>
gpio: wcove: Use -ENOTSUPP consistently
Jeff Layton <[email protected]>
9p: explicitly deny setlease attempts
Joakim Sindholt <[email protected]>
fs/9p: translate O_TRUNC into OTRUNC
Joakim Sindholt <[email protected]>
fs/9p: only translate RWX permissions for plain 9P2000
Krzysztof Kozlowski <[email protected]>
iommu: mtk: fix module autoloading
John Stultz <[email protected]>
selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
Jiaxun Yang <[email protected]>
MIPS: scall: Save thread_info.syscall unconditionally on entry
Thierry Reding <[email protected]>
gpu: host1x: Do not setup DMA for virtual devices
Rik van Riel <[email protected]>
blk-iocost: avoid out of bounds shift
Maurizio Lombardi <[email protected]>
scsi: target: Fix SELinux error when systemd-modules loads the target module
Boris Burkov <[email protected]>
btrfs: always clear PERTRANS metadata during commit
Boris Burkov <[email protected]>
btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
Peng Liu <[email protected]>
tools/power turbostat: Fix Bzy_MHz documentation typo
Doug Smythies <[email protected]>
tools/power turbostat: Fix added raw MSR output
Adam Goldman <[email protected]>
firewire: ohci: mask bus reset interrupts between ISR and bottom half
Chen Ni <[email protected]>
ata: sata_gemini: Check clk_enable() result
Phil Elwell <[email protected]>
net: bcmgenet: Reset RBUF on first open
Takashi Iwai <[email protected]>
ALSA: line6: Zero-initialize message buffers
Borislav Petkov (AMD) <[email protected]>
kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries
Anand Jain <[email protected]>
btrfs: return accurate error code on open failure in open_fs_devices()
Saurav Kashyap <[email protected]>
scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
linke li <[email protected]>
net: mark racy access on sk->sk_rcvbuf
Igor Artemiev <[email protected]>
wifi: cfg80211: fix rdev_dump_mpp() arguments order
Jeff Johnson <[email protected]>
wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
Andrew Price <[email protected]>
gfs2: Fix invalid metadata access in punch_hole
Justin Tee <[email protected]>
scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port()
Justin Tee <[email protected]>
scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
Justin Tee <[email protected]>
scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
Oliver Upton <[email protected]>
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
Marc Zyngier <[email protected]>
KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
Jernej Skrabec <[email protected]>
clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
Richard Gobert <[email protected]>
net: gro: add flush check in udp_gro_receive_segment
Andy Shevchenko <[email protected]>
drm/panel: ili9341: Use predefined error codes
Andy Shevchenko <[email protected]>
drm/panel: ili9341: Respect deferred probe
Alexandra Winter <[email protected]>
s390/qeth: Fix kernel panic after setting hsuid
Julian Wiedmann <[email protected]>
s390/qeth: don't keep track of Input Queue count
Xin Long <[email protected]>
tipc: fix a possible memleak in tipc_buf_append
Felix Fietkau <[email protected]>
net: core: reject skb_copy(_expand) for fraglist GSO skbs
Felix Fietkau <[email protected]>
net: bridge: fix multicast-to-unicast with fraglist GSO
Marek Behún <[email protected]>
net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
Sebastian Andrzej Siewior <[email protected]>
cxgb4: Properly lock TX queue for the selftest.
Bui Quang Minh <[email protected]>
s390/cio: Ensure the copied buf is NUL terminated
Pierre-Louis Bossart <[email protected]>
ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
Jerome Brunet <[email protected]>
ASoC: meson: cards: select SND_DYNAMIC_MINORS
Jerome Brunet <[email protected]>
ASoC: meson: axg-tdm-interface: manage formatters in trigger
Jerome Brunet <[email protected]>
ASoC: meson: axg-card: make links nonatomic
Jerome Brunet <[email protected]>
ASoC: meson: axg-fifo: use threaded irq to check periods
Jerome Brunet <[email protected]>
ASoC: meson: axg-fifo: use FIELD helpers
Asbjørn Sloth Tønnesen <[email protected]>
net: qede: use return from qede_parse_actions()
Asbjørn Sloth Tønnesen <[email protected]>
net: qede: use return from qede_parse_flow_attr() for flow_spec
Asbjørn Sloth Tønnesen <[email protected]>
net: qede: use return from qede_parse_flow_attr() for flower
Asbjørn Sloth Tønnesen <[email protected]>
net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
Jens Remus <[email protected]>
s390/vdso: Add CFI for RA register to asm macro vdso_func
David Bauer <[email protected]>
net l2tp: drop flow hash on forward
Kuniyuki Iwashima <[email protected]>
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
Bui Quang Minh <[email protected]>
octeontx2-af: avoid off-by-one read from userspace
Bui Quang Minh <[email protected]>
bna: ensure the copied buf is NUL terminated
Toke Høiland-Jørgensen <[email protected]>
xdp: use flags field to disambiguate broadcast redirect
Toke Høiland-Jørgensen <[email protected]>
xdp: Add xdp_do_redirect_frame() for pre-computed xdp_frames
Toke Høiland-Jørgensen <[email protected]>
xdp: Move conversion to xdp_frame out of map functions
Claudio Imbrenda <[email protected]>
s390/mm: Fix clearing storage keys for huge pages
Claudio Imbrenda <[email protected]>
s390/mm: Fix storage key clearing for guest huge pages
Devyn Liu <[email protected]>
spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
Anton Protopopov <[email protected]>
bpf: Fix a verifier verbose message
Jason Xing <[email protected]>
bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
Andrii Nakryiko <[email protected]>
bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition
AngeloGioacchino Del Regno <[email protected]>
regulator: mt6360: De-capitalize devicetree regulator subnodes
Zeng Heng <[email protected]>
pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
AngeloGioacchino Del Regno <[email protected]>
power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
Arnd Bergmann <[email protected]>
power: rt9455: hide unused rt9455_boost_voltage_values
Kuniyuki Iwashima <[email protected]>
nfs: Handle error of rpc_proc_register() in nfs_net_init().
Josef Bacik <[email protected]>
nfs: make the rpc_stat per net namespace
Josef Bacik <[email protected]>
nfs: expose /proc/net/sunrpc/nfs in net namespaces
Josef Bacik <[email protected]>
sunrpc: add a struct rpc_stats arg to rpc_create_args
Chen-Yu Tsai <[email protected]>
pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
Chen-Yu Tsai <[email protected]>
pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
Chen-Yu Tsai <[email protected]>
pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic
Dan Carpenter <[email protected]>
pinctrl: core: delete incorrect free in pinctrl_enable()
Jan Dakinevich <[email protected]>
pinctrl/meson: fix typo in PDM's pin name
Billy Tsai <[email protected]>
pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
Daniel Okazaki <[email protected]>
eeprom: at24: fix memory corruption race condition
Heiner Kallweit <[email protected]>
eeprom: at24: Probe for DDR3 thermal sensor in the SPD case
Alexander Stein <[email protected]>
eeprom: at24: Use dev_err_probe for nvmem register failure
Marios Makassikis <[email protected]>
ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
Namjae Jeon <[email protected]>
ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
Namjae Jeon <[email protected]>
ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
Johannes Berg <[email protected]>
wifi: nl80211: don't free NULL coalescing rule
Vinod Koul <[email protected]>
dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
Bumyong Lee <[email protected]>
dmaengine: pl330: issue_pending waits until WFP state
-------------
Diffstat:
.../bindings/iio/health/maxim,max30102.yaml | 2 +-
Makefile | 4 +-
arch/arm/kernel/sleep.S | 4 +
arch/arm64/boot/dts/qcom/msm8998.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sdm845.dtsi | 16 +-
arch/arm64/kvm/vgic/vgic-kvm-device.c | 12 +-
arch/mips/include/asm/ptrace.h | 2 +-
arch/mips/kernel/asm-offsets.c | 1 +
arch/mips/kernel/ptrace.c | 15 +-
arch/mips/kernel/scall32-o32.S | 23 +-
arch/mips/kernel/scall64-n32.S | 3 +-
arch/mips/kernel/scall64-n64.S | 3 +-
arch/mips/kernel/scall64-o32.S | 33 +-
arch/s390/include/asm/dwarf.h | 1 +
arch/s390/kernel/vdso64/vdso_user_wrapper.S | 2 +
arch/s390/mm/gmap.c | 2 +-
arch/s390/mm/hugetlbpage.c | 2 +-
block/blk-iocost.c | 7 +-
drivers/acpi/cppc_acpi.c | 67 ++-
drivers/ata/sata_gemini.c | 5 +-
drivers/bluetooth/btqca.c | 62 ++-
drivers/clk/clk.c | 12 +-
drivers/clk/sunxi-ng/ccu-sun50i-h6.c | 19 +-
drivers/firewire/nosy.c | 6 +-
drivers/firewire/ohci.c | 6 +-
drivers/gpio/gpio-crystalcove.c | 2 +-
drivers/gpio/gpio-wcove.c | 2 +-
drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 1 +
drivers/gpu/drm/drm_connector.c | 2 +-
drivers/gpu/drm/meson/meson_dw_hdmi.c | 70 ++-
drivers/gpu/drm/nouveau/nouveau_dp.c | 13 +-
drivers/gpu/drm/panel/panel-ilitek-ili9341.c | 8 +-
drivers/gpu/drm/qxl/qxl_release.c | 50 +--
drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 2 +-
drivers/gpu/host1x/bus.c | 8 -
drivers/hwmon/corsair-cpro.c | 43 +-
drivers/hwmon/pmbus/ucd9000.c | 6 +-
drivers/iio/accel/mxc4005.c | 24 +-
drivers/iio/imu/adis16475.c | 4 +-
drivers/infiniband/hw/qib/qib_fs.c | 1 +
drivers/iommu/mtk_iommu.c | 1 +
drivers/iommu/mtk_iommu_v1.c | 1 +
drivers/misc/eeprom/at24.c | 46 +-
drivers/misc/mei/hw-me-regs.h | 2 +
drivers/misc/mei/pci-me.c | 2 +
drivers/net/dsa/mv88e6xxx/chip.c | 4 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 20 +-
drivers/net/ethernet/brocade/bna/bnad_debugfs.c | 4 +-
drivers/net/ethernet/chelsio/cxgb4/sge.c | 6 +-
drivers/net/ethernet/hisilicon/hns3/Makefile | 18 +-
drivers/net/ethernet/hisilicon/hns3/hclge_mbx.h | 15 +
drivers/net/ethernet/hisilicon/hns3/hnae3.h | 3 +-
.../hisilicon/hns3/hns3_common/hclge_comm_cmd.c | 259 +++++++++++
.../hisilicon/hns3/hns3_common/hclge_comm_cmd.h | 121 +++++
drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 2 +
.../net/ethernet/hisilicon/hns3/hns3pf/Makefile | 12 -
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.c | 311 ++-----------
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 85 +---
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 221 +++++----
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 17 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 494 +++++++++++++++------
.../ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 4 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_ptp.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3vf/Makefile | 10 -
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 10 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 2 +-
.../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 4 +-
drivers/net/ethernet/qlogic/qede/qede_filter.c | 14 +-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/pinctrl/aspeed/pinctrl-aspeed-g6.c | 34 +-
drivers/pinctrl/core.c | 8 +-
drivers/pinctrl/devicetree.c | 10 +-
drivers/pinctrl/mediatek/pinctrl-paris.c | 180 +++-----
drivers/pinctrl/meson/pinctrl-meson-a1.c | 6 +-
drivers/power/supply/mt6360_charger.c | 2 +-
drivers/power/supply/rt9455_charger.c | 2 +
drivers/regulator/core.c | 27 +-
drivers/regulator/mt6360-regulator.c | 32 +-
drivers/s390/cio/cio_inject.c | 2 +-
drivers/s390/net/qeth_core.h | 1 -
drivers/s390/net/qeth_core_main.c | 78 ++--
drivers/scsi/bnx2fc/bnx2fc_tgt.c | 2 -
drivers/scsi/lpfc/lpfc.h | 1 -
drivers/scsi/lpfc/lpfc_nvme.c | 4 +-
drivers/scsi/lpfc/lpfc_scsi.c | 13 +-
drivers/scsi/lpfc/lpfc_vport.c | 8 +-
drivers/slimbus/qcom-ngd-ctrl.c | 6 +-
drivers/spi/spi-hisi-kunpeng.c | 2 -
drivers/target/target_core_configfs.c | 12 +
drivers/usb/core/hub.c | 5 +-
drivers/usb/dwc3/core.c | 90 ++--
drivers/usb/dwc3/core.h | 1 +
drivers/usb/dwc3/gadget.c | 2 +
drivers/usb/dwc3/host.c | 27 ++
drivers/usb/gadget/composite.c | 6 +-
drivers/usb/gadget/function/f_fs.c | 2 +-
drivers/usb/host/ohci-hcd.c | 8 +
drivers/usb/host/xhci-plat.h | 4 +-
drivers/usb/typec/ucsi/ucsi.c | 12 +-
fs/9p/vfs_file.c | 2 +
fs/9p/vfs_inode.c | 5 +-
fs/9p/vfs_super.c | 1 +
fs/btrfs/inode.c | 2 +-
fs/btrfs/send.c | 4 +-
fs/btrfs/transaction.c | 2 +-
fs/btrfs/volumes.c | 18 +-
fs/gfs2/bmap.c | 5 +-
fs/ksmbd/server.c | 13 +-
fs/ksmbd/smb2pdu.c | 4 +
fs/ksmbd/vfs.c | 5 +
fs/nfs/client.c | 5 +-
fs/nfs/inode.c | 13 +-
fs/nfs/internal.h | 2 -
fs/nfs/netns.h | 2 +
include/linux/bpf.h | 20 +-
include/linux/dma-fence.h | 7 -
include/linux/filter.h | 4 +
include/linux/skbuff.h | 15 +
include/linux/skmsg.h | 5 +-
include/linux/sunrpc/clnt.h | 1 +
include/net/xfrm.h | 3 +
kernel/bpf/cpumap.c | 8 +-
kernel/bpf/devmap.c | 32 +-
kernel/bpf/verifier.c | 3 +-
lib/Kconfig.debug | 5 +-
lib/dynamic_debug.c | 6 +-
net/bluetooth/l2cap_core.c | 3 +
net/bluetooth/sco.c | 4 +
net/bridge/br_forward.c | 9 +-
net/core/filter.c | 117 ++++-
net/core/net_namespace.c | 13 +-
net/core/rtnetlink.c | 2 +-
net/core/skbuff.c | 27 +-
net/core/skmsg.c | 53 +--
net/core/sock.c | 4 +-
net/core/sock_map.c | 3 +-
net/ipv4/tcp.c | 4 +-
net/ipv4/tcp_bpf.c | 51 +++
net/ipv4/tcp_input.c | 2 +
net/ipv4/tcp_ipv4.c | 8 +-
net/ipv4/tcp_output.c | 4 +-
net/ipv4/udp_offload.c | 12 +-
net/ipv4/xfrm4_input.c | 6 +-
net/ipv6/fib6_rules.c | 6 +-
net/ipv6/xfrm6_input.c | 6 +-
net/l2tp/l2tp_eth.c | 3 +
net/mac80211/ieee80211_i.h | 4 +-
net/mptcp/protocol.c | 3 +
net/nsh/nsh.c | 14 +-
net/phonet/pn_netlink.c | 2 +-
net/sunrpc/clnt.c | 5 +-
net/tipc/msg.c | 8 +-
net/wireless/nl80211.c | 2 +
net/wireless/trace.h | 2 +-
net/xfrm/xfrm_input.c | 8 +
scripts/Makefile.modfinal | 2 +-
sound/hda/intel-sdw-acpi.c | 2 +
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/meson/Kconfig | 1 +
sound/soc/meson/axg-fifo.c | 56 ++-
sound/soc/meson/axg-fifo.h | 12 +-
sound/soc/meson/axg-frddr.c | 5 +-
sound/soc/meson/axg-toddr.c | 22 +-
sound/soc/tegra/tegra186_dspk.c | 7 +-
sound/soc/ti/davinci-mcasp.c | 12 +-
sound/usb/line6/driver.c | 6 +-
tools/power/x86/turbostat/turbostat.8 | 2 +-
tools/power/x86/turbostat/turbostat.c | 7 +-
tools/testing/selftests/timers/valid-adjtimex.c | 73 ++-
169 files changed, 2199 insertions(+), 1417 deletions(-)
5.15-stable review patch. If anyone has any objections, please let me know.
------------------
From: Zack Rusin <[email protected]>
commit a37ef7613c00f2d72c8fc08bd83fb6cc76926c8c upstream.
Correctly set the length of the drm_event to the size of the structure
that's actually used.
The length of the drm_event was set to the parent structure instead of
to the drm_vmw_event_fence which is supposed to be read. drm_read
uses the length parameter to copy the event to the user space thus
resuling in oob reads.
Signed-off-by: Zack Rusin <[email protected]>
Fixes: 8b7de6aa8468 ("vmwgfx: Rework fence event action")
Reported-by: [email protected] # ZDI-CAN-23566
Cc: David Airlie <[email protected]>
CC: Daniel Vetter <[email protected]>
Cc: Zack Rusin <[email protected]>
Cc: Broadcom internal kernel review list <[email protected]>
Cc: [email protected]
Cc: [email protected]
Cc: <[email protected]> # v3.4+
Reviewed-by: Maaz Mombasawala <[email protected]>
Reviewed-by: Martin Krastev <[email protected]>
Link: https://patchwork.freedesktop.org/patch/msgid/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
---
drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/drivers/gpu/drm/vmwgfx/vmwgfx_fence.c
+++ b/drivers/gpu/drm/vmwgfx/vmwgfx_fence.c
@@ -1068,7 +1068,7 @@ static int vmw_event_fence_action_create
}
event->event.base.type = DRM_VMW_EVENT_FENCE_SIGNALED;
- event->event.base.length = sizeof(*event);
+ event->event.base.length = sizeof(event->event);
event->event.user_data = user_data;
ret = drm_event_reserve_init(dev, file_priv, &event->base, &event->event.base);
Hi Greg,
On 14/05/24 15:48, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.159 release.
> There are 168 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Thu, 16 May 2024 10:09:32 +0000.
> Anything received after that time might be too late.
>
No problems seen on x86_64 and aarch64 with our testing.
Tested-by: Harshit Mogalapalli <[email protected]>
Note: selftests have a build problem in 5.15.y, 5.10.y, 5.4.y, 4.19.y
5.15.y revert:
https://lore.kernel.org/all/[email protected]/
This is not a regression in this tag but from somewhere around 5.15.152 tag.
Reverts for other stable releases:
5.10.y:
https://lore.kernel.org/all/[email protected]/
5.4.y:
https://lore.kernel.org/all/[email protected]/
4.19.y:
https://lore.kernel.org/all/[email protected]/
Could you please queue these up for future releases.
Thanks,
Harshit
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.159-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
>
On 5/14/24 03:18, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.159 release.
> There are 168 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Thu, 16 May 2024 10:09:32 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.159-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on
BMIPS_GENERIC:
Tested-by: Florian Fainelli <[email protected]>
--
Florian
On Tue, May 14, 2024 at 07:36:24PM -0500, Martin Faltesek wrote:
> Build failure on arm:
>
> In file included from drivers/iommu/mtk_iommu_v1.c:22:
> drivers/iommu/mtk_iommu_v1.c:579:25: error: 'mtk_iommu_v1_of_ids'
> undeclared here (not in a function); did you mean 'mtk_iommu_of_ids'?
> 579 | MODULE_DEVICE_TABLE(of, mtk_iommu_v1_of_ids);
> | ^~~~~~~~~~~~~~~~~~~
> ./include/linux/module.h:244:15: note: in definition of macro
> 'MODULE_DEVICE_TABLE'
> 244 | extern typeof(name) __mod_##type##__##name##_device_table
> \
> | ^~~~
> ./include/linux/module.h:244:21: error:
> '__mod_of__mtk_iommu_v1_of_ids_device_table' aliased to undefined
> symbol 'mtk_iommu_v1_of_ids'
> 244 | extern typeof(name) __mod_##type##__##name##_device_table
> \
> | ^~~~~~
> drivers/iommu/mtk_iommu_v1.c:579:1: note: in expansion of macro
> 'MODULE_DEVICE_TABLE'
> 579 | MODULE_DEVICE_TABLE(of, mtk_iommu_v1_of_ids);
> | ^~~~~~~~~~~~~~~~~~~
> make[2]: *** [scripts/Makefile.build:289: drivers/iommu/mtk_iommu_v1.o] Error 1
> make[1]: *** [scripts/Makefile.build:552: drivers/iommu] Error 2
>
> This is from patch:
>
> bce893a92324 [email protected] 2024-05-14 iommu: mtk: fix
> module autoloading
>
> +MODULE_DEVICE_TABLE(of, mtk_iommu_v1_of_ids);
>
> should be, I think:
>
> +MODULE_DEVICE_TABLE(of, mtk_iommu_of_ids);
>
Good catch, now fixed up. I'll push out a -rc2 with this in it.
greg k-h
On 5/14/24 04:18, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.159 release.
> There are 168 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Thu, 16 May 2024 10:09:32 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.159-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
>
Compiled and booted on my test system. No dmesg regressions.
Tested-by: Shuah Khan <[email protected]>
thanks,
-- Shuah