This is a note to let you know that I've just added the patch titled fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards to the 6.0-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: fbdev-stifb-fall-back-to-cfb_fillrect-on-32-bit-hcrx-cards.patch and it can be found in the queue-6.0 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 776d875fd4cbb3884860ea7f63c3958f02b0c80e Mon Sep 17 00:00:00 2001 From: Helge Deller <deller@xxxxxx> Date: Fri, 14 Oct 2022 20:01:17 +0200 Subject: fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards From: Helge Deller <deller@xxxxxx> commit 776d875fd4cbb3884860ea7f63c3958f02b0c80e upstream. When the text console is scrolling text upwards it calls the fillrect() function to empty the new line. The current implementation doesn't seem to work correctly on HCRX cards in 32-bit mode and leave garbage in that line instead. Fix it by falling back to standard cfb_fillrect() in that case. Signed-off-by: Helge Deller <deller@xxxxxx> Cc: <stable@xxxxxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/video/fbdev/stifb.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/drivers/video/fbdev/stifb.c +++ b/drivers/video/fbdev/stifb.c @@ -1055,7 +1055,8 @@ stifb_fillrect(struct fb_info *info, con { struct stifb_info *fb = container_of(info, struct stifb_info, info); - if (rect->rop != ROP_COPY) + if (rect->rop != ROP_COPY || + (fb->id == S9000_ID_HCRX && fb->info.var.bits_per_pixel == 32)) return cfb_fillrect(info, rect); SETUP_HW(fb); Patches currently in stable-queue which might be from deller@xxxxxx are queue-6.0/fbdev-smscufx-fix-several-use-after-free-bugs.patch queue-6.0/fbdev-stifb-fall-back-to-cfb_fillrect-on-32-bit-hcrx-cards.patch