This is the start of the stable review cycle for the 3.12.74 release. There are 86 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon May 8 11:03:52 CEST 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: http://kernel.org/pub/linux/kernel/people/jirislaby/stable-review/patch-3.12.74-rc1.xz and the diffstat can be found below. thanks, js =============== Al Viro (1): p9_client_readdir() fix Andrey Konovalov (3): net/packet: fix overflow in check for priv area size net/packet: fix overflow in check for tp_frame_nr net/packet: fix overflow in check for tp_reserve Arnd Bergmann (5): dvb-usb-v2: avoid use-after-free ACPI / power: Avoid maybe-uninitialized warning tty: nozomi: avoid a harmless gcc warning hostap: avoid uninitialized variable use in hfa384x_get_rid gfs2: avoid uninitialized variable warning Ben Hutchings (4): pegasus: Use heap buffers for all register access rtl8150: Use heap buffers for all register access catc: Combine failure cleanup code in catc_probe() catc: Use heap buffer for memory size test Benjamin Herrenschmidt (1): powerpc: Disable HFSCR[TM] if TM is not supported Cameron Gutman (1): Input: xpad - add support for Razer Wildcat gamepad Chris Salls (1): mm/mempolicy.c: fix error handling in set_mempolicy and mbind. Chun-Yi Lee (1): platform/x86: acer-wmi: setup accelerometer when machine has appropriate notify event Corey Minyard (1): MIPS: Fix crash registers on non-crashing CPUs Daeho Jeong (1): ext4: fix inode checksum calculation problem if i_extra_size is small Dan Williams (1): block: fix del_gendisk() vs blkdev_ioctl crash David Howells (2): KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings KEYS: Change the name of the dead type to ".dead" to prevent user access Dmitry Torokhov (1): Input: i8042 - add Clevo P650RS to the i8042 reset list Eric Biggers (1): KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings Eric Dumazet (2): ping: implement proper locking net: neigh: guard against NULL solicit() method Eugenia Emantayev (1): net/mlx4_en: Fix bad WQE issue Florian Larysch (1): net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given Geert Uytterhoeven (1): char: Drop bogus dependency of DEVPORT on !M68K Germano Percossi (1): CIFS: remove bad_network_name flag Guenter Roeck (1): usb: hub: Wait for connection to be reestablished after port reset Guillaume Nault (1): l2tp: take reference on sessions being dumped Hongxu Jia (1): netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel J. Bruce Fields (1): nfsd: check for oversized NFSv2/v3 arguments Jack Morgenstein (1): net/mlx4_core: Fix racy CQ (Completion Queue) free James Hogan (8): metag/usercopy: Drop unused macros metag/usercopy: Fix alignment error checking metag/usercopy: Add early abort to copy_to_user metag/usercopy: Zero rest of buffer from copy_from_user metag/usercopy: Set flags before ADDZ metag/usercopy: Fix src fixup in from user rapf loops metag/usercopy: Add missing fixups MIPS: KGDB: Use kernel context for sleeping threads Jamie Bainbridge (1): ipv6: check raw payload size correctly in ioctl Jan-Marek Glogowski (1): Reset TreeId to zero on SMB2 TREE_CONNECT Janusz Dziedzic (1): usb: dwc3: gadget: delay unmap of bounced requests Josh Poimboeuf (1): ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram Juergen Gross (1): xen, fbfront: fix connecting to backend Kees Cook (1): mm: Tighten x86 /dev/mem with zeroing reads Li Qiang (1): drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl() Mantas M (1): net: ipv6: check route protocol when deleting routes Marcelo Henrique Cerri (1): s390/decompressor: fix initrd corruption caused by bss clear Martin K. Petersen (2): scsi: sr: Sanity check returned mode data scsi: sd: Fix capacity calculation with 32-bit sector_t Max Bires (1): char: lack of bool string made CONFIG_DEVPORT always on Michael Ellerman (1): powerpc: Reject binutils 2.24 when building little endian Minchan Kim (1): zram: do not use copy_page with non-page aligned address Murray McAllister (2): drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl() Nathan Sullivan (1): net: phy: handle state correctly in phy_stop_machine Nicholas Bellinger (2): iscsi-target: Fix TMR reference leak during session shutdown iscsi-target: Drop work-around for legacy GlobalSAN initiator Nikolay Aleksandrov (1): ip6mr: fix notification device destruction Omar Sandoval (1): virtio-console: avoid DMA from stack Paul Mackerras (1): powerpc: Don't try to fix up misaligned load-with-reservation instructions Peter Zijlstra (1): perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32() Rafał Miłecki (1): mtd: bcm47xxpart: fix parsing first block after aligned TRX Sachin Prabhu (1): cifs: Do not send echoes before Negotiate is complete Sebastian Siewior (1): ubi/upd: Always flush after prepared for an update Stefano Stabellini (1): xen/x86: don't lose event interrupts Steven Rostedt (VMware) (2): tracing: Allocate the snapshot buffer before enabling probe ring-buffer: Have ring_buffer_iter_empty() return true when empty Suzuki K Poulose (1): kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd Takashi Iwai (1): ALSA: seq: Don't break snd_use_lock_sync() loop by timeout Theodore Ts'o (1): ext4: check if in-inode xattr is corrupted in ext4_expand_extra_isize_ea() Thomas Gleixner (1): x86/vdso: Plug race between mapping and ELF header setup Thomas Hellstrom (1): drm/vmwgfx: Remove getparam error message Thorsten Leemhuis (1): Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled Vitaly Kuznetsov (2): Drivers: hv: don't leak memory in vmbus_establish_gpadl() Drivers: hv: get rid of timeout in vmbus_open() Wei Fang (1): md:raid1: fix a dead loop when read from a WriteMostly disk Wei Yongjun (1): ring-buffer: Fix return value check in test_ringbuffer() Xin Long (1): sctp: listen on the sock only when it's state is listening or closed Yazen Ghannam (1): x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs bsegall@xxxxxxxxxx (1): ptrace: fix PTRACE_LISTEN race corrupting task->state santosh.shilimkar@xxxxxxxxxx (1): RDS: Fix the atomicity for congestion map update arch/arm/kvm/mmu.c | 12 + arch/metag/include/asm/uaccess.h | 15 +- arch/metag/lib/usercopy.c | 312 ++++++++++--------------- arch/mips/kernel/crash.c | 16 +- arch/mips/kernel/kgdb.c | 48 ++-- arch/powerpc/Makefile | 8 + arch/powerpc/kernel/align.c | 28 ++- arch/powerpc/kernel/setup_64.c | 9 + arch/s390/boot/compressed/misc.c | 35 +-- arch/x86/include/asm/elf.h | 2 +- arch/x86/kernel/cpu/mcheck/mce_amd.c | 2 +- arch/x86/kernel/cpu/perf_event_intel_lbr.c | 2 + arch/x86/kernel/ftrace.c | 12 + arch/x86/mm/init.c | 41 +++- arch/x86/xen/time.c | 6 +- block/genhd.c | 1 - drivers/acpi/power.c | 1 + drivers/char/Kconfig | 6 +- drivers/char/mem.c | 82 ++++--- drivers/char/virtio_console.c | 12 +- drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 9 +- drivers/hv/channel.c | 17 +- drivers/input/joystick/xpad.c | 2 + drivers/input/mouse/elantech.c | 8 + drivers/input/serio/i8042-x86ia64io.h | 7 + drivers/md/raid1.c | 2 +- drivers/media/usb/dvb-usb-v2/dvb_usb_core.c | 9 +- drivers/mtd/bcm47xxpart.c | 10 +- drivers/mtd/ubi/upd.c | 8 +- drivers/net/ethernet/mellanox/mlx4/cq.c | 38 +-- drivers/net/ethernet/mellanox/mlx4/en_rx.c | 8 +- drivers/net/phy/phy.c | 2 +- drivers/net/usb/catc.c | 56 +++-- drivers/net/usb/pegasus.c | 29 ++- drivers/net/usb/rtl8150.c | 34 ++- drivers/net/wireless/hostap/hostap_hw.c | 15 +- drivers/platform/x86/acer-wmi.c | 22 +- drivers/scsi/sd.c | 20 +- drivers/scsi/sr.c | 6 +- drivers/staging/zram/zram_drv.c | 6 +- drivers/target/iscsi/iscsi_target_parameters.c | 16 -- drivers/target/iscsi/iscsi_target_util.c | 12 +- drivers/tty/nozomi.c | 2 +- drivers/usb/core/hub.c | 11 +- drivers/usb/dwc3/gadget.c | 21 +- drivers/video/xen-fbfront.c | 4 +- fs/cifs/cifsglob.h | 1 - fs/cifs/smb1ops.c | 10 + fs/cifs/smb2pdu.c | 9 +- fs/ext4/inode.c | 5 +- fs/ext4/xattr.c | 32 ++- fs/gfs2/dir.c | 4 +- fs/nfsd/nfssvc.c | 36 +++ kernel/ptrace.c | 14 +- kernel/trace/ring_buffer.c | 24 +- kernel/trace/trace.c | 8 +- mm/mempolicy.c | 20 +- net/9p/client.c | 4 + net/core/neighbour.c | 3 +- net/ipv4/netfilter/arp_tables.c | 4 +- net/ipv4/ping.c | 5 +- net/ipv4/route.c | 2 +- net/ipv6/ip6mr.c | 13 +- net/ipv6/raw.c | 3 +- net/ipv6/route.c | 2 + net/l2tp/l2tp_core.c | 8 +- net/l2tp/l2tp_core.h | 3 +- net/l2tp/l2tp_debugfs.c | 10 +- net/l2tp/l2tp_netlink.c | 7 +- net/l2tp/l2tp_ppp.c | 10 +- net/packet/af_packet.c | 8 +- net/rds/cong.c | 4 +- net/sctp/socket.c | 3 + security/keys/gc.c | 2 +- security/keys/keyctl.c | 20 +- security/keys/process_keys.c | 44 ++-- sound/core/seq/seq_lock.c | 9 +- 78 files changed, 833 insertions(+), 522 deletions(-) -- 2.12.2