This is the start of the stable review cycle for the 3.18.55 release. There are 59 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu May 25 20:08:28 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.55-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.55-rc1 Maksim Salau <maksim.salau@xxxxxxxxx> usb: misc: legousbtower: Fix memory leak Julius Werner <jwerner@xxxxxxxxxxxx> drivers: char: mem: Check for address space wraparound with mmap() Lukas Wunner <lukas@xxxxxxxxx> PCI: Freeze PME scan before suspending devices David Woodhouse <dwmw@xxxxxxxxxxxx> PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms Thomas Gleixner <tglx@xxxxxxxxxxxxx> tracing/kprobes: Enforce kprobes teardown after testing Al Viro <viro@xxxxxxxxxxxxxxxxxx> osf_wait4(): fix infoleak Johan Hovold <johan@xxxxxxxxxx> uwb: fix device quirk on big-endian hosts Daniel Micay <danielmicay@xxxxxxxxx> stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms James Hogan <james.hogan@xxxxxxxxxx> metag/uaccess: Check access_ok in strncpy_from_user James Hogan <james.hogan@xxxxxxxxxx> metag/uaccess: Fix access_ok() Keno Fischer <keno@xxxxxxxxxxxxxxxxxx> mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp Takashi Iwai <tiwai@xxxxxxx> xc2028: Fix use-after-free bug properly Kristina Martsenko <kristina.martsenko@xxxxxxx> arm64: documentation: document tagged pointer stack constraints Mark Rutland <mark.rutland@xxxxxxx> arm64: uaccess: ensure extension of access_ok() addr Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx> ARM: dts: at91: sama5d3_xplained: not all ADC channels are available Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx> ARM: dts: at91: sama5d3_xplained: fix ADC vref Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx> powerpc/pseries: Fix of_node_put() underflow during DLPAR remove Johan Hovold <johan@xxxxxxxxxx> cx231xx-audio: fix NULL-deref at probe Johan Hovold <johan@xxxxxxxxxx> cx231xx-cards: fix NULL-deref at probe Alyssa Milburn <amilburn@xxxxxxxx> zr364xx: enforce minimum size when reading header Johan Hovold <johan@xxxxxxxxxx> dib0700: fix NULL-deref at probe Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> s5p-mfc: Fix unbalanced call to clock management Johan Hovold <johan@xxxxxxxxxx> gspca: konica: add missing endpoint sanity check Matt Ranostay <matt.ranostay@xxxxxxxxxxxx> iio: proximity: as3935: fix as3935_write Dan Carpenter <dan.carpenter@xxxxxxxxxx> ipx: call ipxitf_put() in ioctl error path Peter Hurley <peter@xxxxxxxxxxxxxxxxxx> tty: Prevent ldisc drivers from re-using stale tty fields Johan Hovold <johan@xxxxxxxxxx> USB: hub: fix non-SS hub-descriptor handling Johan Hovold <johan@xxxxxxxxxx> USB: hub: fix SS hub-descriptor handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: io_ti: fix div-by-zero in set_termios Johan Hovold <johan@xxxxxxxxxx> USB: serial: mct_u232: fix big-endian baud-rate handling Bjørn Mork <bjorn@xxxxxxx> USB: serial: qcserial: add more Lenovo EM74xx device IDs Daniele Palmas <dnlplm@xxxxxxxxx> usb: serial: option: add Telit ME910 support Johan Hovold <johan@xxxxxxxxxx> USB: iowarrior: fix info ioctl on big-endian hosts Peter Ujfalusi <peter.ujfalusi@xxxxxx> usb: musb: tusb6010_omap: Do not reset the other direction's packet size Alyssa Milburn <amilburn@xxxxxxxx> ttusb2: limit messages to buffer size Johan Hovold <johan@xxxxxxxxxx> mceusb: fix NULL-deref at probe Johan Hovold <johan@xxxxxxxxxx> usbvision: fix NULL-deref at probe Johan Hovold <johan@xxxxxxxxxx> net: irda: irda-usb: fix firmware name on big-endian hosts Peter Chen <peter.chen@xxxxxxx> usb: host: xhci-mem: allocate zeroed Scratchpad Buffer Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx> usb: host: xhci-plat: propagate return value of platform_get_irq() Andrey Korolyov <andrey@xxxxxxx> USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs Anthony Mallet <anthony.mallet@xxxxxxx> USB: serial: ftdi_sio: fix setting latency for unprivileged users Eric W. Biederman <ebiederm@xxxxxxxxxxxx> pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes Pavel Roskin <plroskin@xxxxxxxxx> iio: dac: ad7303: fix channel description Johan Hovold <johan@xxxxxxxxxx> of: fdt: add missing allocation-failure check Rob Herring <robh@xxxxxxxxxx> of: fix sparse warning in of_pci_range_parser_one Tobias Herzog <t-herzog@xxxxxx> cdc-acm: fix possible invalid access when processing notification Johan Hovold <johan@xxxxxxxxxx> ath9k_htc: fix NULL-deref at probe Richard Cochran <rcochran@xxxxxxxxxxxxx> regulator: tps65023: Fix inverted core enable logic. Daniel Glöckner <dg@xxxxxxxxx> ima: accept previously set IMA_NEW_FILE Brian Norris <briannorris@xxxxxxxxxxxx> mwifiex: pcie: fix cmd_buf use-after-free in remove/reset Joe Thornber <ejt@xxxxxxxxxx> dm space map disk: fix some book keeping in the disk space map Joe Thornber <ejt@xxxxxxxxxx> dm thin metadata: call precommit before saving the roots Mikulas Patocka <mpatocka@xxxxxxxxxx> dm bufio: avoid a possible ABBA deadlock Vinothkumar Raja <vinraja@xxxxxxxxxxxxxxxxx> dm btree: fix for dm_btree_find_lowest_key() Vamsi Krishna Samavedam <vskrishn@xxxxxxxxxxxxxx> USB: core: replace %p with %pK Willy Tarreau <w@xxxxxx> char: lp: fix possible integer overflow in lp_setup() Johan Hovold <johan@xxxxxxxxxx> watchdog: pcwd_usb: fix NULL-deref at probe Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: ene_usb6250: fix DMA to the stack ------------- Diffstat: Documentation/arm64/tagged-pointers.txt | 62 +++++++++++++----- Makefile | 4 +- arch/alpha/kernel/osf_sys.c | 6 +- arch/arm/boot/dts/at91-sama5d3_xplained.dts | 5 +- arch/arm64/include/asm/uaccess.h | 3 +- arch/metag/include/asm/uaccess.h | 49 ++++++++------ arch/powerpc/platforms/pseries/dlpar.c | 1 - drivers/char/lp.c | 6 +- drivers/char/mem.c | 5 ++ drivers/iio/dac/ad7303.c | 6 +- drivers/iio/proximity/as3935.c | 3 +- drivers/md/dm-bufio.c | 9 +-- drivers/md/dm-thin-metadata.c | 4 +- drivers/md/persistent-data/dm-btree.c | 8 ++- drivers/md/persistent-data/dm-space-map-disk.c | 15 ++++- drivers/media/platform/s5p-mfc/s5p_mfc.c | 1 + drivers/media/rc/mceusb.c | 4 +- drivers/media/tuners/tuner-xc2028.c | 37 +++++------ drivers/media/usb/cx231xx/cx231xx-audio.c | 15 ++++- drivers/media/usb/cx231xx/cx231xx-cards.c | 45 +++++++++++-- drivers/media/usb/dvb-usb/dib0700_core.c | 3 + drivers/media/usb/dvb-usb/ttusb2.c | 19 ++++++ drivers/media/usb/gspca/konica.c | 3 + drivers/media/usb/usbvision/usbvision-video.c | 9 ++- drivers/media/usb/zr364xx/zr364xx.c | 8 +++ drivers/net/irda/irda-usb.c | 2 +- drivers/net/wireless/ath/ath9k/hif_usb.c | 3 + drivers/net/wireless/mwifiex/pcie.c | 7 ++ drivers/of/address.c | 2 +- drivers/of/fdt.c | 3 + drivers/pci/pci-sysfs.c | 10 ++- drivers/pci/pci.c | 9 +-- drivers/regulator/tps65023-regulator.c | 3 +- drivers/tty/tty_ldisc.c | 7 ++ drivers/usb/class/cdc-acm.c | 13 ++-- drivers/usb/core/devio.c | 4 +- drivers/usb/core/hcd.c | 4 +- drivers/usb/core/hub.c | 19 ++++-- drivers/usb/core/urb.c | 2 +- drivers/usb/host/xhci-mem.c | 2 +- drivers/usb/host/xhci-plat.c | 2 +- drivers/usb/misc/iowarrior.c | 2 +- drivers/usb/misc/legousbtower.c | 1 + drivers/usb/musb/tusb6010_omap.c | 13 ++-- drivers/usb/serial/ftdi_sio.c | 10 +-- drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/io_ti.c | 5 +- drivers/usb/serial/mct_u232.c | 2 +- drivers/usb/serial/option.c | 8 +++ drivers/usb/serial/qcserial.c | 2 + drivers/usb/storage/ene_ub6250.c | 90 ++++++++++++++++---------- drivers/uwb/i1480/dfu/usb.c | 5 +- drivers/watchdog/pcwd_usb.c | 3 + include/linux/kprobes.h | 4 +- kernel/fork.c | 2 +- kernel/kprobes.c | 2 +- kernel/pid_namespace.c | 2 +- kernel/trace/trace_kprobe.c | 5 ++ mm/huge_memory.c | 12 +++- net/ipx/af_ipx.c | 5 +- security/integrity/ima/ima_appraise.c | 5 +- 61 files changed, 428 insertions(+), 174 deletions(-)