This is the start of the stable review cycle for the 3.18.57 release. There are 45 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Jun 14 15:25:35 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.57-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.57-rc1 Christoph Hellwig <hch@xxxxxx> mlx5: stop including <asm-generic/kmap_types.h> Mark Rutland <mark.rutland@xxxxxxx> arm64: ensure extension of smp_store_release value Kees Cook <keescook@xxxxxxxxxxxx> usercopy: Adjust tests to deal with SMAP/PAN Amey Telawane <ameyt@xxxxxxxxxxxxxx> tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline() Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx> RDMA/qib,hfi1: Fix MR reference count leak on write with immediate Kristina Martsenko <kristina.martsenko@xxxxxxx> arm64: entry: improve data abort handling of tagged pointers Kristina Martsenko <kristina.martsenko@xxxxxxx> arm64: hw_breakpoint: fix watchpoint matching for tagged pointers Takatoshi Akiyama <takatoshi.akiyama.kj@xxxxxxxxxxxxxxxxxxxxxxxx> serial: sh-sci: Fix panic when serial console and DMA are enabled Julius Werner <jwerner@xxxxxxxxxxxx> drivers: char: mem: Fix wraparound check to allow mappings up to the end Takashi Iwai <tiwai@xxxxxxx> ASoC: Fix use-after-free at card unregistration Takashi Iwai <tiwai@xxxxxxx> ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT Vladis Dronov <vdronov@xxxxxxxxxx> drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() Dan Carpenter <dan.carpenter@xxxxxxxxxx> drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve() Jin Yao <yao.jin@xxxxxxxxxxxxxxx> perf/core: Drop kernel samples even though :u is specified Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/numa: Fix percpu allocations to be NUMA aware Russell Currey <ruscur@xxxxxxxxxx> powerpc/eeh: Avoid use after free in eeh_handle_special_event() Johannes Thumshirn <jthumshirn@xxxxxxx> scsi: qla2xxx: don't disable a not previously enabled PCI device Jeff Mahoney <jeffm@xxxxxxxx> btrfs: fix memory leak in update_space_info failure path David Sterba <dsterba@xxxxxxxx> btrfs: use correct types for page indices in btrfs_page_exists_in_range Daniel Micay <danielmicay@xxxxxxxxx> stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms Eric Biggers <ebiggers3@xxxxxxxxx> random: properly align get_random_int_hash Daniel Cashman <dcashman@xxxxxxxxxxx> drivers: char: random: add get_random_long() Matt Ranostay <matt.ranostay@xxxxxxxxxxxx> iio: proximity: as3935: fix AS3935_INT mask Oleg Drokin <green@xxxxxxxxxxxxxx> staging/lustre/lov: remove set_fs() call from lov_getstripe() Michael Thalmeier <michael.thalmeier@xxxxxxx> usb: chipidea: debug: check before accessing ci_role Jisheng Zhang <jszhang@xxxxxxxxxxx> usb: chipidea: udc: fix NULL pointer dereference if udc_start failed Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: gadget: f_mass_storage: Serialize wake and sleep execution Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> ext4: keep existing extra fields when inode expands Jan Kara <jack@xxxxxxx> ext4: fix SEEK_HOLE Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx> dmaengine: ep93xx: Always start from BASE0 Marc Zyngier <marc.zyngier@xxxxxxx> arm: KVM: Allow unaligned accesses at HYP Wanpeng Li <wanpeng.li@xxxxxxxxxxx> KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation Paolo Bonzini <pbonzini@xxxxxxxxxx> kvm: async_pf: fix rcu_irq_enter() with irqs enabled J. Bruce Fields <bfields@xxxxxxxxxx> nfsd4: fix null dereference on replay Gilad Ben-Yossef <gilad@xxxxxxxxxxxxx> crypto: gcm - wait for crypto op not signal safe Eric Biggers <ebiggers@xxxxxxxxxx> KEYS: fix freeing uninitialized memory in key_update() Eric Biggers <ebiggers@xxxxxxxxxx> KEYS: fix dereferencing NULL payload with nonzero length Johan Hovold <johan@xxxxxxxxxx> serial: ifx6x60: fix use-after-free on module unload Max Filippov <jcmvbkbc@xxxxxxxxx> net: ethoc: enable NAPI before poll may be scheduled Eric Dumazet <edumazet@xxxxxxxxxx> net: ping: do not abuse udp_poll() David S. Miller <davem@xxxxxxxxxxxxx> ipv6: Fix leak in ipv6_gso_segment(). Yuchung Cheng <ycheng@xxxxxxxxxx> tcp: disallow cwnd undo when switching congestion control Ganesh Goudar <ganeshgr@xxxxxxxxxxx> cxgb4: avoid enabling napi twice to the same queue Ben Hutchings <ben@xxxxxxxxxxxxxxx> ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() Mintz, Yuval <Yuval.Mintz@xxxxxxxxxx> bnx2x: Fix Multi-Cos ------------- Diffstat: Makefile | 4 +- arch/arm/kvm/init.S | 5 +-- arch/arm64/include/asm/asm-uaccess.h | 13 ++++++ arch/arm64/include/asm/barrier.h | 10 ++++- arch/arm64/include/asm/uaccess.h | 8 ++++ arch/arm64/kernel/entry.S | 6 ++- arch/arm64/kernel/hw_breakpoint.c | 3 +- arch/powerpc/include/asm/topology.h | 14 ++++++ arch/powerpc/kernel/eeh_driver.c | 19 ++++++-- arch/powerpc/kernel/setup_64.c | 4 +- arch/x86/kernel/kvm.c | 2 +- arch/x86/kvm/cpuid.c | 20 +++++---- crypto/gcm.c | 6 +-- drivers/char/mem.c | 2 +- drivers/char/random.c | 26 ++++++++++- drivers/dma/ep93xx_dma.c | 2 + drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 2 + drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 3 ++ drivers/iio/proximity/as3935.c | 4 +- drivers/infiniband/hw/mlx5/main.c | 2 +- drivers/infiniband/hw/qib/qib_rc.c | 4 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 2 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 4 ++ drivers/net/ethernet/ethoc.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +- .../net/ethernet/mellanox/mlx5/core/pagealloc.c | 2 +- drivers/scsi/qla2xxx/qla_os.c | 8 ++-- drivers/staging/lustre/lustre/lov/lov_pack.c | 9 ---- drivers/tty/serial/ifx6x60.c | 2 +- drivers/tty/serial/sh-sci.c | 10 +++-- drivers/usb/chipidea/debug.c | 3 +- drivers/usb/chipidea/udc.c | 8 +++- drivers/usb/gadget/function/f_mass_storage.c | 13 +++++- fs/btrfs/extent-tree.c | 1 + fs/btrfs/inode.c | 4 +- fs/ext4/file.c | 50 ++++++---------------- fs/ext4/inode.c | 5 ++- fs/nfsd/nfs4proc.c | 13 +++--- include/linux/bitops.h | 11 +++++ include/linux/random.h | 1 + include/net/ipv6.h | 1 + kernel/events/core.c | 21 +++++++++ kernel/fork.c | 2 +- kernel/trace/trace.c | 2 +- lib/test_user_copy.c | 20 ++++++++- net/ipv4/af_inet.c | 2 +- net/ipv4/tcp_cong.c | 1 + net/ipv6/ip6_offload.c | 4 +- net/ipv6/ping.c | 2 +- net/ipv6/raw.c | 2 +- net/ipv6/xfrm6_mode_ro.c | 2 + net/ipv6/xfrm6_mode_transport.c | 2 + security/keys/key.c | 5 +-- security/keys/keyctl.c | 4 +- sound/core/timer.c | 1 + sound/soc/soc-core.c | 5 ++- 57 files changed, 262 insertions(+), 126 deletions(-)