This is the start of the stable review cycle for the 4.9.53 release. There are 64 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Oct 5 11:42:06 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.53-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.53-rc1 Stefano Stabellini <stefano.stabellini@xxxxxxxxxxxxx> swiotlb-xen: implement xen_swiotlb_dma_mmap callback Vladis Dronov <vdronov@xxxxxxxxxx> video: fbdev: aty: do not leak uninitialized padding in clk to userspace Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: VMX: use cmpxchg64 Frederic Barrat <fbarrat@xxxxxxxxxxxxxxxxxx> cxl: Fix driver use count Haozhong Zhang <haozhong.zhang@xxxxxxxxx> KVM: VMX: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt Haozhong Zhang <haozhong.zhang@xxxxxxxxx> KVM: VMX: do not change SN bit in vmx_update_pi_irte() Myungho Jung <mhjungk@xxxxxxxxx> timer/sysclt: Restrict timer migration sysctl values to 0 and 1 Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: Fix debugfs glocks dump Eric Biggers <ebiggers@xxxxxxxxxx> x86/fpu: Don't let userspace set bogus xcomp_bv Laurent Dufour <ldufour@xxxxxxxxxxxxxxxxxx> x86/mm: Fix fault error path using unsafe vma pointer satoru takeuchi <satoru.takeuchi@xxxxxxxxx> btrfs: prevent to set invalid default subvolid Naohiro Aota <naohiro.aota@xxxxxxx> btrfs: propagate error to btrfs_cmp_data_prepare caller Naohiro Aota <naohiro.aota@xxxxxxx> btrfs: fix NULL pointer dereference from free_reloc_roots() Nicolai Stange <nstange@xxxxxxx> PCI: Fix race condition with driver_override Lucas Stach <l.stach@xxxxxxxxxxxxxx> etnaviv: fix gem object list corruption Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx> xfs: validate bdev support for DAX inode flag Jim Mattson <jmattson@xxxxxxxxxx> kvm: nVMX: Don't allow L2 to access the hardware CR8 Jan H. Schönherr <jschoenh@xxxxxxxxx> KVM: VMX: Do not BUG() on out-of-bounds guest IRQ Boqun Feng <boqun.feng@xxxxxxxxx> kvm/x86: Handle async PF in RCU read-side critical sections Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: VMX: simplify and fix vmx_vcpu_pi_load Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: VMX: avoid double list add with VT-d posted interrupts Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: VMX: extract __pi_post_block Will Deacon <will.deacon@xxxxxxx> arm64: fault: Route pte translation faults via do_translation_fault Marc Zyngier <marc.zyngier@xxxxxxx> arm64: Make sure SPsel is always set Oleg Nesterov <oleg@xxxxxxxxxx> seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter() Kees Cook <keescook@xxxxxxxxxxxx> selftests/seccomp: Support glibc 2.26 siginfo_t.h Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx> iw_cxgb4: put ep reference in pass_accept_req() Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx> iw_cxgb4: remove the stid on listen create failure Christoph Hellwig <hch@xxxxxx> bsg-lib: don't free job in bsg_prepare_job Vladis Dronov <vdronov@xxxxxxxxxx> nl80211: check for the required netlink attributes presence Andreas Gruenbacher <agruenba@xxxxxxxxxx> vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets Steve French <smfrench@xxxxxxxxx> SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags Steve French <smfrench@xxxxxxxxx> SMB: Validate negotiate (to protect against downgrade) even if signing off Steve French <smfrench@xxxxxxxxx> SMB3: Warn user if trying to sign connection that authenticated as guest Steve French <smfrench@xxxxxxxxx> Fix SMB3.1.1 guest authentication to Samba Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> PM: core: Fix device_pm_check_callbacks() Gerald Schaefer <gerald.schaefer@xxxxxxxxxx> s390/mm: fix write access check in gup_huge_pmd() Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx> powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS Gustavo Romero <gromero@xxxxxxxxxxxxxxxxxx> powerpc/tm: Flush TM only if CPU has TM feature Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx> powerpc/pseries: Fix parent_dn reference leak in add_dt_node() Eric Biggers <ebiggers@xxxxxxxxxx> KEYS: prevent KEYCTL_READ on negative key Eric Biggers <ebiggers@xxxxxxxxxx> KEYS: prevent creating a different user's keyrings Eric Biggers <ebiggers@xxxxxxxxxx> KEYS: fix writing past end of user-supplied buffer in keyring_read() Jason A. Donenfeld <Jason@xxxxxxxxx> security/keys: rewrite all of big_key crypto Jason A. Donenfeld <Jason@xxxxxxxxx> security/keys: properly zero out sensitive key material in big_key LEROY Christophe <christophe.leroy@xxxxxx> crypto: talitos - fix hashing LEROY Christophe <christophe.leroy@xxxxxx> crypto: talitos - fix sha224 LEROY Christophe <christophe.leroy@xxxxxx> crypto: talitos - Don't provide setkey for non hmac hashing algs. Stephan Mueller <smueller@xxxxxxxxxx> crypto: drbg - fix freeing of resources Alex Deucher <alexander.deucher@xxxxxxx> drm/radeon: disable hard reset in hibernate for APUs Xin Long <lucien.xin@xxxxxxxxx> scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly Dennis Yang <dennisyang@xxxxxxxx> md/raid5: preserve STRIPE_ON_UNPLUG_LIST in break_stripe_batch_list Shaohua Li <shli@xxxxxx> md/raid5: fix a race condition in stripe batch Bo Yan <byan@xxxxxxxxxx> tracing: Erase irqsoff trace with empty write Tahsin Erdogan <tahsin@xxxxxxxxxx> tracing: Fix trace_pipe behavior for instance traces Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S HV: Protect updates to spapr_tce_tables list Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S: Fix race and leak in kvm_vm_ioctl_create_spapr_tce() Thomas Gleixner <tglx@xxxxxxxxxxxxx> genirq: Make sparse_irq_lock protect what it should protect Avraham Stern <avraham.stern@xxxxxxxxx> mac80211: flush hw_roc_start work before cancelling the ROC Beni Lev <beni.lev@xxxxxxxxx> mac80211_hwsim: Use proper TX power Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: fix VLAN handling with TXQs John Ogness <john.ogness@xxxxxxxxxxxxx> fs/proc: Report eip/esp in /prod/PID/stat for coredumping Shu Wang <shuwang@xxxxxxxxxx> cifs: release auth_key.response for reconnect. Shu Wang <shuwang@xxxxxxxxxx> cifs: release cifs root_cred after exit_cifs ------------- Diffstat: Makefile | 4 +- arch/arm/xen/mm.c | 1 + arch/arm64/kernel/head.S | 1 + arch/arm64/mm/fault.c | 2 +- arch/powerpc/kernel/entry_64.S | 20 ++- arch/powerpc/kernel/ptrace.c | 2 +- arch/powerpc/kvm/book3s_64_vio.c | 57 +++--- arch/powerpc/platforms/pseries/mobility.c | 4 +- arch/s390/mm/gup.c | 7 +- arch/x86/kernel/fpu/regset.c | 9 +- arch/x86/kernel/fpu/signal.c | 4 + arch/x86/kernel/kvm.c | 3 +- arch/x86/kvm/vmx.c | 240 ++++++++++++++------------ arch/x86/mm/fault.c | 47 ++--- block/bsg-lib.c | 1 - crypto/drbg.c | 8 +- drivers/base/power/main.c | 9 +- drivers/crypto/talitos.c | 9 +- drivers/gpu/drm/etnaviv/etnaviv_gem.c | 3 + drivers/gpu/drm/radeon/radeon_device.c | 2 +- drivers/infiniband/hw/cxgb4/cm.c | 4 +- drivers/md/raid5.c | 13 +- drivers/misc/cxl/api.c | 4 + drivers/misc/cxl/file.c | 8 +- drivers/net/wireless/mac80211_hwsim.c | 2 - drivers/pci/pci-sysfs.c | 11 +- drivers/scsi/scsi_transport_iscsi.c | 2 +- drivers/video/fbdev/aty/atyfb_base.c | 2 +- drivers/xen/swiotlb-xen.c | 19 ++ fs/btrfs/ioctl.c | 6 +- fs/btrfs/relocation.c | 2 +- fs/cifs/cifsfs.c | 2 +- fs/cifs/connect.c | 8 + fs/cifs/file.c | 7 + fs/cifs/smb2pdu.c | 21 ++- fs/gfs2/glock.c | 16 +- fs/proc/array.c | 9 + fs/read_write.c | 4 +- fs/xfs/xfs_ioctl.c | 3 +- include/linux/key.h | 2 + include/net/mac80211.h | 15 +- include/xen/swiotlb-xen.h | 5 + kernel/irq/irqdesc.c | 24 +-- kernel/seccomp.c | 23 ++- kernel/sysctl.c | 2 + kernel/time/timer.c | 2 +- kernel/trace/trace.c | 12 +- net/mac80211/iface.c | 17 +- net/mac80211/offchannel.c | 2 + net/mac80211/tx.c | 36 +++- net/wireless/nl80211.c | 3 + security/keys/Kconfig | 4 +- security/keys/big_key.c | 138 +++++++-------- security/keys/internal.h | 2 +- security/keys/key.c | 2 + security/keys/keyctl.c | 5 + security/keys/keyring.c | 37 ++-- security/keys/process_keys.c | 6 +- tools/testing/selftests/seccomp/seccomp_bpf.c | 18 +- 59 files changed, 549 insertions(+), 382 deletions(-)