This is the start of the stable review cycle for the 4.9.55 release.
There are 105 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu Oct 12 19:24:56 UTC 2017.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.55-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.9.55-rc1
Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM: x86: fix singlestepping over syscall
Jaegeuk Kim <jaegeuk@xxxxxxxxxx>
f2fs: don't allow encrypted operations without keys
Theodore Ts'o <tytso@xxxxxxx>
ext4: don't allow encrypted operations without keys
Jan Kara <jack@xxxxxxx>
ext4: Don't clear SGID when inheriting ACLs
Jan Kara <jack@xxxxxxx>
ext4: fix data corruption for mmap writes
Amir Goldstein <amir73il@xxxxxxxxx>
vfs: deny copy_file_range() for non regular files
Peter Zijlstra <peterz@xxxxxxxxxxxxx>
sched/cpuset/pm: Fix cpuset vs. suspend-resume bugs
Chanho Min <chanho.min@xxxxxxx>
mmc: core: add driver strength selection when selecting hs400es
Christoph Hellwig <hch@xxxxxx>
nvme-pci: Use PCI bus address for data/queues in CMB
Jani Nikula <jani.nikula@xxxxxxxxx>
drm/i915/bios: ignore HDMI on port A
Arend Van Spriel <arend.vanspriel@xxxxxxxxxxxx>
brcmfmac: setup passive scan if requested by user-space
Arend Van Spriel <arend.vanspriel@xxxxxxxxxxxx>
brcmfmac: add length check in brcmf_cfg80211_escan_handler()
Martin K. Petersen <martin.petersen@xxxxxxxxxx>
scsi: sd: Do not override max_sectors_kb sysfs setting
Luca Coelho <luciano.coelho@xxxxxxxxx>
iwlwifi: add workaround to disable wide channels in 5GHz
Luca Coelho <luciano.coelho@xxxxxxxxx>
iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD
Arnd Bergmann <arnd@xxxxxxxx>
netlink: fix nla_put_{u8,u16,u32} for KASAN
Arnd Bergmann <arnd@xxxxxxxx>
rocker: fix rocker_tlv_put_* functions for KASAN
Ping Cheng <pinglinux@xxxxxxxxx>
HID: wacom: bits shifted too much for 9th and 10th buttons
Jason Gerecke <killertofu@xxxxxxxxx>
HID: wacom: Always increment hdev refcount within wacom_get_hdev_data
Aaron Armstrong Skomra <skomra@xxxxxxxxx>
HID: wacom: leds: Don't try to control the EKR's read-only LEDs
Adrian Salido <salidoa@xxxxxxxxxx>
HID: i2c-hid: allocate hid buffers for real worst case
Shu Wang <shuwang@xxxxxxxxxx>
ftrace: Fix kmemleak in unregister_ftrace_graph
Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>
stm class: Fix a use-after-free
Olaf Hering <olaf@xxxxxxxxx>
Drivers: hv: fcopy: restore correct transfer length
Nicolai Stange <nstange@xxxxxxx>
driver core: platform: Don't read past the end of "driver_override" buffer
Mark Rutland <mark.rutland@xxxxxxx>
percpu: make this_cpu_generic_read() atomic w.r.t. interrupts
Gustavo Romero <gromero@xxxxxxxxxxxxxxxxxx>
powerpc/tm: Fix illegal TM state in signal handler
Cyril Bur <cyrilbur@xxxxxxxxx>
powerpc/64s: Use emergency stack for kernel TM Bad Thing program checks
Eric Dumazet <edumazet@xxxxxxxxxx>
socket, bpf: fix possible use after free
Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
net: rtnetlink: fix info leak in RTM_GETSTATS call
Parthasarathy Bhuvaragan <parthasarathy.bhuvaragan@xxxxxxxxxxxx>
tipc: use only positive error codes in messages
Xin Long <lucien.xin@xxxxxxxxx>
ip6_tunnel: update mtu properly for ARPHRD_ETHER tunnel device in tx path
Xin Long <lucien.xin@xxxxxxxxx>
ip6_gre: ip6gre_tap device should keep dst
Jason A. Donenfeld <Jason@xxxxxxxxx>
netlink: do not proceed if dump's start() errs
Christoph Paasch <cpaasch@xxxxxxxxx>
net: Set sk_prot_creator when cloning sockets to the right proto
Willem de Bruijn <willemb@xxxxxxxxxx>
packet: only test po->has_vnet_hdr once in packet_snd
Willem de Bruijn <willemb@xxxxxxxxxx>
packet: in packet_do_bind, test fanout with bind_lock held
Florian Fainelli <f.fainelli@xxxxxxxxx>
net: dsa: Fix network device registration order
Alexander Potapenko <glider@xxxxxxxxxx>
tun: bail out from tun_get_user() if the skb is empty
Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
l2tp: fix race condition in l2tp_tunnel_delete
Ridge Kennedy <ridge.kennedy@xxxxxxxxxxxxxxxxxxx>
l2tp: Avoid schedule while atomic in exit_net
Alexey Kodanev <alexey.kodanev@xxxxxxxxxx>
vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
Timur Tabi <timur@xxxxxxxxxxxxxx>
net: qcom/emac: specify the correct size when mapping a DMA buffer
Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
net_sched: always reset qdisc backlog in qdisc_reset()
Meng Xu <mengxu.gatech@xxxxxxxxx>
isdn/i4l: fetch the ppp_write buffer in one shot
Yonghong Song <yhs@xxxxxx>
bpf: one perf event close won't free bpf program attached by another perf event
Willem de Bruijn <willemb@xxxxxxxxxx>
packet: hold bind lock when rebinding to fanout hook
Christian Lamparter <chunkeey@xxxxxxxxxxxxxx>
net: emac: Fix napi poll list corruption
Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: fastopen: fix on syn-data transmit failure
Davide Caratti <dcaratti@xxxxxxxxxx>
net/sched: cls_matchall: fix crash when used with classful qdisc
Xin Long <lucien.xin@xxxxxxxxx>
ip6_tunnel: do not allow loading ip6_tunnel if ipv6 is disabled in cmdline
Fahad Kunnathadi <fahad.kunnathadi@xxxxxxxxxxxxxxxxx>
net: phy: Fix mask value write on gmii2rgmii converter speed register
Xin Long <lucien.xin@xxxxxxxxx>
ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header
Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx>
udpv6: Fix the checksum computation when HW checksum does not apply
Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: fix data delivery rate
Edward Cree <ecree@xxxxxxxxxxxxxx>
bpf/verifier: reject BPF_ALU64|BPF_END
Eric Dumazet <edumazet@xxxxxxxxx>
tcp: update skb->skb_mstamp more carefully
Dan Carpenter <dan.carpenter@xxxxxxxxxx>
sctp: potential read out of bounds in sctp_ulpevent_type_enabled()
Jiri Pirko <jiri@xxxxxxxxxxxx>
net: sched: fix use-after-free in tcf_action_destroy and tcf_del_walker
Yuval Mintz <yuvalm@xxxxxxxxxxxx>
mlxsw: spectrum: Prevent mirred-related crash on removal
Takashi Iwai <tiwai@xxxxxxx>
ALSA: usx2y: Suppress kernel warning at page allocation failures
Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
Revert "ALSA: echoaudio: purge contradictions between dimension matrix members and total number of members"
Guneshwor Singh <guneshwor.o.singh@xxxxxxxxx>
ALSA: compress: Remove unused variable
Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
lsm: fix smack_inode_removexattr and xattr_getsecurity memleak
Sergey Senozhatsky <sergey.senozhatsky.work@xxxxxxxxx>
lib/ratelimit.c: use deferred printk() version
Michal Hocko <mhocko@xxxxxxxx>
mm, oom_reaper: skip mm structs with mmu notifiers
Stefan Wahren <stefan.wahren@xxxxxxxx>
staging: vchiq_2835_arm: Fix NULL ptr dereference in free_pagelist
Andrey Konovalov <andreyknvl@xxxxxxxxxx>
uwb: ensure that endpoint is interrupt
Andrey Konovalov <andreyknvl@xxxxxxxxxx>
uwb: properly check kthread_run return value
Lukas Wunner <lukas@xxxxxxxxx>
iio: adc: mcp320x: Fix oops on module unload
Lukas Wunner <lukas@xxxxxxxxx>
iio: adc: mcp320x: Fix readout of negative voltages
Dragos Bogdan <dragos.bogdan@xxxxxxxxxx>
iio: ad7793: Fix the serial interface reset
Colin Parker <colin.parker@xxxxxxxxx>
IIO: BME280: Updates to Humidity readings need ctrl_reg write!
Matt Fornero <matt.fornero@xxxxxxxxxxxxx>
iio: core: Return error for failed read_reg
Stefan Popa <stefan.popa@xxxxxxxxxx>
staging: iio: ad7192: Fix - use the dedicated reset function avoiding dma from stack.
Dragos Bogdan <dragos.bogdan@xxxxxxxxxx>
iio: ad_sigma_delta: Implement a dedicated reset function
Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
iio: adc: twl4030: Disable the vusb3v1 rugulator in the error handling path of 'twl4030_madc_probe()'
Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
iio: adc: twl4030: Fix an error handling path in 'twl4030_madc_probe()'
Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
Revert "xhci: Limit USB2 port wake support for AMD Promontory hosts"
Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: set missing SuperSpeedPlus Link Protocol bit in roothub descriptor
Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: Fix sleeping with spin_lock_irq() held in ASmedia 1042A workaround
Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: fix finding correct bus_state structure for USB 3.1 hosts
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
USB: fix out-of-bounds in usb_set_configuration
Dmitry Fleytman <dmitry@xxxxxxxxxx>
usb: Increase quirk delay for USB devices
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
USB: core: harden cdc_parse_cdc_header
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: uas: fix bug in handling of alternate settings
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: g_mass_storage: Fix deadlock when driver is unbound
Li Jun <jun.li@xxxxxxx>
usb: gadget: mass_storage: set msg_registered after msg registered
Dan Carpenter <dan.carpenter@xxxxxxxxxx>
USB: devio: Don't corrupt user memory
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: dummy-hcd: Fix erroneous synchronization change
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: dummy-hcd: fix infinite-loop resubmission bug
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: dummy-hcd: fix connection failures (wrong speed)
Bjørn Mork <bjorn@xxxxxxx>
USB: cdc-wdm: ignore -EPIPE from GetEncapsulatedResponse
Jim Dickerson <jim.dickerson@xxxxxxx>
usb: pci-quirks.c: Corrected timeout values used in handshake
Takashi Iwai <tiwai@xxxxxxx>
ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor
Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction
Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
usb-storage: fix bogus hardware error messages for ATA pass-thru devices
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives
Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
usb: gadget: udc: renesas_usb3: Fix return value of usb3_write_pipe()
Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
usb: gadget: udc: renesas_usb3: fix Pn_RAMMAP.Pn_MPKT value
Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
usb: gadget: udc: renesas_usb3: fix for no-data control transfer
Nicolas Ferre <nicolas.ferre@xxxxxxxxxxxxx>
usb: gadget: udc: atmel: set vbus irqflags explicitly
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: gadgetfs: fix copy_to_user while holding spinlock
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: gadgetfs: Fix crash caused by inadequate synchronization
-------------
Diffstat:
Makefile | 4 +-
arch/powerpc/kernel/exceptions-64s.S | 24 ++++++-
arch/powerpc/kernel/signal_64.c | 13 +++-
arch/x86/include/asm/kvm_emulate.h | 1 +
arch/x86/kvm/emulate.c | 1 +
arch/x86/kvm/x86.c | 52 +++++++--------
drivers/base/platform.c | 3 +-
drivers/gpu/drm/i915/intel_bios.c | 7 +++
drivers/hid/i2c-hid/i2c-hid.c | 3 +-
drivers/hid/wacom_sys.c | 7 ++-
drivers/hid/wacom_wac.c | 4 +-
drivers/hv/hv_fcopy.c | 4 ++
drivers/hwtracing/stm/core.c | 2 +-
drivers/iio/adc/ad7793.c | 4 +-
drivers/iio/adc/ad_sigma_delta.c | 28 +++++++++
drivers/iio/adc/mcp320x.c | 25 +++++---
drivers/iio/adc/twl4030-madc.c | 10 ++-
drivers/iio/industrialio-core.c | 4 +-
drivers/iio/pressure/bmp280-core.c | 2 +-
drivers/isdn/i4l/isdn_ppp.c | 37 +++++++----
drivers/mmc/core/mmc.c | 36 ++++++-----
drivers/net/ethernet/ibm/emac/mal.c | 3 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 20 +++---
drivers/net/ethernet/qualcomm/emac/emac-mac.c | 3 +-
drivers/net/ethernet/rocker/rocker_tlv.h | 48 ++++++++------
drivers/net/phy/xilinx_gmii2rgmii.c | 2 +-
drivers/net/tun.c | 8 ++-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 37 +++++------
.../broadcom/brcm80211/brcmfmac/fwil_types.h | 5 ++
drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c | 66 +++++++++++++++----
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 10 ++-
drivers/nvme/host/pci.c | 14 ++---
drivers/scsi/sd.c | 19 ++++--
drivers/staging/iio/adc/ad7192.c | 4 +-
.../interface/vchiq_arm/vchiq_2835_arm.c | 6 +-
drivers/usb/class/cdc-wdm.c | 4 +-
drivers/usb/core/config.c | 16 +++--
drivers/usb/core/devio.c | 6 +-
drivers/usb/core/hub.c | 2 +-
drivers/usb/core/message.c | 4 ++
drivers/usb/gadget/function/f_mass_storage.c | 27 +++-----
drivers/usb/gadget/function/f_mass_storage.h | 14 -----
drivers/usb/gadget/legacy/inode.c | 46 ++++++++++++--
drivers/usb/gadget/legacy/mass_storage.c | 20 +-----
drivers/usb/gadget/udc/atmel_usba_udc.c | 4 +-
drivers/usb/gadget/udc/dummy_hcd.c | 56 +++++++++++++++--
drivers/usb/gadget/udc/renesas_usb3.c | 19 ++++--
drivers/usb/host/pci-quirks.c | 10 +--
drivers/usb/host/xhci-hub.c | 14 +++--
drivers/usb/host/xhci-pci.c | 12 ----
drivers/usb/host/xhci.h | 4 +-
drivers/usb/renesas_usbhs/fifo.c | 21 ++++++-
drivers/usb/storage/transport.c | 14 ++++-
drivers/usb/storage/uas-detect.h | 15 ++---
drivers/usb/storage/uas.c | 10 +--
drivers/usb/storage/unusual_devs.h | 7 +++
drivers/uwb/hwa-rc.c | 2 +
drivers/uwb/uwbd.c | 12 ++--
fs/ext4/acl.c | 22 ++++---
fs/ext4/inode.c | 18 +++++-
fs/ext4/namei.c | 12 ++++
fs/f2fs/namei.c | 12 ++++
fs/read_write.c | 5 ++
fs/xattr.c | 2 +-
include/asm-generic/percpu.h | 24 ++++++-
include/linux/cpuset.h | 6 ++
include/linux/iio/adc/ad_sigma_delta.h | 3 +
include/linux/mmu_notifier.h | 5 ++
include/linux/trace_events.h | 1 +
include/net/netlink.h | 73 ++++++++++++++++------
include/net/sctp/ulpevent.h | 6 +-
include/uapi/linux/usb/ch9.h | 1 +
kernel/bpf/verifier.c | 3 +-
kernel/cpuset.c | 16 ++++-
kernel/events/core.c | 3 +-
kernel/power/process.c | 5 +-
kernel/sched/core.c | 7 +--
kernel/trace/ftrace.c | 14 -----
lib/ratelimit.c | 4 +-
mm/oom_kill.c | 16 +++++
net/core/filter.c | 15 ++++-
net/core/rtnetlink.c | 3 +
net/core/sock.c | 7 ++-
net/dsa/slave.c | 28 +++++----
net/ipv4/ip_vti.c | 3 +-
net/ipv4/tcp_output.c | 33 +++++++---
net/ipv6/ip6_gre.c | 22 ++++---
net/ipv6/ip6_tunnel.c | 8 ++-
net/ipv6/ip6_vti.c | 3 +-
net/ipv6/udp.c | 1 +
net/l2tp/l2tp_core.c | 14 ++---
net/l2tp/l2tp_core.h | 5 +-
net/netlink/af_netlink.c | 7 ++-
net/packet/af_packet.c | 28 ++++++---
net/sched/act_api.c | 6 +-
net/sched/cls_matchall.c | 1 +
net/sched/sch_generic.c | 1 +
net/tipc/msg.c | 2 +-
security/smack/smack_lsm.c | 55 ++++++++--------
sound/core/compress_offload.c | 3 +-
sound/pci/echoaudio/echoaudio.c | 6 +-
sound/usb/card.c | 20 ++++++
sound/usb/usx2y/usb_stream.c | 6 +-
103 files changed, 953 insertions(+), 437 deletions(-)