On Fri, Dec 15, 2017 at 10:43:58AM +0100, Greg Kroah-Hartman wrote: > This is the start of the stable review cycle for the 4.4.106 release. > There are 105 patches in this series, all will be posted as a response > to this one. If anyone has any issues with these being applied, please > let me know. > > Responses should be made by Sun Dec 17 09:22:39 UTC 2017. > Anything received after that time might be too late. > > The whole patch series can be found in one patch at: > kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.106-rc1.gz > or in the git tree and branch at: > git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y > and the diffstat can be found below. > > thanks, > > greg k-h > > ------------- > Pseudo-Shortlog of commits: > > Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> > Linux 4.4.106-rc1 > > Vincent Pelletier <plr.vincent@xxxxxxxxx> > usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping > > Marc Zyngier <marc.zyngier@xxxxxxx> > arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one > > Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> > Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers" > > Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> > Revert "x86/efi: Hoist page table switching code into efi_call_virt()" > > Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> > Revert "x86/efi: Build our own page table structures" > > Eric Dumazet <edumazet@xxxxxxxxxx> > net/packet: fix a race in packet_bind() and packet_notifier() > > Mike Maloney <maloney@xxxxxxxxxx> > packet: fix crash in fanout_demux_rollover() > > Hangbin Liu <liuhangbin@xxxxxxxxx> > sit: update frag_off info > > Håkon Bugge <Haakon.Bugge@xxxxxxxxxx> > rds: Fix NULL pointer dereference in __rds_rdma_map > > Jon Maloy <jon.maloy@xxxxxxxxxxxx> > tipc: fix memory leak in tipc_accept_from_sock() > > Al Viro <viro@xxxxxxxxxxxxxxxxxx> > more bio_map_user_iov() leak fixes > > Heiko Carstens <heiko.carstens@xxxxxxxxxx> > s390: always save and restore all registers on context switch > > Masamitsu Yamazaki <m-yamazaki@xxxxxxxxxxxxx> > ipmi: Stop timers before cleaning up the module > > Paul Moore <paul@xxxxxxxxxxxxxx> > audit: ensure that 'audit=1' actually enables audit for PID 1 > > Keefe Liu <liuqifa@xxxxxxxxxx> > ipvlan: fix ipv6 outbound device > > David Howells <dhowells@xxxxxxxxxx> > afs: Connect up the CB.ProbeUuid > > Majd Dibbiny <majd@xxxxxxxxxxxx> > IB/mlx5: Assign send CQ and recv CQ of UMR QP > > Mark Bloch <markb@xxxxxxxxxxxx> > IB/mlx4: Increase maximal message size under UD QP > > Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> > xfrm: Copy policy family in clone_policy > > Jason Baron <jbaron@xxxxxxxxxx> > jump_label: Invoke jump_label_test() via early_initcall() > > Arvind Yadav <arvind.yadav.cs@xxxxxxxxx> > atm: horizon: Fix irq release error > > Xin Long <lucien.xin@xxxxxxxxx> > sctp: use the right sk after waking up from wait_buf sleep > > Xin Long <lucien.xin@xxxxxxxxx> > sctp: do not free asoc when it is already dead in sctp_sendmsg > > Pavel Tatashin <pasha.tatashin@xxxxxxxxxx> > sparc64/mm: set fields in deferred pages > > Ming Lei <ming.lei@xxxxxxxxxx> > block: wake up all tasks blocked in get_request() > > Chuck Lever <chuck.lever@xxxxxxxxxx> > sunrpc: Fix rpc_task_begin trace point > > Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> > NFS: Fix a typo in nfs_rename() > > Randy Dunlap <rdunlap@xxxxxxxxxxxxx> > dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0 > > Stephen Bates <sbates@xxxxxxxxxxxx> > lib/genalloc.c: make the avail variable an atomic_long_t > > Xin Long <lucien.xin@xxxxxxxxx> > route: update fnhe_expires for redirect when the fnhe exists > > Xin Long <lucien.xin@xxxxxxxxx> > route: also update fnhe_genid when updating a route cache > > Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx> > mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl() > > Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> > kbuild: pkg: use --transform option to prefix paths in tar > > Jérémy Lefaure <jeremy.lefaure@xxxxxxxxxxxx> > EDAC, i5000, i5400: Fix definition of NRECMEMB register > > Jérémy Lefaure <jeremy.lefaure@xxxxxxxxxxxx> > EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro > > Alexey Kardashevskiy <aik@xxxxxxxxx> > powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested > > Jim Qu <Jim.Qu@xxxxxxx> > drm/amd/amdgpu: fix console deadlock if late init failed > > Jan Kara <jack@xxxxxxx> > axonram: Fix gendisk handling > > Florian Westphal <fw@xxxxxxxxx> > netfilter: don't track fragmented packets > > Johannes Thumshirn <jthumshirn@xxxxxxx> > zram: set physical queue limits to avoid array out of bounds accesses > > Chris Brandt <chris.brandt@xxxxxxxxxxx> > i2c: riic: fix restart condition > > Krzysztof Kozlowski <krzk@xxxxxxxxxx> > crypto: s5p-sss - Fix completing crypto request in IRQ handler > > WANG Cong <xiyou.wangcong@xxxxxxxxx> > ipv6: reorder icmpv6_init() and ip6_mr_init() > > Michal Schmidt <mschmidt@xxxxxxxxxx> > bnx2x: do not rollback VF MAC/VLAN filters we did not configure > > Michal Schmidt <mschmidt@xxxxxxxxxx> > bnx2x: fix possible overrun of VFPF multicast addresses array > > Michal Schmidt <mschmidt@xxxxxxxxxx> > bnx2x: prevent crash when accessing PTP with interface down > > Blomme, Maarten <Maarten.Blomme@xxxxxxxx> > spi_ks8995: fix "BUG: key accdaa28 not in .data!" > > Mark Rutland <mark.rutland@xxxxxxx> > arm64: KVM: Survive unknown traps from guests > > Mark Rutland <mark.rutland@xxxxxxx> > arm: KVM: Survive unknown traps from guests > > Wanpeng Li <wanpeng.li@xxxxxxxxxxx> > KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset > > Franck Demathieu <fdemathieu@xxxxxxxxx> > irqchip/crossbar: Fix incorrect type of register size > > James Smart <jsmart2021@xxxxxxxxx> > scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters > > Tejun Heo <tj@xxxxxxxxxx> > workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq > > Tejun Heo <tj@xxxxxxxxxx> > libata: drop WARN from protocol error in ata_sff_qc_issue() > > Jim Mattson <jmattson@xxxxxxxxxx> > kvm: nVMX: VMCLEAR should not cause the vCPU to shut down > > Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> > USB: gadgetfs: Fix a potential memory leak in 'dev_config()' > > John Keeping <john@xxxxxxxxxxxx> > usb: gadget: configs: plug memory leak > > Daniel Drake <drake@xxxxxxxxxxxx> > HID: chicony: Add support for another ASUS Zen AiO keyboard > > Phil Reid <preid@xxxxxxxxxxxxxxxxx> > gpio: altera: Use handle_level_irq when configured as a level_high > > Guenter Roeck <linux@xxxxxxxxxxxx> > ARM: OMAP2+: Release device node after it is no longer needed. > > Guenter Roeck <linux@xxxxxxxxxxxx> > ARM: OMAP2+: Fix device node reference counts > > David Daney <david.daney@xxxxxxxxxx> > module: set __jump_table alignment to 8 > > Sachin Sant <sachinp@xxxxxxxxxxxxxxxxxx> > selftest/powerpc: Fix false failures for skipped tests > > Thomas Gleixner <tglx@xxxxxxxxxxxxx> > x86/hpet: Prevent might sleep splat on resume > > Ladislav Michl <ladis@xxxxxxxxxxxxxx> > ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure > > Steffen Klassert <steffen.klassert@xxxxxxxxxxx> > vti6: Don't report path MTU below IPV6_MIN_MTU. > > Sasha Levin <alexander.levin@xxxxxxxxxxx> > Revert "s390/kbuild: enable modversions for symbols exported from asm" > > Sasha Levin <alexander.levin@xxxxxxxxxxx> > Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA" > > Sasha Levin <alexander.levin@xxxxxxxxxxx> > Revert "drm/armada: Fix compile fail" > > Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> > mm: drop unused pmdp_huge_get_and_clear_notify() > > Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> > thp: fix MADV_DONTNEED vs. numa balancing race > > Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> > thp: reduce indentation level in change_huge_pmd() > > Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx> > scsi: storvsc: Workaround for virtual DVD SCSI version > > Russell King <rmk+kernel@xxxxxxxxxxxxxxx> > ARM: avoid faulting on qemu > > Russell King <rmk+kernel@xxxxxxxxxxxxxxx> > ARM: BUG if jumping to usermode address in kernel mode > > Dave Martin <Dave.Martin@xxxxxxx> > arm64: fpsimd: Prevent registers leaking from dead tasks > > Andrew Honig <ahonig@xxxxxxxxxx> > KVM: VMX: remove I/O port 0x80 bypass on Intel hosts > > Kristina Martsenko <kristina.martsenko@xxxxxxx> > arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one > > Laurent Caumont <lcaumont2@xxxxxxxxx> > media: dvb: i2c transfers over usb cannot be done from stack > > Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> > drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU > > Dave Gordon <david.s.gordon@xxxxxxxxx> > drm: extra printk() wrapper macros > > Daniel Thompson <daniel.thompson@xxxxxxxxxx> > kdb: Fix handling of kallsyms_symbol_next() return value > > Heiko Carstens <heiko.carstens@xxxxxxxxxx> > s390: fix compat system call table > > Robin Murphy <robin.murphy@xxxxxxx> > iommu/vt-d: Fix scatterlist offset handling > > Jaejoong Kim <climbbb.kim@xxxxxxxxx> > ALSA: usb-audio: Add check return value for usb_string() > > Jaejoong Kim <climbbb.kim@xxxxxxxxx> > ALSA: usb-audio: Fix out-of-bound error > > Takashi Iwai <tiwai@xxxxxxx> > ALSA: seq: Remove spurious WARN_ON() at timer check > > Robb Glasser <rglasser@xxxxxxxxxx> > ALSA: pcm: prevent UAF in snd_pcm_info > > Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> > x86/PCI: Make broadcom_postcore_init() check acpi_disabled > > Eric Biggers <ebiggers@xxxxxxxxxx> > X.509: reject invalid BIT STRING for subjectPublicKey > > Eric Biggers <ebiggers@xxxxxxxxxx> > ASN.1: check for error from ASN1_OP_END__ACT actions > > Eric Biggers <ebiggers@xxxxxxxxxx> > ASN.1: fix out-of-bounds read when parsing indefinite length item > > Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> > efi: Move some sysfs files to be read-only by root > > Huacai Chen <chenhc@xxxxxxxxxx> > scsi: libsas: align sata_device's rps_resp on a cacheline > > William Breathitt Gray <vilhelm.gray@xxxxxxxxx> > isa: Prevent NULL dereference in isa_bus driver callbacks > > Paul Meyer <Paul.Meyer@xxxxxxxxxxxxx> > hv: kvp: Avoid reading past allocated blocks from KVP file > > weiping zhang <zwp10758@xxxxxxxxx> > virtio: release virtio index when fail to device_register > > Martin Kelly <mkelly@xxxxxxxx> > can: usb_8dev: cancel urb on -EPIPE and -EPROTO > > Martin Kelly <mkelly@xxxxxxxx> > can: esd_usb2: cancel urb on -EPIPE and -EPROTO > > Martin Kelly <mkelly@xxxxxxxx> > can: ems_usb: cancel urb on -EPIPE and -EPROTO > > Martin Kelly <mkelly@xxxxxxxx> > can: kvaser_usb: cancel urb on -EPIPE and -EPROTO > > Jimmy Assarsson <jimmyassarsson@xxxxxxxxx> > can: kvaser_usb: ratelimit errors if incomplete messages are received > > Jimmy Assarsson <jimmyassarsson@xxxxxxxxx> > can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback() > > Jimmy Assarsson <jimmyassarsson@xxxxxxxxx> > can: kvaser_usb: free buf in error paths > > Oliver Stäbler <oliver.staebler@xxxxxxxxxxxxxx> > can: ti_hecc: Fix napi poll return value for repoll > > > ------------- > > Diffstat: > > Makefile | 4 +- > arch/arm/include/asm/assembler.h | 18 +++ > arch/arm/include/asm/kvm_arm.h | 4 +- > arch/arm/kernel/entry-header.S | 6 + > arch/arm/kvm/handle_exit.c | 19 +-- > arch/arm/mach-omap2/gpmc-onenand.c | 10 +- > arch/arm/mach-omap2/omap_hwmod_3xxx_data.c | 25 ++-- > arch/arm64/include/asm/kvm_arm.h | 3 +- > arch/arm64/kernel/process.c | 9 ++ > arch/arm64/kvm/handle_exit.c | 19 +-- > arch/powerpc/platforms/powernv/pci-ioda.c | 3 + > arch/powerpc/sysdev/axonram.c | 5 +- > arch/s390/include/asm/asm-prototypes.h | 8 -- > arch/s390/include/asm/switch_to.h | 19 ++- > arch/s390/kernel/syscalls.S | 6 +- > arch/sparc/mm/init_64.c | 9 +- > arch/x86/include/asm/efi.h | 26 ---- > arch/x86/kernel/hpet.c | 2 +- > arch/x86/kvm/vmx.c | 31 ++--- > arch/x86/mm/pageattr.c | 17 ++- > arch/x86/pci/broadcom_bus.c | 2 +- > arch/x86/platform/efi/efi.c | 39 +++--- > arch/x86/platform/efi/efi_32.c | 5 - > arch/x86/platform/efi/efi_64.c | 137 ++++++---------------- > arch/x86/platform/efi/efi_stub_64.S | 43 +++++++ > block/bio.c | 14 ++- > block/blk-core.c | 4 +- > crypto/asymmetric_keys/x509_cert_parser.c | 2 + > drivers/ata/libata-sff.c | 1 - > drivers/atm/horizon.c | 2 +- > drivers/base/isa.c | 10 +- > drivers/block/zram/zram_drv.c | 2 + > drivers/char/ipmi/ipmi_si_intf.c | 44 +++---- > drivers/crypto/s5p-sss.c | 5 +- > drivers/edac/i5000_edac.c | 8 +- > drivers/edac/i5400_edac.c | 9 +- > drivers/firmware/efi/efi.c | 3 +- > drivers/firmware/efi/esrt.c | 15 +-- > drivers/firmware/efi/runtime-map.c | 10 +- > drivers/gpio/gpio-altera.c | 26 ++-- > drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 5 +- > drivers/gpu/drm/armada/Makefile | 2 - > drivers/gpu/drm/exynos/exynos_drm_gem.c | 9 ++ > drivers/hid/Kconfig | 4 +- > drivers/hid/hid-chicony.c | 1 + > drivers/hid/hid-core.c | 1 + > drivers/hid/hid-ids.h | 1 + > drivers/i2c/busses/i2c-riic.c | 6 +- > drivers/infiniband/hw/mlx4/qp.c | 2 +- > drivers/infiniband/hw/mlx5/main.c | 2 + > drivers/iommu/intel-iommu.c | 8 +- > drivers/irqchip/irq-crossbar.c | 8 +- > drivers/media/usb/dvb-usb/dibusb-common.c | 16 ++- > drivers/memory/omap-gpmc.c | 4 +- > drivers/net/can/ti_hecc.c | 3 + > drivers/net/can/usb/ems_usb.c | 2 + > drivers/net/can/usb/esd_usb2.c | 2 + > drivers/net/can/usb/kvaser_usb.c | 13 +- > drivers/net/can/usb/usb_8dev.c | 2 + > drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 20 +++- > drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 8 +- > drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.h | 1 + > drivers/net/ethernet/broadcom/bnx2x/bnx2x_vfpf.c | 23 ++-- > drivers/net/ipvlan/ipvlan_core.c | 2 +- > drivers/net/phy/spi_ks8995.c | 1 + > drivers/net/wireless/mac80211_hwsim.c | 5 +- > drivers/scsi/lpfc/lpfc_els.c | 14 ++- > drivers/scsi/storvsc_drv.c | 27 +++-- > drivers/spi/Kconfig | 1 - > drivers/usb/gadget/configfs.c | 1 + > drivers/usb/gadget/function/f_fs.c | 2 +- > drivers/usb/gadget/legacy/inode.c | 4 +- > drivers/virtio/virtio.c | 2 + > fs/afs/cmservice.c | 3 + > fs/nfs/dir.c | 2 +- > include/drm/drmP.h | 26 +++- > include/linux/genalloc.h | 3 +- > include/linux/mmu_notifier.h | 13 -- > include/linux/omap-gpmc.h | 5 +- > include/linux/sysfs.h | 6 + > include/scsi/libsas.h | 2 +- > kernel/audit.c | 10 +- > kernel/debug/kdb/kdb_io.c | 2 +- > kernel/jump_label.c | 2 +- > kernel/workqueue.c | 1 + > lib/asn1_decoder.c | 49 ++++---- > lib/dynamic_debug.c | 4 + > lib/genalloc.c | 10 +- > mm/huge_memory.c | 82 +++++++++---- > net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c | 4 + > net/ipv4/netfilter/nf_nat_l3proto_ipv4.c | 5 - > net/ipv4/route.c | 14 ++- > net/ipv6/af_inet6.c | 10 +- > net/ipv6/ip6_vti.c | 8 +- > net/ipv6/sit.c | 1 + > net/packet/af_packet.c | 37 +++--- > net/packet/internal.h | 1 - > net/rds/rdma.c | 2 +- > net/sctp/socket.c | 38 ++++-- > net/sunrpc/sched.c | 3 +- > net/tipc/server.c | 1 + > net/xfrm/xfrm_policy.c | 1 + > scripts/module-common.lds | 2 + > scripts/package/Makefile | 5 +- > sound/core/pcm.c | 2 + > sound/core/seq/seq_timer.c | 2 +- > sound/usb/mixer.c | 13 +- > tools/hv/hv_kvp_daemon.c | 70 +++-------- > tools/testing/selftests/powerpc/harness.c | 6 +- > 109 files changed, 701 insertions(+), 570 deletions(-) > > Merged, compiled, and flashed onto my Pixel 2 XL and OnePlus 5. No initial issues noticed in general usage or dmesg. Cheers! Nathan