This is the start of the stable review cycle for the 4.9.87 release. There are 65 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon Mar 12 00:18:06 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.87-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.87-rc1 Ernesto A. Fernández <ernesto.mnd.fernandez@xxxxxxxxx> btrfs: preserve i_mode if __btrfs_set_acl() fails Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, ppc64: fix out of bounds access in tail call Eric Dumazet <edumazet@xxxxxxxxxx> bpf: add schedule points in percpu arrays management Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, arm64: fix out of bounds access in tail call Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, x64: implement retpoline for tail call Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: fix mlock precharge on arraymaps Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: fix wrong exposure of map_flags into fdinfo for lpm Dan Williams <dan.j.williams@xxxxxxxxx> mpls, nospec: Sanitize array index in mpls_label_ok() David Ahern <dsahern@xxxxxxxxx> net: mpls: Pull common label check into helper Alexey Kodanev <alexey.kodanev@xxxxxxxxxx> sctp: verify size of a new chunk in _sctp_make_chunk() Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx> s390/qeth: fix IPA command submission race Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx> s390/qeth: fix IP address lookup for L3 devices Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx> s390/qeth: fix double-free on IP add/remove race Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx> s390/qeth: fix IP removal on offline cards Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx> s390/qeth: fix overestimated count of buffer elements Julian Wiedmann <jwi@xxxxxxxxxxxxxxxxxx> s390/qeth: fix SETIP command handling Ursula Braun <ubraun@xxxxxxxxxxxxxxxxxx> s390/qeth: fix underestimated count of buffer elements Alexey Kodanev <alexey.kodanev@xxxxxxxxxx> sctp: fix dst refcnt leak in sctp_v6_get_dst() Eric Dumazet <edumazet@xxxxxxxxxx> tcp_bbr: better deal with suboptimal GSO David Howells <dhowells@xxxxxxxxxx> rxrpc: Fix send in rxrpc_send_data_packet() Ilya Lesokhin <ilyal@xxxxxxxxxxxx> tcp: Honor the eor bit in tcp_mtu_probe Heiner Kallweit <hkallweit1@xxxxxxxxx> net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT Shalom Toledo <shalomt@xxxxxxxxxxxx> mlxsw: spectrum_switchdev: Check success of FDB add operation Tommi Rantala <tommi.t.rantala@xxxxxxxxx> sctp: fix dst refcnt leak in sctp_v4_get_dst Alexey Kodanev <alexey.kodanev@xxxxxxxxxx> udplite: fix partial checksum initialization Guillaume Nault <g.nault@xxxxxxxxxxxx> ppp: prevent unregistered channels from connecting to PPP units Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> netlink: ensure to loop over all netns in genlmsg_multicast_allns() Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68 Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net: fix race on decreasing number of TX queues Arnd Bergmann <arnd@xxxxxxxx> ipv6 sit: work around bogus gcc-8 -Wrestrict warning Denis Du <dudenis2000@xxxxxxxx> hdlc_ppp: carrier detect ok, don't turn off negotiation Stefano Brivio <sbrivio@xxxxxxxxxx> fib_semantics: Don't match route with mismatching tclassid Xin Long <lucien.xin@xxxxxxxxx> bridge: check brport attr show in brport_show Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/apic/vector: Handle legacy irq data correctly Jason A. Donenfeld <Jason@xxxxxxxxx> netlink: put module reference if dump start fails NeilBrown <neilb@xxxxxxxx> md: only allow remove_and_add_spares when no sync_thread running. Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx> x86/speculation: Use Indirect Branch Prediction Barrier in context switch Andy Lutomirski <luto@xxxxxxxxxx> x86/mm: Give each mm TLB flush generation a unique ID Adam Ford <aford173@xxxxxxxxx> ARM: dts: LogicPD Torpedo: Fix I2C1 pinmux Adam Ford <aford173@xxxxxxxxx> ARM: dts: LogicPD SOM-LV: Fix I2C1 pinmux Mike Snitzer <snitzer@xxxxxxxxxx> dm io: fix duplicate bio completion due to missing ref count Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> PCI/ASPM: Deal with missing root ports in link state handling Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the RDMSR path as unlikely() Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM/x86: Remove indirect MSR op calls from SPEC_CTRL Wanpeng Li <wanpeng.li@xxxxxxxxxxx> KVM: mmu: Fix overlap between public and private memslots Arnd Bergmann <arnd@xxxxxxxx> ARM: kvm: fix building with gcc-8 Ulf Magnusson <ulfalizer@xxxxxxxxx> ARM: mvebu: Fix broken PL310_ERRATA_753970 selects Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx> nospec: Allow index argument to have const-qualified type Mauro Carvalho Chehab <mchehab@xxxxxxxxxx> media: m88ds3103: don't call a non-initalized function Sebastian Panceac <sebastian@xxxxxxxx> x86/platform/intel-mid: Handle Intel Edison reboot correctly Juergen Gross <jgross@xxxxxxxx> x86/xen: Zero MSR_IA32_SPEC_CTRL before suspend Dan Williams <dan.j.williams@xxxxxxxxx> dax: fix vma_is_fsdax() helper Viresh Kumar <viresh.kumar@xxxxxxxxxx> cpufreq: s3c24xx: Fix broken s3c_cpufreq_init() John David Anglin <dave.anglin@xxxxxxxx> parisc: Fix ordering of cache and TLB flushes Lingutla Chandrasekhar <clingutla@xxxxxxxxxxxxxx> timers: Forward timer base before migrating timers Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Fix pincfg at resume on Lenovo T470 dock Hans de Goede <hdegoede@xxxxxxxxxx> ALSA: hda: Add a power_save blacklist Erik Veijola <erik.veijola@xxxxxxxxx> ALSA: usb-audio: Add a quirck for B&W PX headphones Alexander Steffen <Alexander.Steffen@xxxxxxxxxxxx> tpm-dev-common: Reject too short writes Alexander Steffen <Alexander.Steffen@xxxxxxxxxxxx> tpm_tis_spi: Use DMA-safe memory for SPI transfers Arnd Bergmann <arnd@xxxxxxxx> tpm: constify transmit data pointers Jeremy Boone <jeremy.boone@nccgroup.trust> tpm_tis: fix potential buffer overruns caused by bit glitches on the bus Jeremy Boone <jeremy.boone@nccgroup.trust> tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus Jeremy Boone <jeremy.boone@nccgroup.trust> tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus Jeremy Boone <jeremy.boone@nccgroup.trust> tpm: st33zp24: fix potential buffer overruns caused by bit glitches on the bus ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/logicpd-som-lv.dtsi | 9 +- arch/arm/boot/dts/logicpd-torpedo-som.dtsi | 8 ++ arch/arm/kvm/hyp/Makefile | 5 + arch/arm/kvm/hyp/banked-sr.c | 4 + arch/arm/mach-mvebu/Kconfig | 4 +- arch/arm64/net/bpf_jit_comp.c | 5 +- arch/parisc/include/asm/cacheflush.h | 1 + arch/parisc/kernel/cache.c | 57 +++++----- arch/parisc/kernel/pacache.S | 22 ++++ arch/powerpc/net/bpf_jit_comp64.c | 1 + arch/x86/include/asm/mmu.h | 15 ++- arch/x86/include/asm/mmu_context.h | 5 + arch/x86/include/asm/nospec-branch.h | 37 +++++++ arch/x86/include/asm/tlbflush.h | 2 + arch/x86/kernel/apic/vector.c | 14 +-- arch/x86/kvm/svm.c | 9 +- arch/x86/kvm/vmx.c | 9 +- arch/x86/mm/tlb.c | 33 ++++++ arch/x86/net/bpf_jit_comp.c | 9 +- arch/x86/platform/intel-mid/intel-mid.c | 2 +- arch/x86/xen/suspend.c | 16 +++ drivers/char/tpm/st33zp24/st33zp24.c | 4 +- drivers/char/tpm/tpm-dev.c | 6 ++ drivers/char/tpm/tpm_i2c_infineon.c | 5 +- drivers/char/tpm/tpm_i2c_nuvoton.c | 8 +- drivers/char/tpm/tpm_tis.c | 2 +- drivers/char/tpm/tpm_tis_core.c | 9 +- drivers/char/tpm/tpm_tis_core.h | 4 +- drivers/char/tpm/tpm_tis_spi.c | 48 +++++---- drivers/cpufreq/s3c24xx-cpufreq.c | 8 +- drivers/md/dm-io.c | 1 + drivers/md/md.c | 4 + drivers/media/dvb-frontends/m88ds3103.c | 7 +- .../ethernet/mellanox/mlxsw/spectrum_switchdev.c | 29 ++++- drivers/net/phy/phy.c | 2 +- drivers/net/ppp/ppp_generic.c | 9 ++ drivers/net/wan/hdlc_ppp.c | 5 +- drivers/pci/pcie/aspm.c | 8 +- drivers/s390/net/qeth_core.h | 7 +- drivers/s390/net/qeth_core_main.c | 43 ++++---- drivers/s390/net/qeth_l3.h | 34 +++++- drivers/s390/net/qeth_l3_main.c | 119 +++++++++------------ fs/btrfs/acl.c | 6 +- include/linux/fs.h | 2 +- include/linux/nospec.h | 3 +- include/net/udplite.h | 1 + kernel/bpf/arraymap.c | 35 +++--- kernel/bpf/stackmap.c | 1 + kernel/time/timer.c | 6 ++ net/bridge/br_sysfs_if.c | 3 + net/core/dev.c | 11 +- net/ipv4/fib_semantics.c | 5 + net/ipv4/route.c | 8 +- net/ipv4/tcp_output.c | 33 +++++- net/ipv4/udp.c | 5 + net/ipv6/ip6_checksum.c | 5 + net/ipv6/sit.c | 2 +- net/mpls/af_mpls.c | 36 ++++--- net/netlink/af_netlink.c | 4 +- net/netlink/genetlink.c | 12 ++- net/rxrpc/output.c | 2 +- net/sctp/ipv6.c | 10 +- net/sctp/protocol.c | 10 +- net/sctp/sm_make_chunk.c | 7 +- sound/pci/hda/hda_intel.c | 38 ++++++- sound/pci/hda/patch_realtek.c | 3 +- sound/usb/quirks-table.h | 47 ++++++++ virt/kvm/kvm_main.c | 3 +- 69 files changed, 687 insertions(+), 244 deletions(-)