This is the start of the stable review cycle for the 3.18.105 release. There are 121 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Apr 13 18:34:28 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.105-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.105-rc1 Paolo Abeni <pabeni@xxxxxxxxxx> ipv6: the entire IPv6 header chain must fit the first fragment Craig Dillabaugh <cdillaba@xxxxxxxxxxxx> net sched actions: fix dumping which requires several messages to user space Heiner Kallweit <hkallweit1@xxxxxxxxx> r8169: fix setting driver_data after register_netdev Eric Dumazet <edumazet@xxxxxxxxxx> ip6_tunnel: better validate user provided tunnel names Eric Dumazet <edumazet@xxxxxxxxxx> vti6: better validate user provided tunnel names Eric Dumazet <edumazet@xxxxxxxxxx> ip6_gre: better validate user provided tunnel names Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: sit: better validate user provided tunnel names Eric Dumazet <edumazet@xxxxxxxxxx> ip_tunnel: better validate user provided tunnel names Eric Dumazet <edumazet@xxxxxxxxxx> net: fool proof dev_valid_name() Xin Long <lucien.xin@xxxxxxxxx> bonding: process the err returned by dev_set_allmulti properly in bond_enslave Xin Long <lucien.xin@xxxxxxxxx> bonding: move dev_mc_sync after master_upper_dev_link in bond_enslave Xin Long <lucien.xin@xxxxxxxxx> bonding: fix the err path for dev hwaddr sync in bond_enslave Jason Wang <jasowang@xxxxxxxxxx> vhost: correctly remove wait queue during poll failure Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> sky2: Increase D3 delay to sky2 stops working after suspend Eric Dumazet <edumazet@xxxxxxxxxx> sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6 Eric Dumazet <edumazet@xxxxxxxxxx> sctp: do not leak kernel memory to user space Eric Dumazet <edumazet@xxxxxxxxxx> pptp: remove a buggy dst release in pptp_connect() Alexander Potapenko <glider@xxxxxxxxxx> netlink: make sure nladdr has correct size in netlink_connect() Eric Dumazet <edumazet@xxxxxxxxxx> net: fix possible out-of-bound read in skb_network_protocol() Mel Gorman <mgorman@xxxxxxx> futex: Remove requirement for lock_page() in get_futex_key() Theodore Ts'o <tytso@xxxxxxx> random: use lockless method of accessing and updating f->reg_idx Nathan Chancellor <natechancellor@xxxxxxxxx> virtio_net: check return value of skb_to_sgvec in one more location Jason A. Donenfeld <Jason@xxxxxxxxx> virtio_net: check return value of skb_to_sgvec always Jason A. Donenfeld <Jason@xxxxxxxxx> rxrpc: check return value of skb_to_sgvec always Jason A. Donenfeld <Jason@xxxxxxxxx> ipsec: check return value of skb_to_sgvec always Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> EDAC, mv64x60: Fix an error handling path Tony Lindgren <tony@xxxxxxxxxxx> tty: n_gsm: Allow ADM response in addition to UA for control dlci chenxiang <chenxiang66@xxxxxxxxxxxxx> scsi: libsas: initialize sas_phy status according to response of DISCOVER Jason Yan <yanaijie@xxxxxxxxxx> scsi: libsas: fix error when getting phy events Jason Yan <yanaijie@xxxxxxxxxx> scsi: libsas: fix memory leak in sas_smp_get_phy_events() Tang Junhui <tang.junhui@xxxxxxxxxx> bcache: segregate flash only volume write streams Tang Junhui <tang.junhui@xxxxxxxxxx> bcache: stop writeback thread after detaching Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx> vxlan: dont migrate permanent fdb entries during learn Bob Moore <robert.moore@xxxxxxxxx> ACPICA: Disassembler: Abort on an invalid/unknown AML opcode Lv Zheng <lv.zheng@xxxxxxxxx> ACPICA: Events: Add runtime stub support for event APIs Marcel Holtmann <marcel@xxxxxxxxxxxx> Bluetooth: Send HCI Set Event Mask Page 2 command only when needed Lorenzo Bianconi <lorenzo.bianconi83@xxxxxxxxx> iio: magnetometer: st_magn_spi: fix spi_device_id table Jag Raman <jag.raman@xxxxxxxxxx> sparc64: ldc abort during vds iso boot Xin Long <lucien.xin@xxxxxxxxx> sctp: fix recursive locking warning in sctp_do_peeloff Mintz, Yuval <Yuval.Mintz@xxxxxxxxxx> bnx2x: Allow vfs to disable txvlan offload Arnd Bergmann <arnd@xxxxxxxx> xen: avoid type warning in xchg_xen_ulong Namhyung Kim <namhyung@xxxxxxxxxx> perf tests: Decompress kernel module before objdump Christian Lamparter <chunkeey@xxxxxxxxxxxxxx> net: emac: fix reset timeout with AR8035 phy Marcin Nowakowski <marcin.nowakowski@xxxxxxxxxx> MIPS: kprobes: flush_insn_slot should flush only if probe initialised Marcin Nowakowski <marcin.nowakowski@xxxxxxxxxx> MIPS: mm: fixed mappings: correct initialisation Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/core: Correct event creation with PERF_FORMAT_GROUP Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> e1000e: Undo e1000e_pm_freeze if __e1000_shutdown fails Russell King <rmk+kernel@xxxxxxxxxxxxxxx> net: phy: avoid genphy_aneg_done() for PHYs without clause 22 support A Sun <as1033x@xxxxxxxxxxx> mceusb: sporadic RX truncation corruption fix Pan Bian <bianpan2016@xxxxxxx> cx25840: fix unchecked return values Jacob Keller <jacob.e.keller@xxxxxxxxx> e1000e: fix race condition around skb_tstamp_tx() Robert Jarzmik <robert.jarzmik@xxxxxxx> tags: honor COMPILED_SOURCE with apart output directory Milian Wolff <milian.wolff@xxxxxxxx> perf report: Ensure the perf DSO mapping matches what libdw sees Talat Batheesh <talatb@xxxxxxxxxxxx> net/mlx4: Fix the check in attaching steering rules Jason A. Donenfeld <Jason@xxxxxxxxx> skbuff: return -EMSGSIZE in skb_to_sgvec to prevent overflow Dmitry Monakhov <dmonakhov@xxxxxxxxxx> bio-integrity: Do not allocate integrity context for bio w/o data Thomas Bogendoerfer <tsbogend@xxxxxxxxxxxxxxxx> Fix serial console on SNI RM400 machines Tomi Valkeinen <tomi.valkeinen@xxxxxx> drm/omap: fix tiled buffer stride calculations Jia-Ju Bai <baijiaju1990@xxxxxxx> mISDN: Fix a sleep-in-atomic bug Jia-Ju Bai <baijiaju1990@xxxxxxx> qlcnic: Fix a sleep-in-atomic bug in qlcnic_82xx_hw_write_wx_2M and qlcnic_82xx_hw_read_wx_2M Jiri Olsa <jolsa@xxxxxxxxxx> perf trace: Add mmap alias for s390 Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/spufs: Fix coredump of SPU contexts Roman Pen <roman.penyaev@xxxxxxxxxxxxxxxx> KVM: SVM: do not zero out segment attributes if segment is unusable or not present Gustavo A. R. Silva <garsilva@xxxxxxxxxxxxxx> net: freescale: fix potential null pointer dereference Vaibhav Jain <vaibhav@xxxxxxxxxxxxxxxxxx> rtc: interface: Validate alarm-time before handling rollover Will Deacon <will.deacon@xxxxxxx> arm64: futex: Fix undefined behaviour with FUTEX_OP_OPARG_SHIFT usage Ivan Mikhaylov <ivan@xxxxxxxxxx> powerpc/[booke|4xx]: Don't clobber TCR[WP] when setting TCR[DIE] Miklos Szeredi <mszeredi@xxxxxxxxxx> ovl: filter trusted xattr for non-admin Firo Yang <firogm@xxxxxxxxx> hdlcdrv: Fix divide by zero in hdlcdrv_ioctl Colin Ian King <colin.king@xxxxxxxxxxxxx> wl1251: check return from call to wl1251_acx_arp_ip_filter Pieter \"PoroCYon\" Sluys <pcy@national.shitposting.agency> vfb: fix video mode and line_length being set when loaded Rafael David Tinoco <rafael.tinoco@xxxxxxxxxxxxx> scsi: libiscsi: Allow sd_shutdown on bad transport Hangbin Liu <liuhangbin@xxxxxxxxx> l2tp: fix missing print session offset info linzhang <xiaolou4617@xxxxxxxxx> net: llc: add lock_sock in llc_ui_bind to avoid a race condition Jan H. Schönherr <jschoenh@xxxxxxxxx> KVM: nVMX: Fix handling of lmsw instruction Nithin Sujir <nsujir@xxxxxxxxxx> bonding: Don't update slave->link until ready to commit Roman Kapl <roman.kapl@xxxxxxxxx> net: move somaxconn init from sysctl code Eryu Guan <eguan@xxxxxxxxxx> ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() Michael Schmitz <schmitzmic@xxxxxxxxx> fix race in drivers/char/random.c:get_reg() Maurizio Lombardi <mlombard@xxxxxxxxxx> scsi: bnx2fc: fix race condition in bnx2fc_get_host_stats() Liping Zhang <zlpnobody@xxxxxxxxx> netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize Dan Carpenter <dan.carpenter@xxxxxxxxxx> libceph: NULL deref on crush_decode() error path Dan Carpenter <dan.carpenter@xxxxxxxxxx> block: fix an error code in add_partition() Tin Huynh <tnhuynh@xxxxxxx> leds: pca955x: Correct I2C Functionality Kees Cook <keescook@xxxxxxxxxxxx> ray_cs: Avoid reading past end of buffer Suman Anna <s-anna@xxxxxx> ARM: davinci: da8xx: Create DSP device only when assigned memory Antony Antony <antony@xxxxxxxxxxx> xfrm: fix state migration copy replay sequence numbers Michael Ellerman <mpe@xxxxxxxxxxxxxx> selftests/powerpc: Fix TM resched DSCR test with some compilers Colin Ian King <colin.king@xxxxxxxxxxxxx> ath5k: fix memory leak on buf on failed eeprom read Geert Uytterhoeven <geert+renesas@xxxxxxxxx> sh_eth: Use platform device for printing before register_netdev() Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: ene_usb6250: fix SCSI residue overwriting linzhang <xiaolou4617@xxxxxxxxx> net: x25: fix one potential use-after-free issue Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: ene_usb6250: fix first command execution Jisheng Zhang <jszhang@xxxxxxxxxxx> usb: chipidea: properly handle host or gadget initialization failure Ihar Hrachyshka <ihrachys@xxxxxxxxxx> neighbour: update neigh timestamps iff update is effective Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx> ata: libahci: properly propagate return value of platform_get_irq() Colin Ian King <colin.king@xxxxxxxxxxxxx> btrfs: fix incorrect error return ret being passed to mapping_set_error Pan Bian <bianpan2016@xxxxxxx> usb: dwc3: keystone: check return value Anup Patel <anup.patel@xxxxxxxxxxxx> async_tx: Fix DMA_PREP_FENCE usage in do_async_gen_syndrome() Mahesh Bandewar <maheshb@xxxxxxxxxx> ipv6: avoid dad-failures for addresses with NODAD Fabio Estevam <fabio.estevam@xxxxxxx> ARM: dts: imx6qdl-wandboard: Fix audio channel swap Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/tsc: Provide 'tsc=unstable' boot parameter Andrea della Porta <sfaragnaus@xxxxxxxxx> staging: wlan-ng: prism2mgmt.c: fixed a double endian conversion before calling hfa384x_drvr_setconfig16, also fixes relative sparse warning Dan Carpenter <dan.carpenter@xxxxxxxxxx> PowerCap: Fix an error code in powercap_register_zone() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> SMB2: Fix share type handling Neil Horman <nhorman@xxxxxxxxxxxxx> vmxnet3: ensure that adapter is in proper state during force_close Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S PR: Check copy_to/from_user return values Colin Ian King <colin.king@xxxxxxxxxxxxx> netxen_nic: set rcode to the return status from the call to netxen_issue_cmd Stefan Wahren <stefan.wahren@xxxxxxxx> net: qca_spi: Fix alignment issues in rx path Rabin Vincent <rabinv@xxxxxxxx> CIFS: silence lockdep splat in cifs_relock_file() Talat Batheesh <talatb@xxxxxxxxxxxx> net/mlx4_en: Avoid adding steering rules with invalid ring Heiko Carstens <heiko.carstens@xxxxxxxxxx> s390: move _text symbol to address higher than zero Kirill Tkhai <ktkhai@xxxxxxxxxxxxx> pidns: disable pid allocation if pid_ns_prepare_proc() is failed in alloc_pid() J. Bruce Fields <bfields@xxxxxxxxxx> lockd: fix lockd shutdown race Grygorii Strashko <grygorii.strashko@xxxxxx> net: ethernet: ti: cpsw: adjust cpsw fifos depth for fullduplex flow control Kees Cook <keescook@xxxxxxxxxxxx> qlge: Avoid reading past end of buffer Kees Cook <keescook@xxxxxxxxxxxx> bna: Avoid reading past end of buffer Luca Coelho <luciano.coelho@xxxxxxxxx> mac80211: bail out from prep_connection() if a reconfig is ongoing Steffen Klassert <steffen.klassert@xxxxxxxxxxx> af_key: Fix slab-out-of-bounds in pfkey_compile_policy. Bart Van Assche <bart.vanassche@xxxxxxxxxxx> IB/srpt: Fix abort handling Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: RECLAIM_COMPLETE must handle NFS4ERR_CONN_NOT_BOUND_TO_SESSION ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imx6qdl-wandboard.dtsi | 1 + arch/arm/include/asm/xen/events.h | 2 +- arch/arm/mach-davinci/devices-da8xx.c | 10 +++ arch/arm64/include/asm/futex.h | 8 +- arch/mips/include/asm/kprobes.h | 3 +- arch/mips/mm/pgtable-32.c | 6 +- arch/powerpc/kernel/time.c | 14 +++- arch/powerpc/kvm/book3s_pr_papr.c | 34 ++++++-- arch/powerpc/platforms/cell/spufs/coredump.c | 2 + arch/s390/kernel/vmlinux.lds.S | 8 +- arch/sparc/kernel/ldc.c | 7 +- arch/x86/kernel/tsc.c | 2 + arch/x86/kvm/svm.c | 24 +++--- arch/x86/kvm/vmx.c | 7 +- block/bio-integrity.c | 3 + block/partition-generic.c | 4 +- crypto/async_tx/async_pq.c | 5 +- drivers/acpi/acpica/evxfevnt.c | 18 ++++ drivers/acpi/acpica/psobject.c | 14 ++++ drivers/ata/libahci_platform.c | 5 +- drivers/char/random.c | 10 ++- drivers/edac/mv64x60_edac.c | 2 +- drivers/gpu/drm/omapdrm/omap_gem.c | 4 +- drivers/iio/magnetometer/st_magn_spi.c | 2 - drivers/infiniband/ulp/srpt/ib_srpt.c | 6 +- drivers/isdn/mISDN/stack.c | 2 +- drivers/leds/leds-pca955x.c | 2 +- drivers/md/bcache/alloc.c | 19 +++-- drivers/md/bcache/super.c | 6 ++ drivers/media/i2c/cx25840/cx25840-core.c | 36 ++++---- drivers/media/rc/mceusb.c | 9 +- drivers/net/bonding/bond_main.c | 84 ++++++++++--------- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 19 ++++- drivers/net/ethernet/brocade/bna/bfa_ioc.c | 2 +- drivers/net/ethernet/freescale/fsl_pq_mdio.c | 9 +- drivers/net/ethernet/ibm/emac/core.c | 26 +++++- drivers/net/ethernet/intel/e1000e/netdev.c | 17 +++- drivers/net/ethernet/marvell/sky2.c | 2 +- drivers/net/ethernet/mellanox/mlx4/mcg.c | 15 +++- drivers/net/ethernet/mellanox/mlx4/qp.c | 13 +++ .../net/ethernet/qlogic/netxen/netxen_nic_ctx.c | 2 +- drivers/net/ethernet/qlogic/qlcnic/qlcnic_hw.c | 2 +- drivers/net/ethernet/qlogic/qlge/qlge_dbg.c | 4 +- drivers/net/ethernet/qualcomm/qca_spi.c | 10 ++- drivers/net/ethernet/realtek/r8169.c | 4 +- drivers/net/ethernet/renesas/sh_eth.c | 2 +- drivers/net/ethernet/ti/cpsw.c | 16 ++++ drivers/net/hamradio/hdlcdrv.c | 2 + drivers/net/phy/phy.c | 6 ++ drivers/net/ppp/pptp.c | 1 - drivers/net/virtio_net.c | 16 +++- drivers/net/vmxnet3/vmxnet3_drv.c | 5 ++ drivers/net/vxlan.c | 2 +- drivers/net/wireless/ath/ath5k/debug.c | 5 +- drivers/net/wireless/ray_cs.c | 7 +- drivers/net/wireless/ti/wl1251/main.c | 3 +- drivers/powercap/powercap_sys.c | 1 + drivers/rtc/interface.c | 9 +- drivers/scsi/bnx2fc/bnx2fc.h | 1 + drivers/scsi/bnx2fc/bnx2fc_fcoe.c | 10 ++- drivers/scsi/libiscsi.c | 24 +++++- drivers/scsi/libsas/sas_expander.c | 4 +- drivers/staging/wlan-ng/prism2mgmt.c | 2 +- drivers/tty/n_gsm.c | 17 +++- drivers/tty/serial/sccnxp.c | 15 ++-- drivers/usb/chipidea/core.c | 29 +++++-- drivers/usb/dwc3/dwc3-keystone.c | 4 + drivers/usb/storage/ene_ub6250.c | 11 ++- drivers/vhost/vhost.c | 3 +- drivers/video/fbdev/vfb.c | 17 ++++ fs/btrfs/extent_io.c | 2 +- fs/cifs/file.c | 2 +- fs/cifs/smb2pdu.c | 14 ++-- fs/ext4/file.c | 2 +- fs/lockd/svc.c | 6 +- fs/nfs/nfs4proc.c | 7 +- fs/nfs/nfs4state.c | 10 ++- fs/overlayfs/inode.c | 12 ++- include/linux/mlx4/qp.h | 1 + include/linux/skbuff.h | 8 +- include/net/x25.h | 4 +- kernel/events/core.c | 15 ++-- kernel/futex.c | 98 ++++++++++++++++++++-- kernel/pid.c | 4 +- net/bluetooth/hci_core.c | 17 +++- net/ceph/osdmap.c | 1 + net/core/dev.c | 4 +- net/core/neighbour.c | 14 +++- net/core/net_namespace.c | 19 +++++ net/core/skbuff.c | 65 +++++++++----- net/core/sysctl_net_core.c | 2 - net/ipv4/ah4.c | 8 +- net/ipv4/esp4.c | 12 ++- net/ipv4/ip_tunnel.c | 11 +-- net/ipv6/addrconf.c | 5 +- net/ipv6/ah6.c | 8 +- net/ipv6/esp6.c | 12 ++- net/ipv6/ip6_gre.c | 8 +- net/ipv6/ip6_output.c | 13 ++- net/ipv6/ip6_tunnel.c | 7 +- net/ipv6/ip6_vti.c | 7 +- net/ipv6/sit.c | 8 +- net/key/af_key.c | 2 +- net/l2tp/l2tp_netlink.c | 2 + net/llc/af_llc.c | 3 + net/mac80211/mlme.c | 4 + net/netfilter/nf_conntrack_netlink.c | 7 +- net/netlink/af_netlink.c | 3 + net/rxrpc/rxkad.c | 21 +++-- net/sched/act_api.c | 4 +- net/sctp/ipv6.c | 4 +- net/sctp/socket.c | 17 ++-- net/x25/af_x25.c | 24 ++++-- net/x25/sysctl_net_x25.c | 5 +- net/xfrm/xfrm_state.c | 2 + scripts/tags.sh | 1 + tools/perf/builtin-trace.c | 4 + tools/perf/tests/code-reading.c | 20 ++++- tools/perf/util/unwind-libdw.c | 8 ++ .../testing/selftests/powerpc/tm/tm-resched-dscr.c | 2 +- 121 files changed, 925 insertions(+), 314 deletions(-)
