This is the start of the stable review cycle for the 4.9.126 release. There are 63 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun Sep 9 21:09:58 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.126-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.126-rc1 Jeremy Cline <jcline@xxxxxxxxxx> fs/quota: Fix spectre gadget in do_quotactl Horia Geantă <horia.geanta@xxxxxxx> crypto: caam/jr - fix descriptor DMA unmapping Ondrej Mosnacek <omosnace@xxxxxxxxxx> crypto: vmx - Fix sleep-in-atomic bugs Adrian Hunter <adrian.hunter@xxxxxxxxx> perf auxtrace: Fix queue resize Shan Hai <shan.hai@xxxxxxxxxx> bcache: release dc->writeback_lock properly in bch_writeback_thread() Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> printk/tracing: Do not trace printk_nmi_enter() Vishal Verma <vishal.l.verma@xxxxxxxxx> libnvdimm: fix ars_status output length calculation Christian Brauner <christian@xxxxxxxxxx> getxattr: use correct xattr length Mikulas Patocka <mpatocka@xxxxxxxxxx> udlfb: set optimal write delay Mikulas Patocka <mpatocka@xxxxxxxxxx> fb: fix lost console when the user unplugs a USB adapter Vignesh R <vigneshr@xxxxxx> pwm: tiehrpwm: Fix disabling of output of PWMs Richard Weinberger <richard@xxxxxx> ubifs: Fix synced_i_size calculation for xattr inodes Richard Weinberger <richard@xxxxxx> ubifs: Check data node size before truncate Richard Weinberger <richard@xxxxxx> Revert "UBIFS: Fix potential integer overflow in allocation" Richard Weinberger <richard@xxxxxx> ubifs: Fix memory leak in lprobs self-check Jann Horn <jannh@xxxxxxxxxx> userns: move user access out of the mutex Jann Horn <jannh@xxxxxxxxxx> sys: don't hold uts_sem while accessing userspace memory Al Viro <viro@xxxxxxxxxxxxxxxxxx> osf_getdomainname(): use copy_to_user() Jacob Pan <jacob.jun.pan@xxxxxxxxxxxxxxx> iommu/vt-d: Fix dev iotlb pfsid use Jacob Pan <jacob.jun.pan@xxxxxxxxxxxxxxx> iommu/vt-d: Add definitions for PFSID Peter Zijlstra <peterz@xxxxxxxxxxxxx> mm/tlb: Remove tlb_remove_table() non-concurrent condition Yannik Sembritzki <yannik@xxxxxxxxxxxxx> Fix kexec forbidding kernels signed with keys in the secondary keyring to boot Yannik Sembritzki <yannik@xxxxxxxxxxxxx> Replace magic for trusting the secondary keyring with #define Jon Hunter <jonathanh@xxxxxxxxxx> ARM: tegra: Fix Tegra30 Cardhu PCA954x reset Bill Baker <Bill.Baker@xxxxxxxxxx> NFSv4 client live hangs after live data migration recovery Dan Carpenter <dan.carpenter@xxxxxxxxxx> pnfs/blocklayout: off by one in bl_map_stripe() Max Filippov <jcmvbkbc@xxxxxxxxx> xtensa: increase ranges in ___invalidate_{i,d}cache_all Max Filippov <jcmvbkbc@xxxxxxxxx> xtensa: limit offsets in __loop_cache_{all,page} Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: VMX: fixes for vmentry_l1d_flush module parameter zhangyi (F) <yi.zhang@xxxxxxxxxx> PM / sleep: wakeup: Fix build error caused by missing SRCU support Tomas Bortoli <tomasbortoli@xxxxxxxxx> 9p: fix multiple NULL-pointer-dereferences Rafael David Tinoco <rafael.tinoco@xxxxxxxxxx> mfd: hi655x: Fix regmap area declared size for hi655x Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> uprobes: Use synchronize_rcu() not synchronize_sched() Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing/blktrace: Fix to allow setting same value Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Do not call start/stop() functions when tracing_on does not change Johan Hovold <johan@xxxxxxxxxx> rtc: omap: fix potential crash on power off Nadav Amit <namit@xxxxxxxxxx> vmw_balloon: fix VMCI use when balloon built into kernel Nadav Amit <namit@xxxxxxxxxx> vmw_balloon: VMCI_DOORBELL_SET does not check status Nadav Amit <namit@xxxxxxxxxx> vmw_balloon: do not use 2MB without batching Nadav Amit <namit@xxxxxxxxxx> vmw_balloon: fix inflation of 64-bit GFNs Lars-Peter Clausen <lars@xxxxxxxxxx> iio: ad9523: Fix return value for ad952x_store() Lars-Peter Clausen <lars@xxxxxxxxxx> iio: ad9523: Fix displayed phase Tycho Andersen <tycho@xxxxxxxx> uart: fix race between uart_put_char() and uart_shutdown() Mike Snitzer <snitzer@xxxxxxxxxx> dm cache metadata: save in-core policy_hint_size to on-disk superblock Hou Tao <houtao1@xxxxxxxxxx> dm thin: stop no_space_timeout worker when switching to write-mode Tomas Bortoli <tomasbortoli@xxxxxxxxx> net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() Tomas Bortoli <tomasbortoli@xxxxxxxxx> net/9p/client.c: version pointer uninitialized jiangyiwen <jiangyiwen@xxxxxxxxxx> 9p/virtio: fix off-by-one error in sg list bounds check piaojun <piaojun@xxxxxxxxxx> fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed Bart Van Assche <bart.vanassche@xxxxxxx> RDMA/rxe: Set wqe->status correctly if an unexpected response is received Bart Van Assche <bart.vanassche@xxxxxxx> ib_srpt: Fix a use-after-free in srpt_close_ch() Vaibhav Jain <vaibhav@xxxxxxxxxxxxx> cxl: Fix wrong comparison in cxl_adapter_context_get() Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx> powerpc/powernv/pci: Work around races in PCI bridge enabling Mahesh Salgaonkar <mahesh@xxxxxxxxxxxxxxxxxx> powerpc/pseries: Fix endianness while restoring of r3 in MCE handler. Hari Bathini <hbathini@xxxxxxxxxxxxx> powerpc/fadump: handle crash memory ranges array index overflow Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> mailbox: xgene-slimpro: Fix potential NULL pointer dereference Daniel Mack <daniel@xxxxxxxxxx> libertas: fix suspend and resume for SDIO connected cards Matthew Auld <matthew.auld@xxxxxxxxx> drm/i915/userptr: reject zero user_size Krzysztof Kozlowski <krzk@xxxxxxxxxx> spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe Bartosz Golaszewski <bgolaszewski@xxxxxxxxxxxx> spi: davinci: fix a NULL pointer dereference Chirantan Ekbote <chirantan@xxxxxxxxxxxx> 9p/net: Fix zero-copy path in the 9p virtio transport Alexander Aring <aring@xxxxxxxxxxxx> net: mac802154: tx: expand tailroom if necessary Alexander Aring <aring@xxxxxxxxxxxx> net: 6lowpan: fix reserved space for single frames ------------- Diffstat: Makefile | 4 +- arch/alpha/kernel/osf_sys.c | 64 ++++++++--------- arch/arm/boot/dts/tegra30-cardhu.dtsi | 1 + arch/powerpc/include/asm/fadump.h | 3 - arch/powerpc/kernel/fadump.c | 91 +++++++++++++++++++---- arch/powerpc/platforms/powernv/pci-ioda.c | 37 ++++++++++ arch/powerpc/platforms/pseries/ras.c | 2 +- arch/sparc/kernel/sys_sparc_32.c | 22 +++--- arch/sparc/kernel/sys_sparc_64.c | 20 +++--- arch/x86/kernel/kexec-bzimage64.c | 2 +- arch/x86/kvm/vmx.c | 26 ++++--- arch/xtensa/include/asm/cacheasm.h | 69 +++++++++++------- certs/system_keyring.c | 3 +- crypto/asymmetric_keys/pkcs7_key_type.c | 2 +- drivers/crypto/caam/jr.c | 3 +- drivers/crypto/vmx/aes_cbc.c | 30 ++++---- drivers/crypto/vmx/aes_xts.c | 21 ++++-- drivers/gpu/drm/i915/i915_gem_userptr.c | 3 + drivers/iio/frequency/ad9523.c | 4 +- drivers/infiniband/sw/rxe/rxe_comp.c | 1 + drivers/infiniband/ulp/srpt/ib_srpt.c | 3 +- drivers/iommu/dmar.c | 6 +- drivers/iommu/intel-iommu.c | 18 ++++- drivers/mailbox/mailbox-xgene-slimpro.c | 6 +- drivers/md/bcache/writeback.c | 4 +- drivers/md/dm-cache-metadata.c | 3 +- drivers/md/dm-thin.c | 2 + drivers/mfd/hi655x-pmic.c | 2 +- drivers/misc/cxl/main.c | 2 +- drivers/misc/vmw_balloon.c | 67 ++++++++++------- drivers/net/wireless/marvell/libertas/dev.h | 1 + drivers/net/wireless/marvell/libertas/if_sdio.c | 30 ++++++-- drivers/nvdimm/bus.c | 4 +- drivers/pwm/pwm-tiehrpwm.c | 2 + drivers/rtc/rtc-omap.c | 14 ++-- drivers/spi/spi-davinci.c | 2 +- drivers/spi/spi-fsl-dspi.c | 24 +++---- drivers/tty/serial/serial_core.c | 17 +++-- drivers/video/fbdev/core/fbmem.c | 38 ++++++++-- fs/9p/xattr.c | 6 +- fs/nfs/blocklayout/dev.c | 2 +- fs/nfs/nfs4proc.c | 9 ++- fs/quota/quota.c | 2 + fs/ubifs/journal.c | 18 ++++- fs/ubifs/lprops.c | 8 +-- fs/xattr.c | 2 +- include/linux/intel-iommu.h | 8 ++- include/linux/sunrpc/clnt.h | 1 + include/linux/verification.h | 6 ++ include/video/udlfb.h | 2 +- kernel/power/Kconfig | 1 + kernel/printk/nmi.c | 4 +- kernel/sys.c | 95 ++++++++++++------------- kernel/trace/blktrace.c | 4 ++ kernel/trace/trace.c | 4 +- kernel/trace/trace_uprobe.c | 2 +- kernel/user_namespace.c | 24 +++---- kernel/utsname_sysctl.c | 41 ++++++----- mm/memory.c | 9 --- net/9p/client.c | 2 +- net/9p/trans_fd.c | 7 +- net/9p/trans_rdma.c | 3 + net/9p/trans_virtio.c | 13 +++- net/ieee802154/6lowpan/tx.c | 21 +++++- net/mac802154/tx.c | 15 +++- net/sunrpc/clnt.c | 28 +++++--- tools/perf/util/auxtrace.c | 3 + 67 files changed, 653 insertions(+), 340 deletions(-)