This is the start of the stable review cycle for the 3.18.123 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Sep 26 11:30:30 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.123-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.123-rc1 Johan Hovold <johan@xxxxxxxxxx> USB: serial: ti_usb_3410_5052: fix array underflow in completion handler Bart Van Assche <bart.vanassche@xxxxxxx> IB/nes: Fix a compiler warning Dan Carpenter <dan.carpenter@xxxxxxxxxx> drm/panel: type promotion bug in s6e8aa0_read_mtp_id() Timo Wischer <twischer@xxxxxxxxxxxxxx> ALSA: pcm: Fix snd_interval_refine first/last with open min/max Zhouyang Jia <jiazhouyang09@xxxxxxxxx> rtc: bq4802: add error handling for devm_ioremap Julia Lawall <Julia.Lawall@xxxxxxx> parport: sunbpp: fix error return code Nicholas Mc Guire <hofrat@xxxxxxxxx> ARM: hisi: check of_iomap and fix missing of_node_put Nicholas Mc Guire <hofrat@xxxxxxxxx> ARM: hisi: handle of_iomap and fix missing of_node_put Paul Burton <paul.burton@xxxxxxxx> MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads Jann Horn <jannh@xxxxxxxxxx> mtdchar: fix overflows in adjustment of `count` Ronny Chevalier <ronny.chevalier@xxxxxx> audit: fix use-after-free in audit_add_watch Maciej W. Rozycki <macro@xxxxxxxx> binfmt_elf: Respect error return from `regset->active' Dan Carpenter <dan.carpenter@xxxxxxxxxx> CIFS: fix wrapping bugs in num_entries() Dan Carpenter <dan.carpenter@xxxxxxxxxx> cifs: prevent integer overflow in nxt_dir_entry() Jia-Ju Bai <baijiaju1990@xxxxxxxxx> usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt() Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx> USB: yurex: Fix buffer over-read in yurex_write() Jia-Ju Bai <baijiaju1990@xxxxxxxxx> usb: misc: uss720: Fix two sleep-in-atomic-context bugs Johan Hovold <johan@xxxxxxxxxx> USB: serial: io_ti: fix array underflow in completion handler Jia-Ju Bai <baijiaju1990@xxxxxxxxx> usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame() Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> usb: Avoid use-after-free by flushing endpoints early in usb_set_interface() Tim Anderson <tsa@xxxxxxxxxxxxxxxxxxx> USB: Add quirk to support DJI CineSSD Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> usb: Don't die twice if PCI xhci host is not responding in resume K. Y. Srinivasan <kys@xxxxxxxxxxxxx> Tools: hv: Fix a bug in the key delete code Aaron Knister <aaron.s.knister@xxxxxxxx> IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler Juergen Gross <jgross@xxxxxxxx> xen/netfront: fix waiting for xenbus state change Bin Yang <bin.yang@xxxxxxxxx> pstore: Fix incorrect persistent ram buffer mapping Parav Pandit <parav@xxxxxxxxxxxx> RDMA/cma: Protect cma dev list with lock Randy Dunlap <rdunlap@xxxxxxxxxxxxx> platform/x86: toshiba_acpi: Fix defined but not used build warnings Julian Wiedmann <jwi@xxxxxxxxxxxxx> s390/qeth: reset layer2 attribute on layer switch Julian Wiedmann <jwi@xxxxxxxxxxxxx> s390/qeth: fix race in used-buffer accounting Manikanta Pubbisetty <mpubbise@xxxxxxxxxxxxxx> mac80211: restrict delayed tailroom needed decrement Nicholas Piggin <npiggin@xxxxxxxxx> powerpc/powernv: opal_put_chars partial write fix Sandipan Das <sandipan@xxxxxxxxxxxxx> perf powerpc: Fix callchain ip filtering Fredrik Noring <noring@xxxxxxxxxx> fbdev: Distinguish between interlaced and progressive modes Sandipan Das <sandipan@xxxxxxxxxxxxx> perf powerpc: Fix callchain ip filtering when return address is in a register Randy Dunlap <rdunlap@xxxxxxxxxxxxx> fbdev/via: fix defined but not used warning Anton Vasilyev <vasilyev@xxxxxxxxx> video: goldfishfb: fix memory leak on driver remove Dan Carpenter <dan.carpenter@xxxxxxxxxx> fbdev: omapfb: off by one in omapfb_register_client() Randy Dunlap <rdunlap@xxxxxxxxxxxxx> mtd/maps: fix solutionengine.c printk format warnings Felix Fietkau <nbd@xxxxxxxx> MIPS: ath79: fix system restart Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: Special-case rindex for gfs2_grow YueHaibing <yuehaibing@xxxxxxxxxx> xfrm: fix 'passing zero to ERR_PTR()' warning Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro Takashi Iwai <tiwai@xxxxxxx> ALSA: msnd: Fix the default sample sizes Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> mm: get rid of vmacache_flush_all() entirely Eric Dumazet <edumazet@xxxxxxxxxx> netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: Fix use-after-free in xhci_free_virt_device Paul Burton <paul.burton@xxxxxxxxxx> MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize Zumeng Chen <zumeng.chen@xxxxxxxxx> mfd: ti_am335x_tscadc: Fix struct clk memory leak Mauricio Faria de Oliveira <mfo@xxxxxxxxxxxxx> partitions/aix: fix usage of uninitialized lv_info and lvname structures Mauricio Faria de Oliveira <mfo@xxxxxxxxxxxxx> partitions/aix: append null character to print data from disk Petr Machata <petrm@xxxxxxxxxxxx> net: dcb: For wild-card lookups, use priority -1, not 0 Yelena Krivosheev <yelena@xxxxxxxxxxx> net: mvneta: fix mtu change on port without link Anton Vasilyev <vasilyev@xxxxxxxxx> gpio: ml-ioh: Fix buffer underwrite on probe error path Joerg Roedel <jroedel@xxxxxxx> x86/mm: Remove in_nmi() warning from vmalloc_fault() Marcel Holtmann <marcel@xxxxxxxxxxxx> Bluetooth: hidp: Fix handling of strncpy for hid->name information Anton Vasilyev <vasilyev@xxxxxxxxx> scsi: 3ware: fix return 0 on the error path of probe Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx> ata: libahci: Correct setting of DEVSLP register Paul Burton <paul.burton@xxxxxxxx> MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx> ath10k: prevent active scans on potential unusable channels Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx> macintosh/via-pmu: Add missing mmio accessors Anton Vasilyev <vasilyev@xxxxxxxxx> tty: rocket: Fix possible buffer overwrite on register_PCI Dan Carpenter <dan.carpenter@xxxxxxxxxx> uio: potential double frees if __uio_register_device() fails BingJing Chang <bingjingc@xxxxxxxxxxxx> md/raid5: fix data corruption of replacements after originals dropped Mike Christie <mchristi@xxxxxxxxxx> scsi: target: fix __transport_register_session locking Johan Hedberg <johan.hedberg@xxxxxxxxx> Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV Daniel Micay <danielmicay@xxxxxxxxx> staging/rts5208: Fix read overflow in memcpy Jia-Ju Bai <baijiaju1990@xxxxxxx> staging: rt5208: Fix a sleep-in-atomic bug in xd_copy_page Vegard Nossum <vegard.nossum@xxxxxxxxxx> kthread: fix boot hang (regression) on MIPS/OpenRISC Vegard Nossum <vegard.nossum@xxxxxxxxxx> kthread: Fix use-after-free if kthread fork fails Ritesh Harjani <riteshh@xxxxxxxxxxxxxx> cfq: Give a chance for arming slice idle timer in case of group_idle Shubhrajyoti Datta <shubhrajyoti.datta@xxxxxxxxxx> i2c: xiic: Make the start and the byte count write atomic Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ASoC: wm8994: Fix missing break in switch Chas Williams <chas3@xxxxxxx> Fixes: Commit 86af955d02bb ("mm: numa: avoid waiting on freed migrated pages") Govindarajulu Varadarajan <gvaradar@xxxxxxxxx> enic: do not call enic_change_mtu in enic_probe Tyler Hicks <tyhicks@xxxxxxxxxxxxx> irda: Only insert new objects into the global database via setsockopt Tyler Hicks <tyhicks@xxxxxxxxxxxxx> irda: Fix memory leak caused by repeated binds of irda socket Randy Dunlap <rdunlap@xxxxxxxxxxxxx> kbuild: make missing $DEPMOD a Warning instead of an Error Joel Fernandes (Google) <joel@xxxxxxxxxxxxxxxxx> debugobjects: Make stack check warning more informative Qu Wenruo <wqu@xxxxxxxx> btrfs: Don't remove block group that still has pinned down bytes Qu Wenruo <wqu@xxxxxxxx> btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized Misono Tomohiro <misono.tomohiro@xxxxxxxxxxxxxx> btrfs: replace: Reset on-disk dev stats value after replace Mahesh Salgaonkar <mahesh@xxxxxxxxxxxxxxxxxx> powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. Steve French <stfrench@xxxxxxxxxxxxx> SMB3: Number of requests sent should be displayed for SMB3 not just CIFS Steve French <stfrench@xxxxxxxxxxxxx> smb3: fix reset of bytes read and written stats Breno Leitao <leitao@xxxxxxxxxx> selftests/powerpc: Kill child processes on SIGINT Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice John Pittman <jpittman@xxxxxxxxxx> dm kcopyd: avoid softlockup in run_complete_job Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxx> PCI: mvebu: Fix I/O space end address calculation Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: aic94xx: fix an error code in aic94xx_init() Stefan Haberland <sth@xxxxxxxxxxxxx> s390/dasd: fix hanging offline processing due to canceled worker Dan Carpenter <dan.carpenter@xxxxxxxxxx> powerpc: Fix size calculation using resource_size() Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx> net/9p: fix error path of p9_virtio_probe Aleh Filipovich <aleh@xxxxxxxxxx> platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 Guenter Roeck <linux@xxxxxxxxxxxx> mfd: sm501: Set coherent_dma_mask when creating subdevices Tan Hu <tan.hu@xxxxxxxxxx> ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx> mm/fadvise.c: fix signed overflow UBSAN complaint Randy Dunlap <rdunlap@xxxxxxxxxxxxx> scripts: modpost: check memory allocation results OGAWA Hirofumi <hirofumi@xxxxxxxxxxxxxxxxxx> fat: validate ->i_start before using Arnd Bergmann <arnd@xxxxxxxx> reiserfs: change j_timestamp type to time64_t Jann Horn <jannh@xxxxxxxxxx> fork: don't copy inconsistent signal handler state to child Ernesto A. Fernández <ernesto.mnd.fernandez@xxxxxxxxx> hfs: prevent crash on exit from failed search Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> hfsplus: don't return 0 when fill_super() failed Ronnie Sahlberg <lsahlber@xxxxxxxxxx> cifs: check if SMB2 PDU size has been padded and suppress the warning ------------- Diffstat: Makefile | 4 +-- arch/arm/mach-hisi/hotplug.c | 33 ++++++++++++------ arch/mips/ath79/setup.c | 1 + arch/mips/include/asm/io.h | 8 ++--- arch/mips/include/asm/mach-ath79/ath79.h | 1 + arch/mips/kernel/process.c | 1 - arch/mips/loongson/common/cs5536/cs5536_ohci.c | 2 +- arch/mips/mm/c-r4k.c | 6 ++-- arch/openrisc/kernel/process.c | 2 -- arch/powerpc/platforms/powernv/opal.c | 2 +- arch/powerpc/platforms/pseries/ras.c | 2 +- arch/powerpc/sysdev/mpic_msgr.c | 2 +- arch/x86/mm/fault.c | 2 -- block/cfq-iosched.c | 3 +- block/partitions/aix.c | 13 ++++--- drivers/ata/libahci.c | 2 ++ drivers/bluetooth/Kconfig | 1 + drivers/gpio/gpio-ml-ioh.c | 3 +- drivers/gpu/drm/panel/panel-s6e8aa0.c | 2 +- drivers/i2c/busses/i2c-xiic.c | 4 +++ drivers/infiniband/core/cma.c | 12 ++++--- drivers/infiniband/hw/nes/nes.h | 2 +- drivers/infiniband/ulp/ipoib/ipoib_cm.c | 2 ++ drivers/macintosh/via-pmu.c | 9 ++--- drivers/md/dm-kcopyd.c | 2 ++ drivers/md/raid5.c | 6 ++++ drivers/mfd/sm501.c | 1 + drivers/mfd/ti_am335x_tscadc.c | 3 +- drivers/mtd/maps/solutionengine.c | 6 ++-- drivers/mtd/mtdchar.c | 10 ++++-- drivers/net/ethernet/cisco/enic/enic_main.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 1 - drivers/net/wireless/ath/ath10k/mac.c | 7 ++++ drivers/net/xen-netfront.c | 24 ++++++------- drivers/parport/parport_sunbpp.c | 8 +++-- drivers/pci/host/pci-mvebu.c | 2 +- drivers/platform/x86/asus-nb-wmi.c | 1 + drivers/platform/x86/toshiba_acpi.c | 3 +- drivers/rtc/rtc-bq4802.c | 4 +++ drivers/s390/block/dasd_eckd.c | 7 ++-- drivers/s390/net/qeth_core_main.c | 3 +- drivers/s390/net/qeth_core_sys.c | 1 + drivers/scsi/3w-9xxx.c | 6 +++- drivers/scsi/3w-sas.c | 3 ++ drivers/scsi/3w-xxxx.c | 2 ++ drivers/scsi/aic94xx/aic94xx_init.c | 4 ++- drivers/staging/comedi/drivers/ni_mio_common.c | 3 +- drivers/staging/rts5208/rtsx_scsi.c | 2 +- drivers/staging/rts5208/xd.c | 2 +- drivers/target/target_core_transport.c | 5 +-- drivers/tty/rocket.c | 2 +- drivers/uio/uio.c | 3 +- drivers/usb/class/cdc-wdm.c | 2 +- drivers/usb/core/hcd-pci.c | 2 -- drivers/usb/core/message.c | 11 ++++++ drivers/usb/core/quirks.c | 3 ++ drivers/usb/host/u132-hcd.c | 2 +- drivers/usb/host/xhci.c | 3 ++ drivers/usb/misc/uss720.c | 4 +-- drivers/usb/misc/yurex.c | 5 +-- drivers/usb/serial/io_ti.h | 2 +- drivers/usb/serial/ti_usb_3410_5052.h | 2 +- drivers/usb/storage/scsiglue.c | 9 +++++ drivers/usb/storage/unusual_devs.h | 7 ++++ drivers/video/fbdev/core/modedb.c | 41 +++++++++++++++++------ drivers/video/fbdev/goldfishfb.c | 1 + drivers/video/fbdev/omap/omapfb_main.c | 2 +- drivers/video/fbdev/via/viafbdev.c | 3 +- fs/binfmt_elf.c | 2 +- fs/btrfs/dev-replace.c | 6 ++++ fs/btrfs/extent-tree.c | 2 +- fs/btrfs/relocation.c | 23 +++++++------ fs/cifs/cifs_debug.c | 8 +++++ fs/cifs/readdir.c | 11 ++++-- fs/cifs/smb2misc.c | 7 ++++ fs/cifs/smb2pdu.c | 27 +++++++++------ fs/f2fs/super.c | 21 ++++++++++-- fs/fat/cache.c | 19 +++++++---- fs/fat/fat.h | 5 +++ fs/fat/fatent.c | 6 ++-- fs/gfs2/bmap.c | 2 +- fs/hfs/brec.c | 7 ++-- fs/hfsplus/super.c | 4 ++- fs/pstore/ram_core.c | 17 ++++++++-- fs/reiserfs/reiserfs.h | 2 +- include/linux/mm_types.h | 2 +- include/linux/sched.h | 2 +- include/linux/vmacache.h | 5 --- kernel/audit_watch.c | 12 ++++++- kernel/fork.c | 19 ++++++++--- lib/debugobjects.c | 7 ++-- mm/debug.c | 4 +-- mm/fadvise.c | 8 +++-- mm/huge_memory.c | 2 +- mm/vmacache.c | 36 -------------------- net/9p/trans_virtio.c | 3 +- net/bluetooth/hidp/core.c | 2 +- net/dcb/dcbnl.c | 11 +++--- net/irda/af_irda.c | 13 ++++++- net/mac80211/cfg.c | 2 +- net/mac80211/key.c | 24 ++++++++----- net/netfilter/ipvs/ip_vs_core.c | 15 ++++++--- net/netfilter/x_tables.c | 4 +-- net/xfrm/xfrm_policy.c | 5 ++- scripts/depmod.sh | 4 +-- scripts/mod/modpost.c | 8 ++--- sound/core/pcm_lib.c | 14 +++++--- sound/isa/msnd/msnd_pinnacle.c | 4 +-- sound/soc/codecs/wm8994.c | 1 + sound/usb/quirks-table.h | 3 +- tools/hv/hv_kvp_daemon.c | 2 +- tools/perf/arch/powerpc/util/skip-callchain-idx.c | 10 ++++-- tools/testing/selftests/powerpc/harness.c | 18 ++++++---- 113 files changed, 491 insertions(+), 259 deletions(-)
