This is the start of the stable review cycle for the 4.18.11 release. There are 88 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Sep 29 09:02:26 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.18.11-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.18.11-rc1 Steve Wise <swise@xxxxxxxxxxxxxxxxxxxxx> iw_cxgb4: only allow 1 flush on user qps Nadav Amit <namit@xxxxxxxxxx> vmw_balloon: include asm/io.h Steve Muckle <smuckle@xxxxxxxxxx> sched/fair: Fix vruntime_normalized() for remote non-migration wakeup Toshi Kani <toshi.kani@xxxxxxx> ext4, dax: set ext4_dax_aops for dax files Toshi Kani <toshi.kani@xxxxxxx> ext4, dax: add ext4_bmap to ext4_dax_aops Eric Biggers <ebiggers@xxxxxxxxxx> ext4: show test_dummy_encryption mount option in /proc/mounts Li Dongyang <dongyangli@xxxxxxx> ext4: don't mark mmp buffer head dirty Theodore Ts'o <tytso@xxxxxxx> ext4: fix online resizing for bigalloc file systems with a 1k block size Theodore Ts'o <tytso@xxxxxxx> ext4: fix online resize's handling of a too-small final block group Theodore Ts'o <tytso@xxxxxxx> ext4: recalucate superblock checksum after updating free blocks/inodes Theodore Ts'o <tytso@xxxxxxx> ext4: avoid arithemetic overflow that can trigger a BUG Theodore Ts'o <tytso@xxxxxxx> ext4: avoid divide by zero fault when deleting corrupted inline directories Theodore Ts'o <tytso@xxxxxxx> ext4: check to make sure the rename(2)'s destination is not freed Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> tty: vt_ioctl: fix potential Spectre v1 Lyude Paul <lyude@xxxxxxxxxx> drm/atomic: Use drm_drv_uses_atomic_modeset() for debugfs creation Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: add new polaris pci id Emil Lundmark <lndmrk@xxxxxxxxxxxx> drm: udl: Destroy framebuffer only if it was initialized Boris Brezillon <boris.brezillon@xxxxxxxxxxx> drm/vc4: Fix the "no scaling" case on multi-planar YUV formats Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM requests Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau: Fix deadlocks in nouveau_connector_detect() Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend() Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau: Only write DP_MSTM_CTRL when needed Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau: Reset MST branching unit before enabling Imre Deak <imre.deak@xxxxxxxxx> drm/i915/bdw: Increase IPS disable timeout to 100ms Junxiao Bi <junxiao.bi@xxxxxxxxxx> ocfs2: fix ocfs2 read block panic Jens Axboe <axboe@xxxxxxxxx> libata: mask swap internal and hardware tag Richard Weinberger <richard@xxxxxx> Revert "ubifs: xattr: Don't operate on deleted inodes" Vincent Pelletier <plr.vincent@xxxxxxxxx> scsi: target: iscsi: Use bin2hex instead of a re-implementation Vincent Pelletier <plr.vincent@xxxxxxxxx> scsi: target: iscsi: Use hex2bin instead of a re-implementation Lubomir Rintel <lkundrak@xxxxx> Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name" Alexei Starovoitov <ast@xxxxxxxxxx> bpf/verifier: disallow pointer subtraction Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "rpmsg: core: add support to power domains for devices" Joel Fernandes (Google) <joel@xxxxxxxxxxxxxxxxx> mm: shmem.c: Correctly annotate new inodes for lockdep Pasha Tatashin <Pavel.Tatashin@xxxxxxxxxxxxx> mm: disable deferred struct page for 32-bit arches KJ Tsanaktsidis <ktsanaktsidis@xxxxxxxxxxx> fork: report pid exhaustion correctly Ondrej Mosnacek <omosnace@xxxxxxxxxx> crypto: x86/aegis,morus - Do not require OSXSAVE for SSE2 Vaibhav Nagarnaik <vnagarnaik@xxxxxxxxxx> ring-buffer: Allow for rescheduling when removing pages Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> Revert "PCI: Add ACS quirk for Intel 300 series" Kirill Kapranov <kirill.kapranov@xxxxxxxxxxxxxx> spi: fix IDR collision on systems with both fixed and dynamic SPI bus numbers Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx> xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code Juergen Gross <jgross@xxxxxxxx> xen/netfront: don't bug in case of too many frags Mario Limonciello <mario.limonciello@xxxxxxxx> platform/x86: alienware-wmi: Correct a memory leak Mario Limonciello <mario.limonciello@xxxxxxxx> platform/x86: dell-smbios-wmi: Correct a memory leak Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> mtd: rawnand: denali: fix a race condition when DMA is kicked Boris Brezillon <boris.brezillon@xxxxxxxxxxx> mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: oxfw: fix memory leak of private data Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: oxfw: fix memory leak of discovered stream formats at error path Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: oxfw: fix memory leak for model-dependent data at error path Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: fireworks: fix memory leak of response buffer at error path Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: firewire-tascam: fix memory leak of private data Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: firewire-digi00x: fix memory leak of private data Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: fireface: fix memory leak in ff400_switch_fetching_mode() Willy Tarreau <w@xxxxxx> ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path Dmitry V. Levin <ldv@xxxxxxxxxxxx> ASoC: uapi: fix sound/skl-tplg-interface.h userspace compilation errors Jiada Wang <jiada_wang@xxxxxxxxxx> ASoC: rsnd: fixup not to call clk_get/set under non-atomic Andrew F. Davis <afd@xxxxxx> ASoC: tas6424: Save last fault register even when clear Sébastien Szymanski <sebastien.szymanski@xxxxxxxxxxxx> ASoC: cs4265: fix MMTLR Data switch control Marcel Ziswiler <marcel.ziswiler@xxxxxxxxxxx> ASoC: wm9712: fix replace codec to component Suren Baghdasaryan <surenb@xxxxxxxxxx> NFC: Fix the number of pipes Suren Baghdasaryan <surenb@xxxxxxxxxx> NFC: Fix possible memory corruption when handling SHDLC I-Frame commands Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx> net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags Antoine Tenart <antoine.tenart@xxxxxxxxxxx> net: mvpp2: let phylink manage the carrier state Peter Oskolkov <posk@xxxxxxxxxx> net/ipv6: do not copy dst flags on rt init Xin Long <lucien.xin@xxxxxxxxx> ipv6: use rt6_info members when dst is set in rt6_fill_node Michael Chan <michael.chan@xxxxxxxxxxxx> bnxt_en: Fix VF mac address regression. Daniel Borkmann <daniel@xxxxxxxxxxxxx> tls: fix currently broken MSG_PEEK behavior Johannes Berg <johannes.berg@xxxxxxxxx> socket: fix struct ifreq size in compat ioctl Andrew Lunn <andrew@xxxxxxx> net: dsa: mv88e6xxx: Fix ATU Miss Violation Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx> hv_netvsc: fix schedule in RCU context Davide Caratti <dcaratti@xxxxxxxxxx> net/sched: act_sample: fix NULL dereference in the data path Paolo Abeni <pabeni@xxxxxxxxxx> udp6: add missing checks on edumux packet processing Vasily Khoruzhick <vasilykh@xxxxxxxxxx> neighbour: confirm neigh entries when ARP packet is received Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> tls: clear key material from kernel memory when do_tls_setsockopt_conf fails Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> tls: zero the crypto information from tls_context before freeing Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> tls: don't copy the key out of tls12_crypto_info_aes_gcm_128 Paolo Abeni <pabeni@xxxxxxxxxx> udp4: fix IP_CMSG_CHECKSUM for connected sockets Bjørn Mork <bjorn@xxxxxxx> qmi_wwan: set DTR for modems in forced USB2 mode Guillaume Nault <g.nault@xxxxxxxxxxxx> pppoe: fix reception of frames with no mac header Colin Ian King <colin.king@xxxxxxxxxxxxx> net: hp100: fix always-true check for link up state Willy Tarreau <w@xxxxxx> net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fix possible use-after-free in ip6_xmit() Toke Høiland-Jørgensen <toke@xxxxxxx> gso_segment: Reset skb->mac_len after modifying network header ------------- Diffstat: Makefile | 4 +- arch/x86/crypto/aegis128-aesni-glue.c | 1 - arch/x86/crypto/aegis128l-aesni-glue.c | 1 - arch/x86/crypto/aegis256-aesni-glue.c | 1 - arch/x86/crypto/morus1280-sse2-glue.c | 1 - arch/x86/crypto/morus640-sse2-glue.c | 1 - arch/x86/xen/pmu.c | 2 +- drivers/ata/libata-core.c | 14 +++- drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 14 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 1 + drivers/gpu/drm/drm_atomic.c | 2 +- drivers/gpu/drm/drm_debugfs.c | 2 +- drivers/gpu/drm/i915/intel_display.c | 8 +- drivers/gpu/drm/nouveau/dispnv50/disp.c | 67 +++++++++++---- drivers/gpu/drm/nouveau/nouveau_connector.c | 42 ++++++++-- drivers/gpu/drm/nouveau/nouveau_display.c | 44 +++++++--- drivers/gpu/drm/nouveau/nouveau_display.h | 2 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 3 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 57 +++++++++++++ drivers/gpu/drm/nouveau/nouveau_fbcon.h | 5 ++ drivers/gpu/drm/udl/udl_fb.c | 8 +- drivers/gpu/drm/vc4/vc4_plane.c | 25 +++--- drivers/infiniband/hw/cxgb4/qp.c | 6 ++ drivers/misc/vmw_balloon.c | 1 + drivers/mtd/devices/m25p80.c | 26 +++++- drivers/mtd/nand/raw/denali.c | 6 ++ drivers/net/appletalk/ipddp.c | 8 +- drivers/net/dsa/mv88e6xxx/global1.h | 2 +- drivers/net/dsa/mv88e6xxx/global1_atu.c | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 9 +- drivers/net/ethernet/broadcom/bnxt/bnxt_sriov.c | 9 +- drivers/net/ethernet/broadcom/bnxt/bnxt_sriov.h | 2 +- drivers/net/ethernet/hp/hp100.c | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 21 ++--- drivers/net/hyperv/netvsc_drv.c | 9 +- drivers/net/ppp/pppoe.c | 3 + drivers/net/usb/qmi_wwan.c | 14 ++-- drivers/net/xen-netfront.c | 8 +- drivers/pci/quirks.c | 6 -- drivers/platform/x86/alienware-wmi.c | 1 + drivers/platform/x86/dell-smbios-wmi.c | 1 + drivers/rpmsg/rpmsg_core.c | 7 -- drivers/spi/spi.c | 9 ++ drivers/target/iscsi/iscsi_target_auth.c | 45 ++++------ drivers/tty/vt/vt_ioctl.c | 4 + fs/ext4/dir.c | 20 ++--- fs/ext4/ext4.h | 3 + fs/ext4/inline.c | 4 +- fs/ext4/inode.c | 11 ++- fs/ext4/mmp.c | 1 - fs/ext4/namei.c | 6 ++ fs/ext4/resize.c | 23 ++++- fs/ext4/super.c | 4 + fs/ocfs2/buffer_head_io.c | 1 + fs/ubifs/xattr.c | 24 ------ include/net/nfc/hci.h | 2 +- include/net/tls.h | 19 ++--- include/uapi/linux/keyctl.h | 2 +- include/uapi/sound/skl-tplg-interface.h | 106 ++++++++++++------------ kernel/bpf/verifier.c | 2 +- kernel/pid.c | 2 +- kernel/sched/fair.c | 3 +- kernel/trace/ring_buffer.c | 2 + mm/Kconfig | 1 + mm/shmem.c | 2 + net/core/neighbour.c | 13 +-- net/core/rtnetlink.c | 2 +- net/ipv4/af_inet.c | 1 + net/ipv4/udp.c | 49 ++++++----- net/ipv6/ip6_offload.c | 1 + net/ipv6/ip6_output.c | 6 +- net/ipv6/route.c | 44 ++++++---- net/ipv6/udp.c | 65 ++++++++------- net/nfc/hci/core.c | 10 +++ net/sched/act_sample.c | 2 +- net/socket.c | 22 +++-- net/tls/tls_device.c | 4 +- net/tls/tls_device_fallback.c | 2 +- net/tls/tls_main.c | 22 +++-- net/tls/tls_sw.c | 21 +++-- security/keys/dh.c | 2 +- sound/firewire/bebob/bebob.c | 2 + sound/firewire/bebob/bebob_maudio.c | 28 +++---- sound/firewire/digi00x/digi00x.c | 1 + sound/firewire/fireface/ff-protocol-ff400.c | 9 +- sound/firewire/fireworks/fireworks.c | 2 + sound/firewire/oxfw/oxfw.c | 10 +++ sound/firewire/tascam/tascam.c | 1 + sound/pci/emu10k1/emufx.c | 2 +- sound/soc/codecs/cs4265.c | 4 +- sound/soc/codecs/tas6424.c | 12 ++- sound/soc/codecs/wm9712.c | 2 +- sound/soc/sh/rcar/core.c | 11 +++ sound/soc/sh/rcar/rsnd.h | 7 ++ sound/soc/sh/rcar/ssi.c | 16 ++-- 95 files changed, 714 insertions(+), 403 deletions(-)
