This is the start of the stable review cycle for the 3.18.126 release. There are 90 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Nov 21 16:25:28 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.126-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.126-rc1 Mike Kravetz <mike.kravetz@xxxxxxxxxx> hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! Guenter Roeck <linux@xxxxxxxxxxxx> configfs: replace strncpy with memcpy Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: fix leaked notify reply Frank Sorenson <sorenson@xxxxxxxxxx> sunrpc: correct the computation for page_ptr when truncating Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mount: Prevent MNT_DETACH from disconnecting locked mounts Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mount: Retest MNT_LOCKED in do_umount Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: fix buffer leak in __ext4_read_dirblock() on error path Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: fix buffer leak in ext4_xattr_move_to_block() on error path Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: release bs.bh before re-using in ext4_xattr_block_find() Theodore Ts'o <tytso@xxxxxxx> ext4: fix possible leak of sbi->s_group_desc_leak in error path Theodore Ts'o <tytso@xxxxxxx> ext4: avoid possible double brelse() in add_new_gdb() on error path Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: avoid buffer leak in ext4_orphan_add() after prior errors Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: fix possible inode leak in the retry loop of ext4_resize_fs() Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: avoid potential extra brelse in setup_new_flex_group_blocks() Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: add missing brelse() add_new_gdb_meta_bg()'s error path Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path Vasily Averin <vvs@xxxxxxxxxxxxx> ext4: add missing brelse() update_backups()'s error path H. Peter Anvin (Intel) <hpa@xxxxxxxxx> arch/alpha, termios: implement BOTHER, IBSHIFT and termios2 H. Peter Anvin <hpa@xxxxxxxxx> termios, tty/tty_baudrate.c: fix buffer overrun Arnd Bergmann <arnd@xxxxxxxx> mtd: docg3: don't set conflicting BCH_CONST_PARAMS option Changwei Ge <ge.changwei@xxxxxxx> ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry Mikulas Patocka <mpatocka@xxxxxxxxxx> mach64: fix image corruption due to reading accelerator registers Mikulas Patocka <mpatocka@xxxxxxxxxx> mach64: fix display corruption on big endian machines Ilya Dryomov <idryomov@xxxxxxxxx> libceph: bump CEPH_MSG_MAX_DATA_LEN Krzysztof Kozlowski <krzk@xxxxxxxxxx> clk: s2mps11: Fix matching when built as module and DT node contains compatible Max Filippov <jcmvbkbc@xxxxxxxxx> xtensa: fix boot parameters address translation Young_X <YangX92@xxxxxxxxxxx> cdrom: fix improper type cast, which can leat to information leak. Dominique Martinet <dominique.martinet@xxxxxx> 9p: clear dangling pointers in p9stat_free Marco Felsch <m.felsch@xxxxxxxxxxxxxx> media: tvp5150: fix width alignment during set_selection() Joel Stanley <joel@xxxxxxxxx> powerpc/boot: Ensure _zimage_start is a weak symbol Dengcheng Zhu <dzhu@xxxxxxxxxxxx> MIPS: kexec: Mark CPU offline before disabling local IRQ Nicholas Mc Guire <hofrat@xxxxxxxxx> media: pci: cx23885: handle adding to list failure Tomi Valkeinen <tomi.valkeinen@xxxxxx> drm/omap: fix memory barrier bug in DMM driver Daniel Axtens <dja@xxxxxxxxxx> powerpc/nohash: fix undefined behaviour when testing page size support Miles Chen <miles.chen@xxxxxxxxxxxx> tty: check name length in tty_find_polling_driver() Corey Wright <undefined@xxxxxxxxx> dm: remove duplicate dm_get_live_table() in __dm_destroy() Nicolas Pitre <nicolas.pitre@xxxxxxxxxx> Cramfs: fix abad comparison when wrap-arounds occur Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx> media: em28xx: make v4l2-compliance happier by starting sequence on zero Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx> media: em28xx: fix input name for Terratec AV 350 Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx> media: em28xx: use a default format if TRY_FMT fails He Zhe <zhe.he@xxxxxxxxxxxxx> kgdboc: Passing ekgdboc to command line causes panic Maciej W. Rozycki <macro@xxxxxxxxxxxxxx> TC: Set DMA masks for devices Wenwen Wang <wang6495@xxxxxxx> dm ioctl: harden copy_params()'s copy_from_user() from malicious users Amir Goldstein <amir73il@xxxxxxxxx> lockd: fix access beyond unterminated strings in prints Trond Myklebust <trondmy@xxxxxxxxx> nfsd: Fix an Oops in free_session() Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: Fix the r/wsize checking He Zhe <zhe.he@xxxxxxxxxxxxx> printk: Fix panic caused by passing log_buf_len to command line Steve French <stfrench@xxxxxxxxxxxxx> smb3: on kerberos mount if server doesn't specify auth type use krb5 Steve French <stfrench@xxxxxxxxxxxxx> smb3: do not attempt cifs operation in smb3 query info error path Steve French <stfrench@xxxxxxxxxxxxx> smb3: allow stats which track session and share reconnects to be reset Andreas Kemnade <andreas@xxxxxxxxxxxx> w1: omap-hdq: fix missing bus unregister at removal Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx> iio: adc: at91: fix wrong channel number in triggered buffer mode Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx> iio: adc: at91: fix acking DRDY irq on simple conversions Arnd Bergmann <arnd@xxxxxxxx> kbuild: fix kernel/bounds.c 'W=1' warning Eric Biggers <ebiggers@xxxxxxxxxx> ima: fix showing large 'violations' or 'runtime_measurements_count' Ondrej Mosnacek <omosnace@xxxxxxxxxx> crypto: lrw - Fix out-of bounds access on counter overflow Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal/GenWQE: Fix sending of SIGKILL Lukas Czerner <lczerner@xxxxxxxxxx> ext4: initialize retries variable in ext4_da_write_inline_data_begin() Al Viro <viro@xxxxxxxxxxxxxxxxxx> gfs2_meta: ->mount() can get NULL dev_name Jan Kara <jack@xxxxxxx> jbd2: fix use after free in jbd2_log_do_checkpoint() Stefan Nuernberger <snu@xxxxxxxxxx> net/ipv4: defensive cipso option parsing Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Correct soft lockup when running mds diagnostics Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx> uio: ensure class is registered before devices Loic Poulain <loic.poulain@xxxxxxxxxx> usb: chipidea: Prevent unbalanced IRQ disable Theodore Ts'o <tytso@xxxxxxx> ext4: fix argument checking in EXT4_IOC_MOVE_EXT Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx> scsi: esp_scsi: Track residual for PIO transfers Martin Willi <martin@xxxxxxxxxxxxxx> ath10k: schedule hardware restart if WMI command times out Masami Hiramatsu <mhiramat@xxxxxxxxxx> kprobes: Return error if we fail to reuse kprobe instead of BUG_ON() Ben Hutchings <ben@xxxxxxxxxxxxxxx> x86: boot: Fix EFI stub alignment Lubomir Rintel <lkundrak@xxxxx> x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC Yu Zhao <yuzhao@xxxxxxxxxx> mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01 Prarit Bhargava <prarit@xxxxxxxxxx> cpupower: Fix coredump on VMWare Sanskriti Sharma <sansharm@xxxxxxxxxx> perf tools: Cleanup trace-event-info 'tdata' leak Sanskriti Sharma <sansharm@xxxxxxxxxx> perf tools: Free temporary 'sys' string in read_event_files() Serhey Popovych <serhe.popovych@xxxxxxxxx> tun: Consistently configure generic netdev params via rtnetlink Omar Sandoval <osandov@xxxxxx> swim: fix cleanup on setup error Omar Sandoval <osandov@xxxxxx> ataflop: fix error handling during setup Waiman Long <longman@xxxxxxxxxx> locking/lockdep: Fix debug_locks off performance problem Masami Hiramatsu <mhiramat@xxxxxxxxxx> selftests: ftrace: Add synthetic event syntax testcase Nathan Chancellor <natechancellor@xxxxxxxxx> net: qla3xxx: Remove overflowing shift statement David S. Miller <davem@xxxxxxxxxxxxx> sparc: Throttle perf events properly. David S. Miller <davem@xxxxxxxxxxxxx> sparc: Fix single-pcr perf event counter management. He Zhe <zhe.he@xxxxxxxxxxxxx> x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided Alex Stanoev <alex@xxxxxxxxxxxx> ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops Maciej S. Szmigiero <mail@xxxxxxxxxxxxxxxxxxxxx> pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges Hou Tao <houtao1@xxxxxxxxxx> jffs2: free jffs2_sb_info through jffs2_kill_sb() Tang Junhui <tang.junhui.linux@xxxxxxxxx> bcache: fix miss key refill->end in writeback ------------- Diffstat: Makefile | 4 +- arch/alpha/include/asm/termios.h | 8 ++- arch/alpha/include/uapi/asm/ioctls.h | 5 ++ arch/alpha/include/uapi/asm/termbits.h | 17 +++++ arch/mips/kernel/crash.c | 3 + arch/mips/kernel/machine_kexec.c | 3 + arch/powerpc/boot/crt0.S | 4 +- arch/powerpc/mm/tlb_nohash.c | 3 + arch/sparc/kernel/perf_event.c | 26 +++++-- arch/x86/boot/tools/build.c | 7 ++ arch/x86/kernel/check.c | 15 ++++ arch/x86/platform/olpc/olpc-xo1-rtc.c | 3 + arch/xtensa/kernel/head.S | 7 +- crypto/lrw.c | 7 +- drivers/block/ataflop.c | 25 ++++--- drivers/block/swim.c | 13 +++- drivers/cdrom/cdrom.c | 2 +- drivers/clk/clk-s2mps11.c | 30 ++++++++ drivers/gpu/drm/omapdrm/omap_dmm_tiler.c | 11 +++ drivers/iio/adc/at91_adc.c | 6 +- drivers/md/bcache/btree.c | 2 +- drivers/md/dm-ioctl.c | 18 ++--- drivers/md/dm.c | 1 - drivers/media/i2c/tvp5150.c | 14 ++-- drivers/media/pci/cx23885/altera-ci.c | 10 +++ drivers/media/usb/em28xx/em28xx-cards.c | 4 +- drivers/media/usb/em28xx/em28xx-video.c | 8 ++- drivers/misc/genwqe/card_base.h | 2 +- drivers/misc/genwqe/card_dev.c | 9 +-- drivers/mmc/host/sdhci-pci-o2micro.c | 3 + drivers/mtd/devices/Kconfig | 2 +- drivers/net/ethernet/qlogic/qla3xxx.c | 2 - drivers/net/tun.c | 2 + drivers/net/wireless/ath/ath10k/wmi.c | 6 ++ drivers/pcmcia/ricoh.h | 35 ++++++++++ drivers/pcmcia/yenta_socket.c | 3 +- drivers/scsi/esp_scsi.c | 1 + drivers/scsi/esp_scsi.h | 2 + drivers/scsi/lpfc/lpfc_sli.c | 7 ++ drivers/scsi/mac_esp.c | 2 + drivers/tc/tc.c | 8 ++- drivers/tty/serial/kgdboc.c | 5 ++ drivers/tty/tty_io.c | 2 +- drivers/tty/tty_ioctl.c | 4 +- drivers/uio/uio.c | 9 +++ drivers/usb/chipidea/otg.h | 3 +- drivers/video/fbdev/aty/mach64_accel.c | 28 ++++---- drivers/w1/masters/omap_hdq.c | 2 + fs/cifs/cifs_debug.c | 3 + fs/cifs/cifs_spnego.c | 6 +- fs/cifs/inode.c | 10 ++- fs/configfs/symlink.c | 2 +- fs/cramfs/inode.c | 3 +- fs/ext4/inline.c | 2 +- fs/ext4/move_extent.c | 8 ++- fs/ext4/namei.c | 5 +- fs/ext4/resize.c | 28 ++++---- fs/ext4/super.c | 16 ++--- fs/ext4/xattr.c | 4 ++ fs/fuse/dev.c | 4 +- fs/gfs2/ops_fstype.c | 3 + fs/jbd2/checkpoint.c | 4 +- fs/jffs2/super.c | 4 +- fs/lockd/host.c | 2 +- fs/namespace.c | 22 ++++-- fs/nfs/nfs4client.c | 16 +++-- fs/ocfs2/dir.c | 3 +- include/linux/ceph/libceph.h | 8 ++- include/linux/tc.h | 1 + kernel/bounds.c | 4 +- kernel/kprobes.c | 27 ++++++-- kernel/locking/lockdep.c | 4 +- kernel/printk/printk.c | 7 +- kernel/signal.c | 2 +- lib/debug_locks.c | 2 +- mm/hugetlb.c | 23 +++++-- net/9p/protocol.c | 5 ++ net/ipv4/cipso_ipv4.c | 11 +-- net/sunrpc/svc_xprt.c | 2 +- net/sunrpc/xdr.c | 5 +- security/integrity/ima/ima_fs.c | 6 +- sound/pci/ca0106/ca0106.h | 2 +- tools/perf/util/trace-event-info.c | 2 + tools/perf/util/trace-event-read.c | 5 +- tools/power/cpupower/utils/cpufreq-info.c | 2 + tools/power/cpupower/utils/helpers/amd.c | 5 ++ .../inter-event/trigger-synthetic-event-syntax.tc | 80 ++++++++++++++++++++++ 87 files changed, 581 insertions(+), 160 deletions(-)