This is the start of the stable review cycle for the 4.19.6 release. There are 110 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Dec 1 13:58:54 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.6-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.6-rc1 Hugues Fruchet <hugues.fruchet@xxxxxx> media: ov5640: fix auto controls values when switching to manual mode Hugues Fruchet <hugues.fruchet@xxxxxx> media: ov5640: fix wrong binning value in exposure calculation Hugues Fruchet <hugues.fruchet@xxxxxx> media: ov5640: fix auto gain & exposure when changing mode Hugues Fruchet <hugues.fruchet@xxxxxx> media: ov5640: fix exposure regression Jacopo Mondi <jacopo@xxxxxxxxxx> media: ov5640: Fix timings setup code Jacopo Mondi <jacopo@xxxxxxxxxx> media: ov5640: Re-work MIPI startup sequence Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx> rcu: Make need_resched() respond to urgent RCU-QS needs Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: Fix iomap buffer head reference counting bug Greg Kroah-Hartman <greg@xxxxxxxxx> tty: wipe buffer if not echoing data Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> tty: wipe buffer. Sebastien Boisvert <sebhtml@xxxxxxxxxxxxxxx> include/linux/pfn_t.h: force '~' to be parsed as an unary operator Matthew Wilcox <willy@xxxxxxxxxxxxx> dax: Avoid losing wakeup in dax_lock_mapping_entry Michal Hocko <mhocko@xxxxxxxx> mm, page_alloc: check for max order in hot path Yufen Yu <yuyufen@xxxxxxxxxx> tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset Michal Hocko <mhocko@xxxxxxxx> mm, memory_hotplug: check zone_movable in has_unmovable_pages Vitaly Wool <vitalywool@xxxxxxxxx> z3fold: fix possible reclaim races Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> efi/arm: Revert deferred unmap of early memmap mapping Satheesh Rajendran <sathnaga@xxxxxxxxxxxxxxxxxx> powerpc/numa: Suppress "VPHN is not supported" messages Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4: Fix an Oops during delegation callbacks Prarit Bhargava <prarit@xxxxxxxxxx> kdb: Use strscpy with destination buffer size Philip Yang <Philip.Yang@xxxxxxx> drm/amdgpu: fix bug with IH ring setup Olof Johansson <olof@xxxxxxxxx> RISC-V: Silence some module warnings on 32-bit David Abdurachmanov <david.abdurachmanov@xxxxxxxxx> riscv: add missing vdso_install target Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> SUNRPC: Fix a bogus get/put in generic_key_to_expire() Hannes Reinecke <hare@xxxxxxxx> block: copy ioprio in __bio_clone_fast() and bounce Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: spectre-v2: per-CPU vtables to work around big.Little systems Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: add PROC_VTABLE and PROC_TABLE macros Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: clean up per-processor check_bugs method call Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: make lookup_processor_type() non-__init Kan Liang <kan.liang@xxxxxxxxxxxxxxx> perf/x86/intel/uncore: Add more IMC PCI IDs for KabyLake and CoffeeLake CPUs Patrick Bellasi <patrick.bellasi@xxxxxxx> sched/fair: Fix cpu_util_wake() for 'execl' type workloads Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/io: Fix the IO workarounds code to work with Radix Jens Axboe <axboe@xxxxxxxxx> floppy: fix race condition in __floppy_read_block_0() Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> crypto: simd - correctly take reqsize of wrapped skcipher into account Xulin Sun <xulin.sun@xxxxxxxxxxxxx> rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write Hans de Goede <hdegoede@xxxxxxxxxx> rtc: cmos: Do not export alarm rtc_ops when we do not support alarms Anson Huang <anson.huang@xxxxxxx> cpufreq: imx6q: add return value check for voltage scale Scott Wood <oss@xxxxxxxxxxxx> KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE YueHaibing <yuehaibing@xxxxxxxxxx> scsi: hisi_sas: Remove set but not used variable 'dq_list' Arnd Bergmann <arnd@xxxxxxxx> scsi: lpfc: fix remoteport access Masayoshi Mizuma <m.mizuma@xxxxxxxxxxxxxx> tools/testing/nvdimm: Fix the array size for dimm devices. Jerome Brunet <jbrunet@xxxxxxxxxxxx> pinctrl: meson: fix meson8b ao pull register bits Jerome Brunet <jbrunet@xxxxxxxxxxxx> pinctrl: meson: fix meson8 ao pull register bits Jerome Brunet <jbrunet@xxxxxxxxxxxx> pinctrl: meson: fix gxl ao pull register bits Jerome Brunet <jbrunet@xxxxxxxxxxxx> pinctrl: meson: fix gxbb ao pull register bits Jerome Brunet <jbrunet@xxxxxxxxxxxx> pinctrl: meson: fix pinconf bias disable Amir Goldstein <amir73il@xxxxxxxxx> fanotify: fix handling of events on child sub-directory Amir Goldstein <amir73il@xxxxxxxxx> fsnotify: generalize handling of extra event flags Michael J. Ruhl <michael.j.ruhl@xxxxxxxxx> IB/hfi1: Eliminate races in the SDMA send error path Erik Schmauss <erik.schmauss@xxxxxxxxx> ACPICA: AML interpreter: add region addresses in global list during initialization Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: flexcan: remove not needed struct flexcan_priv::tx_mb and struct flexcan_priv::tx_mb_idx Alexander Stein <alexander.stein@xxxxxxxxxxxxxxxxxxxxx> can: flexcan: Always use last mailbox for TX Lukas Wunner <lukas@xxxxxxxxx> can: hi311x: Use level-triggered interrupt Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: raw: check for CAN FD capable netdev in raw_sendmsg() Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx> can: flexcan: handle tx-complete CAN frames via rx-offload infrastructure Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx> can: flexcan: use can_rx_offload_queue_sorted() for flexcan_irq_bus_*() Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx> can: rx-offload: rename can_rx_offload_irq_queue_err_skb() to can_rx_offload_queue_tail() Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx> can: rx-offload: introduce can_rx_offload_get_echo_skb() and can_rx_offload_queue_sorted() functions Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: dev: __can_get_echo_skb(): print error message, if trying to echo non existing skb Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb is accessed out of bounds Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to access frame length Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: dev: can_get_echo_skb(): factor out non sending code to __can_get_echo_skb() Pankaj Bansal <pankaj.bansal@xxxxxxx> can: flexcan: Unlock the MB unconditionally Thomas Zimmermann <tzimmermann@xxxxxxx> drm/ast: Remove existing framebuffers before loading driver Y.C. Chen <yc_chen@xxxxxxxxxxxxxx> drm/ast: fixed cursor may disappear sometimes Y.C. Chen <yc_chen@xxxxxxxxxxxxxx> drm/ast: change resolution may cause screen blurred Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915: Disable LP3 watermarks on all SNB machines Felix Kuehling <Felix.Kuehling@xxxxxxx> drm/amdgpu: Fix oops when pp_funcs->switch_power_profile is unset Boris Brezillon <boris.brezillon@xxxxxxxxxxx> drm/vc4: Set ->legacy_cursor_update to false when doing non-async updates Takashi Iwai <tiwai@xxxxxxx> drm/amdgpu: Add missing firmware entry for HAINAN Paul Kocialkowski <paul.kocialkowski@xxxxxxxxxxx> drm/fb-helper: Blacklist writeback when adding connectors to fbdev Eric Dumazet <edumazet@xxxxxxxxxx> tcp: do not release socket ownership in tcp_close() Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxx> mm/memory.c: recheck page table entry with page table lock held Dmitry Vyukov <dvyukov@xxxxxxxxxx> mm: don't warn about large allocations for slab Eric Dumazet <edumazet@xxxxxxxxxx> llc: do not use sk_eat_skb() Andrew Price <anprice@xxxxxxxxxx> gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd Xin Long <lucien.xin@xxxxxxxxx> sctp: clear the transport of some out_chunk_list chunks in sctp_assoc_rm_peer Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> bfs: add sanity check at bfs_fill_super() Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: synaptics - avoid using uninitialized variable when probing Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> selinux: Add __GFP_NOWARN to allocation at str_read() Dominique Martinet <dominique.martinet@xxxxxx> v9fs_dir_readdir: fix double-free on p9stat_read error Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> tools/power/cpupower: fix compilation with STATIC=true Keerthy <j-keerthy@xxxxxx> opp: ti-opp-supply: Correct the supply in _get_optimal_vdd_voltage call Keerthy <j-keerthy@xxxxxx> opp: ti-opp-supply: Dynamically update u_volt_min Rafał Miłecki <rafal@xxxxxxxxxx> brcmfmac: fix reporting support for 160 MHz channels Luca Coelho <luciano.coelho@xxxxxxxxx> iwlwifi: mvm: don't use SAR Geo if basic SAR is not used Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> iwlwifi: mvm: fix regulatory domain update when the firmware starts Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> iwlwifi: mvm: support sta_statistics() even on older firmware Matt Chen <matt.chen@xxxxxxxxx> iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE Vladimir Zapolskiy <vz@xxxxxxxxx> gpio: don't free unallocated ida on gpiochip_add_data_with_key() error path Adrian Hunter <adrian.hunter@xxxxxxxxx> mmc: sdhci-pci: Workaround GLK firmware failing to restore the tuning value Rajat Jain <rajatja@xxxxxxxxxx> mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL Will Deacon <will.deacon@xxxxxxx> Documentation/security-bugs: Postpone fix publication in exceptional cases Will Deacon <will.deacon@xxxxxxx> Documentation/security-bugs: Clarify treatment of embargoed information Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> MAINTAINERS: Add Sasha as a stable branch maintainer Takashi Iwai <tiwai@xxxxxxx> ALSA: oss: Use kvzalloc() for local buffer allocations Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> usb: xhci: Prevent bus suspend if a port connect change or polling state is detected Cherian, George <George.Cherian@xxxxxxxxxx> xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc Aaron Ma <aaron.ma@xxxxxxxxxxxxx> usb: xhci: fix timeout for transition from RExit to U0 Aaron Ma <aaron.ma@xxxxxxxxxxxxx> usb: xhci: fix uninitialized completion when USB3 port got wrong status Sandeep Singh <sandeep.singh@xxxxxxx> xhci: Add check for invalid byte size error when UAS devices are connected. Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: handle port status events for removed USB3 hcd Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: Fix leaking USB3 shared_hcd at xhci removal Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@xxxxxxxxxxxxxxx> usb: dwc3: Fix NULL pointer exception in dwc3_pci_remove() Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> usb: dwc3: core: Clean up ULPI device Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: gadget: Properly check last unaligned/zero chain TRB Felipe Balbi <felipe.balbi@xxxxxxxxxxxxxxx> usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers Dennis Wassenberg <dennis.wassenberg@xxxxxxxxxxx> usb: core: Fix hub port connection events lost Alistair Strachan <astrachan@xxxxxxxxxx> efi/libstub: arm: support building with clang Rodrigo Rivas Costa <rodrigorivascosta@xxxxxxxxx> HID: steam: remove input device when a hid client is running. ------------- Diffstat: Documentation/admin-guide/security-bugs.rst | 48 ++-- .../devicetree/bindings/net/can/holt_hi311x.txt | 2 +- MAINTAINERS | 1 + Makefile | 4 +- arch/arm/include/asm/proc-fns.h | 61 ++++- arch/arm/kernel/bugs.c | 4 +- arch/arm/kernel/head-common.S | 6 +- arch/arm/kernel/setup.c | 9 +- arch/arm/kernel/smp.c | 31 +++ arch/arm/mm/proc-v7-bugs.c | 17 +- arch/powerpc/include/asm/io.h | 20 +- arch/powerpc/kvm/trace.h | 8 +- arch/powerpc/kvm/trace_booke.h | 9 +- arch/powerpc/kvm/trace_hv.h | 9 +- arch/powerpc/kvm/trace_pr.h | 9 +- arch/powerpc/mm/numa.c | 2 +- arch/riscv/Makefile | 4 + arch/riscv/kernel/module.c | 12 +- arch/x86/events/intel/uncore_snb.c | 115 ++++++++- block/bio.c | 1 + block/bounce.c | 1 + crypto/simd.c | 5 +- drivers/acpi/acpica/dsopcode.c | 4 + drivers/block/floppy.c | 3 +- drivers/cpufreq/imx6q-cpufreq.c | 7 +- drivers/firmware/efi/arm-init.c | 4 + drivers/firmware/efi/arm-runtime.c | 2 +- drivers/firmware/efi/libstub/Makefile | 3 +- drivers/firmware/efi/memmap.c | 3 + drivers/gpio/gpiolib.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 7 +- drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 1 + drivers/gpu/drm/amd/amdgpu/vega10_ih.c | 2 +- drivers/gpu/drm/ast/ast_drv.c | 21 ++ drivers/gpu/drm/ast/ast_mode.c | 3 +- drivers/gpu/drm/drm_fb_helper.c | 3 + drivers/gpu/drm/i915/intel_pm.c | 41 +++- drivers/gpu/drm/vc4/vc4_kms.c | 6 + drivers/hid/hid-steam.c | 154 +++++++----- drivers/infiniband/hw/hfi1/user_sdma.c | 87 +++---- drivers/infiniband/hw/hfi1/user_sdma.h | 3 - drivers/input/mouse/synaptics.c | 4 +- drivers/media/i2c/ov5640.c | 263 +++++++++++++-------- drivers/mmc/host/sdhci-pci-core.c | 86 ++++++- drivers/net/can/dev.c | 48 +++- drivers/net/can/flexcan.c | 108 +++++---- drivers/net/can/rx-offload.c | 51 +++- drivers/net/can/spi/hi311x.c | 2 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 3 +- drivers/net/wireless/intel/iwlwifi/fw/acpi.h | 4 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 38 ++- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 12 +- drivers/net/wireless/intel/iwlwifi/mvm/nvm.c | 5 +- drivers/opp/ti-opp-supply.c | 5 +- drivers/pinctrl/meson/pinctrl-meson-gxbb.c | 2 +- drivers/pinctrl/meson/pinctrl-meson-gxl.c | 2 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/meson/pinctrl-meson8.c | 2 +- drivers/pinctrl/meson/pinctrl-meson8b.c | 2 +- drivers/rtc/rtc-cmos.c | 16 +- drivers/rtc/rtc-pcf2127.c | 3 + drivers/scsi/hisi_sas/hisi_sas_v1_hw.c | 2 - drivers/scsi/hisi_sas/hisi_sas_v2_hw.c | 2 - drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 2 - drivers/scsi/lpfc/lpfc_debugfs.c | 2 + drivers/tty/n_tty.c | 20 +- drivers/tty/tty_buffer.c | 6 +- drivers/usb/core/hub.c | 4 +- drivers/usb/dwc3/core.c | 1 + drivers/usb/dwc3/dwc3-pci.c | 4 +- drivers/usb/dwc3/gadget.c | 8 +- drivers/usb/host/xhci-histb.c | 6 +- drivers/usb/host/xhci-hub.c | 66 ++++-- drivers/usb/host/xhci-mtk.c | 6 +- drivers/usb/host/xhci-pci.c | 6 + drivers/usb/host/xhci-plat.c | 6 +- drivers/usb/host/xhci-ring.c | 45 +++- drivers/usb/host/xhci-tegra.c | 1 + drivers/usb/host/xhci.c | 2 - drivers/usb/host/xhci.h | 3 +- fs/9p/vfs_dir.c | 11 - fs/bfs/inode.c | 9 +- fs/dax.c | 7 +- fs/gfs2/bmap.c | 40 ++-- fs/gfs2/ops_fstype.c | 2 +- fs/nfs/callback_proc.c | 4 +- fs/nfs/delegation.c | 11 +- fs/notify/fanotify/fanotify.c | 10 +- fs/notify/fsnotify.c | 15 +- include/linux/can/dev.h | 1 + include/linux/can/rx-offload.h | 7 +- include/linux/fsnotify_backend.h | 9 +- include/linux/pfn_t.h | 2 +- include/net/sock.h | 1 + kernel/debug/kdb/kdb_io.c | 15 +- kernel/debug/kdb/kdb_private.h | 2 +- kernel/debug/kdb/kdb_support.c | 10 +- kernel/rcu/tree.c | 9 + kernel/sched/fair.c | 62 +++-- mm/memory.c | 34 ++- mm/page_alloc.c | 28 ++- mm/shmem.c | 4 +- mm/slab.c | 4 + mm/slab_common.c | 12 +- mm/z3fold.c | 101 +++++--- net/can/raw.c | 15 +- net/core/sock.c | 2 +- net/ipv4/tcp.c | 11 +- net/llc/af_llc.c | 11 +- net/sctp/associola.c | 10 +- net/sunrpc/auth_generic.c | 8 +- security/selinux/ss/policydb.c | 2 +- sound/core/oss/pcm_oss.c | 6 +- sound/core/oss/pcm_plugin.c | 6 +- tools/power/cpupower/bench/Makefile | 2 +- tools/power/cpupower/lib/cpufreq.c | 2 +- tools/power/cpupower/lib/cpuidle.c | 2 +- tools/power/cpupower/lib/cpupower.c | 4 +- tools/power/cpupower/lib/cpupower_intern.h | 2 +- tools/testing/nvdimm/test/nfit.c | 8 +- 120 files changed, 1435 insertions(+), 653 deletions(-)
