This is the start of the stable review cycle for the 4.4.167 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Dec 13 15:15:44 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.167-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.167-rc1 Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> mac80211: ignore NullFunc frames in the duplicate detection Felix Fietkau <nbd@xxxxxxxx> mac80211: fix reordering of buffered broadcast packets Felix Fietkau <nbd@xxxxxxxx> mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext Ben Greear <greearb@xxxxxxxxxxxxxxx> mac80211: Clear beacon_int in ieee80211_do_stop Vasyl Vavrychuk <vasyl.vavrychuk@xxxxxxxxxxxxxxx> mac80211_hwsim: Timer should be initialized before device registered Macpaul Lin <macpaul@xxxxxxxxx> kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() Peter Shih <pihsun@xxxxxxxxxxxx> tty: serial: 8250_mtk: always resume the device in probe. Paulo Alcantara <palcantara@xxxxxxxx> cifs: Fix separator when building path from dentry Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Staging: lustre: remove two build warnings Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: Prevent U1/U2 link pm states if exit latency is too long Bin Liu <b-liu@xxxxxx> dmaengine: cppi41: delete channel from pending list when stop channel Chuck Lever <chuck.lever@xxxxxxxxxx> SUNRPC: Fix leak of krb5p encode pages Halil Pasic <pasic@xxxxxxxxxxxxx> virtio/s390: fix race in ccw_io_helper() Halil Pasic <pasic@xxxxxxxxxxxxx> virtio/s390: avoid race on vcdev->config Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Fix interval evaluation with openmin/max Takashi Iwai <tiwai@xxxxxxx> ALSA: pcm: Call snd_pcm_unlink() conditionally at closing Chanho Min <chanho.min@xxxxxxx> ALSA: pcm: Fix starvation on down_write_nonblock() Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> ALSA: hda: Add support for AMD Stoney Ridge Hui Peng <benquike@xxxxxxxxx> ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c Mathias Payer <mathias.payer@xxxxxxxxxxxxx> USB: check usb_get_extra_descriptor for proper size Alexander Theissen <alex.theissen@xxxxxx> usb: appledisplay: Add 27" Apple Cinema Display Harry Pan <harry.pan@xxxxxxxxx> usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device Yangtao Li <tiny.windzz@xxxxxxxxx> net: amd: add missing of_node_put() Pan Bian <bianpan2016@xxxxxxx> iommu/vt-d: Use memunmap to free memremap Vincent Chen <vincentc@xxxxxxxxxxxxx> net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts Aya Levin <ayal@xxxxxxxxxxxx> net/mlx4: Fix UBSAN warning of signed integer overflow Tariq Toukan <tariqt@xxxxxxxxxxxx> net/mlx4_core: Fix uninitialized variable compilation warning Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx> net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command Denis Bolotin <denis.bolotin@xxxxxxxxxx> qed: Fix reading wrong value in loop condition Denis Bolotin <denis.bolotin@xxxxxxxxxx> qed: Fix PTT leak in qed_drain() Sudarsana Reddy Kalluru <sudarsana.kalluru@xxxxxxxxxx> bnx2x: Assign unique DMAE channel number for FW DMAE transactions. Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Expand merged fragment buffer for full packet Fabrizio Castro <fabrizio.castro@xxxxxxxxxxxxxx> can: rcar_can: Fix erroneous registration Geert Uytterhoeven <geert+renesas@xxxxxxxxx> iommu/ipmmu-vmsa: Fix crash on early domain free Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx> iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() Arnd Bergmann <arnd@xxxxxxxx> usb: gadget: dummy: fix nonsensical comparisons Simon Guo <wei.guo.simon@xxxxxxxxx> mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT) Pavel Tikhomirov <ptikhomirov@xxxxxxxxxxxxx> mm: cleancache: fix corruption on missed inode invalidation Alexey Brodkin <abrodkin@xxxxxxxxxxxx> arc: [devboards] Add support of NFSv3 ACL Kevin Hilman <khilman@xxxxxxxxxxxx> ARC: change defconfig defaults to ARCv2 Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix use-after-free when dumping free space Nikolay Borisov <nborisov@xxxxxxxx> btrfs: Always try all copies when reading extent buffers Adam Wong <adam@xxxxxxxxxxx> Input: elan_i2c - add support for ELAN0621 touchpad Noah Westervelt <nwestervelt@xxxxxxxxxxx> Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR Patrick Gaskin <patrick@xxxxxxxxxxx> Input: elan_i2c - add ELAN0620 to the ACPI table Christian Hoff <christian_hoff@xxxxxxx> Input: matrix_keypad - check for errors from of_get_named_gpio() Cameron Gutman <aicommander@xxxxxxxxx> Input: xpad - quirk all PDP Xbox One gamepads Wei Yongjun <yongjun_wei@xxxxxxxxxxxxxxxxx> leds: leds-gpio: Fix return value check in create_gpio_led() Milo Kim <milo.kim@xxxxxx> leds: turn off the LED and wait for completion on unregistering LED class device Markus Hofstaetter <markus.hofstaetter@xxxxxxxxx> leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF Laura Abbott <labbott@xxxxxxxxxx> kgdboc: Fix warning with module build Laura Abbott <labbott@xxxxxxxxxx> kgdboc: Fix restrict error Kees Cook <keescook@xxxxxxxxxxxx> scsi: csiostor: Avoid content leaks and casts Takashi Iwai <tiwai@xxxxxxx> ALSA: trident: Suppress gcc string warning Martin Wilck <mwilck@xxxxxxxx> scsi: scsi_devinfo: cleanly zero-pad devinfo strings Sam Bobroff <sbobroff@xxxxxxxxxxxxx> drm/ast: Fix incorrect free on ioregs Dmitry V. Levin <ldv@xxxxxxxxxxxx> mips: fix mips_get_syscall_arg o32 check Mathias Kresin <dev@xxxxxxxxx> MIPS: ralink: Fix mt7620 nd_sd pinmux Andrea Parri <andrea.parri@xxxxxxxxxxxxxxxxxxxx> uprobes: Fix handle_swbp() vs. unregister() + register() race once more Sagi Grimberg <sagi@xxxxxxxxxxx> iser: set sector for ambiguous mr status errors Arnd Bergmann <arnd@xxxxxxxx> kdb: use memmove instead of overlapping memcpy Arnd Bergmann <arnd@xxxxxxxx> staging: rts5208: fix gcc-8 logic error warning Arnd Bergmann <arnd@xxxxxxxx> scsi: bfa: convert to strlcpy/strlcat Arnd Bergmann <arnd@xxxxxxxx> drm: gma500: fix logic error Sultan Alsawaf <sultanxda@xxxxxxxxx> ip_tunnel: Fix name string concatenate in __ip_tunnel_create() Guenter Roeck <linux@xxxxxxxxxxxx> kernfs: Replace strncpy with memcpy Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> unifdef: use memcpy instead of strncpy Guenter Roeck <linux@xxxxxxxxxxxx> kobject: Replace strncpy with memcpy Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx> disable stringop truncation warnings for now Arnd Bergmann <arnd@xxxxxxxx> exec: avoid gcc-8 warning for get_task_comm Xiongfeng Wang <xiongfeng.wang@xxxxxxxxxx> Kbuild: suppress packed-not-aligned warning for default setting only YueHaibing <yuehaibing@xxxxxxxxxx> misc: mic/scif: fix copy-paste error in scif_create_remote_lookup Michael Niewöhner <linux@xxxxxxxxxxxxxx> usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> USB: usb-storage: Add new IDs to ums-realtek Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: release metadata before running delayed refs Richard Genoud <richard.genoud@xxxxxxxxx> dmaengine: at_hdmac: fix module unloading Richard Genoud <richard.genoud@xxxxxxxxx> dmaengine: at_hdmac: fix memory leak in at_dma_xlate() Pan Bian <bianpan2016@xxxxxxx> ext2: fix potential use after free Takashi Iwai <tiwai@xxxxxxx> ALSA: sparc: Fix invalid snd_free_pages() at error path Takashi Iwai <tiwai@xxxxxxx> ALSA: control: Fix race between adding and removing a user element Takashi Iwai <tiwai@xxxxxxx> ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write Takashi Iwai <tiwai@xxxxxxx> ALSA: wss: Fix invalid snd_free_pages() at error path Filipe Manana <fdmanana@xxxxxxxx> Btrfs: ensure path name is null terminated at btrfs_control_ioctl Max Filippov <jcmvbkbc@xxxxxxxxx> xtensa: fix coprocessor context offset definitions Max Filippov <jcmvbkbc@xxxxxxxxx> xtensa: enable coprocessors that are being flushed Junaid Shahid <junaids@xxxxxxxxxx> kvm: mmu: Fix race in emulated page table writes Bernd Eckstein <3erndeckstein@xxxxxxxxx> usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 Julian Wiedmann <jwi@xxxxxxxxxxxxx> s390/qeth: fix length check in SNMP processing Pan Bian <bianpan2016@xxxxxxx> rapidio/rionet: do not free skb before reading its length Sasha Levin <sashal@xxxxxxxxxx> Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()" Matthias Schwarzott <zzam@xxxxxxxxxx> media: em28xx: Fix use-after-free when disconnecting ------------- Diffstat: Makefile | 7 ++- arch/arc/Kconfig | 2 +- arch/arc/Makefile | 2 +- arch/arc/configs/axs101_defconfig | 2 + arch/arc/configs/axs103_defconfig | 1 + arch/arc/configs/axs103_smp_defconfig | 1 + arch/arc/configs/nsim_700_defconfig | 1 + arch/arc/configs/nsimosci_defconfig | 2 + arch/arc/configs/nsimosci_hs_defconfig | 1 + arch/arc/configs/nsimosci_hs_smp_defconfig | 1 + arch/arc/configs/tb10x_defconfig | 1 + arch/arc/configs/vdk_hs38_defconfig | 1 + arch/arc/configs/vdk_hs38_smp_defconfig | 1 + arch/mips/include/asm/syscall.h | 2 +- arch/mips/ralink/mt7620.c | 2 +- arch/x86/kvm/mmu.c | 27 +++------ arch/xtensa/kernel/asm-offsets.c | 16 +++--- arch/xtensa/kernel/process.c | 5 +- drivers/dma/at_hdmac.c | 10 +++- drivers/dma/cppi41.c | 16 +++++- drivers/gpu/drm/ast/ast_main.c | 3 +- drivers/gpu/drm/gma500/mdfld_intel_display.c | 2 +- drivers/infiniband/ulp/iser/iser_verbs.c | 7 +-- drivers/input/joystick/xpad.c | 16 ++---- drivers/input/keyboard/matrix_keypad.c | 23 +++++--- drivers/input/mouse/elan_i2c_core.c | 3 + drivers/iommu/intel-iommu.c | 2 +- drivers/iommu/intel-svm.c | 2 +- drivers/iommu/ipmmu-vmsa.c | 3 + drivers/leds/led-class.c | 5 +- drivers/leds/leds-gpio.c | 4 +- drivers/leds/leds-pwm.c | 1 + drivers/media/usb/em28xx/em28xx-dvb.c | 3 +- drivers/misc/mic/scif/scif_rma.c | 2 +- drivers/net/can/rcar_can.c | 5 +- drivers/net/ethernet/amd/sunlance.c | 4 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 7 +++ drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 1 + drivers/net/ethernet/faraday/ftmac100.c | 7 +-- drivers/net/ethernet/mellanox/mlx4/alloc.c | 2 +- drivers/net/ethernet/mellanox/mlx4/mlx4.h | 4 +- drivers/net/ethernet/mellanox/mlx4/mr.c | 1 + drivers/net/ethernet/qlogic/qed/qed_int.c | 2 + drivers/net/ethernet/qlogic/qed/qed_main.c | 2 +- drivers/net/rionet.c | 2 +- drivers/net/usb/ipheth.c | 10 ++-- drivers/net/wireless/mac80211_hwsim.c | 8 +-- drivers/net/wireless/ti/wlcore/cmd.c | 6 -- drivers/s390/net/qeth_core_main.c | 27 ++++----- drivers/s390/virtio/virtio_ccw.c | 17 +++++- drivers/scsi/bfa/bfa_fcbuild.c | 8 +-- drivers/scsi/bfa/bfa_fcs.c | 78 ++++++++++++------------- drivers/scsi/bfa/bfa_fcs_lport.c | 62 ++++++++------------ drivers/scsi/bfa/bfa_ioc.c | 2 +- drivers/scsi/bfa/bfa_svc.c | 4 +- drivers/scsi/bfa/bfad.c | 20 +++---- drivers/scsi/bfa/bfad_attr.c | 2 +- drivers/scsi/bfa/bfad_bsg.c | 6 +- drivers/scsi/csiostor/csio_lnode.c | 43 ++++++++------ drivers/scsi/scsi_devinfo.c | 22 +++---- drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +- drivers/staging/rts5208/sd.c | 6 -- drivers/tty/serial/8250/8250_mtk.c | 16 +++--- drivers/tty/serial/kgdboc.c | 47 ++++++++------- drivers/usb/core/hub.c | 2 +- drivers/usb/core/quirks.c | 7 +++ drivers/usb/core/usb.c | 6 +- drivers/usb/gadget/udc/dummy_hcd.c | 9 ++- drivers/usb/host/hwa-hc.c | 2 +- drivers/usb/host/xhci.c | 16 ++++++ drivers/usb/misc/appledisplay.c | 1 + drivers/usb/storage/unusual_realtek.h | 10 ++++ fs/btrfs/disk-io.c | 10 +--- fs/btrfs/free-space-cache.c | 2 + fs/btrfs/super.c | 1 + fs/btrfs/transaction.c | 6 +- fs/cifs/dir.c | 2 +- fs/exec.c | 7 +-- fs/ext2/xattr.c | 2 +- fs/kernfs/symlink.c | 2 +- include/linux/sched.h | 7 ++- include/linux/usb.h | 4 +- include/sound/pcm_params.h | 4 +- kernel/debug/kdb/kdb_support.c | 4 +- kernel/events/uprobes.c | 12 +++- lib/kobject.c | 2 +- mm/mlock.c | 3 + mm/truncate.c | 8 ++- net/batman-adv/fragmentation.c | 2 +- net/ipv4/ip_tunnel.c | 4 +- net/mac80211/iface.c | 2 + net/mac80211/rx.c | 1 + net/mac80211/status.c | 2 + net/mac80211/tx.c | 4 +- net/sunrpc/auth_gss/auth_gss.c | 4 ++ scripts/Makefile.extrawarn | 3 + scripts/unifdef.c | 4 +- sound/core/control.c | 80 +++++++++++++++----------- sound/core/pcm_native.c | 14 +++-- sound/isa/wss/wss_lib.c | 2 - sound/pci/ac97/ac97_codec.c | 2 +- sound/pci/hda/hda_intel.c | 4 ++ sound/pci/trident/trident.c | 2 +- sound/sparc/cs4231.c | 8 +-- sound/usb/card.c | 5 +- 105 files changed, 490 insertions(+), 382 deletions(-)
