This is the start of the stable review cycle for the 4.14.92 release. There are 101 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Jan 9 10:53:00 UTC 2019. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.92-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.14.92-rc1 Tomas Winkler <tomas.winkler@xxxxxxxxx> tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x Tomas Winkler <tomas.winkler@xxxxxxxxx> tpm: tpm_try_transmit() refactor error flow. Maciej W. Rozycki <macro@xxxxxxxxxxxxxx> rtc: m41t80: Correct alarm month range with RTC reads Marc Zyngier <marc.zyngier@xxxxxxx> arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3 PPIs/SGIs Will Deacon <will.deacon@xxxxxxx> arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1 Georgy A Bystrenin <gkot@xxxxxxxxxxxx> CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem Aaro Koskinen <aaro.koskinen@xxxxxx> MIPS: OCTEON: mark RGMII interface disabled on OCTEON III Paul Burton <paul.burton@xxxxxxxx> MIPS: Expand MIPS32 ASIDs to 64 bits Huacai Chen <chenhc@xxxxxxxxxx> MIPS: Align kernel load address to 64KB Huacai Chen <chenhc@xxxxxxxxxx> MIPS: Ensure pmd_present() returns false after pmd_mknotpresent() Huacai Chen <chenhc@xxxxxxxxxx> MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3 Paul Burton <paul.burton@xxxxxxxx> MIPS: math-emu: Write-protect delay slot emulation pages Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: v4l2-tpg: array index could become negative Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: vivid: free bitmap_cap when updating std/timings/etc. Nava kishore Manne <nava.manne@xxxxxxxxxx> serial: uartps: Fix interrupt mask issue to handle the RX interrupts properly Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx> f2fs: fix validation of the block count in sanity_check_raw_super Florian Westphal <fw@xxxxxxxxx> netfilter: nf_conncount: don't skip eviction when age is negative Florian Westphal <fw@xxxxxxxxx> netfilter: nf_conncount: fix garbage collection confirm race Yi-Hung Wei <yihung.wei@xxxxxxxxx> netfilter: nf_conncount: Fix garbage collection with zones Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_conncount: expose connection list interface Florian Westphal <fw@xxxxxxxxx> netfilter: xt_connlimit: don't store address in the conn nodes Breno Leitao <leitao@xxxxxxxxxx> powerpc/tm: Set MSR[TS] just prior to recheckpoint Josef Bacik <jbacik@xxxxxx> btrfs: run delayed items before dropping the snapshot Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix fsync of files with multiple hard links in new directories Macpaul Lin <macpaul.lin@xxxxxxxxxxxx> cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader. Tejun Heo <tj@xxxxxxxxxx> cgroup: fix CSS_TASK_ITER_PROCS Dmitry Eremin-Solenikov <dbaryshkov@xxxxxxxxx> crypto: testmgr - add AES-CFB tests Wenwen Wang <wang6495@xxxxxxx> crypto: cavium/nitrox - fix a DMA pool free failure Johan Jonker <jbx9999@xxxxxxxxxxx> clk: rockchip: fix typo in rk3188 spdif_frac parent Lukas Wunner <lukas@xxxxxxxxx> spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode Lukas Wunner <lukas@xxxxxxxxx> spi: bcm2835: Fix book-keeping of DMA termination Lukas Wunner <lukas@xxxxxxxxx> spi: bcm2835: Fix race on DMA termination Theodore Ts'o <tytso@xxxxxxx> ext4: check for shutdown and r/o file system in ext4_write_inode() Theodore Ts'o <tytso@xxxxxxx> ext4: force inode writes when nfsd calls commit_metadata() Theodore Ts'o <tytso@xxxxxxx> ext4: include terminating u32 in size of xattr entries when expanding inodes ruippan (潘睿) <ruippan@xxxxxxxxxxx> ext4: fix EXT4_IOC_GROUP_ADD ioctl Maurizio Lombardi <mlombard@xxxxxxxxxx> ext4: missing unlock/put_page() in ext4_try_to_write_inline_data() Pan Bian <bianpan2016@xxxxxxx> ext4: fix possible use after free in ext4_quota_enable Theodore Ts'o <tytso@xxxxxxx> ext4: add ext4_sb_bread() to disambiguate ENOMEM cases Ben Hutchings <ben@xxxxxxxxxxxxxxx> perf pmu: Suppress potential format-truncation warning Miquel Raynal <miquel.raynal@xxxxxxxxxxx> platform-msi: Free descriptors in platform_msi_domain_free() Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup Dan Williams <dan.j.williams@xxxxxxxxx> x86/mm: Drop usage of __flush_tlb_all() in kernel_physical_mapping_init() Michal Hocko <mhocko@xxxxxxxx> x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off Patrick Dreyer <Patrick@xxxxxxxxxxx> Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G Sebastian Ott <sebott@xxxxxxxxxxxxx> s390/pci: fix sleeping in atomic during hotplug Bjørn Mork <bjorn@xxxxxxx> qmi_wwan: apply SET_DTR quirk to the SIMCOM shared device ID Colin Ian King <colin.king@xxxxxxxxxxxxx> staging: wilc1000: fix missing read_write setting when reading data Jia-Ju Bai <baijiaju1990@xxxxxxxxx> usb: r8a66597: Fix a possible concurrency use-after-free bug in r8a66597_endpoint_disable() Jörgen Storvist <jorgen.storvist@xxxxxxxxx> USB: serial: option: add Fibocom NL678 series Scott Chen <scott@xxxxxxxxxxxx> USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays Sameer Pujar <spujar@xxxxxxxxxx> ALSA: hda/tegra: clear pending irq handlers Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: firewire-lib: use the same print format for 'without_header' tracepoints Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: firewire-lib: fix wrong assignment for 'out_packet_without_header' tracepoint Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: firewire-lib: fix wrong handling payload_length as payload_quadlet Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: fireface: fix for state to fetch PCM frames Mantas Mikulėnas <grawity@xxxxxxxxx> ALSA: hda: add mute LED support for HP EliteBook 840 G4 Arnd Bergmann <arnd@xxxxxxxx> mtd: atmel-quadspi: disallow building on ebsa110 Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ALSA: emux: Fix potential Spectre v1 vulnerabilities Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ALSA: pcm: Fix potential Spectre v1 vulnerability Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ALSA: rme9652: Fix potential Spectre v1 vulnerability Michael J. Ruhl <michael.j.ruhl@xxxxxxxxx> IB/hfi1: Incorrect sizing of sge for PIO will OOPs Deepa Dinamani <deepa.kernel@xxxxxxxxx> sock: Make sock->sk_stamp thread-safe Myungho Jung <mhjungk@xxxxxxxxx> net/smc: fix TCP fallback socket release Jörgen Storvist <jorgen.storvist@xxxxxxxxx> qmi_wwan: Add support for Fibocom NL678 series Jörgen Storvist <jorgen.storvist@xxxxxxxxx> qmi_wwan: Added support for Fibocom NL668 series Cong Wang <xiyou.wangcong@xxxxxxxxx> tipc: compare remote and local protocols in tipc_udp_enable() Cong Wang <xiyou.wangcong@xxxxxxxxx> tipc: use lock_sock() in tipc_sk_reinit() Alaa Hleihel <alaa@xxxxxxxxxxxx> net/mlx5e: Remove the false indication of software timestamping support Shalom Toledo <shalomt@xxxxxxxxxxxx> mlxsw: core: Increase timeout during firmware flash process Tariq Toukan <tariqt@xxxxxxxxxxxx> net/mlx5e: RX, Fix wrong early return in receive queue poll Yuval Avnery <yuvalav@xxxxxxxxxxxx> net/mlx5: Typo fix in del_sw_hw_rule Juergen Gross <jgross@xxxxxxxx> xen/netfront: tolerate frags with no data Jorgen Hansen <jhansen@xxxxxxxxxx> VSOCK: Send reset control packet when socket is partially bound Jason Wang <jasowang@xxxxxxxxxx> vhost: make sure used idx is seen before log in vhost_add_used_n() Cong Wang <xiyou.wangcong@xxxxxxxxx> tipc: fix a double kfree_skb() Eric Dumazet <edumazet@xxxxxxxxxx> tcp: fix a race in inet_diag_dump_icsk() Xin Long <lucien.xin@xxxxxxxxx> sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event Jörgen Storvist <jorgen.storvist@xxxxxxxxx> qmi_wwan: Added support for Telit LN940 series Cong Wang <xiyou.wangcong@xxxxxxxxx> ptr_ring: wrap back ->producer in __ptr_ring_swap_queue() Willem de Bruijn <willemb@xxxxxxxxxx> packet: validate address length if non-zero Willem de Bruijn <willemb@xxxxxxxxxx> packet: validate address length Cong Wang <xiyou.wangcong@xxxxxxxxx> net/wan: fix a double free in x25_asy_open_tty() Cong Wang <xiyou.wangcong@xxxxxxxxx> netrom: fix locking in nr_find_socket() Kunihiko Hayashi <hayashi.kunihiko@xxxxxxxxxxxxx> net: phy: Fix the issue that netif always links up after resuming Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> net: macb: restart tx after tx used bit read Michal Kubecek <mkubecek@xxxxxxx> net: ipv4: do not handle duplicate fragments as overlapping Eric Dumazet <edumazet@xxxxxxxxxx> isdn: fix kernel-infoleak in capi_unlocked_ioctl Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: tunnels: fix two use-after-free Cong Wang <xiyou.wangcong@xxxxxxxxx> ipv6: explicitly initialize udp6_addr in udp_sock_create6() Willem de Bruijn <willemb@xxxxxxxxxx> ieee802154: lowpan_header_create check must check daddr Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx> ibmveth: fix DMA unmap error in ibmveth_xmit_start error path Lorenzo Bianconi <lorenzo.bianconi@xxxxxxxxxx> gro_cell: add napi_disable in gro_cells_destroy Cong Wang <xiyou.wangcong@xxxxxxxxx> ax25: fix a use-after-free in ax25_fillin_cb() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ip6mr: Fix potential Spectre v1 vulnerability Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ipv4: Fix potential Spectre v1 vulnerability Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> net: core: Fix Spectre v1 vulnerability Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> phonet: af_phonet: Fix Spectre v1 vulnerability ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + Documentation/admin-guide/l1tf.rst | 6 +- Makefile | 4 +- arch/arm64/include/asm/kvm_arm.h | 2 +- arch/mips/boot/compressed/calc_vmlinuz_load_addr.c | 7 +- arch/mips/cavium-octeon/executive/cvmx-helper.c | 3 +- arch/mips/include/asm/cpu-info.h | 2 +- arch/mips/include/asm/mach-generic/mmzone.h | 2 + arch/mips/include/asm/mach-loongson64/mmzone.h | 1 + arch/mips/include/asm/mmu.h | 2 +- arch/mips/include/asm/mmu_context.h | 10 +-- arch/mips/include/asm/mmzone.h | 8 ++ arch/mips/include/asm/pgtable-64.h | 5 ++ arch/mips/include/asm/r4kcache.h | 22 +++++ arch/mips/kernel/vdso.c | 4 +- arch/mips/math-emu/dsemul.c | 38 +++++---- arch/mips/mm/c-r3k.c | 2 +- arch/mips/mm/c-r4k.c | 44 ++++++++-- arch/powerpc/kernel/signal_32.c | 20 ++++- arch/powerpc/kernel/signal_64.c | 44 +++++++--- arch/s390/pci/pci_clp.c | 2 +- arch/x86/include/asm/kvm_host.h | 2 +- arch/x86/kernel/cpu/bugs.c | 3 +- arch/x86/kvm/vmx.c | 7 +- arch/x86/mm/init.c | 2 +- arch/x86/mm/init_64.c | 6 -- crypto/tcrypt.c | 5 ++ crypto/testmgr.c | 7 ++ crypto/testmgr.h | 76 +++++++++++++++++ drivers/base/platform-msi.c | 6 +- drivers/char/tpm/tpm-interface.c | 15 ++-- drivers/char/tpm/tpm_i2c_nuvoton.c | 11 ++- drivers/clk/rockchip/clk-rk3188.c | 2 +- drivers/crypto/cavium/nitrox/nitrox_algs.c | 12 +-- drivers/crypto/cavium/nitrox/nitrox_lib.c | 22 +++-- drivers/crypto/cavium/nitrox/nitrox_req.h | 7 ++ drivers/infiniband/hw/hfi1/verbs.c | 2 + drivers/input/mouse/elan_i2c_core.c | 1 + drivers/isdn/capi/kcapi.c | 4 +- drivers/media/common/v4l2-tpg/v4l2-tpg-core.c | 2 +- drivers/media/platform/vivid/vivid-vid-cap.c | 2 + drivers/mtd/spi-nor/Kconfig | 2 +- drivers/net/ethernet/cadence/macb_main.c | 21 ++++- drivers/net/ethernet/ibm/ibmveth.c | 6 +- .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 12 +-- drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 10 ++- drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 2 +- drivers/net/ethernet/mellanox/mlxsw/core.c | 19 ++++- drivers/net/ethernet/mellanox/mlxsw/core.h | 3 + drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 7 +- drivers/net/phy/phy_device.c | 7 +- drivers/net/usb/qmi_wwan.c | 5 +- drivers/net/wan/x25_asy.c | 2 + drivers/net/xen-netfront.c | 2 +- drivers/rtc/rtc-m41t80.c | 2 +- drivers/spi/spi-bcm2835.c | 14 ++- drivers/staging/wilc1000/wilc_sdio.c | 1 + drivers/tty/serial/xilinx_uartps.c | 4 +- drivers/usb/class/cdc-acm.c | 10 +++ drivers/usb/class/cdc-acm.h | 1 + drivers/usb/host/r8a66597-hcd.c | 5 +- drivers/usb/serial/option.c | 4 + drivers/usb/serial/pl2303.c | 5 ++ drivers/usb/serial/pl2303.h | 5 ++ drivers/vhost/vhost.c | 2 + fs/btrfs/btrfs_inode.h | 6 ++ fs/btrfs/extent-tree.c | 4 + fs/btrfs/inode.c | 17 ++++ fs/btrfs/tree-log.c | 16 ++++ fs/cifs/smb2maperror.c | 4 +- fs/ext4/ext4.h | 2 + fs/ext4/inline.c | 5 +- fs/ext4/inode.c | 9 +- fs/ext4/migrate.c | 36 ++++---- fs/ext4/resize.c | 74 ++++++++-------- fs/ext4/super.c | 36 +++++++- fs/ext4/xattr.c | 78 ++++++++--------- fs/f2fs/super.c | 6 +- include/linux/msi.h | 2 + include/linux/ptr_ring.h | 2 + include/net/netfilter/nf_conntrack_count.h | 15 ++++ include/net/sock.h | 38 ++++++++- include/trace/events/ext4.h | 20 +++++ kernel/cgroup/cgroup.c | 29 ++++--- net/ax25/af_ax25.c | 11 ++- net/ax25/ax25_dev.c | 2 + net/compat.c | 15 ++-- net/core/filter.c | 2 + net/core/gro_cells.c | 1 + net/core/sock.c | 3 + net/ieee802154/6lowpan/tx.c | 3 + net/ipv4/inet_diag.c | 4 +- net/ipv4/ip_fragment.c | 18 ++-- net/ipv4/ipmr.c | 3 + net/ipv6/ip6_tunnel.c | 1 + net/ipv6/ip6_udp_tunnel.c | 3 +- net/ipv6/ip6_vti.c | 1 + net/ipv6/ip6mr.c | 4 + net/netfilter/xt_connlimit.c | 99 +++++++++++++++++----- net/netrom/af_netrom.c | 15 ++-- net/packet/af_packet.c | 8 +- net/phonet/af_phonet.c | 3 + net/sctp/ipv6.c | 1 + net/smc/af_smc.c | 14 ++- net/smc/smc.h | 4 + net/sunrpc/svcsock.c | 2 +- net/tipc/socket.c | 8 +- net/tipc/udp_media.c | 9 +- net/vmw_vsock/vmci_transport.c | 67 +++++++++++---- sound/core/pcm.c | 2 + sound/firewire/amdtp-stream-trace.h | 4 +- sound/firewire/amdtp-stream.c | 4 +- sound/firewire/fireface/ff-protocol-ff400.c | 2 +- sound/pci/emu10k1/emufx.c | 5 ++ sound/pci/hda/hda_tegra.c | 2 + sound/pci/hda/patch_conexant.c | 1 + sound/pci/rme9652/hdsp.c | 10 ++- sound/synth/emux/emux_hwdep.c | 7 +- tools/perf/util/pmu.c | 8 +- virt/kvm/arm/vgic/vgic-mmio.c | 6 +- 120 files changed, 984 insertions(+), 343 deletions(-)
