This is the start of the stable review cycle for the 4.19.19 release. There are 103 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Jan 31 11:31:30 UTC 2019. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.19-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.19-rc1 Christoph Hellwig <hch@xxxxxx> ide: fix a typo in the settings proc file name Jack Pham <jackp@xxxxxxxxxxxxxx> usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup Michal Hocko <mhocko@xxxxxxxx> Revert "mm, memory_hotplug: initialize struct pages for the full memory section" Raju Rangoju <rajur@xxxxxxxxxxx> nvmet-rdma: fix null dereference under heavy load Israel Rukshin <israelr@xxxxxxxxxxxx> nvmet-rdma: Add unlikely for response allocated check David Hildenbrand <david@xxxxxxxxxx> s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: fix inner map masking to prevent oob under speculation Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: fix sanitation of alu op with pointer / scalar type from different paths Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: prevent out of bounds speculation on pointer arithmetic Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: fix check_map_access smin_value test when pointer contains offset Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: restrict unknown scalars of mixed signed bounds for unprivileged Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: restrict stack pointer arithmetic for unprivileged Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: restrict map value pointer arithmetic for unprivileged Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: enable access to ax register also from verifier rewrite Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: move tmp variable into ax register in interpreter Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: move {prev_,}insn_idx into verifier env Alexei Starovoitov <ast@xxxxxxxxxx> bpf: add per-insn complexity limit Alexei Starovoitov <ast@xxxxxxxxxx> bpf: improve verifier branch analysis Neil Armstrong <narmstrong@xxxxxxxxxxxx> drm/meson: Fix atomic mode switching regression Nicolas Pitre <nicolas.pitre@xxxxxxxxxx> vt: invoke notifier on screen size change Nicolas Pitre <nicolas.pitre@xxxxxxxxxx> vt: always call notifier with the console lock held Nicolas Pitre <nicolas.pitre@xxxxxxxxxx> vt: make vt_console_print() compatible with the unicode screen buffer Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> can: flexcan: fix NULL pointer exception during bringup Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: bcm: check timer values before ktime conversion Manfred Schlaegl <manfred.schlaegl@xxxxxxxxxxxxx> can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by removing it Marc Zyngier <marc.zyngier@xxxxxxx> irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size Thomas Gleixner <tglx@xxxxxxxxxxxxx> net: sun: cassini: Cleanup license conflict Thomas Gleixner <tglx@xxxxxxxxxxxxx> posix-cpu-timers: Unbreak timer rearming Jan Beulich <JBeulich@xxxxxxxx> x86/entry/64/compat: Fix stack switching for XEN PV Daniel Drake <drake@xxxxxxxxxxxx> x86/kaslr: Fix incorrect i8254 outb() parameters Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx> x86/selftests/pkeys: Fork() to check for state being preserved Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx> x86/pkeys: Properly copy pkey state at fork() KarimAllah Ahmed <karahmed@xxxxxxxxx> KVM/nVMX: Do not validate that posted_intr_desc_addr is page aligned Tom Roeder <tmroeder@xxxxxxxxxx> kvm: x86/vmx: Use kzalloc for cached_vmcs12 Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: WARN_ONCE if sending a PV IPI returns a fatal error Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Fix PV IPIs for 32-bit KVM host Alexander Popov <alex.popov@xxxxxxxxx> KVM: x86: Fix single-step debugging Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: Add APTX quirk for Lenovo laptop Milan Broz <gmazyland@xxxxxxxxx> dm crypt: fix parsing of extended IV arguments Joe Thornber <ejt@xxxxxxxxxx> dm thin: fix passdown_double_checking_shared_status() Marc Gonzalez <marc.w.gonzalez@xxxxxxx> scsi: ufs: Use explicit access size in ufshcd_dump_regs Dan Williams <dan.j.williams@xxxxxxxxx> acpi/nfit: Fix command-supported detection Dan Williams <dan.j.williams@xxxxxxxxx> acpi/nfit: Block function zero DSMs Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: uinput - fix undefined behavior in uinput_validate_absinfo() Deepa Dinamani <deepa.kernel@xxxxxxxxx> Input: input_event - provide override for sparc64 Tom Panfil <tom@xxxxxxxxxxxxxxx> Input: xpad - add support for SteelSeries Stratus Duo Ronnie Sahlberg <lsahlber@xxxxxxxxxx> smb3: add credits we receive from oplock/break PDUs Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> CIFS: Do not reconnect TCP session in add_credits() Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> CIFS: Fix credit calculation for encrypted reads with errors Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> CIFS: Fix credits calculations for reads with errors Pavel Shilovsky <pshilov@xxxxxxxxxxxxx> CIFS: Fix possible hang during async MTU reads and writes Nicolas Pitre <nicolas.pitre@xxxxxxxxxx> vgacon: unconfuse vc_origin when using soft scrollback Dexuan Cui <decui@xxxxxxxxxxxxx> Drivers: hv: vmbus: Check for ring when getting debug info Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> hv_balloon: avoid touching uninitialized struct page during tail onlining Paul Fulghum <paulkf@xxxxxxxxxxxxx> tty/n_hdlc: fix __might_sleep warning Samir Virmani <samir@xxxxxxxxxxx> uart: Fix crash in uart_write and uart_put_char Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> tty: Handle problem if line discipline does not have receive_buf Michael Straube <straube.linux@xxxxxxxxx> staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1 Remi Pommarel <repk@xxxxxxxxxxxx> mmc: meson-gx: Free irq in release() callback Liming Sun <lsun@xxxxxxxxxxxx> mmc: dw_mmc-bluefield: : Fix the license information Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> char/mwave: fix potential Spectre v1 vulnerability Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> misc: ibmvsm: Fix potential NULL pointer dereference Gerald Schaefer <gerald.schaefer@xxxxxxxxxx> s390/smp: fix CPU hotplug deadlock with CPU rescan Christian Borntraeger <borntraeger@xxxxxxxxxx> s390/early: improve machine detection Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390/mm: always force a load of the primary ASCE on context switch Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx> ARC: perf: map generic branches to correct hardware condition Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx> ARC: adjust memblock_reserve of kernel memory Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx> ARCv2: lib: memeset: fix doing prefetchw outside of buffer Anthony Wong <anthony.wong@xxxxxxxxxxxxx> ALSA: hda - Add mute LED support for HP ProBook 470 G5 Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Fix typo for ALC225 model Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> inotify: Fix fd refcount leak in inotify_add_watch(). Dinh Nguyen <dinguyen@xxxxxxxxxx> clk: socfpga: stratix10: fix naming convention for the fixed-clocks Dinh Nguyen <dinguyen@xxxxxxxxxx> clk: socfpga: stratix10: fix rate calculation for pll clocks b-ak <anur.bhargav@xxxxxxxxx> ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> ASoC: rt5514-spi: Fix potential NULL pointer dereference Kangjie Lu <kjlu@xxxxxxx> ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages Yan, Zheng <zyan@xxxxxxxxxx> ceph: clear inode pointer when snap realm gets dropped by its inode Charles Yeh <charlesyeh522@xxxxxxxxx> USB: serial: pl2303: add new PID to support PL2303TB Max Schulze <max.schulze@xxxxxxxxx> USB: serial: simple: add Motorola Tetra TPG2200 device id Christian Lamparter <chunkeey@xxxxxxxxx> USB: leds: fix regression in usbport led trigger Tomas Winkler <tomas.winkler@xxxxxxxxx> mei: me: add denverton innovation engine device IDs Alexander Usyskin <alexander.usyskin@xxxxxxxxx> mei: me: mark LBG devices as having dma support Willem de Bruijn <willemb@xxxxxxxxxx> tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state Hangbin Liu <liuhangbin@xxxxxxxxx> ip6_gre: update version related info when changing link Andrew Lunn <andrew@xxxxxxx> net: phy: marvell: Fix deadlock from wrong locking Xin Long <lucien.xin@xxxxxxxxx> erspan: build the header with the right proto according to erspan_ver Olivier Matz <olivier.matz@xxxxxxxxx> ip6_gre: fix tunnel list corruption for x-netns Willem de Bruijn <willemb@xxxxxxxxxx> udp: with udp_segment release on error path Ivan Vecera <ivecera@xxxxxxxxxx> net/sched: cls_flower: allocate mask dynamically in fl_change() Ido Schimmel <idosch@xxxxxxxxxxxx> mlxsw: pci: Ring CQ's doorbell before RDQ's Nir Dotan <nird@xxxxxxxxxxxx> mlxsw: spectrum_fid: Update dummy FID index Ido Schimmel <idosch@xxxxxxxxxxxx> net: ipv4: Fix memory leak in network namespace dismantle Nir Dotan <nird@xxxxxxxxxxxx> mlxsw: pci: Increase PCI SW reset timeout Jason Wang <jasowang@xxxxxxxxxx> vhost: log dirty page correctly Ross Lagerwall <ross.lagerwall@xxxxxxxxxx> openvswitch: Avoid OOB read when parsing flow nlattrs Cong Wang <xiyou.wangcong@xxxxxxxxx> net_sched: refetch skb protocol for each filter Davide Caratti <dcaratti@xxxxxxxxxx> net/sched: act_tunnel_key: fix memory leak in case of action replace Camelia Groza <camelia.groza@xxxxxxx> net: phy: phy driver features are mandatory Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxx> net: phy: mdio_bus: add missing device_del() in mdiobus_register() error handling Andrew Lunn <andrew@xxxxxxx> net: phy: marvell: Errata for mv88e6390 internal PHYs Ross Lagerwall <ross.lagerwall@xxxxxxxxxx> net: Fix usage of pskb_trim_rcsum Yunjian Wang <wangyunjian@xxxxxxxxxx> net: bridge: Fix ethernet header pointer before check skb forwardable Lendacky, Thomas <Thomas.Lendacky@xxxxxxx> amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs ------------- Diffstat: Makefile | 4 +- arch/arc/include/asm/perf_event.h | 3 +- arch/arc/lib/memset-archs.S | 40 +- arch/arc/mm/init.c | 3 +- arch/s390/include/asm/mmu_context.h | 5 +- arch/s390/kernel/early.c | 4 +- arch/s390/kernel/setup.c | 2 + arch/s390/kernel/smp.c | 12 +- arch/x86/entry/entry_64_compat.S | 6 +- arch/x86/include/asm/mmu_context.h | 18 + arch/x86/kernel/kvm.c | 7 +- arch/x86/kvm/vmx.c | 14 +- arch/x86/kvm/x86.c | 5 +- arch/x86/lib/kaslr.c | 4 +- drivers/acpi/nfit/core.c | 61 ++- drivers/char/mwave/mwavedd.c | 7 + drivers/clk/socfpga/clk-pll-s10.c | 2 +- drivers/clk/socfpga/clk-s10.c | 20 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 1 + drivers/gpu/drm/meson/meson_crtc.c | 23 +- drivers/gpu/drm/meson/meson_drv.c | 5 + drivers/hv/hv_balloon.c | 10 +- drivers/hv/ring_buffer.c | 31 +- drivers/hv/vmbus_drv.c | 91 ++-- drivers/ide/ide-proc.c | 2 +- drivers/input/joystick/xpad.c | 3 + drivers/input/misc/uinput.c | 5 +- drivers/irqchip/irq-gic-v3-its.c | 25 +- drivers/md/dm-crypt.c | 25 +- drivers/md/dm-thin-metadata.c | 4 +- drivers/md/dm-thin-metadata.h | 2 +- drivers/md/dm-thin.c | 10 +- drivers/misc/ibmvmc.c | 7 +- drivers/misc/mei/hw-me-regs.h | 2 + drivers/misc/mei/pci-me.c | 4 +- drivers/mmc/host/dw_mmc-bluefield.c | 5 - drivers/mmc/host/meson-gx-mmc.c | 18 +- drivers/net/can/dev.c | 27 +- drivers/net/can/flexcan.c | 2 +- drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2 - drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 22 +- drivers/net/ethernet/mellanox/mlxsw/pci.c | 12 +- drivers/net/ethernet/mellanox/mlxsw/pci_hw.h | 3 +- drivers/net/ethernet/mellanox/mlxsw/spectrum_fid.c | 4 +- drivers/net/ethernet/sun/cassini.c | 15 +- drivers/net/ethernet/sun/cassini.h | 15 +- drivers/net/phy/marvell.c | 37 +- drivers/net/phy/mdio_bus.c | 1 + drivers/net/phy/phy_device.c | 5 + drivers/net/ppp/pppoe.c | 1 + drivers/nvme/target/rdma.c | 17 +- drivers/s390/char/sclp_config.c | 2 + drivers/scsi/ufs/ufshcd.c | 10 +- drivers/staging/rtl8188eu/os_dep/usb_intf.c | 1 + drivers/tty/n_hdlc.c | 1 + drivers/tty/serial/serial_core.c | 12 +- drivers/tty/tty_io.c | 3 +- drivers/tty/vt/vt.c | 50 +-- drivers/usb/core/ledtrig-usbport.c | 17 +- drivers/usb/dwc3/gadget.c | 2 + drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 2 + drivers/usb/serial/usb-serial-simple.c | 3 +- drivers/vhost/net.c | 3 +- drivers/vhost/vhost.c | 97 ++++- drivers/vhost/vhost.h | 3 +- drivers/video/console/vgacon.c | 7 +- fs/ceph/caps.c | 2 + fs/cifs/cifssmb.c | 35 +- fs/cifs/connect.c | 21 + fs/cifs/smb2misc.c | 7 + fs/cifs/smb2ops.c | 62 ++- fs/notify/inotify/inotify_user.c | 6 +- include/linux/bpf_verifier.h | 13 + include/linux/filter.h | 10 +- include/linux/hyperv.h | 5 +- include/linux/phy.h | 4 +- include/linux/skbuff.h | 1 + include/net/ip_fib.h | 2 +- include/uapi/linux/input.h | 6 +- kernel/bpf/core.c | 54 ++- kernel/bpf/map_in_map.c | 17 +- kernel/bpf/verifier.c | 470 +++++++++++++++++---- kernel/time/posix-cpu-timers.c | 1 + mm/page_alloc.c | 12 - net/bridge/br_forward.c | 9 +- net/bridge/br_netfilter_ipv6.c | 1 + net/bridge/netfilter/nft_reject_bridge.c | 1 + net/can/bcm.c | 27 ++ net/ipv4/fib_frontend.c | 4 +- net/ipv4/fib_trie.c | 15 +- net/ipv4/ip_gre.c | 23 +- net/ipv4/ip_input.c | 1 + net/ipv4/tcp.c | 2 +- net/ipv4/udp.c | 16 +- net/ipv6/ip6_gre.c | 14 +- net/ipv6/udp.c | 16 +- net/openvswitch/flow_netlink.c | 2 +- net/sched/act_tunnel_key.c | 19 +- net/sched/cls_api.c | 3 +- net/sched/cls_flower.c | 19 +- sound/pci/hda/patch_conexant.c | 1 + sound/pci/hda/patch_realtek.c | 2 +- sound/soc/codecs/rt5514-spi.c | 2 + sound/soc/codecs/tlv320aic32x4.c | 4 + sound/soc/intel/atom/sst-mfld-platform-pcm.c | 8 +- tools/testing/selftests/x86/protection_keys.c | 41 +- 107 files changed, 1307 insertions(+), 518 deletions(-)
