This is the start of the stable review cycle for the 3.18.139 release. There are 104 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri 26 Apr 2019 05:07:26 PM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.139-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.139-rc1 Jann Horn <jannh@xxxxxxxxxx> device_cgroup: fix RCU imbalance in error case Phil Auld <pauld@xxxxxxxxxx> sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup Masami Hiramatsu <mhiramat@xxxxxxxxxx> kprobes: Fix error check when reusing optimized probes Masami Hiramatsu <mhiramat@xxxxxxxxxx> x86/kprobes: Verify stack frame on kretprobe Takashi Iwai <tiwai@xxxxxxx> ALSA: core: Fix card races between register and disconnect Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: vmk80xx: Fix use of uninitialized semaphore Georg Ottinger <g.ottinger@xxxxxxxxx> iio: adc: at91: disable adc channel interrupt in timeout case Dragos Bogdan <dragos.bogdan@xxxxxxxxxx> iio: ad_sigma_delta: select channel when reading register Eric Dumazet <edumazet@xxxxxxxxxx> tcp: tcp_grow_window() needs to respect tcp_space() Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: ensure rcu_read_lock() in ipv4_link_failure() Stephen Suryaputra <ssuryaextr@xxxxxxxxx> ipv4: recompile ip options in ipv4_link_failure Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: bridge: multicast: use rcu to access port list from br_multicast_start_querier Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> bonding: fix event handling for stacked bonds Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete Christian Lamparter <chunkeey@xxxxxxxxx> crypto: crypto4xx - properly set IV after de- and encrypt Arnd Bergmann <arnd@xxxxxxxx> appletalk: Fix compile regression Amit Klein <aksecurity@xxxxxxxxx> inet: update the IP ID generation algorithm to higher standards. Pi-Hsun Shih <pihsun@xxxxxxxxxxxx> include/linux/swap.h: use offsetof() instead of custom __swapoffset macro Stanislaw Gruszka <sgruszka@xxxxxxxxxx> lib/div64.c: off by one in shift YueHaibing <yuehaibing@xxxxxxxxxx> appletalk: Fix use-after-free in atalk_proc_exit Julia Cartwright <julia@xxxxxx> iommu/dmar: Fix buffer overflow during PCI bus notification Ronald Tschalär <ronald@xxxxxxxxxxxxx> ACPI / SBS: Fix GPE storm on recent MacBookPro's Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx> ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms Michal Simek <michal.simek@xxxxxxxxxx> serial: uartps: console_setup() can't be placed to init section Dinu-Razvan Chis-Serban <justcsdr@xxxxxxxxx> 9p locks: add mount option for lock retry interval Gertjan Halkes <gertjan@xxxxxxxxxx> 9p: do not trust pdu content for stat item size Siva Rebbagondla <siva.rebbagondla@xxxxxxxxxxxxxxxxxx> rsi: improve kernel thread handling to fix kernel panic Steve French <stfrench@xxxxxxxxxxxxx> fix incorrect error code mapping for OBJECTID_NOT_FOUND Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx> iommu/vt-d: Check capability before disabling protected memory Matthew Whitehead <tedheadster@xxxxxxxxx> x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors Aditya Pakki <pakki001@xxxxxxx> x86/hpet: Prevent potential NULL pointer dereference Changbin Du <changbin.du@xxxxxxxxx> perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test() Changbin Du <changbin.du@xxxxxxxxx> perf top: Fix error handling in cmd_top() David Arcari <darcari@xxxxxxxxxx> tools/power turbostat: return the exit status of a command Matthew Garrett <matthewgarrett@xxxxxxxxxx> thermal/int340x_thermal: fix mode setting Colin Ian King <colin.king@xxxxxxxxxxxxx> ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration Arnd Bergmann <arnd@xxxxxxxx> mmc: davinci: remove extraneous __init annotation Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx> IB/mlx4: Fix race condition between catas error reset and aliasguid flows Kangjie Lu <kjlu@xxxxxxx> ALSA: sb8: add a check for request_region Kangjie Lu <kjlu@xxxxxxx> ALSA: echoaudio: add a check for ioremap_nocache Lukas Czerner <lczerner@xxxxxxxxxx> ext4: report real fs size after failed resize Stephane Eranian <eranian@xxxxxxxxxx> perf/core: Restore mmap record type correctly Tejun Heo <tj@xxxxxxxxxx> string: drop __must_check from strscpy() and restore strscpy() usages in cgroup Andre Przywara <andre.przywara@xxxxxxx> PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller Max Filippov <jcmvbkbc@xxxxxxxxx> xtensa: fix return_address Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> sched/fair: Do not re-read ->h_load_next during hierarchical load calculation Dan Carpenter <dan.carpenter@xxxxxxxxxx> xen: Prevent buffer overflow in privcmd ioctl Will Deacon <will.deacon@xxxxxxx> arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value Jérôme Glisse <jglisse@xxxxxxxxxx> block: do not leak memory in bio_copy_user_iov() S.j. Wang <shengjiu.wang@xxxxxxx> ASoC: fsl_esai: fix channel swap issue when stream starts Zubin Mithra <zsm@xxxxxxxxxxxx> ALSA: seq: Fix OOB-reads from strlcpy Sheena Mira-ato <sheena.mira-ato@xxxxxxxxxxxxxxxxxxx> ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type Li RongQing <lirongqing@xxxxxxxxx> net: ethtool: not call vzalloc for zero sized memory request Eric Dumazet <edumazet@xxxxxxxxxx> netns: provide pure entropy for net_hash_mix() Xin Long <lucien.xin@xxxxxxxxx> sctp: initialize _pad of sockaddr_in before copying to user memory Bjørn Mork <bjorn@xxxxxxx> qmi_wwan: add Olicard 600 Andrea Righi <andrea.righi@xxxxxxxxxxxxx> openvswitch: fix flow actions reallocation Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> tty: ldisc: add sysctl to prevent autoloading of ldiscs Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> tty: mark Siemens R3964 line discipline as BROKEN Nick Desaulniers <ndesaulniers@xxxxxxxxxx> lib/string.c: implement a basic bcmp Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> binfmt_elf: switch to new creds when switching to new mm Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers Ben Dooks <ben.dooks@xxxxxxxxxxxxxxx> dmaengine: tegra: avoid overflow of byte tracking Rafael Ávila de Espíndola <rafael@xxxxxxxxxx> x86/build: Mark per-CPU symbols as absolute explicitly for LLD Zumeng Chen <zumeng.chen@xxxxxxxxx> wlcore: Fix memory leak in case wl12xx_fetch_firmware failure Pawe? Chmiel <pawel.mikolaj.chmiel@xxxxxxxxx> media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration Anders Roxell <anders.roxell@xxxxxxxxxx> dmaengine: imx-dma: fix warning comparison of distinct pointer types Buland Singh <bsingh@xxxxxxxxxx> hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable David Tolnay <dtolnay@xxxxxxxxx> hwrng: virtio - Avoid repeated init of completion Akinobu Mita <akinobu.mita@xxxxxxxxx> media: mt9m111: set initial frame size other than 0x0 Manfred Schlaegl <manfred.schlaegl@xxxxxxxxxxxxx> tty: increase the default flip buffer limit to 2*640K Waiman Long <longman@xxxxxxxxxx> locking/lockdep: Add debug_locks check in __lock_downgrade() Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> e1000e: fix cyclic resets at link up with active tx Guenter Roeck <linux@xxxxxxxxxxxx> cdrom: Fix race condition in cdrom_sysctl_register Manfred Schlaegl <manfred.schlaegl@xxxxxxxxxxxxx> fbdev: fbmem: fix memory access if logo is bigger than the screen Coly Li <colyli@xxxxxxx> bcache: improve sysfs_strtoul_clamp() Coly Li <colyli@xxxxxxx> bcache: fix input overflow to sequential_cutoff Coly Li <colyli@xxxxxxx> bcache: fix input overflow to cache set sysfs file io_error_halflife Ranjani Sridharan <ranjani.sridharan@xxxxxxxxxxxxxxx> ALSA: PCM: check if ops are defined before suspending PCM Nathan Chancellor <natechancellor@xxxxxxxxx> ARM: 8833/1: Ensure that NEON code always compiles with Clang Andrea Righi <righi.andrea@xxxxxxxxx> kprobes: Prohibit probing on bsearch() Michal Kazior <michal@xxxxxxxxx> leds: lp55xx: fix null deref on firmware load failure Wen Yang <yellowriver2010@xxxxxxxxxxx> SoC: imx-sgtl5000: add missing put_device() Jason Yan <yanaijie@xxxxxxxxxx> scsi: megaraid_sas: return error when create DMA pool failed Håkon Bugge <haakon.bugge@xxxxxxxxxx> IB/mlx4: Increase the timeout for CM cache Florian Fainelli <f.fainelli@xxxxxxxxx> e1000e: Fix -Wformat-truncation warnings Aaro Koskinen <aaro.koskinen@xxxxxx> mmc: omap: fix the maximum timeout setting Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx> ARM: 8840/1: use a raw_spinlock_t in unwind Benjamin Block <bblock@xxxxxxxxxxxxx> scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c Tony Jones <tonyj@xxxxxxx> tools lib traceevent: Fix buffer overflow in arg_eval Carlos Maiolino <cmaiolino@xxxxxxxxxx> fs: fix guard_bio_eod to check for real EOD errors Yao Liu <yotta.liu@xxxxxxxxx> cifs: Fix NULL pointer dereference of devname Jason Cai (Xiang Feng) <jason.cai.kern@xxxxxxxxx> dm thin: add sanity checks to thin-pool and external snapshot creation Louis Taylor <louis@xxxxxxxxxx> cifs: use correct format characters Jia Guo <guojia12@xxxxxxxxxx> ocfs2: fix a panic problem caused by o2cb_ctl Qian Cai <cai@xxxxxx> mm/slab.c: kmemleak no scan alien caches Uladzislau Rezki (Sony) <urezki@xxxxxxxxx> mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512! Peng Fan <peng.fan@xxxxxxx> mm/cma.c: cma_declare_contiguous: correct err handling Christian Brauner <christian@xxxxxxxxxx> sysctl: handle overflow for file-max Douglas Anderson <dianders@xxxxxxxxxxxx> tracing: kdb: Fix ftdump to not sleep Jeremy Compostella <jeremy.compostella@xxxxxxxxx> i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA zhangyi (F) <yi.zhang@xxxxxxxxxx> ext4: cleanup bh release code in ext4_ind_remove_space() ------------- Diffstat: Documentation/arm/kernel_mode_neon.txt | 4 +- Makefile | 4 +- arch/arm/kernel/unwind.c | 14 +++---- arch/arm/lib/Makefile | 2 +- arch/arm/lib/xor-neon.c | 2 +- arch/arm/plat-samsung/Kconfig | 2 +- arch/arm64/include/asm/futex.h | 16 ++++---- arch/x86/include/asm/xen/hypercall.h | 3 ++ arch/x86/kernel/cpu/cyrix.c | 14 +++---- arch/x86/kernel/hpet.c | 2 + arch/x86/kernel/kprobes/core.c | 26 +++++++++++++ arch/x86/kernel/vmlinux.lds.S | 2 +- arch/xtensa/kernel/stacktrace.c | 6 ++- block/bio.c | 5 ++- drivers/acpi/sbs.c | 8 +++- drivers/cdrom/cdrom.c | 7 ++-- drivers/char/Kconfig | 2 +- drivers/char/hpet.c | 2 +- drivers/char/hw_random/virtio-rng.c | 2 +- drivers/char/tpm/tpm_i2c_atmel.c | 10 ++++- drivers/crypto/amcc/crypto4xx_alg.c | 3 +- drivers/crypto/amcc/crypto4xx_core.c | 9 +++++ drivers/dma/imx-dma.c | 2 +- drivers/dma/tegra20-apb-dma.c | 5 ++- drivers/gpu/drm/drm_dp_mst_topology.c | 1 + drivers/i2c/i2c-core.c | 12 +++--- drivers/iio/adc/ad_sigma_delta.c | 1 + drivers/iio/adc/at91_adc.c | 28 ++++++++------ drivers/infiniband/hw/mlx4/alias_GUID.c | 2 +- drivers/infiniband/hw/mlx4/cm.c | 2 +- drivers/iommu/dmar.c | 2 +- drivers/iommu/intel-iommu.c | 3 ++ drivers/leds/leds-lp55xx-common.c | 4 +- drivers/md/bcache/sysfs.c | 17 ++++++-- drivers/md/bcache/sysfs.h | 13 +++++-- drivers/md/dm-thin.c | 13 +++++++ drivers/media/i2c/soc_camera/mt9m111.c | 2 + drivers/media/platform/s5p-jpeg/jpeg-core.c | 19 +++++---- drivers/mmc/host/davinci_mmc.c | 2 +- drivers/mmc/host/omap.c | 2 +- drivers/net/bonding/bond_main.c | 6 ++- drivers/net/ethernet/intel/e1000e/netdev.c | 19 ++++----- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/wireless/rsi/rsi_common.h | 1 - drivers/net/wireless/ti/wlcore/main.c | 7 +++- drivers/pci/quirks.c | 2 + drivers/scsi/megaraid/megaraid_sas_base.c | 1 + drivers/scsi/scsi_scan.c | 6 +-- drivers/staging/comedi/drivers/ni_usb6501.c | 4 +- drivers/staging/comedi/drivers/vmk80xx.c | 8 ++-- drivers/thermal/int340x_thermal/int3400_thermal.c | 7 ++-- drivers/tty/Kconfig | 23 +++++++++++ drivers/tty/serial/xilinx_uartps.c | 2 +- drivers/tty/tty_buffer.c | 2 +- drivers/tty/tty_io.c | 3 ++ drivers/tty/tty_ldisc.c | 47 +++++++++++++++++++++++ drivers/video/fbdev/core/fbmem.c | 3 ++ fs/9p/v9fs.c | 21 ++++++++++ fs/9p/v9fs.h | 1 + fs/9p/vfs_dir.c | 8 ++-- fs/9p/vfs_file.c | 6 ++- fs/binfmt_elf.c | 2 +- fs/buffer.c | 7 ++++ fs/cifs/cifs_dfs_ref.c | 4 +- fs/cifs/connect.c | 5 +++ fs/cifs/smb1ops.c | 2 +- fs/cifs/smb2maperror.c | 3 +- fs/ext4/indirect.c | 47 +++++++++++------------ fs/ext4/resize.c | 6 ++- fs/ocfs2/cluster/nodemanager.c | 14 ++++--- include/linux/atalk.h | 20 +++++++--- include/linux/kprobes.h | 1 + include/linux/ring_buffer.h | 2 +- include/linux/string.h | 5 ++- include/linux/swap.h | 4 +- include/net/net_namespace.h | 2 + include/net/netns/hash.h | 15 +------- kernel/events/core.c | 2 + kernel/kprobes.c | 6 +-- kernel/locking/lockdep.c | 3 ++ kernel/sched/fair.c | 31 +++++++++++++-- kernel/sysctl.c | 3 ++ kernel/trace/ring_buffer.c | 5 ++- kernel/trace/trace.c | 6 ++- kernel/trace/trace_kdb.c | 6 ++- lib/bsearch.c | 2 + lib/div64.c | 4 +- lib/raid6/Makefile | 2 +- lib/string.c | 20 ++++++++++ mm/cma.c | 4 +- mm/slab.c | 17 ++++---- mm/vmalloc.c | 6 ++- net/9p/protocol.c | 3 +- net/appletalk/atalk_proc.c | 2 +- net/appletalk/ddp.c | 37 +++++++++++++++--- net/appletalk/sysctl_net_atalk.c | 5 ++- net/bridge/br_multicast.c | 4 +- net/core/ethtool.c | 29 +++++++++----- net/core/net_namespace.c | 1 + net/ipv4/route.c | 20 +++++++++- net/ipv4/tcp_input.c | 10 ++--- net/ipv6/ip6_output.c | 3 ++ net/ipv6/ip6_tunnel.c | 4 +- net/openvswitch/flow_netlink.c | 4 +- net/sctp/protocol.c | 1 + security/device_cgroup.c | 2 +- sound/core/init.c | 18 ++++----- sound/core/pcm_native.c | 8 ++++ sound/core/seq/seq_clientmgr.c | 6 +-- sound/drivers/opl3/opl3_voice.h | 2 +- sound/isa/sb/sb8.c | 4 ++ sound/pci/echoaudio/echoaudio.c | 5 +++ sound/soc/fsl/fsl_esai.c | 47 ++++++++++++++++++----- sound/soc/fsl/imx-sgtl5000.c | 1 + tools/lib/traceevent/event-parse.c | 2 +- tools/perf/builtin-top.c | 5 ++- tools/perf/tests/evsel-tp-sched.c | 1 + tools/power/x86/turbostat/turbostat.c | 3 ++ 118 files changed, 672 insertions(+), 264 deletions(-)
