This is the start of the stable review cycle for the 4.19.40 release. There are 23 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon 06 May 2019 10:24:19 AM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.40-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.40-rc1 Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> ath10k: Drop WARN_ON()s that always trigger during system resume Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> ALSA: line6: use dynamic buffers Jim Mattson <jmattson@xxxxxxxxxx> KVM: nVMX: Fix size checks in vmx_set_nested_state Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Whitelist port 0x7e for pre-incrementing %rip Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net/tls: fix copy to fragments in reencrypt Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net/tls: don't copy negative amounts of data in reencrypt Michael Chan <michael.chan@xxxxxxxxxxxx> bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt(). Vasundhara Volam <vasundhara-v.volam@xxxxxxxxxxxx> bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() Michael Chan <michael.chan@xxxxxxxxxxxx> bnxt_en: Improve multicast address setup logic. Willem de Bruijn <willemb@xxxxxxxxxx> packet: validate msg_namelen in send directly Hangbin Liu <liuhangbin@xxxxxxxxx> selftests: fib_rule_tests: print the result and return 1 if any tests failed Xin Long <lucien.xin@xxxxxxxxx> sctp: avoid running the sctp state machine recursively David Howells <dhowells@xxxxxxxxxx> rxrpc: Fix net namespace cleanup Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx> net/tls: avoid NULL pointer deref on nskb->sk in fallback Andrew Lunn <andrew@xxxxxxx> net: phy: marvell: Fix buffer overrun with stats counters Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc Eric Dumazet <edumazet@xxxxxxxxxx> l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv() Eric Dumazet <edumazet@xxxxxxxxxx> l2ip: fix possible use-after-free Willem de Bruijn <willemb@xxxxxxxxxx> ipv6: invert flowlabel sharing check in process and user mode Eric Dumazet <edumazet@xxxxxxxxxx> ipv6/flowlabel: wait rcu grace period before put_pid() Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fix races in ip6_dst_destroy() Martin KaFai Lau <kafai@xxxxxx> ipv6: A few fixes on dereferencing rt->from Shmulik Ladkani <shmulik@xxxxxxxxxxxxxxxx> ipv4: ip_do_fragment: Preserve skb_iif during fragmentation ------------- Diffstat: Makefile | 4 +- arch/x86/include/uapi/asm/kvm.h | 1 + arch/x86/kvm/vmx.c | 4 +- arch/x86/kvm/x86.c | 21 +++++++++- drivers/net/dsa/bcm_sf2_cfp.c | 6 +++ drivers/net/ethernet/broadcom/bnxt/bnxt.c | 19 ++++++--- drivers/net/phy/marvell.c | 6 ++- drivers/net/wireless/ath/ath10k/mac.c | 2 +- include/net/sctp/command.h | 1 - net/ipv4/ip_output.c | 1 + net/ipv6/ip6_fib.c | 4 +- net/ipv6/ip6_flowlabel.c | 22 ++++++---- net/ipv6/route.c | 47 +++++++++------------ net/l2tp/l2tp_core.c | 10 ++--- net/packet/af_packet.c | 24 ++++++----- net/rxrpc/call_object.c | 32 +++++++------- net/sctp/sm_sideeffect.c | 29 ------------- net/sctp/sm_statefuns.c | 35 ++++++++++++---- net/tls/tls_device.c | 39 ++++++++++++----- net/tls/tls_device_fallback.c | 3 +- sound/usb/line6/driver.c | 60 ++++++++++++++++----------- sound/usb/line6/podhd.c | 21 ++++++---- sound/usb/line6/toneport.c | 24 ++++++++--- tools/testing/selftests/net/fib_rule_tests.sh | 6 +++ 24 files changed, 248 insertions(+), 173 deletions(-)