This is the start of the stable review cycle for the 3.18.140 release. There are 86 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri 17 May 2019 09:04:45 AM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.140-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.140-rc1 Laurentiu Tudor <laurentiu.tudor@xxxxxxx> powerpc/booke64: set RI in default MSR Dan Carpenter <dan.carpenter@xxxxxxxxxx> drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl Dan Carpenter <dan.carpenter@xxxxxxxxxx> drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl Jarod Wilson <jarod@xxxxxxxxxx> bonding: fix arp_validate toggling in active-backup mode David Ahern <dsahern@xxxxxxxxx> ipv4: Fix raw socket lookup for local traffic Hangbin Liu <liuhangbin@xxxxxxxxx> vlan: disable SIOCSHWTSTAMP in container YueHaibing <yuehaibing@xxxxxxxxxx> packet: Fix error path in packet_init Christophe Leroy <christophe.leroy@xxxxxx> net: ucc_geth - fix Oops when changing number of buffers in the ring Tobin C. Harding <tobin@xxxxxxxxxx> bridge: Fix error path for kobject_init_and_add() Johan Hovold <johan@xxxxxxxxxx> USB: serial: fix unthrottle races Oliver Neukum <oneukum@xxxxxxxx> USB: serial: use variable for status Nigel Croxon <ncroxon@xxxxxxxxxx> Don't jump to compute_result state from check_result state Lucas Stach <l.stach@xxxxxxxxxxxxxx> gpu: ipu-v3: dp: fix CSC handling Po-Hsu Lin <po-hsu.lin@xxxxxxxxxxxxx> selftests/net: correct the return value for run_netsocktests Arnd Bergmann <arnd@xxxxxxxx> s390: ctcm: fix ctcm_new_device error return code Dan Williams <dan.j.williams@xxxxxxxxx> init: initialize jump labels before command line option parsing Rikard Falkeborn <rikard.falkeborn@xxxxxxxxx> tools lib traceevent: Fix missing equality check for strcmp Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390/3270: fix lockdep false positive on view->lock Peter Oberparleiter <oberpar@xxxxxxxxxxxxx> s390/dasd: Fix capacity calculation for large volumes Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys Sven Van Asbroeck <thesven73@xxxxxxxxx> iio: adc: xilinx: fix potential use-after-free on remove Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> platform/x86: sony-laptop: Fix unintentional fall-through Francesco Ruggeri <fruggeri@xxxxxxxxxx> netfilter: compat: initialize all fields in xt_init Ben Hutchings <ben@xxxxxxxxxxxxxxx> timer/debug: Change /proc/timer_stats from 0644 to 0600 Marcel Holtmann <marcel@xxxxxxxxxxxx> Bluetooth: Align minimum encryption key size for LE and BR/EDR connections Young Xiao <YangX92@xxxxxxxxxxx> Bluetooth: hidp: fix buffer overflow Andrew Vasquez <andrewv@xxxxxxxxxxx> scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines Prasad Sodagudi <psodagud@xxxxxxxxxxxxxx> genirq: Prevent use-after-free and work list corruption Joerg Roedel <jroedel@xxxxxxx> iommu/amd: Set exclusion range correctly Varun Prakash <varun@xxxxxxxxxxx> scsi: csiostor: fix missing data copy in csio_scsi_err_handler() Annaliese McDermond <nh6z@xxxxxxxx> ASoC: tlv320aic32x4: Fix Common Pins Daniel Mack <daniel@xxxxxxxxxx> ASoC: cs4270: Set auto-increment bit for register writes Rander Wang <rander.wang@xxxxxxxxxxxxxxx> ASoC:soc-pcm:fix a codec fixup issue in TDM case Jason Yan <yanaijie@xxxxxxxxxx> scsi: libsas: fix a race condition when smp task timeout Jacopo Mondi <jacopo+renesas@xxxxxxxxxx> media: v4l2: i2c: ov7670: Fix PLL bypass register values Jeremy Fertic <jeremyfertic@xxxxxxxxx> staging: iio: adt7316: fix the dac write calculation Jeremy Fertic <jeremyfertic@xxxxxxxxx> staging: iio: adt7316: fix the dac read calculation Jeremy Fertic <jeremyfertic@xxxxxxxxx> staging: iio: adt7316: allow adt751x to use internal vref for all dacs Malte Leip <malte@xxxxxxxx> usb: usbip: fix isoc packet num validation in get_pipe Arnd Bergmann <arnd@xxxxxxxx> ARM: iop: don't use using 64-bit DMA masks Arnd Bergmann <arnd@xxxxxxxx> ARM: orion: don't use using 64-bit DMA masks Guenter Roeck <linux@xxxxxxxxxxxx> xsysace: Fix error handling in ace_setup Mike Kravetz <mike.kravetz@xxxxxxxxxx> hugetlbfs: fix memory leak for resv_map Michael Kelley <mikelley@xxxxxxxxxxxxx> scsi: storvsc: Fix calculation of sub-channel count Al Viro <viro@xxxxxxxxxxxxxxxxxx> jffs2: fix use-after-free on symlink traversal Konstantin Khorenko <khorenko@xxxxxxxxxxxxx> bonding: show full hw address in sysfs for slave entries Arvind Sankar <niveditas98@xxxxxxxxx> igb: Fix WARN_ONCE on runtime suspend Geert Uytterhoeven <geert+renesas@xxxxxxxxx> rtc: sh: Fix invalid alarm warning for non-enabled alarm He, Bo <bo.he@xxxxxxxxx> HID: debug: fix race condition with between rdesc_show() and device removal Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: core: Fix bug caused by duplicate interface PM usage counter Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> USB: media: disable tlg2300 driver Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: core: Fix unterminated string returned by usb_string() Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: w1 ds2490: Fix bug caused by improper use of altsetting array Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: yurex: Fix protection fault after device removal Eric Dumazet <edumazet@xxxxxxxxxx> ipv6/flowlabel: wait rcu grace period before put_pid() Willem de Bruijn <willemb@xxxxxxxxxx> packet: validate msg_namelen in send directly Willem de Bruijn <willemb@xxxxxxxxxx> ipv6: invert flowlabel sharing check in process and user mode Shmulik Ladkani <shmulik@xxxxxxxxxxxxxxxx> ipv4: ip_do_fragment: Preserve skb_iif during fragmentation Changbin Du <changbin.du@xxxxxxxxx> kconfig/[mn]conf: handle backspace (^H) key raymond pang <raymondpangxd@xxxxxxxxx> libata: fix using DMA buffers on stack Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN Al Viro <viro@xxxxxxxxxxxxxxxxxx> ceph: fix use-after-free on symlink traversal Mukesh Ojha <mojha@xxxxxxxxxxxxxx> usb: u132-hcd: fix resource leak Kangjie Lu <kjlu@xxxxxxx> scsi: qla4xxx: fix a potential NULL pointer dereference Wen Yang <wen.yang99@xxxxxxxxxx> net: ibm: fix possible object reference leak Lukas Wunner <lukas@xxxxxxxxx> net: ks8851: Set initial carrier state to down Lukas Wunner <lukas@xxxxxxxxx> net: ks8851: Delay requesting IRQ until opened Lukas Wunner <lukas@xxxxxxxxx> net: ks8851: Reassert reset pin if chip ID check fails Lukas Wunner <lukas@xxxxxxxxx> net: ks8851: Dequeue RX packets explicitly Guido Kiener <guido@xxxxxxxxxxxxxxxxxx> usb: gadget: net2272: Fix net2272_dequeue() Guido Kiener <guido@xxxxxxxxxxxxxxxxxx> usb: gadget: net2280: Fix overrun of OUT messages Aditya Pakki <pakki001@xxxxxxx> qlcnic: Avoid potential NULL pointer dereference Vinod Koul <vkoul@xxxxxxxxxx> net: stmmac: move stmmac_check_ether_addr() to driver probe Hangbin Liu <liuhangbin@xxxxxxxxx> team: fix possible recursive locking when add slaves Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: add sanity checks in ipv4_link_failure() Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "block/loop: Use global lock for ioctl() operation." Florian Westphal <fw@xxxxxxxxx> netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. YueHaibing <yuehaibing@xxxxxxxxxx> fs/proc/proc_sysctl.c: Fix a NULL pointer dereference Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> slip: make slhc_free() silently accept an error pointer NeilBrown <neilb@xxxxxxxx> sunrpc: don't mark uninitialised items as VALID. Jeff Layton <jlayton@xxxxxxxxxx> ceph: ensure d_name stability in ceph_dentry_hash() Xie XiuQi <xiexiuqi@xxxxxxxxxx> sched/numa: Fix a possible divide-by-zero Peter Zijlstra <peterz@xxxxxxxxxxxxx> trace: Fix preempt_enable_no_resched() abuse Aurelien Jarno <aurelien@xxxxxxxxxxx> MIPS: scall64-o32: Fix indirect syscall number load ------------- Diffstat: Documentation/usb/power-management.txt | 14 ++++-- Makefile | 4 +- arch/arm/mach-iop13xx/setup.c | 8 +-- arch/arm/mach-iop13xx/tpmi.c | 10 ++-- arch/arm/plat-iop/adma.c | 6 +-- arch/arm/plat-orion/common.c | 4 +- arch/mips/kernel/scall64-o32.S | 2 +- arch/powerpc/include/asm/reg_booke.h | 2 +- arch/x86/kvm/trace.h | 4 +- drivers/ata/libata-zpodd.c | 34 +++++++++---- drivers/block/loop.c | 47 +++++++++--------- drivers/block/loop.h | 1 + drivers/block/xsysace.c | 2 + drivers/gpu/ipu-v3/ipu-dp.c | 12 +++-- drivers/hid/hid-debug.c | 5 ++ drivers/hid/hid-input.c | 4 ++ drivers/iio/adc/xilinx-xadc-core.c | 2 +- drivers/iommu/amd_iommu_init.c | 2 +- drivers/md/raid5.c | 19 ++------ drivers/media/i2c/ov7670.c | 16 +++--- drivers/media/usb/tlg2300/Kconfig | 1 + drivers/net/bonding/bond_options.c | 7 --- drivers/net/bonding/bond_sysfs_slave.c | 4 +- drivers/net/ethernet/freescale/ucc_geth_ethtool.c | 8 ++- drivers/net/ethernet/ibm/ehea/ehea_main.c | 1 + drivers/net/ethernet/intel/igb/e1000_defines.h | 2 + drivers/net/ethernet/intel/igb/igb_main.c | 57 +++------------------- drivers/net/ethernet/micrel/ks8851.c | 36 +++++++------- .../net/ethernet/qlogic/qlcnic/qlcnic_ethtool.c | 2 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 4 +- drivers/net/slip/slhc.c | 2 +- drivers/net/team/team.c | 6 +++ drivers/platform/x86/sony-laptop.c | 8 +-- drivers/rtc/rtc-sh.c | 2 +- drivers/s390/block/dasd_eckd.c | 6 +-- drivers/s390/char/con3270.c | 2 +- drivers/s390/char/fs3270.c | 3 +- drivers/s390/char/raw3270.c | 3 +- drivers/s390/char/raw3270.h | 4 +- drivers/s390/char/tty3270.c | 3 +- drivers/s390/net/ctcm_main.c | 1 + drivers/s390/scsi/zfcp_fc.c | 21 ++++++-- drivers/scsi/csiostor/csio_scsi.c | 5 +- drivers/scsi/libsas/sas_expander.c | 9 ++-- drivers/scsi/qla2xxx/qla_attr.c | 4 +- drivers/scsi/qla4xxx/ql4_os.c | 2 + drivers/scsi/storvsc_drv.c | 13 ++++- drivers/staging/iio/addac/adt7316.c | 22 ++++++--- drivers/usb/core/driver.c | 13 ----- drivers/usb/core/message.c | 4 +- drivers/usb/gadget/udc/net2272.c | 1 + drivers/usb/gadget/udc/net2280.c | 4 +- drivers/usb/host/u132-hcd.c | 3 ++ drivers/usb/misc/yurex.c | 1 + drivers/usb/serial/generic.c | 57 ++++++++++++++++------ drivers/usb/storage/realtek_cr.c | 13 ++--- drivers/usb/usbip/stub_rx.c | 18 ++----- drivers/usb/usbip/usbip_common.h | 7 +++ drivers/virt/fsl_hypervisor.c | 29 ++++++----- drivers/w1/masters/ds2490.c | 6 +-- fs/ceph/dir.c | 6 ++- fs/ceph/inode.c | 2 +- fs/hugetlbfs/inode.c | 20 +++++--- fs/jffs2/readinode.c | 5 -- fs/jffs2/super.c | 5 +- fs/nfs/super.c | 3 +- fs/proc/proc_sysctl.c | 6 ++- include/linux/usb.h | 2 - include/net/bluetooth/hci_core.h | 3 ++ init/main.c | 4 +- kernel/irq/manage.c | 4 +- kernel/sched/fair.c | 4 ++ kernel/time/timer_stats.c | 2 +- kernel/trace/ring_buffer.c | 2 +- net/8021q/vlan_dev.c | 4 +- net/bluetooth/hci_conn.c | 8 +++ net/bluetooth/hidp/sock.c | 1 + net/bridge/br_if.c | 13 +++-- net/bridge/netfilter/ebtables.c | 3 +- net/ipv4/ip_output.c | 1 + net/ipv4/raw.c | 4 +- net/ipv4/route.c | 32 ++++++++---- net/ipv6/ip6_flowlabel.c | 23 +++++---- net/netfilter/x_tables.c | 2 +- net/packet/af_packet.c | 48 ++++++++++++------ net/sunrpc/cache.c | 3 ++ scripts/kconfig/lxdialog/inputbox.c | 3 +- scripts/kconfig/nconf.c | 2 +- scripts/kconfig/nconf.gui.c | 3 +- sound/soc/codecs/cs4270.c | 1 + sound/soc/codecs/tlv320aic32x4.c | 2 + sound/soc/soc-pcm.c | 7 ++- tools/lib/traceevent/event-parse.c | 2 +- tools/testing/selftests/net/run_netsocktests | 2 +- 94 files changed, 474 insertions(+), 350 deletions(-)
