This is the start of the stable review cycle for the 4.4.183 release. There are 84 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat 22 Jun 2019 05:42:15 PM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.183-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.183-rc1 Alexander Lochmann <alexander.lochmann@xxxxxxxxxxxxxx> Abort file_remove_privs() for non-reg. files Andrea Arcangeli <aarcange@xxxxxxxxxx> coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "crypto: crypto4xx - properly set IV after de- and encrypt" Jason Yan <yanaijie@xxxxxxxxxx> scsi: libsas: delete sas port if expander discover failed Varun Prakash <varun@xxxxxxxxxxx> scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list Randy Dunlap <rdunlap@xxxxxxxxxxxxx> ia64: fix build errors by exporting paddr_to_nid() Sahitya Tummala <stummala@xxxxxxxxxxxxxx> configfs: Fix use-after-free when accessing sd->s_dentry Yingjoe Chen <yingjoe.chen@xxxxxxxxxxxx> i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr Kees Cook <keescook@xxxxxxxxxxxx> net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() Randy Dunlap <rdunlap@xxxxxxxxxxxxx> gpio: fix gpio-adp5588 build errors Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/ring_buffer: Add ordering to rb->nest increment Yabin Cui <yabinc@xxxxxxxxxx> perf/ring_buffer: Fix exposing a temporarily decreased data_head Frank van der Linden <fllinden@xxxxxxxxxx> x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor Dan Carpenter <dan.carpenter@xxxxxxxxxx> mISDN: make sure device name is NUL terminated John Paul Adrian Glaubitz <glaubitz@xxxxxxxxxxxxxxxxxxx> sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg Eric Dumazet <edumazet@xxxxxxxxxx> neigh: fix use-after-free read in pneigh_get_next Jeremy Sowden <jeremy@xxxxxxxxxx> lapb: fixed leak of control-blocks. Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero Ivan Vecera <ivecera@xxxxxxxxxx> be2net: Fix number of Rx queues used for flow hashing Eric Dumazet <edumazet@xxxxxxxxxx> ax25: fix inconsistent lock state in ax25_destroy_timer Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: option: add Telit 0x1260 and 0x1261 compositions Jörgen Storvist <jorgen.storvist@xxxxxxxxx> USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode Chris Packham <chris.packham@xxxxxxxxxxxxxxxxxxx> USB: serial: pl2303: add Allied Telesis VT-Kit3 Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> USB: usb-storage: Add new ID to ums-realtek Marco Zatta <marco@xxxxxxxx> USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. Murray McAllister <murray.mcallister@xxxxxxxxx> drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() Murray McAllister <murray.mcallister@xxxxxxxxx> drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read Christian Borntraeger <borntraeger@xxxxxxxxxx> KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86/pmu: do not mask the value that is written to fixed PMUs Bernd Eckstein <3erndeckstein@xxxxxxxxx> usbnet: ipheth: fix racing condition Colin Ian King <colin.king@xxxxxxxxxxxxx> scsi: bnx2fc: fix incorrect cast to u64 on shift operation James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: add check for loss of ndlp when sending RRQ Young Xiao <YangX92@xxxxxxxxxxx> Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var S.j. Wang <shengjiu.wang@xxxxxxx> ASoC: cs42xx8: Add regcache mask dirty Tejun Heo <tj@xxxxxxxxxx> cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() Coly Li <colyli@xxxxxxx> bcache: fix stack corruption by PRECEDING_KEY() Russell King <rmk+kernel@xxxxxxxxxxxxxxx> i2c: acorn: fix i2c warning Jann Horn <jannh@xxxxxxxxxx> ptrace: restore smp_rmb() in __ptrace_may_access() Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO Wengang Wang <wen.gang.wang@xxxxxxxxxx> fs/ocfs2: fix race in ocfs2_dentry_attach_lock() Shakeel Butt <shakeelb@xxxxxxxxxx> mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node Hans de Goede <hdegoede@xxxxxxxxxx> libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Cover unsubscribe_port() in list_mutex Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" ZhangXiaoxu <zhangxiaoxu5@xxxxxxxxxx> futex: Fix futex lock the wrong page Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> ARM: exynos: Fix undefined instruction during Exynos5422 resume Phong Hoang <phong.hoang.wz@xxxxxxxxxxx> pwm: Fix deadlock warning when removing PWM device Krzysztof Kozlowski <krzk@xxxxxxxxxx> ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa Christoph Vogtländer <c.vogtlaender@xxxxxxxxxxxxxxxxxxxxxxxxx> pwm: tiehrpwm: Update shadow register for disabling PWMs Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> dmaengine: idma64: Use actual device for DMA transfers Tony Lindgren <tony@xxxxxxxxxxx> gpio: gpio-omap: add check for off wake capable gpios Kangjie Lu <kjlu@xxxxxxx> PCI: xilinx: Check for __get_free_pages() failure Kangjie Lu <kjlu@xxxxxxx> video: imsttfb: fix potential NULL pointer dereferences Kangjie Lu <kjlu@xxxxxxx> video: hgafb: fix potential NULL pointer dereference Kangjie Lu <kjlu@xxxxxxx> PCI: rcar: Fix a potential NULL pointer dereference Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx> PCI: rpadlpar: Fix leaked device_node references in add/remove paths Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA Andrey Smirnov <andrew.smirnov@xxxxxxxxx> ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA Douglas Anderson <dianders@xxxxxxxxxxxx> clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 Nathan Chancellor <natechancellor@xxxxxxxxx> soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher Enrico Granata <egranata@xxxxxxxxxxxx> platform/chrome: cros_ec_proto: check for NULL transfer function Wenwen Wang <wang6495@xxxxxxx> x86/PCI: Fix PCI IRQ routing table memory leak J. Bruce Fields <bfields@xxxxxxxxxx> nfsd: allow fh_want_write to be called twice Kirill Smelkov <kirr@xxxxxxxxxx> fuse: retrieve: cap requested size to negotiated max_write Jorge Ramirez-Ortiz <jorge.ramirez-ortiz@xxxxxxxxxx> nvmem: core: fix read buffer in place Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Register irq handler after the chip initialization Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx> iommu/vt-d: Set intel_iommu_gfx_mapped correctly Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to do sanity check on valid block count of segment Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to avoid panic in do_recover_data() Miroslav Lichvar <mlichvar@xxxxxxxxxx> ntp: Allow TAI-UTC offset to be set to zero Matt Redfearn <matt.redfearn@xxxxxxxxxx> drm/bridge: adv7511: Fix low refresh rate selection Stephane Eranian <eranian@xxxxxxxxxx> perf/x86/intel: Allow PEBS multi-entry in watermark mode Tony Lindgren <tony@xxxxxxxxxxx> mfd: twl6040: Fix device init errors for ACCCTL register Binbin Wu <binbin.wu@xxxxxxxxx> mfd: intel-lpss: Set the device in reset state when init Cyrill Gorcunov <gorcunov@xxxxxxxxx> kernel/sys.c: prctl: fix false positive in validate_prctl_map() Yue Hu <huyue2@xxxxxxxxxx> mm/cma_debug.c: fix the break condition in cma_maxchunk_get() Yue Hu <huyue2@xxxxxxxxxx> mm/cma.c: fix crash on CMA allocation if bitmap allocation fails Mike Kravetz <mike.kravetz@xxxxxxxxxx> hugetlbfs: on restore reserve error path retain subpool reservation Li Rongqing <lirongqing@xxxxxxxxx> ipc: prevent lockup on alloc_msg and free_msg Christian Brauner <christian@xxxxxxxxxx> sysctl: return -EINVAL if val violates minmax Hou Tao <houtao1@xxxxxxxxxx> fs/fat/file.c: issue flush after the writeback of FAT ------------- Diffstat: Makefile | 4 +-- arch/arm/boot/dts/exynos5420-arndale-octa.dts | 2 ++ arch/arm/boot/dts/imx6qdl.dtsi | 2 +- arch/arm/boot/dts/imx6sl.dtsi | 2 +- arch/arm/boot/dts/imx6sx.dtsi | 2 +- arch/arm/mach-exynos/suspend.c | 19 ++++++++++++++ arch/ia64/mm/numa.c | 1 + arch/powerpc/include/asm/kvm_host.h | 1 + arch/powerpc/kvm/book3s.c | 1 + arch/powerpc/kvm/book3s_rtas.c | 14 +++++------ arch/s390/kvm/kvm-s390.c | 35 +++++++++++++++----------- arch/x86/kernel/cpu/amd.c | 7 ++++-- arch/x86/kernel/cpu/perf_event_intel.c | 2 +- arch/x86/kvm/pmu_intel.c | 13 ++++++---- arch/x86/pci/irq.c | 10 ++++++-- drivers/android/binder.c | 6 +++++ drivers/ata/libata-core.c | 9 ++++--- drivers/clk/rockchip/clk-rk3288.c | 11 ++++++++ drivers/crypto/amcc/crypto4xx_alg.c | 3 +-- drivers/crypto/amcc/crypto4xx_core.c | 9 ------- drivers/dma/idma64.c | 6 +++-- drivers/dma/idma64.h | 2 ++ drivers/gpio/Kconfig | 1 + drivers/gpio/gpio-omap.c | 25 ++++++++++++------ drivers/gpu/drm/i2c/adv7511.c | 6 ++--- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 7 +++++- drivers/i2c/busses/i2c-acorn.c | 1 + drivers/i2c/i2c-dev.c | 1 + drivers/infiniband/hw/mlx4/main.c | 3 +++ drivers/iommu/intel-iommu.c | 7 +++--- drivers/isdn/mISDN/socket.c | 5 ++-- drivers/md/bcache/bset.c | 16 +++++++++--- drivers/md/bcache/bset.h | 34 ++++++++++++++----------- drivers/mfd/intel-lpss.c | 3 +++ drivers/mfd/twl6040.c | 13 +++++++++- drivers/misc/kgdbts.c | 4 +-- drivers/net/ethernet/dec/tulip/de4x5.c | 1 - drivers/net/ethernet/emulex/benet/be_ethtool.c | 2 +- drivers/net/ethernet/renesas/sh_eth.c | 4 +++ drivers/net/usb/ipheth.c | 3 ++- drivers/nvmem/core.c | 15 +++++++---- drivers/pci/host/pcie-rcar.c | 4 +++ drivers/pci/host/pcie-xilinx.c | 12 +++++++-- drivers/pci/hotplug/rpadlpar_core.c | 4 +++ drivers/platform/chrome/cros_ec_proto.c | 11 ++++++++ drivers/pwm/core.c | 10 ++++---- drivers/pwm/pwm-tiehrpwm.c | 2 ++ drivers/pwm/sysfs.c | 14 +---------- drivers/scsi/bnx2fc/bnx2fc_hwi.c | 2 +- drivers/scsi/cxgbi/libcxgbi.c | 4 +++ drivers/scsi/libsas/sas_expander.c | 2 ++ drivers/scsi/lpfc/lpfc_els.c | 5 +++- drivers/soc/mediatek/mtk-pmic-wrap.c | 2 +- drivers/spi/spi-pxa2xx.c | 7 +----- drivers/tty/serial/8250/8250_dw.c | 4 +-- drivers/tty/serial/sunhv.c | 2 +- drivers/usb/core/quirks.c | 3 +++ drivers/usb/serial/option.c | 6 +++++ drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 3 +++ drivers/usb/storage/unusual_realtek.h | 5 ++++ drivers/video/fbdev/hgafb.c | 2 ++ drivers/video/fbdev/imsttfb.c | 5 ++++ fs/configfs/dir.c | 14 +++++------ fs/f2fs/recovery.c | 10 +++++++- fs/f2fs/segment.h | 3 +-- fs/fat/file.c | 11 +++++--- fs/fuse/dev.c | 2 +- fs/inode.c | 9 +++++-- fs/nfsd/vfs.h | 5 +++- fs/ocfs2/dcache.c | 12 +++++++++ fs/proc/task_mmu.c | 18 +++++++++++++ fs/userfaultfd.c | 7 ++++++ include/linux/cgroup.h | 10 ++++++-- include/linux/mm.h | 21 ++++++++++++++++ include/linux/pwm.h | 5 ---- include/net/bluetooth/hci_core.h | 3 --- ipc/mqueue.c | 10 ++++++-- ipc/msgutil.c | 6 +++++ kernel/cred.c | 9 +++++++ kernel/events/ring_buffer.c | 33 +++++++++++++++++++++--- kernel/futex.c | 4 +-- kernel/ptrace.c | 20 +++++++++++++-- kernel/sys.c | 2 +- kernel/sysctl.c | 6 +++-- kernel/time/ntp.c | 2 +- mm/cma.c | 4 ++- mm/cma_debug.c | 2 +- mm/hugetlb.c | 21 ++++++++++++---- mm/list_lru.c | 2 +- mm/mmap.c | 7 +++++- net/ax25/ax25_route.c | 2 ++ net/bluetooth/hci_conn.c | 8 ------ net/core/neighbour.c | 7 ++++++ net/ipv6/ip6_flowlabel.c | 7 +++--- net/lapb/lapb_iface.c | 1 + sound/core/seq/seq_ports.c | 2 +- sound/pci/hda/hda_intel.c | 6 ++--- sound/soc/codecs/cs42xx8.c | 1 + 99 files changed, 518 insertions(+), 196 deletions(-)