This is the start of the stable review cycle for the 4.19.59 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun 14 Jul 2019 12:14:36 PM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.59-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.59-rc1 Arnd Bergmann <arnd@xxxxxxxx> staging: rtl8712: reduce stack usage, again Dave Stevenson <dave.stevenson@xxxxxxxxxxxxxxx> staging: bcm2835-camera: Handle empty EOS buffers whilst streaming Dave Stevenson <dave.stevenson@xxxxxxxxxxxxxxx> staging: bcm2835-camera: Remove check of the number of buffers supplied Dave Stevenson <dave.stevenson@xxxxxxxxxxxxxxx> staging: bcm2835-camera: Ensure all buffers are returned on disable Dave Stevenson <dave.stevenson@xxxxxxxxxxxxxxx> staging: bcm2835-camera: Replace spinlock protecting context_map with mutex Colin Ian King <colin.king@xxxxxxxxxxxxx> staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work Sean Young <sean@xxxxxxxx> MIPS: Remove superfluous check for __linux__ Vishnu DASA <vdasa@xxxxxxxxxx> VMCI: Fix integer overflow in VMCI handle arrays Christian Lamparter <chunkeey@xxxxxxxxx> carl9170: fix misuse of device driver API Todd Kjos <tkjos@xxxxxxxxxxx> binder: fix memory leak in error path Nick Desaulniers <ndesaulniers@xxxxxxxxxx> lkdtm: support llvm-objcopy Sebastian Parschauer <s.parschauer@xxxxxx> HID: Add another Primax PIXART OEM mouse quirk Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: amplc_pci230: fix null pointer deref on interrupt Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: dt282x: fix a null pointer deref on interrupt Nikolaus Voss <nikolaus.voss@xxxxxxxxxxxxxxxxxxxxx> drivers/usb/typec/tps6598x.c: fix 4CC cmd write Nikolaus Voss <nikolaus.voss@xxxxxxxxxxxxxxxxxxxxx> drivers/usb/typec/tps6598x.c: fix portinfo width Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> usb: renesas_usbhs: add a workaround for a race condition of workqueue Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx> usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() Kiruthika Varadarajan <Kiruthika.Varadarajan@xxxxxxxxxx> usb: gadget: ether: Fix race between gether_disconnect and rx_submit Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> p54usb: Fix race between disconnect and firmware loading Oliver Barta <o.barta89@xxxxxxxxx> Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" Jörgen Storvist <jorgen.storvist@xxxxxxxxx> USB: serial: option: add support for GosunCn ME3630 RNDIS mode Andreas Fritiofson <andreas.fritiofson@xxxxxxxx> USB: serial: ftdi_sio: add ID for isodebug v1 Brian Norris <briannorris@xxxxxxxxxxxx> mwifiex: Don't abort on small, spec-compliant vendor IEs Takashi Iwai <tiwai@xxxxxxx> mwifiex: Abort at too short BSS descriptor element Andy Lutomirski <luto@xxxxxxxxxx> Documentation/admin: Remove the vsyscall=native documentation Tim Chen <tim.c.chen@xxxxxxxxxxxxxxx> Documentation: Add section about CPU vulnerabilities for Spectre Dianzhang Chen <dianzhangchen0@xxxxxxxxx> x86/tls: Fix possible spectre-v1 in do_get_thread_area() Dianzhang Chen <dianzhangchen0@xxxxxxxxx> x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() John Garry <john.garry@xxxxxxxxxx> perf pmu: Fix uncore PMU alias list for ARM64 Douglas Anderson <dianders@xxxxxxxxxxxx> block, bfq: NULL out the bic when it's no longer valid Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Headphone Mic can't record after S3 Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Fix parse of UAC2 Extension Units Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx> media: stv0297: fix frequency range limit Steven J. Magnani <steve.magnani@xxxxxxxxxxxxxxx> udf: Fix incorrect final NOT_ALLOCATED (hole) extent length Hongjie Fang <hongjiefang@xxxxxxxxxxxx> fscrypt: don't set policy for a dead directory Lin Yi <teroincn@xxxxxxx> net :sunrpc :clnt :Fix xps refcount imbalance on the error path Benjamin Coddington <bcodding@xxxxxxxxxx> NFS4: Only set creation opendata if O_CREAT Rasmus Villemoes <rasmus.villemoes@xxxxxxxxx> net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() yangerkun <yangerkun@xxxxxxxxxx> quota: fix a problem about transfer quota Nilesh Javali <njavali@xxxxxxxxxxx> scsi: qedi: Check targetname while finding boot target information Colin Ian King <colin.king@xxxxxxxxxxxxx> net: lio_core: fix potential sign-extension overflow on large shift Xin Long <lucien.xin@xxxxxxxxx> ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL Dan Carpenter <dan.carpenter@xxxxxxxxxx> drm: return -EFAULT if copy_to_user() fails Mauro S. M. Rodrigues <maurosr@xxxxxxxxxxxxxxxxxx> bnx2x: Check if transceiver implements DDM before access Mariusz Tkaczyk <mariusz.tkaczyk@xxxxxxxxx> md: fix for divide error in status_resync Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> mmc: core: complete HS400 before checking status Reinhard Speyerer <rspmn@xxxxxxxx> qmi_wwan: extend permitted QMAP mux_id value range Reinhard Speyerer <rspmn@xxxxxxxx> qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode Reinhard Speyerer <rspmn@xxxxxxxx> qmi_wwan: add support for QMAP padding in the RX path Alexei Starovoitov <ast@xxxxxxxxxx> bpf, x64: fix stack layout of JITed bpf code Toshiaki Makita <toshiaki.makita1@xxxxxxxxx> bpf, devmap: Add missing RCU read lock on flush Toshiaki Makita <toshiaki.makita1@xxxxxxxxx> bpf, devmap: Add missing bulk queue free Toshiaki Makita <toshiaki.makita1@xxxxxxxxx> bpf, devmap: Fix premature entry free on destroying map Naftali Goldstein <naftali.goldstein@xxxxxxxxx> mac80211: do not start any work during reconfigure flow Yibo Zhao <yiboz@xxxxxxxxxxxxxx> mac80211: only warn once on chanctx_conf being NULL Bartosz Golaszewski <bgolaszewski@xxxxxxxxxxxx> ARM: davinci: da8xx: specify dma_coherent_mask for lcdc Bartosz Golaszewski <bgolaszewski@xxxxxxxxxxxx> ARM: davinci: da850-evm: call regulator_has_full_constraints() Ido Schimmel <idosch@xxxxxxxxxxxx> mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed Dave Martin <Dave.Martin@xxxxxxx> KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy Anson Huang <anson.huang@xxxxxxx> Input: imx_keypad - make sure keyboard can always wake up system Nick Hu <nickhu@xxxxxxxxxxxxx> riscv: Fix udelay in RV32. Qian Cai <cai@xxxxxx> drm/vmwgfx: fix a warning due to missing dma_parms Thomas Hellstrom <thellstrom@xxxxxxxxxx> drm/vmwgfx: Honor the sg list segment size limitation Heiko Carstens <heiko.carstens@xxxxxxxxxx> s390/boot: disable address-of-packed-member warning Teresa Remmet <t.remmet@xxxxxxxxx> ARM: dts: am335x phytec boards: Fix cd-gpios active level Thomas Falcon <tlfalcon@xxxxxxxxxxxxx> ibmvnic: Fix unchecked return codes of memory allocations Thomas Falcon <tlfalcon@xxxxxxxxxxxxx> ibmvnic: Refresh device multicast list after reset Thomas Falcon <tlfalcon@xxxxxxxxxxxxx> ibmvnic: Do not close unopened driver during reset Michael Schmitz <schmitzmic@xxxxxxxxx> net: phy: rename Asix Electronics PHY driver YueHaibing <yuehaibing@xxxxxxxxxx> can: af_can: Fix error path of can_init() Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx> can: m_can: implement errata "Needless activation of MRAF irq" Sean Nyekjaer <sean@xxxxxxxxxx> can: mcp251x: add support for mcp25625 Sean Nyekjaer <sean@xxxxxxxxxx> dt-bindings: can: mcp251x: add mcp25625 support Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx> soundwire: intel: set dai min and max channels correctly Takashi Iwai <tiwai@xxxxxxx> mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() Jia-Ju Bai <baijiaju1990@xxxxxxxxx> iwlwifi: Fix double-free problems in iwl_req_fw_callback() Takashi Iwai <tiwai@xxxxxxx> mwifiex: Fix possible buffer overflows at parsing bss descriptor Pradeep Kumar Chitrapu <pradeepc@xxxxxxxxxxxxxx> mac80211: free peer keys before vif down in mesh Thomas Pedersen <thomas@xxxxxxxx> mac80211: mesh: fix RCU warning Melissa Wen <melissa.srw@xxxxxxxxx> staging:iio:ad7150: fix threshold mode config bit Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx> soundwire: stream: fix out of boundary access on port properties John Fastabend <john.fastabend@xxxxxxxxx> bpf: sockmap, fix use after free from sleep in psock backlog workqueue John Crispin <john@xxxxxxxxxxx> mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() Matteo Croce <mcroce@xxxxxxxxxx> samples, bpf: suppress compiler warning Chang-Hsien Tsai <luke.tw@xxxxxxxxx> samples, bpf: fix to change the buffer size for read() Aaron Ma <aaron.ma@xxxxxxxxxxxxx> Input: elantech - enable middle button support on 2 ThinkPads Florian Fainelli <f.fainelli@xxxxxxxxx> soc: bcm: brcmstb: biuctrl: Register writes require a barrier Florian Fainelli <f.fainelli@xxxxxxxxx> soc: brcmstb: Fix error path for unsupported CPUs Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - rename alternative AEAD algos. Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - fix hash on SEC1. ------------- Diffstat: Documentation/ABI/testing/sysfs-class-net-qmi | 4 +- Documentation/admin-guide/hw-vuln/index.rst | 1 + Documentation/admin-guide/hw-vuln/spectre.rst | 697 +++++++++++++++++++++ Documentation/admin-guide/kernel-parameters.txt | 6 - .../bindings/net/can/microchip,mcp251x.txt | 1 + Documentation/userspace-api/spec_ctrl.rst | 2 + Makefile | 4 +- arch/arm/boot/dts/am335x-pcm-953.dtsi | 2 +- arch/arm/boot/dts/am335x-wega.dtsi | 2 +- arch/arm/mach-davinci/board-da850-evm.c | 2 + arch/arm/mach-davinci/devices-da8xx.c | 3 + arch/mips/include/uapi/asm/sgidefs.h | 8 - arch/riscv/lib/delay.c | 2 +- arch/s390/Makefile | 1 + arch/x86/kernel/ptrace.c | 5 +- arch/x86/kernel/tls.c | 9 +- arch/x86/net/bpf_jit_comp.c | 74 +-- block/bfq-iosched.c | 1 + drivers/android/binder.c | 4 +- drivers/crypto/talitos.c | 85 +-- drivers/gpu/drm/drm_bufs.c | 5 +- drivers/gpu/drm/drm_ioc32.c | 5 +- drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 3 + drivers/gpu/drm/vmwgfx/vmwgfx_ttm_buffer.c | 10 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-quirks.c | 1 + drivers/input/keyboard/imx_keypad.c | 18 +- drivers/input/mouse/elantech.c | 2 + drivers/md/md.c | 36 +- drivers/media/dvb-frontends/stv0297.c | 2 +- drivers/misc/lkdtm/Makefile | 3 +- drivers/misc/vmw_vmci/vmci_context.c | 80 +-- drivers/misc/vmw_vmci/vmci_handle_array.c | 38 +- drivers/misc/vmw_vmci/vmci_handle_array.h | 29 +- drivers/mmc/core/mmc.c | 6 +- drivers/net/can/m_can/m_can.c | 21 + drivers/net/can/spi/Kconfig | 5 +- drivers/net/can/spi/mcp251x.c | 25 +- drivers/net/dsa/mv88e6xxx/global1_vtu.c | 2 +- drivers/net/ethernet/8390/Kconfig | 2 +- .../net/ethernet/broadcom/bnx2x/bnx2x_ethtool.c | 3 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 1 + drivers/net/ethernet/cavium/liquidio/lio_core.c | 2 +- drivers/net/ethernet/ibm/ibmvnic.c | 19 +- drivers/net/ethernet/mellanox/mlxsw/reg.h | 2 +- drivers/net/phy/Kconfig | 2 +- drivers/net/phy/Makefile | 2 +- drivers/net/phy/{asix.c => ax88796b.c} | 0 drivers/net/usb/qmi_wwan.c | 27 +- drivers/net/wireless/ath/carl9170/usb.c | 39 +- drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 1 - drivers/net/wireless/intersil/p54/p54usb.c | 43 +- drivers/net/wireless/marvell/mwifiex/fw.h | 12 +- drivers/net/wireless/marvell/mwifiex/ie.c | 47 +- drivers/net/wireless/marvell/mwifiex/scan.c | 31 +- drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 4 +- drivers/net/wireless/marvell/mwifiex/wmm.c | 2 +- drivers/scsi/qedi/qedi_main.c | 3 + drivers/soc/bcm/brcmstb/biuctrl.c | 6 +- drivers/soundwire/intel.c | 4 +- drivers/soundwire/stream.c | 4 +- drivers/staging/comedi/drivers/amplc_pci230.c | 3 +- drivers/staging/comedi/drivers/dt282x.c | 3 +- drivers/staging/fsl-dpaa2/ethsw/ethsw.c | 1 + drivers/staging/iio/cdc/ad7150.c | 19 +- drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 157 +++-- .../vc04_services/bcm2835-camera/bcm2835-camera.c | 43 +- .../vc04_services/bcm2835-camera/mmal-vchiq.c | 32 +- .../vc04_services/bcm2835-camera/mmal-vchiq.h | 3 + drivers/tty/serial/8250/8250_port.c | 3 +- drivers/usb/dwc2/core.c | 2 +- drivers/usb/gadget/function/u_ether.c | 6 +- drivers/usb/renesas_usbhs/fifo.c | 34 +- drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 6 + drivers/usb/serial/option.c | 1 + drivers/usb/typec/tps6598x.c | 6 +- fs/crypto/policy.c | 2 + fs/nfs/nfs4proc.c | 20 +- fs/quota/dquot.c | 4 +- fs/udf/inode.c | 93 ++- include/linux/vmw_vmci_defs.h | 11 +- include/net/ip6_tunnel.h | 9 +- include/uapi/linux/usb/audio.h | 37 ++ kernel/bpf/devmap.c | 9 +- net/can/af_can.c | 24 +- net/core/skbuff.c | 1 + net/mac80211/ieee80211_i.h | 9 +- net/mac80211/mesh.c | 6 +- net/mac80211/util.c | 4 + net/sunrpc/clnt.c | 1 + net/wireless/util.c | 2 +- samples/bpf/bpf_load.c | 2 +- samples/bpf/task_fd_query_user.c | 2 +- sound/pci/hda/patch_realtek.c | 2 +- sound/usb/mixer.c | 16 +- tools/perf/util/pmu.c | 28 +- virt/kvm/arm/vgic/vgic-its.c | 1 + 98 files changed, 1532 insertions(+), 532 deletions(-)
