This is the start of the stable review cycle for the 4.9.194 release. There are 74 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat 21 Sep 2019 09:44:25 PM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.194-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.194-rc1 Vineet Gupta <Vineet.Gupta1@xxxxxxxxxxxx> ARC: export "abort" for modules Sean Young <sean@xxxxxxxx> media: technisat-usb2: break out of loop at end of buffer Jann Horn <jannh@xxxxxxxxxx> floppy: fix usercopy direction Joerg Roedel <jroedel@xxxxxxx> iommu/amd: Fix race in increase_address_space() Hillf Danton <hdanton@xxxxxxxx> keys: Fix missing null pointer check in request_key_auth_describe() Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation Wenwen Wang <wenwen@xxxxxxxxxx> dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() Wenwen Wang <wenwen@xxxxxxxxxx> dmaengine: ti: dma-crossbar: Fix a memory leak bug Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> net: seeq: Fix the function used to release some memory in an error handling path Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx> tools/power turbostat: fix buffer overrun Kim Phillips <kim.phillips@xxxxxxx> perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops Josh Hunt <johunt@xxxxxxxxxx> perf/x86/intel: Restrict period on Nehalem Takashi Iwai <tiwai@xxxxxxx> sky2: Disable MSI on yet another ASUS boards (P6Xxxx) zhaoyang <huangzhaoyang@xxxxxxxxx> ARM: 8901/1: add a criteria for pfn_valid of arm Dan Carpenter <dan.carpenter@xxxxxxxxxx> cifs: Use kzfree() to zero out the password Ronnie Sahlberg <lsahlber@xxxxxxxxxx> cifs: set domainName when a domain-key is used in multiuser Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv2: Fix write regression Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv2: Fix eof handling Thomas Jarosch <thomas.jarosch@xxxxxxxxxxxxx> netfilter: nf_conntrack_ftp: Fix debug output Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines Prashant Malani <pmalani@xxxxxxxxxxxx> r8152: Set memory to all 0xFFs on failed reg reads Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Only read OGM2 tvlv_len after buffer len check Doug Berger <opendmb@xxxxxxxxx> ARM: 8874/1: mm: only adjust sections of valid mm structures Wenwen Wang <wenwen@xxxxxxxxxx> qed: Add cleanup in qed_slowpath_start() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> Kconfig: Fix the reference to the IDT77105 Phy driver in the description of ATM_NICSTAR_USE_IDT77105 Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4: Fix return values for nfs4_file_open() Ilya Leoshkevich <iii@xxxxxxxxxxxxx> s390/bpf: use 32-bit index for tail calls Tony Lindgren <tony@xxxxxxxxxxx> ARM: OMAP2+: Fix omap4 errata warning on other SoCs Ilya Leoshkevich <iii@xxxxxxxxxxxxx> s390/bpf: fix lcgr instruction encoding Tony Lindgren <tony@xxxxxxxxxxx> ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss Wen Huang <huangwenabc@xxxxxxxxx> mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings Razvan Stefanescu <razvan.stefanescu@xxxxxxxxxxxxx> tty/serial: atmel: reschedule TX after RX was started Chunyan Zhang <chunyan.zhang@xxxxxxxxxx> serial: sprd: correct the wrong sequence of arguments Matt Delco <delco@xxxxxxxxxxxx> KVM: coalesced_mmio: add bounds checking Dongli Zhang <dongli.zhang@xxxxxxxxxx> xen-netfront: do not assume sk_buff_head list is empty in error handling Corey Minyard <cminyard@xxxxxxxxxx> x86/boot: Add missing bootparam that breaks boot on some platforms Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxx> powerpc/mm/radix: Use the right page size for vmemmap mapping Sean Young <sean@xxxxxxxx> media: tm6000: double free if usb disconnect while streaming Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: usbcore: Fix slab-out-of-bounds bug during device reset Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> x86/build: Add -Wnoaddress-of-packed-member to REALMODE_CFLAGS, to silence GCC9 build warning Jean Delvare <jdelvare@xxxxxxx> nvmem: Use the same permissions for eeprom as for nvmem Nishka Dasgupta <nishkadg.linux@xxxxxxxxx> drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking. Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - Do not modify req->cryptlen on decryption. Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - fix ECB algs ivsize Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - check data blocksize in ablkcipher. Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - fix CTR alg blocksize Christophe Leroy <christophe.leroy@xxxxxx> crypto: talitos - check AES key size Muchun Song <smuchun@xxxxxxxxx> driver core: Fix use-after-free and double free on glue directory Xiaolei Li <xiaolei.li@xxxxxxxxxxxx> mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue Douglas Anderson <dianders@xxxxxxxxxxxx> clk: rockchip: Don't yell about bad mmc phases when getting Paul Burton <paul.burton@xxxxxxxx> MIPS: VDSO: Use same -m%-float cflag as the kernel proper Paul Burton <paul.burton@xxxxxxxx> MIPS: VDSO: Prevent use of smp_processor_id() Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: nVMX: handle page fault in vmread Fuqian Huang <huangfq.daxian@xxxxxxxxx> KVM: x86: work around leak of uninitialized stack contents Thomas Huth <thuth@xxxxxxxxxx> KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl Yunfeng Ye <yeyunfeng@xxxxxxxxxx> genirq: Prevent NULL pointer dereference in resend_irqs() Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix assertion failure during fsync and use of stale transaction Kent Gibson <warthog618@xxxxxxxxx> gpio: fix line flag validation in lineevent_create Kent Gibson <warthog618@xxxxxxxxx> gpio: fix line flag validation in linehandle_create Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur" Yang Yingliang <yangyingliang@xxxxxxxxxx> tun: fix use-after-free when register netdev failed Xin Long <lucien.xin@xxxxxxxxx> tipc: add NULL pointer check before calling kfree_rcu Neal Cardwell <ncardwell@xxxxxxxxxx> tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR Xin Long <lucien.xin@xxxxxxxxx> sctp: use transport pf_retrans in sctp_do_8_2_transport_strike Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' Cong Wang <xiyou.wangcong@xxxxxxxxx> sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero Shmulik Ladkani <shmulik@xxxxxxxxxxxxxxxx> net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list Subash Abhinov Kasiviswanathan <subashab@xxxxxxxxxxxxxx> net: Fix null de-reference of device refcount Eric Biggers <ebiggers@xxxxxxxxxx> isdn/capi: check message length in capi_write() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' Bjørn Mork <bjorn@xxxxxxx> cdc_ether: fix rndis support for Mediatek based smartphones Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> bridge/mdb: remove wrong use of NLM_F_MULTI ------------- Diffstat: Makefile | 4 +- arch/arc/kernel/traps.c | 1 + arch/arm/mach-omap2/omap4-common.c | 3 ++ arch/arm/mach-omap2/omap_hwmod_7xx_data.c | 3 +- arch/arm/mm/init.c | 8 ++- arch/mips/Kconfig | 3 -- arch/mips/include/asm/smp.h | 12 ++++- arch/mips/sibyte/common/Makefile | 1 - arch/mips/sibyte/common/dma.c | 14 ------ arch/mips/vdso/Makefile | 4 +- arch/powerpc/mm/pgtable-radix.c | 16 +++--- arch/s390/kvm/interrupt.c | 10 ++++ arch/s390/kvm/kvm-s390.c | 2 +- arch/s390/net/bpf_jit_comp.c | 12 +++-- arch/x86/Makefile | 1 + arch/x86/events/amd/ibs.c | 13 +++-- arch/x86/events/intel/core.c | 6 +++ arch/x86/include/asm/bootparam_utils.h | 1 + arch/x86/include/asm/perf_event.h | 12 +++-- arch/x86/include/asm/uaccess.h | 4 +- arch/x86/kernel/apic/io_apic.c | 8 ++- arch/x86/kvm/vmx.c | 7 ++- arch/x86/kvm/x86.c | 7 +++ drivers/atm/Kconfig | 2 +- drivers/base/core.c | 53 +++++++++++++++++++- drivers/block/floppy.c | 4 +- drivers/clk/rockchip/clk-mmc-phase.c | 4 +- drivers/crypto/talitos.c | 67 +++++++++++++++++++------- drivers/dma/omap-dma.c | 4 +- drivers/dma/ti-dma-crossbar.c | 4 +- drivers/gpio/gpiolib.c | 20 +++++--- drivers/gpu/drm/mediatek/mtk_drm_drv.c | 5 +- drivers/iommu/amd_iommu.c | 16 ++++-- drivers/isdn/capi/capi.c | 10 +++- drivers/media/usb/dvb-usb/technisat-usb2.c | 22 ++++----- drivers/media/usb/tm6000/tm6000-dvb.c | 3 ++ drivers/mtd/nand/mtk_nand.c | 21 ++++---- drivers/net/ethernet/marvell/sky2.c | 7 +++ drivers/net/ethernet/qlogic/qed/qed_main.c | 4 +- drivers/net/ethernet/seeq/sgiseeq.c | 7 +-- drivers/net/tun.c | 16 ++++-- drivers/net/usb/cdc_ether.c | 13 +++-- drivers/net/usb/r8152.c | 5 +- drivers/net/wireless/marvell/mwifiex/ie.c | 3 ++ drivers/net/wireless/marvell/mwifiex/uap_cmd.c | 9 +++- drivers/net/xen-netfront.c | 2 +- drivers/nvmem/core.c | 15 ++++-- drivers/tty/serial/atmel_serial.c | 1 - drivers/tty/serial/sprd_serial.c | 2 +- drivers/usb/core/config.c | 12 +++-- fs/btrfs/tree-log.c | 8 +-- fs/cifs/connect.c | 22 +++++++++ fs/nfs/nfs4file.c | 12 ++--- fs/nfs/pagelist.c | 2 +- fs/nfs/proc.c | 7 ++- include/uapi/linux/isdn/capicmd.h | 1 + kernel/irq/resend.c | 2 + net/batman-adv/bat_v_ogm.c | 18 ++++--- net/bridge/br_mdb.c | 2 +- net/core/dev.c | 2 + net/core/skbuff.c | 19 ++++++++ net/ipv4/tcp_input.c | 2 +- net/ipv6/ping.c | 2 +- net/netfilter/nf_conntrack_ftp.c | 2 +- net/sched/sch_hhf.c | 2 +- net/sctp/protocol.c | 2 +- net/sctp/sm_sideeffect.c | 2 +- net/tipc/name_distr.c | 3 +- security/keys/request_key_auth.c | 6 +++ tools/power/x86/turbostat/turbostat.c | 2 +- virt/kvm/coalesced_mmio.c | 17 ++++--- 71 files changed, 446 insertions(+), 172 deletions(-)