This is the start of the stable review cycle for the 5.4.1 release. There are 66 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 29 Nov 2019 20:18:09 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.1-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.1-rc1 Michael Ellerman <mpe@xxxxxxxxxxxxxx> KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/book3s64: Fix link stack flush on context switch Bernd Porr <mail@xxxxxxxxxxxxxxx> staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error Aleksander Morgado <aleksander@xxxxxxxxxxxxx> USB: serial: option: add support for Foxconn T77W968 LTE modules Aleksander Morgado <aleksander@xxxxxxxxxxxxx> USB: serial: option: add support for DW5821e with eSIM support Johan Hovold <johan@xxxxxxxxxx> USB: serial: mos7840: fix remote wakeup Johan Hovold <johan@xxxxxxxxxx> USB: serial: mos7720: fix remote wakeup Pavel Löbl <pavel@xxxxxxxx> USB: serial: mos7840: add USB ID to support Moxa UPort 2210 Oliver Neukum <oneukum@xxxxxxxx> appledisplay: fix error handling in the scheduled work Oliver Neukum <oneukum@xxxxxxxx> USB: chaoskey: fix error case of a timeout Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> usb-serial: cp201x: support Mark-10 digital force gauge Suwan Kim <suwan.kim027@xxxxxxxxx> usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() Hewenliang <hewenliang4@xxxxxxxxxx> usbip: tools: fix fd leakage in the function of read_attr_usbip_status Oliver Neukum <oneukum@xxxxxxxx> USBIP: add config dependency for SGL_ALLOC Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs A Sun <as1033x@xxxxxxxxxxx> media: mceusb: fix out of bounds read in MCE receiver buffer Sean Young <sean@xxxxxxxx> media: imon: invalid dereference in imon_touch_event Vito Caputo <vcaputo@xxxxxxxxxxx> media: cxusb: detect cxusb_ctrl_msg error in query Oliver Neukum <oneukum@xxxxxxxx> media: b2c2-flexcop-usb: add sanity checking Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx> media: uvcvideo: Fix error path in control parsing failure Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Prevent exit livelock Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Provide distinct return value when owner is exiting Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Add mutex around futex exit Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Provide state handling for exec() as well Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Sanitize exit state handling Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Mark the begin of futex exit explicitly Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Set task::futex_state to DEAD right after handling futex exit Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Split futex_mm_release() for exit/exec Thomas Gleixner <tglx@xxxxxxxxxxxxx> exit/exec: Seperate mm_release() Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Replace PF_EXITPIDONE with a state Thomas Gleixner <tglx@xxxxxxxxxxxxx> futex: Move futex exit handling into futex code Kai Shen <shenkai8@xxxxxxxxxx> cpufreq: Add NULL checks to show() and store() methods of cpufreq Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> media: usbvision: Fix races among open, close, and disconnect Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> media: usbvision: Fix invalid accesses after device disconnect Alexander Popov <alex.popov@xxxxxxxxx> media: vivid: Fix wrong locking that causes race conditions on streaming stop Vandana BN <bnvandana@xxxxxxxxx> media: vivid: Set vid_cap_streaming and vid_out_streaming to true Geoffrey D. Bennett <g@xxxxx> ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Fix NULL dereference at parsing BADD Yang Tao <yang.tao172@xxxxxxxxxx> futex: Prevent robust futex exit race Andy Lutomirski <luto@xxxxxxxxxx> x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3 Ingo Molnar <mingo@xxxxxxxxxx> x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise Andy Lutomirski <luto@xxxxxxxxxx> selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel Andy Lutomirski <luto@xxxxxxxxxx> selftests/x86/mov_ss_trap: Fix the SYSENTER test Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/entry/32: Fix NMI vs ESPFIX Andy Lutomirski <luto@xxxxxxxxxx> x86/entry/32: Unwind the ESPFIX stack earlier on exception entry Andy Lutomirski <luto@xxxxxxxxxx> x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL Andy Lutomirski <luto@xxxxxxxxxx> x86/entry/32: Use %ss segment where required Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/entry/32: Fix IRET exception Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/cpu_entry_area: Add guard page for entry stack on 32bit Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/pti/32: Size initial_page_table correctly Andy Lutomirski <luto@xxxxxxxxxx> x86/doublefault/32: Fix stack canaries in the double fault handler Jan Beulich <jbeulich@xxxxxxxx> x86/xen/32: Simplify ring check in xen_iret_crit_fixup() Jan Beulich <jbeulich@xxxxxxxx> x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout Jan Beulich <jbeulich@xxxxxxxx> x86/stackframe/32: Repair 32-bit Xen PV Navid Emamdoost <navid.emamdoost@xxxxxxxxx> nbd: prevent memory leak Waiman Long <longman@xxxxxxxxxx> x86/speculation: Fix redundant MDS mitigation message Waiman Long <longman@xxxxxxxxxx> x86/speculation: Fix incorrect MDS/TAA mitigation status Alexander Kapshuk <alexander.kapshuk@xxxxxxxxx> x86/insn: Fix awk regexp warnings John Pittman <jpittman@xxxxxxxxxx> md/raid10: prevent access of uninitialized resync_pages offset Mike Snitzer <snitzer@xxxxxxxxxx> Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" Adam Ford <aford173@xxxxxxxxx> Revert "Bluetooth: hci_ll: set operational frequency earlier" Christian Lamparter <chunkeey@xxxxxxxxx> ath10k: restore QCA9880-AR1A (v1) detection Bjorn Andersson <bjorn.andersson@xxxxxxxxxx> ath10k: Fix HOST capability QMI incompatibility Hui Peng <benquike@xxxxxxxxx> ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe Denis Efremov <efremov@xxxxxxxxx> ath9k_hw: fix uninitialized variable data Tomas Bortoli <tomasbortoli@xxxxxxxxx> Bluetooth: Fix invalid-free in bcsp_close() ------------- Diffstat: Documentation/admin-guide/hw-vuln/mds.rst | 7 +- .../admin-guide/hw-vuln/tsx_async_abort.rst | 5 +- Documentation/admin-guide/kernel-parameters.txt | 11 + .../bindings/net/wireless/qcom,ath10k.txt | 6 + Makefile | 4 +- arch/powerpc/include/asm/asm-prototypes.h | 3 + arch/powerpc/include/asm/security_features.h | 3 + arch/powerpc/kernel/entry_64.S | 6 + arch/powerpc/kernel/security.c | 57 +++- arch/powerpc/kvm/book3s_hv_rmhandlers.S | 30 ++ arch/x86/entry/entry_32.S | 211 +++++++++----- arch/x86/include/asm/cpu_entry_area.h | 18 +- arch/x86/include/asm/pgtable_32_types.h | 8 +- arch/x86/include/asm/segment.h | 12 + arch/x86/kernel/cpu/bugs.c | 30 +- arch/x86/kernel/doublefault.c | 3 + arch/x86/kernel/head_32.S | 10 + arch/x86/mm/cpu_entry_area.c | 4 +- arch/x86/tools/gen-insn-attr-x86.awk | 4 +- arch/x86/xen/xen-asm_32.S | 75 ++--- drivers/block/nbd.c | 5 +- drivers/bluetooth/hci_bcsp.c | 3 + drivers/bluetooth/hci_ll.c | 39 ++- drivers/cpufreq/cpufreq.c | 6 + drivers/md/dm-crypt.c | 9 +- drivers/md/raid10.c | 2 +- drivers/media/platform/vivid/vivid-kthread-cap.c | 8 +- drivers/media/platform/vivid/vivid-kthread-out.c | 8 +- drivers/media/platform/vivid/vivid-sdr-cap.c | 8 +- drivers/media/platform/vivid/vivid-vid-cap.c | 3 - drivers/media/platform/vivid/vivid-vid-out.c | 3 - drivers/media/rc/imon.c | 3 +- drivers/media/rc/mceusb.c | 141 ++++++--- drivers/media/usb/b2c2/flexcop-usb.c | 3 + drivers/media/usb/dvb-usb/cxusb.c | 3 +- drivers/media/usb/usbvision/usbvision-video.c | 29 +- drivers/media/usb/uvc/uvc_driver.c | 28 +- drivers/net/wireless/ath/ath10k/pci.c | 36 ++- drivers/net/wireless/ath/ath10k/qmi.c | 13 +- drivers/net/wireless/ath/ath10k/qmi_wlfw_v01.c | 22 ++ drivers/net/wireless/ath/ath10k/qmi_wlfw_v01.h | 1 + drivers/net/wireless/ath/ath10k/snoc.c | 11 + drivers/net/wireless/ath/ath10k/snoc.h | 1 + drivers/net/wireless/ath/ath10k/usb.c | 8 + drivers/net/wireless/ath/ath9k/ar9003_eeprom.c | 2 +- drivers/staging/comedi/drivers/usbduxfast.c | 21 +- drivers/usb/misc/appledisplay.c | 8 +- drivers/usb/misc/chaoskey.c | 24 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/mos7720.c | 4 - drivers/usb/serial/mos7840.c | 16 +- drivers/usb/serial/option.c | 7 + drivers/usb/usbip/Kconfig | 1 + drivers/usb/usbip/stub_rx.c | 50 ++-- fs/exec.c | 2 +- include/linux/compat.h | 2 - include/linux/futex.h | 40 ++- include/linux/sched.h | 3 +- include/linux/sched/mm.h | 6 +- kernel/exit.c | 30 +- kernel/fork.c | 40 +-- kernel/futex.c | 324 ++++++++++++++++++--- sound/pci/hda/patch_hdmi.c | 22 -- sound/usb/mixer.c | 3 + sound/usb/mixer_scarlett_gen2.c | 36 +-- tools/arch/x86/tools/gen-insn-attr-x86.awk | 4 +- tools/testing/selftests/x86/mov_ss_trap.c | 3 +- tools/testing/selftests/x86/sigreturn.c | 13 + tools/usb/usbip/libsrc/usbip_host_common.c | 2 +- 69 files changed, 1091 insertions(+), 473 deletions(-)