This is the start of the stable review cycle for the 4.9.217 release. There are 90 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 21 Mar 2020 12:37:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.217-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.217-rc1 Matteo Croce <mcroce@xxxxxxxxxx> ipv4: ensure rcu_read_lock() in cipso_v4_error() Jann Horn <jannh@xxxxxxxxxx> mm: slub: add missing TID bump in kmem_cache_alloc_bulk() Kees Cook <keescook@xxxxxxxxxxxx> ARM: 8958/1: rename missed uaccess .fixup section Florian Fainelli <f.fainelli@xxxxxxxxx> ARM: 8957/1: VDSO: Match ARMv8 timer in cntvct_functional() Qian Cai <cai@xxxxxx> jbd2: fix data races at struct journal_head Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> signal: avoid double atomic counter increments for user accounting Madhuparna Bhowmik <madhuparnabhowmik10@xxxxxxxxx> mac80211: rx: avoid RCU list traversal under mutex Marek Vasut <marex@xxxxxxx> net: ks8851-ml: Fix IRQ handling and locking Johannes Berg <johannes.berg@xxxxxxxxx> cfg80211: check reg_rule for NULL in handle_channel_custom() Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> HID: i2c-hid: add Trekstor Surfbook E11B to descriptor override Mansour Behabadi <mansour@xxxxxxxxxx> HID: apple: Add support for recent firmware on Magic Keyboards Jean Delvare <jdelvare@xxxxxxx> ACPI: watchdog: Allow disabling WDAT at boot Kim Phillips <kim.phillips@xxxxxxx> perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Use explicit tvlv padding for ELP packets Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Avoid probe ELP information leak Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx> batman-adv: update data pointers after skb_cow() Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Don't schedule OGM for disabled interface Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Avoid free/alloc race when handling OGM buffer Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Avoid free/alloc race when handling OGM2 buffer Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Fix duplicated OGMs on NETDEV_UP Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Prevent duplicated gateway_node entry Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: Fix multicast TT issues with bogus ROAM flags Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: Avoid storing non-TT-sync flags on singular entries too Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Fix debugfs path for renamed softif Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Fix debugfs path for renamed hardif Marek Lindner <mareklindner@xxxxxxxxxxxxx> batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: Fix TT sync flags for intermediate TT responses Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Avoid race in TT TVLV allocator helper Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Fix internal interface indices types Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Fix lock for ogm cnt access in batadv_iv_ogm_calc_tq Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx> batman-adv: Fix check of retrieved orig_gw in batadv_v_gw_is_eligible Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxxx> batman-adv: Always initialize fragment header priority Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx> batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: fix TT sync flag inconsistencies Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Accept only filled wifi station info Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Use default throughput value on cfg80211 error Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Fix rx packet/bytes stats on local ARP reply Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Initialize gw sel_class via batadv_algo Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: Fix transmission of final, 16th fragment Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Fix double free during fragment merge error Vladis Dronov <vdronov@xxxxxxxxxx> efi: Add a sanity check to efivar_store_raw() Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: restrict IPV6_ADDRFORM operation Daniel Drake <drake@xxxxxxxxxxxx> iommu/vt-d: Ignore devices with out-of-spec domain number Zhenzhong Duan <zhenzhong.duan@xxxxxxxxx> iommu/vt-d: Fix the wrong printing in RHSA parsing qize wang <wangqize888888888@xxxxxxxxx> mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() Jakub Kicinski <kuba@xxxxxxxxxx> netfilter: cthelper: add missing attribute validation for cthelper Jakub Kicinski <kuba@xxxxxxxxxx> nl80211: add missing attribute validation for channel switch Jakub Kicinski <kuba@xxxxxxxxxx> nl80211: add missing attribute validation for beacon report scanning Jakub Kicinski <kuba@xxxxxxxxxx> nl80211: add missing attribute validation for critical protocol indication Yonghyun Hwang <yonghyun@xxxxxxxxxx> iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page Hans de Goede <hdegoede@xxxxxxxxxx> iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint Vladis Dronov <vdronov@xxxxxxxxxx> efi: Fix a race and a buffer overflow while reading efivars via sysfs Eugeniy Paltsev <Eugeniy.Paltsev@xxxxxxxxxxxx> ARC: define __ALIGN_STR and __ALIGN symbols for ARC Vitaly Kuznetsov <vkuznets@xxxxxxxxxx> KVM: x86: clear stale x86_emulate_ctxt->intercept value Al Viro <viro@xxxxxxxxxxxxxxxxxx> gfs2_atomic_open(): fix O_EXCL|O_CREAT handling on cold dcache Al Viro <viro@xxxxxxxxxxxxxxxxxx> cifs_atomic_open(): fix double-put on late allocation failure Colin Ian King <colin.king@xxxxxxxxxxxxx> drm/amd/display: remove duplicated assignment to grph_obj_type Hillf Danton <hdanton@xxxxxxxx> workqueue: don't use wq_select_unbound_cpu() for bound works Hans de Goede <hdegoede@xxxxxxxxxx> iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint Halil Pasic <pasic@xxxxxxxxxxxxx> virtio-blk: fix hw_queue stopped on arbitrary error Heiner Kallweit <hkallweit1@xxxxxxxxx> net: phy: fix MDIO bus PM PHY resuming Shakeel Butt <shakeelb@xxxxxxxxxx> cgroup: memcg: net: do not associate sock with unrelated cgroup Eric Dumazet <edumazet@xxxxxxxxxx> bonding/alb: make sure arp header is pulled before accessing it Eric Dumazet <edumazet@xxxxxxxxxx> slip: make slhc_compress() more robust against malicious packets Jakub Kicinski <kuba@xxxxxxxxxx> net: fec: validate the new settings in fec_enet_set_coalesce() Mahesh Bandewar <maheshb@xxxxxxxxxx> macvlan: add cond_resched() during multicast processing Mahesh Bandewar <maheshb@xxxxxxxxxx> ipvlan: don't deref eth hdr before checking it's set Eric Dumazet <edumazet@xxxxxxxxxx> ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() Paolo Abeni <pabeni@xxxxxxxxxx> ipvlan: egress mcast packets are not exceptional Jiri Wiesner <jwiesner@xxxxxxxx> ipvlan: do not add hardware address of master to its unicast filter list Mahesh Bandewar <maheshb@xxxxxxxxxx> ipvlan: add cond_resched_rcu() while processing muticast backlog Jakub Kicinski <kuba@xxxxxxxxxx> nfc: add missing attribute validation for vendor subcommand Jakub Kicinski <kuba@xxxxxxxxxx> nfc: add missing attribute validation for SE API Jakub Kicinski <kuba@xxxxxxxxxx> team: add missing attribute validation for array index Jakub Kicinski <kuba@xxxxxxxxxx> team: add missing attribute validation for port ifindex Jakub Kicinski <kuba@xxxxxxxxxx> net: fq: add missing attribute validation for orphan mask Jakub Kicinski <kuba@xxxxxxxxxx> macsec: add missing attribute validation for port Jakub Kicinski <kuba@xxxxxxxxxx> nl802154: add missing attribute validation for dev_type Jakub Kicinski <kuba@xxxxxxxxxx> nl802154: add missing attribute validation Jakub Kicinski <kuba@xxxxxxxxxx> fib: add missing attribute validation for tun_id Vasundhara Volam <vasundhara-v.volam@xxxxxxxxxxxx> bnxt_en: reinitialize IRQs when MTU is modified You-Sheng Yang <vicamo.yang@xxxxxxxxxxxxx> r8152: check disconnect status after long sleep Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: nfc: fix bounds checking bugs on "pipe" Dmitry Bogdanov <dbogdanov@xxxxxxxxxxx> net: macsec: update SCI upon MAC address change. Hangbin Liu <liuhangbin@xxxxxxxxx> ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface Eric Dumazet <edumazet@xxxxxxxxxx> gre: fix uninit-value in __iptunnel_pull_header Dmitry Yakunin <zeil@xxxxxxxxxxxxxx> cgroup, netclassid: periodically release file_lock on classid updating Florian Fainelli <f.fainelli@xxxxxxxxx> net: phy: Avoid multiple suspends David S. Miller <davem@xxxxxxxxxxxxx> phy: Revert toggling reset changes. Petr Malat <oss@xxxxxxxxx> NFS: Remove superfluous kmap in nfs_readdir_xdr_to_array ------------- Diffstat: Documentation/filesystems/porting | 7 ++ Documentation/kernel-parameters.txt | 4 + Makefile | 4 +- arch/arc/include/asm/linkage.h | 2 + arch/arm/kernel/vdso.c | 2 + arch/arm/lib/copy_from_user.S | 2 +- arch/x86/events/amd/uncore.c | 14 +-- arch/x86/kvm/emulate.c | 1 + drivers/acpi/acpi_watchdog.c | 12 ++- drivers/block/virtio_blk.c | 8 +- drivers/firmware/efi/efivars.c | 32 ++++-- drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c | 3 +- drivers/hid/hid-apple.c | 3 +- drivers/hid/i2c-hid/i2c-hid-dmi-quirks.c | 8 ++ drivers/iommu/dmar.c | 21 ++-- drivers/iommu/intel-iommu.c | 13 ++- drivers/net/bonding/bond_alb.c | 20 ++-- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 4 +- drivers/net/ethernet/freescale/fec_main.c | 6 +- drivers/net/ethernet/micrel/ks8851_mll.c | 14 +-- drivers/net/ipvlan/ipvlan_core.c | 19 ++-- drivers/net/ipvlan/ipvlan_main.c | 5 +- drivers/net/macsec.c | 12 ++- drivers/net/macvlan.c | 2 + drivers/net/phy/phy_device.c | 18 ++-- drivers/net/slip/slhc.c | 14 ++- drivers/net/team/team.c | 2 + drivers/net/usb/r8152.c | 6 ++ drivers/net/wireless/marvell/mwifiex/tdls.c | 70 +++++++++++-- fs/cifs/dir.c | 1 - fs/gfs2/inode.c | 2 +- fs/jbd2/transaction.c | 8 +- fs/nfs/dir.c | 2 - fs/open.c | 3 - include/linux/phy.h | 2 + include/net/fib_rules.h | 1 + kernel/cgroup.c | 4 + kernel/signal.c | 23 +++-- kernel/workqueue.c | 14 +-- mm/memcontrol.c | 4 + mm/slub.c | 9 ++ net/batman-adv/bat_iv_ogm.c | 105 +++++++++++++++---- net/batman-adv/bat_v.c | 25 +++-- net/batman-adv/bat_v_elp.c | 22 ++-- net/batman-adv/bat_v_ogm.c | 42 ++++++-- net/batman-adv/debugfs.c | 40 +++++++ net/batman-adv/debugfs.h | 11 ++ net/batman-adv/distributed-arp-table.c | 5 +- net/batman-adv/fragmentation.c | 22 ++-- net/batman-adv/gateway_client.c | 11 +- net/batman-adv/gateway_common.c | 5 + net/batman-adv/hard-interface.c | 51 +++++++-- net/batman-adv/originator.c | 4 +- net/batman-adv/originator.h | 4 +- net/batman-adv/routing.c | 11 +- net/batman-adv/soft-interface.c | 1 - net/batman-adv/translation-table.c | 149 ++++++++++++++++++++++----- net/batman-adv/types.h | 22 +++- net/core/netclassid_cgroup.c | 47 +++++++-- net/ieee802154/nl_policy.c | 6 ++ net/ipv4/cipso_ipv4.c | 7 +- net/ipv4/gre_demux.c | 12 ++- net/ipv6/addrconf.c | 4 + net/ipv6/ipv6_sockglue.c | 10 +- net/mac80211/rx.c | 2 +- net/netfilter/nfnetlink_cthelper.c | 2 + net/nfc/hci/core.c | 19 +++- net/nfc/netlink.c | 3 + net/sched/sch_fq.c | 1 + net/wireless/nl80211.c | 5 + net/wireless/reg.c | 2 +- 71 files changed, 809 insertions(+), 242 deletions(-)