This is the start of the stable review cycle for the 4.14.183 release. There are 76 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 04 Jun 2020 10:16:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.183-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.14.183-rc2 Benjamin Block <bblock@xxxxxxxxxxxxx> scsi: zfcp: fix request object use-after-free in send path causing wrong traces Thomas Gleixner <tglx@xxxxxxxxxxxxx> genirq/generic_pending: Do not lose pending affinity update Salil Mehta <salil.mehta@xxxxxxxxxx> net: hns: Fixes the missing put_device in positive leg for roce reset Colin Ian King <colin.king@xxxxxxxxxxxxx> net: hns: fix unsigned comparison to less than zero Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: VMX: check for existence of secondary exec controls before accessing David Howells <dhowells@xxxxxxxxxx> rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket Guoqing Jiang <gqjiang@xxxxxxxx> sc16is7xx: move label 'err_spi' to correct section Liviu Dudau <liviu@xxxxxxxxxxx> mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build Qiushi Wu <wu000273@xxxxxxx> bonding: Fix reference count leak in bond_sysfs_slave_add. Qiushi Wu <wu000273@xxxxxxx> qlcnic: fix missing release in qlcnic_83xx_interrupt_test. Xin Long <lucien.xin@xxxxxxxxx> esp6: get the right proto for transport mode in esp6_gso_encap Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nfnetlink_cthelper: unbreak userspace helper support Phil Sutter <phil@xxxxxx> netfilter: ipset: Fix subcounter update skip Michael Braun <michael-dev@xxxxxxxxxxxxx> netfilter: nft_reject_bridge: enable reject with bridge vlan Xin Long <lucien.xin@xxxxxxxxx> ip_vti: receive ipip packet by calling ip_tunnel_rcv Jeremy Sowden <jeremy@xxxxxxxxxx> vti4: eliminated some duplicate code. Antony Antony <antony@xxxxxxxxxxx> xfrm: fix error in comment Xin Long <lucien.xin@xxxxxxxxx> xfrm: fix a NULL-ptr deref in xfrm_local_error Xin Long <lucien.xin@xxxxxxxxx> xfrm: fix a warning in xfrm_policy_insert_list Xin Long <lucien.xin@xxxxxxxxx> xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output Xin Long <lucien.xin@xxxxxxxxx> xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input Al Viro <viro@xxxxxxxxxxxxxxxxxx> copy_xstate_to_kernel(): don't leave parts of destination uninitialized Alexander Dahl <post@xxxxxxxxxxx> x86/dma: Fix max PFN arithmetic overflow on 32 bit systems Linus Lüssing <ll@xxxxxxxxxxxxxxxxxx> mac80211: mesh: fix discovery timer re-arming issue / crash Helge Deller <deller@xxxxxx> parisc: Fix kernel panic in mem_init() Qiushi Wu <wu000273@xxxxxxx> iommu: Fix reference count leak in iommu_group_alloc. Arnd Bergmann <arnd@xxxxxxxx> include/asm-generic/topology.h: guard cpumask_of_node() macro argument Alexander Potapenko <glider@xxxxxxxxxx> fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() Jerry Lee <leisurelysw24@xxxxxxxxx> libceph: ignore pool overlay and cache logic on redirects Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Add new codec supported for ALC287 Eric W. Biederman <ebiederm@xxxxxxxxxxxx> exec: Always set cap_ambient in cap_bprm_set_creds Chris Chiu <chiu@xxxxxxxxxxxx> ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC Changming Liu <liu.changm@xxxxxxxxxxxxxxxx> ALSA: hwdep: fix a left shifting 1 by 31 UB bug Qiushi Wu <wu000273@xxxxxxx> RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() Peng Hao <richard.peng@xxxxxxxx> mmc: block: Fix use-after-free issue for rpmb Vincent Stehlé <vincent.stehle@xxxxxxxxxxx> ARM: dts: bcm2835-rpi-zero-w: Fix led polarity Robert Beckett <bob.beckett@xxxxxxxxxxxxx> ARM: dts/imx6q-bx50v3: Set display interface clock parents Sebastian Reichel <sre@xxxxxxxxxx> ARM: dts: imx6q-bx50v3: Add internal switch Kaike Wan <kaike.wan@xxxxxxxxx> IB/qib: Call kobject_put() when kobject_init_and_add() fails Takashi Iwai <tiwai@xxxxxxx> gpio: exar: Fix bad handling for ida_simple_get error path Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: fix DACR mismatch with nested exceptions Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: integrate uaccess_save and uaccess_restore Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h Stefan Agner <stefan@xxxxxxxx> ARM: 8843/1: use unified assembler in headers Wei Yongjun <weiyongjun1@xxxxxxxxxx> Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() Evan Green <evgreen@xxxxxxxxxxxx> Input: synaptics-rmi4 - really fix attn_data use-after-free Kevin Locke <kevin@xxxxxxxxxxxxxxx> Input: i8042 - add ThinkPad S230u to i8042 reset list Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> Input: dlink-dir685-touchkeys - fix a typo in driver name Łukasz Patron <priv.luk@xxxxxxxxx> Input: xpad - add custom init packet for Xbox One S controllers Brendan Shanks <bshanks@xxxxxxxxxxxxxxx> Input: evdev - call input_flush_device() on release(), not flush() James Hilliard <james.hilliard1@xxxxxxxxx> Input: usbtouchscreen - add support for BonXeon TP Matteo Croce <mcroce@xxxxxxxxxx> samples: bpf: Fix build error Steve French <stfrench@xxxxxxxxxxxxx> cifs: Fix null pointer check in cifs_read Arnd Bergmann <arnd@xxxxxxxx> net: freescale: select CONFIG_FIXED_PHY where needed Masahiro Yamada <masahiroy@xxxxxxxxxx> usb: gadget: legacy: fix redundant initialization warnings Lei Xue <carmark.dlut@xxxxxxxxx> cachefiles: Fix race between read_waiter and read_copier involving op->to_do Bob Peterson <rpeterso@xxxxxxxxxx> gfs2: move privileged user check to gfs2_quota_lock_check Chuhong Yuan <hslester96@xxxxxxxxx> net: microchip: encx24j600: add missed kthread_stop Stephen Warren <swarren@xxxxxxxxxx> gpio: tegra: mask GPIO IRQs during IRQ shutdown Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi Johan Jonker <jbx6244@xxxxxxxxx> arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: fix phy nodename for rk3228-evb Qiushi Wu <wu000273@xxxxxxx> net/mlx4_core: fix a memory leak bug. Qiushi Wu <wu000273@xxxxxxx> net: sun: fix missing release regions in cas_init_one(). Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxx> net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() Moshe Shemesh <moshe@xxxxxxxxxxxx> net/mlx5e: Update netdev txq on completions during closure Jere Leppänen <jere.leppanen@xxxxxxxxx> sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed Marc Payne <marc.payne@xxxxxxxxxxxx> r8152: support additional Microsoft Surface Ethernet Adapter variant Roman Mashak <mrv@xxxxxxxxxxxx> net sched: fix reporting the first-time use timestamp Yuqi Jin <jinyuqi@xxxxxxxxxx> net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" Moshe Shemesh <moshe@xxxxxxxxxxxx> net/mlx5: Add command entry handling completion Vadim Fedorenko <vfedorenko@xxxxxxxx> net: ipip: fix wrong address family in init error path Eric Dumazet <edumazet@xxxxxxxxxx> ax25: fix setsockopt(SO_BINDTODEVICE) ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/bcm2835-rpi-zero-w.dts | 2 +- arch/arm/boot/dts/imx6q-b450v3.dts | 7 -- arch/arm/boot/dts/imx6q-b650v3.dts | 7 -- arch/arm/boot/dts/imx6q-b850v3.dts | 11 -- arch/arm/boot/dts/imx6q-bx50v3.dtsi | 77 ++++++++++++++ arch/arm/boot/dts/rk3228-evb.dts | 2 +- arch/arm/boot/dts/rk322x.dtsi | 4 +- arch/arm/include/asm/assembler.h | 83 +-------------- arch/arm/include/asm/uaccess-asm.h | 117 +++++++++++++++++++++ arch/arm/include/asm/vfpmacros.h | 8 +- arch/arm/kernel/entry-armv.S | 11 +- arch/arm/kernel/entry-header.S | 9 +- arch/arm/lib/bitops.h | 8 +- arch/arm64/boot/dts/rockchip/rk3399.dtsi | 8 +- arch/parisc/mm/init.c | 2 +- arch/x86/include/asm/dma.h | 2 +- arch/x86/kernel/fpu/xstate.c | 86 ++++++++------- arch/x86/kvm/vmx.c | 7 +- drivers/gpio/gpio-exar.c | 7 +- drivers/gpio/gpio-tegra.c | 1 + drivers/infiniband/hw/qib/qib_sysfs.c | 9 +- drivers/infiniband/hw/vmw_pvrdma/pvrdma_main.c | 2 +- drivers/input/evdev.c | 19 +--- drivers/input/joystick/xpad.c | 12 +++ drivers/input/keyboard/dlink-dir685-touchkeys.c | 2 +- drivers/input/rmi4/rmi_driver.c | 5 +- drivers/input/serio/i8042-x86ia64io.h | 7 ++ drivers/input/touchscreen/usbtouchscreen.c | 1 + drivers/iommu/iommu.c | 2 +- drivers/mmc/core/block.c | 2 +- drivers/net/bonding/bond_sysfs_slave.c | 4 +- drivers/net/ethernet/freescale/Kconfig | 2 + drivers/net/ethernet/freescale/dpaa/Kconfig | 1 + drivers/net/ethernet/hisilicon/hns/hns_dsaf_main.c | 5 +- drivers/net/ethernet/mellanox/mlx4/fw.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 14 +++ drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 6 +- drivers/net/ethernet/microchip/encx24j600.c | 5 +- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +- drivers/net/ethernet/sun/cassini.c | 3 +- drivers/net/usb/cdc_ether.c | 11 +- drivers/net/usb/r8152.c | 1 + drivers/s390/scsi/zfcp_fsf.c | 10 +- drivers/tty/serial/sc16is7xx.c | 2 + drivers/usb/gadget/legacy/inode.c | 3 +- fs/binfmt_elf.c | 2 +- fs/cachefiles/rdwr.c | 2 +- fs/cifs/file.c | 2 +- fs/gfs2/quota.c | 3 +- fs/gfs2/quota.h | 3 +- include/asm-generic/topology.h | 2 +- include/linux/mlx5/driver.h | 1 + include/linux/mm.h | 15 ++- include/linux/netfilter/nf_conntrack_pptp.h | 2 +- include/net/act_api.h | 3 +- include/uapi/linux/xfrm.h | 2 +- kernel/irq/migration.c | 26 +++-- mm/vmalloc.c | 2 +- net/ax25/af_ax25.c | 6 +- net/bridge/netfilter/nft_reject_bridge.c | 6 ++ net/ceph/osd_client.c | 4 +- net/ipv4/ip_vti.c | 75 +++++++------ net/ipv4/ipip.c | 2 +- net/ipv4/netfilter/nf_nat_pptp.c | 7 +- net/ipv4/route.c | 14 ++- net/ipv6/esp6_offload.c | 9 +- net/mac80211/mesh_hwmp.c | 7 ++ net/netfilter/ipset/ip_set_list_set.c | 2 +- net/netfilter/nf_conntrack_pptp.c | 62 ++++++----- net/netfilter/nfnetlink_cthelper.c | 3 +- net/qrtr/qrtr.c | 2 +- net/rxrpc/local_object.c | 23 ++-- net/sctp/sm_statefuns.c | 9 +- net/xfrm/xfrm_input.c | 2 +- net/xfrm/xfrm_output.c | 15 +-- net/xfrm/xfrm_policy.c | 7 +- samples/bpf/lwt_len_hist_user.c | 2 - security/commoncap.c | 1 + sound/core/hwdep.c | 4 +- sound/pci/hda/patch_realtek.c | 3 + sound/usb/mixer.c | 8 ++ 82 files changed, 581 insertions(+), 354 deletions(-)
