This is the start of the stable review cycle for the 5.4.144 release. There are 48 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 03 Sep 2021 12:22:41 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.144-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.144-rc1 Richard Guy Briggs <rgb@xxxxxxxxxx> audit: move put_tree() to avoid trim_trees refcount underflow and UAF Peter Collingbourne <pcc@xxxxxxxxxx> net: don't unconditionally copy_from_user a struct ifreq for socket ioctls Helge Deller <deller@xxxxxx> Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" Denis Efremov <efremov@xxxxxxxxx> Revert "floppy: reintroduce O_NDELAY fix" Qu Wenruo <wqu@xxxxxxxx> btrfs: fix NULL pointer dereference when deleting device by invalid id Petr Vorel <petr.vorel@xxxxxxxxx> arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 Sean Christopherson <seanjc@xxxxxxxxxx> KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs DENG Qingfang <dqfext@xxxxxxxxx> net: dsa: mt7530: fix VLAN traffic leaks again Andrii Nakryiko <andriin@xxxxxx> bpf: Fix cast to pointer from integer of different size warning Andrii Nakryiko <andriin@xxxxxx> bpf: Track contents of read-only maps as scalars Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> vt_kdsetmode: extend console locking Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix race between marking inode needs to be logged and log syncing Gerd Rausch <gerd.rausch@xxxxxxxxxx> net/rds: dma_map_sg is entitled to merge entries Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/disp: power down unused DP links during init Mark Yacoub <markyacoub@xxxxxxxxxx> drm: Copy drm_wait_vblank to user before returning Shai Malin <smalin@xxxxxxxxxxx> qed: Fix null-pointer dereference in qed_rdma_create_qp() Shai Malin <smalin@xxxxxxxxxxx> qed: qed ll2 race condition fixes Neeraj Upadhyay <neeraju@xxxxxxxxxxxxxx> vringh: Use wiov->used to check for read/write desc order Parav Pandit <parav@xxxxxxxxxx> virtio_pci: Support surprise removal of virtio pci device Parav Pandit <parav@xxxxxxxxxx> virtio: Improve vq->broken access to avoid any compiler optimization Michał Mirosław <mirq-linux@xxxxxxxxxxxx> opp: remove WARN when no valid OPPs remain Colin Ian King <colin.king@xxxxxxxxxxxxx> perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 Jerome Brunet <jbrunet@xxxxxxxxxxxx> usb: gadget: u_audio: fix race condition on endpoint stop Matthew Brost <matthew.brost@xxxxxxxxx> drm/i915: Fix syncmap memory leak Guangbin Huang <huangguangbin2@xxxxxxxxxx> net: hns3: fix get wrong pfc_en when query PFC configuration Guojia Liao <liaoguojia@xxxxxxxxxx> net: hns3: fix duplicate node in VLAN list Yufeng Mo <moyufeng@xxxxxxxxxx> net: hns3: clear hardware resource when loading driver Andrey Ignatov <rdna@xxxxxx> rtnetlink: Return correct error on changing device netns Maxim Kiselev <bigunclemax@xxxxxxxxx> net: marvell: fix MVNETA_TX_IN_PRGRS bit number Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' Shreyansh Chouhan <chouhan.shreyansh630@xxxxxxxxx> ip_gre: add validation for csum_start Gal Pressman <galpress@xxxxxxxxxx> RDMA/efa: Free IRQ vectors on error flow Sasha Neftin <sasha.neftin@xxxxxxxxx> e1000e: Fix the max snoop/no-snoop latency for 10M Tuo Li <islituo@xxxxxxxxx> IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() Naresh Kumar PBS <nareshkumar.pbs@xxxxxxxxxxxx> RDMA/bnxt_re: Add missing spin lock initialization Li Jinlin <lijinlin3@xxxxxxxxxx> scsi: core: Fix hang of freezing queue between blocking and running device Wesley Cheng <wcheng@xxxxxxxxxxxxxx> usb: dwc3: gadget: Stop EP0 transfers during pullup disable Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: gadget: Fix dwc3_calc_trbs_left() Zhengjun Zhang <zhangzhengjun@xxxxxxxxxxx> USB: serial: option: add new VID/PID to support Fibocom FG150 Johan Hovold <johan@xxxxxxxxxx> Revert "USB: serial: ch341: fix character loss at high transfer rates" Stefan Mätje <stefan.maetje@xxxxxx> can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters Yafang Shao <laoar.shao@xxxxxxxxx> mm, oom: make the calculation of oom badness more accurate Shaik Sajida Bhanu <sbhanu@xxxxxxxxxxxxxx> mmc: sdhci-msm: Update the software timeout value for sdhc Miklos Szeredi <mszeredi@xxxxxxxxxx> ovl: fix uninitialized pointer read in ovl_lookup_real_one() Kefeng Wang <wangkefeng.wang@xxxxxxxxxx> once: Fix panic when module unload Florian Westphal <fw@xxxxxxxxx> netfilter: conntrack: collect all entries in one cycle Guenter Roeck <linux@xxxxxxxxxxxx> ARC: Fix CONFIG_STACKDEPOT Xiaolong Huang <butterflyhuangxx@xxxxxxxxx> net: qrtr: fix another OOB Read in qrtr_endpoint_post ------------- Diffstat: Makefile | 4 +- arch/arc/kernel/vmlinux.lds.S | 2 + .../arm64/boot/dts/qcom/msm8994-angler-rev-101.dts | 4 + arch/parisc/include/asm/string.h | 15 --- arch/parisc/kernel/parisc_ksyms.c | 4 - arch/parisc/lib/Makefile | 4 +- arch/parisc/lib/memset.c | 72 +++++++++++ arch/parisc/lib/string.S | 136 --------------------- arch/x86/events/intel/uncore_snbep.c | 2 +- arch/x86/kvm/mmu.c | 10 +- drivers/block/floppy.c | 27 ++-- drivers/gpu/drm/drm_ioc32.c | 4 +- drivers/gpu/drm/i915/gt/intel_timeline.c | 8 ++ drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.h | 1 + drivers/gpu/drm/nouveau/nvkm/engine/disp/outp.c | 9 ++ drivers/infiniband/hw/bnxt_re/ib_verbs.c | 1 + drivers/infiniband/hw/efa/efa_main.c | 1 + drivers/infiniband/hw/hfi1/sdma.c | 9 +- drivers/mmc/host/sdhci-msm.c | 18 +++ drivers/net/can/usb/esd_usb2.c | 4 +- drivers/net/dsa/mt7530.c | 5 +- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 3 + .../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 13 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 32 ++++- drivers/net/ethernet/intel/e1000e/ich8lan.c | 14 ++- drivers/net/ethernet/intel/e1000e/ich8lan.h | 3 + drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/qlogic/qed/qed_ll2.c | 20 +++ drivers/net/ethernet/qlogic/qed/qed_rdma.c | 3 +- drivers/opp/of.c | 5 +- drivers/scsi/scsi_sysfs.c | 9 +- drivers/tty/vt/vt_ioctl.c | 11 +- drivers/usb/dwc3/gadget.c | 23 ++-- drivers/usb/gadget/function/u_audio.c | 5 +- drivers/usb/serial/ch341.c | 1 - drivers/usb/serial/option.c | 2 + drivers/vhost/vringh.c | 2 +- drivers/virtio/virtio_pci_common.c | 7 ++ drivers/virtio/virtio_ring.c | 6 +- fs/btrfs/btrfs_inode.h | 15 +++ fs/btrfs/file.c | 10 +- fs/btrfs/inode.c | 4 +- fs/btrfs/transaction.h | 2 +- fs/btrfs/volumes.c | 2 +- fs/overlayfs/export.c | 2 +- fs/proc/base.c | 11 +- include/linux/netdevice.h | 4 + include/linux/once.h | 4 +- include/linux/oom.h | 4 +- kernel/audit_tree.c | 2 +- kernel/bpf/verifier.c | 57 ++++++++- lib/once.c | 11 +- mm/oom_kill.c | 22 ++-- net/core/rtnetlink.c | 3 +- net/ipv4/ip_gre.c | 2 + net/netfilter/nf_conntrack_core.c | 71 ++++------- net/qrtr/qrtr.c | 2 +- net/rds/ib_frmr.c | 4 +- net/socket.c | 6 +- 61 files changed, 419 insertions(+), 326 deletions(-)
