This is the start of the stable review cycle for the 4.4.286 release. There are 41 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 07 Oct 2021 08:32:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.286-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.286-rc2 NeilBrown <neilb@xxxxxxxx> cred: allow get_cred() and put_cred() to be given NULL. Anirudh Rayabharam <mail@xxxxxxxxxxxxx> HID: usbhid: free raw_report buffers in usbhid_stop Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx> netfilter: ipset: Fix oversized kvmalloc() calls F.A.Sulaiman <asha.16@xxxxxxxxxxxxxxx> HID: betop: fix slab-out-of-bounds Write in betop_probe Suzuki K Poulose <suzuki.poulose@xxxxxxx> arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 Sai Krishna Potthuri <lakshmi.sai.krishna.potthuri@xxxxxxxxxx> EDAC/synopsys: Fix wrong value type assignment for edac_mode yangerkun <yangerkun@xxxxxxxxxx> ext4: fix potential infinite loop in ext4_dx_readdir() Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix module reference leak Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix missing allocation-failure check Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix tty-registration error handling Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix tty registration race Johan Hovold <johan@xxxxxxxxxx> ipack: ipoctal: fix stack information leak Jacob Keller <jacob.e.keller@xxxxxxxxx> e100: fix buffer overrun in e100_get_regs Jacob Keller <jacob.e.keller@xxxxxxxxx> e100: fix length calculation in e100_get_regs_len Andrea Claudi <aclaudi@xxxxxxxxxx> ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: fix use-after-free in CCMP/GCMP RX Igor Matheus Andrade Torrente <igormtorrente@xxxxxxxxx> tty: Fix out-of-bound vmalloc access in imageblit Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> qnx4: work around gcc false positive warning bug Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> spi: Fix tegra20 build with CONFIG_PM=n Guenter Roeck <linux@xxxxxxxxxxxx> net: 6pack: Fix tx timeout and slot time Guenter Roeck <linux@xxxxxxxxxxxx> alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile Dan Li <ashimida@xxxxxxxxxxxxxxxxx> arm64: Mark __stack_chk_guard as __ro_after_init Helge Deller <deller@xxxxxx> parisc: Use absolute_pointer() to define PAGE0 Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> qnx4: avoid stringop-overread errors Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> sparc: avoid stringop-overread errors Guenter Roeck <linux@xxxxxxxxxxxx> net: i825xx: Use absolute_pointer for memcpy from fixed memory location Guenter Roeck <linux@xxxxxxxxxxxx> compiler.h: Introduce absolute_pointer macro Guenter Roeck <linux@xxxxxxxxxxxx> m68k: Double cast io functions to unsigned long Zhihao Cheng <chengzhihao1@xxxxxxxxxx> blktrace: Fix uaf in blk_trace access after removing by sysfs Baokun Li <libaokun1@xxxxxxxxxx> scsi: iscsi: Adjust iface sysfs attr detection Aya Levin <ayal@xxxxxxxxxx> net/mlx4_en: Don't allow aRFS for encapsulated packets Johan Hovold <johan@xxxxxxxxxx> net: hso: fix muxed tty registration Slark Xiao <slark_xiao@xxxxxxx> USB: serial: option: add device id for Foxconn T99W265 Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx> USB: serial: option: remove duplicate USB device ID Carlo Lobrano <c.lobrano@xxxxxxxxx> USB: serial: option: add Telit LN920 compositions Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx> USB: serial: mos7840: remove duplicated 0xac24 device ID Uwe Brandt <uwe.brandt@xxxxxxxxx> USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter Jan Beulich <jbeulich@xxxxxxxx> xen/x86: fix PV trap handling on secondary processors Steve French <stfrench@xxxxxxxxxxxxx> cifs: fix incorrect check for null pointer in header_assemble Dan Carpenter <dan.carpenter@xxxxxxxxxx> usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() Dan Carpenter <dan.carpenter@xxxxxxxxxx> usb: gadget: r8a66597: fix a loop in set_feature() ------------- Diffstat: Makefile | 4 +- arch/alpha/include/asm/io.h | 6 +-- arch/arm64/Kconfig | 2 +- arch/arm64/kernel/process.c | 2 +- arch/arm64/mm/proc.S | 4 +- arch/m68k/include/asm/raw_io.h | 20 ++++---- arch/parisc/include/asm/page.h | 2 +- arch/sparc/kernel/mdesc.c | 3 +- arch/x86/xen/enlighten.c | 15 +++--- drivers/edac/synopsys_edac.c | 2 +- drivers/hid/hid-betopff.c | 13 +++-- drivers/hid/usbhid/hid-core.c | 13 ++++- drivers/ipack/devices/ipoctal.c | 63 +++++++++++++++++------ drivers/net/ethernet/i825xx/82596.c | 2 +- drivers/net/ethernet/intel/e100.c | 22 +++++--- drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 3 ++ drivers/net/hamradio/6pack.c | 4 +- drivers/net/usb/hso.c | 12 ++--- drivers/scsi/scsi_transport_iscsi.c | 8 +-- drivers/spi/spi-tegra20-slink.c | 4 +- drivers/tty/vt/vt.c | 21 +++++++- drivers/usb/gadget/udc/r8a66597-udc.c | 2 +- drivers/usb/musb/tusb6010.c | 1 + drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/mos7840.c | 2 - drivers/usb/serial/option.c | 11 +++- fs/cifs/connect.c | 5 +- fs/ext4/dir.c | 6 +-- fs/qnx4/dir.c | 69 +++++++++++++++++++------- include/linux/compiler.h | 2 + include/linux/cred.h | 14 ++++-- kernel/trace/blktrace.c | 8 +++ net/mac80211/wpa.c | 6 +++ net/netfilter/ipset/ip_set_hash_gen.h | 4 +- net/netfilter/ipvs/ip_vs_conn.c | 4 ++ 35 files changed, 254 insertions(+), 106 deletions(-)