This is the start of the stable review cycle for the 4.9.292 release. There are 62 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 08 Dec 2021 14:55:37 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.292-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.292-rc1 Johan Hovold <johan@xxxxxxxxxx> serial: core: fix transmit-buffer reset and memleak Pierre Gondois <Pierre.Gondois@xxxxxxx> serial: pl011: Add ACPI SBSA UART match id Sven Eckelmann <sven@xxxxxxxxxxxxx> tty: serial: msm_serial: Deactivate RX DMA for polling support Maciej W. Rozycki <macro@xxxxxxxxxxx> vgacon: Propagate console boot parameters before calling `vc_resize' Helge Deller <deller@xxxxxx> parisc: Fix "make install" on newer debian releases William Kucharski <william.kucharski@xxxxxxxxxx> net/rds: correct socket tunable error in rds_tcp_tune() Arnd Bergmann <arnd@xxxxxxxx> siphash: use _unaligned version by default Zhou Qingyang <zhou1615@xxxxxxx> net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() Randy Dunlap <rdunlap@xxxxxxxxxxxxx> natsemi: xtensa: fix section mismatch warnings Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> fget: check that the fd still exists after getting a ref to it Jens Axboe <axboe@xxxxxxxxx> fs: add fget_many() and fput_many() Baokun Li <libaokun1@xxxxxxxxxx> sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl Baokun Li <libaokun1@xxxxxxxxxx> sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl Masami Hiramatsu <mhiramat@xxxxxxxxxx> kprobes: Limit max data_size of the kretprobe instances Stephen Suryaputra <ssuryaextr@xxxxxxxxx> vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit Teng Qi <starmiku1207184332@xxxxxxxxx> net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() zhangyue <zhangyue1@xxxxxxxxxx> net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound Teng Qi <starmiku1207184332@xxxxxxxxx> ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() Mike Christie <michael.christie@xxxxxxxxxx> scsi: iscsi: Unblock session then wake up error handler Manaf Meethalavalappu Pallikunhi <manafm@xxxxxxxxxxxxxx> thermal: core: Reset previous low and high trip during thermal zone init Vasily Gorbik <gor@xxxxxxxxxxxxx> s390/setup: avoid using memblock_enforce_memory_limit Slark Xiao <slark_xiao@xxxxxxx> platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep liuguoqiang <liuguoqiang@xxxxxxxxxxxxx> net: return correct error code Mike Kravetz <mike.kravetz@xxxxxxxxxx> hugetlb: take PMD sharing into account when flushing tlb/caches Benjamin Coddington <bcodding@xxxxxxxxxx> NFSv42: Fix pagecache invalidation after COPY/CLONE Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx> shm: extend forced shm destroy to support objects from several IPC nses Juergen Gross <jgross@xxxxxxxx> tty: hvc: replace BUG_ON() with negative return value Juergen Gross <jgross@xxxxxxxx> xen/netfront: don't trust the backend response data blindly Juergen Gross <jgross@xxxxxxxx> xen/netfront: disentangle tx_skb_freelist Juergen Gross <jgross@xxxxxxxx> xen/netfront: don't read data from request on the ring page Juergen Gross <jgross@xxxxxxxx> xen/netfront: read response from backend only once Juergen Gross <jgross@xxxxxxxx> xen/blkfront: don't trust the backend response data blindly Juergen Gross <jgross@xxxxxxxx> xen/blkfront: don't take local copy of a request from the ring page Juergen Gross <jgross@xxxxxxxx> xen/blkfront: read response from backend only once Juergen Gross <jgross@xxxxxxxx> xen: sync include/xen/interface/io/ring.h with Xen's newest version Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: release pipe buf after last use Lin Ma <linma@xxxxxxxxxx> NFC: add NCI_UNREG flag to eliminate the race David Hildenbrand <david@xxxxxxxxxx> proc/vmcore: fix clearing user buffer by properly using clear_user() Stefano Garzarella <sgarzare@xxxxxxxxxx> vhost/vsock: fix incorrect used length reported to the guest Nadav Amit <namit@xxxxxxxxxx> hugetlbfs: flush TLBs correctly after huge_pmd_unshare Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Check pid filtering when creating events Eric Dumazet <edumazet@xxxxxxxxxx> tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows Thomas Zeitlhofer <thomas.zeitlhofer+lkml@xxxxxxxx> PM: hibernate: use correct mode for swsusp_close() Dan Carpenter <dan.carpenter@xxxxxxxxxx> drm/vc4: fix error code in vc4_create_object() Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxx> scsi: mpt3sas: Fix kernel panic during drive powercycle test Takashi Iwai <tiwai@xxxxxxx> ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv42: Don't fail clone() unless the OP_CLONE operation failed Alexander Aring <aahringo@xxxxxxxxxx> net: ieee802154: handle iftypes as u32 Takashi Iwai <tiwai@xxxxxxx> ASoC: topology: Add missing rwsem around snd_ctl_remove() calls Florian Fainelli <f.fainelli@xxxxxxxxx> ARM: dts: BCM5301X: Add interrupt properties to GPIO node Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Fix pid filtering when triggers are attached Stefano Stabellini <stefano.stabellini@xxxxxxxxxx> xen: detect uninitialized xenbus in xenbus_init Stefano Stabellini <stefano.stabellini@xxxxxxxxxx> xen: don't continue xenstore initialization in case of errors Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: fix page stealing Dan Carpenter <dan.carpenter@xxxxxxxxxx> staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() Takashi Iwai <tiwai@xxxxxxx> ALSA: ctxfi: Fix out-of-range access Todd Kjos <tkjos@xxxxxxxxxx> binder: fix test regression due to sender_euid change Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> usb: hub: Fix locking issues with address0_mutex Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> usb: hub: Fix usb enumeration issue due to address0 race Mingjie Zhang <superzmj@xxxxxxxxxxx> USB: serial: option: add Fibocom FM101-GL variants Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: option: add Telit LE910S1 0x9200 composition Lee Jones <lee.jones@xxxxxxxxxx> staging: ion: Prevent incorrect reference counting behavour ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/bcm5301x.dtsi | 2 + arch/arm/include/asm/tlb.h | 8 + arch/arm/mach-socfpga/core.h | 2 +- arch/arm/mach-socfpga/platsmp.c | 8 +- arch/ia64/include/asm/tlb.h | 10 + arch/parisc/install.sh | 1 + arch/s390/include/asm/tlb.h | 14 ++ arch/s390/kernel/setup.c | 3 - arch/sh/include/asm/tlb.h | 10 + arch/um/include/asm/tlb.h | 12 + drivers/android/binder.c | 2 +- drivers/ata/sata_fsl.c | 20 +- drivers/block/xen-blkfront.c | 126 ++++++---- drivers/gpu/drm/vc4/vc4_bo.c | 2 +- drivers/net/ethernet/dec/tulip/de4x5.c | 34 +-- drivers/net/ethernet/hisilicon/hns/hns_dsaf_misc.c | 4 + drivers/net/ethernet/natsemi/xtsonic.c | 2 +- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 10 +- drivers/net/vrf.c | 2 + drivers/net/xen-netfront.c | 257 +++++++++++++-------- drivers/platform/x86/thinkpad_acpi.c | 12 - drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +- drivers/scsi/scsi_transport_iscsi.c | 6 +- drivers/staging/android/ion/ion.c | 6 + drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 3 +- drivers/thermal/thermal_core.c | 2 + drivers/tty/hvc/hvc_xen.c | 17 +- drivers/tty/serial/amba-pl011.c | 1 + drivers/tty/serial/msm_serial.c | 3 + drivers/tty/serial/serial_core.c | 13 +- drivers/usb/core/hub.c | 23 +- drivers/usb/serial/option.c | 5 + drivers/vhost/vsock.c | 2 +- drivers/video/console/vgacon.c | 14 +- drivers/xen/xenbus/xenbus_probe.c | 27 ++- fs/file.c | 19 +- fs/file_table.c | 9 +- fs/fuse/dev.c | 14 +- fs/nfs/nfs42proc.c | 5 +- fs/nfs/nfs42xdr.c | 3 +- fs/proc/vmcore.c | 15 +- include/asm-generic/tlb.h | 2 + include/linux/file.h | 2 + include/linux/fs.h | 4 +- include/linux/ipc_namespace.h | 15 ++ include/linux/kprobes.h | 2 + include/linux/sched.h | 2 +- include/linux/shm.h | 13 +- include/linux/siphash.h | 14 +- include/net/nfc/nci_core.h | 1 + include/net/nl802154.h | 7 +- include/xen/interface/io/ring.h | 257 ++++++++++----------- ipc/shm.c | 176 ++++++++++---- kernel/kprobes.c | 3 + kernel/power/hibernate.c | 6 +- kernel/trace/trace.h | 24 +- kernel/trace/trace_events.c | 7 + lib/siphash.c | 12 +- mm/hugetlb.c | 72 +++++- mm/memory.c | 16 ++ net/ipv4/devinet.c | 2 +- net/ipv4/tcp_cubic.c | 5 +- net/nfc/nci/core.c | 19 +- net/rds/tcp.c | 2 +- sound/pci/ctxfi/ctamixer.c | 14 +- sound/pci/ctxfi/ctdaio.c | 16 +- sound/pci/ctxfi/ctresource.c | 7 +- sound/pci/ctxfi/ctresource.h | 4 +- sound/pci/ctxfi/ctsrc.c | 7 +- sound/soc/soc-topology.c | 3 + 71 files changed, 967 insertions(+), 481 deletions(-)
