This is the start of the stable review cycle for the 5.4.190 release. There are 63 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 20 Apr 2022 12:11:14 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.190-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.190-rc1 Duoming Zhou <duoming@xxxxxxxxxx> ax25: Fix UAF bugs in ax25 timers Duoming Zhou <duoming@xxxxxxxxxx> ax25: Fix NULL pointer dereferences in ax25 timers Duoming Zhou <duoming@xxxxxxxxxx> ax25: fix NPD bug in ax25_disconnect Duoming Zhou <duoming@xxxxxxxxxx> ax25: fix UAF bug in ax25_send_control() Duoming Zhou <duoming@xxxxxxxxxx> ax25: Fix refcount leaks caused by ax25_cb_del() Duoming Zhou <duoming@xxxxxxxxxx> ax25: fix UAF bugs of net_device caused by rebinding operation Duoming Zhou <duoming@xxxxxxxxxx> ax25: fix reference count leaks of ax25_dev Duoming Zhou <duoming@xxxxxxxxxx> ax25: add refcount in ax25_dev to avoid UAF bugs Chao Gao <chao.gao@xxxxxxxxx> dma-direct: avoid redundant memory sync for swiotlb Martin Povišer <povik+lin@xxxxxxxxxxx> i2c: pasemi: Wait for write xfers to finish Nadav Amit <namit@xxxxxxxxxx> smp: Fix offline cpu check in flush_smp_call_function_queue() Mikulas Patocka <mpatocka@xxxxxxxxxx> dm integrity: fix memory corruption when tag_size is less than digest size Nathan Chancellor <nathan@xxxxxxxxxx> ARM: davinci: da850-evm: Avoid NULL pointer dereference Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx> tick/nohz: Use WARN_ON_ONCE() to prevent console saturation Rei Yamamoto <yamamoto.rei@xxxxxxxxxxxxxx> genirq/affinity: Consider that CPUs on nodes can be unbalanced Melissa Wen <mwen@xxxxxxxxxx> drm/amd/display: don't ignore alpha property on pre-multiplied mode Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> ipv6: fix panic when forwarding a pkt with no in6 dev Fabio M. De Francesco <fmdefrancesco@xxxxxxxxx> ALSA: pcm: Test for "silence" field in struct "pcm_format_data" Tim Crawford <tcrawford@xxxxxxxxxxxx> ALSA: hda/realtek: Add quirk for Clevo PD50PNT Naohiro Aota <naohiro.aota@xxxxxxx> btrfs: mark resumed async balance as writing Nathan Chancellor <nathan@xxxxxxxxxx> btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() Toke Høiland-Jørgensen <toke@xxxxxxxxxx> ath9k: Fix usage of driver-private space in tx_info Toke Høiland-Jørgensen <toke@xxxxxxx> ath9k: Properly clear TX status area before reporting to mac80211 Jason A. Donenfeld <Jason@xxxxxxxxx> gcc-plugins: latent_entropy: use /dev/urandom Oliver Upton <oupton@xxxxxxxxxx> KVM: Don't create VM debugfs files outside of the VM directory Patrick Wang <patrick.wang.shcn@xxxxxxxxx> mm: kmemleak: take a full lowmem check in kmemleak_*_phys() Juergen Gross <jgross@xxxxxxxx> mm, page_alloc: fix build_zonerefs_node() Borislav Petkov <bp@xxxxxxx> perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant Duoming Zhou <duoming@xxxxxxxxxx> drivers: net: slip: fix NPD bug in sl_tx_timeout() Chandrakanth patil <chandrakanth.patil@xxxxxxxxxxxx> scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan Alexey Galakhov <agalakhov@xxxxxxxxx> scsi: mvsas: Add PCI ID of RocketRaid 2640 Kefeng Wang <wangkefeng.wang@xxxxxxxxxx> powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit Roman Li <Roman.Li@xxxxxxx> drm/amd/display: Fix allocate_mst_payload assert on resume Marcin Kozlowski <marcinguy@xxxxxxxxx> net: usb: aqc111: Fix out-of-bounds accesses in RX fixup Steve Capper <steve.capper@xxxxxxx> tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry Joey Gouly <joey.gouly@xxxxxxx> arm64: alternatives: mark patch_alternative() as `noinstr` Jonathan Bakker <xc-racer2@xxxxxxx> regulator: wm8994: Add an off-on delay for WM8994 variant Leo Ruan <tingquan.ruan@xxxxxxxxxxxx> gpu: ipu-v3: Fix dev_dbg frequency output Christian Lamparter <chunkeey@xxxxxxxxx> ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs Randy Dunlap <rdunlap@xxxxxxxxxxxxx> net: micrel: fix KS8851_MLL Kconfig Tyrel Datwyler <tyreld@xxxxxxxxxxxxx> scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 Xiaoguang Wang <xiaoguang.wang@xxxxxxxxxxxxxxxxx> scsi: target: tcmu: Fix possible page UAF Michael Kelley <mikelley@xxxxxxxxxxxxx> Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer QintaoShen <unSimple1993@xxxxxxx> drm/amdkfd: Check for potential null return of kmalloc_array() Tushar Patel <tushar.patel@xxxxxxx> drm/amdkfd: Fix Incorrect VMIDs passed to HWS Leo (Hanghong) Ma <hanghong.ma@xxxxxxx> drm/amd/display: Update VTEM Infopacket definition Charlene Liu <Charlene.Liu@xxxxxxx> drm/amd/display: fix audio format not updated after edid updated Aurabindo Pillai <aurabindo.pillai@xxxxxxx> drm/amd: Add USBC connector ID Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx> cifs: potential buffer overflow in handling symlinks Lin Ma <linma@xxxxxxxxxx> nfc: nci: add flush_workqueue to prevent uaf Athira Rajeev <atrajeev@xxxxxxxxxxxxxxxxxx> testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set Petr Malat <oss@xxxxxxxxx> sctp: Initialize daddr on peeled off socket Karsten Graul <kgraul@xxxxxxxxxxxxx> net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() Stephen Boyd <swboyd@xxxxxxxxxxxx> drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() Rameshkumar Sundaram <quic_ramess@xxxxxxxxxxx> cfg80211: hold bss_lock while updating nontrans_list Benedikt Spranger <b.spranger@xxxxxxxxxxxxx> net/sched: taprio: Check if socket flags are valid Dinh Nguyen <dinguyen@xxxxxxxxxx> net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx> net/sched: fix initialization order when updating chain 0 head Vadim Pasternak <vadimp@xxxxxxxxxx> mlxsw: i2c: Fix initialization error flow Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> gpiolib: acpi: use correct format characters Guillaume Nault <gnault@xxxxxxxxxx> veth: Ensure eth header is in skb's linear part Vlad Buslov <vladbu@xxxxxxxxxx> net/sched: flower: fix parsing of ethertype following VLAN header Miaoqian Lin <linmq006@xxxxxxxxx> memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe ------------- Diffstat: Makefile | 4 +- arch/arm/mach-davinci/board-da850-evm.c | 4 +- arch/arm64/kernel/alternative.c | 6 +-- arch/powerpc/include/asm/page.h | 6 ++- drivers/ata/libata-core.c | 3 ++ drivers/gpio/gpiolib-acpi.c | 4 +- drivers/gpu/drm/amd/amdgpu/ObjectID.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_device.c | 11 ++---- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 2 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 4 +- .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 14 ++++--- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14 ++++--- .../amd/display/modules/info_packet/info_packet.c | 5 ++- drivers/gpu/drm/msm/dsi/dsi_manager.c | 2 +- drivers/gpu/ipu-v3/ipu-di.c | 5 ++- drivers/hv/ring_buffer.c | 11 +++++- drivers/i2c/busses/i2c-pasemi.c | 6 +++ drivers/md/dm-integrity.c | 7 +++- drivers/memory/atmel-ebi.c | 23 ++++++++--- drivers/net/ethernet/mellanox/mlxsw/i2c.c | 1 + drivers/net/ethernet/micrel/Kconfig | 1 + drivers/net/ethernet/stmicro/stmmac/altr_tse_pcs.c | 8 ---- drivers/net/ethernet/stmicro/stmmac/altr_tse_pcs.h | 4 ++ .../net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 13 +++---- drivers/net/slip/slip.c | 2 +- drivers/net/usb/aqc111.c | 9 ++++- drivers/net/veth.c | 2 +- drivers/net/wireless/ath/ath9k/main.c | 2 +- drivers/net/wireless/ath/ath9k/xmit.c | 33 ++++++++++------ drivers/perf/fsl_imx8_ddr_perf.c | 2 +- drivers/regulator/wm8994-regulator.c | 42 +++++++++++++++++++-- drivers/scsi/ibmvscsi_tgt/ibmvscsi_tgt.c | 2 +- drivers/scsi/megaraid/megaraid_sas.h | 3 ++ drivers/scsi/megaraid/megaraid_sas_base.c | 7 ++++ drivers/scsi/mvsas/mv_init.c | 1 + drivers/target/target_core_user.c | 3 +- fs/btrfs/block-group.c | 4 -- fs/btrfs/volumes.c | 2 + fs/cifs/link.c | 3 ++ include/asm-generic/tlb.h | 10 +++-- include/net/ax25.h | 12 ++++++ include/net/flow_dissector.h | 2 + kernel/dma/direct.c | 3 +- kernel/irq/affinity.c | 5 ++- kernel/smp.c | 2 +- kernel/time/tick-sched.c | 2 +- mm/kmemleak.c | 8 ++-- mm/page_alloc.c | 2 +- net/ax25/af_ax25.c | 38 +++++++++++++++---- net/ax25/ax25_dev.c | 28 +++++++++++--- net/ax25/ax25_route.c | 13 ++++++- net/ax25/ax25_subr.c | 20 +++++++--- net/core/flow_dissector.c | 1 + net/ipv6/ip6_output.c | 2 +- net/nfc/nci/core.c | 4 ++ net/sched/cls_api.c | 2 +- net/sched/cls_flower.c | 18 ++++++--- net/sched/sch_taprio.c | 3 +- net/sctp/socket.c | 2 +- net/smc/smc_pnet.c | 5 ++- net/wireless/scan.c | 2 + scripts/gcc-plugins/latent_entropy_plugin.c | 44 +++++++++++++--------- sound/core/pcm_misc.c | 2 +- sound/pci/hda/patch_realtek.c | 1 + tools/testing/selftests/mqueue/mq_perf_tests.c | 25 ++++++++---- virt/kvm/kvm_main.c | 10 ++++- 68 files changed, 386 insertions(+), 161 deletions(-)
