This is the start of the stable review cycle for the 5.4.208 release. There are 87 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 29 Jul 2022 16:09:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.208-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.208-rc1 Jan Beulich <jbeulich@xxxxxxxx> x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() Jose Alonso <joalonsof@xxxxxxxxx> net: usb: ax88179_178a needs FLAG_SEND_ZLP Jiri Slaby <jslaby@xxxxxxx> tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() Jiri Slaby <jslaby@xxxxxxx> tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() Jiri Slaby <jslaby@xxxxxxx> tty: drop tty_schedule_flip() Jiri Slaby <jslaby@xxxxxxx> tty: the rest, stop using tty_schedule_flip() Jiri Slaby <jslaby@xxxxxxx> tty: drivers/tty/, stop using tty_schedule_flip() Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: SCO: Fix sco_send_frame returning skb->len Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: Fix passing NULL to PTR_ERR Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: Add bt_skb_sendmmsg helper Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: Add bt_skb_sendmsg helper Takashi Iwai <tiwai@xxxxxxx> ALSA: memalloc: Align buffer allocations in page size Peter Zijlstra <peterz@xxxxxxxxxxxxx> bitfield.h: Fix "type of reg too small for mask" test Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/mce: Deduplicate exception handling Michel Lespinasse <walken@xxxxxxxxxx> mmap locking API: initial implementation as rwsem wrappers Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/uaccess: Implement macros for CMPXCHG on user addresses Al Viro <viro@xxxxxxxxxxxxxxxxxx> x86: get rid of small constant size cases in raw_copy_{to,from}_user() Will Deacon <will@xxxxxxxxxx> locking/refcount: Consolidate implementations of refcount_t Will Deacon <will@xxxxxxxxxx> locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions Will Deacon <will@xxxxxxxxxx> locking/refcount: Move saturation warnings out of line Will Deacon <will@xxxxxxxxxx> locking/refcount: Improve performance of generic REFCOUNT_FULL code Will Deacon <will@xxxxxxxxxx> locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the <linux/refcount.h> header Will Deacon <will@xxxxxxxxxx> locking/refcount: Remove unused refcount_*_checked() variants Will Deacon <will@xxxxxxxxxx> locking/refcount: Ensure integer operands are treated as signed Will Deacon <will@xxxxxxxxxx> locking/refcount: Define constants for saturation and max refcount values GUO Zihua <guozihua@xxxxxxxxxx> ima: remove the IMA_TEMPLATE Kconfig option Alexander Aring <aahringo@xxxxxxxxxx> dlm: fix pending remove if msg allocation fails Eric Dumazet <edumazet@xxxxxxxxxx> bpf: Make sure mac_header was set before using it Wang Cheng <wanngchenng@xxxxxxxxx> mm/mempolicy: fix uninit-value in mpol_rebind_policy() Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_max_reordering. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_rfc1337. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_stdurg. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_retrans_collapse. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_recovery. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_early_retrans. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl knobs related to SYN option. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> udp: Fix a data-race around sysctl_udp_l3mdev_accept. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. Hristo Venev <hristo@xxxxxxxxxx> be2net: Fix buffer overflow in be_get_module_eeprom Haibo Chen <haibo.chen@xxxxxxx> gpio: pca953x: only use single read/write for No AI mode Piotr Skajewski <piotrx.skajewski@xxxxxxxxx> ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero Dawid Lukwinski <dawid.lukwinski@xxxxxxxxx> i40e: Fix erroneous adapter reinitialization during recovery process Przemyslaw Patynowski <przemyslawx.patynowski@xxxxxxxxx> iavf: Fix handling of dummy receive descriptors Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_fastopen. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_max_syn_backlog. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_tw_reuse. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_notsent_lowat. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around some timeout sysctl knobs. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_reordering. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_syncookies. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> igmp: Fix a data-race around sysctl_igmp_max_memberships. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> igmp: Fix data-races around sysctl_igmp_llm_reports. Tariq Toukan <tariqt@xxxxxxxxxx> net/tls: Fix race in TLS device down flow Junxiao Chang <junxiao.chang@xxxxxxxxx> net: stmmac: fix dma queue left shift overflow issue Robert Hancock <robert.hancock@xxxxxxxxxx> i2c: cadence: Change large transfer count reset logic to be unconditional Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_probe_interval. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_probe_threshold. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_min_snd_mss. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_base_mss. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix data-races around sysctl_tcp_mtu_probing. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> ip: Fix a data-race around sysctl_fwmark_reflect. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> ip: Fix data-races around sysctl_ip_nonlocal_bind. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> ip: Fix data-races around sysctl_ip_fwd_use_pmtu. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> ip: Fix data-races around sysctl_ip_no_pmtu_disc. Lennert Buytenhek <buytenh@xxxxxxxxxxxxxx> igc: Reinstate IGC_REMOVED logic and implement it properly Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() William Dean <williamsukatube@xxxxxxxxx> pinctrl: ralink: Check for null return of devm_kcalloc Miaoqian Lin <linmq006@xxxxxxxxx> power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe Hangyu Hua <hbh25y@xxxxxxxxx> xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() Pali Rohár <pali@xxxxxxxxxx> serial: mvebu-uart: correctly report configured baudrate value Jeffrey Hugo <quic_jhugo@xxxxxxxxxxx> PCI: hv: Fix interrupt mapping for multi-MSI Jeffrey Hugo <quic_jhugo@xxxxxxxxxxx> PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() Jeffrey Hugo <quic_jhugo@xxxxxxxxxxx> PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI Jeffrey Hugo <quic_jhugo@xxxxxxxxxxx> PCI: hv: Fix multi-MSI to allow more than one MSI vector Demi Marie Obenour <demi@xxxxxxxxxxxxxxxxxxxxxx> xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE Eric Snowberg <eric.snowberg@xxxxxxxxxx> lockdown: Fix kexec lockdown bypass with ima policy Ido Schimmel <idosch@xxxxxxxxxx> mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication Ben Dooks <ben.dooks@xxxxxxxxxxxxxxx> riscv: add as-options for modules with assembly compontents Fabien Dessenne <fabien.dessenne@xxxxxxxxxxx> pinctrl: stm32: fix optional IRQ support to gpios ------------- Diffstat: Makefile | 4 +- arch/Kconfig | 21 -- arch/alpha/kernel/srmcons.c | 2 +- arch/arm/Kconfig | 1 - arch/arm64/Kconfig | 1 - arch/riscv/Makefile | 1 + arch/s390/configs/debug_defconfig | 1 - arch/x86/Kconfig | 1 - arch/x86/include/asm/asm.h | 6 - arch/x86/include/asm/refcount.h | 126 ---------- arch/x86/include/asm/uaccess.h | 154 +++++++++++- arch/x86/include/asm/uaccess_32.h | 27 --- arch/x86/include/asm/uaccess_64.h | 108 +-------- arch/x86/kernel/cpu/mce/core.c | 34 +-- arch/x86/mm/extable.c | 49 ---- drivers/crypto/chelsio/chtls/chtls_cm.c | 6 +- drivers/gpio/gpio-pca953x.c | 3 + drivers/gpu/drm/i915/Kconfig.debug | 1 - drivers/i2c/busses/i2c-cadence.c | 30 +-- drivers/misc/lkdtm/refcount.c | 8 - drivers/net/ethernet/emulex/benet/be_cmds.c | 10 +- drivers/net/ethernet/emulex/benet/be_cmds.h | 2 +- drivers/net/ethernet/emulex/benet/be_ethtool.c | 31 ++- drivers/net/ethernet/intel/i40e/i40e_main.c | 13 +- drivers/net/ethernet/intel/iavf/iavf_txrx.c | 5 +- drivers/net/ethernet/intel/igc/igc_regs.h | 2 + drivers/net/ethernet/intel/ixgbe/ixgbe.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 + drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 6 + .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 2 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 3 + drivers/net/usb/ax88179_178a.c | 16 +- drivers/pci/controller/pci-hyperv.c | 100 ++++++-- drivers/pinctrl/stm32/pinctrl-stm32.c | 18 +- drivers/power/reset/arm-versatile-reboot.c | 1 + drivers/s390/char/keyboard.h | 4 +- drivers/spi/spi-bcm2835.c | 12 +- drivers/staging/mt7621-pinctrl/pinctrl-rt2880.c | 2 + drivers/staging/speakup/spk_ttyio.c | 4 +- drivers/tty/cyclades.c | 6 +- drivers/tty/goldfish.c | 2 +- drivers/tty/moxa.c | 4 +- drivers/tty/pty.c | 14 +- drivers/tty/serial/lpc32xx_hs.c | 2 +- drivers/tty/serial/mvebu-uart.c | 25 +- drivers/tty/tty_buffer.c | 66 +++-- drivers/tty/vt/keyboard.c | 6 +- drivers/tty/vt/vt.c | 2 +- drivers/xen/gntdev.c | 3 +- fs/dlm/lock.c | 3 +- include/linux/bitfield.h | 19 +- include/linux/mm.h | 1 + include/linux/mmap_lock.h | 54 +++++ include/linux/refcount.h | 269 ++++++++++++++++++--- include/linux/tty_flip.h | 4 +- include/net/bluetooth/bluetooth.h | 65 +++++ include/net/inet_sock.h | 5 +- include/net/ip.h | 4 +- include/net/tcp.h | 9 +- include/net/udp.h | 2 +- kernel/bpf/core.c | 8 +- kernel/events/core.c | 45 ++-- lib/refcount.c | 255 +++---------------- mm/mempolicy.c | 2 +- net/bluetooth/rfcomm/core.c | 50 +++- net/bluetooth/rfcomm/sock.c | 46 +--- net/bluetooth/sco.c | 30 +-- net/core/filter.c | 4 +- net/core/secure_seq.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/fib_semantics.c | 2 +- net/ipv4/icmp.c | 2 +- net/ipv4/igmp.c | 23 +- net/ipv4/route.c | 2 +- net/ipv4/syncookies.c | 9 +- net/ipv4/tcp.c | 10 +- net/ipv4/tcp_fastopen.c | 4 +- net/ipv4/tcp_input.c | 51 ++-- net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/tcp_metrics.c | 3 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/tcp_output.c | 29 +-- net/ipv4/tcp_recovery.c | 6 +- net/ipv4/tcp_timer.c | 20 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/syncookies.c | 3 +- net/sctp/protocol.c | 2 +- net/tls/tls_device.c | 8 +- net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_state.c | 2 +- security/integrity/ima/Kconfig | 12 +- security/integrity/ima/ima_policy.c | 4 + sound/core/memalloc.c | 1 + 93 files changed, 1046 insertions(+), 990 deletions(-)
