This is the start of the stable review cycle for the 4.14.299 release. There are 40 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 10 Nov 2022 13:33:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.299-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.14.299-rc1 Dokyung Song <dokyung.song@xxxxxxxxx> wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> linux/bits.h: make BIT(), GENMASK(), and friends available in assembly Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> linux/const.h: move UL() macro to include/linux/const.h Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> linux/const.h: prefix include guard of uapi/linux/const.h with _UAPI Maxim Levitsky <mlevitsk@xxxxxxxxxx> KVM: x86: emulator: update the emulation mode after CR0 write Maxim Levitsky <mlevitsk@xxxxxxxxxx> KVM: x86: emulator: introduce emulator_recalc_and_set_mode Maxim Levitsky <mlevitsk@xxxxxxxxxx> KVM: x86: emulator: em_sysexit should update ctxt->mode Jim Mattson <jmattson@xxxxxxxxxx> KVM: x86: Mask off reserved bits in CPUID.80000008H Ye Bin <yebin10@xxxxxxxxxx> ext4: fix warning in 'ext4_da_release_space' Helge Deller <deller@xxxxxx> parisc: Export iosapic_serial_irq() symbol for serial port driver Helge Deller <deller@xxxxxx> parisc: Make 8250_gsc driver dependend on CONFIG_PARISC Ard Biesheuvel <ardb@xxxxxxxxxx> efi: random: reduce seed size to 32 bytes John Veness <john-linux@xxxxxxxxxxxxx> ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> capabilities: fix potential memleak on error path from vfs_getxattr_alloc() Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp/udp: Make early_demux back namespacified. David Sterba <dsterba@xxxxxxxx> btrfs: fix type of parameter generation in btrfs_get_dentry Yu Kuai <yukuai3@xxxxxxxxxx> block, bfq: protect 'bfqd->queued' by 'bfqd->lock' Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: L2CAP: Fix attempting to access uninitialized memory Martin Tůma <martin.tuma@xxxxxxxxxxxxxxxxxxxxx> i2c: xiic: Add platform module alias Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: dvb-frontends/drxk: initialize err to 0 Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE Chen Zhongjin <chenzhongjin@xxxxxxxxxx> net, neigh: Fix null-ptr-deref in neigh_table_clear() Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> net: mdio: fix undefined behavior in bit shift for __mdiobus_register Zhengchao Shao <shaozhengchao@xxxxxxxxxx> Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() Maxim Mikityanskiy <maxtram95@xxxxxxxxx> Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix ulist leaks in error paths of qgroup self tests Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix inode list leak during backref walking at resolve_indirect_refs() Yang Yingliang <yangyingliang@xxxxxxxxxx> isdn: mISDN: netjet: fix wrong check of device registration Yang Yingliang <yangyingliang@xxxxxxxxxx> mISDN: fix possible memory leak in mISDN_register_device() Zhang Qilong <zhangqilong3@xxxxxxxxxx> rose: Fix NULL pointer dereference in rose_send_frame() Jason A. Donenfeld <Jason@xxxxxxxxx> ipvs: use explicitly signed chars Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: sched: Fix use after free in red_enqueue() Sergey Shtylyov <s.shtylyov@xxxxxx> ata: pata_legacy: fix pdc20230_set_piomode() Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> net: fec: fix improper use of NETDEV_TX_BUSY Shang XiaoJing <shangxiaojing@xxxxxxxxxx> nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() Shang XiaoJing <shangxiaojing@xxxxxxxxxx> nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() Chen Zhongjin <chenzhongjin@xxxxxxxxxx> net: dsa: Fix possible memory leaks in dsa_loop_init() Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx> nfs4: Fix kmemleak when allocate slot failed Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: Handle RECLAIM_COMPLETE trunking errors ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/memory.h | 6 -- arch/arm64/include/asm/memory.h | 6 -- arch/unicore32/include/asm/memory.h | 6 -- arch/x86/kvm/cpuid.c | 1 + arch/x86/kvm/emulate.c | 102 +++++++++++++++------ block/bfq-iosched.c | 4 +- drivers/ata/pata_legacy.c | 5 +- drivers/firmware/efi/efi.c | 2 +- drivers/i2c/busses/i2c-xiic.c | 1 + drivers/isdn/hardware/mISDN/netjet.c | 2 +- drivers/isdn/mISDN/core.c | 5 +- drivers/media/dvb-frontends/drxk_hard.c | 2 +- drivers/media/platform/s5p-cec/s5p_cec.c | 2 + drivers/net/dsa/dsa_loop.c | 25 +++-- drivers/net/ethernet/freescale/fec_main.c | 4 +- drivers/net/phy/mdio_bus.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 4 + drivers/nfc/nfcmrvl/i2c.c | 7 +- drivers/nfc/s3fwrn5/core.c | 8 +- drivers/parisc/iosapic.c | 1 + drivers/tty/serial/8250/Kconfig | 2 +- fs/btrfs/backref.c | 36 ++++---- fs/btrfs/export.c | 2 +- fs/btrfs/export.h | 2 +- fs/btrfs/tests/qgroup-tests.c | 20 +++- fs/ext4/migrate.c | 3 +- fs/nfs/nfs4client.c | 1 + fs/nfs/nfs4state.c | 2 + include/linux/bits.h | 17 ++-- include/linux/const.h | 9 ++ include/linux/efi.h | 2 +- include/net/protocol.h | 4 - include/net/tcp.h | 2 + include/net/udp.h | 1 + include/uapi/linux/const.h | 9 +- net/bluetooth/l2cap_core.c | 52 +++++++++-- net/core/neighbour.c | 2 +- net/ipv4/af_inet.c | 14 +-- net/ipv4/ip_input.c | 32 ++++--- net/ipv4/sysctl_net_ipv4.c | 59 +----------- net/ipv6/ip6_input.c | 23 +++-- net/ipv6/tcp_ipv6.c | 9 +- net/ipv6/udp.c | 9 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/rose/rose_link.c | 3 + net/sched/sch_red.c | 4 +- security/commoncap.c | 6 +- sound/usb/quirks-table.h | 58 ++++++++++++ sound/usb/quirks.c | 1 + 50 files changed, 358 insertions(+), 229 deletions(-)