This is the start of the stable review cycle for the 5.10.154 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 10 Nov 2022 13:33:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.154-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.10.154-rc1 Vasily Averin <vvs@xxxxxxxxxxxxx> ipc: remove memcg accounting for sops objects in do_semtimedop() Dokyung Song <dokyung.song@xxxxxxxxx> wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915/sdvo: Setup DDC fully before output init Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915/sdvo: Filter out invalid outputs more sensibly Brian Norris <briannorris@xxxxxxxxxxxx> drm/rockchip: dsi: Force synchronous probe Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx> ext4,f2fs: fix readahead of verity data Maxim Levitsky <mlevitsk@xxxxxxxxxx> KVM: x86: emulator: update the emulation mode after CR0 write Maxim Levitsky <mlevitsk@xxxxxxxxxx> KVM: x86: emulator: introduce emulator_recalc_and_set_mode Maxim Levitsky <mlevitsk@xxxxxxxxxx> KVM: x86: emulator: em_sysexit should update ctxt->mode Jim Mattson <jmattson@xxxxxxxxxx> KVM: x86: Mask off reserved bits in CPUID.80000001H Jim Mattson <jmattson@xxxxxxxxxx> KVM: x86: Mask off reserved bits in CPUID.80000008H Jim Mattson <jmattson@xxxxxxxxxx> KVM: x86: Mask off reserved bits in CPUID.8000001AH Jim Mattson <jmattson@xxxxxxxxxx> KVM: x86: Mask off reserved bits in CPUID.80000006H Luís Henriques <lhenriques@xxxxxxx> ext4: fix BUG_ON() when directory entry has invalid rec_len Ye Bin <yebin10@xxxxxxxxxx> ext4: fix warning in 'ext4_da_release_space' Helge Deller <deller@xxxxxx> parisc: Avoid printing the hardware path twice Helge Deller <deller@xxxxxx> parisc: Export iosapic_serial_irq() symbol for serial port driver Helge Deller <deller@xxxxxx> parisc: Make 8250_gsc driver dependend on CONFIG_PARISC Kan Liang <kan.liang@xxxxxxxxxxxxxxx> perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] Kan Liang <kan.liang@xxxxxxxxxxxxxxx> perf/x86/intel: Fix pebs event constraints for ICL Ard Biesheuvel <ardb@xxxxxxxxxx> efi: random: Use 'ACPI reclaim' memory for random seed Ard Biesheuvel <ardb@xxxxxxxxxx> efi: random: reduce seed size to 32 bytes Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: add file_modified() to fallocate Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> capabilities: fix potential memleak on error path from vfs_getxattr_alloc() Zheng Yejian <zhengyejian1@xxxxxxxxxx> tracing/histogram: Update document for KEYS_MAX size Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx> tools/nolibc/string: Fix memcmp() implementation Li Qiang <liq3ea@xxxxxxx> kprobe: reverse kp->flags when arm_kprobe failed Shang XiaoJing <shangxiaojing@xxxxxxxxxx> tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp/udp: Make early_demux back namespacified. Li Huafei <lihuafei1@xxxxxxxxxx> ftrace: Fix use-after-free for dynamic ftrace_ops David Sterba <dsterba@xxxxxxxx> btrfs: fix type of parameter generation in btrfs_get_dentry James Clark <james.clark@xxxxxxx> coresight: cti: Fix hang in cti_disable_hw() Carlos Llamas <cmllamas@xxxxxxxxxx> binder: fix UAF of alloc->vma in race with munmap() Vasily Averin <vvs@xxxxxxxxxxxxx> memcg: enable accounting of ipc resources Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp/udp: Fix memory leak in ipv6_renew_options(). Eric Biggers <ebiggers@xxxxxxxxxx> fscrypt: fix keyring memory leak on mount failure Eric Biggers <ebiggers@xxxxxxxxxx> fscrypt: stop using keyrings subsystem for fscrypt_master_key Eric Biggers <ebiggers@xxxxxxxxxx> fscrypt: simplify master key locking John Veness <john-linux@xxxxxxxxxxxxx> ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices Yu Kuai <yukuai3@xxxxxxxxxx> block, bfq: protect 'bfqd->queued' by 'bfqd->lock' Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: L2CAP: Fix attempting to access uninitialized memory Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM Chen Zhongjin <chenzhongjin@xxxxxxxxxx> i2c: piix4: Fix adapter not be removed in piix4_remove() Cristian Marussi <cristian.marussi@xxxxxxx> arm64: dts: juno: Add thermal critical trip points Cristian Marussi <cristian.marussi@xxxxxxx> firmware: arm_scmi: Make Rx chan_setup fail on memory errors Cristian Marussi <cristian.marussi@xxxxxxx> firmware: arm_scmi: Suppress the driver's bind attributes Ioana Ciornei <ioana.ciornei@xxxxxxx> arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers Tim Harvey <tharvey@xxxxxxxxxxxxx> ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset Jerry Snitselaar <jsnitsel@xxxxxxxxxx> efi/tpm: Pass correct address to memblock_reserve Martin Tůma <martin.tuma@xxxxxxxxxxxxxxxxxxxxx> i2c: xiic: Add platform module alias Danijel Slivka <danijel.slivka@xxxxxxx> drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case Samuel Bailey <samuel.bailey1@xxxxxxxxx> HID: saitek: add madcatz variant of MMO7 mouse device ID Uday Shankar <ushankar@xxxxxxxxxxxxxxx> scsi: core: Restrict legal sdev_state transitions via sysfs Ashish Kalra <ashish.kalra@xxxxxxx> ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() Hangyu Hua <hbh25y@xxxxxxxxx> media: meson: vdec: fix possible refcount leak in vdec_probe() Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: dvb-frontends/drxk: initialize err to 0 Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx> media: rkisp1: Zero v4l2_subdev_format fields in when validating links Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx> media: rkisp1: Initialize color space on resizer sink and source pads Peter Oberparleiter <oberpar@xxxxxxxxxxxxx> s390/boot: add secure boot trailer Mario Limonciello <mario.limonciello@xxxxxxx> xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices Linus Walleij <linus.walleij@xxxxxxxxxx> mtd: parsers: bcm47xxpart: Fix halfblock reads Rafał Miłecki <rafal@xxxxxxxxxx> mtd: parsers: bcm47xxpart: print correct offset on read error Helge Deller <deller@xxxxxx> fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards Helge Deller <deller@xxxxxx> video/fbdev/stifb: Implement the stifb_fillrect() function Patrick Thompson <ptf@xxxxxxxxxx> mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake Jisheng Zhang <Jisheng.Zhang@xxxxxxxxxxxxx> mmc: sdhci-pci: Avoid comma separated statements Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus Johan Hovold <johan+linaro@xxxxxxxxxx> drm/msm/hdmi: fix IRQ lifetime Daniel Thompson <daniel.thompson@xxxxxxxxxx> drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ipv6: fix WARNING in ip6_route_net_exit_late() Chen Zhongjin <chenzhongjin@xxxxxxxxxx> net, neigh: Fix null-ptr-deref in neigh_table_clear() Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> net: mdio: fix undefined behavior in bit shift for __mdiobus_register Zhengchao Shao <shaozhengchao@xxxxxxxxxx> Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() Maxim Mikityanskiy <maxtram95@xxxxxxxxx> Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix ulist leaks in error paths of qgroup self tests Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix inode list leak during backref walking at find_parent_nodes() Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix inode list leak during backref walking at resolve_indirect_refs() Yang Yingliang <yangyingliang@xxxxxxxxxx> isdn: mISDN: netjet: fix wrong check of device registration Yang Yingliang <yangyingliang@xxxxxxxxxx> mISDN: fix possible memory leak in mISDN_register_device() Zhang Qilong <zhangqilong3@xxxxxxxxxx> rose: Fix NULL pointer dereference in rose_send_frame() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ipvs: fix WARNING in ip_vs_app_net_cleanup() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ipvs: fix WARNING in __ip_vs_cleanup_batch() Jason A. Donenfeld <Jason@xxxxxxxxx> ipvs: use explicitly signed chars Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: release flow rule object from commit path Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> net: tun: fix bugs for oversize packet when napi frags enabled Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: sched: Fix use after free in red_enqueue() Sergey Shtylyov <s.shtylyov@xxxxxx> ata: pata_legacy: fix pdc20230_set_piomode() Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> net: fec: fix improper use of NETDEV_TX_BUSY Shang XiaoJing <shangxiaojing@xxxxxxxxxx> nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() Shang XiaoJing <shangxiaojing@xxxxxxxxxx> nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() Shang XiaoJing <shangxiaojing@xxxxxxxxxx> nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() wengjianfeng <wengjianfeng@xxxxxxxxxx> NFC: nxp-nci: remove unnecessary labels Shang XiaoJing <shangxiaojing@xxxxxxxxxx> nfc: fdp: Fix potential memory leak in fdp_nci_send() Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx> nfc: fdp: drop ftrace-like debugging messages Dan Carpenter <dan.carpenter@xxxxxxxxxx> RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() Chen Zhongjin <chenzhongjin@xxxxxxxxxx> RDMA/core: Fix null-ptr-deref in ib_core_cleanup() Chen Zhongjin <chenzhongjin@xxxxxxxxxx> net: dsa: Fix possible memory leaks in dsa_loop_init() Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx> nfs4: Fix kmemleak when allocate slot failed Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: Handle RECLAIM_COMPLETE trunking errors Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4: Fix a potential state reclaim deadlock Dean Luick <dean.luick@xxxxxxxxxxxxxxxxxxxx> IB/hfi1: Correctly move list in sc_disable() Håkon Bugge <haakon.bugge@xxxxxxxxxx> RDMA/cma: Use output interface for net_dev check Alexander Graf <graf@xxxxxxxxxx> KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER Alexander Graf <graf@xxxxxxxxxx> KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() Aaron Lewis <aaronlewis@xxxxxxxxxx> KVM: x86: Protect the unused bits in MSR exiting flags Zhang Rui <rui.zhang@xxxxxxxxx> x86/topology: Fix duplicated core ID within a package Zhang Rui <rui.zhang@xxxxxxxxx> x86/topology: Fix multiple packages shown on a single-package system Yazen Ghannam <yazen.ghannam@xxxxxxx> x86/topology: Set cpu_die_id only if DIE_TYPE found Sean Christopherson <seanjc@xxxxxxxxxx> KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) Sean Christopherson <seanjc@xxxxxxxxxx> KVM: x86: Trace re-injected exceptions Sean Christopherson <seanjc@xxxxxxxxxx> KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 Sean Christopherson <seanjc@xxxxxxxxxx> KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01 Lukas Wunner <lukas@xxxxxxxxx> serial: ar933x: Deassert Transmit Enable on ->rs485_config() Maciej W. Rozycki <macro@xxxxxxxxxxx> serial: 8250: Let drivers request full 16550A feature probing ------------- Diffstat: Documentation/trace/histogram.rst | 2 +- Makefile | 4 +- arch/arm/boot/dts/imx6qdl-gw5910.dtsi | 2 +- arch/arm/boot/dts/imx6qdl-gw5913.dtsi | 2 +- arch/arm64/boot/dts/arm/juno-base.dtsi | 14 + arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi | 6 + arch/parisc/include/asm/hardware.h | 12 +- arch/parisc/kernel/drivers.c | 14 +- arch/s390/boot/compressed/vmlinux.lds.S | 13 +- arch/x86/events/intel/core.c | 1 + arch/x86/events/intel/ds.c | 9 +- arch/x86/kernel/cpu/topology.c | 26 +- arch/x86/kvm/cpuid.c | 8 +- arch/x86/kvm/emulate.c | 102 +++-- arch/x86/kvm/trace.h | 12 +- arch/x86/kvm/vmx/nested.c | 30 +- arch/x86/kvm/vmx/vmx.h | 6 +- arch/x86/kvm/x86.c | 134 +++++- block/bfq-iosched.c | 4 +- drivers/acpi/apei/ghes.c | 2 +- drivers/android/binder_alloc.c | 6 +- drivers/ata/pata_legacy.c | 5 +- drivers/firmware/arm_scmi/driver.c | 9 +- drivers/firmware/efi/efi.c | 2 +- drivers/firmware/efi/libstub/random.c | 7 +- drivers/firmware/efi/tpm.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 6 + drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 4 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/i915/display/intel_sdvo.c | 58 ++- drivers/gpu/drm/msm/hdmi/hdmi.c | 4 +- drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c | 6 + drivers/hid/hid-ids.h | 1 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-saitek.c | 2 + drivers/hwtracing/coresight/coresight-cti-core.c | 5 - drivers/i2c/busses/i2c-piix4.c | 1 + drivers/i2c/busses/i2c-xiic.c | 1 + drivers/infiniband/core/cma.c | 2 +- drivers/infiniband/core/device.c | 10 +- drivers/infiniband/core/nldev.c | 2 +- drivers/infiniband/hw/hfi1/pio.c | 3 +- drivers/infiniband/hw/qedr/main.c | 9 +- drivers/isdn/hardware/mISDN/netjet.c | 2 +- drivers/isdn/mISDN/core.c | 5 +- drivers/media/cec/platform/cros-ec/cros-ec-cec.c | 2 + drivers/media/cec/platform/s5p/s5p_cec.c | 2 + drivers/media/dvb-frontends/drxk_hard.c | 2 +- drivers/mmc/host/sdhci-esdhc-imx.c | 17 +- drivers/mmc/host/sdhci-pci-core.c | 14 +- drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c | 6 +- drivers/mtd/parsers/bcm47xxpart.c | 4 +- drivers/net/dsa/dsa_loop.c | 25 +- drivers/net/ethernet/freescale/fec_main.c | 4 +- drivers/net/phy/mdio_bus.c | 2 +- drivers/net/tun.c | 3 +- .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 4 + drivers/nfc/fdp/fdp.c | 39 +- drivers/nfc/fdp/fdp.h | 1 - drivers/nfc/fdp/i2c.c | 12 +- drivers/nfc/nfcmrvl/i2c.c | 7 +- drivers/nfc/nxp-nci/core.c | 46 +- drivers/nfc/s3fwrn5/core.c | 8 +- drivers/parisc/iosapic.c | 1 + drivers/scsi/scsi_sysfs.c | 8 + drivers/staging/media/meson/vdec/vdec.c | 2 + drivers/staging/media/rkisp1/rkisp1-capture.c | 7 +- drivers/staging/media/rkisp1/rkisp1-resizer.c | 4 + drivers/tty/serial/8250/8250_port.c | 3 +- drivers/tty/serial/8250/Kconfig | 2 +- drivers/tty/serial/ar933x_uart.c | 5 + drivers/usb/host/xhci-pci.c | 32 +- drivers/video/fbdev/stifb.c | 46 +- fs/btrfs/backref.c | 54 ++- fs/btrfs/export.c | 2 +- fs/btrfs/export.h | 2 +- fs/btrfs/tests/qgroup-tests.c | 20 +- fs/crypto/fscrypt_private.h | 80 ++-- fs/crypto/hooks.c | 8 +- fs/crypto/keyring.c | 495 +++++++++++---------- fs/crypto/keysetup.c | 85 ++-- fs/crypto/policy.c | 8 +- fs/ext4/migrate.c | 3 +- fs/ext4/namei.c | 10 +- fs/ext4/verity.c | 3 +- fs/f2fs/verity.c | 3 +- fs/fuse/file.c | 4 + fs/nfs/delegation.c | 36 +- fs/nfs/nfs4client.c | 1 + fs/nfs/nfs4state.c | 2 + fs/super.c | 3 +- include/acpi/ghes.h | 2 +- include/linux/efi.h | 2 +- include/linux/fs.h | 2 +- include/linux/fscrypt.h | 4 +- include/linux/serial_core.h | 3 +- include/net/protocol.h | 4 - include/net/tcp.h | 2 +- include/net/udp.h | 1 + ipc/msg.c | 2 +- ipc/sem.c | 6 +- ipc/shm.c | 2 +- kernel/kprobes.c | 5 +- kernel/trace/ftrace.c | 16 +- kernel/trace/kprobe_event_gen_test.c | 18 +- net/bluetooth/l2cap_core.c | 77 +++- net/core/neighbour.c | 2 +- net/ipv4/af_inet.c | 14 +- net/ipv4/ip_input.c | 37 +- net/ipv4/sysctl_net_ipv4.c | 59 +-- net/ipv6/ip6_input.c | 26 +- net/ipv6/ipv6_sockglue.c | 7 + net/ipv6/route.c | 14 +- net/ipv6/tcp_ipv6.c | 9 +- net/ipv6/udp.c | 9 +- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 30 +- net/netfilter/nf_tables_api.c | 6 +- net/rose/rose_link.c | 3 + net/sched/sch_red.c | 4 +- security/commoncap.c | 6 +- sound/usb/quirks-table.h | 52 +++ sound/usb/quirks.c | 1 + tools/include/nolibc/nolibc.h | 4 +- 124 files changed, 1291 insertions(+), 837 deletions(-)
