This is the start of the stable review cycle for the 4.19.267 release. There are 114 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 25 Nov 2022 08:45:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.267-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.267-rc1 Hawkins Jiawei <yin31149@xxxxxxxxx> ntfs: check overflow when iterating ATTR_RECORDs Hawkins Jiawei <yin31149@xxxxxxxxx> ntfs: fix out-of-bounds read in ntfs_attr_find() Hawkins Jiawei <yin31149@xxxxxxxxx> ntfs: fix use-after-free in ntfs_attr_find() Alexander Potapenko <glider@xxxxxxxxxx> mm: fs: initialize fsdata passed to write_begin/write_end interface Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> 9p/trans_fd: always use O_NONBLOCK read/write Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: Switch from strlcpy to strscpy Andrew Price <anprice@xxxxxxxxxx> gfs2: Check sb_bsize_shift after reading superblock Dominique Martinet <asmadeus@xxxxxxxxxxxxx> 9p: trans_fd/p9_conn_cancel: drop client lock earlier Cong Wang <cong.wang@xxxxxxxxxxxxx> kcm: close race conditions on sk_receive_queue Baisong Zhong <zhongbaisong@xxxxxxxxxx> bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() Eric Dumazet <edumazet@xxxxxxxxxx> kcm: avoid potential race in kcm_tx_work Eric Dumazet <edumazet@xxxxxxxxxx> tcp: cdg: allow tcp_cdg_release() to be called multiple times Eric Dumazet <edumazet@xxxxxxxxxx> macvlan: enforce a consistent minimal mtu Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> serial: 8250: Flush DMA Rx on RLSI Chen Jun <chenjun102@xxxxxxxxxx> Input: i8042 - fix leaking of platform device on module removal Yang Yingliang <yangyingliang@xxxxxxxxxx> scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() Alexander Potapenko <glider@xxxxxxxxxx> misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() Shuah Khan <skhan@xxxxxxxxxxxxxxxxxxx> docs: update mediator contact information in CoC doc Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx> mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() Yann Gautier <yann.gautier@xxxxxxxxxxx> mmc: core: properly select voltage range without power cycle Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> serial: 8250_lpss: Configure DMA also w/o DMA filter Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs Mikulas Patocka <mpatocka@xxxxxxxxxx> dm ioctl: fix misbehavior if list_versions races with module loading Mitja Spes <mitja@xxxxxxxxx> iio: pressure: ms5611: changed hardcoded SPI speed to value limited Yang Yingliang <yangyingliang@xxxxxxxxxx> iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() Yang Yingliang <yangyingliang@xxxxxxxxxx> iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() Duoming Zhou <duoming@xxxxxxxxxx> usb: chipidea: fix deadlock in ci_otg_del_timer Nicolas Dumazet <ndumazet@xxxxxxxxxx> usb: add NO_LPM quirk for Realforce 87U Keyboard Reinhard Speyerer <rspmn@xxxxxxxx> USB: serial: option: add Fibocom FM160 0x0111 composition Davide Tronchin <davide.tronchin.94@xxxxxxxxx> USB: serial: option: add u-blox LARA-L6 modem Davide Tronchin <davide.tronchin.94@xxxxxxxxx> USB: serial: option: add u-blox LARA-R6 00B modem Davide Tronchin <davide.tronchin.94@xxxxxxxxx> USB: serial: option: remove old LARA-R6 PID Benoît Monin <benoit.monin@xxxxxx> USB: serial: option: add Sierra Wireless EM9191 Mushahid Hussain <mushi.shar@xxxxxxxxx> speakup: fix a segfault caused by switching consoles Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> slimbus: stream: correct presence rate frequencies Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() Daniil Tatianin <d-tatianin@xxxxxxxxxxxxxx> ring_buffer: Do not deactivate non-existant pages Xiu Jianfeng <xiujianfeng@xxxxxxxxxx> ftrace: Fix null pointer dereference in ftrace_add_mod() Wang Wensheng <wangwensheng4@xxxxxxxxxx> ftrace: Optimize the allocation for mcount entries Wang Wensheng <wangwensheng4@xxxxxxxxxx> ftrace: Fix the possible incorrect kernel message Yuan Can <yuancan@xxxxxxxxxx> net: thunderbolt: Fix error handling in tbnet_init() Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx> cifs: Fix wrong return value checking when GETFLAGS Wei Yongjun <weiyongjun1@xxxxxxxxxx> net/x25: Fix skb leak in x25_lapb_receive_frame() Dan Carpenter <error27@xxxxxxxxx> drbd: use after free in drbd_create_device() Yang Yingliang <yangyingliang@xxxxxxxxxx> xen/pcpu: fix possible memory leak in register_pcpu() Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> bnxt_en: Remove debugfs when pci_register_driver failed Zhengchao Shao <shaozhengchao@xxxxxxxxxx> net: caif: fix double disconnect client in chnl_net_open() Wang ShaoBo <bobo.shaobowang@xxxxxxxxxx> mISDN: fix misuse of put_device() in mISDN_register_device() Yang Yingliang <yangyingliang@xxxxxxxxxx> mISDN: fix possible memory leak in mISDN_dsp_element_register() Wei Yongjun <weiyongjun1@xxxxxxxxxx> net: bgmac: Drop free_netdev() from bgmac_enet_remove() Yang Yingliang <yangyingliang@xxxxxxxxxx> ata: libata-transport: fix double ata_host_put() in ata_tport_add() Zeng Heng <zengheng4@xxxxxxxxxx> pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map Maciej W. Rozycki <macro@xxxxxxxxxxx> parport_pc: Avoid FIFO port location truncation Yang Yingliang <yangyingliang@xxxxxxxxxx> siox: fix possible memory leak in siox_device_add() Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx> block: sed-opal: kmalloc the cmd/resp buffers Chen Zhongjin <chenzhongjin@xxxxxxxxxx> ASoC: soc-utils: Remove __exit for snd_soc_util_exit() Duoming Zhou <duoming@xxxxxxxxxx> tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send Shawn Guo <shawn.guo@xxxxxxxxxx> serial: imx: Add missing .thaw_noirq hook Tony Lindgren <tony@xxxxxxxxxxx> serial: 8250: omap: Flush PM QOS work on remove Matthias Schiffer <matthias.schiffer@xxxxxxxxxxxxxxx> serial: 8250_omap: remove wait loop from Errata i202 workaround Chen Zhongjin <chenzhongjin@xxxxxxxxxx> ASoC: core: Fix use-after-free in snd_soc_exit() Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm Filipe Manana <fdmanana@xxxxxxxx> btrfs: remove pointless and double ulist frees in error paths of qgroup tests Nathan Huckleberry <nhuck@xxxxxxxxxx> drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid Benjamin Coddington <bcodding@xxxxxxxxxx> NFSv4: Retry LOCK on OLD_STATEID during delegation return Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx> rtc: cmos: fix build on non-ACPI platforms Ricardo Cañuelo <ricardo.canuelo@xxxxxxxxxxxxx> selftests/intel_pstate: fix build for ARCH=x86_64 Ricardo Cañuelo <ricardo.canuelo@xxxxxxxxxxxxx> selftests/futex: fix build for clang Mauro Lima <mauro.lima@xxxxxxxxxxxxx> spi: intel: Fix the offset to get the 64K erase opcode Zhang Qilong <zhangqilong3@xxxxxxxxxx> ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" Zhang Qilong <zhangqilong3@xxxxxxxxxx> ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" Zhang Qilong <zhangqilong3@xxxxxxxxxx> ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" Borislav Petkov <bp@xxxxxxx> x86/cpu: Restore AMD's DE_CFG MSR after resume Eric Dumazet <edumazet@xxxxxxxxxx> net: tun: call napi_schedule_prep() to ensure we own a napi Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_hdmac: Check return code of dma_async_device_register Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_hdmac: Fix impossible condition Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_hdmac: Don't allow CPU to reorder channel enable Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_hdmac: Don't start transactions at tx_submit level Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx> dmaengine: at_hdmac: Fix at_lli struct definition Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> cert host tools: Stop complaining about deprecated OpenSSL functions ZhangPeng <zhangpeng362@xxxxxxxxxx> udf: Fix a slab-out-of-bounds write bug in udf_find_entry() Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx> btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() Jorge Lopez <jorge.lopez2@xxxxxx> platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi Matthew Auld <matthew.auld@xxxxxxxxx> drm/i915/dmabuf: fix sg_table handling in map_dma_buf Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix use-after-free bug of ns_writer on remount Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix deadlock in nilfs_count_free_blocks() Nathan Chancellor <nathan@xxxxxxxxxx> vmlinux.lds.h: Fix placement of '.data..decrypted' section Jussi Laako <jussi@xxxxxxxxxxxxx> ALSA: usb-audio: Add DSD support for Accuphase DAC-60 Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Add quirk entry for M-Audio Micro Ye Bin <yebin10@xxxxxxxxxx> ALSA: hda: fix potential memleak in 'add_widget_node' Xian Wang <dev@xxxxxxxxxxx> ALSA: hda/ca0132: add quirk for EVGA Z390 DARK Ard Biesheuvel <ardb@xxxxxxxxxx> arm64: efi: Fix handling of misaligned runtime regions and drop warning Jisheng Zhang <jszhang@xxxxxxxxxx> riscv: process: fix kernel info leakage Chuang Wang <nashuiliang@xxxxxxxxx> net: macvlan: fix memory leaks of macvlan_common_newlink Zhengchao Shao <shaozhengchao@xxxxxxxxxx> net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ethernet: s2io: disable napi when start nic failed in s2io_card_up() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> net: nixge: disable napi when enable interrupts failed in nixge_open() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() Xin Long <lucien.xin@xxxxxxxxx> tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header Alexander Potapenko <glider@xxxxxxxxxx> ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network Yuan Can <yuancan@xxxxxxxxxx> drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> hamradio: fix issue of dev reference count leakage in bpq_device_event() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> capabilities: fix undefined behavior in bit shift for CAP_TO_MASK Sean Anderson <sean.anderson@xxxxxxxx> net: fman: Unregister ethernet device on removal Alex Barba <alex.barba@xxxxxxxxxxxx> bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer Wang Yufen <wangyufen@xxxxxxxxxx> net: tun: Fix memory leaks of napi_get_frags Jiri Benc <jbenc@xxxxxxxxxx> net: gso: fix panic on frag_list with mixed head alloc types Yang Yingliang <yangyingliang@xxxxxxxxxx> HID: hyperv: fix possible memory leak in mousevsc_probe() Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx> wifi: cfg80211: fix memory leak in query_regdb_file() Dan Carpenter <dan.carpenter@xxxxxxxxxx> phy: stm32: fix an error code in probe ------------- Diffstat: .../process/code-of-conduct-interpretation.rst | 2 +- Makefile | 4 +- arch/arm64/kernel/efi.c | 52 +++++++++++------- arch/riscv/kernel/process.c | 2 + arch/x86/include/asm/msr-index.h | 8 +-- arch/x86/kernel/cpu/amd.c | 10 ++-- arch/x86/kvm/svm.c | 10 ++-- arch/x86/kvm/x86.c | 2 +- arch/x86/power/cpu.c | 1 + block/sed-opal.c | 32 +++++++++-- drivers/ata/libata-transport.c | 1 - drivers/block/drbd/drbd_main.c | 4 +- drivers/dma/at_hdmac.c | 34 ++++++------ drivers/dma/at_hdmac_regs.h | 10 ++-- drivers/dma/mv_xor_v2.c | 1 + drivers/gpu/drm/i915/i915_gem_dmabuf.c | 4 +- drivers/gpu/drm/imx/imx-tve.c | 5 +- drivers/gpu/drm/vc4/vc4_drv.c | 7 ++- drivers/hid/hid-hyperv.c | 2 +- drivers/iio/adc/at91_adc.c | 4 +- drivers/iio/pressure/ms5611_spi.c | 2 +- drivers/iio/trigger/iio-trig-sysfs.c | 6 ++- drivers/input/serio/i8042.c | 4 -- drivers/isdn/mISDN/core.c | 2 +- drivers/isdn/mISDN/dsp_pipeline.c | 3 +- drivers/md/dm-ioctl.c | 4 +- drivers/misc/vmw_vmci/vmci_queue_pair.c | 2 + drivers/mmc/core/core.c | 8 ++- drivers/mmc/host/sdhci-pci-core.c | 2 + drivers/mtd/spi-nor/intel-spi.c | 2 +- drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +- drivers/net/ethernet/broadcom/bgmac.c | 1 - drivers/net/ethernet/broadcom/bnxt/bnxt.c | 12 ++++- drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 1 + drivers/net/ethernet/freescale/fman/mac.c | 9 ++++ drivers/net/ethernet/marvell/mv643xx_eth.c | 1 + drivers/net/ethernet/neterion/s2io.c | 29 ++++++---- drivers/net/ethernet/ni/nixge.c | 1 + drivers/net/hamradio/bpqether.c | 2 +- drivers/net/macvlan.c | 6 ++- drivers/net/thunderbolt.c | 19 +++++-- drivers/net/tun.c | 18 +++++-- drivers/net/wan/lapbether.c | 2 +- drivers/parport/parport_pc.c | 2 +- drivers/phy/st/phy-stm32-usbphyc.c | 2 + drivers/pinctrl/devicetree.c | 2 + drivers/platform/x86/hp-wmi.c | 12 ++++- drivers/rtc/rtc-cmos.c | 3 ++ drivers/siox/siox-core.c | 2 + drivers/slimbus/stream.c | 8 +-- drivers/staging/speakup/main.c | 2 +- drivers/target/loopback/tcm_loop.c | 3 +- drivers/tty/n_gsm.c | 2 +- drivers/tty/serial/8250/8250_lpss.c | 15 ++++-- drivers/tty/serial/8250/8250_omap.c | 18 +------ drivers/tty/serial/8250/8250_port.c | 7 ++- drivers/tty/serial/imx.c | 1 + drivers/usb/chipidea/otg_fsm.c | 2 + drivers/usb/core/quirks.c | 3 ++ drivers/usb/serial/option.c | 19 ++++++- drivers/xen/pcpu.c | 2 +- fs/btrfs/tests/btrfs-tests.c | 2 +- fs/btrfs/tests/qgroup-tests.c | 16 ++---- fs/buffer.c | 4 +- fs/cifs/ioctl.c | 4 +- fs/gfs2/ops_fstype.c | 11 ++-- fs/namei.c | 2 +- fs/nfs/nfs4proc.c | 6 ++- fs/nilfs2/segment.c | 15 +++--- fs/nilfs2/super.c | 2 - fs/nilfs2/the_nilfs.c | 2 - fs/ntfs/attrib.c | 28 ++++++++-- fs/ntfs/inode.c | 7 +++ fs/udf/namei.c | 2 +- include/asm-generic/vmlinux.lds.h | 2 +- include/uapi/linux/capability.h | 2 +- kernel/trace/ftrace.c | 5 +- kernel/trace/ring_buffer.c | 4 +- mm/filemap.c | 2 +- net/9p/trans_fd.c | 6 ++- net/bluetooth/l2cap_core.c | 2 +- net/bpf/test_run.c | 1 + net/caif/chnl_net.c | 3 -- net/core/skbuff.c | 36 +++++++------ net/ipv4/tcp_cdg.c | 2 + net/ipv6/addrlabel.c | 1 + net/kcm/kcmsock.c | 62 ++++------------------ net/tipc/netlink_compat.c | 2 +- net/wireless/reg.c | 12 +++-- net/x25/x25_dev.c | 2 +- scripts/extract-cert.c | 7 +++ scripts/sign-file.c | 7 +++ sound/hda/hdac_sysfs.c | 4 +- sound/pci/hda/patch_ca0132.c | 1 + sound/soc/codecs/wm5102.c | 6 +-- sound/soc/codecs/wm5110.c | 6 +-- sound/soc/codecs/wm8997.c | 6 +-- sound/soc/soc-core.c | 17 +++++- sound/soc/soc-utils.c | 2 +- sound/usb/midi.c | 4 +- sound/usb/quirks-table.h | 4 ++ sound/usb/quirks.c | 1 + tools/testing/selftests/futex/functional/Makefile | 6 +-- tools/testing/selftests/intel_pstate/Makefile | 6 +-- tools/testing/selftests/kvm/include/x86.h | 8 +-- 105 files changed, 469 insertions(+), 301 deletions(-)
