This is the start of the stable review cycle for the 4.19.268 release. There are 110 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 08 Dec 2022 12:40:31 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.268-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.268-rc2 Jann Horn <jannh@xxxxxxxxxx> ipc/sem: Fix dangling sem_array access in semtimedop race Adrian Hunter <adrian.hunter@xxxxxxxxx> mmc: sdhci: Fix voltage switch delay Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> mmc: sdhci: use FIELD_GET for preset value bit masks Michael Kelley <mikelley@xxxxxxxxxxxxx> x86/ioremap: Fix page aligned size calculation in __ioremap_caller() Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/pm: Add enumeration check before spec MSRs save/restore setup Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/tsx: Add a feature bit for TSX control MSR support Keith Busch <kbusch@xxxxxxxxxx> nvme: restrict management ioctls to admin Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp/udp: Fix memory leak in ipv6_renew_options(). Lee Jones <lee@xxxxxxxxxx> Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled Helge Deller <deller@xxxxxx> parisc: Increase FRAME_WARN to 2048 bytes on parisc Guenter Roeck <linux@xxxxxxxxxxxx> xtensa: increase size of gcc stack frame check Helge Deller <deller@xxxxxx> parisc: Increase size of gcc stack frame check Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx> iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() Maxim Korotkov <korotkov.maxim.s@xxxxxxxxx> pinctrl: single: Fix potential division by zero Mark Brown <broonie@xxxxxxxxxx> ASoC: ops: Fix bounds check for _sx controls Nathan Chancellor <nathan@xxxxxxxxxx> mm: Fix '.data.once' orphan section warning James Morse <james.morse@xxxxxxx> arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 James Morse <james.morse@xxxxxxx> arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> pinctrl: intel: Save and restore pins in "direct IRQ" mode Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 ZhangPeng <zhangpeng362@xxxxxxxxxx> nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() Tiezhu Yang <yangtiezhu@xxxxxxxxxxx> tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> error-injection: Add prompt for function error injection ChenXiaoSong <chenxiaosong2@xxxxxxxxxx> btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Yang Yingliang <yangyingliang@xxxxxxxxxx> hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() Phil Auld <pauld@xxxxxxxxxx> hwmon: (coretemp) Check for null before removing sysfs attrs Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed Willem de Bruijn <willemb@xxxxxxxxxx> packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE Shigeru Yoshida <syoshida@xxxxxxxxxx> net: tun: Fix use-after-free in tun_detach() YueHaibing <yuehaibing@xxxxxxxxxx> net: hsr: Fix potential use-after-free Jerry Ray <jerry.ray@xxxxxxxxxxxxx> dsa: lan9303: Correct stat name Wang Hai <wanghai38@xxxxxxxxxx> net/9p: Fix a potential socket leak in p9_socket_open Yuan Can <yuancan@xxxxxxxxxx> net: net_netdev: Fix error handling in ntb_netdev_init_module() Yang Yingliang <yangyingliang@xxxxxxxxxx> net: phy: fix null-ptr-deref while probe() failed Duoming Zhou <duoming@xxxxxxxxxx> qlcnic: fix sleep-in-atomic-context bugs caused by msleep Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> can: cc770: cc770_isa_probe(): add missing free_cc770dev() Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() YueHaibing <yuehaibing@xxxxxxxxxx> net/mlx5: Fix uninitialized variable bug in outlen_write() Yang Yingliang <yangyingliang@xxxxxxxxxx> of: property: decrement node refcount in of_fwnode_get_reference_args() Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Yang Yingliang <yangyingliang@xxxxxxxxxx> hwmon: (i5500_temp) fix missing pci_disable_device() Srikar Dronamraju <srikar@xxxxxxxxxxxxxxxxxx> scripts/faddr2line: Fix regression in name resolution on ppc64le Paul Gazzillo <paul@xxxxxxxxx> iio: light: rpr0521: add missing Kconfig dependencies Wei Yongjun <weiyongjun1@xxxxxxxxxx> iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw Wei Yongjun <weiyongjun1@xxxxxxxxxx> iio: health: afe4403: Fix oob read in afe4403_read_raw Sam James <sam@xxxxxxxxxx> kbuild: fix -Wimplicit-function-declaration in license_is_gpl_compatible Ben Hutchings <ben@xxxxxxxxxxxxxxx> Revert "x86/speculation: Change FILL_RETURN_BUFFER to work with objtool" Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> proc: proc_skip_spaces() shouldn't think it is working on C strings Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> proc: avoid integer type confusion in get_proc_long Frieder Schrempf <frieder.schrempf@xxxxxxxxxx> spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock Anand Jain <anand.jain@xxxxxxxxxx> btrfs: free btrfs_path before copying inodes to userspace Christian König <christian.koenig@xxxxxxx> drm/amdgpu: always register an MMU notifier for userptr Lyude Paul <lyude@xxxxxxxxxx> drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN Anand Jain <anand.jain@xxxxxxxxxx> btrfs: free btrfs_path before copying subvol info to userspace Anand Jain <anand.jain@xxxxxxxxxx> btrfs: free btrfs_path before copying fspath to userspace Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: free btrfs_path before copying root refs to userspace Mikulas Patocka <mpatocka@xxxxxxxxxx> dm integrity: flush the journal on suspend Enrico Sau <enrico.sau@xxxxxxxxx> net: usb: qmi_wwan: add Telit 0x103a composition Gleb Mazovetskiy <glex.spb@xxxxxxxxx> tcp: configurable source port perturb table size Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> platform/x86: hp-wmi: Ignore Smart Experience App event Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx> platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() ruanjinjie <ruanjinjie@xxxxxxxxxx> xen/platform-pci: add missing free_irq() in error path Lukas Wunner <lukas@xxxxxxxxx> serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() Aman Dhoot <amandhoot12@xxxxxxxxx> Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode Chen Zhongjin <chenzhongjin@xxxxxxxxxx> nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty Xiubo Li <xiubli@xxxxxxxxxx> ceph: avoid putting the realm twice when decoding snaps fails Xiubo Li <xiubli@xxxxxxxxxx> ceph: do not update snapshot context when there is no new snapshot Mitja Spes <mitja@xxxxxxxxx> iio: pressure: ms5611: fixed value compensation bug Lars-Peter Clausen <lars@xxxxxxxxxx> iio: ms5611: Simplify IO callback parameters Randy Dunlap <rdunlap@xxxxxxxxxxxxx> nios2: add FORCE for vmlinuz.gz Chen Zhongjin <chenzhongjin@xxxxxxxxxx> iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails Alejandro Concepción Rodríguez <asconcepcion@xxxxxxxx> iio: light: apds9960: fix wrong register for gesture gain Jakob Unterwurzacher <jakob.unterwurzacher@xxxxxxxxxxxxxxxxxxxxx> arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency Heiko Carstens <hca@xxxxxxxxxxxxx> s390/crashdump: fix TOD programmable field size Yu Liao <liaoyu15@xxxxxxxxxx> net: thunderx: Fix the ACPI memory leak Martin Faltesek <mfaltesek@xxxxxxxxxx> nfc: st-nci: fix memory leaks in EVT_TRANSACTION Martin Faltesek <mfaltesek@xxxxxxxxxx> nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION Stefan Haberland <sth@xxxxxxxxxxxxx> s390/dasd: fix no record found for raw_track_access Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). Yang Yingliang <yangyingliang@xxxxxxxxxx> bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() Liu Shixin <liushixin2@xxxxxxxxxx> NFC: nci: fix memory leak in nci_rx_data_packet() Chen Zhongjin <chenzhongjin@xxxxxxxxxx> xfrm: Fix ignored return value in xfrm6_init() YueHaibing <yuehaibing@xxxxxxxxxx> tipc: check skb_linearize() return value in tipc_disc_rcv() Xin Long <lucien.xin@xxxxxxxxx> tipc: add an extra conn_get in tipc_conn_alloc Xin Long <lucien.xin@xxxxxxxxx> tipc: set con sock in tipc_conn_alloc Moshe Shemesh <moshe@xxxxxxxxxx> net/mlx5: Fix FW tracer timestamp calculation Yang Yingliang <yangyingliang@xxxxxxxxxx> Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() Yang Yingliang <yangyingliang@xxxxxxxxxx> Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() Yang Yingliang <yangyingliang@xxxxxxxxxx> net: pch_gbe: fix pci device refcount leak while module exiting Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> net/qla3xxx: fix potential memleak in ql3xxx_send() Peter Kosyh <pkosyh@xxxxxxxxx> net/mlx4: Check retval of mlx4_bitmap_init Zheng Yongjun <zhengyongjun3@xxxxxxxxxx> ARM: mxs: fix memory leak in mxs_machine_init() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> 9p/fd: fix issue of list_del corruption in p9_fd_cancel() Wang Hai <wanghai38@xxxxxxxxxx> net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() Lin Ma <linma@xxxxxxxxxx> nfc/nci: fix race with opening and closing Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx> ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl Samuel Holland <samuel@xxxxxxxxxxxx> bus: sunxi-rsb: Support atomic transfers Detlev Casanova <detlev.casanova@xxxxxxxxxxxxx> ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove Dominik Haller <d.haller@xxxxxxxxx> ARM: dts: am335x-pcm-953: Define fixed regulators in root node Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> af_key: Fix send_acquire race with pfkey_register Jason A. Donenfeld <Jason@xxxxxxxxx> MIPS: pic32: treat port as signed integer Nathan Chancellor <nathan@xxxxxxxxxx> RISC-V: vdso: Do not add missing symbols to version section in linker script Hans de Goede <hdegoede@xxxxxxxxxx> drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) Sean Nyekjaer <sean@xxxxxxxxxx> spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run Nicolas Cavallari <nicolas.cavallari@xxxxxxxxxxxxxxxxxxxxxxx> wifi: mac80211: Fix ack frame idr leak when mesh has no route Gaosheng Cui <cuigaosheng1@xxxxxxxxxx> audit: fix undefined behavior in bit shift for AUDIT_BIT Jonas Jelonek <jelonek.jonas@xxxxxxxxx> wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/am335x-pcm-953.dtsi | 28 ++++----- arch/arm/boot/dts/at91sam9g20ek_common.dtsi | 9 +++ arch/arm/mach-mxs/mach-mxs.c | 4 +- .../arm64/boot/dts/rockchip/rk3399-puma-haikou.dts | 2 +- arch/arm64/kernel/cpu_errata.c | 24 ++++++-- arch/mips/include/asm/fw/fw.h | 2 +- arch/mips/pic32/pic32mzda/early_console.c | 13 ++-- arch/mips/pic32/pic32mzda/init.c | 2 +- arch/nios2/boot/Makefile | 2 +- arch/riscv/kernel/vdso/Makefile | 3 + arch/riscv/kernel/vdso/vdso.lds.S | 2 + arch/s390/kernel/crash_dump.c | 2 +- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/nospec-branch.h | 12 ++-- arch/x86/kernel/cpu/bugs.c | 21 ++++--- arch/x86/kernel/cpu/tsx.c | 33 +++++----- arch/x86/kernel/process.c | 2 +- arch/x86/mm/ioremap.c | 8 ++- arch/x86/power/cpu.c | 23 ++++--- drivers/bus/sunxi-rsb.c | 29 ++++++--- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 8 +-- .../drm/amd/display/dc/dce120/dce120_resource.c | 3 +- drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 ++ drivers/hv/channel_mgmt.c | 6 +- drivers/hv/vmbus_drv.c | 1 + drivers/hwmon/coretemp.c | 9 ++- drivers/hwmon/i5500_temp.c | 2 +- drivers/hwmon/ibmpex.c | 1 + drivers/iio/health/afe4403.c | 5 +- drivers/iio/health/afe4404.c | 12 ++-- drivers/iio/industrialio-sw-trigger.c | 6 +- drivers/iio/light/Kconfig | 2 + drivers/iio/light/apds9960.c | 12 ++-- drivers/iio/pressure/ms5611.h | 18 +++--- drivers/iio/pressure/ms5611_core.c | 56 +++++++++-------- drivers/iio/pressure/ms5611_i2c.c | 11 ++-- drivers/iio/pressure/ms5611_spi.c | 17 +++--- drivers/input/mouse/synaptics.c | 1 + drivers/iommu/dmar.c | 1 + drivers/md/dm-integrity.c | 7 +-- drivers/mmc/host/sdhci.c | 71 ++++++++++++++++++---- drivers/mmc/host/sdhci.h | 12 ++-- drivers/net/can/cc770/cc770_isa.c | 10 +-- drivers/net/can/sja1000/sja1000_isa.c | 10 +-- drivers/net/dsa/lan9303-core.c | 2 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c | 12 ++-- drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4 +- drivers/net/ethernet/mellanox/mlx4/qp.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 4 +- .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 2 +- .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 6 +- drivers/net/ethernet/qlogic/qla3xxx.c | 1 + .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +- drivers/net/ethernet/renesas/ravb_main.c | 1 + drivers/net/ntb_netdev.c | 9 ++- drivers/net/phy/phy_device.c | 1 + drivers/net/tun.c | 4 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/wireless/mac80211_hwsim.c | 5 ++ drivers/nfc/st-nci/se.c | 6 +- drivers/nvme/host/core.c | 6 ++ drivers/of/property.c | 4 +- drivers/pinctrl/intel/pinctrl-intel.c | 27 +++++++- drivers/pinctrl/pinctrl-single.c | 2 +- drivers/platform/x86/acer-wmi.c | 9 +++ drivers/platform/x86/asus-wmi.c | 2 + drivers/platform/x86/hp-wmi.c | 3 + drivers/s390/block/dasd_eckd.c | 6 +- drivers/spi/spi-imx.c | 3 +- drivers/spi/spi-stm32.c | 2 +- drivers/tty/serial/8250/8250_omap.c | 7 ++- drivers/xen/platform-pci.c | 7 ++- fs/btrfs/ioctl.c | 23 ++++--- fs/btrfs/qgroup.c | 9 +-- fs/ceph/snap.c | 31 +++++++--- fs/nilfs2/dat.c | 7 +++ fs/nilfs2/sufile.c | 8 +++ include/linux/license.h | 2 + include/linux/mmdebug.h | 2 +- include/uapi/linux/audit.h | 2 +- ipc/sem.c | 3 +- kernel/sysctl.c | 30 ++++----- lib/Kconfig.debug | 14 ++++- mm/frame_vector.c | 31 ++-------- net/9p/trans_fd.c | 6 +- net/bluetooth/l2cap_core.c | 13 ++++ net/dccp/ipv4.c | 2 + net/dccp/ipv6.c | 2 + net/hsr/hsr_forward.c | 5 +- net/ipv4/Kconfig | 10 +++ net/ipv4/inet_hashtables.c | 10 +-- net/ipv4/tcp_ipv4.c | 2 + net/ipv6/ipv6_sockglue.c | 7 +++ net/ipv6/tcp_ipv6.c | 2 + net/ipv6/xfrm6_policy.c | 6 +- net/key/af_key.c | 32 +++++++--- net/mac80211/mesh_pathtbl.c | 2 +- net/nfc/nci/core.c | 2 +- net/nfc/nci/data.c | 4 +- net/packet/af_packet.c | 6 +- net/tipc/discover.c | 5 +- net/tipc/topsrv.c | 20 +++--- scripts/faddr2line | 7 ++- sound/soc/codecs/sgtl5000.c | 1 + sound/soc/soc-ops.c | 2 +- tools/vm/slabinfo-gnuplot.sh | 4 +- 107 files changed, 624 insertions(+), 344 deletions(-)
