This is the start of the stable review cycle for the 4.9.336 release. There are 31 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 14 Dec 2022 13:08:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.336-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.336-rc1 Dan Carpenter <error27@xxxxxxxxx> net: mvneta: Fix an out of bounds check Yang Yingliang <yangyingliang@xxxxxxxxxx> net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() Juergen Gross <jgross@xxxxxxxx> xen/netback: fix build warning Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> ethernet: aeroflex: fix potential skb leak in greth_init_rings() YueHaibing <yuehaibing@xxxxxxxxxx> tipc: Fix potential OOB in tipc_link_proto_rcv() Liu Jian <liujian56@xxxxxxxxxx> net: hisilicon: Fix potential use-after-free in hix5hd2_rx() Liu Jian <liujian56@xxxxxxxxxx> net: hisilicon: Fix potential use-after-free in hisi_femac_rx() Kees Cook <keescook@xxxxxxxxxxxx> NFC: nci: Bounds check struct nfc_target arrays Dan Carpenter <error27@xxxxxxxxx> net: mvneta: Prevent out of bounds read in mvneta_config_rss() Valentina Goncharenko <goncharenko.vp@xxxxxxxxx> net: encx24j600: Fix invalid logic in reading of MISTAT register Valentina Goncharenko <goncharenko.vp@xxxxxxxxx> net: encx24j600: Add parentheses to fix precedence Wei Yongjun <weiyongjun1@xxxxxxxxxx> mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() Wang ShaoBo <bobo.shaobowang@xxxxxxxxxx> Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() Akihiko Odaki <akihiko.odaki@xxxxxxxxxx> igb: Allocate MSI-X vector when testing Akihiko Odaki <akihiko.odaki@xxxxxxxxxx> e1000e: Fix TX dispatch condition Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx> gpio: amd8111: Fix PCI device reference count leak Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> ieee802154: cc2520: Fix error return code in cc2520_hw_init() ZhangPeng <zhangpeng362@xxxxxxxxxx> HID: core: fix shift-out-of-bounds in hid_report_raw_event Anastasia Belova <abelova@xxxxxxxxxxxxx> HID: hid-lg4ff: Add check for empty lbuf Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: v4l2-dv-timings.c: fix too strict blanking sanity checks Adrian Hunter <adrian.hunter@xxxxxxxxx> mmc: sdhci: Fix voltage switch delay Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx> mmc: sdhci: use FIELD_GET for preset value bit masks Connor Shu <Connor.Shu@xxxxxxx> rcutorture: Automatically create initrd directory Juergen Gross <jgross@xxxxxxxx> xen/netback: don't call kfree_skb() with interrupts disabled Juergen Gross <jgross@xxxxxxxx> xen/netback: do some code cleanup Ross Lagerwall <ross.lagerwall@xxxxxxxxxx> xen/netback: Ensure protocol headers don't fall in the non-linear area Srinivasa Rao Mandadapu <quic_srivasam@xxxxxxxxxxx> ASoC: soc-pcm: Add NULL check in BE reparenting Kees Cook <keescook@xxxxxxxxxxxx> ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event Tomislav Novak <tnovak@xxxxxx> ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: fix ir-receiver node names Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx> arm: dts: rockchip: fix node name for hym8563 rtc ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/rk3036-evb.dts | 2 +- arch/arm/boot/dts/rk3188-radxarock.dts | 2 +- arch/arm/boot/dts/rk3288-evb-act8846.dts | 2 +- arch/arm/boot/dts/rk3288-firefly.dtsi | 2 +- arch/arm/boot/dts/rk3288-miqi.dts | 2 +- arch/arm/boot/dts/rk3288-rock2-square.dts | 2 +- arch/arm/include/asm/perf_event.h | 2 +- drivers/gpio/gpio-amd8111.c | 4 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-lg4ff.c | 6 + drivers/media/v4l2-core/v4l2-dv-timings.c | 20 +- drivers/mmc/host/sdhci.c | 73 +++++-- drivers/mmc/host/sdhci.h | 12 +- drivers/net/ethernet/aeroflex/greth.c | 1 + drivers/net/ethernet/hisilicon/hisi_femac.c | 2 +- drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +- drivers/net/ethernet/intel/e1000e/netdev.c | 4 +- drivers/net/ethernet/intel/igb/igb_ethtool.c | 2 + drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/microchip/encx24j600-regmap.c | 4 +- drivers/net/ieee802154/cc2520.c | 2 +- drivers/net/plip/plip.c | 4 +- drivers/net/xen-netback/common.h | 14 +- drivers/net/xen-netback/interface.c | 22 +- drivers/net/xen-netback/netback.c | 229 ++++++++++++--------- drivers/net/xen-netback/rx.c | 10 +- net/bluetooth/6lowpan.c | 1 + net/mac802154/iface.c | 1 + net/nfc/nci/ntf.c | 6 + net/tipc/link.c | 4 +- sound/core/seq/seq_memory.c | 11 +- sound/soc/soc-pcm.c | 2 + tools/testing/selftests/rcutorture/bin/kvm.sh | 8 + tools/testing/selftests/rcutorture/bin/mkinitrd.sh | 60 ++++++ 35 files changed, 342 insertions(+), 185 deletions(-)