This is the start of the stable review cycle for the 5.10.159 release. There are 98 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 15 Dec 2022 15:03:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.159-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.10.159-rc2 Frank Jungclaus <frank.jungclaus@xxxxxx> can: esd_usb: Allow REC and TEC to return to zero Emeel Hakim <ehakim@xxxxxxxxxx> macsec: add missing attribute validation for offload Dan Carpenter <error27@xxxxxxxxx> net: mvneta: Fix an out of bounds check Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: avoid use-after-free in ip6_fragment() Yang Yingliang <yangyingliang@xxxxxxxxxx> net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() Juergen Gross <jgross@xxxxxxxx> xen/netback: fix build warning Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> ethernet: aeroflex: fix potential skb leak in greth_init_rings() Xin Long <lucien.xin@xxxxxxxxx> tipc: call tipc_lxc_xmit without holding node_read_lock Zhengchao Shao <shaozhengchao@xxxxxxxxxx> net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() Ido Schimmel <idosch@xxxxxxxxxx> ipv4: Fix incorrect route flushing when table ID 0 is used Ido Schimmel <idosch@xxxxxxxxxx> ipv4: Fix incorrect route flushing when source address is deleted YueHaibing <yuehaibing@xxxxxxxxxx> tipc: Fix potential OOB in tipc_link_proto_rcv() Liu Jian <liujian56@xxxxxxxxxx> net: hisilicon: Fix potential use-after-free in hix5hd2_rx() Liu Jian <liujian56@xxxxxxxxxx> net: hisilicon: Fix potential use-after-free in hisi_femac_rx() Yongqiang Liu <liuyongqiang13@xxxxxxxxxx> net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq Hangbin Liu <liuhangbin@xxxxxxxxx> ip_gre: do not report erspan version on GRE interface Jisheng Zhang <jszhang@xxxxxxxxxx> net: stmmac: fix "snps,axi-config" node property parsing Pankaj Raghav <p.raghav@xxxxxxxxxxx> nvme initialize core quirks before calling nvme_init_subsystem Kees Cook <keescook@xxxxxxxxxxxx> NFC: nci: Bounds check struct nfc_target arrays Przemyslaw Patynowski <przemyslawx.patynowski@xxxxxxxxx> i40e: Disallow ip4 and ip6 l4_4_bytes Sylwester Dziedziuch <sylwesterx.dziedziuch@xxxxxxxxx> i40e: Fix for VF MAC address 0 Michal Jaron <michalx.jaron@xxxxxxxxx> i40e: Fix not setting default xps_cpus after reset Dan Carpenter <error27@xxxxxxxxx> net: mvneta: Prevent out of bounds read in mvneta_config_rss() Lin Liu <lin.liu@xxxxxxxxxx> xen-netfront: Fix NULL sring after live migration Valentina Goncharenko <goncharenko.vp@xxxxxxxxx> net: encx24j600: Fix invalid logic in reading of MISTAT register Valentina Goncharenko <goncharenko.vp@xxxxxxxxx> net: encx24j600: Add parentheses to fix precedence Wei Yongjun <weiyongjun1@xxxxxxxxxx> mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() Zhengchao Shao <shaozhengchao@xxxxxxxxxx> selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload Artem Chernyshev <artem.chernyshev@xxxxxxxxxxx> net: dsa: ksz: Check return value Chen Zhongjin <chenzhongjin@xxxxxxxxxx> Bluetooth: Fix not cleanup led when bt_init fails Wang ShaoBo <bobo.shaobowang@xxxxxxxxxx> Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() Ronak Doshi <doshir@xxxxxxxxxx> vmxnet3: correctly report encapsulated LRO packet Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> af_unix: Get user_ns from in_skb in unix_diag_get_exact(). Guillaume BRUN <the.cheaterman@xxxxxxxxx> drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 Akihiko Odaki <akihiko.odaki@xxxxxxxxxx> igb: Allocate MSI-X vector when testing Akihiko Odaki <akihiko.odaki@xxxxxxxxxx> e1000e: Fix TX dispatch condition Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx> gpio: amd8111: Fix PCI device reference count leak Qiqi Zhang <eddy.zhang@xxxxxxxxxxxxxx> drm/bridge: ti-sn65dsi86: Fix output polarity setting bug Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark Hauke Mehrtens <hauke@xxxxxxxxxx> ca8210: Fix crash by zero initializing data Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> ieee802154: cc2520: Fix error return code in cc2520_hw_init() Stefano Brivio <sbrivio@xxxxxxxxxx> netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one Dan Carpenter <dan.carpenter@xxxxxxxxxx> rtc: mc146818-lib: fix signedness bug in mc146818_get_time() Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: mc146818-lib: fix locking in mc146818_set_time Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> rtc: cmos: Disable irq around direct invocation of cmos_interrupt() Baolin Wang <baolin.wang@xxxxxxxxxxxxxxxxx> mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: af_can: fix NULL pointer dereference in can_rcv_filter ZhangPeng <zhangpeng362@xxxxxxxxxx> HID: core: fix shift-out-of-bounds in hid_report_raw_event Anastasia Belova <abelova@xxxxxxxxxxxxx> HID: hid-lg4ff: Add check for empty lbuf Ankit Patel <anpatel@xxxxxxxxxx> HID: usbhid: Add ALWAYS_POLL quirk for some mice Rob Clark <robdclark@xxxxxxxxxxxx> drm/shmem-helper: Avoid vm_open error paths Rob Clark <robdclark@xxxxxxxxxxxx> drm/shmem-helper: Remove errant put in error path Zack Rusin <zackr@xxxxxxxxxx> drm/vmwgfx: Don't use screen objects when SEV is active Thomas Huth <thuth@xxxxxxxxxx> KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: Fix crash when replugging CSR fake controllers Ismael Ferreras Morezuelas <swyterzone@xxxxxxxxx> Bluetooth: btusb: Add debug message for CSR controllers John Starks <jostarks@xxxxxxxxxxxxx> mm/gup: fix gup_pud_range() for dax Tejun Heo <tj@xxxxxxxxxx> memcg: fix possible use-after-free in memcg_write_event_control() Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: v4l2-dv-timings.c: fix too strict blanking sanity checks Francesco Dolcini <francesco.dolcini@xxxxxxxxxxx> Revert "ARM: dts: imx7: Fix NAND controller size-cells" Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() Juergen Gross <jgross@xxxxxxxx> xen/netback: don't call kfree_skb() with interrupts disabled Juergen Gross <jgross@xxxxxxxx> xen/netback: do some code cleanup Ross Lagerwall <ross.lagerwall@xxxxxxxxxx> xen/netback: Ensure protocol headers don't fall in the non-linear area Thomas Gleixner <tglx@xxxxxxxxxxxxx> rtc: mc146818: Reduce spinlock section in mc146818_set_time() Xiaofei Tan <tanxiaofei@xxxxxxxxxx> rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: cmos: avoid UIP when reading alarm time Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: cmos: avoid UIP when writing alarm time Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: mc146818-lib: extract mc146818_avoid_UIP Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: mc146818-lib: fix RTC presence check Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: Check return value from mc146818_get_time() Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: mc146818-lib: change return values of mc146818_get_time() Mateusz Jończyk <mat.jonczyk@xxxxx> rtc: cmos: remove stale REVISIT comments Thomas Gleixner <tglx@xxxxxxxxxxxxx> rtc: mc146818: Dont test for bit 0-5 in Register D Thomas Gleixner <tglx@xxxxxxxxxxxxx> rtc: mc146818: Detect and handle broken RTCs Thomas Gleixner <tglx@xxxxxxxxxxxxx> rtc: mc146818: Prevent reading garbage Jann Horn <jannh@xxxxxxxxxx> mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths Jann Horn <jannh@xxxxxxxxxx> mm/khugepaged: fix GUP-fast interaction by sending IPI Jann Horn <jannh@xxxxxxxxxx> mm/khugepaged: take the right locks for page table retraction Davide Tronchin <davide.tronchin.94@xxxxxxxxx> net: usb: qmi_wwan: add u-blox 0x1342 composition Dominique Martinet <asmadeus@xxxxxxxxxxxxx> 9p/xen: check logical size for buffer size Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> fbcon: Use kzalloc() in fbcon_prepare_logo() Andreas Kemnade <andreas@xxxxxxxxxxxx> regulator: twl6030: fix get status of twl6032 regulators Srinivasa Rao Mandadapu <quic_srivasam@xxxxxxxxxxx> ASoC: soc-pcm: Add NULL check in BE reparenting Filipe Manana <fdmanana@xxxxxxxx> btrfs: send: avoid unaligned encoded writes when attempting to clone range Kees Cook <keescook@xxxxxxxxxxxx> ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event Konrad Dybcio <konrad.dybcio@xxxxxxxxxx> regulator: slg51000: Wait after asserting CS pin GUO Zihua <guozihua@xxxxxxxxxx> 9p/fd: Use P9_HDRSZ for header size Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 Chancel Liu <chancel.liu@xxxxxxx> ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register Giulio Benetti <giulio.benetti@xxxxxxxxxxxxxxxxxxxxxx> ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation Tomislav Novak <tnovak@xxxxxx> ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name Johan Jonker <jbx6244@xxxxxxxxx> arm64: dts: rockchip: fix ir-receiver node names Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: fix ir-receiver node names Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx> arm: dts: rockchip: fix node name for hym8563 rtc FUKAUMI Naoki <naoki@xxxxxxxxx> arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series ------------- Diffstat: Makefile | 4 +- arch/alpha/kernel/rtc.c | 7 +- arch/arm/boot/dts/imx7s.dtsi | 4 +- arch/arm/boot/dts/rk3036-evb.dts | 2 +- arch/arm/boot/dts/rk3188-radxarock.dts | 2 +- arch/arm/boot/dts/rk3188.dtsi | 3 +- arch/arm/boot/dts/rk3288-evb-act8846.dts | 2 +- arch/arm/boot/dts/rk3288-firefly.dtsi | 2 +- arch/arm/boot/dts/rk3288-miqi.dts | 2 +- arch/arm/boot/dts/rk3288-rock2-square.dts | 2 +- arch/arm/boot/dts/rk3xxx.dtsi | 7 + arch/arm/include/asm/perf_event.h | 2 +- arch/arm/include/asm/pgtable-nommu.h | 6 - arch/arm/include/asm/pgtable.h | 16 +- arch/arm/mm/nommu.c | 19 ++ arch/arm64/boot/dts/rockchip/rk3308-roc-cc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dtsi | 1 - arch/s390/kvm/vsie.c | 4 +- arch/x86/kernel/hpet.c | 8 +- drivers/base/power/trace.c | 6 +- drivers/bluetooth/btusb.c | 5 + drivers/gpio/gpio-amd8111.c | 4 + drivers/gpu/drm/bridge/synopsys/dw-hdmi.c | 6 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 4 +- drivers/gpu/drm/drm_gem_shmem_helper.c | 18 +- drivers/gpu/drm/vmwgfx/vmwgfx_scrn.c | 4 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 3 + drivers/hid/hid-lg4ff.c | 6 + drivers/hid/hid-quirks.c | 3 + drivers/media/common/videobuf2/videobuf2-core.c | 102 ++++++--- drivers/media/v4l2-core/v4l2-dv-timings.c | 20 +- drivers/net/can/usb/esd_usb2.c | 6 + drivers/net/dsa/sja1105/sja1105_devlink.c | 2 + drivers/net/ethernet/aeroflex/greth.c | 1 + drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +- drivers/net/ethernet/hisilicon/hisi_femac.c | 2 +- drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +- drivers/net/ethernet/intel/e1000e/netdev.c | 4 +- drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 6 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 19 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 2 + drivers/net/ethernet/intel/igb/igb_ethtool.c | 2 + drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/microchip/encx24j600-regmap.c | 4 +- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 +- drivers/net/ieee802154/ca8210.c | 2 +- drivers/net/ieee802154/cc2520.c | 2 +- drivers/net/macsec.c | 1 + drivers/net/plip/plip.c | 4 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/vmxnet3/vmxnet3_drv.c | 11 +- drivers/net/xen-netback/common.h | 14 +- drivers/net/xen-netback/interface.c | 22 +- drivers/net/xen-netback/netback.c | 229 ++++++++++++--------- drivers/net/xen-netback/rx.c | 10 +- drivers/net/xen-netfront.c | 6 + drivers/nvme/host/core.c | 8 +- drivers/regulator/slg51000-regulator.c | 2 + drivers/regulator/twl6030-regulator.c | 15 +- drivers/rtc/rtc-cmos.c | 209 ++++++++++++------- drivers/rtc/rtc-mc146818-lib.c | 169 ++++++++++++--- drivers/usb/dwc3/gadget.c | 3 +- drivers/video/fbdev/core/fbcon.c | 2 +- fs/btrfs/send.c | 24 ++- include/asm-generic/tlb.h | 4 + include/linux/cgroup.h | 1 + include/linux/hugetlb.h | 8 +- include/linux/mc146818rtc.h | 6 +- kernel/cgroup/cgroup-internal.h | 1 - mm/gup.c | 16 +- mm/hugetlb.c | 27 ++- mm/khugepaged.c | 47 ++++- mm/memcontrol.c | 15 +- mm/mmu_gather.c | 4 +- net/9p/trans_fd.c | 6 +- net/9p/trans_xen.c | 9 + net/bluetooth/6lowpan.c | 1 + net/bluetooth/af_bluetooth.c | 4 +- net/bluetooth/hci_core.c | 3 +- net/can/af_can.c | 4 +- net/dsa/tag_ksz.c | 3 +- net/ipv4/fib_frontend.c | 3 + net/ipv4/fib_semantics.c | 1 + net/ipv4/ip_gre.c | 48 +++-- net/ipv6/ip6_output.c | 5 + net/mac802154/iface.c | 1 + net/netfilter/nf_conntrack_netlink.c | 19 +- net/netfilter/nft_set_pipapo.c | 5 +- net/nfc/nci/ntf.c | 6 + net/tipc/link.c | 4 +- net/tipc/node.c | 12 +- net/unix/diag.c | 20 +- sound/core/seq/seq_memory.c | 11 +- sound/soc/codecs/wm8962.c | 8 + sound/soc/soc-pcm.c | 2 + tools/testing/selftests/net/fib_tests.sh | 37 ++++ tools/testing/selftests/net/rtnetlink.sh | 2 +- 98 files changed, 982 insertions(+), 438 deletions(-)
