This is the start of the stable review cycle for the 4.14.324 release. There are 57 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 30 Aug 2023 10:11:30 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.324-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.14.324-rc1 Rob Clark <robdclark@xxxxxxxxxxxx> dma-buf/sw_sync: Avoid recursive lock during fence signal Zhu Wang <wangzhu9@xxxxxxxxxx> scsi: core: raid_class: Remove raid_component_add() Zhu Wang <wangzhu9@xxxxxxxxxx> scsi: snic: Fix double free in snic_tgt_create() Ido Schimmel <idosch@xxxxxxxxxx> rtnetlink: Reject negative ifindexes in RTM_NEWLINK Feng Tang <feng.tang@xxxxxxxxx> x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 Wei Chen <harperchen1110@xxxxxxxxx> media: vcodec: Fix potential array out-of-bounds in encoder queue_setup Helge Deller <deller@xxxxxx> lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels Remi Pommarel <repk@xxxxxxxxxxxx> batman-adv: Fix batadv_v_ogm_aggr_send memory leak Remi Pommarel <repk@xxxxxxxxxxxx> batman-adv: Fix TT global entry leak when client roamed back Remi Pommarel <repk@xxxxxxxxxxxx> batman-adv: Do not get eth header before batadv_check_management_packet Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Trigger events for auto adjusted MTU Michael Ellerman <mpe@xxxxxxxxxxxxxx> ibmveth: Use dcbf rather than dcbfl Sishuai Gong <sishuai.system@xxxxxxxxx> ipvs: fix racy memcpy in proc_do_sync_threshold Junwei Hu <hujunwei4@xxxxxxxxxx> ipvs: Improve robustness to the ipvs sysctl Alessio Igor Bogani <alessio.bogani@xxxxxxxxxx> igb: Avoid starting unnecessary workqueues Eric Dumazet <edumazet@xxxxxxxxxx> sock: annotate data-races around prot->memory_pressure Zheng Yejian <zhengyejian1@xxxxxxxxxx> tracing: Fix memleak due to race between current_tracer and trace Justin Chen <justin.chen@xxxxxxxxxxxx> net: phy: broadcom: stub c45 read/write for 54810 Lin Ma <linma@xxxxxxxxxx> net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure Jason Xing <kernelxing@xxxxxxxxxxx> net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> af_unix: Fix null-ptr-deref in unix_stream_sendpage(). Zhang Shurong <zhang_shurong@xxxxxxxxxxx> ASoC: rt5665: add missed regulator_bulk_disable Xin Long <lucien.xin@xxxxxxxxx> netfilter: set default timeout to 3 secs for sctp shutdown send and recv state Mirsad Goran Todorovac <mirsad.todorovac@xxxxxxxxxxxx> test_firmware: prevent race conditions by a correct implementation of locking Qi Zheng <zhengqi.arch@xxxxxxxxxxxxx> binder: fix memory leak in binder_init() Tony Lindgren <tony@xxxxxxxxxxx> serial: 8250: Fix oops for port->pm on uart_change_pm() Yang Yingliang <yangyingliang@xxxxxxxxxx> mmc: wbsd: fix double mmc_free_host() in wbsd_init() Russell Harmon via samba-technical <samba-technical@xxxxxxxxxxxxxxx> cifs: Release folio lock on fscache read hit. dengxiang <dengxiang@xxxxxxxxxxxx> ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. Eric Dumazet <edumazet@xxxxxxxxxx> net: do not allow gso_size to be set to GSO_BY_FRAGS Abel Wu <wuyun.abel@xxxxxxxxxxxxx> sock: Fix misuse of sk_under_memory_pressure() Andrii Staikov <andrii.staikov@xxxxxxxxx> i40e: fix misleading debug logs Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_dynset: disallow object maps Lin Ma <linma@xxxxxxxxxx> xfrm: add NULL check in xfrm_update_ae_params Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ip_vti: fix potential slab-use-after-free in decode_session6 Zhengchao Shao <shaozhengchao@xxxxxxxxxx> ip6_vti: fix slab-use-after-free in decode_session6 Lin Ma <linma@xxxxxxxxxx> net: af_key: fix sadb_x_filter validation Lin Ma <linma@xxxxxxxxxx> net: xfrm: Fix xfrm_address_filter OOB read Nathan Lynch <nathanl@xxxxxxxxxxxxx> powerpc/rtas_flash: allow user copy to flash block cache objects Yuanjun Gong <ruc_gongyuanjun@xxxxxxx> fbdev: mmp: fix value check in mmphw_probe() shanzhulig <shanzhulig@xxxxxxxxx> drm/amdgpu: Fix potential fence use-after-free v2 Zhengping Jiang <jiangzp@xxxxxxxxxx> Bluetooth: L2CAP: Fix use-after-free Armin Wolf <W_Armin@xxxxxx> pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() Tuo Li <islituo@xxxxxxxxx> gfs2: Fix possible data races in gfs2_show_options() Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: platform: mediatek: vpu: fix NULL ptr dereference Yunfei Dong <yunfei.dong@xxxxxxxxxxxx> media: v4l2-mem2mem: add lock to protect parameter num_rdy Immad Mir <mirimmad17@xxxxxxxxx> FS: JFS: Check for read-only mounted filesystem in txBegin Immad Mir <mirimmad17@xxxxxxxxx> FS: JFS: Fix null-ptr-deref Read in txBegin Gustavo A. R. Silva <gustavoars@xxxxxxxxxx> MIPS: dec: prom: Address -Warray-bounds warning Yogesh <yogi.kernel@xxxxxxxxx> fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev Jan Kara <jack@xxxxxxx> udf: Fix uninitialized array access for some pathnames Ye Bin <yebin10@xxxxxxxxxx> quota: fix warning in dqgrab() Jan Kara <jack@xxxxxxx> quota: Properly disable quotas when add_dquot_ref() fails Oswald Buddenhagen <oswald.buddenhagen@xxxxxx> ALSA: emu10k1: roll up loops in DSP setup code for Audigy hackyzh002 <hackyzh002@xxxxxxxxx> drm/radeon: Fix integer overflow in radeon_cs_parser_init Nathan Chancellor <natechancellor@xxxxxxxxx> lib/mpi: Eliminate unused umul_ppmm definitions for MIPS ------------- Diffstat: Makefile | 4 +- arch/mips/include/asm/dec/prom.h | 2 +- arch/powerpc/kernel/rtas_flash.c | 6 +- arch/x86/kernel/fpu/xstate.c | 8 ++ drivers/android/binder.c | 1 + drivers/android/binder_alloc.c | 6 ++ drivers/android/binder_alloc.h | 1 + drivers/dma-buf/sw_sync.c | 18 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3 + drivers/gpu/drm/radeon/radeon_cs.c | 3 +- drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c | 2 + drivers/media/platform/mtk-vpu/mtk_vpu.c | 6 +- drivers/mmc/host/wbsd.c | 2 - drivers/net/ethernet/ibm/ibmveth.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_nvm.c | 16 +-- drivers/net/ethernet/intel/igb/igb_ptp.c | 24 ++--- drivers/net/phy/broadcom.c | 13 +++ drivers/net/team/team.c | 4 +- drivers/pcmcia/rsrc_nonstatic.c | 2 + drivers/scsi/raid_class.c | 48 --------- drivers/scsi/snic/snic_disc.c | 3 +- drivers/tty/serial/8250/8250_port.c | 1 + drivers/video/fbdev/mmp/hw/mmp_ctrl.c | 4 +- fs/cifs/file.c | 2 +- fs/gfs2/super.c | 26 +++-- fs/jfs/jfs_dmap.c | 3 + fs/jfs/jfs_txnmgr.c | 5 + fs/jfs/namei.c | 5 + fs/quota/dquot.c | 5 +- fs/udf/unicode.c | 2 +- include/linux/raid_class.h | 4 - include/linux/virtio_net.h | 4 + include/media/v4l2-mem2mem.h | 18 +++- include/net/sock.h | 11 +- kernel/trace/trace.c | 9 +- kernel/trace/trace_irqsoff.c | 3 +- kernel/trace/trace_sched_wakeup.c | 2 + lib/clz_ctz.c | 32 ++---- lib/mpi/longlong.h | 36 +------ lib/test_firmware.c | 39 +++++-- net/batman-adv/bat_v_elp.c | 3 +- net/batman-adv/bat_v_ogm.c | 7 +- net/batman-adv/hard-interface.c | 2 +- net/batman-adv/translation-table.c | 1 - net/bluetooth/l2cap_core.c | 5 + net/core/rtnetlink.c | 5 +- net/core/sock.c | 2 +- net/ipv4/ip_vti.c | 4 +- net/ipv4/tcp_timer.c | 4 +- net/ipv6/ip6_vti.c | 4 +- net/key/af_key.c | 4 +- net/netfilter/ipvs/ip_vs_ctl.c | 74 +++++++------- net/netfilter/nf_conntrack_proto_sctp.c | 6 +- net/netfilter/nft_dynset.c | 3 + net/sctp/socket.c | 2 +- net/unix/af_unix.c | 9 +- net/xfrm/xfrm_user.c | 13 ++- sound/pci/emu10k1/emufx.c | 112 ++------------------- sound/soc/codecs/rt5665.c | 2 + sound/usb/quirks-table.h | 29 ++++++ 60 files changed, 325 insertions(+), 351 deletions(-)
