This is the start of the stable review cycle for the 5.15.136 release. There are 102 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 18 Oct 2023 08:39:38 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.136-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.15.136-rc1 Jakub Kicinski <kuba@xxxxxxxxxx> eth: remove remaining copies of the NAPI_POLL_WEIGHT define Ricardo Cañuelo <ricardo.canuelo@xxxxxxxxxxxxx> usb: hub: Guard against accesses to uninitialized BOS descriptors Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "kernel/sched: Modify initial boot task idle setup" Ren Zhijie <renzhijie2@xxxxxxxxxx> arm64: armv8_deprecated: fix unused-function error Mark Rutland <mark.rutland@xxxxxxx> arm64: armv8_deprecated: rework deprected instruction handling Mark Rutland <mark.rutland@xxxxxxx> arm64: armv8_deprecated: move aarch32 helper earlier Mark Rutland <mark.rutland@xxxxxxx> arm64: armv8_deprecated move emulation functions Mark Rutland <mark.rutland@xxxxxxx> arm64: armv8_deprecated: fold ops into insn_emulation Mark Rutland <mark.rutland@xxxxxxx> arm64: rework EL0 MRS emulation Mark Rutland <mark.rutland@xxxxxxx> arm64: factor insn read out of call_undef_hook() Mark Rutland <mark.rutland@xxxxxxx> arm64: factor out EL1 SSBS emulation hook Mark Rutland <mark.rutland@xxxxxxx> arm64: split EL0/EL1 UNDEF handlers Mark Rutland <mark.rutland@xxxxxxx> arm64: allow kprobes on EL0 handlers Mark Rutland <mark.rutland@xxxxxxx> arm64: rework BTI exception handling Mark Rutland <mark.rutland@xxxxxxx> arm64: rework FPAC exception handling Mark Rutland <mark.rutland@xxxxxxx> arm64: consistently pass ESR_ELx to die() Mark Rutland <mark.rutland@xxxxxxx> arm64: die(): pass 'err' as long Mark Rutland <mark.rutland@xxxxxxx> arm64: report EL1 UNDEFs better Christophe Leroy <christophe.leroy@xxxxxxxxxx> powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Christophe Leroy <christophe.leroy@xxxxxxxxxx> powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE Duoming Zhou <duoming@xxxxxxxxxx> dmaengine: mediatek: Fix deadlock caused by synchronize_irq() Rex Zhang <rex.zhang@xxxxxxxxx> dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> x86/alternatives: Disable KASAN in apply_alternatives() Pawel Laszczak <pawell@xxxxxxxxxxx> usb: cdnsp: Fixes issue with dequeuing not queued requests Krishna Kurapati <quic_kriskura@xxxxxxxxxxx> usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Piyush Mehta <piyush.mehta@xxxxxxx> usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Dharma Balasubiramani <dharma.b@xxxxxxxxxxxxx> counter: microchip-tcb-capture: Fix the use of internal GCLK logic Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> pinctrl: avoid unsafe code pattern in find_pinctrl() Michal Koutný <mkoutny@xxxxxxxx> cgroup: Remove duplicates in cgroup v1 tasks file Rijo Thomas <Rijo-john.Thomas@xxxxxxx> tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Hans de Goede <hdegoede@xxxxxxxxxx> Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Szilard Fabian <szfabian@xxxxxxxxxxxxx> Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Matthias Berndt <matthias_berndt@xxxxxx> Input: xpad - add PXN V900 support Jeffery Miller <jefferymiller@xxxxxxxxxx> Input: psmouse - fix fast_reconnect function for PS/2 mode Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> Input: powermate - fix use-after-free in powermate_config_complete Dan Carpenter <dan.carpenter@xxxxxxxxxx> ceph: fix type promotion bug on 32bit systems Xiubo Li <xiubli@xxxxxxxxxx> ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Jordan Rife <jrife@xxxxxxxxxx> libceph: use kernel_connect() Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge Jorge Sanjuan Garcia <jorge.sanjuangarcia@xxxxxxxxxx> mcb: remove is_added flag from mcb_device struct Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA Daniel Miess <daniel.miess@xxxxxxx> drm/amd/display: Don't set dpms_off for seamless boot Christian König <christian.koenig@xxxxxxx> drm/amdgpu: add missing NULL check Alexander Zangerl <az@xxxxxxxxxxxxxxxx> iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Lakshmi Yadlapati <lakshmiy@xxxxxxxxxx> iio: pressure: dps310: Adjust Timeout Settings Phil Elwell <phil@xxxxxxxxxxxxxxx> iio: pressure: bmp280: Fix NULL pointer exception Xingxing Luo <xingxing.luo@xxxxxxxxxx> usb: musb: Modify the "HWVers" register address Xingxing Luo <xingxing.luo@xxxxxxxxxx> usb: musb: Get the musb_qh poniter after musb_giveback Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx> usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: Soft reset phy on probe for host Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Wesley Cheng <quic_wcheng@xxxxxxxxxxx> usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer Hongyu Xie <xy521521@xxxxxxxxx> xhci: Keep interrupt disabled in initialization until host is running. Amelie Delaunay <amelie.delaunay@xxxxxxxxxxx> dmaengine: stm32-mdma: abort resume if no ongoing transfer Zheng Wang <zyytlz.wz@xxxxxxx> media: mtk-jpeg: Fix use after free bug due to uncanceled work Patrick Rohr <prohr@xxxxxxxxxx> net: release reference to inet6_dev pointer Patrick Rohr <prohr@xxxxxxxxxx> net: change accept_ra_min_rtr_lft to affect all RA lifetimes Patrick Rohr <prohr@xxxxxxxxxx> net: add sysctl accept_ra_min_rtr_lft Adrian Hunter <adrian.hunter@xxxxxxxxx> perf inject: Fix GEN_ELF_TEXT_OFFSET for jit Waiman Long <longman@xxxxxxxxxx> workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Jeremy Cline <jeremy@xxxxxxxxxx> nfc: nci: assert requested protocol is valid Ralph Siemsen <ralph.siemsen@xxxxxxxxxx> pinctrl: renesas: rzn1: Enable missing PINMUX Nils Hoppmann <niho@xxxxxxxxxxxxx> net/smc: Fix pos miscalculation in statistics Kory Maincent <kory.maincent@xxxxxxxxxxx> ethtool: Fix mod state of verbose no_mask bitset Eric Dumazet <edumazet@xxxxxxxxxx> net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Will Mortensen <will@xxxxxxxxxxxx> net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp Dan Carpenter <dan.carpenter@xxxxxxxxxx> ixgbe: fix crash with empty VF macvlan list Radu Pirea (NXP OSS) <radu-nicolae.pirea@xxxxxxxxxxx> net: phy: mscc: macsec: reject PN update requests Radu Pirea (NXP OSS) <radu-nicolae.pirea@xxxxxxxxxxx> net: macsec: indicate next pn update when offloading David Vernet <void@xxxxxxxxxxxxx> bpf: Fix verifier log for async callback return values Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx> drm/vmwgfx: fix typo of sizeof argument Björn Töpel <bjorn@xxxxxxxxxxxx> riscv, bpf: Sign-extend return values Pu Lehui <pulehui@xxxxxxxxxx> riscv, bpf: Factor out emit_call for kernel and bpf context Roger Pau Monne <roger.pau@xxxxxxxxxx> xen-netback: use default TX queue size for vifs Jakub Kicinski <kuba@xxxxxxxxxx> eth: remove copies of the NAPI_POLL_WEIGHT define Dan Carpenter <dan.carpenter@xxxxxxxxxx> mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type Dinghao Liu <dinghao.liu@xxxxxxxxxx> ieee802154: ca8210: Fix a potential UAF in ca8210_probe Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> ravb: Fix use-after-free issue in ravb_tx_timeout_work() Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> ravb: Fix up dma_free_coherent() call in ravb_remove() Abhinav Kumar <quic_abhinavk@xxxxxxxxxxx> drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow Dan Carpenter <dan.carpenter@xxxxxxxxxx> drm/msm/dsi: fix irq_of_parse_and_map() error checking Abhinav Kumar <quic_abhinavk@xxxxxxxxxxx> drm/msm/dsi: skip the wait for video mode done if not applicable Kuogee Hsieh <quic_khsieh@xxxxxxxxxxx> drm/msm/dp: do not reinitialize phy unless retry during link training Sumit Garg <sumit.garg@xxxxxxxxxx> KEYS: trusted: Remove redundant static calls usage Ahmad Fatoum <a.fatoum@xxxxxxxxxxxxxx> KEYS: trusted: allow use of kernel RNG for key material WhaleChang <whalechang@xxxxxxxxxx> ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset Jordan Rife <jrife@xxxxxxxxxx> net: prevent address rewrite in kernel_bind() Jan Kara <jack@xxxxxxx> quota: Fix slow quotaoff Hans de Goede <hdegoede@xxxxxxxxxx> HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> lib/test_meminit: fix off-by-one error in test_pages() Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning Armin Wolf <W_Armin@xxxxxx> platform/x86: think-lmi: Fix reference leak Geert Uytterhoeven <geert+renesas@xxxxxxxxx> of: overlay: Reorder struct fragment fields kerneldoc Jing Zhang <renyu.zj@xxxxxxxxxxxxxxxxx> perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 Artem Chernyshev <artem.chernyshev@xxxxxxxxxxx> RDMA/cxgb4: Check skb value for failure to allocate Bart Van Assche <bvanassche@xxxxxxx> RDMA/srp: Do not call scsi_done() from srp_abort() Bart Van Assche <bvanassche@xxxxxxx> scsi: ib_srp: Call scsi_done() directly Bart Van Assche <bvanassche@xxxxxxx> scsi: core: Rename scsi_mq_done() into scsi_done() and export it Bart Van Assche <bvanassche@xxxxxxx> scsi: core: Use a structure member to track the SCSI command submitter Zhang Rui <rui.zhang@xxxxxxxxx> iommu/vt-d: Avoid memory allocation in iommu_suspend() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 10 + Documentation/networking/ip-sysctl.rst | 8 + Documentation/security/keys/trusted-encrypted.rst | 20 +- Makefile | 4 +- arch/arm64/include/asm/cpufeature.h | 3 +- arch/arm64/include/asm/exception.h | 13 +- arch/arm64/include/asm/spectre.h | 2 + arch/arm64/include/asm/system_misc.h | 2 +- arch/arm64/include/asm/traps.h | 19 +- arch/arm64/kernel/armv8_deprecated.c | 572 ++++++++++----------- arch/arm64/kernel/cpufeature.c | 23 +- arch/arm64/kernel/entry-common.c | 36 +- arch/arm64/kernel/proton-pack.c | 26 +- arch/arm64/kernel/traps.c | 125 ++--- arch/powerpc/include/asm/nohash/32/pte-8xx.h | 7 + arch/powerpc/include/asm/nohash/64/pgtable.h | 2 +- arch/powerpc/include/asm/nohash/pgtable.h | 2 + arch/riscv/net/bpf_jit_comp64.c | 33 +- arch/x86/include/asm/msr-index.h | 9 +- arch/x86/kernel/alternative.c | 13 + arch/x86/kernel/cpu/amd.c | 8 + drivers/acpi/resource.c | 7 + drivers/counter/microchip-tcb-capture.c | 2 +- drivers/dma/idxd/device.c | 5 +- drivers/dma/mediatek/mtk-uart-apdma.c | 3 +- drivers/dma/stm32-mdma.c | 4 + drivers/gpu/drm/amd/amdgpu/amdgpu_object.h | 2 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 3 + drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 12 +- drivers/gpu/drm/msm/dp/dp_ctrl.c | 13 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 19 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +- drivers/hid/hid-logitech-hidpp.c | 3 +- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/dps310.c | 8 +- drivers/iio/pressure/ms5611_core.c | 2 +- drivers/infiniband/hw/cxgb4/cm.c | 3 + drivers/infiniband/ulp/srp/ib_srp.c | 22 +- drivers/input/joystick/xpad.c | 2 + drivers/input/misc/powermate.c | 1 + drivers/input/mouse/elantech.c | 1 + drivers/input/mouse/synaptics.c | 1 + drivers/input/serio/i8042-acpipnpio.h | 8 + drivers/input/touchscreen/goodix.c | 19 + drivers/iommu/intel/iommu.c | 16 - drivers/mcb/mcb-core.c | 10 +- drivers/mcb/mcb-parse.c | 2 - drivers/media/platform/mtk-jpeg/mtk_jpeg_core.c | 1 + drivers/net/ethernet/amazon/ena/ena_netdev.c | 4 +- drivers/net/ethernet/brocade/bna/bnad.c | 3 +- drivers/net/ethernet/cortina/gemini.c | 4 +- drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 +- drivers/net/ethernet/marvell/skge.c | 3 +- drivers/net/ethernet/marvell/sky2.c | 3 +- drivers/net/ethernet/mediatek/mtk_star_emac.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 3 +- .../ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 4 +- drivers/net/ethernet/nvidia/forcedeth.c | 6 +- drivers/net/ethernet/renesas/ravb_main.c | 6 +- drivers/net/ethernet/ti/davinci_emac.c | 3 +- drivers/net/ethernet/ti/netcp_core.c | 5 +- drivers/net/ieee802154/ca8210.c | 17 +- drivers/net/macsec.c | 2 + drivers/net/phy/mscc/mscc_macsec.c | 6 + drivers/net/usb/dm9601.c | 7 +- drivers/net/xen-netback/interface.c | 7 +- drivers/of/overlay.c | 2 +- drivers/perf/arm-cmn.c | 2 +- drivers/pinctrl/core.c | 16 +- drivers/pinctrl/renesas/Kconfig | 1 + drivers/platform/x86/hp/hp-wmi.c | 8 +- drivers/platform/x86/think-lmi.c | 24 +- drivers/scsi/scsi_error.c | 17 +- drivers/scsi/scsi_lib.c | 15 +- drivers/scsi/scsi_priv.h | 1 + drivers/tee/amdtee/core.c | 10 +- drivers/thunderbolt/icm.c | 40 +- drivers/thunderbolt/switch.c | 7 + drivers/usb/cdns3/cdnsp-gadget.c | 3 + drivers/usb/cdns3/core.h | 3 +- drivers/usb/core/hub.c | 25 +- drivers/usb/core/hub.h | 2 +- drivers/usb/dwc3/core.c | 39 +- drivers/usb/gadget/function/f_ncm.c | 26 +- drivers/usb/gadget/udc/udc-xilinx.c | 20 +- drivers/usb/host/xhci-ring.c | 4 +- drivers/usb/host/xhci.c | 35 +- drivers/usb/musb/musb_debugfs.c | 2 +- drivers/usb/musb/musb_host.c | 9 +- fs/ceph/file.c | 2 +- fs/ceph/inode.c | 4 +- fs/quota/dquot.c | 66 ++- include/keys/trusted-type.h | 2 +- include/linux/intel-iommu.h | 2 +- include/linux/ipv6.h | 1 + include/linux/mcb.h | 1 - include/linux/quota.h | 4 +- include/linux/quotaops.h | 2 +- include/net/macsec.h | 1 + include/scsi/scsi_cmnd.h | 9 + include/uapi/linux/ipv6.h | 3 + kernel/bpf/verifier.c | 6 +- kernel/cgroup/cgroup-v1.c | 5 +- kernel/sched/core.c | 2 +- kernel/sched/idle.c | 1 - kernel/workqueue.c | 8 +- lib/test_meminit.c | 2 +- net/ceph/messenger.c | 4 +- net/ethtool/bitset.c | 32 +- net/ipv6/addrconf.c | 13 + net/ipv6/ndisc.c | 13 +- net/netfilter/ipvs/ip_vs_sync.c | 4 +- net/nfc/llcp_core.c | 30 +- net/nfc/nci/core.c | 5 + net/rds/tcp_connect.c | 2 +- net/rds/tcp_listen.c | 2 +- net/smc/smc_stats.h | 14 +- net/socket.c | 6 +- security/keys/trusted-keys/trusted_core.c | 48 +- sound/usb/quirks.c | 6 +- tools/perf/util/genelf.h | 4 +- 121 files changed, 1054 insertions(+), 762 deletions(-)
