This is the start of the stable review cycle for the 5.4.259 release. There are 123 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Oct 2023 10:47:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.259-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.4.259-rc1 Zhang Changzhong <zhangchangzhong@xxxxxxxxxx> xfrm6: fix inet6_dev refcount underflow problem Kees Cook <keescook@xxxxxxxxxxxx> Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Edward AD <twuufnxlz@xxxxxxxxx> Bluetooth: hci_sock: fix slab oob read in create_monitor_event Tony Lindgren <tony@xxxxxxxxxxx> phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins Tony Lindgren <tony@xxxxxxxxxxx> phy: mapphone-mdm6600: Fix runtime PM for remove Tony Lindgren <tony@xxxxxxxxxxx> phy: mapphone-mdm6600: Fix runtime disable on probe Haibo Chen <haibo.chen@xxxxxxx> gpio: vf610: mask the gpio irq in system suspend and support wakeup Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> gpio: vf610: make irq_chip immutable Dan Carpenter <dan.carpenter@xxxxxxxxxx> ASoC: pxa: fix a memory leak in probe() Haibo Chen <haibo.chen@xxxxxxx> gpio: vf610: set value before the direction to avoid a glitch Niklas Schnelle <schnelle@xxxxxxxxxxxxx> s390/pci: fix iommu bitmap allocation Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf: Disallow mis-matched inherited group reads Puliang Lu <puliang.lu@xxxxxxxxxxx> USB: serial: option: add Fibocom to DELL custom modem FM101R-GL Benoît Monin <benoit.monin@xxxxxx> USB: serial: option: add entry for Sierra EM9191 with new firmware Fabio Porcedda <fabio.porcedda@xxxxxxxxx> USB: serial: option: add Telit LE910C4-WWX 0x1035 composition Sunil V L <sunilvl@xxxxxxxxxxxxxxxx> ACPI: irq: Fix incorrect return value in acpi_register_gsi() Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" Avri Altman <avri.altman@xxxxxxx> mmc: core: Capture correct oemid-bits for eMMC cards Haibo Chen <haibo.chen@xxxxxxx> mmc: core: sdio: hold retuning if sdio in 1-bit mode Geert Uytterhoeven <geert+renesas@xxxxxxxxx> mtd: physmap-core: Restore map_rom fallback Martin Kurbanov <mmkurbanov@xxxxxxxxxxxxxx> mtd: spinand: micron: correct bitmask for ecc status Bibek Kumar Patro <quic_bibekkum@xxxxxxxxxxx> mtd: rawnand: qcom: Unmap the right resource upon probe failure Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_event: Fix using memcmp when comparing keys Rahul Rameshbabu <sergeantsagara@xxxxxxxxxxxxxx> HID: multitouch: Add required quirk for Synaptics 0xcd7e device Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c Kai Uwe Broulik <foss-linux@xxxxxxxxxx> drm: panel-orientation-quirks: Add quirk for One Mix 2S Kees Cook <keescook@xxxxxxxxxxxx> sky2: Make sure there is at least one frag_addr available Michał Mirosław <mirq-linux@xxxxxxxxxxxx> regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" Benjamin Berg <benjamin.berg@xxxxxxxxx> wifi: cfg80211: avoid leaking stack data into trace Wen Gong <quic_wgong@xxxxxxxxxxx> wifi: mac80211: allow transmitting EAPOL frames with tainted key Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_core: Fix build warnings Ying Hsu <yinghsu@xxxxxxxxxxxx> Bluetooth: Avoid redundant authentication Ma Ke <make_ruc2021@xxxxxxx> HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event Clément Léger <cleger@xxxxxxxxxxxx> tracing: relax trace_event_eval_update() execution with cond_resched() Damien Le Moal <dlemoal@xxxxxxxxxx> ata: libata-eh: Fix compilation warning in ata_eh_link_report() Chengfeng Ye <dg573847474@xxxxxxxxx> gpio: timberdale: Fix potential deadlock on &tgpio->lock Jeff Layton <jlayton@xxxxxxxxxx> overlayfs: set ctime when setting mtime and atime Heiner Kallweit <hkallweit1@xxxxxxxxx> i2c: mux: Avoid potential false error message in i2c_mux_add_adapter Josef Bacik <josef@xxxxxxxxxxxxxx> btrfs: initialize start_slot in btrfs_log_prealloc_extents Filipe Manana <fdmanana@xxxxxxxx> btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 Tony Lindgren <tony@xxxxxxxxxxx> ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA Paul Menzel <pmenzel@xxxxxxxxxxxxx> ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA Tamim Khan <tamim@xxxxxxxxxxx> ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks Tamim Khan <tamim@xxxxxxxxxxx> ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA Kellen Renshaw <kellen.renshaw@xxxxxxxxxxxxx> ACPI: resource: Add ASUS model S5402ZA to quirks Tamim Khan <tamim@xxxxxxxxxxx> ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA Hui Wang <hui.wang@xxxxxxxxxxxxx> ACPI: resources: Add DMI-based legacy IRQ override quirk John Garry <john.garry@xxxxxxxxxx> ACPI: Drop acpi_dev_irqresource_disabled() John Garry <john.garry@xxxxxxxxxx> resource: Add irqresource_disabled() Gavrilov Ilia <Ilia.Gavrilov@xxxxxxxxxxx> net: pktgen: Fix interface flags printing Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_set_rbtree: .deactivate fails if element has expired Geert Uytterhoeven <geert+renesas@xxxxxxxxx> neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section Pedro Tammela <pctammela@xxxxxxxxxxxx> net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve Michal Schmidt <mschmidt@xxxxxxxxxx> i40e: prevent crash on probe if hw registers have invalid values Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: usb: smsc95xx: Fix an error code in smsc95xx_reset() Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr Eric Dumazet <edumazet@xxxxxxxxxx> tun: prevent negative ifindex Eric Dumazet <edumazet@xxxxxxxxxx> tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb Neal Cardwell <ncardwell@xxxxxxxxxx> tcp: fix excessive TLP and RACK timeouts from HZ rounding Josua Mayer <josua@xxxxxxxxxxxxx> net: rfkill: gpio: prevent value glitch during probe Ma Ke <make_ruc2021@xxxxxxx> net: ipv6: fix return value check in esp_remove_trailer Ma Ke <make_ruc2021@xxxxxxx> net: ipv4: fix return value check in esp_remove_trailer Eric Dumazet <edumazet@xxxxxxxxxx> xfrm: interface: use DEV_STATS_INC() Eric Dumazet <edumazet@xxxxxxxxxx> xfrm: fix a data-race in xfrm_gen_index() Manish Chopra <manishc@xxxxxxxxxxx> qed: fix LL2 RX buffer allocation Florian Westphal <fw@xxxxxxxxx> netfilter: nft_payload: fix wrong mac header matching Jim Mattson <jmattson@xxxxxxxxxx> KVM: x86: Mask LVTPC when handling a PMI Johan Hovold <johan+linaro@xxxxxxxxxx> regmap: fix NULL deref on lookup Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx> ice: fix over-shifted variable Arnd Bergmann <arnd@xxxxxxxx> Bluetooth: avoid memcmp() out of bounds warning Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_event: Fix coding style Arkadiusz Bokowy <arkadiusz.bokowy@xxxxxxxxx> Bluetooth: vhci: Fix race when opening vhci device Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> Bluetooth: Fix a refcnt underflow problem for hci_conn Lee, Chun-Yi <jlee@xxxxxxxx> Bluetooth: Reject connection with the device which has same BD_ADDR Lee, Chun-Yi <jlee@xxxxxxxx> Bluetooth: hci_event: Ignore NULL link key Ricardo Cañuelo <ricardo.canuelo@xxxxxxxxxxxxx> usb: hub: Guard against accesses to uninitialized BOS descriptors Bagas Sanjaya <bagasdotme@xxxxxxxxx> Documentation: sysctl: align cells in second content column Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> dev_forward_skb: do not scrub skb mark within the same name space Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> ravb: Fix use-after-free issue in ravb_tx_timeout_work() Christophe Leroy <christophe.leroy@xxxxxxxxxx> powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Christophe Leroy <christophe.leroy@xxxxxxxxxx> powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE Duoming Zhou <duoming@xxxxxxxxxx> dmaengine: mediatek: Fix deadlock caused by synchronize_irq() Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Krishna Kurapati <quic_kriskura@xxxxxxxxxxx> usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Piyush Mehta <piyush.mehta@xxxxxxx> usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> pinctrl: avoid unsafe code pattern in find_pinctrl() Michal Koutný <mkoutny@xxxxxxxx> cgroup: Remove duplicates in cgroup v1 tasks file Matthias Berndt <matthias_berndt@xxxxxx> Input: xpad - add PXN V900 support Jeffery Miller <jefferymiller@xxxxxxxxxx> Input: psmouse - fix fast_reconnect function for PS/2 mode Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> Input: powermate - fix use-after-free in powermate_config_complete Xiubo Li <xiubli@xxxxxxxxxx> ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Jordan Rife <jrife@xxxxxxxxxx> libceph: use kernel_connect() Jorge Sanjuan Garcia <jorge.sanjuangarcia@xxxxxxxxxx> mcb: remove is_added flag from mcb_device struct Alexander Zangerl <az@xxxxxxxxxxxxxxxx> iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Lakshmi Yadlapati <lakshmiy@xxxxxxxxxx> iio: pressure: dps310: Adjust Timeout Settings Phil Elwell <phil@xxxxxxxxxxxxxxx> iio: pressure: bmp280: Fix NULL pointer exception Xingxing Luo <xingxing.luo@xxxxxxxxxx> usb: musb: Modify the "HWVers" register address Xingxing Luo <xingxing.luo@xxxxxxxxxx> usb: musb: Get the musb_qh poniter after musb_giveback Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx> usb: dwc3: Soft reset phy on probe for host Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Wesley Cheng <quic_wcheng@xxxxxxxxxxx> usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer Amelie Delaunay <amelie.delaunay@xxxxxxxxxxx> dmaengine: stm32-mdma: abort resume if no ongoing transfer Waiman Long <longman@xxxxxxxxxx> workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Jeremy Cline <jeremy@xxxxxxxxxx> nfc: nci: assert requested protocol is valid Eric Dumazet <edumazet@xxxxxxxxxx> net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Dan Carpenter <dan.carpenter@xxxxxxxxxx> ixgbe: fix crash with empty VF macvlan list Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx> drm/vmwgfx: fix typo of sizeof argument Roger Pau Monne <roger.pau@xxxxxxxxxx> xen-netback: use default TX queue size for vifs Dan Carpenter <dan.carpenter@xxxxxxxxxx> mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type Dinghao Liu <dinghao.liu@xxxxxxxxxx> ieee802154: ca8210: Fix a potential UAF in ca8210_probe Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx> ravb: Fix up dma_free_coherent() call in ravb_remove() Abhinav Kumar <quic_abhinavk@xxxxxxxxxxx> drm/msm/dsi: skip the wait for video mode done if not applicable Martin Fuzzey <martin.fuzzey@flowbird.group> drm: etvnaviv: fix bad backport leading to warning Jordan Rife <jrife@xxxxxxxxxx> net: prevent address rewrite in kernel_bind() Jan Kara <jack@xxxxxxx> quota: Fix slow quotaoff Hans de Goede <hdegoede@xxxxxxxxxx> HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> pwm: hibvt: Explicitly set .polarity in .get_state() Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> lib/test_meminit: fix off-by-one error in test_pages() Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning Artem Chernyshev <artem.chernyshev@xxxxxxxxxxx> RDMA/cxgb4: Check skb value for failure to allocate ------------- Diffstat: Documentation/admin-guide/sysctl/net.rst | 18 +-- Makefile | 4 +- arch/arm/boot/dts/omap4-droid4-xt894.dts | 1 + arch/powerpc/include/asm/nohash/32/pte-8xx.h | 7 ++ arch/powerpc/include/asm/nohash/64/pgtable.h | 2 +- arch/powerpc/include/asm/nohash/pgtable.h | 2 + arch/s390/pci/pci_dma.c | 15 ++- arch/x86/include/asm/msr-index.h | 4 + arch/x86/kernel/cpu/amd.c | 8 ++ arch/x86/kvm/lapic.c | 8 +- drivers/acpi/irq.c | 7 +- drivers/acpi/resource.c | 121 +++++++++++++++++++-- drivers/ata/libata-eh.c | 2 +- drivers/base/regmap/regmap.c | 2 +- drivers/bluetooth/hci_vhci.c | 3 + drivers/dma/mediatek/mtk-uart-apdma.c | 3 +- drivers/dma/stm32-mdma.c | 4 + drivers/gpio/gpio-timberdale.c | 5 +- drivers/gpio/gpio-vf610.c | 46 ++++---- drivers/gpu/drm/drm_panel_orientation_quirks.c | 16 +++ drivers/gpu/drm/etnaviv/etnaviv_gem_prime.c | 2 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 12 ++ drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +- drivers/hid/hid-holtek-kbd.c | 4 + drivers/hid/hid-logitech-hidpp.c | 3 +- drivers/hid/hid-multitouch.c | 4 + drivers/i2c/i2c-mux.c | 2 +- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/dps310.c | 8 +- drivers/iio/pressure/ms5611_core.c | 2 +- drivers/infiniband/hw/cxgb4/cm.c | 3 + drivers/input/joystick/xpad.c | 2 + drivers/input/misc/powermate.c | 1 + drivers/input/mouse/elantech.c | 1 + drivers/input/mouse/synaptics.c | 1 + drivers/mcb/mcb-core.c | 10 +- drivers/mcb/mcb-parse.c | 2 - drivers/mmc/core/mmc.c | 2 +- drivers/mmc/core/sdio.c | 8 +- drivers/mtd/maps/physmap-core.c | 11 ++ drivers/mtd/nand/raw/qcom_nandc.c | 2 +- drivers/mtd/nand/spi/micron.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_common.c | 4 +- drivers/net/ethernet/intel/ice/ice_lib.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 +- drivers/net/ethernet/marvell/sky2.h | 2 +- .../ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 4 +- drivers/net/ethernet/qlogic/qed/qed_ll2.c | 7 +- drivers/net/ethernet/renesas/ravb_main.c | 6 +- drivers/net/ieee802154/ca8210.c | 17 +-- drivers/net/tun.c | 7 +- drivers/net/usb/dm9601.c | 7 +- drivers/net/usb/smsc95xx.c | 2 +- drivers/net/xen-netback/interface.c | 3 - drivers/phy/motorola/phy-mapphone-mdm6600.c | 38 +++---- drivers/platform/x86/hp-wmi.c | 8 +- drivers/pwm/pwm-hibvt.c | 1 + drivers/regulator/core.c | 6 +- drivers/usb/core/hub.c | 28 ++++- drivers/usb/core/hub.h | 2 +- drivers/usb/dwc3/core.c | 39 ++++++- drivers/usb/gadget/function/f_ncm.c | 26 +++-- drivers/usb/gadget/udc/udc-xilinx.c | 20 ++-- drivers/usb/host/xhci-ring.c | 4 +- drivers/usb/musb/musb_debugfs.c | 2 +- drivers/usb/musb/musb_host.c | 9 +- drivers/usb/serial/option.c | 7 ++ fs/btrfs/extent-tree.c | 6 +- fs/btrfs/ioctl.c | 4 +- fs/btrfs/tree-log.c | 2 +- fs/ceph/inode.c | 4 +- fs/overlayfs/copy_up.c | 2 +- fs/quota/dquot.c | 66 ++++++----- include/linux/ioport.h | 7 ++ include/linux/mcb.h | 1 - include/linux/netdevice.h | 2 +- include/linux/perf_event.h | 1 + include/linux/quota.h | 4 +- include/linux/quotaops.h | 2 +- include/net/bluetooth/hci_core.h | 2 +- include/net/bluetooth/hci_mon.h | 2 +- include/net/netns/xfrm.h | 1 + include/net/tcp.h | 3 + include/trace/events/neigh.h | 4 +- kernel/cgroup/cgroup-v1.c | 5 +- kernel/events/core.c | 39 ++++++- kernel/trace/trace_events.c | 1 + kernel/workqueue.c | 8 +- lib/test_meminit.c | 2 +- net/bluetooth/hci_conn.c | 72 +++++++----- net/bluetooth/hci_core.c | 8 +- net/bluetooth/hci_event.c | 33 +++++- net/bluetooth/hci_sock.c | 3 +- net/ceph/messenger.c | 4 +- net/core/pktgen.c | 14 +-- net/ipv4/esp4.c | 4 +- net/ipv4/fib_semantics.c | 14 ++- net/ipv4/tcp_output.c | 25 ++++- net/ipv4/tcp_recovery.c | 2 +- net/ipv6/esp6.c | 4 +- net/ipv6/xfrm6_policy.c | 4 +- net/mac80211/tx.c | 3 +- net/netfilter/ipvs/ip_vs_sync.c | 4 +- net/netfilter/nft_payload.c | 2 +- net/netfilter/nft_set_rbtree.c | 2 + net/nfc/llcp_core.c | 30 ++--- net/nfc/nci/core.c | 5 + net/nfc/nci/spi.c | 2 + net/rds/tcp_connect.c | 2 +- net/rds/tcp_listen.c | 2 +- net/rfkill/rfkill-gpio.c | 4 +- net/sched/sch_hfsc.c | 18 ++- net/socket.c | 6 +- net/wireless/nl80211.c | 2 +- net/xfrm/xfrm_interface_core.c | 22 ++-- net/xfrm/xfrm_policy.c | 6 +- sound/soc/pxa/pxa-ssp.c | 2 +- 117 files changed, 757 insertions(+), 331 deletions(-)
