This is the start of the stable review cycle for the 5.10.212 release. There are 42 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 06 Mar 2024 21:15:26 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.212-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.10.212-rc1 Davide Caratti <dcaratti@xxxxxxxxxx> mptcp: fix double-free on socket dismantle Chuanhong Guo <gch981213@xxxxxxxxx> mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx> gpio: fix resource unwinding order in error path Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> gpiolib: Fix the error path order in gpiochip_add_data_with_key() Arturas Moskvinas <arturas.moskvinas@xxxxxxxxx> gpio: 74x164: Enable output pins after registers are reset Oscar Salvador <osalvador@xxxxxxx> fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super Baokun Li <libaokun1@xxxxxxxxxx> cachefiles: fix memory leak in cachefiles_add_cache() Baokun Li <libaokun1@xxxxxxxxxx> ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: fix possible deadlock in subflow diag Paolo Bonzini <pbonzini@xxxxxxxxxx> x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers Bjorn Andersson <quic_bjorande@xxxxxxxxxxx> pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation Zong Li <zong.li@xxxxxxxxxx> riscv: add CALLER_ADDRx support Elad Nachman <enachman@xxxxxxxxxxx> mmc: sdhci-xenon: fix PHY init clock stability Elad Nachman <enachman@xxxxxxxxxxx> mmc: sdhci-xenon: add timeout for PHY init complete Ivan Semenov <ivan@xxxxxxxxxxx> mmc: core: Fix eMMC initialization with 1-bit bus connection Curtis Klein <curtis.klein@xxxxxxx> dmaengine: fsl-qdma: init irq after reg initialization Peng Ma <peng.ma@xxxxxxx> dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read David Sterba <dsterba@xxxxxxxx> btrfs: dev-replace: properly validate device names Johannes Berg <johannes.berg@xxxxxxxxx> wifi: nl80211: reject iftype change with mesh ID change Alexander Ofitserov <oficerovas@xxxxxxxxxxxx> gtp: fix use-after-free and null-ptr-deref in gtp_newlink() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> tomoyo: fix UAF write bug in tomoyo_write_control() Dimitris Vlachos <dvlachos@xxxxxxxxxxxx> riscv: Sparse-Memory/vmemmap out-of-bounds fix David Howells <dhowells@xxxxxxxxxx> afs: Fix endless loop in directory parsing Takashi Iwai <tiwai@xxxxxxx> ALSA: Drop leftover snd-rtctimer stuff from Makefile Hans de Goede <hdegoede@xxxxxxxxxx> power: supply: bq27xxx-i2c: Do not free non existing IRQ Arnd Bergmann <arnd@xxxxxxxx> efi/capsule-loader: fix incorrect allocation size Lin Ma <linma@xxxxxxxxxx> rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back Ignat Korchagin <ignat@xxxxxxxxxxxxxx> netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> Bluetooth: Enforce validation on max value of connection interval Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST Zijun Hu <quic_zijuhu@xxxxxxxxxxx> Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR Ying Hsu <yinghsu@xxxxxxxxxxxx> Bluetooth: Avoid potential use-after-free in hci_error_reset Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> net: usb: dm9601: fix wrong return value in dm9601_mdio_read Oleksij Rempel <linux@xxxxxxxxxxxxxxxx> lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() Yunjian Wang <wangyunjian@xxxxxxxxxx> tun: Fix xdp_rxq_info's queue_index when detaching Florian Westphal <fw@xxxxxxxxx> net: ip_tunnel: prevent perpetual headroom growth Ryosuke Yasuoka <ryasuoka@xxxxxxxxxx> netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter Han Xu <han.xu@xxxxxxx> mtd: spinand: gigadevice: Fix the get ecc status issue Reto Schneider <reto.schneider@xxxxxxxxxxxxxxxxxx> mtd: spinand: gigadevice: Support GD5F1GQ5UExxG zhenwei pi <pizhenwei@xxxxxxxxxxxxx> crypto: virtio/akcipher - Fix stack overflow on memcpy Hans de Goede <hdegoede@xxxxxxxxxx> platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names ------------- Diffstat: Makefile | 4 +- arch/riscv/include/asm/ftrace.h | 5 + arch/riscv/include/asm/pgtable.h | 2 +- arch/riscv/kernel/Makefile | 2 + arch/riscv/kernel/return_address.c | 48 ++++++ arch/x86/kernel/cpu/intel.c | 178 +++++++++++---------- .../crypto/virtio/virtio_crypto_akcipher_algs.c | 5 +- drivers/dma/fsl-qdma.c | 25 +-- drivers/firmware/efi/capsule-loader.c | 2 +- drivers/gpio/gpio-74x164.c | 4 +- drivers/gpio/gpiolib.c | 12 +- drivers/mmc/core/mmc.c | 2 + drivers/mmc/host/sdhci-xenon-phy.c | 48 ++++-- drivers/mtd/nand/spi/gigadevice.c | 81 ++++++++-- drivers/net/gtp.c | 12 +- drivers/net/tun.c | 1 + drivers/net/usb/dm9601.c | 2 +- drivers/net/usb/lan78xx.c | 3 +- drivers/platform/x86/touchscreen_dmi.c | 4 +- drivers/power/supply/bq27xxx_battery_i2c.c | 4 +- drivers/soc/qcom/rpmhpd.c | 7 +- fs/afs/dir.c | 4 +- fs/btrfs/dev-replace.c | 24 ++- fs/cachefiles/bind.c | 3 + fs/ext4/mballoc.c | 39 ++--- fs/hugetlbfs/inode.c | 6 +- net/bluetooth/hci_core.c | 7 +- net/bluetooth/hci_event.c | 13 +- net/bluetooth/l2cap_core.c | 8 +- net/core/rtnetlink.c | 11 +- net/ipv4/ip_tunnel.c | 28 +++- net/ipv6/addrconf.c | 7 +- net/mptcp/diag.c | 3 + net/mptcp/protocol.c | 49 ++++++ net/netfilter/nft_compat.c | 20 +++ net/netlink/af_netlink.c | 2 +- net/wireless/nl80211.c | 2 + security/tomoyo/common.c | 3 +- sound/core/Makefile | 1 - 39 files changed, 485 insertions(+), 196 deletions(-)
