This is the start of the stable review cycle for the 4.19.314 release. There are 63 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 16 May 2024 10:09:32 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.314-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.19.314-rc1 Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxx> net: fix out-of-bounds access in ops_init Zack Rusin <zack.rusin@xxxxxxxxxxxx> drm/vmwgfx: Fix invalid reads in fence signaled events Jim Cromie <jim.cromie@xxxxxxxxx> dyndbg: fix old BUG_ON in >control parser Paolo Abeni <pabeni@xxxxxxxxxx> tipc: fix UAF in error path Chris Wulff <Chris.Wulff@xxxxxxxxx> usb: gadget: f_fs: Fix a race condition when processing setup packets. Peter Korsgaard <peter@xxxxxxxxxxxxx> usb: gadget: composite: fix OS descriptors w_value logic Thanassis Avgerinos <thanassis.avgerinos@xxxxxxxxx> firewire: nosy: ensure user_length is taken into account when fetching packet contents Michal Luczaj <mhal@xxxxxxx> af_unix: Fix garbage collector racing against connect() Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> af_unix: Do not use atomic ops for unix_sk(sk)->inflight. Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() Felix Fietkau <nbd@xxxxxxxx> net: bridge: fix corrupted ethernet header on multicast-to-unicast Eric Dumazet <edumazet@xxxxxxxxxx> phonet: fix rtm_phonet_notify() skb allocation Roded Zats <rzats@xxxxxxxxxxxxxxxxxxxx> rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Duoming Zhou <duoming@xxxxxxxxxx> Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout Duoming Zhou <duoming@xxxxxxxxxx> Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Eric Dumazet <edumazet@xxxxxxxxxx> tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets Colin Ian King <colin.king@xxxxxxxxxxxxx> tcp: remove redundant check on tskb Neil Armstrong <narmstrong@xxxxxxxxxxxx> ASoC: meson: axg-tdm-interface: Fix formatters in trigger" Vanillan Wang <vanillanwang@xxxxxxx> net:usb:qmi_wwan: support Rolling modules Joakim Sindholt <opensource@xxxxxxxxxx> fs/9p: drop inodes immediately on non-.L too Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> gpio: crystalcove: Use -ENOTSUPP consistently Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> gpio: wcove: Use -ENOTSUPP consistently Jeff Layton <jlayton@xxxxxxxxxx> 9p: explicitly deny setlease attempts Joakim Sindholt <opensource@xxxxxxxxxx> fs/9p: translate O_TRUNC into OTRUNC Joakim Sindholt <opensource@xxxxxxxxxx> fs/9p: only translate RWX permissions for plain 9P2000 John Stultz <jstultz@xxxxxxxxxx> selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior Maurizio Lombardi <mlombard@xxxxxxxxxx> scsi: target: Fix SELinux error when systemd-modules loads the target module Boris Burkov <boris@xxxxxx> btrfs: always clear PERTRANS metadata during commit Boris Burkov <boris@xxxxxx> btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve Peng Liu <liupeng17@xxxxxxxxxx> tools/power turbostat: Fix Bzy_MHz documentation typo Doug Smythies <dsmythies@xxxxxxxxx> tools/power turbostat: Fix added raw MSR output Adam Goldman <adamg@xxxxxxxxx> firewire: ohci: mask bus reset interrupts between ISR and bottom half Chen Ni <nichen@xxxxxxxxxxx> ata: sata_gemini: Check clk_enable() result Phil Elwell <phil@xxxxxxxxxxxxxxx> net: bcmgenet: Reset RBUF on first open Takashi Iwai <tiwai@xxxxxxx> ALSA: line6: Zero-initialize message buffers Saurav Kashyap <skashyap@xxxxxxxxxxx> scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload linke li <lilinke99@xxxxxx> net: mark racy access on sk->sk_rcvbuf Jeff Johnson <quic_jjohnson@xxxxxxxxxxx> wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc Andrew Price <anprice@xxxxxxxxxx> gfs2: Fix invalid metadata access in punch_hole Justin Tee <justin.tee@xxxxxxxxxxxx> scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic Xin Long <lucien.xin@xxxxxxxxx> tipc: fix a possible memleak in tipc_buf_append Felix Fietkau <nbd@xxxxxxxx> net: bridge: fix multicast-to-unicast with fraglist GSO Marek Behún <kabel@xxxxxxxxxx> net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 Andrew Lunn <andrew@xxxxxxx> net: dsa: mv88e6xxx: Add number of MACs in the ATU Jerome Brunet <jbrunet@xxxxxxxxxxxx> ASoC: meson: axg-tdm-interface: manage formatters in trigger David Bauer <mail@xxxxxxxxxxxxxxx> net l2tp: drop flow hash on forward Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). Bui Quang Minh <minhquangbui99@xxxxxxxxx> bna: ensure the copied buf is NUL terminated Claudio Imbrenda <imbrenda@xxxxxxxxxxxxx> s390/mm: Fix clearing storage keys for huge pages Claudio Imbrenda <imbrenda@xxxxxxxxxxxxx> s390/mm: Fix storage key clearing for guest huge pages Zeng Heng <zengheng4@xxxxxxxxxx> pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() Arnd Bergmann <arnd@xxxxxxxx> power: rt9455: hide unused rt9455_boost_voltage_values Dan Carpenter <dan.carpenter@xxxxxxxxxx> pinctrl: core: delete incorrect free in pinctrl_enable() Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx> ethernet: Add helper for assigning packet type when dest address does not match device address Jakub Kicinski <kuba@xxxxxxxxxx> ethernet: add a helper for assigning port addresses Li RongQing <lirongqing@xxxxxxxxx> net: slightly optimize eth_type_trans Mukul Joshi <mukul.joshi@xxxxxxx> drm/amdgpu: Fix leak when GPU memory allocation fails Eric Huang <JinhuiEric.Huang@xxxxxxx> drm/amdkfd: change system memory overcommit limit Johannes Berg <johannes.berg@xxxxxxxxx> wifi: nl80211: don't free NULL coalescing rule Vinod Koul <vkoul@xxxxxxxxxx> dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" Bumyong Lee <bumyong.lee@xxxxxxxxxxx> dmaengine: pl330: issue_pending waits until WFP state ------------- Diffstat: Makefile | 4 +- arch/s390/mm/gmap.c | 2 +- arch/s390/mm/hugetlbpage.c | 2 +- drivers/ata/sata_gemini.c | 5 +- drivers/firewire/nosy.c | 6 +- drivers/firewire/ohci.c | 6 +- drivers/gpio/gpio-crystalcove.c | 2 +- drivers/gpio/gpio-wcove.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 100 +++++++++++++---------- drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 2 +- drivers/net/dsa/mv88e6xxx/chip.c | 29 ++++++- drivers/net/dsa/mv88e6xxx/chip.h | 6 ++ drivers/net/ethernet/broadcom/genet/bcmgenet.c | 16 +++- drivers/net/ethernet/brocade/bna/bnad_debugfs.c | 4 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/pinctrl/core.c | 8 +- drivers/pinctrl/devicetree.c | 10 ++- drivers/power/supply/rt9455_charger.c | 2 + drivers/scsi/bnx2fc/bnx2fc_tgt.c | 2 - drivers/scsi/lpfc/lpfc.h | 1 - drivers/scsi/lpfc/lpfc_scsi.c | 13 +-- drivers/target/target_core_configfs.c | 12 +++ drivers/usb/gadget/composite.c | 6 +- drivers/usb/gadget/function/f_fs.c | 2 +- fs/9p/vfs_file.c | 2 + fs/9p/vfs_inode.c | 5 +- fs/9p/vfs_super.c | 1 + fs/btrfs/inode.c | 2 +- fs/btrfs/transaction.c | 2 +- fs/gfs2/bmap.c | 5 +- include/linux/etherdevice.h | 46 +++++++++++ include/net/af_unix.h | 5 +- lib/dynamic_debug.c | 6 +- net/bluetooth/l2cap_core.c | 3 + net/bluetooth/sco.c | 4 + net/bridge/br_forward.c | 9 +- net/core/net_namespace.c | 13 ++- net/core/rtnetlink.c | 2 +- net/core/sock.c | 4 +- net/ethernet/eth.c | 10 +-- net/ipv4/tcp.c | 4 +- net/ipv4/tcp_input.c | 2 + net/ipv4/tcp_ipv4.c | 8 +- net/ipv4/tcp_output.c | 11 ++- net/ipv6/fib6_rules.c | 6 +- net/l2tp/l2tp_eth.c | 3 + net/mac80211/ieee80211_i.h | 4 +- net/nsh/nsh.c | 14 ++-- net/phonet/pn_netlink.c | 2 +- net/tipc/msg.c | 8 +- net/unix/af_unix.c | 4 +- net/unix/garbage.c | 35 +++++--- net/unix/scm.c | 8 +- net/wireless/nl80211.c | 2 + sound/usb/line6/driver.c | 6 +- tools/power/x86/turbostat/turbostat.8 | 2 +- tools/power/x86/turbostat/turbostat.c | 7 +- tools/testing/selftests/timers/valid-adjtimex.c | 73 ++++++++--------- 58 files changed, 370 insertions(+), 191 deletions(-)
