NOTE, this is the LAST 3.17-stable kernel to be released, you should move to 3.18 by now, as 3.17 is end-of-life after this release. This is the start of the stable review cycle for the 3.17.8 release. There are 73 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Jan 9 02:15:36 UTC 2015. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v3.0/stable-review/patch-3.17.8-rc1.gz and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.17.8-rc1 Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix fs corruption on transaction abort if device supports discard Liu Bo <bo.li.liu@xxxxxxxxxx> Btrfs: fix loop writing of async reclaim Josef Bacik <jbacik@xxxxxx> Btrfs: make sure logged extents complete in the current transaction V3 Josef Bacik <jbacik@xxxxxx> Btrfs: do not move em to modified list when unpinning David Sterba <dsterba@xxxxxxx> btrfs: fix wrong accounting of raid1 data profile in statfs Josef Bacik <jbacik@xxxxxx> Btrfs: make sure we wait on logged extents when fsycning two subvols Michael Halcrow <mhalcrow@xxxxxxxxxx> eCryptfs: Remove buggy and unnecessary write in file name decode routine Tyler Hicks <tyhicks@xxxxxxxxxxxxx> eCryptfs: Force RO mount when encrypted view is enabled Jan Kara <jack@xxxxxxx> udf: Check component length before reading it Jan Kara <jack@xxxxxxx> udf: Verify symlink size before loading it Jan Kara <jack@xxxxxxx> udf: Verify i_size when loading inode Jan Kara <jack@xxxxxxx> udf: Check path length when reading symlink Oleg Nesterov <oleg@xxxxxxxxxx> exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting Jan Kara <jack@xxxxxxx> ncpfs: return proper error from NCP_IOC_SETROOT ioctl Rabin Vincent <rabin.vincent@xxxxxxxx> crypto: af_alg - fix backlog handling Richard Guy Briggs <rgb@xxxxxxxxxx> audit: restore AUDIT_LOGINUID unset ABI Paul Moore <pmoore@xxxxxxxxxx> audit: don't attempt to lookup PIDs when changing PID filtering audit rules Richard Guy Briggs <rgb@xxxxxxxxxx> audit: use supplied gfp_mask from audit_buffer in kauditd_send_multicast_skb Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Unbreak the unprivileged remount tests Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Allow setting gid_maps without privilege when setgroups is disabled Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Add a knob to disable setgroups on a per user namespace basis Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Rename id_map_mutex to userns_state_mutex Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Only allow the creator of the userns unprivileged mappings Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Check euid no fsuid when establishing an unprivileged uid mapping Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Don't allow unprivileged creation of gid mappings Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Don't allow setgroups until a gid mapping has been setablished Eric W. Biederman <ebiederm@xxxxxxxxxxxx> userns: Document what the invariant required for safe unprivileged mappings. Eric W. Biederman <ebiederm@xxxxxxxxxxxx> groups: Consolidate the setgroups permission checks Eric W. Biederman <ebiederm@xxxxxxxxxxxx> umount: Disallow unprivileged mount force Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: Update unprivileged remount test Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount Luis Henriques <luis.henriques@xxxxxxxxxxxxx> thermal: Fix error path in thermal_init() Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: Fix a memory stomp in umount Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: free management frame keys when removing station Andreas Müller <goo@xxxxxxxxxxxxxxxxxx> mac80211: fix multicast LED blinking and counter Takashi Iwai <tiwai@xxxxxxx> KEYS: Fix stale key registration at error path Jan Kara <jack@xxxxxxx> isofs: Fix unchecked printing of ER records Andy Lutomirski <luto@xxxxxxxxxxxxxx> x86/tls: Don't validate lm in set_thread_area() after all Andy Lutomirski <luto@xxxxxxxxxxxxxx> x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> ARM: mvebu: fix ordering in Armada 370 .dtsi Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx> ARM: mvebu: disable I/O coherency on non-SMP situations on Armada 370/375/38x/XP Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx> ARM: mvebu: make the coherency_ll.S functions work with no coherency fabric Dmitry Osipenko <digetx@xxxxxxxxx> ARM: tegra: Re-add removed SoC id macro to tegra_resume() Thierry Reding <treding@xxxxxxxxxx> drm/tegra: gem: dumb: pitch and size are outputs Catalin Marinas <catalin.marinas@xxxxxxx> arm64: Add COMPAT_HWCAP_LPAE Hante Meuleman <meuleman@xxxxxxxxxxxx> brcmfmac: Fix bitmap malloc bug in msgbuf. Mikulas Patocka <mpatocka@xxxxxxxxxx> dm thin: fix a race in thin_dtr Joe Thornber <ejt@xxxxxxxxxx> dm thin: fix missing out-of-data-space to write mode transition if blocks are released Joe Thornber <ejt@xxxxxxxxxx> dm thin: fix inability to discard blocks when in out-of-data-space mode Dan Carpenter <dan.carpenter@xxxxxxxxxx> dm space map metadata: fix sm_bootstrap_get_nr_blocks() Joe Thornber <ejt@xxxxxxxxxx> dm cache: fix spurious cell_defer when dealing with partial block at end of device Joe Thornber <ejt@xxxxxxxxxx> dm cache: dirty flag was mistakenly being cleared when promoting via overwrite Joe Thornber <ejt@xxxxxxxxxx> dm cache: only use overwrite optimisation for promotion when in writeback mode Milan Broz <gmazyland@xxxxxxxxx> dm crypt: use memzero_explicit for on-stack buffer Darrick J. Wong <darrick.wong@xxxxxxxxxx> dm bufio: fix memleak when using a dm_buffer's inline bio Mikulas Patocka <mpatocka@xxxxxxxxxx> dcache: fix kmemcheck warning in switch_names Peng Tao <tao.peng@xxxxxxxxxxxxxxx> nfs41: fix nfs4_proc_layoutget error handling Jan Kara <jack@xxxxxxx> f2fs: fix possible data corruption in f2fs_write_begin() Hannes Reinecke <hare@xxxxxxx> scsi: correct return values for .eh_abort_handler implementations Markus Pargmann <mpa@xxxxxxxxxxxxxx> regulator: anatop: Set default voltage selector for vddpu Sumit.Saxena@xxxxxxxxxxxxx <Sumit.Saxena@xxxxxxxxxxxxx> megaraid_sas: corrected return of wait_event from abort frame path Peter Guo <peter.guo@xxxxxxxxxxxxxx> mmc: sdhci-pci-o2micro: Fix Dell E5440 issue Baruch Siach <baruch@xxxxxxxxxx> mmc: block: add newline to sysfs display of force_ro Ulf Hansson <ulf.hansson@xxxxxxxxxx> mmc: omap_hsmmc: Fix UHS card with DDR50 support James Hogan <james.hogan@xxxxxxxxxx> mmc: dw_mmc: avoid write to CDTHRCTL on older versions Dmitry Eremin-Solenikov <dbaryshkov@xxxxxxxxx> mfd: tc6393xb: Fail ohci suspend if full state restore is required Tony Lindgren <tony@xxxxxxxxxxx> mfd: twl4030-power: Fix regression with missing compatible flag NeilBrown <neilb@xxxxxxx> md/bitmap: always wait for writes on unplug. Andy Lutomirski <luto@xxxxxxxxxxxxxx> x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit Andy Lutomirski <luto@xxxxxxxxxxxxxx> x86_64, switch_to(): Load TLS descriptors before switching DS and ES Andy Lutomirski <luto@xxxxxxxxxxxxxx> x86/tls: Disallow unusual TLS segments Andy Lutomirski <luto@xxxxxxxxxxxxxx> x86/tls: Validate TLS entries to protect espfix Jan Kara <jack@xxxxxxx> isofs: Fix infinite looping over CE entries ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/armada-370.dtsi | 10 +- arch/arm/mach-mvebu/coherency.c | 44 +++-- arch/arm/mach-mvebu/coherency_ll.S | 21 ++- arch/arm/mach-tegra/reset-handler.S | 1 + arch/arm64/include/asm/hwcap.h | 1 + arch/arm64/kernel/setup.c | 3 +- arch/s390/kernel/compat_linux.c | 2 +- arch/x86/include/uapi/asm/ldt.h | 7 + arch/x86/kernel/kvm.c | 9 +- arch/x86/kernel/kvmclock.c | 1 - arch/x86/kernel/process_64.c | 101 +++++++--- arch/x86/kernel/tls.c | 39 ++++ arch/x86/kernel/traps.c | 5 +- crypto/af_alg.c | 3 + drivers/gpu/drm/tegra/gem.c | 10 +- drivers/md/bitmap.c | 16 +- drivers/md/dm-bufio.c | 20 +- drivers/md/dm-cache-target.c | 17 +- drivers/md/dm-crypt.c | 2 +- drivers/md/dm-thin.c | 30 ++- drivers/md/persistent-data/dm-space-map-metadata.c | 4 +- drivers/mfd/tc6393xb.c | 13 +- drivers/mfd/twl4030-power.c | 3 + drivers/mmc/card/block.c | 2 +- drivers/mmc/host/dw_mmc.c | 7 + drivers/mmc/host/omap_hsmmc.c | 4 +- drivers/mmc/host/sdhci-pci-o2micro.c | 2 - drivers/net/wireless/brcm80211/brcmfmac/msgbuf.c | 1 + drivers/regulator/anatop-regulator.c | 8 + drivers/scsi/NCR5380.c | 12 +- drivers/scsi/aha1740.c | 2 +- drivers/scsi/atari_NCR5380.c | 2 +- drivers/scsi/esas2r/esas2r_main.c | 2 +- drivers/scsi/megaraid.c | 8 +- drivers/scsi/megaraid/megaraid_sas_base.c | 2 +- drivers/scsi/sun3_NCR5380.c | 10 +- drivers/thermal/thermal_core.c | 4 +- fs/btrfs/disk-io.c | 26 ++- fs/btrfs/extent-tree.c | 27 ++- fs/btrfs/extent_map.c | 2 - fs/btrfs/ordered-data.c | 9 +- fs/btrfs/ordered-data.h | 8 +- fs/btrfs/super.c | 2 +- fs/btrfs/transaction.c | 33 ++++ fs/btrfs/transaction.h | 2 + fs/btrfs/tree-log.c | 6 +- fs/dcache.c | 2 + fs/ecryptfs/crypto.c | 1 - fs/ecryptfs/file.c | 12 -- fs/ecryptfs/main.c | 16 +- fs/f2fs/data.c | 24 ++- fs/isofs/rock.c | 9 + fs/namespace.c | 13 +- fs/ncpfs/ioctl.c | 1 - fs/nfs/nfs4proc.c | 6 +- fs/proc/base.c | 53 ++++++ fs/udf/dir.c | 3 +- fs/udf/inode.c | 14 ++ fs/udf/namei.c | 3 +- fs/udf/symlink.c | 57 ++++-- fs/udf/udfdecl.h | 3 +- fs/udf/unicode.c | 28 +-- include/linux/audit.h | 4 + include/linux/cred.h | 1 + include/linux/user_namespace.h | 12 ++ kernel/audit.c | 8 +- kernel/auditfilter.c | 23 +-- kernel/groups.c | 11 +- kernel/pid.c | 2 + kernel/uid16.c | 2 +- kernel/user.c | 1 + kernel/user_namespace.c | 122 +++++++++++- net/mac80211/key.c | 2 +- net/mac80211/rx.c | 11 +- security/keys/encrypted-keys/encrypted.c | 5 +- .../selftests/mount/unprivileged-remount-test.c | 204 +++++++++++++++++---- 77 files changed, 929 insertions(+), 271 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html