This is the start of the stable review cycle for the 5.15.171 release. There are 73 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 08 Nov 2024 12:02:47 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.171-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.15.171-rc1 Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: always have ieee80211_sta_restart() Jeongjun Park <aha310510@xxxxxxxxx> vt: prevent kernel-infoleak in con_font_get() Rob Clark <robdclark@xxxxxxxxxxxx> drm/i915: Fix potential context UAFs Jason-JH.Lin <jason-jh.lin@xxxxxxxxxxxx> Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" Jeongjun Park <aha310510@xxxxxxxxx> mm: shmem: fix data-race in shmem_getattr() Johannes Berg <johannes.berg@xxxxxxxxx> wifi: iwlwifi: mvm: fix 6 GHz scan construction Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix kernel bug due to missing clearing of checked flag Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/bugs: Use code segment selector for VERW operand Edward Adam Davis <eadavis@xxxxxx> ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Matt Fleming <mfleming@xxxxxxxxxxxxxx> mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: explicitly define what alloc flags deplete min reserves Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: treat RT tasks similar to __GFP_HIGH Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: split out buddy removal code from rmqueue into separate helper Wonhyuk Yang <vvghjk1234@xxxxxxxxx> mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked() Eric Dumazet <edumazet@xxxxxxxxxx> mm/page_alloc: call check_new_pages() while zone spinlock is not held Chunyan Zhang <zhangchunyan@xxxxxxxxxxx> riscv: Remove duplicated GET_RM Chunyan Zhang <zhangchunyan@xxxxxxxxxxx> riscv: Remove unused GENERATING_ASM_OFFSETS WangYuli <wangyuli@xxxxxxxxxxxxx> riscv: Use '%u' to format the output of 'cpu' Heinrich Schuchardt <heinrich.schuchardt@xxxxxxxxxxxxx> riscv: efi: Set NX compat flag in PE/COFF header Alexandre Ghiti <alexghiti@xxxxxxxxxxxx> riscv: vdso: Prevent the compiler from inserting calls to memset() Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix potential deadlock with newly created symlinks Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: light: veml6030: fix microlux value calculation Zicheng Qu <quzicheng@xxxxxxxxxx> iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() Zicheng Qu <quzicheng@xxxxxxxxxx> staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> wifi: iwlegacy: Clear stale interrupts before resuming device Manikanta Pubbisetty <quic_mpubbise@xxxxxxxxxxx> wifi: ath10k: Fix memory leak in management tx Felix Fietkau <nbd@xxxxxxxx> wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "driver core: Fix uevent_show() vs driver detach race" Basavaraj Natikar <Basavaraj.Natikar@xxxxxxx> xhci: Use pm_runtime_get to prevent RPM on unsupported systems Faisal Hassan <quic_faisalh@xxxxxxxxxxx> xhci: Fix Link TRB DMA in command ring stopped completion event Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() Zijun Hu <quic_zijuhu@xxxxxxxxxxx> usb: phy: Fix API devm_usb_put_phy() can not release the phy Zongmin Zhou <zhouzongmin@xxxxxxxxxx> usbip: tools: Fix detach_port() invalid port error path Dimitri Sivanich <sivanich@xxxxxxx> misc: sgi-gru: Don't disable preemption in GRU driver Dai Ngo <dai.ngo@xxxxxxxxxx> NFS: remove revoked delegation from server's delegation list Daniel Palmer <daniel@xxxxxxxx> net: amd: mvme147: Fix probe banner message Benjamin Marzinski <bmarzins@xxxxxxxxxx> scsi: scsi_transport_fc: Allow setting rport state to current state Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Additional check in ni_clear() Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Fix possible deadlock in mi_read Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Fix warning possible deadlock in ntfs_set_state Andrew Ballance <andrewjballance@xxxxxxxxx> fs/ntfs3: Check if more than chunk-size bytes are written Pierre Gondois <pierre.gondois@xxxxxxx> ACPI: CPPC: Make rmw_lock a raw_spin_lock Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx> firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Benoît Monin <benoit.monin@xxxxxx> net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension Dong Chenchen <dongchenchen2@xxxxxxxxxx> netfilter: Fix use-after-free in get_info() Byeonguk Jeong <jungbu2855@xxxxxxxxx> bpf: Fix out-of-bounds write in trie_get_next_key() Zichen Xie <zichenxie0106@xxxxxxxxx> netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() Pedro Tammela <pctammela@xxxxxxxxxxxx> net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> gtp: allow -1 to be specified as file description from userspace Ido Schimmel <idosch@xxxxxxxxxx> ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() Wander Lairson Costa <wander@xxxxxxxxxx> igb: Disable threaded IRQ for igb_msix_other Furong Xu <0x1207@xxxxxxxxx> net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() Daniel Gabay <daniel.gabay@xxxxxxxxx> wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> wifi: iwlwifi: mvm: disconnect station vifs if recovery failed Youghandhar Chintala <youghand@xxxxxxxxxxxxxx> mac80211: Add support to trigger sta disconnect on hardware restart Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: do drv_reconfig_complete() before restarting all Selvin Xavier <selvin.xavier@xxxxxxxxxxxx> RDMA/bnxt_re: synchronize the qp-handle table array Patrisious Haddad <phaddad@xxxxxxxxxx> RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down Leon Romanovsky <leon@xxxxxxxxxx> RDMA/cxgb4: Dump vendor specific QP details Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> wifi: brcm80211: BRCM_TRACING should depend on TRACING Felix Fietkau <nbd@xxxxxxxx> wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING Xiu Jianfeng <xiujianfeng@xxxxxxxxxx> cgroup: Fix potential overflow issue when checking max_depth Koba Ko <kobak@xxxxxxxxxx> ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context Sudeep Holla <sudeep.holla@xxxxxxx> ACPI: PRM: Change handler_addr type to void pointer Aubrey Li <aubrey.li@xxxxxxxxx> ACPI: PRM: Remove unnecessary blank lines Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: fix user-after-free from session log off Donet Tom <donettom@xxxxxxxxxxxxx> selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test ------------- Diffstat: Makefile | 4 +- arch/riscv/kernel/asm-offsets.c | 2 - arch/riscv/kernel/cpu-hotplug.c | 2 +- arch/riscv/kernel/efi-header.S | 2 +- arch/riscv/kernel/traps_misaligned.c | 2 - arch/riscv/kernel/vdso/Makefile | 1 + arch/x86/include/asm/nospec-branch.h | 11 +- drivers/acpi/cppc_acpi.c | 9 +- drivers/acpi/prmt.c | 33 ++-- drivers/base/core.c | 13 +- drivers/base/module.c | 4 - drivers/firmware/arm_sdei.c | 2 +- drivers/gpu/drm/drm_mipi_dsi.c | 2 +- drivers/gpu/drm/i915/gem/i915_gem_context.c | 24 ++- drivers/iio/adc/ad7124.c | 2 +- drivers/iio/light/veml6030.c | 2 +- drivers/infiniband/hw/bnxt_re/qplib_fp.c | 4 + drivers/infiniband/hw/bnxt_re/qplib_rcfw.c | 13 +- drivers/infiniband/hw/bnxt_re/qplib_rcfw.h | 2 + drivers/infiniband/hw/cxgb4/provider.c | 1 + drivers/infiniband/hw/mlx5/qp.c | 4 +- drivers/misc/sgi-gru/grukservices.c | 2 - drivers/misc/sgi-gru/grumain.c | 4 - drivers/misc/sgi-gru/grutlbpurge.c | 2 - drivers/net/ethernet/amd/mvme147.c | 7 +- drivers/net/ethernet/intel/igb/igb_main.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 22 ++- drivers/net/gtp.c | 22 +-- drivers/net/netdevsim/fib.c | 4 +- drivers/net/wireless/ath/ath10k/wmi-tlv.c | 7 +- drivers/net/wireless/ath/ath10k/wmi.c | 2 + drivers/net/wireless/broadcom/brcm80211/Kconfig | 1 + drivers/net/wireless/intel/iwlegacy/common.c | 2 + drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 22 ++- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 3 +- drivers/scsi/scsi_transport_fc.c | 4 +- drivers/staging/iio/frequency/ad9832.c | 7 +- drivers/tty/vt/vt.c | 2 +- drivers/usb/host/xhci-pci.c | 6 +- drivers/usb/host/xhci-ring.c | 16 +- drivers/usb/phy/phy.c | 2 +- drivers/usb/typec/class.c | 1 + fs/ksmbd/mgmt/user_session.c | 26 ++- fs/ksmbd/mgmt/user_session.h | 4 + fs/ksmbd/server.c | 2 + fs/ksmbd/smb2pdu.c | 8 +- fs/nfs/delegation.c | 5 + fs/nilfs2/namei.c | 3 + fs/nilfs2/page.c | 1 + fs/ntfs3/frecord.c | 4 +- fs/ntfs3/lznt.c | 3 + fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 2 +- fs/ocfs2/file.c | 8 + include/acpi/cppc_acpi.h | 2 +- include/net/ip_tunnels.h | 2 +- include/net/mac80211.h | 10 ++ include/trace/events/kmem.h | 14 +- kernel/bpf/lpm_trie.c | 2 +- kernel/cgroup/cgroup.c | 4 +- mm/internal.h | 13 +- mm/page_alloc.c | 185 +++++++++++++--------- mm/shmem.c | 2 + net/core/dev.c | 4 + net/mac80211/Kconfig | 2 +- net/mac80211/cfg.c | 3 +- net/mac80211/ieee80211_i.h | 3 + net/mac80211/key.c | 42 +++-- net/mac80211/mlme.c | 14 +- net/mac80211/util.c | 45 ++++-- net/netfilter/nft_payload.c | 3 + net/netfilter/x_tables.c | 2 +- net/sched/sch_api.c | 2 +- sound/soc/codecs/cs42l51.c | 7 +- tools/testing/selftests/vm/hmm-tests.c | 2 +- tools/usb/usbip/src/usbip_detach.c | 1 + 76 files changed, 481 insertions(+), 230 deletions(-)