June 2021 - Linux-stable-mirror

by Greg Kroah-Hartman

I'm announcing the release of the 4.9.272 kernel. All users of the 4.9 kernel series must upgrade. The updated 4.9.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.9.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/kernel/traps.c | 8 --- arch/x86/kvm/svm.c | 8 +-- drivers/firmware/efi/cper.c | 4 - drivers/firmware/efi/memattr.c | 5 -- drivers/hid/i2c-hid/i2c-hid-core.c | 4 - drivers/hid/usbhid/hid-pidff.c | 1 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 1 drivers/net/usb/cdc_ncm.c | 12 +++++ drivers/vfio/pci/Kconfig | 1 drivers/vfio/pci/vfio_pci_config.c | 2 drivers/vfio/platform/vfio_platform_common.c | 2 drivers/xen/xen-pciback/vpci.c | 14 +++--- fs/btrfs/file-item.c | 10 ++-- fs/btrfs/tree-log.c | 13 +++--- fs/ext4/extents.c | 43 +++++++++++---------- fs/ocfs2/file.c | 55 ++++++++++++++++++++++++--- include/linux/usb/usbnet.h | 2 include/net/caif/caif_dev.h | 2 include/net/caif/cfcnfg.h | 2 include/net/caif/cfserl.h | 1 init/main.c | 2 net/bluetooth/hci_core.c | 7 ++- net/bluetooth/hci_sock.c | 4 - net/caif/caif_dev.c | 13 ++++-- net/caif/caif_usb.c | 14 ++++++ net/caif/cfcnfg.c | 16 +++++-- net/caif/cfserl.c | 5 ++ net/ieee802154/nl-mac.c | 4 + net/ieee802154/nl-phy.c | 4 + net/netfilter/ipvs/ip_vs_ctl.c | 2 net/netfilter/nfnetlink_cthelper.c | 8 ++- net/nfc/llcp_sock.c | 2 sound/core/timer.c | 3 - 34 files changed, 185 insertions(+), 91 deletions(-) Arnd Bergmann (1): HID: i2c-hid: fix format string mismatch Grant Grundler (1): net: usb: cdc_ncm: don't spew notifications Greg Kroah-Hartman (1): Linux 4.9.272 Heiner Kallweit (1): efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared Jan Beulich (1): xen-pciback: redo VF placement in the virtual topology Josef Bacik (2): btrfs: fix error handling in btrfs_del_csums btrfs: fixup error handling in fixup_inode_link_counts Julian Anastasov (1): ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service Junxiao Bi (1): ocfs2: fix data corruption by fallocate Krzysztof Kozlowski (1): nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect Lin Ma (2): Bluetooth: fix the erroneous flush_work() order Bluetooth: use correct lock to prevent UAF of hdev object Mark Rutland (1): pid: take a reference when initializing `cad_pid` Max Gurtovoy (1): vfio/platform: fix module_put call in error flow Michael Chan (1): bnxt_en: Remove the setting of dev_port. Michael Weiser (1): arm64: Remove unimplemented syscall log message Pablo Neira Ayuso (1): netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches Pavel Skripkin (4): net: caif: added cfserl_release function net: caif: add proper error handling net: caif: fix memory leak in caif_device_notify net: caif: fix memory leak in cfusbl_device_notify Randy Dunlap (1): vfio/pci: zap_vma_ptes() needs MMU Rasmus Villemoes (1): efi: cper: fix snprintf() use in cper_dimm_err_location() Sean Christopherson (1): KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode Takashi Iwai (1): ALSA: timer: Fix master timer notification Wei Yongjun (1): ieee802154: fix error return code in ieee802154_llsec_getparams() Ye Bin (1): ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed Zhen Lei (3): vfio/pci: Fix error return code in vfio_ecap_init() HID: pidff: fix error return code in hid_pidff_init() ieee802154: fix error return code in ieee802154_add_iface()

3 years, 9 months

1
1
0 0

Linux 4.4.272

by Greg Kroah-Hartman

I'm announcing the release of the 4.4.272 kernel. All users of the 4.4 kernel series must upgrade. The updated 4.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/kernel/traps.c | 8 --- arch/x86/kvm/svm.c | 8 +-- drivers/firmware/efi/cper.c | 4 - drivers/hid/usbhid/hid-pidff.c | 1 drivers/vfio/pci/vfio_pci_config.c | 2 drivers/vfio/platform/vfio_platform_common.c | 2 drivers/xen/xen-pciback/vpci.c | 14 +++--- fs/btrfs/tree-log.c | 13 +++--- fs/ext4/extents.c | 43 +++++++++++---------- fs/ocfs2/file.c | 55 ++++++++++++++++++++++++--- include/net/caif/caif_dev.h | 2 include/net/caif/cfcnfg.h | 2 include/net/caif/cfserl.h | 1 init/main.c | 2 net/bluetooth/hci_core.c | 7 ++- net/bluetooth/hci_sock.c | 4 - net/caif/caif_dev.c | 13 ++++-- net/caif/caif_usb.c | 14 ++++++ net/caif/cfcnfg.c | 16 +++++-- net/caif/cfserl.c | 5 ++ net/ieee802154/nl-mac.c | 4 + net/ieee802154/nl-phy.c | 4 + net/netfilter/ipvs/ip_vs_ctl.c | 2 net/netfilter/nfnetlink_cthelper.c | 8 ++- net/nfc/llcp_sock.c | 2 sound/core/timer.c | 3 - 27 files changed, 164 insertions(+), 77 deletions(-) Greg Kroah-Hartman (1): Linux 4.4.272 Jan Beulich (1): xen-pciback: redo VF placement in the virtual topology Josef Bacik (1): btrfs: fixup error handling in fixup_inode_link_counts Julian Anastasov (1): ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service Junxiao Bi (1): ocfs2: fix data corruption by fallocate Krzysztof Kozlowski (1): nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect Lin Ma (2): Bluetooth: fix the erroneous flush_work() order Bluetooth: use correct lock to prevent UAF of hdev object Mark Rutland (1): pid: take a reference when initializing `cad_pid` Max Gurtovoy (1): vfio/platform: fix module_put call in error flow Michael Weiser (1): arm64: Remove unimplemented syscall log message Pablo Neira Ayuso (1): netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches Pavel Skripkin (4): net: caif: added cfserl_release function net: caif: add proper error handling net: caif: fix memory leak in caif_device_notify net: caif: fix memory leak in cfusbl_device_notify Rasmus Villemoes (1): efi: cper: fix snprintf() use in cper_dimm_err_location() Sean Christopherson (1): KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode Takashi Iwai (1): ALSA: timer: Fix master timer notification Wei Yongjun (1): ieee802154: fix error return code in ieee802154_llsec_getparams() Ye Bin (1): ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed Zhen Lei (3): vfio/pci: Fix error return code in vfio_ecap_init() HID: pidff: fix error return code in hid_pidff_init() ieee802154: fix error return code in ieee802154_add_iface()

3 years, 9 months

1
1
0 0

[PATCH 5.10 000/137] 5.10.43-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.43 release. There are 137 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 10 Jun 2021 17:59:18 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.43-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.43-rc1 David Ahern <dsahern(a)kernel.org> neighbour: allow NUD_NOARP entries to be forced GCed Roger Pau Monne <roger.pau(a)citrix.com> xen-netback: take a reference to the RX task thread Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: missing error reporting for not selected expressions Roja Rani Yarubandi <rojay(a)codeaurora.org> i2c: qcom-geni: Suspend and resume the bus during SYSTEM_SLEEP_PM ops Gao Xiang <hsiangkao(a)redhat.com> lib/lz4: explicitly support in-place decompression Vitaly Kuznetsov <vkuznets(a)redhat.com> x86/kvm: Disable all PV features on crash Vitaly Kuznetsov <vkuznets(a)redhat.com> x86/kvm: Disable kvmclock on all CPUs on shutdown Vitaly Kuznetsov <vkuznets(a)redhat.com> x86/kvm: Teardown PV features on boot CPU as well Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix debug register indexing Sean Christopherson <seanjc(a)google.com> KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode Anand Jain <anand.jain(a)oracle.com> btrfs: fix unmountable seed device after fstrim Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> drm/msm/dpu: always use mdp device to scale bandwidth Mina Almasry <almasrymina(a)google.com> mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY Filipe Manana <fdmanana(a)suse.com> btrfs: fix deadlock when cloning inline extents and low on available space Josef Bacik <josef(a)toxicpanda.com> btrfs: abort in rename_exchange if we fail to insert the second ref Josef Bacik <josef(a)toxicpanda.com> btrfs: fixup error handling in fixup_inode_link_counts Josef Bacik <josef(a)toxicpanda.com> btrfs: return errors from btrfs_del_csums in cleanup_ref_head Josef Bacik <josef(a)toxicpanda.com> btrfs: fix error handling in btrfs_del_csums Josef Bacik <josef(a)toxicpanda.com> btrfs: mark ordered extent and inode with error if we fail to finish Naveen N. Rao <naveen.n.rao(a)linux.vnet.ibm.com> powerpc/kprobes: Fix validation of prefixed instructions across page boundary Thomas Gleixner <tglx(a)linutronix.de> x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing Nirmoy Das <nirmoy.das(a)amd.com> drm/amdgpu: make sure we unpin the UVD BO Luben Tuikov <luben.tuikov(a)amd.com> drm/amdgpu: Don't query CE and UE errors Krzysztof Kozlowski <krzysztof.kozlowski(a)canonical.com> nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect Pu Wen <puwen(a)hygon.cn> x86/sev: Check SME/SEV support in CPUID first Thomas Gleixner <tglx(a)linutronix.de> x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove update_pasid() Ding Hui <dinghui(a)sangfor.com.cn> mm/page_alloc: fix counting of free pages after take off from buddy Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> mm/debug_vm_pgtable: fix alignment for pmd/pud_advanced_tests() Junxiao Bi <junxiao.bi(a)oracle.com> ocfs2: fix data corruption by fallocate Mark Rutland <mark.rutland(a)arm.com> pid: take a reference when initializing `cad_pid` Phil Elwell <phil(a)raspberrypi.com> usb: dwc2: Fix build in periphal-only mode Ritesh Harjani <riteshh(a)linux.ibm.com> ext4: fix accessing uninit percpu counter variable with fast_commit Phillip Potter <phil(a)philpotter.co.uk> ext4: fix memory leak in ext4_mb_init_backend on error path. Harshad Shirwadkar <harshadshirwadkar(a)gmail.com> ext4: fix fast commit alignment issues Ye Bin <yebin10(a)huawei.com> ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed Alexey Makhalov <amakhalov(a)vmware.com> ext4: fix memory leak in ext4_fill_super Marek Vasut <marex(a)denx.de> ARM: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators Michal Vokáč <michal.vokac(a)ysoft.com> ARM: dts: imx6dl-yapp4: Fix RGMII connection to QCA8334 switch Hui Wang <hui.wang(a)canonical.com> ALSA: hda: update the power_state during the direct-complete Carlos M <carlos.marr.pz(a)gmail.com> ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx Takashi Iwai <tiwai(a)suse.de> ALSA: timer: Fix master timer notification Bob Peterson <rpeterso(a)redhat.com> gfs2: fix scheduling while atomic bug in glocks Ahelenia Ziemiańska <nabijaczleweli(a)nabijaczleweli.xyz> HID: multitouch: require Finger field to mark Win8 reports as MT Johan Hovold <johan(a)kernel.org> HID: magicmouse: fix NULL-deref on disconnect Johnny Chuang <johnny.chuang.emc(a)gmail.com> HID: i2c-hid: Skip ELAN power-on command after reset Pavel Skripkin <paskripkin(a)gmail.com> net: caif: fix memory leak in cfusbl_device_notify Pavel Skripkin <paskripkin(a)gmail.com> net: caif: fix memory leak in caif_device_notify Pavel Skripkin <paskripkin(a)gmail.com> net: caif: add proper error handling Pavel Skripkin <paskripkin(a)gmail.com> net: caif: added cfserl_release function Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: allowedips: free empty intermediate nodes when removing single node Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: allowedips: allocate nodes in kmem_cache Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: allowedips: remove nodes in O(1) Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: allowedips: initialize list head in selftest Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: selftests: make sure rp_filter is disabled on vethc Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: selftests: remove old conntrack kconfig value Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: use synchronize_net rather than synchronize_rcu Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: peer: allocate in kmem_cache Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: do not use -O3 Lin Ma <linma(a)zju.edu.cn> Bluetooth: use correct lock to prevent UAF of hdev object Lin Ma <linma(a)zju.edu.cn> Bluetooth: fix the erroneous flush_work() order James Zhu <James.Zhu(a)amd.com> drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate James Zhu <James.Zhu(a)amd.com> drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate James Zhu <James.Zhu(a)amd.com> drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate Pavel Begunkov <asml.silence(a)gmail.com> io_uring: use better types for cflags Pavel Begunkov <asml.silence(a)gmail.com> io_uring: fix link timeout refs Jisheng Zhang <jszhang(a)kernel.org> riscv: vdso: fix and clean-up Makefile Johan Hovold <johan(a)kernel.org> serial: stm32: fix threaded interrupt handling Hoang Le <hoang.h.le(a)dektech.com.au> tipc: fix unique bearer names sanity check Hoang Le <hoang.h.le(a)dektech.com.au> tipc: add extack messages for bearer/media failure Tony Lindgren <tony(a)atomide.com> bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act Geert Uytterhoeven <geert+renesas(a)glider.be> ARM: dts: imx: emcon-avari: Fix nxp,pca8574 #gpio-cells Fabio Estevam <festevam(a)gmail.com> ARM: dts: imx7d-pico: Fix the 'tuning-step' property Fabio Estevam <festevam(a)gmail.com> ARM: dts: imx7d-meerkat96: Fix the 'tuning-step' property Michael Walle <michael(a)walle.cc> arm64: dts: freescale: sl28: var4: fix RGMII clock and voltage Lucas Stach <l.stach(a)pengutronix.de> arm64: dts: zii-ultra: fix 12V_MAIN voltage Michael Walle <michael(a)walle.cc> arm64: dts: ls1028a: fix memory node Tony Lindgren <tony(a)atomide.com> bus: ti-sysc: Fix am335x resume hang for usb otg module Jens Wiklander <jens.wiklander(a)linaro.org> optee: use export_uuid() to copy client UUID Vignesh Raghavendra <vigneshr(a)ti.com> arm64: dts: ti: j7200-main: Mark Main NAVSS as dma-coherent Magnus Karlsson <magnus.karlsson(a)intel.com> ixgbe: add correct exception tracing for XDP Magnus Karlsson <magnus.karlsson(a)intel.com> ixgbe: optimize for XDP_REDIRECT in xsk path Magnus Karlsson <magnus.karlsson(a)intel.com> ice: add correct exception tracing for XDP Magnus Karlsson <magnus.karlsson(a)intel.com> ice: optimize for XDP_REDIRECT in xsk path Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: simplify ice_run_xdp Magnus Karlsson <magnus.karlsson(a)intel.com> i40e: add correct exception tracing for XDP Magnus Karlsson <magnus.karlsson(a)intel.com> i40e: optimize for XDP_REDIRECT in xsk path Rahul Lakkireddy <rahul.lakkireddy(a)chelsio.com> cxgb4: avoid link re-train during TC-MQPRIO configuration Roja Rani Yarubandi <rojay(a)codeaurora.org> i2c: qcom-geni: Add shutdown callback for i2c Dave Ertman <david.m.ertman(a)intel.com> ice: Allow all LLDP packets from PF to Tx Paul Greenwalt <paul.greenwalt(a)intel.com> ice: report supported and advertised autoneg using PHY capabilities Haiyue Wang <haiyue.wang(a)intel.com> ice: handle the VF VSI rebuild failure Brett Creeley <brett.creeley(a)intel.com> ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared Brett Creeley <brett.creeley(a)intel.com> ice: Fix allowing VF to request more/less queues via virtchnl Coco Li <lixiaoyan(a)google.com> ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions Rahul Lakkireddy <rahul.lakkireddy(a)chelsio.com> cxgb4: fix regression with HASH tc prio value update Magnus Karlsson <magnus.karlsson(a)intel.com> ixgbevf: add correct exception tracing for XDP Magnus Karlsson <magnus.karlsson(a)intel.com> igb: add correct exception tracing for XDP Wei Yongjun <weiyongjun1(a)huawei.com> ieee802154: fix error return code in ieee802154_llsec_getparams() Zhen Lei <thunder.leizhen(a)huawei.com> ieee802154: fix error return code in ieee802154_add_iface() Daniel Borkmann <daniel(a)iogearbox.net> bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks Tobias Klauser <tklauser(a)distanz.ch> bpf: Simplify cases in bpf_base_func_proto Zhihao Cheng <chengzhihao1(a)huawei.com> drm/i915/selftests: Fix return value check in live_breadcrumbs_smoketest() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: skip expectations for confirmed conntrack Max Gurtovoy <mgurtovoy(a)nvidia.com> nvmet: fix freeing unallocated p2pmem Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: DR, Create multi-destination flow table with level less than 64 Roi Dayan <roid(a)nvidia.com> net/mlx5e: Check for needed capability for cvlan matching Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Check firmware sync reset requested is set before trying to abort it Aya Levin <ayal(a)nvidia.com> net/mlx5e: Fix incompatible casting Maxim Mikityanskiy <maximmi(a)nvidia.com> net/tls: Fix use-after-free after the TLS device goes down and up Maxim Mikityanskiy <maximmi(a)nvidia.com> net/tls: Replace TLS_RX_SYNC_RUNNING with RCU Alexander Aring <aahringo(a)redhat.com> net: sock: fix in-kernel mark setting Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: tag_8021q: fix the VLAN IDs used for encoding sub-VLANs Li Huafei <lihuafei1(a)huawei.com> perf probe: Fix NULL pointer dereference in convert_variable_location() Erik Kaneda <erik.kaneda(a)intel.com> ACPICA: Clean up context mutex during object deletion Sagi Grimberg <sagi(a)grimberg.me> nvme-rdma: fix in-casule data send for chained sgls Paolo Abeni <pabeni(a)redhat.com> mptcp: always parse mptcp options for MPC reqsk Ariel Levkovich <lariel(a)nvidia.com> net/sched: act_ct: Fix ct template allocation for zone 0 Paul Blakey <paulb(a)nvidia.com> net/sched: act_ct: Offload connections with commit action Parav Pandit <parav(a)nvidia.com> devlink: Correct VIRTUAL port to not have phys_port attributes Arnd Bergmann <arnd(a)arndb.de> HID: i2c-hid: fix format string mismatch Zhen Lei <thunder.leizhen(a)huawei.com> HID: pidff: fix error return code in hid_pidff_init() Tom Rix <trix(a)redhat.com> HID: logitech-hidpp: initialize level variable Julian Anastasov <ja(a)ssi.bg> ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service Max Gurtovoy <mgurtovoy(a)nvidia.com> vfio/platform: fix module_put call in error flow Wei Yongjun <weiyongjun1(a)huawei.com> samples: vfio-mdev: fix error handing in mdpy_fb_probe() Randy Dunlap <rdunlap(a)infradead.org> vfio/pci: zap_vma_ptes() needs MMU Zhen Lei <thunder.leizhen(a)huawei.com> vfio/pci: Fix error return code in vfio_ecap_init() Rasmus Villemoes <linux(a)rasmusvillemoes.dk> efi: cper: fix snprintf() use in cper_dimm_err_location() Dan Carpenter <dan.carpenter(a)oracle.com> efi/libstub: prevent read overflow in find_file_option() Heiner Kallweit <hkallweit1(a)gmail.com> efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared Changbin Du <changbin.du(a)intel.com> efi/fdt: fix panic when no valid fdt found Florian Westphal <fw(a)strlen.de> netfilter: conntrack: unregister ipv4 sockopts on error unwind Grant Peltier <grantpeltier93(a)gmail.com> hwmon: (pmbus/isl68137) remove READ_TEMPERATURE_3 for RAA228228 Armin Wolf <W_Armin(a)gmx.de> hwmon: (dell-smm-hwmon) Fix index values Grant Grundler <grundler(a)chromium.org> net: usb: cdc_ncm: don't spew notifications Josef Bacik <josef(a)toxicpanda.com> btrfs: tree-checker: do not error out if extent ref hash doesn't match ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imx6dl-yapp4-common.dtsi | 6 +- arch/arm/boot/dts/imx6q-dhcom-som.dtsi | 12 ++ arch/arm/boot/dts/imx6qdl-emcon-avari.dtsi | 2 +- arch/arm/boot/dts/imx7d-meerkat96.dts | 2 +- arch/arm/boot/dts/imx7d-pico.dtsi | 2 +- .../freescale/fsl-ls1028a-kontron-sl28-var4.dts | 5 +- arch/arm64/boot/dts/freescale/fsl-ls1028a.dtsi | 4 +- .../arm64/boot/dts/freescale/imx8mq-zii-ultra.dtsi | 4 +- arch/arm64/boot/dts/ti/k3-j7200-main.dtsi | 2 + arch/arm64/kvm/sys_regs.c | 42 ++--- arch/powerpc/kernel/kprobes.c | 4 +- arch/riscv/kernel/vdso/Makefile | 4 +- arch/x86/include/asm/apic.h | 1 + arch/x86/include/asm/disabled-features.h | 7 +- arch/x86/include/asm/fpu/api.h | 6 +- arch/x86/include/asm/fpu/internal.h | 7 - arch/x86/include/asm/kvm_para.h | 10 +- arch/x86/kernel/apic/apic.c | 1 + arch/x86/kernel/apic/vector.c | 20 +++ arch/x86/kernel/fpu/xstate.c | 57 ------- arch/x86/kernel/kvm.c | 92 +++++++--- arch/x86/kernel/kvmclock.c | 26 +-- arch/x86/kvm/svm/svm.c | 8 +- arch/x86/mm/mem_encrypt_identity.c | 11 +- drivers/acpi/acpica/utdelete.c | 8 + drivers/bus/ti-sysc.c | 57 ++++++- drivers/firmware/efi/cper.c | 4 +- drivers/firmware/efi/fdtparams.c | 3 + drivers/firmware/efi/libstub/file.c | 2 +- drivers/firmware/efi/memattr.c | 5 - drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 16 -- drivers/gpu/drm/amd/amdgpu/jpeg_v2_5.c | 4 +- drivers/gpu/drm/amd/amdgpu/jpeg_v3_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 1 + drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 5 +- drivers/gpu/drm/i915/selftests/i915_request.c | 4 +- drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 3 +- drivers/gpu/drm/msm/disp/dpu1/dpu_mdss.c | 51 +----- drivers/hid/hid-logitech-hidpp.c | 1 + drivers/hid/hid-magicmouse.c | 2 +- drivers/hid/hid-multitouch.c | 10 +- drivers/hid/i2c-hid/i2c-hid-core.c | 13 +- drivers/hid/usbhid/hid-pidff.c | 1 + drivers/hwmon/dell-smm-hwmon.c | 4 +- drivers/hwmon/pmbus/isl68137.c | 4 +- drivers/i2c/busses/i2c-qcom-geni.c | 21 ++- drivers/net/ethernet/chelsio/cxgb4/cxgb4.h | 2 - drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 4 +- .../net/ethernet/chelsio/cxgb4/cxgb4_tc_flower.c | 14 +- .../net/ethernet/chelsio/cxgb4/cxgb4_tc_mqprio.c | 9 +- drivers/net/ethernet/chelsio/cxgb4/sge.c | 6 + drivers/net/ethernet/intel/i40e/i40e_txrx.c | 7 +- drivers/net/ethernet/intel/i40e/i40e_xsk.c | 15 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 51 +----- drivers/net/ethernet/intel/ice/ice_hw_autogen.h | 1 + drivers/net/ethernet/intel/ice/ice_lib.c | 2 + drivers/net/ethernet/intel/ice/ice_txrx.c | 24 +-- drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 19 ++- drivers/net/ethernet/intel/ice/ice_xsk.c | 16 +- drivers/net/ethernet/intel/igb/igb_main.c | 10 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 16 +- drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 21 ++- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 3 + .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 5 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 9 + drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c | 3 + .../ethernet/mellanox/mlx5/core/steering/dr_fw.c | 3 +- drivers/net/usb/cdc_ncm.c | 12 +- drivers/net/wireguard/Makefile | 3 +- drivers/net/wireguard/allowedips.c | 189 +++++++++++---------- drivers/net/wireguard/allowedips.h | 14 +- drivers/net/wireguard/main.c | 17 +- drivers/net/wireguard/peer.c | 27 ++- drivers/net/wireguard/peer.h | 3 + drivers/net/wireguard/selftest/allowedips.c | 165 +++++++++--------- drivers/net/wireguard/socket.c | 2 +- drivers/net/xen-netback/interface.c | 6 + drivers/nvme/host/rdma.c | 5 +- drivers/nvme/target/core.c | 33 ++-- drivers/tee/optee/call.c | 6 +- drivers/tee/optee/optee_msg.h | 6 +- drivers/tty/serial/stm32-usart.c | 22 +-- drivers/usb/dwc2/core_intr.c | 4 + drivers/vfio/pci/Kconfig | 1 + drivers/vfio/pci/vfio_pci_config.c | 2 +- drivers/vfio/platform/vfio_platform_common.c | 2 +- fs/btrfs/extent-tree.c | 12 +- fs/btrfs/file-item.c | 10 +- fs/btrfs/inode.c | 19 ++- fs/btrfs/reflink.c | 38 +++-- fs/btrfs/tree-checker.c | 16 +- fs/btrfs/tree-log.c | 13 +- fs/ext4/extents.c | 43 ++--- fs/ext4/fast_commit.c | 182 ++++++++++---------- fs/ext4/fast_commit.h | 7 - fs/ext4/ialloc.c | 6 +- fs/ext4/mballoc.c | 2 +- fs/ext4/super.c | 11 +- fs/gfs2/glock.c | 2 + fs/io_uring.c | 6 +- fs/ocfs2/file.c | 55 +++++- include/linux/mlx5/mlx5_ifc.h | 2 + include/linux/platform_data/ti-sysc.h | 1 + include/linux/usb/usbnet.h | 2 + include/net/caif/caif_dev.h | 2 +- include/net/caif/cfcnfg.h | 2 +- include/net/caif/cfserl.h | 1 + include/net/tls.h | 10 +- init/main.c | 2 +- kernel/bpf/helpers.c | 19 +-- kernel/trace/bpf_trace.c | 32 ++-- lib/lz4/lz4_decompress.c | 6 +- lib/lz4/lz4defs.h | 1 + mm/debug_vm_pgtable.c | 4 +- mm/hugetlb.c | 14 +- mm/page_alloc.c | 2 + net/bluetooth/hci_core.c | 7 +- net/bluetooth/hci_sock.c | 4 +- net/caif/caif_dev.c | 13 +- net/caif/caif_usb.c | 14 +- net/caif/cfcnfg.c | 16 +- net/caif/cfserl.c | 5 + net/core/devlink.c | 4 +- net/core/neighbour.c | 1 + net/core/sock.c | 16 +- net/dsa/tag_8021q.c | 2 +- net/ieee802154/nl-mac.c | 4 +- net/ieee802154/nl-phy.c | 4 +- net/ipv6/route.c | 8 +- net/mptcp/subflow.c | 17 +- net/netfilter/ipvs/ip_vs_ctl.c | 2 +- net/netfilter/nf_conntrack_proto.c | 2 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nft_ct.c | 2 +- net/nfc/llcp_sock.c | 2 + net/sched/act_ct.c | 10 +- net/tipc/bearer.c | 94 +++++++--- net/tls/tls_device.c | 60 +++++-- net/tls/tls_device_fallback.c | 7 + net/tls/tls_main.c | 1 + samples/vfio-mdev/mdpy-fb.c | 13 +- sound/core/timer.c | 3 +- sound/pci/hda/hda_codec.c | 5 + sound/pci/hda/patch_realtek.c | 1 + tools/perf/util/dwarf-aux.c | 8 +- tools/perf/util/probe-finder.c | 3 + tools/testing/selftests/wireguard/netns.sh | 1 + .../testing/selftests/wireguard/qemu/kernel.config | 1 - 150 files changed, 1260 insertions(+), 925 deletions(-)

3 years, 9 months

8
144
0 0

[PATCH 4.19 00/57] 4.19.194-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.19.194 release. There are 57 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 11 Jun 2021 06:28:32 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.194-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.19.194-rc2 Jan Beulich <jbeulich(a)suse.com> xen-pciback: redo VF placement in the virtual topology Cheng Jian <cj.chengjian(a)huawei.com> sched/fair: Optimize select_idle_cpu Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: EC: Look for ECDT EC after calling acpi_load_tables() Erik Schmauss <erik.schmauss(a)intel.com> ACPI: probe ECDT before loading AML tables regardless of module-level code flag Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix debug register indexing Sean Christopherson <seanjc(a)google.com> KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode Anand Jain <anand.jain(a)oracle.com> btrfs: fix unmountable seed device after fstrim Song Liu <songliubraving(a)fb.com> perf/core: Fix corner case in perf_rotate_context() Ian Rogers <irogers(a)google.com> perf/cgroups: Don't rotate events for cgroups unnecessarily Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Remove the setting of dev_port. Björn Töpel <bjorn.topel(a)gmail.com> selftests/bpf: Avoid running unprivileged tests with alignment requirements Björn Töpel <bjorn.topel(a)gmail.com> selftests/bpf: add "any alignment" annotation for some tests David S. Miller <davem(a)davemloft.net> bpf: Apply F_NEEDS_EFFICIENT_UNALIGNED_ACCESS to more ACCEPT test cases. David S. Miller <davem(a)davemloft.net> bpf: Make more use of 'any' alignment in test_verifier.c David S. Miller <davem(a)davemloft.net> bpf: Adjust F_NEEDS_EFFICIENT_UNALIGNED_ACCESS handling in test_verifier.c David S. Miller <davem(a)davemloft.net> bpf: Add BPF_F_ANY_ALIGNMENT. Joe Stringer <joe(a)wand.net.nz> selftests/bpf: Generalize dummy program types Daniel Borkmann <daniel(a)iogearbox.net> bpf: test make sure to run unpriv test cases in test_verifier Daniel Borkmann <daniel(a)iogearbox.net> bpf: fix test suite to enable all unpriv program types Mina Almasry <almasrymina(a)google.com> mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY Josef Bacik <josef(a)toxicpanda.com> btrfs: fixup error handling in fixup_inode_link_counts Josef Bacik <josef(a)toxicpanda.com> btrfs: return errors from btrfs_del_csums in cleanup_ref_head Josef Bacik <josef(a)toxicpanda.com> btrfs: fix error handling in btrfs_del_csums Josef Bacik <josef(a)toxicpanda.com> btrfs: mark ordered extent and inode with error if we fail to finish Thomas Gleixner <tglx(a)linutronix.de> x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing Krzysztof Kozlowski <krzysztof.kozlowski(a)canonical.com> nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect Junxiao Bi <junxiao.bi(a)oracle.com> ocfs2: fix data corruption by fallocate Mark Rutland <mark.rutland(a)arm.com> pid: take a reference when initializing `cad_pid` Phil Elwell <phil(a)raspberrypi.com> usb: dwc2: Fix build in periphal-only mode Ye Bin <yebin10(a)huawei.com> ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed Carlos M <carlos.marr.pz(a)gmail.com> ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx Takashi Iwai <tiwai(a)suse.de> ALSA: timer: Fix master timer notification Ahelenia Ziemiańska <nabijaczleweli(a)nabijaczleweli.xyz> HID: multitouch: require Finger field to mark Win8 reports as MT Pavel Skripkin <paskripkin(a)gmail.com> net: caif: fix memory leak in cfusbl_device_notify Pavel Skripkin <paskripkin(a)gmail.com> net: caif: fix memory leak in caif_device_notify Pavel Skripkin <paskripkin(a)gmail.com> net: caif: add proper error handling Pavel Skripkin <paskripkin(a)gmail.com> net: caif: added cfserl_release function Lin Ma <linma(a)zju.edu.cn> Bluetooth: use correct lock to prevent UAF of hdev object Lin Ma <linma(a)zju.edu.cn> Bluetooth: fix the erroneous flush_work() order Hoang Le <hoang.h.le(a)dektech.com.au> tipc: fix unique bearer names sanity check Hoang Le <hoang.h.le(a)dektech.com.au> tipc: add extack messages for bearer/media failure Magnus Karlsson <magnus.karlsson(a)intel.com> ixgbevf: add correct exception tracing for XDP Wei Yongjun <weiyongjun1(a)huawei.com> ieee802154: fix error return code in ieee802154_llsec_getparams() Zhen Lei <thunder.leizhen(a)huawei.com> ieee802154: fix error return code in ieee802154_add_iface() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches Arnd Bergmann <arnd(a)arndb.de> HID: i2c-hid: fix format string mismatch Zhen Lei <thunder.leizhen(a)huawei.com> HID: pidff: fix error return code in hid_pidff_init() Julian Anastasov <ja(a)ssi.bg> ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service Max Gurtovoy <mgurtovoy(a)nvidia.com> vfio/platform: fix module_put call in error flow Wei Yongjun <weiyongjun1(a)huawei.com> samples: vfio-mdev: fix error handing in mdpy_fb_probe() Randy Dunlap <rdunlap(a)infradead.org> vfio/pci: zap_vma_ptes() needs MMU Zhen Lei <thunder.leizhen(a)huawei.com> vfio/pci: Fix error return code in vfio_ecap_init() Rasmus Villemoes <linux(a)rasmusvillemoes.dk> efi: cper: fix snprintf() use in cper_dimm_err_location() Heiner Kallweit <hkallweit1(a)gmail.com> efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared Anant Thazhemadam <anant.thazhemadam(a)gmail.com> nl80211: validate key indexes for cfg80211_registered_device Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> ALSA: usb: update old-style static const declaration Grant Grundler <grundler(a)chromium.org> net: usb: cdc_ncm: don't spew notifications ------------- Diffstat: Makefile | 4 +- arch/arm64/kvm/sys_regs.c | 42 ++-- arch/x86/include/asm/apic.h | 1 + arch/x86/kernel/apic/apic.c | 1 + arch/x86/kernel/apic/vector.c | 20 ++ arch/x86/kvm/svm.c | 8 +- drivers/acpi/bus.c | 42 ++-- drivers/firmware/efi/cper.c | 4 +- drivers/firmware/efi/memattr.c | 5 - drivers/hid/hid-multitouch.c | 10 +- drivers/hid/i2c-hid/i2c-hid-core.c | 4 +- drivers/hid/usbhid/hid-pidff.c | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 1 - drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 3 + drivers/net/usb/cdc_ncm.c | 12 +- drivers/usb/dwc2/core_intr.c | 4 + drivers/vfio/pci/Kconfig | 1 + drivers/vfio/pci/vfio_pci_config.c | 2 +- drivers/vfio/platform/vfio_platform_common.c | 2 +- drivers/xen/xen-pciback/vpci.c | 14 +- fs/btrfs/extent-tree.c | 12 +- fs/btrfs/file-item.c | 10 +- fs/btrfs/inode.c | 12 ++ fs/btrfs/tree-log.c | 13 +- fs/ext4/extents.c | 43 +++-- fs/ocfs2/file.c | 55 +++++- include/linux/perf_event.h | 5 + include/linux/usb/usbnet.h | 2 + include/net/caif/caif_dev.h | 2 +- include/net/caif/cfcnfg.h | 2 +- include/net/caif/cfserl.h | 1 + include/uapi/linux/bpf.h | 14 ++ init/main.c | 2 +- kernel/bpf/syscall.c | 7 +- kernel/bpf/verifier.c | 3 + kernel/events/core.c | 62 +++--- kernel/sched/fair.c | 7 +- mm/hugetlb.c | 14 +- net/bluetooth/hci_core.c | 7 +- net/bluetooth/hci_sock.c | 4 +- net/caif/caif_dev.c | 13 +- net/caif/caif_usb.c | 14 +- net/caif/cfcnfg.c | 16 +- net/caif/cfserl.c | 5 + net/ieee802154/nl-mac.c | 4 +- net/ieee802154/nl-phy.c | 4 +- net/netfilter/ipvs/ip_vs_ctl.c | 2 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/nfc/llcp_sock.c | 2 + net/tipc/bearer.c | 94 ++++++--- net/wireless/core.h | 2 + net/wireless/nl80211.c | 7 +- net/wireless/util.c | 39 +++- samples/vfio-mdev/mdpy-fb.c | 13 +- sound/core/timer.c | 3 +- sound/pci/hda/patch_realtek.c | 1 + sound/usb/mixer_quirks.c | 2 +- tools/include/uapi/linux/bpf.h | 14 ++ tools/lib/bpf/bpf.c | 8 +- tools/lib/bpf/bpf.h | 2 +- tools/testing/selftests/bpf/test_align.c | 4 +- tools/testing/selftests/bpf/test_verifier.c | 224 ++++++++++++++++------ 62 files changed, 664 insertions(+), 275 deletions(-)

3 years, 9 months

6
5
0 0

[for-linus][PATCH 5/5] recordmcount: Correct st_shndx handling

by Steven Rostedt

From: Peter Zijlstra <peterz(a)infradead.org> One should only use st_shndx when >SHN_UNDEF and <SHN_LORESERVE. When SHN_XINDEX, then use .symtab_shndx. Otherwise use 0. This handles the case: st_shndx >= SHN_LORESERVE && st_shndx != SHN_XINDEX. Link: https://lkml.kernel.org/r/YL9HxEc/l0yrl5o8@hirez.programming.kicks-ass.net Cc: stable(a)vger.kernel.org Fixes: 4ef57b21d6fb4 ("recordmcount: support >64k sections") Reported-by: Mark-PK Tsai <mark-pk.tsai(a)mediatek.com> Tested-by: Mark-PK Tsai <mark-pk.tsai(a)mediatek.com> Acked-by: Ard Biesheuvel <ardb(a)kernel.org> Signed-off-by: Peter Zijlstra (Intel) <peterz(a)infradead.org> Signed-off-by: Steven Rostedt (VMware) <rostedt(a)goodmis.org> --- scripts/recordmcount.h | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/scripts/recordmcount.h b/scripts/recordmcount.h index f9b19524da11..7e8a11ed5e2f 100644 --- a/scripts/recordmcount.h +++ b/scripts/recordmcount.h @@ -194,13 +194,18 @@ static unsigned int get_symindex(Elf_Sym const *sym, Elf32_Word const *symtab, unsigned long offset; int index; - if (sym->st_shndx != SHN_XINDEX) + if (sym->st_shndx > SHN_UNDEF && + sym->st_shndx < SHN_LORESERVE) return w2(sym->st_shndx); - offset = (unsigned long)sym - (unsigned long)symtab; - index = offset / sizeof(*sym); + if (sym->st_shndx == SHN_XINDEX) { + offset = (unsigned long)sym - (unsigned long)symtab; + index = offset / sizeof(*sym); - return w(symtab_shndx[index]); + return w(symtab_shndx[index]); + } + + return 0; } static unsigned int get_shnum(Elf_Ehdr const *ehdr, Elf_Shdr const *shdr0) -- 2.30.2

3 years, 9 months

2
1
0 0

[PATCH] usb: gadget: eem: fix command packet transfer issue

by linyyuan＠codeaurora.org

From: Linyu Yuan <linyyuan(a)codeaurora.com> there is following warning, [<ffffff8008905a94>] dwc3_gadget_ep_queue+0x1b4/0x1c8 [<ffffff800895ec9c>] usb_ep_queue+0x3c/0x120 [<ffffff80089677a0>] eem_unwrap+0x180/0x330 [<ffffff80089634f8>] rx_complete+0x70/0x230 [<ffffff800895edbc>] usb_gadget_giveback_request+0x3c/0xe8 [<ffffff8008901e7c>] dwc3_gadget_giveback+0xb4/0x190 [<ffffff8008905254>] dwc3_endpoint_transfer_complete+0x32c/0x410 [<ffffff80089060fc>] dwc3_bh_work+0x654/0x12e8 [<ffffff80080c63fc>] process_one_work+0x1d4/0x4a8 [<ffffff80080c6720>] worker_thread+0x50/0x4a8 [<ffffff80080cc8e8>] kthread+0xe8/0x100 [<ffffff8008083980>] ret_from_fork+0x10/0x50 request ffffffc0716bf200 belongs to 'ep0out' when gadget receive a eem command packet from host, it need to response, but queue usb request to wrong endpoint. fix it by queue usb request to eem IN endpoint and allow host read it. Cc: stable <stable(a)vger.kernel.org> Signed-off-by: Linyu Yuan <linyyuan(a)codeaurora.org> --- drivers/usb/gadget/function/f_eem.c | 44 ++++++++++++++++++++++++++++++++----- 1 file changed, 39 insertions(+), 5 deletions(-) diff --git a/drivers/usb/gadget/function/f_eem.c b/drivers/usb/gadget/function/f_eem.c index 2cd9942..2c2ca1e 100644 --- a/drivers/usb/gadget/function/f_eem.c +++ b/drivers/usb/gadget/function/f_eem.c @@ -30,6 +30,11 @@ struct f_eem { u8 ctrl_id; }; +struct in_context { + struct sk_buff *skb; + struct usb_ep *ep; +}; + static inline struct f_eem *func_to_eem(struct usb_function *f) { return container_of(f, struct f_eem, port.func); @@ -320,9 +325,12 @@ static int eem_bind(struct usb_configuration *c, struct usb_function *f) static void eem_cmd_complete(struct usb_ep *ep, struct usb_request *req) { - struct sk_buff *skb = (struct sk_buff *)req->context; + struct in_context *ctx = req->context; - dev_kfree_skb_any(skb); + kfree(req->buf); + dev_kfree_skb_any(ctx->skb); + usb_ep_free_request(ctx->ep, req); + kfree(ctx); } /* @@ -410,7 +418,9 @@ static int eem_unwrap(struct gether *port, * b15: bmType (0 == data, 1 == command) */ if (header & BIT(15)) { - struct usb_request *req = cdev->req; + struct usb_request *req; + struct in_context *ctx; + struct usb_ep *ep; u16 bmEEMCmd; /* EEM command packet format: @@ -439,13 +449,37 @@ static int eem_unwrap(struct gether *port, skb_trim(skb2, len); put_unaligned_le16(BIT(15) | BIT(11) | len, skb_push(skb2, 2)); + + ep = port->in_ep; + req = usb_ep_alloc_request(ep, GFP_ATOMIC); + if (!req) { + dev_kfree_skb_any(skb2); + break; + } + + ctx = kmalloc(sizeof(*ctx), GFP_KERNEL); + if (!ctx) + goto nomem; + ctx->skb = skb2; + ctx->ep = ep; + + req->buf = kmalloc(skb2->len, GFP_KERNEL); + if (!req->buf) + goto nomem; + skb_copy_bits(skb2, 0, req->buf, skb2->len); req->length = skb2->len; req->complete = eem_cmd_complete; req->zero = 1; - req->context = skb2; - if (usb_ep_queue(port->in_ep, req, GFP_ATOMIC)) + req->context = ctx; + if (usb_ep_queue(ep, req, GFP_ATOMIC)) { DBG(cdev, "echo response queue fail\n"); +nomem: + kfree(req->buf); + usb_ep_free_request(ep, req); + dev_kfree_skb_any(skb2); + kfree(ctx); + } break; case 1: /* echo response */ -- 2.7.4

3 years, 9 months

2
2
0 0

[tip: x86/urgent] x86/fpu: Reset state for all signal restore failures

by tip-bot2 for Thomas Gleixner

The following commit has been merged into the x86/urgent branch of tip: Commit-ID: efa165504943f2128d50f63de0c02faf6dcceb0d Gitweb: https://git.kernel.org/tip/efa165504943f2128d50f63de0c02faf6dcceb0d Author: Thomas Gleixner <tglx(a)linutronix.de> AuthorDate: Wed, 09 Jun 2021 21:18:00 +02:00 Committer: Borislav Petkov <bp(a)suse.de> CommitterDate: Thu, 10 Jun 2021 08:04:24 +02:00 x86/fpu: Reset state for all signal restore failures If access_ok() or fpregs_soft_set() fails in __fpu__restore_sig() then the function just returns but does not clear the FPU state as it does for all other fatal failures. Clear the FPU state for these failures as well. Fixes: 72a671ced66d ("x86, fpu: Unify signal handling code paths for x86 and x86_64 kernels") Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Signed-off-by: Borislav Petkov <bp(a)suse.de> Cc: stable(a)vger.kernel.org Link: https://lkml.kernel.org/r/87mtryyhhz.ffs@nanos.tec.linutronix.de --- arch/x86/kernel/fpu/signal.c | 26 +++++++++++++++----------- 1 file changed, 15 insertions(+), 11 deletions(-) diff --git a/arch/x86/kernel/fpu/signal.c b/arch/x86/kernel/fpu/signal.c index 4ab9aeb..ec3ae30 100644 --- a/arch/x86/kernel/fpu/signal.c +++ b/arch/x86/kernel/fpu/signal.c @@ -307,13 +307,17 @@ static int __fpu__restore_sig(void __user *buf, void __user *buf_fx, int size) return 0; } - if (!access_ok(buf, size)) - return -EACCES; + if (!access_ok(buf, size)) { + ret = -EACCES; + goto out; + } - if (!static_cpu_has(X86_FEATURE_FPU)) - return fpregs_soft_set(current, NULL, - 0, sizeof(struct user_i387_ia32_struct), - NULL, buf) != 0; + if (!static_cpu_has(X86_FEATURE_FPU)) { + ret = fpregs_soft_set(current, NULL, 0, + sizeof(struct user_i387_ia32_struct), + NULL, buf); + goto out; + } if (use_xsave()) { struct _fpx_sw_bytes fx_sw_user; @@ -396,7 +400,7 @@ static int __fpu__restore_sig(void __user *buf, void __user *buf_fx, int size) */ ret = __copy_from_user(&env, buf, sizeof(env)); if (ret) - goto err_out; + goto out; envp = &env; } @@ -426,7 +430,7 @@ static int __fpu__restore_sig(void __user *buf, void __user *buf_fx, int size) ret = copy_user_to_xstate(&fpu->state.xsave, buf_fx); if (ret) - goto err_out; + goto out; sanitize_restored_user_xstate(&fpu->state, envp, user_xfeatures, fx_only); @@ -446,7 +450,7 @@ static int __fpu__restore_sig(void __user *buf, void __user *buf_fx, int size) ret = __copy_from_user(&fpu->state.fxsave, buf_fx, state_size); if (ret) { ret = -EFAULT; - goto err_out; + goto out; } sanitize_restored_user_xstate(&fpu->state, envp, user_xfeatures, @@ -464,7 +468,7 @@ static int __fpu__restore_sig(void __user *buf, void __user *buf_fx, int size) } else { ret = __copy_from_user(&fpu->state.fsave, buf_fx, state_size); if (ret) - goto err_out; + goto out; fpregs_lock(); ret = copy_kernel_to_fregs_err(&fpu->state.fsave); @@ -475,7 +479,7 @@ static int __fpu__restore_sig(void __user *buf, void __user *buf_fx, int size) fpregs_deactivate(fpu); fpregs_unlock(); -err_out: +out: if (ret) fpu__clear_user_states(fpu); return ret;

3 years, 9 months

1
0
0 0

[for-linus][PATCH 4/5] tracing: Correct the length check which causes memory corruption

by Steven Rostedt

From: Liangyan <liangyan.peng(a)linux.alibaba.com> We've suffered from severe kernel crashes due to memory corruption on our production environment, like, Call Trace: [1640542.554277] general protection fault: 0000 [#1] SMP PTI [1640542.554856] CPU: 17 PID: 26996 Comm: python Kdump: loaded Tainted:G [1640542.556629] RIP: 0010:kmem_cache_alloc+0x90/0x190 [1640542.559074] RSP: 0018:ffffb16faa597df8 EFLAGS: 00010286 [1640542.559587] RAX: 0000000000000000 RBX: 0000000000400200 RCX: 0000000006e931bf [1640542.560323] RDX: 0000000006e931be RSI: 0000000000400200 RDI: ffff9a45ff004300 [1640542.560996] RBP: 0000000000400200 R08: 0000000000023420 R09: 0000000000000000 [1640542.561670] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9a20608d [1640542.562366] R13: ffff9a45ff004300 R14: ffff9a45ff004300 R15: 696c662f65636976 [1640542.563128] FS: 00007f45d7c6f740(0000) GS:ffff9a45ff840000(0000) knlGS:0000000000000000 [1640542.563937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [1640542.564557] CR2: 00007f45d71311a0 CR3: 000000189d63e004 CR4: 00000000003606e0 [1640542.565279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [1640542.566069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [1640542.566742] Call Trace: [1640542.567009] anon_vma_clone+0x5d/0x170 [1640542.567417] __split_vma+0x91/0x1a0 [1640542.567777] do_munmap+0x2c6/0x320 [1640542.568128] vm_munmap+0x54/0x70 [1640542.569990] __x64_sys_munmap+0x22/0x30 [1640542.572005] do_syscall_64+0x5b/0x1b0 [1640542.573724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [1640542.575642] RIP: 0033:0x7f45d6e61e27 James Wang has reproduced it stably on the latest 4.19 LTS. After some debugging, we finally proved that it's due to ftrace buffer out-of-bound access using a debug tool as follows: [ 86.775200] BUG: Out-of-bounds write at addr 0xffff88aefe8b7000 [ 86.780806] no_context+0xdf/0x3c0 [ 86.784327] __do_page_fault+0x252/0x470 [ 86.788367] do_page_fault+0x32/0x140 [ 86.792145] page_fault+0x1e/0x30 [ 86.795576] strncpy_from_unsafe+0x66/0xb0 [ 86.799789] fetch_memory_string+0x25/0x40 [ 86.804002] fetch_deref_string+0x51/0x60 [ 86.808134] kprobe_trace_func+0x32d/0x3a0 [ 86.812347] kprobe_dispatcher+0x45/0x50 [ 86.816385] kprobe_ftrace_handler+0x90/0xf0 [ 86.820779] ftrace_ops_assist_func+0xa1/0x140 [ 86.825340] 0xffffffffc00750bf [ 86.828603] do_sys_open+0x5/0x1f0 [ 86.832124] do_syscall_64+0x5b/0x1b0 [ 86.835900] entry_SYSCALL_64_after_hwframe+0x44/0xa9 commit b220c049d519 ("tracing: Check length before giving out the filter buffer") adds length check to protect trace data overflow introduced in 0fc1b09ff1ff, seems that this fix can't prevent overflow entirely, the length check should also take the sizeof entry->array[0] into account, since this array[0] is filled the length of trace data and occupy addtional space and risk overflow. Link: https://lkml.kernel.org/r/20210607125734.1770447-1-liangyan.peng@linux.alib… Cc: stable(a)vger.kernel.org Cc: Ingo Molnar <mingo(a)redhat.com> Cc: Xunlei Pang <xlpang(a)linux.alibaba.com> Cc: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: b220c049d519 ("tracing: Check length before giving out the filter buffer") Reviewed-by: Xunlei Pang <xlpang(a)linux.alibaba.com> Reviewed-by: yinbinbin <yinbinbin(a)alibabacloud.com> Reviewed-by: Wetp Zhang <wetp.zy(a)linux.alibaba.com> Tested-by: James Wang <jnwang(a)linux.alibaba.com> Signed-off-by: Liangyan <liangyan.peng(a)linux.alibaba.com> Signed-off-by: Steven Rostedt (VMware) <rostedt(a)goodmis.org> --- kernel/trace/trace.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/trace/trace.c b/kernel/trace/trace.c index a21ef9cd2aae..9299057feb56 100644 --- a/kernel/trace/trace.c +++ b/kernel/trace/trace.c @@ -2736,7 +2736,7 @@ trace_event_buffer_lock_reserve(struct trace_buffer **current_rb, (entry = this_cpu_read(trace_buffered_event))) { /* Try to use the per cpu buffer first */ val = this_cpu_inc_return(trace_buffered_event_cnt); - if ((len < (PAGE_SIZE - sizeof(*entry))) && val == 1) { + if ((len < (PAGE_SIZE - sizeof(*entry) - sizeof(entry->array[0]))) && val == 1) { trace_event_setup(entry, type, trace_ctx); entry->array[0] = len; return entry; -- 2.30.2

3 years, 9 months

1
0
0 0

[for-linus][PATCH 3/5] ftrace: Do not blindly read the ip address in ftrace_bug()

by Steven Rostedt

From: "Steven Rostedt (VMware)" <rostedt(a)goodmis.org> It was reported that a bug on arm64 caused a bad ip address to be used for updating into a nop in ftrace_init(), but the error path (rightfully) returned -EINVAL and not -EFAULT, as the bug caused more than one error to occur. But because -EINVAL was returned, the ftrace_bug() tried to report what was at the location of the ip address, and read it directly. This caused the machine to panic, as the ip was not pointing to a valid memory address. Instead, read the ip address with copy_from_kernel_nofault() to safely access the memory, and if it faults, report that the address faulted, otherwise report what was in that location. Link: https://lore.kernel.org/lkml/20210607032329.28671-1-mark-pk.tsai@mediatek.c… Cc: stable(a)vger.kernel.org Fixes: 05736a427f7e1 ("ftrace: warn on failure to disable mcount callers") Reported-by: Mark-PK Tsai <mark-pk.tsai(a)mediatek.com> Tested-by: Mark-PK Tsai <mark-pk.tsai(a)mediatek.com> Signed-off-by: Steven Rostedt (VMware) <rostedt(a)goodmis.org> --- kernel/trace/ftrace.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index 2e8a3fde7104..72ef4dccbcc4 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -1967,12 +1967,18 @@ static int ftrace_hash_ipmodify_update(struct ftrace_ops *ops, static void print_ip_ins(const char *fmt, const unsigned char *p) { + char ins[MCOUNT_INSN_SIZE]; int i; + if (copy_from_kernel_nofault(ins, p, MCOUNT_INSN_SIZE)) { + printk(KERN_CONT "%s[FAULT] %px\n", fmt, p); + return; + } + printk(KERN_CONT "%s", fmt); for (i = 0; i < MCOUNT_INSN_SIZE; i++) - printk(KERN_CONT "%s%02x", i ? ":" : "", p[i]); + printk(KERN_CONT "%s%02x", i ? ":" : "", ins[i]); } enum ftrace_bug_type ftrace_bug_type; -- 2.30.2

3 years, 9 months

1
0
0 0

[for-linus][PATCH 2/5] tools/bootconfig: Fix a build error accroding to undefined fallthrough

by Steven Rostedt

From: Masami Hiramatsu <mhiramat(a)kernel.org> Since the "fallthrough" is defined only in the kernel, building lib/bootconfig.c as a part of user-space tools causes a build error. Add a dummy fallthrough to avoid the build error. Link: https://lkml.kernel.org/r/162087519356.442660.11385099982318160180.stgit@de… Cc: Ingo Molnar <mingo(a)kernel.org> Cc: stable(a)vger.kernel.org Fixes: 4c1ca831adb1 ("Revert "lib: Revert use of fallthrough pseudo-keyword in lib/"") Signed-off-by: Masami Hiramatsu <mhiramat(a)kernel.org> Signed-off-by: Steven Rostedt (VMware) <rostedt(a)goodmis.org> --- tools/bootconfig/include/linux/bootconfig.h | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tools/bootconfig/include/linux/bootconfig.h b/tools/bootconfig/include/linux/bootconfig.h index 078cbd2ba651..de7f30f99af3 100644 --- a/tools/bootconfig/include/linux/bootconfig.h +++ b/tools/bootconfig/include/linux/bootconfig.h @@ -4,4 +4,8 @@ #include "../../../../include/linux/bootconfig.h" +#ifndef fallthrough +# define fallthrough +#endif + #endif -- 2.30.2

3 years, 9 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror June 2021