October 2023 - Linux-stable-mirror

by Greg Kroah-Hartman

I'm announcing the release of the 5.4.259 kernel. All users of the 5.4 kernel series must upgrade. The updated 5.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/sysctl/net.rst | 18 +- Makefile | 2 arch/arm/boot/dts/omap4-droid4-xt894.dts | 1 arch/powerpc/include/asm/nohash/32/pte-8xx.h | 7 arch/powerpc/include/asm/nohash/64/pgtable.h | 2 arch/powerpc/include/asm/nohash/pgtable.h | 2 arch/s390/pci/pci_dma.c | 15 + arch/x86/include/asm/msr-index.h | 4 arch/x86/kernel/cpu/amd.c | 8 arch/x86/kvm/lapic.c | 8 drivers/acpi/irq.c | 7 drivers/acpi/resource.c | 121 +++++++++++++-- drivers/ata/libata-eh.c | 2 drivers/base/regmap/regmap.c | 2 drivers/bluetooth/hci_vhci.c | 3 drivers/dma/mediatek/mtk-uart-apdma.c | 3 drivers/dma/stm32-mdma.c | 4 drivers/gpio/gpio-timberdale.c | 5 drivers/gpio/gpio-vf610.c | 4 drivers/gpu/drm/drm_panel_orientation_quirks.c | 16 + drivers/gpu/drm/etnaviv/etnaviv_gem_prime.c | 2 drivers/gpu/drm/msm/dsi/dsi_host.c | 12 + drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 drivers/hid/hid-holtek-kbd.c | 4 drivers/hid/hid-logitech-hidpp.c | 3 drivers/hid/hid-multitouch.c | 4 drivers/i2c/i2c-mux.c | 2 drivers/iio/pressure/bmp280-core.c | 2 drivers/iio/pressure/dps310.c | 8 drivers/iio/pressure/ms5611_core.c | 2 drivers/infiniband/hw/cxgb4/cm.c | 3 drivers/input/joystick/xpad.c | 2 drivers/input/misc/powermate.c | 1 drivers/input/mouse/elantech.c | 1 drivers/input/mouse/synaptics.c | 1 drivers/mcb/mcb-core.c | 10 - drivers/mcb/mcb-parse.c | 2 drivers/mmc/core/mmc.c | 2 drivers/mmc/core/sdio.c | 8 drivers/mtd/maps/physmap-core.c | 11 + drivers/mtd/nand/raw/qcom_nandc.c | 2 drivers/mtd/nand/spi/micron.c | 2 drivers/net/ethernet/intel/i40e/i40e_common.c | 4 drivers/net/ethernet/intel/ice/ice_lib.c | 3 drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 drivers/net/ethernet/marvell/sky2.h | 2 drivers/net/ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 4 drivers/net/ethernet/qlogic/qed/qed_ll2.c | 7 drivers/net/ethernet/renesas/ravb_main.c | 6 drivers/net/ieee802154/ca8210.c | 17 -- drivers/net/tun.c | 7 drivers/net/usb/dm9601.c | 7 drivers/net/usb/smsc95xx.c | 2 drivers/net/xen-netback/interface.c | 3 drivers/phy/motorola/phy-mapphone-mdm6600.c | 38 ++-- drivers/pwm/pwm-hibvt.c | 1 drivers/regulator/core.c | 6 drivers/usb/core/hub.c | 28 ++- drivers/usb/core/hub.h | 2 drivers/usb/dwc3/core.c | 39 ++++ drivers/usb/gadget/function/f_ncm.c | 26 ++- drivers/usb/gadget/udc/udc-xilinx.c | 20 +- drivers/usb/host/xhci-ring.c | 4 drivers/usb/musb/musb_debugfs.c | 2 drivers/usb/musb/musb_host.c | 9 - drivers/usb/serial/option.c | 7 fs/btrfs/extent-tree.c | 6 fs/btrfs/ioctl.c | 4 fs/btrfs/tree-log.c | 2 fs/ceph/inode.c | 4 fs/overlayfs/copy_up.c | 2 fs/quota/dquot.c | 66 ++++---- include/linux/ioport.h | 7 include/linux/mcb.h | 1 include/linux/netdevice.h | 2 include/linux/perf_event.h | 1 include/linux/quota.h | 4 include/linux/quotaops.h | 2 include/net/bluetooth/hci_core.h | 2 include/net/bluetooth/hci_mon.h | 2 include/net/netns/xfrm.h | 1 include/net/tcp.h | 3 include/trace/events/neigh.h | 4 kernel/cgroup/cgroup-v1.c | 5 kernel/events/core.c | 39 ++++ kernel/trace/trace_events.c | 1 kernel/workqueue.c | 8 lib/test_meminit.c | 2 net/bluetooth/hci_conn.c | 72 +++++--- net/bluetooth/hci_core.c | 8 net/bluetooth/hci_event.c | 33 +++- net/bluetooth/hci_sock.c | 3 net/ceph/messenger.c | 4 net/core/pktgen.c | 14 - net/ipv4/esp4.c | 4 net/ipv4/fib_semantics.c | 14 + net/ipv4/tcp_output.c | 25 ++- net/ipv4/tcp_recovery.c | 2 net/ipv6/esp6.c | 4 net/ipv6/xfrm6_policy.c | 4 net/mac80211/tx.c | 3 net/netfilter/ipvs/ip_vs_sync.c | 4 net/netfilter/nft_payload.c | 2 net/netfilter/nft_set_rbtree.c | 2 net/nfc/llcp_core.c | 30 +-- net/nfc/nci/core.c | 5 net/nfc/nci/spi.c | 2 net/rds/tcp_connect.c | 2 net/rds/tcp_listen.c | 2 net/rfkill/rfkill-gpio.c | 4 net/sched/sch_hfsc.c | 18 +- net/socket.c | 6 net/wireless/nl80211.c | 2 net/xfrm/xfrm_interface_core.c | 22 +- net/xfrm/xfrm_policy.c | 6 sound/soc/pxa/pxa-ssp.c | 2 116 files changed, 725 insertions(+), 311 deletions(-) Abhinav Kumar (1): drm/msm/dsi: skip the wait for video mode done if not applicable Alexander Zangerl (1): iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Amelie Delaunay (1): dmaengine: stm32-mdma: abort resume if no ongoing transfer Andy Shevchenko (1): Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" Arkadiusz Bokowy (1): Bluetooth: vhci: Fix race when opening vhci device Arnd Bergmann (1): Bluetooth: avoid memcmp() out of bounds warning Artem Chernyshev (1): RDMA/cxgb4: Check skb value for failure to allocate Avri Altman (1): mmc: core: Capture correct oemid-bits for eMMC cards Bagas Sanjaya (1): Documentation: sysctl: align cells in second content column Benjamin Berg (1): wifi: cfg80211: avoid leaking stack data into trace Benoît Monin (1): USB: serial: option: add entry for Sierra EM9191 with new firmware Bibek Kumar Patro (1): mtd: rawnand: qcom: Unmap the right resource upon probe failure Borislav Petkov (AMD) (1): x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Chengfeng Ye (1): gpio: timberdale: Fix potential deadlock on &tgpio->lock Christophe Leroy (2): powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Clément Léger (1): tracing: relax trace_event_eval_update() execution with cond_resched() Damien Le Moal (1): ata: libata-eh: Fix compilation warning in ata_eh_link_report() Dan Carpenter (4): mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ixgbe: fix crash with empty VF macvlan list net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ASoC: pxa: fix a memory leak in probe() Dinghao Liu (1): ieee802154: ca8210: Fix a potential UAF in ca8210_probe Dmitry Torokhov (1): pinctrl: avoid unsafe code pattern in find_pinctrl() Duoming Zhou (1): dmaengine: mediatek: Fix deadlock caused by synchronize_irq() Edward AD (1): Bluetooth: hci_sock: fix slab oob read in create_monitor_event Eric Dumazet (6): net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() xfrm: fix a data-race in xfrm_gen_index() xfrm: interface: use DEV_STATS_INC() tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tun: prevent negative ifindex ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr Fabio Porcedda (1): USB: serial: option: add Telit LE910C4-WWX 0x1035 composition Filipe Manana (1): btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 Florian Westphal (1): netfilter: nft_payload: fix wrong mac header matching Gavrilov Ilia (1): net: pktgen: Fix interface flags printing Geert Uytterhoeven (2): neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section mtd: physmap-core: Restore map_rom fallback Greg Kroah-Hartman (2): lib/test_meminit: fix off-by-one error in test_pages() Linux 5.4.259 Haibo Chen (2): mmc: core: sdio: hold retuning if sdio in 1-bit mode gpio: vf610: set value before the direction to avoid a glitch Hans de Goede (3): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA Heiner Kallweit (1): i2c: mux: Avoid potential false error message in i2c_mux_add_adapter Hui Wang (1): ACPI: resources: Add DMI-based legacy IRQ override quirk Jan Kara (1): quota: Fix slow quotaoff Javier Carrasco (2): net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Input: powermate - fix use-after-free in powermate_config_complete Jeff Layton (1): overlayfs: set ctime when setting mtime and atime Jeffery Miller (1): Input: psmouse - fix fast_reconnect function for PS/2 mode Jeremy Cline (1): nfc: nci: assert requested protocol is valid Jesse Brandeburg (1): ice: fix over-shifted variable Jim Mattson (1): KVM: x86: Mask LVTPC when handling a PMI Johan Hovold (1): regmap: fix NULL deref on lookup John Garry (2): resource: Add irqresource_disabled() ACPI: Drop acpi_dev_irqresource_disabled() Jordan Rife (2): net: prevent address rewrite in kernel_bind() libceph: use kernel_connect() Jorge Sanjuan Garcia (1): mcb: remove is_added flag from mcb_device struct Josef Bacik (2): btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c Josua Mayer (1): net: rfkill: gpio: prevent value glitch during probe Kai Uwe Broulik (1): drm: panel-orientation-quirks: Add quirk for One Mix 2S Kees Cook (2): sky2: Make sure there is at least one frag_addr available Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Kellen Renshaw (1): ACPI: resource: Add ASUS model S5402ZA to quirks Konstantin Meskhidze (1): drm/vmwgfx: fix typo of sizeof argument Krishna Kurapati (1): usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Krzysztof Kozlowski (1): nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Lakshmi Yadlapati (1): iio: pressure: dps310: Adjust Timeout Settings Lee, Chun-Yi (2): Bluetooth: hci_event: Ignore NULL link key Bluetooth: Reject connection with the device which has same BD_ADDR Luiz Augusto von Dentz (3): Bluetooth: hci_event: Fix coding style Bluetooth: hci_core: Fix build warnings Bluetooth: hci_event: Fix using memcmp when comparing keys Ma Ke (3): net: ipv4: fix return value check in esp_remove_trailer net: ipv6: fix return value check in esp_remove_trailer HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event Manish Chopra (1): qed: fix LL2 RX buffer allocation Martin Fuzzey (1): drm: etvnaviv: fix bad backport leading to warning Martin Kurbanov (1): mtd: spinand: micron: correct bitmask for ecc status Matthias Berndt (1): Input: xpad - add PXN V900 support Michal Koutný (1): cgroup: Remove duplicates in cgroup v1 tasks file Michal Schmidt (1): i40e: prevent crash on probe if hw registers have invalid values Michał Mirosław (1): regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" Neal Cardwell (1): tcp: fix excessive TLP and RACK timeouts from HZ rounding Nicolas Dichtel (1): dev_forward_skb: do not scrub skb mark within the same name space Niklas Schnelle (1): s390/pci: fix iommu bitmap allocation Pablo Neira Ayuso (1): netfilter: nft_set_rbtree: .deactivate fails if element has expired Paul Menzel (1): ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA Pedro Tammela (1): net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve Peter Zijlstra (1): perf: Disallow mis-matched inherited group reads Phil Elwell (1): iio: pressure: bmp280: Fix NULL pointer exception Piyush Mehta (1): usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Puliang Lu (1): USB: serial: option: add Fibocom to DELL custom modem FM101R-GL Rahul Rameshbabu (1): HID: multitouch: Add required quirk for Synaptics 0xcd7e device Ricardo Cañuelo (1): usb: hub: Guard against accesses to uninitialized BOS descriptors Roger Pau Monne (1): xen-netback: use default TX queue size for vifs Sunil V L (1): ACPI: irq: Fix incorrect return value in acpi_register_gsi() Tamim Khan (3): ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA Thinh Nguyen (1): usb: dwc3: Soft reset phy on probe for host Tony Lindgren (4): ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone phy: mapphone-mdm6600: Fix runtime disable on probe phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins Uwe Kleine-König (1): pwm: hibvt: Explicitly set .polarity in .get_state() Waiman Long (1): workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Wen Gong (1): wifi: mac80211: allow transmitting EAPOL frames with tainted key Wesley Cheng (1): usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer Xingxing Luo (2): usb: musb: Get the musb_qh poniter after musb_giveback usb: musb: Modify the "HWVers" register address Xiubo Li (1): ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Ying Hsu (1): Bluetooth: Avoid redundant authentication Yoshihiro Shimoda (2): ravb: Fix up dma_free_coherent() call in ravb_remove() ravb: Fix use-after-free issue in ravb_tx_timeout_work() Zhang Changzhong (1): xfrm6: fix inet6_dev refcount underflow problem Ziyang Xuan (1): Bluetooth: Fix a refcnt underflow problem for hci_conn

2 years

1
1
0 0

[PATCH 1/2] wifi: ath12k: fix dfs-radar and temperature event locking

by Johan Hovold

The ath12k active pdevs are protected by RCU but the DFS-radar and temperature event handling code calling ath12k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as RCU read-side critical sections to avoid any potential use-after-free issues. Note that the temperature event handler looks like a place holder currently but would still trigger an RCU lockdep splat. Fixes: d889913205cf ("wifi: ath12k: driver for Qualcomm Wi-Fi 7 devices") Cc: stable(a)vger.kernel.org # v6.2 Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> --- drivers/net/wireless/ath/ath12k/wmi.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/drivers/net/wireless/ath/ath12k/wmi.c b/drivers/net/wireless/ath/ath12k/wmi.c index ef0f3cf35cfd..1a1f57c7ac7e 100644 --- a/drivers/net/wireless/ath/ath12k/wmi.c +++ b/drivers/net/wireless/ath/ath12k/wmi.c @@ -6476,6 +6476,7 @@ ath12k_wmi_pdev_dfs_radar_detected_event(struct ath12k_base *ab, struct sk_buff ev->detector_id, ev->segment_id, ev->timestamp, ev->is_chirp, ev->freq_offset, ev->sidx); + rcu_read_lock(); ar = ath12k_mac_get_ar_by_pdev_id(ab, le32_to_cpu(ev->pdev_id)); if (!ar) { @@ -6493,6 +6494,8 @@ ath12k_wmi_pdev_dfs_radar_detected_event(struct ath12k_base *ab, struct sk_buff ieee80211_radar_detected(ar->hw); exit: + rcu_read_unlock(); + kfree(tb); } @@ -6511,11 +6514,14 @@ ath12k_wmi_pdev_temperature_event(struct ath12k_base *ab, ath12k_dbg(ab, ATH12K_DBG_WMI, "pdev temperature ev temp %d pdev_id %d\n", ev.temp, ev.pdev_id); + rcu_read_lock(); ar = ath12k_mac_get_ar_by_pdev_id(ab, le32_to_cpu(ev.pdev_id)); if (!ar) { ath12k_warn(ab, "invalid pdev id in pdev temperature ev %d", ev.pdev_id); - return; + goto exit; } +exit: + rcu_read_unlock(); } static void ath12k_fils_discovery_event(struct ath12k_base *ab, -- 2.41.0

2 years

3
2
0 0

[PATCH] wifi: ath11k: fix gtk offload status event locking

by Johan Hovold

The ath11k active pdevs are protected by RCU but the gtk offload status event handling code calling ath11k_mac_get_arvif_by_vdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Fixes: a16d9b50cfba ("ath11k: support GTK rekey offload") Cc: stable(a)vger.kernel.org # 5.18 Cc: Carl Huang <quic_cjhuang(a)quicinc.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> --- ...and here's one more, this time using the ath11k_mac_get_arvif_by_vdev_id() helper. Johan drivers/net/wireless/ath/ath11k/wmi.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/drivers/net/wireless/ath/ath11k/wmi.c b/drivers/net/wireless/ath/ath11k/wmi.c index f0eac6cb84fd..78af659b1ccd 100644 --- a/drivers/net/wireless/ath/ath11k/wmi.c +++ b/drivers/net/wireless/ath/ath11k/wmi.c @@ -8618,12 +8618,13 @@ static void ath11k_wmi_gtk_offload_status_event(struct ath11k_base *ab, return; } + rcu_read_lock(); + arvif = ath11k_mac_get_arvif_by_vdev_id(ab, ev->vdev_id); if (!arvif) { ath11k_warn(ab, "failed to get arvif for vdev_id:%d\n", ev->vdev_id); - kfree(tb); - return; + goto exit; } ath11k_dbg(ab, ATH11K_DBG_WMI, "event gtk offload refresh_cnt %d\n", @@ -8640,6 +8641,8 @@ static void ath11k_wmi_gtk_offload_status_event(struct ath11k_base *ab, ieee80211_gtk_rekey_notify(arvif->vif, arvif->bssid, (void *)&replay_ctr_be, GFP_ATOMIC); +exit: + rcu_read_unlock(); kfree(tb); } -- 2.41.0

2 years

3
2
0 0

[PATCH] wifi: ath11k: fix htt pktlog locking

by Johan Hovold

The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices") Cc: stable(a)vger.kernel.org # 5.6 Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> --- Here's one more... Johan drivers/net/wireless/ath/ath11k/dp_rx.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/wireless/ath/ath11k/dp_rx.c b/drivers/net/wireless/ath/ath11k/dp_rx.c index 62bc98852f0f..0acbf53ae991 100644 --- a/drivers/net/wireless/ath/ath11k/dp_rx.c +++ b/drivers/net/wireless/ath/ath11k/dp_rx.c @@ -1621,14 +1621,18 @@ static void ath11k_htt_pktlog(struct ath11k_base *ab, struct sk_buff *skb) u8 pdev_id; pdev_id = FIELD_GET(HTT_T2H_PPDU_STATS_INFO_PDEV_ID, data->hdr); + + rcu_read_lock(); ar = ath11k_mac_get_ar_by_pdev_id(ab, pdev_id); if (!ar) { ath11k_warn(ab, "invalid pdev id %d on htt pktlog\n", pdev_id); - return; + goto out; } trace_ath11k_htt_pktlog(ar, data->payload, hdr->size, ar->ab->pktlog_defs_checksum); +out: + rcu_read_unlock(); } static void ath11k_htt_backpressure_event_handler(struct ath11k_base *ab, -- 2.41.0

2 years

2
1
0 0

Linux 4.19.297

by Greg Kroah-Hartman

I'm announcing the release of the 4.19.297 kernel. All users of the 4.19 kernel series must upgrade. The updated 4.19.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/omap4-droid4-xt894.dts | 1 arch/powerpc/include/asm/nohash/64/pgtable.h | 2 arch/s390/pci/pci_dma.c | 15 ++++ arch/x86/include/asm/msr-index.h | 4 + arch/x86/kernel/alternative.c | 13 ++++ arch/x86/kernel/cpu/amd.c | 8 ++ arch/x86/kvm/lapic.c | 8 +- drivers/acpi/irq.c | 7 +- drivers/ata/libata-eh.c | 2 drivers/base/regmap/regmap.c | 2 drivers/bluetooth/hci_vhci.c | 3 drivers/cpuidle/cpuidle.c | 12 ++- drivers/dma/stm32-mdma.c | 4 + drivers/gpio/gpio-timberdale.c | 5 - drivers/gpio/gpio-vf610.c | 4 - drivers/gpu/drm/drm_panel_orientation_quirks.c | 16 +++++ drivers/gpu/drm/etnaviv/etnaviv_gem_prime.c | 2 drivers/gpu/drm/msm/dsi/dsi_host.c | 12 +++ drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 drivers/hid/hid-holtek-kbd.c | 4 + drivers/hid/hid-logitech-hidpp.c | 3 drivers/i2c/i2c-mux.c | 2 drivers/iio/pressure/bmp280-core.c | 2 drivers/iio/pressure/ms5611_core.c | 2 drivers/infiniband/hw/cxgb4/cm.c | 3 drivers/input/joystick/xpad.c | 2 drivers/input/misc/powermate.c | 1 drivers/input/mouse/elantech.c | 1 drivers/input/mouse/synaptics.c | 1 drivers/mcb/mcb-core.c | 10 --- drivers/mcb/mcb-parse.c | 2 drivers/mmc/core/mmc.c | 2 drivers/mtd/nand/raw/qcom_nandc.c | 2 drivers/mtd/nand/spi/micron.c | 2 drivers/net/ethernet/intel/i40e/i40e_common.c | 4 - drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 - drivers/net/ethernet/marvell/sky2.h | 2 drivers/net/ieee802154/ca8210.c | 17 ----- drivers/net/usb/dm9601.c | 7 +- drivers/net/usb/smsc95xx.c | 2 drivers/net/xen-netback/interface.c | 3 drivers/phy/motorola/phy-mapphone-mdm6600.c | 1 drivers/usb/core/hub.c | 28 +++++++- drivers/usb/core/hub.h | 2 drivers/usb/dwc3/core.c | 39 ++++++++++++ drivers/usb/gadget/function/f_ncm.c | 26 ++++++-- drivers/usb/gadget/udc/udc-xilinx.c | 20 +++--- drivers/usb/host/xhci-ring.c | 4 - drivers/usb/musb/musb_debugfs.c | 2 drivers/usb/musb/musb_host.c | 9 ++ drivers/usb/serial/option.c | 7 ++ fs/btrfs/extent-tree.c | 6 - fs/btrfs/ioctl.c | 4 - fs/btrfs/tree-log.c | 2 fs/ceph/inode.c | 4 - fs/overlayfs/copy_up.c | 2 fs/quota/dquot.c | 66 ++++++++++++-------- include/linux/indirect_call_wrapper.h | 51 ++++++++++++++++ include/linux/mcb.h | 1 include/linux/netdevice.h | 2 include/linux/perf_event.h | 1 include/linux/quota.h | 4 - include/linux/quotaops.h | 2 include/net/bluetooth/hci_core.h | 2 include/net/netns/xfrm.h | 1 include/net/tcp.h | 3 kernel/cgroup/cgroup-v1.c | 5 - kernel/events/core.c | 39 ++++++++++-- kernel/sched/idle.c | 22 ++---- kernel/trace/trace_events.c | 1 kernel/workqueue.c | 8 +- net/bluetooth/hci_conn.c | 72 +++++++++++++--------- net/bluetooth/hci_core.c | 8 +- net/bluetooth/hci_event.c | 33 ++++++++-- net/bluetooth/hci_sock.c | 3 net/ceph/messenger.c | 79 ++++++++++++------------- net/core/pktgen.c | 14 ++-- net/ipv4/esp4.c | 4 - net/ipv4/tcp_output.c | 25 ++++++- net/ipv4/tcp_recovery.c | 2 net/ipv6/esp6.c | 4 - net/ipv6/xfrm6_policy.c | 4 - net/mac80211/tx.c | 3 net/netfilter/ipvs/ip_vs_sync.c | 4 - net/netfilter/nft_payload.c | 2 net/netfilter/nft_set_rbtree.c | 2 net/nfc/llcp_core.c | 30 +++------ net/nfc/nci/core.c | 5 + net/nfc/nci/spi.c | 2 net/rds/tcp_connect.c | 2 net/rds/tcp_listen.c | 2 net/rfkill/rfkill-gpio.c | 4 - net/sched/sch_hfsc.c | 18 ++++- net/socket.c | 77 +++++++++++++++++------- net/wireless/nl80211.c | 2 net/xfrm/xfrm_interface_core.c | 22 +++--- net/xfrm/xfrm_policy.c | 6 - sound/soc/pxa/pxa-ssp.c | 2 99 files changed, 680 insertions(+), 318 deletions(-) Abhinav Kumar (1): drm/msm/dsi: skip the wait for video mode done if not applicable Alexander Zangerl (1): iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Amelie Delaunay (1): dmaengine: stm32-mdma: abort resume if no ongoing transfer Andy Shevchenko (1): Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" Arkadiusz Bokowy (1): Bluetooth: vhci: Fix race when opening vhci device Arnd Bergmann (1): Bluetooth: avoid memcmp() out of bounds warning Artem Chernyshev (1): RDMA/cxgb4: Check skb value for failure to allocate Avri Altman (1): mmc: core: Capture correct oemid-bits for eMMC cards Benjamin Berg (1): wifi: cfg80211: avoid leaking stack data into trace Benoît Monin (1): USB: serial: option: add entry for Sierra EM9191 with new firmware Bibek Kumar Patro (1): mtd: rawnand: qcom: Unmap the right resource upon probe failure Borislav Petkov (AMD) (1): x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Chengfeng Ye (1): gpio: timberdale: Fix potential deadlock on &tgpio->lock Christophe Leroy (1): powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Clément Léger (1): tracing: relax trace_event_eval_update() execution with cond_resched() Damien Le Moal (1): ata: libata-eh: Fix compilation warning in ata_eh_link_report() Dan Carpenter (3): ixgbe: fix crash with empty VF macvlan list net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ASoC: pxa: fix a memory leak in probe() Dinghao Liu (1): ieee802154: ca8210: Fix a potential UAF in ca8210_probe Dmitry Torokhov (1): pinctrl: avoid unsafe code pattern in find_pinctrl() Edward AD (1): Bluetooth: hci_sock: fix slab oob read in create_monitor_event Eric Dumazet (4): net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() xfrm: fix a data-race in xfrm_gen_index() xfrm: interface: use DEV_STATS_INC() tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb Fabio Porcedda (1): USB: serial: option: add Telit LE910C4-WWX 0x1035 composition Filipe Manana (1): btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 Florian Westphal (1): netfilter: nft_payload: fix wrong mac header matching Gavrilov Ilia (1): net: pktgen: Fix interface flags printing Greg Kroah-Hartman (1): Linux 4.19.297 Haibo Chen (1): gpio: vf610: set value before the direction to avoid a glitch Hans de Goede (1): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect Heiner Kallweit (1): i2c: mux: Avoid potential false error message in i2c_mux_add_adapter Jan Kara (1): quota: Fix slow quotaoff Javier Carrasco (2): net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Input: powermate - fix use-after-free in powermate_config_complete Jeff Layton (2): libceph: fix unaligned accesses in ceph_entity_addr handling overlayfs: set ctime when setting mtime and atime Jeffery Miller (1): Input: psmouse - fix fast_reconnect function for PS/2 mode Jeremy Cline (1): nfc: nci: assert requested protocol is valid Jim Mattson (1): KVM: x86: Mask LVTPC when handling a PMI Johan Hovold (1): regmap: fix NULL deref on lookup Jordan Rife (3): net: prevent rewrite of msg_name in sock_sendmsg() net: prevent address rewrite in kernel_bind() libceph: use kernel_connect() Jorge Sanjuan Garcia (1): mcb: remove is_added flag from mcb_device struct Josef Bacik (2): btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c Josua Mayer (1): net: rfkill: gpio: prevent value glitch during probe Kai Uwe Broulik (1): drm: panel-orientation-quirks: Add quirk for One Mix 2S Kees Cook (2): sky2: Make sure there is at least one frag_addr available Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Kirill A. Shutemov (1): x86/alternatives: Disable KASAN in apply_alternatives() Konstantin Meskhidze (1): drm/vmwgfx: fix typo of sizeof argument Krishna Kurapati (1): usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Krzysztof Kozlowski (1): nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Lee, Chun-Yi (2): Bluetooth: hci_event: Ignore NULL link key Bluetooth: Reject connection with the device which has same BD_ADDR Luiz Augusto von Dentz (3): Bluetooth: hci_event: Fix coding style Bluetooth: hci_core: Fix build warnings Bluetooth: hci_event: Fix using memcmp when comparing keys Ma Ke (3): net: ipv4: fix return value check in esp_remove_trailer net: ipv6: fix return value check in esp_remove_trailer HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event Martin Fuzzey (1): drm: etvnaviv: fix bad backport leading to warning Martin Kurbanov (1): mtd: spinand: micron: correct bitmask for ecc status Matthias Berndt (1): Input: xpad - add PXN V900 support Michal Koutný (1): cgroup: Remove duplicates in cgroup v1 tasks file Michal Schmidt (1): i40e: prevent crash on probe if hw registers have invalid values Neal Cardwell (1): tcp: fix excessive TLP and RACK timeouts from HZ rounding Nicolas Dichtel (1): dev_forward_skb: do not scrub skb mark within the same name space Niklas Schnelle (1): s390/pci: fix iommu bitmap allocation Pablo Neira Ayuso (1): netfilter: nft_set_rbtree: .deactivate fails if element has expired Paolo Abeni (2): indirect call wrappers: helpers to speed-up indirect calls of builtin net: use indirect calls helpers at the socket layer Pedro Tammela (1): net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve Peter Zijlstra (2): sched,idle,rcu: Push rcu_idle deeper into the idle path perf: Disallow mis-matched inherited group reads Phil Elwell (1): iio: pressure: bmp280: Fix NULL pointer exception Piyush Mehta (1): usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Puliang Lu (1): USB: serial: option: add Fibocom to DELL custom modem FM101R-GL Randy Dunlap (1): net: fix kernel-doc warnings for socket.c Ricardo Cañuelo (1): usb: hub: Guard against accesses to uninitialized BOS descriptors Roger Pau Monne (1): xen-netback: use default TX queue size for vifs Sunil V L (1): ACPI: irq: Fix incorrect return value in acpi_register_gsi() Thinh Nguyen (1): usb: dwc3: Soft reset phy on probe for host Tony Lindgren (2): ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone phy: mapphone-mdm6600: Fix runtime PM for remove Waiman Long (1): workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Wen Gong (1): wifi: mac80211: allow transmitting EAPOL frames with tainted key Wesley Cheng (1): usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer Xingxing Luo (2): usb: musb: Get the musb_qh poniter after musb_giveback usb: musb: Modify the "HWVers" register address Xiubo Li (1): ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Ying Hsu (1): Bluetooth: Avoid redundant authentication Zhang Changzhong (1): xfrm6: fix inet6_dev refcount underflow problem Ziyang Xuan (1): Bluetooth: Fix a refcnt underflow problem for hci_conn

2 years

1
1
0 0

Linux 4.14.328

by Greg Kroah-Hartman

I'm announcing the release of the 4.14.328 kernel. All users of the 4.14 kernel series must upgrade. The updated 4.14.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.14.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/omap4-droid4-xt894.dts | 1 arch/s390/pci/pci_dma.c | 16 ++++- arch/x86/include/asm/msr-index.h | 4 + arch/x86/kernel/cpu/amd.c | 9 +++ arch/x86/kvm/lapic.c | 8 ++ drivers/acpi/irq.c | 7 ++ drivers/ata/libata-eh.c | 2 drivers/base/regmap/regmap.c | 2 drivers/bluetooth/hci_vhci.c | 3 + drivers/gpio/gpio-timberdale.c | 5 + drivers/gpio/gpio-vf610.c | 4 - drivers/gpu/drm/etnaviv/etnaviv_gem_prime.c | 2 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 drivers/hid/hid-holtek-kbd.c | 4 + drivers/hid/hid-logitech-hidpp.c | 3 - drivers/i2c/i2c-mux.c | 2 drivers/iio/pressure/bmp280-core.c | 2 drivers/iio/pressure/ms5611_core.c | 2 drivers/infiniband/hw/cxgb4/cm.c | 3 + drivers/input/joystick/xpad.c | 2 drivers/input/misc/powermate.c | 1 drivers/mcb/mcb-core.c | 10 +-- drivers/mcb/mcb-parse.c | 2 drivers/mmc/core/mmc.c | 2 drivers/net/ethernet/intel/i40e/i40e_common.c | 4 - drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 + drivers/net/ethernet/marvell/sky2.h | 2 drivers/net/ieee802154/ca8210.c | 17 +---- drivers/net/usb/dm9601.c | 7 ++ drivers/net/usb/smsc95xx.c | 2 drivers/usb/core/hub.c | 28 ++++++++- drivers/usb/core/hub.h | 2 drivers/usb/gadget/function/f_ncm.c | 26 ++++++--- drivers/usb/gadget/udc/udc-xilinx.c | 20 ++++-- drivers/usb/host/xhci-ring.c | 4 - drivers/usb/musb/musb_debugfs.c | 2 drivers/usb/musb/musb_host.c | 9 ++- drivers/usb/serial/option.c | 7 ++ fs/btrfs/tree-log.c | 2 fs/ceph/inode.c | 4 - fs/overlayfs/copy_up.c | 2 include/linux/mcb.h | 1 include/linux/perf_event.h | 1 include/net/bluetooth/hci_core.h | 2 include/net/netns/xfrm.h | 1 kernel/cgroup/cgroup-v1.c | 5 - kernel/events/core.c | 39 +++++++++++-- kernel/trace/trace_events.c | 1 kernel/workqueue.c | 8 ++ net/bluetooth/hci_conn.c | 72 +++++++++++++++---------- net/bluetooth/hci_core.c | 8 +- net/bluetooth/hci_event.c | 33 +++++++++-- net/bluetooth/hci_sock.c | 3 - net/ipv4/esp4.c | 4 + net/ipv6/esp6.c | 4 + net/mac80211/tx.c | 3 - net/netfilter/nft_payload.c | 2 net/nfc/nci/core.c | 5 + net/nfc/nci/spi.c | 2 net/rfkill/rfkill-gpio.c | 4 - net/wireless/nl80211.c | 2 net/xfrm/xfrm_policy.c | 6 -- 63 files changed, 309 insertions(+), 140 deletions(-) Alexander Zangerl (1): iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Andy Shevchenko (1): Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" Arkadiusz Bokowy (1): Bluetooth: vhci: Fix race when opening vhci device Arnd Bergmann (1): Bluetooth: avoid memcmp() out of bounds warning Artem Chernyshev (1): RDMA/cxgb4: Check skb value for failure to allocate Avri Altman (1): mmc: core: Capture correct oemid-bits for eMMC cards Benjamin Berg (1): wifi: cfg80211: avoid leaking stack data into trace Benoît Monin (1): USB: serial: option: add entry for Sierra EM9191 with new firmware Borislav Petkov (AMD) (1): x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Chengfeng Ye (1): gpio: timberdale: Fix potential deadlock on &tgpio->lock Clément Léger (1): tracing: relax trace_event_eval_update() execution with cond_resched() Damien Le Moal (1): ata: libata-eh: Fix compilation warning in ata_eh_link_report() Dan Carpenter (2): ixgbe: fix crash with empty VF macvlan list net: usb: smsc95xx: Fix an error code in smsc95xx_reset() Dinghao Liu (1): ieee802154: ca8210: Fix a potential UAF in ca8210_probe Dmitry Torokhov (1): pinctrl: avoid unsafe code pattern in find_pinctrl() Edward AD (1): Bluetooth: hci_sock: fix slab oob read in create_monitor_event Eric Dumazet (1): xfrm: fix a data-race in xfrm_gen_index() Fabio Porcedda (1): USB: serial: option: add Telit LE910C4-WWX 0x1035 composition Florian Westphal (1): netfilter: nft_payload: fix wrong mac header matching Greg Kroah-Hartman (1): Linux 4.14.328 Haibo Chen (1): gpio: vf610: set value before the direction to avoid a glitch Hans de Goede (1): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect Heiner Kallweit (1): i2c: mux: Avoid potential false error message in i2c_mux_add_adapter Javier Carrasco (2): net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Input: powermate - fix use-after-free in powermate_config_complete Jeff Layton (1): overlayfs: set ctime when setting mtime and atime Jeremy Cline (1): nfc: nci: assert requested protocol is valid Jim Mattson (1): KVM: x86: Mask LVTPC when handling a PMI Johan Hovold (1): regmap: fix NULL deref on lookup Jorge Sanjuan Garcia (1): mcb: remove is_added flag from mcb_device struct Josef Bacik (1): btrfs: initialize start_slot in btrfs_log_prealloc_extents Josua Mayer (1): net: rfkill: gpio: prevent value glitch during probe Kees Cook (2): sky2: Make sure there is at least one frag_addr available Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Konstantin Meskhidze (1): drm/vmwgfx: fix typo of sizeof argument Krishna Kurapati (1): usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Krzysztof Kozlowski (1): nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Lee, Chun-Yi (2): Bluetooth: hci_event: Ignore NULL link key Bluetooth: Reject connection with the device which has same BD_ADDR Luiz Augusto von Dentz (3): Bluetooth: hci_event: Fix coding style Bluetooth: hci_core: Fix build warnings Bluetooth: hci_event: Fix using memcmp when comparing keys Ma Ke (3): net: ipv4: fix return value check in esp_remove_trailer net: ipv6: fix return value check in esp_remove_trailer HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event Martin Fuzzey (1): drm: etvnaviv: fix bad backport leading to warning Matthias Berndt (1): Input: xpad - add PXN V900 support Michal Koutný (1): cgroup: Remove duplicates in cgroup v1 tasks file Michal Schmidt (1): i40e: prevent crash on probe if hw registers have invalid values Niklas Schnelle (1): s390/pci: fix iommu bitmap allocation Peter Zijlstra (1): perf: Disallow mis-matched inherited group reads Phil Elwell (1): iio: pressure: bmp280: Fix NULL pointer exception Piyush Mehta (1): usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Puliang Lu (1): USB: serial: option: add Fibocom to DELL custom modem FM101R-GL Ricardo Cañuelo (1): usb: hub: Guard against accesses to uninitialized BOS descriptors Sunil V L (1): ACPI: irq: Fix incorrect return value in acpi_register_gsi() Tony Lindgren (1): ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone Waiman Long (1): workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Wen Gong (1): wifi: mac80211: allow transmitting EAPOL frames with tainted key Wesley Cheng (1): usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer Xingxing Luo (2): usb: musb: Get the musb_qh poniter after musb_giveback usb: musb: Modify the "HWVers" register address Xiubo Li (1): ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Ying Hsu (1): Bluetooth: Avoid redundant authentication Ziyang Xuan (1): Bluetooth: Fix a refcnt underflow problem for hci_conn

2 years

1
1
0 0

stable-rc/linux-5.10.y baseline: 162 runs, 2 regressions (v5.10.198-200-ge31b6513c43d)

by kernelci.org bot

stable-rc/linux-5.10.y baseline: 162 runs, 2 regressions (v5.10.198-200-ge31b6513c43d) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions ----------------+-------+--------------+----------+--------------------+------------ meson-gxbb-p200 | arm64 | lab-baylibre | gcc-10 | defconfig | 1 panda | arm | lab-baylibre | gcc-10 | multi_v7_defconfig | 1 Details: https://kernelci.org/test/job/stable-rc/branch/linux-5.10.y/kernel/v5.10.19… Test: baseline Tree: stable-rc Branch: linux-5.10.y Describe: v5.10.198-200-ge31b6513c43d URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git SHA: e31b6513c43d7f4efa2c5913dd7d4fbef162e736 Test Regressions ---------------- platform | arch | lab | compiler | defconfig | regressions ----------------+-------+--------------+----------+--------------------+------------ meson-gxbb-p200 | arm64 | lab-baylibre | gcc-10 | defconfig | 1 Details: https://kernelci.org/test/plan/id/6538b0a3d6feff8a2cefcef9 Results: 0 PASS, 1 FAIL, 0 SKIP Full config: defconfig Compiler: gcc-10 Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.198-200-ge31b651… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.198-200-ge31b651… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.login: https://kernelci.org/test/case/id/6538b0a3d6feff8a2cefcefa new failure (last pass: v5.10.198-203-g38f629e2a1b6) platform | arch | lab | compiler | defconfig | regressions ----------------+-------+--------------+----------+--------------------+------------ panda | arm | lab-baylibre | gcc-10 | multi_v7_defconfig | 1 Details: https://kernelci.org/test/plan/id/6538b40258d09ad121efcf37 Results: 5 PASS, 1 FAIL, 1 SKIP Full config: multi_v7_defconfig Compiler: gcc-10 Plain log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.198-200-ge31b651… HTML log: https://storage.kernelci.org//stable-rc/linux-5.10.y/v5.10.198-200-ge31b651… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/6538b40258d09ad121efcf3f new failure (last pass: v5.10.148-5-gac0fb49345ee) 2023-10-25T06:21:25.840605 <8>[ 24.813537] <LAVA_SIGNAL_ENDRUN 0_dmesg 3812506_1.5.2.4.1> 2023-10-25T06:21:25.947233 / # # 2023-10-25T06:21:26.048527 export SHELL=/bin/sh 2023-10-25T06:21:26.049010 # 2023-10-25T06:21:26.149844 / # export SHELL=/bin/sh. /lava-3812506/environment 2023-10-25T06:21:26.150323 2023-10-25T06:21:26.251137 / # . /lava-3812506/environment/lava-3812506/bin/lava-test-runner /lava-3812506/1 2023-10-25T06:21:26.251750 2023-10-25T06:21:26.257004 / # /lava-3812506/bin/lava-test-runner /lava-3812506/1 2023-10-25T06:21:26.315121 + export 'TESTRUN_ID=1_bootrr' ... (11 line(s) more)

2 years

1
0
0 0

stable-rc/linux-5.4.y baseline: 149 runs, 1 regressions (v5.4.258-121-g18f5a3e6c35c)

by kernelci.org bot

stable-rc/linux-5.4.y baseline: 149 runs, 1 regressions (v5.4.258-121-g18f5a3e6c35c) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions ---------+------+--------------+----------+--------------------+------------ panda | arm | lab-baylibre | gcc-10 | multi_v7_defconfig | 1 Details: https://kernelci.org/test/job/stable-rc/branch/linux-5.4.y/kernel/v5.4.258-… Test: baseline Tree: stable-rc Branch: linux-5.4.y Describe: v5.4.258-121-g18f5a3e6c35c URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git SHA: 18f5a3e6c35c0a03c6667581701af2288329ca82 Test Regressions ---------------- platform | arch | lab | compiler | defconfig | regressions ---------+------+--------------+----------+--------------------+------------ panda | arm | lab-baylibre | gcc-10 | multi_v7_defconfig | 1 Details: https://kernelci.org/test/plan/id/6538af419d5ce058a2efcf41 Results: 5 PASS, 1 FAIL, 1 SKIP Full config: multi_v7_defconfig Compiler: gcc-10 Plain log: https://storage.kernelci.org//stable-rc/linux-5.4.y/v5.4.258-121-g18f5a3e6c… HTML log: https://storage.kernelci.org//stable-rc/linux-5.4.y/v5.4.258-121-g18f5a3e6c… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/6538af419d5ce058a2efcf4a new failure (last pass: v5.4.218-5-g5a1de46f7e74) 2023-10-25T06:01:16.104331 <8>[ 21.108093] <LAVA_SIGNAL_ENDRUN 0_dmesg 3812392_1.5.2.4.1> 2023-10-25T06:01:16.209398 # 2023-10-25T06:01:16.311173 / # #export SHELL=/bin/sh 2023-10-25T06:01:16.311685 2023-10-25T06:01:16.412574 / # export SHELL=/bin/sh. /lava-3812392/environment 2023-10-25T06:01:16.413083 2023-10-25T06:01:16.513978 / # . /lava-3812392/environment/lava-3812392/bin/lava-test-runner /lava-3812392/1 2023-10-25T06:01:16.514751 2023-10-25T06:01:16.519727 / # /lava-3812392/bin/lava-test-runner /lava-3812392/1 2023-10-25T06:01:16.577772 + export 'TESTRUN_ID=1_bootrr' ... (11 line(s) more)

2 years

1
0
0 0

[PATCH 5.10] f2fs: fix to do sanity check on inode type during garbage collection

by Kazunori Kobayashi

From: Chao Yu <chao(a)kernel.org> commit 9056d6489f5a41cfbb67f719d2c0ce61ead72d9f upstream. As report by Wenqing Liu in bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=215231 - Overview kernel NULL pointer dereference triggered in folio_mark_dirty() when mount and operate on a crafted f2fs image - Reproduce tested on kernel 5.16-rc3, 5.15.X under root 1. mkdir mnt 2. mount -t f2fs tmp1.img mnt 3. touch tmp 4. cp tmp mnt F2FS-fs (loop0): sanity_check_inode: inode (ino=49) extent info [5942, 4294180864, 4] is incorrect, run fsck to fix F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=31340049, run fsck to fix. BUG: kernel NULL pointer dereference, address: 0000000000000000 folio_mark_dirty+0x33/0x50 move_data_page+0x2dd/0x460 [f2fs] do_garbage_collect+0xc18/0x16a0 [f2fs] f2fs_gc+0x1d3/0xd90 [f2fs] f2fs_balance_fs+0x13a/0x570 [f2fs] f2fs_create+0x285/0x840 [f2fs] path_openat+0xe6d/0x1040 do_filp_open+0xc5/0x140 do_sys_openat2+0x23a/0x310 do_sys_open+0x57/0x80 The root cause is for special file: e.g. character, block, fifo or socket file, f2fs doesn't assign address space operations pointer array for mapping->a_ops field, so, in a fuzzed image, SSA table indicates a data block belong to special file, when f2fs tries to migrate that block, it causes NULL pointer access once move_data_page() calls a_ops->set_dirty_page(). Cc: stable(a)vger.kernel.org Reported-by: Wenqing Liu <wenqingliu0120(a)gmail.com> Signed-off-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Kazunori Kobayashi <kazunori.kobayashi(a)miraclelinux.com> --- fs/f2fs/gc.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/fs/f2fs/gc.c b/fs/f2fs/gc.c index 8e4daee0171f..dfa99cd195b8 100644 --- a/fs/f2fs/gc.c +++ b/fs/f2fs/gc.c @@ -1451,7 +1451,8 @@ static int gc_data_segment(struct f2fs_sb_info *sbi, struct f2fs_summary *sum, if (phase == 3) { inode = f2fs_iget(sb, dni.ino); - if (IS_ERR(inode) || is_bad_inode(inode)) { + if (IS_ERR(inode) || is_bad_inode(inode) || + special_file(inode->i_mode)) { set_sbi_flag(sbi, SBI_NEED_FSCK); continue; } -- 2.39.2

2 years

1
0
0 0

Hello

by Tatiana Perova

Hello, How are you? Is this your personal or professional email address? I'm a Ukrainian who fled the war to Poland for safety after the demise of my husband. I recently had the opportunity to reach out to you from a refugee camp in Poland with my two kids for repatriation of funds. I have a secret to share with you. I strongly apologize if my method of contacting you does not suit you. Regards, Tatiana Perova

2 years

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror October 2023