- Linux-stable-mirror - lists.linaro.org

+ watchdog-fix-uaf-in-reboot-notifier-handling-in-watchdog-core-code.patch added to -mm tree

by akpm＠linux-foundation.org

The patch titled Subject: drivers/watchdog/: fix oops in reboot notifier handling in watchdog core code has been added to the -mm tree. Its filename is watchdog-fix-uaf-in-reboot-notifier-handling-in-watchdog-core-code.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/watchdog-fix-uaf-in-reboot-notifie… and later at http://ozlabs.org/~akpm/mmotm/broken-out/watchdog-fix-uaf-in-reboot-notifie… Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: Vladis Dronov <vdronov(a)redhat.com> Subject: drivers/watchdog/: fix oops in reboot notifier handling in watchdog core code After commit 44ea39420fc9 ("drivers/watchdog: make use of devm_register_reboot_notifier()") the struct notifier_block reboot_nb in the struct watchdog_device is removed from the reboot notifiers chain at the time watchdog's chardev is closed. But at least in i6300esb.c case reboot_nb is embedded in the struct esb_dev which can be freed on its device removal and before the chardev is closed, thus an oops at reboot: [ 7.728581] esb_probe: esb_dev.watchdog_device ffff91316f91ab28 ts# uname -r note the address ^^^ 5.5.0-rc5-ae6088-wdog ts# ./openwdog0 & [1] 696 ts# opened /dev/watchdog0, sleeping 10s... ts# echo 1 > /sys/devices/pci0000\:00/0000\:00\:09.0/remove [ 178.086079] devres:rel_nodes: dev ffff91317668a0b0 data ffff91316f91ab= 28 esb_dev.watchdog_device.reboot_nb memory is freed here ^^^ ts# ...woken up [ 181.459010] devres:rel_nodes: dev ffff913171781000 data ffff913174a1da= e8 [ 181.460195] devm_unreg_reboot_notifier: res ffff913174a1dae8 nb ffff91= 316f91ab78 attempt to use memory already freed = ^^^ [ 181.461063] devm_unreg_reboot_notifier: nb->call 6b6b6b6b6b6b6b6b [ 181.461243] devm_unreg_reboot_notifier: nb->next 6b6b6b6b6b6b6b6b freed memory is filled with a slub poison ^^^ [1]+ Done ./openwdog0 ts# reboot [ 229.921862] systemd-shutdown[1]: Rebooting. [ 229.939265] notifier_call_chain: nb ffffffff9c6c2f20 nb->next ffffffff= 9c6d50c0 [ 229.943080] notifier_call_chain: nb ffffffff9c6d50c0 nb->next 6b6b6b6b= 6b6b6b6b [ 229.946054] notifier_call_chain: nb 6b6b6b6b6b6b6b6b INVAL [ 229.957584] general protection fault: 0000 [#1] SMP [ 229.958770] CPU: 0 PID: 1 Comm: systemd-shutdow Not tainted 5.5.0-rc5-= ae6088-wdog [ 229.960224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), ... [ 229.963288] RIP: 0010:notifier_call_chain+0x66/0xd0 [ 229.969082] RSP: 0018:ffffb20dc0013d88 EFLAGS: 00010246 [ 229.970812] RAX: 000000000000002e RBX: 6b6b6b6b6b6b6b6b RCX: 000000000= 00008b3 [ 229.972929] RDX: 0000000000000000 RSI: 0000000000000096 RDI: ffffffff9= ccc46ac [ 229.975028] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000= 00008b3 [ 229.977039] R10: 0000000000000001 R11: ffffffff9c26c740 R12: 000000000= 0000000 [ 229.979155] R13: 6b6b6b6b6b6b6b6b R14: 0000000000000000 R15: 00000000f= ffffffa ... slub_debug=3DFZP poison ^^^ [ 229.989089] Call Trace: [ 229.990157] blocking_notifier_call_chain+0x43/0x59 [ 229.991401] kernel_restart_prepare+0x14/0x30 [ 229.992607] kernel_restart+0x9/0x30 [ 229.993800] __do_sys_reboot+0x1d2/0x210 [ 230.000149] do_syscall_64+0x3d/0x130 [ 230.001277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 230.002639] RIP: 0033:0x7f5461bdd177 [ 230.016402] Modules linked in: i6300esb [ 230.050261] Kernel panic - not syncing: Attempted to kill init! exitco= de=3D0x0000000b Fix the crash by reverting 44ea39420fc9 so unregister_reboot_notifier() is called when watchdog device is removed. This also makes handling of the reboot notifier unified with the handling of the restart handler, which is freed with unregister_restart_handler() in the same place. Link: http://lkml.kernel.org/r/20200108125347.6067-1-vdronov@redhat.com Fixes: 44ea39420fc9 ("drivers/watchdog: make use of devm_register_reboot_= notifier()") Signed-off-by: Vladis Dronov <vdronov(a)redhat.com> Cc: Andrey Smirnov <andrew.smirnov(a)gmail.com> Cc: Guenter Roeck <linux(a)roeck-us.net> Cc: Wim Van Sebroeck <wim(a)linux-watchdog.org> Cc: Chris Healy <cphealy(a)gmail.com> Cc: Andy Shevchenko <andy.shevchenko(a)gmail.com> Cc: <stable(a)vger.kernel.org> [4.15+] Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- drivers/watchdog/watchdog_core.c | 35 ++++++++++++++++++++++++++++ drivers/watchdog/watchdog_dev.c | 36 ----------------------------- 2 files changed, 36 insertions(+), 35 deletions(-) --- a/drivers/watchdog/watchdog_core.c~watchdog-fix-uaf-in-reboot-notifier-handling-in-watchdog-core-code +++ a/drivers/watchdog/watchdog_core.c @@ -147,6 +147,25 @@ int watchdog_init_timeout(struct watchdo } EXPORT_SYMBOL_GPL(watchdog_init_timeout); +static int watchdog_reboot_notifier(struct notifier_block *nb, + unsigned long code, void *data) +{ + struct watchdog_device *wdd; + + wdd = container_of(nb, struct watchdog_device, reboot_nb); + if (code == SYS_DOWN || code == SYS_HALT) { + if (watchdog_active(wdd)) { + int ret; + + ret = wdd->ops->stop(wdd); + if (ret) + return NOTIFY_BAD; + } + } + + return NOTIFY_DONE; +} + static int watchdog_restart_notifier(struct notifier_block *nb, unsigned long action, void *data) { @@ -235,6 +254,19 @@ static int __watchdog_register_device(st } } + if (test_bit(WDOG_STOP_ON_REBOOT, &wdd->status)) { + wdd->reboot_nb.notifier_call = watchdog_reboot_notifier; + + ret = register_reboot_notifier(&wdd->reboot_nb); + if (ret) { + pr_err("watchdog%d: Cannot register reboot notifier (%d)\n", + wdd->id, ret); + watchdog_dev_unregister(wdd); + ida_simple_remove(&watchdog_ida, id); + return ret; + } + } + if (wdd->ops->restart) { wdd->restart_nb.notifier_call = watchdog_restart_notifier; @@ -289,6 +321,9 @@ static void __watchdog_unregister_device if (wdd->ops->restart) unregister_restart_handler(&wdd->restart_nb); + if (test_bit(WDOG_STOP_ON_REBOOT, &wdd->status)) + unregister_reboot_notifier(&wdd->reboot_nb); + watchdog_dev_unregister(wdd); ida_simple_remove(&watchdog_ida, wdd->id); } --- a/drivers/watchdog/watchdog_dev.c~watchdog-fix-uaf-in-reboot-notifier-handling-in-watchdog-core-code +++ a/drivers/watchdog/watchdog_dev.c @@ -38,7 +38,6 @@ #include <linux/miscdevice.h> /* For handling misc devices */ #include <linux/module.h> /* For module stuff/... */ #include <linux/mutex.h> /* For mutexes */ -#include <linux/reboot.h> /* For reboot notifier */ #include <linux/slab.h> /* For memory functions */ #include <linux/types.h> /* For standard types (like size_t) */ #include <linux/watchdog.h> /* For watchdog specific items */ @@ -1097,25 +1096,6 @@ static void watchdog_cdev_unregister(str put_device(&wd_data->dev); } -static int watchdog_reboot_notifier(struct notifier_block *nb, - unsigned long code, void *data) -{ - struct watchdog_device *wdd; - - wdd = container_of(nb, struct watchdog_device, reboot_nb); - if (code == SYS_DOWN || code == SYS_HALT) { - if (watchdog_active(wdd)) { - int ret; - - ret = wdd->ops->stop(wdd); - if (ret) - return NOTIFY_BAD; - } - } - - return NOTIFY_DONE; -} - /* * watchdog_dev_register: register a watchdog device * @wdd: watchdog device @@ -1134,22 +1114,8 @@ int watchdog_dev_register(struct watchdo return ret; ret = watchdog_register_pretimeout(wdd); - if (ret) { + if (ret) watchdog_cdev_unregister(wdd); - return ret; - } - - if (test_bit(WDOG_STOP_ON_REBOOT, &wdd->status)) { - wdd->reboot_nb.notifier_call = watchdog_reboot_notifier; - - ret = devm_register_reboot_notifier(&wdd->wd_data->dev, - &wdd->reboot_nb); - if (ret) { - pr_err("watchdog%d: Cannot register reboot notifier (%d)\n", - wdd->id, ret); - watchdog_dev_unregister(wdd); - } - } return ret; } _ Patches currently in -mm which might be from vdronov(a)redhat.com are watchdog-fix-uaf-in-reboot-notifier-handling-in-watchdog-core-code.patch

5 years, 10 months

1
0
0 0

Linux 5.4.10

by Greg KH

I'm announcing the release of the 5.4.10 kernel. Only powerpc users need to update from 5.4.9, there was a missing patch in that release that is in here. Sorry for the confusion. The updated 5.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 +- arch/powerpc/mm/mem.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) Aneesh Kumar K.V (1): powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range Greg Kroah-Hartman (1): Linux 5.4.10

5 years, 10 months

1
1
0 0

Linux 5.4.9

by Greg KH

I'm announcing the release of the 5.4.9 kernel. All users of the 5.4 kernel series must upgrade. The updated 5.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/kernel-parameters.txt | 2 Documentation/devicetree/bindings/clock/renesas,rcar-usb2-clock-sel.txt | 2 Makefile | 2 arch/arm64/boot/dts/amlogic/meson-gxbb-odroidc2.dts | 4 arch/arm64/boot/dts/amlogic/meson-gxl-s905x-khadas-vim.dts | 3 arch/arm64/boot/dts/amlogic/meson-gxm-khadas-vim2.dts | 3 arch/arm64/boot/dts/qcom/msm8998-clamshell.dtsi | 37 ++ arch/arm64/include/asm/pgtable-prot.h | 5 arch/arm64/include/asm/pgtable.h | 10 arch/arm64/mm/fault.c | 2 arch/arm64/mm/mmu.c | 4 arch/ia64/mm/init.c | 4 arch/mips/Kconfig | 2 arch/mips/include/asm/thread_info.h | 20 + arch/mips/net/ebpf_jit.c | 2 arch/powerpc/mm/mem.c | 30 +- arch/powerpc/mm/slice.c | 4 arch/riscv/kernel/ftrace.c | 2 arch/s390/kernel/perf_cpum_sf.c | 22 + arch/s390/kernel/smp.c | 80 ++++-- arch/s390/mm/init.c | 4 arch/sh/mm/init.c | 4 arch/x86/events/intel/bts.c | 16 - arch/x86/mm/init_32.c | 4 arch/x86/mm/init_64.c | 4 block/bio.c | 39 ++ block/compat_ioctl.c | 13 drivers/acpi/sysfs.c | 6 drivers/ata/ahci_brcm.c | 133 +++++++--- drivers/ata/libahci_platform.c | 6 drivers/ata/libata-core.c | 24 + drivers/ata/sata_fsl.c | 2 drivers/ata/sata_mv.c | 2 drivers/ata/sata_nv.c | 2 drivers/block/xen-blkback/blkback.c | 2 drivers/block/xen-blkback/xenbus.c | 10 drivers/bluetooth/btusb.c | 3 drivers/clocksource/timer-riscv.c | 2 drivers/devfreq/devfreq.c | 30 +- drivers/dma/dma-jz4780.c | 3 drivers/dma/virt-dma.c | 3 drivers/firewire/net.c | 6 drivers/firmware/arm_scmi/bus.c | 8 drivers/firmware/efi/rci2-table.c | 3 drivers/gpio/gpio-xtensa.c | 7 drivers/gpio/gpiolib.c | 8 drivers/gpu/drm/amd/amdgpu/df_v3_6.c | 38 +- drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 22 + drivers/gpu/drm/amd/display/dc/core/dc_link.c | 2 drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c | 9 drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 13 drivers/gpu/drm/amd/display/dc/dcn20/dcn20_stream_encoder.c | 12 drivers/gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 drivers/gpu/drm/amd/powerplay/amdgpu_smu.c | 1 drivers/gpu/drm/amd/powerplay/arcturus_ppt.c | 8 drivers/gpu/drm/amd/powerplay/inc/amdgpu_smu.h | 1 drivers/gpu/drm/amd/powerplay/navi10_ppt.c | 3 drivers/gpu/drm/amd/powerplay/vega20_ppt.c | 3 drivers/gpu/drm/i915/gt/intel_lrc.c | 3 drivers/gpu/drm/mcde/mcde_dsi.c | 6 drivers/gpu/drm/msm/msm_gpu.c | 1 drivers/gpu/drm/nouveau/dispnv50/disp.c | 6 drivers/gpu/drm/nouveau/nouveau_connector.c | 28 +- drivers/gpu/drm/nouveau/nouveau_connector.h | 116 ++++---- drivers/gpu/drm/sun4i/sun4i_hdmi_enc.c | 2 drivers/hid/i2c-hid/i2c-hid-core.c | 12 drivers/iio/accel/st_accel_core.c | 8 drivers/iio/adc/max9611.c | 16 - drivers/infiniband/core/cma.c | 1 drivers/infiniband/core/counters.c | 3 drivers/infiniband/hw/mlx4/main.c | 9 drivers/infiniband/hw/mlx5/main.c | 13 drivers/infiniband/sw/rxe/rxe_recv.c | 2 drivers/infiniband/sw/rxe/rxe_req.c | 6 drivers/infiniband/sw/rxe/rxe_resp.c | 7 drivers/iommu/intel-svm.c | 6 drivers/md/raid1.c | 2 drivers/md/raid5.c | 2 drivers/media/cec/cec-adap.c | 40 ++- drivers/media/usb/b2c2/flexcop-usb.c | 2 drivers/media/usb/dvb-usb/af9005.c | 5 drivers/media/usb/pulse8-cec/pulse8-cec.c | 17 - drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 23 + drivers/nvme/host/fc.c | 32 ++ drivers/nvme/host/pci.c | 14 - drivers/nvme/target/fcloop.c | 1 drivers/of/overlay.c | 37 +- drivers/pci/pci.c | 18 + drivers/phy/renesas/phy-rcar-gen3-usb2.c | 2 drivers/platform/x86/pmc_atom.c | 8 drivers/regulator/ab8500.c | 17 - drivers/regulator/axp20x-regulator.c | 11 drivers/regulator/bd70528-regulator.c | 1 drivers/scsi/libsas/sas_discover.c | 11 drivers/scsi/lpfc/lpfc_bsg.c | 15 - drivers/scsi/lpfc/lpfc_hbadisc.c | 88 ++++-- drivers/scsi/lpfc/lpfc_nvme.c | 2 drivers/scsi/lpfc/lpfc_sli.c | 2 drivers/scsi/qla2xxx/qla_def.h | 1 drivers/scsi/qla2xxx/qla_init.c | 11 drivers/scsi/qla2xxx/qla_iocb.c | 22 + drivers/scsi/qla2xxx/qla_isr.c | 4 drivers/scsi/qla2xxx/qla_mbx.c | 3 drivers/scsi/qla2xxx/qla_nvme.c | 1 drivers/scsi/qla2xxx/qla_target.c | 3 drivers/scsi/qla2xxx/tcm_qla2xxx.c | 1 drivers/scsi/qla4xxx/ql4_os.c | 1 drivers/scsi/scsi_transport_iscsi.c | 7 drivers/spi/spi-fsl-dspi.c | 15 - drivers/spi/spi-uniphier.c | 31 +- drivers/staging/wlan-ng/Kconfig | 1 drivers/tty/serial/msm_serial.c | 13 drivers/usb/gadget/function/f_ecm.c | 6 drivers/usb/gadget/function/f_rndis.c | 1 drivers/watchdog/Kconfig | 1 drivers/xen/balloon.c | 3 fs/afs/dynroot.c | 3 fs/afs/mntpt.c | 6 fs/afs/server.c | 21 - fs/afs/super.c | 1 fs/btrfs/async-thread.c | 58 ---- fs/btrfs/async-thread.h | 33 -- fs/btrfs/block-group.c | 3 fs/btrfs/delayed-inode.c | 4 fs/btrfs/disk-io.c | 34 -- fs/btrfs/extent_io.c | 2 fs/btrfs/inode.c | 67 ++--- fs/btrfs/ordered-data.c | 1 fs/btrfs/qgroup.c | 1 fs/btrfs/raid56.c | 5 fs/btrfs/reada.c | 3 fs/btrfs/scrub.c | 14 - fs/btrfs/volumes.c | 3 fs/buffer.c | 25 - fs/cifs/dfs_cache.c | 3 fs/cifs/inode.c | 2 fs/cifs/smb2pdu.c | 41 ++- fs/compat_ioctl.c | 3 fs/io_uring.c | 4 fs/locks.c | 2 fs/nfsd/nfs4state.c | 15 - fs/ocfs2/dlmglue.c | 1 fs/pstore/ram.c | 13 fs/ubifs/tnc_commit.c | 34 ++ fs/xfs/libxfs/xfs_bmap.c | 2 fs/xfs/scrub/common.h | 9 include/linux/ahci_platform.h | 2 include/linux/bio.h | 1 include/linux/dmaengine.h | 5 include/linux/libata.h | 1 include/linux/memory_hotplug.h | 7 include/linux/nvme-fc-driver.h | 4 include/linux/pci.h | 2 include/linux/regulator/ab8500.h | 1 include/net/neighbour.h | 2 include/net/sch_generic.h | 6 include/net/sock.h | 4 kernel/bpf/verifier.c | 43 +-- kernel/cred.c | 6 kernel/exit.c | 12 kernel/module.c | 2 kernel/power/snapshot.c | 9 kernel/seccomp.c | 7 kernel/taskstats.c | 30 +- kernel/trace/ftrace.c | 6 kernel/trace/trace.c | 8 kernel/trace/trace_events.c | 8 kernel/trace/trace_events_filter.c | 2 kernel/trace/trace_events_hist.c | 21 + kernel/trace/tracing_map.c | 4 lib/ubsan.c | 64 +--- mm/filemap.c | 21 - mm/gup_benchmark.c | 8 mm/hugetlb.c | 51 +++ mm/internal.h | 21 + mm/memory.c | 38 ++ mm/memory_hotplug.c | 31 +- mm/memremap.c | 2 mm/migrate.c | 23 + mm/mmap.c | 6 mm/oom_kill.c | 2 mm/shmem.c | 11 mm/sparse.c | 4 mm/zsmalloc.c | 5 net/bluetooth/hci_conn.c | 4 net/bluetooth/l2cap_core.c | 4 net/core/dev.c | 2 net/core/neighbour.c | 4 net/core/sock.c | 2 net/core/sysctl_net_core.c | 2 net/ethernet/eth.c | 7 net/hsr/hsr_debugfs.c | 16 - net/hsr/hsr_device.c | 26 + net/hsr/hsr_framereg.c | 73 +++-- net/hsr/hsr_framereg.h | 6 net/hsr/hsr_main.c | 2 net/hsr/hsr_main.h | 16 - net/ipv4/tcp.c | 14 - net/ipv4/tcp_bbr.c | 3 net/ipv4/tcp_output.c | 4 net/netfilter/nf_queue.c | 2 net/netfilter/nft_tproxy.c | 4 net/sched/sch_generic.c | 2 net/socket.c | 4 net/sunrpc/cache.c | 6 samples/seccomp/user-trap.c | 4 samples/trace_printk/trace-printk.c | 1 scripts/gcc-plugins/Kconfig | 9 security/apparmor/apparmorfs.c | 2 security/apparmor/domain.c | 82 +++--- security/apparmor/policy.c | 4 sound/core/pcm_native.c | 3 sound/firewire/motu/motu-proc.c | 2 sound/isa/cs423x/cs4236.c | 3 sound/pci/hda/hda_controller.c | 2 sound/pci/hda/hda_intel.c | 17 - sound/pci/hda/patch_realtek.c | 61 +++- sound/pci/ice1712/ice1724.c | 9 sound/usb/card.h | 1 sound/usb/pcm.c | 25 + sound/usb/quirks-table.h | 3 sound/usb/quirks.c | 11 sound/usb/usbaudio.h | 3 tools/perf/util/machine.c | 2 tools/testing/selftests/rseq/param_test.c | 18 - tools/testing/selftests/seccomp/seccomp_bpf.c | 15 + usr/gen_initramfs_list.sh | 2 227 files changed, 1764 insertions(+), 1029 deletions(-) Adrian Hunter (1): perf callchain: Fix segfault in thread__resolve_callchain_sample() Al Viro (1): fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP Alastair D'Silva (1): powerpc: Chunk calls to flush_dcache_range in arch_*_memory Aleksandr Yashkin (1): pstore/ram: Write new dumps to start of recycled zones Alex Deucher (5): drm/amdgpu: add header line for power profile on Arcturus drm/amdgpu/smu: add metrics table lock drm/amdgpu/smu: add metrics table lock for arcturus (v2) drm/amdgpu/smu: add metrics table lock for navi (v2) drm/amdgpu/smu: add metrics table lock for vega20 (v2) Alexander Lobakin (2): MIPS: BPF: eBPF JIT: check for MIPS ISA compliance in Kconfig net, sysctl: Fix compiler warning when only cBPF is present Alexander Shishkin (1): perf/x86/intel/bts: Fix the use of page_private() Amir Goldstein (1): locks: print unsigned ino in /proc/locks Anand Moon (1): arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning Andy Whitcroft (1): PM / hibernate: memory_bm_find_bit(): Tighten node optimisation Ard Biesheuvel (1): efi: Don't attempt to map RCI2 config table if it doesn't exist Arnd Bergmann (5): gcc-plugins: make it possible to disable CONFIG_GCC_PLUGINS again compat_ioctl: block: handle Persistent Reservations compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES drm/msm: include linux/sched/task.h Axel Lin (2): regulator: axp20x: Fix axp20x_set_ramp_delay regulator: bd70528: Remove .set_ramp_delay for bd70528_ldo_ops Ben Skeggs (1): drm/nouveau/kms/nv50-: fix panel scaling Bo Wu (2): scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func Catalin Marinas (1): arm64: Revert support for execute-only user mappings Chanho Min (1): mm/zsmalloc.c: fix the migrated zspage statistics. Chen-Yu Tsai (1): regulator: axp20x: Fix AXP22x ELDO2 regulator enable bitmask Chris Chiu (1): ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC Chris Mason (1): Btrfs: only associate the locked page with one async_chunk struct Chris Wilson (1): drm/i915/execlists: Fix annotation for decoupling virtual request Christian Brauner (1): taskstats: fix data-race Christian Hewitt (2): arm64: dts: meson-gxl-s905x-khadas-vim: fix uart_A bluetooth node arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node Chuhong Yuan (1): RDMA/cma: add missed unregister_pernet_subsys in init failure Colin Ian King (2): ALSA: cs4236: fix error return comparison of an unsigned integer media: flexcop-usb: ensure -EIO is returned on error condition Dan Carpenter (2): scsi: iscsi: qla4xxx: fix double free in probe Bluetooth: delete a stray unlock Daniel Borkmann (1): bpf: Fix precision tracking for unbounded scalars Darrick J. Wong (1): xfs: periodically yield scrub threads to the scheduler David Galiffi (1): drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle David Hildenbrand (1): mm/memory_hotplug: shrink zones when offlining memory David Howells (3): afs: Fix SELinux setting security label on /afs afs: Fix mountpoint parsing afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP Deepa Dinamani (1): fs: cifs: Fix atime update check vs mtime EJ Hsu (1): usb: gadget: fix wrong endpoint desc Eric Dumazet (4): tcp: fix data-race in tcp_recvmsg() net/sched: annotate lockless accesses to qdisc->empty net: add annotations on hh->hh_len lockless accesses net: annotate lockless accesses to sk->sk_pacing_shift Eric Yang (1): drm/amd/display: update dispclk and dppclk vco frequency Filipe Manana (1): Btrfs: fix infinite loop during nocow writeback due to race Florian Fainelli (4): ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys() ata: ahci_brcm: Fix AHCI resources management ata: ahci_brcm: Add missing clock management during recovery ata: ahci_brcm: BCM7425 AHCI requires AHCI_HFLAG_DELAY_ENGINE Frank Rowand (1): of: overlay: add_changeset_property() memory leak Gang He (1): ocfs2: fix the crash due to call ocfs2_get_dlm_debug once less Geert Uytterhoeven (3): iio: adc: max9611: Fix too short conversion time delay dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example phy: renesas: rcar-gen3-usb2: Use platform_get_irq_optional() for optional irq Greg Kroah-Hartman (1): Linux 5.4.9 Guchun Chen (1): drm/amdgpu: add check before enabling/disabling broadcast mode Guoqing Jiang (1): raid5: need to set STRIPE_HANDLE for batch head Hans Verkuil (4): media: pulse8-cec: fix lost cec_transmit_attempt_done() call media: cec: CEC 2.0-only bcast messages were ignored media: cec: avoid decrementing transmit_queue_sz if it is 0 media: cec: check 'transmit_in_progress', not 'transmitting' Hans de Goede (2): drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit drm/nouveau: Fix drm-core using atomic code-paths on pre-nv50 hardware Heiko Carstens (1): s390/smp: fix physical to logical CPU map for SMT Hui Wang (1): ALSA: usb-audio: set the interface format after resume on Dell WD19 Ilya Dryomov (1): mm/oom: fix pgtables units mismatch in Killed process message Ilya Leoshkevich (1): mm/sparse.c: mark populate_section_memmap as __meminit James Smart (3): nvme_fc: add module to ops template to allow module references nvme-fc: fix double-free scenarios on hw queues scsi: lpfc: Fix rpi release when deleting vport Jaroslav Kysela (1): ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen Jason Yan (1): scsi: libsas: stop discovering if oob mode is disconnected Jeffrey Hugo (1): arm64: dts: qcom: msm8998-clamshell: Remove retention idle state Jens Axboe (2): net: make socket read/write_iter() honor IOCB_NOWAIT io_uring: use current task creds instead of allocating a new one Johan Hovold (1): ALSA: usb-audio: fix set_format altsetting sanity check Johannes Weiner (1): mm: drop mmap_sem before calling balance_dirty_pages() in write fault John Johansen (1): apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock Juergen Gross (1): xen/balloon: fix ballooned page accounting without hotplug enabled Julien Grall (1): lib/ubsan: don't serialize UBSAN report Kai-Heng Feng (3): PCI: Add a helper to check Power Resource Requirements _PR3 existence ALSA: hda: Allow HDA to be runtime suspended when dGPU is not bound to a driver HID: i2c-hid: Reset ALPS touchpads on resume Kailang Yang (2): ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker ALSA: hda/realtek - Add headset Mic no shutup for ALC283 Kay Friedrich (1): staging/wlan-ng: add CRC32 dependency in Kconfig Kees Cook (1): pstore/ram: Fix error-path memory leak in persistent_ram_new() callers Keita Suzuki (1): tracing: Avoid memory leak in process_system_preds() Keith Busch (2): nvme/pci: Fix write and poll queue types nvme/pci: Fix read queue count Kirill A. Shutemov (1): shmem: pin the file in shmem_fault() if mmap_sem is dropped Konstantin Khorenko (1): kernel/module.c: wakeup processes in module_wq on module unload Kunihiko Hayashi (1): spi: uniphier: Fix FIFO threshold Leo (Hanghong) Ma (1): drm/amd/display: Change the delay time before enabling FEC Leo Yan (1): tty: serial: msm_serial: Fix lockup for sysrq and oops Leonard Crestez (4): PM / devfreq: Fix devfreq_notifier_call returning errno PM / devfreq: Set scaling_max_freq to max on OPP notifier error PM / devfreq: Don't fail devfreq_dev_release if not in list PM / devfreq: Check NULL governor in available_governors_show Lu Baolu (1): iommu/vt-d: Remove incorrect PSI capability check Lukas Wunner (1): dmaengine: Fix access to uninitialized dma_slave_caps Maor Gottlieb (1): IB/mlx5: Fix steering rule of drop and count Marc Dionne (1): afs: Fix afs_find_server lookups for ipv4 peers Marco Oliverio (1): netfilter: nf_queue: enqueue skbs with NULL dst Mark Zhang (1): RDMA/counter: Prevent auto-binding a QP which are not tracked with res Masahiro Yamada (1): gen_initramfs_list.sh: fix 'bad variable name' error Masashi Honma (2): ath9k_htc: Modify byte order for an error message ath9k_htc: Discard undersized packets Mathieu Desnoyers (1): rseq/selftests: Fix: Namespace gettid() for compatibility with glibc 2.30 Max Filippov (1): gpio: xtensa: fix driver build Michael Ellerman (1): powerpc/mm: Mark get_slice_psize() & slice_addr_is_low() as notrace Michael Haener (1): platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table Ming Lei (1): block: add bio_truncate to fix guard_bio_eod Navid Emamdoost (3): mm/gup: fix memory leak in __gup_benchmark_ioctl Bluetooth: Fix memory leak in hci_connect_le_scan media: usb: fix memory leak in af9005_identify_state Nikola Cornij (2): drm/amd/display: Map DSC resources 1-to-1 if numbers of OPPs and DSCs are equal drm/amd/display: Reset steer fifo before unblanking the stream Oliver Neukum (1): Bluetooth: btusb: fix PM leak in error case of setup Omar Sandoval (2): xfs: don't check for AG deadlock for realtime files in bunmapi btrfs: get rid of unique workqueue helper functions Parav Pandit (1): IB/mlx4: Follow mirror sequence of device add during device removal Paul Burton (2): MIPS: BPF: Disable MIPS32 eBPF JIT MIPS: Avoid VDSO ABI breakage due to global register variable Paul Cercueil (1): dmaengine: dma-jz4780: Also break descriptor chains on JZ4725B Paul Durrant (1): xen-blkback: prevent premature module unload Paulo Alcantara (SUSE) (2): cifs: Fix potential softlockups while refreshing DFS cache cifs: Fix lookup of root ses in DFS referral cache Pavel Tikhomirov (1): sunrpc: fix crash when cache_head become valid before update Peter Ujfalusi (1): dmaengine: virt-dma: Fix access after free in vchan_complete() Phil Sutter (1): netfilter: nft_tproxy: Fix port selector on Big Endian Pierre-Eric Pelloux-Prayer (1): drm/amdgpu: add cache flush workaround to gfx8 emit_fence Prateek Sood (1): tracing: Fix lock inversion in trace_event_enable_tgid_record() Quinn Tran (1): scsi: qla2xxx: Use explicit LOGO in target mode Roman Bolshakov (7): scsi: qla2xxx: Drop superfluous INIT_WORK of del_work scsi: qla2xxx: Don't call qlt_async_event twice scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length scsi: qla2xxx: Configure local loop for N2N target scsi: qla2xxx: Send Notify ACK after N2N PLOGI scsi: qla2xxx: Don't defer relogin unconditonally scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI Russell King (1): gpiolib: fix up emulated open drain outputs Sargun Dhillon (4): selftests/seccomp: Zero out seccomp_notif seccomp: Check that seccomp_notif is zeroed out by the user samples/seccomp: Zero out members based on seccomp_notif_sizes selftests/seccomp: Catch garbage on SECCOMP_IOCTL_NOTIF_RECV Sascha Hauer (1): libata: Fix retrieving of active qcs Scott Mayhew (1): nfsd4: fix up replay_matches_cache() SeongJae Park (1): xen/blkback: Avoid unmapping unmapped grant pages Shakeel Butt (1): memcg: account security cred as well to kmemcg Stefan Mavrodiev (1): drm/sun4i: hdmi: Remove duplicate cleanup calls Stephan Gerhold (2): drm/mcde: dsi: Fix invalid pointer dereference if panel cannot be found regulator: ab8500: Remove AB8505 USB regulator Steve Wise (1): rxe: correctly calculate iCRC for unaligned payloads Steven Rostedt (VMware) (1): tracing: Have the histogram compare functions convert to u64 first Sven Schnelle (2): tracing: Fix endianness bug in histogram trigger samples/trace_printk: Wait for IRQ work to finish Taehee Yoo (3): hsr: avoid debugfs warning message when module is remove hsr: fix error handling routine in hsr_dev_finalize() hsr: fix a race condition in node list insertion and deletion Takashi Iwai (6): PCI: Fix missing inline for pci_pr3_present() ALSA: hda - Downgrade error message for single-cmd fallback ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code ALSA: hda - Apply sync-write workaround to old Intel platforms, too ALSA: pcm: Yet another missing check of non-cached buffer type ALSA: firewire-motu: Correct a typo in the clock proc string Thomas Richter (2): s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits s390/cpum_sf: Avoid SBD overflow condition in irq handler Vladimir Oltean (1): spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode Waiman Long (1): mm/hugetlb: defer freeing of huge pages if in non-task context Wen Yang (2): ftrace: Avoid potential division by zero in function profiler firmware: arm_scmi: Avoid double free in error flow Yang Shi (1): mm: move_pages: return valid node id in status if the page is already on the target node YueHaibing (2): iio: st_accel: Fix unused variable warning watchdog: tqmx86_wdt: Fix build error Yunfeng Ye (1): ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 Zhihao Cheng (1): ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps Zhiqiang Liu (1): md: raid1: check rdev before reference in raid1_sync_request func Zong Li (2): clocksource: riscv: add notrace to riscv_sched_clock riscv: ftrace: correct the condition logic in function graph tracer chenqiwu (1): exit: panic before exit_mm() on global init exit

5 years, 10 months

1
1
0 0

Linux 4.19.94

by Greg KH

I'm announcing the release of the 4.19.94 kernel. All users of the 4.19 kernel series must upgrade. The updated 4.19.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/kernel-parameters.txt | 2 Documentation/devicetree/bindings/clock/renesas,rcar-usb2-clock-sel.txt | 2 Makefile | 2 arch/arm64/boot/dts/amlogic/meson-gxbb-odroidc2.dts | 4 arch/arm64/include/asm/pgtable-prot.h | 5 arch/arm64/include/asm/pgtable.h | 10 arch/arm64/mm/fault.c | 2 arch/mips/include/asm/thread_info.h | 20 arch/powerpc/include/asm/kvm_ppc.h | 100 +++ arch/powerpc/kernel/dbell.c | 6 arch/powerpc/kvm/book3s_hv_rm_xics.c | 2 arch/powerpc/platforms/powernv/smp.c | 2 arch/powerpc/platforms/pseries/hvconsole.c | 2 arch/powerpc/sysdev/xics/icp-native.c | 6 arch/powerpc/sysdev/xics/icp-opal.c | 6 arch/riscv/kernel/ftrace.c | 2 arch/s390/kernel/perf_cpum_sf.c | 22 arch/s390/kernel/smp.c | 80 +- arch/x86/events/intel/bts.c | 16 block/compat_ioctl.c | 11 drivers/acpi/sysfs.c | 6 drivers/ata/ahci_brcm.c | 140 +++-- drivers/ata/libahci_platform.c | 6 drivers/ata/libata-core.c | 24 drivers/ata/sata_fsl.c | 2 drivers/ata/sata_mv.c | 2 drivers/ata/sata_nv.c | 2 drivers/block/xen-blkback/blkback.c | 2 drivers/block/xen-blkback/xenbus.c | 10 drivers/bluetooth/btusb.c | 3 drivers/devfreq/devfreq.c | 30 - drivers/firewire/net.c | 6 drivers/gpio/gpiolib.c | 8 drivers/gpu/drm/amd/amdgpu/df_v3_6.c | 38 - drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 22 drivers/gpu/drm/amd/display/dc/core/dc_link.c | 2 drivers/gpu/drm/drm_dp_mst_topology.c | 6 drivers/gpu/drm/drm_property.c | 2 drivers/gpu/drm/msm/msm_gpu.c | 1 drivers/gpu/drm/nouveau/nouveau_connector.h | 110 ++-- drivers/gpu/drm/sun4i/sun4i_hdmi_enc.c | 2 drivers/hid/i2c-hid/i2c-hid-core.c | 12 drivers/iio/adc/max9611.c | 16 drivers/infiniband/core/cma.c | 1 drivers/infiniband/hw/mlx4/main.c | 9 drivers/infiniband/hw/mlx5/main.c | 13 drivers/infiniband/sw/rxe/rxe_recv.c | 2 drivers/infiniband/sw/rxe/rxe_req.c | 6 drivers/infiniband/sw/rxe/rxe_resp.c | 7 drivers/md/raid1.c | 2 drivers/media/cec/cec-adap.c | 40 - drivers/media/usb/b2c2/flexcop-usb.c | 2 drivers/media/usb/dvb-usb/af9005.c | 5 drivers/media/usb/pulse8-cec/pulse8-cec.c | 17 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 23 drivers/nvme/host/fc.c | 32 - drivers/nvme/target/fcloop.c | 1 drivers/platform/x86/pmc_atom.c | 8 drivers/regulator/ab8500.c | 17 drivers/scsi/libsas/sas_discover.c | 11 drivers/scsi/lpfc/lpfc_bsg.c | 15 drivers/scsi/lpfc/lpfc_nvme.c | 2 drivers/scsi/qedf/qedf_els.c | 16 drivers/scsi/qla2xxx/qla_init.c | 10 drivers/scsi/qla2xxx/qla_iocb.c | 6 drivers/scsi/qla2xxx/qla_isr.c | 4 drivers/scsi/qla2xxx/qla_mbx.c | 3 drivers/scsi/qla2xxx/qla_nvme.c | 1 drivers/scsi/qla2xxx/qla_target.c | 2 drivers/scsi/qla4xxx/ql4_os.c | 1 drivers/tty/hvc/hvc_vio.c | 16 drivers/tty/serial/msm_serial.c | 13 drivers/usb/gadget/function/f_ecm.c | 6 drivers/usb/gadget/function/f_rndis.c | 1 drivers/xen/balloon.c | 3 fs/afs/dynroot.c | 3 fs/afs/server.c | 21 fs/afs/super.c | 1 fs/block_dev.c | 37 - fs/compat_ioctl.c | 3 fs/locks.c | 2 fs/nfsd/nfs4state.c | 15 fs/pstore/ram.c | 11 fs/ubifs/tnc_commit.c | 34 - fs/xfs/libxfs/xfs_bmap.c | 2 fs/xfs/scrub/common.h | 9 fs/xfs/xfs_log.c | 2 include/linux/ahci_platform.h | 2 include/linux/dmaengine.h | 5 include/linux/libata.h | 1 include/linux/netdevice.h | 4 include/linux/nvme-fc-driver.h | 4 include/linux/regulator/ab8500.h | 1 include/net/neighbour.h | 2 kernel/cred.c | 6 kernel/exit.c | 12 kernel/power/snapshot.c | 9 kernel/taskstats.c | 30 - kernel/trace/ftrace.c | 6 kernel/trace/trace.c | 8 kernel/trace/trace_events.c | 8 kernel/trace/trace_events_filter.c | 2 kernel/trace/trace_events_hist.c | 21 kernel/trace/tracing_map.c | 4 mm/migrate.c | 23 mm/mmap.c | 6 mm/zsmalloc.c | 5 net/bluetooth/hci_conn.c | 4 net/bluetooth/l2cap_core.c | 4 net/core/dev.c | 272 ++++++++-- net/core/neighbour.c | 4 net/ethernet/eth.c | 7 net/ipv4/tcp.c | 4 net/ipv4/tcp_diag.c | 2 net/ipv4/tcp_input.c | 6 net/ipv4/tcp_ipv4.c | 3 net/ipv4/tcp_minisocks.c | 7 net/ipv6/tcp_ipv6.c | 3 net/netfilter/nft_tproxy.c | 4 net/rxrpc/peer_event.c | 3 net/socket.c | 4 security/apparmor/apparmorfs.c | 2 security/apparmor/domain.c | 82 +-- security/apparmor/policy.c | 4 sound/firewire/motu/motu-proc.c | 2 sound/isa/cs423x/cs4236.c | 3 sound/pci/hda/patch_realtek.c | 61 +- sound/pci/ice1712/ice1724.c | 9 sound/usb/card.h | 1 sound/usb/pcm.c | 25 sound/usb/quirks-table.h | 3 sound/usb/quirks.c | 11 sound/usb/usbaudio.h | 3 tools/testing/selftests/net/rtnetlink.sh | 21 tools/testing/selftests/rseq/param_test.c | 18 135 files changed, 1368 insertions(+), 552 deletions(-) Al Viro (1): fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP Aleksandr Yashkin (1): pstore/ram: Write new dumps to start of recycled zones Alexander Shishkin (1): perf/x86/intel/bts: Fix the use of page_private() Amir Goldstein (1): locks: print unsigned ino in /proc/locks Anand Moon (1): arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning Andy Whitcroft (1): PM / hibernate: memory_bm_find_bit(): Tighten node optimisation Arnd Bergmann (3): compat_ioctl: block: handle Persistent Reservations compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE drm/msm: include linux/sched/task.h Bo Wu (1): scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func Brian Foster (1): xfs: fix mount failure crash on invalid iclog memory access Catalin Marinas (1): arm64: Revert support for execute-only user mappings Chad Dupuis (1): scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails Chanho Min (1): mm/zsmalloc.c: fix the migrated zspage statistics. Chris Chiu (1): ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC Christian Brauner (1): taskstats: fix data-race Chuhong Yuan (1): RDMA/cma: add missed unregister_pernet_subsys in init failure Colin Ian King (2): ALSA: cs4236: fix error return comparison of an unsigned integer media: flexcop-usb: ensure -EIO is returned on error condition Dan Carpenter (2): scsi: iscsi: qla4xxx: fix double free in probe Bluetooth: delete a stray unlock Daniel Axtens (1): powerpc/pseries/hvconsole: Fix stack overread via udbg Daniel Vetter (1): drm: limit to INT_MAX in create_blob ioctl Darrick J. Wong (1): xfs: periodically yield scrub threads to the scheduler David Galiffi (1): drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle David Howells (3): afs: Fix SELinux setting security label on /afs afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP rxrpc: Fix possible NULL pointer access in ICMP handling EJ Hsu (1): usb: gadget: fix wrong endpoint desc Eric Dumazet (2): tcp: annotate tp->rcv_nxt lockless reads net: add annotations on hh->hh_len lockless accesses Florian Fainelli (5): ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys() ata: ahci_brcm: Fix AHCI resources management ata: ahci_brcm: Allow optional reset controller to be used ata: ahci_brcm: Add missing clock management during recovery ata: ahci_brcm: BCM7425 AHCI requires AHCI_HFLAG_DELAY_ENGINE Florian Westphal (1): selftests: rtnetlink: add addresses with fixed life time Geert Uytterhoeven (2): iio: adc: max9611: Fix too short conversion time delay dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example Greg Kroah-Hartman (1): Linux 4.19.94 Guchun Chen (1): drm/amdgpu: add check before enabling/disabling broadcast mode Hans Verkuil (4): media: pulse8-cec: fix lost cec_transmit_attempt_done() call media: cec: CEC 2.0-only bcast messages were ignored media: cec: avoid decrementing transmit_queue_sz if it is 0 media: cec: check 'transmit_in_progress', not 'transmitting' Hans de Goede (1): drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit Heiko Carstens (1): s390/smp: fix physical to logical CPU map for SMT Hui Wang (1): ALSA: usb-audio: set the interface format after resume on Dell WD19 Imre Deak (1): drm/mst: Fix MST sideband up-reply failure handling James Smart (2): nvme_fc: add module to ops template to allow module references nvme-fc: fix double-free scenarios on hw queues Jan Kara (2): bdev: Factor out bdev revalidation into a common helper bdev: Refresh bdev size for disks without partitioning Jaroslav Kysela (1): ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen Jason Yan (1): scsi: libsas: stop discovering if oob mode is disconnected Jens Axboe (1): net: make socket read/write_iter() honor IOCB_NOWAIT Johan Hovold (1): ALSA: usb-audio: fix set_format altsetting sanity check John Johansen (1): apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock Juergen Gross (1): xen/balloon: fix ballooned page accounting without hotplug enabled Kai-Heng Feng (1): HID: i2c-hid: Reset ALPS touchpads on resume Kailang Yang (2): ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker ALSA: hda/realtek - Add headset Mic no shutup for ALC283 Keita Suzuki (1): tracing: Avoid memory leak in process_system_preds() Leo Yan (1): tty: serial: msm_serial: Fix lockup for sysrq and oops Leonard Crestez (4): PM / devfreq: Fix devfreq_notifier_call returning errno PM / devfreq: Set scaling_max_freq to max on OPP notifier error PM / devfreq: Don't fail devfreq_dev_release if not in list PM / devfreq: Check NULL governor in available_governors_show Lukas Wunner (1): dmaengine: Fix access to uninitialized dma_slave_caps Maor Gottlieb (1): IB/mlx5: Fix steering rule of drop and count Marc Dionne (1): afs: Fix afs_find_server lookups for ipv4 peers Masashi Honma (2): ath9k_htc: Modify byte order for an error message ath9k_htc: Discard undersized packets Mathieu Desnoyers (1): rseq/selftests: Fix: Namespace gettid() for compatibility with glibc 2.30 Michael Haener (1): platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table Michael Roth (1): KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag Navid Emamdoost (2): Bluetooth: Fix memory leak in hci_connect_le_scan media: usb: fix memory leak in af9005_identify_state Oliver Neukum (1): Bluetooth: btusb: fix PM leak in error case of setup Omar Sandoval (1): xfs: don't check for AG deadlock for realtime files in bunmapi Parav Pandit (1): IB/mlx4: Follow mirror sequence of device add during device removal Paul Burton (1): MIPS: Avoid VDSO ABI breakage due to global register variable Paul Durrant (1): xen-blkback: prevent premature module unload Phil Sutter (1): netfilter: nft_tproxy: Fix port selector on Big Endian Pierre-Eric Pelloux-Prayer (1): drm/amdgpu: add cache flush workaround to gfx8 emit_fence Prateek Sood (1): tracing: Fix lock inversion in trace_event_enable_tgid_record() Roman Bolshakov (6): scsi: qla2xxx: Drop superfluous INIT_WORK of del_work scsi: qla2xxx: Don't call qlt_async_event twice scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length scsi: qla2xxx: Configure local loop for N2N target scsi: qla2xxx: Send Notify ACK after N2N PLOGI scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI Russell King (1): gpiolib: fix up emulated open drain outputs Sascha Hauer (1): libata: Fix retrieving of active qcs Scott Mayhew (1): nfsd4: fix up replay_matches_cache() SeongJae Park (1): xen/blkback: Avoid unmapping unmapped grant pages Shakeel Butt (1): memcg: account security cred as well to kmemcg Stefan Mavrodiev (1): drm/sun4i: hdmi: Remove duplicate cleanup calls Stephan Gerhold (1): regulator: ab8500: Remove AB8505 USB regulator Steve Wise (1): rxe: correctly calculate iCRC for unaligned payloads Steven Rostedt (VMware) (1): tracing: Have the histogram compare functions convert to u64 first Sven Schnelle (1): tracing: Fix endianness bug in histogram trigger Taehee Yoo (1): net: core: limit nested device depth Takashi Iwai (2): ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code ALSA: firewire-motu: Correct a typo in the clock proc string Thomas Richter (2): s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits s390/cpum_sf: Avoid SBD overflow condition in irq handler Wen Yang (1): ftrace: Avoid potential division by zero in function profiler Yang Shi (1): mm: move_pages: return valid node id in status if the page is already on the target node Yunfeng Ye (1): ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 Zhihao Cheng (1): ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps Zhiqiang Liu (1): md: raid1: check rdev before reference in raid1_sync_request func Zong Li (1): riscv: ftrace: correct the condition logic in function graph tracer chenqiwu (1): exit: panic before exit_mm() on global init exit

5 years, 10 months

1
1
0 0

Linux 4.14.163

by Greg KH

I'm announcing the release of the 4.14.163 kernel. All users of the 4.14 kernel series must upgrade. The updated 4.14.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.14.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/clock/renesas,rcar-usb2-clock-sel.txt | 2 Makefile | 2 arch/arm64/boot/dts/amlogic/meson-gxbb-odroidc2.dts | 4 arch/arm64/include/asm/pgtable-prot.h | 5 arch/arm64/include/asm/pgtable.h | 10 arch/arm64/mm/fault.c | 2 arch/mips/include/asm/thread_info.h | 20 + arch/powerpc/platforms/pseries/hvconsole.c | 2 arch/s390/kernel/perf_cpum_sf.c | 22 + arch/s390/kernel/smp.c | 80 ++++--- arch/x86/events/intel/bts.c | 16 - block/compat_ioctl.c | 11 drivers/ata/ahci_brcm.c | 112 +++++++--- drivers/ata/libahci_platform.c | 6 drivers/block/xen-blkback/blkback.c | 2 drivers/block/xen-blkback/xenbus.c | 10 drivers/bluetooth/btusb.c | 3 drivers/devfreq/devfreq.c | 8 drivers/firewire/net.c | 6 drivers/gpio/gpiolib.c | 8 drivers/gpu/drm/drm_dp_mst_topology.c | 6 drivers/gpu/drm/drm_property.c | 2 drivers/gpu/drm/nouveau/nouveau_connector.h | 110 ++++----- drivers/gpu/drm/sun4i/sun4i_hdmi_enc.c | 2 drivers/iio/adc/max9611.c | 16 - drivers/infiniband/core/cma.c | 1 drivers/infiniband/hw/mlx4/main.c | 9 drivers/infiniband/sw/rxe/rxe_recv.c | 2 drivers/infiniband/sw/rxe/rxe_req.c | 6 drivers/infiniband/sw/rxe/rxe_resp.c | 7 drivers/md/raid1.c | 2 drivers/media/cec/cec-adap.c | 20 + drivers/media/usb/b2c2/flexcop-usb.c | 2 drivers/media/usb/dvb-usb/af9005.c | 5 drivers/media/usb/pulse8-cec/pulse8-cec.c | 17 + drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 23 +- drivers/nvme/host/fc.c | 14 + drivers/nvme/target/fcloop.c | 1 drivers/platform/x86/pmc_atom.c | 8 drivers/regulator/ab8500.c | 17 - drivers/scsi/libsas/sas_discover.c | 11 drivers/scsi/lpfc/lpfc_bsg.c | 15 - drivers/scsi/lpfc/lpfc_nvme.c | 2 drivers/scsi/qedf/qedf_els.c | 16 - drivers/scsi/qla2xxx/qla_isr.c | 4 drivers/scsi/qla2xxx/qla_nvme.c | 1 drivers/scsi/qla2xxx/qla_target.c | 1 drivers/scsi/qla4xxx/ql4_os.c | 1 drivers/tty/hvc/hvc_vio.c | 16 + drivers/tty/serial/msm_serial.c | 13 - drivers/usb/gadget/function/f_ecm.c | 6 drivers/usb/gadget/function/f_rndis.c | 1 drivers/xen/balloon.c | 3 fs/compat_ioctl.c | 3 fs/locks.c | 2 fs/nfsd/nfs4state.c | 15 - fs/pstore/ram.c | 11 fs/xfs/libxfs/xfs_bmap.c | 2 fs/xfs/xfs_log.c | 2 include/linux/ahci_platform.h | 2 include/linux/dmaengine.h | 5 include/linux/nvme-fc-driver.h | 4 include/linux/regulator/ab8500.h | 1 include/net/neighbour.h | 2 kernel/cred.c | 6 kernel/exit.c | 12 - kernel/power/snapshot.c | 9 kernel/taskstats.c | 30 +- kernel/trace/ftrace.c | 6 kernel/trace/trace.c | 8 kernel/trace/trace_events.c | 8 kernel/trace/tracing_map.c | 4 mm/mmap.c | 6 mm/zsmalloc.c | 5 net/bluetooth/hci_conn.c | 4 net/bluetooth/l2cap_core.c | 4 net/core/neighbour.c | 4 net/ethernet/eth.c | 7 net/rxrpc/peer_event.c | 3 net/socket.c | 4 sound/firewire/motu/motu-proc.c | 2 sound/isa/cs423x/cs4236.c | 3 sound/pci/ice1712/ice1724.c | 9 tools/testing/selftests/net/rtnetlink.sh | 21 + 84 files changed, 607 insertions(+), 288 deletions(-) Al Viro (1): fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP Aleksandr Yashkin (1): pstore/ram: Write new dumps to start of recycled zones Alexander Shishkin (1): perf/x86/intel/bts: Fix the use of page_private() Amir Goldstein (1): locks: print unsigned ino in /proc/locks Anand Moon (1): arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning Andy Whitcroft (1): PM / hibernate: memory_bm_find_bit(): Tighten node optimisation Arnd Bergmann (2): compat_ioctl: block: handle Persistent Reservations compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE Bo Wu (1): scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func Brian Foster (1): xfs: fix mount failure crash on invalid iclog memory access Catalin Marinas (1): arm64: Revert support for execute-only user mappings Chad Dupuis (1): scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails Chanho Min (1): mm/zsmalloc.c: fix the migrated zspage statistics. Christian Brauner (1): taskstats: fix data-race Chuhong Yuan (1): RDMA/cma: add missed unregister_pernet_subsys in init failure Colin Ian King (2): ALSA: cs4236: fix error return comparison of an unsigned integer media: flexcop-usb: ensure -EIO is returned on error condition Dan Carpenter (2): scsi: iscsi: qla4xxx: fix double free in probe Bluetooth: delete a stray unlock Daniel Axtens (1): powerpc/pseries/hvconsole: Fix stack overread via udbg Daniel Vetter (1): drm: limit to INT_MAX in create_blob ioctl David Howells (1): rxrpc: Fix possible NULL pointer access in ICMP handling EJ Hsu (1): usb: gadget: fix wrong endpoint desc Eric Dumazet (1): net: add annotations on hh->hh_len lockless accesses Florian Fainelli (3): ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys() ata: ahci_brcm: Allow optional reset controller to be used ata: ahci_brcm: Fix AHCI resources management Florian Westphal (1): selftests: rtnetlink: add addresses with fixed life time Geert Uytterhoeven (2): iio: adc: max9611: Fix too short conversion time delay dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example Greg Kroah-Hartman (1): Linux 4.14.163 Hans Verkuil (3): media: pulse8-cec: fix lost cec_transmit_attempt_done() call media: cec: CEC 2.0-only bcast messages were ignored media: cec: avoid decrementing transmit_queue_sz if it is 0 Hans de Goede (1): drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit Heiko Carstens (1): s390/smp: fix physical to logical CPU map for SMT Imre Deak (1): drm/mst: Fix MST sideband up-reply failure handling James Smart (1): nvme_fc: add module to ops template to allow module references Jason Yan (1): scsi: libsas: stop discovering if oob mode is disconnected Jens Axboe (1): net: make socket read/write_iter() honor IOCB_NOWAIT Juergen Gross (1): xen/balloon: fix ballooned page accounting without hotplug enabled Leo Yan (1): tty: serial: msm_serial: Fix lockup for sysrq and oops Leonard Crestez (2): PM / devfreq: Don't fail devfreq_dev_release if not in list PM / devfreq: Check NULL governor in available_governors_show Lukas Wunner (1): dmaengine: Fix access to uninitialized dma_slave_caps Masashi Honma (2): ath9k_htc: Modify byte order for an error message ath9k_htc: Discard undersized packets Michael Haener (1): platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table Navid Emamdoost (2): Bluetooth: Fix memory leak in hci_connect_le_scan media: usb: fix memory leak in af9005_identify_state Oliver Neukum (1): Bluetooth: btusb: fix PM leak in error case of setup Omar Sandoval (1): xfs: don't check for AG deadlock for realtime files in bunmapi Parav Pandit (1): IB/mlx4: Follow mirror sequence of device add during device removal Paul Burton (1): MIPS: Avoid VDSO ABI breakage due to global register variable Paul Durrant (1): xen-blkback: prevent premature module unload Prateek Sood (1): tracing: Fix lock inversion in trace_event_enable_tgid_record() Roman Bolshakov (2): scsi: qla2xxx: Don't call qlt_async_event twice scsi: qla2xxx: Drop superfluous INIT_WORK of del_work Russell King (1): gpiolib: fix up emulated open drain outputs Scott Mayhew (1): nfsd4: fix up replay_matches_cache() SeongJae Park (1): xen/blkback: Avoid unmapping unmapped grant pages Shakeel Butt (1): memcg: account security cred as well to kmemcg Stefan Mavrodiev (1): drm/sun4i: hdmi: Remove duplicate cleanup calls Stephan Gerhold (1): regulator: ab8500: Remove AB8505 USB regulator Steve Wise (1): rxe: correctly calculate iCRC for unaligned payloads Steven Rostedt (VMware) (1): tracing: Have the histogram compare functions convert to u64 first Takashi Iwai (2): ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code ALSA: firewire-motu: Correct a typo in the clock proc string Thomas Richter (2): s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits s390/cpum_sf: Avoid SBD overflow condition in irq handler Wen Yang (1): ftrace: Avoid potential division by zero in function profiler Zhiqiang Liu (1): md: raid1: check rdev before reference in raid1_sync_request func chenqiwu (1): exit: panic before exit_mm() on global init exit

5 years, 10 months

1
1
0 0

+ mm-thp-grab-the-lock-before-manipulation-defer-list.patch added to -mm tree

by akpm＠linux-foundation.org

The patch titled Subject: mm: thp: grab the lock before manipulation defer list has been added to the -mm tree. Its filename is mm-thp-grab-the-lock-before-manipulation-defer-list.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/mm-thp-grab-the-lock-before-manipu… and later at http://ozlabs.org/~akpm/mmotm/broken-out/mm-thp-grab-the-lock-before-manipu… Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: Wei Yang <richardw.yang(a)linux.intel.com> Subject: mm: thp: grab the lock before manipulation defer list As in all the other places, we grab the lock before manipulating the defer list. Current implementation may face a race condition. For example, the potential race would be: CPU1 CPU2 mem_cgroup_move_account split_huge_page_to_list !list_empty lock !list_empty list_del unlock lock # !list_empty might not hold anymore list_del_init unlock When this sequence happens, the list_del_init() in mem_cgroup_move_account() would crash if CONFIG_DEBUG_LIST since the page is already been removed by list_del in split_huge_page_to_list(). Link: http://lkml.kernel.org/r/20200109143054.13203-1-richardw.yang@linux.intel.c… Fixes: 87eaceb3faa5 ("mm: thp: make deferred split shrinker memcg aware") Signed-off-by: Wei Yang <richardw.yang(a)linux.intel.com> Acked-by: David Rientjes <rientjes(a)google.com> Acked-by: Michal Hocko <mhocko(a)suse.com> Cc: Johannes Weiner <hannes(a)cmpxchg.org> Cc: Vladimir Davydov <vdavydov.dev(a)gmail.com> Cc: <stable(a)vger.kernel.org> [5.4+] Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/memcontrol.c | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) --- a/mm/memcontrol.c~mm-thp-grab-the-lock-before-manipulation-defer-list +++ a/mm/memcontrol.c @@ -5341,10 +5341,12 @@ static int mem_cgroup_move_account(struc } #ifdef CONFIG_TRANSPARENT_HUGEPAGE - if (compound && !list_empty(page_deferred_list(page))) { + if (compound) { spin_lock(&from->deferred_split_queue.split_queue_lock); - list_del_init(page_deferred_list(page)); - from->deferred_split_queue.split_queue_len--; + if (!list_empty(page_deferred_list(page))) { + list_del_init(page_deferred_list(page)); + from->deferred_split_queue.split_queue_len--; + } spin_unlock(&from->deferred_split_queue.split_queue_lock); } #endif @@ -5358,11 +5360,13 @@ static int mem_cgroup_move_account(struc page->mem_cgroup = to; #ifdef CONFIG_TRANSPARENT_HUGEPAGE - if (compound && list_empty(page_deferred_list(page))) { + if (compound) { spin_lock(&to->deferred_split_queue.split_queue_lock); - list_add_tail(page_deferred_list(page), - &to->deferred_split_queue.split_queue); - to->deferred_split_queue.split_queue_len++; + if (list_empty(page_deferred_list(page))) { + list_add_tail(page_deferred_list(page), + &to->deferred_split_queue.split_queue); + to->deferred_split_queue.split_queue_len++; + } spin_unlock(&to->deferred_split_queue.split_queue_lock); } #endif _ Patches currently in -mm which might be from richardw.yang(a)linux.intel.com are mm-thp-grab-the-lock-before-manipulation-defer-list.patch mm-remove-dead-code-totalram_pages_set.patch

5 years, 10 months

1
0
0 0

+ arm-dma-api-fix-max_pfn-off-by-one-error-in-__dma_supported.patch added to -mm tree

by akpm＠linux-foundation.org

The patch titled Subject: ARM: dma-api: fix max_pfn off-by-one error in __dma_supported() has been added to the -mm tree. Its filename is arm-dma-api-fix-max_pfn-off-by-one-error-in-__dma_supported.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/arm-dma-api-fix-max_pfn-off-by-one… and later at http://ozlabs.org/~akpm/mmotm/broken-out/arm-dma-api-fix-max_pfn-off-by-one… Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: Chen-Yu Tsai <wens(a)csie.org> Subject: ARM: dma-api: fix max_pfn off-by-one error in __dma_supported() max_pfn, as set in arch/arm/mm/init.c: static void __init find_limits(unsigned long *min, unsigned long *max_low, unsigned long *max_high) { *max_low = PFN_DOWN(memblock_get_current_limit()); *min = PFN_UP(memblock_start_of_DRAM()); *max_high = PFN_DOWN(memblock_end_of_DRAM()); } with memblock_end_of_DRAM() pointing to the next byte after DRAM. As such, max_pfn points to the PFN after the end of DRAM. Thus when using max_pfn to check DMA masks, we should subtract one when checking DMA ranges against it. Commit 8bf1268f48ad ("ARM: dma-api: fix off-by-one error in __dma_supported()") fixed the same issue, but missed this spot. This issue was found while working on the sun4i-csi v4l2 driver on the Allwinner R40 SoC. On Allwinner SoCs, DRAM is offset at 0x40000000, and we are starting to use of_dma_configure() with the "dma-ranges" property in the device tree to have the DMA API handle the offset. In this particular instance, dma-ranges was set to the same range as the actual available (2 GiB) DRAM. The following error appeared when the driver attempted to allocate a buffer: sun4i-csi 1c09000.csi: Coherent DMA mask 0x7fffffff (pfn 0x40000-0xc0000) covers a smaller range of system memory than the DMA zone pfn 0x0-0xc0001 sun4i-csi 1c09000.csi: dma_alloc_coherent of size 307200 failed Fixing the off-by-one error makes things work. Link: http://lkml.kernel.org/r/20191224030239.5656-1-wens@kernel.org Fixes: 11a5aa32562e ("ARM: dma-mapping: check DMA mask against available memory") Fixes: 9f28cde0bc64 ("ARM: another fix for the DMA mapping checks") Fixes: ab746573c405 ("ARM: dma-mapping: allow larger DMA mask than supported") Signed-off-by: Chen-Yu Tsai <wens(a)csie.org> Reviewed-by: Christoph Hellwig <hch(a)lst.de> Cc: Russell King <linux(a)armlinux.org.uk> Cc: Robin Murphy <robin.murphy(a)arm.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- arch/arm/mm/dma-mapping.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/arm/mm/dma-mapping.c~arm-dma-api-fix-max_pfn-off-by-one-error-in-__dma_supported +++ a/arch/arm/mm/dma-mapping.c @@ -221,7 +221,7 @@ EXPORT_SYMBOL(arm_coherent_dma_ops); static int __dma_supported(struct device *dev, u64 mask, bool warn) { - unsigned long max_dma_pfn = min(max_pfn, arm_dma_pfn_limit); + unsigned long max_dma_pfn = min(max_pfn - 1, arm_dma_pfn_limit); /* * Translate the device's DMA mask to a PFN limit. This _ Patches currently in -mm which might be from wens(a)csie.org are arm-dma-api-fix-max_pfn-off-by-one-error-in-__dma_supported.patch

5 years, 10 months

1
0
0 0

[RHEL8.2 PATCH BZ1789088 2/2] tpm: Revert "tpm_tis_core: Turn on the TPM before probing IRQ's"

by Jerry Snitselaar

Bugzilla: 1789088 Upstream Status: aa4a63dd981682b1742baa01237036e48bc11923 Build Info: https://brewweb.engineering.redhat.com/brew/taskinfo?taskID=25656672 commit aa4a63dd981682b1742baa01237036e48bc11923 Author: Stefan Berger <stefanb(a)linux.ibm.com> Date: Tue Nov 26 08:17:53 2019 -0500 tpm: Revert "tpm_tis_core: Turn on the TPM before probing IRQ's" There has been a bunch of reports (one from kernel bugzilla linked) reporting that when this commit is applied it causes on some machines boot freezes. Unfortunately hardware where this commit causes a failure is not widely available (only one I'm aware is Lenovo T490), which means we cannot predict yet how long it will take to properly fix tpm_tis interrupt probing. Thus, the least worst short term action is to revert the code to the state before this commit. In long term we need fix the tpm_tis probing code to work on machines that Stefan's fix was supposed to fix. Fixes: 21df4a8b6018 ("tpm_tis: reserve chip for duration of tpm_tis_core_init") Link: https://bugzilla.kernel.org/show_bug.cgi?id=205935 Cc: stable(a)vger.kernel.org Cc: Jerry Snitselaar <jsnitsel(a)redhat.com> Cc: Dan Williams <dan.j.williams(a)intel.com> Tested-by: Dan Williams <dan.j.williams(a)intel.com> Tested-by: Xiaoping Zhou <xiaoping.zhou(a)intel.com> Signed-off-by: Stefan Berger <stefanb(a)linux.ibm.com> Reported-by: Jerry Snitselaar <jsnitsel(a)redhat.com> Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen(a)linux.intel.com> (cherry picked from commit aa4a63dd981682b1742baa01237036e48bc11923) Signed-off-by: Jerry Snitselaar <jsnitsel(a)redhat.com> --- drivers/char/tpm/tpm_tis_core.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/drivers/char/tpm/tpm_tis_core.c b/drivers/char/tpm/tpm_tis_core.c index ffa9048d8f6c..c3181ea9f271 100644 --- a/drivers/char/tpm/tpm_tis_core.c +++ b/drivers/char/tpm/tpm_tis_core.c @@ -980,7 +980,6 @@ int tpm_tis_core_init(struct device *dev, struct tpm_tis_data *priv, int irq, goto out_err; } - tpm_chip_start(chip); if (irq) { tpm_tis_probe_irq_single(chip, intmask, IRQF_SHARED, irq); @@ -990,7 +989,6 @@ int tpm_tis_core_init(struct device *dev, struct tpm_tis_data *priv, int irq, } else { tpm_tis_probe_irq(chip, intmask); } - tpm_chip_stop(chip); } rc = tpm_chip_register(chip); -- 2.24.0

5 years, 10 months

1
0
0 0

[RHEL8.2 PATCH BZ1789088 1/2] tpm: Revert "tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts"

by Jerry Snitselaar

Bugzilla: 1789088 Upstream Status: dda8b2af395b2ed508e2ef314ae32e122841b447 Build Info: https://brewweb.engineering.redhat.com/brew/taskinfo?taskID=25656672 commit dda8b2af395b2ed508e2ef314ae32e122841b447 Author: Stefan Berger <stefanb(a)linux.ibm.com> Date: Tue Nov 26 08:17:52 2019 -0500 tpm: Revert "tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts" There has been a bunch of reports (one from kernel bugzilla linked) reporting that when this commit is applied it causes on some machines boot freezes. Unfortunately hardware where this commit causes a failure is not widely available (only one I'm aware is Lenovo T490), which means we cannot predict yet how long it will take to properly fix tpm_tis interrupt probing. Thus, the least worst short term action is to revert the code to the state before this commit. In long term we need fix the tpm_tis probing code to work on machines that Stefan's fix was supposed to fix. Link: https://bugzilla.kernel.org/show_bug.cgi?id=205935 Fixes: 1ea32c83c699 ("tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts") Cc: stable(a)vger.kernel.org Cc: Jerry Snitselaar <jsnitsel(a)redhat.com> Cc: Dan Williams <dan.j.williams(a)intel.com> Tested-by: Dan Williams <dan.j.williams(a)intel.com> Tested-by: Xiaoping Zhou <xiaoping.zhou(a)intel.com> Signed-off-by: Stefan Berger <stefanb(a)linux.ibm.com> Reported-by: Jerry Snitselaar <jsnitsel(a)redhat.com> Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen(a)linux.intel.com> (cherry picked from commit dda8b2af395b2ed508e2ef314ae32e122841b447) Signed-off-by: Jerry Snitselaar <jsnitsel(a)redhat.com> --- drivers/char/tpm/tpm_tis_core.c | 1 - 1 file changed, 1 deletion(-) diff --git a/drivers/char/tpm/tpm_tis_core.c b/drivers/char/tpm/tpm_tis_core.c index 270f43acbb77..ffa9048d8f6c 100644 --- a/drivers/char/tpm/tpm_tis_core.c +++ b/drivers/char/tpm/tpm_tis_core.c @@ -981,7 +981,6 @@ int tpm_tis_core_init(struct device *dev, struct tpm_tis_data *priv, int irq, } tpm_chip_start(chip); - chip->flags |= TPM_CHIP_FLAG_IRQ; if (irq) { tpm_tis_probe_irq_single(chip, intmask, IRQF_SHARED, irq); -- 2.24.0

5 years, 10 months

1
0
0 0

FAILED: patch "[PATCH] ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100" failed to apply to 4.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From a7583e72a5f22470d3e6fd3b6ba912892242339f Mon Sep 17 00:00:00 2001 From: Yunfeng Ye <yeyunfeng(a)huawei.com> Date: Thu, 14 Nov 2019 15:16:24 +0800 Subject: [PATCH] ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 The commit 0f27cff8597d ("ACPI: sysfs: Make ACPI GPE mask kernel parameter cover all GPEs") says: "Use a bitmap of size 0xFF instead of a u64 for the GPE mask so 256 GPEs can be masked" But the masking of GPE 0xFF it not supported and the check condition "gpe > ACPI_MASKABLE_GPE_MAX" is not valid because the type of gpe is u8. So modify the macro ACPI_MASKABLE_GPE_MAX to 0x100, and drop the "gpe > ACPI_MASKABLE_GPE_MAX" check. In addition, update the docs "Format" for acpi_mask_gpe parameter. Fixes: 0f27cff8597d ("ACPI: sysfs: Make ACPI GPE mask kernel parameter cover all GPEs") Signed-off-by: Yunfeng Ye <yeyunfeng(a)huawei.com> [ rjw: Use u16 as gpe data type in acpi_gpe_apply_masked_gpes() ] Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt index 8dee8f68fe15..02724bd017cc 100644 --- a/Documentation/admin-guide/kernel-parameters.txt +++ b/Documentation/admin-guide/kernel-parameters.txt @@ -113,7 +113,7 @@ the GPE dispatcher. This facility can be used to prevent such uncontrolled GPE floodings. - Format: <int> + Format: <byte> acpi_no_auto_serialize [HW,ACPI] Disable auto-serialization of AML methods diff --git a/drivers/acpi/sysfs.c b/drivers/acpi/sysfs.c index 75948a3f1a20..c60d2c6d31d6 100644 --- a/drivers/acpi/sysfs.c +++ b/drivers/acpi/sysfs.c @@ -819,14 +819,14 @@ static ssize_t counter_set(struct kobject *kobj, * interface: * echo unmask > /sys/firmware/acpi/interrupts/gpe00 */ -#define ACPI_MASKABLE_GPE_MAX 0xFF +#define ACPI_MASKABLE_GPE_MAX 0x100 static DECLARE_BITMAP(acpi_masked_gpes_map, ACPI_MASKABLE_GPE_MAX) __initdata; static int __init acpi_gpe_set_masked_gpes(char *val) { u8 gpe; - if (kstrtou8(val, 0, &gpe) || gpe > ACPI_MASKABLE_GPE_MAX) + if (kstrtou8(val, 0, &gpe)) return -EINVAL; set_bit(gpe, acpi_masked_gpes_map); @@ -838,7 +838,7 @@ void __init acpi_gpe_apply_masked_gpes(void) { acpi_handle handle; acpi_status status; - u8 gpe; + u16 gpe; for_each_set_bit(gpe, acpi_masked_gpes_map, ACPI_MASKABLE_GPE_MAX) { status = acpi_get_gpe_device(gpe, &handle);

5 years, 10 months

2
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror