This is the start of the stable review cycle for the 5.4.190 release. There are 63 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Wed, 20 Apr 2022 12:11:14 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.190-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below.
thanks,
greg k-h
------------- Pseudo-Shortlog of commits:
Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 5.4.190-rc1
Duoming Zhou duoming@zju.edu.cn ax25: Fix UAF bugs in ax25 timers
Duoming Zhou duoming@zju.edu.cn ax25: Fix NULL pointer dereferences in ax25 timers
Duoming Zhou duoming@zju.edu.cn ax25: fix NPD bug in ax25_disconnect
Duoming Zhou duoming@zju.edu.cn ax25: fix UAF bug in ax25_send_control()
Duoming Zhou duoming@zju.edu.cn ax25: Fix refcount leaks caused by ax25_cb_del()
Duoming Zhou duoming@zju.edu.cn ax25: fix UAF bugs of net_device caused by rebinding operation
Duoming Zhou duoming@zju.edu.cn ax25: fix reference count leaks of ax25_dev
Duoming Zhou duoming@zju.edu.cn ax25: add refcount in ax25_dev to avoid UAF bugs
Chao Gao chao.gao@intel.com dma-direct: avoid redundant memory sync for swiotlb
Martin Povišer povik+lin@cutebit.org i2c: pasemi: Wait for write xfers to finish
Nadav Amit namit@vmware.com smp: Fix offline cpu check in flush_smp_call_function_queue()
Mikulas Patocka mpatocka@redhat.com dm integrity: fix memory corruption when tag_size is less than digest size
Nathan Chancellor nathan@kernel.org ARM: davinci: da850-evm: Avoid NULL pointer dereference
Paul Gortmaker paul.gortmaker@windriver.com tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
Rei Yamamoto yamamoto.rei@jp.fujitsu.com genirq/affinity: Consider that CPUs on nodes can be unbalanced
Melissa Wen mwen@igalia.com drm/amd/display: don't ignore alpha property on pre-multiplied mode
Nicolas Dichtel nicolas.dichtel@6wind.com ipv6: fix panic when forwarding a pkt with no in6 dev
Fabio M. De Francesco fmdefrancesco@gmail.com ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
Tim Crawford tcrawford@system76.com ALSA: hda/realtek: Add quirk for Clevo PD50PNT
Naohiro Aota naohiro.aota@wdc.com btrfs: mark resumed async balance as writing
Nathan Chancellor nathan@kernel.org btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
Toke Høiland-Jørgensen toke@redhat.com ath9k: Fix usage of driver-private space in tx_info
Toke Høiland-Jørgensen toke@toke.dk ath9k: Properly clear TX status area before reporting to mac80211
Jason A. Donenfeld Jason@zx2c4.com gcc-plugins: latent_entropy: use /dev/urandom
Oliver Upton oupton@google.com KVM: Don't create VM debugfs files outside of the VM directory
Patrick Wang patrick.wang.shcn@gmail.com mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
Juergen Gross jgross@suse.com mm, page_alloc: fix build_zonerefs_node()
Borislav Petkov bp@suse.de perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant
Duoming Zhou duoming@zju.edu.cn drivers: net: slip: fix NPD bug in sl_tx_timeout()
Chandrakanth patil chandrakanth.patil@broadcom.com scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
Alexey Galakhov agalakhov@gmail.com scsi: mvsas: Add PCI ID of RocketRaid 2640
Kefeng Wang wangkefeng.wang@huawei.com powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
Roman Li Roman.Li@amd.com drm/amd/display: Fix allocate_mst_payload assert on resume
Marcin Kozlowski marcinguy@gmail.com net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
Steve Capper steve.capper@arm.com tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
Joey Gouly joey.gouly@arm.com arm64: alternatives: mark patch_alternative() as `noinstr`
Jonathan Bakker xc-racer2@live.ca regulator: wm8994: Add an off-on delay for WM8994 variant
Leo Ruan tingquan.ruan@cn.bosch.com gpu: ipu-v3: Fix dev_dbg frequency output
Christian Lamparter chunkeey@gmail.com ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
Randy Dunlap rdunlap@infradead.org net: micrel: fix KS8851_MLL Kconfig
Tyrel Datwyler tyreld@linux.ibm.com scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
Xiaoguang Wang xiaoguang.wang@linux.alibaba.com scsi: target: tcmu: Fix possible page UAF
Michael Kelley mikelley@microsoft.com Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
QintaoShen unSimple1993@163.com drm/amdkfd: Check for potential null return of kmalloc_array()
Tushar Patel tushar.patel@amd.com drm/amdkfd: Fix Incorrect VMIDs passed to HWS
Leo (Hanghong) Ma hanghong.ma@amd.com drm/amd/display: Update VTEM Infopacket definition
Charlene Liu Charlene.Liu@amd.com drm/amd/display: fix audio format not updated after edid updated
Aurabindo Pillai aurabindo.pillai@amd.com drm/amd: Add USBC connector ID
Harshit Mogalapalli harshit.m.mogalapalli@oracle.com cifs: potential buffer overflow in handling symlinks
Lin Ma linma@zju.edu.cn nfc: nci: add flush_workqueue to prevent uaf
Athira Rajeev atrajeev@linux.vnet.ibm.com testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
Petr Malat oss@malat.biz sctp: Initialize daddr on peeled off socket
Karsten Graul kgraul@linux.ibm.com net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
Stephen Boyd swboyd@chromium.org drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()
Rameshkumar Sundaram quic_ramess@quicinc.com cfg80211: hold bss_lock while updating nontrans_list
Benedikt Spranger b.spranger@linutronix.de net/sched: taprio: Check if socket flags are valid
Dinh Nguyen dinguyen@kernel.org net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
Marcelo Ricardo Leitner marcelo.leitner@gmail.com net/sched: fix initialization order when updating chain 0 head
Vadim Pasternak vadimp@nvidia.com mlxsw: i2c: Fix initialization error flow
Linus Torvalds torvalds@linux-foundation.org gpiolib: acpi: use correct format characters
Guillaume Nault gnault@redhat.com veth: Ensure eth header is in skb's linear part
Vlad Buslov vladbu@nvidia.com net/sched: flower: fix parsing of ethertype following VLAN header
Miaoqian Lin linmq006@gmail.com memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
-------------
Diffstat:
Makefile | 4 +- arch/arm/mach-davinci/board-da850-evm.c | 4 +- arch/arm64/kernel/alternative.c | 6 +-- arch/powerpc/include/asm/page.h | 6 ++- drivers/ata/libata-core.c | 3 ++ drivers/gpio/gpiolib-acpi.c | 4 +- drivers/gpu/drm/amd/amdgpu/ObjectID.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_device.c | 11 ++---- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 2 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 4 +- .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 14 ++++--- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 14 ++++--- .../amd/display/modules/info_packet/info_packet.c | 5 ++- drivers/gpu/drm/msm/dsi/dsi_manager.c | 2 +- drivers/gpu/ipu-v3/ipu-di.c | 5 ++- drivers/hv/ring_buffer.c | 11 +++++- drivers/i2c/busses/i2c-pasemi.c | 6 +++ drivers/md/dm-integrity.c | 7 +++- drivers/memory/atmel-ebi.c | 23 ++++++++--- drivers/net/ethernet/mellanox/mlxsw/i2c.c | 1 + drivers/net/ethernet/micrel/Kconfig | 1 + drivers/net/ethernet/stmicro/stmmac/altr_tse_pcs.c | 8 ---- drivers/net/ethernet/stmicro/stmmac/altr_tse_pcs.h | 4 ++ .../net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 13 +++---- drivers/net/slip/slip.c | 2 +- drivers/net/usb/aqc111.c | 9 ++++- drivers/net/veth.c | 2 +- drivers/net/wireless/ath/ath9k/main.c | 2 +- drivers/net/wireless/ath/ath9k/xmit.c | 33 ++++++++++------ drivers/perf/fsl_imx8_ddr_perf.c | 2 +- drivers/regulator/wm8994-regulator.c | 42 +++++++++++++++++++-- drivers/scsi/ibmvscsi_tgt/ibmvscsi_tgt.c | 2 +- drivers/scsi/megaraid/megaraid_sas.h | 3 ++ drivers/scsi/megaraid/megaraid_sas_base.c | 7 ++++ drivers/scsi/mvsas/mv_init.c | 1 + drivers/target/target_core_user.c | 3 +- fs/btrfs/block-group.c | 4 -- fs/btrfs/volumes.c | 2 + fs/cifs/link.c | 3 ++ include/asm-generic/tlb.h | 10 +++-- include/net/ax25.h | 12 ++++++ include/net/flow_dissector.h | 2 + kernel/dma/direct.c | 3 +- kernel/irq/affinity.c | 5 ++- kernel/smp.c | 2 +- kernel/time/tick-sched.c | 2 +- mm/kmemleak.c | 8 ++-- mm/page_alloc.c | 2 +- net/ax25/af_ax25.c | 38 +++++++++++++++---- net/ax25/ax25_dev.c | 28 +++++++++++--- net/ax25/ax25_route.c | 13 ++++++- net/ax25/ax25_subr.c | 20 +++++++--- net/core/flow_dissector.c | 1 + net/ipv6/ip6_output.c | 2 +- net/nfc/nci/core.c | 4 ++ net/sched/cls_api.c | 2 +- net/sched/cls_flower.c | 18 ++++++--- net/sched/sch_taprio.c | 3 +- net/sctp/socket.c | 2 +- net/smc/smc_pnet.c | 5 ++- net/wireless/scan.c | 2 + scripts/gcc-plugins/latent_entropy_plugin.c | 44 +++++++++++++--------- sound/core/pcm_misc.c | 2 +- sound/pci/hda/patch_realtek.c | 1 + tools/testing/selftests/mqueue/mq_perf_tests.c | 25 ++++++++---- virt/kvm/kvm_main.c | 10 ++++- 68 files changed, 386 insertions(+), 161 deletions(-)