This is the start of the stable review cycle for the 4.19.297 release. There are 98 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 25 Oct 2023 10:47:57 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.297-rc... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.19.297-rc1

Zhang Changzhong zhangchangzhong@huawei.com xfrm6: fix inet6_dev refcount underflow problem

Kees Cook keescook@chromium.org Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name

Edward AD twuufnxlz@gmail.com Bluetooth: hci_sock: fix slab oob read in create_monitor_event

Tony Lindgren tony@atomide.com phy: mapphone-mdm6600: Fix runtime PM for remove

Dan Carpenter dan.carpenter@linaro.org ASoC: pxa: fix a memory leak in probe()

Haibo Chen haibo.chen@nxp.com gpio: vf610: set value before the direction to avoid a glitch

Niklas Schnelle schnelle@linux.ibm.com s390/pci: fix iommu bitmap allocation

Peter Zijlstra peterz@infradead.org perf: Disallow mis-matched inherited group reads

Puliang Lu puliang.lu@fibocom.com USB: serial: option: add Fibocom to DELL custom modem FM101R-GL

Benoît Monin benoit.monin@gmx.fr USB: serial: option: add entry for Sierra EM9191 with new firmware

Fabio Porcedda fabio.porcedda@gmail.com USB: serial: option: add Telit LE910C4-WWX 0x1035 composition

Sunil V L sunilvl@ventanamicro.com ACPI: irq: Fix incorrect return value in acpi_register_gsi()

Andy Shevchenko andriy.shevchenko@linux.intel.com Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"

Avri Altman avri.altman@wdc.com mmc: core: Capture correct oemid-bits for eMMC cards

Martin Kurbanov mmkurbanov@sberdevices.ru mtd: spinand: micron: correct bitmask for ecc status

Bibek Kumar Patro quic_bibekkum@quicinc.com mtd: rawnand: qcom: Unmap the right resource upon probe failure

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_event: Fix using memcmp when comparing keys

Josef Bacik josef@toxicpanda.com btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c

Kai Uwe Broulik foss-linux@broulik.de drm: panel-orientation-quirks: Add quirk for One Mix 2S

Kees Cook keescook@chromium.org sky2: Make sure there is at least one frag_addr available

Benjamin Berg benjamin.berg@intel.com wifi: cfg80211: avoid leaking stack data into trace

Wen Gong quic_wgong@quicinc.com wifi: mac80211: allow transmitting EAPOL frames with tainted key

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_core: Fix build warnings

Ying Hsu yinghsu@chromium.org Bluetooth: Avoid redundant authentication

Ma Ke make_ruc2021@163.com HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event

Clément Léger cleger@rivosinc.com tracing: relax trace_event_eval_update() execution with cond_resched()

Damien Le Moal dlemoal@kernel.org ata: libata-eh: Fix compilation warning in ata_eh_link_report()

Chengfeng Ye dg573847474@gmail.com gpio: timberdale: Fix potential deadlock on &tgpio->lock

Jeff Layton jlayton@kernel.org overlayfs: set ctime when setting mtime and atime

Heiner Kallweit hkallweit1@gmail.com i2c: mux: Avoid potential false error message in i2c_mux_add_adapter

Josef Bacik josef@toxicpanda.com btrfs: initialize start_slot in btrfs_log_prealloc_extents

Filipe Manana fdmanana@suse.com btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1

Tony Lindgren tony@atomide.com ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone

Jordan Rife jrife@google.com libceph: use kernel_connect()

Jeff Layton jlayton@kernel.org libceph: fix unaligned accesses in ceph_entity_addr handling

Gavrilov Ilia Ilia.Gavrilov@infotecs.ru net: pktgen: Fix interface flags printing

Pablo Neira Ayuso pablo@netfilter.org netfilter: nft_set_rbtree: .deactivate fails if element has expired

Pedro Tammela pctammela@mojatatu.com net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve

Michal Schmidt mschmidt@redhat.com i40e: prevent crash on probe if hw registers have invalid values

Dan Carpenter dan.carpenter@linaro.org net: usb: smsc95xx: Fix an error code in smsc95xx_reset()

Eric Dumazet edumazet@google.com tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb

Neal Cardwell ncardwell@google.com tcp: fix excessive TLP and RACK timeouts from HZ rounding

Josua Mayer josua@solid-run.com net: rfkill: gpio: prevent value glitch during probe

Ma Ke make_ruc2021@163.com net: ipv6: fix return value check in esp_remove_trailer

Ma Ke make_ruc2021@163.com net: ipv4: fix return value check in esp_remove_trailer

Eric Dumazet edumazet@google.com xfrm: interface: use DEV_STATS_INC()

Eric Dumazet edumazet@google.com xfrm: fix a data-race in xfrm_gen_index()

Florian Westphal fw@strlen.de netfilter: nft_payload: fix wrong mac header matching

Jim Mattson jmattson@google.com KVM: x86: Mask LVTPC when handling a PMI

Johan Hovold johan+linaro@kernel.org regmap: fix NULL deref on lookup

Krzysztof Kozlowski krzysztof.kozlowski@linaro.org nfc: nci: fix possible NULL pointer dereference in send_acknowledge()

Arnd Bergmann arnd@arndb.de Bluetooth: avoid memcmp() out of bounds warning

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_event: Fix coding style

Arkadiusz Bokowy arkadiusz.bokowy@gmail.com Bluetooth: vhci: Fix race when opening vhci device

Ziyang Xuan william.xuanziyang@huawei.com Bluetooth: Fix a refcnt underflow problem for hci_conn

Lee, Chun-Yi jlee@suse.com Bluetooth: Reject connection with the device which has same BD_ADDR

Lee, Chun-Yi jlee@suse.com Bluetooth: hci_event: Ignore NULL link key

Ricardo Cañuelo ricardo.canuelo@collabora.com usb: hub: Guard against accesses to uninitialized BOS descriptors

Nicolas Dichtel nicolas.dichtel@6wind.com dev_forward_skb: do not scrub skb mark within the same name space

Kirill A. Shutemov kirill.shutemov@linux.intel.com x86/alternatives: Disable KASAN in apply_alternatives()

Christophe Leroy christophe.leroy@csgroup.eu powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()

Krishna Kurapati quic_kriskura@quicinc.com usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call

Piyush Mehta piyush.mehta@amd.com usb: gadget: udc-xilinx: replace memcpy with memcpy_toio

Borislav Petkov (AMD) bp@alien8.de x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs

Dmitry Torokhov dmitry.torokhov@gmail.com pinctrl: avoid unsafe code pattern in find_pinctrl()

Michal Koutný mkoutny@suse.com cgroup: Remove duplicates in cgroup v1 tasks file

Matthias Berndt matthias_berndt@gmx.de Input: xpad - add PXN V900 support

Jeffery Miller jefferymiller@google.com Input: psmouse - fix fast_reconnect function for PS/2 mode

Javier Carrasco javier.carrasco.cruz@gmail.com Input: powermate - fix use-after-free in powermate_config_complete

Xiubo Li xiubli@redhat.com ceph: fix incorrect revoked caps assert in ceph_fill_file_size()

Jorge Sanjuan Garcia jorge.sanjuangarcia@duagon.com mcb: remove is_added flag from mcb_device struct

Alexander Zangerl az@breathe-safe.com iio: pressure: ms5611: ms5611_prom_is_valid false negative bug

Phil Elwell phil@raspberrypi.com iio: pressure: bmp280: Fix NULL pointer exception

Xingxing Luo xingxing.luo@unisoc.com usb: musb: Modify the "HWVers" register address

Xingxing Luo xingxing.luo@unisoc.com usb: musb: Get the musb_qh poniter after musb_giveback

Thinh Nguyen Thinh.Nguyen@synopsys.com usb: dwc3: Soft reset phy on probe for host

Javier Carrasco javier.carrasco.cruz@gmail.com net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read

Wesley Cheng quic_wcheng@quicinc.com usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer

Amelie Delaunay amelie.delaunay@foss.st.com dmaengine: stm32-mdma: abort resume if no ongoing transfer

Peter Zijlstra peterz@infradead.org sched,idle,rcu: Push rcu_idle deeper into the idle path

Waiman Long longman@redhat.com workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()

Jeremy Cline jeremy@jcline.org nfc: nci: assert requested protocol is valid

Eric Dumazet edumazet@google.com net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()

Dan Carpenter dan.carpenter@linaro.org ixgbe: fix crash with empty VF macvlan list

Konstantin Meskhidze konstantin.meskhidze@huawei.com drm/vmwgfx: fix typo of sizeof argument

Roger Pau Monne roger.pau@citrix.com xen-netback: use default TX queue size for vifs

Dinghao Liu dinghao.liu@zju.edu.cn ieee802154: ca8210: Fix a potential UAF in ca8210_probe

Abhinav Kumar quic_abhinavk@quicinc.com drm/msm/dsi: skip the wait for video mode done if not applicable

Martin Fuzzey martin.fuzzey@flowbird.group drm: etvnaviv: fix bad backport leading to warning

Jordan Rife jrife@google.com net: prevent address rewrite in kernel_bind()

Jan Kara jack@suse.cz quota: Fix slow quotaoff

Hans de Goede hdegoede@redhat.com HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

Uwe Kleine-König u.kleine-koenig@pengutronix.de platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning

Artem Chernyshev artem.chernyshev@red-soft.ru RDMA/cxgb4: Check skb value for failure to allocate

Jordan Rife jrife@google.com net: prevent rewrite of msg_name in sock_sendmsg()

Randy Dunlap rdunlap@infradead.org net: fix kernel-doc warnings for socket.c

Paolo Abeni pabeni@redhat.com net: use indirect calls helpers at the socket layer

Paolo Abeni pabeni@redhat.com indirect call wrappers: helpers to speed-up indirect calls of builtin

-------------

Diffstat:

Makefile | 4 +- arch/arm/boot/dts/omap4-droid4-xt894.dts | 1 + arch/powerpc/include/asm/nohash/64/pgtable.h | 2 +- arch/s390/pci/pci_dma.c | 15 ++++- arch/x86/include/asm/msr-index.h | 4 ++ arch/x86/kernel/alternative.c | 13 +++++ arch/x86/kernel/cpu/amd.c | 8 +++ arch/x86/kvm/lapic.c | 8 ++- drivers/acpi/irq.c | 7 ++- drivers/ata/libata-eh.c | 2 +- drivers/base/regmap/regmap.c | 2 +- drivers/bluetooth/hci_vhci.c | 3 + drivers/cpuidle/cpuidle.c | 12 ++-- drivers/dma/stm32-mdma.c | 4 ++ drivers/gpio/gpio-timberdale.c | 5 +- drivers/gpio/gpio-vf610.c | 4 +- drivers/gpu/drm/drm_panel_orientation_quirks.c | 16 ++++++ drivers/gpu/drm/etnaviv/etnaviv_gem_prime.c | 2 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 12 ++++ drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +- drivers/hid/hid-holtek-kbd.c | 4 ++ drivers/hid/hid-logitech-hidpp.c | 3 +- drivers/i2c/i2c-mux.c | 2 +- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/ms5611_core.c | 2 +- drivers/infiniband/hw/cxgb4/cm.c | 3 + drivers/input/joystick/xpad.c | 2 + drivers/input/misc/powermate.c | 1 + drivers/input/mouse/elantech.c | 1 + drivers/input/mouse/synaptics.c | 1 + drivers/mcb/mcb-core.c | 10 +--- drivers/mcb/mcb-parse.c | 2 - drivers/mmc/core/mmc.c | 2 +- drivers/mtd/nand/raw/qcom_nandc.c | 2 +- drivers/mtd/nand/spi/micron.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_common.c | 4 +- drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 +- drivers/net/ethernet/marvell/sky2.h | 2 +- drivers/net/ieee802154/ca8210.c | 17 +----- drivers/net/usb/dm9601.c | 7 ++- drivers/net/usb/smsc95xx.c | 2 +- drivers/net/xen-netback/interface.c | 3 - drivers/phy/motorola/phy-mapphone-mdm6600.c | 1 + drivers/platform/x86/hp-wmi.c | 8 ++- drivers/usb/core/hub.c | 28 +++++++-- drivers/usb/core/hub.h | 2 +- drivers/usb/dwc3/core.c | 39 ++++++++++++- drivers/usb/gadget/function/f_ncm.c | 26 ++++++--- drivers/usb/gadget/udc/udc-xilinx.c | 20 ++++--- drivers/usb/host/xhci-ring.c | 4 +- drivers/usb/musb/musb_debugfs.c | 2 +- drivers/usb/musb/musb_host.c | 9 ++- drivers/usb/serial/option.c | 7 +++ fs/btrfs/extent-tree.c | 6 +- fs/btrfs/ioctl.c | 4 +- fs/btrfs/tree-log.c | 2 +- fs/ceph/inode.c | 4 +- fs/overlayfs/copy_up.c | 2 +- fs/quota/dquot.c | 66 ++++++++++++--------- include/linux/indirect_call_wrapper.h | 51 +++++++++++++++++ include/linux/mcb.h | 1 - include/linux/netdevice.h | 2 +- include/linux/perf_event.h | 1 + include/linux/quota.h | 4 +- include/linux/quotaops.h | 2 +- include/net/bluetooth/hci_core.h | 2 +- include/net/netns/xfrm.h | 1 + include/net/tcp.h | 3 + kernel/cgroup/cgroup-v1.c | 5 +- kernel/events/core.c | 39 +++++++++++-- kernel/sched/idle.c | 22 +++---- kernel/trace/trace_events.c | 1 + kernel/workqueue.c | 8 ++- net/bluetooth/hci_conn.c | 72 ++++++++++++++--------- net/bluetooth/hci_core.c | 8 ++- net/bluetooth/hci_event.c | 33 +++++++++-- net/bluetooth/hci_sock.c | 3 +- net/ceph/messenger.c | 79 +++++++++++++------------- net/core/pktgen.c | 14 ++--- net/ipv4/esp4.c | 4 +- net/ipv4/tcp_output.c | 25 ++++++-- net/ipv4/tcp_recovery.c | 2 +- net/ipv6/esp6.c | 4 +- net/ipv6/xfrm6_policy.c | 4 +- net/mac80211/tx.c | 3 +- net/netfilter/ipvs/ip_vs_sync.c | 4 +- net/netfilter/nft_payload.c | 2 +- net/netfilter/nft_set_rbtree.c | 2 + net/nfc/llcp_core.c | 30 ++++------ net/nfc/nci/core.c | 5 ++ net/nfc/nci/spi.c | 2 + net/rds/tcp_connect.c | 2 +- net/rds/tcp_listen.c | 2 +- net/rfkill/rfkill-gpio.c | 4 +- net/sched/sch_hfsc.c | 18 ++++-- net/socket.c | 77 ++++++++++++++++++------- net/wireless/nl80211.c | 2 +- net/xfrm/xfrm_interface_core.c | 22 ++++--- net/xfrm/xfrm_policy.c | 6 +- sound/soc/pxa/pxa-ssp.c | 2 +- 100 files changed, 688 insertions(+), 320 deletions(-)