This is the start of the stable review cycle for the 5.10.191 release. There are 135 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 26 Aug 2023 14:50:00 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.191-rc... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 5.10.191-rc1

Borislav Petkov (AMD) bp@alien8.de x86/srso: Correct the mitigation status when SMT is disabled

Peter Zijlstra peterz@infradead.org objtool/x86: Fixup frame-pointer vs rethunk

Petr Pavlu petr.pavlu@suse.com x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG

Borislav Petkov (AMD) bp@alien8.de x86/srso: Disable the mitigation on unaffected configurations

Borislav Petkov (AMD) bp@alien8.de x86/CPU/AMD: Fix the DIV(0) initial fix attempt

Sean Christopherson seanjc@google.com x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()

Peter Zijlstra peterz@infradead.org x86/static_call: Fix __static_call_fixup()

Borislav Petkov (AMD) bp@alien8.de x86/srso: Explain the untraining sequences a bit more

Peter Zijlstra peterz@infradead.org x86/cpu: Cleanup the untrain mess

Peter Zijlstra peterz@infradead.org x86/cpu: Rename srso_(.*)_alias to srso_alias_\1

Peter Zijlstra peterz@infradead.org x86/cpu: Rename original retbleed methods

Peter Zijlstra peterz@infradead.org x86/cpu: Clean up SRSO return thunk mess

Peter Zijlstra peterz@infradead.org x86/ibt: Add ANNOTATE_NOENDBR

Josh Poimboeuf jpoimboe@redhat.com objtool: Add frame-pointer-specific function ignore

Peter Zijlstra peterz@infradead.org x86/alternative: Make custom return thunk unconditional

Peter Zijlstra peterz@infradead.org x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()

Peter Zijlstra peterz@infradead.org x86/cpu: Fix __x86_return_thunk symbol type

Yangtao Li frank.li@vivo.com mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove

Jason Xing kernelxing@tencent.com net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled

Jason Wang jasowang@redhat.com virtio-net: set queues after driver_ok

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Fix null-ptr-deref in unix_stream_sendpage().

Xin Long lucien.xin@gmail.com netfilter: set default timeout to 3 secs for sctp shutdown send and recv state

Yibin Ding yibin.ding@unisoc.com mmc: block: Fix in_flight[issue_type] value error

Yang Yingliang yangyingliang@huawei.com mmc: wbsd: fix double mmc_free_host() in wbsd_init()

Russell Harmon via samba-technical samba-technical@lists.samba.org cifs: Release folio lock on fscache read hit.

dengxiang dengxiang@nfschina.com ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.

Tony Lindgren tony@atomide.com serial: 8250: Fix oops for port->pm on uart_change_pm()

Alexandre Ghiti alexghiti@rivosinc.com riscv: uaccess: Return the number of bytes effectively not copied

Chen Lifu chenlifu@huawei.com riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit

Jisheng Zhang jszhang@kernel.org riscv: lib: uaccess: fold fixups into body

Akira Tsukamoto akira.tsukamoto@gmail.com riscv: __asm_copy_to-from_user: Optimize unaligned memory access and pipeline stall

Kailang Yang kailang@realtek.com ALSA: hda/realtek - Remodified 3k pull low procedure

Jerome Brunet jbrunet@baylibre.com ASoC: meson: axg-tdm-formatter: fix channel slot allocation

Zhang Shurong zhang_shurong@foxmail.com ASoC: rt5665: add missed regulator_bulk_disable

Christopher Obbard chris.obbard@collabora.com arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4

FUKAUMI Naoki naoki@radxa.com arm64: dts: rockchip: sort nodes/properties on rk3399-rock-4

FUKAUMI Naoki naoki@radxa.com arm64: dts: rockchip: fix regulator name on rk3399-rock-4

Alex Bee knaerzche@gmail.com arm64: dts: rockchip: add SPDIF node for ROCK Pi 4

Alex Bee knaerzche@gmail.com arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4

Vicente Bergas vicencb@gmail.com arm64: dts: rockchip: use USB host by default on rk3399-rock-pi-4

Vicente Bergas vicencb@gmail.com arm64: dts: rockchip: fix supplies on rk3399-rock-pi-4

Tony Lindgren tony@atomide.com bus: ti-sysc: Flush posted write on enable before reset

Eric Dumazet edumazet@google.com net: do not allow gso_size to be set to GSO_BY_FRAGS

Abel Wu wuyun.abel@bytedance.com sock: Fix misuse of sk_under_memory_pressure()

Alfred Lee l00g33k@gmail.com net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset

Andrii Staikov andrii.staikov@intel.com i40e: fix misleading debug logs

Ziyang Xuan william.xuanziyang@huawei.com team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves

Justin Chen justin.chen@broadcom.com net: phy: broadcom: stub c45 read/write for 54810

Pablo Neira Ayuso pablo@netfilter.org netfilter: nft_dynset: disallow object maps

Sishuai Gong sishuai.system@gmail.com ipvs: fix racy memcpy in proc_do_sync_threshold

Luca Ceresoli luca.ceresoli@bootlin.com drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs

Petr Machata petrm@nvidia.com selftests: mirror_gre_changes: Tighten up the TTL test match

Lin Ma linma@zju.edu.cn xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH

Lin Ma linma@zju.edu.cn xfrm: add NULL check in xfrm_update_ae_params

Zhengchao Shao shaozhengchao@huawei.com ip_vti: fix potential slab-use-after-free in decode_session6

Zhengchao Shao shaozhengchao@huawei.com ip6_vti: fix slab-use-after-free in decode_session6

Zhengchao Shao shaozhengchao@huawei.com xfrm: fix slab-use-after-free in decode_session6

Lin Ma linma@zju.edu.cn net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure

Lin Ma linma@zju.edu.cn net: af_key: fix sadb_x_filter validation

Lin Ma linma@zju.edu.cn net: xfrm: Fix xfrm_address_filter OOB read

Tam Nguyen tamnguyenchi@os.amperecomputing.com i2c: designware: Handle invalid SMBus block data response length value

xiaoshoukui xiaoshoukui@gmail.com btrfs: fix BUG_ON condition in btrfs_cancel_balance

Sherry Sun sherry.sun@nxp.com tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms

Yi Yang yiyang13@huawei.com tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux

Nathan Lynch nathanl@linux.ibm.com powerpc/rtas_flash: allow user copy to flash block cache objects

Yuanjun Gong ruc_gongyuanjun@163.com fbdev: mmp: fix value check in mmphw_probe()

Chengfeng Ye dg573847474@gmail.com i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue

Wolfram Sang wsa+renesas@sang-engineering.com virtio-mmio: don't break lifecycle of vm_dev

Tang Bin tangbin@cmss.chinamobile.com virtio-mmio: Use to_virtio_mmio_device() to simply code

Ivan Mikhaylov fr0st61te@gmail.com net/ncsi: change from ndo_set_mac_address to dev_set_mac_address

Masami Hiramatsu (Google) mhiramat@kernel.org tracing/probes: Fix to update dynamic data counter if fetcharg uses it

Steven Rostedt (VMware) rostedt@goodmis.org tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs

Sergey Shtylyov s.shtylyov@omp.ru mmc: meson-gx: fix deferred probing

Heiner Kallweit hkallweit1@gmail.com mmc: meson-gx: use devm_mmc_alloc_host

Heiner Kallweit hkallweit1@gmail.com mmc: core: add devm_mmc_alloc_host

Sergey Shtylyov s.shtylyov@omp.ru mmc: sunxi: fix deferred probing

Sergey Shtylyov s.shtylyov@omp.ru mmc: bcm2835: fix deferred probing

Johan Hovold johan+linaro@kernel.org USB: dwc3: qcom: fix NULL-deref on suspend

Frank Li Frank.Li@nxp.com usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM

Frank Li Frank.Li@nxp.com usb: cdns3: allocate TX FIFO size according to composite EP number

Wesley Cheng wcheng@codeaurora.org usb: gadget: udc: core: Introduce check_config to verify USB configuration

Pawel Laszczak pawell@cadence.com usb: cdnsp: Device side header file for CDNSP driver

Jiaxun Yang jiaxun.yang@flygoat.com irqchip/mips-gic: Use raw spinlock for gic_lock

Marc Zyngier maz@kernel.org irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()

Jeffrey Hugo quic_jhugo@quicinc.com bus: mhi: host: Range check CHDBOFF and ERDBOFF

Manivannan Sadhasivam manivannan.sadhasivam@linaro.org bus: mhi: Move host MHI code to "host" directory

Bhaumik Bhatt bbhatt@codeaurora.org bus: mhi: Add MMIO region length to controller structure

Loic Poulain loic.poulain@linaro.org bus: mhi: Add MHI PCI support for WWAN modems

William Breathitt Gray william.gray@linaro.org iio: addac: stx104: Fix race condition when converting analog-to-digital

William Breathitt Gray william.gray@linaro.org iio: addac: stx104: Fix race condition for stx104_write_raw()

William Breathitt Gray william.gray@linaro.org iio: adc: stx104: Implement and utilize register structures

William Breathitt Gray william.gray@linaro.org iio: adc: stx104: Utilize iomap interface

Cosmin Tanislav demonsingur@gmail.com dt-bindings: iio: add AD74413R

Cosmin Tanislav demonsingur@gmail.com iio: add addac subdirectory

Randy Dunlap rdunlap@infradead.org IMA: allow/fix UML builds

Chen Lin chen.lin5@zte.com.cn ring-buffer: Do not swap cpu_buffer during resize process

Benjamin Gray bgray@linux.ibm.com powerpc/kasan: Disable KCOV in KASAN code

Tuo Li islituo@gmail.com ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()

dengxiang dengxiang@nfschina.com ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760

shanzhulig shanzhulig@gmail.com drm/amdgpu: Fix potential fence use-after-free v2

Matthew Anderson ruinairas1992@gmail.com Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally

Zhengping Jiang jiangzp@google.com Bluetooth: L2CAP: Fix use-after-free

Armin Wolf W_Armin@gmx.de pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()

Tuo Li islituo@gmail.com gfs2: Fix possible data races in gfs2_show_options()

Xu Yang xu.yang_2@nxp.com usb: chipidea: imx: add missing USB PHY DPDM wakeup setting

Xu Yang xu.yang_2@nxp.com usb: chipidea: imx: don't request QoS for imx8ulp

Hans Verkuil hverkuil-cisco@xs4all.nl media: platform: mediatek: vpu: fix NULL ptr dereference

Prashanth K quic_prashk@quicinc.com usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push

Yunfei Dong yunfei.dong@mediatek.com media: v4l2-mem2mem: add lock to protect parameter num_rdy

Immad Mir mirimmad17@gmail.com FS: JFS: Check for read-only mounted filesystem in txBegin

Immad Mir mirimmad17@gmail.com FS: JFS: Fix null-ptr-deref Read in txBegin

Gustavo A. R. Silva gustavoars@kernel.org MIPS: dec: prom: Address -Warray-bounds warning

Yogesh yogi.kernel@gmail.com fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev

Jan Kara jack@suse.cz udf: Fix uninitialized array access for some pathnames

Christian Brauner brauner@kernel.org ovl: check type and offset of struct vfsmount in ovl_entry

Patrisious Haddad phaddad@nvidia.com RDMA/mlx5: Return the firmware result upon destroying QP/RQ

Marco Morandini marco.morandini@polimi.it HID: add quirk for 03f0:464a HP Elite Presenter Mouse

Lang Yu Lang.Yu@amd.com drm/amdgpu: install stub fence into potential unused fence pointers

gaoxu gaoxu2@hihonor.com dma-remap: use kvmalloc_array/kvfree for larger dma memory remap

Ye Bin yebin10@huawei.com quota: fix warning in dqgrab()

Jan Kara jack@suse.cz quota: Properly disable quotas when add_dquot_ref() fails

Geert Uytterhoeven geert+renesas@glider.be iopoll: Call cpu_relax() in busy loops

Uday M Bhat uday.m.bhat@intel.com ASoC: Intel: sof_sdw: Add support for Rex soundwire

Oleksij Rempel linux@rempel-privat.de ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings

Sumit Gupta sumitg@nvidia.com PCI: tegra194: Fix possible array out of bounds access

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: Intel: sof_sdw: add quirk for LNL RVP

Bard Liao yung-chuan.liao@linux.intel.com ASoC: Intel: sof_sdw: add quirk for MTL RVP

Oswald Buddenhagen oswald.buddenhagen@gmx.de ALSA: emu10k1: roll up loops in DSP setup code for Audigy

hackyzh002 hackyzh002@gmail.com drm/radeon: Fix integer overflow in radeon_cs_parser_init

Moshe Shemesh moshe@nvidia.com net/mlx5: Skip clock update work when device is in error state

Eran Ben Elisha eranbe@mellanox.com net/mlx5: Move all internal timer metadata into a dedicated struct

Eran Ben Elisha eranbe@mellanox.com net/mlx5: Refactor init clock function

Eric Dumazet edumazet@google.com macsec: use DEV_STATS_INC()

Clayton Yager Clayton_Yager@selinc.com macsec: Fix traffic counters/statistics

Kunihiko Hayashi hayashi.kunihiko@socionext.com mmc: sdhci-f-sdh30: Replace with sdhci_pltfm

-------------

Diffstat:

Documentation/admin-guide/hw-vuln/srso.rst | 4 +- .../bindings/iio/addac/adi,ad74413r.yaml | 158 +++ Makefile | 4 +- arch/arm/boot/dts/imx6dl-prtrvt.dts | 4 + arch/arm/boot/dts/imx6qdl-prti6q.dtsi | 11 +- arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dtsi | 207 +-- arch/mips/include/asm/dec/prom.h | 2 +- arch/powerpc/kernel/rtas_flash.c | 6 +- arch/powerpc/mm/kasan/Makefile | 1 + arch/riscv/lib/uaccess.S | 212 ++- arch/x86/include/asm/entry-common.h | 1 + arch/x86/include/asm/nospec-branch.h | 28 +- arch/x86/kernel/cpu/amd.c | 1 + arch/x86/kernel/cpu/bugs.c | 28 +- arch/x86/kernel/static_call.c | 13 + arch/x86/kernel/traps.c | 2 - arch/x86/kernel/vmlinux.lds.S | 18 +- arch/x86/kvm/svm/svm.c | 1 + arch/x86/lib/retpoline.S | 141 +- drivers/bluetooth/btusb.c | 3 + drivers/bus/Makefile | 2 +- drivers/bus/mhi/Kconfig | 18 +- drivers/bus/mhi/Makefile | 4 +- drivers/bus/mhi/host/Kconfig | 31 + drivers/bus/mhi/{core => host}/Makefile | 4 +- drivers/bus/mhi/{core => host}/boot.c | 0 drivers/bus/mhi/{core => host}/debugfs.c | 0 drivers/bus/mhi/{core => host}/init.c | 12 + drivers/bus/mhi/{core => host}/internal.h | 0 drivers/bus/mhi/{core => host}/main.c | 0 drivers/bus/mhi/host/pci_generic.c | 345 +++++ drivers/bus/mhi/{core => host}/pm.c | 0 drivers/bus/ti-sysc.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/panel/panel-simple.c | 24 +- drivers/gpu/drm/radeon/radeon_cs.c | 3 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-quirks.c | 1 + drivers/i2c/busses/i2c-bcm-iproc.c | 11 +- drivers/i2c/busses/i2c-designware-master.c | 15 +- drivers/iio/Kconfig | 1 + drivers/iio/Makefile | 1 + drivers/iio/adc/stx104.c | 98 +- drivers/iio/addac/Kconfig | 8 + drivers/iio/addac/Makefile | 6 + drivers/infiniband/hw/mlx5/qpc.c | 10 +- drivers/irqchip/irq-mips-gic.c | 63 +- drivers/media/platform/mtk-vpu/mtk_vpu.c | 6 +- drivers/mmc/core/block.c | 7 +- drivers/mmc/core/host.c | 26 + drivers/mmc/host/bcm2835.c | 4 +- drivers/mmc/host/meson-gx-mmc.c | 52 +- drivers/mmc/host/sdhci_f_sdh30.c | 66 +- drivers/mmc/host/sunxi-mmc.c | 4 +- drivers/mmc/host/wbsd.c | 2 - drivers/net/dsa/mv88e6xxx/chip.c | 8 + drivers/net/ethernet/intel/i40e/i40e_nvm.c | 16 +- .../net/ethernet/mellanox/mlx5/core/lib/clock.c | 166 ++- .../net/ethernet/mellanox/mlx5/core/lib/clock.h | 3 +- drivers/net/macsec.c | 70 +- drivers/net/phy/broadcom.c | 13 + drivers/net/team/team.c | 4 +- drivers/net/virtio_net.c | 4 +- drivers/pci/controller/dwc/pcie-tegra194.c | 13 +- drivers/pcmcia/rsrc_nonstatic.c | 2 + drivers/tty/n_gsm.c | 3 +- drivers/tty/serial/8250/8250_port.c | 1 + drivers/tty/serial/fsl_lpuart.c | 4 +- drivers/usb/cdns3/cdnsp-gadget.h | 1463 ++++++++++++++++++++ drivers/usb/cdns3/gadget.c | 60 +- drivers/usb/cdns3/gadget.h | 9 +- drivers/usb/chipidea/ci_hdrc_imx.c | 5 + drivers/usb/chipidea/usbmisc_imx.c | 2 +- drivers/usb/dwc3/dwc3-qcom.c | 11 +- drivers/usb/gadget/function/u_serial.c | 3 + drivers/usb/gadget/udc/core.c | 19 + drivers/video/fbdev/mmp/hw/mmp_ctrl.c | 4 +- drivers/virtio/virtio_mmio.c | 8 +- fs/btrfs/volumes.c | 3 +- fs/cifs/file.c | 2 +- fs/gfs2/super.c | 26 +- fs/jfs/jfs_dmap.c | 3 + fs/jfs/jfs_txnmgr.c | 5 + fs/jfs/namei.c | 5 + fs/overlayfs/ovl_entry.h | 9 + fs/quota/dquot.c | 5 +- fs/udf/unicode.c | 2 +- include/dt-bindings/iio/addac/adi,ad74413r.h | 21 + include/linux/iopoll.h | 2 + include/linux/mhi.h | 2 + include/linux/mlx5/driver.h | 12 +- include/linux/mmc/host.h | 1 + include/linux/objtool.h | 28 + include/linux/usb/gadget.h | 4 + include/linux/virtio_net.h | 4 + include/media/v4l2-mem2mem.h | 18 +- include/net/sock.h | 6 + kernel/dma/remap.c | 4 +- kernel/trace/ring_buffer.c | 14 +- kernel/trace/trace.c | 3 +- kernel/trace/trace_kprobe.c | 3 +- kernel/trace/trace_probe_tmpl.h | 18 +- kernel/trace/trace_uprobe.c | 3 +- net/bluetooth/l2cap_core.c | 5 + net/core/sock.c | 2 +- net/ipv4/ip_vti.c | 4 +- net/ipv4/tcp_timer.c | 4 +- net/ipv6/ip6_vti.c | 4 +- net/key/af_key.c | 4 +- net/ncsi/ncsi-rsp.c | 5 +- net/netfilter/ipvs/ip_vs_ctl.c | 4 + net/netfilter/nf_conntrack_proto_sctp.c | 6 +- net/netfilter/nft_dynset.c | 3 + net/unix/af_unix.c | 9 +- net/xfrm/xfrm_compat.c | 2 +- net/xfrm/xfrm_interface_core.c | 4 +- net/xfrm/xfrm_user.c | 14 +- security/integrity/ima/Kconfig | 2 +- sound/hda/hdac_regmap.c | 7 +- sound/pci/emu10k1/emufx.c | 112 +- sound/pci/hda/patch_realtek.c | 16 +- sound/soc/codecs/rt5665.c | 2 + sound/soc/intel/boards/sof_sdw.c | 25 + sound/soc/meson/axg-tdm-formatter.c | 42 +- sound/usb/quirks-table.h | 29 + tools/include/linux/objtool.h | 28 + tools/objtool/arch/x86/decode.c | 2 +- tools/objtool/check.c | 21 +- .../selftests/net/forwarding/mirror_gre_changes.sh | 3 +- 130 files changed, 3442 insertions(+), 695 deletions(-)