This is the start of the stable review cycle for the 5.10.212 release. There are 41 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 07 Mar 2024 11:31:02 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.212-rc... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 5.10.212-rc2

Davide Caratti dcaratti@redhat.com mptcp: fix double-free on socket dismantle

Chuanhong Guo gch981213@gmail.com mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG

Bartosz Golaszewski bartosz.golaszewski@linaro.org gpio: fix resource unwinding order in error path

Andy Shevchenko andriy.shevchenko@linux.intel.com gpiolib: Fix the error path order in gpiochip_add_data_with_key()

Arturas Moskvinas arturas.moskvinas@gmail.com gpio: 74x164: Enable output pins after registers are reset

Oscar Salvador osalvador@suse.de fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super

Baokun Li libaokun1@huawei.com cachefiles: fix memory leak in cachefiles_add_cache()

Baokun Li libaokun1@huawei.com ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()

Paolo Abeni pabeni@redhat.com mptcp: fix possible deadlock in subflow diag

Paolo Bonzini pbonzini@redhat.com x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers

Bjorn Andersson quic_bjorande@quicinc.com pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation

Elad Nachman enachman@marvell.com mmc: sdhci-xenon: fix PHY init clock stability

Elad Nachman enachman@marvell.com mmc: sdhci-xenon: add timeout for PHY init complete

Ivan Semenov ivan@semenov.dev mmc: core: Fix eMMC initialization with 1-bit bus connection

Curtis Klein curtis.klein@hpe.com dmaengine: fsl-qdma: init irq after reg initialization

Peng Ma peng.ma@nxp.com dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read

David Sterba dsterba@suse.com btrfs: dev-replace: properly validate device names

Johannes Berg johannes.berg@intel.com wifi: nl80211: reject iftype change with mesh ID change

Alexander Ofitserov oficerovas@altlinux.org gtp: fix use-after-free and null-ptr-deref in gtp_newlink()

Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp tomoyo: fix UAF write bug in tomoyo_write_control()

Dimitris Vlachos dvlachos@ics.forth.gr riscv: Sparse-Memory/vmemmap out-of-bounds fix

David Howells dhowells@redhat.com afs: Fix endless loop in directory parsing

Takashi Iwai tiwai@suse.de ALSA: Drop leftover snd-rtctimer stuff from Makefile

Hans de Goede hdegoede@redhat.com power: supply: bq27xxx-i2c: Do not free non existing IRQ

Arnd Bergmann arnd@arndb.de efi/capsule-loader: fix incorrect allocation size

Lin Ma linma@zju.edu.cn rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back

Ignat Korchagin ignat@cloudflare.com netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()

Kai-Heng Feng kai.heng.feng@canonical.com Bluetooth: Enforce validation on max value of connection interval

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST

Zijun Hu quic_zijuhu@quicinc.com Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR

Ying Hsu yinghsu@chromium.org Bluetooth: Avoid potential use-after-free in hci_error_reset

Javier Carrasco javier.carrasco.cruz@gmail.com net: usb: dm9601: fix wrong return value in dm9601_mdio_read

Oleksij Rempel linux@rempel-privat.de lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected

Eric Dumazet edumazet@google.com ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

Yunjian Wang wangyunjian@huawei.com tun: Fix xdp_rxq_info's queue_index when detaching

Florian Westphal fw@strlen.de net: ip_tunnel: prevent perpetual headroom growth

Ryosuke Yasuoka ryasuoka@redhat.com netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter

Han Xu han.xu@nxp.com mtd: spinand: gigadevice: Fix the get ecc status issue

Reto Schneider reto.schneider@husqvarnagroup.com mtd: spinand: gigadevice: Support GD5F1GQ5UExxG

zhenwei pi pizhenwei@bytedance.com crypto: virtio/akcipher - Fix stack overflow on memcpy

Hans de Goede hdegoede@redhat.com platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names

-------------

Diffstat:

Makefile | 4 +- arch/riscv/include/asm/pgtable.h | 2 +- arch/x86/kernel/cpu/intel.c | 178 +++++++++++---------- .../crypto/virtio/virtio_crypto_akcipher_algs.c | 5 +- drivers/dma/fsl-qdma.c | 25 +-- drivers/firmware/efi/capsule-loader.c | 2 +- drivers/gpio/gpio-74x164.c | 4 +- drivers/gpio/gpiolib.c | 12 +- drivers/mmc/core/mmc.c | 2 + drivers/mmc/host/sdhci-xenon-phy.c | 48 ++++-- drivers/mtd/nand/spi/gigadevice.c | 81 ++++++++-- drivers/net/gtp.c | 12 +- drivers/net/tun.c | 1 + drivers/net/usb/dm9601.c | 2 +- drivers/net/usb/lan78xx.c | 3 +- drivers/platform/x86/touchscreen_dmi.c | 4 +- drivers/power/supply/bq27xxx_battery_i2c.c | 4 +- drivers/soc/qcom/rpmhpd.c | 7 +- fs/afs/dir.c | 4 +- fs/btrfs/dev-replace.c | 24 ++- fs/cachefiles/bind.c | 3 + fs/ext4/mballoc.c | 39 ++--- fs/hugetlbfs/inode.c | 6 +- net/bluetooth/hci_core.c | 7 +- net/bluetooth/hci_event.c | 13 +- net/bluetooth/l2cap_core.c | 8 +- net/core/rtnetlink.c | 11 +- net/ipv4/ip_tunnel.c | 28 +++- net/ipv6/addrconf.c | 7 +- net/mptcp/diag.c | 3 + net/mptcp/protocol.c | 49 ++++++ net/netfilter/nft_compat.c | 20 +++ net/netlink/af_netlink.c | 2 +- net/wireless/nl80211.c | 2 + security/tomoyo/common.c | 3 +- sound/core/Makefile | 1 - 36 files changed, 430 insertions(+), 196 deletions(-)