This is the start of the stable review cycle for the 3.18.137 release. There are 134 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Sun Mar 24 11:10:54 UTC 2019. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.137-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gre...@linuxfoundation.org> Linux 3.18.137-rc1 Gustavo A. R. Silva <gust...@embeddedor.com> drm/radeon/evergreen_cs: fix missing break in switch statement Sakari Ailus <sakari.ai...@linux.intel.com> media: uvcvideo: Avoid NULL pointer dereference at the end of streaming Zhang, Jun <jun.zh...@intel.com> rcu: Do RCU GP kthread self-wakeup from softirq and interrupt Aditya Pakki <pakki...@umn.edu> md: Fix failed allocation of md_register_thread Yihao Wu <wuyi...@linux.alibaba.com> nfsd: fix wrong check in write_v4_end_grace() NeilBrown <ne...@suse.com> nfsd: fix memory corruption caused by readdir Gustavo A. R. Silva <gust...@embeddedor.com> ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify Christophe Leroy <christophe.le...@c-s.fr> powerpc/83xx: Also save/restore SPRG4-7 during suspend Jordan Niethe <jniet...@gmail.com> powerpc/powernv: Make opal log only readable by root Christophe Leroy <christophe.le...@c-s.fr> powerpc/wii: properly disable use of BATs when requested. Christophe Leroy <christophe.le...@c-s.fr> powerpc/32: Clear on-stack exception marker upon exception return zhangyi (F) <yi.zh...@huawei.com> jbd2: clear dirty flag when revoking a buffer from an older transaction QiaoChong <qiaoch...@loongson.cn> parport_pc: fix find_superio io compare code, should use equal test. Zev Weiss <z...@bewilderbeest.net> kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv Roman Penyaev <rpeny...@suse.de> mm/vmalloc: fix size check for remap_vmalloc_range_partial() Jan Kara <j...@suse.cz> ext2: Fix underflow in ext2_max_size() Jan Kara <j...@suse.cz> ext4: fix crash during online resizing Arnd Bergmann <a...@arndb.de> cpufreq: pxa2xx: remove incorrect __init annotation Eric Biggers <ebigg...@google.com> crypto: pcbc - remove bogus memcpy()s with src == dest Filipe Manana <fdman...@suse.com> Btrfs: fix corruption reading shared and compressed extents after hole punching Finn Thain <fth...@telegraphics.com.au> m68k: Add -ffreestanding to CFLAGS Bart Van Assche <bvanass...@acm.org> scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock Felipe Franciosi <fel...@nutanix.com> scsi: virtio_scsi: don't send sc payload with tmfs Stuart Menefy <stuart.men...@mathembedded.com> regulator: s2mpa01: Fix step values for some LDOs Krzysztof Kozlowski <k...@kernel.org> regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 Pavel Shilovsky <piastr...@gmail.com> CIFS: Fix read after write for files with read caching Mao Wenan <maowe...@huawei.com> net: set static variable an initial value in atl2_probe() Darrick J. Wong <darrick.w...@oracle.com> tmpfs: fix link accounting when a tmpfile is linked in Vladimir Murzin <vladimir.mur...@arm.com> arm64: Relax GIC version check during early boot Alexey Khoroshilov <khoroshi...@ispras.ru> net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() Florian Fainelli <f.faine...@gmail.com> net: systemport: Fix reception of BPDUs Anoob Soman <anoob.so...@citrix.com> scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task David Howells <dhowe...@redhat.com> assoc_array: Fix shortcut creation Gabriel Fernandez <gabriel.fernan...@st.com> Input: st-keyscan - fix potential zalloc NULL dereference Shubhrajyoti Datta <shubhrajyoti.da...@xilinx.com> i2c: cadence: Fix the hold bit setting Dmitry Torokhov <dmitry.torok...@gmail.com> Input: matrix_keypad - use flush_delayed_work() Stefan Haberland <s...@linux.ibm.com> s390/dasd: fix using offset into zero size array error Eric Biggers <ebigg...@google.com> crypto: ahash - fix another early termination in hash walk S.j. Wang <shengjiu.w...@nxp.com> ASoC: fsl_esai: fix register setting issue in RIGHT_J mode zhengbin <zhengbi...@huawei.com> 9p/net: fix memory leak in p9_client_create Xiao Ni <x...@redhat.com> It's wrong to add len to sector_nr in raid10 reshape twice Takashi Sakamoto <o-taka...@sakamocchi.jp> ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 Eric Dumazet <eduma...@google.com> gro_cells: make sure device is up in gro_cells_receive() Eric Dumazet <eduma...@google.com> net/hsr: fix possible crash in add_timer() Eric Dumazet <eduma...@google.com> vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() Al Viro <v...@zeniv.linux.org.uk> missing barriers in some of unix_sock ->addr and ->path accesses Kalash Nainwal <kal...@arista.com> net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 YueHaibing <yuehaib...@huawei.com> mdio_bus: Fix use-after-free on device_register fails Eric Dumazet <eduma...@google.com> net/x25: fix a race in x25_bind() Jack Morgenstein <ja...@dev.mellanox.co.il> net/mlx4_core: Fix qp mtt size calculation Xin Long <lucien....@gmail.com> pptp: dst_release sk_dst_cache in pptp_sock_destruct Eric Dumazet <eduma...@google.com> net/x25: reset state in x25_connect() Eric Dumazet <eduma...@google.com> net/x25: fix use-after-free in x25_device_event() Miaohe Lin <linmia...@huawei.com> net: sit: fix UBSAN Undefined behaviour in check_6rd Mao Wenan <maowe...@huawei.com> net: hsr: fix memory leak in hsr_dev_finalize() Eric Dumazet <eduma...@google.com> l2tp: fix infoleak in l2tp_ip6_recvmsg() Gustavo A. R. Silva <gust...@embeddedor.com> iscsi_ibft: Fix missing break in switch statement Jason Gerecke <jason.gere...@wacom.com> Input: wacom_serial4 - add support for Wacom ArtPad II tablet Jiri Olsa <jo...@redhat.com> perf symbols: Filter out hidden symbols from labels Julian Wiedmann <j...@linux.ibm.com> s390/qeth: fix use-after-free in error path Andy Shevchenko <andriy.shevche...@linux.intel.com> dmaengine: dmatest: Abort test in case of mapping error Lubomir Rintel <lkund...@v3.sk> irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable Peng Hao <peng.h...@zte.com.cn> ARM: pxa: ssp: unneeded to free devm_ allocated data Ian Kent <ra...@themaw.net> autofs: fix error return in autofs_fill_super() Pan Bian <bianpan2...@163.com> autofs: drop dentry reference only when it is never used Michal Hocko <mho...@suse.com> mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone Kairui Song <kas...@redhat.com> x86/kexec: Don't setup EFI info if EFI runtime is not enabled Ronnie Sahlberg <lsahl...@redhat.com> cifs: fix computation for MAX_SMB2_HDR_SIZE Sinan Kaya <ok...@kernel.org> platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 Ming Lu <ming...@citrix.com> scsi: libfc: free skb when receiving invalid flogi resp Yao Liu <yotta....@ucloud.cn> nfs: Fix NULL pointer dereference of dev_name Tomonori Sakita <tomonori.sak...@sord.co.jp> net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case Max Filippov <jcmvb...@gmail.com> xtensa: SMP: limit number of possible CPUs by NR_CPUS Max Filippov <jcmvb...@gmail.com> xtensa: SMP: mark each possible CPU as present Max Filippov <jcmvb...@gmail.com> xtensa: smp_lx200_defconfig: fix vectors clash Max Filippov <jcmvb...@gmail.com> xtensa: SMP: fix secondary CPU initialization Suravee Suthikulpanit <suravee.suthikulpa...@amd.com> iommu/amd: Fix IOMMU page flush when detach device from a domain ZhangXiaoxu <zhangxiao...@huawei.com> ipvs: Fix signed integer overflow when setsockopt timeout Stephane Eranian <eran...@google.com> perf tools: Handle TOPOLOGY headers with no CPU Su Yanjun <suyj.f...@cn.fujitsu.com> vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel Alistair Strachan <astrac...@google.com> media: uvcvideo: Fix 'type' check leading to overflow Mike Kravetz <mike.krav...@oracle.com> hugetlbfs: fix races and page leaks during migration Ido Schimmel <ido...@mellanox.com> ip6mr: Do not call __IP6_INC_STATS() from preemptible context Paul Moore <p...@paul-moore.com> netlabel: fix out-of-bounds memory accesses Rajasingh Thavamani <t.rajasi...@landisgyr.com> net: phy: Micrel KSZ8061: link failure after cable connect Nazarov Sergey <s-naza...@yandex.ru> net: avoid use IPCB in cipso_v4_error Nazarov Sergey <s-naza...@yandex.ru> net: Add __icmp_send helper. YueHaibing <yuehaib...@huawei.com> net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails Ido Schimmel <ido...@mellanox.com> team: Free BPF filter when unregistering netdev Kai-Heng Feng <kai.heng.f...@canonical.com> sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 YueHaibing <yuehaib...@huawei.com> net-sysfs: Fix mem leak in netdev_register_kobject Ivan Mironov <mironov.i...@gmail.com> USB: serial: cp210x: add ID for Ingenico 3070 Jann Horn <ja...@google.com> mm: enforce min addr even if capable() in expand_downwards() Jonathan Neuschäfer <j.neuschae...@gmx.net> mmc: spi: Fix card detection during probe Vitaly Kuznetsov <vkuzn...@redhat.com> KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 Chaitanya Tata <chaitanya.t...@bluwirelesstechnology.com> cfg80211: extend range deviation for DMG Balaji Pothunoori <bpoth...@codeaurora.org> mac80211: don't initiate TDLS connection if station is not associated to AP Thomas Falcon <tlfal...@linux.ibm.com> ibmveth: Do not process frames after calling napi_reschedule Atsushi Nemoto <atsushi.nem...@sord.co.jp> net: altera_tse: fix connect_local_phy error path Varun Prakash <va...@chelsio.com> scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() Tomonori Sakita <tomonori.sak...@sord.co.jp> serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling Bob Copeland <m...@bobcopeland.com> mac80211: fix miscounting of ttl-dropped frames Silvio Cesare <silvio.ces...@gmail.com> ASoC: imx-audmux: change snprintf to scnprintf for possible overflow Dan Carpenter <dan.carpen...@oracle.com> usb: gadget: Potential NULL dereference on allocation error Zeng Tao <prime.z...@hisilicon.com> usb: dwc3: gadget: Fix the uninitialized link_state when udc starts Dan Carpenter <dan.carpen...@oracle.com> ALSA: compress: prevent potential divide by zero bugs Rander Wang <rander.w...@linux.intel.com> ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field Kristian H. Kristensen <hoegsb...@gmail.com> drm/msm: Unblock writer if reader closes file John Garry <john.ga...@huawei.com> scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached Ilya Dryomov <idryo...@gmail.com> libceph: handle an empty authorize reply Arad, Ronen <ronen.a...@intel.com> netlink: Trim skb to alloc size to avoid MSG_TRUNC Hangbin Liu <liuhang...@gmail.com> sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() Cong Wang <xiyou.wangc...@gmail.com> team: avoid complex list operations in team_nl_cmd_options_set() Kal Conley <kal.con...@dectris.com> net/packet: fix 4gb buffer limit due to overflow check Eric Dumazet <eduma...@google.com> batman-adv: fix uninit-value in batadv_interface_tx() Eric Biggers <ebigg...@google.com> KEYS: always initialize keyring_index_key::desc_len Eric Biggers <ebigg...@google.com> KEYS: user: Align the payload buffer Nathan Chancellor <natechancel...@gmail.com> isdn: avm: Fix string plus integer warning from Clang Kangjie Lu <k...@umn.edu> leds: lp5523: fix a missing check of return value of lp55xx_read Colin Ian King <colin.k...@canonical.com> atm: he: fix sign-extension overflow on large shift Jia-Ju Bai <baijiaju1...@gmail.com> isdn: i4l: isdn_tty: Fix some concurrency double-free bugs Thomas Bogendoerfer <tbogendoer...@suse.de> MIPS: jazz: fix 64bit build Logan Gunthorpe <log...@deltatee.com> scsi: isci: initialize shost fully before calling scsi_add_host() YueHaibing <yuehaib...@huawei.com> scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param Alban Bedel <al...@free.fr> MIPS: ath79: Enable OF serial ports in the default config Kangjie Lu <k...@umn.edu> mfd: mc13xxx: Fix a missing check of a register-read failure Charles Keepax <ckee...@opensource.cirrus.com> mfd: wm5110: Add missing ASRC rate register Dan Carpenter <dan.carpen...@oracle.com> mfd: ab8500-core: Return zero in get_register_interruptible() Nathan Chancellor <natechancel...@gmail.com> mfd: db8500-prcmu: Fix some section annotations Nathan Chancellor <natechancel...@gmail.com> mfd: twl-core: Fix section annotations on {,un}protect_pm_master Vignesh R <vigne...@ti.com> mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells Eric Biggers <ebigg...@google.com> KEYS: allow reaching the keys quotas exactly Ralph Campbell <rcampb...@nvidia.com> numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES Yan, Zheng <z...@redhat.com> ceph: avoid repeatedly adding inode to mdsc->snap_flush_list ------------- Diffstat: Makefile | 4 +- arch/arm/mach-s3c24xx/mach-osiris-dvs.c | 8 ++-- arch/arm/plat-pxa/ssp.c | 3 -- arch/arm64/kernel/head.S | 3 +- arch/m68k/Makefile | 5 ++- arch/mips/configs/ath79_defconfig | 1 + arch/mips/jazz/jazzdma.c | 5 ++- arch/powerpc/kernel/entry_32.S | 9 ++++ arch/powerpc/platforms/83xx/suspend-asm.S | 34 ++++++++++++--- arch/powerpc/platforms/embedded6xx/wii.c | 4 ++ arch/powerpc/platforms/powernv/opal-msglog.c | 2 +- arch/x86/kernel/kexec-bzimage64.c | 3 ++ arch/x86/kvm/svm.c | 8 ++++ arch/xtensa/configs/smp_lx200_defconfig | 1 + arch/xtensa/kernel/head.S | 5 ++- arch/xtensa/kernel/smp.c | 41 ++++++++++++------ crypto/ahash.c | 14 +++--- crypto/pcbc.c | 14 ++---- drivers/atm/he.c | 2 +- drivers/cpufreq/pxa2xx-cpufreq.c | 4 +- drivers/dma/dmatest.c | 28 ++++++------ drivers/firmware/iscsi_ibft.c | 1 + drivers/gpu/drm/msm/msm_rd.c | 7 ++- drivers/gpu/drm/radeon/evergreen_cs.c | 1 + drivers/i2c/busses/i2c-cadence.c | 9 +++- drivers/input/keyboard/matrix_keypad.c | 2 +- drivers/input/keyboard/st-keyscan.c | 4 +- drivers/input/tablet/wacom_serial4.c | 2 + drivers/iommu/amd_iommu.c | 15 +++++-- drivers/irqchip/irq-mmp.c | 6 ++- drivers/isdn/hardware/avm/b1.c | 2 +- drivers/isdn/i4l/isdn_tty.c | 6 ++- drivers/leds/leds-lp5523.c | 4 +- drivers/md/raid10.c | 3 +- drivers/md/raid5.c | 2 + drivers/media/usb/uvc/uvc_driver.c | 14 ++++-- drivers/media/usb/uvc/uvc_video.c | 8 ++++ drivers/mfd/ab8500-core.c | 2 +- drivers/mfd/db8500-prcmu.c | 4 +- drivers/mfd/mc13xxx-core.c | 4 +- drivers/mfd/ti_am335x_tscadc.c | 5 ++- drivers/mfd/twl-core.c | 4 +- drivers/mfd/wm5110-tables.c | 2 + drivers/mmc/host/mmc_spi.c | 1 + drivers/net/ethernet/altera/altera_msgdma.c | 3 +- drivers/net/ethernet/altera/altera_tse_main.c | 4 +- drivers/net/ethernet/atheros/atlx/atl2.c | 4 +- drivers/net/ethernet/broadcom/bcmsysport.c | 4 ++ drivers/net/ethernet/ibm/ibmveth.c | 2 - drivers/net/ethernet/marvell/mv643xx_eth.c | 7 ++- drivers/net/ethernet/marvell/sky2.c | 24 ++++++++++- .../net/ethernet/mellanox/mlx4/resource_tracker.c | 6 +-- drivers/net/phy/mdio_bus.c | 1 - drivers/net/phy/micrel.c | 14 +++++- drivers/net/ppp/pptp.c | 1 + drivers/net/team/team.c | 27 +++--------- drivers/net/team/team_mode_loadbalance.c | 15 +++++++ drivers/net/vxlan.c | 10 +++++ drivers/parport/parport_pc.c | 2 +- drivers/platform/x86/Kconfig | 1 + drivers/regulator/s2mpa01.c | 10 ++--- drivers/regulator/s2mps11.c | 6 +-- drivers/s390/block/dasd_eckd.c | 8 ++++ drivers/s390/net/qeth_core_main.c | 15 +++---- drivers/scsi/csiostor/csio_attr.c | 2 +- drivers/scsi/isci/init.c | 14 +++--- drivers/scsi/libfc/fc_lport.c | 6 +-- drivers/scsi/libiscsi.c | 6 +++ drivers/scsi/libsas/sas_expander.c | 2 + drivers/scsi/qla4xxx/ql4_os.c | 2 + drivers/scsi/virtio_scsi.c | 2 - drivers/target/iscsi/iscsi_target.c | 4 +- drivers/tty/serial/fsl_lpuart.c | 2 +- drivers/usb/dwc3/gadget.c | 1 + drivers/usb/gadget/function/f_sourcesink.c | 2 +- drivers/usb/serial/cp210x.c | 1 + fs/autofs4/expire.c | 3 +- fs/autofs4/inode.c | 4 +- fs/btrfs/extent_io.c | 4 +- fs/ceph/snap.c | 3 +- fs/cifs/file.c | 12 +++--- fs/cifs/smb2pdu.h | 4 +- fs/ext2/super.c | 39 +++++++++++------ fs/ext4/resize.c | 3 +- fs/hugetlbfs/inode.c | 12 ++++++ fs/jbd2/transaction.c | 17 +++++--- fs/nfs/super.c | 5 +++ fs/nfsd/nfs3proc.c | 16 ++++++- fs/nfsd/nfs3xdr.c | 1 + fs/nfsd/nfsctl.c | 2 +- include/keys/user-type.h | 2 +- include/net/gro_cells.h | 12 +++++- include/net/icmp.h | 9 +++- include/net/ip.h | 2 + kernel/rcu/tree.c | 20 ++++++--- kernel/sysctl.c | 11 ++++- lib/assoc_array.c | 8 ++-- mm/hugetlb.c | 14 +++++- mm/memory_hotplug.c | 3 +- mm/mempolicy.c | 6 +-- mm/migrate.c | 11 +++++ mm/mmap.c | 7 ++- mm/shmem.c | 10 +++-- mm/vmalloc.c | 2 +- net/9p/client.c | 2 +- net/batman-adv/soft-interface.c | 2 + net/ceph/messenger.c | 12 ++++-- net/core/net-sysfs.c | 3 ++ net/hsr/hsr_device.c | 18 ++++---- net/hsr/hsr_framereg.c | 12 ++++++ net/hsr/hsr_framereg.h | 1 + net/ipv4/cipso_ipv4.c | 23 ++++++++-- net/ipv4/icmp.c | 7 +-- net/ipv4/ip_options.c | 22 +++++++--- net/ipv4/ip_vti.c | 50 ++++++++++++++++++++++ net/ipv6/ip6mr.c | 8 ++-- net/ipv6/route.c | 2 +- net/ipv6/sit.c | 7 +-- net/l2tp/l2tp_ip6.c | 4 +- net/mac80211/cfg.c | 4 ++ net/mac80211/rx.c | 4 +- net/netfilter/ipvs/ip_vs_ctl.c | 12 ++++++ net/netlink/af_netlink.c | 34 +++++++++------ net/nfc/llcp_commands.c | 20 +++++++++ net/nfc/llcp_core.c | 24 +++++++++-- net/packet/af_packet.c | 2 +- net/unix/af_unix.c | 48 +++++++++++++-------- net/unix/diag.c | 3 +- net/wireless/reg.c | 4 +- net/x25/af_x25.c | 20 ++++++--- security/keys/key.c | 4 +- security/keys/keyring.c | 4 +- security/keys/proc.c | 3 +- security/keys/request_key.c | 1 + security/keys/request_key_auth.c | 2 +- security/lsm_audit.c | 10 +++-- sound/core/compress_offload.c | 3 +- sound/firewire/bebob/bebob.c | 14 +++++- sound/soc/fsl/fsl_esai.c | 7 +-- sound/soc/fsl/imx-audmux.c | 24 +++++------ sound/soc/intel/broadwell.c | 2 +- sound/soc/intel/haswell.c | 2 +- tools/perf/util/cpumap.c | 11 ++++- tools/perf/util/symbol-elf.c | 9 +++- 144 files changed, 850 insertions(+), 350 deletions(-)