[PATCH 4.18 001/150] xfrm: Validate address prefix lengths in the xfrm selector.

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 07bf7908950a8b14e81aa1807e3c667eab39287a ] We don't validate the address prefix lengths in the xfrm selector we got from userspace. This can lead to undefined behaviour in the addres

[PATCH 4.19 24/24] net: bridge: remove ipv6 zero address check in mcast queries

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Nikolay Aleksandrov commit 0fe5119e267f3e3d8ac206895f5922195ec55a8a upstream. Recently a check was added which prevents marking of routers with zero source address, but for IPv6 that cannot ha

[PATCH 4.19 10/24] bonding: fix length of actor system

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Tobias Jungel [ Upstream commit 414dd6fb9a1a1b59983aea7bf0f79f0085ecc5b8 ] The attribute IFLA_BOND_AD_ACTOR_SYSTEM is sent to user space having the length of sizeof(bond->params.ad_actor_syste

[PATCH 4.18 014/150] drm/i2c: tda9950: fix timeout counter check

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d98627d1360d55e3b28f702caca8b6342c4a4e45 ] Currently the check to see if the timeout has reached zero is incorrect and the check is instead checking if the timeout is non-zero and no

[PATCH 4.18 003/150] xfrm: reset transport header back to network header after all input transforms ahave been applied

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit bfc0698bebcb16d19ecfc89574ad4d696955e5d3 ] A policy may have been set up with multiple transforms (e.g., ESP and ipcomp). In this situation, the ingress IPsec processing iterates in

[PATCH 4.19 19/24] Revert "be2net: remove desc field from be_eq_obj"

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ivan Vecera [ Upstream commit 5ef79151c2fbc401cf38325e9a32e77b9fc593ae ] The mentioned commit needs to be reverted because we cannot pass string allocated on stack to request_irq(). This funct

[PATCH 4.19 22/24] sparc64: Make corrupted user stacks more debuggable.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: David Miller [ Upstream commit 5b4fc3882a649c9411dd0dcad2ddb78e911d340e ] Right now if we get a corrupted user stack frame we do a do_exit(SIGILL) which is not helpful. If under a debugger, t

[PATCH 4.18 000/150] 4.18.17-stable review

This is the start of the stable review cycle for the 4.18.17 release. There are 150 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun Nov 4 18:28:05 UTC 2018. Anything recei

[PATCH 4.19 08/24] rtnetlink: Disallow FDB configuration for non-Ethernet device

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ido Schimmel [ Upstream commit da71577545a52be3e0e9225a946e5fd79cfab015 ] When an FDB entry is configured, the address is validated to have the length of an Ethernet address, but the device fo

[PATCH 4.19 11/24] openvswitch: Fix push/pop ethernet validation

4.19-stable review patch. If anyone has any objections, please let me know. -- From: "Jaime Caama�o Ruiz" [ Upstream commit 46ebe2834ba5b541f28ee72e556a3fed42c47570 ] When there are both pop and push ethernet header actions among the actions to be applied to a packet, an unexp

[PATCH 4.18 013/150] xfrm: validate template mode

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 32bf94fb5c2ec4ec842152d0e5937cd4bb6738fa ] XFRM mode parameters passed as part of the user templates in the IP_XFRM_POLICY are never properly validated. Passing values other than val

[PATCH 4.18 012/150] ARM: 8799/1: mm: fix pci_ioremap_io() offset check

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3a58ac65e2d7969bcdf1b6acb70fa4d12a88e53e ] IO_SPACE_LIMIT is the ending address of the PCI IO space, i.e something like 0xf (and not 0x10). Therefore, when offset = 0xf

[PATCH 4.19 23/24] sparc64: Wire up compat getpeername and getsockname.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: "David S. Miller" [ Upstream commit 1f2b5b8e2df4591fbca430aff9c5a072dcc0f408 ] Fixes: 8b30ca73b7cc ("sparc: Add all necessary direct socket system calls.") Reported-by: Joseph Myers Signed-o

[PATCH 4.19 07/24] Revert "net: simplify sock_poll_wait"

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Karsten Graul [ Upstream commit 89ab066d4229acd32e323f1569833302544a4186 ] This reverts commit dd979b4df817e9976f18fb6f9d134d6bc4a3c317. This broke tcp_poll for SMC fallback: An AF_SMC socket

[PATCH 4.18 018/150] arm64: hugetlb: Fix handling of young ptes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 469ed9d823b7d240d6b9574f061ded7c3834c167 ] In the contiguous bit hugetlb break-before-make code we assume that all hugetlb pages are young. In fact, remove_migration_pte is able to

[PATCH 4.18 017/150] netfilter: conntrack: get rid of double sizeof

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 346fa83d10934cf206e2fd0f514bf8ce186f08fe ] sizeof(sizeof()) is quite strange and does not seem to be what is wanted here. The issue is detected with the help of Coccinelle. Fixes:

[PATCH 4.18 019/150] ARM: dts: BCM63xx: Fix incorrect interrupt specifiers

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3ab97942d0213b6583a5408630a8cbbfbf54730f ] A number of our interrupts were incorrectly specified, fix both the PPI and SPI interrupts to be correct. Fixes: b5762cacc411 ("ARM: bcm63

[PATCH 4.18 004/150] xfrm: reset crypto_done when iterating over multiple input xfrms

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 782710e333a526780d65918d669cb96646983ba2 ] We only support one offloaded xfrm (we do not have devices that can handle more than one offload), so reset crypto_done in xfrm_input() whe

[PATCH 4.18 016/150] netfilter: bridge: Dont sabotage nf_hook calls from an l3mdev

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a173f066c7cfc031acb8f541708041e009fc9812 ] For starters, the bridge netfilter code registers operations that are invoked any time nh_hook is called. Specifically, ip_sabotage_in watc

[PATCH 4.18 020/150] net: macb: Clean 64b dma addresses if they are not detected

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e1e5d8a9fe737d94ccc0ccbaf0c97f69a8f3e000 ] Clear ADDR64 dma bit in DMACFG register in case that HW_DMA_CAP_64B is not detected on 64bit system. The issue was observed when bootloader

[PATCH 4.18 015/150] drm/i2c: tda9950: set MAX_RETRIES for errors only

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e0dccce1193f87597548d0db6ecc942fb92c04cd ] The CEC_TX_STATUS_MAX_RETRIES should be set for errors only to prevent the CEC framework from retrying the transmit. If the transmit was su

[PATCH 4.18 005/150] mac80211: Always report TX status

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 8682250b3c1b75a45feb7452bc413d004cfe3778 ] If a frame is dropped for any reason, mac80211 wouldn't report the TX status back to user space. As the user space may rely on the TX_STAT

[PATCH 4.18 007/150] mac80211: fix pending queue hang due to TX_DROP

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 6eae4a6c2be387fec41b0d2782c4fffb57159498 ] In our environment running lots of mesh nodes, we are seeing the pending queue hang periodically, with the debugfs queues file showing line

[PATCH 4.18 006/150] cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 24f33e64fcd0d50a4b1a8e5b41bd0257aa66b0e8 ] Core regulatory hints didn't set wiphy_idx to WIPHY_IDX_INVALID. Since the regulatory request is zeroed, wiphy_idx was always implicitly se

[PATCH 4.18 008/150] cfg80211: Address some corner cases in scan result channel updating

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 119f94a6fefcc76d47075b83d2b73d04c895df78 ] cfg80211_get_bss_channel() is used to update the RX channel based on the available frame payload information (channel number from DSSS Para

[PATCH 4.18 010/150] mac80211: fix TX status reporting for ieee80211s

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c42055105785580563535e6d3143cad95c7ac7ee ] TX status reporting to ieee80211s is through ieee80211s_update_metric. There are two problems about ieee80211s_update_metric: 1. The purpo

[PATCH 4.18 009/150] mac80211: TDLS: fix skb queue/priority assignment

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cb59bc14e830028d2244861216df038165d7625d ] If the TDLS setup happens over a connection to an AP that doesn't have QoS, we nevertheless assign a non-zero TID (skb->priority) and queue

[PATCH 4.18 033/150] qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 77f2d753819b7d50c16abfb778caf1fe075faed0 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_iwarp.c:1713:25: warning: imp

[PATCH 4.18 032/150] qed: Avoid constant logical operation warning in qed_vf_pf_acquire

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1c492a9d55ba99079210ed901dd8a5423f980487 ] Clang warns when a constant is used in a boolean context as it thinks a bitwise operation may have been intended. drivers/net/ethernet/qlo

[PATCH 4.18 002/150] xfrm6: call kfree_skb when skb is toobig

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 215ab0f021c9fea3c18b75e7d522400ee6a49990 ] After commit d6990976af7c5d8f55903bfb4289b6fb030bf754 ("vti6: fix PMTU caching and reporting on xmit"), some too big skbs might be potentia

[PATCH 4.18 022/150] soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift()

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 96fc74333f84cfdf8d434c6c07254e215e2aad00 ] There is a copy and paste bug so we accidentally use the RX_ shift when we're in TX_ mode. Fixes: bb8b2062aff3 ("fsl/qe: setup clock sourc

[PATCH 4.18 031/150] qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d3a315795b4ce8b105a64a90699103121bde04a8 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_roce.c:153:12: warning: impli

[PATCH 4.18 011/150] xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 9e1437937807b0122e8da1ca8765be2adca9aee6 ] Since commit 222d7dbd258d ("net: prevent dst uses after free") skb_dst_force() might clear the dst_entry attached to the skb. The xfrm code

[PATCH 4.18 042/150] asix: Check for supported Wake-on-LAN modes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c4ce446e33d7a0e978256ac6fea4c80e59d9de5f ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user,

[PATCH 4.18 043/150] ax88179_178a: Check for supported Wake-on-LAN modes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5ba6b4aa9a410c5e2c6417df52b5e2118ea9b467 ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user,

[PATCH 4.18 035/150] scsi: qedi: Initialize the stats mutex lock

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3cc5746e5ad7688e274e193fa71278d98aa52759 ] Fix kernel NULL pointer dereference, Call Trace: [] __mutex_lock_slowpath+0xa6/0x1d0 [] mutex_lock+0x1f/0x2f [] qedi_get_protocol_tl

[PATCH 4.18 023/150] nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 30fe6d50eb088783c8729c7d930f65296b2b3fa7 ] Use array_index_nospec() to sanitize ridx with respect to speculation. Signed-off-by: Masashi Honma Signed-off-by: Johannes Berg Signed-

[PATCH 4.18 038/150] rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 37a675e768d7606fe8a53e0c459c9b53e121ac20 ] It seems that enabling IPV6_RECVERR on an IPv6 socket doesn't also turn on IP_RECVERR, so neither local errors nor ICMP-transported remote

[PATCH 4.18 036/150] rxrpc: Fix checks as to whether we should set up a new call

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit dc71db34e4f3c06b8277c8f3c2ff014610607a8c ] There's a check in rxrpc_data_ready() that's checking the CLIENT_INITIATED flag in the packet type field rather than in the packet flags fi

[PATCH 4.18 046/150] r8152: Check for supported Wake-on-LAN Modes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f2750df1548bd8a2b060eb609fc43ca82811af4c ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based

[PATCH 4.18 034/150] nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1222a16014888ed9733c11e221730d4a8196222b ] Use array_index_nospec() to sanitize i with respect to speculation. Note that the user doesn't control i directly, but can make it out of

[PATCH 4.18 039/150] rxrpc: Fix error distribution

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f334430316e7fd37c4821ebec627e27714bb5d76 ] Fix error distribution by immediately delivering the errors to all the affected calls rather than deferring them to a worker thread. The p

[PATCH 4.18 044/150] lan78xx: Check for supported Wake-on-LAN modes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit eb9ad088f96653a26b340f7c447c44cf023d5cdc ] The driver supports a fair amount of Wake-on-LAN modes, but is not checking that the user specified one that is supported. Fixes: 55d7de9d

[PATCH 4.18 048/150] smsc95xx: Check for Wake-on-LAN modes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c530c471ba37bdd9fe1c7185b01455c00ae606fb ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based

[PATCH 4.18 040/150] netfilter: nft_set_rbtree: add missing rb_erase() in GC routine

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a13f814a67b12a2f29d1decf4b4f4e700658a517 ] The nft_set_gc_batch_check() checks whether gc buffer is full. If gc buffer is full, gc buffer is released by the nft_set_gc_batch_complete

[PATCH 4.18 037/150] rxrpc: Fix RTT gathering

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit b604dd9883f783a94020d772e4fe03160f455372 ] Fix RTT information gathering in AF_RXRPC by the following means: (1) Enable Rx timestamping on the transport socket with SO_TIMESTAMPNS.

[PATCH 4.18 041/150] netfilter: avoid erronous array bounds warning

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 421c119f558761556afca6a62ad183bc2d8659e0 ] Unfortunately some versions of gcc emit following warning: $ make net/xfrm/xfrm_output.o linux/compiler.h:252:20: warning: array subscr

[PATCH 4.18 049/150] cfg80211: fix use-after-free in reg_process_hint()

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1db58529454742f67ebd96e3588315e880b72837 ] reg_process_hint_country_ie() can free regulatory_request and return REG_REQ_ALREADY_SET. We shouldn't use regulatory_request after it's ca

[PATCH 4.18 045/150] sr9800: Check for supported Wake-on-LAN modes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c5cb93e994ffb43b7b3b1ff10b9f928f54574a36 ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user,

[PATCH 4.18 047/150] smsc75xx: Check for Wake-on-LAN modes

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 9c734b2769a73eea2e9e9767c0e0bf839ff23679 ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based

[PATCH 4.18 050/150] KVM: nVMX: Do not expose MPX VMX controls when guest MPX disabled

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5f76f6f5ff96587af5acd5930f7d9fea81e0d1a8 ] Before this commit, KVM exposes MPX VMX controls to L1 guest only based on if KVM and host processor supports MPX virtualization. However,

[PATCH 4.18 025/150] mac80211_hwsim: fix race in radio destruction from netlink notifier

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f1c47eb61d52379de5747d02bb36be20d7a2d0d3 ] The asynchronous destruction from a work-queue of radios tagged with destroy-on-close may race with the owning namespace about to exit, res

[PATCH 4.18 024/150] mac80211_hwsim: fix locking when iterating radios during ns exit

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 628980e5c8f038f730582c6ee50b7410741cd96e ] The cleanup of radios during namespace exit has recently been reworked to directly delete a radio while temporarily releasing the spinlock,

[PATCH 4.18 051/150] KVM: x86: Do not use kvm_x86_ops->mpx_supported() directly

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 503234b3fdcaa578395c07e393ea3e5d13958824 ] Commit a87036add092 ("KVM: x86: disable MPX if host did not enable MPX XSAVE features") introduced kvm_mpx_supported() to return true iff M

[PATCH 4.18 027/150] Bluetooth: SMP: fix crash in unpairing

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cb28c306b93b71f2741ce1a5a66289db26715f4d ] In case unpair_device() was called through mgmt interface at the same time when pairing was in progress, Bluetooth kernel module crash was

[PATCH 4.18 026/150] mac80211_hwsim: do not omit multicast announce of first added radio

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 28ef8b49a338dc1844e86b7954cfffc7dfa2660a ] The allocation of hwsim radio identifiers uses a post-increment from 0, so the first radio has idx 0. This idx is explicitly excluded from

[PATCH 4.18 063/150] Revert "serial: 8250_dw: Fix runtime PM handling"

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit beeeac43b6fae5f5eaf707b6fcc2bf1e09deb785 ] This reverts commit d76c74387e1c978b6c5524a146ab0f3f72206f98. While commit d76c74387e1c ("serial: 8250_dw: Fix runtime PM handling") fixes

[PATCH 4.18 054/150] perf/x86/intel/uncore: Use boot_cpu_data.phys_proc_id instead of hardcorded physical package ID 0

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 6265adb9726098b7f4f7ca70bc51992b25fdd9d6 ] Physical package id 0 doesn't always exist, we should use boot_cpu_data.phys_proc_id here. Signed-off-by: Masayoshi Mizuma Signed-off-by:

[PATCH 4.18 028/150] pxa168fb: prepare the clock

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d85536cde91fcfed6fb8d983783bd2b92c843939 ] Add missing prepare/unprepare operations for fbi->clk, this fixes following kernel warning: [ cut here ] WARNI

[PATCH 4.18 021/150] soc: fsl: qbman: qman: avoid allocating from non existing gen_pool

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 64e9e22e68512da8df3c9a7430f07621e48db3c2 ] If the qman driver didn't probe, calling qman_alloc_fqid_range, qman_alloc_pool_range or qman_alloc_cgrid_range (as done in dpaa_eth) will

[PATCH 4.18 064/150] locking/ww_mutex: Fix runtime warning in the WW mutex selftest

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e4a02ed2aaf447fa849e3254bfdb3b9b01e1e520 ] If CONFIG_WW_MUTEX_SELFTEST=y is enabled, booting an image in an arm64 virtual machine results in the following traceback if 8 CPUs are ena

[PATCH 4.18 066/150] be2net: dont flip hw_features when VXLANs are added/deleted

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 2d52527e80c2dc0c5f43f50adf183781262ec565 ] the be2net implementation of .ndo_tunnel_{add,del}() changes the value of NETIF_F_GSO_UDP_TUNNEL bit in 'features' and 'hw_features', but i

[PATCH 4.18 030/150] qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit db803f36e56f23b5a2266807e190d1dc11554d54 ] Clang complains when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_vf.c:686:6: warning: impl

[PATCH 4.18 065/150] drm/amd/display: Signal hw_done() after waiting for flip_done()

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 987bf116445db5d63a5c2ed94c4479687d9c9973 ] In amdgpu_dm_commit_tail(), wait until flip_done() is signaled before we signal hw_done(). [Why] This is to temporarily address a paging

[PATCH 4.18 029/150] qed: Avoid implicit enum conversion in qed_set_tunn_cls_info

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a898fba32229efd5e6b6154f83fa86a7145156b9 ] Clang warns when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_sp_commands.c:163:25: warning

[PATCH 4.18 052/150] KVM: nVMX: Fix emulation of VM_ENTRY_LOAD_BNDCFGS

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 62cf9bd8118c4009f02c477ef78c723f49e53e16 ] L2 IA32_BNDCFGS should be updated with vmcs12->guest_bndcfgs only when VM_ENTRY_LOAD_BNDCFGS is specified in vmcs12->vm_entry_controls. Ot

[PATCH 4.18 071/150] mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 51896864579d5a3349740847083f4db5c6487164 ] get_user_pages_fast() will return negative value if no pages were pinned, then be converted to a unsigned, which is compared to zero, givin

[PATCH 4.18 067/150] powerpc/numa: Skip onlining a offline node in kdump path

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit ac1788cc7da4ce54edcfd2e499afdb0a23d5c41d ] With commit 2ea626306810 ("powerpc/topology: Get topology for shared processors at boot"), kdump kernel on shared LPAR may crash. The nece

[PATCH 4.18 073/150] x86/paravirt: Fix some warning messages

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 571d0563c8881595f4ab027aef9ed1c55e3e7b7c ] The first argument to WARN_ONCE() is a condition. Fixes: 5800dc5c19f3 ("x86/paravirt: Fix spectre-v2 mitigations for paravirt guests") Si

[PATCH 4.18 069/150] yam: fix a missing-check bug

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 0781168e23a2fc8dceb989f11fc5b39b3ccacc35 ] In yam_ioctl(), the concrete ioctl command is firstly copied from the user-space buffer 'ifr->ifr_data' to 'ioctl_cmd' and checked through

[PATCH 4.18 055/150] perf/ring_buffer: Prevent concurent ring buffer access

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cd6fb677ce7e460c25bdd66f689734102ec7d642 ] Some of the scheduling tracepoints allow the perf_tp_event code to write to ring buffer under different cpu than the code is running on. T

[PATCH 4.18 068/150] net: cxgb3_main: fix a missing-check bug

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 2c05d88818ab6571816b93edce4d53703870d7ae ] In cxgb_extension_ioctl(), the command of the ioctl is firstly copied from the user-space buffer 'useraddr' to 'cmd' and checked through th

[PATCH 4.18 072/150] mm/migrate.c: split only transparent huge pages when allocation fails

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit e6112fc300702f96374f34368513d57795fc6d23 ] split_huge_page_to_list() fails on HugeTLB pages. I was experimenting with moving 32MB contig HugeTLB pages on arm64 (with a debug patch a

[PATCH 4.18 070/150] ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 69eb7765b9c6902444c89c54e7043242faf981e5 ] ocfs2_duplicate_clusters_by_page() may crash if one of the extent's pages is dirty. When a page has not been written back, it is still in

[PATCH 4.18 058/150] thunderbolt: Do not handle ICM events after domain is stopped

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 86da809dda64a63fc27e05a215475325c3aaae92 ] If there is a long chain of devices connected when the driver is loaded ICM sends device connected event for each and those are put to tb->

[PATCH 4.18 061/150] declance: Fix continuation with the adapter identification message

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit fe3a83af6a50199bf250fa331e94216912f79395 ] Fix a commit 4bcc595ccd80 ("printk: reinstate KERN_CONT for printing continuation lines") regression with the `declance' driver, which caus

[PATCH 4.18 074/150] clk: mvebu: armada-37xx-periph: Remove unused var num_parents

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 8927c27b32703e28041ae19bf25ea53461be83a1 ] When building armada-37xx-periph, num_parents isn't used in function clk_pm_cpu_get_parent: drivers/clk/mvebu/armada-37xx-periph.c: In func

[PATCH 4.18 077/150] tls: Fix improper revert in zerocopy_from_iter

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 2da19ed3e4a87db16c0f69039da9f17a9596c350 ] The current code is problematic because the iov_iter is reverted and never advanced in the non-error case. This patch skips the revert in t

[PATCH 4.18 057/150] perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit d7cbbe49a9304520181fb8c9272d1327deec8453 ] In Family 17h, some L3 Cache Performance events require the ThreadMask and SliceMask to be set. For other events, these fields do not affec

[PATCH 4.18 076/150] perf report: Dont try to map ip to invalid map

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit ff4ce2885af8f9e8e99864d78dbeb4673f089c76 ] Fixes a crash when the report encounters an address that could not be associated with an mmaped region: #0 0x557bdc4a in callch

[PATCH 4.18 060/150] net: fec: fix rare tx timeout

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 657ade07df72847f591ccdb36bd9b91ed0edbac3 ] During certain heavy network loads TX could time out with TX ring dump. TX is sometimes never restarted after reaching "tx_stop_threshold"

[PATCH 4.18 075/150] libertas: call into generic suspend code before turning off power

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 4f75cdff0b986195413215eb062b7da6586f ] When powering down a SDIO connected card during suspend, make sure to call into the generic lbs_suspend() function before pulling the plug.

[PATCH 4.18 059/150] thunderbolt: Initialize after IOMMUs

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit eafa717bc145963c944bb0a64d16add683861b35 ] If IOMMU is enabled and Thunderbolt driver is built into the kernel image, it will be probed before IOMMUs are attached to the PCI bus. Bec

[PATCH 4.18 062/150] RISCV: Fix end PFN for low memory

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit ef1f2258748b675422ca0107e5bfb9ceeac675de ] Use memblock_end_of_DRAM which provides correct last low memory PFN. Without that, DMA32 region becomes empty resulting in zero pages being

[PATCH 4.18 079/150] compiler.h: Allow arch-specific asm/compiler.h

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 04f264d3a8b0eb25d378127bd78c3c9a0261c828 ] We have a need to override the definition of barrier_before_unreachable() for MIPS, which means we either need to add architecture-specific

[PATCH 4.18 080/150] ARM: dts: imx53-qsb: disable 1.2GHz OPP

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit eea96566c189c77e5272585984eb2729881a2f1d ] The maximum CPU frequency for the i.MX53 QSB is 1GHz, so disable the 1.2GHz OPP. This makes the board work again with configs that have cpu

[PATCH 4.18 053/150] perf/core: Fix perf_pmu_unregister() locking

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit a9f9772114c8b07ae75bcb3654bd017461248095 ] When we unregister a PMU, we fail to serialize the @pmu_idr properly. Fix that by doing the entire thing under pmu_lock. Signed-off-by: Pe

[PATCH 4.18 056/150] perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 9d92cfeaf5215158d26d2991be7f7ff865cb98f3 ] The counters on M3UPI Link 0 and Link 3 don't count properly, and writing 0 to these counters may causes system crash on some machines. Th

[PATCH 4.18 078/150] HID: i2c-hid: Remove RESEND_REPORT_DESCR quirk and its handling

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit afbb1169ed5b58cfca017e368b53e019cf285853 ] Commit 52cf93e63ee6 ("HID: i2c-hid: Don't reset device upon system resume") removes the need for the RESEND_REPORT_DESCR quirk for Raydium

[PATCH 4.18 082/150] perf record: Use unmapped IP for inline callchain cursors

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 7a8a8fcf7b860e4b2d4edc787c844d41cad9dfcf ] Only use the mapped IP to find inline frames, but keep using the unmapped IP for the callchain cursor. This ensures we properly show the un

[PATCH 4.18 101/150] Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"

4.18-stable review patch. If anyone has any objections, please let me know. -- This reverts commit 84379c9afe011020e797e3f50a662b08a6355dcf. >From Florian Westphal : It causes kernel crash for locally generated ipv6 fragments when netfilter ipv6 defragmentation

[PATCH 4.18 104/150] ipv6: mcast: fix a use-after-free in inet6_mc_check

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit dc012f3628eaecfb5ba68404a5c30ef501daf63d ] syzbot found a use-after-free in inet6_mc_check [1] The problem here is that inet6_mc_check() uses rcu and read_lock(

[PATCH 4.18 103/150] bridge: do not add port to router list when receives query with source 0.0.0.0

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hangbin Liu [ Upstream commit 5a2de63fd1a59c30c02526d427bc014b98adf508 ] Based on RFC 4541, 2.1.1. IGMP Forwarding Rules The switch supporting IGMP snooping must maintain a list of multi

[PATCH 4.18 102/150] perf tools: Disable parallelism for make clean

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit da15fc2fa9c07b23db8f5e479bd8a9f0d741ca07 ] The Yocto build system does a 'make clean' when rebuilding due to changed dependencies, and that consistently fails for me (causing the who

[PATCH 4.18 083/150] rxrpc: Dont check RXRPC_CALL_TX_LAST after calling rxrpc_rotate_tx_window()

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit c479d5f2c2e1ce609da08c075054440d97ddff52 ] We should only call the function to end a call's Tx phase if we rotated the marked-last packet out of the transmission buffer. Make rxrpc_

[PATCH 4.18 093/150] rds: RDS (tcp) hangs on sendto() to unresponding address

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 9a4890bd6d6325a1c88564a20ab310b2d56f6094 ] In rds_send_mprds_hash(), if the calculated hash value is non-zero and the MPRDS connections are not yet up, it will wait. But it should n

[PATCH 4.18 095/150] selftests: udpgso_bench.sh explicitly requires bash

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 12a2ea962c06efb30764c47b140d2ec9d3cd7cb0 ] The udpgso_bench.sh script requires several bash-only features. This may cause random failures if the default shell is not bash. Address th

[PATCH 4.18 094/150] selftests: rtnetlink.sh explicitly requires bash.

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3c718e677c2b35b449992adc36ecce883c467e98 ] the script rtnetlink.sh requires a bash-only features (sleep with sub-second precision). This may cause random test failure if the default

[PATCH 4.18 096/150] vmlinux.lds.h: Fix incomplete .text.exit discards

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 8dcf86caa1e3daf4a6ccf38e97f4f752b411f829 ] Enabling CONFIG_GCOV_PROFILE_ALL=y causes linker errors on ARM: `.text.exit' referenced in section `.ARM.exidx.text.exit': defined in

[PATCH 4.18 099/150] fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()

4.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit ac081c3be3fae6d0cc3e1862507fca3862d30b67 ] On non-preempt kernels this loop can take a long time (more than 50 ticks) processing through entries. Link: http://lkml.kernel.org/r/2018

<    1   2   3   4   5   6   7   8   >