[PATCH 4.18 333/350] Btrfs: fix warning when replaying log after fsync of a tmpfile

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit f2d72f42d5fa3bf33761d9e47201745f624fcff5 upstream. When replaying a log which contains a tmpfile (which necessarily has a link count of 0) we end up calling inc_nlink(), a

[PATCH 4.18 329/350] btrfs: release metadata before running delayed refs

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit f45c752b65af46bf42963295c332865d95f97fff upstream. We want to release the unused reservation we have since it refills the delayed refs reserve, which will make everything go

[PATCH 4.18 325/350] btrfs: dont attempt to trim devices that dont support it

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit 0be88e367fd8fbdb45257615d691f4675dda062f upstream. We check whether any device the file system is using supports discard in the ioctl call, but then we attempt to trim free

[PATCH 4.18 331/350] btrfs: reset max_extent_size on clear in a bitmap

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit 553cceb49681d60975d00892877d4c871bf220f9 upstream. We need to clear the max_extent_size when we clear bits from a bitmap since it could have been from the range that contain

[PATCH 4.18 312/350] soc: qcom: rmtfs-mem: Validate that scm is available

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Bjorn Andersson commit 137dc5843faeacabf48fc22a8dc58c4e0b4f0927 upstream. The scm device must be present in order for the rmtfs driver to configure memory permissions for the rmtfs memory regi

[PATCH 4.18 332/350] btrfs: make sure we create all new block groups

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit 545e3366db823dc3342ca9d7fea803f829c9062f upstream. Allocating new chunks modifies both the extent and chunk tree, which can trigger new chunk allocations. So instead of doi

[PATCH 4.18 328/350] Btrfs: dont clean dirty pages during buffered writes

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Chris Mason commit 7703bdd8d23e6ef057af3253958a793ec6066b28 upstream. During buffered writes, we follow this basic series of steps: again: lock all the pages wait for writebac

[PATCH 4.18 330/350] btrfs: protect space cache inode alloc with GFP_NOFS

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit 84de76a2fb217dc1b6bc2965cc397d1648aa1404 upstream. If we're allocating a new space cache inode it's likely going to be under a transaction handle, so we need to use memalloc

[PATCH 4.18 323/350] btrfs: Ensure btrfs_trim_fs can trim the whole filesystem

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Qu Wenruo commit 6ba9fc8e628becf0e3ec94083450d089b0dec5f5 upstream. [BUG] fstrim on some btrfs only trims the unallocated space, not trimming any space in existing block groups. [CAUSE] Befor

[PATCH 4.18 272/350] powerpc/msi: Fix compile error on mpc83xx

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Christophe Leroy commit 0f99153def98134403c9149128e59d3e1786cf04 upstream. mpic_get_primary_version() is not defined when not using MPIC. The compile error log like: arch/powerpc/sysdev/built

[PATCH 4.18 320/350] btrfs: fix error handling in free_log_tree

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit 374b0e2d6ba5da7fd1cadb3247731ff27d011f6f upstream. When we hit an I/O error in free_log_tree->walk_log_tree during file system shutdown we can crash due to there not being

[PATCH 4.18 322/350] btrfs: Enhance btrfs_trim_fs function to handle error better

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Qu Wenruo commit 93bba24d4b5ad1e5cd8b43f64e66ff9d6355dd20 upstream. Function btrfs_trim_fs() doesn't handle errors in a consistent way. If error happens when trimming existing block groups, it

[PATCH 4.18 307/350] arm64: lse: remove -fcall-used-x0 flag

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tri Vo commit 2a6c7c367de82951c98a290a21156770f6f82c84 upstream. x0 is not callee-saved in the PCS. So there is no need to specify -fcall-used-x0. Clang doesn't currently support -fcall-used

[PATCH 4.18 311/350] arm64: dts: stratix10: Correct System Manager register size

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Thor Thayer commit 74121b9aa3cd571ddfff014a9f47db36cae3cda9 upstream. Correct the register size of the System Manager node. Cc: sta...@vger.kernel.org Fixes: 78cd6a9d8e154 ("arm64: dts: Add b

[PATCH 4.18 276/350] MIPS: OCTEON: fix out of bounds array access on CN68XX

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Aaro Koskinen commit c0fae7e2452b90c31edd2d25eb3baf0c76b400ca upstream. The maximum number of interfaces is returned by cvmx_helper_get_number_of_interfaces(), and the value is used to access

[PATCH 4.18 306/350] media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 463659a08d7999d5461fa45b35b17686189a70ca upstream. These names have been renamed in the CTA-861 standard due to trademark issues. Replace them here as well so they are in s

[PATCH 4.18 279/350] rtc: cmos: Remove the `use_acpi_alarm module parameter for !ACPI

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Maciej W. Rozycki commit bc51098cdd9573bfdecfd02fc8ed474419d73ea0 upstream. Fix a problem with commit 311ee9c151ad ("rtc: cmos: allow using ACPI for RTC alarm instead of HPET") defining `use_a

[PATCH 4.18 305/350] media: replace ADOBERGB by OPRGB

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit db0340182444612bcadb98bdec22f651aa42266c upstream. The CTA-861 standards have been updated to refer to opRGB instead of AdobeRGB. The official standard is in fact named opR

[PATCH 4.18 281/350] ocxl: Fix access to the AFU Descriptor Data

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Christophe Lombard commit 6f8e45f7eb1bee5efdbe4a9cfe4a45627403c5fb upstream. The AFU Information DVSEC capability is a means to extract common, general information about all of the AFUs associ

[PATCH 4.18 280/350] power: supply: twl4030-charger: fix OF sibling-node lookup

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 9844fb2e351311210e6660a9a1c62d17424a6145 upstream. Use the new of_get_compatible_child() helper to lookup the usb sibling node instead of using of_find_compatible_node(), w

Linux 4.20-rc2

Fairly normal week, aside from me traveling. Shortlog appended, but it all looks fine: about half drivers, wih the rest being the usual architecture updates, tooling, networking, and some filesystem updates. Go forth and test, Linus --- Aaro Koskinen (2): MIPS: OCTEON: fix

[PATCH 4.18 277/350] rtc: ds1307: fix ds1339 wakealarm support

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Soeren Moch commit 7dceef78f310f5351735060d78a1777c69606016 upstream. Commit 51ed73eb998a1c79a2b0e9bed68f75a8a2c93b9b ("rtc: ds1340: Add support for trickle charger.") breaks ds1339 wakealarm

[PATCH 4.18 303/350] drm/mediatek: fix OF sibling-node lookup

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit ceff2f4dcd44abf35864d9a99f85ac619e89a01d upstream. Use the new of_get_compatible_child() helper to lookup the sibling instead of using of_find_compatible_node(), which sear

[PATCH 4.18 278/350] rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Maciej W. Rozycki commit d197a253855d2d8e507a003880aab35c4e2473db upstream. Fix a commit 311ee9c151ad ("rtc: cmos: allow using ACPI for RTC alarm instead of HPET") `rtc-cmos' regression causin

[PATCH 4.18 308/350] rpmsg: smd: fix memory leak on channel create

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Colin Ian King commit 940c620d6af8fca7d115de40f19870fba415efac upstream. Currently a failed allocation of channel->name leads to an immediate return without freeing channel. Fix this by settin

[PATCH 4.18 302/350] media: adv7842: when the EDID is cleared, unconfigure CEC as well

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit ab83203e181015b099720aff43ffabc1812e0fb3 upstream. When there is no EDID the CEC adapter should be unconfigured as well. So call cec_phys_addr_invalidate() when this happen

[PATCH 4.18 309/350] Cramfs: fix abad comparison when wrap-arounds occur

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nicolas Pitre commit 672ca9dd13f1aca0c17516f76fc5b0e8344b3e46 upstream. It is possible for corrupted filesystem images to produce very large block offsets that may wrap when a length is added,

[PATCH 4.18 297/350] media: tvp5150: avoid going past array on v4l2_querymenu()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit 5c4c4505b716cb782ad7263091edc466c4d1fbd4 upstream. The parameters of v4l2_ctrl_new_std_menu_items() are tricky: instead of the number of possible values, it requir

[PATCH 4.18 304/350] media: media colorspaces*.rst: rename AdobeRGB to opRGB

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit a58c37978cf02f6d35d05ee4e9288cb8455f1401 upstream. Drop all Adobe references and use the official opRGB standard instead. Signed-off-by: Hans Verkuil Cc: sta...@vger.kern

[PATCH 4.18 299/350] media: em28xx: make v4l2-compliance happier by starting sequence on zero

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit afeaade90db4c5dab93f326d9582be1d5954a198 upstream. The v4l2-compliance tool complains if a video doesn't start with a zero sequence number. While this shouldn't c

[PATCH 4.18 301/350] media: adv7604: when the EDID is cleared, unconfigure CEC as well

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit e7da89926f6dc6cf855f5ffdf79ef99a1b115ca7 upstream. When there is no EDID the CEC adapter should be unconfigured as well. So call cec_phys_addr_invalidate() when this happen

[PATCH 4.18 300/350] media: em28xx: fix handler for vidioc_s_input()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit 258c430456ba5f0005043762e14fc3be35983aaf upstream. The a->index is not the name of the internal amux entry, but, instead a value from zero to the maximum number of

[PATCH 4.18 298/350] media: em28xx: fix input name for Terratec AV 350

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit 15644bfa195bd166d0a5ed76ae2d587f719c3dac upstream. Instead of using a register value, use an AMUX name, as otherwise VIDIOC_G_AUDIO would fail. Cc: sta...@vger.ke

[PATCH 4.18 293/350] media: cec: add new tx/rx status bits to detect aborts/timeouts

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 7ec2b3b941a666a942859684281b5f6460a0c234 upstream. If the HDMI cable is disconnected or the CEC adapter is manually unconfigured, then all pending transmits and wait-for-re

[PATCH 4.18 296/350] media: em28xx: use a default format if TRY_FMT fails

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit f823ce2a1202d47110a7ef86b65839f0be8adc38 upstream. Follow the V4L2 spec, as warned by v4l2-compliance: warn: v4l2-test-formats.cpp(732): TRY_FMT cannot ha

[PATCH 4.18 291/350] xen: remove size limit of privcmd-buf mapping interface

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit 3941552aec1e04d6388a057ae09a1c56ebeb upstream. Currently the size of hypercall buffers allocated via /dev/xen/hypercall is limited to a default of 64 memory pages. For

[PATCH 4.18 274/350] powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Nicholas Piggin commit bc276ecba132caccb1fda5863a652c15def2b8c6 upstream. PPC_INVALIDATE_ERAT is slbia IH=7 which is a new variant introduced with POWER9, and the result is undefined on earlie

[PATCH 4.18 289/350] media: cec: integrate cec_validate_phys_addr() in cec-api.c

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit e81bff39489a06384822bb38ce7a59f9e365bbe9 upstream. The cec_phys_addr_validate() function will be moved to V4L2, so use a simplified variant of that function in cec-api.c. c

[PATCH 4.18 242/350] crypto: speck - remove Speck

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jason A. Donenfeld commit 578bdaabd015b9b164842c3e8ace9802f38e7ecc upstream. These are unused, undesired, and have never actually been used by anybody. The original authors of this code have c

[PATCH 4.18 292/350] xen-blkfront: fix kernel panic with negotiate_mq error path

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Manjunath Patil commit 6cc4a0863c9709c512280c64e698d68443ac8053 upstream. info->nr_rings isn't adjusted in case of ENOMEM error from negotiate_mq(). This leads to kernel panic in error path.

[PATCH 4.18 295/350] media: cec: forgot to cancel delayed work

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 490d84f6d73c12f4204241cff8651eed60aae914 upstream. If the wait for completion was interrupted, then make sure to cancel any delayed work. This can only happen if a transmi

[PATCH 4.18 290/350] xen: fix xen_qlock_wait()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit d3132b3860f6cf35ff7609a76bbcdbb814bd027c upstream. Commit a856531951dc80 ("xen: make xen_qlock_wait() nestable") introduced a regression for Xen guests running fully virtu

[PATCH 4.18 288/350] media: cec: make cec_get_edid_spa_location() an inline function

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit b915bf575d5b7774d0f22d57d6c143e07dcaade2 upstream. This function is needed by both V4L2 and CEC, so move this to cec.h as a static inline since there are no obvious shared

[PATCH 4.18 235/350] signal/GenWQE: Fix sending of SIGKILL

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric W. Biederman commit 0ab93e9c99f8208c0a1a7b7170c827936268c996 upstream. The genweq_add_file and genwqe_del_file by caching current without using reference counting embed the assumption tha

[PATCH 4.18 286/350] Revert "media: dvbsky: use just one mutex for serializing device R/W ops"

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit 9afc82194de9a1ce298f0d77d7d779d585bf962c upstream. As pointed at: https://bugzilla.kernel.org/show_bug.cgi?id=199323 This patch causes a bad effect on RPi

[PATCH 4.18 282/350] iommu/arm-smmu: Ensure that page-table updates are visible before TLBI

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit 7d321bd3542500caf125249f44dc37cb4e738013 upstream. The IO-pgtable code relies on the driver TLB invalidation callbacks to ensure that all page-table updates are visible to t

[PATCH 4.18 287/350] kgdboc: Passing ekgdboc to command line causes panic

4.18-stable review patch. If anyone has any objections, please let me know. -- From: He Zhe commit 1bd54d851f50dea6af30c3e6ff4f3e9aab5558f9 upstream. kgdboc_option_setup does not check input argument before passing it to strlen. The argument would be a NULL pointer if "ekgdboc

[PATCH 4.18 285/350] media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 250854eed5d45a73d81e4137dfd85180af6f2ec3 upstream. When the OSD is on (i.e. vivid displays text on top of the test pattern), and you enable hflip, then the driver crashes.

[PATCH 4.18 273/350] powerpc/tm: Fix HFSCR bit for no suspend case

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Michael Neuling commit dd9a8c5a87395b6f05552c3b44e42fdc95760552 upstream. Currently on P9N DD2.1 we end up taking infinite TM facility unavailable exceptions on the first TM usage by userspace

[PATCH 4.18 284/350] net: bcmgenet: fix OF child-node lookup

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit d397dbe606120a1ea1b11b0020c3f7a3852da5ac upstream. Use the new of_get_compatible_child() helper to lookup the mdio child node instead of using of_find_compatible_node(), wh

[PATCH 4.18 283/350] TC: Set DMA masks for devices

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Maciej W. Rozycki commit 3f2aa244ee1a0d17ed5b6c86564d2c1b24d1c96b upstream. Fix a TURBOchannel support regression with commit 205e1b7f51e4 ("dma-mapping: warn when there is no coherent_dma_mas

[PATCH 4.18 265/350] nfsd: Fix an Oops in free_session()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream. In call_xpt_users(), we delete the entry from the list, but we do not reinitialise it. This triggers the list poisonin

[PATCH 4.18 264/350] nfsd: correctly decrement odstate refcount in error path

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Andrew Elble commit bd8d725078867cda250fe94b9c5a067b4a64ca74 upstream. alloc_init_deleg() both allocates an nfs4_delegation, and bumps the refcount on odstate. So after this point, we need to

[PATCH 4.18 268/350] dm zoned: fix metadata block ref counting

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Damien Le Moal commit 33c2865f8d011a2ca9f67124ddab9dc89382e9f1 upstream. Since the ref field of struct dmz_mblock is always used with the spinlock of struct dmz_metadata locked, there is no ne

[PATCH 4.18 270/350] media: ov7670: make "xclk" clock optional

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lubomir Rintel commit 786fa584eda86d6598db3b87c61dc81f68808d11 upstream. When the "xclk" clock was added, it was made mandatory. This broke the driver on an OLPC plaform which doesn't know suc

[PATCH 4.18 271/350] fsnotify: Fix busy inodes during unmount

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit 721fb6fbfd2132164c2e8777cc837f9b2c1794dc upstream. Detaching of mark connector from fsnotify_put_mark() can race with unmounting of the filesystem like: CPU1

[PATCH 4.18 244/350] ima: fix showing large violations or runtime_measurements_count

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers commit 1e4c8dafbb6bf72fb5eca035b861e39c5896c2b7 upstream. The 12 character temporary buffer is not necessarily long enough to hold a 'long' value. Increase it. Signed-off-by: Er

[PATCH 4.18 243/350] mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Vlastimil Babka commit fa76da461bb0be13c8339d984dcf179151167c8f upstream. Leonardo reports an apparent regression in 4.19-rc7: BUG: unable to handle kernel NULL pointer dereference at 00

[PATCH 4.18 239/350] crypto: aesni - dont use GFP_ATOMIC allocation if the request doesnt cross a page in gcm

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mikulas Patocka commit a788848116454d753b13a4888e0e31ada3c4d393 upstream. This patch fixes gcmaes_crypt_by_sg so that it won't use memory allocation if the data doesn't cross a page boundary.

[PATCH 4.18 269/350] dm zoned: fix various dmz_get_mblock() issues

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Damien Le Moal commit 3d4e738311327bc4ba1d55fbe2f1da3de4a475f9 upstream. dmz_fetch_mblock() called from dmz_get_mblock() has a race since the allocation of the new metadata block descriptor an

[PATCH 4.18 240/350] crypto: morus/generic - fix for big endian systems

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ard Biesheuvel commit 5a8dedfa3276e88c5865f265195d63d72aec3e72 upstream. Omit the endian swabbing when folding the lengths of the assoc and crypt input buffers into the state to finalize the t

[PATCH 4.18 266/350] lockd: fix access beyond unterminated strings in prints

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Amir Goldstein commit 93f38b6fae0ea8987e22d9e6c38f8dfdccd867ee upstream. printk format used %*s instead of %.*s, so hostname_len does not limit the number of bytes accessed from hostname. Sig

[PATCH 4.18 267/350] dm ioctl: harden copy_params()s copy_from_user() from malicious users

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Wenwen Wang commit 800a7340ab7dd667edf95e74d8e4f23a17e87076 upstream. In copy_params(), the struct 'dm_ioctl' is first copied from the user space buffer 'user' to 'param_kernel' and the field

[PATCH 4.18 238/350] crypto: tcrypt - fix ghash-generic speed test

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Horia Geantă commit 331351f89c36bf7d03561a28b6f64fa10a9f6f3a upstream. ghash is a keyed hash algorithm, thus setkey needs to be called. Otherwise the following error occurs: $ modprobe tcrypt

[PATCH 4.18 256/350] smb3: allow stats which track session and share reconnects to be reset

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Steve French commit 2c887635cd6ab3af619dc2be94e5bf8f2e172b78 upstream. Currently, "echo 0 > /proc/fs/cifs/Stats" resets all of the stats except the session and share reconnect counts. Fix it

[PATCH 4.18 260/350] genirq: Fix race on spurious interrupt detection

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lukas Wunner commit 746a923b863a1065ef77324e1e43f19b1a3eab5c upstream. Commit 1e77d0a1ed74 ("genirq: Sanitize spurious interrupt detection of threaded irqs") made detection of spurious interru

[PATCH 4.18 259/350] printk: Fix panic caused by passing log_buf_len to command line

4.18-stable review patch. If anyone has any objections, please let me know. -- From: He Zhe commit 277fcdb2cfee38ccdbe07e705dbd4896ba0c9930 upstream. log_buf_len_setup does not check input argument before passing it to simple_strtoull. The argument would be a NULL pointer if "

[PATCH 4.18 253/350] iio: adc: at91: fix acking DRDY irq on simple conversions

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eugen Hristev commit bc1b45326223e7e890053cf6266357adfa61942d upstream. When doing simple conversions, the driver did not acknowledge the DRDY irq. If this irq status is not acked, it will be

[PATCH 4.18 263/350] nfs: Fix a missed page unlock after pg_doio()

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Benjamin Coddington commit fdbd1a2e4a71adcb1ae219fcfd964930d77a7f84 upstream. We must check pg_error and call error_cleanup after any call to pg_doio. Currently, we are skipping the unlock of

[PATCH 4.18 262/350] NFSv4.1: Fix the r/wsize checking

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Trond Myklebust commit 943cff67b842839f4f35364ba2db5c2d3f025d94 upstream. The intention of nfs4_session_set_rwsize() was to cap the r/wsize to the buffer sizes negotiated by the CREATE_SESSION

[PATCH 4.18 257/350] smb3: do not attempt cifs operation in smb3 query info error path

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Steve French commit 1e77a8c204c9d1b655c61751b8ad0fde22421dbb upstream. If backupuid mount option is sent, we can incorrectly retry (on access denied on query info) with a cifs (FindFirst) oper

[PATCH 4.18 237/350] crypto: lrw - Fix out-of bounds access on counter overflow

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ondrej Mosnacek commit fbe1a850b3b1522e9fc22319ccbbcd2ab05328d2 upstream. When the LRW block counter overflows, the current implementation returns 128 as the index to the precomputed multiplic

[PATCH 4.18 255/350] w1: omap-hdq: fix missing bus unregister at removal

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Andreas Kemnade commit a007734618fee1bf35556c04fa498d41d42c7301 upstream. The bus master was not removed after unloading the module or unbinding the driver. That lead to oopses like this [ 1

[PATCH 4.18 258/350] smb3: on kerberos mount if server doesnt specify auth type use krb5

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Steve French commit 926674de6705f0f1dbf29a62fd758d0977f535d6 upstream. Some servers (e.g. Azure) do not include a spnego blob in the SMB3 negotiate protocol response, so on kerberos mounts ("s

[PATCH 4.18 254/350] iio: adc: at91: fix wrong channel number in triggered buffer mode

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eugen Hristev commit aea835f2dc8a682942b859179c49ad1841a6c8b9 upstream. When channels are registered, the hardware channel number is not the actual iio channel number. This is because the driv

[PATCH 4.18 249/350] KVM: arm64: Fix caching of host MDCR_EL2 value

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mark Rutland commit da5a3ce66b8bb51b0ea8a89f42aac153903f90fb upstream. At boot time, KVM stashes the host MDCR_EL2 value, but only does this when the kernel is not running in hyp mode (i.e. is

[PATCH 4.18 207/350] mt76: mt76x2: fix multi-interface beacon configuration

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Felix Fietkau commit 5289976ad887deb07c76df7eecf553c264aeebed upstream. If the first virtual interface is a station (or an AP with beacons temporarily disabled), the beacon of the second inter

[PATCH 4.18 236/350] signal: Guard against negative signal numbers in copy_siginfo_from_user32

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric W. Biederman commit a36700589b85443e28170be59fa11c8a104130a5 upstream. While fixing an out of bounds array access in known_siginfo_layout reported by the kernel test robot it became appar

[PATCH 4.18 247/350] mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ralph Campbell commit 86a2d59841ab0b147ffc1b7b3041af87927cf312 upstream. In hmm_mirror_unregister(), mm->hmm is set to NULL and then mmu_notifier_unregister_no_release() is called. That creat

[PATCH 4.18 206/350] usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround"

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Yoshihiro Shimoda commit afc92514a34c7414b28047b1205a6b709103c699 upstream. If the "workaround_for_vbus" is true, the driver will not call usb_disconnect(). So, since the controller keeps some

[PATCH 4.18 246/350] mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Ralph Campbell commit aab8d0520e6e7c2a61f71195e6ce7007a4843afb upstream. Private ZONE_DEVICE pages use a special pte entry and thus are not present. Properly handle this case in map_pte(), it

[PATCH 4.18 248/350] KVM: arm/arm64: Ensure only THP is candidate for adjustment

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Punit Agrawal commit fd2ef358282c849c193aa36dadbf4f07f7dcd29b upstream. PageTransCompoundMap() returns true for hugetlbfs and THP hugepages. This behaviour incorrectly leads to stage 2 faults

[PATCH 4.18 251/350] iio: ad5064: Fix regulator handling

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lars-Peter Clausen commit 8911a43bc198877fad9f4b0246a866b26bb547ab upstream. The correct way to handle errors returned by regualtor_get() and friends is to propagate the error since that means

[PATCH 4.18 245/350] hugetlbfs: dirty pages as they are added to pagecache

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mike Kravetz commit 22146c3ce98962436e401f7b7016a6f664c9ffb5 upstream. Some test systems were experiencing negative huge page reserve counts and incorrect file block counts. This was traced t

[PATCH 4.18 231/350] ARM: dts: dra7: Fix up unaligned access setting for PCIe EP

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Vignesh R commit 6d0af44a82be87c13f2320821e9fbb8b8cf5a56f upstream. Bit positions of PCIE_SS1_AXI2OCP_LEGACY_MODE_ENABLE and PCIE_SS1_AXI2OCP_LEGACY_MODE_ENABLE in CTRL_CORE_SMA_SW_7 are incor

[PATCH 4.18 230/350] EDAC, skx_edac: Fix logical channel intermediate decoding

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Qiuxu Zhuo commit 8f18973877204dc8ca4ce1004a5d28683b9a7086 upstream. The code "lchan = (lchan << 1) | ~lchan" for logical channel intermediate decoding is wrong. The wrong intermediate decodin

[PATCH 4.18 204/350] usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Shuah Khan (Samsung OSG) commit e28fd56ad5273be67d0fae5bedc7e1680e729952 upstream. In rmmod path, usbip_vudc does platform_device_put() twice once from platform_device_unregister() and then fr

[PATCH 4.18 232/350] PCI/ASPM: Fix link_state teardown on device removal

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lukas Wunner commit aeae4f3e5c38d47bdaef50446dc0ec857307df68 upstream. Upon removal of the last device on a bus, the link_state of the bridge leading to that bus is sought to be torn down by h

[PATCH 4.18 233/350] PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Bin Meng commit d0c9606b31a21028fb5b753c8ad79626292accfd upstream. Add Device IDs to the Intel GPU "spurious interrupt" quirk table. For these devices, unplugging the VGA cable and plugging i

[PATCH 4.18 205/350] usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Adam Thomson commit 1b6af2f58c2b1522e0804b150ca95e50a9e80ea7 upstream. Current code mistakenly checks against max current to determine order but this should be max voltage. This commit fixes t

[PATCH 4.18 234/350] PCI: vmd: White list for fast interrupt handlers

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Keith Busch commit a7f58b9ecfd3c0f63703ec10f4a592cc38dbd1b8 upstream. Devices with slow interrupt handlers are significantly harming performance when their interrupt vector is shared with a fa

[PATCH 4.18 202/350] xen/pvh: dont try to unplug emulated devices

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit e661c0a02d58919d776eec94b313bb57911f upstream. A Xen PVH guest has no associated qemu device model, so trying to unplug any emulated devices is making no sense at all.

[PATCH 4.18 203/350] libertas: dont set URB_ZERO_PACKET on IN USB transfer

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Lubomir Rintel commit 6528d88047801b80d2a5370ad46fb6eff2f509e0 upstream. The USB core gets rightfully upset: usb 1-1: BOGUS urb flags, 240 --> 200 WARNING: CPU: 0 PID: 60 at drivers/usb/c

[PATCH 4.18 225/350] selinux: fix mounting of cgroup2 under older policies

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Smalley commit 7bb185edb0306bb90029a5fa6b9cff900ffdbf4b upstream. commit 901ef845fa2469c ("selinux: allow per-file labeling for cgroupfs") broke mounting of cgroup2 under older SELinux

[PATCH 4.18 201/350] xen/pvh: increase early stack size

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Roger Pau Monne commit 7deecbda3026f5e2a8cc095d7ef7261a920efcf2 upstream. While booting on an AMD EPYC box the stack canary would detect stack overflows when using the current PVH early stack

[PATCH 4.18 228/350] EDAC, amd64: Add Family 17h, models 10h-2fh support

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Michael Jin commit 8960de4a5ca7980ed1e19e7ca5a774d3b7a55c38 upstream. Add new device IDs for family 17h, models 10h-2fh. This is required by amd64_edac_mod in order to properly detect PCI dev

[PATCH 4.18 229/350] EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Tony Luck commit 432de7fd7630c84ad24f1c2acd1e3bb4ce3741ca upstream. The count of errors is picked up from bits 52:38 of the machine check bank status register. But this is the count of *correc

[PATCH 4.18 224/350] ext4: fix use-after-free race in ext4_remount()s error path

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 33458eaba4dfe778a426df6a19b7aad2ff9f7eec upstream. It's possible for ext4_show_quota_options() to try reading s_qf_names[i] while it is being modified by ext4_remount() --

[PATCH 4.18 227/350] HID: hiddev: fix potential Spectre v1

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Breno Leitao commit f11274396a538b31bc010f782e05c2ce3f804c13 upstream. uref->usage_index can be indirectly controlled by userspace, hence leading to a potential exploitation of the Spectre var

[PATCH 4.18 226/350] HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452

4.18-stable review patch. If anyone has any objections, please let me know. -- From: Jason Gerecke commit 11db8173dbab7a94cf5ba5225fcedbfc0f3b7e54 upstream. The DTK-2451 and DTH-2452 have a buggy HID descriptor which incorrectly contains a Cintiq-like report, complete with pen

  1   2   3   4   5   6   7   8   9   10   >