[PATCH 4.19 024/170] packet: validate address length if non-zero

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit 6b8d95f1795c42161dc0984b6863e95d6acf24ed ] Validate packet socket address length if a length is given. Zero length is equivalent to not setting an address.

[PATCH 4.19 062/170] ALSA: pcm: Fix potential Spectre v1 vulnerability

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 94ffb030b6d31ec840bb811be455dd2e26a4f43e upstream. stream is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant 1

[PATCH 4.19 028/170] qmi_wwan: Added support for Telit LN940 series

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Jörgen Storvist [ Upstream commit 1986af16e8ed355822600c24b3d2f0be46b573df ] Added support for the Telit LN940 series cellular modules QMI interface. QMI_QUIRK_SET_DTR quirk requied for Qualco

[PATCH 4.19 080/170] usb: dwc2: disable power_down on Amlogic devices

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Martin Blumenstingl commit cc10ce0c51b13d1566d0ec1dcb472fb86330b391 upstream. Disable power_down by setting the parameter to DWC2_POWER_DOWN_PARAM_NONE. This fixes a problem on various Amlogic

[PATCH 4.19 088/170] Input: atmel_mxt_ts - dont try to free unallocated kernel memory

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Sanjeev Chugh commit 1e3c336ad8f40f88a8961c434640920fe35cc08b upstream. If the user attempts to update Atmel device with an invalid configuration cfg file, error handling code is trying to fre

[PATCH 4.19 087/170] s390/pci: fix sleeping in atomic during hotplug

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Sebastian Ott commit 98dfd32620e970eb576ebce5ea39d905cb005e72 upstream. When triggered by pci hotplug (PEC 0x306) clp_get_state is called with spinlocks held resulting in the following warning

[PATCH 4.19 089/170] Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Patrick Dreyer commit 7db54c89f0b30a101584e09d3729144e6170059d upstream. This adds ELAN0501 to the ACPI table to support Elan touchpad found in ASUS Aspire F5-573G. Signed-off-by: Patrick Dre

[PATCH 4.19 085/170] ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Clapper

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 984bfb398a3af6fa9b7e80165e524933b0616686 upstream. The Clapper model Chromebook uses pmc_plt_clk_0 instead of pmc_plt_clk_3 for the mclk, just like the Swanky model. This

[PATCH 4.19 082/170] usb: roles: Add a description for the class to Kconfig

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Heikki Krogerus commit c3788cd9963eb2e77de3c24142fb7c67b61f1a26 upstream. That makes the USB role switch support option visible and selectable for the user. The class driver is also moved to d

[PATCH 4.19 086/170] ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Gnawty

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 94ea56cff506c769a509c5dd87904c7fe3806a81 upstream. The Gnawty model Chromebook uses pmc_plt_clk_0 instead of pmc_plt_clk_3 for the mclk, just like the Clapper and Swanky m

[PATCH 4.19 083/170] media: dvb-usb-v2: Fix incorrect use of transfer_flags URB_FREE_BUFFER

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Malcolm Priestley commit 255095fa7f62ff09b6f61393414535c59c6b4cb0 upstream. commit 1a0c10ed7bb1 ("media: dvb-usb-v2: stop using coherent memory for URBs") incorrectly adds URB_FREE_BUFFER afte

Re: [PATCH v6 09/11] mmc: sdhci-acpi: Make PCI dependency explicit

Hi On 1/7/2019 6:12 PM, Adrian Hunter wrote: > On 7/01/19 1:17 PM, Rafael J. Wysocki wrote: >> On Sat, Jan 5, 2019 at 11:06 AM Sinan Kaya wrote: >>> >>> After 'commit 5d32a66541c4 ("PCI/ACPI: Allow ACPI to be built without >>> CONFIG_PCI set")' dependencies on CONFIG_PCI that previously were >>>

[PATCH 4.19 084/170] staging: wilc1000: fix missing read_write setting when reading data

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Colin Ian King commit c58eef061dda7d843dcc0ad6fea7e597d4c377c0 upstream. Currently the cmd.read_write setting is not initialized so it contains garbage from the stack. Fix this by setting it

[PATCH 4.19 090/170] x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Michal Hocko commit 5b5e4d623ec8a34689df98e42d038a3b594d2ff9 upstream. Swap storage is restricted to max_swapfile_size (~16TB on x86_64) whenever the system is deemed affected by L1TF vulnerab

[PATCH 4.19 063/170] ALSA: emux: Fix potential Spectre v1 vulnerabilities

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 4aea96f4237cea0c51a8bc87c0db31f0f932f1f0 upstream. info.mode and info.port are indirectly controlled by user-space, hence leading to a potential exploitation of the

[PATCH 4.19 098/170] clocksource/drivers/arc_timer: Utilize generic sched_clock

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Alexey Brodkin commit bf287607c80f24387fedb431a346dc67f25be12c upstream. It turned out we used to use default implementation of sched_clock() from kernel/sched/clock.c which was as precise as

[PATCH 4.19 096/170] drm/v3d: Skip debugfs dumping GCA on platforms without GCA.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eric Anholt commit 2f20fa8d12e859a03f68bdd81d75830141bc9ac9 upstream. Fixes an oops reading this debugfs entry on BCM7278. Signed-off-by: Eric Anholt Link: https://patchwork.freedesktop.org

[PATCH 4.19 095/170] platform-msi: Free descriptors in platform_msi_domain_free()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Miquel Raynal commit 81b1e6e6a8590a19257e37a1633bec098d499c57 upstream. Since the addition of platform MSI support, there were two helpers supposed to allocate/free IRQs for a device: pla

[PATCH 4.19 091/170] x86/mm: Drop usage of __flush_tlb_all() in kernel_physical_mapping_init()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit ba6f508d0ec4adb09f0a939af6d5e19cdfa8667d upstream. Commit: f77084d96355 "x86/mm/pat: Disable preemption around __flush_tlb_all()" addressed a case where __flush_tlb_all

[PATCH 4.19 054/170] net/mlx5e: Remove unused UDP GSO remaining counter

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Mikhael Goikhman [ Upstream commit d13b224f431579fe2d712871d4265d7a22ca6c9c ] Remove tx_udp_seg_rem counter from ethtool output, as it is no longer being updated in the driver's data flow. Fi

[PATCH 4.19 092/170] KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Sean Christopherson commit e81434995081fd7efb755fd75576b35dbb0850b1 upstream. kvm_handle_fault_on_reboot() provides a generic exception fixup handler that is used to cleanly handle faults

Re: CFS scheduler: spin_lock usage causes dead lock when smp_apic_timer_interrupt occurs

On Mon, Jan 07, 2019 at 01:28:34PM +0100, Mike Galbraith wrote: > diff --git a/kernel/sched/fair.c b/kernel/sched/fair.c > index 960ad0ce77d7..420624c49f38 100644 > --- a/kernel/sched/fair.c > +++ b/kernel/sched/fair.c > @@ -5007,9 +5007,9 @@ void init_cfs_bandwidth(struct cfs_bandwidth *cfs_b) >

[PATCH 4.19 097/170] DRM: UDL: get rid of useless vblank initialization

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Eugeniy Paltsev commit 32e932e37e6b6e13b66add307192c7ddd40a781d upstream. UDL doesn't support vblank functionality so we don't need to initialize vblank here (we are able to send page flip com

Re: [RFC PATCH 2/4] x86/setup: parse acpi to get hotplug info before init_mem_mapping()

On Mon, Jan 7, 2019 at 4:25 PM Pingfan Liu wrote: > > At present, memblock bottom-up allocation can help us against stamping over > movable node in very high probability. But if the hotplug info has already > been parsed, the memblock allocator can step around the movable node by > itself. This pa

[PATCH 4.19 081/170] Revert "usb: dwc3: pci: Use devm functions to get the phy GPIOs"

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Stephan Gerhold commit 3004cfd6204927c1294060b849029cf0c2651074 upstream. Commit 211f658b7b40 ("usb: dwc3: pci: Use devm functions to get the phy GPIOs") changed the code to claim the PHY GPIO

[PATCH 4.19 093/170] arm64: KVM: Make VHE Stage-2 TLB invalidation operations non-interruptible

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Marc Zyngier commit c987876a80e7bcb98a839f10dca9ce7fda4feced upstream. Contrary to the non-VHE version of the TLB invalidation helpers, the VHE code has interrupts enabled, meaning that we ca

[PATCH 4.19 099/170] perf machine: Record if a arch has a single user/kernel address space

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit ec1891afae740be581ecf5abc8bda74c4549203f upstream. Some architectures have a single address space for kernel and user addresses, which makes it possible to determine if an

[PATCH 4.19 065/170] mtd: atmel-quadspi: disallow building on ebsa110

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 2a9d92fb3a1282a4659f1bb6d5684018846537b7 upstream. I ran into a link-time error with the atmel-quadspi driver on the EBSA110 platform: drivers/mtd/built-in.o: In function

[PATCH 4.19 067/170] mtd: rawnand: omap2: Pass the parent of pdev to dma_request_chan()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit 9b432630e0150b777c423fdef6a7b8d17dfa70b6 upstream. Commit e1e6255c311b ("mtd: rawnand: omap2: convert driver to nand_scan()") moved part of the init code in the ->attach

[PATCH 4.19 064/170] powerpc/fsl: Fix spectre_v2 mitigations reporting

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Diana Craciun commit 7d8bad99ba5a22892f0cad6881289fdc3875a930 upstream. Currently for CONFIG_PPC_FSL_BOOK3E the spectre_v2 file is incorrect: $ cat /sys/devices/system/cpu/vulnerabilities/s

[PATCH 4.19 094/170] KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Sean Christopherson commit 1b3ab5ad1b8ad99bae76ec583809c5f5a31c707c upstream. Fixes: 34a1cd60d17f ("kvm: x86: vmx: move some vmx setting from vmx_init() to hardware_setup()") Cc: sta...@vger.

[PATCH 4.19 068/170] ALSA: hda: add mute LED support for HP EliteBook 840 G4

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Mantas Mikulėnas commit 40906ebe3af6a48457151b3c6726b480f6a6cb13 upstream. Tested with 4.19.9. v2: Changed from CXT_FIXUP_MUTE_LED_GPIO to CXT_FIXUP_HP_DOCK because that's what the existi

[PATCH 4.19 069/170] ALSA: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Wandrille RONCE commit 9cf6533e8060d3896b88ea14b27f620e6504b84b upstream. By default, there is no sound on Asus UX391UA on Linux. This patch adds sound support on Asus UX391UA. Tested working

[PATCH 4.19 060/170] ALSA: rme9652: Fix potential Spectre v1 vulnerability

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit 0b84304ef5da92add8dc75a1b07879c5374cdb05 upstream. info->channel is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre var

[PATCH 4.19 101/170] perf tools: Use fallback for sample_addr_correlates_sym() cases

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 225f99e0c811e23836c4911a2ff147e167dd1fe8 upstream. thread__resolve() is used in the sample_addr_correlates_sym() cases where 'addr' is a destination of a branch which does

[PATCH 4.19 066/170] mtd: rawnand: marvell: prevent timeouts on a loaded machine

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Miquel Raynal commit cafb56dd741e61c99709bcd2b193a9a1d36def3b upstream. marvell_nfc_wait_op() waits for completion during 'timeout_ms' milliseconds before throwing an error. While the logic is

[PATCH 4.19 112/170] ext4: avoid declaring fs inconsistent due to invalid file handles

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 8a363970d1dc38c4ec4ad575c862f776f468d057 upstream. If we receive a file handle, either from NFS or open_by_handle_at(2), and it points at an inode which has not been initi

[PATCH 4.19 023/170] packet: validate address length

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Willem de Bruijn [ Upstream commit 99137b7888f4058087895d035d81c6b2d31015c5 ] Packet sockets with SOCK_DGRAM may pass an address for use in dev_hard_header. Ensure that it is of sufficient len

[PATCH 4.19 115/170] spi: bcm2835: Fix race on DMA termination

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lukas Wunner commit e82b0b3828451c1cd331d9f304c6078fcd43b62e upstream. If a DMA transfer finishes orderly right when spi_transfer_one_message() determines that it has timed out, the callbacks

[PATCH 4.19 111/170] ext4: include terminating u32 in size of xattr entries when expanding inodes

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit a805622a757b6d7f65def4141d29317d8e37b8a1 upstream. In ext4_expand_extra_isize_ea(), we calculate the total size of the xattr header, plus the xattr entries so we know how

[PATCH 4.19 052/170] qed: Fix command number mismatch between driver and the mfw

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Sudarsana Reddy Kalluru [ Upstream commit c3db8d531045774aeee6e0f731ab15b0c450de45 ] The value for OEM_CFG_UPDATE command differs between driver and the Management firmware (mfw). Fix this gap

[PATCH 4.19 113/170] ext4: force inode writes when nfsd calls commit_metadata()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit fde872682e175743e0c3ef939c89e3c6008a1529 upstream. Some time back, nfsd switched from calling vfs_fsync() to using a new commit_metadata() hook in export_operations(). If

[PATCH 4.19 048/170] mscc: Configured MAC entries should be locked.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: "Allan W. Nielsen" [ Upstream commit 8fd1a4affbdafda592f80cd01bf7a382a5ff2fe8 ] The MAC table in Ocelot supports auto aging (normal) and static entries. MAC entries that is manually configured

[PATCH 4.19 114/170] ext4: check for shutdown and r/o file system in ext4_write_inode()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit 18f2c4fcebf2582f96cbd5f2238f4f354a0e4847 upstream. If the file system has been shut down or is read-only, then ext4_write_inode() needs to bail out early. Also use jbd2_c

[PATCH] nds32: fix asm/syscall.h

All syscall_get_* and syscall_set_* functions must be defined as static inline. Reported-by: kbuild test robot Fixes: 1932fbe36e02 ("nds32: System calls handling") Cc: Greentime Hu Cc: Vincent Chen Cc: Elvira Khabirova Cc: Eugene Syromyatnikov Cc: sta...@vger.kernel.org # v4.17+ Signed-off-by

[PATCH 4.19 102/170] perf script: Use fallbacks for branch stacks

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 692d0e63324d2954a0c63a812a8588e97023a295 upstream. Branch stacks do not necessarily have the same cpumode as the 'ip'. Use the fallback functions in those cases. This pat

Re: [PATCH] staging: wilc1000: fix cast to restricted __le32

I'm sort of surprised that the zero day bot didn't complain about this. It probably should. The endianness checking is not turned on by default in Sparse. You have to do "make C=1 CF=-D__CHECK_ENDIAN__" to turn it on. regards, dan carpenter On Sat, Jan 05, 2019 at 09:23:23AM +0100, Július Milan

[PATCH 4.19 118/170] clk: rockchip: fix typo in rk3188 spdif_frac parent

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Johan Jonker commit 8b19faf6fae2867e2c177212c541e8ae36aa4d32 upstream. Fix typo in common_clk_branches. Make spdif_pre parent of spdif_frac. Fixes: 667464208989 ("clk: rockchip: include downs

[PATCH 4.19 117/170] spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lukas Wunner commit 56c1723426d3cfd4723bfbfce531d7b38bae6266 upstream. The IRQ handler bcm2835_spi_interrupt() first reads as much as possible from the RX FIFO, then writes as much as possible

[PATCH 4.19 041/170] net/mlx5: Typo fix in del_sw_hw_rule

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Yuval Avnery [ Upstream commit f0337889147c956721696553ffcc97212b0948fe ] Expression terminated with "," instead of ";", resulted in set_fte getting bad value for modify_enable_mask field. Fi

[PATCH 4.19 110/170] ext4: fix EXT4_IOC_GROUP_ADD ioctl

4.19-stable review patch. If anyone has any objections, please let me know. -- From: ruippan (潘睿) commit e647e29196b7f802f8242c39ecb7cc937f5ef217 upstream. Commit e2b911c53584 ("ext4: clean up feature test macros with predicate functions") broke the EXT4_IOC_GROUP_ADD ioctl.

[PATCH 4.19 116/170] spi: bcm2835: Fix book-keeping of DMA termination

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lukas Wunner commit dbc944115eed48af110646992893dc43321368d8 upstream. If submission of a DMA TX transfer succeeds but submission of the corresponding RX transfer does not, the BCM2835 SPI dri

[PATCH 4.19 120/170] crypto: cavium/nitrox - fix a DMA pool free failure

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Wenwen Wang commit 7172122be6a4712d699da4d261f92aa5ab3a78b8 upstream. In crypto_alloc_context(), a DMA pool is allocated through dma_pool_alloc() to hold the crypto context. The meta data of t

[PATCH 4.19 123/170] crypto: cfb - fix decryption

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Eremin-Solenikov commit fa4600734b74f74d9169c3015946d4722f8bcf79 upstream. crypto_cfb_decrypt_segment() incorrectly XOR'ed generated keystream with IV, rather than with data stream, res

[PATCH 4.19 046/170] nfp: flower: ensure TCP flags can be placed in IPv6 frame

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Pieter Jansen van Vuuren [ Upstream commit 290974d434783624c13a9530a23c45f9c5ffe018 ] Previously we did not ensure tcp flags have a place to be stored when using IPv6. We correct this by inclu

[PATCH 4.19 124/170] cgroup: fix CSS_TASK_ITER_PROCS

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit e9d81a1bc2c48ea9782e3e8b53875f419766ef47 upstream. CSS_TASK_ITER_PROCS implements process-only iteration by making css_task_iter_advance() skip tasks which aren't threadgroup

[PATCH 4.19 129/170] Btrfs: fix fsync of files with multiple hard links in new directories

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit 41bd60676923822de1df2c50b3f9a10171f4338a upstream. The log tree has a long standing problem that when a file is fsync'ed we only check for new ancestors, created in the cu

[PATCH 4.19 125/170] cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Macpaul Lin commit eafb27fa5283599ce6c5492ea18cf636a28222bb upstream. Mediatek Preloader is a proprietary embedded boot loader for loading Little Kernel and Linux into device DRAM. This boot

[PATCH 4.19 128/170] btrfs: skip file_extent generation check for free_space_inode in run_delalloc_nocow

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lu Fengqi commit 27a7ff554e8d349627a90bda275c527b7348adae upstream. The test case btrfs/001 with inode_cache mount option will encounter the following warning: WARNING: CPU: 1 PID: 23700 at

[PATCH 4.19 126/170] btrfs: dev-replace: go back to suspended state if target device is missing

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Anand Jain commit 0d228ece59a35a9b9e8ff0d40653234a6d90f61e upstream. At the time of forced unmount we place the running replace to BTRFS_IOCTL_DEV_REPLACE_STATE_SUSPENDED state, so when the sy

[PATCH 4.19 122/170] crypto: testmgr - add AES-CFB tests

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Eremin-Solenikov commit 7da66670775d201f633577f5b15a4bbeebaaa2b0 upstream. Add AES128/192/256-CFB testvectors from NIST SP800-38A. Signed-off-by: Dmitry Eremin-Solenikov Cc: sta...@vg

[PATCH 4.19 127/170] btrfs: dev-replace: go back to suspend state if another EXCL_OP is running

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Anand Jain commit 05c49e6bc1e8866ecfd674ebeeb58cdbff9145c2 upstream. In a secnario where balance and replace co-exists as below, - start balance - pause balance - start replace - rebo

[PATCH 4.19 131/170] Btrfs: send, fix race with transaction commits that create snapshots

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Filipe Manana commit be6821f82c3cc36e026f5afd10249988852b35ea upstream. If we create a snapshot of a snapshot currently being used by a send operation, we can end up with send failing unexpect

[PATCH 4.19 103/170] perf pmu: Suppress potential format-truncation warning

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Ben Hutchings commit 11a64a05dc649815670b1be9fe63d205cb076401 upstream. Depending on which functions are inlined in util/pmu.c, the snprintf() calls in perf_pmu__parse_{scale,unit,per_pkg,snap

[PATCH 4.19 130/170] btrfs: run delayed items before dropping the snapshot

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Josef Bacik commit 0568e82dbe2510fc1fa664f58e5c997d3f1e649e upstream. With my delayed refs patches in place we started seeing a large amount of aborts in __btrfs_free_extent: BTRFS error (de

[PATCH 4.19 132/170] brcmfmac: fix roamoff=1 modparam

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Stijn Tintel commit 8c892df41500469729e0d662816300196e4f463d upstream. When the update_connect_param callback is set, nl80211 expects the flag WIPHY_FLAG_SUPPORTS_FW_ROAM to be set as well. Ho

[PATCH 4.19 133/170] brcmfmac: Fix out of bounds memory access during fw load

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Lyude Paul commit b72c51a58e6d63ef673ac96b8ab5bc98799c5f7b upstream. I ended up tracking down some rather nasty issues with f2fs (and other filesystem modules) constantly crashing on my kernel

[PATCH 4.19 137/170] dax: Use non-exclusive wait in wait_entry_unlocked()

4.19-stable review patch. If anyone has any objections, please let me know. -- commit d8a706414af4827fc0b4b1c0c631c607351938b9 upstream. get_unlocked_entry() uses an exclusive wait because it is guaranteed to eventually obtain the lock and follow on with an unlock+wakeup cycle.

[PATCH 4.19 136/170] dax: Dont access a freed inode

4.19-stable review patch. If anyone has any objections, please let me know. -- commit 55e56f06ed71d9441f3abd5b1d3c1a870812b3fe upstream. After we drop the i_pages lock, the inode can be freed at any time. The get_unlocked_entry() code has no choice but to reacquire the lock, so

[PATCH 4.19 139/170] f2fs: fix validation of the block count in sanity_check_raw_super

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Martin Blumenstingl commit 88960068f25fcc3759455d85460234dcc9d43fef upstream. Treat "block_count" from struct f2fs_super_block as 64-bit little endian value in sanity_check_raw_super() because

[PATCH 4.19 135/170] powerpc/tm: Unset MSR[TS] if not recheckpointing

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Breno Leitao commit 6f5b9f018f4c7686fd944d920209d1382d320e4e upstream. There is a TM Bad Thing bug that can be caused when you return from a signal context in a suspended transaction but with

[PATCH 4.19 134/170] powerpc/tm: Set MSR[TS] just prior to recheckpoint

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Breno Leitao commit e1c3743e1a20647c53b719dbf28b48f45d23f2cd upstream. On a signal handler return, the user could set a context with MSR[TS] bits set, and these bits would be copied to task re

[PATCH 4.19 162/170] rtc: m41t80: Correct alarm month range with RTC reads

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Maciej W. Rozycki commit 3cc9ffbb1f51eb4320575a48e4805a8f52e0e26b upstream. Add the missing adjustment of the month range on alarm reads from the RTC, correcting an issue coming from commit 9c

[PATCH 4.19 151/170] MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Huacai Chen commit bb53fdf395eed103f85061bfff3b116cee123895 upstream. For multi-node Loongson-3 (NUMA configuration), r4k_blast_scache() can only flush Node-0's scache. So we add r4k_blast_sca

[PATCH 4.19 142/170] media: cec: keep track of outstanding transmits

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 32804fcb612bf867034a093f459415e485cf044b upstream. I noticed that repeatedly running 'cec-ctl --playback' would occasionally select 'Playback Device 2' instead of 'Playback

[PATCH 4.19 159/170] arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Will Deacon commit df655b75c43fba0f2621680ab261083297fd6d16 upstream. Although bit 31 of VTCR_EL2 is RES1, we inadvertently end up setting all of the upper 32 bits to 1 as well because we defi

[PATCH 4.19 106/170] ocxl: Fix endiannes bug in read_afu_name()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kurz commit 2f07229f02d4c55affccd11a61af4fd4b94dc436 upstream. The AFU Descriptor Template in the PCI config space has a Name Space field which is a 24 Byte ASCII character string of desc

[PATCH 4.19 109/170] ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Maurizio Lombardi commit 132d00becb31e88469334e1e62751c81345280e0 upstream. In case of error, ext4_try_to_write_inline_data() should unlock and release the page it holds. Fixes: f19d5870cbf7

[PATCH 4.19 108/170] ext4: fix possible use after free in ext4_quota_enable

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Pan Bian commit 61157b24e60fb3cd1f85f2c76a7b1d628f970144 upstream. The function frees qf_inode via iput but then pass qf_inode to lockdep_set_quota_inode on the failure path. This may result i

[PATCH 4.19 100/170] perf thread: Add fallback functions for cases where cpumode is insufficient

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit 8e80ad9983caeee09c3a0a1a37e05bff93becce4 upstream. For branch stacks or branch samples, the sample cpumode might not be correct because it applies only to the sample 'ip'

[PATCH 4.19 141/170] serial: uartps: Fix interrupt mask issue to handle the RX interrupts properly

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Nava kishore Manne commit 260683137ab5276113fc322fdbbc578024185fee upstream. This patch Correct the RX interrupt mask value to handle the RX interrupts properly. Fixes: c8dbdc842d30 ("serial:

[PATCH 4.19 158/170] smb3: fix large reads on encrypted connections

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Paul Aurich commit 6d2f84eee098540ae857998fe32f29b9e2cd9613 upstream. When passing a large read to receive_encrypted_read(), ensure that the demultiplex_thread knows that a MID was processed.

[PATCH 4.19 105/170] ocxl: Fix endiannes bug in ocxl_link_update_pe()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kurz commit e1e71e201703500f708bdeaf64660a2a178cb6a0 upstream. All fields in the PE are big-endian. Use cpu_to_be32() like everywhere else something is written to the PE. Otherwise a wron

[PATCH 4.19 160/170] arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3 PPIs/SGIs

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Marc Zyngier commit 107352a24900fb458152b92a4e72fbdc83fd5510 upstream. We currently only halt the guest when a vCPU messes with the active state of an SPI. This is perfectly fine for GICv2, bu

[PATCH 4.19 165/170] KVM: arm/arm64: vgic-v2: Set active_source to 0 when restoring state

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Christoffer Dall commit 60c3ab30d8c2ff3a52606df03f05af2aae07dc6b upstream. When restoring the active state from userspace, we don't know which CPU was the source for the active state, and this

[PATCH 4.19 163/170] KVM: arm/arm64: vgic: Do not cond_resched_lock() with IRQs disabled

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Julien Thierry commit 2e2f6c3c0b08eed3fcf7de3c7684c940451bdeb1 upstream. To change the active state of an MMIO, halt is requested for all vcpus of the affected guest before modifying the IRQ s

[PATCH 4.19 166/170] KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Gustavo A. R. Silva commit c23b2e6fc4ca346018618266bcabd335c0a8a49e upstream. When using the nospec API, it should be taken into account that: "...if the CPU speculates past the bounds check

[PATCH 4.19 104/170] perf env: Also consider env->arch == NULL as local operation

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Arnaldo Carvalho de Melo commit 804234f27180dcf9a25cb98a88d5212f65b7f3fd upstream. We'll set a new machine field based on env->arch, which for live mode, like with 'perf top' means we need to

[PATCH 4.19 156/170] MIPS: Fix a R10000_LLSC_WAR logic in atomic.h

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Huacai Chen commit db1ce3f5d01d2d6d5714aefba0159d2cb5167a0b upstream. Commit 4936084c2ee2 ("MIPS: Cleanup R1_LLSC_WAR logic in atomic.h") introduce a mistake in atomic64_fetch_##op##_relax

[PATCH 4.19 154/170] MIPS: Expand MIPS32 ASIDs to 64 bits

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit ff4dd232ec45a0e45ea69f28f069f2ab22b4908a upstream. ASIDs have always been stored as unsigned longs, ie. 32 bits on MIPS32 kernels. This is problematic because it is feasible

[PATCH 4.19 153/170] MIPS: Align kernel load address to 64KB

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Huacai Chen commit bec0de4cfad21bd284dbddee016ed1767a5d2823 upstream. KEXEC needs the new kernel's load address to be aligned on a page boundary (see sanity_check_segment_list()), but on MIPS

[PATCH 4.19 157/170] CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Georgy A Bystrenin commit 9a596f5b39593414c0ec80f71b94a226286f084e upstream. While resolving a bug with locks on samba shares found a strange behavior. When a file locked by one node and we tr

[PATCH 4.19 146/170] media: vivid: free bitmap_cap when updating std/timings/etc.

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit 560ccb75c2caa6b1039dec1a53cd2ef526f5bf03 upstream. When vivid_update_format_cap() is called it should free any overlay bitmap since the compose size will change. Signed-of

[PATCH 4.19 145/170] media: imx274: fix stack corruption in imx274_read_reg

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Luca Ceresoli commit cea8c0077d6cf3a0cea2f18a8e914af78d46b2ff upstream. imx274_read_reg() takes a u8 pointer ("reg") and casts it to pass it to regmap_read(), which takes an unsigned int point

[PATCH 4.19 149/170] tools lib traceevent: Fix processing of dereferenced args in bprintk events

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Steven Rostedt (VMware) commit f024cf085c423bac7512479f45c34ee9a24af7ce upstream. In the case that a bprintk event has a dereferenced pointer that is stored as a string, and there's more value

[PATCH 4.14 000/101] 4.14.92-stable review

This is the start of the stable review cycle for the 4.14.92 release. There are 101 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Jan 9 10:53:00 UTC 2019. Anything recei

[PATCH 4.14 002/101] net: core: Fix Spectre v1 vulnerability

4.14-stable review patch. If anyone has any objections, please let me know. -- From: "Gustavo A. R. Silva" [ Upstream commit 50d5258634aee2e62832aa086d2fb0de00e72b91 ] flen is indirectly controlled by user-space, hence leading to a potential exploitation of the Spectre variant

[PATCH 4.19 143/170] media: cec-pin: fix broken tx_ignore_nack_until_eom error injection

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit ac791f19a273a7fe254a7596f193af6534582a9f upstream. If the tx_ignore_nack_until_eom error injection was activated, then tx_nacked was never set instead of setting it when th

[PATCH 4.19 144/170] media: rc: cec devices do not have a lirc chardev

4.19-stable review patch. If anyone has any objections, please let me know. -- From: Sean Young commit e5bb9d3d755f128956ed467ae50b41d22bb680c6 upstream. This fixes an oops in ir_lirc_scancode_event(). BUG: unable to handle kernel NULL pointer dereference at 0038

[PATCH 4.14 011/101] isdn: fix kernel-infoleak in capi_unlocked_ioctl

4.14-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit d63967e475ae10f286dbd35e189cb241e0b1f284 ] Since capi_ioctl() copies 64 bytes after calling capi20_get_manufacturer() we need to ensure to not leak information t

<    1   2   3   4   5   6   7   8   9   10   >