[PATCH 4.10 00/63] 4.10.5-stable review

From: Greg Kroah-Hartman
Date: Mon Mar 20 2017 - 13:59:50 EST


This is the start of the stable review cycle for the 4.10.5 release.
There are 63 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Mar 22 17:47:25 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.10.5-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.10.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.10.5-rc1

Krzysztof Kozlowski <krzk@xxxxxxxxxx>
crypto: s5p-sss - Fix spinlock recursion on LRW(AES)

Daniel Axtens <dja@xxxxxxxxxx>
crypto: powerpc - Fix initialisation of crc32c context

Niklas Cassel <niklas.cassel@xxxxxxxx>
locking/rwsem: Fix down_write_killable() for CONFIG_RWSEM_GENERIC_SPINLOCK=y

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
futex: Add missing error handling to FUTEX_REQUEUE_PI

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
futex: Fix potential use-after-free in FUTEX_REQUEUE_PI

Andy Lutomirski <luto@xxxxxxxxxx>
x86/perf: Fix CR4.PCE propagation to use active_mm instead of mm

Jiri Olsa <jolsa@xxxxxxxxxx>
x86/intel_rdt: Put group node in rdtgroup_kn_unlock

Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
x86/kasan: Fix boot with KASAN=y and PROFILE_ANNOTATED_BRANCHES=y

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/tsc: Fix ART for TSC_KNOWN_FREQ

Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
x86/unwind: Fix last frame check for aligned function stacks

Imre Deak <imre.deak@xxxxxxxxx>
drm/i915/lspcon: Fix resume time initialization due to unasserted HPD

Imre Deak <imre.deak@xxxxxxxxx>
drm/i915/gen9+: Enable hotplug detection early

Imre Deak <imre.deak@xxxxxxxxx>
drm/i915/lspcon: Enable AUX interrupts for resume time initialization

Shanker Donthineni <shankerd@xxxxxxxxxxxxxx>
irqchip/gicv3-its: Add workaround for QDF2400 ITS erratum 0065

Marc Zyngier <marc.zyngier@xxxxxxx>
arm64: KVM: VHE: Clear HCR_TGE when invalidating guest TLBs

Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
dccp: fix memory leak during tear-down of unsuccessful connection request

Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
tun: fix premature POLLOUT notification on tun devices

Jon Maxwell <jmaxwell37@xxxxxxxxx>
dccp/tcp: fix routing redirect race

Andrey Vagin <avagin@xxxxxxxxxx>
net: use net->count to check whether a netns is alive or not

Florian Westphal <fw@xxxxxxxxx>
bridge: drop netfilter fake rtable unconditionally

Florian Westphal <fw@xxxxxxxxx>
ipv6: avoid write to a possibly cloned skb

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
ipv6: make ECMP route replacement less greedy

David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
mpls: Do not decrement alive counter for unregister events

David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
mpls: Send route delete notifications when router module is unloaded

Etienne Noss <etienne.noss@xxxxxxxxxx>
act_connmark: avoid crashing on malformed nlattrs with null parms

Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
amd-xgbe: Enable IRQs only if napi_complete_done() is true

Dmitry V. Levin <ldv@xxxxxxxxxxxx>
uapi: fix linux/packet_diag.h userspace compilation error

Paolo Abeni <pabeni@xxxxxxxxxx>
net/tunnel: set inner protocol in network gro hooks

David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
vrf: Fix use-after-free in vrf_xmit

Jarod Wilson <jarod@xxxxxxxxxx>
team: use ETH_MAX_MTU as max mtu

Eric Dumazet <edumazet@xxxxxxxxxx>
dccp: fix use-after-free in dccp_feat_activate_values

Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
net/sched: act_skbmod: remove unneeded rcu_read_unlock in tcf_skbmod_dump

Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix socket refcounting in skb_complete_tx_timestamp()

Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix socket refcounting in skb_complete_wifi_ack()

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: fix various issues for sockets morphing to listen state

WANG Cong <xiyou.wangcong@xxxxxxxxx>
strparser: destroy workqueue on module exit

WANG Cong <xiyou.wangcong@xxxxxxxxx>
bonding: use ETH_MAX_MTU as max mtu

Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
amd-xgbe: Don't overwrite SFP PHY mod_absent settings

Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
amd-xgbe: Be sure to set MDIO modes on device (re)start

Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
amd-xgbe: Stop the PHY before releasing interrupts

Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
dccp: Unlock sock before calling sk_free()

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: orphan skbs in reassembly unit

Eric Dumazet <edumazet@xxxxxxxxxx>
net: net_enable_timestamp() can be called from irq contexts

Alexander Potapenko <glider@xxxxxxxxxx>
net: don't call strlen() on the user buffer in packet_bind_spkt()

Mike Manning <mmanning@xxxxxxxxxxx>
net: bridge: allow IPv6 when multicast flood is disabled

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp/dccp: block BH for SYN processing

Ido Schimmel <idosch@xxxxxxxxxxxx>
mlxsw: spectrum_router: Avoid potential packets loss

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
geneve: lock RCU on TX path

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
vxlan: lock RCU on TX path

Paul HÃber <phueber@xxxxxxxxx>
l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv

Roman Mashak <mrv@xxxxxxxxxxxx>
net sched actions: decrement module reference count after table flush.

Xin Long <lucien.xin@xxxxxxxxx>
sctp: set sin_port for addr param when checking duplicate address

Julian Anastasov <ja@xxxxxx>
ipv4: mask tos for input route

Julian Anastasov <ja@xxxxxx>
ipv4: add missing initialization for flowi4_uid

Brian Russell <brussell@xxxxxxxxxxx>
vxlan: don't allow overwrite of config src addr

David Forster <dforster@xxxxxxxxxxx>
vti6: return GRE_KEY for vti6

Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
vxlan: correctly validate VXLAN ID against VXLAN_N_VID

Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
sctp: deny peeloff operation on asocs with threads sleeping on it

Tariq Toukan <tariqt@xxxxxxxxxxxx>
net/mlx5e: Fix wrong CQE decompression

Saeed Mahameed <saeedm@xxxxxxxxxxxx>
net/mlx5e: Update MPWQE stride size when modifying CQE compress state

Tariq Toukan <tariqt@xxxxxxxxxxxx>
net/mlx5e: Fix broken CQE compression initialization

Tariq Toukan <tariqt@xxxxxxxxxxxx>
net/mlx5e: Do not reduce LRO WQE size when not using build_skb

Saeed Mahameed <saeedm@xxxxxxxxxxxx>
net/mlx5e: Register/unregister vport representors on interface attach/detach


-------------

Diffstat:

Documentation/arm64/silicon-errata.txt | 44 +++----
Makefile | 4 +-
arch/arm64/Kconfig | 10 ++
arch/arm64/kvm/hyp/tlb.c | 64 +++++++++--
arch/powerpc/crypto/crc32c-vpmsum_glue.c | 2 +-
arch/x86/events/core.c | 4 +-
arch/x86/kernel/cpu/intel_rdt_rdtgroup.c | 2 +-
arch/x86/kernel/head64.c | 1 +
arch/x86/kernel/tsc.c | 2 +
arch/x86/kernel/unwind_frame.c | 36 +++++-
arch/x86/mm/kasan_init_64.c | 1 +
drivers/crypto/s5p-sss.c | 127 +++++++++++++--------
drivers/gpu/drm/i915/i915_drv.c | 5 +-
drivers/gpu/drm/i915/i915_irq.c | 69 ++++++++---
drivers/gpu/drm/i915/intel_dp.c | 4 +-
drivers/gpu/drm/i915/intel_drv.h | 2 +
drivers/gpu/drm/i915/intel_lspcon.c | 5 +-
drivers/irqchip/irq-gic-v3-its.c | 16 +++
drivers/net/bonding/bond_main.c | 1 +
drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 14 +--
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 24 ++++
drivers/net/ethernet/mellanox/mlx5/core/en.h | 1 +
.../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 40 ++++---
drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 14 +--
.../net/ethernet/mellanox/mlxsw/spectrum_router.c | 30 +++--
drivers/net/geneve.c | 2 +
drivers/net/team/team.c | 1 +
drivers/net/tun.c | 18 ++-
drivers/net/vrf.c | 3 +-
drivers/net/vxlan.c | 22 ++--
include/linux/dccp.h | 1 +
include/uapi/linux/packet_diag.h | 2 +-
kernel/futex.c | 22 ++--
kernel/locking/rwsem-spinlock.c | 15 ++-
net/bridge/br_forward.c | 3 +-
net/bridge/br_input.c | 1 +
net/bridge/br_netfilter_hooks.c | 21 ----
net/core/dev.c | 35 +++++-
net/core/net-sysfs.c | 6 +-
net/core/skbuff.c | 30 ++---
net/dccp/ccids/ccid2.c | 1 +
net/dccp/input.c | 10 +-
net/dccp/ipv4.c | 3 +-
net/dccp/ipv6.c | 8 +-
net/dccp/minisocks.c | 25 ++--
net/ipv4/af_inet.c | 4 +-
net/ipv4/fib_frontend.c | 6 +-
net/ipv4/route.c | 2 +
net/ipv4/tcp_input.c | 10 +-
net/ipv4/tcp_ipv4.c | 10 +-
net/ipv4/tcp_timer.c | 6 +-
net/ipv6/ip6_fib.c | 2 +
net/ipv6/ip6_offload.c | 4 +-
net/ipv6/ip6_output.c | 7 +-
net/ipv6/ip6_vti.c | 4 +
net/ipv6/netfilter/nf_conntrack_reasm.c | 1 +
net/ipv6/tcp_ipv6.c | 8 +-
net/l2tp/l2tp_ip.c | 2 +-
net/mpls/af_mpls.c | 4 +-
net/openvswitch/conntrack.c | 1 -
net/packet/af_packet.c | 8 +-
net/sched/act_api.c | 5 +-
net/sched/act_connmark.c | 3 +
net/sched/act_skbmod.c | 1 -
net/sctp/protocol.c | 6 +-
net/sctp/socket.c | 8 +-
net/strparser/strparser.c | 1 +
69 files changed, 588 insertions(+), 269 deletions(-)