[PATCH 3.18 00/64] 3.18.88-stable review

From: Greg Kroah-Hartman
Date: Fri Dec 15 2017 - 04:22:36 EST


This is the start of the stable review cycle for the 3.18.88 release.
There are 64 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun Dec 17 09:21:53 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.88-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 3.18.88-rc1

Vincent Pelletier <plr.vincent@xxxxxxxxx>
usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping

Marc Zyngier <marc.zyngier@xxxxxxx>
arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one

Paul Moore <paul@xxxxxxxxxxxxxx>
audit: ensure that 'audit=1' actually enables audit for PID 1

David Howells <dhowells@xxxxxxxxxx>
afs: Connect up the CB.ProbeUuid

Majd Dibbiny <majd@xxxxxxxxxxxx>
IB/mlx5: Assign send CQ and recv CQ of UMR QP

Mark Bloch <markb@xxxxxxxxxxxx>
IB/mlx4: Increase maximal message size under UD QP

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
xfrm: Copy policy family in clone_policy

Arvind Yadav <arvind.yadav.cs@xxxxxxxxx>
atm: horizon: Fix irq release error

Xin Long <lucien.xin@xxxxxxxxx>
sctp: use the right sk after waking up from wait_buf sleep

Xin Long <lucien.xin@xxxxxxxxx>
sctp: do not free asoc when it is already dead in sctp_sendmsg

Pavel Tatashin <pasha.tatashin@xxxxxxxxxx>
sparc64/mm: set fields in deferred pages

Chuck Lever <chuck.lever@xxxxxxxxxx>
sunrpc: Fix rpc_task_begin trace point

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFS: Fix a typo in nfs_rename()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0

Stephen Bates <sbates@xxxxxxxxxxxx>
lib/genalloc.c: make the avail variable an atomic_long_t

Xin Long <lucien.xin@xxxxxxxxx>
route: update fnhe_expires for redirect when the fnhe exists

Xin Long <lucien.xin@xxxxxxxxx>
route: also update fnhe_genid when updating a route cache

JÃrÃmy Lefaure <jeremy.lefaure@xxxxxxxxxxxx>
EDAC, i5000, i5400: Fix definition of NRECMEMB register

JÃrÃmy Lefaure <jeremy.lefaure@xxxxxxxxxxxx>
EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro

Jan Kara <jack@xxxxxxx>
axonram: Fix gendisk handling

Chris Brandt <chris.brandt@xxxxxxxxxxx>
i2c: riic: fix restart condition

Krzysztof Kozlowski <krzk@xxxxxxxxxx>
crypto: s5p-sss - Fix completing crypto request in IRQ handler

WANG Cong <xiyou.wangcong@xxxxxxxxx>
ipv6: reorder icmpv6_init() and ip6_mr_init()

Michal Schmidt <mschmidt@xxxxxxxxxx>
bnx2x: fix possible overrun of VFPF multicast addresses array

Blomme, Maarten <Maarten.Blomme@xxxxxxxx>
spi_ks8995: fix "BUG: key accdaa28 not in .data!"

Mark Rutland <mark.rutland@xxxxxxx>
arm: KVM: Survive unknown traps from guests

Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset

Franck Demathieu <fdemathieu@xxxxxxxxx>
irqchip/crossbar: Fix incorrect type of register size

James Smart <jsmart2021@xxxxxxxxx>
scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters

Tejun Heo <tj@xxxxxxxxxx>
workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq

Tejun Heo <tj@xxxxxxxxxx>
libata: drop WARN from protocol error in ata_sff_qc_issue()

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
USB: gadgetfs: Fix a potential memory leak in 'dev_config()'

John Keeping <john@xxxxxxxxxxxx>
usb: gadget: configs: plug memory leak

Sachin Sant <sachinp@xxxxxxxxxxxxxxxxxx>
selftest/powerpc: Fix false failures for skipped tests

Sasha Levin <alexander.levin@xxxxxxxxxxx>
Revert "s390/kbuild: enable modversions for symbols exported from asm"

Sasha Levin <alexander.levin@xxxxxxxxxxx>
Revert "drm/armada: Fix compile fail"

Eric Dumazet <edumazet@xxxxxxxxxx>
net/packet: fix a race in packet_bind() and packet_notifier()

Hangbin Liu <liuhangbin@xxxxxxxxx>
sit: update frag_off info

HÃkon Bugge <Haakon.Bugge@xxxxxxxxxx>
rds: Fix NULL pointer dereference in __rds_rdma_map

Dave Martin <Dave.Martin@xxxxxxx>
arm64: fpsimd: Prevent registers leaking from dead tasks

Andrew Honig <ahonig@xxxxxxxxxx>
KVM: VMX: remove I/O port 0x80 bypass on Intel hosts

Kristina Martsenko <kristina.martsenko@xxxxxxx>
arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one

Laurent Caumont <lcaumont2@xxxxxxxxx>
media: dvb: i2c transfers over usb cannot be done from stack

Daniel Thompson <daniel.thompson@xxxxxxxxxx>
kdb: Fix handling of kallsyms_symbol_next() return value

Robin Murphy <robin.murphy@xxxxxxx>
iommu/vt-d: Fix scatterlist offset handling

Jaejoong Kim <climbbb.kim@xxxxxxxxx>
ALSA: usb-audio: Add check return value for usb_string()

Jaejoong Kim <climbbb.kim@xxxxxxxxx>
ALSA: usb-audio: Fix out-of-bound error

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: Remove spurious WARN_ON() at timer check

Robb Glasser <rglasser@xxxxxxxxxx>
ALSA: pcm: prevent UAF in snd_pcm_info

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
x86/PCI: Make broadcom_postcore_init() check acpi_disabled

Eric Biggers <ebiggers@xxxxxxxxxx>
X.509: reject invalid BIT STRING for subjectPublicKey

Eric Biggers <ebiggers@xxxxxxxxxx>
KEYS: add missing permission check for request_key() destination

Eric Biggers <ebiggers@xxxxxxxxxx>
ASN.1: check for error from ASN1_OP_END__ACT actions

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
efi: Move some sysfs files to be read-only by root

William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
isa: Prevent NULL dereference in isa_bus driver callbacks

Paul Meyer <Paul.Meyer@xxxxxxxxxxxxx>
hv: kvp: Avoid reading past allocated blocks from KVP file

weiping zhang <zwp10758@xxxxxxxxx>
virtio: release virtio index when fail to device_register

Martin Kelly <mkelly@xxxxxxxx>
can: usb_8dev: cancel urb on -EPIPE and -EPROTO

Martin Kelly <mkelly@xxxxxxxx>
can: esd_usb2: cancel urb on -EPIPE and -EPROTO

Martin Kelly <mkelly@xxxxxxxx>
can: ems_usb: cancel urb on -EPIPE and -EPROTO

Martin Kelly <mkelly@xxxxxxxx>
can: kvaser_usb: cancel urb on -EPIPE and -EPROTO

Jimmy Assarsson <jimmyassarsson@xxxxxxxxx>
can: kvaser_usb: ratelimit errors if incomplete messages are received

Jimmy Assarsson <jimmyassarsson@xxxxxxxxx>
can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()

Jimmy Assarsson <jimmyassarsson@xxxxxxxxx>
can: kvaser_usb: free buf in error paths


-------------

Diffstat:

Makefile | 4 +-
arch/arm/include/asm/kvm_arm.h | 4 +-
arch/arm/kvm/handle_exit.c | 19 ++++---
arch/arm64/include/asm/kvm_arm.h | 3 +-
arch/arm64/kernel/process.c | 9 +++
arch/powerpc/sysdev/axonram.c | 5 +-
arch/s390/include/asm/asm-prototypes.h | 8 ---
arch/sparc/mm/init_64.c | 9 ++-
arch/x86/kvm/vmx.c | 9 +--
arch/x86/pci/broadcom_bus.c | 2 +-
crypto/asymmetric_keys/x509_cert_parser.c | 2 +
drivers/ata/libata-sff.c | 1 -
drivers/atm/horizon.c | 2 +-
drivers/base/isa.c | 10 ++--
drivers/crypto/s5p-sss.c | 5 +-
drivers/edac/i5000_edac.c | 8 +--
drivers/edac/i5400_edac.c | 9 +--
drivers/firmware/efi/efi.c | 3 +-
drivers/firmware/efi/runtime-map.c | 10 ++--
drivers/gpu/drm/armada/Makefile | 2 -
drivers/i2c/busses/i2c-riic.c | 6 +-
drivers/infiniband/hw/mlx4/qp.c | 2 +-
drivers/infiniband/hw/mlx5/main.c | 2 +
drivers/iommu/intel-iommu.c | 8 ++-
drivers/irqchip/irq-crossbar.c | 8 +--
drivers/media/usb/dvb-usb/dibusb-common.c | 16 +++++-
drivers/net/can/usb/ems_usb.c | 2 +
drivers/net/can/usb/esd_usb2.c | 2 +
drivers/net/can/usb/kvaser_usb.c | 13 +++--
drivers/net/can/usb/usb_8dev.c | 2 +
drivers/net/ethernet/broadcom/bnx2x/bnx2x_vfpf.c | 23 ++++----
drivers/net/phy/spi_ks8995.c | 1 +
drivers/scsi/lpfc/lpfc_els.c | 14 +++--
drivers/usb/gadget/configfs.c | 1 +
drivers/usb/gadget/function/f_fs.c | 2 +-
drivers/usb/gadget/legacy/inode.c | 4 +-
drivers/virtio/virtio.c | 2 +
fs/afs/cmservice.c | 3 +
fs/nfs/dir.c | 2 +-
include/linux/genalloc.h | 3 +-
include/linux/sysfs.h | 6 ++
kernel/audit.c | 10 ++--
kernel/debug/kdb/kdb_io.c | 2 +-
kernel/workqueue.c | 1 +
lib/asn1_decoder.c | 2 +
lib/dynamic_debug.c | 4 ++
lib/genalloc.c | 10 ++--
net/ipv4/route.c | 14 +++--
net/ipv6/af_inet6.c | 10 ++--
net/ipv6/sit.c | 1 +
net/packet/af_packet.c | 5 ++
net/rds/rdma.c | 2 +-
net/sctp/socket.c | 38 ++++++++-----
net/sunrpc/sched.c | 3 +-
net/xfrm/xfrm_policy.c | 1 +
security/keys/request_key.c | 46 +++++++++++++---
sound/core/pcm.c | 2 +
sound/core/seq/seq_timer.c | 2 +-
sound/usb/mixer.c | 13 +++--
tools/hv/hv_kvp_daemon.c | 70 +++++-------------------
tools/testing/selftests/powerpc/harness.c | 6 +-
61 files changed, 288 insertions(+), 200 deletions(-)