[PATCH 3.18 000/121] 3.18.105-stable review
From: Greg Kroah-Hartman
Date: Wed Apr 11 2018 - 17:25:58 EST
This is the start of the stable review cycle for the 3.18.105 release.
There are 121 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri Apr 13 18:34:28 UTC 2018.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.105-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 3.18.105-rc1
Paolo Abeni <pabeni@xxxxxxxxxx>
ipv6: the entire IPv6 header chain must fit the first fragment
Craig Dillabaugh <cdillaba@xxxxxxxxxxxx>
net sched actions: fix dumping which requires several messages to user space
Heiner Kallweit <hkallweit1@xxxxxxxxx>
r8169: fix setting driver_data after register_netdev
Eric Dumazet <edumazet@xxxxxxxxxx>
ip6_tunnel: better validate user provided tunnel names
Eric Dumazet <edumazet@xxxxxxxxxx>
vti6: better validate user provided tunnel names
Eric Dumazet <edumazet@xxxxxxxxxx>
ip6_gre: better validate user provided tunnel names
Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: sit: better validate user provided tunnel names
Eric Dumazet <edumazet@xxxxxxxxxx>
ip_tunnel: better validate user provided tunnel names
Eric Dumazet <edumazet@xxxxxxxxxx>
net: fool proof dev_valid_name()
Xin Long <lucien.xin@xxxxxxxxx>
bonding: process the err returned by dev_set_allmulti properly in bond_enslave
Xin Long <lucien.xin@xxxxxxxxx>
bonding: move dev_mc_sync after master_upper_dev_link in bond_enslave
Xin Long <lucien.xin@xxxxxxxxx>
bonding: fix the err path for dev hwaddr sync in bond_enslave
Jason Wang <jasowang@xxxxxxxxxx>
vhost: correctly remove wait queue during poll failure
Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
sky2: Increase D3 delay to sky2 stops working after suspend
Eric Dumazet <edumazet@xxxxxxxxxx>
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
Eric Dumazet <edumazet@xxxxxxxxxx>
sctp: do not leak kernel memory to user space
Eric Dumazet <edumazet@xxxxxxxxxx>
pptp: remove a buggy dst release in pptp_connect()
Alexander Potapenko <glider@xxxxxxxxxx>
netlink: make sure nladdr has correct size in netlink_connect()
Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix possible out-of-bound read in skb_network_protocol()
Mel Gorman <mgorman@xxxxxxx>
futex: Remove requirement for lock_page() in get_futex_key()
Theodore Ts'o <tytso@xxxxxxx>
random: use lockless method of accessing and updating f->reg_idx
Nathan Chancellor <natechancellor@xxxxxxxxx>
virtio_net: check return value of skb_to_sgvec in one more location
Jason A. Donenfeld <Jason@xxxxxxxxx>
virtio_net: check return value of skb_to_sgvec always
Jason A. Donenfeld <Jason@xxxxxxxxx>
rxrpc: check return value of skb_to_sgvec always
Jason A. Donenfeld <Jason@xxxxxxxxx>
ipsec: check return value of skb_to_sgvec always
Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
EDAC, mv64x60: Fix an error handling path
Tony Lindgren <tony@xxxxxxxxxxx>
tty: n_gsm: Allow ADM response in addition to UA for control dlci
chenxiang <chenxiang66@xxxxxxxxxxxxx>
scsi: libsas: initialize sas_phy status according to response of DISCOVER
Jason Yan <yanaijie@xxxxxxxxxx>
scsi: libsas: fix error when getting phy events
Jason Yan <yanaijie@xxxxxxxxxx>
scsi: libsas: fix memory leak in sas_smp_get_phy_events()
Tang Junhui <tang.junhui@xxxxxxxxxx>
bcache: segregate flash only volume write streams
Tang Junhui <tang.junhui@xxxxxxxxxx>
bcache: stop writeback thread after detaching
Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
vxlan: dont migrate permanent fdb entries during learn
Bob Moore <robert.moore@xxxxxxxxx>
ACPICA: Disassembler: Abort on an invalid/unknown AML opcode
Lv Zheng <lv.zheng@xxxxxxxxx>
ACPICA: Events: Add runtime stub support for event APIs
Marcel Holtmann <marcel@xxxxxxxxxxxx>
Bluetooth: Send HCI Set Event Mask Page 2 command only when needed
Lorenzo Bianconi <lorenzo.bianconi83@xxxxxxxxx>
iio: magnetometer: st_magn_spi: fix spi_device_id table
Jag Raman <jag.raman@xxxxxxxxxx>
sparc64: ldc abort during vds iso boot
Xin Long <lucien.xin@xxxxxxxxx>
sctp: fix recursive locking warning in sctp_do_peeloff
Mintz, Yuval <Yuval.Mintz@xxxxxxxxxx>
bnx2x: Allow vfs to disable txvlan offload
Arnd Bergmann <arnd@xxxxxxxx>
xen: avoid type warning in xchg_xen_ulong
Namhyung Kim <namhyung@xxxxxxxxxx>
perf tests: Decompress kernel module before objdump
Christian Lamparter <chunkeey@xxxxxxxxxxxxxx>
net: emac: fix reset timeout with AR8035 phy
Marcin Nowakowski <marcin.nowakowski@xxxxxxxxxx>
MIPS: kprobes: flush_insn_slot should flush only if probe initialised
Marcin Nowakowski <marcin.nowakowski@xxxxxxxxxx>
MIPS: mm: fixed mappings: correct initialisation
Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/core: Correct event creation with PERF_FORMAT_GROUP
Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
e1000e: Undo e1000e_pm_freeze if __e1000_shutdown fails
Russell King <rmk+kernel@xxxxxxxxxxxxxxx>
net: phy: avoid genphy_aneg_done() for PHYs without clause 22 support
A Sun <as1033x@xxxxxxxxxxx>
mceusb: sporadic RX truncation corruption fix
Pan Bian <bianpan2016@xxxxxxx>
cx25840: fix unchecked return values
Jacob Keller <jacob.e.keller@xxxxxxxxx>
e1000e: fix race condition around skb_tstamp_tx()
Robert Jarzmik <robert.jarzmik@xxxxxxx>
tags: honor COMPILED_SOURCE with apart output directory
Milian Wolff <milian.wolff@xxxxxxxx>
perf report: Ensure the perf DSO mapping matches what libdw sees
Talat Batheesh <talatb@xxxxxxxxxxxx>
net/mlx4: Fix the check in attaching steering rules
Jason A. Donenfeld <Jason@xxxxxxxxx>
skbuff: return -EMSGSIZE in skb_to_sgvec to prevent overflow
Dmitry Monakhov <dmonakhov@xxxxxxxxxx>
bio-integrity: Do not allocate integrity context for bio w/o data
Thomas Bogendoerfer <tsbogend@xxxxxxxxxxxxxxxx>
Fix serial console on SNI RM400 machines
Tomi Valkeinen <tomi.valkeinen@xxxxxx>
drm/omap: fix tiled buffer stride calculations
Jia-Ju Bai <baijiaju1990@xxxxxxx>
mISDN: Fix a sleep-in-atomic bug
Jia-Ju Bai <baijiaju1990@xxxxxxx>
qlcnic: Fix a sleep-in-atomic bug in qlcnic_82xx_hw_write_wx_2M and qlcnic_82xx_hw_read_wx_2M
Jiri Olsa <jolsa@xxxxxxxxxx>
perf trace: Add mmap alias for s390
Michael Ellerman <mpe@xxxxxxxxxxxxxx>
powerpc/spufs: Fix coredump of SPU contexts
Roman Pen <roman.penyaev@xxxxxxxxxxxxxxxx>
KVM: SVM: do not zero out segment attributes if segment is unusable or not present
Gustavo A. R. Silva <garsilva@xxxxxxxxxxxxxx>
net: freescale: fix potential null pointer dereference
Vaibhav Jain <vaibhav@xxxxxxxxxxxxxxxxxx>
rtc: interface: Validate alarm-time before handling rollover
Will Deacon <will.deacon@xxxxxxx>
arm64: futex: Fix undefined behaviour with FUTEX_OP_OPARG_SHIFT usage
Ivan Mikhaylov <ivan@xxxxxxxxxx>
powerpc/[booke|4xx]: Don't clobber TCR[WP] when setting TCR[DIE]
Miklos Szeredi <mszeredi@xxxxxxxxxx>
ovl: filter trusted xattr for non-admin
Firo Yang <firogm@xxxxxxxxx>
hdlcdrv: Fix divide by zero in hdlcdrv_ioctl
Colin Ian King <colin.king@xxxxxxxxxxxxx>
wl1251: check return from call to wl1251_acx_arp_ip_filter
Pieter \"PoroCYon\" Sluys <pcy@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
vfb: fix video mode and line_length being set when loaded
Rafael David Tinoco <rafael.tinoco@xxxxxxxxxxxxx>
scsi: libiscsi: Allow sd_shutdown on bad transport
Hangbin Liu <liuhangbin@xxxxxxxxx>
l2tp: fix missing print session offset info
linzhang <xiaolou4617@xxxxxxxxx>
net: llc: add lock_sock in llc_ui_bind to avoid a race condition
Jan H. SchÃnherr <jschoenh@xxxxxxxxx>
KVM: nVMX: Fix handling of lmsw instruction
Nithin Sujir <nsujir@xxxxxxxxxx>
bonding: Don't update slave->link until ready to commit
Roman Kapl <roman.kapl@xxxxxxxxx>
net: move somaxconn init from sysctl code
Eryu Guan <eguan@xxxxxxxxxx>
ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff()
Michael Schmitz <schmitzmic@xxxxxxxxx>
fix race in drivers/char/random.c:get_reg()
Maurizio Lombardi <mlombard@xxxxxxxxxx>
scsi: bnx2fc: fix race condition in bnx2fc_get_host_stats()
Liping Zhang <zlpnobody@xxxxxxxxx>
netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize
Dan Carpenter <dan.carpenter@xxxxxxxxxx>
libceph: NULL deref on crush_decode() error path
Dan Carpenter <dan.carpenter@xxxxxxxxxx>
block: fix an error code in add_partition()
Tin Huynh <tnhuynh@xxxxxxx>
leds: pca955x: Correct I2C Functionality
Kees Cook <keescook@xxxxxxxxxxxx>
ray_cs: Avoid reading past end of buffer
Suman Anna <s-anna@xxxxxx>
ARM: davinci: da8xx: Create DSP device only when assigned memory
Antony Antony <antony@xxxxxxxxxxx>
xfrm: fix state migration copy replay sequence numbers
Michael Ellerman <mpe@xxxxxxxxxxxxxx>
selftests/powerpc: Fix TM resched DSCR test with some compilers
Colin Ian King <colin.king@xxxxxxxxxxxxx>
ath5k: fix memory leak on buf on failed eeprom read
Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
sh_eth: Use platform device for printing before register_netdev()
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: ene_usb6250: fix SCSI residue overwriting
linzhang <xiaolou4617@xxxxxxxxx>
net: x25: fix one potential use-after-free issue
Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: ene_usb6250: fix first command execution
Jisheng Zhang <jszhang@xxxxxxxxxxx>
usb: chipidea: properly handle host or gadget initialization failure
Ihar Hrachyshka <ihrachys@xxxxxxxxxx>
neighbour: update neigh timestamps iff update is effective
Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
ata: libahci: properly propagate return value of platform_get_irq()
Colin Ian King <colin.king@xxxxxxxxxxxxx>
btrfs: fix incorrect error return ret being passed to mapping_set_error
Pan Bian <bianpan2016@xxxxxxx>
usb: dwc3: keystone: check return value
Anup Patel <anup.patel@xxxxxxxxxxxx>
async_tx: Fix DMA_PREP_FENCE usage in do_async_gen_syndrome()
Mahesh Bandewar <maheshb@xxxxxxxxxx>
ipv6: avoid dad-failures for addresses with NODAD
Fabio Estevam <fabio.estevam@xxxxxxx>
ARM: dts: imx6qdl-wandboard: Fix audio channel swap
Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/tsc: Provide 'tsc=unstable' boot parameter
Andrea della Porta <sfaragnaus@xxxxxxxxx>
staging: wlan-ng: prism2mgmt.c: fixed a double endian conversion before calling hfa384x_drvr_setconfig16, also fixes relative sparse warning
Dan Carpenter <dan.carpenter@xxxxxxxxxx>
PowerCap: Fix an error code in powercap_register_zone()
Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
SMB2: Fix share type handling
Neil Horman <nhorman@xxxxxxxxxxxxx>
vmxnet3: ensure that adapter is in proper state during force_close
Paul Mackerras <paulus@xxxxxxxxxx>
KVM: PPC: Book3S PR: Check copy_to/from_user return values
Colin Ian King <colin.king@xxxxxxxxxxxxx>
netxen_nic: set rcode to the return status from the call to netxen_issue_cmd
Stefan Wahren <stefan.wahren@xxxxxxxx>
net: qca_spi: Fix alignment issues in rx path
Rabin Vincent <rabinv@xxxxxxxx>
CIFS: silence lockdep splat in cifs_relock_file()
Talat Batheesh <talatb@xxxxxxxxxxxx>
net/mlx4_en: Avoid adding steering rules with invalid ring
Heiko Carstens <heiko.carstens@xxxxxxxxxx>
s390: move _text symbol to address higher than zero
Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
pidns: disable pid allocation if pid_ns_prepare_proc() is failed in alloc_pid()
J. Bruce Fields <bfields@xxxxxxxxxx>
lockd: fix lockd shutdown race
Grygorii Strashko <grygorii.strashko@xxxxxx>
net: ethernet: ti: cpsw: adjust cpsw fifos depth for fullduplex flow control
Kees Cook <keescook@xxxxxxxxxxxx>
qlge: Avoid reading past end of buffer
Kees Cook <keescook@xxxxxxxxxxxx>
bna: Avoid reading past end of buffer
Luca Coelho <luciano.coelho@xxxxxxxxx>
mac80211: bail out from prep_connection() if a reconfig is ongoing
Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
af_key: Fix slab-out-of-bounds in pfkey_compile_policy.
Bart Van Assche <bart.vanassche@xxxxxxxxxxx>
IB/srpt: Fix abort handling
Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFSv4.1: RECLAIM_COMPLETE must handle NFS4ERR_CONN_NOT_BOUND_TO_SESSION
-------------
Diffstat:
Makefile | 4 +-
arch/arm/boot/dts/imx6qdl-wandboard.dtsi | 1 +
arch/arm/include/asm/xen/events.h | 2 +-
arch/arm/mach-davinci/devices-da8xx.c | 10 +++
arch/arm64/include/asm/futex.h | 8 +-
arch/mips/include/asm/kprobes.h | 3 +-
arch/mips/mm/pgtable-32.c | 6 +-
arch/powerpc/kernel/time.c | 14 +++-
arch/powerpc/kvm/book3s_pr_papr.c | 34 ++++++--
arch/powerpc/platforms/cell/spufs/coredump.c | 2 +
arch/s390/kernel/vmlinux.lds.S | 8 +-
arch/sparc/kernel/ldc.c | 7 +-
arch/x86/kernel/tsc.c | 2 +
arch/x86/kvm/svm.c | 24 +++---
arch/x86/kvm/vmx.c | 7 +-
block/bio-integrity.c | 3 +
block/partition-generic.c | 4 +-
crypto/async_tx/async_pq.c | 5 +-
drivers/acpi/acpica/evxfevnt.c | 18 ++++
drivers/acpi/acpica/psobject.c | 14 ++++
drivers/ata/libahci_platform.c | 5 +-
drivers/char/random.c | 10 ++-
drivers/edac/mv64x60_edac.c | 2 +-
drivers/gpu/drm/omapdrm/omap_gem.c | 4 +-
drivers/iio/magnetometer/st_magn_spi.c | 2 -
drivers/infiniband/ulp/srpt/ib_srpt.c | 6 +-
drivers/isdn/mISDN/stack.c | 2 +-
drivers/leds/leds-pca955x.c | 2 +-
drivers/md/bcache/alloc.c | 19 +++--
drivers/md/bcache/super.c | 6 ++
drivers/media/i2c/cx25840/cx25840-core.c | 36 ++++----
drivers/media/rc/mceusb.c | 9 +-
drivers/net/bonding/bond_main.c | 84 ++++++++++---------
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 19 ++++-
drivers/net/ethernet/brocade/bna/bfa_ioc.c | 2 +-
drivers/net/ethernet/freescale/fsl_pq_mdio.c | 9 +-
drivers/net/ethernet/ibm/emac/core.c | 26 +++++-
drivers/net/ethernet/intel/e1000e/netdev.c | 17 +++-
drivers/net/ethernet/marvell/sky2.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/mcg.c | 15 +++-
drivers/net/ethernet/mellanox/mlx4/qp.c | 13 +++
.../net/ethernet/qlogic/netxen/netxen_nic_ctx.c | 2 +-
drivers/net/ethernet/qlogic/qlcnic/qlcnic_hw.c | 2 +-
drivers/net/ethernet/qlogic/qlge/qlge_dbg.c | 4 +-
drivers/net/ethernet/qualcomm/qca_spi.c | 10 ++-
drivers/net/ethernet/realtek/r8169.c | 4 +-
drivers/net/ethernet/renesas/sh_eth.c | 2 +-
drivers/net/ethernet/ti/cpsw.c | 16 ++++
drivers/net/hamradio/hdlcdrv.c | 2 +
drivers/net/phy/phy.c | 6 ++
drivers/net/ppp/pptp.c | 1 -
drivers/net/virtio_net.c | 16 +++-
drivers/net/vmxnet3/vmxnet3_drv.c | 5 ++
drivers/net/vxlan.c | 2 +-
drivers/net/wireless/ath/ath5k/debug.c | 5 +-
drivers/net/wireless/ray_cs.c | 7 +-
drivers/net/wireless/ti/wl1251/main.c | 3 +-
drivers/powercap/powercap_sys.c | 1 +
drivers/rtc/interface.c | 9 +-
drivers/scsi/bnx2fc/bnx2fc.h | 1 +
drivers/scsi/bnx2fc/bnx2fc_fcoe.c | 10 ++-
drivers/scsi/libiscsi.c | 24 +++++-
drivers/scsi/libsas/sas_expander.c | 4 +-
drivers/staging/wlan-ng/prism2mgmt.c | 2 +-
drivers/tty/n_gsm.c | 17 +++-
drivers/tty/serial/sccnxp.c | 15 ++--
drivers/usb/chipidea/core.c | 29 +++++--
drivers/usb/dwc3/dwc3-keystone.c | 4 +
drivers/usb/storage/ene_ub6250.c | 11 ++-
drivers/vhost/vhost.c | 3 +-
drivers/video/fbdev/vfb.c | 17 ++++
fs/btrfs/extent_io.c | 2 +-
fs/cifs/file.c | 2 +-
fs/cifs/smb2pdu.c | 14 ++--
fs/ext4/file.c | 2 +-
fs/lockd/svc.c | 6 +-
fs/nfs/nfs4proc.c | 7 +-
fs/nfs/nfs4state.c | 10 ++-
fs/overlayfs/inode.c | 12 ++-
include/linux/mlx4/qp.h | 1 +
include/linux/skbuff.h | 8 +-
include/net/x25.h | 4 +-
kernel/events/core.c | 15 ++--
kernel/futex.c | 98 ++++++++++++++++++++--
kernel/pid.c | 4 +-
net/bluetooth/hci_core.c | 17 +++-
net/ceph/osdmap.c | 1 +
net/core/dev.c | 4 +-
net/core/neighbour.c | 14 +++-
net/core/net_namespace.c | 19 +++++
net/core/skbuff.c | 65 +++++++++-----
net/core/sysctl_net_core.c | 2 -
net/ipv4/ah4.c | 8 +-
net/ipv4/esp4.c | 12 ++-
net/ipv4/ip_tunnel.c | 11 +--
net/ipv6/addrconf.c | 5 +-
net/ipv6/ah6.c | 8 +-
net/ipv6/esp6.c | 12 ++-
net/ipv6/ip6_gre.c | 8 +-
net/ipv6/ip6_output.c | 13 ++-
net/ipv6/ip6_tunnel.c | 7 +-
net/ipv6/ip6_vti.c | 7 +-
net/ipv6/sit.c | 8 +-
net/key/af_key.c | 2 +-
net/l2tp/l2tp_netlink.c | 2 +
net/llc/af_llc.c | 3 +
net/mac80211/mlme.c | 4 +
net/netfilter/nf_conntrack_netlink.c | 7 +-
net/netlink/af_netlink.c | 3 +
net/rxrpc/rxkad.c | 21 +++--
net/sched/act_api.c | 4 +-
net/sctp/ipv6.c | 4 +-
net/sctp/socket.c | 17 ++--
net/x25/af_x25.c | 24 ++++--
net/x25/sysctl_net_x25.c | 5 +-
net/xfrm/xfrm_state.c | 2 +
scripts/tags.sh | 1 +
tools/perf/builtin-trace.c | 4 +
tools/perf/tests/code-reading.c | 20 ++++-
tools/perf/util/unwind-libdw.c | 8 ++
.../testing/selftests/powerpc/tm/tm-resched-dscr.c | 2 +-
121 files changed, 925 insertions(+), 314 deletions(-)