[PATCH 4.19 00/23] 4.19.40-stable review

From: Greg Kroah-Hartman
Date: Sat May 04 2019 - 06:28:37 EST


This is the start of the stable review cycle for the 4.19.40 release.
There are 23 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Mon 06 May 2019 10:24:19 AM UTC.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.40-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.19.40-rc1

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ath10k: Drop WARN_ON()s that always trigger during system resume

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
ALSA: line6: use dynamic buffers

Jim Mattson <jmattson@xxxxxxxxxx>
KVM: nVMX: Fix size checks in vmx_set_nested_state

Sean Christopherson <sean.j.christopherson@xxxxxxxxx>
KVM: x86: Whitelist port 0x7e for pre-incrementing %rip

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net/tls: fix copy to fragments in reencrypt

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net/tls: don't copy negative amounts of data in reencrypt

Michael Chan <michael.chan@xxxxxxxxxxxx>
bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt().

Vasundhara Volam <vasundhara-v.volam@xxxxxxxxxxxx>
bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one()

Michael Chan <michael.chan@xxxxxxxxxxxx>
bnxt_en: Improve multicast address setup logic.

Willem de Bruijn <willemb@xxxxxxxxxx>
packet: validate msg_namelen in send directly

Hangbin Liu <liuhangbin@xxxxxxxxx>
selftests: fib_rule_tests: print the result and return 1 if any tests failed

Xin Long <lucien.xin@xxxxxxxxx>
sctp: avoid running the sctp state machine recursively

David Howells <dhowells@xxxxxxxxxx>
rxrpc: Fix net namespace cleanup

Jakub Kicinski <jakub.kicinski@xxxxxxxxxxxxx>
net/tls: avoid NULL pointer deref on nskb->sk in fallback

Andrew Lunn <andrew@xxxxxxx>
net: phy: marvell: Fix buffer overrun with stats counters

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc

Eric Dumazet <edumazet@xxxxxxxxxx>
l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()

Eric Dumazet <edumazet@xxxxxxxxxx>
l2ip: fix possible use-after-free

Willem de Bruijn <willemb@xxxxxxxxxx>
ipv6: invert flowlabel sharing check in process and user mode

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6/flowlabel: wait rcu grace period before put_pid()

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: fix races in ip6_dst_destroy()

Martin KaFai Lau <kafai@xxxxxx>
ipv6: A few fixes on dereferencing rt->from

Shmulik Ladkani <shmulik@xxxxxxxxxxxxxxxx>
ipv4: ip_do_fragment: Preserve skb_iif during fragmentation


-------------

Diffstat:

Makefile | 4 +-
arch/x86/include/uapi/asm/kvm.h | 1 +
arch/x86/kvm/vmx.c | 4 +-
arch/x86/kvm/x86.c | 21 +++++++++-
drivers/net/dsa/bcm_sf2_cfp.c | 6 +++
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 19 ++++++---
drivers/net/phy/marvell.c | 6 ++-
drivers/net/wireless/ath/ath10k/mac.c | 2 +-
include/net/sctp/command.h | 1 -
net/ipv4/ip_output.c | 1 +
net/ipv6/ip6_fib.c | 4 +-
net/ipv6/ip6_flowlabel.c | 22 ++++++----
net/ipv6/route.c | 47 +++++++++------------
net/l2tp/l2tp_core.c | 10 ++---
net/packet/af_packet.c | 24 ++++++-----
net/rxrpc/call_object.c | 32 +++++++-------
net/sctp/sm_sideeffect.c | 29 -------------
net/sctp/sm_statefuns.c | 35 ++++++++++++----
net/tls/tls_device.c | 39 ++++++++++++-----
net/tls/tls_device_fallback.c | 3 +-
sound/usb/line6/driver.c | 60 ++++++++++++++++-----------
sound/usb/line6/podhd.c | 21 ++++++----
sound/usb/line6/toneport.c | 24 ++++++++---
tools/testing/selftests/net/fib_rule_tests.sh | 6 +++
24 files changed, 248 insertions(+), 173 deletions(-)