[PATCH 4.4 00/41] 4.4.286-rc2 review

From: Greg Kroah-Hartman
Date: Tue Oct 05 2021 - 04:38:01 EST


This is the start of the stable review cycle for the 4.4.286 release.
There are 41 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 07 Oct 2021 08:32:44 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.286-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.4.286-rc2

NeilBrown <neilb@xxxxxxxx>
cred: allow get_cred() and put_cred() to be given NULL.

Anirudh Rayabharam <mail@xxxxxxxxxxxxx>
HID: usbhid: free raw_report buffers in usbhid_stop

Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
netfilter: ipset: Fix oversized kvmalloc() calls

F.A.Sulaiman <asha.16@xxxxxxxxxxxxxxx>
HID: betop: fix slab-out-of-bounds Write in betop_probe

Suzuki K Poulose <suzuki.poulose@xxxxxxx>
arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55

Sai Krishna Potthuri <lakshmi.sai.krishna.potthuri@xxxxxxxxxx>
EDAC/synopsys: Fix wrong value type assignment for edac_mode

yangerkun <yangerkun@xxxxxxxxxx>
ext4: fix potential infinite loop in ext4_dx_readdir()

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix module reference leak

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix missing allocation-failure check

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix tty-registration error handling

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix tty registration race

Johan Hovold <johan@xxxxxxxxxx>
ipack: ipoctal: fix stack information leak

Jacob Keller <jacob.e.keller@xxxxxxxxx>
e100: fix buffer overrun in e100_get_regs

Jacob Keller <jacob.e.keller@xxxxxxxxx>
e100: fix length calculation in e100_get_regs_len

Andrea Claudi <aclaudi@xxxxxxxxxx>
ipvs: check that ip_vs_conn_tab_bits is between 8 and 20

Johannes Berg <johannes.berg@xxxxxxxxx>
mac80211: fix use-after-free in CCMP/GCMP RX

Igor Matheus Andrade Torrente <igormtorrente@xxxxxxxxx>
tty: Fix out-of-bound vmalloc access in imageblit

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
qnx4: work around gcc false positive warning bug

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
spi: Fix tegra20 build with CONFIG_PM=n

Guenter Roeck <linux@xxxxxxxxxxxx>
net: 6pack: Fix tx timeout and slot time

Guenter Roeck <linux@xxxxxxxxxxxx>
alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile

Dan Li <ashimida@xxxxxxxxxxxxxxxxx>
arm64: Mark __stack_chk_guard as __ro_after_init

Helge Deller <deller@xxxxxx>
parisc: Use absolute_pointer() to define PAGE0

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
qnx4: avoid stringop-overread errors

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
sparc: avoid stringop-overread errors

Guenter Roeck <linux@xxxxxxxxxxxx>
net: i825xx: Use absolute_pointer for memcpy from fixed memory location

Guenter Roeck <linux@xxxxxxxxxxxx>
compiler.h: Introduce absolute_pointer macro

Guenter Roeck <linux@xxxxxxxxxxxx>
m68k: Double cast io functions to unsigned long

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
blktrace: Fix uaf in blk_trace access after removing by sysfs

Baokun Li <libaokun1@xxxxxxxxxx>
scsi: iscsi: Adjust iface sysfs attr detection

Aya Levin <ayal@xxxxxxxxxx>
net/mlx4_en: Don't allow aRFS for encapsulated packets

Johan Hovold <johan@xxxxxxxxxx>
net: hso: fix muxed tty registration

Slark Xiao <slark_xiao@xxxxxxx>
USB: serial: option: add device id for Foxconn T99W265

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
USB: serial: option: remove duplicate USB device ID

Carlo Lobrano <c.lobrano@xxxxxxxxx>
USB: serial: option: add Telit LN920 compositions

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
USB: serial: mos7840: remove duplicated 0xac24 device ID

Uwe Brandt <uwe.brandt@xxxxxxxxx>
USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter

Jan Beulich <jbeulich@xxxxxxxx>
xen/x86: fix PV trap handling on secondary processors

Steve French <stfrench@xxxxxxxxxxxxx>
cifs: fix incorrect check for null pointer in header_assemble

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
usb: gadget: r8a66597: fix a loop in set_feature()


-------------

Diffstat:

Makefile | 4 +-
arch/alpha/include/asm/io.h | 6 +--
arch/arm64/Kconfig | 2 +-
arch/arm64/kernel/process.c | 2 +-
arch/arm64/mm/proc.S | 4 +-
arch/m68k/include/asm/raw_io.h | 20 ++++----
arch/parisc/include/asm/page.h | 2 +-
arch/sparc/kernel/mdesc.c | 3 +-
arch/x86/xen/enlighten.c | 15 +++---
drivers/edac/synopsys_edac.c | 2 +-
drivers/hid/hid-betopff.c | 13 +++--
drivers/hid/usbhid/hid-core.c | 13 ++++-
drivers/ipack/devices/ipoctal.c | 63 +++++++++++++++++------
drivers/net/ethernet/i825xx/82596.c | 2 +-
drivers/net/ethernet/intel/e100.c | 22 +++++---
drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 3 ++
drivers/net/hamradio/6pack.c | 4 +-
drivers/net/usb/hso.c | 12 ++---
drivers/scsi/scsi_transport_iscsi.c | 8 +--
drivers/spi/spi-tegra20-slink.c | 4 +-
drivers/tty/vt/vt.c | 21 +++++++-
drivers/usb/gadget/udc/r8a66597-udc.c | 2 +-
drivers/usb/musb/tusb6010.c | 1 +
drivers/usb/serial/cp210x.c | 1 +
drivers/usb/serial/mos7840.c | 2 -
drivers/usb/serial/option.c | 11 +++-
fs/cifs/connect.c | 5 +-
fs/ext4/dir.c | 6 +--
fs/qnx4/dir.c | 69 +++++++++++++++++++-------
include/linux/compiler.h | 2 +
include/linux/cred.h | 14 ++++--
kernel/trace/blktrace.c | 8 +++
net/mac80211/wpa.c | 6 +++
net/netfilter/ipset/ip_set_hash_gen.h | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 4 ++
35 files changed, 254 insertions(+), 106 deletions(-)