From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 85E1B11701 for ; Thu, 24 Aug 2023 14:52:10 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id CBE40C433C8; Thu, 24 Aug 2023 14:52:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1692888730; bh=LRy1LxKoDujSCwVkS+gErTbIQoU7AbugBIB2wGMLgBg=; h=From:To:Cc:Subject:Date:From; b=H7MeUiBZ1ZZk3uuk/ppLTthOYxmhEUSEmQsDApGEO/jNxYssD6VVuJbhSJrPwavMD e48H89I+ug3TngWv+lDIRaOX0uiL26y+KfRYjJzOg/FIeqA3r6T39Ml0wrbv6IrbdG 6Ol3nLAgFGyrrXotmofYZ4Q4P3F5D1mQCyGRncsM= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@denx.de, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, srw@sladewatkins.net, rwarsow@gmx.de, conor@kernel.org Subject: [PATCH 5.15 000/139] 5.15.128-rc1 review Date: Thu, 24 Aug 2023 16:48:43 +0200 Message-ID: <20230824145023.559380953@linuxfoundation.org> X-Mailer: git-send-email 2.42.0 Precedence: bulk X-Mailing-List: patches@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.67 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.128-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-5.15.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 5.15.128-rc1 X-KernelTest-Deadline: 2023-08-26T14:50+00:00 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 5.15.128 release. There are 139 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 26 Aug 2023 14:49:55 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.128-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 5.15.128-rc1 Borislav Petkov (AMD) x86/srso: Correct the mitigation status when SMT is disabled Peter Zijlstra objtool/x86: Fixup frame-pointer vs rethunk Petr Pavlu x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG Borislav Petkov (AMD) x86/srso: Disable the mitigation on unaffected configurations Borislav Petkov (AMD) x86/CPU/AMD: Fix the DIV(0) initial fix attempt Sean Christopherson x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() Peter Zijlstra x86/static_call: Fix __static_call_fixup() Borislav Petkov (AMD) x86/srso: Explain the untraining sequences a bit more Peter Zijlstra x86/cpu: Cleanup the untrain mess Peter Zijlstra x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 Peter Zijlstra x86/cpu: Rename original retbleed methods Peter Zijlstra x86/cpu: Clean up SRSO return thunk mess Peter Zijlstra x86/ibt: Add ANNOTATE_NOENDBR Josh Poimboeuf objtool: Add frame-pointer-specific function ignore Peter Zijlstra x86/alternative: Make custom return thunk unconditional Peter Zijlstra x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() Peter Zijlstra x86/cpu: Fix __x86_return_thunk symbol type Yangtao Li mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove Jason Xing net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled Jason Wang virtio-net: set queues after driver_ok Kuniyuki Iwashima af_unix: Fix null-ptr-deref in unix_stream_sendpage(). Christopher Obbard arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 Namjae Jeon exfat: check if filename entries exceeds max filename length Xin Long netfilter: set default timeout to 3 secs for sctp shutdown send and recv state Mario Limonciello drm/amd: flush any delayed gfxoff on suspend entry Wander Lairson Costa drm/qxl: fix UAF on handle creation Yibin Ding mmc: block: Fix in_flight[issue_type] value error Yang Yingliang mmc: wbsd: fix double mmc_free_host() in wbsd_init() Russell Harmon via samba-technical cifs: Release folio lock on fscache read hit. dengxiang ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. Tony Lindgren serial: 8250: Fix oops for port->pm on uart_change_pm() Alexandre Ghiti riscv: uaccess: Return the number of bytes effectively not copied Kailang Yang ALSA: hda/realtek - Remodified 3k pull low procedure Jiasheng Jiang soc: aspeed: socinfo: Add kfree for kstrdup Jerome Brunet ASoC: meson: axg-tdm-formatter: fix channel slot allocation Zhang Shurong ASoC: rt5665: add missed regulator_bulk_disable Xiaolei Wang ARM: dts: imx: Set default tuning step for imx6sx usdhc Dmitry Baryshkov arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict Tony Lindgren bus: ti-sysc: Flush posted write on enable before reset Eric Dumazet net: do not allow gso_size to be set to GSO_BY_FRAGS Abel Wu sock: Fix misuse of sk_under_memory_pressure() Alfred Lee net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset Andrii Staikov i40e: fix misleading debug logs Piotr Gardocki iavf: fix FDIR rule fields masks validation Ziyang Xuan team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves Justin Chen net: phy: broadcom: stub c45 read/write for 54810 Pablo Neira Ayuso netfilter: nft_dynset: disallow object maps Sishuai Gong ipvs: fix racy memcpy in proc_do_sync_threshold Florian Westphal netfilter: nf_tables: deactivate catchall elements in next generation Florian Westphal netfilter: nf_tables: fix false-positive lockdep splat Luca Ceresoli drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs Petr Machata selftests: mirror_gre_changes: Tighten up the TTL test match Russell King (Oracle) net: phy: fix IRQ-based wake-on-lan over hibernate / power off Lin Ma xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH Lin Ma xfrm: add NULL check in xfrm_update_ae_params Zhengchao Shao ip_vti: fix potential slab-use-after-free in decode_session6 Zhengchao Shao ip6_vti: fix slab-use-after-free in decode_session6 Zhengchao Shao xfrm: fix slab-use-after-free in decode_session6 Lin Ma net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure Lin Ma net: af_key: fix sadb_x_filter validation Lin Ma net: xfrm: Fix xfrm_address_filter OOB read Tam Nguyen i2c: designware: Handle invalid SMBus block data response length value Quan Nguyen i2c: designware: Correct length byte validation logic xiaoshoukui btrfs: fix BUG_ON condition in btrfs_cancel_balance Sherry Sun tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms Yi Yang tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux Nathan Lynch powerpc/rtas_flash: allow user copy to flash block cache objects Yuanjun Gong fbdev: mmp: fix value check in mmphw_probe() Yicong Yang i2c: hisi: Only handle the interrupt of the driver's transfer Chengfeng Ye i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue Steve French cifs: fix potential oops in cifs_oplock_break Maxime Coquelin vduse: Use proper spinlock for IRQ injection Wolfram Sang virtio-mmio: don't break lifecycle of vm_dev Naohiro Aota btrfs: move out now unused BG from the reclaim list Xu Yang ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node Andreas Kemnade ARM: dts: imx6sll: fixup of operating points Ivan Mikhaylov net/ncsi: change from ndo_set_mac_address to dev_set_mac_address Sergey Shtylyov mmc: sunxi: fix deferred probing Sergey Shtylyov mmc: bcm2835: fix deferred probing Johan Hovold USB: dwc3: fix use-after-free on core driver unbind Johan Hovold USB: dwc3: qcom: fix NULL-deref on suspend Robert Hodaszi tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A Sherry Sun tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms Jesse Taube tty: serial: fsl_lpuart: Add i.MXRT1050 support Roger Quadros usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() Johan Hovold USB: dwc3: gadget: drop dead hibernation code Kushagra Verma usb: dwc3: Fix typos in gadget.c Wesley Cheng usb: dwc3: Remove DWC3 locking during gadget suspend/resume Wesley Cheng usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect Hersen Wu drm/amd/display: fix access hdcp_workqueue assert hersen wu drm/amd/display: phase3 mst hdcp for multiple displays hersen wu drm/amd/display: save restore hdcp state when display is unplugged from mst hub Zev Weiss ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks Song Yoong Siang igc: read before write to SRRCTL register William Breathitt Gray iio: addac: stx104: Fix race condition when converting analog-to-digital William Breathitt Gray iio: addac: stx104: Fix race condition for stx104_write_raw() William Breathitt Gray iio: stx104: Move to addac subdirectory William Breathitt Gray iio: adc: stx104: Implement and utilize register structures William Breathitt Gray iio: adc: stx104: Utilize iomap interface Cosmin Tanislav iio: add addac subdirectory Chen Lin ring-buffer: Do not swap cpu_buffer during resize process Benjamin Gray powerpc/kasan: Disable KCOV in KASAN code Tuo Li ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() dengxiang ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 Konstantin Komarov fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted Jia-Ju Bai fs: ntfs3: Fix possible null-pointer dereferences in mi_read() Edward Lo fs/ntfs3: Enhance sanity check while generating attr_list shanzhulig drm/amdgpu: Fix potential fence use-after-free v2 Matthew Anderson Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally Zhengping Jiang Bluetooth: L2CAP: Fix use-after-free Yuechao Zhao watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) Zhang Shurong firewire: net: fix use after free in fwnet_finish_incoming_packet() Armin Wolf pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() Tuo Li gfs2: Fix possible data races in gfs2_show_options() Xu Yang usb: chipidea: imx: add missing USB PHY DPDM wakeup setting Xu Yang usb: chipidea: imx: don't request QoS for imx8ulp Mika Westerberg thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() Hans Verkuil media: platform: mediatek: vpu: fix NULL ptr dereference Prashanth K usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push Yunfei Dong media: v4l2-mem2mem: add lock to protect parameter num_rdy Paulo Alcantara smb: client: fix warning in cifs_smb3_do_mount() Christian Brauner ovl: check type and offset of struct vfsmount in ovl_entry Patrisious Haddad RDMA/mlx5: Return the firmware result upon destroying QP/RQ Marco Morandini HID: add quirk for 03f0:464a HP Elite Presenter Mouse Lang Yu drm/amdgpu: install stub fence into potential unused fence pointers stuarthayhurst HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard gaoxu dma-remap: use kvmalloc_array/kvfree for larger dma memory remap Pierre-Louis Bossart ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion Geert Uytterhoeven iopoll: Call cpu_relax() in busy loops Oleksij Rempel ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings Sumit Gupta PCI: tegra194: Fix possible array out of bounds access Jakub Kicinski net: tls: avoid discarding data on record close Tariq Toukan net/tls: Multi-threaded calls to TX tls_dev_del Tariq Toukan net/tls: Perform immediate device ctx cleanup when possible Eric Dumazet macsec: use DEV_STATS_INC() Clayton Yager macsec: Fix traffic counters/statistics Ido Schimmel selftests: forwarding: tc_actions: Use ncat instead of nc Davide Caratti selftests: forwarding: tc_actions: cleanup temporary files when test is aborted Kunihiko Hayashi mmc: sdhci-f-sdh30: Replace with sdhci_pltfm ------------- Diffstat: Documentation/admin-guide/hw-vuln/srso.rst | 4 +- MAINTAINERS | 2 +- Makefile | 4 +- arch/arm/boot/dts/aspeed-bmc-asrock-e3c246d4i.dts | 2 +- arch/arm/boot/dts/imx6dl-prtrvt.dts | 4 + arch/arm/boot/dts/imx6qdl-prti6q.dtsi | 11 +- arch/arm/boot/dts/imx6sll.dtsi | 24 ++- arch/arm/boot/dts/imx6sx.dtsi | 6 + arch/arm64/boot/dts/qcom/qrb5165-rb5.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dtsi | 4 +- arch/powerpc/kernel/rtas_flash.c | 6 +- arch/powerpc/mm/kasan/Makefile | 1 + arch/riscv/lib/uaccess.S | 11 +- arch/x86/include/asm/entry-common.h | 1 + arch/x86/include/asm/nospec-branch.h | 28 +-- arch/x86/kernel/cpu/amd.c | 1 + arch/x86/kernel/cpu/bugs.c | 28 ++- arch/x86/kernel/static_call.c | 13 ++ arch/x86/kernel/traps.c | 2 - arch/x86/kernel/vmlinux.lds.S | 20 +- arch/x86/kvm/svm/svm.c | 2 + arch/x86/lib/retpoline.S | 141 +++++++++----- drivers/bluetooth/btusb.c | 3 + drivers/bus/ti-sysc.c | 2 + drivers/firewire/net.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 211 +++++++++++++++++---- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.h | 14 ++ .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 30 +++ drivers/gpu/drm/panel/panel-simple.c | 24 +-- drivers/gpu/drm/qxl/qxl_drv.h | 2 +- drivers/gpu/drm/qxl/qxl_dumb.c | 5 +- drivers/gpu/drm/qxl/qxl_gem.c | 25 ++- drivers/gpu/drm/qxl/qxl_ioctl.c | 6 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-logitech-hidpp.c | 4 + drivers/hid/hid-quirks.c | 1 + drivers/i2c/busses/i2c-bcm-iproc.c | 11 +- drivers/i2c/busses/i2c-designware-master.c | 16 +- drivers/i2c/busses/i2c-hisi.c | 8 + drivers/iio/Kconfig | 1 + drivers/iio/Makefile | 1 + drivers/iio/adc/Kconfig | 16 -- drivers/iio/adc/Makefile | 1 - drivers/iio/addac/Kconfig | 24 +++ drivers/iio/addac/Makefile | 7 + drivers/iio/{adc => addac}/stx104.c | 98 +++++++--- drivers/infiniband/hw/mlx5/qpc.c | 10 +- drivers/media/platform/mtk-vpu/mtk_vpu.c | 6 +- drivers/mmc/core/block.c | 7 +- drivers/mmc/host/bcm2835.c | 4 +- drivers/mmc/host/sdhci_f_sdh30.c | 66 +++---- drivers/mmc/host/sunxi-mmc.c | 4 +- drivers/mmc/host/wbsd.c | 2 - drivers/net/dsa/mv88e6xxx/chip.c | 8 + drivers/net/ethernet/intel/i40e/i40e_nvm.c | 16 +- drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 10 + drivers/net/ethernet/intel/iavf/iavf_fdir.c | 77 +++++++- drivers/net/ethernet/intel/iavf/iavf_fdir.h | 2 + drivers/net/ethernet/intel/igc/igc_base.h | 11 +- drivers/net/ethernet/intel/igc/igc_main.c | 7 +- drivers/net/macsec.c | 70 +++++-- drivers/net/phy/broadcom.c | 13 ++ drivers/net/phy/phy_device.c | 13 +- drivers/net/team/team.c | 4 +- drivers/net/virtio_net.c | 4 +- drivers/pci/controller/dwc/pcie-tegra194.c | 13 +- drivers/pcmcia/rsrc_nonstatic.c | 2 + drivers/soc/aspeed/aspeed-socinfo.c | 1 + drivers/thunderbolt/retimer.c | 29 ++- drivers/tty/n_gsm.c | 3 +- drivers/tty/serial/8250/8250_port.c | 1 + drivers/tty/serial/fsl_lpuart.c | 26 ++- drivers/usb/chipidea/ci_hdrc_imx.c | 5 + drivers/usb/chipidea/usbmisc_imx.c | 2 +- drivers/usb/dwc3/core.c | 9 +- drivers/usb/dwc3/dwc3-qcom.c | 11 +- drivers/usb/dwc3/gadget.c | 116 +++++------ drivers/usb/gadget/function/u_serial.c | 3 + drivers/vdpa/vdpa_user/vduse_dev.c | 8 +- drivers/video/fbdev/mmp/hw/mmp_ctrl.c | 4 +- drivers/virtio/virtio_mmio.c | 5 +- drivers/watchdog/sp5100_tco.c | 4 +- fs/btrfs/block-group.c | 5 +- fs/btrfs/volumes.c | 3 +- fs/cifs/cifsfs.c | 28 +-- fs/cifs/file.c | 25 ++- fs/exfat/dir.c | 9 +- fs/gfs2/super.c | 26 +-- fs/ntfs3/frecord.c | 16 +- fs/ntfs3/fsntfs.c | 2 +- fs/ntfs3/index.c | 6 + fs/ntfs3/ntfs_fs.h | 2 + fs/ntfs3/record.c | 10 +- fs/overlayfs/ovl_entry.h | 9 + include/linux/iopoll.h | 2 + include/linux/objtool.h | 28 +++ include/linux/virtio_net.h | 4 + include/media/v4l2-mem2mem.h | 18 +- include/net/sock.h | 6 + include/net/tls.h | 2 + kernel/dma/remap.c | 4 +- kernel/trace/ring_buffer.c | 14 +- kernel/trace/trace.c | 3 +- net/bluetooth/l2cap_core.c | 5 + net/core/sock.c | 2 +- net/ipv4/ip_vti.c | 4 +- net/ipv4/tcp_timer.c | 4 +- net/ipv6/ip6_vti.c | 4 +- net/key/af_key.c | 4 +- net/ncsi/ncsi-rsp.c | 5 +- net/netfilter/ipvs/ip_vs_ctl.c | 4 + net/netfilter/nf_conntrack_proto_sctp.c | 6 +- net/netfilter/nf_tables_api.c | 1 + net/netfilter/nft_dynset.c | 3 + net/netfilter/nft_set_pipapo.c | 13 +- net/tls/tls_device.c | 137 +++++++------ net/unix/af_unix.c | 9 +- net/xfrm/xfrm_compat.c | 2 +- net/xfrm/xfrm_interface_core.c | 4 +- net/xfrm/xfrm_user.c | 14 +- sound/hda/hdac_regmap.c | 7 +- sound/pci/hda/patch_realtek.c | 16 +- sound/soc/codecs/rt5665.c | 2 + sound/soc/meson/axg-tdm-formatter.c | 42 ++-- sound/soc/sof/intel/hda.c | 12 +- sound/usb/quirks-table.h | 29 +++ tools/include/linux/objtool.h | 28 +++ tools/objtool/arch/x86/decode.c | 2 +- tools/objtool/check.c | 21 +- .../selftests/net/forwarding/mirror_gre_changes.sh | 3 +- .../testing/selftests/net/forwarding/tc_actions.sh | 18 +- 135 files changed, 1437 insertions(+), 618 deletions(-)