From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org, Martin Weinelt <martin@linuxlounge.net>,
Nikolay Aleksandrov <nikolay@cumulusnetworks.com>,
"David S. Miller" <davem@davemloft.net>
Subject: [PATCH 4.4 097/158] net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
Date: Fri, 2 Aug 2019 11:28:38 +0200 [thread overview]
Message-ID: <20190802092224.186319933@linuxfoundation.org> (raw)
In-Reply-To: <20190802092203.671944552@linuxfoundation.org>
From: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
[ Upstream commit e57f61858b7cf478ed6fa23ed4b3876b1c9625c4 ]
We take a pointer to grec prior to calling pskb_may_pull and use it
afterwards to get nsrcs so record nsrcs before the pull when handling
igmp3 and we get a pointer to nsrcs and call pskb_may_pull when handling
mld2 which again could lead to reading 2 bytes out-of-bounds.
==================================================================
BUG: KASAN: use-after-free in br_multicast_rcv+0x480c/0x4ad0 [bridge]
Read of size 2 at addr ffff8880421302b4 by task ksoftirqd/1/16
CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G OE 5.2.0-rc6+ #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
Call Trace:
dump_stack+0x71/0xab
print_address_description+0x6a/0x280
? br_multicast_rcv+0x480c/0x4ad0 [bridge]
__kasan_report+0x152/0x1aa
? br_multicast_rcv+0x480c/0x4ad0 [bridge]
? br_multicast_rcv+0x480c/0x4ad0 [bridge]
kasan_report+0xe/0x20
br_multicast_rcv+0x480c/0x4ad0 [bridge]
? br_multicast_disable_port+0x150/0x150 [bridge]
? ktime_get_with_offset+0xb4/0x150
? __kasan_kmalloc.constprop.6+0xa6/0xf0
? __netif_receive_skb+0x1b0/0x1b0
? br_fdb_update+0x10e/0x6e0 [bridge]
? br_handle_frame_finish+0x3c6/0x11d0 [bridge]
br_handle_frame_finish+0x3c6/0x11d0 [bridge]
? br_pass_frame_up+0x3a0/0x3a0 [bridge]
? virtnet_probe+0x1c80/0x1c80 [virtio_net]
br_handle_frame+0x731/0xd90 [bridge]
? select_idle_sibling+0x25/0x7d0
? br_handle_frame_finish+0x11d0/0x11d0 [bridge]
__netif_receive_skb_core+0xced/0x2d70
? virtqueue_get_buf_ctx+0x230/0x1130 [virtio_ring]
? do_xdp_generic+0x20/0x20
? virtqueue_napi_complete+0x39/0x70 [virtio_net]
? virtnet_poll+0x94d/0xc78 [virtio_net]
? receive_buf+0x5120/0x5120 [virtio_net]
? __netif_receive_skb_one_core+0x97/0x1d0
__netif_receive_skb_one_core+0x97/0x1d0
? __netif_receive_skb_core+0x2d70/0x2d70
? _raw_write_trylock+0x100/0x100
? __queue_work+0x41e/0xbe0
process_backlog+0x19c/0x650
? _raw_read_lock_irq+0x40/0x40
net_rx_action+0x71e/0xbc0
? __switch_to_asm+0x40/0x70
? napi_complete_done+0x360/0x360
? __switch_to_asm+0x34/0x70
? __switch_to_asm+0x40/0x70
? __schedule+0x85e/0x14d0
__do_softirq+0x1db/0x5f9
? takeover_tasklets+0x5f0/0x5f0
run_ksoftirqd+0x26/0x40
smpboot_thread_fn+0x443/0x680
? sort_range+0x20/0x20
? schedule+0x94/0x210
? __kthread_parkme+0x78/0xf0
? sort_range+0x20/0x20
kthread+0x2ae/0x3a0
? kthread_create_worker_on_cpu+0xc0/0xc0
ret_from_fork+0x35/0x40
The buggy address belongs to the page:
page:ffffea0001084c00 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0
flags: 0xffffc000000000()
raw: 00ffffc000000000 ffffea0000cfca08 ffffea0001098608 0000000000000000
raw: 0000000000000000 0000000000000003 00000000ffffff7f 0000000000000000
page dumped because: kasan: bad access detected
Memory state around the buggy address:
ffff888042130180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ffff888042130200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
> ffff888042130280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
^
ffff888042130300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ffff888042130380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================
Disabling lock debugging due to kernel taint
Fixes: bc8c20acaea1 ("bridge: multicast: treat igmpv3 report with INCLUDE and no sources as a leave")
Reported-by: Martin Weinelt <martin@linuxlounge.net>
Signed-off-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
Tested-by: Martin Weinelt <martin@linuxlounge.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
net/bridge/br_multicast.c | 27 ++++++++++++++++-----------
1 file changed, 16 insertions(+), 11 deletions(-)
--- a/net/bridge/br_multicast.c
+++ b/net/bridge/br_multicast.c
@@ -1011,6 +1011,7 @@ static int br_ip4_multicast_igmp3_report
int type;
int err = 0;
__be32 group;
+ u16 nsrcs;
ih = igmpv3_report_hdr(skb);
num = ntohs(ih->ngrec);
@@ -1024,8 +1025,9 @@ static int br_ip4_multicast_igmp3_report
grec = (void *)(skb->data + len - sizeof(*grec));
group = grec->grec_mca;
type = grec->grec_type;
+ nsrcs = ntohs(grec->grec_nsrcs);
- len += ntohs(grec->grec_nsrcs) * 4;
+ len += nsrcs * 4;
if (!pskb_may_pull(skb, len))
return -EINVAL;
@@ -1045,7 +1047,7 @@ static int br_ip4_multicast_igmp3_report
if ((type == IGMPV3_CHANGE_TO_INCLUDE ||
type == IGMPV3_MODE_IS_INCLUDE) &&
- ntohs(grec->grec_nsrcs) == 0) {
+ nsrcs == 0) {
br_ip4_multicast_leave_group(br, port, group, vid);
} else {
err = br_ip4_multicast_add_group(br, port, group, vid);
@@ -1078,23 +1080,26 @@ static int br_ip6_multicast_mld2_report(
len = skb_transport_offset(skb) + sizeof(*icmp6h);
for (i = 0; i < num; i++) {
- __be16 *nsrcs, _nsrcs;
+ __be16 *_nsrcs, __nsrcs;
+ u16 nsrcs;
- nsrcs = skb_header_pointer(skb,
- len + offsetof(struct mld2_grec,
- grec_nsrcs),
- sizeof(_nsrcs), &_nsrcs);
- if (!nsrcs)
+ _nsrcs = skb_header_pointer(skb,
+ len + offsetof(struct mld2_grec,
+ grec_nsrcs),
+ sizeof(__nsrcs), &__nsrcs);
+ if (!_nsrcs)
return -EINVAL;
+ nsrcs = ntohs(*_nsrcs);
+
if (!pskb_may_pull(skb,
len + sizeof(*grec) +
- sizeof(struct in6_addr) * ntohs(*nsrcs)))
+ sizeof(struct in6_addr) * nsrcs))
return -EINVAL;
grec = (struct mld2_grec *)(skb->data + len);
len += sizeof(*grec) +
- sizeof(struct in6_addr) * ntohs(*nsrcs);
+ sizeof(struct in6_addr) * nsrcs;
/* We treat these as MLDv1 reports for now. */
switch (grec->grec_type) {
@@ -1112,7 +1117,7 @@ static int br_ip6_multicast_mld2_report(
if ((grec->grec_type == MLD2_CHANGE_TO_INCLUDE ||
grec->grec_type == MLD2_MODE_IS_INCLUDE) &&
- ntohs(*nsrcs) == 0) {
+ nsrcs == 0) {
br_ip6_multicast_leave_group(br, port, &grec->grec_mca,
vid);
} else {
next prev parent reply other threads:[~2019-08-02 9:33 UTC|newest]
Thread overview: 166+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-08-02 9:27 [PATCH 4.4 000/158] 4.4.187-stable review Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 001/158] MIPS: ath79: fix ar933x uart parity mode Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 002/158] MIPS: fix build on non-linux hosts Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 003/158] dmaengine: imx-sdma: fix use-after-free on probe error path Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 004/158] ath10k: Do not send probe response template for mesh Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 005/158] ath9k: Check for errors when reading SREV register Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 006/158] ath6kl: add some bounds checking Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 007/158] ath: DFS JP domain W56 fixed pulse type 3 RADAR detection Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 008/158] batman-adv: fix for leaked TVLV handler Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 009/158] media: dvb: usb: fix use after free in dvb_usb_device_exit Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 010/158] crypto: talitos - fix skcipher failure due to wrong output IV Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 011/158] media: marvell-ccic: fix DMA s/g desc number calculation Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 012/158] media: vpss: fix a potential NULL pointer dereference Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 013/158] net: stmmac: dwmac1000: Clear unused address entries Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 014/158] signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 015/158] af_key: fix leaks in key_pol_get_resp and dump_sp Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 016/158] xfrm: Fix xfrm sel prefix length validation Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 017/158] media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 018/158] net: phy: Check against net_device being NULL Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 019/158] tua6100: Avoid build warnings Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 020/158] locking/lockdep: Fix merging of hlocks with non-zero references Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 021/158] media: wl128x: Fix some error handling in fm_v4l2_init_video_device() Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 022/158] cpupower : frequency-set -r option misses the last cpu in related cpu list Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 023/158] net: fec: Do not use netdev messages too early Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 024/158] net: axienet: Fix race condition causing TX hang Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 025/158] s390/qdio: handle PENDING state for QEBSM devices Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 026/158] perf test 6: Fix missing kvm module load for s390 Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 027/158] gpio: omap: fix lack of irqstatus_raw0 for OMAP4 Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 028/158] gpio: omap: ensure irq is enabled before wakeup Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 029/158] regmap: fix bulk writes on paged registers Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 030/158] bpf: silence warning messages in core Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 031/158] rcu: Force inlining of rcu_read_lock() Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 032/158] xfrm: fix sa selector validation Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 033/158] perf evsel: Make perf_evsel__name() accept a NULL argument Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 034/158] vhost_net: disable zerocopy by default Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 035/158] EDAC/sysfs: Fix memory leak when creating a csrow object Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 036/158] media: i2c: fix warning same module names Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 037/158] ntp: Limit TAI-UTC offset Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 038/158] timer_list: Guard procfs specific code Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 039/158] acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 040/158] media: coda: fix mpeg2 sequence number handling Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 041/158] media: coda: increment sequence offset for the last returned frame Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 042/158] mt7601u: do not schedule rx_tasklet when the device has been disconnected Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 043/158] x86/build: Add set -e to mkcapflags.sh to delete broken capflags.c Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 044/158] mt7601u: fix possible memory leak when the device is disconnected Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 045/158] ath10k: fix PCIE device wake up failed Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 046/158] rslib: Fix decoding of shortened codes Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 047/158] rslib: Fix handling of of caller provided syndrome Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 048/158] ixgbe: Check DDM existence in transceiver before access Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 049/158] EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 050/158] bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 051/158] Bluetooth: hci_bcsp: Fix memory leak in rx_skb Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 052/158] Bluetooth: 6lowpan: search for destination address in all peers Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 053/158] Bluetooth: Check state in l2cap_disconnect_rsp Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 054/158] Bluetooth: validate BLE connection interval updates Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 055/158] crypto: ghash - fix unaligned memory access in ghash_setkey() Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 056/158] crypto: arm64/sha1-ce - correct digest for empty data in finup Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 057/158] crypto: arm64/sha2-ce " Greg Kroah-Hartman
2019-08-02 9:27 ` [PATCH 4.4 058/158] Input: gtco - bounds check collection indent level Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 059/158] regulator: s2mps11: Fix buck7 and buck8 wrong voltages Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 060/158] tracing/snapshot: Resize spare buffer if size changed Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 061/158] NFSv4: Handle the special Linux file open access mode Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 062/158] lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 063/158] ALSA: seq: Break too long mutex context in the write loop Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 064/158] media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 065/158] media: coda: Remove unbalanced and unneeded mutex unlock Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 066/158] KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 067/158] drm/nouveau/i2c: Enable i2c pads & busses during preinit Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 068/158] padata: use smp_mb in padata_reorder to avoid orphaned padata jobs Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 069/158] 9p/virtio: Add cleanup path in p9_virtio_init Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 070/158] PCI: Do not poll for PME if the device is in D3cold Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 071/158] take floppy compat ioctls to sodding floppy.c Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 072/158] floppy: fix div-by-zero in setup_format_params Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 073/158] floppy: fix out-of-bounds read in next_valid_format Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 074/158] floppy: fix invalid pointer dereference in drive_name Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 075/158] floppy: fix out-of-bounds read in copy_buffer Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 076/158] coda: pass the host file in vma->vm_file on mmap Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 077/158] gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 078/158] parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1 Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 079/158] powerpc/32s: fix suspend/resume when IBATs 4-7 are used Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 080/158] powerpc/watchpoint: Restore NV GPRs while returning from exception Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 081/158] eCryptfs: fix a couple type promotion bugs Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 082/158] intel_th: msu: Fix single mode with disabled IOMMU Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 083/158] Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 084/158] usb: Handle USB3 remote wakeup for LPM enabled devices correctly Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 085/158] dm bufio: fix deadlock with loop device Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 086/158] bnx2x: Prevent load reordering in tx completion processing Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 087/158] caif-hsi: fix possible deadlock in cfhsi_exit_module() Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 088/158] ipv4: dont set IPv6 only flags to IPv4 addresses Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 089/158] net: bcmgenet: use promisc for unsupported filters Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 090/158] net: neigh: fix multiple neigh timer scheduling Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 091/158] nfc: fix potential illegal memory access Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 092/158] sky2: Disable MSI on ASUS P6T Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 093/158] netrom: fix a memory leak in nr_rx_frame() Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 094/158] netrom: hold sock when setting skb->destructor Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 095/158] tcp: Reset bytes_acked and bytes_received when disconnecting Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 096/158] bonding: validate ip header before check IPPROTO_IGMP Greg Kroah-Hartman
2019-08-02 9:28 ` Greg Kroah-Hartman [this message]
2019-08-02 9:28 ` [PATCH 4.4 098/158] net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 099/158] net: bridge: stp: dont cache eth dest pointer before skb pull Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 100/158] elevator: fix truncation of icq_cache_name Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 101/158] NFSv4: Fix open create exclusive when the server reboots Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 102/158] nfsd: increase DRC cache limit Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 103/158] nfsd: give out fewer session slots as limit approaches Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 104/158] nfsd: fix performance-limiting session calculation Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 105/158] nfsd: Fix overflow causing non-working mounts on 1 TB machines Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 106/158] drm/panel: simple: Fix panel_simple_dsi_probe Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 107/158] usb: core: hub: Disable hub-initiated U1/U2 Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 108/158] tty: max310x: Fix invalid baudrate divisors calculator Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 109/158] pinctrl: rockchip: fix leaked of_node references Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 110/158] tty: serial: cpm_uart - fix init when SMC is relocated Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 111/158] memstick: Fix error cleanup path of memstick_init Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 112/158] tty/serial: digicolor: Fix digicolor-usart already registered warning Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 113/158] tty: serial: msm_serial: avoid system lockup condition Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 114/158] drm/virtio: Add memory barriers for capset cache Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 115/158] phy: renesas: rcar-gen2: Fix memory leak at error paths Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 116/158] powerpc/pseries/mobility: prevent cpu hotplug during DT update Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 117/158] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration Greg Kroah-Hartman
2019-08-02 9:28 ` [PATCH 4.4 118/158] usb: gadget: Zero ffs_io_data Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 119/158] powerpc/pci/of: Fix OF flags parsing for 64bit BARs Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 120/158] PCI: sysfs: Ignore lockdep for remove attribute Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 121/158] iio: iio-utils: Fix possible incorrect mask calculation Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 122/158] recordmcount: Fix spurious mcount entries on powerpc Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 123/158] mfd: core: Set fwnode for created devices Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 124/158] mfd: arizona: Fix undefined behavior Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 125/158] um: Silence lockdep complaint about mmap_sem Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 126/158] powerpc/4xx/uic: clear pending interrupt after irq type/pol change Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 127/158] serial: sh-sci: Fix TX DMA buffer flushing and workqueue races Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 128/158] kallsyms: exclude kasan local symbols on s390 Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 129/158] perf test mmap-thread-lookup: Initialize variable to suppress memory sanitizer warning Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 130/158] f2fs: avoid out-of-range memory access Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 131/158] mailbox: handle failed named mailbox channel request Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 132/158] powerpc/eeh: Handle hugepages in ioremap space Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 133/158] sh: prevent warnings when using iounmap Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 134/158] mm/kmemleak.c: fix check for softirq context Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 135/158] 9p: pass the correct prototype to read_cache_page Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 136/158] mm/mmu_notifier: use hlist_add_head_rcu() Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 137/158] locking/lockdep: Fix lock used or unused stats error Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 138/158] locking/lockdep: Hide unused class variable Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 139/158] usb: wusbcore: fix unbalanced get/put cluster_id Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 140/158] usb: pci-quirks: Correct AMD PLL quirk detection Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 141/158] x86/sysfb_efi: Add quirks for some devices with swapped width and height Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 142/158] x86/speculation/mds: Apply more accurate check on hypervisor platform Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 143/158] hpet: Fix division by zero in hpet_time_div() Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 144/158] ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1 Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 145/158] ALSA: hda - Add a conexant codec entry to let mute led work Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 146/158] powerpc/tm: Fix oops on sigreturn on systems without TM Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 147/158] access: avoid the RCU grace period for the temporary subjective credentials Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 148/158] vmstat: Remove BUG_ON from vmstat_update Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 149/158] mm, vmstat: make quiet_vmstat lighter Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 150/158] ipv6: check sk sk_type and protocol early in ip_mroute_set/getsockopt Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 151/158] tcp: reset sk_send_head in tcp_write_queue_purge Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 152/158] ISDN: hfcsusb: checking idx of ep configuration Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 153/158] media: cpia2_usb: first wake up, then free in disconnect Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 154/158] media: radio-raremono: change devm_k*alloc to k*alloc Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 155/158] Bluetooth: hci_uart: check for missing tty operations Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 156/158] sched/fair: Dont free p->numa_faults with concurrent readers Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 157/158] drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl Greg Kroah-Hartman
2019-08-02 9:29 ` [PATCH 4.4 158/158] ceph: hold i_ceph_lock when removing caps for freeing inode Greg Kroah-Hartman
2019-08-02 14:00 ` [PATCH 4.4 000/158] 4.4.187-stable review Thierry Reding
2019-08-02 15:52 ` Guenter Roeck
2019-08-02 16:22 ` Greg Kroah-Hartman
2019-08-02 15:54 ` kernelci.org bot
2019-08-02 23:19 ` shuah
2019-08-03 5:52 ` Naresh Kamboju
2019-08-03 15:57 ` Guenter Roeck
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190802092224.186319933@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=davem@davemloft.net \
--cc=linux-kernel@vger.kernel.org \
--cc=martin@linuxlounge.net \
--cc=nikolay@cumulusnetworks.com \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).