[PATCH 4.14 00/88] 4.14.300-rc1 review

From: Greg Kroah-Hartman
Date: Wed Nov 23 2022 - 03:59:04 EST


This is the start of the stable review cycle for the 4.14.300 release.
There are 88 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 25 Nov 2022 08:45:20 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.300-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.14.300-rc1

Hawkins Jiawei <yin31149@xxxxxxxxx>
ntfs: check overflow when iterating ATTR_RECORDs

Hawkins Jiawei <yin31149@xxxxxxxxx>
ntfs: fix out-of-bounds read in ntfs_attr_find()

Hawkins Jiawei <yin31149@xxxxxxxxx>
ntfs: fix use-after-free in ntfs_attr_find()

Alexander Potapenko <glider@xxxxxxxxxx>
mm: fs: initialize fsdata passed to write_begin/write_end interface

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
9p/trans_fd: always use O_NONBLOCK read/write

Andreas Gruenbacher <agruenba@xxxxxxxxxx>
gfs2: Switch from strlcpy to strscpy

Andrew Price <anprice@xxxxxxxxxx>
gfs2: Check sb_bsize_shift after reading superblock

Dominique Martinet <asmadeus@xxxxxxxxxxxxx>
9p: trans_fd/p9_conn_cancel: drop client lock earlier

Cong Wang <cong.wang@xxxxxxxxxxxxx>
kcm: close race conditions on sk_receive_queue

Baisong Zhong <zhongbaisong@xxxxxxxxxx>
bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()

Eric Dumazet <edumazet@xxxxxxxxxx>
kcm: avoid potential race in kcm_tx_work

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: cdg: allow tcp_cdg_release() to be called multiple times

Eric Dumazet <edumazet@xxxxxxxxxx>
macvlan: enforce a consistent minimal mtu

Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx>
serial: 8250: Flush DMA Rx on RLSI

Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx>
nilfs2: fix use-after-free bug of ns_writer on remount

Alexander Potapenko <glider@xxxxxxxxxx>
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx>
mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()

Yann Gautier <yann.gautier@xxxxxxxxxxx>
mmc: core: properly select voltage range without power cycle

Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx>
serial: 8250_lpss: Configure DMA also w/o DMA filter

Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx>
serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm ioctl: fix misbehavior if list_versions races with module loading

Mitja Spes <mitja@xxxxxxxxx>
iio: pressure: ms5611: changed hardcoded SPI speed to value limited

Yang Yingliang <yangyingliang@xxxxxxxxxx>
iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()

Yang Yingliang <yangyingliang@xxxxxxxxxx>
iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()

Duoming Zhou <duoming@xxxxxxxxxx>
usb: chipidea: fix deadlock in ci_otg_del_timer

Nicolas Dumazet <ndumazet@xxxxxxxxxx>
usb: add NO_LPM quirk for Realforce 87U Keyboard

Reinhard Speyerer <rspmn@xxxxxxxx>
USB: serial: option: add Fibocom FM160 0x0111 composition

Davide Tronchin <davide.tronchin.94@xxxxxxxxx>
USB: serial: option: add u-blox LARA-L6 modem

Davide Tronchin <davide.tronchin.94@xxxxxxxxx>
USB: serial: option: add u-blox LARA-R6 00B modem

Davide Tronchin <davide.tronchin.94@xxxxxxxxx>
USB: serial: option: remove old LARA-R6 PID

Benoît Monin <benoit.monin@xxxxxx>
USB: serial: option: add Sierra Wireless EM9191

Takashi Iwai <tiwai@xxxxxxx>
ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

Daniil Tatianin <d-tatianin@xxxxxxxxxxxxxx>
ring_buffer: Do not deactivate non-existant pages

Xiu Jianfeng <xiujianfeng@xxxxxxxxxx>
ftrace: Fix null pointer dereference in ftrace_add_mod()

Wang Wensheng <wangwensheng4@xxxxxxxxxx>
ftrace: Optimize the allocation for mcount entries

Wang Wensheng <wangwensheng4@xxxxxxxxxx>
ftrace: Fix the possible incorrect kernel message

Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx>
cifs: Fix wrong return value checking when GETFLAGS

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
net/x25: Fix skb leak in x25_lapb_receive_frame()

Dan Carpenter <error27@xxxxxxxxx>
drbd: use after free in drbd_create_device()

Yang Yingliang <yangyingliang@xxxxxxxxxx>
xen/pcpu: fix possible memory leak in register_pcpu()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
net: caif: fix double disconnect client in chnl_net_open()

Wang ShaoBo <bobo.shaobowang@xxxxxxxxxx>
mISDN: fix misuse of put_device() in mISDN_register_device()

Yang Yingliang <yangyingliang@xxxxxxxxxx>
mISDN: fix possible memory leak in mISDN_dsp_element_register()

Wei Yongjun <weiyongjun1@xxxxxxxxxx>
net: bgmac: Drop free_netdev() from bgmac_enet_remove()

Zeng Heng <zengheng4@xxxxxxxxxx>
pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map

Maciej W. Rozycki <macro@xxxxxxxxxxx>
parport_pc: Avoid FIFO port location truncation

Serge Semin <Sergey.Semin@xxxxxxxxxxxxxxxxxxxx>
block: sed-opal: kmalloc the cmd/resp buffers

Chen Zhongjin <chenzhongjin@xxxxxxxxxx>
ASoC: soc-utils: Remove __exit for snd_soc_util_exit()

Duoming Zhou <duoming@xxxxxxxxxx>
tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send

Tony Lindgren <tony@xxxxxxxxxxx>
serial: 8250: omap: Flush PM QOS work on remove

Matthias Schiffer <matthias.schiffer@xxxxxxxxxxxxxxx>
serial: 8250_omap: remove wait loop from Errata i202 workaround

Chen Zhongjin <chenzhongjin@xxxxxxxxxx>
ASoC: core: Fix use-after-free in snd_soc_exit()

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm

Nathan Huckleberry <nhuck@xxxxxxxxxx>
drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid

Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx>
rtc: cmos: fix build on non-ACPI platforms

Ricardo Cañuelo <ricardo.canuelo@xxxxxxxxxxxxx>
selftests/futex: fix build for clang

Borislav Petkov <bp@xxxxxxx>
x86/cpu: Restore AMD's DE_CFG MSR after resume

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_hdmac: Check return code of dma_async_device_register

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_hdmac: Fix impossible condition

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_hdmac: Don't allow CPU to reorder channel enable

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_hdmac: Don't start transactions at tx_submit level

Tudor Ambarus <tudor.ambarus@xxxxxxxxxxxxx>
dmaengine: at_hdmac: Fix at_lli struct definition

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
cert host tools: Stop complaining about deprecated OpenSSL functions

ZhangPeng <zhangpeng362@xxxxxxxxxx>
udf: Fix a slab-out-of-bounds write bug in udf_find_entry()

Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx>
btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()

Jorge Lopez <jorge.lopez2@xxxxxx>
platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi

Matthew Auld <matthew.auld@xxxxxxxxx>
drm/i915/dmabuf: fix sg_table handling in map_dma_buf

Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx>
nilfs2: fix deadlock in nilfs_count_free_blocks()

Takashi Iwai <tiwai@xxxxxxx>
ALSA: usb-audio: Add quirk entry for M-Audio Micro

Ye Bin <yebin10@xxxxxxxxxx>
ALSA: hda: fix potential memleak in 'add_widget_node'

Ard Biesheuvel <ardb@xxxxxxxxxx>
arm64: efi: Fix handling of misaligned runtime regions and drop warning

Chuang Wang <nashuiliang@xxxxxxxxx>
net: macvlan: fix memory leaks of macvlan_common_newlink

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
ethernet: s2io: disable napi when start nic failed in s2io_card_up()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()

Xin Long <lucien.xin@xxxxxxxxx>
tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header

Alexander Potapenko <glider@xxxxxxxxxx>
ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network

Yuan Can <yuancan@xxxxxxxxxx>
drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
hamradio: fix issue of dev reference count leakage in bpq_device_event()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()

Gaosheng Cui <cuigaosheng1@xxxxxxxxxx>
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK

Sean Anderson <sean.anderson@xxxxxxxx>
net: fman: Unregister ethernet device on removal

Alex Barba <alex.barba@xxxxxxxxxxxx>
bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer

Jiri Benc <jbenc@xxxxxxxxxx>
net: gso: fix panic on frag_list with mixed head alloc types

Yang Yingliang <yangyingliang@xxxxxxxxxx>
HID: hyperv: fix possible memory leak in mousevsc_probe()


-------------

Diffstat:

Makefile | 4 +-
arch/arm64/kernel/efi.c | 52 ++++++++++++-------
arch/x86/include/asm/msr-index.h | 8 +--
arch/x86/kernel/cpu/amd.c | 10 ++--
arch/x86/kvm/svm.c | 10 ++--
arch/x86/kvm/x86.c | 2 +-
arch/x86/power/cpu.c | 1 +
block/sed-opal.c | 32 ++++++++++--
drivers/block/drbd/drbd_main.c | 4 +-
drivers/dma/at_hdmac.c | 34 ++++++-------
drivers/dma/at_hdmac_regs.h | 10 ++--
drivers/dma/mv_xor_v2.c | 1 +
drivers/gpu/drm/i915/i915_gem_dmabuf.c | 4 +-
drivers/gpu/drm/imx/imx-tve.c | 5 +-
drivers/gpu/drm/vc4/vc4_drv.c | 7 ++-
drivers/hid/hid-hyperv.c | 2 +-
drivers/iio/adc/at91_adc.c | 4 +-
drivers/iio/pressure/ms5611_spi.c | 2 +-
drivers/iio/trigger/iio-trig-sysfs.c | 6 ++-
drivers/isdn/mISDN/core.c | 2 +-
drivers/isdn/mISDN/dsp_pipeline.c | 3 +-
drivers/md/dm-ioctl.c | 4 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 2 +
drivers/mmc/core/core.c | 8 ++-
drivers/mmc/host/sdhci-pci-core.c | 2 +
drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
drivers/net/ethernet/broadcom/bgmac.c | 1 -
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 +-
drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 1 +
drivers/net/ethernet/freescale/fman/mac.c | 9 ++++
drivers/net/ethernet/marvell/mv643xx_eth.c | 1 +
drivers/net/ethernet/neterion/s2io.c | 29 +++++++----
drivers/net/hamradio/bpqether.c | 2 +-
drivers/net/macvlan.c | 6 ++-
drivers/net/wan/lapbether.c | 2 +-
drivers/parport/parport_pc.c | 2 +-
drivers/pinctrl/devicetree.c | 2 +
drivers/platform/x86/hp-wmi.c | 12 ++++-
drivers/rtc/rtc-cmos.c | 3 ++
drivers/tty/n_gsm.c | 2 +-
drivers/tty/serial/8250/8250_lpss.c | 15 ++++--
drivers/tty/serial/8250/8250_omap.c | 18 +------
drivers/tty/serial/8250/8250_port.c | 7 ++-
drivers/usb/chipidea/otg_fsm.c | 2 +
drivers/usb/core/quirks.c | 3 ++
drivers/usb/serial/option.c | 19 ++++++-
drivers/xen/pcpu.c | 2 +-
fs/btrfs/tests/btrfs-tests.c | 2 +-
fs/buffer.c | 4 +-
fs/cifs/ioctl.c | 4 +-
fs/gfs2/ops_fstype.c | 11 ++--
fs/namei.c | 2 +-
fs/nilfs2/segment.c | 15 +++---
fs/nilfs2/super.c | 2 -
fs/nilfs2/the_nilfs.c | 2 -
fs/ntfs/attrib.c | 28 ++++++++--
fs/ntfs/inode.c | 7 +++
fs/udf/namei.c | 2 +-
include/uapi/linux/capability.h | 2 +-
kernel/trace/ftrace.c | 5 +-
kernel/trace/ring_buffer.c | 4 +-
mm/filemap.c | 2 +-
net/9p/trans_fd.c | 6 ++-
net/bluetooth/l2cap_core.c | 2 +-
net/bpf/test_run.c | 1 +
net/caif/chnl_net.c | 3 --
net/core/skbuff.c | 36 ++++++-------
net/ipv4/tcp_cdg.c | 2 +
net/ipv6/addrlabel.c | 1 +
net/kcm/kcmsock.c | 62 ++++-------------------
net/tipc/netlink_compat.c | 2 +-
net/x25/x25_dev.c | 2 +-
scripts/extract-cert.c | 7 +++
scripts/sign-file.c | 7 +++
sound/hda/hdac_sysfs.c | 4 +-
sound/soc/soc-core.c | 17 ++++++-
sound/soc/soc-utils.c | 2 +-
sound/usb/midi.c | 4 +-
sound/usb/quirks-table.h | 4 ++
tools/testing/selftests/futex/functional/Makefile | 6 +--
80 files changed, 379 insertions(+), 244 deletions(-)