+2
−3
Loading
!13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
Merge Pull Request from: @wenzhiwei11 git log --oneline v6.6.54..v6.6.55 | wc -l 384 291+71+11+1+10 Merged(71): static_call: Replace pointless WARN_ON() in static_call_module_notify() net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() net: add more sanity checks to qdisc_pkt_len_init() net: avoid potential underflow in qdisc_pkt_len_init() with UFO net: test for not too small csum_start in virtio_net_hdr_to_skb() media: usbtv: Remove useless locks in usbtv_video_free() Bluetooth: ISO: Fix not validating setsockopt user input Bluetooth: L2CAP: Fix not validating setsockopt user input cifs: Fix buffer overflow when parsing NFS reparse points wifi: cfg80211: Set correct chandef when starting CAC net/xen-netback: prevent UAF in xenvif_flush_hash() blk_iocost: fix more out of bound shifts wifi: ath12k: fix array out-of-bound access in SoC stats tipc: guard against string buffer overrun wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() x86/ioapic: Handle allocation failures gracefully ALSA: asihpi: Fix potential OOB array access fbdev: pxafb: Fix possible use after free in pxafb_task() drm/stm: Avoid use-after-free issues with crtc and plane drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer drm/amd/display: fix double free issue during amdgpu module unload jfs: Fix uaf in dbFreeBits jfs: check if leafidx greater than num leaves per dmap tree drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs jfs: Fix uninit-value access of new_ea in ea_buffer drm/amd/display: Initialize get_bytes_per_element's default to 1 drm/amd/display: Avoid overflow assignment in link_dp_cts drm/amd/display: Fix index out of bounds in DCN30 color transformation drm/amd/display: Check link_res->hpo_dp_link_enc before using it drm/amd/display: Check stream before comparing them ext4: fix i_data_sem unlock order in ext4_ind_migrate() ext4: avoid use-after-free in ext4_ext_show_leaf() ext4: ext4_search_dir should return a proper error platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume media: i2c: ar0521: Use cansleep version of gpiod_set_value() ext4: no need to continue when the number of entries is 1 ext4: fix slab-use-after-free in ext4_split_extent_at() ext4: update orig_path in ext4_find_extent() ext4: fix timer use-after-free on failed mount ext4: fix double brelse() the buffer of the extents path ext4: aovid use-after-free in ext4_ext_insert_extent() ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free drm: omapdrm: Add missing check for alloc_ordered_workqueue jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error ocfs2: remove unreasonable unlock in ocfs2_read_blocks ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2: reserve space for inline xattr before attaching reflink tree ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate exfat: fix memory leak in exfat_load_bitmap() nfsd: map the EBADMSG to nfserr_io to avoid warning i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition media: venus: fix use after free bug in venus_remove due to race condition gso: fix udp gso fraglist segmentation after pull from frag_list Input: adp5589-keys - fix NULL pointer dereference cachefiles: fix dentry leak in cachefiles_open_file() btrfs: fix a NULL pointer dereference when failed to start a new trasacntion btrfs: wait for fixup workers before stopping cleaner kthread during umount cpufreq: Avoid a bad reference count on CPU node tracing/timerlat: Drop interface_lock in stop_kthread() tracing/timerlat: Fix a race during cpuhp processing drm/amd/display: Fix system hang while resume with TBT monitor uprobes: fix kernel info leak via "[uprobes]" vma r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" r8169: add tally counter fields added with RTL8125 ACPI: battery: Simplify battery hook locking ACPI: battery: Fix possible crash when unregistering a battery hook efi/unaccepted: touch soft lockup during memory accept net: stmmac: move the EST lock to struct stmmac_priv null_blk: Fix return value of nullb_device_power_store() conflicts(11) drm/amd/display: Fix index out of bounds in degamma hardware format translation iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release ext4: dax: fix overflowing extents beyond inode size when partially writing arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 arm64: errata: Expand speculative SSBS workaround once more mm: z3fold: deprecate CONFIG_Z3FOLD sched: psi: fix bogus pressure spikes from aggregation race iommufd: Fix protection fault in iommufd_test_syz_conv_iova null_blk: Remove usage of the deprecated ida_simple_xx() API null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' drm/amd/display: enable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc before using it checkconfig failed(1): proc: add config & param to block forcing mem writes checkkabi failed(10): HID: Ignore battery for all ELAN I2C-HID devices ata: sata_sil: Rename sil_blacklist to sil_quirks ata: pata_serverworks: Do not use the term blacklist drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream scsi: aacraid: Rearrange order of struct aac_srb_unit perf,x86: avoid missing caller address in stack traces captured in uprobe i2c: synquacer: Deal with optional PCLK correctly i2c: synquacer: Remove a clk reference from struct synquacer_i2c i2c: core: Lock address during client device instantiation i2c: create debugfs entry per adapter Link:https://gitee.com/openeuler/kernel/pulls/13077 Reviewed-by:Zhang Peng <zhangpeng362@huawei.com> Signed-off-by: