Skip to content
  1. Jan 20, 2019
    • Will Deacon's avatar
      x86: uaccess: Inhibit speculation past access_ok() in user_access_begin() · 6e693b3f
      Will Deacon authored
      Commit 594cc251
      
       ("make 'user_access_begin()' do 'access_ok()'")
      makes the access_ok() check part of the user_access_begin() preceding a
      series of 'unsafe' accesses.  This has the desirable effect of ensuring
      that all 'unsafe' accesses have been range-checked, without having to
      pick through all of the callsites to verify whether the appropriate
      checking has been made.
      
      However, the consolidated range check does not inhibit speculation, so
      it is still up to the caller to ensure that they are not susceptible to
      any speculative side-channel attacks for user addresses that ultimately
      fail the access_ok() check.
      
      This is an oversight, so use __uaccess_begin_nospec() to ensure that
      speculation is inhibited until the access_ok() check has passed.
      
      Reported-by: default avatarJulien Thierry <julien.thierry@arm.com>
      Signed-off-by: default avatarWill Deacon <will.deacon@arm.com>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      6e693b3f
    • Linus Torvalds's avatar
      Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux · b0f3e768
      Linus Torvalds authored
      Pull arm64 fixes from Will Deacon:
       "Three arm64 fixes for -rc3.
      
        We've plugged a couple of nasty issues involving KASLR-enabled
        kernels, and removed a redundant #define that was introduced as part
        of the KHWASAN fixes from akpm at -rc2.
      
         - Fix broken kpti page-table rewrite in bizarre KASLR configuration
      
         - Fix module loading with KASLR
      
         - Remove redundant definition of ARCH_SLAB_MINALIGN"
      
      * tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        kasan, arm64: remove redundant ARCH_SLAB_MINALIGN define
        arm64: kaslr: ensure randomized quantities are clean to the PoC
        arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on
      b0f3e768
    • Linus Torvalds's avatar
      Merge tag 'mips_fixes_5.0_2' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux · 5d5c303e
      Linus Torvalds authored
      Pull MIPS fixes from Paul Burton:
      
       - Fix IPI handling for Lantiq SoCs, which was broken by changes made
         back in v4.12.
      
       - Enable OF/DT serial support in ath79_defconfig to give us working
         serial by default.
      
       - Fix 64b builds for the Jazz platform.
      
       - Set up a struct device for the BCM47xx SoC to allow BCM47xx drivers
         to perform DMA again following the major DMA mapping changes made in
         v4.19.
      
       - Disable MSI on Cavium Octeon systems when the pcie_disable command
         line parameter introduced in v3.3 is used, in order to avoid
         inadvetently accessing PCIe controller registers despite the command
         line.
      
       - Fix a build failure for Cavium Octeon kernels with kexec enabled,
         introduced in v4.20.
      
       - Fix a regression in the behaviour of semctl/shmctl/msgctl IPC
         syscalls for kernels including n32 support but not o32 support caused
         by some cleanup in v3.19.
      
      * tag 'mips_fixes_5.0_2' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux:
        MIPS: OCTEON: fix kexec support
        mips: fix n32 compat_ipc_parse_version
        Disable MSI also when pcie-octeon.pcie_disable on
        MIPS: BCM47XX: Setup struct device for the SoC
        MIPS: jazz: fix 64bit build
        MIPS: ath79: Enable OF serial ports in the default config
        MIPS: lantiq: Use CP0_LEGACY_COMPARE_IRQ
        MIPS: lantiq: Fix IPI interrupt handling
      5d5c303e
    • Linus Torvalds's avatar
      Merge tag 'devicetree-fixes-for-5.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux · 6a0141a0
      Linus Torvalds authored
      Pull Devicetree fix from Rob Herring:
       "A single build fix for powerpc due to device_node.type removal"
      
      * tag 'devicetree-fixes-for-5.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:
        powerpc: chrp: Use of_node_is_type to access device_type
      6a0141a0
    • Linus Torvalds's avatar
      Merge tag 'libnvdimm-fixes-5.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm · 26caabbc
      Linus Torvalds authored
      Pull libnvdimm fixes from Dan Williams:
       "A crash fix, a build warning fix, a miscellaneous small cleanups.
      
        In case anyone is looking for them, there was a regression caught by
        testing that caused two patches to be dropped from this update.  Those
        patches have been reworked and will soak for another week / re-target
        5.0-rc4.
      
         - Fix driver initialization crash due to the inability to report an
           'error' state for a DIMM's security capability.
      
         - Build warning fix for little-endian ARM64 builds
      
         - Fix a potential race between the EDAC driver's usage of the NFIT
           SMBIOS id for a DIMM and the driver shutdown path.
      
         - A small collection of one-line benign cleanups for duplicate
           variable assignments, a duplicate header include and a mis-typed
           function argument"
      
      * tag 'libnvdimm-fixes-5.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        libnvdimm/security: Fix nvdimm_security_state() state request selection
        acpi/nfit: Remove duplicate set nd_set in acpi_nfit_init_interleave_set()
        acpi/nfit: Fix race accessing memdev in nfit_get_smbios_id()
        libnvdimm/dimm: Fix security capability detection for non-Intel NVDIMMs
        nfit: Mark some functions as __maybe_unused
        ACPI/nfit: delete the function to_acpi_nfit_desc
        ACPI/nfit: delete the redundant header file
      26caabbc
    • Linus Torvalds's avatar
      Merge tag 'linux-watchdog-5.0-rc-fixes' of git://www.linux-watchdog.org/linux-watchdog · f403d718
      Linus Torvalds authored
      Pull watchdog fixes from Wim Van Sebroeck:
      
       - mt7621_wdt/rt2880_wdt: Fix compilation problem
      
       - tqmx86: Fix a couple IS_ERR() vs NULL bugs
      
      * tag 'linux-watchdog-5.0-rc-fixes' of git://www.linux-watchdog.org/linux-watchdog:
        watchdog: tqmx86: Fix a couple IS_ERR() vs NULL bugs
        watchdog: mt7621_wdt/rt2880_wdt: Fix compilation problem
      f403d718
    • Linus Torvalds's avatar
      Merge tag 'nfs-for-5.0-2' of git://git.linux-nfs.org/projects/anna/linux-nfs · b0efca46
      Linus Torvalds authored
      Pull NFS client fixes from Anna Schumaker:
       "These are mostly fixes for SUNRPC bugs, with a single v4.2
        copy_file_range() fix mixed in.
      
        Stable bugfixes:
         - Fix TCP receive code on archs with flush_dcache_page()
      
        Other bugfixes:
         - Fix error code in rpcrdma_buffer_create()
         - Fix a double free in rpcrdma_send_ctxs_create()
         - Fix kernel BUG at kernel/cred.c:825
         - Fix unnecessary retry in nfs42_proc_copy_file_range()
         - Ensure rq_bytes_sent is reset before request transmission
         - Ensure we respect the RPCSEC_GSS sequence number limit
         - Address Kerberos performance/behavior regression"
      
      * tag 'nfs-for-5.0-2' of git://git.linux-nfs.org/projects/anna/linux-nfs:
        SUNRPC: Address Kerberos performance/behavior regression
        SUNRPC: Ensure we respect the RPCSEC_GSS sequence number limit
        SUNRPC: Ensure rq_bytes_sent is reset before request transmission
        NFSv4.2 fix unnecessary retry in nfs4_copy_file_range
        sunrpc: kernel BUG at kernel/cred.c:825!
        SUNRPC: Fix TCP receive code on archs with flush_dcache_page()
        xprtrdma: Double free in rpcrdma_sendctxs_create()
        xprtrdma: Fix error code in rpcrdma_buffer_create()
      b0efca46
    • Linus Torvalds's avatar
      Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi · 4d5f6e02
      Linus Torvalds authored
      Pull SCSI fixes from James Bottomley:
       "A set of 17 fixes. Most of these are minor or trivial.
      
        The one fix that may be serious is the isci one: the bug can cause hba
        parameters to be set from uninitialized memory. I don't think it's
        exploitable, but you never know"
      
      * tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
        scsi: cxgb4i: add wait_for_completion()
        scsi: qla1280: set 64bit coherent mask
        scsi: ufs: Fix geometry descriptor size
        scsi: megaraid_sas: Retry reads of outbound_intr_status reg
        scsi: qedi: Add ep_state for login completion on un-reachable targets
        scsi: ufs: Fix system suspend status
        scsi: qla2xxx: Use correct number of vectors for online CPUs
        scsi: hisi_sas: Set protection parameters prior to adding SCSI host
        scsi: tcmu: avoid cmd/qfull timers updated whenever a new cmd comes
        scsi: isci: initialize shost fully before calling scsi_add_host()
        scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs
        scsi: smartpqi_init: fix boolean expression in pqi_device_remove_start
        scsi: core: Synchronize request queue PM status only on successful resume
        scsi: pm80xx: reduce indentation
        scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
        scsi: megaraid_sas: correct an info message
        scsi: target/iscsi: fix error msg typo when create lio_qr_cache failed
        scsi: sd: Fix cache_type_store()
      4d5f6e02
    • Linus Torvalds's avatar
      Merge tag 'for-linus-20190118' of git://git.kernel.dk/linux-block · 0facb892
      Linus Torvalds authored
      Pull block fixes from Jens Axboe:
      
       - block size setting fixes for loop/nbd (Jan Kara)
      
       - md bio_alloc_mddev() cleanup (Marcos)
      
       - Ensure we don't lose the REQ_INTEGRITY flag (Ming)
      
       - Two NVMe fixes by way of Christoph:
          - Fix NVMe IRQ calculation (Ming)
          - Uninitialized variable in nvmet-tcp (Sagi)
      
       - BFQ comment fix (Paolo)
      
       - License cleanup for recently added blk-mq-debugfs-zoned (Thomas)
      
      * tag 'for-linus-20190118' of git://git.kernel.dk/linux-block:
        block: Cleanup license notice
        nvme-pci: fix nvme_setup_irqs()
        nvmet-tcp: fix uninitialized variable access
        block: don't lose track of REQ_INTEGRITY flag
        blockdev: Fix livelocks on loop device
        nbd: Use set_blocksize() to set device blocksize
        md: Make bio_alloc_mddev use bio_alloc_bioset
        block, bfq: fix comments on __bfq_deactivate_entity
      0facb892
    • Rob Herring's avatar
      powerpc: chrp: Use of_node_is_type to access device_type · 75a080cd
      Rob Herring authored
      Commit 8ce5f841 ("of: Remove struct device_node.type pointer")
      removed struct device_node.type pointer, but the conversion to use
      of_node_is_type() accessor was missed in chrp_init_IRQ().
      
      Fixes: 8ce5f841
      
       ("of: Remove struct device_node.type pointer")
      Reported-by: default avatarkbuild test robot <lkp@intel.com>
      Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
      Cc: Paul Mackerras <paulus@samba.org>
      Cc: linuxppc-dev@lists.ozlabs.org
      Acked-by: default avatarMichael Ellerman <mpe@ellerman.id.au>
      Signed-off-by: default avatarRob Herring <robh@kernel.org>
      75a080cd
  2. Jan 19, 2019
    • Linus Torvalds's avatar
      Merge tag 'media/v5.0-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media · 2339e91d
      Linus Torvalds authored
      Pull media fixes from Mauro Carvalho Chehab:
      
       - a regression fix at v4l2 core, with affects multi-plane streams
      
       - a fix at vim2m driver
      
      * tag 'media/v5.0-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:
        media: vim2m: only cancel work if it is for right context
        media: v4l: ioctl: Validate num_planes for debug messages
        media: v4l: ioctl: Validate num_planes before using it
        media: v4l2-ioctl: Clear only per-plane reserved fields
      2339e91d
    • Linus Torvalds's avatar
      Merge tag 'pci-v5.0-fixes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci · d28f3e72
      Linus Torvalds authored
      Pull PCI fixes from Bjorn Helgaas::
      
       - Fix PCI kconfig menu organization (Rob Herring)
      
       - Fix pci_alloc_irq_vectors_affinity() error return to allow "reduce
         and retry" for drivers using IRQ sets (Ming Lei)
      
       - Fix "pci=disable_acs_redir" initdata use-after-free problem (Logan
         Gunthorpe)
      
      * tag 'pci-v5.0-fixes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:
        PCI: Fix __initdata issue with "pci=disable_acs_redir" parameter
        PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity()
        PCI: Fix PCI kconfig menu organization
      d28f3e72
    • Linus Torvalds's avatar
      Merge tag 'i3c/fixes-for-5.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/i3c/linux · 8b4fe58d
      Linus Torvalds authored
      Pull i3c fixes from Boris Brezillon:
      
       - Fix the error check on master->sysclk val in the Cadence driver
      
       - Fix reattach implementation in the Designware driver
      
      * tag 'i3c/fixes-for-5.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/i3c/linux:
        i3c: master: dw-i3c-master: fix i3c_attach/reattach
        i3c: master: Fix an error checking typo in 'cdns_i3c_master_probe()'
      8b4fe58d
    • Linus Torvalds's avatar
      Merge tag 'mtd/fixes-for-5.0-rc3' of git://git.infradead.org/linux-mtd · 3cdf680e
      Linus Torvalds authored
      Pull mtd fixes from Boris Brezillon:
       "Raw NAND changes:
      
         - jz4740: fix a compilation warning
      
         - fsmc: fix a regression introduced by ->select_chip() deprecation
      
         - denali: fix a regression introduced by NAND_KEEP_TIMINGS addition"
      
      * tag 'mtd/fixes-for-5.0-rc3' of git://git.infradead.org/linux-mtd:
        mtd: rawnand: denali: get ->setup_data_interface() working again
        mtd: nand: jz4740: fix '__iomem *' vs. '* __iomem'
        mtd: rawnand: fsmc: Keep bank enable bit set
      3cdf680e
    • Linus Torvalds's avatar
      Merge tag 'regmap-fix-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap · 6e4673b4
      Linus Torvalds authored
      Pull regmap fixes from Mark Brown:
       "The cleanups for the way we handle type information introduced during
        the merge window revealed that we'd been abusing the irq APIs for a
        long time, causing breakage for systems.
      
        This has a couple of minimal fixes for that which restore the previous
        behaviour for the time being, we'll fix it properly for v5.1 but
        that'd be a bit much to do as a bug fix"
      
      * tag 'regmap-fix-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:
        regmap-irq: do not write mask register if mask_base is zero
        regmap: regmap-irq: silently ignore unsupported type settings
      6e4673b4
    • Linus Torvalds's avatar
      Merge tag 'powerpc-5.0-3' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux · c5b70980
      Linus Torvalds authored
      Pull powerpc fixes from Michael Ellerman:
       "A couple of weeks of fixes.
      
        There's one fix for an oops on Power9 machines with Open CAPI
        adapters.
      
        And a fix for probable memory corruption in some of the new NPU code,
        caught by smatch though and not seen in the wild.
      
        Plus a few other minor fixes.
      
        There's one non-fix which is the perf_regs change. That was sent
        during the merge window but I accidentally only merged the first of
        two patches in the series. It's been in linux-next so hopefully
        doesn't conflict with anything in acme's tree.
      
        Thanks to: Alexey Kardashevskiy, Andrew Donnellan, Breno Leitao,
        Christian Lamparter, Christophe Leroy, Dan Carpenter, Frederic Barrat,
        Greg Kurz, Jason A. Donenfeld, Madhavan Srinivasan"
      
      * tag 'powerpc-5.0-3' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/syscalls: Fix syscall tracing
        powerpc/pseries: Fix build break due to pnv_npu2_init()
        powerpc/4xx/ocm: Fix fix for phys_addr_t printf warnings
        powerpc/powernv/npu: Fix oops in pnv_try_setup_npu_table_group()
        powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
        powerpc/8xx: fix setting of pagetable for Abatron BDI debug tool.
        powerpc/powernv/npu: Allocate enough memory in pnv_try_setup_npu_table_group()
        powerpc/perf: Update perf_regs structure to include MMCRA
      c5b70980
    • Linus Torvalds's avatar
      Merge tag 'for-linus-5.0-rc3-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip · e6ec2fda
      Linus Torvalds authored
      Pull xen fixes from Juergen Gross:
      
       - Several fixes for the Xen pvcalls drivers (1 fix for the backend and
         8 for the frontend).
      
       - A fix for a rather longstanding bug in the Xen sched_clock()
         interface which led to weird time jumps when migrating the system.
      
       - A fix for avoiding accesses to x2apic MSRs in Xen PV guests.
      
      * tag 'for-linus-5.0-rc3-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:
        xen: Fix x86 sched_clock() interface for xen
        pvcalls-front: fix potential null dereference
        always clear the X2APIC_ENABLE bit for PV guest
        pvcalls-front: Avoid get_free_pages(GFP_KERNEL) under spinlock
        xen/pvcalls: remove set but not used variable 'intf'
        pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read
        pvcalls-front: don't return error when the ring is full
        pvcalls-front: properly allocate sk
        pvcalls-front: don't try to free unallocated rings
        pvcalls-front: read all data before closing the connection
      e6ec2fda
    • Linus Torvalds's avatar
      Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 · dc6fef2c
      Linus Torvalds authored
      Pull crypto fixes from Herbert Xu:
       "This fixes the following issues:
         - Zero-length DMA mapping in caam
         - Invalidly mapping stack memory for DMA in talitos
         - Use after free in cavium/nitrox
         - Key parsing in authenc
         - Undefined shift in sm3
         - Bogus completion call in authencesn
         - SHA support detection in caam"
      
      * 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: sm3 - fix undefined shift by >= width of value
        crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK
        crypto: talitos - reorder code in talitos_edesc_alloc()
        crypto: adiantum - initialize crypto_spawn::inst
        crypto: cavium/nitrox - Use after free in process_response_list()
        crypto: authencesn - Avoid twice completion call in decrypt path
        crypto: caam - fix SHA support detection
        crypto: caam - fix zero-length buffer DMA mapping
        crypto: ccree - convert to use crypto_authenc_extractkeys()
        crypto: bcm - convert to use crypto_authenc_extractkeys()
        crypto: authenc - fix parsing key with misaligned rta_len
      dc6fef2c
    • Linus Torvalds's avatar
      Merge tag 'acpi-5.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm · 6e434bf2
      Linus Torvalds authored
      Pull ACPI fixes from Rafael Wysocki:
       "These fix an ACPI initialization ordering issue introduced in the 4.17
        time frame and causing functional problems to appear on multiple
        systems and fix some fallout of the recent change to enable building
        kernels with ACPI support and without PCI.
      
        Specifics:
      
         - Restore the ACPI initialization ordering changed implicitly by the
           module-level AML handling rework during the 4.17 development cycle
           that caused the EC address space handler based on information from
           ECDT to be set up before loading AML definition blocks, making it
           effectively not accessible by AML on some systems that don't work
           as expected any more (Rafael Wysocki).
      
         - Add direct dependencies on PCI to Kconfig in multiple places for
           code that depends on both ACPI and PCI, but the PCI dependency was
           implicitly satisfied by the ACPI dependency before, to prevent
           invalid configurations from being created, for example by
           randconfig (Sinan Kaya)"
      
      * tag 'acpi-5.0-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        ACPI: EC: Look for ECDT EC after calling acpi_load_tables()
        drivers: thermal: int340x_thermal: Make PCI dependency explicit
        x86/intel/lpss: Make PCI dependency explicit
        platform/x86: apple-gmux: Make PCI dependency explicit
        platform/x86: intel_pmc: Make PCI dependency explicit
        platform/x86: intel_ips: make PCI dependency explicit
        vga-switcheroo: make PCI dependency explicit
        ata: pata_acpi: Make PCI dependency explicit
        ACPI / LPSS: Make PCI dependency explicit
      6e434bf2
    • Linus Torvalds's avatar
      Merge tag 'fbdev-v5.0-rc3' of git://github.com/bzolnier/linux · 2a8cbf2a
      Linus Torvalds authored
      Pull fbdev fixes from Bartlomiej Zolnierkiewicz:
      
       - fix stack memory leak in omap2fb driver (Vlad Tsyrklevich)
      
       - fix OF node name handling v4.20 regression in offb driver (Rob
         Herring)
      
       - convert CONFIG_FB_LOGO_CENTER config option added in v5.0-rc1 into a
         kernel parameter (Peter Rosin)
      
      * tag 'fbdev-v5.0-rc3' of git://github.com/bzolnier/linux:
        fbdev: fbmem: convert CONFIG_FB_LOGO_CENTER into a cmd line option
        fbdev: offb: Fix OF node name handling
        omap2fb: Fix stack memory disclosure
      2a8cbf2a
    • Linus Torvalds's avatar
      Merge tag 'drm-fixes-2019-01-18-1' of git://anongit.freedesktop.org/drm/drm · c3653ebd
      Linus Torvalds authored
      Pull drm update from Dave Airlie:
       "Add nouveau TU102 (RTX 2080 Ti) support"
      
      * tag 'drm-fixes-2019-01-18-1' of git://anongit.freedesktop.org/drm/drm:
        drm/nouveau/core: recognise TU102
      c3653ebd
  3. Jan 18, 2019