[PATCH 3.18 00/45] 3.18.57-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 3.18.57 release.
There are 45 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Jun 14 15:25:35 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.57-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 3.18.57-rc1

Christoph Hellwig <hch@xxxxxx>
    mlx5: stop including <asm-generic/kmap_types.h>

Mark Rutland <mark.rutland@xxxxxxx>
    arm64: ensure extension of smp_store_release value

Kees Cook <keescook@xxxxxxxxxxxx>
    usercopy: Adjust tests to deal with SMAP/PAN

Amey Telawane <ameyt@xxxxxxxxxxxxxx>
    tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()

Mike Marciniszyn <mike.marciniszyn@xxxxxxxxx>
    RDMA/qib,hfi1: Fix MR reference count leak on write with immediate

Kristina Martsenko <kristina.martsenko@xxxxxxx>
    arm64: entry: improve data abort handling of tagged pointers

Kristina Martsenko <kristina.martsenko@xxxxxxx>
    arm64: hw_breakpoint: fix watchpoint matching for tagged pointers

Takatoshi Akiyama <takatoshi.akiyama.kj@xxxxxxxxxxxxxxxxxxxxxxxx>
    serial: sh-sci: Fix panic when serial console and DMA are enabled

Julius Werner <jwerner@xxxxxxxxxxxx>
    drivers: char: mem: Fix wraparound check to allow mappings up to the end

Takashi Iwai <tiwai@xxxxxxx>
    ASoC: Fix use-after-free at card unregistration

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT

Vladis Dronov <vdronov@xxxxxxxxxx>
    drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()

Jin Yao <yao.jin@xxxxxxxxxxxxxxx>
    perf/core: Drop kernel samples even though :u is specified

Michael Ellerman <mpe@xxxxxxxxxxxxxx>
    powerpc/numa: Fix percpu allocations to be NUMA aware

Russell Currey <ruscur@xxxxxxxxxx>
    powerpc/eeh: Avoid use after free in eeh_handle_special_event()

Johannes Thumshirn <jthumshirn@xxxxxxx>
    scsi: qla2xxx: don't disable a not previously enabled PCI device

Jeff Mahoney <jeffm@xxxxxxxx>
    btrfs: fix memory leak in update_space_info failure path

David Sterba <dsterba@xxxxxxxx>
    btrfs: use correct types for page indices in btrfs_page_exists_in_range

Daniel Micay <danielmicay@xxxxxxxxx>
    stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms

Eric Biggers <ebiggers3@xxxxxxxxx>
    random: properly align get_random_int_hash

Daniel Cashman <dcashman@xxxxxxxxxxx>
    drivers: char: random: add get_random_long()

Matt Ranostay <matt.ranostay@xxxxxxxxxxxx>
    iio: proximity: as3935: fix AS3935_INT mask

Oleg Drokin <green@xxxxxxxxxxxxxx>
    staging/lustre/lov: remove set_fs() call from lov_getstripe()

Michael Thalmeier <michael.thalmeier@xxxxxxx>
    usb: chipidea: debug: check before accessing ci_role

Jisheng Zhang <jszhang@xxxxxxxxxxx>
    usb: chipidea: udc: fix NULL pointer dereference if udc_start failed

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
    usb: gadget: f_mass_storage: Serialize wake and sleep execution

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
    ext4: keep existing extra fields when inode expands

Jan Kara <jack@xxxxxxx>
    ext4: fix SEEK_HOLE

Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx>
    dmaengine: ep93xx: Always start from BASE0

Marc Zyngier <marc.zyngier@xxxxxxx>
    arm: KVM: Allow unaligned accesses at HYP

Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
    KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation

Paolo Bonzini <pbonzini@xxxxxxxxxx>
    kvm: async_pf: fix rcu_irq_enter() with irqs enabled

J. Bruce Fields <bfields@xxxxxxxxxx>
    nfsd4: fix null dereference on replay

Gilad Ben-Yossef <gilad@xxxxxxxxxxxxx>
    crypto: gcm - wait for crypto op not signal safe

Eric Biggers <ebiggers@xxxxxxxxxx>
    KEYS: fix freeing uninitialized memory in key_update()

Eric Biggers <ebiggers@xxxxxxxxxx>
    KEYS: fix dereferencing NULL payload with nonzero length

Johan Hovold <johan@xxxxxxxxxx>
    serial: ifx6x60: fix use-after-free on module unload

Max Filippov <jcmvbkbc@xxxxxxxxx>
    net: ethoc: enable NAPI before poll may be scheduled

Eric Dumazet <edumazet@xxxxxxxxxx>
    net: ping: do not abuse udp_poll()

David S. Miller <davem@xxxxxxxxxxxxx>
    ipv6: Fix leak in ipv6_gso_segment().

Yuchung Cheng <ycheng@xxxxxxxxxx>
    tcp: disallow cwnd undo when switching congestion control

Ganesh Goudar <ganeshgr@xxxxxxxxxxx>
    cxgb4: avoid enabling napi twice to the same queue

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
    ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

Mintz, Yuval <Yuval.Mintz@xxxxxxxxxx>
    bnx2x: Fix Multi-Cos


-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/arm/kvm/init.S                                |  5 +--
 arch/arm64/include/asm/asm-uaccess.h               | 13 ++++++
 arch/arm64/include/asm/barrier.h                   | 10 ++++-
 arch/arm64/include/asm/uaccess.h                   |  8 ++++
 arch/arm64/kernel/entry.S                          |  6 ++-
 arch/arm64/kernel/hw_breakpoint.c                  |  3 +-
 arch/powerpc/include/asm/topology.h                | 14 ++++++
 arch/powerpc/kernel/eeh_driver.c                   | 19 ++++++--
 arch/powerpc/kernel/setup_64.c                     |  4 +-
 arch/x86/kernel/kvm.c                              |  2 +-
 arch/x86/kvm/cpuid.c                               | 20 +++++----
 crypto/gcm.c                                       |  6 +--
 drivers/char/mem.c                                 |  2 +-
 drivers/char/random.c                              | 26 ++++++++++-
 drivers/dma/ep93xx_dma.c                           |  2 +
 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c               |  2 +
 drivers/gpu/drm/vmwgfx/vmwgfx_surface.c            |  3 ++
 drivers/iio/proximity/as3935.c                     |  4 +-
 drivers/infiniband/hw/mlx5/main.c                  |  2 +-
 drivers/infiniband/hw/qib/qib_rc.c                 |  4 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c    |  2 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c    |  4 ++
 drivers/net/ethernet/ethoc.c                       |  3 +-
 drivers/net/ethernet/mellanox/mlx5/core/cmd.c      |  2 +-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |  2 +-
 .../net/ethernet/mellanox/mlx5/core/pagealloc.c    |  2 +-
 drivers/scsi/qla2xxx/qla_os.c                      |  8 ++--
 drivers/staging/lustre/lustre/lov/lov_pack.c       |  9 ----
 drivers/tty/serial/ifx6x60.c                       |  2 +-
 drivers/tty/serial/sh-sci.c                        | 10 +++--
 drivers/usb/chipidea/debug.c                       |  3 +-
 drivers/usb/chipidea/udc.c                         |  8 +++-
 drivers/usb/gadget/function/f_mass_storage.c       | 13 +++++-
 fs/btrfs/extent-tree.c                             |  1 +
 fs/btrfs/inode.c                                   |  4 +-
 fs/ext4/file.c                                     | 50 ++++++----------------
 fs/ext4/inode.c                                    |  5 ++-
 fs/nfsd/nfs4proc.c                                 | 13 +++---
 include/linux/bitops.h                             | 11 +++++
 include/linux/random.h                             |  1 +
 include/net/ipv6.h                                 |  1 +
 kernel/events/core.c                               | 21 +++++++++
 kernel/fork.c                                      |  2 +-
 kernel/trace/trace.c                               |  2 +-
 lib/test_user_copy.c                               | 20 ++++++++-
 net/ipv4/af_inet.c                                 |  2 +-
 net/ipv4/tcp_cong.c                                |  1 +
 net/ipv6/ip6_offload.c                             |  4 +-
 net/ipv6/ping.c                                    |  2 +-
 net/ipv6/raw.c                                     |  2 +-
 net/ipv6/xfrm6_mode_ro.c                           |  2 +
 net/ipv6/xfrm6_mode_transport.c                    |  2 +
 security/keys/key.c                                |  5 +--
 security/keys/keyctl.c                             |  4 +-
 sound/core/timer.c                                 |  1 +
 sound/soc/soc-core.c                               |  5 ++-
 57 files changed, 262 insertions(+), 126 deletions(-)