[PATCH 4.4 00/52] 4.4.294-rc1 review

From: Greg Kroah-Hartman
Date: Mon Dec 06 2021 - 09:59:22 EST


This is the start of the stable review cycle for the 4.4.294 release.
There are 52 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 08 Dec 2021 14:55:37 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.294-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.4.294-rc1

Pierre Gondois <Pierre.Gondois@xxxxxxx>
serial: pl011: Add ACPI SBSA UART match id

Sven Eckelmann <sven@xxxxxxxxxxxxx>
tty: serial: msm_serial: Deactivate RX DMA for polling support

Maciej W. Rozycki <macro@xxxxxxxxxxx>
vgacon: Propagate console boot parameters before calling `vc_resize'

Helge Deller <deller@xxxxxx>
parisc: Fix "make install" on newer debian releases

Arnd Bergmann <arnd@xxxxxxxx>
siphash: use _unaligned version by default

Zhou Qingyang <zhou1615@xxxxxxx>
net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
natsemi: xtensa: fix section mismatch warnings

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
fget: check that the fd still exists after getting a ref to it

Jens Axboe <axboe@xxxxxxxxx>
fs: add fget_many() and fput_many()

Baokun Li <libaokun1@xxxxxxxxxx>
sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl

Baokun Li <libaokun1@xxxxxxxxxx>
sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
kprobes: Limit max data_size of the kretprobe instances

Teng Qi <starmiku1207184332@xxxxxxxxx>
net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

zhangyue <zhangyue1@xxxxxxxxxx>
net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

Mike Christie <michael.christie@xxxxxxxxxx>
scsi: iscsi: Unblock session then wake up error handler

Vasily Gorbik <gor@xxxxxxxxxxxxx>
s390/setup: avoid using memblock_enforce_memory_limit

Slark Xiao <slark_xiao@xxxxxxx>
platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep

liuguoqiang <liuguoqiang@xxxxxxxxxxxxx>
net: return correct error code

Mike Kravetz <mike.kravetz@xxxxxxxxxx>
hugetlb: take PMD sharing into account when flushing tlb/caches

Juergen Gross <jgross@xxxxxxxx>
tty: hvc: replace BUG_ON() with negative return value

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: don't trust the backend response data blindly

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: disentangle tx_skb_freelist

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: don't read data from request on the ring page

Juergen Gross <jgross@xxxxxxxx>
xen/netfront: read response from backend only once

Juergen Gross <jgross@xxxxxxxx>
xen/blkfront: don't trust the backend response data blindly

Juergen Gross <jgross@xxxxxxxx>
xen/blkfront: don't take local copy of a request from the ring page

Juergen Gross <jgross@xxxxxxxx>
xen/blkfront: read response from backend only once

Juergen Gross <jgross@xxxxxxxx>
xen: sync include/xen/interface/io/ring.h with Xen's newest version

Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx>
shm: extend forced shm destroy to support objects from several IPC nses

Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: release pipe buf after last use

Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: fix page stealing

Lin Ma <linma@xxxxxxxxxx>
NFC: add NCI_UNREG flag to eliminate the race

David Hildenbrand <david@xxxxxxxxxx>
proc/vmcore: fix clearing user buffer by properly using clear_user()

Nadav Amit <namit@xxxxxxxxxx>
hugetlbfs: flush TLBs correctly after huge_pmd_unshare

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Check pid filtering when creating events

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows

Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxx>
scsi: mpt3sas: Fix kernel panic during drive powercycle test

Takashi Iwai <tiwai@xxxxxxx>
ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFSv42: Don't fail clone() unless the OP_CLONE operation failed

Alexander Aring <aahringo@xxxxxxxxxx>
net: ieee802154: handle iftypes as u32

Takashi Iwai <tiwai@xxxxxxx>
ASoC: topology: Add missing rwsem around snd_ctl_remove() calls

Florian Fainelli <f.fainelli@xxxxxxxxx>
ARM: dts: BCM5301X: Add interrupt properties to GPIO node

Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
xen: detect uninitialized xenbus in xenbus_init

Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
xen: don't continue xenstore initialization in case of errors

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

Takashi Iwai <tiwai@xxxxxxx>
ALSA: ctxfi: Fix out-of-range access

Todd Kjos <tkjos@xxxxxxxxxx>
binder: fix test regression due to sender_euid change

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
usb: hub: Fix locking issues with address0_mutex

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
usb: hub: Fix usb enumeration issue due to address0 race

Mingjie Zhang <superzmj@xxxxxxxxxxx>
USB: serial: option: add Fibocom FM101-GL variants

Daniele Palmas <dnlplm@xxxxxxxxx>
USB: serial: option: add Telit LE910S1 0x9200 composition

Lee Jones <lee.jones@xxxxxxxxxx>
staging: ion: Prevent incorrect reference counting behavour


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/bcm5301x.dtsi | 2 +
arch/arm/include/asm/tlb.h | 8 +
arch/arm/mach-socfpga/core.h | 2 +-
arch/arm/mach-socfpga/platsmp.c | 8 +-
arch/ia64/include/asm/tlb.h | 10 +
arch/parisc/install.sh | 1 +
arch/s390/include/asm/tlb.h | 13 ++
arch/s390/kernel/setup.c | 3 -
arch/sh/include/asm/tlb.h | 10 +
arch/um/include/asm/tlb.h | 12 +
drivers/android/binder.c | 2 +-
drivers/ata/sata_fsl.c | 20 +-
drivers/block/xen-blkfront.c | 126 +++++++---
drivers/net/ethernet/dec/tulip/de4x5.c | 34 +--
drivers/net/ethernet/natsemi/xtsonic.c | 2 +-
.../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 10 +-
drivers/net/xen-netfront.c | 257 +++++++++++++--------
drivers/platform/x86/thinkpad_acpi.c | 12 -
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +-
drivers/scsi/scsi_transport_iscsi.c | 6 +-
drivers/staging/android/ion/ion.c | 6 +
drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 3 +-
drivers/tty/hvc/hvc_xen.c | 17 +-
drivers/tty/serial/amba-pl011.c | 1 +
drivers/tty/serial/msm_serial.c | 3 +
drivers/usb/core/hub.c | 23 +-
drivers/usb/serial/option.c | 5 +
drivers/video/console/vgacon.c | 14 +-
drivers/xen/xenbus/xenbus_probe.c | 27 ++-
fs/file.c | 19 +-
fs/file_table.c | 9 +-
fs/fuse/dev.c | 10 +-
fs/nfs/nfs42xdr.c | 3 +-
fs/proc/vmcore.c | 15 +-
include/asm-generic/tlb.h | 7 +
include/linux/file.h | 2 +
include/linux/fs.h | 4 +-
include/linux/ipc_namespace.h | 15 ++
include/linux/kprobes.h | 2 +
include/linux/sched.h | 2 +-
include/linux/shm.h | 13 +-
include/linux/siphash.h | 14 +-
include/net/nfc/nci_core.h | 1 +
include/net/nl802154.h | 7 +-
include/xen/interface/io/ring.h | 257 ++++++++++-----------
ipc/shm.c | 176 ++++++++++----
kernel/kprobes.c | 3 +
kernel/trace/trace_events.c | 7 +
lib/siphash.c | 12 +-
mm/hugetlb.c | 58 ++++-
net/ipv4/devinet.c | 2 +-
net/ipv4/tcp_cubic.c | 5 +-
net/nfc/nci/core.c | 19 +-
sound/pci/ctxfi/ctamixer.c | 14 +-
sound/pci/ctxfi/ctdaio.c | 16 +-
sound/pci/ctxfi/ctresource.c | 7 +-
sound/pci/ctxfi/ctresource.h | 4 +-
sound/pci/ctxfi/ctsrc.c | 7 +-
sound/soc/soc-topology.c | 3 +
60 files changed, 894 insertions(+), 462 deletions(-)