linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	stable@vger.kernel.org, Eric Dumazet <edumazet@google.com>,
	syzbot <syzkaller@googlegroups.com>,
	Jiri Pirko <jiri@mellanox.com>,
	"David S. Miller" <davem@davemloft.net>
Subject: [PATCH 5.5 022/176] net: add strict checks in netdev_name_node_alt_destroy()
Date: Tue,  3 Mar 2020 18:41:26 +0100	[thread overview]
Message-ID: <20200303174307.103699900@linuxfoundation.org> (raw)
In-Reply-To: <20200303174304.593872177@linuxfoundation.org>

From: Eric Dumazet <edumazet@google.com>

[ Upstream commit e08ad80551b4b33c02f2fce1522f6c227d3976cf ]

netdev_name_node_alt_destroy() does a lookup over all
device names of a namespace.

We need to make sure the name belongs to the device
of interest, and that we do not destroy its primary
name, since we rely on it being not deleted :
dev->name_node would indeed point to freed memory.

syzbot report was the following :

BUG: KASAN: use-after-free in dev_net include/linux/netdevice.h:2206 [inline]
BUG: KASAN: use-after-free in mld_force_mld_version net/ipv6/mcast.c:1172 [inline]
BUG: KASAN: use-after-free in mld_in_v2_mode_only net/ipv6/mcast.c:1180 [inline]
BUG: KASAN: use-after-free in mld_in_v1_mode+0x203/0x230 net/ipv6/mcast.c:1190
Read of size 8 at addr ffff88809886c588 by task swapper/1/0

CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x197/0x210 lib/dump_stack.c:118
 print_address_description.constprop.0.cold+0xd4/0x30b mm/kasan/report.c:374
 __kasan_report.cold+0x1b/0x32 mm/kasan/report.c:506
 kasan_report+0x12/0x20 mm/kasan/common.c:641
 __asan_report_load8_noabort+0x14/0x20 mm/kasan/generic_report.c:135
 dev_net include/linux/netdevice.h:2206 [inline]
 mld_force_mld_version net/ipv6/mcast.c:1172 [inline]
 mld_in_v2_mode_only net/ipv6/mcast.c:1180 [inline]
 mld_in_v1_mode+0x203/0x230 net/ipv6/mcast.c:1190
 mld_send_initial_cr net/ipv6/mcast.c:2083 [inline]
 mld_dad_timer_expire+0x24/0x230 net/ipv6/mcast.c:2118
 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0x6c3/0x1790 kernel/time/timer.c:1786
 __do_softirq+0x262/0x98c kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x19b/0x1e0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:546 [inline]
 smp_apic_timer_interrupt+0x1a3/0x610 arch/x86/kernel/apic/apic.c:1146
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 </IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
Code: 68 73 c5 f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 94 be 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 84 be 59 00 fb f4 <c3> cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 de 2a 74 f9 e8 09
RSP: 0018:ffffc90000d3fd68 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff136761a RBX: ffff8880a99fc340 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff8880a99fcbd4
RBP: ffffc90000d3fd98 R08: ffff8880a99fc340 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffffffff8aa5a1c0 R14: 0000000000000000 R15: 0000000000000001
 arch_cpu_idle+0xa/0x10 arch/x86/kernel/process.c:686
 default_idle_call+0x84/0xb0 kernel/sched/idle.c:94
 cpuidle_idle_call kernel/sched/idle.c:154 [inline]
 do_idle+0x3c8/0x6e0 kernel/sched/idle.c:269
 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:361
 start_secondary+0x2f4/0x410 arch/x86/kernel/smpboot.c:264
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:242

Allocated by task 10229:
 save_stack+0x23/0x90 mm/kasan/common.c:72
 set_track mm/kasan/common.c:80 [inline]
 __kasan_kmalloc mm/kasan/common.c:515 [inline]
 __kasan_kmalloc.constprop.0+0xcf/0xe0 mm/kasan/common.c:488
 kasan_kmalloc+0x9/0x10 mm/kasan/common.c:529
 __do_kmalloc_node mm/slab.c:3616 [inline]
 __kmalloc_node+0x4e/0x70 mm/slab.c:3623
 kmalloc_node include/linux/slab.h:578 [inline]
 kvmalloc_node+0x68/0x100 mm/util.c:574
 kvmalloc include/linux/mm.h:645 [inline]
 kvzalloc include/linux/mm.h:653 [inline]
 alloc_netdev_mqs+0x98/0xe40 net/core/dev.c:9797
 rtnl_create_link+0x22d/0xaf0 net/core/rtnetlink.c:3047
 __rtnl_newlink+0xf9f/0x1790 net/core/rtnetlink.c:3309
 rtnl_newlink+0x69/0xa0 net/core/rtnetlink.c:3377
 rtnetlink_rcv_msg+0x45e/0xaf0 net/core/rtnetlink.c:5438
 netlink_rcv_skb+0x177/0x450 net/netlink/af_netlink.c:2477
 rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5456
 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline]
 netlink_unicast+0x59e/0x7e0 net/netlink/af_netlink.c:1328
 netlink_sendmsg+0x91c/0xea0 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xd7/0x130 net/socket.c:672
 __sys_sendto+0x262/0x380 net/socket.c:1998
 __do_compat_sys_socketcall net/compat.c:771 [inline]
 __se_compat_sys_socketcall net/compat.c:719 [inline]
 __ia32_compat_sys_socketcall+0x530/0x710 net/compat.c:719
 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline]
 do_fast_syscall_32+0x27b/0xe16 arch/x86/entry/common.c:408
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139

Freed by task 10229:
 save_stack+0x23/0x90 mm/kasan/common.c:72
 set_track mm/kasan/common.c:80 [inline]
 kasan_set_free_info mm/kasan/common.c:337 [inline]
 __kasan_slab_free+0x102/0x150 mm/kasan/common.c:476
 kasan_slab_free+0xe/0x10 mm/kasan/common.c:485
 __cache_free mm/slab.c:3426 [inline]
 kfree+0x10a/0x2c0 mm/slab.c:3757
 __netdev_name_node_alt_destroy+0x1ff/0x2a0 net/core/dev.c:322
 netdev_name_node_alt_destroy+0x57/0x80 net/core/dev.c:334
 rtnl_alt_ifname net/core/rtnetlink.c:3518 [inline]
 rtnl_linkprop.isra.0+0x575/0x6f0 net/core/rtnetlink.c:3567
 rtnl_dellinkprop+0x46/0x60 net/core/rtnetlink.c:3588
 rtnetlink_rcv_msg+0x45e/0xaf0 net/core/rtnetlink.c:5438
 netlink_rcv_skb+0x177/0x450 net/netlink/af_netlink.c:2477
 rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5456
 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline]
 netlink_unicast+0x59e/0x7e0 net/netlink/af_netlink.c:1328
 netlink_sendmsg+0x91c/0xea0 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xd7/0x130 net/socket.c:672
 ____sys_sendmsg+0x753/0x880 net/socket.c:2343
 ___sys_sendmsg+0x100/0x170 net/socket.c:2397
 __sys_sendmsg+0x105/0x1d0 net/socket.c:2430
 __compat_sys_sendmsg net/compat.c:642 [inline]
 __do_compat_sys_sendmsg net/compat.c:649 [inline]
 __se_compat_sys_sendmsg net/compat.c:646 [inline]
 __ia32_compat_sys_sendmsg+0x7a/0xb0 net/compat.c:646
 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline]
 do_fast_syscall_32+0x27b/0xe16 arch/x86/entry/common.c:408
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139

The buggy address belongs to the object at ffff88809886c000
 which belongs to the cache kmalloc-4k of size 4096
The buggy address is located 1416 bytes inside of
 4096-byte region [ffff88809886c000, ffff88809886d000)
The buggy address belongs to the page:
page:ffffea0002621b00 refcount:1 mapcount:0 mapping:ffff8880aa402000 index:0x0 compound_mapcount: 0
flags: 0xfffe0000010200(slab|head)
raw: 00fffe0000010200 ffffea0002610d08 ffffea0002607608 ffff8880aa402000
raw: 0000000000000000 ffff88809886c000 0000000100000001 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff88809886c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88809886c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88809886c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                      ^
 ffff88809886c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88809886c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

Fixes: 36fbf1e52bd3 ("net: rtnetlink: add linkprop commands to add and delete alternative ifnames")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Cc: Jiri Pirko <jiri@mellanox.com>
Acked-by: Jiri Pirko <jiri@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 net/core/dev.c |    6 ++++++
 1 file changed, 6 insertions(+)

--- a/net/core/dev.c
+++ b/net/core/dev.c
@@ -330,6 +330,12 @@ int netdev_name_node_alt_destroy(struct
 	name_node = netdev_name_node_lookup(net, name);
 	if (!name_node)
 		return -ENOENT;
+	/* lookup might have found our primary name or a name belonging
+	 * to another device.
+	 */
+	if (name_node == dev->name_node || name_node->dev != dev)
+		return -EINVAL;
+
 	__netdev_name_node_alt_destroy(name_node);
 
 	return 0;



  parent reply	other threads:[~2020-03-03 17:45 UTC|newest]

Thread overview: 201+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-03-03 17:41 [PATCH 5.5 000/176] 5.5.8-stable review Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 001/176] EDAC: skx_common: downgrade message importance on missing PCI device Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 002/176] net: dsa: b53: Ensure the default VID is untagged Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 003/176] net: fib_rules: Correctly set table field when table number exceeds 8 bits Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 004/176] net: macb: ensure interface is not suspended on at91rm9200 Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 005/176] net: mscc: fix in frame extraction Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 006/176] net: phy: restore mdio regs in the iproc mdio driver Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 007/176] net: sched: correct flower port blocking Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 008/176] net/tls: Fix to avoid gettig invalid tls record Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 009/176] nfc: pn544: Fix occasional HW initialization failure Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 010/176] qede: Fix race between rdma destroy workqueue and link change event Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 011/176] Revert "net: dev: introduce support for sch BYPASS for lockless qdisc" Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 012/176] udp: rehash on disconnect Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 013/176] sctp: move the format error check out of __sctp_sf_do_9_1_abort Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 014/176] bnxt_en: Improve device shutdown method Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 015/176] bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 016/176] bonding: add missing netdev_update_lockdep_key() Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 017/176] net: export netdev_next_lower_dev_rcu() Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 018/176] bonding: fix lockdep warning in bond_get_stats() Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 019/176] ipv6: Fix route replacement with dev-only route Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 020/176] ipv6: Fix nlmsg_flags when splitting a multipath route Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 021/176] ionic: fix fw_status read Greg Kroah-Hartman
2020-03-03 17:41 ` Greg Kroah-Hartman [this message]
2020-03-03 17:41 ` [PATCH 5.5 023/176] net: macb: Properly handle phylink on at91rm9200 Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 024/176] net: rtnetlink: fix bugs in rtnl_alt_ifname() Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 025/176] ipmi:ssif: Handle a possible NULL pointer reference Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 026/176] drm/msm: Set dma maximum segment size for mdss Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 027/176] sched/core: Dont skip remote tick for idle CPUs Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 028/176] timers/nohz: Update NOHZ load in remote tick Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 029/176] sched/fair: Prevent unlimited runtime on throttled group Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 030/176] dax: pass NOWAIT flag to iomap_apply Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 031/176] mac80211: consider more elements in parsing CRC Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 032/176] cfg80211: check wiphy driver existence for drvinfo report Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 033/176] io_uring: flush overflowed CQ events in the io_uring_poll() Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 034/176] s390/zcrypt: fix card and queue total counter wrap Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 035/176] qmi_wwan: re-add DW5821e pre-production variant Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 036/176] qmi_wwan: unconditionally reject 2 ep interfaces Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 037/176] NFSv4: Fix races between open and dentry revalidation Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 038/176] perf/smmuv3: Use platform_get_irq_optional() for wired interrupt Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 039/176] arm/ftrace: Fix BE text poking Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 040/176] perf/x86/intel: Add Elkhart Lake support Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 041/176] perf/x86/cstate: Add Tremont support Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 042/176] perf/x86/msr: " Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 043/176] ceph: do not execute direct write in parallel if O_APPEND is specified Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 044/176] ARM: dts: sti: fixup sound frame-inversion for stihxxx-b2120.dtsi Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 045/176] drm/amd/display: Do not set optimized_require to false after plane disable Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 046/176] RDMA/siw: Remove unwanted WARN_ON in siw_cm_llp_data_ready() Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 047/176] drm/amd/display: Check engine is not NULL before acquiring Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 048/176] drm/amd/display: Limit minimum DPPCLK to 100MHz Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 049/176] drm/amd/display: Add initialitions for PLL2 clock source Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 050/176] amdgpu: Prevent build errors regarding soft/hard-float FP ABI tags Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 051/176] soc/tegra: fuse: Fix build with Tegra194 configuration Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 052/176] i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 053/176] net: ena: fix potential crash when rxfh key is NULL Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 054/176] net: ena: fix uses of round_jiffies() Greg Kroah-Hartman
2020-03-03 17:41 ` [PATCH 5.5 055/176] net: ena: add missing ethtool TX timestamping indication Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 056/176] net: ena: fix incorrect default RSS key Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 057/176] net: ena: rss: do not allocate key when not supported Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 058/176] net: ena: rss: fix failure to get indirection table Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 059/176] net: ena: rss: store hash function as values and not bits Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 060/176] net: ena: fix incorrectly saving queue numbers when setting RSS indirection table Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 061/176] net: ena: fix corruption of dev_idx_to_host_tbl Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 062/176] net: ena: ethtool: use correct value for crc32 hash Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 063/176] net: ena: ena-com.c: prevent NULL pointer dereference Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 064/176] ice: Fix switch between FW and SW LLDP Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 065/176] ice: Dont allow same value for Rx tail to be written twice Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 066/176] ice: fix and consolidate logging of NVM/firmware version information Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 067/176] ice: update Unit Load Status bitmask to check after reset Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 068/176] ice: Use ice_pf_to_dev Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 069/176] ice: Use correct netif error function Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 070/176] io-wq: dont call kXalloc_node() with non-online node Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 071/176] cifs: Fix mode output in debugging statements Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 072/176] bcache: ignore pending signals when creating gc and allocator thread Greg Kroah-Hartman
2020-03-03 17:58   ` Jens Axboe
2020-03-03 18:14     ` Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 073/176] cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 074/176] mac80211: fix wrong 160/80+80 MHz setting Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 075/176] net: hns3: add management table after IMP reset Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 076/176] net: hns3: fix VF bandwidth does not take effect in some case Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 077/176] net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 078/176] nvme/tcp: fix bug on double requeue when send fails Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 079/176] nvme: prevent warning triggered by nvme_stop_keep_alive Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 080/176] nvme/pci: move cqe check after device shutdown Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 081/176] scsi: sd_sbc: Fix sd_zbc_report_zones() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 082/176] scsi: zfcp: fix wrong data and display format of SFP+ temperature Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 083/176] docs: Fix empty parallelism argument Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 084/176] ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 085/176] audit: fix error handling in audit_data_to_entry() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 086/176] audit: always check the netlink payload length in audit_receive_msg() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 087/176] ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 088/176] ACPI: watchdog: Fix gas->access_width usage Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 089/176] KVM: VMX: check descriptor table exits on instruction emulation Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 090/176] HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 091/176] HID: core: fix off-by-one memset in hid_report_raw_event() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 092/176] HID: core: increase HID report buffer size to 8KiB Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 093/176] drm/amdgpu: Drop DRIVER_USE_AGP Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 094/176] drm/radeon: Inline drm_get_pci_dev Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 095/176] macintosh: therm_windtunnel: fix regression when instantiating devices Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 096/176] blktrace: Protect q->blk_trace with RCU Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 097/176] tracing: Disable trace_printk() on post poned tests Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 098/176] Revert "PM / devfreq: Modify the device name as devfreq(X) for sysfs" Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 099/176] amdgpu/gmc_v9: save/restore sdpif regs during S3 Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 100/176] cpufreq: Fix policy initialization for internal governor drivers Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 101/176] io_uring: fix 32-bit compatability with sendmsg/recvmsg Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 102/176] netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 103/176] net/smc: transfer fasync_list in case of fallback Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 104/176] vhost: Check docket sk_family instead of call getname Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 105/176] netfilter: ipset: Fix forceadd evaluation path Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 106/176] netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 107/176] HID: alps: Fix an error handling path in alps_input_configured() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 108/176] HID: hiddev: Fix race in in hiddev_disconnect() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 109/176] RISC-V: Dont enable all interrupts in trap_init() Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 110/176] MIPS: VPE: Fix a double free and a memory leak in release_vpe() Greg Kroah-Hartman
2020-03-04 21:28   ` AW: " Walter Harms
2020-03-04 22:14     ` Christophe JAILLET
2020-03-03 17:42 ` [PATCH 5.5 111/176] KVM: nVMX: Emulate MTF when performing instruction emulation Greg Kroah-Hartman
2020-03-04  7:23   ` Paolo Bonzini
2020-03-04  7:39     ` Oliver Upton
2020-03-04  8:10       ` Greg Kroah-Hartman
2020-03-04  8:19         ` Paolo Bonzini
2020-03-04  8:26           ` Greg Kroah-Hartman
2020-03-04  8:43             ` Paolo Bonzini
2020-03-04  8:51               ` Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 112/176] i2c: altera: Fix potential integer overflow Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 113/176] i2c: jz4780: silence log flood on txabrt Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 114/176] MIPS: cavium_octeon: Fix syncw generation Greg Kroah-Hartman
2020-03-03 17:42 ` [PATCH 5.5 115/176] drm/i915/gvt: Fix orphan vgpu dmabuf_objs lifetime Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 116/176] drm/i915: Avoid recursing onto active vma from the shrinker Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 117/176] drm/i915/gvt: Separate display reset from ALL_ENGINES reset Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 118/176] nl80211: fix potential leak in AP start Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 119/176] mac80211: Remove a redundant mutex unlock Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 120/176] kbuild: fix DT binding schema rule to detect command line changes Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 121/176] hv_netvsc: Fix unwanted wakeup in netvsc_attach() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 122/176] usb: charger: assign specific number for enum value Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 123/176] nvme-pci: Hold cq_poll_lock while completing CQEs Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 124/176] s390/qeth: vnicc Fix EOPNOTSUPP precedence Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 125/176] s390/qeth: fix off-by-one in RX copybreak check Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 126/176] net: netlink: cap max groups which will be considered in netlink_bind() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 127/176] net: atlantic: checksum compat issue Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 128/176] net: atlantic: better loopback mode handling Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 129/176] net: atlantic: fix use after free kasan warn Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 130/176] net: atlantic: fix potential error handling Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 131/176] net: atlantic: possible fault in transition to hibernation Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 132/176] net: atlantic: fix out of range usage of active_vlans array Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 133/176] selftests: Install settings files to fix TIMEOUT failures Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 134/176] net/smc: no peer ID in CLC decline for SMCD Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 135/176] net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 136/176] tipc: fix successful connect() but timed out Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 137/176] namei: only return -ECHILD from follow_dotdot_rcu() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 138/176] mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 139/176] mwifiex: delete unused mwifiex_get_intf_num() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 140/176] perf report: Fix no libunwind compiled warning break s390 issue Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 141/176] KVM: SVM: Override default MMIO mask if memory encryption is enabled Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 142/176] KVM: Check for a bad hva before dropping into the ghc slow path Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 143/176] sched/fair: Optimize select_idle_cpu Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 144/176] f2fs: fix to add swap extent correctly Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 145/176] RDMA/hns: Simplify the calculation and usage of wqe idx for post verbs Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 146/176] RDMA/hns: Bugfix for posting a wqe with sge Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 147/176] drivers: net: xgene: Fix the order of the arguments of alloc_etherdev_mqs() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 148/176] ima: ima/lsm policy rule loading logic bug fixes Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 149/176] kprobes: Set unoptimized flag after unoptimizing code Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 150/176] lib/vdso: Make __arch_update_vdso_data() logic understandable Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 151/176] lib/vdso: Update coarse timekeeper unconditionally Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 152/176] pwm: omap-dmtimer: put_device() after of_find_device_by_node() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 153/176] perf hists browser: Restore ESC as "Zoom out" of DSO/thread/etc Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 154/176] perf ui gtk: Add missing zalloc object Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 155/176] perf maps: Add missing unlock to maps__insert() error case Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 156/176] x86/resctrl: Check monitoring static key in the MBM overflow handler Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 157/176] KVM: X86: Fix kvm_bitmap_or_dest_vcpus() to use irq shorthand Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 158/176] KVM: x86: Remove spurious kvm_mmu_unload() from vcpu destruction path Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 159/176] KVM: x86: Remove spurious clearing of async #PF MSR Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 160/176] rcu: Allow only one expedited GP to run concurrently with wakeups Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 161/176] ubifs: Fix ino_t format warnings in orphan_delete() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 162/176] thermal: db8500: Depromote debug print Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 163/176] thermal: brcmstb_thermal: Do not use DT coefficients Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 164/176] netfilter: nft_tunnel: no need to call htons() when dumping ports Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 165/176] netfilter: nf_flowtable: fix documentation Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 166/176] bus: tegra-aconnect: Remove PM_CLK dependency Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 167/176] clk: qcom: rpmh: Sort OF match table Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 168/176] xfs: clear kernel only flags in XFS_IOC_ATTRMULTI_BY_HANDLE Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 169/176] padata: always acquire cpu_hotplug_lock before pinst->lock Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 170/176] locking/lockdep: Fix lockdep_stats indentation problem Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 171/176] mm/debug.c: always print flags in dump_page() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 172/176] mm/gup: allow FOLL_FORCE for get_user_pages_fast() Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 173/176] mm/huge_memory.c: use head to check huge zero page Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 174/176] mm, thp: fix defrag setting if newline is not used Greg Kroah-Hartman
2020-03-03 17:43 ` [PATCH 5.5 175/176] kvm: nVMX: VMWRITE checks VMCS-link pointer before VMCS field Greg Kroah-Hartman
2020-03-03 17:44 ` [PATCH 5.5 176/176] kvm: nVMX: VMWRITE checks unsupported field before read-only field Greg Kroah-Hartman
2020-03-03 22:11 ` [PATCH 5.5 000/176] 5.5.8-stable review Jon Hunter
2020-03-04  6:34   ` Greg Kroah-Hartman
2020-03-03 23:01 ` shuah
2020-03-04  6:34   ` Greg Kroah-Hartman
2020-03-04  7:13 ` Naresh Kamboju
2020-03-04  8:11   ` Greg Kroah-Hartman
2020-03-04  8:47     ` Greg Kroah-Hartman
2020-03-04  8:49       ` Greg Kroah-Hartman
2020-03-04 10:52         ` Naresh Kamboju
2020-03-04 11:52           ` Greg Kroah-Hartman
2020-03-04 15:25             ` Dan Rue
2020-03-04 16:53 ` Guenter Roeck
2020-03-04 17:18   ` Greg Kroah-Hartman

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20200303174307.103699900@linuxfoundation.org \
    --to=gregkh@linuxfoundation.org \
    --cc=davem@davemloft.net \
    --cc=edumazet@google.com \
    --cc=jiri@mellanox.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=stable@vger.kernel.org \
    --cc=syzkaller@googlegroups.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).