stable.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Zhang Rui <rui.zhang@intel.com>
To: Lukasz Luba <lukasz.luba@arm.com>,
	Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	linux-kernel@vger.kernel.org
Cc: stable@vger.kernel.org, Jiri Pirko <jiri@mellanox.com>,
	Ido Schimmel <idosch@mellanox.com>,
	Sasha Levin <sashal@kernel.org>,
	wvw@google.com
Subject: Re: [PATCH 5.3 113/148] thermal: Fix use-after-free when unregistering thermal zone device
Date: Thu, 14 Nov 2019 23:05:03 +0800	[thread overview]
Message-ID: <05e926734126474216885a243cb94887b3a1ddc6.camel@intel.com> (raw)
In-Reply-To: <905e26d4-76c7-555f-3b33-51fa3cf7a470@arm.com>

On Thu, 2019-11-14 at 13:17 +0000, Lukasz Luba wrote:
> Hi Greg,
> 
> This patch causes a deadlock, the thermal framework stops. Please
> check
> this fix (I found it before posting exactly the same solution):
> https://lkml.org/lkml/2019/11/12/1075
> 
> I have verified it on OdroidXU4 and it works. It needs some cleaning
> in
> the commit message, though.
> I have added to CC the author: Wei Wang
> 
> I don't know in how many stable trees it was applied, but should be
> fix
> there also.
> 
Right.
I've just applied this in thermal tree, will check if it can get 5.4 or
not later.

thanks,
rui

> Regards,
> Lukasz Luba
> 
> On 10/10/19 9:36 AM, Greg Kroah-Hartman wrote:
> > From: Ido Schimmel <idosch@mellanox.com>
> > 
> > [ Upstream commit 1851799e1d2978f68eea5d9dff322e121dcf59c1 ]
> > 
> > thermal_zone_device_unregister() cancels the delayed work that
> > polls the
> > thermal zone, but it does not wait for it to finish. This is racy
> > with
> > respect to the freeing of the thermal zone device, which can result
> > in a
> > use-after-free [1].
> > 
> > Fix this by waiting for the delayed work to finish before freeing
> > the
> > thermal zone device. Note that thermal_zone_device_set_polling() is
> > never invoked from an atomic context, so it is safe to call
> > cancel_delayed_work_sync() that can block.
> > 
> > [1]
> > [  +0.002221]
> > ==================================================================
> > [  +0.000064] BUG: KASAN: use-after-free in
> > __mutex_lock+0x1076/0x11c0
> > [  +0.000016] Read of size 8 at addr ffff8881e48e0450 by task
> > kworker/1:0/17
> > 
> > [  +0.000023] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.2.0-
> > rc6-custom-02495-g8e73ca3be4af #1701
> > [  +0.000010] Hardware name: Mellanox Technologies Ltd. MSN2100-
> > CB2FO/SA001017, BIOS 5.6.5 06/07/2016
> > [  +0.000016] Workqueue: events_freezable_power_
> > thermal_zone_device_check
> > [  +0.000012] Call Trace:
> > [  +0.000021]  dump_stack+0xa9/0x10e
> > [  +0.000020]  print_address_description.cold.2+0x9/0x25e
> > [  +0.000018]  __kasan_report.cold.3+0x78/0x9d
> > [  +0.000016]  kasan_report+0xe/0x20
> > [  +0.000016]  __mutex_lock+0x1076/0x11c0
> > [  +0.000014]  step_wise_throttle+0x72/0x150
> > [  +0.000018]  handle_thermal_trip+0x167/0x760
> > [  +0.000019]  thermal_zone_device_update+0x19e/0x5f0
> > [  +0.000019]  process_one_work+0x969/0x16f0
> > [  +0.000017]  worker_thread+0x91/0xc40
> > [  +0.000014]  kthread+0x33d/0x400
> > [  +0.000015]  ret_from_fork+0x3a/0x50
> > 
> > [  +0.000020] Allocated by task 1:
> > [  +0.000015]  save_stack+0x19/0x80
> > [  +0.000015]  __kasan_kmalloc.constprop.4+0xc1/0xd0
> > [  +0.000014]  kmem_cache_alloc_trace+0x152/0x320
> > [  +0.000015]  thermal_zone_device_register+0x1b4/0x13a0
> > [  +0.000015]  mlxsw_thermal_init+0xc92/0x23d0
> > [  +0.000014]  __mlxsw_core_bus_device_register+0x659/0x11b0
> > [  +0.000013]  mlxsw_core_bus_device_register+0x3d/0x90
> > [  +0.000013]  mlxsw_pci_probe+0x355/0x4b0
> > [  +0.000014]  local_pci_probe+0xc3/0x150
> > [  +0.000013]  pci_device_probe+0x280/0x410
> > [  +0.000013]  really_probe+0x26a/0xbb0
> > [  +0.000013]  driver_probe_device+0x208/0x2e0
> > [  +0.000013]  device_driver_attach+0xfe/0x140
> > [  +0.000013]  __driver_attach+0x110/0x310
> > [  +0.000013]  bus_for_each_dev+0x14b/0x1d0
> > [  +0.000013]  driver_register+0x1c0/0x400
> > [  +0.000015]  mlxsw_sp_module_init+0x5d/0xd3
> > [  +0.000014]  do_one_initcall+0x239/0x4dd
> > [  +0.000013]  kernel_init_freeable+0x42b/0x4e8
> > [  +0.000012]  kernel_init+0x11/0x18b
> > [  +0.000013]  ret_from_fork+0x3a/0x50
> > 
> > [  +0.000015] Freed by task 581:
> > [  +0.000013]  save_stack+0x19/0x80
> > [  +0.000014]  __kasan_slab_free+0x125/0x170
> > [  +0.000013]  kfree+0xf3/0x310
> > [  +0.000013]  thermal_release+0xc7/0xf0
> > [  +0.000014]  device_release+0x77/0x200
> > [  +0.000014]  kobject_put+0x1a8/0x4c0
> > [  +0.000014]  device_unregister+0x38/0xc0
> > [  +0.000014]  thermal_zone_device_unregister+0x54e/0x6a0
> > [  +0.000014]  mlxsw_thermal_fini+0x184/0x35a
> > [  +0.000014]  mlxsw_core_bus_device_unregister+0x10a/0x640
> > [  +0.000013]  mlxsw_devlink_core_bus_device_reload+0x92/0x210
> > [  +0.000015]  devlink_nl_cmd_reload+0x113/0x1f0
> > [  +0.000014]  genl_family_rcv_msg+0x700/0xee0
> > [  +0.000013]  genl_rcv_msg+0xca/0x170
> > [  +0.000013]  netlink_rcv_skb+0x137/0x3a0
> > [  +0.000012]  genl_rcv+0x29/0x40
> > [  +0.000013]  netlink_unicast+0x49b/0x660
> > [  +0.000013]  netlink_sendmsg+0x755/0xc90
> > [  +0.000013]  __sys_sendto+0x3de/0x430
> > [  +0.000013]  __x64_sys_sendto+0xe2/0x1b0
> > [  +0.000013]  do_syscall_64+0xa4/0x4d0
> > [  +0.000013]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
> > 
> > [  +0.000017] The buggy address belongs to the object at
> > ffff8881e48e0008
> >                 which belongs to the cache kmalloc-2k of size 2048
> > [  +0.000012] The buggy address is located 1096 bytes inside of
> >                 2048-byte region [ffff8881e48e0008,
> > ffff8881e48e0808)
> > [  +0.000007] The buggy address belongs to the page:
> > [  +0.000012] page:ffffea0007923800 refcount:1 mapcount:0
> > mapping:ffff88823680d0c0 index:0x0 compound_mapcount: 0
> > [  +0.000020] flags: 0x200000000010200(slab|head)
> > [  +0.000019] raw: 0200000000010200 ffffea0007682008
> > ffffea00076ab808 ffff88823680d0c0
> > [  +0.000016] raw: 0000000000000000 00000000000d000d
> > 00000001ffffffff 0000000000000000
> > [  +0.000007] page dumped because: kasan: bad access detected
> > 
> > [  +0.000012] Memory state around the buggy address:
> > [  +0.000012]  ffff8881e48e0300: fb fb fb fb fb fb fb fb fb fb fb
> > fb fb fb fb fb
> > [  +0.000012]  ffff8881e48e0380: fb fb fb fb fb fb fb fb fb fb fb
> > fb fb fb fb fb
> > [  +0.000012] >ffff8881e48e0400: fb fb fb fb fb fb fb fb fb fb fb
> > fb fb fb fb fb
> > [  +0.000008]                                                  ^
> > [  +0.000012]  ffff8881e48e0480: fb fb fb fb fb fb fb fb fb fb fb
> > fb fb fb fb fb
> > [  +0.000012]  ffff8881e48e0500: fb fb fb fb fb fb fb fb fb fb fb
> > fb fb fb fb fb
> > [  +0.000007]
> > ==================================================================
> > 
> > Fixes: b1569e99c795 ("ACPI: move thermal trip handling to generic
> > thermal layer")
> > Reported-by: Jiri Pirko <jiri@mellanox.com>
> > Signed-off-by: Ido Schimmel <idosch@mellanox.com>
> > Acked-by: Jiri Pirko <jiri@mellanox.com>
> > Signed-off-by: Zhang Rui <rui.zhang@intel.com>
> > Signed-off-by: Sasha Levin <sashal@kernel.org>
> > ---
> >   drivers/thermal/thermal_core.c | 2 +-
> >   1 file changed, 1 insertion(+), 1 deletion(-)
> > 
> > diff --git a/drivers/thermal/thermal_core.c
> > b/drivers/thermal/thermal_core.c
> > index 6bab66e84eb58..ebe15f2cf7fc3 100644
> > --- a/drivers/thermal/thermal_core.c
> > +++ b/drivers/thermal/thermal_core.c
> > @@ -304,7 +304,7 @@ static void
> > thermal_zone_device_set_polling(struct thermal_zone_device *tz,
> >   				 &tz->poll_queue,
> >   				 msecs_to_jiffies(delay));
> >   	else
> > -		cancel_delayed_work(&tz->poll_queue);
> > +		cancel_delayed_work_sync(&tz->poll_queue);
> >   }
> >   
> >   static void monitor_thermal_zone(struct thermal_zone_device *tz)
> > 


  parent reply	other threads:[~2019-11-14 15:05 UTC|newest]

Thread overview: 164+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-10-10  8:34 [PATCH 5.3 000/148] 5.3.6-stable review Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 001/148] s390/process: avoid potential reading of freed stack Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 002/148] s390/sclp: Fix bit checked for has_sipl Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 003/148] KVM: s390: Test for bad access register and size at the start of S390_MEM_OP Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 004/148] s390/topology: avoid firing events before kobjs are created Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 005/148] s390/cio: avoid calling strlen on null pointer Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 006/148] s390/cio: exclude subchannels with no parent from pseudo check Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 007/148] s390/dasd: Fix error handling during online processing Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 008/148] Revert "s390/dasd: Add discard support for ESE volumes" Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 009/148] KVM: s390: fix __insn32_query() inline assembly Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 010/148] KVM: PPC: Book3S: Enable XIVE native capability only if OPAL has required functions Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 011/148] KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 012/148] KVM: PPC: Book3S HV: Dont push XIVE context when not using XIVE device Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 013/148] KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 014/148] KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 015/148] KVM: PPC: Book3S HV: Dont lose pending doorbell request on migration on P9 Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 016/148] KVM: X86: Fix userspace set invalid CR4 Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 017/148] nbd: fix max number of supported devs Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 018/148] PM / devfreq: tegra: Fix kHz to Hz conversion Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 019/148] ASoC: Define a set of DAPM pre/post-up events Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 020/148] ASoC: sgtl5000: Improve VAG power and mute control Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 021/148] powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 022/148] powerpc/mce: Fix MCE handling for huge pages Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 023/148] powerpc/mce: Schedule work from irq_work Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 024/148] powerpc/603: Fix handling of the DIRTY flag Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 025/148] powerpc/32s: Fix boot failure with DEBUG_PAGEALLOC without KASAN Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 026/148] powerpc/ptdump: Fix addresses display on PPC32 Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 027/148] powerpc/powernv: Restrict OPAL symbol map to only be readable by root Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 028/148] powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 029/148] powerpc/powernv/ioda: Fix race in TCE level allocation Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 030/148] powerpc/kasan: Fix parallel loading of modules Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 031/148] powerpc/kasan: Fix shadow area set up for modules Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 032/148] powerpc/book3s64/mm: Dont do tlbie fixup for some hardware revisions Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 033/148] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 034/148] powerpc/mm: Add a helper to select PAGE_KERNEL_RO or PAGE_READONLY Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 035/148] powerpc/mm: Fix an Oops in kasan_mmu_init() Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 036/148] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 037/148] can: mcp251x: mcp251x_hw_reset(): allow more time after a reset Greg Kroah-Hartman
2019-10-10  8:34 ` [PATCH 5.3 038/148] tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 039/148] tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 040/148] crypto: qat - Silence smp_processor_id() warning Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 041/148] crypto: skcipher - Unmap pages after an external error Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 042/148] crypto: cavium/zip - Add missing single_release() Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 043/148] crypto: caam/qi - fix error handling in ERN handler Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 044/148] crypto: caam - fix concurrency issue in givencrypt descriptor Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 045/148] crypto: ccree - account for TEE not ready to report Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 046/148] crypto: ccree - use the full crypt length value Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 047/148] MIPS: Treat Loongson Extensions as ASEs Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 048/148] power: supply: sbs-battery: use correct flags field Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 049/148] power: supply: sbs-battery: only return health when battery present Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 050/148] tracing: Make sure variable reference alias has correct var_ref_idx Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 051/148] usercopy: Avoid HIGHMEM pfn warning Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 052/148] timer: Read jiffies once when forwarding base clk Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 053/148] PCI: vmd: Fix config addressing when using bus offsets Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 054/148] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 055/148] PCI: vmd: Fix shadow offsets to reflect spec changes Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 056/148] PCI: Restore Resizable BAR size bits correctly for 1MB BARs Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 057/148] selftests/tpm2: Add the missing TEST_FILES assignment Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 058/148] selftests: pidfd: Fix undefined reference to pthread_create() Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 059/148] watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 061/148] perf stat: Fix a segmentation fault when using repeat forever Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 062/148] drm/i915/dp: Fix dsc bpp calculations, v5 Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 063/148] drm/atomic: Reject FLIP_ASYNC unconditionally Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 064/148] drm/atomic: Take the atomic toys away from X Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 065/148] drm: mali-dp: Mark expected switch fall-through Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 066/148] drm/omap: fix max fclk divider for omap36xx Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 067/148] drm/msm/dsi: Fix return value check for clk_get_parent Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 068/148] drm/nouveau/kms/nv50-: Dont create MSTMs for eDP connectors Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 069/148] drm/amd/powerplay: change metrics update period from 1ms to 100ms Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 070/148] drm/i915/gvt: update vgpu workload head pointer correctly Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 071/148] drm/i915/userptr: Acquire the page lock around set_page_dirty() Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 072/148] drm/i915: to make vgpu ppgtt notificaiton as atomic operation Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 073/148] mac80211: keep BHs disabled while calling drv_tx_wake_queue() Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 074/148] mmc: tegra: Implement ->set_dma_mask() Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 075/148] mmc: sdhci: improve ADMA error reporting Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 076/148] mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence Greg Kroah-Hartman
2019-10-10  8:49   ` Russell King - ARM Linux admin
2019-10-10  9:10     ` Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 077/148] mmc: sdhci: Let drivers define their DMA mask Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 078/148] Revert "locking/pvqspinlock: Dont wait if vCPU is preempted" Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 079/148] libnvdimm/altmap: Track namespace boundaries in altmap Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 080/148] sched: Add __ASSEMBLY__ guards around struct clone_args Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 081/148] DTS: ARM: gta04: introduce legacy spi-cs-high to make display work again Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 082/148] xen/balloon: Set pages PageOffline() in balloon_add_region() Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 083/148] xen/xenbus: fix self-deadlock after killing user process Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 084/148] ieee802154: atusb: fix use-after-free at disconnect Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 085/148] nl80211: validate beacon head Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 086/148] cfg80211: validate SSID/MBSSID element ordering assumption Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 087/148] cfg80211: initialize on-stack chandefs Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 088/148] drivers: thermal: qcom: tsens: Fix memory leak from qfprom read Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 089/148] ima: always return negative code for error Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 090/148] ima: fix freeing ongoing ahash_request Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 091/148] fs: nfs: Fix possible null-pointer dereferences in encode_attrs() Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 092/148] xprtrdma: Toggle XPRT_CONGESTED in xprtrdmas slot methods Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 093/148] xprtrdma: Send Queue size grows after a reconnect Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 094/148] 9p: Transport error uninitialized Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 095/148] 9p: avoid attaching writeback_fid on mmap with type PRIVATE Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 096/148] xen/pci: reserve MCFG areas earlier Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 097/148] fuse: fix request limit Greg Kroah-Hartman
2019-10-10  8:35 ` [PATCH 5.3 098/148] ceph: fix directories inode i_blkbits initialization Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 099/148] ceph: fetch cap_gen under spinlock in ceph_add_cap Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 100/148] ceph: reconnect connection if session hang in opening state Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 101/148] SUNRPC: RPC level errors should always set task->tk_rpc_status Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 102/148] watchdog: aspeed: Add support for AST2600 Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 103/148] netfilter: nf_tables: allow lookups in dynamic sets Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 104/148] drm/amdgpu: Fix KFD-related kernel oops on Hawaii Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 105/148] drm/amdgpu: Check for valid number of registers to read Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 106/148] perf probe: Fix to clear tev->nargs in clear_probe_trace_event() Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 107/148] pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 108/148] SUNRPC: Dont try to parse incomplete RPC messages Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 109/148] pwm: stm32-lp: Add check in case requested period cannot be achieved Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 110/148] selftests/seccomp: fix build on older kernels Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 111/148] x86/purgatory: Disable the stackleak GCC plugin for the purgatory Greg Kroah-Hartman
     [not found]   ` <BYAPR04MB62468F03E52BCE23B5CD1C91AA940@BYAPR04MB6246.namprd04.prod.outlook.com>
2019-10-10 23:32     ` Sasha Levin
2019-10-10  8:36 ` [PATCH 5.3 112/148] ntb: point to right memory window index Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 113/148] thermal: Fix use-after-free when unregistering thermal zone device Greg Kroah-Hartman
2019-11-14 13:17   ` Lukasz Luba
2019-11-14 13:54     ` Ido Schimmel
2019-11-14 15:05     ` Zhang Rui [this message]
2019-10-10  8:36 ` [PATCH 5.3 114/148] thermal_hwmon: Sanitize thermal_zone type Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 115/148] iommu/amd: Fix downgrading default page-sizes in alloc_pte() Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 116/148] libnvdimm/region: Initialize bad block for volatile namespaces Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 117/148] libnvdimm: Fix endian conversion issues Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 118/148] fuse: fix memleak in cuse_channel_open Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 119/148] libnvdimm/nfit_test: Fix acpi_handle redefinition Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 120/148] sched/membarrier: Call sync_core only before usermode for same mm Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 121/148] sched/membarrier: Fix private expedited registration check Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 122/148] sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr() Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 123/148] perf build: Add detection of java-11-openjdk-devel package Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 124/148] include/trace/events/writeback.h: fix -Wstringop-truncation warnings Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 125/148] selftests/bpf: adjust strobemeta loop to satisfy latest clang Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 126/148] kernel/elfcore.c: include proper prototypes Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 127/148] libbpf: fix false uninitialized variable warning Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 128/148] blk-mq: move lockdep_assert_held() into elevator_exit Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 129/148] bpf: Fix bpf_event_output re-entry issue Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 130/148] net: dsa: microchip: Always set regmap stride to 1 Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 131/148] i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630 Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 132/148] perf unwind: Fix libunwind build failure on i386 systems Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 133/148] mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 134/148] nfp: abm: fix memory leak in nfp_abm_u32_knode_replace Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 135/148] drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 136/148] Btrfs: fix selftests failure due to uninitialized i_mode in test inodes Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 137/148] KVM: nVMX: Fix consistency check on injected exception error code Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 138/148] tick: broadcast-hrtimer: Fix a race in bc_set_next Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 139/148] perf stat: Reset previous counts on repeat with interval Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 140/148] riscv: Avoid interrupts being erroneously enabled in handle_exception() Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 141/148] vfs: Fix EOVERFLOW testing in put_compat_statfs64 Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 142/148] coresight: etm4x: Use explicit barriers on enable/disable Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 143/148] staging: erofs: fix an error handling in erofs_readdir() Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 144/148] staging: erofs: some compressed cluster should be submitted for corrupted images Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 145/148] staging: erofs: add two missing erofs_workgroup_put " Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 146/148] staging: erofs: avoid endless loop of invalid lookback distance 0 Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 147/148] staging: erofs: detect potential multiref due to corrupted images Greg Kroah-Hartman
2019-10-10  8:36 ` [PATCH 5.3 148/148] libnvdimm: prevent nvdimm from requesting key when security is disabled Greg Kroah-Hartman
2019-10-10 14:41 ` [PATCH 5.3 000/148] 5.3.6-stable review kernelci.org bot
2019-10-10 17:09 ` Naresh Kamboju
2019-10-11  6:48   ` Greg Kroah-Hartman
2019-10-10 20:59 ` Didik Setiawan
2019-10-10 22:19 ` Guenter Roeck
2019-10-11  6:49   ` Greg Kroah-Hartman
2019-10-11  3:02 ` shuah
2019-10-11  6:47   ` Greg Kroah-Hartman
2019-10-11  8:33 ` Jon Hunter
2019-10-11  8:58   ` Greg Kroah-Hartman

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=05e926734126474216885a243cb94887b3a1ddc6.camel@intel.com \
    --to=rui.zhang@intel.com \
    --cc=gregkh@linuxfoundation.org \
    --cc=idosch@mellanox.com \
    --cc=jiri@mellanox.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=lukasz.luba@arm.com \
    --cc=sashal@kernel.org \
    --cc=stable@vger.kernel.org \
    --cc=wvw@google.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).