From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org, Vlad Buslov <vladbu@nvidia.com>,
Cong Wang <cong.wang@bytedance.com>,
"David S. Miller" <davem@davemloft.net>,
Sasha Levin <sashal@kernel.org>
Subject: [PATCH 5.14 134/172] net: sched: flower: protect fl_walk() with rcu
Date: Mon, 4 Oct 2021 14:53:04 +0200 [thread overview]
Message-ID: <20211004125049.286972682@linuxfoundation.org> (raw)
In-Reply-To: <20211004125044.945314266@linuxfoundation.org>
From: Vlad Buslov <vladbu@nvidia.com>
[ Upstream commit d5ef190693a7d76c5c192d108e8dec48307b46ee ]
Patch that refactored fl_walk() to use idr_for_each_entry_continue_ul()
also removed rcu protection of individual filters which causes following
use-after-free when filter is deleted concurrently. Fix fl_walk() to obtain
rcu read lock while iterating and taking the filter reference and temporary
release the lock while calling arg->fn() callback that can sleep.
KASAN trace:
[ 352.773640] ==================================================================
[ 352.775041] BUG: KASAN: use-after-free in fl_walk+0x159/0x240 [cls_flower]
[ 352.776304] Read of size 4 at addr ffff8881c8251480 by task tc/2987
[ 352.777862] CPU: 3 PID: 2987 Comm: tc Not tainted 5.15.0-rc2+ #2
[ 352.778980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014
[ 352.781022] Call Trace:
[ 352.781573] dump_stack_lvl+0x46/0x5a
[ 352.782332] print_address_description.constprop.0+0x1f/0x140
[ 352.783400] ? fl_walk+0x159/0x240 [cls_flower]
[ 352.784292] ? fl_walk+0x159/0x240 [cls_flower]
[ 352.785138] kasan_report.cold+0x83/0xdf
[ 352.785851] ? fl_walk+0x159/0x240 [cls_flower]
[ 352.786587] kasan_check_range+0x145/0x1a0
[ 352.787337] fl_walk+0x159/0x240 [cls_flower]
[ 352.788163] ? fl_put+0x10/0x10 [cls_flower]
[ 352.789007] ? __mutex_unlock_slowpath.constprop.0+0x220/0x220
[ 352.790102] tcf_chain_dump+0x231/0x450
[ 352.790878] ? tcf_chain_tp_delete_empty+0x170/0x170
[ 352.791833] ? __might_sleep+0x2e/0xc0
[ 352.792594] ? tfilter_notify+0x170/0x170
[ 352.793400] ? __mutex_unlock_slowpath.constprop.0+0x220/0x220
[ 352.794477] tc_dump_tfilter+0x385/0x4b0
[ 352.795262] ? tc_new_tfilter+0x1180/0x1180
[ 352.796103] ? __mod_node_page_state+0x1f/0xc0
[ 352.796974] ? __build_skb_around+0x10e/0x130
[ 352.797826] netlink_dump+0x2c0/0x560
[ 352.798563] ? netlink_getsockopt+0x430/0x430
[ 352.799433] ? __mutex_unlock_slowpath.constprop.0+0x220/0x220
[ 352.800542] __netlink_dump_start+0x356/0x440
[ 352.801397] rtnetlink_rcv_msg+0x3ff/0x550
[ 352.802190] ? tc_new_tfilter+0x1180/0x1180
[ 352.802872] ? rtnl_calcit.isra.0+0x1f0/0x1f0
[ 352.803668] ? tc_new_tfilter+0x1180/0x1180
[ 352.804344] ? _copy_from_iter_nocache+0x800/0x800
[ 352.805202] ? kasan_set_track+0x1c/0x30
[ 352.805900] netlink_rcv_skb+0xc6/0x1f0
[ 352.806587] ? rht_deferred_worker+0x6b0/0x6b0
[ 352.807455] ? rtnl_calcit.isra.0+0x1f0/0x1f0
[ 352.808324] ? netlink_ack+0x4d0/0x4d0
[ 352.809086] ? netlink_deliver_tap+0x62/0x3d0
[ 352.809951] netlink_unicast+0x353/0x480
[ 352.810744] ? netlink_attachskb+0x430/0x430
[ 352.811586] ? __alloc_skb+0xd7/0x200
[ 352.812349] netlink_sendmsg+0x396/0x680
[ 352.813132] ? netlink_unicast+0x480/0x480
[ 352.813952] ? __import_iovec+0x192/0x210
[ 352.814759] ? netlink_unicast+0x480/0x480
[ 352.815580] sock_sendmsg+0x6c/0x80
[ 352.816299] ____sys_sendmsg+0x3a5/0x3c0
[ 352.817096] ? kernel_sendmsg+0x30/0x30
[ 352.817873] ? __ia32_sys_recvmmsg+0x150/0x150
[ 352.818753] ___sys_sendmsg+0xd8/0x140
[ 352.819518] ? sendmsg_copy_msghdr+0x110/0x110
[ 352.820402] ? ___sys_recvmsg+0xf4/0x1a0
[ 352.821110] ? __copy_msghdr_from_user+0x260/0x260
[ 352.821934] ? _raw_spin_lock+0x81/0xd0
[ 352.822680] ? __handle_mm_fault+0xef3/0x1b20
[ 352.823549] ? rb_insert_color+0x2a/0x270
[ 352.824373] ? copy_page_range+0x16b0/0x16b0
[ 352.825209] ? perf_event_update_userpage+0x2d0/0x2d0
[ 352.826190] ? __fget_light+0xd9/0xf0
[ 352.826941] __sys_sendmsg+0xb3/0x130
[ 352.827613] ? __sys_sendmsg_sock+0x20/0x20
[ 352.828377] ? do_user_addr_fault+0x2c5/0x8a0
[ 352.829184] ? fpregs_assert_state_consistent+0x52/0x60
[ 352.830001] ? exit_to_user_mode_prepare+0x32/0x160
[ 352.830845] do_syscall_64+0x35/0x80
[ 352.831445] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 352.832331] RIP: 0033:0x7f7bee973c17
[ 352.833078] Code: 0c 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 352.836202] RSP: 002b:00007ffcbb368e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 352.837524] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7bee973c17
[ 352.838715] RDX: 0000000000000000 RSI: 00007ffcbb368e50 RDI: 0000000000000003
[ 352.839838] RBP: 00007ffcbb36d090 R08: 00000000cea96d79 R09: 00007f7beea34a40
[ 352.841021] R10: 00000000004059bb R11: 0000000000000246 R12: 000000000046563f
[ 352.842208] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcbb36d088
[ 352.843784] Allocated by task 2960:
[ 352.844451] kasan_save_stack+0x1b/0x40
[ 352.845173] __kasan_kmalloc+0x7c/0x90
[ 352.845873] fl_change+0x282/0x22db [cls_flower]
[ 352.846696] tc_new_tfilter+0x6cf/0x1180
[ 352.847493] rtnetlink_rcv_msg+0x471/0x550
[ 352.848323] netlink_rcv_skb+0xc6/0x1f0
[ 352.849097] netlink_unicast+0x353/0x480
[ 352.849886] netlink_sendmsg+0x396/0x680
[ 352.850678] sock_sendmsg+0x6c/0x80
[ 352.851398] ____sys_sendmsg+0x3a5/0x3c0
[ 352.852202] ___sys_sendmsg+0xd8/0x140
[ 352.852967] __sys_sendmsg+0xb3/0x130
[ 352.853718] do_syscall_64+0x35/0x80
[ 352.854457] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 352.855830] Freed by task 7:
[ 352.856421] kasan_save_stack+0x1b/0x40
[ 352.857139] kasan_set_track+0x1c/0x30
[ 352.857854] kasan_set_free_info+0x20/0x30
[ 352.858609] __kasan_slab_free+0xed/0x130
[ 352.859348] kfree+0xa7/0x3c0
[ 352.859951] process_one_work+0x44d/0x780
[ 352.860685] worker_thread+0x2e2/0x7e0
[ 352.861390] kthread+0x1f4/0x220
[ 352.862022] ret_from_fork+0x1f/0x30
[ 352.862955] Last potentially related work creation:
[ 352.863758] kasan_save_stack+0x1b/0x40
[ 352.864378] kasan_record_aux_stack+0xab/0xc0
[ 352.865028] insert_work+0x30/0x160
[ 352.865617] __queue_work+0x351/0x670
[ 352.866261] rcu_work_rcufn+0x30/0x40
[ 352.866917] rcu_core+0x3b2/0xdb0
[ 352.867561] __do_softirq+0xf6/0x386
[ 352.868708] Second to last potentially related work creation:
[ 352.869779] kasan_save_stack+0x1b/0x40
[ 352.870560] kasan_record_aux_stack+0xab/0xc0
[ 352.871426] call_rcu+0x5f/0x5c0
[ 352.872108] queue_rcu_work+0x44/0x50
[ 352.872855] __fl_put+0x17c/0x240 [cls_flower]
[ 352.873733] fl_delete+0xc7/0x100 [cls_flower]
[ 352.874607] tc_del_tfilter+0x510/0xb30
[ 352.886085] rtnetlink_rcv_msg+0x471/0x550
[ 352.886875] netlink_rcv_skb+0xc6/0x1f0
[ 352.887636] netlink_unicast+0x353/0x480
[ 352.888285] netlink_sendmsg+0x396/0x680
[ 352.888942] sock_sendmsg+0x6c/0x80
[ 352.889583] ____sys_sendmsg+0x3a5/0x3c0
[ 352.890311] ___sys_sendmsg+0xd8/0x140
[ 352.891019] __sys_sendmsg+0xb3/0x130
[ 352.891716] do_syscall_64+0x35/0x80
[ 352.892395] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 352.893666] The buggy address belongs to the object at ffff8881c8251000
which belongs to the cache kmalloc-2k of size 2048
[ 352.895696] The buggy address is located 1152 bytes inside of
2048-byte region [ffff8881c8251000, ffff8881c8251800)
[ 352.897640] The buggy address belongs to the page:
[ 352.898492] page:00000000213bac35 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c8250
[ 352.900110] head:00000000213bac35 order:3 compound_mapcount:0 compound_pincount:0
[ 352.901541] flags: 0x2ffff800010200(slab|head|node=0|zone=2|lastcpupid=0x1ffff)
[ 352.902908] raw: 002ffff800010200 0000000000000000 dead000000000122 ffff888100042f00
[ 352.904391] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 352.905861] page dumped because: kasan: bad access detected
[ 352.907323] Memory state around the buggy address:
[ 352.908218] ffff8881c8251380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 352.909471] ffff8881c8251400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 352.910735] >ffff8881c8251480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 352.912012] ^
[ 352.912642] ffff8881c8251500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 352.913919] ffff8881c8251580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 352.915185] ==================================================================
Fixes: d39d714969cd ("idr: introduce idr_for_each_entry_continue_ul()")
Signed-off-by: Vlad Buslov <vladbu@nvidia.com>
Acked-by: Cong Wang <cong.wang@bytedance.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/sched/cls_flower.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/net/sched/cls_flower.c b/net/sched/cls_flower.c
index d7869a984881..d2a4e31d963d 100644
--- a/net/sched/cls_flower.c
+++ b/net/sched/cls_flower.c
@@ -2188,18 +2188,24 @@ static void fl_walk(struct tcf_proto *tp, struct tcf_walker *arg,
arg->count = arg->skip;
+ rcu_read_lock();
idr_for_each_entry_continue_ul(&head->handle_idr, f, tmp, id) {
/* don't return filters that are being deleted */
if (!refcount_inc_not_zero(&f->refcnt))
continue;
+ rcu_read_unlock();
+
if (arg->fn(tp, f, arg) < 0) {
__fl_put(f);
arg->stop = 1;
+ rcu_read_lock();
break;
}
__fl_put(f);
arg->count++;
+ rcu_read_lock();
}
+ rcu_read_unlock();
arg->cookie = id;
}
--
2.33.0
next prev parent reply other threads:[~2021-10-04 13:41 UTC|newest]
Thread overview: 184+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-10-04 12:50 [PATCH 5.14 000/172] 5.14.10-rc1 review Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 001/172] media: hantro: Fix check for single irq Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 002/172] media: cedrus: Fix SUNXI tile size calculation Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 003/172] media: s5p-jpeg: rename JPEG marker constants to prevent build warnings Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 004/172] ASoC: fsl_sai: register platform component before registering cpu dai Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 005/172] ASoC: fsl_esai: " Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 006/172] ASoC: fsl_micfil: " Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 007/172] ASoC: fsl_spdif: " Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 008/172] ASoC: fsl_xcvr: " Greg Kroah-Hartman
2021-10-04 12:50 ` [PATCH 5.14 009/172] ASoC: mediatek: common: handle NULL case in suspend/resume function Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 010/172] scsi: elx: efct: Fix void-pointer-to-enum-cast warning for efc_nport_topology Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 011/172] ASoC: SOF: Fix DSP oops stack dump output contents Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 012/172] ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 013/172] ASoC: SOF: imx: imx8m: " Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 014/172] pinctrl: qcom: spmi-gpio: correct parent irqspec translation Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 015/172] net/mlx4_en: Resolve bad operstate value Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 016/172] s390/qeth: Fix deadlock in remove_discipline Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 017/172] s390/qeth: fix deadlock during failing recovery Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 018/172] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 019/172] m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 020/172] NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 021/172] kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 022/172] HID: amd_sfh: Fix potential NULL pointer dereference Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 023/172] perf test: Fix DWARF unwind for optimized builds Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 024/172] perf iostat: Use system-wide mode if the target cpu_list is unspecified Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 025/172] perf iostat: Fix Segmentation fault from NULL struct perf_counts_values * Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 026/172] watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 027/172] tty: Fix out-of-bound vmalloc access in imageblit Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 028/172] cpufreq: schedutil: Use kobject release() method to free sugov_tunables Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 029/172] scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 030/172] drm/amdgpu: adjust fence driver enable sequence Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 031/172] drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2) Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 032/172] drm/amdgpu: stop scheduler when calling hw_fini (v2) Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 033/172] cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 034/172] scsi: ufs: ufs-pci: Fix Intel LKF link stability Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 035/172] ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 036/172] ALSA: firewire-motu: fix truncated bytes in message tracepoints Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 037/172] ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 038/172] ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 039/172] fs-verity: fix signed integer overflow with i_size near S64_MAX Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 040/172] hwmon: (tmp421) handle I2C errors Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 041/172] hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 042/172] hwmon: (w83792d) " Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 043/172] hwmon: (w83791d) " Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 044/172] gpio: pca953x: do not ignore i2c errors Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 045/172] scsi: ufs: Fix illegal offset in UPIU event trace Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 046/172] mac80211: fix use-after-free in CCMP/GCMP RX Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 047/172] platform/x86/intel: hid: Add DMI switches allow list Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 048/172] x86/kvmclock: Move this_cpu_pvti into kvmclock.h Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 049/172] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 050/172] KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 051/172] KVM: x86: nSVM: dont copy virt_ext from vmcb12 Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 052/172] KVM: x86: Clear KVMs cached guest CR3 at RESET/INIT Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 053/172] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 054/172] KVM: nVMX: Filter out all unsupported controls when eVMCS was activated Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 055/172] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 056/172] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 057/172] KVM: SEV: Acquire vcpu mutex when updating VMSA Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 058/172] KVM: SEV: Allow some commands for mirror VM Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 059/172] KVM: SVM: fix missing sev_decommission in sev_receive_start Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 060/172] KVM: nVMX: Fix nested bus lock VM exit Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 061/172] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 062/172] mmc: renesas_sdhi: fix regression with hard reset on old SDHIs Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 063/172] media: ir_toy: prevent device from hanging during transmit Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 064/172] RDMA/cma: Do not change route.addr.src_addr.ss_family Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 065/172] RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 066/172] nbd: use shifts rather than multiplies Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 067/172] drm/amd/display: initialize backlight_ramping_override to false Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 068/172] drm/amd/display: Pass PCI deviceid into DC Greg Kroah-Hartman
2021-10-04 12:51 ` [PATCH 5.14 069/172] drm/amd/display: Fix Display Flicker on embedded panels Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 070/172] drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 071/172] drm/amdgpu: check tiling flags when creating FB on GFX8- Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 072/172] drm/amdgpu: correct initial cp_hqd_quantum for gfx9 Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 073/172] interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 074/172] interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift and mask Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 075/172] drm/i915/gvt: fix the usage of ww lock in gvt scheduler Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 076/172] ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 077/172] bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 078/172] IB/cma: Do not send IGMP leaves for sendonly Multicast groups Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 079/172] RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 080/172] bpf, mips: Validate conditional branch offsets Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 081/172] hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 082/172] RDMA/irdma: Skip CQP ring during a reset Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 083/172] RDMA/irdma: Validate number of CQ entries on create CQ Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 084/172] RDMA/irdma: Report correct WC error when transport retry counter is exceeded Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 085/172] RDMA/irdma: Report correct WC error when there are MW bind errors Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 086/172] netfilter: nf_tables: unlink table before deleting it Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 087/172] netfilter: log: work around missing softdep backend module Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 088/172] Revert "mac80211: do not use low data rates for data frames with no ack flag" Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 089/172] mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 090/172] mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 091/172] mac80211: mesh: fix potentially unaligned access Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 092/172] mac80211-hwsim: fix late beacon hrtimer handling Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 093/172] driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 094/172] net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 095/172] sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 096/172] mptcp: dont return sockets in foreign netns Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 097/172] mptcp: allow changing the backup bit when no sockets are open Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 098/172] RDMA/hns: Work around broken constant propagation in gcc 8 Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 099/172] hwmon: (tmp421) report /PVLD condition as fault Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 100/172] hwmon: (tmp421) fix rounding for negative values Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 101/172] net: enetc: fix the incorrect clearing of IF_MODE bits Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 102/172] net: ipv4: Fix rtnexthop len when RTA_FLOW is present Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 103/172] smsc95xx: fix stalled rx after link change Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 104/172] drm/i915/request: fix early tracepoints Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 105/172] drm/i915: Remove warning from the rps worker Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 106/172] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 107/172] dsa: mv88e6xxx: Fix MTU definition Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 108/172] dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 109/172] e100: fix length calculation in e100_get_regs_len Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 110/172] e100: fix buffer overrun in e100_get_regs Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 111/172] RDMA/hfi1: Fix kernel pointer leak Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 112/172] RDMA/hns: Fix the size setting error when copying CQE in clean_cq() Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 113/172] RDMA/hns: Add the check of the CQE size of the user space Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 114/172] bpf: Exempt CAP_BPF from checks against bpf_jit_limit Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 115/172] libbpf: Fix segfault in static linker for objects without BTF Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 116/172] selftests, bpf: Fix makefile dependencies on libbpf Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 117/172] selftests, bpf: test_lwt_ip_encap: Really disable rp_filter Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 118/172] bpf, x86: Fix bpf mapping of atomic fetch implementation Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 119/172] net: ks8851: fix link error Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 120/172] ionic: fix gathering of debug stats Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 121/172] Revert "block, bfq: honor already-setup queue merges" Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 122/172] scsi: csiostor: Add module softdep on cxgb4 Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 123/172] ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 124/172] net: hns3: do not allow call hns3_nic_net_open repeatedly Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 125/172] net: hns3: remove tc enable checking Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 126/172] net: hns3: dont rollback when destroy mqprio fail Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 127/172] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 128/172] net: hns3: fix show wrong state when add existing uc mac address Greg Kroah-Hartman
2021-10-04 12:52 ` [PATCH 5.14 129/172] net: hns3: reconstruct function hns3_self_test Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 130/172] net: hns3: fix always enable rx vlan filter problem after selftest Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 131/172] net: hns3: disable firmware compatible features when uninstall PF Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 132/172] net: phy: bcm7xxx: Fixed indirect MMD operations Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 133/172] net: introduce and use lock_sock_fast_nested() Greg Kroah-Hartman
2021-10-04 12:53 ` Greg Kroah-Hartman [this message]
2021-10-04 12:53 ` [PATCH 5.14 135/172] net: stmmac: fix EEE init issue when paired with EEE capable PHYs Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 136/172] af_unix: fix races in sk_peer_pid and sk_peer_cred accesses Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 137/172] objtool: Teach get_alt_entry() about more relocation types Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 138/172] perf/x86/intel: Update event constraints for ICX Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 139/172] sched/fair: Add ancestors of unthrottled undecayed cfs_rq Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 140/172] sched/fair: Null terminate buffer when updating tunable_scaling Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 141/172] hwmon: (occ) Fix P10 VRM temp sensors Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 142/172] hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 143/172] kvm: fix objtool relocation warning Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 144/172] nvme: add command id quirk for apple controllers Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 145/172] elf: dont use MAP_FIXED_NOREPLACE for elf interpreter mappings Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 146/172] driver core: fw_devlink: Improve handling of cyclic dependencies Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 147/172] debugfs: debugfs_create_file_size(): use IS_ERR to check for error Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 148/172] ipack: ipoctal: fix stack information leak Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 149/172] ipack: ipoctal: fix tty registration race Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 150/172] ipack: ipoctal: fix tty-registration error handling Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 151/172] ipack: ipoctal: fix missing allocation-failure check Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 152/172] ipack: ipoctal: fix module reference leak Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 153/172] ext4: fix loff_t overflow in ext4_max_bitmap_size() Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 154/172] ext4: limit the number of blocks in one ADD_RANGE TLV Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 155/172] ext4: fix reserved space counter leakage Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 156/172] ext4: add error checking to ext4_ext_replay_set_iblocks() Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 157/172] ext4: fix potential infinite loop in ext4_dx_readdir() Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 158/172] ext4: flush s_error_work before journal destroy in ext4_fill_super Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 159/172] HID: u2fzero: ignore incomplete packets without data Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 160/172] net: udp: annotate data race around udp_sk(sk)->corkflag Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 161/172] NIOS2: setup.c: drop unused variable dram_start Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 162/172] usb: hso: remove the bailout parameter Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 163/172] HID: betop: fix slab-out-of-bounds Write in betop_probe Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 164/172] netfilter: ipset: Fix oversized kvmalloc() calls Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 165/172] mm: dont allow " Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 166/172] HID: usbhid: free raw_report buffers in usbhid_stop Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 167/172] crypto: aesni - xts_crypt() return if walk.nbytes is 0 Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 168/172] net: mdiobus: Fix memory leak in __mdiobus_register Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 169/172] KVM: x86: Handle SRCU initialization failure during page track init Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 170/172] netfilter: conntrack: serialize hash resizes and cleanups Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 171/172] netfilter: nf_tables: Fix oversized kvmalloc() calls Greg Kroah-Hartman
2021-10-04 12:53 ` [PATCH 5.14 172/172] drivers: net: mhi: fix error path in mhi_net_newlink Greg Kroah-Hartman
2021-10-04 18:06 ` [PATCH 5.14 000/172] 5.14.10-rc1 review Pavel Machek
2021-10-04 18:08 ` Pavel Machek
2021-10-04 18:36 ` Fox Chen
2021-10-04 19:45 ` Shuah Khan
2021-10-04 21:01 ` Florian Fainelli
2021-10-05 2:20 ` Guenter Roeck
2021-10-05 2:27 ` Guenter Roeck
2021-10-05 4:00 ` Naresh Kamboju
2021-10-05 6:41 ` Greg Kroah-Hartman
2021-10-05 4:04 ` Naresh Kamboju
2021-10-05 6:41 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20211004125049.286972682@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=cong.wang@bytedance.com \
--cc=davem@davemloft.net \
--cc=linux-kernel@vger.kernel.org \
--cc=sashal@kernel.org \
--cc=stable@vger.kernel.org \
--cc=vladbu@nvidia.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).