From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org, Eric Dumazet <edumazet@google.com>,
syzbot+04babcefcd396fabec37@syzkaller.appspotmail.com,
andrew hendry <andrew.hendry@gmail.com>,
"David S. Miller" <davem@davemloft.net>
Subject: [PATCH 3.18 082/134] net/x25: fix use-after-free in x25_device_event()
Date: Fri, 22 Mar 2019 12:14:55 +0100 [thread overview]
Message-ID: <20190322111216.048533799@linuxfoundation.org> (raw)
In-Reply-To: <20190322111210.465931067@linuxfoundation.org>
3.18-stable review patch. If anyone has any objections, please let me know.
------------------
From: Eric Dumazet <edumazet@google.com>
[ Upstream commit 95d6ebd53c79522bf9502dbc7e89e0d63f94dae4 ]
In case of failure x25_connect() does a x25_neigh_put(x25->neighbour)
but forgets to clear x25->neighbour pointer, thus triggering use-after-free.
Since the socket is visible in x25_list, we need to hold x25_list_lock
to protect the operation.
syzbot report :
BUG: KASAN: use-after-free in x25_kill_by_device net/x25/af_x25.c:217 [inline]
BUG: KASAN: use-after-free in x25_device_event+0x296/0x2b0 net/x25/af_x25.c:252
Read of size 8 at addr ffff8880a030edd0 by task syz-executor003/7854
CPU: 0 PID: 7854 Comm: syz-executor003 Not tainted 5.0.0+ #97
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
print_address_description.cold+0x7c/0x20d mm/kasan/report.c:187
kasan_report.cold+0x1b/0x40 mm/kasan/report.c:317
__asan_report_load8_noabort+0x14/0x20 mm/kasan/generic_report.c:135
x25_kill_by_device net/x25/af_x25.c:217 [inline]
x25_device_event+0x296/0x2b0 net/x25/af_x25.c:252
notifier_call_chain+0xc7/0x240 kernel/notifier.c:93
__raw_notifier_call_chain kernel/notifier.c:394 [inline]
raw_notifier_call_chain+0x2e/0x40 kernel/notifier.c:401
call_netdevice_notifiers_info+0x3f/0x90 net/core/dev.c:1739
call_netdevice_notifiers_extack net/core/dev.c:1751 [inline]
call_netdevice_notifiers net/core/dev.c:1765 [inline]
__dev_notify_flags+0x1e9/0x2c0 net/core/dev.c:7607
dev_change_flags+0x10d/0x170 net/core/dev.c:7643
dev_ifsioc+0x2b0/0x940 net/core/dev_ioctl.c:237
dev_ioctl+0x1b8/0xc70 net/core/dev_ioctl.c:488
sock_do_ioctl+0x1bd/0x300 net/socket.c:995
sock_ioctl+0x32b/0x610 net/socket.c:1096
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:509 [inline]
do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696
ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
__do_sys_ioctl fs/ioctl.c:720 [inline]
__se_sys_ioctl fs/ioctl.c:718 [inline]
__x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4467c9
Code: e8 0c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fdbea222d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 00000000004467c9
RDX: 0000000020000340 RSI: 0000000000008914 RDI: 0000000000000003
RBP: 00000000006dbc50 R08: 00007fdbea223700 R09: 0000000000000000
R10: 00007fdbea223700 R11: 0000000000000246 R12: 00000000006dbc5c
R13: 6000030030626669 R14: 0000000000000000 R15: 0000000030626669
Allocated by task 7843:
save_stack+0x45/0xd0 mm/kasan/common.c:73
set_track mm/kasan/common.c:85 [inline]
__kasan_kmalloc mm/kasan/common.c:495 [inline]
__kasan_kmalloc.constprop.0+0xcf/0xe0 mm/kasan/common.c:468
kasan_kmalloc+0x9/0x10 mm/kasan/common.c:509
kmem_cache_alloc_trace+0x151/0x760 mm/slab.c:3615
kmalloc include/linux/slab.h:545 [inline]
x25_link_device_up+0x46/0x3f0 net/x25/x25_link.c:249
x25_device_event+0x116/0x2b0 net/x25/af_x25.c:242
notifier_call_chain+0xc7/0x240 kernel/notifier.c:93
__raw_notifier_call_chain kernel/notifier.c:394 [inline]
raw_notifier_call_chain+0x2e/0x40 kernel/notifier.c:401
call_netdevice_notifiers_info+0x3f/0x90 net/core/dev.c:1739
call_netdevice_notifiers_extack net/core/dev.c:1751 [inline]
call_netdevice_notifiers net/core/dev.c:1765 [inline]
__dev_notify_flags+0x121/0x2c0 net/core/dev.c:7605
dev_change_flags+0x10d/0x170 net/core/dev.c:7643
dev_ifsioc+0x2b0/0x940 net/core/dev_ioctl.c:237
dev_ioctl+0x1b8/0xc70 net/core/dev_ioctl.c:488
sock_do_ioctl+0x1bd/0x300 net/socket.c:995
sock_ioctl+0x32b/0x610 net/socket.c:1096
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:509 [inline]
do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696
ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
__do_sys_ioctl fs/ioctl.c:720 [inline]
__se_sys_ioctl fs/ioctl.c:718 [inline]
__x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
Freed by task 7865:
save_stack+0x45/0xd0 mm/kasan/common.c:73
set_track mm/kasan/common.c:85 [inline]
__kasan_slab_free+0x102/0x150 mm/kasan/common.c:457
kasan_slab_free+0xe/0x10 mm/kasan/common.c:465
__cache_free mm/slab.c:3494 [inline]
kfree+0xcf/0x230 mm/slab.c:3811
x25_neigh_put include/net/x25.h:253 [inline]
x25_connect+0x8d8/0xde0 net/x25/af_x25.c:824
__sys_connect+0x266/0x330 net/socket.c:1685
__do_sys_connect net/socket.c:1696 [inline]
__se_sys_connect net/socket.c:1693 [inline]
__x64_sys_connect+0x73/0xb0 net/socket.c:1693
do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
The buggy address belongs to the object at ffff8880a030edc0
which belongs to the cache kmalloc-256 of size 256
The buggy address is located 16 bytes inside of
256-byte region [ffff8880a030edc0, ffff8880a030eec0)
The buggy address belongs to the page:
page:ffffea000280c380 count:1 mapcount:0 mapping:ffff88812c3f07c0 index:0x0
flags: 0x1fffc0000000200(slab)
raw: 01fffc0000000200 ffffea0002806788 ffffea00027f0188 ffff88812c3f07c0
raw: 0000000000000000 ffff8880a030e000 000000010000000c 0000000000000000
page dumped because: kasan: bad access detected
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot+04babcefcd396fabec37@syzkaller.appspotmail.com
Cc: andrew hendry <andrew.hendry@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
net/x25/af_x25.c | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
--- a/net/x25/af_x25.c
+++ b/net/x25/af_x25.c
@@ -812,8 +812,12 @@ static int x25_connect(struct socket *so
sock->state = SS_CONNECTED;
rc = 0;
out_put_neigh:
- if (rc)
+ if (rc) {
+ read_lock_bh(&x25_list_lock);
x25_neigh_put(x25->neighbour);
+ x25->neighbour = NULL;
+ read_unlock_bh(&x25_list_lock);
+ }
out_put_route:
x25_route_put(rt);
out:
next prev parent reply other threads:[~2019-03-22 11:24 UTC|newest]
Thread overview: 149+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-03-22 11:13 [PATCH 3.18 000/134] 3.18.137-stable review Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 001/134] ceph: avoid repeatedly adding inode to mdsc->snap_flush_list Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 002/134] numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 003/134] KEYS: allow reaching the keys quotas exactly Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 004/134] mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 005/134] mfd: twl-core: Fix section annotations on {,un}protect_pm_master Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 006/134] mfd: db8500-prcmu: Fix some section annotations Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 007/134] mfd: ab8500-core: Return zero in get_register_interruptible() Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 008/134] mfd: wm5110: Add missing ASRC rate register Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 009/134] mfd: mc13xxx: Fix a missing check of a register-read failure Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 010/134] MIPS: ath79: Enable OF serial ports in the default config Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 011/134] scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 012/134] scsi: isci: initialize shost fully before calling scsi_add_host() Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 013/134] MIPS: jazz: fix 64bit build Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 014/134] isdn: i4l: isdn_tty: Fix some concurrency double-free bugs Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 015/134] atm: he: fix sign-extension overflow on large shift Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 016/134] leds: lp5523: fix a missing check of return value of lp55xx_read Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 017/134] isdn: avm: Fix string plus integer warning from Clang Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 018/134] KEYS: user: Align the payload buffer Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 019/134] KEYS: always initialize keyring_index_key::desc_len Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 020/134] batman-adv: fix uninit-value in batadv_interface_tx() Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 021/134] net/packet: fix 4gb buffer limit due to overflow check Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 022/134] team: avoid complex list operations in team_nl_cmd_options_set() Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 023/134] sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 024/134] netlink: Trim skb to alloc size to avoid MSG_TRUNC Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 025/134] libceph: handle an empty authorize reply Greg Kroah-Hartman
2019-03-22 11:13 ` [PATCH 3.18 026/134] scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 027/134] drm/msm: Unblock writer if reader closes file Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 028/134] ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 029/134] ALSA: compress: prevent potential divide by zero bugs Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 030/134] usb: dwc3: gadget: Fix the uninitialized link_state when udc starts Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 031/134] usb: gadget: Potential NULL dereference on allocation error Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 032/134] ASoC: imx-audmux: change snprintf to scnprintf for possible overflow Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 033/134] mac80211: fix miscounting of ttl-dropped frames Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 034/134] serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 035/134] scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 036/134] net: altera_tse: fix connect_local_phy error path Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 037/134] ibmveth: Do not process frames after calling napi_reschedule Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 038/134] mac80211: dont initiate TDLS connection if station is not associated to AP Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 039/134] cfg80211: extend range deviation for DMG Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 040/134] KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 041/134] mmc: spi: Fix card detection during probe Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 042/134] mm: enforce min addr even if capable() in expand_downwards() Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 043/134] USB: serial: cp210x: add ID for Ingenico 3070 Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 044/134] net-sysfs: Fix mem leak in netdev_register_kobject Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 045/134] sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 046/134] team: Free BPF filter when unregistering netdev Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 047/134] net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 048/134] net: Add __icmp_send helper Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 049/134] net: avoid use IPCB in cipso_v4_error Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 050/134] net: phy: Micrel KSZ8061: link failure after cable connect Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 051/134] netlabel: fix out-of-bounds memory accesses Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 052/134] ip6mr: Do not call __IP6_INC_STATS() from preemptible context Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 053/134] hugetlbfs: fix races and page leaks during migration Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 054/134] media: uvcvideo: Fix type check leading to overflow Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 055/134] vti4: Fix a ipip packet processing bug in IPCOMP virtual tunnel Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 056/134] perf tools: Handle TOPOLOGY headers with no CPU Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 057/134] ipvs: Fix signed integer overflow when setsockopt timeout Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 058/134] iommu/amd: Fix IOMMU page flush when detach device from a domain Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 059/134] xtensa: SMP: fix secondary CPU initialization Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 060/134] xtensa: smp_lx200_defconfig: fix vectors clash Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 061/134] xtensa: SMP: mark each possible CPU as present Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 062/134] xtensa: SMP: limit number of possible CPUs by NR_CPUS Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 063/134] net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 064/134] nfs: Fix NULL pointer dereference of dev_name Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 065/134] scsi: libfc: free skb when receiving invalid flogi resp Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 066/134] platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 067/134] cifs: fix computation for MAX_SMB2_HDR_SIZE Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 068/134] x86/kexec: Dont setup EFI info if EFI runtime is not enabled Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 069/134] mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 070/134] autofs: drop dentry reference only when it is never used Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 071/134] autofs: fix error return in autofs_fill_super() Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 072/134] ARM: pxa: ssp: unneeded to free devm_ allocated data Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 073/134] irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 074/134] dmaengine: dmatest: Abort test in case of mapping error Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 075/134] s390/qeth: fix use-after-free in error path Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 076/134] perf symbols: Filter out hidden symbols from labels Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 077/134] Input: wacom_serial4 - add support for Wacom ArtPad II tablet Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 078/134] iscsi_ibft: Fix missing break in switch statement Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 079/134] l2tp: fix infoleak in l2tp_ip6_recvmsg() Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 080/134] net: hsr: fix memory leak in hsr_dev_finalize() Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 081/134] net: sit: fix UBSAN Undefined behaviour in check_6rd Greg Kroah-Hartman
2019-03-22 11:14 ` Greg Kroah-Hartman [this message]
2019-03-22 11:14 ` [PATCH 3.18 083/134] net/x25: reset state in x25_connect() Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 084/134] pptp: dst_release sk_dst_cache in pptp_sock_destruct Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 085/134] net/mlx4_core: Fix qp mtt size calculation Greg Kroah-Hartman
2019-03-22 11:14 ` [PATCH 3.18 086/134] net/x25: fix a race in x25_bind() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 087/134] mdio_bus: Fix use-after-free on device_register fails Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 088/134] net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255 Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 089/134] missing barriers in some of unix_sock ->addr and ->path accesses Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 090/134] vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 091/134] net/hsr: fix possible crash in add_timer() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 092/134] gro_cells: make sure device is up in gro_cells_receive() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 093/134] ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 094/134] Its wrong to add len to sector_nr in raid10 reshape twice Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 095/134] 9p/net: fix memory leak in p9_client_create Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 096/134] ASoC: fsl_esai: fix register setting issue in RIGHT_J mode Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 097/134] crypto: ahash - fix another early termination in hash walk Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 098/134] s390/dasd: fix using offset into zero size array error Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 099/134] Input: matrix_keypad - use flush_delayed_work() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 100/134] i2c: cadence: Fix the hold bit setting Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 101/134] Input: st-keyscan - fix potential zalloc NULL dereference Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 102/134] assoc_array: Fix shortcut creation Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 103/134] scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 104/134] net: systemport: Fix reception of BPDUs Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 105/134] net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 106/134] arm64: Relax GIC version check during early boot Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 107/134] tmpfs: fix link accounting when a tmpfile is linked in Greg Kroah-Hartman
2019-03-22 19:05 ` Hugh Dickins
2019-03-23 6:32 ` Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 108/134] net: set static variable an initial value in atl2_probe() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 109/134] CIFS: Fix read after write for files with read caching Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 110/134] regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 111/134] regulator: s2mpa01: Fix step values for some LDOs Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 112/134] scsi: virtio_scsi: dont send sc payload with tmfs Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 113/134] scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 114/134] m68k: Add -ffreestanding to CFLAGS Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 115/134] Btrfs: fix corruption reading shared and compressed extents after hole punching Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 116/134] crypto: pcbc - remove bogus memcpy()s with src == dest Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 117/134] cpufreq: pxa2xx: remove incorrect __init annotation Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 118/134] ext4: fix crash during online resizing Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 119/134] ext2: Fix underflow in ext2_max_size() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 120/134] mm/vmalloc: fix size check for remap_vmalloc_range_partial() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 121/134] kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 122/134] parport_pc: fix find_superio io compare code, should use equal test Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 123/134] jbd2: clear dirty flag when revoking a buffer from an older transaction Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 124/134] powerpc/32: Clear on-stack exception marker upon exception return Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 125/134] powerpc/wii: properly disable use of BATs when requested Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 126/134] powerpc/powernv: Make opal log only readable by root Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 127/134] powerpc/83xx: Also save/restore SPRG4-7 during suspend Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 128/134] ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 129/134] nfsd: fix memory corruption caused by readdir Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 130/134] nfsd: fix wrong check in write_v4_end_grace() Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 131/134] md: Fix failed allocation of md_register_thread Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 132/134] rcu: Do RCU GP kthread self-wakeup from softirq and interrupt Greg Kroah-Hartman
2019-03-22 16:00 ` He, Bo
2019-03-23 6:33 ` Greg Kroah-Hartman
2019-03-25 16:00 ` Paul E. McKenney
2019-03-26 8:43 ` He, Bo
2019-03-26 15:55 ` Paul E. McKenney
2019-03-27 1:50 ` Zhang, Jun
2019-03-27 15:10 ` Paul E. McKenney
2019-03-28 1:36 ` Zhang, Jun
2019-03-28 5:28 ` Greg Kroah-Hartman
2019-03-28 13:21 ` Paul E. McKenney
2019-03-22 11:15 ` [PATCH 3.18 133/134] media: uvcvideo: Avoid NULL pointer dereference at the end of streaming Greg Kroah-Hartman
2019-03-22 11:15 ` [PATCH 3.18 134/134] drm/radeon/evergreen_cs: fix missing break in switch statement Greg Kroah-Hartman
2019-03-22 20:22 ` [PATCH 3.18 000/134] 3.18.137-stable review kernelci.org bot
2019-03-23 4:42 ` Guenter Roeck
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190322111216.048533799@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=andrew.hendry@gmail.com \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=linux-kernel@vger.kernel.org \
--cc=stable@vger.kernel.org \
--cc=syzbot+04babcefcd396fabec37@syzkaller.appspotmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).