From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org, Jiri Kosina <jkosina@suse.cz>,
Tomoki Sekiyama <tomoki.sekiyama@gmail.com>,
Oliver Neukum <oneukum@suse.com>,
andreyknvl@google.com, Alan Stern <stern@rowland.harvard.edu>,
syzkaller-bugs@googlegroups.com, dtor@chromium.org,
syzbot+d1fedb1c1fdb07fca507@syzkaller.appspotmail.com,
Suzuki K Poulose <suzuki.poulose@arm.com>
Subject: [PATCH 5.2 039/144] usb: yurex: Fix use-after-free in yurex_delete
Date: Wed, 14 Aug 2019 18:59:55 +0200 [thread overview]
Message-ID: <20190814165801.457895746@linuxfoundation.org> (raw)
In-Reply-To: <20190814165759.466811854@linuxfoundation.org>
From: Suzuki K Poulose <suzuki.poulose@arm.com>
commit fc05481b2fcabaaeccf63e32ac1baab54e5b6963 upstream.
syzbot reported the following crash [0]:
BUG: KASAN: use-after-free in usb_free_coherent+0x79/0x80
drivers/usb/core/usb.c:928
Read of size 8 at addr ffff8881b18599c8 by task syz-executor.4/16007
CPU: 0 PID: 16007 Comm: syz-executor.4 Not tainted 5.3.0-rc2+ #23
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0xca/0x13e lib/dump_stack.c:113
print_address_description+0x6a/0x32c mm/kasan/report.c:351
__kasan_report.cold+0x1a/0x33 mm/kasan/report.c:482
kasan_report+0xe/0x12 mm/kasan/common.c:612
usb_free_coherent+0x79/0x80 drivers/usb/core/usb.c:928
yurex_delete+0x138/0x330 drivers/usb/misc/yurex.c:100
kref_put include/linux/kref.h:65 [inline]
yurex_release+0x66/0x90 drivers/usb/misc/yurex.c:392
__fput+0x2d7/0x840 fs/file_table.c:280
task_work_run+0x13f/0x1c0 kernel/task_work.c:113
tracehook_notify_resume include/linux/tracehook.h:188 [inline]
exit_to_usermode_loop+0x1d2/0x200 arch/x86/entry/common.c:163
prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
do_syscall_64+0x45f/0x580 arch/x86/entry/common.c:299
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x413511
Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48
83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48
89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffc424ea2e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000413511
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
RBP: 0000000000000001 R08: 0000000029a2fc22 R09: 0000000029a2fc26
R10: 00007ffc424ea3c0 R11: 0000000000000293 R12: 000000000075c9a0
R13: 000000000075c9a0 R14: 0000000000761938 R15: ffffffffffffffff
Allocated by task 2776:
save_stack+0x1b/0x80 mm/kasan/common.c:69
set_track mm/kasan/common.c:77 [inline]
__kasan_kmalloc mm/kasan/common.c:487 [inline]
__kasan_kmalloc.constprop.0+0xbf/0xd0 mm/kasan/common.c:460
kmalloc include/linux/slab.h:552 [inline]
kzalloc include/linux/slab.h:748 [inline]
usb_alloc_dev+0x51/0xf95 drivers/usb/core/usb.c:583
hub_port_connect drivers/usb/core/hub.c:5004 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5213 [inline]
port_event drivers/usb/core/hub.c:5359 [inline]
hub_event+0x15c0/0x3640 drivers/usb/core/hub.c:5441
process_one_work+0x92b/0x1530 kernel/workqueue.c:2269
worker_thread+0x96/0xe20 kernel/workqueue.c:2415
kthread+0x318/0x420 kernel/kthread.c:255
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Freed by task 16007:
save_stack+0x1b/0x80 mm/kasan/common.c:69
set_track mm/kasan/common.c:77 [inline]
__kasan_slab_free+0x130/0x180 mm/kasan/common.c:449
slab_free_hook mm/slub.c:1423 [inline]
slab_free_freelist_hook mm/slub.c:1470 [inline]
slab_free mm/slub.c:3012 [inline]
kfree+0xe4/0x2f0 mm/slub.c:3953
device_release+0x71/0x200 drivers/base/core.c:1064
kobject_cleanup lib/kobject.c:693 [inline]
kobject_release lib/kobject.c:722 [inline]
kref_put include/linux/kref.h:65 [inline]
kobject_put+0x171/0x280 lib/kobject.c:739
put_device+0x1b/0x30 drivers/base/core.c:2213
usb_put_dev+0x1f/0x30 drivers/usb/core/usb.c:725
yurex_delete+0x40/0x330 drivers/usb/misc/yurex.c:95
kref_put include/linux/kref.h:65 [inline]
yurex_release+0x66/0x90 drivers/usb/misc/yurex.c:392
__fput+0x2d7/0x840 fs/file_table.c:280
task_work_run+0x13f/0x1c0 kernel/task_work.c:113
tracehook_notify_resume include/linux/tracehook.h:188 [inline]
exit_to_usermode_loop+0x1d2/0x200 arch/x86/entry/common.c:163
prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
do_syscall_64+0x45f/0x580 arch/x86/entry/common.c:299
entry_SYSCALL_64_after_hwframe+0x49/0xbe
The buggy address belongs to the object at ffff8881b1859980
which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 72 bytes inside of
2048-byte region [ffff8881b1859980, ffff8881b185a180)
The buggy address belongs to the page:
page:ffffea0006c61600 refcount:1 mapcount:0 mapping:ffff8881da00c000
index:0x0 compound_mapcount: 0
flags: 0x200000000010200(slab|head)
raw: 0200000000010200 0000000000000000 0000000100000001 ffff8881da00c000
raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
Memory state around the buggy address:
ffff8881b1859880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff8881b1859900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
> ffff8881b1859980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff8881b1859a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff8881b1859a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
A quick look at the yurex_delete() shows that we drop the reference
to the usb_device before releasing any buffers associated with the
device. Delay the reference drop until we have finished the cleanup.
[0] https://lore.kernel.org/lkml/0000000000003f86d8058f0bd671@google.com/
Fixes: 6bc235a2e24a5e ("USB: add driver for Meywa-Denki & Kayac YUREX")
Cc: Jiri Kosina <jkosina@suse.cz>
Cc: Tomoki Sekiyama <tomoki.sekiyama@gmail.com>
Cc: Oliver Neukum <oneukum@suse.com>
Cc: andreyknvl@google.com
Cc: gregkh@linuxfoundation.org
Cc: Alan Stern <stern@rowland.harvard.edu>
Cc: syzkaller-bugs@googlegroups.com
Cc: dtor@chromium.org
Reported-by: syzbot+d1fedb1c1fdb07fca507@syzkaller.appspotmail.com
Signed-off-by: Suzuki K Poulose <suzuki.poulose@arm.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20190805111528.6758-1-suzuki.poulose@arm.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
drivers/usb/misc/yurex.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/drivers/usb/misc/yurex.c
+++ b/drivers/usb/misc/yurex.c
@@ -92,7 +92,6 @@ static void yurex_delete(struct kref *kr
dev_dbg(&dev->interface->dev, "%s\n", __func__);
- usb_put_dev(dev->udev);
if (dev->cntl_urb) {
usb_kill_urb(dev->cntl_urb);
kfree(dev->cntl_req);
@@ -108,6 +107,7 @@ static void yurex_delete(struct kref *kr
dev->int_buffer, dev->urb->transfer_dma);
usb_free_urb(dev->urb);
}
+ usb_put_dev(dev->udev);
kfree(dev);
}
next prev parent reply other threads:[~2019-08-14 17:27 UTC|newest]
Thread overview: 155+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-08-14 16:59 [PATCH 5.2 000/144] 5.2.9-stable review Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 001/144] Revert "PCI: Add missing link delays required by the PCIe spec" Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 002/144] IIO: Ingenic JZ47xx: Set clock divider on probe Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 003/144] iio: cros_ec_accel_legacy: Fix incorrect channel setting Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 004/144] iio: imu: mpu6050: add missing available scan masks Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 005/144] iio: adc: gyroadc: fix uninitialized return code Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 006/144] iio: adc: max9611: Fix misuse of GENMASK macro Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 007/144] staging: gasket: apex: fix copy-paste typo Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 008/144] staging: wilc1000: flush the workqueue before deinit the host Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 009/144] staging: android: ion: Bail out upon SIGKILL when allocating memory Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 010/144] Staging: fbtft: Fix probing of gpio descriptor Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 011/144] Staging: fbtft: Fix reset assertion when using " Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 012/144] crypto: ccp - Fix oops by properly managing allocated structures Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 013/144] crypto: ccp - Add support for valid authsize values less than 16 Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 014/144] crypto: ccp - Ignore tag length when decrypting GCM ciphertext Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 015/144] driver core: platform: return -ENXIO for missing GpioInt Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 016/144] usb: usbfs: fix double-free of usb memory upon submiturb error Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 017/144] Revert "USB: rio500: simplify locking" Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 018/144] usb: iowarrior: fix deadlock on disconnect Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 019/144] sound: fix a memory leak bug Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 020/144] mmc: cavium: Set the correct dma max segment size for mmc_host Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 021/144] mmc: cavium: Add the missing dma unmap when the dma has finished Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 022/144] loop: set PF_MEMALLOC_NOIO for the worker thread Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 023/144] bdev: Fixup error handling in blkdev_get() Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 024/144] Input: usbtouchscreen - initialize PM mutex before using it Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 025/144] Input: elantech - enable SMBus on new (2018+) systems Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 026/144] Input: synaptics - enable RMI mode for HP Spectre X360 Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 027/144] x86/mm: Check for pfn instead of page in vmalloc_sync_one() Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 028/144] x86/mm: Sync also unmappings in vmalloc_sync_all() Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 029/144] mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 030/144] coresight: Fix DEBUG_LOCKS_WARN_ON for uninitialized attribute Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 031/144] perf annotate: Fix s390 gap between kernel end and module start Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 032/144] perf db-export: Fix thread__exec_comm() Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 033/144] perf record: Fix module size on s390 Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 034/144] x86/purgatory: Do not use __builtin_memcpy and __builtin_memset Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 035/144] x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 036/144] genirq/affinity: Create affinity mask for single vector Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 037/144] gfs2: gfs2_walk_metadata fix Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 038/144] usb: host: xhci-rcar: Fix timeout in xhci_suspend() Greg Kroah-Hartman
2019-08-14 16:59 ` Greg Kroah-Hartman [this message]
2019-08-14 16:59 ` [PATCH 5.2 040/144] usb: typec: ucsi: ccg: Fix uninitilized symbol error Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 041/144] usb: typec: tcpm: free log buf memory when remove debug file Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 042/144] usb: typec: tcpm: remove tcpm dir if no children Greg Kroah-Hartman
2019-08-14 16:59 ` [PATCH 5.2 043/144] usb: typec: tcpm: Add NULL check before dereferencing config Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 044/144] usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 045/144] can: rcar_canfd: fix possible IRQ storm on high load Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 046/144] can: flexcan: fix stop mode acknowledgment Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 047/144] can: flexcan: fix an use-after-free in flexcan_setup_stop_mode() Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 048/144] can: peak_usb: fix potential double kfree_skb() Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 049/144] powerpc: fix off by one in max_zone_pfn initialization for ZONE_DMA Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 050/144] netfilter: nfnetlink: avoid deadlock due to synchronous request_module Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 051/144] vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 052/144] vfio-ccw: Dont call cp_free if we are processing a channel program Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 053/144] netfilter: Fix rpfilter dropping vrf packets by mistake Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 054/144] netfilter: nf_tables: fix module autoload for redir Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 055/144] netfilter: conntrack: always store window size un-scaled Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 056/144] netfilter: nft_hash: fix symhash with modulus one Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 057/144] scripts/sphinx-pre-install: fix script for RHEL/CentOS Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 058/144] scripts/sphinx-pre-install: dont use LaTeX with CentOS 7 Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 059/144] scripts/sphinx-pre-install: fix latexmk dependencies Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 060/144] rq-qos: dont reset has_sleepers on spurious wakeups Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 061/144] rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 062/144] rq-qos: use a mb for got_token Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 063/144] netfilter: nf_tables: Support auto-loading for inet nat Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 064/144] drm/amd/display: No audio endpoint for Dell MST display Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 065/144] drm/amd/display: Clock does not lower in Updateplanes Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 066/144] drm/amd/display: Wait for backlight programming completion in set backlight level Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 067/144] drm/amd/display: fix DMCU hang when going into Modern Standby Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 068/144] drm/amd/display: use encoders engine id to find matched free audio device Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 069/144] drm/amd/display: put back front end initialization sequence Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 070/144] drm/amd/display: allocate 4 ddc engines for RV2 Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 071/144] drm/amd/display: Fix dc_create failure handling and 666 color depths Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 072/144] drm/amd/display: Only enable audio if speaker allocation exists Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 073/144] drm/amd/display: Increase size of audios array Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 074/144] iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 075/144] nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 076/144] mac80211: fix possible memory leak in ieee80211_assign_beacon Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 077/144] mac80211: dont warn about CW params when not using them Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 078/144] allocate_flower_entry: should check for null deref Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 079/144] hwmon: (occ) Fix division by zero issue Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 080/144] hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 081/144] ARM: dts: imx6ul: fix clock frequency property name of I2C buses Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 082/144] powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 083/144] arm64: Force SSBS on context switch Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 084/144] arm64: entry: SP Alignment Fault doesnt write to FAR_EL1 Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 085/144] iommu/vt-d: Check if domain->pgd was allocated Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 086/144] drm/msm/dpu: Correct dpu encoder spinlock initialization Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 087/144] drm: silence variable conn set but not used Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 088/144] arm64: dts: imx8mm: Correct SAI3 RXC/TXFS pins mux option #1 Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 089/144] arm64: dts: imx8mq: fix SAI compatible Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 090/144] cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 091/144] s390/qdio: add sanity checks to the fast-requeue path Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 092/144] ALSA: compress: Fix regression on compressed capture streams Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 093/144] ALSA: compress: Prevent bypasses of set_params Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 094/144] ALSA: compress: Dont allow paritial drain operations on capture streams Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 095/144] ALSA: compress: Be more restrictive about when a drain is allowed Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 096/144] perf script: Fix off by one in brstackinsn IPC computation Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 097/144] perf tools: Fix proper buffer size for feature processing Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 098/144] perf stat: Fix segfault for event group in repeat mode Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 099/144] perf session: Fix loading of compressed data split across adjacent records Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 100/144] perf probe: Avoid calling freeing routine multiple times for same pointer Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 101/144] drbd: dynamically allocate shash descriptor Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 102/144] ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() Greg Kroah-Hartman
2019-08-14 17:00 ` [PATCH 5.2 103/144] nvme: ignore subnqn for ADATA SX6000LNP Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 104/144] nvme: fix memory leak caused by incorrect subsystem free Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 105/144] ARM: davinci: fix sleep.S build error on ARMv4 Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 106/144] ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 107/144] scsi: megaraid_sas: fix panic on loading firmware crashdump Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 108/144] scsi: ibmvfc: fix WARN_ON during event pool release Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 109/144] scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 110/144] test_firmware: fix a memory leak bug Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 111/144] tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 112/144] perf/x86/intel: Fix SLOTS PEBS event constraint Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 113/144] perf/x86/intel: Fix invalid Bit 13 for Icelake MSR_OFFCORE_RSP_x register Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 114/144] perf/x86: Apply more accurate check on hypervisor platform Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 115/144] perf/core: Fix creating kernel counters for PMUs that override event->cpu Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 116/144] s390/dma: provide proper ARCH_ZONE_DMA_BITS value Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 117/144] gen_compile_commands: lower the entry count threshold Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 118/144] HID: sony: Fix race condition between rumble and device remove Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 119/144] ALSA: usb-audio: fix a memory leak bug Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 120/144] KVM/nSVM: properly map nested VMCB Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 121/144] can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 122/144] can: peak_usb: pcan_usb_fd: " Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 123/144] hwmon: (nct7802) Fix wrong detection of in4 presence Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 124/144] hwmon: (lm75) Fixup tmp75b clr_mask Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 125/144] drm/i915: Fix wrong escape clock divisor init for GLK Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 126/144] ALSA: firewire: fix a memory leak bug Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 127/144] ALSA: hiface: fix multiple memory leak bugs Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 128/144] ALSA: hda - Dont override global PCM hw info flag Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 129/144] ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 130/144] mac80211: dont WARN on short WMM parameters from AP Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 131/144] dax: dax_layout_busy_page() should not unmap cow pages Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 132/144] SMB3: Fix deadlock in validate negotiate hits reconnect Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 133/144] smb3: send CAP_DFS capability during session setup Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 134/144] NFSv4: Fix delegation state recovery Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 135/144] NFSv4: Check the return value of update_open_stateid() Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 136/144] NFSv4: Fix an Oops in nfs4_do_setattr Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 137/144] KVM: Fix leak vCPUs VMCS value into other pCPU Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 138/144] KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 139/144] mwifiex: fix 802.11n/WPA detection Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 140/144] iwlwifi: dont unmap as page memory that was mapped as single Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 141/144] iwlwifi: mvm: fix an out-of-bound access Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 142/144] iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 143/144] iwlwifi: mvm: dont send GEO_TX_POWER_LIMIT on version < 41 Greg Kroah-Hartman
2019-08-14 17:01 ` [PATCH 5.2 144/144] iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support Greg Kroah-Hartman
2019-08-14 23:16 ` [PATCH 5.2 000/144] 5.2.9-stable review kernelci.org bot
2019-08-15 1:34 ` Naresh Kamboju
2019-08-15 7:19 ` Greg Kroah-Hartman
2019-08-15 15:18 ` Guenter Roeck
2019-08-15 19:37 ` Greg Kroah-Hartman
2019-08-16 2:07 ` shuah
2019-08-16 6:39 ` Kelsey Skunberg
2019-08-16 7:15 ` Greg Kroah-Hartman
2019-08-16 9:21 ` Thierry Reding
2019-08-16 9:40 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190814165801.457895746@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=andreyknvl@google.com \
--cc=dtor@chromium.org \
--cc=jkosina@suse.cz \
--cc=linux-kernel@vger.kernel.org \
--cc=oneukum@suse.com \
--cc=stable@vger.kernel.org \
--cc=stern@rowland.harvard.edu \
--cc=suzuki.poulose@arm.com \
--cc=syzbot+d1fedb1c1fdb07fca507@syzkaller.appspotmail.com \
--cc=syzkaller-bugs@googlegroups.com \
--cc=tomoki.sekiyama@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).