stable.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	stable@vger.kernel.org, Ondrej Mosnacek <omosnace@redhat.com>,
	Paul Moore <paul@paul-moore.com>
Subject: [PATCH 5.10 011/188] selinux: fix cond_list corruption when changing booleans
Date: Mon, 12 Apr 2021 10:38:45 +0200	[thread overview]
Message-ID: <20210412084014.039733562@linuxfoundation.org> (raw)
In-Reply-To: <20210412084013.643370347@linuxfoundation.org>

From: Ondrej Mosnacek <omosnace@redhat.com>

commit d8f5f0ea5b86300390b026b6c6e7836b7150814a upstream.

Currently, duplicate_policydb_cond_list() first copies the whole
conditional avtab and then tries to link to the correct entries in
cond_dup_av_list() using avtab_search(). However, since the conditional
avtab may contain multiple entries with the same key, this approach
often fails to find the right entry, potentially leading to wrong rules
being activated/deactivated when booleans are changed.

To fix this, instead start with an empty conditional avtab and add the
individual entries one-by-one while building the new av_lists. This
approach leads to the correct result, since each entry is present in the
av_lists exactly once.

The issue can be reproduced with Fedora policy as follows:

    # sesearch -s ftpd_t -t public_content_rw_t -c dir -p create -A
    allow ftpd_t non_security_file_type:dir { add_name create getattr ioctl link lock open read remove_name rename reparent rmdir search setattr unlink watch watch_reads write }; [ ftpd_full_access ]:True
    allow ftpd_t public_content_rw_t:dir { add_name create link remove_name rename reparent rmdir setattr unlink watch watch_reads write }; [ ftpd_anon_write ]:True
    # setsebool ftpd_anon_write=off ftpd_connect_all_unreserved=off ftpd_connect_db=off ftpd_full_access=off

On fixed kernels, the sesearch output is the same after the setsebool
command:

    # sesearch -s ftpd_t -t public_content_rw_t -c dir -p create -A
    allow ftpd_t non_security_file_type:dir { add_name create getattr ioctl link lock open read remove_name rename reparent rmdir search setattr unlink watch watch_reads write }; [ ftpd_full_access ]:True
    allow ftpd_t public_content_rw_t:dir { add_name create link remove_name rename reparent rmdir setattr unlink watch watch_reads write }; [ ftpd_anon_write ]:True

While on the broken kernels, it will be different:

    # sesearch -s ftpd_t -t public_content_rw_t -c dir -p create -A
    allow ftpd_t non_security_file_type:dir { add_name create getattr ioctl link lock open read remove_name rename reparent rmdir search setattr unlink watch watch_reads write }; [ ftpd_full_access ]:True
    allow ftpd_t non_security_file_type:dir { add_name create getattr ioctl link lock open read remove_name rename reparent rmdir search setattr unlink watch watch_reads write }; [ ftpd_full_access ]:True
    allow ftpd_t non_security_file_type:dir { add_name create getattr ioctl link lock open read remove_name rename reparent rmdir search setattr unlink watch watch_reads write }; [ ftpd_full_access ]:True

While there, also simplify the computation of nslots. This changes the
nslots values for nrules 2 or 3 to just two slots instead of 4, which
makes the sequence more consistent.

Cc: stable@vger.kernel.org
Fixes: c7c556f1e81b ("selinux: refactor changing booleans")
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 security/selinux/ss/avtab.c       |   86 +++++++++++---------------------------
 security/selinux/ss/avtab.h       |    2 
 security/selinux/ss/conditional.c |   12 ++---
 3 files changed, 32 insertions(+), 68 deletions(-)

--- a/security/selinux/ss/avtab.c
+++ b/security/selinux/ss/avtab.c
@@ -308,24 +308,10 @@ void avtab_init(struct avtab *h)
 	h->mask = 0;
 }
 
-int avtab_alloc(struct avtab *h, u32 nrules)
+static int avtab_alloc_common(struct avtab *h, u32 nslot)
 {
-	u32 shift = 0;
-	u32 work = nrules;
-	u32 nslot;
-
-	if (nrules == 0)
-		goto avtab_alloc_out;
-
-	while (work) {
-		work  = work >> 1;
-		shift++;
-	}
-	if (shift > 2)
-		shift = shift - 2;
-	nslot = 1 << shift;
-	if (nslot > MAX_AVTAB_HASH_BUCKETS)
-		nslot = MAX_AVTAB_HASH_BUCKETS;
+	if (!nslot)
+		return 0;
 
 	h->htable = kvcalloc(nslot, sizeof(void *), GFP_KERNEL);
 	if (!h->htable)
@@ -333,59 +319,37 @@ int avtab_alloc(struct avtab *h, u32 nru
 
 	h->nslot = nslot;
 	h->mask = nslot - 1;
-
-avtab_alloc_out:
-	pr_debug("SELinux: %d avtab hash slots, %d rules.\n",
-	       h->nslot, nrules);
 	return 0;
 }
 
-int avtab_duplicate(struct avtab *new, struct avtab *orig)
+int avtab_alloc(struct avtab *h, u32 nrules)
 {
-	int i;
-	struct avtab_node *node, *tmp, *tail;
-
-	memset(new, 0, sizeof(*new));
+	int rc;
+	u32 nslot = 0;
 
-	new->htable = kvcalloc(orig->nslot, sizeof(void *), GFP_KERNEL);
-	if (!new->htable)
-		return -ENOMEM;
-	new->nslot = orig->nslot;
-	new->mask = orig->mask;
-
-	for (i = 0; i < orig->nslot; i++) {
-		tail = NULL;
-		for (node = orig->htable[i]; node; node = node->next) {
-			tmp = kmem_cache_zalloc(avtab_node_cachep, GFP_KERNEL);
-			if (!tmp)
-				goto error;
-			tmp->key = node->key;
-			if (tmp->key.specified & AVTAB_XPERMS) {
-				tmp->datum.u.xperms =
-					kmem_cache_zalloc(avtab_xperms_cachep,
-							GFP_KERNEL);
-				if (!tmp->datum.u.xperms) {
-					kmem_cache_free(avtab_node_cachep, tmp);
-					goto error;
-				}
-				tmp->datum.u.xperms = node->datum.u.xperms;
-			} else
-				tmp->datum.u.data = node->datum.u.data;
-
-			if (tail)
-				tail->next = tmp;
-			else
-				new->htable[i] = tmp;
-
-			tail = tmp;
-			new->nel++;
+	if (nrules != 0) {
+		u32 shift = 1;
+		u32 work = nrules >> 3;
+		while (work) {
+			work >>= 1;
+			shift++;
 		}
+		nslot = 1 << shift;
+		if (nslot > MAX_AVTAB_HASH_BUCKETS)
+			nslot = MAX_AVTAB_HASH_BUCKETS;
+
+		rc = avtab_alloc_common(h, nslot);
+		if (rc)
+			return rc;
 	}
 
+	pr_debug("SELinux: %d avtab hash slots, %d rules.\n", nslot, nrules);
 	return 0;
-error:
-	avtab_destroy(new);
-	return -ENOMEM;
+}
+
+int avtab_alloc_dup(struct avtab *new, const struct avtab *orig)
+{
+	return avtab_alloc_common(new, orig->nslot);
 }
 
 void avtab_hash_eval(struct avtab *h, char *tag)
--- a/security/selinux/ss/avtab.h
+++ b/security/selinux/ss/avtab.h
@@ -89,7 +89,7 @@ struct avtab {
 
 void avtab_init(struct avtab *h);
 int avtab_alloc(struct avtab *, u32);
-int avtab_duplicate(struct avtab *new, struct avtab *orig);
+int avtab_alloc_dup(struct avtab *new, const struct avtab *orig);
 struct avtab_datum *avtab_search(struct avtab *h, struct avtab_key *k);
 void avtab_destroy(struct avtab *h);
 void avtab_hash_eval(struct avtab *h, char *tag);
--- a/security/selinux/ss/conditional.c
+++ b/security/selinux/ss/conditional.c
@@ -605,7 +605,6 @@ static int cond_dup_av_list(struct cond_
 			struct cond_av_list *orig,
 			struct avtab *avtab)
 {
-	struct avtab_node *avnode;
 	u32 i;
 
 	memset(new, 0, sizeof(*new));
@@ -615,10 +614,11 @@ static int cond_dup_av_list(struct cond_
 		return -ENOMEM;
 
 	for (i = 0; i < orig->len; i++) {
-		avnode = avtab_search_node(avtab, &orig->nodes[i]->key);
-		if (WARN_ON(!avnode))
-			return -EINVAL;
-		new->nodes[i] = avnode;
+		new->nodes[i] = avtab_insert_nonunique(avtab,
+						       &orig->nodes[i]->key,
+						       &orig->nodes[i]->datum);
+		if (!new->nodes[i])
+			return -ENOMEM;
 		new->len++;
 	}
 
@@ -630,7 +630,7 @@ static int duplicate_policydb_cond_list(
 {
 	int rc, i, j;
 
-	rc = avtab_duplicate(&newp->te_cond_avtab, &origp->te_cond_avtab);
+	rc = avtab_alloc_dup(&newp->te_cond_avtab, &origp->te_cond_avtab);
 	if (rc)
 		return rc;
 



  parent reply	other threads:[~2021-04-12  8:52 UTC|newest]

Thread overview: 201+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-04-12  8:38 [PATCH 5.10 000/188] 5.10.30-rc1 review Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 001/188] xfrm/compat: Cleanup WARN()s that can be user-triggered Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 002/188] ALSA: aloop: Fix initialization of controls Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 003/188] ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 004/188] ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 005/188] ASoC: intel: atom: Stop advertising non working S24LE support Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 006/188] nfc: fix refcount leak in llcp_sock_bind() Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 007/188] nfc: fix refcount leak in llcp_sock_connect() Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 008/188] nfc: fix memory " Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 009/188] nfc: Avoid endless loops caused by repeated llcp_sock_connect() Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 010/188] selinux: make nslot handling in avtab more robust Greg Kroah-Hartman
2021-04-12  8:38 ` Greg Kroah-Hartman [this message]
2021-04-12  8:38 ` [PATCH 5.10 012/188] selinux: fix race between old and new sidtab Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 013/188] xen/evtchn: Change irq_info lock to raw_spinlock_t Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 014/188] net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 015/188] net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 016/188] net: dsa: lantiq_gswip: Dont use PHY auto polling Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 017/188] net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 018/188] drm/i915: Fix invalid access to ACPI _DSM objects Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 019/188] ACPI: processor: Fix build when CONFIG_ACPI_PROCESSOR=m Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 020/188] IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 021/188] LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 022/188] gcov: re-fix clang-11+ support Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 023/188] ia64: fix user_stack_pointer() for ptrace() Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 024/188] nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff Greg Kroah-Hartman
2021-04-12  8:38 ` [PATCH 5.10 025/188] ocfs2: fix deadlock between setattr and dio_end_io_write Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 026/188] fs: direct-io: fix missing sdio->boundary Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 027/188] ethtool: fix incorrect datatype in set_eee ops Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 028/188] of: property: fw_devlink: do not link ".*,nr-gpios" Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 029/188] parisc: parisc-agp requires SBA IOMMU driver Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 030/188] parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 031/188] ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 032/188] batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 033/188] ice: Continue probe on link/PHY errors Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 034/188] ice: Increase control queue timeout Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 035/188] ice: prevent ice_open and ice_stop during reset Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 036/188] ice: fix memory allocation call Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 037/188] ice: remove DCBNL_DEVRESET bit from PF state Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 038/188] ice: Fix for dereference of NULL pointer Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 039/188] ice: Use port number instead of PF ID for WoL Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 040/188] ice: Cleanup fltr list in case of allocation issues Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 041/188] iwlwifi: pcie: properly set LTR workarounds on 22000 devices Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 042/188] ice: fix memory leak of aRFS after resuming from suspend Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 043/188] net: hso: fix null-ptr-deref during tty device unregistration Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 044/188] libbpf: Fix bail out from ringbuf_process_ring() on error Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 045/188] bpf: Enforce that struct_ops programs be GPL-only Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 046/188] bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 047/188] ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 048/188] libbpf: Ensure umem pointer is non-NULL before dereferencing Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 049/188] libbpf: Restore umem state after socket create failure Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 050/188] libbpf: Only create rx and tx XDP rings when necessary Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 051/188] bpf: Refcount task stack in bpf_get_task_stack Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 052/188] bpf, sockmap: Fix sk->prot unhash op reset Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 053/188] bpf, sockmap: Fix incorrect fwd_alloc accounting Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 054/188] net: ensure mac header is set in virtio_net_hdr_to_skb() Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 055/188] virtio_net: Do not pull payload in skb->head Greg Kroah-Hartman
2021-04-12  9:11   ` Michael S. Tsirkin
2021-04-12 10:45     ` Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 056/188] i40e: Fix sparse warning: missing error code err Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 057/188] i40e: Fix sparse error: vsi->netdev could be null Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 058/188] i40e: Fix sparse error: uninitialized symbol ring Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 059/188] i40e: Fix sparse errors in i40e_txrx.c Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 060/188] vdpa/mlx5: Fix suspend/resume index restoration Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 061/188] net: sched: sch_teql: fix null-pointer dereference Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 062/188] net: sched: fix action overwrite reference counting Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 063/188] nl80211: fix beacon head validation Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 064/188] nl80211: fix potential leak of ACL params Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 065/188] cfg80211: check S1G beacon compat element length Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 066/188] mac80211: fix time-is-after bug in mlme Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 067/188] mac80211: fix TXQ AC confusion Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 068/188] net: hsr: Reset MAC header for Tx path Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 069/188] net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind() Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 070/188] net: let skb_orphan_partial wake-up waiters Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 071/188] thunderbolt: Fix a leak in tb_retimer_add() Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 072/188] thunderbolt: Fix off by one in tb_port_find_retimer() Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 073/188] usbip: add sysfs_lock to synchronize sysfs code paths Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 074/188] usbip: stub-dev " Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 075/188] usbip: vudc " Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 076/188] usbip: synchronize event handler with " Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 077/188] driver core: Fix locking bug in deferred_probe_timeout_work_func() Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 078/188] scsi: pm80xx: Fix chip initialization failure Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 079/188] scsi: target: iscsi: Fix zero tag inside a trace event Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 080/188] percpu: make pcpu_nr_empty_pop_pages per chunk type Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 081/188] i2c: turn recovery error on init to debug Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 082/188] KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 083/188] KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 084/188] KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn Greg Kroah-Hartman
2021-04-12  8:39 ` [PATCH 5.10 085/188] KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 086/188] KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 087/188] KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 088/188] KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 089/188] KVM: x86/mmu: Dont allow TDP MMU to yield when recovering NX pages Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 090/188] KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 091/188] net: sched: fix err handler in tcf_action_init() Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 092/188] ice: Refactor DCB related variables out of the ice_port_info struct Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 093/188] ice: Recognize 860 as iSCSI port in CEE mode Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 094/188] xfrm: interface: fix ipv4 pmtu check to honor ip header df Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 095/188] xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 096/188] remoteproc: qcom: pil_info: avoid 64-bit division Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 097/188] regulator: bd9571mwv: Fix AVS and DVFS voltage range Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 098/188] ARM: OMAP4: Fix PMIC voltage domains for bionic Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 099/188] ARM: OMAP4: PM: update ROM return address for OSWR and OFF Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 100/188] net: xfrm: Localize sequence counter per network namespace Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 101/188] esp: delete NETIF_F_SCTP_CRC bit from features for esp offload Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 102/188] ASoC: SOF: Intel: HDA: fix core status verification Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 103/188] ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 104/188] xfrm: Fix NULL pointer dereference on policy lookup Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 105/188] virtchnl: Fix layout of RSS structures Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 106/188] i40e: Added Asym_Pause to supported link modes Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 107/188] i40e: Fix kernel oops when i40e driver removes VFs Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 108/188] hostfs: fix memory handling in follow_link() Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 109/188] amd-xgbe: Update DMA coherency values Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 110/188] vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 111/188] geneve: " Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 112/188] sch_red: fix off-by-one checks in red_check_params() Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 113/188] drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 114/188] arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0 Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 115/188] xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 116/188] can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 117/188] can: isotp: " Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 118/188] mlxsw: spectrum: Fix ECN marking in tunnel decapsulation Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 119/188] ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 120/188] gianfar: Handle error code at MAC address change Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 121/188] net: dsa: Fix type was not set for devlink port Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 122/188] cxgb4: avoid collecting SGE_QBASE regs during traffic Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 123/188] net:tipc: Fix a double free in tipc_sk_mcast_rcv Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 124/188] ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 125/188] net/ncsi: Avoid channel_monitor hrtimer deadlock Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 126/188] net: qrtr: Fix memory leak on qrtr_tx_wait failure Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 127/188] nfp: flower: ignore duplicate merge hints from FW Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 128/188] net: phy: broadcom: Only advertise EEE for supported modes Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 129/188] I2C: JZ4780: Fix bug for Ingenic X1000 Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 130/188] ASoC: sunxi: sun4i-codec: fill ASoC card owner Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 131/188] net/mlx5e: Fix mapping of ct_label zero Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 132/188] net/mlx5e: Fix ethtool indication of connector type Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 133/188] net/mlx5: Dont request more than supported EQs Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 134/188] net/rds: Fix a use after free in rds_message_map_pages Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 135/188] xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 136/188] soc/fsl: qbman: fix conflicting alignment attributes Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 137/188] i40e: Fix display statistics for veb_tc Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 138/188] RDMA/rtrs-clt: Close rtrs client conn before destroying rtrs clt session files Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 139/188] drm/msm: Set drvdata to NULL when msm_drm_init() fails Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 140/188] net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 141/188] mptcp: forbit mcast-related sockopt on MPTCP sockets Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 142/188] scsi: ufs: core: Fix task management request completion timeout Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 143/188] scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 144/188] net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb Greg Kroah-Hartman
2021-04-12  8:40 ` [PATCH 5.10 145/188] net: macb: restore cmp registers on resume path Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 146/188] clk: fix invalid usage of list cursor in register Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 147/188] clk: fix invalid usage of list cursor in unregister Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 148/188] workqueue: Move the position of debug_work_activate() in __queue_work() Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 149/188] s390/cpcmd: fix inline assembly register clobbering Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 150/188] perf inject: Fix repipe usage Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 151/188] net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 152/188] openvswitch: fix send of uninitialized stack memory in ct limit reply Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 153/188] i2c: designware: Adjust bus_freq_hz when refuse high speed mode set Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 154/188] iwlwifi: fix 11ax disabled bit in the regulatory capability flags Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 155/188] can: mcp251x: fix support for half duplex SPI host controllers Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 156/188] tipc: increment the tmp aead refcnt before attaching it Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 157/188] net: hns3: clear VF down state bit before request link status Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 158/188] net/mlx5: Fix placement of log_max_flow_counter Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 159/188] net/mlx5: Fix PPLM register mapping Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 160/188] net/mlx5: Fix PBMC " Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 161/188] RDMA/cxgb4: check for ipv6 address properly while destroying listener Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 162/188] perf report: Fix wrong LBR block sorting Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 163/188] RDMA/qedr: Fix kernel panic when trying to access recv_cq Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 164/188] drm/vc4: crtc: Reduce PV fifo threshold on hvs4 Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 165/188] i40e: Fix parameters in aq_get_phy_register() Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 166/188] RDMA/addr: Be strict with gid size Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 167/188] vdpa/mlx5: should exclude header length and fcs from mtu Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 168/188] vdpa/mlx5: Fix wrong use of bit numbers Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 169/188] RAS/CEC: Correct ce_add_elem()s returned values Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 170/188] clk: socfpga: fix iomem pointer cast on 64-bit Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 171/188] lockdep: Address clang -Wformat warning printing for %hd Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 172/188] dt-bindings: net: ethernet-controller: fix typo in NVMEM Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 173/188] net: sched: bump refcount for new action in ACT replace mode Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 174/188] gpiolib: Read "gpio-line-names" from a firmware node Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 175/188] cfg80211: remove WARN_ON() in cfg80211_sme_connect Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 176/188] net: tun: set tun->dev->addr_len during TUNSETLINK processing Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 177/188] drivers: net: fix memory leak in atusb_probe Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 178/188] drivers: net: fix memory leak in peak_usb_create_dev Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 179/188] net: mac802154: Fix general protection fault Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 180/188] net: ieee802154: nl-mac: fix check on panid Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 181/188] net: ieee802154: fix nl802154 del llsec key Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 182/188] net: ieee802154: fix nl802154 del llsec dev Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 183/188] net: ieee802154: fix nl802154 add llsec key Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 184/188] net: ieee802154: fix nl802154 del llsec devkey Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 185/188] net: ieee802154: forbid monitor for set llsec params Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 186/188] net: ieee802154: forbid monitor for del llsec seclevel Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 187/188] net: ieee802154: stop dump llsec params for monitors Greg Kroah-Hartman
2021-04-12  8:41 ` [PATCH 5.10 188/188] Revert "net: sched: bump refcount for new action in ACT replace mode" Greg Kroah-Hartman
2021-04-12 13:03 ` [PATCH 5.10 000/188] 5.10.30-rc1 review Andrei Rabusov
2021-04-12 13:12 ` Jon Hunter
2021-04-12 19:07 ` Florian Fainelli
2021-04-12 20:12   ` Patrick Mccormick
2021-04-13  1:34 ` Shuah Khan
2021-04-13  3:36 ` Guenter Roeck
2021-04-13  5:05 ` Naresh Kamboju
2021-04-13  6:13 ` Samuel Zou
2021-04-13  8:48 ` Pavel Machek
2021-04-13 10:44 ` Sudip Mukherjee

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20210412084014.039733562@linuxfoundation.org \
    --to=gregkh@linuxfoundation.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=omosnace@redhat.com \
    --cc=paul@paul-moore.com \
    --cc=stable@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).