1. 19 Apr, 2024 12 commits
  2. 12 Apr, 2024 1 commit
    • Yicong Yang's avatar
      arm64: arm_pmuv3: Correctly extract and check the PMUVer · b782e8d0
      Yicong Yang authored
      Currently we're using "sbfx" to extract the PMUVer from ID_AA64DFR0_EL1
      and skip the init/reset if no PMU present when the extracted PMUVer is
      negative or is zero. However for PMUv3p8 the PMUVer will be 0b1000 and
      PMUVer extracted by "sbfx" will always be negative and we'll skip the
      init/reset in __init_el2_debug/reset_pmuserenr_el0 unexpectedly.
      
      So this patch use "ubfx" instead of "sbfx" to extract the PMUVer. If
      the PMUVer is implementation defined (0b1111) or not implemented(0b0000)
      then skip the reset/init. Previously we'll also skip the init/reset
      if the PMUVer is higher than the version we known (currently PMUv3p9),
      with this patch we'll only skip if the PMU is not implemented or
      implementation defined. This keeps consistence with how we probe
      the PMU in the driver with pmuv3_implemented().
      Signed-off-by: default avatarYicong Yang <yangyicong@hisilicon.com>
      Link: https://lore.kernel.org/r/20240411123030.7201-1-yangyicong@huawei.comSigned-off-by: default avatarWill Deacon <will@kernel.org>
      b782e8d0
  3. 10 Apr, 2024 1 commit
  4. 09 Apr, 2024 12 commits
  5. 07 Apr, 2024 4 commits
  6. 06 Apr, 2024 10 commits
    • Linus Torvalds's avatar
      Merge tag 'nfsd-6.9-2' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux · f2f80ac8
      Linus Torvalds authored
      Pull nfsd fixes from Chuck Lever:
      
       - Address a slow memory leak with RPC-over-TCP
      
       - Prevent another NFS4ERR_DELAY loop during CREATE_SESSION
      
      * tag 'nfsd-6.9-2' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux:
        nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
        SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
      f2f80ac8
    • Linus Torvalds's avatar
      Merge tag 'i2c-for-6.9-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux · cf17b950
      Linus Torvalds authored
      Pull i2c fix from Wolfram Sang:
       "A host driver build fix"
      
      * tag 'i2c-for-6.9-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
        i2c: pxa: hide unused icr_bits[] variable
      cf17b950
    • Linus Torvalds's avatar
      Merge tag 'xfs-6.9-fixes-2' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux · 9520c192
      Linus Torvalds authored
      Pull xfs fix from Chandan Babu:
      
       - Allow creating new links to special files which were not associated
         with a project quota
      
      * tag 'xfs-6.9-fixes-2' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:
        xfs: allow cross-linking special files without project quota
      9520c192
    • Linus Torvalds's avatar
      Merge tag '6.9-rc2-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6 · 119c2894
      Linus Torvalds authored
      Pull smb client fixes from Steve French:
      
       - fix to retry close to avoid potential handle leaks when server
         returns EBUSY
      
       - DFS fixes including a fix for potential use after free
      
       - fscache fix
      
       - minor strncpy cleanup
      
       - reconnect race fix
      
       - deal with various possible UAF race conditions tearing sessions down
      
      * tag '6.9-rc2-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6:
        smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
        smb: client: fix potential UAF in smb2_is_network_name_deleted()
        smb: client: fix potential UAF in is_valid_oplock_break()
        smb: client: fix potential UAF in smb2_is_valid_oplock_break()
        smb: client: fix potential UAF in smb2_is_valid_lease_break()
        smb: client: fix potential UAF in cifs_stats_proc_show()
        smb: client: fix potential UAF in cifs_stats_proc_write()
        smb: client: fix potential UAF in cifs_dump_full_key()
        smb: client: fix potential UAF in cifs_debug_files_proc_show()
        smb3: retrying on failed server close
        smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
        smb: client: handle DFS tcons in cifs_construct_tcon()
        smb: client: refresh referral without acquiring refpath_lock
        smb: client: guarantee refcounted children from parent session
        cifs: Fix caching to try to do open O_WRONLY as rdwr on server
        smb: client: fix UAF in smb2_reconnect_server()
        smb: client: replace deprecated strncpy with strscpy
      119c2894
    • Borislav Petkov (AMD)'s avatar
      x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk · b377c66a
      Borislav Petkov (AMD) authored
      srso_alias_untrain_ret() is special code, even if it is a dummy
      which is called in the !SRSO case, so annotate it like its real
      counterpart, to address the following objtool splat:
      
        vmlinux.o: warning: objtool: .export_symbol+0x2b290: data relocation to !ENDBR: srso_alias_untrain_ret+0x0
      
      Fixes: 4535e1a4 ("x86/bugs: Fix the SRSO mitigation on Zen3/4")
      Signed-off-by: default avatarBorislav Petkov (AMD) <bp@alien8.de>
      Signed-off-by: default avatarIngo Molnar <mingo@kernel.org>
      Cc: Linus Torvalds <torvalds@linux-foundation.org>
      Link: https://lore.kernel.org/r/20240405144637.17908-1-bp@kernel.org
      b377c66a
    • Ingo Molnar's avatar
      Merge branch 'linus' into x86/urgent, to pick up dependent commit · 5f2ca44e
      Ingo Molnar authored
      We want to fix:
      
        0e110732 ("x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO")
      
      So merge in Linus's latest into x86/urgent to have it available.
      Signed-off-by: default avatarIngo Molnar <mingo@kernel.org>
      5f2ca44e
    • Wolfram Sang's avatar
      Merge tag 'i2c-host-fixes-6.9-rc3' of... · 5ceeabb0
      Wolfram Sang authored
      Merge tag 'i2c-host-fixes-6.9-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-current
      
      An unused const variable kind of error has been fixed by placing
      the definition of icr_bits[] inside the ifdef block where it is
      used.
      5ceeabb0
    • Linus Torvalds's avatar
      Merge tag 'firewire-fixes-6.9-rc2' of... · 6c6e47d6
      Linus Torvalds authored
      Merge tag 'firewire-fixes-6.9-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394
      
      Pull firewire fixes from Takashi Sakamoto:
       "The firewire-ohci kernel module has a parameter for verbose kernel
        logging. It is well-known that it logs the spurious IRQ for bus-reset
        event due to the unmasked register for IRQ event. This update fixes
        the issue"
      
      * tag 'firewire-fixes-6.9-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394:
        firewire: ohci: mask bus reset interrupts between ISR and bottom half
      6c6e47d6
    • Adam Goldman's avatar
      firewire: ohci: mask bus reset interrupts between ISR and bottom half · 752e3c53
      Adam Goldman authored
      In the FireWire OHCI interrupt handler, if a bus reset interrupt has
      occurred, mask bus reset interrupts until bus_reset_work has serviced and
      cleared the interrupt.
      
      Normally, we always leave bus reset interrupts masked. We infer the bus
      reset from the self-ID interrupt that happens shortly thereafter. A
      scenario where we unmask bus reset interrupts was introduced in 2008 in
      a007bb85: If
      OHCI_PARAM_DEBUG_BUSRESETS (8) is set in the debug parameter bitmask, we
      will unmask bus reset interrupts so we can log them.
      
      irq_handler logs the bus reset interrupt. However, we can't clear the bus
      reset event flag in irq_handler, because we won't service the event until
      later. irq_handler exits with the event flag still set. If the
      corresponding interrupt is still unmasked, the first bus reset will
      usually freeze the system due to irq_handler being called again each
      time it exits. This freeze can be reproduced by loading firewire_ohci
      with "modprobe firewire_ohci debug=-1" (to enable all debugging output).
      Apparently there are also some cases where bus_reset_work will get called
      soon enough to clear the event, and operation will continue normally.
      
      This freeze was first reported a few months after a007bb85 was committed,
      but until now it was never fixed. The debug level could safely be set
      to -1 through sysfs after the module was loaded, but this would be
      ineffectual in logging bus reset interrupts since they were only
      unmasked during initialization.
      
      irq_handler will now leave the event flag set but mask bus reset
      interrupts, so irq_handler won't be called again and there will be no
      freeze. If OHCI_PARAM_DEBUG_BUSRESETS is enabled, bus_reset_work will
      unmask the interrupt after servicing the event, so future interrupts
      will be caught as desired.
      
      As a side effect to this change, OHCI_PARAM_DEBUG_BUSRESETS can now be
      enabled through sysfs in addition to during initial module loading.
      However, when enabled through sysfs, logging of bus reset interrupts will
      be effective only starting with the second bus reset, after
      bus_reset_work has executed.
      Signed-off-by: default avatarAdam Goldman <adamg@pobox.com>
      Signed-off-by: default avatarTakashi Sakamoto <o-takashi@sakamocchi.jp>
      752e3c53
    • Linus Torvalds's avatar
      Merge tag 'spi-fix-v6.9-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi · 104db052
      Linus Torvalds authored
      Pull spi fixes from Mark Brown:
       "A few small driver specific fixes, the most important being the
        s3c64xx change which is likely to be hit during normal operation"
      
      * tag 'spi-fix-v6.9-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:
        spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe
        spi: spi-fsl-lpspi: remove redundant spi_controller_put call
        spi: s3c64xx: Use DMA mode from fifo size
      104db052