- Kernel - mailweb.openeuler.org

[PATCH openEuler-1.0-LTS] block: check flags of claimed slave bdev to fix uaf for bd_holder_dir
by Yongqiang Liu 15 Nov '22

15 Nov '22

From: Li Lingfeng <lilingfeng3(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I60QE9 CVE: NA -------------------------------- As explained in 0eb440122f89 ("block: fix use after free for bd_holder_dir"), we should make sure the "disk" is still live and then grab a reference to 'bd_holder_dir'. However, the "disk" should be "the claimed slave bdev" rather than "the holding disk". Fixes: 0eb440122f89 ("block: fix use after free for bd_holder_dir") Signed-off-by: Li Lingfeng <lilingfeng3(a)huawei.com> Reviewed-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Jason Yan <yanaijie(a)huawei.com> Signed-off-by: Yongqiang Liu <liuyongqiang13(a)huawei.com> --- fs/block_dev.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/block_dev.c b/fs/block_dev.c index f2932e84055d..2680092c022d 100644 --- a/fs/block_dev.c +++ b/fs/block_dev.c @@ -1310,7 +1310,7 @@ int bd_link_disk_holder(struct block_device *bdev, struct gendisk *disk) * the holder directory. Hold on to it. */ down_read(&bdev->bd_disk->lookup_sem); - if (!(disk->flags & GENHD_FL_UP)) { + if (!(bdev->bd_disk->flags & GENHD_FL_UP)) { up_read(&bdev->bd_disk->lookup_sem); return -ENODEV; } -- 2.25.1

1 0

[PATCH OLK-5.10 00/14]arm64: add machine checksafe support
by Tong Tiangen 15 Nov '22

15 Nov '22

With the increase of memory capacity and density, the probability of memory error increases. The increasing size and density of server RAM in the data center and cloud have shown increased uncorrectable memory errors. Currently, the kernel has a mechanism to recover from hardware memory errors. This patchset provides an new recovery mechanism. For arm64, the hardware memory error handling is do_sea() which divided into two cases: 1. The user state consumed the memory errors, the solution is kill the user process and isolate the error page. 2. The kernel state consumed the memory errors, the solution is panic. For case 2, Undifferentiated panic maybe not the optimal choice, it can be handled better, in some scenarios, we can avoid panic, such as uaccess, if the uaccess fails due to memory error, only the user process will be affected, kill the user process and isolate the user page with hardware memory errors is a better choice. Tong Tiangen (14): Revert "arm64: ras: copy_from_user scenario support uce kernel recovery" Revert "arm64: config: enable CONFIG_ARM64_UCE_KERNEL_RECOVERY" uaccess: add generic fallback version of copy_mc_to_user() arm64: extable: add new extable type "__mc_ex_table" arm64: add support for machine check error safe arm64: copy_form/to_user support machine check safe arm64: get/put_user support machine check safe arm64: add cow to machine check safe arm64: introduce copy_mc_to_kernel() implementation arm64: add dump_user_range() to machine check safe arm64: add machine check safe sysctl interface arm64/__mc_ex_table: search_module_mc_extables should not use num_exentries arm64/__mc_ex_table: fix compile error when CONFIG_ARCH_HAS_COPY_MC=n arm64/__mc_ex_table: fix __mc_ex_table do_sort() issue Documentation/admin-guide/sysctl/kernel.rst | 38 ++-- arch/arm64/Kconfig | 14 +- arch/arm64/configs/openeuler_defconfig | 1 - arch/arm64/include/asm/asm-uaccess.h | 5 + arch/arm64/include/asm/assembler.h | 26 ++- arch/arm64/include/asm/exception.h | 13 -- arch/arm64/include/asm/extable.h | 1 + arch/arm64/include/asm/mte.h | 4 + arch/arm64/include/asm/page.h | 10 + arch/arm64/include/asm/processor.h | 2 + arch/arm64/include/asm/string.h | 5 + arch/arm64/include/asm/uaccess.h | 70 +++++-- arch/arm64/lib/Makefile | 10 +- arch/arm64/lib/copy_from_user.S | 19 +- arch/arm64/lib/copy_page_mc.S | 80 ++++++++ arch/arm64/lib/copy_to_user.S | 10 +- arch/arm64/lib/memcpy_mc.S | 73 ++++++++ arch/arm64/lib/mte.S | 19 ++ arch/arm64/mm/Makefile | 2 - arch/arm64/mm/copypage.c | 37 +++- arch/arm64/mm/extable.c | 12 ++ arch/arm64/mm/fault.c | 36 +++- arch/arm64/mm/uce_kernel_recovery.c | 198 -------------------- arch/powerpc/include/asm/uaccess.h | 1 + arch/x86/include/asm/uaccess.h | 1 + fs/coredump.c | 2 + include/asm-generic/vmlinux.lds.h | 19 +- include/linux/extable.h | 23 +++ include/linux/highmem.h | 8 + include/linux/module.h | 11 ++ include/linux/sched.h | 1 + include/linux/uaccess.h | 9 + kernel/extable.c | 29 +++ kernel/module.c | 38 ++++ kernel/sysctl.c | 11 ++ lib/iov_iter.c | 12 +- mm/memory.c | 2 +- scripts/sorttable.h | 27 +++ 38 files changed, 583 insertions(+), 296 deletions(-) create mode 100644 arch/arm64/lib/copy_page_mc.S create mode 100644 arch/arm64/lib/memcpy_mc.S delete mode 100644 arch/arm64/mm/uce_kernel_recovery.c -- 2.25.1

1 14

[PATCH OLK-5.10 0/9] hulk backport patchs for ascend feature
by Wang Wensheng 14 Nov '22

14 Nov '22

From: Zhang Jian <zhangjian210(a)huawei.com> It includes these patches: Six patches for sharepool bugfix and ascend feature One patch for gic bugfix One patch for adding ascend characteristic switch One patch for export some interface for ascend Guo Mengqi (1): sharepool: fix sp_alloc_populate no fallocate bug Wang Wensheng (1): ascend/arm64: Add ascend_enable_all kernel parameter Xu Qiang (2): irq-gic-v3: Fix too large cpu_count mm/sharepool: Fix add group failed with errno 28 Yuan Can (1): ascend: export interfaces required by ascend drivers Zhang Zekun (2): mm/sharepool: Use "tgid" instead of "pid" to find a task mm: sharepool: Fix static check warning Zhou Guanghui (2): mm: fix alloc CDM node memory for MPOL_BIND mm: fix ignore cpuset enforcement arch/arm64/kernel/cpufeature.c | 2 +- arch/arm64/mm/init.c | 42 ++++++++++ drivers/irqchip/irq-gic-v3-its.c | 10 +++ include/linux/share_pool.h | 28 +++---- kernel/exit.c | 8 ++ kernel/fork.c | 4 - kernel/power/autosleep.c | 1 + kernel/workqueue.c | 3 + mm/hugetlb.c | 2 +- mm/memcontrol.c | 2 +- mm/oom_kill.c | 1 + mm/page_alloc.c | 6 +- mm/share_pool.c | 136 ++++++++++++++----------------- mm/vmalloc.c | 3 + 14 files changed, 152 insertions(+), 96 deletions(-) -- 2.17.1

1 9

openEuler Kernel SIG 双周例会
by openEuler conference 14 Nov '22

14 Nov '22

您好！ Kernel SIG 邀请您参加 2022-11-18 14:00 召开的Zoom会议(自动录制) 会议主题：openEuler Kernel SIG 双周例会会议内容： 1. 进展update 2. 议题征集中欢迎大家积极申报议题~（新增议题可以回复邮件反馈，或者录入会议看板）会议链接：https://us06web.zoom.us/j/87237435945?pwd=OGJBQS9OYnNuNEpHRmZLZ2ptcENZUT09 会议纪要：https://etherpad.openeuler.org/p/Kernel-meetings 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler Kernel SIG invites you to attend the Zoom conference(auto recording) will be held at 2022-11-18 14:00, The subject of the conference is openEuler Kernel SIG 双周例会, Summary: 1. 进展update 2. 议题征集中欢迎大家积极申报议题~（新增议题可以回复邮件反馈，或者录入会议看板） You can join the meeting at https://us06web.zoom.us/j/87237435945?pwd=OGJBQS9OYnNuNEpHRmZLZ2ptcENZUT09. Add topics at https://etherpad.openeuler.org/p/Kernel-meetings. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information: https://openeuler.org/en/

1 0

[PATCH openEuler-1.0-LTS 1/2] Revert "block: Fix UAF in bd_link_disk_holder()"
by Yongqiang Liu 14 Nov '22

14 Nov '22

From: Yu Kuai <yukuai3(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I60QE9 CVE: NA -------------------------------- This reverts commit 01b1ec1d028fdd78d0c763578e4b804240283b24. Official solution will be applied to mainline, and this solution can't fix uaf for 'bd_holder_dir' thoroughly. hence revert this temporary solution. Officail solution will be backported in the next patch. Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Jason Yan <yanaijie(a)huawei.com> Signed-off-by: Yongqiang Liu <liuyongqiang13(a)huawei.com> --- fs/block_dev.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/block_dev.c b/fs/block_dev.c index 7e891e08d0ce..9868b21b8ef9 100644 --- a/fs/block_dev.c +++ b/fs/block_dev.c @@ -1650,7 +1650,6 @@ static int __blkdev_get(struct block_device *bdev, fmode_t mode, int for_part) } } bdev->bd_openers++; - kobject_get(bdev->bd_part->holder_dir); if (for_part) bdev->bd_part_count++; if (mode & FMODE_WRITE) @@ -1926,7 +1925,6 @@ static void __blkdev_put(struct block_device *bdev, fmode_t mode, int for_part) if (for_part) bdev->bd_part_count--; - kobject_put(bdev->bd_part->holder_dir); if (!--bdev->bd_openers) { WARN_ON_ONCE(bdev->bd_holders); sync_blockdev(bdev); -- 2.25.1

1 1

[PATCH openEuler-5.10 00/19] Backport 5.10.136 LTS
by Zheng Zengkai 10 Nov '22

10 Nov '22

Backport 5.10.136 LTS patches from upstream. git cherry-pick v5.10.135..v5.10.136~1 -s Already merged(-4): a01a4e9f5dc9 tun: avoid double free in tun_free_netdev 3c77292d52b3 crypto: arm64/poly1305 - fix a read out-of-bound 509c2c9fe75e x86/speculation: Add RSB VM Exit protections 1bea03b44ea2 x86/speculation: Add LFENCE to RSB fill sequence Total patches: 23 - 4 = 19 Aaron Ma (1): Bluetooth: btusb: Add support of IMC Networks PID 0x3568 Ahmad Fatoum (1): Bluetooth: hci_bcm: Add BCM4349B1 variant Ben Hutchings (1): x86/speculation: Make all RETbleed mitigations 64-bit only Dmitry Klochkov (1): tools/kvm_stat: fix display of error when multiple processes are found Hakan Jansson (1): Bluetooth: hci_bcm: Add DT compatible for CYW55572 Hilda Wu (5): Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 Jakub Sitnicki (2): selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads selftests/bpf: Check dst_port only on the client socket Ning Qiang (1): macintosh/adb: fix oob read in do_adb_query() function Raghavendra Rao Ananta (1): selftests: KVM: Handle compiler optimizations in ucall Tetsuo Handa (2): ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() Tony Luck (1): ACPI: APEI: Better fix to avoid spamming the console with old error logs Werner Sembach (2): ACPI: video: Force backlight native for some TongFang devices ACPI: video: Shortening quirk list by identifying Clevo by board_name only arch/x86/Kconfig | 8 +- drivers/acpi/apei/bert.c | 31 +++++-- drivers/acpi/video_detect.c | 55 ++++++++----- drivers/bluetooth/btbcm.c | 2 + drivers/bluetooth/btusb.c | 15 ++++ drivers/bluetooth/hci_bcm.c | 2 + drivers/macintosh/adb.c | 2 +- drivers/net/wireless/ath/ath9k/htc.h | 2 + drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 13 +++ drivers/net/wireless/ath/ath9k/wmi.c | 4 + tools/include/uapi/linux/bpf.h | 3 +- tools/kvm/kvm_stat/kvm_stat | 3 +- .../selftests/bpf/prog_tests/sock_fields.c | 60 +++++++++----- .../selftests/bpf/progs/test_sock_fields.c | 45 +++++++++++ tools/testing/selftests/bpf/verifier/sock.c | 81 ++++++++++++++++++- .../testing/selftests/kvm/lib/aarch64/ucall.c | 9 +-- 16 files changed, 273 insertions(+), 62 deletions(-) -- 2.20.1

1 19

[PATCH openEuler-5.10 00/52] Backport 5.10.135 LTS
by Zheng Zengkai 10 Nov '22

10 Nov '22

Backport 5.10.135 LTS patches from upstream. git cherry-pick v5.10.134..v5.10.135~1 -s Already merged(-10): 8008e797ec6f ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr 440dccd80f62 netfilter: nf_queue: do not allow packet truncation below transport header offset 41fbfdaba94a xfs: refactor xfs_file_fsync 6d3605f84edd xfs: xfs_log_force_lsn isn't passed a LSN eccacbcbfd70 xfs: fix log intent recovery ENOSPC shutdowns when inactivating inodes d8f5bb0a09b7 xfs: force the log offline when log intent item recovery fails c85cbb0b21a1 xfs: hold buffer across unpin and potential shutdown processing c1268acaa0dd xfs: remove dead stale buf unpin handling code e5f9d4e0f895 xfs: logging the on disk inode LSN can make it go backwards 14b494b7aaf2 xfs: Enforce attr3 buffer recovery order Context Conflict and Defered(-3): 6aad811b37ee bpf: Consolidate shared test timing code 6d3fad2b44eb bpf: Add PROG_TEST_RUN support for sk_lookup programs 4bfc9dc60873 selftests: bpf: Don't run sk_lookup in verifier tests Total patches: 65 - 13 = 52 Alejandro Lucero (1): sfc: disable softirqs for ptp TX Alistair Popple (1): nouveau/svm: Fix to migrate all requested pages ChenXiaoSong (1): ntfs: fix use-after-free in ntfs_ucsncmp() Darrick J. Wong (1): xfs: prevent UAF in xfs_log_item_in_current_chkpt David Howells (1): watch_queue: Fix missing rcu annotation Duoming Zhou (1): sctp: fix sleep in atomic context bug in timer handlers Eiichi Tsukata (1): docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed Florian Fainelli (1): ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow Greg Kroah-Hartman (1): ARM: crypto: comment out gcc warning that breaks clang builds Harald Freudenberger (1): s390/archrandom: prevent CPACF trng invocations in interrupt context Jaewon Kim (1): page_alloc: fix invalid watermark check on a negative value Jason Wang (1): virtio-net: fix the race between refill work and close Jianglei Nie (1): net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() Junxiao Bi (1): Revert "ocfs2: mount shared volume without ha stack" Kuniyuki Iwashima (19): tcp: Fix data-races around sysctl_tcp_dsack. tcp: Fix a data-race around sysctl_tcp_app_win. tcp: Fix a data-race around sysctl_tcp_adv_win_scale. tcp: Fix a data-race around sysctl_tcp_frto. tcp: Fix a data-race around sysctl_tcp_nometrics_save. tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. net: ping6: Fix memleak in ipv6_renew_options(). igmp: Fix data-races around sysctl_igmp_qrv. tcp: Fix a data-race around sysctl_tcp_min_tso_segs. tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. tcp: Fix a data-race around sysctl_tcp_autocorking. tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. tcp: Fix data-races around sysctl_tcp_reflect_tos. Leo Yan (1): perf symbol: Correct address for bss symbols Liang He (2): scsi: ufs: host: Hold reference returned by of_parse_phandle() net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() Linus Torvalds (1): watch_queue: Fix missing locking in add_watch_to_object() Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put Maciej Fijalkowski (2): ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) ice: do not setup vlan for loopback VSI Maxim Mikityanskiy (1): net/tls: Remove the context from the list in tls_device_down Michal Maloszewski (1): i40e: Fix interface init with MSI interrupts (no MSI-X) Sabrina Dubroca (4): macsec: fix NULL deref in macsec_add_rxsa macsec: fix error message in macsec_add_rxsa and _txsa macsec: limit replay window size with XPN macsec: always read MACSEC_SA_ATTR_PN as a u64 Thadeu Lima de Souza Cascardo (1): x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available Toshi Kani (1): EDAC/ghes: Set the DIMM label unconditionally Wei Mingzhi (1): mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. Wei Wang (1): Revert "tcp: change pingpong threshold to 3" Xin Long (2): Documentation: fix sctp_wmem in ip-sysctl.rst sctp: leave the err path free in sctp_stream_init to sctp_stream_free .../admin-guide/kernel-parameters.txt | 2 + Documentation/networking/ip-sysctl.rst | 9 ++- arch/arm/include/asm/dma.h | 2 +- arch/arm/lib/xor-neon.c | 3 +- arch/s390/include/asm/archrandom.h | 9 ++- arch/x86/kernel/cpu/bugs.c | 1 + drivers/edac/ghes_edac.c | 11 +++- drivers/gpu/drm/nouveau/nouveau_dmem.c | 6 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 4 ++ drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 +- drivers/net/ethernet/intel/ice/ice_main.c | 8 ++- drivers/net/ethernet/sfc/ptp.c | 22 +++++++ drivers/net/macsec.c | 33 ++++++---- drivers/net/sungem_phy.c | 1 + drivers/net/virtio_net.c | 37 ++++++++++- drivers/net/wireless/mediatek/mt7601u/usb.c | 1 + drivers/scsi/ufs/ufshcd-pltfrm.c | 15 ++++- fs/ntfs/attrib.c | 8 ++- fs/ocfs2/ocfs2.h | 4 +- fs/ocfs2/slot_map.c | 46 ++++++-------- fs/ocfs2/super.c | 21 ------- fs/xfs/xfs_log_cil.c | 6 +- include/net/bluetooth/l2cap.h | 1 + include/net/inet_connection_sock.h | 10 +-- include/net/tcp.h | 2 +- kernel/watch_queue.c | 58 +++++++++++------- mm/page_alloc.c | 12 ++-- net/bluetooth/l2cap_core.c | 61 +++++++++++++++---- net/ipv4/igmp.c | 24 ++++---- net/ipv4/tcp.c | 2 +- net/ipv4/tcp_input.c | 24 ++++---- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_metrics.c | 10 +-- net/ipv4/tcp_output.c | 19 +++--- net/ipv6/ping.c | 6 ++ net/ipv6/tcp_ipv6.c | 4 +- net/mptcp/protocol.c | 2 +- net/sctp/associola.c | 5 +- net/sctp/stream.c | 19 +----- net/sctp/stream_sched.c | 2 +- net/tls/tls_device.c | 7 ++- tools/perf/util/symbol-elf.c | 45 ++++++++++++-- 42 files changed, 364 insertions(+), 205 deletions(-) -- 2.20.1

1 52

[PATCH openEuler-5.10 00/89] Backport 5.10.134 LTS
by Zheng Zengkai 10 Nov '22

10 Nov '22

Backport 5.10.134 LTS patches from upstream. git cherry-pick v5.10.133..v5.10.134~1 -s Already merged(-12): ab5050fd7430 lockdown: Fix kexec lockdown bypass with ima policy 2ee0cab11f66 io_uring: Use original task for req identity in io_identity_cow() ed6964ff4714 net: make free_netdev() more lenient with unregistering devices 2e11856ec379 net: make sure devices go through netdev_wait_all_refs 47b696dd6544 xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() 0adf21eec590 watchqueue: make sure to serialize 'wqueue->defunct' properly 6a8184825286 tty: drivers/tty/, stop using tty_schedule_flip() 4d374625cca2 tty: the rest, stop using tty_schedule_flip() c84986d09745 tty: drop tty_schedule_flip() a4bb7ef2d6f6 tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() 08afa87f58d8 tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() bb1990a3005e watch-queue: remove spurious double semicolon Context Conflict: 2686f62fa78c docs: net: explain struct net_device lifetime bf2f3d1970c0 net: move rollback_registered_many() b7b9e5cc8b24 x86/amd: Use IBPB for firmware calls Total patches: = 101 - 12 = 89 Alex Deucher (1): drm/amdgpu/display: add quirk handling for stutter mode Alexander Aring (1): dlm: fix pending remove if msg allocation fails Alexey Kardashevskiy (1): KVM: Don't null dereference ops->destroy Ben Dooks (1): riscv: add as-options for modules with assembly compontents Biao Huang (1): net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow Dawid Lukwinski (1): i40e: Fix erroneous adapter reinitialization during recovery process Demi Marie Obenour (1): xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE Eric Dumazet (1): bpf: Make sure mac_header was set before using it Fabien Dessenne (1): pinctrl: stm32: fix optional IRQ support to gpios Greg Kroah-Hartman (1): Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" Haibo Chen (3): gpio: pca953x: only use single read/write for No AI mode gpio: pca953x: use the correct range when do regmap sync gpio: pca953x: use the correct register address when regcache sync during init Hristo Venev (1): be2net: Fix buffer overflow in be_get_module_eeprom Ido Schimmel (1): mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication Jakub Kicinski (5): docs: net: explain struct net_device lifetime net: move net_set_todo inside rollback_registered() net: inline rollback_registered() net: move rollback_registered_many() net: inline rollback_registered_many() Jeffrey Hugo (4): PCI: hv: Fix multi-MSI to allow more than one MSI vector PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() PCI: hv: Fix interrupt mapping for multi-MSI Jose Alonso (1): net: usb: ax88179_178a needs FLAG_SEND_ZLP Junxiao Chang (1): net: stmmac: fix dma queue left shift overflow issue Juri Lelli (1): sched/deadline: Fix BUG_ON condition for deboosted tasks Kees Cook (1): x86/alternative: Report missing return thunk details Kuniyuki Iwashima (37): ip: Fix data-races around sysctl_ip_no_pmtu_disc. ip: Fix data-races around sysctl_ip_fwd_use_pmtu. ip: Fix data-races around sysctl_ip_fwd_update_priority. ip: Fix data-races around sysctl_ip_nonlocal_bind. ip: Fix a data-race around sysctl_ip_autobind_reuse. ip: Fix a data-race around sysctl_fwmark_reflect. tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. tcp: Fix data-races around sysctl_tcp_mtu_probing. tcp: Fix data-races around sysctl_tcp_base_mss. tcp: Fix data-races around sysctl_tcp_min_snd_mss. tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. tcp: Fix a data-race around sysctl_tcp_probe_threshold. tcp: Fix a data-race around sysctl_tcp_probe_interval. igmp: Fix data-races around sysctl_igmp_llm_reports. igmp: Fix a data-race around sysctl_igmp_max_memberships. igmp: Fix data-races around sysctl_igmp_max_msf. tcp: Fix data-races around keepalive sysctl knobs. tcp: Fix data-races around sysctl_tcp_syncookies. tcp: Fix data-races around sysctl_tcp_reordering. tcp: Fix data-races around some timeout sysctl knobs. tcp: Fix a data-race around sysctl_tcp_notsent_lowat. tcp: Fix a data-race around sysctl_tcp_tw_reuse. tcp: Fix data-races around sysctl_max_syn_backlog. tcp: Fix data-races around sysctl_tcp_fastopen. tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. ip: Fix data-races around sysctl_ip_prot_sock. udp: Fix a data-race around sysctl_udp_l3mdev_accept. tcp: Fix data-races around sysctl knobs related to SYN option. tcp: Fix a data-race around sysctl_tcp_early_retrans. tcp: Fix data-races around sysctl_tcp_recovery. tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. tcp: Fix a data-race around sysctl_tcp_retrans_collapse. tcp: Fix a data-race around sysctl_tcp_stdurg. tcp: Fix a data-race around sysctl_tcp_rfc1337. tcp: Fix data-races around sysctl_tcp_max_reordering. Lennert Buytenhek (1): igc: Reinstate IGC_REMOVED logic and implement it properly Liang He (1): drm/imx/dcss: Add missing of_node_put() in fail path Luiz Augusto von Dentz (7): Bluetooth: Add bt_skb_sendmsg helper Bluetooth: Add bt_skb_sendmmsg helper Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Bluetooth: Fix passing NULL to PTR_ERR Bluetooth: SCO: Fix sco_send_frame returning skb->len Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Marc Kleine-Budde (1): spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers Miaoqian Lin (1): power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe Pali Rohár (1): serial: mvebu-uart: correctly report configured baudrate value Pawan Gupta (1): x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts Peter Zijlstra (3): perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() bitfield.h: Fix "type of reg too small for mask" test x86/amd: Use IBPB for firmware calls Piotr Skajewski (1): ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero Przemyslaw Patynowski (1): iavf: Fix handling of dummy receive descriptors Robert Hancock (1): i2c: cadence: Change large transfer count reset logic to be unconditional Takashi Iwai (1): ALSA: memalloc: Align buffer allocations in page size Tariq Toukan (1): net/tls: Fix race in TLS device down flow Wang Cheng (1): mm/mempolicy: fix uninit-value in mpol_rebind_policy() Wang ShaoBo (1): drm/imx/dcss: fix unused but set variable warnings William Dean (1): pinctrl: ralink: Check for null return of devm_kcalloc Documentation/networking/netdevices.rst | 171 +++++++++++++- arch/m68k/Kconfig.bus | 2 +- arch/riscv/Makefile | 1 + arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/mshyperv.h | 7 - arch/x86/include/asm/nospec-branch.h | 2 + arch/x86/kernel/alternative.c | 4 +- arch/x86/kernel/cpu/bugs.c | 14 +- drivers/gpio/gpio-pca953x.c | 22 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 33 +++ drivers/gpu/drm/imx/dcss/dcss-dev.c | 3 + drivers/gpu/drm/imx/dcss/dcss-plane.c | 2 - drivers/i2c/busses/i2c-cadence.c | 30 +-- .../chelsio/inline_crypto/chtls/chtls_cm.c | 6 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 10 +- drivers/net/ethernet/emulex/benet/be_cmds.h | 2 +- .../net/ethernet/emulex/benet/be_ethtool.c | 31 ++- drivers/net/ethernet/intel/i40e/i40e_main.c | 13 +- drivers/net/ethernet/intel/iavf/iavf_txrx.c | 5 +- drivers/net/ethernet/intel/igc/igc_main.c | 3 + drivers/net/ethernet/intel/igc/igc_regs.h | 5 +- drivers/net/ethernet/intel/ixgbe/ixgbe.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 + .../net/ethernet/intel/ixgbe/ixgbe_sriov.c | 6 + .../ethernet/mellanox/mlxsw/spectrum_router.c | 5 +- .../net/ethernet/stmicro/stmmac/dwmac4_core.c | 3 + .../net/ethernet/stmicro/stmmac/stmmac_main.c | 17 +- .../ethernet/stmicro/stmmac/stmmac_platform.c | 8 +- drivers/net/usb/ax88179_178a.c | 20 +- drivers/pci/controller/pci-hyperv.c | 99 ++++++-- drivers/pinctrl/stm32/pinctrl-stm32.c | 18 +- drivers/power/reset/arm-versatile-reboot.c | 1 + drivers/spi/spi-bcm2835.c | 12 +- .../staging/mt7621-pinctrl/pinctrl-rt2880.c | 2 + drivers/tty/serial/mvebu-uart.c | 25 ++- drivers/xen/gntdev.c | 3 +- fs/dlm/lock.c | 3 +- include/linux/bitfield.h | 19 +- include/net/bluetooth/bluetooth.h | 65 ++++++ include/net/inet_sock.h | 5 +- include/net/ip.h | 6 +- include/net/tcp.h | 18 +- include/net/udp.h | 2 +- kernel/bpf/core.c | 8 +- kernel/events/core.c | 45 ++-- kernel/sched/deadline.c | 5 +- mm/mempolicy.c | 2 +- net/bluetooth/rfcomm/core.c | 50 ++++- net/bluetooth/rfcomm/sock.c | 46 +--- net/bluetooth/sco.c | 30 +-- net/core/dev.c | 212 ++++++++---------- net/core/filter.c | 4 +- net/core/secure_seq.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/fib_semantics.c | 2 +- net/ipv4/icmp.c | 2 +- net/ipv4/igmp.c | 25 ++- net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/ip_forward.c | 2 +- net/ipv4/ip_sockglue.c | 6 +- net/ipv4/route.c | 2 +- net/ipv4/syncookies.c | 9 +- net/ipv4/sysctl_net_ipv4.c | 6 +- net/ipv4/tcp.c | 10 +- net/ipv4/tcp_fastopen.c | 9 +- net/ipv4/tcp_input.c | 51 +++-- net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/tcp_metrics.c | 3 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/tcp_output.c | 29 +-- net/ipv4/tcp_recovery.c | 6 +- net/ipv4/tcp_timer.c | 20 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/syncookies.c | 3 +- net/sctp/protocol.c | 2 +- net/smc/smc_llc.c | 2 +- net/tls/tls_device.c | 8 +- net/xfrm/xfrm_state.c | 2 +- sound/core/memalloc.c | 1 + virt/kvm/kvm_main.c | 5 +- 80 files changed, 877 insertions(+), 454 deletions(-) -- 2.20.1

1 89

[PATCH openEuler-5.10-LTS 01/12] scsi: libsas: Resume SAS host for phy reset or enable via sysfs
by Zheng Zengkai 10 Nov '22

10 Nov '22

From: Xiang Chen <chenxiang66(a)hisilicon.com> mainline inclusion from mainline-v5.19-rc7 commit 1e82e4627a795 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I5M9GC CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------------------------------------------- Currently if a phy reset or enable phy is issued via sysfs when controller is suspended, those operations will be ignored as SAS_HA_REGISTERED is cleared. If RPM is enabled then we may aggressively suspend automatically. In this case it may be difficult to enable or reset a phy via sysfs, so resume the host in these scenarios. Link: https://lore.kernel.org/r/1657823002-139010-6-git-send-email-john.garry@hua… Signed-off-by: Xiang Chen <chenxiang66(a)hisilicon.com> Signed-off-by: John Garry <john.garry(a)huawei.com> Signed-off-by: Martin K. Petersen <martin.petersen(a)oracle.com> Signed-off-by: xiabing <xiabing12(a)h-partners.com> Reviewed-by: Jason Yan <yanaijie(a)huawei.com> Signed-off-by: Zheng Zengkai <zhengzengkai(a)huawei.com> --- drivers/scsi/libsas/sas_init.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/drivers/scsi/libsas/sas_init.c b/drivers/scsi/libsas/sas_init.c index f1989a98f511..58ffcecf1a2f 100644 --- a/drivers/scsi/libsas/sas_init.c +++ b/drivers/scsi/libsas/sas_init.c @@ -528,6 +528,7 @@ static int queue_phy_reset(struct sas_phy *phy, int hard_reset) if (!d) return -ENOMEM; + pm_runtime_get_sync(ha->dev); /* libsas workqueue coordinates ata-eh reset with discovery */ mutex_lock(&d->event_lock); d->reset_result = 0; @@ -541,6 +542,7 @@ static int queue_phy_reset(struct sas_phy *phy, int hard_reset) if (rc == 0) rc = d->reset_result; mutex_unlock(&d->event_lock); + pm_runtime_put_sync(ha->dev); return rc; } @@ -555,6 +557,7 @@ static int queue_phy_enable(struct sas_phy *phy, int enable) if (!d) return -ENOMEM; + pm_runtime_get_sync(ha->dev); /* libsas workqueue coordinates ata-eh reset with discovery */ mutex_lock(&d->event_lock); d->enable_result = 0; @@ -568,6 +571,7 @@ static int queue_phy_enable(struct sas_phy *phy, int enable) if (rc == 0) rc = d->enable_result; mutex_unlock(&d->event_lock); + pm_runtime_put_sync(ha->dev); return rc; } -- 2.20.1

3 13

在openeuler上我如何使用firewalld/nftables/iptables构建本机端口镜像
by wangpengyuan＠bjca.org.cn 10 Nov '22

10 Nov '22

iptables 版本为v1.8.7 不支持 --destination-to 和 --port-to 我如何解决这个问题？ wangpengyuan(a)bjca.org.cn

1 0