I'm announcing the release of the 3.2.97 kernel. All users of the 3.2 kernel series should upgrade. The updated 3.2.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.2.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git The diff from 3.2.96 is attached to this message. Ben. ------------ Makefile | 2 +- arch/arm/kernel/traps.c | 28 ++++++--- arch/mips/ar7/platform.c | 1 + arch/s390/mm/gup.c | 7 +-- arch/sh/include/cpu-sh4/cpu/sh7722.h | 2 +- arch/sh/include/cpu-sh4/cpu/sh7757.h | 8 +-- arch/tile/kernel/setup.c | 3 +- arch/x86/crypto/salsa20_glue.c | 7 --- arch/x86/include/asm/kvm_para.h | 4 +- arch/x86/kernel/kvm.c | 22 +++---- arch/x86/kvm/svm.c | 2 +- arch/x86/kvm/vmx.c | 7 +-- arch/x86/kvm/x86.c | 8 +-- arch/x86/oprofile/op_model_ppro.c | 4 +- crypto/hmac.c | 6 +- crypto/salsa20_generic.c | 7 --- crypto/shash.c | 13 ++-- drivers/crypto/talitos.c | 4 +- drivers/input/ff-core.c | 13 +++- drivers/input/misc/uinput.c | 18 ++++++ drivers/iommu/amd_iommu.c | 1 + drivers/net/can/usb/esd_usb2.c | 2 +- drivers/net/macvtap.c | 6 +- drivers/net/tun.c | 4 ++ drivers/s390/scsi/zfcp_aux.c | 5 ++ drivers/s390/scsi/zfcp_erp.c | 18 +++--- drivers/s390/scsi/zfcp_scsi.c | 5 ++ drivers/scsi/libiscsi.c | 2 +- drivers/scsi/lpfc/lpfc_init.c | 1 + drivers/scsi/scsi_scan.c | 3 + drivers/scsi/sd.c | 14 ++++- drivers/staging/iio/meter/ade7759.c | 2 +- drivers/usb/class/cdc-acm.c | 3 + drivers/usb/core/config.c | 6 +- drivers/usb/core/hub.c | 2 +- drivers/usb/core/quirks.c | 4 ++ drivers/usb/gadget/dummy_hcd.c | 56 +++++++++++++---- drivers/usb/gadget/inode.c | 72 ++++++++++++++++----- drivers/usb/host/pci-quirks.c | 8 +-- drivers/usb/host/xhci.h | 2 +- drivers/usb/renesas_usbhs/fifo.c | 23 +++++-- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/ftdi_sio.c | 2 + drivers/usb/serial/ftdi_sio_ids.h | 7 +++ drivers/usb/serial/option.c | 2 + drivers/usb/storage/unusual_devs.h | 7 +++ drivers/uwb/hwa-rc.c | 2 + drivers/uwb/uwbd.c | 12 ++-- fs/bio.c | 14 +++-- fs/ecryptfs/ecryptfs_kernel.h | 25 +++++--- fs/ecryptfs/keystore.c | 9 ++- fs/fscache/object-list.c | 7 +++ fs/ocfs2/alloc.c | 24 +++++-- fs/read_write.c | 4 +- fs/xattr.c | 2 +- include/crypto/internal/hash.h | 8 +++ include/linux/input.h | 1 + include/linux/key.h | 2 + include/linux/spi/spidev.h | 1 + include/net/bluetooth/l2cap.h | 1 + include/net/tcp.h | 6 +- include/scsi/scsi_device.h | 1 + include/scsi/scsi_devinfo.h | 1 + include/sound/seq_kernel.h | 3 +- include/sound/seq_virmidi.h | 1 + include/sound/timer.h | 2 + include/trace/events/kvm.h | 7 ++- kernel/params.c | 2 +- kernel/ptrace.c | 3 +- kernel/sysctl.c | 3 +- net/bluetooth/bnep/core.c | 3 + net/bluetooth/cmtp/core.c | 3 + net/bluetooth/hidp/core.c | 2 + net/bluetooth/l2cap_sock.c | 6 ++ net/core/rtnetlink.c | 5 +- net/dccp/proto.c | 5 ++ net/ipv4/tcp_output.c | 3 +- net/l2tp/l2tp_eth.c | 51 +-------------- net/l2tp/l2tp_ip.c | 20 +++--- net/l2tp/l2tp_ppp.c | 10 ++- net/packet/af_packet.c | 4 +- net/sctp/sm_sideeffect.c | 4 +- net/xfrm/xfrm_user.c | 3 +- security/keys/encrypted-keys/encrypted.c | 7 +++ security/keys/internal.h | 2 +- security/keys/key.c | 2 + security/keys/keyctl.c | 8 +-- security/keys/keyring.c | 23 ++++--- security/keys/process_keys.c | 9 ++- security/keys/request_key.c | 46 +++++++++++--- security/keys/request_key_auth.c | 69 ++++++++++----------- security/keys/trusted.c | 71 ++++++++++----------- security/selinux/hooks.c | 2 +- security/smack/smack_lsm.c | 57 ++++++++--------- sound/core/hrtimer.c | 1 + sound/core/seq/oss/seq_oss_midi.c | 4 +- sound/core/seq/oss/seq_oss_readq.c | 29 +++++++++ sound/core/seq/oss/seq_oss_readq.h | 2 + sound/core/seq/seq_clientmgr.c | 2 +- sound/core/seq/seq_virmidi.c | 27 +++++--- sound/core/timer.c | 103 +++++++++++++++++++++---------- sound/core/timer_compat.c | 17 ++++- sound/usb/caiaq/device.c | 12 +++- sound/usb/usx2y/usb_stream.c | 6 +- 104 files changed, 768 insertions(+), 415 deletions(-) Al Viro (3): more bio_map_user_iov() leak fixes Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket Alan Stern (8): usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives USB: gadgetfs: fix copy_to_user while holding spinlock USB: gadgetfs: Fix crash caused by inadequate synchronization USB: dummy-hcd: fix infinite-loop resubmission bug USB: gadgetfs, dummy-hcd, net2280: fix locking for callbacks USB: dummy-hcd: Fix erroneous synchronization change USB: dummy-hcd: Fix deadlock caused by disconnect detection USB: core: prevent malicious bNumInterfaces overflow Andreas Engel (1): USB: serial: cp210x: add support for ELV TFD500 Andreas Gruenbacher (1): vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets Andrew Honig (1): KVM: VMX: remove I/O port 0x80 bypass on Intel hosts Andrey Konovalov (2): uwb: ensure that endpoint is interrupt uwb: properly check kthread_run return value Ashish Samant (1): ocfs2: fstrim: Fix start offset of first cluster group during fstrim Baruch Siach (1): spi: uapi: spidev: add missing ioctl header Ben Hutchings (3): ipsec: Fix aborted xfrm policy dump crash security: Fix mode test in selinux_ptrace_access_check() Linux 3.2.97 Bin Liu (1): usb: gadget: fix spinlock dead lock in gadgetfs Boqun Feng (2): kvm/x86: Handle async PF in RCU read-side critical sections kvm/x86: Avoid async PF preempting the kernel incorrectly Borislav Petkov (1): x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context Casey Schaufler (1): lsm: fix smack_inode_removexattr and xattr_getsecurity memleak Colin Ian King (1): staging: iio: ade7759: fix signed extension bug on shift of a u8 Craig Gallek (1): tun/tap: sanitize TUNSETSNDBUF input Dan Carpenter (1): tile: array underflow in setup_maxnodemem() David Herrmann (1): Bluetooth: hidp: verify l2cap sockets Dmitry Fleytman (1): usb: Increase quirk delay for USB devices Dmitry Torokhov (1): Input: uinput - avoid FF flush when destroying device Eric Biggers (13): KEYS: fix cred refcount leak in request_key_auth_new() KEYS: don't revoke uninstantiated key in request_key_auth_new() KEYS: fix key refcount leak in keyctl_assume_authority() KEYS: fix key refcount leak in keyctl_read_key() KEYS: prevent creating a different user's keyrings KEYS: encrypted: fix dereference of NULL user_key_payload FS-Cache: fix dereference of NULL user_key_payload ecryptfs: fix dereference of NULL user_key_payload KEYS: trusted: sanitize all key material KEYS: trusted: fix writing past end of buffer in trusted_read() crypto: salsa20 - fix blkcipher_walk API usage crypto: hmac - require that the underlying hash algorithm is unkeyed KEYS: add missing permission check for request_key() destination Eric Dumazet (1): tcp: fix tcp_mtu_probe() vs highest_sack Ethan Zhao (1): sched/sysctl: Check user input value of sysctl_sched_time_avg Felipe Balbi (1): usb: quirks: add quirk for WORLDE MINI MIDI keyboard Geert Uytterhoeven (2): sh: sh7722: remove nonexistent GPIO_PTQ7 to fix pinctrl registration sh: sh7757: remove nonexistent GPIO_PT[JLNQ]7_RESV to fix pinctrl registration Gerald Schaefer (1): s390/mm: fix write access check in gup_huge_pmd() Gleb Natapov (1): KVM: Do not take reference to mm during async #PF Guillaume Nault (6): l2tp: fix l2tp_eth module loading l2tp: check ps->sock before running pppol2tp_session_ioctl() l2tp: hold tunnel in pppol2tp_connect() l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv() l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6 l2tp: don't use l2tp_tunnel_find() in l2tp_ip and l2tp_ip6 Haozhong Zhang (1): KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit Henryk Heisig (1): USB: serial: option: add support for TP-Link LTE module Herbert Xu (1): crypto: shash - Fix zero-length shash ahash digest crash Jean Delvare (1): kernel/params.c: align add_sysfs_param documentation with code Jeffrey Chu (1): USB: serial: ftdi_sio: add id for Cypress WICED dev board Jim Dickerson (1): usb: pci-quirks.c: Corrected timeout values used in handshake Joerg Roedel (1): iommu/amd: Finish TLB flush in amd_iommu_unmap() Johannes Thumshirn (1): scsi: libiscsi: fix shifting of DID_REQUEUE host byte Kazuya Mizuguchi (1): usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet Konstantin Khlebnikov (1): Smack: remove unneeded NULL-termination from securtity label LEROY Christophe (1): crypto: talitos - fix sha224 Maksim Salau (1): usb: cdc_acm: Add quirk for Elatec TWN3 Mark Rutland (1): ARM: 8720/1: ensure dump_instr() checks addr_limit Martin K. Petersen (1): scsi: sd: Implement blacklist option for WRITE SAME w/ UNMAP Mathias Nyman (1): xhci: fix finding correct bus_state structure for USB 3.1 hosts Michael S. Tsirkin (1): macvtap: fix TUNSETSNDBUF values > 64k Mohamed Ghannam (1): dccp: CVE-2017-8824: use-after-free in DCCP code Nicolas Dichtel (1): net: enable interface alias removal via rtnl Oleg Nesterov (1): ptrace: change __ptrace_unlink() to clear ->ptrace under ->siglock Oswald Buddenhagen (1): MIPS: AR7: Ensure that serial ports are properly set up Stefan Mätje (1): can: esd_usb2: Fix can_dlc value for received RTR, frames Stefano Brivio (1): scsi: lpfc: Don't return internal MBXERR_ERROR code from probe function Steffen Maier (1): scsi: zfcp: fix erp_action use-before-initialize in REC action trace Takashi Iwai (9): ALSA: usx2y: Suppress kernel warning at page allocation failures ALSA: seq: Fix copy_from_user() call inside lock ALSA: caiaq: Fix stray URB at probe error path ALSA: timer: Add missing mutex lock for compat ioctls ALSA: seq: Fix nested rwsem annotation for lockdep splat ALSA: timer: Protect the whole snd_timer_close() with open race ALSA: timer: Limit max instances per timer ALSA: seq: Avoid invalid lockdep class warning ALSA: seq: Fix OSS sysex delivery in OSS emulation Wanpeng Li (1): KVM: Fix stack-out-of-bounds read in write_mmio Willem de Bruijn (1): packet: only test po->has_vnet_hdr once in packet_snd Xin Long (1): sctp: fix a type cast warnings that causes a_rwnd gets the wrong value Yoshihiro Shimoda (2): usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction