From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org,
syzbot+96414aa0033c363d8458@syzkaller.appspotmail.com,
Lihong Kou <koulihong@huawei.com>,
Marcel Holtmann <marcel@holtmann.org>,
Sasha Levin <sashal@kernel.org>
Subject: [PATCH 4.4 063/149] Bluetooth: add a mutex lock to avoid UAF in do_enale_set
Date: Thu, 20 Aug 2020 11:22:20 +0200 [thread overview]
Message-ID: <20200820092128.793137454@linuxfoundation.org> (raw)
In-Reply-To: <20200820092125.688850368@linuxfoundation.org>
From: Lihong Kou <koulihong@huawei.com>
[ Upstream commit f9c70bdc279b191da8d60777c627702c06e4a37d ]
In the case we set or free the global value listen_chan in
different threads, we can encounter the UAF problems because
the method is not protected by any lock, add one to avoid
this bug.
BUG: KASAN: use-after-free in l2cap_chan_close+0x48/0x990
net/bluetooth/l2cap_core.c:730
Read of size 8 at addr ffff888096950000 by task kworker/1:102/2868
CPU: 1 PID: 2868 Comm: kworker/1:102 Not tainted 5.5.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine,
BIOS Google 01/01/2011
Workqueue: events do_enable_set
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fb/0x318 lib/dump_stack.c:118
print_address_description+0x74/0x5c0 mm/kasan/report.c:374
__kasan_report+0x149/0x1c0 mm/kasan/report.c:506
kasan_report+0x26/0x50 mm/kasan/common.c:641
__asan_report_load8_noabort+0x14/0x20 mm/kasan/generic_report.c:135
l2cap_chan_close+0x48/0x990 net/bluetooth/l2cap_core.c:730
do_enable_set+0x660/0x900 net/bluetooth/6lowpan.c:1074
process_one_work+0x7f5/0x10f0 kernel/workqueue.c:2264
worker_thread+0xbbc/0x1630 kernel/workqueue.c:2410
kthread+0x332/0x350 kernel/kthread.c:255
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Allocated by task 2870:
save_stack mm/kasan/common.c:72 [inline]
set_track mm/kasan/common.c:80 [inline]
__kasan_kmalloc+0x118/0x1c0 mm/kasan/common.c:515
kasan_kmalloc+0x9/0x10 mm/kasan/common.c:529
kmem_cache_alloc_trace+0x221/0x2f0 mm/slab.c:3551
kmalloc include/linux/slab.h:555 [inline]
kzalloc include/linux/slab.h:669 [inline]
l2cap_chan_create+0x50/0x320 net/bluetooth/l2cap_core.c:446
chan_create net/bluetooth/6lowpan.c:640 [inline]
bt_6lowpan_listen net/bluetooth/6lowpan.c:959 [inline]
do_enable_set+0x6a4/0x900 net/bluetooth/6lowpan.c:1078
process_one_work+0x7f5/0x10f0 kernel/workqueue.c:2264
worker_thread+0xbbc/0x1630 kernel/workqueue.c:2410
kthread+0x332/0x350 kernel/kthread.c:255
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Freed by task 2870:
save_stack mm/kasan/common.c:72 [inline]
set_track mm/kasan/common.c:80 [inline]
kasan_set_free_info mm/kasan/common.c:337 [inline]
__kasan_slab_free+0x12e/0x1e0 mm/kasan/common.c:476
kasan_slab_free+0xe/0x10 mm/kasan/common.c:485
__cache_free mm/slab.c:3426 [inline]
kfree+0x10d/0x220 mm/slab.c:3757
l2cap_chan_destroy net/bluetooth/l2cap_core.c:484 [inline]
kref_put include/linux/kref.h:65 [inline]
l2cap_chan_put+0x170/0x190 net/bluetooth/l2cap_core.c:498
do_enable_set+0x66c/0x900 net/bluetooth/6lowpan.c:1075
process_one_work+0x7f5/0x10f0 kernel/workqueue.c:2264
worker_thread+0xbbc/0x1630 kernel/workqueue.c:2410
kthread+0x332/0x350 kernel/kthread.c:255
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
The buggy address belongs to the object at ffff888096950000
which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 0 bytes inside of
2048-byte region [ffff888096950000, ffff888096950800)
The buggy address belongs to the page:
page:ffffea00025a5400 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0
flags: 0xfffe0000000200(slab)
raw: 00fffe0000000200 ffffea00027d1548 ffffea0002397808 ffff8880aa400e00
raw: 0000000000000000 ffff888096950000 0000000100000001 0000000000000000
page dumped because: kasan: bad access detected
Memory state around the buggy address:
ffff88809694ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ffff88809694ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff888096950000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff888096950080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff888096950100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
Reported-by: syzbot+96414aa0033c363d8458@syzkaller.appspotmail.com
Signed-off-by: Lihong Kou <koulihong@huawei.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
net/bluetooth/6lowpan.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/net/bluetooth/6lowpan.c b/net/bluetooth/6lowpan.c
index 4cd6b8d811ffa..11602902884ba 100644
--- a/net/bluetooth/6lowpan.c
+++ b/net/bluetooth/6lowpan.c
@@ -57,6 +57,7 @@ static bool enable_6lowpan;
/* We are listening incoming connections via this channel
*/
static struct l2cap_chan *listen_chan;
+static DEFINE_MUTEX(set_lock);
struct lowpan_peer {
struct list_head list;
@@ -1195,12 +1196,14 @@ static void do_enable_set(struct work_struct *work)
enable_6lowpan = set_enable->flag;
+ mutex_lock(&set_lock);
if (listen_chan) {
l2cap_chan_close(listen_chan, 0);
l2cap_chan_put(listen_chan);
}
listen_chan = bt_6lowpan_listen();
+ mutex_unlock(&set_lock);
kfree(set_enable);
}
@@ -1252,11 +1255,13 @@ static ssize_t lowpan_control_write(struct file *fp,
if (ret == -EINVAL)
return ret;
+ mutex_lock(&set_lock);
if (listen_chan) {
l2cap_chan_close(listen_chan, 0);
l2cap_chan_put(listen_chan);
listen_chan = NULL;
}
+ mutex_unlock(&set_lock);
if (conn) {
struct lowpan_peer *peer;
--
2.25.1
next prev parent reply other threads:[~2020-08-20 10:33 UTC|newest]
Thread overview: 163+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-08-20 9:21 [PATCH 4.4 000/149] 4.4.233-rc1 review Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 001/149] xfs: dont call xfs_da_shrink_inode with NULL bp Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 002/149] net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 003/149] media: rc: prevent memory leak in cx23888_ir_probe Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 004/149] ath9k_htc: release allocated buffer if timed out Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 005/149] ath9k: " Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 006/149] nfs: Move call to security_inode_listsecurity into nfs_listxattr Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 007/149] PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 008/149] drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 009/149] drm: hold gem reference until object is no longer accessed Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 010/149] f2fs: check memory boundary by insane namelen Greg Kroah-Hartman
2020-10-31 20:04 ` Eric Biggers
2020-08-20 9:21 ` [PATCH 4.4 011/149] f2fs: check if file namelen exceeds max value Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 012/149] ARM: 8986/1: hw_breakpoint: Dont invoke overflow handler on uaccess watchpoints Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 013/149] fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 014/149] rds: Prevent kernel-infoleak in rds_notify_queue_get() Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 015/149] net/x25: Fix x25_neigh refcnt leak when x25 disconnect Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 016/149] net/x25: Fix null-ptr-deref in x25_disconnect Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 017/149] sh: Fix validation of system call number Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 018/149] net: lan78xx: add missing endpoint sanity check Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 019/149] net: lan78xx: fix transfer-buffer memory leak Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 020/149] mlxsw: core: Increase scope of RCU read-side critical section Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 021/149] mac80211: mesh: Free ie data when leaving mesh Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 022/149] nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 023/149] net: ethernet: ravb: exit if re-initialization fails in tx timeout Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 024/149] Revert "i2c: cadence: Fix the hold bit setting" Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 025/149] xen-netfront: fix potential deadlock in xennet_remove() Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 026/149] x86/i8259: Use printk_deferred() to prevent deadlock Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 027/149] random32: update the net random state on interrupt and activity Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 028/149] ARM: percpu.h: fix build error Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 029/149] random: fix circular include dependency on arm64 after addition of percpu.h Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 030/149] random32: remove net_rand_state from the latent entropy gcc plugin Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 031/149] random32: move the pseudo-random 32-bit definitions to prandom.h Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 032/149] ext4: fix direct I/O read error Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 033/149] USB: serial: qcserial: add EM7305 QDL product ID Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 034/149] ALSA: seq: oss: Serialize ioctls Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 035/149] Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 036/149] Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 037/149] Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 038/149] vgacon: Fix for missing check in scrollback handling Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 039/149] mtd: properly check all write ioctls for permissions Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 040/149] net/9p: validate fds in p9_fd_open Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 041/149] drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason Greg Kroah-Hartman
2020-08-20 9:21 ` [PATCH 4.4 042/149] cfg80211: check vendor command doit pointer before use Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 043/149] igb: reinit_locked() should be called with rtnl_lock Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 044/149] atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 045/149] tools lib traceevent: Fix memory leak in process_dynamic_array_len Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 046/149] binder: Prevent context manager from incrementing ref 0 Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 047/149] ipv4: Silence suspicious RCU usage warning Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 048/149] ipv6: fix memory leaks on IPV6_ADDRFORM path Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 049/149] Revert "vxlan: fix tos value before xmit" Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 050/149] net: lan78xx: replace bogus endpoint lookup Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 051/149] usb: hso: check for return value in hso_serial_common_create() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 052/149] vxlan: Ensure FDB dump is performed under RCU Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 053/149] Smack: fix use-after-free in smk_write_relabel_self() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 054/149] tracepoint: Mark __tracepoint_strings __used Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 055/149] udp: drop corrupt packets earlier to avoid data corruption Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 056/149] gpio: fix oops resulting from calling of_get_named_gpio(NULL, ...) Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 057/149] EDAC: Fix reference count leaks Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 058/149] m68k: mac: Dont send IOP message until channel is idle Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 059/149] m68k: mac: Fix IOP status/control register writes Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 060/149] ARM: at91: pm: add missing put_device() call in at91_pm_sram_init() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 061/149] ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 062/149] drm/tilcdc: fix leak & null ref in panel_connector_get_modes Greg Kroah-Hartman
2020-08-20 9:22 ` Greg Kroah-Hartman [this message]
2020-08-20 9:22 ` [PATCH 4.4 064/149] fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 065/149] drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 066/149] video: fbdev: neofb: fix memory leak in neo_scan_monitor() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 067/149] drm/nouveau: fix multiple instances of reference count leaks Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 068/149] drm/debugfs: fix plain echo to connector "force" attribute Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 069/149] mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 070/149] brcmfmac: To fix Bss Info flag definition Bug Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 071/149] iwlegacy: Check the return value of pcie_capability_read_*() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 072/149] usb: gadget: net2280: fix memory leak on probe error handling paths Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 073/149] bdc: Fix bug causing crash after multiple disconnects Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 074/149] dyndbg: fix a BUG_ON in ddebug_describe_flags Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 075/149] bcache: fix super block seq numbers comparision in register_cache_set() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 076/149] ACPICA: Do not increment operation_region reference counts for field units Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 077/149] agp/intel: Fix a memory leak on module initialisation failure Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 078/149] video: fbdev: sm712fb: fix an issue about iounmap for a wrong address Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 079/149] console: newport_con: fix an issue about leak related system resources Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 080/149] iio: improve IIO_CONCENTRATION channel type description Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 081/149] leds: lm355x: avoid enum conversion warning Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 082/149] media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 083/149] scsi: cumana_2: Fix different dev_id between request_irq() and free_irq() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 084/149] cxl: Fix kobject memleak Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 085/149] drm/radeon: fix array out-of-bounds read and write issues Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 086/149] scsi: powertec: Fix different dev_id between request_irq() and free_irq() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 087/149] scsi: eesox: " Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 088/149] media: firewire: Using uninitialized values in node_probe() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 089/149] media: exynos4-is: Add missed check for pinctrl_lookup_state() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 090/149] drm: panel: simple: Fix bpc for LG LB070WV8 panel Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 091/149] mwifiex: Prevent memory corruption handling keys Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 092/149] powerpc/vdso: Fix vdso cpu truncation Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 093/149] PCI/ASPM: Add missing newline in sysfs policy Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 094/149] usb: dwc2: Fix error path in gadget registration Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 095/149] scsi: mesh: Fix panic after host or bus reset Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 096/149] Smack: fix another vsscanf out of bounds Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 097/149] Smack: prevent underflow in smk_set_cipso() Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 098/149] power: supply: check if calc_soc succeeded in pm860x_init_battery Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 099/149] s390/qeth: dont process empty bridge port events Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 100/149] wl1251: fix always return 0 error Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 101/149] net: spider_net: Fix the size used in a dma_free_coherent() call Greg Kroah-Hartman
2020-08-20 9:22 ` [PATCH 4.4 102/149] dlm: Fix kobject memleak Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 103/149] pinctrl-single: fix pcs_parse_pinconf() return value Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 104/149] drivers/net/wan/lapbether: Added needed_headroom and a skb->len check Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 105/149] net/nfc/rawsock.c: add CAP_NET_RAW check Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 106/149] net: Set fput_needed iff FDPUT_FPUT is set Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 107/149] ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 108/149] ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 109/149] ALSA: usb-audio: add quirk for Pioneer DDJ-RB Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 110/149] crypto: qat - fix double free in qat_uclo_create_batch_init_list Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 111/149] fs/minix: check return value of sb_getblk() Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 112/149] fs/minix: dont allow getting deleted inodes Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 113/149] fs/minix: reject too-large maximum file size Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 114/149] ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 115/149] 9p: Fix memory leak in v9fs_mount Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 116/149] parisc: mask out enable and reserved bits from sba imask Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 117/149] ARM: 8992/1: Fix unwind_frame for clang-built kernels Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 118/149] xen/balloon: fix accounting in alloc_xenballooned_pages error path Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 119/149] xen/balloon: make the balloon wait interruptible Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 120/149] PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 121/149] btrfs: only search for left_info if there is no right_info in try_merge_free_space Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 122/149] btrfs: fix memory leaks after failure to lookup checksums during inode logging Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 123/149] powerpc: Fix circular dependency between percpu.h and mmu.h Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 124/149] net: ethernet: stmmac: Disable hardware multicast filter Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 125/149] net: stmmac: dwmac1000: provide multicast filter fallback Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 126/149] md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 127/149] bcache: allocate meta data pages as compound pages Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 128/149] mac80211: fix misplaced while instead of if Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 129/149] MIPS: CPU#0 is not hotpluggable Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 130/149] ext2: fix missing percpu_counter_inc Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 131/149] ocfs2: change slot number type s16 to u16 Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 132/149] kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 133/149] pseries: Fix 64 bit logical memory block panic Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 134/149] USB: serial: ftdi_sio: make process-packet buffer unsigned Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 135/149] USB: serial: ftdi_sio: clean up receive processing Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 136/149] USB: serial: ftdi_sio: fix break and sysrq handling Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 137/149] iommu/omap: Check for failure of a call to omap_iommu_dump_ctx Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 138/149] iommu/vt-d: Enforce PASID devTLB field mask Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 139/149] i2c: rcar: slave: only send STOP event when we have been addressed Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 140/149] clk: clk-atlas6: fix return value check in atlas6_clk_init() Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 141/149] Input: sentelic - fix error return when fsp_reg_write fails Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 142/149] drm/vmwgfx: Fix two list_for_each loop exit tests Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 143/149] nfs: Fix getxattr kernel panic and memory overflow Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 144/149] fs/ufs: avoid potential u32 multiplication overflow Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 145/149] mfd: dln2: Run event handler loop under spinlock Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 146/149] ALSA: echoaudio: Fix potential Oops in snd_echo_resume() Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 147/149] sh: landisk: Add missing initialization of sh_io_port_base Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 148/149] drm/radeon: fix fb_div check in ni_init_smc_spll_table() Greg Kroah-Hartman
2020-08-20 9:23 ` [PATCH 4.4 149/149] ipv6: check skb->protocol before lookup for nexthop Greg Kroah-Hartman
2020-08-20 14:19 ` [PATCH 4.4 000/149] 4.4.233-rc1 review Naresh Kamboju
2020-08-20 14:25 ` Naresh Kamboju
2020-08-20 15:06 ` Guenter Roeck
2020-08-20 14:35 ` Guenter Roeck
2020-08-20 15:08 ` Greg Kroah-Hartman
2020-08-20 16:39 ` Naresh Kamboju
2020-08-20 17:56 ` Naresh Kamboju
2020-08-21 9:53 ` Naresh Kamboju
2020-08-20 16:52 ` Willy Tarreau
2020-08-20 20:01 ` Guenter Roeck
2020-08-20 20:05 ` Guenter Roeck
2020-08-20 23:51 ` Shuah Khan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200820092128.793137454@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=koulihong@huawei.com \
--cc=linux-kernel@vger.kernel.org \
--cc=marcel@holtmann.org \
--cc=sashal@kernel.org \
--cc=stable@vger.kernel.org \
--cc=syzbot+96414aa0033c363d8458@syzkaller.appspotmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Powered by JetHome