Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1496489

[PATCH 4.7 118/141] IB/ipoib: Fix memory corruption in ipoib cm mode connect flow

From Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Newsgroups linux.kernel
Subject [PATCH 4.7 118/141] IB/ipoib: Fix memory corruption in ipoib cm mode connect flow
Date 2016-10-06 11:40 +0200
Message-ID <spdjH-6HB-7@gated-at.bofh.it> (permalink)
References <spcnD-64l-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


4.7-stable review patch.  If anyone has any objections, please let me know.

------------------

From: Erez Shitrit <erezsh@mellanox.com>

commit 546481c2816ea3c061ee9d5658eb48070f69212e upstream.

When a new CM connection is being requested, ipoib driver copies data
from the path pointer in the CM/tx object, the path object might be
invalid at the point and memory corruption will happened later when now
the CM driver will try using that data.

The next scenario demonstrates it:
	neigh_add_path --> ipoib_cm_create_tx -->
	queue_work (pointer to path is in the cm/tx struct)
	#while the work is still in the queue,
	#the port goes down and causes the ipoib_flush_paths:
	ipoib_flush_paths --> path_free --> kfree(path)
	#at this point the work scheduled starts.
	ipoib_cm_tx_start --> copy from the (invalid)path pointer:
	(memcpy(&pathrec, &p->path->pathrec, sizeof pathrec);)
	 -> memory corruption.

To fix that the driver now starts the CM/tx connection only if that
specific path exists in the general paths database.
This check is protected with the relevant locks, and uses the gid from
the neigh member in the CM/tx object which is valid according to the ref
count that was taken by the CM/tx.

Fixes: 839fcaba35 ('IPoIB: Connected mode experimental support')
Signed-off-by: Erez Shitrit <erezsh@mellanox.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Doug Ledford <dledford@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

---
 drivers/infiniband/ulp/ipoib/ipoib.h      |    1 +
 drivers/infiniband/ulp/ipoib/ipoib_cm.c   |   16 ++++++++++++++++
 drivers/infiniband/ulp/ipoib/ipoib_main.c |    2 +-
 3 files changed, 18 insertions(+), 1 deletion(-)

--- a/drivers/infiniband/ulp/ipoib/ipoib.h
+++ b/drivers/infiniband/ulp/ipoib/ipoib.h
@@ -478,6 +478,7 @@ void ipoib_send(struct net_device *dev,
 		struct ipoib_ah *address, u32 qpn);
 void ipoib_reap_ah(struct work_struct *work);
 
+struct ipoib_path *__path_find(struct net_device *dev, void *gid);
 void ipoib_mark_paths_invalid(struct net_device *dev);
 void ipoib_flush_paths(struct net_device *dev);
 int ipoib_check_sm_sendonly_fullmember_support(struct ipoib_dev_priv *priv);
--- a/drivers/infiniband/ulp/ipoib/ipoib_cm.c
+++ b/drivers/infiniband/ulp/ipoib/ipoib_cm.c
@@ -1318,6 +1318,8 @@ void ipoib_cm_destroy_tx(struct ipoib_cm
 	}
 }
 
+#define QPN_AND_OPTIONS_OFFSET	4
+
 static void ipoib_cm_tx_start(struct work_struct *work)
 {
 	struct ipoib_dev_priv *priv = container_of(work, struct ipoib_dev_priv,
@@ -1326,6 +1328,7 @@ static void ipoib_cm_tx_start(struct wor
 	struct ipoib_neigh *neigh;
 	struct ipoib_cm_tx *p;
 	unsigned long flags;
+	struct ipoib_path *path;
 	int ret;
 
 	struct ib_sa_path_rec pathrec;
@@ -1338,7 +1341,19 @@ static void ipoib_cm_tx_start(struct wor
 		p = list_entry(priv->cm.start_list.next, typeof(*p), list);
 		list_del_init(&p->list);
 		neigh = p->neigh;
+
 		qpn = IPOIB_QPN(neigh->daddr);
+		/*
+		 * As long as the search is with these 2 locks,
+		 * path existence indicates its validity.
+		 */
+		path = __path_find(dev, neigh->daddr + QPN_AND_OPTIONS_OFFSET);
+		if (!path) {
+			pr_info("%s ignore not valid path %pI6\n",
+				__func__,
+				neigh->daddr + QPN_AND_OPTIONS_OFFSET);
+			goto free_neigh;
+		}
 		memcpy(&pathrec, &p->path->pathrec, sizeof pathrec);
 
 		spin_unlock_irqrestore(&priv->lock, flags);
@@ -1350,6 +1365,7 @@ static void ipoib_cm_tx_start(struct wor
 		spin_lock_irqsave(&priv->lock, flags);
 
 		if (ret) {
+free_neigh:
 			neigh = p->neigh;
 			if (neigh) {
 				neigh->cm = NULL;
--- a/drivers/infiniband/ulp/ipoib/ipoib_main.c
+++ b/drivers/infiniband/ulp/ipoib/ipoib_main.c
@@ -485,7 +485,7 @@ int ipoib_set_mode(struct net_device *de
 	return -EINVAL;
 }
 
-static struct ipoib_path *__path_find(struct net_device *dev, void *gid)
+struct ipoib_path *__path_find(struct net_device *dev, void *gid)
 {
 	struct ipoib_dev_priv *priv = netdev_priv(dev);
 	struct rb_node *n = priv->path_tree.rb_node;

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH 4.7 000/141] 4.7.7-stable review Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 024/141] hwmon: (adt7411) set bit 3 in CFG1 register Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 061/141] regulator: pwm: Fix regulator ramp delay for continuous mode Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 003/141] scripts/recordmcount.c: account for .softirqentry.text Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 045/141] i40iw: Send last streaming mode message for loopback connections Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 023/141] nvmem: Declare nvmem_cell_read() consistently Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 029/141] iwlwifi: mvm: write the correct internal TXF index Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 032/141] iwlwifi: mvm: free RX reorder buffer on restart Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 008/141] x86/boot: Initialize FPU and X86_FEATURE_ALWAYS even if we dont have CPUID Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 046/141] i40iw: Update hw_iwarp_state Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 064/141] regulator: qcom_spmi: Update mvs1/mvs2 switches on pm8941 Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 006/141] can: dev: fix deadlock reported after bus-off Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 028/141] iwlwifi: mvm: fix txq aggregation bug Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 011/141] drm/radeon/si/dpm: add workaround for for Jet parts Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 013/141] ARM: 8617/1: dma: fix dma_max_pfn() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 039/141] i40iw: Add missing check for interface already open Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 018/141] i2c: mux: demux-pinctrl: run properly with multiple instances Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 007/141] x86/init: Fix cr4_init_shadow() on CR4-less machines Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 054/141] MIPS: fix uretprobe implementation Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 002/141] cgroup: fix invalid controller enable rejections with cgroup namespace Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 010/141] drm/nouveau/fifo/nv04: avoid ramht race against cookie insertion Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:40 +0200
  [PATCH 4.7 141/141] ALSA: hda - Add the top speaker pin config for HP Spectre x360 Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 107/141] powerpc/prom: Fix sub-processor option passed to ibm, client-architecture-support Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 101/141] xprtrdma: Remove FMRs from the unmap list after unmapping Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 050/141] irqchip/gicv3: Silence noisy DEBUG_PER_CPU_MAPS warning Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 089/141] fnic: pci_dma_mapping_error() doesnt return an error code Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 093/141] dmaengine: at_xdmac: fix debug string Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 080/141] iwlmvm: mvm: set correct state in smart-fifo configuration Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 122/141] scsi: ses: use scsi_is_sas_rphy instead of is_sas_attached Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
    Re: [PATCH 4.7 122/141] scsi: ses: use scsi_is_sas_rphy instead of  is_sas_attached James Bottomley <jejb@linux.vnet.ibm.com> - 2016-10-06 15:30 +0200
      Re: [PATCH 4.7 122/141] scsi: ses: use scsi_is_sas_rphy instead of  is_sas_attached Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-07 06:10 +0200
  [PATCH 4.7 137/141] USB: serial: cp210x: Add ID for a Juniper console Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 078/141] tile: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 071/141] ARM: sa1100: clear reset status prior to reboot Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 076/141] blk-mq: actually hook up defer list when running requests Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 096/141] NFS: Dont drop CB requests with invalid principals Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 099/141] watchdog: core: Clear WDOG_HW_RUNNING before calling the stop function Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 138/141] Revert "usbtmc: convert to devm_kzalloc" Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 073/141] ARM: sa1111: fix pcmcia suspend/resume Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 072/141] ARM: shmobile: fix regulator quirk for Gen2 Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 090/141] mm, kasan: account for object redzone in SLUBs nearest_obj() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 126/141] IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 074/141] pcmcia: ds: fix suspend/resume Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 077/141] pstore: drop file opened reference count Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 127/141] IB/mlx5: Enable MAD_IFC commands for IB ports only Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 110/141] IB/core: Fix possible memory leak in cma_resolve_iboe_route() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 053/141] MIPS: uprobes: remove incorrect set_orig_insn Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 139/141] ALSA: hda - Adding one more ALC255 pin definition for headset problem Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 106/141] staging: comedi: adv_pci1760: Do not return EINVAL for CMDF_ROUND_DOWN. Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 083/141] [media] v4l: vsp1: Fix crash when resetting pipeline Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 088/141] qla2xxx: Fix BBCR offset Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 136/141] usb: usbip: vudc: fix left shift overflow Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 125/141] IB/mlx4: Fix code indentation in QP1 MAD flow Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 094/141] NFS/pnfs: Do not clobber existing pgio_done_cb in nfs4_proc_read_setup Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 134/141] usb: misc: legousbtower: Fix NULL pointer deference Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 102/141] ASoC: Intel: Skylake: Fix error return code in skl_probe() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 100/141] cxl: fix potential NULL dereference in free_adapter() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 051/141] ARM: 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7 Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 069/141] ARM: sa1100: register clocks early Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 135/141] Staging: fbtft: Fix bug in fbtft-core Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 048/141] batman-adv: Add missing refcnt for last_candidate Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 121/141] regmap: rbtree: Avoid overlapping nodes Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 115/141] dmaengine: at_xdmac: fix to pass correct device identity to free_irq() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 103/141] brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 070/141] ARM: sa1100: fix 3.6864MHz clock Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 087/141] avr32: off by one in at32_init_pio() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 085/141] ath9k: Fix programming of minCCA power threshold Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 047/141] i40iw: Receive notification events correctly Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 079/141] fm10k: fix incorrect index calculation in fm10k_write_reta Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 075/141] hwrng: omap - Fix assumption that runtime_get_sync will always succeed Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 095/141] svc: Avoid garbage replies when pc_func() returns rpc_drop_reply Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 109/141] ASoC: omap-mcpdm: Fix irq resource handling Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 098/141] pNFS/flexfiles: Fix layoutcommit after a commit to DS Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 092/141] dmaengine: bcm2835: fix 64-bit warning Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 052/141] arm64: debug: avoid resetting stepping state machine when TIF_SINGLESTEP Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 111/141] kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 112/141] SUNRPC: Silence WARN_ON when NFSv4.1 over RDMA is in use Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 097/141] pNFS/files: Fix layoutcommit after a commit to DS Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 104/141] brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 082/141] [media] em28xx-i2c: rt_mutex_trylock() returns zero on failure Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 123/141] IB/ipoib: Dont allow MC joins during light MC flush Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 084/141] [media] gspca: avoid unused variable warnings Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 10:50 +0200
  [PATCH 4.7 131/141] tpm_crb: fix mapping of the buffers Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:00 +0200
  [PATCH 4.7 132/141] aio: mark AIO pseudo-fs noexec Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:00 +0200
  [PATCH 4.7 124/141] IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:00 +0200
  [PATCH 4.7 130/141] tpm_crb: drop struct resource res from struct crb_priv Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:00 +0200
  [PATCH 4.7 128/141] IB/mlx5: Set source mac address in FTE Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:00 +0200
  [PATCH 4.7 133/141] dm log writes: fix bug with too large bios Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:00 +0200
  [PATCH 4.7 091/141] tracing: Have HIST_TRIGGERS select TRACING Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:30 +0200
  [PATCH 4.7 140/141] ALSA: hda - Fix headset mic detection problem for several Dell laptops Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:30 +0200
  [PATCH 4.7 129/141] batman-adv: remove unused callback from batadv_algo_ops struct Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:30 +0200
  [PATCH 4.7 118/141] IB/ipoib: Fix memory corruption in ipoib cm mode connect flow Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:40 +0200
  [PATCH 4.7 086/141] mailbox: mailbox-test: set tdev->signal to NULL after freeing Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:40 +0200
  [PATCH 4.7 120/141] IB/core: Fix use after free in send_leave function Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:40 +0200
  [PATCH 4.7 119/141] ath10k: fix get rx_status from htt context Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:40 +0200
  [PATCH 4.7 113/141] pNFS/flexfiles: Fix layoutstat periodic reporting Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:40 +0200
  [PATCH 4.7 117/141] ceph: do not modify fi->frag in need_reset_readdir() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:40 +0200
  [PATCH 4.7 114/141] lib/test_hash.c: fix warning in preprocessor symbol evaluation Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:40 +0200
  [PATCH 4.7 105/141] brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get() Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:50 +0200
  [PATCH 4.7 108/141] sysctl: handle error writing UINT_MAX to u32 fields Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:50 +0200
  [PATCH 4.7 044/141] i40iw: Add missing NULL check for MPA private data Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 11:50 +0200
  [PATCH 4.7 038/141] i40iw: Protect req_resource_num update Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 12:00 +0200
  [PATCH 4.7 056/141] MIPS: uprobes: fix use of uninitialised variable Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 12:00 +0200
  [PATCH 4.7 058/141] Bluetooth: split sk_filter in l2cap_sock_recv_cb Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 12:00 +0200
  [PATCH 4.7 005/141] mm,ksm: fix endless looping in allocating memory when ksm enable Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 12:00 +0200
  [PATCH 4.7 014/141] mwifiex: illegal assignment Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 12:00 +0200
  [PATCH 4.7 036/141] gpio: sa1100: fix irq probing for ucb1x00 Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 12:00 +0200
  [PATCH 4.7 055/141] MIPS: Malta: Fix IOCU disable switch read for MIPS64 Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-06 12:00 +0200
  Re: [PATCH 4.7 000/141] 4.7.7-stable review Guenter Roeck <linux@roeck-us.net> - 2016-10-06 21:00 +0200
    Re: [PATCH 4.7 000/141] 4.7.7-stable review Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2016-10-07 06:10 +0200
  Re: [PATCH 4.7 000/141] 4.7.7-stable review Shuah Khan <shuah.kh@samsung.com> - 2016-10-06 22:00 +0200

csiph-web