Linux Kernel 4.14.223 Released

Linux kernel 4.14.223 is a stable release in the long-term support (LTS) 4.14 series. This patch version includes 176 changes and bug fixes across 277,921 lines of code modifications compared to the base 4.14 release.

Where to Get the Code

The source code is available from the linux-stable tree with the linux-4.14.223 tag. You can download the release tarball or the patch directly from kernel.org.

To apply the patch to your 4.14 kernel:

cd linux-4.14.y
patch -p1 < patch-4.14.223.gz

Major Changes and Fixes

Device Mapper and Storage

• dm era: Fixed multiple memory leaks, bitset handling, and crash recovery in the era target
• dm era: Corrected metadata resizing to only occur during preresume, preventing premature operations
• btrfs: Fixed extent buffer and reloc root leaks; improved error handling in copy operations
• ext4: Resolved potential htree index checksum corruption

Networking and IP Stack

• ICMP: Introduced icmp_ndo_send() helper for proper source address handling in network device context, used across multiple drivers (sunvnet, gtp)
• IPv6: Fixed compilation warnings in non-IPv6 builds and optimized icmpv6_send() to avoid indirect calls
• mlx4_core: Added missing cleanup call in mailbox handling
• i40e: Fixed flow control settings overwriting during driver load; corrected IPv6 extension header processing
• mvneta: Removed per-CPU queue mapping for Armada 3700 to fix performance issues
• amd-xgbe: Reset link handling when connection fails; added PHY rx data path reset on mailbox timeout
• bnxt_en: Corrected TX disable and carrier off ordering

File Systems

• gfs2: Fixed glock unlock handling when lvb is present
• ocfs2: Fixed use-after-free on error paths
• isofs: Improved buffer head release on error conditions
• jffs2: Fixed use-after-free in summary write operations
• jfs: Prevented potential integer overflow on bit shifts

Memory Management

• hugetlb: Fixed race condition between page freeing and dissolution; resolved potential double-free in error paths
• mm/rmap: Fixed potential pte_unmap issue on unmapped pages

USB and HID

• dwc3: Fixed DEPCFG.bInterval_m1 and dep->interval configuration for gadget mode
• musb: Fixed runtime PM race condition in queue_resume_work
• dwc2: Corrected xfer length handling; abort transactions on unknown errors
• renesas_usbhs: Cleared pipe running flag in packet pop
• wacom HID: Fixed touch_max value override attempts
• option serial: Updated device interface mapping for ZTE P685M

Security and Crypto

• seccomp: Added missing return statement in non-void function
• crypto/bcm: Renamed conflicting device_private struct to bcm_device_private
• crypto/sun4i-ss: Fixed BigEndian cipher handling and improved sg length checking
• KEYS/trusted: Fixed migratable key handling
• tpm_tis: Corrected locality acquisition check

Interrupt and Exceptions

• sparc32: Fixed user-triggerable oops in clear_user()
• arm64/uprobe: Returned EOPNOTSUPP for AARCH32 instruction probing attempts
• printk: Fixed deadlock when kernel panic occurs
• gpio/pcf857x: Fixed missing first interrupt handling

Platform and Architecture

• x86/reboot: Force all CPUs to exit VMX root if VMX is supported
• powerpc/8xx: Fixed software emulation interrupt handling
• powerpc/47x: Disabled 256k page size due to compatibility issues
• ARM/ARMv7: Fixed decompressor SCTLR.nTLSMD handling
• ARM/tegra: Added power-domain for Tegra210 HDA

Input Devices

• i8042: Added ASUS Zenbook Flip to noselftest list
• xpad: Added support for PowerA Enhanced Wired Controller for Xbox Series X|S
• joydev: Prevented read overflow in ioctl handler
• raydium_ts_i2c: Fixed zero-length packet sending

Watchdog and RTC

• watchdog/mei_wdt: Request stop on unregister to prevent hangs
• rtc/s5m: Selected required REGMAP_I2C dependency

Resource Management and Error Handling

Numerous fixes throughout the kernel for resource leaks, use-after-free conditions, and proper error path cleanup in drivers across:

• Bluetooth subsystem (HCI device reference handling)
• USB gadget framework (audio request cleanup)
• ALSA audio (codec probe error handling)
• Media drivers (vsp1, tm6000, cx25821, qm1d1c0042)
• EEPROM drivers (module alias and autoprobe)
• DMA engines (hsu, fsldma resource leaks)
• Various architecture-specific code

Security and Capability Handling

• capabilities: Prevented writing ambiguous v3 file capabilities
• ima: Fixed measurement buffer leaks on error and kexec syscall

Stable Branch Information

4.14.223 is part of the 4.14 LTS series, which receives backported security and critical stability fixes. For production systems, verify your kernel configuration matches your workload requirements before updating. Test updates in staging environments first, particularly for storage, networking, and security-sensitive subsystems affected by these changes.