lp:ubuntu/trusty-security/linux-lts-wily

Created by Ubuntu Package Importer on 2016-02-24 and last modified on 2016-08-12
Get this branch:
bzr branch lp:ubuntu/trusty-security/linux-lts-wily
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

23. By Ben Romer on 2016-06-28

[ Ben Romer ]

* Release Tracking Bug
  - LP: #1597108

[ Josh Boyer ]

* SAUCE: UEFI: acpi: Ignore acpi_rsdp kernel parameter when module
  loading is restricted
  - LP: #1566221
* SAUCE: UEFI: efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI
  - LP: #1566221
* SAUCE: UEFI MODSIGN: Import certificates from UEFI Secure Boot
  - LP: #1571691
* SAUCE: UEFI: efi: Disable secure boot if shim is in insecure mode
  - LP: #1571691

[ Matthew Garrett ]

* SAUCE: UEFI: Add secure_modules() call
  - LP: #1566221
* SAUCE: UEFI: PCI: Lock down BAR access when module security is enabled
  - LP: #1566221
* SAUCE: UEFI: x86: Lock down IO port access when module security is
  enabled
  - LP: #1566221
* SAUCE: UEFI: ACPI: Limit access to custom_method
  - LP: #1566221
* SAUCE: UEFI: asus-wmi: Restrict debugfs interface when module loading
  is restricted
  - LP: #1566221
* SAUCE: UEFI: Restrict /dev/mem and /dev/kmem when module loading is
  restricted
  - LP: #1566221
* SAUCE: UEFI: kexec: Disable at runtime if the kernel enforces module
  loading restrictions
  - LP: #1566221
* SAUCE: UEFI: x86: Restrict MSR access when module loading is restricted
  - LP: #1566221
* SAUCE: UEFI: Add option to automatically enforce module signatures when
  in Secure Boot mode
  - LP: #1566221

[ Stefan Bader ]

* [Config] Add pm80xx scsi driver to d-i
  - LP: #1595628

[ Tim Gardner ]

* [Config] CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE=y
* SAUCE: UEFI: Display MOKSBState when disabled
  - LP: #1571691
* SAUCE: UEFI: Add secure boot and MOK SB State disabled sysctl
  - LP: #1593075

[ Upstream Kernel Changes ]

* Revert "scsi: fix soft lockup in scsi_remove_target() on module
  removal"
  - LP: #1592552
* ath10k: fix firmware assert in monitor mode
  - LP: #1592552
* drm/i915: Fix race condition in intel_dp_destroy_mst_connector()
  - LP: #1592552
* ath10k: fix debugfs pktlog_filter write
  - LP: #1592552
* drm/i915: Call intel_dp_mst_resume() before resuming displays
  - LP: #1592552
* ARM: mvebu: fix GPIO config on the Linksys boards
  - LP: #1592552
* ath5k: Change led pin configuration for compaq c700 laptop
  - LP: #1592552, #972604
* xfs: disallow rw remount on fs with unknown ro-compat features
  - LP: #1592552
* xfs: Don't wrap growfs AGFL indexes
  - LP: #1592552
* rtlwifi: rtl8723be: Add antenna select module parameter
  - LP: #1592552
* rtlwifi: btcoexist: Implement antenna selection
  - LP: #1592552
* drm/gma500: Fix possible out of bounds read
  - LP: #1592552
* Bluetooth: vhci: fix open_timeout vs. hdev race
  - LP: #1592552
* Bluetooth: vhci: purge unhandled skbs
  - LP: #1592552
* cpuidle: Indicate when a device has been unregistered
  - LP: #1592552
* mfd: intel_quark_i2c_gpio: Use clkdev_create()
  - LP: #1592552
* mfd: intel_quark_i2c_gpio: Remove clock tree on error path
  - LP: #1592552
* [media] media: v4l2-compat-ioctl32: fix missing reserved field copy in
  put_v4l2_create32
  - LP: #1592552
* scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
  - LP: #1592552
* drm/i915/dsi: fix CHV dsi encoder hardware state readout on port C
  - LP: #1592552
* usb: f_mass_storage: test whether thread is running before starting
  another
  - LP: #1592552
* hwmon: (ads7828) Enable internal reference
  - LP: #1592552
* ath10k: fix rx_channel during hw reconfigure
  - LP: #1592552
* Bluetooth: vhci: Fix race at creating hci device
  - LP: #1592552
* powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
  - LP: #1592552
* PM / Runtime: Fix error path in pm_runtime_force_resume()
  - LP: #1592552
* crypto: s5p-sss - Fix missed interrupts when working with 8 kB blocks
  - LP: #1592552
* ath9k: Add a module parameter to invert LED polarity.
  - LP: #1592552
* ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
  - LP: #1592552
* pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
  - LP: #1592552
* btrfs: bugfix: handle FS_IOC32_{GETFLAGS,SETFLAGS,GETVERSION} in
  btrfs_ioctl
  - LP: #1592552
* serial: 8250_pci: fix divide error bug if baud rate is 0
  - LP: #1592552
* TTY: n_gsm, fix false positive WARN_ON
  - LP: #1592552
* staging: comedi: das1800: fix possible NULL dereference
  - LP: #1592552
* arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
  - LP: #1592552
* KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
  - LP: #1592552
* aacraid: Relinquish CPU during timeout wait
  - LP: #1592552
* aacraid: Fix for aac_command_thread hang
  - LP: #1592552
* aacraid: Fix for KDUMP driver hang
  - LP: #1592552
* ext4: fix hang when processing corrupted orphaned inode list
  - LP: #1592552
* MIPS: ath79: make bootconsole wait for both THRE and TEMT
  - LP: #1592552
* Drivers: hv: ring_buffer.c: fix comment style
  - LP: #1592552
* mei: fix NULL dereferencing during FW initiated disconnection
  - LP: #1592552
* mei: amthif: discard not read messages
  - LP: #1592552
* tty: Abstract tty buffer work
  - LP: #1592552
* Fix OpenSSH pty regression on close
  - LP: #1592552
* QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
  - LP: #1592552
* thunderbolt: Fix double free of drom buffer
  - LP: #1592552
* USB: serial: option: add support for Cinterion PH8 and AHxx
  - LP: #1592552
* usb: misc: usbtest: format the data pattern according to max packet
  size
  - LP: #1592552
* usb: misc: usbtest: fix pattern tests for scatterlists.
  - LP: #1592552
* mcb: Fixed bar number assignment for the gdd
  - LP: #1592552
* USB: serial: option: add more ZTE device ids
  - LP: #1592552
* USB: serial: option: add even more ZTE device ids
  - LP: #1592552
* ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA
  internal strings
  - LP: #1592552
* drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
  - LP: #1592552
* USB: serial: cp210x: fix hardware flow-control disable
  - LP: #1592552
* ext4: fix oops on corrupted filesystem
  - LP: #1592552
* ext4: address UBSAN warning in mb_find_order_for_block()
  - LP: #1592552
* ext4: silence UBSAN in ext4_mb_init()
  - LP: #1592552
* arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
  - LP: #1592552
* ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on
  exynos4210-trats
  - LP: #1592552
* ath10k: fix kernel panic, move arvifs list head init before htt init
  - LP: #1592552
* can: fix handling of unmodifiable configuration options
  - LP: #1592552
* MIPS: Fix siginfo.h to use strict posix types
  - LP: #1592552
* MIPS: Don't unwind to user mode with EVA
  - LP: #1592552
* MIPS: Avoid using unwind_stack() with usermode
  - LP: #1592552
* MIPS: Reserve nosave data for hibernation
  - LP: #1592552
* MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
  - LP: #1592552
* MIPS64: R6: R2 emulation bugfix
  - LP: #1592552
* usb: host: xhci-rcar: Avoid long wait in xhci_reset()
  - LP: #1592552
* mfd: omap-usb-tll: Fix scheduling while atomic BUG
  - LP: #1592552
* USB: serial: io_edgeport: fix memory leaks in attach error path
  - LP: #1592552
* USB: serial: io_edgeport: fix memory leaks in probe error path
  - LP: #1592552
* USB: serial: keyspan: fix use-after-free in probe error path
  - LP: #1592552
* USB: serial: mxuport: fix use-after-free in probe error path
  - LP: #1592552
* USB: serial: quatech2: fix use-after-free in probe error path
  - LP: #1592552
* crypto: caam - fix caam_jr_alloc() ret code
  - LP: #1592552
* MIPS: KVM: Fix timer IRQ race when freezing timer
  - LP: #1592552
* MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
  - LP: #1592552
* gcov: disable tree-loop-im to reduce stack usage
  - LP: #1592552
* irqchip/gic: Ensure ordering between read of INTACK and shared data
  - LP: #1592552
* irqchip/gic-v3: Configure all interrupts as non-secure Group-1
  - LP: #1592552
* arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
  - LP: #1592552
* kbuild: move -Wunused-const-variable to W=1 warning level
  - LP: #1592552
* rtlwifi: Fix logic error in enter/exit power-save mode
  - LP: #1592552
* rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in
  rtl_pci_reset_trx_ring
  - LP: #1592552
* sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded
  systems
  - LP: #1592552
* powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
  - LP: #1592552
* powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
  - LP: #1592552
* MIPS: Handle highmem pages in __update_cache
  - LP: #1592552
* MIPS: Sync icache & dcache in set_pte_at
  - LP: #1592552
* SIGNAL: Move generic copy_siginfo() to signal.h
  - LP: #1592552
* MIPS: Fix uapi include in exported asm/siginfo.h
  - LP: #1592552
* MIPS: math-emu: Fix jalr emulation when rd == $0
  - LP: #1592552
* MIPS: ptrace: Fix FP context restoration FCSR regression
  - LP: #1592552
* MIPS: ptrace: Prevent writes to read-only FCSR bits
  - LP: #1592552
* MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
  - LP: #1592552
* MIPS: Force CPUs to lose FP context during mode switches
  - LP: #1592552
* ring-buffer: Use long for nr_pages to avoid overflow failures
  - LP: #1592552
* ring-buffer: Prevent overflow of size in ring_buffer_resize()
  - LP: #1592552
* mmc: mmc: Fix partition switch timeout for some eMMCs
  - LP: #1592552
* PCI: Disable all BAR sizing for devices with non-compliant BARs
  - LP: #1592552
* MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
  - LP: #1592552
* drm/i915/fbdev: Fix num_connector references in
  intel_fb_initial_config()
  - LP: #1592552
* drm/fb_helper: Fix references to dev->mode_config.num_connector
  - LP: #1592552
* fs/cifs: correctly to anonymous authentication via NTLMSSP
  - LP: #1592552
* fs/cifs: correctly to anonymous authentication for the LANMAN
  authentication
  - LP: #1592552
* fs/cifs: correctly to anonymous authentication for the NTLM(v1)
  authentication
  - LP: #1592552
* fs/cifs: correctly to anonymous authentication for the NTLM(v2)
  authentication
  - LP: #1592552
* remove directory incorrectly tries to set delete on close on non-empty
  directories
  - LP: #1592552
* cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
  - LP: #1592552
* xfs: xfs_iflush_cluster fails to abort on error
  - LP: #1592552
* xfs: fix inode validity check in xfs_iflush_cluster
  - LP: #1592552
* xfs: skip stale inodes in xfs_iflush_cluster
  - LP: #1592552
* ASoC: ak4642: Enable cache usage to fix crashes on resume
  - LP: #1592552
* cifs: Create dedicated keyring for spnego operations
  - LP: #1592552
* ALSA: hda - Fix headphone noise on Dell XPS 13 9360
  - LP: #1592552
* kvm: arm64: Fix EC field in inject_abt64
  - LP: #1592552
* Input: uinput - handle compat ioctl for UI_SET_PHYS
  - LP: #1592552
* PM / sleep: Handle failures in device_suspend_late() consistently
  - LP: #1592552
* mm: use phys_addr_t for reserve_bootmem_region() arguments
  - LP: #1592552
* locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
  - LP: #1592552
* drm/i915: Don't leave old junk in ilk active watermarks on readout
  - LP: #1592552
* mmc: longer timeout for long read time quirk
  - LP: #1592552
* mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
  - LP: #1592552
* mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
  - LP: #1592552
* sunrpc: fix stripping of padded MIC tokens
  - LP: #1592552
* wait/ptrace: assume __WALL if the child is traced
  - LP: #1592552
* xen/x86: actually allocate legacy interrupts on PV guests
  - LP: #1592552
* xen/events: Don't move disabled irqs
  - LP: #1592552
* UBI: Fix static volume checks when Fastmap is used
  - LP: #1592552
* drm/amdgpu: Fix hdmi deep color support.
  - LP: #1592552
* dma-debug: avoid spinlock recursion when disabling dma-debug
  - LP: #1592552
* dell-rbtn: Ignore ACPI notifications if device is suspended
  - LP: #1592552
* Input: xpad - prevent spurious input from wired Xbox 360 controllers
  - LP: #1592552
* Input: pwm-beeper - fix - scheduling while atomic
  - LP: #1592552
* MIPS: lib: Mark intrinsics notrace
  - LP: #1592552
* hpfs: fix remount failure when there are no options changed
  - LP: #1592552
* affs: fix remount failure when there are no options changed
  - LP: #1592552
* hpfs: implement the show_options method
  - LP: #1592552
* regmap: cache: Fix typo in cache_bypass parameter description
  - LP: #1592552
* ARM: dts: kirkwood: add kirkwood-ds112.dtb to Makefile
  - LP: #1592552
* serial: doc: Un-document non-existing uart_write_console()
  - LP: #1592552
* iio: buffer: add missing descriptions in iio_buffer_access_funcs
  - LP: #1592552
* iommu/vt-d: Ratelimit fault handler
  - LP: #1592552
* iommu/vt-d: Improve fault handler error messages
  - LP: #1592552
* power: ipaq-micro-battery: freeing the wrong variable
  - LP: #1592552
* ARM: OMAP2+: hwmod: fix _idle() hwmod state sanity check sequence
  - LP: #1592552
* security: drop the unused hook skb_owned_by
  - LP: #1592552
* mfd: lp8788-irq: Uninitialized variable in irq handler
  - LP: #1592552
* am437x-vfpe: fix typo in vpfe_get_app_input_index
  - LP: #1592552
* am437x-vpfe: fix an uninitialized variable bug
  - LP: #1592552
* cx23885: uninitialized variable in cx23885_av_work_handler()
  - LP: #1592552
* ipv6, token: allow for clearing the current device token
  - LP: #1592552
* usb: gadget: f_fs: Fix EFAULT generation for async read operations
  - LP: #1592552
* EDAC: Increment correct counter in edac_inc_ue_error()
  - LP: #1592552
* PCI: Supply CPU physical address (not bus address) to
  iomem_is_exclusive()
  - LP: #1592552
* alpha/PCI: Call iomem_is_exclusive() for IORESOURCE_MEM, but not
  IORESOURCE_IO
  - LP: #1592552
* ARM: debug: remove extraneous DEBUG_HI3716_UART option
  - LP: #1592552
* cxl: Fix DAR check & use REGION_ID instead of opencoding
  - LP: #1592552
* taskstats: fix nl parsing in accounting/getdelays.c
  - LP: #1592552
* char: Drop bogus dependency of DEVPORT on !M68K
  - LP: #1592552
* driver-core: use 'dev' argument in dev_dbg_ratelimited stub
  - LP: #1592552
* metag: Fix atomic_*_return inline asm constraints
  - LP: #1592552
* tty: vt, return error when con_startup fails
  - LP: #1592552
* cpufreq: Fix GOV_LIMITS handling for the userspace governor
  - LP: #1592552
* ACPI / sysfs: fix error code in get_status()
  - LP: #1592552
* clk: qcom: msm8916: Fix crypto clock flags
  - LP: #1592552
* MIPS: BMIPS: Fix PRID_IMP_BMIPS5000 masking for BMIPS5200
  - LP: #1592552
* NFS: Fix an LOCK/OPEN race when unlinking an open file
  - LP: #1592552
* ata: sata_dwc_460ex: remove incorrect locking
  - LP: #1592552
* s390/vmem: fix identity mapping
  - LP: #1592552
* perf tools: Fix perf regs mask generation
  - LP: #1592552
* powerpc/sstep: Fix sstep.c compile on powerpcspe
  - LP: #1592552
* MIPS: BMIPS: BMIPS5000 has I cache filing from D cache
  - LP: #1592552
* MIPS: BMIPS: Clear MIPS_CACHE_ALIASES earlier
  - LP: #1592552
* MIPS: BMIPS: local_r4k___flush_cache_all needs to blast S-cache
  - LP: #1592552
* MIPS: BMIPS: Pretty print BMIPS5200 processor name
  - LP: #1592552
* MIPS: math-emu: Fix BC1{EQ,NE}Z emulation
  - LP: #1592552
* MIPS: Fix BC1{EQ,NE}Z return offset calculation
  - LP: #1592552
* MIPS: BMIPS: Adjust mips-hpt-frequency for BCM7435
  - LP: #1592552
* IB/srp: Print "ib_srp: " prefix once
  - LP: #1592552
* IB/IWPM: Fix a potential skb leak
  - LP: #1592552
* i40e: fix an uninitialized variable bug
  - LP: #1592552
* blk-mq: fix undefined behaviour in order_to_size()
  - LP: #1592552
* x86/PCI: Mark Broadwell-EP Home Agent 1 as having non-compliant BARs
  - LP: #1592552
* netlink: Fix dump skb leak/double free
  - LP: #1592552
* MIPS: ath79: fix regression in PCI window initialization
  - LP: #1592552
* sched/preempt: Fix preempt_count manipulations
  - LP: #1592552
* tipc: fix nametable publication field in nl compat
  - LP: #1592552
* sunrpc: Update RPCBIND_MAXNETIDLEN
  - LP: #1592552
* batman-adv: fix skb deref after free
  - LP: #1592552
* net: ehea: avoid null pointer dereference
  - LP: #1592552
* tuntap: correctly wake up process during uninit
  - LP: #1592552
* uapi glibc compat: fix compilation when !__USE_MISC in glibc
  - LP: #1592552
* drivers/hwspinlock: use correct radix tree API
  - LP: #1592552
* RDMA/cxgb3: device driver frees DMA memory with different size
  - LP: #1592552
* Linux 4.2.8-ckt12
  - LP: #1592552
* HID: core: prevent out-of-bound readings
  - LP: #1579190
* mm: migrate dirty page without clear_page_dirty_for_io etc
  - LP: #1581865
  - CVE-2016-3070

22. By Kamal Mostafa on 2016-06-24

[ Luis Henriques ]

* Release Tracking Bug
  - LP: #1595921

[ Upstream Kernel Changes ]

* netfilter: x_tables: validate e->target_offset early
  - LP: #1555338
  - CVE-2016-3134
* netfilter: x_tables: make sure e->next_offset covers remaining blob
  size
  - LP: #1555338
  - CVE-2016-3134
* netfilter: x_tables: fix unconditional helper
  - LP: #1555338
  - CVE-2016-3134
* netfilter: x_tables: don't move to non-existent next rule
  - LP: #1595350
* netfilter: x_tables: validate targets of jumps
  - LP: #1595350
* netfilter: x_tables: add and use xt_check_entry_offsets
  - LP: #1595350
* netfilter: x_tables: kill check_entry helper
  - LP: #1595350
* netfilter: x_tables: assert minimum target size
  - LP: #1595350
* netfilter: x_tables: add compat version of xt_check_entry_offsets
  - LP: #1595350
* netfilter: x_tables: check standard target size too
  - LP: #1595350
* netfilter: x_tables: check for bogus target offset
  - LP: #1595350
* netfilter: x_tables: validate all offsets and sizes in a rule
  - LP: #1595350
* netfilter: x_tables: don't reject valid target size on some
  architectures
  - LP: #1595350
* netfilter: arp_tables: simplify translate_compat_table args
  - LP: #1595350
* netfilter: ip_tables: simplify translate_compat_table args
  - LP: #1595350
* netfilter: ip6_tables: simplify translate_compat_table args
  - LP: #1595350
* netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
  - LP: #1595350
* netfilter: x_tables: do compat validation via translate_table
  - LP: #1595350
* netfilter: x_tables: introduce and use xt_copy_counters_from_user
  - LP: #1595350

21. By Andy Whitcroft on 2016-06-09

[ Kamal Mostafa ]

* CVE-2016-1583 (LP: #1588871)
  - ecryptfs: fix handling of directory opening
  - SAUCE: proc: prevent stacking filesystems on top
  - SAUCE: ecryptfs: forbid opening files without mmap handler
  - SAUCE: sched: panic on corrupted stack end

20. By Kamal Mostafa on 2016-05-12

[ Kamal Mostafa ]

* CVE-2016-3713 (LP: #1581201)
  - SAUCE: KVM: MTRR: remove MSR 0x2f8

* CVE-2016-0758 (LP: #1581202)
  - SAUCE: KEYS: Fix ASN.1 indefinite length object parsing

19. By Kamal Mostafa on 2016-04-18

[ Kamal Mostafa ]

* Release Tracking Bug
  - LP: #1572212

[ Benjamin Tissoires ]

* SAUCE: Input: synaptics - handle spurious release of trackstick
  buttons, again
  - LP: #1553811

[ dann frazier ]

* Revert "SAUCE: arm64, numa, dt: adding dt based numa support using dt
  node property arm, associativity"
  - LP: #1558828
* Revert "SAUCE: Documentation: arm64/arm: dt bindings for numa."
  - LP: #1558828
* Revert "SAUCE: arm64, numa: adding numa support for arm64 platforms."
  - LP: #1558828
* Revert "[Config] Enable NUMA on ARM64"
  - LP: #1558828

[ K. Y. Srinivasan ]

* SAUCE: (noup): Drivers: hv: vmbus: Fix a bug in
  hv_need_to_signal_on_read()
  - LP: #1556264

[ Kamal Mostafa ]

* [debian] BugLink: close LP: bugs only for Launchpad urls
* [Config] updateconfigs after v4.2.8-ckt7

[ Upstream Kernel Changes ]

* Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
  - LP: #1561677
* tipc: fix connection abort during subscription cancel
  - LP: #1561677
* tipc: fix nullptr crash during subscription cancel
  - LP: #1561677
* s390/mm: four page table levels vs. fork
  - LP: #1561677
* Input: aiptek - fix crash on detecting device without endpoints
  - LP: #1561677
* wext: fix message delay/ordering
  - LP: #1561677
* cfg80211/wext: fix message ordering
  - LP: #1561677
* mac80211: fix use of uninitialised values in RX aggregation
  - LP: #1561677
* mac80211: minstrel: Change expected throughput unit back to Kbps
  - LP: #1561677
* libata: fix HDIO_GET_32BIT ioctl
  - LP: #1561677
* iwlwifi: mvm: inc pending frames counter also when txing non-sta
  - LP: #1561677
* [media] adv7604: fix tx 5v detect regression
  - LP: #1561677
* ahci: add new Intel device IDs
  - LP: #1561677
* ahci: Order SATA device IDs for codename Lewisburg
  - LP: #1561677
* Adding Intel Lewisburg device IDs for SATA
  - LP: #1561677
* ASoC: samsung: Use IRQ safe spin lock calls
  - LP: #1561677
* mac80211: minstrel_ht: set default tx aggregation timeout to 0
  - LP: #1561677
* usb: chipidea: otg: change workqueue ci_otg as freezable
  - LP: #1561677
* jffs2: Fix page lock / f->sem deadlock
  - LP: #1561677
* Fix directory hardlinks from deleted directories
  - LP: #1561677
* iommu/amd: Fix boot warning when device 00:00.0 is not iommu covered
  - LP: #1561677
* iommu/amd: Apply workaround for ATS write permission check
  - LP: #1561677
* libata: Align ata_device's id on a cacheline
  - LP: #1561677
* can: gs_usb: fixed disconnect bug by removing erroneous use of kfree()
  - LP: #1561677
* fbcon: set a default value to blink interval
  - LP: #1561677
* KVM: x86: fix root cause for missed hardware breakpoints
  - LP: #1561677
* arm64: vmemmap: use virtual projection of linear region
  - LP: #1561677
* vfio: fix ioctl error handling
  - LP: #1561677
* ALSA: ctl: Fix ioctls for X32 ABI
  - LP: #1561677
* ALSA: pcm: Fix ioctls for X32 ABI
  - LP: #1561677
* ALSA: rawmidi: Fix ioctls X32 ABI
  - LP: #1561677
* ALSA: timer: Fix broken compat timer user status ioctl
  - LP: #1561677
* ALSA: timer: Fix ioctls for X32 ABI
  - LP: #1561677
* cifs: fix out-of-bounds access in lease parsing
  - LP: #1561677
* CIFS: Fix SMB2+ interim response processing for read requests
  - LP: #1561677
* Fix cifs_uniqueid_to_ino_t() function for s390x
  - LP: #1561677
* arm/arm64: KVM: Fix ioctl error handling
  - LP: #1561677
* MIPS: kvm: Fix ioctl error handling.
  - LP: #1561677
* ALSA: hdspm: Fix wrong boolean ctl value accesses
  - LP: #1561677
* ALSA: hdspm: Fix zero-division
  - LP: #1561677
* ALSA: hdsp: Fix wrong boolean ctl value accesses
  - LP: #1561677
* use ->d_seq to get coherency between ->d_inode and ->d_flags
  - LP: #1561677
* USB: qcserial: add Dell Wireless 5809e Gobi 4G HSPA+ (rev3)
  - LP: #1561677
* USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
  - LP: #1561677
* ASoC: dapm: Fix ctl value accesses in a wrong type
  - LP: #1561677
* ASoC: wm8958: Fix enum ctl accesses in a wrong type
  - LP: #1561677
* ASoC: wm8994: Fix enum ctl accesses in a wrong type
  - LP: #1561677
* ASoC: wm_adsp: Fix enum ctl accesses in a wrong type
  - LP: #1561677
* USB: serial: option: add support for Telit LE922 PID 0x1045
  - LP: #1561677
* USB: serial: option: add support for Quectel UC20
  - LP: #1561677
* ALSA: usb-audio: Add a quirk for Plantronics DA45
  - LP: #1561677
* mac80211: check PN correctly for GCMP-encrypted fragmented MPDUs
  - LP: #1561677
* mac80211: Fix Public Action frame RX in AP mode
  - LP: #1561677
* i2c: brcmstb: allocate correct amount of memory for regmap
  - LP: #1561677
* ALSA: seq: oss: Don't drain at closing a client
  - LP: #1561677
* parisc: Fix ptrace syscall number and return value modification
  - LP: #1561677
* drm/ast: Fix incorrect register check for DRAM width
  - LP: #1561677
* USB: qcserial: add Sierra Wireless EM74xx device ID
  - LP: #1561677
* drm/amdgpu/pm: update current crtc info after setting the powerstate
  - LP: #1561677
* drm/radeon/pm: update current crtc info after setting the powerstate
  - LP: #1561677
* drm/amdgpu: return from atombios_dp_get_dpcd only when error
  - LP: #1561677
* PM / sleep / x86: Fix crash on graph trace through x86 suspend
  - LP: #1561677
* ALSA: hda - Fix mic issues on Acer Aspire E1-472
  - LP: #1561677
* ovl: fix working on distributed fs as lower layer
  - LP: #1561677
* ovl: fix getcwd() failure after unsuccessful rmdir
  - LP: #1561677
* ovl: ignore lower entries when checking purity of non-directory entries
  - LP: #1561677
* MIPS: traps: Fix SIGFPE information leak from `do_ov' and
  `do_trap_or_bp'
  - LP: #1561677
* ubi: Fix out of bounds write in volume update code
  - LP: #1561677
* target: Drop incorrect ABORT_TASK put for completed commands
  - LP: #1561677
* ARM: OMAP2+: hwmod: Introduce ti,no-idle dt property
  - LP: #1561677
* ARM: dts: dra7: do not gate cpsw clock due to errata i877
  - LP: #1561677
* PCI: Allow a NULL "parent" pointer in pci_bus_assign_domain_nr()
  - LP: #1561677
* KVM: PPC: Book3S HV: Sanitize special-purpose register values on guest
  exit
  - LP: #1561677
* ncpfs: fix a braino in OOM handling in ncp_fill_cache()
  - LP: #1561677
* jffs2: reduce the breakage on recovery from halfway failed rename()
  - LP: #1561677
* KVM: VMX: disable PEBS before a guest entry
  - LP: #1561677
* arm64: account for sparsemem section alignment when choosing vmemmap
  offset
  - LP: #1561677
* tracing: Fix check for cpu online when event is disabled
  - LP: #1561677
* KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
  - LP: #1561677
* dmaengine: at_xdmac: fix residue computation
  - LP: #1561677
* MIPS: Fix build error when SMP is used without GIC
  - LP: #1561677
* IB/core: Use GRH when the path hop-limit > 0
  - LP: #1561677
* dmaengine: pxa_dma: fix cyclic transfers
  - LP: #1561677
* MIPS: smp.c: Fix uninitialised temp_foreign_map
  - LP: #1561677
* tcp: fix tcpi_segs_in after connection establishment
  - LP: #1561677
* be2net: Don't leak iomapped memory on removal.
  - LP: #1561677
* tcp: convert cached rtt from usec to jiffies when feeding initial rto
  - LP: #1561677
* ext4: iterate over buffer heads correctly in move_extent_per_page()
  - LP: #1561677
* ppp: release rtnl mutex when interface creation fails
  - LP: #1561677
* net/mlx4_core: Allow resetting VF admin mac to zero
  - LP: #1561677
* ipv6: re-enable fragment header matching in ipv6_find_hdr
  - LP: #1561677
* net/mlx5e: Remove wrong poll CQ optimization
  - LP: #1561677
* cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind
  - LP: #1561677
* net: qca_spi: Don't clear IFF_BROADCAST
  - LP: #1561677
* net: moxa: fix an error code
  - LP: #1561677
* mld, igmp: Fix reserved tailroom calculation
  - LP: #1561677
* Linux 4.2.8-ckt6
  - LP: #1561677
* (upstream) net/mlx5e: Avoid NULL pointer access in case of
  configuration failure
  - LP: #1528466
* PCI: Disable IO/MEM decoding for devices with non-compliant BARs
  - LP: #1559929
* x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant
  BARs
  - LP: #1559929
* fuse: do not use iocb after it may have been freed
  - LP: #1505948
* fuse: Add reference counting for fuse_io_priv
  - LP: #1505948
* intel_idle: prevent SKL-H boot failure when C8+C9+C10 enabled
  - LP: #1559918
* crypto: skcipher - Add crypto_skcipher_has_setkey
  - LP: #1556562
* crypto: algif_skcipher - Add key check exception for cipher_null
  - LP: #1556562
* crypto: algif_skcipher - Do not assume that req is unchanged
  - LP: #1556562
* crypto: algif_skcipher - Do not dereference ctx without socket lock
  - LP: #1556562
* proc: revert /proc/<pid>/maps [stack:TID] annotation
  - LP: #1547231
* ACPI / processor: Request native thermal interrupt handling via _OSC
  - LP: #1559923
* gpiolib: do not allow to insert an empty gpiochip
  - LP: #1566544
* gpio: add a data pointer to gpio_chip
  - LP: #1566544
* gpio: rcar: Add Runtime PM handling for interrupts
  - LP: #1566544
* ipv4: Don't do expensive useless work during inetdev destroy.
  - LP: #1566544
* Input: powermate - fix oops with malicious USB descriptors
  - LP: #1566544
* USB: iowarrior: fix oops with malicious USB descriptors
  - LP: #1566544
* ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk()
  - LP: #1566544
* ALSA: usb-audio: Add sanity checks for endpoint accesses
  - LP: #1566544
* include/linux/poison.h: fix LIST_POISON{1,2} offset
  - LP: #1566544
* Input: ati_remote2 - fix crashes on detecting device with invalid
  descriptor
  - LP: #1566544
* USB: cdc-acm: more sanity checking
  - LP: #1566544
* drm/i915: Workaround CHV pipe C cursor fail
  - LP: #1566544
* EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr()
  - LP: #1566544
* crypto: ccp - Add hash state import and export support
  - LP: #1566544
* clk: rockchip: add pclk_cpu to the list of rk3188 critical clocks
  - LP: #1566544
* clk: rockchip: Add pclk_peri to critical clocks on RK3066/RK3188
  - LP: #1566544
* clk: rockchip: add hclk_cpubus to the list of rk3188 critical clocks
  - LP: #1566544
* tty: Fix GPF in flush_to_ldisc(), part 2
  - LP: #1566544
* media: v4l2-compat-ioctl32: fix missing length copy in
  put_v4l2_buffer32
  - LP: #1566544
* pwc: Add USB id for Philips Spc880nc webcam
  - LP: #1566544
* crypto: ccp - Limit the amount of information exported
  - LP: #1566544
* crypto: ccp - Don't assume export/import areas are aligned
  - LP: #1566544
* 8250: use callbacks to access UART_DLL/UART_DLM
  - LP: #1566544
* net: irda: Fix use-after-free in irtty_open()
  - LP: #1566544
* mei: bus: check if the device is enabled before data transfer
  - LP: #1566544
* staging: comedi: ni_tiocmd: change mistaken use of start_src for
  start_arg
  - LP: #1566544
* tools/hv: Use include/uapi with __EXPORTED_HEADERS__
  - LP: #1566544
* tpm: fix the rollback in tpm_chip_register()
  - LP: #1566544
* tpm: fix the cleanup of struct tpm_chip
  - LP: #1566544
* ARM: dts: armada-375: use armada-370-sata for SATA
  - LP: #1566544
* usb: retry reset if a device times out
  - LP: #1566544
* HID: fix hid_ignore_special_drivers module parameter
  - LP: #1566544
* scripts/coccinelle: modernize &
  - LP: #1566544
* adv7511: TX_EDID_PRESENT is still 1 after a disconnect
  - LP: #1566544
* saa7134: Fix bytesperline not being set correctly for planar formats
  - LP: #1566544
* tpm_crb: tpm2_shutdown() must be called before tpm_chip_unregister()
  - LP: #1566544
* perf tools: Dont stop PMU parsing on alias parse error
  - LP: #1566544
* Bluetooth: btusb: Add new AR3012 ID 13d3:3395
  - LP: #1542564, #1566544
* Bluetooth: Add new AR3012 ID 0489:e095
  - LP: #1542944, #1566544
* aacraid: Fix RRQ overload
  - LP: #1566544
* aacraid: Fix memory leak in aac_fib_map_free
  - LP: #1566544
* aic7xxx: Fix queue depth handling
  - LP: #1566544
* mtd: onenand: fix deadlock in onenand_block_markbad
  - LP: #1566544
* md/raid5: Compare apples to apples (or sectors to sectors)
  - LP: #1566544
* RAID5: check_reshape() shouldn't call mddev_suspend
  - LP: #1566544
* RAID5: revert e9e4c377e2f563 to fix a livelock
  - LP: #1566544
* crypto: ccp - memset request context to zero during import
  - LP: #1566544
* Bluetooth: btusb: Add a new AR3012 ID 04ca:3014
  - LP: #1546694, #1566544
* mmc: sdhci: fix data timeout (part 1)
  - LP: #1566544
* mmc: sdhci: fix data timeout (part 2)
  - LP: #1566544
* perf tools: Fix python extension build
  - LP: #1566544
* IB/srpt: Simplify srpt_handle_tsk_mgmt()
  - LP: #1566544
* bttv: Width must be a multiple of 16 when capturing planar formats
  - LP: #1566544
* watchdog: rc32434_wdt: fix ioctl error handling
  - LP: #1566544
* nfsd4: fix bad bounds checking
  - LP: #1566544
* xfs: fix two memory leaks in xfs_attr_list.c error paths
  - LP: #1566544
* quota: Fix possible GPF due to uninitialised pointers
  - LP: #1566544
* mtip32xx: Fix broken service thread handling
  - LP: #1566544
* mtip32xx: Remove unwanted code from taskfile error handler
  - LP: #1566544
* mtip32xx: Print exact time when an internal command is interrupted
  - LP: #1566544
* mtip32xx: Avoid issuing standby immediate cmd during FTL rebuild
  - LP: #1566544
* mtip32xx: Fix for rmmod crash when drive is in FTL rebuild
  - LP: #1566544
* mtip32xx: Handle safe removal during IO
  - LP: #1566544
* mtip32xx: Handle FTL rebuild failure state during device initialization
  - LP: #1566544
* of: alloc anywhere from memblock if range not specified
  - LP: #1566544
* usb: hub: fix a typo in hub_port_init() leading to wrong logic
  - LP: #1566544
* KVM: i8254: change PIT discard tick policy
  - LP: #1566544
* sched/cputime: Fix steal time accounting vs. CPU hotplug
  - LP: #1566544
* libnvdimm: Fix security issue with DSM IOCTL.
  - LP: #1566544
* rt2x00: add new rt2800usb device Buffalo WLI-UC-G450
  - LP: #1566544
* pinctrl-bcm2835: Fix cut-and-paste error in "pull" parsing
  - LP: #1566544
* perf/core: Fix perf_sched_count derailment
  - LP: #1566544
* perf/x86/intel: Use PAGE_SIZE for PEBS buffer size on Core2
  - LP: #1566544
* perf/x86/intel: Fix PEBS warning by only restoring active PMU in pmi
  - LP: #1566544
* sched/cputime: Fix steal_account_process_tick() to always return
  jiffies
  - LP: #1566544
* bcache: fix race of writeback thread starting before complete
  initialization
  - LP: #1566544
* bcache: cleaned up error handling around register_cache()
  - LP: #1566544
* bcache: fix cache_set_flush() NULL pointer dereference on OOM
  - LP: #1566544
* be2iscsi: set the boot_kset pointer to NULL in case of failure
  - LP: #1566544
* md/raid5: preserve STRIPE_PREREAD_ACTIVE in break_stripe_batch_list
  - LP: #1566544
* drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards.
  - LP: #1566544
* sg: fix dxferp in from_to case
  - LP: #1566544
* jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount
  path
  - LP: #1566544
* ALSA: hda - Apply reboot D3 fix for CX20724 codec, too
  - LP: #1566544
* EDAC/sb_edac: Fix computation of channel address
  - LP: #1566544
* Bluetooth: btusb: Add a new AR3012 ID 13d3:3472
  - LP: #1552925, #1566544
* ALSA: pcm: Avoid "BUG:" string for warnings again
  - LP: #1566544
* dm snapshot: disallow the COW and origin devices from being identical
  - LP: #1566544
* dm thin metadata: don't issue prefetches if a transaction abort has
  failed
  - LP: #1566544
* dm cache: make sure every metadata function checks fail_io
  - LP: #1566544
* iser-target: Fix identification of login rx descriptor type
  - LP: #1566544
* iser-target: Add new state ISER_CONN_BOUND to isert_conn
  - LP: #1566544
* iser-target: Separate flows for np listeners and connections cma events
  - LP: #1566544
* ALSA: hda - fix the mic mute button and led problem for a Lenovo AIO
  - LP: #1555912, #1566544
* xtensa: ISS: don't hang if stdin EOF is reached
  - LP: #1566544
* xtensa: fix preemption in {clear,copy}_user_highpage
  - LP: #1566544
* xtensa: clear all DBREAKC registers on start
  - LP: #1566544
* Bluetooth: Fix potential buffer overflow with Add Advertising
  - LP: #1566544
* ARC: [BE] readl()/writel() to work in Big Endian CPU configuration
  - LP: #1566544
* bus: imx-weim: Take the 'status' property value into account
  - LP: #1566544
* ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41.
  - LP: #1566544
* s390/pci: enforce fmb page boundary rule
  - LP: #1566544
* drm/radeon: rework fbdev handling on chips with no connectors
  - LP: #1566544
* md: multipath: don't hardcopy bio in .make_request path
  - LP: #1566544
* net: mvneta: enable change MAC address when interface is up
  - LP: #1566544
* dm: fix rq_end_stats() NULL pointer in dm_requeue_original_request()
  - LP: #1566544
* HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report()
  - LP: #1566544
* ALSA: hda - Fix unconditional GPIO toggle via automute
  - LP: #1566544
* mmc: mmc_spi: Add Card Detect comments and fix CD GPIO case
  - LP: #1566544
* nfsd: fix deadlock secinfo+readdir compound
  - LP: #1566544
* vfs: show_vfsstat: do not ignore errors from show_devname method
  - LP: #1566544
* x86/iopl: Fix iopl capability check on Xen PV
  - LP: #1566544
* crypto: marvell/cesa - forward devm_ioremap_resource() error code
  - LP: #1566544
* mmc: sdhci: Fix override of timeout clk wrt max_busy_timeout
  - LP: #1566544
* drm/amdgpu: include the right version of gmc header files for iceland
  - LP: #1566544
* Input: ims-pcu - sanity check against missing interfaces
  - LP: #1566544
* watchdog: don't run proc_watchdog_update if new value is same as old
  - LP: #1566544
* mm: memcontrol: reclaim when shrinking memory.high below usage
  - LP: #1566544
* mm: memcontrol: reclaim and OOM kill when shrinking memory.max below
  usage
  - LP: #1566544
* x86/apic: Fix suspicious RCU usage in
  smp_trace_call_function_interrupt()
  - LP: #1566544
* USB: usb_driver_claim_interface: add sanity checking
  - LP: #1566544
* USB: uas: Reduce can_queue to MAX_CMNDS
  - LP: #1566544
* tracing: Have preempt(irqs)off trace preempt disabled functions
  - LP: #1566544
* tracing: Fix crash from reading trace_pipe with sendfile
  - LP: #1566544
* splice: handle zero nr_pages in splice_to_pipe()
  - LP: #1566544
* ALSA: usb-audio: add Microsoft HD-5001 to quirks
  - LP: #1566544
* writeback, cgroup: fix premature wb_put() in
  locked_inode_to_wb_and_lock_list()
  - LP: #1566544
* fs-writeback: unplug before cond_resched in writeback_sb_inodes
  - LP: #1566544
* writeback, cgroup: fix use of the wrong bdi_writeback which mismatches
  the inode
  - LP: #1566544
* bitops: Do not default to __clear_bit() for __clear_bit_unlock()
  - LP: #1566544
* target: Fix target_release_cmd_kref shutdown comp leak
  - LP: #1566544
* KVM: VMX: avoid guest hang on invalid invept instruction
  - LP: #1566544
* KVM: fix spin_lock_init order on x86
  - LP: #1566544
* tracing: Fix trace_printk() to print when not using bprintk()
  - LP: #1566544
* fs/coredump: prevent fsuid=0 dumps into user-controlled directories
  - LP: #1566544
* rapidio/rionet: fix deadlock on SMP
  - LP: #1566544
* staging: comedi: ni_mio_common: fix the ni_write[blw]() functions
  - LP: #1566544
* staging: android: ion_test: fix check of
  platform_device_register_simple() error code
  - LP: #1566544
* ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list
  - LP: #1566544
* MAINTAINERS: Update mailing list and web page for hwmon subsystem
  - LP: #1566544
* ocfs2/dlm: fix race between convert and recovery
  - LP: #1566544
* ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
  - LP: #1566544
* mm/page_alloc: prevent merging between isolated and other pageblocks
  - LP: #1566544
* mac80211: avoid excessive stack usage in sta_info
  - LP: #1566544
* clk: xgene: Add missing parenthesis when clearing divider value
  - LP: #1566544
* clk: qcom: msm8960: Fix ce3_src register offset
  - LP: #1566544
* xen kconfig: don't "select INPUT_XEN_KBDDEV_FRONTEND"
  - LP: #1566544
* ppp: take reference on channels netns
  - LP: #1566544
* mdio-sun4i: oops in error handling in probe
  - LP: #1566544
* clk: rockchip: free memory in error cases when registering clock
  branches
  - LP: #1566544
* ARC: bitops: Remove non relevant comments
  - LP: #1566544
* mac80211: fix txq queue related crashes
  - LP: #1566544
* net: Fix use after free in the recvmmsg exit path
  - LP: #1566544
* ath9k: fix misleading indentation
  - LP: #1566544
* sctp: fix the transports round robin issue when init is retransmitted
  - LP: #1566544
* ethernet: micrel: fix some error codes
  - LP: #1566544
* megaraid_sas: add missing curly braces in ioctl handler
  - LP: #1566544
* clk-divider: make sure read-only dividers do not write to their
  register
  - LP: #1566544
* misc/bmp085: Enable building as a module
  - LP: #1566544
* HID: logitech: fix Dual Action gamepad support
  - LP: #1566544
* net/mlx5: Make command timeout way shorter
  - LP: #1566544
* ASoC: ssm4567: Reset device before regcache_sync()
  - LP: #1566544
* fbdev: da8xx-fb: fix videomodes of lcd panels
  - LP: #1566544
* clk: qcom: msm8960: fix ce3_core clk enable register
  - LP: #1566544
* ipvs: correct initial offset of Call-ID header search in SIP
  persistence engine
  - LP: #1566544
* drm/i915: Cleanup phys status page too
  - LP: #1566544
* ata: ahci_xgene: dereferencing uninitialized pointer in probe
  - LP: #1566544
* ath9k: fix buffer overrun for ar9287
  - LP: #1566544
* perf tools: handle spaces in file names obtained from /proc/pid/maps
  - LP: #1566544
* rtc: ds1685: passing bogus values to irq_restore
  - LP: #1566544
* ARM: davinci: make I2C support optional
  - LP: #1566544
* drm/amdkfd: uninitialized variable in
  dbgdev_wave_control_set_registers()
  - LP: #1566544
* mtd: map: fix .set_vpp() documentation
  - LP: #1566544
* ARM: OMAP3: Add cpuidle parameters table for omap3430
  - LP: #1566544
* efi: Expose non-blocking set_variable() wrapper to efivars
  - LP: #1566544
* rtc: vr41xx: Wire up alarm_irq_enable
  - LP: #1566544
* sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a
  race
  - LP: #1566544
* ipv4: fix broadcast packets reception
  - LP: #1566544
* lpfc: fix misleading indentation
  - LP: #1566544
* sched/preempt, sh: kmap_coherent relies on disabled preemption
  - LP: #1566544
* ipip: Properly mark ipip GRO packets as encapsulated.
  - LP: #1566544
* spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs
  - LP: #1566544
* ASoC: s3c24xx: use const snd_soc_component_driver pointer
  - LP: #1566544
* mlx4: add missing braces in verify_qp_parameters
  - LP: #1566544
* clk: meson: Fix meson_clk_register_clks() signature type mismatch
  - LP: #1566544
* coda: fix error path in case of missing pdata on non-DT platform
  - LP: #1566544
* kbuild/mkspec: fix grub2 installkernel issue
  - LP: #1566544
* bpf: avoid copying junk bytes in bpf_get_current_comm()
  - LP: #1566544
* mac80211: fix unnecessary frame drops in mesh fwding
  - LP: #1566544
* mtd: brcmnand: Fix v7.1 register offsets
  - LP: #1566544
* mac80211: fix ibss scan parameters
  - LP: #1566544
* at803x: fix reset handling
  - LP: #1566544
* rtc: hym8563: fix invalid year calculation
  - LP: #1566544
* perf pmu: Fix misleadingly indented assignment (whitespace)
  - LP: #1566544
* paride: make 'verbose' parameter an 'int' again
  - LP: #1566544
* regulator: s5m8767: fix get_register() error handling
  - LP: #1566544
* ppp: ensure file->private_data can't be overridden
  - LP: #1566544
* clk: versatile: sp810: support reentrance
  - LP: #1566544
* net: add description for len argument of dev_get_phys_port_name
  - LP: #1566544
* net: bcmgenet: fix dma api length mismatch
  - LP: #1566544
* ARM: prima2: always enable reset controller
  - LP: #1566544
* drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
  - LP: #1566544
* perf stat: Document --detailed option
  - LP: #1566544
* v4l: vsp1: Set the SRU CTRL0 register when starting the stream
  - LP: #1566544
* ipvs: drop first packet to redirect conntrack
  - LP: #1566544
* rtc: max77686: Properly handle regmap_irq_get_virq() error code
  - LP: #1566544
* x86/iopl/64: Properly context-switch IOPL on Xen PV
  - LP: #1566544
* Linux 4.2.8-ckt7
  - LP: #1566544
* PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
  - LP: #1571027
* ALSA: hda - Asus N750JV external subwoofer fixup
  - LP: #1571027
* ALSA: hda - Fix white noise on Asus N750JV headphone
  - LP: #1571027
* ALSA: hda - Apply fix for white noise on Asus N550JV, too
  - LP: #1571027
* drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
  - LP: #1571027
* fs: add file_dentry()
  - LP: #1571027
* nfs: use file_dentry()
  - LP: #1571027
* hwmon: (max1111) Return -ENODEV from max1111_read_channel if not
  instantiated
  - LP: #1571027
* drm/radeon: add another R7 370 quirk
  - LP: #1571027
* drm/radeon: add a dpm quirk for all R7 370 parts
  - LP: #1571027
* powerpc/mm: Fixup preempt underflow with huge pages
  - LP: #1571027
* pinctrl: pistachio: fix mfio84-89 function description and pinmux.
  - LP: #1571027
* pinctrl: sunxi: Fix A33 external interrupts not working
  - LP: #1571027
* usb: renesas_usbhs: avoid NULL pointer derefernce in
  usbhsf_pkt_handler()
  - LP: #1571027
* usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer
  - LP: #1571027
* btrfs: fix crash/invalid memory access on fsync when using overlayfs
  - LP: #1571027
* ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk()
  - LP: #1571027
* ALSA: usb-audio: Fix double-free in error paths after
  snd_usb_add_audio_stream() call
  - LP: #1571027
* USB: mct_u232: add sanity checking in probe
  - LP: #1571027
  - CVE-2016-3136
* USB: cypress_m8: add endpoint sanity check
  - LP: #1571027
  - CVE-2016-3137
* USB: digi_acceleport: do sanity checking for the number of ports
  - LP: #1571027
* [media] au0828: fix au0828_v4l2_close() dev_state race condition
  - LP: #1571027
* [media] au0828: Fix dev_state handling
  - LP: #1571027
* sd: Fix excessive capacity printing on devices with blocks bigger than
  512 bytes
  - LP: #1571027
* drm/dp: move hw_mutex up the call stack
  - LP: #1571027
* drm/udl: Use unlocked gem unreferencing
  - LP: #1571027
* ext4: add lockdep annotations for i_data_sem
  - LP: #1571027
* ALSA: hda - fix front mic problem for a HP desktop
  - LP: #1564712, #1571027
* KVM: x86: Inject pending interrupt even if pending nmi exist
  - LP: #1571027
* ALSA: timer: Use mod_timer() for rearming the system timer
  - LP: #1571027
* mm: fix invalid node in alloc_migrate_target()
  - LP: #1571027
* iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
  - LP: #1571027
* ext4: ignore quota mount options if the quota feature is enabled
  - LP: #1571027
* xen/events: Mask a moving irq
  - LP: #1571027
* usb: renesas_usbhs: fix to avoid using a disabled ep in
  usbhsg_queue_done()
  - LP: #1571027
* mac80211: properly deal with station hashtable insert errors
  - LP: #1571027
* compiler-gcc: disable -ftracer for __noclone functions
  - LP: #1571027
* rbd: use GFP_NOIO consistently for request allocations
  - LP: #1571027
* Btrfs: fix file/data loss caused by fsync after rename and new inode
  - LP: #1571027
* USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices
  - LP: #1571027
* USB: serial: cp210x: Adding GE Healthcare Device ID
  - LP: #1571027
* USB: option: add "D-Link DWM-221 B1" device id
  - LP: #1571027
* virtio: virtio 1.0 cs04 spec compliance for reset
  - LP: #1571027
* libnvdimm: fix smart data retrieval
  - LP: #1571027
* gpio: pca953x: Use correct u16 value for register word write
  - LP: #1571027
* parisc: Avoid function pointers for kernel exception routines
  - LP: #1571027
* parisc: Fix kernel crash with reversed copy_from_user()
  - LP: #1571027
* parisc: Unbreak handling exceptions from kernel modules
  - LP: #1571027
* net: macb: replace macb_writel() call by queue_writel() to update queue
  ISR
  - LP: #1571027
* net: bcmgenet: fix dev->stats.tx_bytes accounting
  - LP: #1571027
* net: bcmgenet: fix skb_len in bcmgenet_xmit_single()
  - LP: #1571027
* ipv6: udp: fix UDP_MIB_IGNOREDMULTI updates
  - LP: #1571027
* pinctrl: nomadik: fix pull debug print inversion
  - LP: #1571027
* ip6_tunnel: set rtnl_link_ops before calling register_netdevice
  - LP: #1571027
* KVM: x86: move steal time initialization to vcpu entry time
  - LP: #1571027
* lib/ucs2_string: Add ucs2 -> utf8 helper functions
  - LP: #1571027
* efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
  - LP: #1571027
* efi: Do variable name validation tests in utf8
  - LP: #1571027
* efi: Make our variable validation list include the guid
  - LP: #1571027
* efi: Make efivarfs entries immutable by default
  - LP: #1571027
* efi: Add pstore variables to the deletion whitelist
  - LP: #1571027
* lib/ucs2_string: Correct ucs2 -> utf8 conversion
  - LP: #1571027
* ipr: Fix out-of-bounds null overwrite
  - LP: #1571027
* ipr: Fix regression when loading firmware
  - LP: #1571027
* perf/x86/intel: Fix PEBS data source interpretation on Nehalem/Westmere
  - LP: #1571027
* ALSA: hda - Add new GPU codec ID 0x10de0082 to snd-hda
  - LP: #1571027
* mwifiex: fix corner case association failure
  - LP: #1571027
* net: phy: at803x: Request 'reset' GPIO only for AT8030 PHY
  - LP: #1571027
* Linux 4.2.8-ckt8
  - LP: #1571027

18. By Brad Figg on 2016-03-15

[ Brad Figg ]

* Release Tracking Bug
  - LP: #1557884

[ Upstream Kernel Changes ]

* Revert "workqueue: make sure delayed work run in local cpu"
  - LP: #1556269
* Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo"
  - LP: #1556269
* KVM: VMX: Fix host initiated access to guest MSR_TSC_AUX
  - LP: #1552592
* locking/qspinlock: Move __ARCH_SPIN_LOCK_UNLOCKED to qspinlock_types.h
  - LP: #1545330
* [media] usbvision fix overflow of interfaces array
  - LP: #1556269
* [media] usbvision: fix crash on detecting device with invalid
  configuration
  - LP: #1556269
* ASN.1: Fix non-match detection failure on data overrun
  - LP: #1556269
* iw_cxgb3: Fix incorrectly returning error on success
  - LP: #1556269
* EVM: Use crypto_memneq() for digest comparisons
  - LP: #1556269
* vmstat: explicitly schedule per-cpu work on the CPU we need it to run
  on
  - LP: #1556269
* x86/entry/compat: Add missing CLAC to entry_INT80_32
  - LP: #1556269
* iio-light: Use a signed return type for ltr501_match_samp_freq()
  - LP: #1556269
* iio: add IIO_TRIGGER dependency to STK8BA50
  - LP: #1556269
* iio: add HAS_IOMEM dependency to VF610_ADC
  - LP: #1556269
* iio: dac: mcp4725: set iio name property in sysfs
  - LP: #1556269
* iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
  - LP: #1556269
* iio: light: acpi-als: Report data as processed
  - LP: #1556269
* iio:adc:ti_am335x_adc Fix buffered mode by identifying as software
  buffer.
  - LP: #1556269
* ASoC: rt5645: fix the shift bit of IN1 boost
  - LP: #1556269
* ARCv2: STAR 9000950267: Handle return from intr to Delay Slot #2
  - LP: #1556269
* cgroup: make sure a parent css isn't offlined before its children
  - LP: #1556269
* ARM: OMAP2+: Fix wait_dll_lock_timed for rodata
  - LP: #1556269
* ARM: OMAP2+: Fix l2dis_3630 for rodata
  - LP: #1556269
* ARM: OMAP2+: Fix save_secure_ram_context for rodata
  - LP: #1556269
* ARM: OMAP2+: Fix l2_inv_api_params for rodata
  - LP: #1556269
* ARM: OMAP2+: Fix ppa_zero_params and ppa_por_params for rodata
  - LP: #1556269
* rtlwifi: rtl8821ae: Fix 5G failure when EEPROM is incorrectly encoded
  - LP: #1556269
* PCI/AER: Flush workqueue on device remove to avoid use-after-free
  - LP: #1556269
* ARM: dts: Fix wl12xx missing clocks that cause hangs
  - LP: #1556269
* libata: disable forced PORTS_IMPL for >= AHCI 1.3
  - LP: #1556269
* mac80211: Requeue work after scan complete for all VIF types.
  - LP: #1556269
* rfkill: fix rfkill_fop_read wait_event usage
  - LP: #1556269
* ARM: dts: at91: sama5d4: fix instance id of DBGU
  - LP: #1556269
* ARM: dts: at91: sama5d4ek: add phy address and IRQ for macb0
  - LP: #1556269
* ARM: dts: at91: sama5d4 xplained: fix phy0 IRQ type
  - LP: #1556269
* crypto: shash - Fix has_key setting
  - LP: #1556269
* Input: vmmouse - fix absolute device registration
  - LP: #1556269
* spi: atmel: fix gpio chip-select in case of non-DT platform
  - LP: #1556269
* drm/i915/dp: fall back to 18 bpp when sink capability is unknown
  - LP: #1556269
* ALSA: usb-audio: Fix OPPO HA-1 vendor ID
  - LP: #1556269
* ALSA: usb-audio: Add native DSD support for PS Audio NuWave DAC
  - LP: #1556269
* ALSA: usb-audio: Add quirk for Microsoft LifeCam HD-6000
  - LP: #1556269
* target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
  - LP: #1556269
* crypto: algif_hash - wait for crypto_ahash_init() to complete
  - LP: #1556269
* iio: inkern: fix a NULL dereference on error
  - LP: #1556269
* iio: pressure: mpl115: fix temperature offset sign
  - LP: #1556269
* intel_scu_ipcutil: underflow in scu_reg_access()
  - LP: #1556269
* ALSA: seq: Fix race at closing in virmidi driver
  - LP: #1556269
* ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
  - LP: #1556269
* ALSA: pcm: Fix potential deadlock in OSS emulation
  - LP: #1556269
* ALSA: seq: Fix yet another races among ALSA timer accesses
  - LP: #1556269
* ALSA: timer: Code cleanup
  - LP: #1556269
* ALSA: timer: Fix link corruption due to double start or stop
  - LP: #1556269
* libata: fix sff host state machine locking while polling
  - LP: #1556269
* MIPS: Fix buffer overflow in syscall_get_arguments()
  - LP: #1556269
* cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
  - LP: #1556269
* drm: add helper to check for wc memory support
  - LP: #1556269
* drm/radeon: mask out WC from BO on unsupported arches
  - LP: #1556269
* drm/amdgpu: mask out WC from BO on unsupported arches
  - LP: #1556269
* ASoC: dpcm: fix the BE state on hw_free
  - LP: #1556269
* drm/amdgpu: move gmc7 support out of CIK dependency
  - LP: #1556269
* drm/amdgpu: iceland use CI based MC IP
  - LP: #1556269
* drm/amdgpu: The VI specific EXE bit should only apply to GMC v8.0 above
  - LP: #1556269
* drm/amdgpu: pull topaz gmc bits into gmc_v7
  - LP: #1556269
* drm/amdgpu: drop topaz support from gmc8 module
  - LP: #1556269
* modules: fix modparam async_probe request
  - LP: #1556269
* module: wrapper for symbol name.
  - LP: #1556269
* ALSA: hda - Add fixup for Mac Mini 7,1 model
  - LP: #1556269
* ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
  - LP: #1556269
* ALSA: rawmidi: Fix race at copying & updating the position
  - LP: #1556269
* ALSA: seq: Fix lockdep warnings due to double mutex locks
  - LP: #1556269
* drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
  - LP: #1556269
* radix-tree: fix race in gang lookup
  - LP: #1556269
* drivers/hwspinlock: fix race between radix tree insertion and lookup
  - LP: #1556269
* btrfs: fix clone / extent-same deadlocks
  - LP: #1556269
* Btrfs: fix invalid page accesses in extent_same (dedup) ioctl
  - LP: #1556269
* Btrfs: fix page reading in extent_same ioctl leading to csum errors
  - LP: #1556269
* usb: xhci: handle both SSIC ports in PME stuck quirk
  - LP: #1556269
* usb: xhci: add a quirk bit for ssic port unused
  - LP: #1556269
* usb: xhci: set SSIC port unused only if xhci_suspend succeeds
  - LP: #1556269
* usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
  - LP: #1556269
* xhci: Fix list corruption in urb dequeue at host removal
  - LP: #1556269
* target: Invoke release_cmd() callback without holding a spinlock
  - LP: #1556269
* target: Fix LUN_RESET active I/O handling for ACK_KREF
  - LP: #1556269
* target: Fix LUN_RESET active TMR descriptor handling
  - LP: #1556269
* target: Fix TAS handling for multi-session se_node_acls
  - LP: #1556269
* [media] tda1004x: only update the frontend properties if locked
  - LP: #1556269
* ALSA: timer: Fix leftover link at closing
  - LP: #1556269
* [media] saa7134-alsa: Only frees registered sound cards
  - LP: #1556269
* ARM: nomadik: fix up SD/MMC DT settings
  - LP: #1556269
* Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
  - LP: #1556269
* scsi_dh_rdac: always retry MODE SELECT on command lock violation
  - LP: #1556269
* SCSI: Add Marvell Console to VPD blacklist
  - LP: #1556269
* drm: fix missing reference counting decrease
  - LP: #1556269
* drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
  - LP: #1556269
* drm/dp/mst: Calculate MST PBN with 31.32 fixed point
  - LP: #1556269
* drm/dp/mst: Reverse order of MST enable and clearing VC payload table.
  - LP: #1556269
* drm/dp/mst: deallocate payload on port destruction
  - LP: #1556269
* ALSA: hda - Fix static checker warning in patch_hdmi.c
  - LP: #1556269
* target: Fix remote-port TMR ABORT + se_cmd fabric stop
  - LP: #1556269
* dump_stack: avoid potential deadlocks
  - LP: #1556269
* mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
  progress
  - LP: #1556269
* ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
  cleanup
  - LP: #1556269
* mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
  - LP: #1556269
* radix-tree: fix oops after radix_tree_iter_retry
  - LP: #1556269
* crypto: user - lock crypto_alg_list on alg dump
  - LP: #1556269
* crypto: algif_skcipher - Do not set MAY_BACKLOG on the async path
  - LP: #1556269
* crypto: atmel-sha - fix atmel_sha_remove()
  - LP: #1556269
* crypto: marvell/cesa - fix test in mv_cesa_dev_dma_init()
  - LP: #1556269
* target: Fix race with SCF_SEND_DELAYED_TAS handling
  - LP: #1556269
* qla2xxx: Fix stale pointer access.
  - LP: #1556269
* serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
  - LP: #1556269
* tty: Add support for PCIe WCH382 2S multi-IO card
  - LP: #1556269
* pty: fix possible use after free of tty->driver_data
  - LP: #1556269
* pty: make sure super_block is still valid in final /dev/tty close
  - LP: #1556269
* ALSA: hda - Fix speaker output from VAIO AiO machines
  - LP: #1556269
* klist: fix starting point removed bug in klist iterators
  - LP: #1556269
* ALSA: dummy: Implement timer backend switching more safely
  - LP: #1556269
* drm/i915/dsi: defend gpio table against out of bounds access
  - LP: #1556269
* drm/i915/dsi: don't pass arbitrary data to sideband
  - LP: #1556269
* powerpc: Fix dedotify for binutils >= 2.26
  - LP: #1556269
* ALSA: timer: Fix wrong instance passed to slave callbacks
  - LP: #1556269
* ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
  - LP: #1556269
* xen/scsiback: correct frontend counting
  - LP: #1556269
* nfs: fix nfs_size_to_loff_t
  - LP: #1556269
* ALSA: timer: Fix race between stop and interrupt
  - LP: #1556269
* ALSA: hda - Fix bad dereference of jack object
  - LP: #1556269
* ALSA: timer: Fix race at concurrent reads
  - LP: #1556269
* phy: core: fix wrong err handle for phy_power_on
  - LP: #1556269
* phy: twl4030-usb: Relase usb phy on unload
  - LP: #1556269
* phy: twl4030-usb: Fix unbalanced pm_runtime_enable on module reload
  - LP: #1556269
* drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select()
  - LP: #1556269
* drm/i915: fix error path in intel_setup_gmbus()
  - LP: #1556269
* ahci: Intel DNV device IDs SATA
  - LP: #1556269
* workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
  - LP: #1556269
* drm/amdgpu: fix s4 resume
  - LP: #1556269
* drm/amdgpu: remove unnecessary forward declaration
  - LP: #1556269
* drm/radeon: hold reference to fences in radeon_sa_bo_new
  - LP: #1556269
* drm/amdgpu: fix issue with overlapping userptrs
  - LP: #1556269
* cifs: fix erroneous return value
  - LP: #1556269
* s390/dasd: prevent incorrect length error under z/VM after PAV changes
  - LP: #1556269
* s390/dasd: fix refcount for PAV reassignment
  - LP: #1556269
* ARM: 8519/1: ICST: try other dividends than 1
  - LP: #1556269
* btrfs: properly set the termination value of ctx->pos in readdir
  - LP: #1556269
* irqchip/gic-v3-its: Fix double ICC_EOIR write for LPI in EOImode==1
  - LP: #1556269
* scsi: fix soft lockup in scsi_remove_target() on module removal
  - LP: #1556269
* ext4: fix potential integer overflow
  - LP: #1556269
* ext4: don't read blocks from disk after extents being swapped
  - LP: #1556269
* bio: return EINTR if copying to user space got interrupted
  - LP: #1556269
* iwlwifi: mvm: don't allow sched scans without matches to be started
  - LP: #1556269
* powerpc/eeh: Fix stale cached primary bus
  - LP: #1556269
* xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
  - LP: #1556269
* xen/pciback: Save the number of MSI-X entries to be copied later.
  - LP: #1556269
* xen/pcifront: Fix mysterious crashes when NUMA locality information was
  extracted.
  - LP: #1556269
* ALSA: seq: Fix leak of pool buffer at concurrent writes
  - LP: #1556269
* ALSA: hda - Cancel probe work instead of flush at remove
  - LP: #1556269
* dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
  - LP: #1556269
* tracepoints: Do not trace when cpu is offline
  - LP: #1556269
* tracing: Fix freak link error caused by branch tracer
  - LP: #1556269
* ALSA: seq: Fix double port list deletion
  - LP: #1556269
* drm/amdgpu: use post-decrement in error handling
  - LP: #1556269
* drm/radeon: use post-decrement in error handling
  - LP: #1556269
* drm/qxl: use kmalloc_array to alloc reloc_info in
  qxl_process_single_command
  - LP: #1556269
* drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2)
  - LP: #1556269
* x86/uaccess/64: Make the __copy_user_nocache() assembly code more
  readable
  - LP: #1556269
* x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in
  __copy_user_nocache()
  - LP: #1556269
* usb: dwc3: Fix assignment of EP transfer resources
  - LP: #1556269
* powerpc/ioda: Set "read" permission when "write" is set
  - LP: #1556269
* NFSv4: Fix a dentry leak on alias use
  - LP: #1556269
* x86/mm: Fix vmalloc_fault() to handle large pages properly
  - LP: #1556269
* ALSA: pcm: Fix rwsem deadlock for non-atomic PCM stream
  - LP: #1556269
* USB: option: add support for SIM7100E
  - LP: #1556269
* USB: cp210x: add IDs for GE B650V3 and B850V3 boards
  - LP: #1556269
* USB: option: add "4G LTE usb-modem U901"
  - LP: #1556269
* mm: fix regression in remap_file_pages() emulation
  - LP: #1556269
* ipc: convert invalid scenarios to use WARN_ON
  - LP: #1556269
* ipc/shm: handle removed segments gracefully in shm_mmap()
  - LP: #1556269
* hwmon: (ads1015) Handle negative conversion values correctly
  - LP: #1556269
* ext4: fix bh->b_state corruption
  - LP: #1556269
* ext4: fix crashes in dioread_nolock mode
  - LP: #1556269
* nfit: fix multi-interface dimm handling, acpi6.1 compatibility
  - LP: #1556269
* hwmon: (gpio-fan) Remove un-necessary speed_index lookup for thermal
  hook
  - LP: #1556269
* kernel/resource.c: fix muxed resource handling in __request_region()
  - LP: #1556269
* drivers: android: correct the size of struct binder_uintptr_t for
  BC_DEAD_BINDER_DONE
  - LP: #1556269
* can: ems_usb: Fix possible tx overflow
  - LP: #1556269
* dm: fix dm_rq_target_io leak on faults with .request_fn DM w/ blk-mq
  paths
  - LP: #1556269
* s390/compat: correct restore of high gprs on signal return
  - LP: #1556269
* drm/amdgpu/pm: adjust display configuration after powerstate
  - LP: #1556269
* ARM: OMAP2+: Fix onenand initialization to avoid filesystem corruption
  - LP: #1556269
* sunrpc/cache: fix off-by-one in qword_get()
  - LP: #1556269
* KVM: arm/arm64: vgic: Ensure bitmaps are long enough
  - LP: #1556269
* ARCv2: SMP: Emulate IPI to self using software triggered interrupt
  - LP: #1556269
* KVM: x86: fix missed hardware breakpoints
  - LP: #1556269
* KVM: async_pf: do not warn on page allocation failures
  - LP: #1556269
* tracing: Fix showing function event in available_events
  - LP: #1556269
* libceph: don't bail early from try_read() when skipping a message
  - LP: #1556269
* libceph: use the right footer size when skipping a message
  - LP: #1556269
* ALSA: hda - Fixing background noise on Dell Inspiron 3162
  - LP: #1549620, #1556269
* KVM: x86: MMU: fix ubsan index-out-of-range warning
  - LP: #1556269
* ALSA: hda/realtek - Support Dell headset mode for ALC225
  - LP: #1556269
* ALSA: hda - Fixup speaker pass-through control for nid 0x14 on ALC225
  - LP: #1549660, #1556269
* ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2
  - LP: #1556269
* ALSA: hda - Loop interrupt handling until really cleared
  - LP: #1556269
* x86/mpx: Fix off-by-one comparison with nr_registers
  - LP: #1556269
* mm: thp: fix SMP race condition between THP page fault and
  MADV_DONTNEED
  - LP: #1556269
* ocfs2: unlock inode if deleting inode from orphan fails
  - LP: #1556269
* hpfs: don't truncate the file when delete fails
  - LP: #1556269
* do_last(): don't let a bogus return value from ->open() et.al. to
  confuse us
  - LP: #1556269
* namei: ->d_inode of a pinned dentry is stable only for positives
  - LP: #1556269
* should_follow_link(): validate ->d_seq after having decided to follow
  - LP: #1556269
* do_last(): ELOOP failure exit should be done after leaving RCU mode
  - LP: #1556269
* af_iucv: Validate socket address length in iucv_sock_bind()
  - LP: #1556269
* net: dp83640: Fix tx timestamp overflow handling.
  - LP: #1556269
* tcp: fix NULL deref in tcp_v4_send_ack()
  - LP: #1556269
* af_unix: fix struct pid memory leak
  - LP: #1556269
* pptp: fix illegal memory access caused by multiple bind()s
  - LP: #1556269
* sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
  - LP: #1556269
* switchdev: Require RTNL mutex to be held when sending FDB notifications
  - LP: #1556269
* tcp: beware of alignments in tcp_get_info()
  - LP: #1556269
* ipv6: enforce flowi6_oif usage in ip6_dst_lookup_tail()
  - LP: #1556269
* ipv6/udp: use sticky pktinfo egress ifindex on connect()
  - LP: #1556269
* net/ipv6: add sysctl option accept_ra_min_hop_limit
  - LP: #1556269
* ipv6: addrconf: Fix recursive spin lock call
  - LP: #1556269
* ipv6: fix a lockdep splat
  - LP: #1556269
* unix: correctly track in-flight fds in sending process user_struct
  - LP: #1556269
* net:Add sysctl_max_skb_frags
  - LP: #1556269
* tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs
  - LP: #1556269
* sctp: translate network order to host order when users get a hmacid
  - LP: #1556269
* flow_dissector: Fix unaligned access in __skb_flow_dissector when used
  by eth_get_headlen
  - LP: #1556269
* net: Copy inner L3 and L4 headers as unaligned on GRE TEB
  - LP: #1556269
* bpf: fix branch offset adjustment on backjumps after patching ctx
  expansion
  - LP: #1556269
* bonding: Fix ARP monitor validation
  - LP: #1556269
* ipv4: fix memory leaks in ip_cmsg_send() callers
  - LP: #1556269
* af_unix: Guard against other == sk in unix_dgram_sendmsg
  - LP: #1556269
* qmi_wwan: add "4G LTE usb-modem U901"
  - LP: #1556269
* net/mlx4_en: Count HW buffer overrun only once
  - LP: #1556269
* net/mlx4_en: Choose time-stamping shift value according to HW frequency
  - LP: #1556269
* net/mlx4_en: Avoid changing dev->features directly in run-time
  - LP: #1556269
* l2tp: Fix error creating L2TP tunnels
  - LP: #1556269
* pppoe: fix reference counting in PPPoE proxy
  - LP: #1556269
* route: check and remove route cache when we get route
  - LP: #1556269
* rtnl: RTM_GETNETCONF: fix wrong return value
  - LP: #1556269
* unix_diag: fix incorrect sign extension in unix_lookup_by_ino
  - LP: #1556269
* sctp: Fix port hash table size computation
  - LP: #1556269
* net/mlx4_core: Do not BUG_ON during reset when PCI is offline
  - LP: #1556269
* s390/perf_event: fix address range for asynchronous stack
  - LP: #1556269
* batman-adv: Avoid endless loop in bat-on-bat netdevice check
  - LP: #1556269
* af_unix: Don't set err in unix_stream_read_generic unless there was an
  error
  - LP: #1556269
* netlink: not trim skb for mmaped socket when dump
  - LP: #1556269
* Input: xpad - remove unused function
  - LP: #1556269
* ARM: dts: kirkwood: use unique machine name for ds112
  - LP: #1556269
* s390/stacktrace: fix address ranges for asynchronous and panic stack
  - LP: #1556269
* MAINTAINERS: Remove stale entry for BCM33xx chips
  - LP: #1556269
* [media] exynos4-is: fix a format string bug
  - LP: #1556269
* net/mlx4_core: Fix potential corruption in counters database
  - LP: #1556269
* net: phy: bcm7xxx: Fix shadow mode 2 disabling
  - LP: #1556269
* writeback: initialize inode members that track writeback history
  - LP: #1556269
* bonding: don't use stale speed and duplex information
  - LP: #1556269
* net: phy: bcm7xxx: Fix bcm7xxx_config_init() check
  - LP: #1556269
* s390/oprofile: fix address range for asynchronous stack
  - LP: #1556269
* net: phy: Fix phy_mac_interrupt()
  - LP: #1556269
* net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS
  - LP: #1556269
* net: phy: bcm7xxx: Fix 40nm EPHY features
  - LP: #1556269
* netfilter: nfnetlink: correctly validate length of batch messages
  - LP: #1556269
* pipe: limit the per-user amount of pages allocated in pipes
  - LP: #1556269
* Linux 4.2.8-ckt5
  - LP: #1556269
* x86/mm: Fix slow_virt_to_phys() for X86_PAE again
  - LP: #1549601
* Drivers: hv: vss: run only on supported host versions
  - LP: #1496927
* ovl: copy new uid/gid into overlayfs runtime inode
  - LP: #1555997
* sched/numa: Fix use-after-free bug in the task_numa_compare
  - LP: #1527643

17. By Luis Henriques on 2016-03-11

[ Brad Figg ]

* Release Tracking Bug
  - LP: #1555995

[ Florian Westphal ]

* SAUCE: [nf] netfilter: x_tables: check for size overflow
  - LP: #1555353
* SAUCE: [nf,v2] netfilter: x_tables: don't rely on well-behaving
  userspace
  - LP: #1555338

16. By Kamal Mostafa on 2016-02-25

[ Kamal Mostafa ]

* Release Tracking Bug
  - LP: #1550463

[ Kamal Mostafa ]

* Merged back Ubuntu-4.2.0-31.36

15. By Kamal Mostafa on 2016-02-25

[ Kamal Mostafa ]

* Release Tracking Bug
  - LP: #1550410

[ Upstream Kernel Changes ]

* drm/vmwgfx: Fix an fb unlocking bug
  - LP: #1548587

14. By Luis Henriques on 2016-02-19

[ Seth Forshee ]

* SAUCE: cred: Add clone_cred() interface
  - LP: #1531747, #1534961, #1535150
  - CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Use mounter's credentials instead of selectively
  raising caps
  - LP: #1531747, #1534961, #1535150
  - CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.*
  xattrs
  - LP: #1531747, #1534961, #1535150
  - CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Be more careful about copying up sxid files
  - LP: #1534961, #1535150
  - CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Propogate nosuid from lower and upper mounts
  - LP: #1534961, #1535150
  - CVE-2016-1575 CVE-2016-1576

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
This branch contains Public information 
Everyone can see this information.

Subscribers