linux (4.2.5-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4
- [armhf] KVM: Fix incorrect device to IPA mapping
- [x86] KVM: vmx: fix VPID is 0000H in non-root operation
- kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd
- kvm: fix zero length mmio searching
- kvm: factor out core eventfd assign/deassign logic
- kvm: fix double free for fast mmio eventfd
- [armhf] KVM: Disable virtual timer even if the guest is not using it
- kvm: svm: reset mmu on VCPU reset
- [x86] KVM: trap AMD MSRs for the TSeg base and mask
- [powerpc*] KVM: Book3S: Take the kvm->srcu lock in
kvmppc_h_logical_ci_load/store()
- [powerpc*] KVM: Book3S HV: Pass the correct trap argument to
kvmhv_commence_exit
- [x86] Revert "KVM: x86: apply guest MTRR virtualization on host reserved
pages"
- [x86] Revert "KVM: SVM: use NPT page attributes"
- [x86] Revert "KVM: SVM: Sync g_pat with guest-written PAT value"
- time: Fix timekeeping_freqadjust()'s incorrect use of abs() instead of
abs64()
- target/iscsi: Fix np_ip bracket issue by removing np_ip
- scsi: fix scsi_error_handler vs. scsi_host_dev_release race
- target: Attach EXTENDED_COPY local I/O descriptors to xcopy_pt_sess
- target: Fix PR registration + APTPL RCU conversion regression
- iser-target: remove command with state ISTATE_REMOVE
- iser-target: Put the reference on commands waiting for unsol data
- toshiba_acpi: Fix hotkeys registration on some toshiba models
- [x86] perf/intel: Fix constraint access
- [x86] locking/qspinlock: Fix performance regression under unaccelerated
VMs
- [x86] locking/qspinlock: Only emit the test-and-set fallback when
building guest support
- [armhf] 8401/1: perf: Set affinity for PPI based PMUs
- perf hists: Update the column width for the "srcline" sort key
- perf stat: Get correct cpu id for print_aggr
- perf tools: Add missing forward declaration of struct map to probe-event.h
- perf tools: Add empty Build files for architectures lacking them
- perf tools: Fix parse_events_add_pmu caller
- perf header: Fixup reading of HEADER_NRCPUS feature
- perf probe: Use existing routine to look for a kernel module by
dso->short_name
- watchdog: sunxi: fix activation of system reset
- watchdog: imgpdc: Unregister restart handler on remove
- sched: access local runqueue directly in single_task_running
- hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for most
chips
- [armhf] fix Thumb2 signal handling when ARMv6 is enabled
- [armel,armhf] 8429/1: disable GCC SRA optimization
- [powerpc*] windfarm: decrement client count when unregistering
- [armhf] dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
- [armhf] dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again
- [armhf] EXYNOS: reset Little cores when cpu is up
- [armhf] dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC
specifications
- [armhf] dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420
- [armhf] dts: fix usb pin control for imx-rex dts
- dax: fix O_DIRECT I/O to the last block of a blockdev
- blockdev: don't set S_DAX for misaligned partitions
- block: blkg_destroy_all() should clear q->root_blkg and ->root_rl.blkg
- dmaengine: at_xdmac: change block increment addressing mode
- dmaengine: at_xdmac: clean used descriptor
- dmaengine: dw: properly read DWC_PARAMS register
- dmaengine: at_xdmac: fix bug in prep_dma_cyclic
- pmem: add proper fencing to pmem_rw_page()
- [x86] apic: Serialize LVTT and TSC_DEADLINE writes
- [x86] alternatives: Make optimize_nops() interrupt safe and synced
- [i386] platform: Fix Geode LX timekeeping in the generic x86 build
- [x86] ioapic: Force affinity setting in setup_ioapic_dest()
- [x86] pci/intel_mid_pci: Work around for IRQ0 assignment
- [x86] paravirt: Replace the paravirt nop with a bona fide empty function
- [amd64] nmi: Fix a paravirt stack-clobbering bug in the NMI code
- [x86] Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS
- [x86] efi: Fix boot crash by mapping EFI memmap entries bottom-up at
runtime, instead of top-down
- [x86] kexec: Fix kexec crash in syscall kexec_file_load()
- [x86] process: Add proper bound checks in 64bit get_wchan()
- [x86] mm: Set NX on gap between __ex_table and rodata
- [x86] xen: Support kexec/kdump in HVM guests by doing a soft reset
- leds:lp55xx: Correct Kconfig dependency for f/w user helper
- leds/led-class: Add missing put_device()
- sched/core: Fix TASK_DEAD race in finish_task_switch()
- [s390x] compat: correct uc_sigmask of the compat signal frame
- [s390x] boot/decompression: disable floating point in decompressor
- Revert "cgroup: simplify threadgroup locking"
- Revert "sched, cgroup: replace signal_struct->group_rwsem with a global
percpu_rwsem"
- memcg: make mem_cgroup_read_stat() unsigned
- spi: Fix documentation of spi_alloc_master()
- spi: bcm2835: BUG: fix wrong use of PAGE_MASK
- spi: spidev: fix possible NULL dereference
- mm: migrate: hugetlb: putback destination hugepage to active list
- lib/iommu-common.c: do not try to deref a null iommu->lazy_flush()
pointer when n < pool->hint
- ocfs2/dlm: fix deadlock when dispatch assert master
- mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a
fault
- memcg: fix dirty page migration
- [armhf] ALSA: hda/tegra - async probe for avoiding module loading deadlock
- ALSA: synth: Fix conflicting OSS device registration on AWE32
- ALSA: hda: Add dock support for ThinkPad T550
- ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1
- ALSA: hda - Disable power_save_node for IDT 92HD73xx chips
- ASoC: pxa: pxa2xx-ac97: fix dma requestor lines
- ASoC: dwc: correct irq clear method
- ASoC: db1200: Fix DAI link format for db1300 and db1550
- ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe
- ASoC: tas2552: fix dBscale-min declaration
- btrfs: skip waiting on ordered range for special files
- Btrfs: fix read corruption of compressed and shared extents
- Btrfs: update fix for read corruption of compressed and shared extents
- PCI: Fix devfn for VPD access through function 0
- PCI: Use function 0 VPD for identical functions, regular VPD for others
- PCI: Clear IORESOURCE_UNSET when clipping a bridge window
- dm thin: disable discard support for thin devices if pool's is disabled
- dm crypt: constrain crypt device's max_segment_size to PAGE_SIZE
- ath10k: fix dma_mapping_error() handling
- svcrdma: Fix send_reply() scatter/gather set-up
- md/raid0: update queue parameter in a safer location.
- md/raid0: apply base queue limits *before* disk_stack_limits
- dm raid: fix round up of default region size
- netfilter: nfnetlink: work around wrong endianess in res_id field
- netfilter: nf_tables: Use 32 bit addressing register from
nft_type_to_reg()
- netfilter: ipset: Out of bound access in hash:net* types fixed
- netfilter: ipset: Fixing unnamed union init
- netfilter: nf_log: wait for rcu grace after logger unregistration
- netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC
- netfilter: nf_log: don't zap all loggers on unregister
- regulator: core: Correct return value check in regulator_resolve_supply
- regulator: axp20x: Fix enable bit indexes for DCDC4 and DCDC5
- regulator: core: Handle probe deferral from DT when resolving supplies
- Bluetooth: Delay check for conn->smp in smp_conn_security()
- nfs: fix v4.2 SEEK on files over 2 gigs
- NFS: Do cleanup before resetting pageio read/write to mds
- NFSv4: Recovery of recalled read delegations is broken
- nfs: fix pg_test page count calculation
- NFS: Fix a write performance regression
- cifs: Fix sec=krb5 on smb3 mounts
- cifs: disabling oplocks/leases via module parm enable_oplocks broken for
SMB3
- cifs: Do not fall back to SMBWriteX in set_file_size error cases
- drm/qxl: only report first monitor as connected if we have no state
- drm/qxl: recreate the primary surface when the bo is not primary
- drm/amdgpu: fix overflow on 32bit systems
- drm/amdgpu: Disable UVD PG
- drm/amdgpu: fix the UVD suspend sequence order
- drm/amdgpu: make UVD handle checking more strict
- drm/amdgpu: Fix max_vblank_count value for current display engines
- drm/amdgpu: Restore LCD backlight level on resume
- [x86] drm/i915/bios: handle MIPI Sequence Block v3+ gracefully
- drm: Reject DRI1 hw lock ioctl functions for kms drivers
- drm/radeon: Restore LCD backlight level on resume (>= R5xx)
- drm/dp/mst: fixup handling hotplug on port removal.
- drm/dp/mst: drop cancel work sync in the mstb destroy path (v2)
- xhci: give command abortion one more chance before killing xhci
- xhci: Move xhci_pme_quirk() behind #ifdef CONFIG_PM
- usb: xhci: lock mutex on xhci_stop
- usb: xhci: Clear XHCI_STATE_DYING on start
- usb: xhci: stop everything on the first call to xhci_stop
- usb: xhci: exit early in xhci_setup_device() if we're halted or dying
- xhci: change xhci 1.0 only restrictions to support xhci 1.1
- xhci: init command timeout timer earlier to avoid deleting it
uninitialized
- usb: xhci: Add support for URB_ZERO_PACKET to bulk/sg transfers
- batman-adv: Make DAT capability changes atomic
- thermal: cpu_cooling: don't call kcalloc() under rcu_read_lock
- thermal: cpu_cooling: free power table on error or when unregistering
- [x86] hv: util: checking the wrong variable
- mmc: dw_mmc: handle data blocks > than 4kB if IDMAC is used
- usb: chipidea: imx: fix a typo for imx6sx
- cifs: use server timestamp for ntlmv2 authentication
- [armhf] irqchip/gic-v3-its: Add missing cache flushes
- docs: update HOWTO for 3.x -> 4.x versioning
- extcon: Fix signedness bugs about break error handling
- extcon: Fix attached value returned by is_extcon_changed
- [armhf] mtd: pxa3xx_nand: add a default chunk size
- mtd: nand: sunxi: fix sunxi_nand_chips_cleanup()
- mtd: nand: sunxi: fix OOB handling in ->write_xxx() functions
- hpsa: fix an sprintf() overflow in the reset handler
- PM / AVS: rockchip-io: depend on CONFIG_POWER_AVS
- device property: fix potential NULL pointer dereference
- ath10k: fix per-vif queue locking
- ath10k: reject 11b tx fragmentation configuration
- ath10k: fix peer limit enforcement
- ath10k: wake up offchannel queue properly
- ath10k: wake up queue upon vif creation
- pcmcia: sa11x0: fix missing clk_put() in sa11x0 socket drivers
- ipr: Enable SIS pipe commands for SIS-32 devices.
- regmap: debugfs: Ensure we don't underflow when printing access masks
- regmap: debugfs: Don't bother actually printing when calculating max
length
- security: fix typo in security_task_prctl
- usb: musb: dsps: fix polling in device-only mode
- usb: chipidea: udc: using the correct stall implementation
- usb: Use the USB_SS_MULT() macro to get the burst multiplier.
- usb: phy: phy-generic: Fix reset behaviour on legacy boot
- usb: musb: cppi41: allow it to work again
- USB: chaoskey read offset bug
- usb: Add device quirk for Logitech PTZ cameras
- USB: Add reset-resume quirk for two Plantronics usb headphones.
- [armel,armhf] crypto: marvell - properly handle
CRYPTO_TFM_REQ_MAY_BACKLOG-flagged requests
- cpu/cacheinfo: Fix teardown path
- cpufreq: dt: Tolerance applies on both sides of target voltage
- [mips*] Fix console output for Fulong2e system
- [mips*] bootmem: Fix mapstart calculation for contiguous maps
- [mips*] dma-default: Fix 32-bit fall back to GFP_DMA
- [mips*] CPS: Stop dangling delay slot from has_mt.
- [mips*] CPS: Don't include MT code in non-MT kernels.
- [mips*] CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT
- batman-adv: Make NC capability changes atomic
- batman-adv: Make TT capability changes atomic
- batman-adv: Make MCAST capability changes atomic
- batman-adv: Fix potential synchronization issues in mcast tvlv handler
- batman-adv: Fix potentially broken skb network header access
- [powerpc*] MSI: Fix race condition in tearing down MSI interrupts
- rsi: Fix possible leak when loading firmware
- UBIFS: Kill unneeded locking in ubifs_init_security
- UBI: Validate data_size
- UBI: return ENOSPC if no enough space available
- net: via/Kconfig: GENERIC_PCI_IOMAP required if PCI not selected
- iscsi-target: Avoid OFMarker + IFMarker negotiation
- mmc: core: Don't return an error for CD/WP GPIOs when GPIOLIB is unset
- mmc: core: fix dead loop of mmc_retune
- [arm64] efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME
regions
- [arm64] ftrace: fix function_graph tracer panic
- [arm64] readahead: fault retry breaks mmap file read random detection
- [m68k] Define asmlinkage_protect
- xen/blkback: free requests on disconnection
- net/xen-netfront: only napi_synchronize() if running
- igb: do not re-init SR-IOV during probe
- genirq: Fix race in register_irq_proc()
- clocksource: Fix abs() usage w/ 64bit values
- md/bitmap: don't pass -1 to bitmap_storage_alloc.
- nfs/filelayout: Fix NULL reference caused by double freeing of fh_array
- cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus
- [armhf] clk: ti: fix dual-registration of uart4_ick
- [armhf] clk: ti: clk-7xx: Remove hardwired ABE clock configuration
- [armhf] clk: samsung: fix cpu clock's flags checking
- namei: results of d_is_negative() should be checked after dentry
revalidation
- dm: fix AB-BA deadlock in __dm_destroy()
- dm cache: fix NULL pointer when switching from cleaner policy
- staging: speakup: fix speakup-r regression
- tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
- drivers/tty: require read access for controlling terminal
- serial: 8250: add uart_config entry for PORT_RT2880
- serial: atmel: fix error path of probe function
- mm/slab: fix unexpected index mapping result of kmalloc_size(INDEX_NODE+1)
- blk-mq: avoid setting hctx->tags->cpumask before allocation
- sched/preempt: Fix cond_resched_lock() and cond_resched_softirq()
- 3w-9xxx: don't unmap bounce buffered commands
- sched/preempt, xen: Use need_resched() instead of should_resched()
- sched/preempt, powerpc, kvm: Use need_resched() instead of
should_resched()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.5
- [powerpc*] net/ibm/emac: bump version numbers for correct work with
ethtool
- l2tp: protect tunnel->del_work by ref_count
- af_unix: Convert the unix_sk macro to an inline function for type safety
- af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag
- net/unix: fix logic about sk_peek_offset
- skbuff: Fix skb checksum flag on skb pull
- skbuff: Fix skb checksum partial check.
- inet: fix races in reqsk_queue_hash_req()
- net: add pfmemalloc check in sk_add_backlog()
- ppp: don't override sk->sk_state in pppoe_flush_dev()
- inet: fix race in reqsk_queue_unlink()
- bpf: fix panic in SO_GET_FILTER with native ebpf programs
- ovs: do not allocate memory from offline numa node
- act_mirred: clear sender cpu before sending to tx
- bpf: clear sender_cpu before xmit
- ipv6: Don't call with rt6_uncached_list_flush_dev
- ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
- tipc: move fragment importance field to new header position
- netlink: Trim skb to alloc size to avoid MSG_TRUNC
- drm: Fix locking for sysfs dpms file
- [sparc*] crypto: initialize blkcipher.ivsize
- crypto: ahash - ensure statesize is non-zero
- memcg: convert threshold to bytes
- btrfs: check unsupported filters in balance arguments
- btrfs: fix use after free iterating extrefs
- [arm64] errata: use KBUILD_CFLAGS_MODULE for erratum #843419
- nfsd/blocklayout: accept any minlength
- [armhf] i2c: s3c2410: enable RuntimePM before registering to the core
- i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348
- i2c: designware-platdrv: enable RuntimePM before registering to the core
- workqueue: make sure delayed work run in local cpu
- [x86] KVM: fix SMI to halted VCPU
- [x86] KVM: fix RSM into 64-bit protected mode
- drm/qxl: fix framebuffer dirty rectangle tracking.
- drm/nouveau/fbcon: take runpm reference when userspace has an open fd
- drm/dp/mst: make mst i2c transfer code more robust.
- drm/radeon: attach tile property to mst connector
- drm/radeon: add pm sysfs files late
- dm thin: fix missing pool reference count decrement in pool_ctr error
path
- rbd: fix double free on rbd_dev->header_name
- timekeeping: Increment clock_was_set_seq in timekeeping_init()
- [arm64] Fix THP protection change logic
- svcrdma: handle rdma read with a non-zero initial page offset
[ Salvatore Bonaccorso ]
* KEYS: Fix race between key destruction and finding a keyring by name
* KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
(CVE-2015-7872)
* KEYS: Don't permit request_key() to construct a new keyring
[ Ben Hutchings ]
* [x86] drm: Enable DRM_AMDGPU and HSA_AMD as modules (Closes: #797752)
* media: Enable DVB_AS102, VIDEO_GO7007, VIDEO_GO7007_USB,
VIDEO_GO7007_LOADER, VIDEO_GO7007_USB_S2250_BOARD as modules
* net: Enable LIQUIDIO and MLX5_CORE as modules; enable MLX5_CORE_EN
* [x86] Enable X86_AMD_PLATFORM_DEVICE
* linux-manual: Fix regression in reproducibility in 4.2~rc8-1~exp1
* net: Enable GENEVE_CORE as module
- Re-enable GENEVE and OPENVSWITCH_GENEVE
* bpf: Enable BPF_SYSCALL
* ACPI: Enable ACPI_NFIT as module
* tcp: Enable TCP_CONG_CDG as module
* nftables: Enable NF_TABLES_NETDEV, NFT_REDIR_IPV4, NFT_REDIR_IPV6 as
modules
* net/sched: Enable NET_CLS_FLOWER as module
* SCSI: Enable SCSI_SNIC as module
* target: Enable TCM_USER2 as module
* net/phy: Enable DP83867_PHY as module
* drm: Enable DRM_VIRTIO_GPU as module
* HID: Enable HID_BETOP_FF, HID_PLANTRONICS as modules
* hwrng: Enable USB_CHAOSKEY as module
* ext4: Enable EXT4_ENCRYPTION
* f2fs: Enable F2FS_FS_ENCRYPTION
* vfs,nvdimm: Enable FS_DAX
-- Ben Hutchings <email address hidden> Wed, 28 Oct 2015 05:46:49 +0900