Change logs for linux-snapdragon source package in Yakkety

  • linux-snapdragon (4.4.0-1065.70) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1065.70 -proposed tracker (LP: #1703999)
    
      * sock_recvmsg has dropped size argument (LP: #1701697)
        - Packaging: Breaks unfixed iscsitarget versions
    
      [ Ubuntu: 4.4.0-86.109 ]
    
      * linux: 4.4.0-86.109 -proposed tracker (LP: #1703995)
      * sock_recvmsg has dropped size argument (LP: #1701697)
        - Packaging: Breaks unfixed iscsitarget versions
    
      [ Ubuntu: 4.4.0-85.108 ]
    
      * linux: 4.4.0-85.108 -proposed tracker (LP: #1702103)
      * [Hyper-V] Implement Hyper-V PTP Source (LP: #1676635)
        - SAUCE: hv: make clocksource available for PTP device supporting
        - Drivers: hv: util: Use hv_get_current_tick() to get current tick
        - hv_util: switch to using timespec64
        - hv_utils: implement Hyper-V PTP source
        - Drivers: hv: util: Fix a typo
        - Drivers: hv: util: don't forget to init host_ts.lock
        - hv_utils: drop .getcrosststamp() support from PTP driver
        - hv_utils: fix TimeSync work on pre-TimeSync-v4 hosts
    
     -- Kleber Sacilotto de Souza <email address hidden>  Thu, 13 Jul 2017 17:09:01 +0200
  • linux-snapdragon (4.4.0-1064.69) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1064.69 -proposed tracker (LP: #1701027)
    
      [ Ubuntu: 4.4.0-84.107 ]
    
      * linux: 4.4.0-84.107 -proposed tracker (LP: #1701024)
      * Can't disable USB port from BIOS (LP: #1695216)
        - SAUCE: xhci: AMD Promontory USB disable port support
      * KILLER1435-S[0489:e0a2] BT cannot search BT 4.0 device (LP: #1699651)
        - Bluetooth: btusb: Add support for 0489:e0a2 QCA_ROME device
      * CIFS: Enable encryption for SMB3 (LP: #1670508)
        - Revert "Handle mismatched open calls"
        - Revert "Call echo service immediately after socket reconnect"
        - cifs: Make echo interval tunable
        - Prepare for encryption support (first part). Add decryption and encryption
          key generation. Thanks to Metze for helping with this.
        - [net] drop 'size' argument of sock_recvmsg()
        - cifs: merge the hash calculation helpers
        - cifs: no need to wank with copying and advancing iovec on recvmsg side
          either
        - cifs: don't bother with kmap on read_pages side
        - cifs_readv_receive: use cifs_read_from_socket()
        - Fix memory leaks in cifs_do_mount()
        - SMB3: Add mount parameter to allow user to override max credits
        - SMB2: Separate Kerberos authentication from SMB2_sess_setup
        - SMB2: Separate RawNTLMSSP authentication from SMB2_sess_setup
        - SMB3: parsing for new snapshot timestamp mount parm
        - cifs: Simplify SMB2 and SMB311 dependencies
        - cifs: Only select the required crypto modules
        - cifs: Add soft dependencies
        - CIFS: Separate SMB2 header structure
        - CIFS: Make SendReceive2() takes resp iov
        - CIFS: Make send_cancel take rqst as argument
        - CIFS: Send RFC1001 length in a separate iov
        - CIFS: Separate SMB2 sync header processing
        - CIFS: Separate RFC1001 length processing for SMB2 read
        - CIFS: Add capability to transform requests before sending
        - CIFS: Enable encryption during session setup phase
        - CIFS: Encrypt SMB3 requests before sending
        - CIFS: Add transform header handling callbacks
        - CIFS: Add mid handle callback
        - CIFS: Add copy into pages callback for a read operation
        - CIFS: Decrypt and process small encrypted packets
        - CIFS: Add capability to decrypt big read responses
        - CIFS: Allow to switch on encryption with seal mount option
        - CIFS: Fix possible use after free in demultiplex thread
        - Call echo service immediately after socket reconnect
        - Handle mismatched open calls
      * CVE-2017-9150
        - bpf: don't let ldimm64 leak map addresses on unprivileged
      * CVE-2015-8944
        - Make file credentials available to the seqfile interfaces
        - /proc/iomem: only expose physical resource addresses to privileged users
      * Xenial update to 4.4.73 stable release (LP: #1698817)
        - s390/vmem: fix identity mapping
        - partitions/msdos: FreeBSD UFS2 file systems are not recognized
        - ARM: dts: imx6dl: Fix the VDD_ARM_CAP voltage for 396MHz operation
        - staging: rtl8192e: rtl92e_fill_tx_desc fix write to mapped out memory.
        - net: xilinx_emaclite: fix freezes due to unordered I/O
        - net: xilinx_emaclite: fix receive buffer overflow
        - ipv6: Handle IPv4-mapped src to in6addr_any dst.
        - ipv6: Inhibit IPv4-mapped src address on the wire.
        - NET: Fix /proc/net/arp for AX.25
        - NET: mkiss: Fix panic
        - net: hns: Fix the device being used for dma mapping during TX
        - sierra_net: Skip validating irrelevant fields for IDLE LSIs
        - sierra_net: Add support for IPv6 and Dual-Stack Link Sense Indications
        - i2c: piix4: Fix request_region size
        - ipv6: Fix IPv6 packet loss in scenarios involving roaming + snooping
          switches
        - PM / runtime: Avoid false-positive warnings from might_sleep_if()
        - jump label: pass kbuild_cflags when checking for asm goto support
        - kasan: respect /proc/sys/kernel/traceoff_on_warning
        - log2: make order_base_2() behave correctly on const input value zero
        - ethtool: do not vzalloc(0) on registers dump
        - fscache: Fix dead object requeue
        - fscache: Clear outstanding writes when disabling a cookie
        - FS-Cache: Initialise stores_lock in netfs cookie
        - ipv6: fix flow labels when the traffic class is non-0
        - drm/nouveau: prevent userspace from deleting client object
        - drm/nouveau/fence/g84-: protect against concurrent access to semaphore
          buffers
        - gianfar: synchronize DMA API usage by free_skb_rx_queue w/ gfar_new_page
        - pinctrl: berlin-bg4ct: fix the value for "sd1a" of pin SCRD0_CRD_PRES
        - net: adaptec: starfire: add checks for dma mapping errors
        - parisc, parport_gsc: Fixes for printk continuation lines
        - drm/nouveau: Don't enabling polling twice on runtime resume
        - drm/ast: Fixed system hanged if disable P2A
        - ravb: unmap descriptors when freeing rings
        - nfs: Fix "Don't increment lock sequence ID after NFS4ERR_MOVED"
        - r8152: re-schedule napi for tx
        - r8152: fix rtl8152_post_reset function
        - r8152: avoid start_xmit to schedule napi when napi is disabled
        - sctp: sctp_addr_id2transport should verify the addr before looking up assoc
        - romfs: use different way to generate fsid for BLOCK or MTD
        - proc: add a schedule point in proc_pid_readdir()
        - tipc: ignore requests when the connection state is not CONNECTED
        - xtensa: don't use linux IRQ #0
        - s390/kvm: do not rely on the ILC on kvm host protection fauls
        - sparc64: make string buffers large enough
        - Linux 4.4.73
      * Xenial update to 4.4.72 stable release (LP: #1698799)
        - bnx2x: Fix Multi-Cos
        - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
        - cxgb4: avoid enabling napi twice to the same queue
        - tcp: disallow cwnd undo when switching congestion control
        - vxlan: fix use-after-free on deletion
        - ipv6: Fix leak in ipv6_gso_segment().
        - net: ping: do not abuse udp_poll()
        - net: ethoc: enable NAPI before poll may be scheduled
        - net: bridge: start hello timer only if device is up
        - sparc64: mm: fix copy_tsb to correctly copy huge page TSBs
        - sparc: Machine description indices can vary
        - sparc64: reset mm cpumask after wrap
        - sparc64: combine activate_mm and switch_mm
        - sparc64: redefine first version
        - sparc64: add per-cpu mm of secondary contexts
        - sparc64: new context wrap
        - sparc64: delete old wrap code
        - arch/sparc: support NR_CPUS = 4096
        - serial: ifx6x60: fix use-after-free on module unload
        - ptrace: Properly initialize ptracer_cred on fork
        - KEYS: fix dereferencing NULL payload with nonzero length
        - KEYS: fix freeing uninitialized memory in key_update()
        - crypto: gcm - wait for crypto op not signal safe
        - drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
        - nfsd4: fix null dereference on replay
        - nfsd: Fix up the "supattr_exclcreat" attributes
        - kvm: async_pf: fix rcu_irq_enter() with irqs enabled
        - KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation
        - arm: KVM: Allow unaligned accesses at HYP
        - KVM: async_pf: avoid async pf injection when in guest mode
        - dmaengine: usb-dmac: Fix DMAOR AE bit definition
        - dmaengine: ep93xx: Always start from BASE0
        - xen/privcmd: Support correctly 64KB page granularity when mapping memory
        - xen-netfront: do not cast grant table reference to signed short
        - xen-netfront: cast grant table reference first to type int
        - ext4: fix SEEK_HOLE
        - ext4: keep existing extra fields when inode expands
        - ext4: fix fdatasync(2) after extent manipulation operations
        - usb: gadget: f_mass_storage: Serialize wake and sleep execution
        - usb: chipidea: udc: fix NULL pointer dereference if udc_start failed
        - usb: chipidea: debug: check before accessing ci_role
        - staging/lustre/lov: remove set_fs() call from lov_getstripe()
        - iio: light: ltr501 Fix interchanged als/ps register field
        - iio: proximity: as3935: fix AS3935_INT mask
        - drivers: char: random: add get_random_long()
        - random: properly align get_random_int_hash
        - stackprotector: Increase the per-task stack canary's random range from 32
          bits to 64 bits on 64-bit platforms
        - cpufreq: cpufreq_register_driver() should return -ENODEV if init fails
        - target: Re-add check to reject control WRITEs with overflow data
        - drm/msm: Expose our reservation object when exporting a dmabuf.
        - Input: elantech - add Fujitsu Lifebook E546/E557 to force crc_enabled
        - cpuset: consider dying css as offline
        - fs: add i_blocksize()
        - ufs: restore proper tail allocation
        - fix ufs_isblockset()
        - ufs: restore maintaining ->i_blocks
        - ufs: set correct ->s_maxsize
        - ufs_extend_tail(): fix the braino in calling conventions of
          ufs_new_fragments()
        - ufs_getfrag_block(): we only grab ->truncate_mutex on block creation path
        - cxl: Fix error path on bad ioctl
        - btrfs: use correct types for page indices in btrfs_page_exists_in_range
        - btrfs: fix memory leak in update_space_info failure path
        - KVM: arm/arm64: Handle possible NULL stage2 pud when ageing pages
        - scsi: qla2xxx: don't disable a not previously enabled PCI device
        - powerpc/eeh: Avoid use after free in eeh_handle_special_event()
        - powerpc/numa: Fix percpu allocations to be NUMA aware
        - powerpc/hotplug-mem: Fix missing endian conversion of aa_index
        - perf/core: Drop kernel samples even though :u is specified
        - drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
        - drm/vmwgfx: Make sure backup_handle is always valid
        - drm/nouveau/tmr: fully separate alarm execution/pending lists
        - ALSA: timer: Fix race between read and ioctl
        - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
        - ASoC: Fix use-after-free at card unregistration
        - drivers: char: mem: Fix wraparound check to allow mappings up to the end
        - tty: Drop krefs for interrupted tty lock
        - serial: sh-sci: Fix panic when serial console and DMA are enabled
        - mm: consider memblock reservations for deferred memory initialization sizing
        - NFS: Ensure we revalidate attributes before using execute_ok()
        - NFSv4: Don't perform cached access checks before we've OPENed the file
        - Make __xfs_xattr_put_listen preperly report errors.
        - arm64: hw_breakpoint: fix watchpoint matching for tagged pointers
        - arm64: entry: improve data abort handling of tagged pointers
        - RDMA/qib,hfi1: Fix MR reference count leak on write with immediate
        - usercopy: Adjust tests to deal with SMAP/PAN
        - arm64: armv8_deprecated: ensure extension of addr
        - arm64: ensure extension of smp_store_release value
        - Linux 4.4.72
      * Xenial update to 4.4.71 stable release (LP: #1697001)
        - sparc: Fix -Wstringop-overflow warning
        - s390/qeth: handle sysfs error during initialization
        - s390/qeth: unbreak OSM and OSN support
        - s390/qeth: avoid null pointer dereference on OSN
        - tcp: avoid fragmenting peculiar skbs in SACK
        - sctp: fix src address selection if using secondary addresses for ipv6
        - tcp: eliminate negative reordering in tcp_clean_rtx_queue
        - net: Improve handling of failures on link and route dumps
        - bridge: netlink: check vlan_default_pvid range
        - qmi_wwan: add another Lenovo EM74xx device ID
        - bridge: start hello_timer when enabling KERNEL_STP in br_stp_start
        - be2net: Fix offload features for Q-in-Q packets
        - virtio-net: enable TSO/checksum offloads for Q-in-Q vlans
        - tcp: avoid fastopen API to be used on AF_UNSPEC
        - sctp: fix ICMP processing if skb is non-linear
        - ipv4: add reference counting to metrics
        - netem: fix skb_orphan_partial()
        - net: phy: marvell: Limit errata to 88m1101
        - vlan: Fix tcp checksum offloads in Q-in-Q vlans
        - i2c: i2c-tiny-usb: fix buffer not being DMA capable
        - mmc: sdhci-iproc: suppress spurious interrupt with Multiblock read
        - HID: wacom: Have wacom_tpc_irq guard against possible NULL dereference
        - scsi: mpt3sas: Force request partial completion alignment
        - drm/radeon/ci: disable mclk switching for high refresh rates (v2)
        - drm/radeon: Unbreak HPD handling for r600+
        - pcmcia: remove left-over %Z format
        - ALSA: hda - apply STAC_9200_DELL_M22 quirk for Dell Latitude D430
        - slub/memcg: cure the brainless abuse of sysfs attributes
        - drm/gma500/psb: Actually use VBT mode when it is found
        - mm/migrate: fix refcount handling when !hugepage_migration_supported()
        - mlock: fix mlock count can not decrease in race condition
        - xfs: Fix missed holes in SEEK_HOLE implementation
        - xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff()
        - xfs: fix over-copying of getbmap parameters from userspace
        - xfs: handle array index overrun in xfs_dir2_leaf_readbuf()
        - xfs: prevent multi-fsb dir readahead from reading random blocks
        - xfs: fix up quotacheck buffer list error handling
        - xfs: support ability to wait on new inodes
        - xfs: update ag iterator to support wait on new inodes
        - xfs: wait on new inodes during quotaoff dquot release
        - xfs: fix indlen accounting error on partial delalloc conversion
        - xfs: bad assertion for delalloc an extent that start at i_size
        - xfs: fix unaligned access in xfs_btree_visit_blocks
        - xfs: in _attrlist_by_handle, copy the cursor back to userspace
        - xfs: only return -errno or success from attr ->put_listent
        - Linux 4.4.71
      * CVE-2017-7346
        - drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
      * Power button does not work on Latitude 7480 (LP: #1697116)
        - intel-hid: Remove duplicated acpi_remove_notify_handler
        - platform/x86: intel-hid: Support 5 button array
      * CVE-2017-9074
        - ipv6: Check ip6_find_1stfragopt() return value properly.
      * CVE-2014-9900
        - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Thu, 29 Jun 2017 06:56:07 -0300
  • linux-snapdragon (4.4.0-1063.68) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1063.68 -proposed tracker (LP: #1700545)
    
      [ Ubuntu: 4.4.0-83.106 ]
    
      * linux: 4.4.0-83.106 -proposed tracker (LP: #1700541)
      * CVE-2017-1000364
        - Revert "UBUNTU: SAUCE: mm: Only expand stack if guard area is hit"
        - Revert "mm: do not collapse stack gap into THP"
        - Revert "mm: enlarge stack guard gap"
        - mm: vma_adjust: remove superfluous confusing update in remove_next == 1 case
        - mm: larger stack guard gap, between vmas
        - mm: fix new crash in unmapped_area_topdown()
        - Allow stack to grow up to address space limit
    
    linux-snapdragon (4.4.0-1062.67) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1062.67 -proposed tracker (LP: #1699068)
    
      * Disable CONFIG_I2C_THUNDERX for snapdragon kernel (LP: #1696937)
        - [Config] Disable CONFIG_I2C_THUNDERX
    
      [ Ubuntu: 4.4.0-82.105 ]
    
      * linux: 4.4.0-82.105 -proposed tracker (LP: #1699064)
      * CVE-2017-1000364
        - SAUCE: mm: Only expand stack if guard area is hit
      * linux-aws/linux-gke incorrectly producing and using linux-*-tools-
        common/linux-*-cloud-tools-common (LP: #1688579)
        - [Config] make linux-tools-common and linux-cloud-tools-common protection
          consistent
      * CVE-2017-9242
        - ipv6: fix out of bound writes in __ip6_append_data()
      * CVE-2017-9075
        - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
      * CVE-2017-9074
        - ipv6: Prevent overrun when parsing v6 header options
      * CVE-2017-9076
        - ipv6/dccp: do not inherit ipv6_mc_list from parent
      * CVE-2017-9077
        - ipv6/dccp: do not inherit ipv6_mc_list from parent
      * CVE-2017-8890
        - dccp/tcp: do not inherit mc_list from parent
      * Module signing exclusion for staging drivers does not work properly
        (LP: #1690908)
        - SAUCE: Fix module signing exclusion in package builds
      * extend-diff-ignore should use exact matches (LP: #1693504)
        - [Packaging] exact extend-diff-ignore matches
      * Dell XPS 9360 wifi 5G performance is poor (LP: #1692836)
        - SAUCE: ath10k: fix the wifi speed issue for kill 1535
      *  Upgrade Redpine WLAN/BT driver to ver. 1.2.RC12 (LP: #1694607)
        - SAUCE: Redpine: Upgrade to ver. 1.2.RC12
      * [DP MST] No audio output through HDMI/DP/mDP ports in Dell WD15 and TB15
        docking stations (LP: #1694665)
        - drm/i915: Store port enum in intel_encoder
        - drm/i915: Eliminate redundant local variable definition
        - drm/i915: Switch to using port stored in intel_encoder
        - drm/i915: Move audio_connector to intel_encoder
        - drm/i915/dp: DP audio API changes for MST
        - drm/i915: abstract ddi being audio enabled
        - drm/i915/audio: extend get_saved_enc() to support more scenarios
        - drm/i915: enable dp mst audio
      * Xenial update to 4.4.70 stable release (LP: #1694621)
        - usb: misc: legousbtower: Fix buffers on stack
        - usb: misc: legousbtower: Fix memory leak
        - USB: ene_usb6250: fix DMA to the stack
        - watchdog: pcwd_usb: fix NULL-deref at probe
        - char: lp: fix possible integer overflow in lp_setup()
        - USB: core: replace %p with %pK
        - ARM: tegra: paz00: Mark panel regulator as enabled on boot
        - tpm_crb: check for bad response size
        - infiniband: call ipv6 route lookup via the stub interface
        - dm btree: fix for dm_btree_find_lowest_key()
        - dm raid: select the Kconfig option CONFIG_MD_RAID0
        - dm bufio: avoid a possible ABBA deadlock
        - dm bufio: check new buffer allocation watermark every 30 seconds
        - dm cache metadata: fail operations if fail_io mode has been established
        - dm bufio: make the parameter "retain_bytes" unsigned long
        - dm thin metadata: call precommit before saving the roots
        - dm space map disk: fix some book keeping in the disk space map
        - md: update slab_cache before releasing new stripes when stripes resizing
        - rtlwifi: rtl8821ae: setup 8812ae RFE according to device type
        - mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
        - ima: accept previously set IMA_NEW_FILE
        - KVM: x86: Fix load damaged SSEx MXCSR register
        - KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
        - regulator: tps65023: Fix inverted core enable logic.
        - s390/kdump: Add final note
        - s390/cputime: fix incorrect system time
        - ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
        - ath9k_htc: fix NULL-deref at probe
        - drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark
          calculations.
        - drm/amdgpu: Make display watermark calculations more accurate
        - drm/nouveau/therm: remove ineffective workarounds for alarm bugs
        - drm/nouveau/tmr: ack interrupt before processing alarms
        - drm/nouveau/tmr: fix corruption of the pending list when rescheduling an
          alarm
        - drm/nouveau/tmr: avoid processing completed alarms when adding a new one
        - drm/nouveau/tmr: handle races with hw when updating the next alarm time
        - cdc-acm: fix possible invalid access when processing notification
        - proc: Fix unbalanced hard link numbers
        - of: fix sparse warning in of_pci_range_parser_one
        - iio: dac: ad7303: fix channel description
        - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
        - pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
        - USB: serial: ftdi_sio: fix setting latency for unprivileged users
        - USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
        - ext4 crypto: don't let data integrity writebacks fail with ENOMEM
        - ext4 crypto: fix some error handling
        - net: qmi_wwan: Add SIMCom 7230E
        - fscrypt: fix context consistency check when key(s) unavailable
        - f2fs: check entire encrypted bigname when finding a dentry
        - fscrypt: avoid collisions when presenting long encrypted filenames
        - usb: host: xhci-plat: propagate return value of platform_get_irq()
        - xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
        - usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
        - net: irda: irda-usb: fix firmware name on big-endian hosts
        - usbvision: fix NULL-deref at probe
        - mceusb: fix NULL-deref at probe
        - ttusb2: limit messages to buffer size
        - usb: musb: tusb6010_omap: Do not reset the other direction's packet size
        - USB: iowarrior: fix info ioctl on big-endian hosts
        - usb: serial: option: add Telit ME910 support
        - USB: serial: qcserial: add more Lenovo EM74xx device IDs
        - USB: serial: mct_u232: fix big-endian baud-rate handling
        - USB: serial: io_ti: fix div-by-zero in set_termios
        - USB: hub: fix SS hub-descriptor handling
        - USB: hub: fix non-SS hub-descriptor handling
        - ipx: call ipxitf_put() in ioctl error path
        - iio: proximity: as3935: fix as3935_write
        - ceph: fix recursion between ceph_set_acl() and __ceph_setattr()
        - gspca: konica: add missing endpoint sanity check
        - s5p-mfc: Fix unbalanced call to clock management
        - dib0700: fix NULL-deref at probe
        - zr364xx: enforce minimum size when reading header
        - dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops
        - cx231xx-audio: fix init error path
        - cx231xx-audio: fix NULL-deref at probe
        - cx231xx-cards: fix NULL-deref at probe
        - powerpc/book3s/mce: Move add_taint() later in virtual mode
        - powerpc/pseries: Fix of_node_put() underflow during DLPAR remove
        - powerpc/64e: Fix hang when debugging programs with relocated kernel
        - ARM: dts: at91: sama5d3_xplained: fix ADC vref
        - ARM: dts: at91: sama5d3_xplained: not all ADC channels are available
        - arm64: xchg: hazard against entire exchange variable
        - arm64: uaccess: ensure extension of access_ok() addr
        - arm64: documentation: document tagged pointer stack constraints
        - xc2028: Fix use-after-free bug properly
        - Revert "UBUNTU: SAUCE: mm: Respect FOLL_FORCE/FOLL_COW for thp"
        - mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp
        - staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
        - staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.
        - iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
        - metag/uaccess: Fix access_ok()
        - metag/uaccess: Check access_ok in strncpy_from_user
        - uwb: fix device quirk on big-endian hosts
        - genirq: Fix chained interrupt data ordering
        - osf_wait4(): fix infoleak
        - tracing/kprobes: Enforce kprobes teardown after testing
        - PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
        - PCI: Freeze PME scan before suspending devices
        - drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
        - nfsd: encoders mustn't use unitialized values in error cases
        - drivers: char: mem: Check for address space wraparound with mmap()
        - Linux 4.4.70
      * Xenial update to 4.4.69 stable release (LP: #1692900)
        - xen: adjust early dom0 p2m handling to xen hypervisor behavior
        - target: Fix compare_and_write_callback handling for non GOOD status
        - target/fileio: Fix zero-length READ and WRITE handling
        - target: Convert ACL change queue_depth se_session reference usage
        - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
        - usb: host: xhci: print correct command ring address
        - USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit
        - USB: Proper handling of Race Condition when two USB class drivers try to
          call init_usb_class simultaneously
        - staging: vt6656: use off stack for in buffer USB transfers.
        - staging: vt6656: use off stack for out buffer USB transfers.
        - staging: gdm724x: gdm_mux: fix use-after-free on module unload
        - staging: comedi: jr3_pci: fix possible null pointer dereference
        - staging: comedi: jr3_pci: cope with jiffies wraparound
        - usb: misc: add missing continue in switch
        - usb: Make sure usb/phy/of gets built-in
        - usb: hub: Fix error loop seen after hub communication errors
        - usb: hub: Do not attempt to autosuspend disconnected devices
        - x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
        - selftests/x86/ldt_gdt_32: Work around a glibc sigaction() bug
        - x86, pmem: Fix cache flushing for iovec write < 8 bytes
        - um: Fix PTRACE_POKEUSER on x86_64
        - KVM: x86: fix user triggerable warning in kvm_apic_accept_events()
        - KVM: arm/arm64: fix races in kvm_psci_vcpu_on
        - block: fix blk_integrity_register to use template's interval_exp if not 0
        - crypto: algif_aead - Require setkey before accept(2)
        - dm era: save spacemap metadata root after the pre-commit
        - vfio/type1: Remove locked page accounting workqueue
        - IB/core: Fix sysfs registration error flow
        - IB/IPoIB: ibX: failed to create mcg debug file
        - IB/mlx4: Fix ib device initialization error flow
        - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
        - ext4: evict inline data when writing to memory map
        - fs/xattr.c: zero out memory copied to userspace in getxattr
        - ceph: fix memory leak in __ceph_setxattr()
        - fs/block_dev: always invalidate cleancache in invalidate_bdev()
        - Set unicode flag on cifs echo request to avoid Mac error
        - SMB3: Work around mount failure when using SMB3 dialect to Macs
        - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
        - cifs: fix CIFS_IOC_GET_MNT_INFO oops
        - CIFS: add misssing SFM mapping for doublequote
        - padata: free correct variable
        - arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
        - serial: samsung: Use right device for DMA-mapping calls
        - serial: omap: fix runtime-pm handling on unbind
        - serial: omap: suspend device on probe errors
        - tty: pty: Fix ldisc flush after userspace become aware of the data already
        - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
        - Bluetooth: hci_bcm: add missing tty-device sanity check
        - Bluetooth: hci_intel: add missing tty-device sanity check
        - mac80211: pass RX aggregation window size to driver
        - mac80211: pass block ack session timeout to to driver
        - mac80211: RX BA support for sta max_rx_aggregation_subframes
        - wlcore: Pass win_size taken from ieee80211_sta to FW
        - wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event
        - ipmi: Fix kernel panic at ipmi_ssif_thread()
        - Linux 4.4.69
      * Support IPMI system interface on Cavium ThunderX (LP: #1688132)
        - i2c: octeon: Cleanup kerneldoc comments
        - i2c: octeon: Cleanup i2c-octeon driver
        - i2c: octeon: Cleanup resource allocation code
        - i2c: octeon: Support I2C_M_RECV_LEN
        - i2c: octeon: Increase retry default and use fixed timeout value
        - i2c: octeon: Move set-clock and init-lowlevel upward
        - i2c: octeon: Rename [read|write]_sw to reg_[read|write]
        - i2c: octeon: Introduce helper functions for register access
        - i2c: octeon: Remove superfluous check in octeon_i2c_test_iflg
        - i2c: octeon: Improve error status checking
        - i2c: octeon: Use i2c recovery framework
        - i2c: octeon: Add flush writeq helper function
        - i2c: octeon: Enable High-Level Controller
        - i2c: octeon: Add support for cn78xx chips
        - i2c: octeon: Remove zero-length message support
        - i2c: octeon: Improve performance if interrupt is early
        - i2c: octeon: Add workaround for broken irqs on CN3860
        - i2c: octeon: Missing AAK flag in case of I2C_M_RECV_LEN
        - i2c: octeon: Avoid printk after too long SMBUS message
        - i2c: octeon: Rename driver to prepare for split
        - i2c: octeon: Split the driver into two parts
        - [Config] CONFIG_I2C_THUNDERX=m
        - i2c: thunderx: Add i2c driver for ThunderX SOC
        - i2c: thunderx: Add SMBUS alert support
        - i2c: octeon,thunderx: Move register offsets to struct
        - i2c: octeon: Sort include files alphabetically
        - i2c: octeon: Use booleon values for booleon variables
        - i2c: octeon: thunderx: Add MAINTAINERS entry
        - i2c: octeon: Fix set SCL recovery function
        - i2c: octeon: Avoid sending STOP during recovery
        - i2c: octeon: Fix high-level controller status check
        - i2c: octeon: thunderx: TWSI software reset in recovery
        - i2c: octeon: thunderx: Remove double-check after interrupt
        - i2c: octeon: thunderx: Limit register access retries
        - i2c: thunderx: Enable HWMON class probing
      * Xenial update to 4.4.68 stable release (LP: #1691418)
        - 9p: fix a potential acl leak
        - ARM: 8452/3: PJ4: make coprocessor access sequences buildable in Thumb2 mode
        - cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
        - powerpc/powernv: Fix opal_exit tracepoint opcode
        - power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING
        - power: supply: bq24190_charger: Call set_mode_host() on pm_resume()
        - power: supply: bq24190_charger: Install irq_handler_thread() at end of
          probe()
        - power: supply: bq24190_charger: Call power_supply_changed() for relevant
          component
        - power: supply: bq24190_charger: Don't read fault register outside
          irq_handle_thread()
        - power: supply: bq24190_charger: Handle fault before status on interrupt
        - leds: ktd2692: avoid harmless maybe-uninitialized warning
        - ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
        - mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
        - mwifiex: remove redundant dma padding in AMSDU
        - mwifiex: Avoid skipping WEP key deletion for AP
        - x86/ioapic: Restore IO-APIC irq_chip retrigger callback
        - x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
        - clk: Make x86/ conditional on CONFIG_COMMON_CLK
        - kprobes/x86: Fix kernel panic when certain exception-handling addresses are
          probed
        - x86/platform/intel-mid: Correct MSI IRQ line for watchdog device
        - Revert "KVM: nested VMX: disable perf cpuid reporting"
        - KVM: nVMX: initialize PML fields in vmcs02
        - KVM: nVMX: do not leak PML full vmexit to L1
        - usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
          paths
        - usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
          paths
        - usb: chipidea: Only read/write OTGSC from one place
        - usb: chipidea: Handle extcon events properly
        - USB: serial: keyspan_pda: fix receive sanity checks
        - USB: serial: digi_acceleport: fix incomplete rx sanity check
        - USB: serial: ssu100: fix control-message error handling
        - USB: serial: io_edgeport: fix epic-descriptor handling
        - USB: serial: ti_usb_3410_5052: fix control-message error handling
        - USB: serial: ark3116: fix open error handling
        - USB: serial: ftdi_sio: fix latency-timer error handling
        - USB: serial: quatech2: fix control-message error handling
        - USB: serial: mct_u232: fix modem-status error handling
        - USB: serial: io_edgeport: fix descriptor error handling
        - phy: qcom-usb-hs: Add depends on EXTCON
        - serial: 8250_omap: Fix probe and remove for PM runtime
        - scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
        - MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
        - brcmfmac: Ensure pointer correctly set if skb data location changes
        - brcmfmac: Make skb header writable before use
        - staging: wlan-ng: add missing byte order conversion
        - staging: emxx_udc: remove incorrect __init annotations
        - ALSA: hda - Fix deadlock of controller device lock at unbinding
        - tcp: do not underestimate skb->truesize in tcp_trim_head()
        - bpf, arm64: fix jit branch offset related to ldimm64
        - tcp: fix wraparound issue in tcp_lp
        - tcp: do not inherit fastopen_req from parent
        - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
        - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
        - ipv6: initialize route null entry in addrconf_init()
        - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
        - bnxt_en: allocate enough space for ->ntp_fltr_bmap
        - f2fs: sanity check segment count
        - drm/ttm: fix use-after-free races in vm fault handling
        - block: get rid of blk_integrity_revalidate()
        - Linux 4.4.68
      * Keyboard backlight control does not work on some dell laptops.
        (LP: #1693126)
        - platform/x86: dell-laptop: Add Latitude 7480 and others to the DMI whitelist
        - platform/x86: dell-laptop: Add keyboard backlight timeout AC settings
      * Upgrade Redpine WLAN/BT driver to ver. 1.2.RC9 (LP: #1690498)
        - SAUCE: Redpine: Upgrade to ver. 1.2.RC9
      * exec'ing a setuid binary from a threaded program sometimes fails to setuid
        (LP: #1672819)
        - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct
      * attempts to rename vlans / vlans have addr_assign_type of 0 on kernel 4.4
        (LP: #1682871)
        - vlan: Propagate MAC address to VLANs
      * Exar usb-serial doesn't restore baud rate after resume from S3/S4
        (LP: #1690362)
        - SAUCE: xr-usb-serial: re-initialise baudrate after resume from S3/S4
      * st_pressure, st_accel IIO drivers fail to detect sensors after reloading
        kernel modules (LP: #1690310)
        - SAUCE: (no-up) iio: st_pressure: st_accel: Initialise sensor platform data
          properly
      * nvidia-docker on ppc64le-ubuntu16.04  issue due to cross-thread naming if
        !PR_DUMPABLE (LP: #1690225)
        - procfs: fix pthread cross-thread naming if !PR_DUMPABLE
      * linux xenial derivatives fail to build (LP: #1691814)
        - [Packaging] Set do_tools_common in common vars
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Mon, 26 Jun 2017 15:28:51 -0300
  • linux-snapdragon (4.4.0-1062.67) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1062.67 -proposed tracker (LP: #1699068)
    
      * Disable CONFIG_I2C_THUNDERX for snapdragon kernel (LP: #1696937)
        - [Config] Disable CONFIG_I2C_THUNDERX
    
      [ Ubuntu: 4.4.0-82.105 ]
    
      * linux: 4.4.0-82.105 -proposed tracker (LP: #1699064)
      * CVE-2017-1000364
        - SAUCE: mm: Only expand stack if guard area is hit
      * linux-aws/linux-gke incorrectly producing and using linux-*-tools-
        common/linux-*-cloud-tools-common (LP: #1688579)
        - [Config] make linux-tools-common and linux-cloud-tools-common protection
          consistent
      * CVE-2017-9242
        - ipv6: fix out of bound writes in __ip6_append_data()
      * CVE-2017-9075
        - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
      * CVE-2017-9074
        - ipv6: Prevent overrun when parsing v6 header options
      * CVE-2017-9076
        - ipv6/dccp: do not inherit ipv6_mc_list from parent
      * CVE-2017-9077
        - ipv6/dccp: do not inherit ipv6_mc_list from parent
      * CVE-2017-8890
        - dccp/tcp: do not inherit mc_list from parent
      * Module signing exclusion for staging drivers does not work properly
        (LP: #1690908)
        - SAUCE: Fix module signing exclusion in package builds
      * extend-diff-ignore should use exact matches (LP: #1693504)
        - [Packaging] exact extend-diff-ignore matches
      * Dell XPS 9360 wifi 5G performance is poor (LP: #1692836)
        - SAUCE: ath10k: fix the wifi speed issue for kill 1535
      *  Upgrade Redpine WLAN/BT driver to ver. 1.2.RC12 (LP: #1694607)
        - SAUCE: Redpine: Upgrade to ver. 1.2.RC12
      * [DP MST] No audio output through HDMI/DP/mDP ports in Dell WD15 and TB15
        docking stations (LP: #1694665)
        - drm/i915: Store port enum in intel_encoder
        - drm/i915: Eliminate redundant local variable definition
        - drm/i915: Switch to using port stored in intel_encoder
        - drm/i915: Move audio_connector to intel_encoder
        - drm/i915/dp: DP audio API changes for MST
        - drm/i915: abstract ddi being audio enabled
        - drm/i915/audio: extend get_saved_enc() to support more scenarios
        - drm/i915: enable dp mst audio
      * Xenial update to 4.4.70 stable release (LP: #1694621)
        - usb: misc: legousbtower: Fix buffers on stack
        - usb: misc: legousbtower: Fix memory leak
        - USB: ene_usb6250: fix DMA to the stack
        - watchdog: pcwd_usb: fix NULL-deref at probe
        - char: lp: fix possible integer overflow in lp_setup()
        - USB: core: replace %p with %pK
        - ARM: tegra: paz00: Mark panel regulator as enabled on boot
        - tpm_crb: check for bad response size
        - infiniband: call ipv6 route lookup via the stub interface
        - dm btree: fix for dm_btree_find_lowest_key()
        - dm raid: select the Kconfig option CONFIG_MD_RAID0
        - dm bufio: avoid a possible ABBA deadlock
        - dm bufio: check new buffer allocation watermark every 30 seconds
        - dm cache metadata: fail operations if fail_io mode has been established
        - dm bufio: make the parameter "retain_bytes" unsigned long
        - dm thin metadata: call precommit before saving the roots
        - dm space map disk: fix some book keeping in the disk space map
        - md: update slab_cache before releasing new stripes when stripes resizing
        - rtlwifi: rtl8821ae: setup 8812ae RFE according to device type
        - mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
        - ima: accept previously set IMA_NEW_FILE
        - KVM: x86: Fix load damaged SSEx MXCSR register
        - KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
        - regulator: tps65023: Fix inverted core enable logic.
        - s390/kdump: Add final note
        - s390/cputime: fix incorrect system time
        - ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
        - ath9k_htc: fix NULL-deref at probe
        - drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark
          calculations.
        - drm/amdgpu: Make display watermark calculations more accurate
        - drm/nouveau/therm: remove ineffective workarounds for alarm bugs
        - drm/nouveau/tmr: ack interrupt before processing alarms
        - drm/nouveau/tmr: fix corruption of the pending list when rescheduling an
          alarm
        - drm/nouveau/tmr: avoid processing completed alarms when adding a new one
        - drm/nouveau/tmr: handle races with hw when updating the next alarm time
        - cdc-acm: fix possible invalid access when processing notification
        - proc: Fix unbalanced hard link numbers
        - of: fix sparse warning in of_pci_range_parser_one
        - iio: dac: ad7303: fix channel description
        - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
        - pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
        - USB: serial: ftdi_sio: fix setting latency for unprivileged users
        - USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
        - ext4 crypto: don't let data integrity writebacks fail with ENOMEM
        - ext4 crypto: fix some error handling
        - net: qmi_wwan: Add SIMCom 7230E
        - fscrypt: fix context consistency check when key(s) unavailable
        - f2fs: check entire encrypted bigname when finding a dentry
        - fscrypt: avoid collisions when presenting long encrypted filenames
        - usb: host: xhci-plat: propagate return value of platform_get_irq()
        - xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
        - usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
        - net: irda: irda-usb: fix firmware name on big-endian hosts
        - usbvision: fix NULL-deref at probe
        - mceusb: fix NULL-deref at probe
        - ttusb2: limit messages to buffer size
        - usb: musb: tusb6010_omap: Do not reset the other direction's packet size
        - USB: iowarrior: fix info ioctl on big-endian hosts
        - usb: serial: option: add Telit ME910 support
        - USB: serial: qcserial: add more Lenovo EM74xx device IDs
        - USB: serial: mct_u232: fix big-endian baud-rate handling
        - USB: serial: io_ti: fix div-by-zero in set_termios
        - USB: hub: fix SS hub-descriptor handling
        - USB: hub: fix non-SS hub-descriptor handling
        - ipx: call ipxitf_put() in ioctl error path
        - iio: proximity: as3935: fix as3935_write
        - ceph: fix recursion between ceph_set_acl() and __ceph_setattr()
        - gspca: konica: add missing endpoint sanity check
        - s5p-mfc: Fix unbalanced call to clock management
        - dib0700: fix NULL-deref at probe
        - zr364xx: enforce minimum size when reading header
        - dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops
        - cx231xx-audio: fix init error path
        - cx231xx-audio: fix NULL-deref at probe
        - cx231xx-cards: fix NULL-deref at probe
        - powerpc/book3s/mce: Move add_taint() later in virtual mode
        - powerpc/pseries: Fix of_node_put() underflow during DLPAR remove
        - powerpc/64e: Fix hang when debugging programs with relocated kernel
        - ARM: dts: at91: sama5d3_xplained: fix ADC vref
        - ARM: dts: at91: sama5d3_xplained: not all ADC channels are available
        - arm64: xchg: hazard against entire exchange variable
        - arm64: uaccess: ensure extension of access_ok() addr
        - arm64: documentation: document tagged pointer stack constraints
        - xc2028: Fix use-after-free bug properly
        - Revert "UBUNTU: SAUCE: mm: Respect FOLL_FORCE/FOLL_COW for thp"
        - mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp
        - staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
        - staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.
        - iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
        - metag/uaccess: Fix access_ok()
        - metag/uaccess: Check access_ok in strncpy_from_user
        - uwb: fix device quirk on big-endian hosts
        - genirq: Fix chained interrupt data ordering
        - osf_wait4(): fix infoleak
        - tracing/kprobes: Enforce kprobes teardown after testing
        - PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
        - PCI: Freeze PME scan before suspending devices
        - drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
        - nfsd: encoders mustn't use unitialized values in error cases
        - drivers: char: mem: Check for address space wraparound with mmap()
        - Linux 4.4.70
      * Xenial update to 4.4.69 stable release (LP: #1692900)
        - xen: adjust early dom0 p2m handling to xen hypervisor behavior
        - target: Fix compare_and_write_callback handling for non GOOD status
        - target/fileio: Fix zero-length READ and WRITE handling
        - target: Convert ACL change queue_depth se_session reference usage
        - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
        - usb: host: xhci: print correct command ring address
        - USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit
        - USB: Proper handling of Race Condition when two USB class drivers try to
          call init_usb_class simultaneously
        - staging: vt6656: use off stack for in buffer USB transfers.
        - staging: vt6656: use off stack for out buffer USB transfers.
        - staging: gdm724x: gdm_mux: fix use-after-free on module unload
        - staging: comedi: jr3_pci: fix possible null pointer dereference
        - staging: comedi: jr3_pci: cope with jiffies wraparound
        - usb: misc: add missing continue in switch
        - usb: Make sure usb/phy/of gets built-in
        - usb: hub: Fix error loop seen after hub communication errors
        - usb: hub: Do not attempt to autosuspend disconnected devices
        - x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
        - selftests/x86/ldt_gdt_32: Work around a glibc sigaction() bug
        - x86, pmem: Fix cache flushing for iovec write < 8 bytes
        - um: Fix PTRACE_POKEUSER on x86_64
        - KVM: x86: fix user triggerable warning in kvm_apic_accept_events()
        - KVM: arm/arm64: fix races in kvm_psci_vcpu_on
        - block: fix blk_integrity_register to use template's interval_exp if not 0
        - crypto: algif_aead - Require setkey before accept(2)
        - dm era: save spacemap metadata root after the pre-commit
        - vfio/type1: Remove locked page accounting workqueue
        - IB/core: Fix sysfs registration error flow
        - IB/IPoIB: ibX: failed to create mcg debug file
        - IB/mlx4: Fix ib device initialization error flow
        - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
        - ext4: evict inline data when writing to memory map
        - fs/xattr.c: zero out memory copied to userspace in getxattr
        - ceph: fix memory leak in __ceph_setxattr()
        - fs/block_dev: always invalidate cleancache in invalidate_bdev()
        - Set unicode flag on cifs echo request to avoid Mac error
        - SMB3: Work around mount failure when using SMB3 dialect to Macs
        - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
        - cifs: fix CIFS_IOC_GET_MNT_INFO oops
        - CIFS: add misssing SFM mapping for doublequote
        - padata: free correct variable
        - arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
        - serial: samsung: Use right device for DMA-mapping calls
        - serial: omap: fix runtime-pm handling on unbind
        - serial: omap: suspend device on probe errors
        - tty: pty: Fix ldisc flush after userspace become aware of the data already
        - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
        - Bluetooth: hci_bcm: add missing tty-device sanity check
        - Bluetooth: hci_intel: add missing tty-device sanity check
        - mac80211: pass RX aggregation window size to driver
        - mac80211: pass block ack session timeout to to driver
        - mac80211: RX BA support for sta max_rx_aggregation_subframes
        - wlcore: Pass win_size taken from ieee80211_sta to FW
        - wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event
        - ipmi: Fix kernel panic at ipmi_ssif_thread()
        - Linux 4.4.69
      * Support IPMI system interface on Cavium ThunderX (LP: #1688132)
        - i2c: octeon: Cleanup kerneldoc comments
        - i2c: octeon: Cleanup i2c-octeon driver
        - i2c: octeon: Cleanup resource allocation code
        - i2c: octeon: Support I2C_M_RECV_LEN
        - i2c: octeon: Increase retry default and use fixed timeout value
        - i2c: octeon: Move set-clock and init-lowlevel upward
        - i2c: octeon: Rename [read|write]_sw to reg_[read|write]
        - i2c: octeon: Introduce helper functions for register access
        - i2c: octeon: Remove superfluous check in octeon_i2c_test_iflg
        - i2c: octeon: Improve error status checking
        - i2c: octeon: Use i2c recovery framework
        - i2c: octeon: Add flush writeq helper function
        - i2c: octeon: Enable High-Level Controller
        - i2c: octeon: Add support for cn78xx chips
        - i2c: octeon: Remove zero-length message support
        - i2c: octeon: Improve performance if interrupt is early
        - i2c: octeon: Add workaround for broken irqs on CN3860
        - i2c: octeon: Missing AAK flag in case of I2C_M_RECV_LEN
        - i2c: octeon: Avoid printk after too long SMBUS message
        - i2c: octeon: Rename driver to prepare for split
        - i2c: octeon: Split the driver into two parts
        - [Config] CONFIG_I2C_THUNDERX=m
        - i2c: thunderx: Add i2c driver for ThunderX SOC
        - i2c: thunderx: Add SMBUS alert support
        - i2c: octeon,thunderx: Move register offsets to struct
        - i2c: octeon: Sort include files alphabetically
        - i2c: octeon: Use booleon values for booleon variables
        - i2c: octeon: thunderx: Add MAINTAINERS entry
        - i2c: octeon: Fix set SCL recovery function
        - i2c: octeon: Avoid sending STOP during recovery
        - i2c: octeon: Fix high-level controller status check
        - i2c: octeon: thunderx: TWSI software reset in recovery
        - i2c: octeon: thunderx: Remove double-check after interrupt
        - i2c: octeon: thunderx: Limit register access retries
        - i2c: thunderx: Enable HWMON class probing
      * Xenial update to 4.4.68 stable release (LP: #1691418)
        - 9p: fix a potential acl leak
        - ARM: 8452/3: PJ4: make coprocessor access sequences buildable in Thumb2 mode
        - cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
        - powerpc/powernv: Fix opal_exit tracepoint opcode
        - power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING
        - power: supply: bq24190_charger: Call set_mode_host() on pm_resume()
        - power: supply: bq24190_charger: Install irq_handler_thread() at end of
          probe()
        - power: supply: bq24190_charger: Call power_supply_changed() for relevant
          component
        - power: supply: bq24190_charger: Don't read fault register outside
          irq_handle_thread()
        - power: supply: bq24190_charger: Handle fault before status on interrupt
        - leds: ktd2692: avoid harmless maybe-uninitialized warning
        - ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
        - mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
        - mwifiex: remove redundant dma padding in AMSDU
        - mwifiex: Avoid skipping WEP key deletion for AP
        - x86/ioapic: Restore IO-APIC irq_chip retrigger callback
        - x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
        - clk: Make x86/ conditional on CONFIG_COMMON_CLK
        - kprobes/x86: Fix kernel panic when certain exception-handling addresses are
          probed
        - x86/platform/intel-mid: Correct MSI IRQ line for watchdog device
        - Revert "KVM: nested VMX: disable perf cpuid reporting"
        - KVM: nVMX: initialize PML fields in vmcs02
        - KVM: nVMX: do not leak PML full vmexit to L1
        - usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
          paths
        - usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
          paths
        - usb: chipidea: Only read/write OTGSC from one place
        - usb: chipidea: Handle extcon events properly
        - USB: serial: keyspan_pda: fix receive sanity checks
        - USB: serial: digi_acceleport: fix incomplete rx sanity check
        - USB: serial: ssu100: fix control-message error handling
        - USB: serial: io_edgeport: fix epic-descriptor handling
        - USB: serial: ti_usb_3410_5052: fix control-message error handling
        - USB: serial: ark3116: fix open error handling
        - USB: serial: ftdi_sio: fix latency-timer error handling
        - USB: serial: quatech2: fix control-message error handling
        - USB: serial: mct_u232: fix modem-status error handling
        - USB: serial: io_edgeport: fix descriptor error handling
        - phy: qcom-usb-hs: Add depends on EXTCON
        - serial: 8250_omap: Fix probe and remove for PM runtime
        - scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
        - MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
        - brcmfmac: Ensure pointer correctly set if skb data location changes
        - brcmfmac: Make skb header writable before use
        - staging: wlan-ng: add missing byte order conversion
        - staging: emxx_udc: remove incorrect __init annotations
        - ALSA: hda - Fix deadlock of controller device lock at unbinding
        - tcp: do not underestimate skb->truesize in tcp_trim_head()
        - bpf, arm64: fix jit branch offset related to ldimm64
        - tcp: fix wraparound issue in tcp_lp
        - tcp: do not inherit fastopen_req from parent
        - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
        - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
        - ipv6: initialize route null entry in addrconf_init()
        - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
        - bnxt_en: allocate enough space for ->ntp_fltr_bmap
        - f2fs: sanity check segment count
        - drm/ttm: fix use-after-free races in vm fault handling
        - block: get rid of blk_integrity_revalidate()
        - Linux 4.4.68
      * Keyboard backlight control does not work on some dell laptops.
        (LP: #1693126)
        - platform/x86: dell-laptop: Add Latitude 7480 and others to the DMI whitelist
        - platform/x86: dell-laptop: Add keyboard backlight timeout AC settings
      * Upgrade Redpine WLAN/BT driver to ver. 1.2.RC9 (LP: #1690498)
        - SAUCE: Redpine: Upgrade to ver. 1.2.RC9
      * exec'ing a setuid binary from a threaded program sometimes fails to setuid
        (LP: #1672819)
        - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct
      * attempts to rename vlans / vlans have addr_assign_type of 0 on kernel 4.4
        (LP: #1682871)
        - vlan: Propagate MAC address to VLANs
      * Exar usb-serial doesn't restore baud rate after resume from S3/S4
        (LP: #1690362)
        - SAUCE: xr-usb-serial: re-initialise baudrate after resume from S3/S4
      * st_pressure, st_accel IIO drivers fail to detect sensors after reloading
        kernel modules (LP: #1690310)
        - SAUCE: (no-up) iio: st_pressure: st_accel: Initialise sensor platform data
          properly
      * nvidia-docker on ppc64le-ubuntu16.04  issue due to cross-thread naming if
        !PR_DUMPABLE (LP: #1690225)
        - procfs: fix pthread cross-thread naming if !PR_DUMPABLE
      * linux xenial derivatives fail to build (LP: #1691814)
        - [Packaging] Set do_tools_common in common vars
    
     -- Kleber Sacilotto de Souza <email address hidden>  Wed, 21 Jun 2017 10:45:33 +0200
  • linux-snapdragon (4.4.0-1061.66) xenial; urgency=low
    
      [ Ubuntu: 4.4.0-81.104 ]
    
      * CVE-2017-1000364
        - mm: enlarge stack guard gap
        - mm: do not collapse stack gap into THP
    
     -- Stefan Bader <email address hidden>  Wed, 14 Jun 2017 12:22:51 +0200
  • linux-snapdragon (4.4.0-1060.64) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1060.64 -proposed tracker (LP: #1696360)
    
      * Disable CONFIG_I2C_THUNDERX for snapdragon kernel (LP: #1696937)
        - [Config] Disable CONFIG_I2C_THUNDERX
    
      [ Ubuntu: 4.4.0-80.101 ]
    
      * linux: 4.4.0-80.101 -proposed tracker (LP: #1696357)
      * linux-aws/linux-gke incorrectly producing and using linux-*-tools-
        common/linux-*-cloud-tools-common (LP: #1688579)
        - [Config] make linux-tools-common and linux-cloud-tools-common protection
          consistent
      * CVE-2017-9242
        - ipv6: fix out of bound writes in __ip6_append_data()
      * CVE-2017-9075
        - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
      * CVE-2017-9074
        - ipv6: Prevent overrun when parsing v6 header options
      * CVE-2017-9076
        - ipv6/dccp: do not inherit ipv6_mc_list from parent
      * CVE-2017-9077
        - ipv6/dccp: do not inherit ipv6_mc_list from parent
      * CVE-2017-8890
        - dccp/tcp: do not inherit mc_list from parent
      * Module signing exclusion for staging drivers does not work properly
        (LP: #1690908)
        - SAUCE: Fix module signing exclusion in package builds
      * extend-diff-ignore should use exact matches (LP: #1693504)
        - [Packaging] exact extend-diff-ignore matches
      * Dell XPS 9360 wifi 5G performance is poor (LP: #1692836)
        - SAUCE: ath10k: fix the wifi speed issue for kill 1535
      *  Upgrade Redpine WLAN/BT driver to ver. 1.2.RC12 (LP: #1694607)
        - SAUCE: Redpine: Upgrade to ver. 1.2.RC12
      * [DP MST] No audio output through HDMI/DP/mDP ports in Dell WD15 and TB15
        docking stations (LP: #1694665)
        - drm/i915: Store port enum in intel_encoder
        - drm/i915: Eliminate redundant local variable definition
        - drm/i915: Switch to using port stored in intel_encoder
        - drm/i915: Move audio_connector to intel_encoder
        - drm/i915/dp: DP audio API changes for MST
        - drm/i915: abstract ddi being audio enabled
        - drm/i915/audio: extend get_saved_enc() to support more scenarios
        - drm/i915: enable dp mst audio
      * Xenial update to 4.4.70 stable release (LP: #1694621)
        - usb: misc: legousbtower: Fix buffers on stack
        - usb: misc: legousbtower: Fix memory leak
        - USB: ene_usb6250: fix DMA to the stack
        - watchdog: pcwd_usb: fix NULL-deref at probe
        - char: lp: fix possible integer overflow in lp_setup()
        - USB: core: replace %p with %pK
        - ARM: tegra: paz00: Mark panel regulator as enabled on boot
        - tpm_crb: check for bad response size
        - infiniband: call ipv6 route lookup via the stub interface
        - dm btree: fix for dm_btree_find_lowest_key()
        - dm raid: select the Kconfig option CONFIG_MD_RAID0
        - dm bufio: avoid a possible ABBA deadlock
        - dm bufio: check new buffer allocation watermark every 30 seconds
        - dm cache metadata: fail operations if fail_io mode has been established
        - dm bufio: make the parameter "retain_bytes" unsigned long
        - dm thin metadata: call precommit before saving the roots
        - dm space map disk: fix some book keeping in the disk space map
        - md: update slab_cache before releasing new stripes when stripes resizing
        - rtlwifi: rtl8821ae: setup 8812ae RFE according to device type
        - mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
        - ima: accept previously set IMA_NEW_FILE
        - KVM: x86: Fix load damaged SSEx MXCSR register
        - KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
        - regulator: tps65023: Fix inverted core enable logic.
        - s390/kdump: Add final note
        - s390/cputime: fix incorrect system time
        - ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
        - ath9k_htc: fix NULL-deref at probe
        - drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark
          calculations.
        - drm/amdgpu: Make display watermark calculations more accurate
        - drm/nouveau/therm: remove ineffective workarounds for alarm bugs
        - drm/nouveau/tmr: ack interrupt before processing alarms
        - drm/nouveau/tmr: fix corruption of the pending list when rescheduling an
          alarm
        - drm/nouveau/tmr: avoid processing completed alarms when adding a new one
        - drm/nouveau/tmr: handle races with hw when updating the next alarm time
        - cdc-acm: fix possible invalid access when processing notification
        - proc: Fix unbalanced hard link numbers
        - of: fix sparse warning in of_pci_range_parser_one
        - iio: dac: ad7303: fix channel description
        - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
        - pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
        - USB: serial: ftdi_sio: fix setting latency for unprivileged users
        - USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
        - ext4 crypto: don't let data integrity writebacks fail with ENOMEM
        - ext4 crypto: fix some error handling
        - net: qmi_wwan: Add SIMCom 7230E
        - fscrypt: fix context consistency check when key(s) unavailable
        - f2fs: check entire encrypted bigname when finding a dentry
        - fscrypt: avoid collisions when presenting long encrypted filenames
        - usb: host: xhci-plat: propagate return value of platform_get_irq()
        - xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
        - usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
        - net: irda: irda-usb: fix firmware name on big-endian hosts
        - usbvision: fix NULL-deref at probe
        - mceusb: fix NULL-deref at probe
        - ttusb2: limit messages to buffer size
        - usb: musb: tusb6010_omap: Do not reset the other direction's packet size
        - USB: iowarrior: fix info ioctl on big-endian hosts
        - usb: serial: option: add Telit ME910 support
        - USB: serial: qcserial: add more Lenovo EM74xx device IDs
        - USB: serial: mct_u232: fix big-endian baud-rate handling
        - USB: serial: io_ti: fix div-by-zero in set_termios
        - USB: hub: fix SS hub-descriptor handling
        - USB: hub: fix non-SS hub-descriptor handling
        - ipx: call ipxitf_put() in ioctl error path
        - iio: proximity: as3935: fix as3935_write
        - ceph: fix recursion between ceph_set_acl() and __ceph_setattr()
        - gspca: konica: add missing endpoint sanity check
        - s5p-mfc: Fix unbalanced call to clock management
        - dib0700: fix NULL-deref at probe
        - zr364xx: enforce minimum size when reading header
        - dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops
        - cx231xx-audio: fix init error path
        - cx231xx-audio: fix NULL-deref at probe
        - cx231xx-cards: fix NULL-deref at probe
        - powerpc/book3s/mce: Move add_taint() later in virtual mode
        - powerpc/pseries: Fix of_node_put() underflow during DLPAR remove
        - powerpc/64e: Fix hang when debugging programs with relocated kernel
        - ARM: dts: at91: sama5d3_xplained: fix ADC vref
        - ARM: dts: at91: sama5d3_xplained: not all ADC channels are available
        - arm64: xchg: hazard against entire exchange variable
        - arm64: uaccess: ensure extension of access_ok() addr
        - arm64: documentation: document tagged pointer stack constraints
        - xc2028: Fix use-after-free bug properly
        - Revert "UBUNTU: SAUCE: mm: Respect FOLL_FORCE/FOLL_COW for thp"
        - mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp
        - staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
        - staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.
        - iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
        - metag/uaccess: Fix access_ok()
        - metag/uaccess: Check access_ok in strncpy_from_user
        - uwb: fix device quirk on big-endian hosts
        - genirq: Fix chained interrupt data ordering
        - osf_wait4(): fix infoleak
        - tracing/kprobes: Enforce kprobes teardown after testing
        - PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
        - PCI: Freeze PME scan before suspending devices
        - drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
        - nfsd: encoders mustn't use unitialized values in error cases
        - drivers: char: mem: Check for address space wraparound with mmap()
        - Linux 4.4.70
      * Xenial update to 4.4.69 stable release (LP: #1692900)
        - xen: adjust early dom0 p2m handling to xen hypervisor behavior
        - target: Fix compare_and_write_callback handling for non GOOD status
        - target/fileio: Fix zero-length READ and WRITE handling
        - target: Convert ACL change queue_depth se_session reference usage
        - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
        - usb: host: xhci: print correct command ring address
        - USB: serial: ftdi_sio: add device ID for Microsemi/Arrow SF2PLUS Dev Kit
        - USB: Proper handling of Race Condition when two USB class drivers try to
          call init_usb_class simultaneously
        - staging: vt6656: use off stack for in buffer USB transfers.
        - staging: vt6656: use off stack for out buffer USB transfers.
        - staging: gdm724x: gdm_mux: fix use-after-free on module unload
        - staging: comedi: jr3_pci: fix possible null pointer dereference
        - staging: comedi: jr3_pci: cope with jiffies wraparound
        - usb: misc: add missing continue in switch
        - usb: Make sure usb/phy/of gets built-in
        - usb: hub: Fix error loop seen after hub communication errors
        - usb: hub: Do not attempt to autosuspend disconnected devices
        - x86/boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
        - selftests/x86/ldt_gdt_32: Work around a glibc sigaction() bug
        - x86, pmem: Fix cache flushing for iovec write < 8 bytes
        - um: Fix PTRACE_POKEUSER on x86_64
        - KVM: x86: fix user triggerable warning in kvm_apic_accept_events()
        - KVM: arm/arm64: fix races in kvm_psci_vcpu_on
        - block: fix blk_integrity_register to use template's interval_exp if not 0
        - crypto: algif_aead - Require setkey before accept(2)
        - dm era: save spacemap metadata root after the pre-commit
        - vfio/type1: Remove locked page accounting workqueue
        - IB/core: Fix sysfs registration error flow
        - IB/IPoIB: ibX: failed to create mcg debug file
        - IB/mlx4: Fix ib device initialization error flow
        - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
        - ext4: evict inline data when writing to memory map
        - fs/xattr.c: zero out memory copied to userspace in getxattr
        - ceph: fix memory leak in __ceph_setxattr()
        - fs/block_dev: always invalidate cleancache in invalidate_bdev()
        - Set unicode flag on cifs echo request to avoid Mac error
        - SMB3: Work around mount failure when using SMB3 dialect to Macs
        - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
        - cifs: fix CIFS_IOC_GET_MNT_INFO oops
        - CIFS: add misssing SFM mapping for doublequote
        - padata: free correct variable
        - arm64: KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
        - serial: samsung: Use right device for DMA-mapping calls
        - serial: omap: fix runtime-pm handling on unbind
        - serial: omap: suspend device on probe errors
        - tty: pty: Fix ldisc flush after userspace become aware of the data already
        - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
        - Bluetooth: hci_bcm: add missing tty-device sanity check
        - Bluetooth: hci_intel: add missing tty-device sanity check
        - mac80211: pass RX aggregation window size to driver
        - mac80211: pass block ack session timeout to to driver
        - mac80211: RX BA support for sta max_rx_aggregation_subframes
        - wlcore: Pass win_size taken from ieee80211_sta to FW
        - wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event
        - ipmi: Fix kernel panic at ipmi_ssif_thread()
        - Linux 4.4.69
      * Support IPMI system interface on Cavium ThunderX (LP: #1688132)
        - i2c: octeon: Cleanup kerneldoc comments
        - i2c: octeon: Cleanup i2c-octeon driver
        - i2c: octeon: Cleanup resource allocation code
        - i2c: octeon: Support I2C_M_RECV_LEN
        - i2c: octeon: Increase retry default and use fixed timeout value
        - i2c: octeon: Move set-clock and init-lowlevel upward
        - i2c: octeon: Rename [read|write]_sw to reg_[read|write]
        - i2c: octeon: Introduce helper functions for register access
        - i2c: octeon: Remove superfluous check in octeon_i2c_test_iflg
        - i2c: octeon: Improve error status checking
        - i2c: octeon: Use i2c recovery framework
        - i2c: octeon: Add flush writeq helper function
        - i2c: octeon: Enable High-Level Controller
        - i2c: octeon: Add support for cn78xx chips
        - i2c: octeon: Remove zero-length message support
        - i2c: octeon: Improve performance if interrupt is early
        - i2c: octeon: Add workaround for broken irqs on CN3860
        - i2c: octeon: Missing AAK flag in case of I2C_M_RECV_LEN
        - i2c: octeon: Avoid printk after too long SMBUS message
        - i2c: octeon: Rename driver to prepare for split
        - i2c: octeon: Split the driver into two parts
        - [Config] CONFIG_I2C_THUNDERX=m
        - i2c: thunderx: Add i2c driver for ThunderX SOC
        - i2c: thunderx: Add SMBUS alert support
        - i2c: octeon,thunderx: Move register offsets to struct
        - i2c: octeon: Sort include files alphabetically
        - i2c: octeon: Use booleon values for booleon variables
        - i2c: octeon: thunderx: Add MAINTAINERS entry
        - i2c: octeon: Fix set SCL recovery function
        - i2c: octeon: Avoid sending STOP during recovery
        - i2c: octeon: Fix high-level controller status check
        - i2c: octeon: thunderx: TWSI software reset in recovery
        - i2c: octeon: thunderx: Remove double-check after interrupt
        - i2c: octeon: thunderx: Limit register access retries
        - i2c: thunderx: Enable HWMON class probing
      * Xenial update to 4.4.68 stable release (LP: #1691418)
        - 9p: fix a potential acl leak
        - ARM: 8452/3: PJ4: make coprocessor access sequences buildable in Thumb2 mode
        - cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
        - powerpc/powernv: Fix opal_exit tracepoint opcode
        - power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING
        - power: supply: bq24190_charger: Call set_mode_host() on pm_resume()
        - power: supply: bq24190_charger: Install irq_handler_thread() at end of
          probe()
        - power: supply: bq24190_charger: Call power_supply_changed() for relevant
          component
        - power: supply: bq24190_charger: Don't read fault register outside
          irq_handle_thread()
        - power: supply: bq24190_charger: Handle fault before status on interrupt
        - leds: ktd2692: avoid harmless maybe-uninitialized warning
        - ARM: OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
        - mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
        - mwifiex: remove redundant dma padding in AMSDU
        - mwifiex: Avoid skipping WEP key deletion for AP
        - x86/ioapic: Restore IO-APIC irq_chip retrigger callback
        - x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
        - clk: Make x86/ conditional on CONFIG_COMMON_CLK
        - kprobes/x86: Fix kernel panic when certain exception-handling addresses are
          probed
        - x86/platform/intel-mid: Correct MSI IRQ line for watchdog device
        - Revert "KVM: nested VMX: disable perf cpuid reporting"
        - KVM: nVMX: initialize PML fields in vmcs02
        - KVM: nVMX: do not leak PML full vmexit to L1
        - usb: host: ehci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
          paths
        - usb: host: ohci-exynos: Decrese node refcount on exynos_ehci_get_phy() error
          paths
        - usb: chipidea: Only read/write OTGSC from one place
        - usb: chipidea: Handle extcon events properly
        - USB: serial: keyspan_pda: fix receive sanity checks
        - USB: serial: digi_acceleport: fix incomplete rx sanity check
        - USB: serial: ssu100: fix control-message error handling
        - USB: serial: io_edgeport: fix epic-descriptor handling
        - USB: serial: ti_usb_3410_5052: fix control-message error handling
        - USB: serial: ark3116: fix open error handling
        - USB: serial: ftdi_sio: fix latency-timer error handling
        - USB: serial: quatech2: fix control-message error handling
        - USB: serial: mct_u232: fix modem-status error handling
        - USB: serial: io_edgeport: fix descriptor error handling
        - phy: qcom-usb-hs: Add depends on EXTCON
        - serial: 8250_omap: Fix probe and remove for PM runtime
        - scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
        - MIPS: R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
        - brcmfmac: Ensure pointer correctly set if skb data location changes
        - brcmfmac: Make skb header writable before use
        - staging: wlan-ng: add missing byte order conversion
        - staging: emxx_udc: remove incorrect __init annotations
        - ALSA: hda - Fix deadlock of controller device lock at unbinding
        - tcp: do not underestimate skb->truesize in tcp_trim_head()
        - bpf, arm64: fix jit branch offset related to ldimm64
        - tcp: fix wraparound issue in tcp_lp
        - tcp: do not inherit fastopen_req from parent
        - ipv4, ipv6: ensure raw socket message is big enough to hold an IP header
        - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
        - ipv6: initialize route null entry in addrconf_init()
        - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
        - bnxt_en: allocate enough space for ->ntp_fltr_bmap
        - f2fs: sanity check segment count
        - drm/ttm: fix use-after-free races in vm fault handling
        - block: get rid of blk_integrity_revalidate()
        - Linux 4.4.68
      * Keyboard backlight control does not work on some dell laptops.
        (LP: #1693126)
        - platform/x86: dell-laptop: Add Latitude 7480 and others to the DMI whitelist
        - platform/x86: dell-laptop: Add keyboard backlight timeout AC settings
      * Upgrade Redpine WLAN/BT driver to ver. 1.2.RC9 (LP: #1690498)
        - SAUCE: Redpine: Upgrade to ver. 1.2.RC9
      * exec'ing a setuid binary from a threaded program sometimes fails to setuid
        (LP: #1672819)
        - SAUCE: exec: ensure file system accounting in check_unsafe_exec is correct
      * attempts to rename vlans / vlans have addr_assign_type of 0 on kernel 4.4
        (LP: #1682871)
        - vlan: Propagate MAC address to VLANs
      * Exar usb-serial doesn't restore baud rate after resume from S3/S4
        (LP: #1690362)
        - SAUCE: xr-usb-serial: re-initialise baudrate after resume from S3/S4
      * st_pressure, st_accel IIO drivers fail to detect sensors after reloading
        kernel modules (LP: #1690310)
        - SAUCE: (no-up) iio: st_pressure: st_accel: Initialise sensor platform data
          properly
      * nvidia-docker on ppc64le-ubuntu16.04  issue due to cross-thread naming if
        !PR_DUMPABLE (LP: #1690225)
        - procfs: fix pthread cross-thread naming if !PR_DUMPABLE
      * linux xenial derivatives fail to build (LP: #1691814)
        - [Packaging] Set do_tools_common in common vars
    
     -- Kleber Sacilotto de Souza <email address hidden>  Fri, 09 Jun 2017 09:54:40 +0200
  • linux-snapdragon (4.4.0-1059.63) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1059.63 -proposed tracker (LP: #1691183)
    
      * linux xenial derivatives fail to build (LP: #1691814)
        - [Packaging] Set do_tools_common in common vars
        - [Packaging] Do not build tools-common
    
      [ Ubuntu: 4.4.0-79.100 ]
    
      * linux: 4.4.0-79.100 -proposed tracker (LP: #1691180)
      * linux-aws/linux-gke incorrectly producing and using linux-*-tools-
        common/linux-*-cloud-tools-common (LP: #1688579)
        - [Config] make linux-tools-common and linux-cloud-tools-common provide linux-
          gke versions
        - [Config] make linux-tools-common and linux-cloud-tools-common provide linux-
          aws versions
        - [Packaging] prevent linux-*-tools-common from being produced from non linux
          packages
      * CVE-2017-0605
        - tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
      * i915-bpo crashes on external hdmi input (LP: #1580272)
        - SAUCE: i915_bpo: Silence the warning about watermark entries not changing
      * Kernel panics on Xenial when using cgroups and strict CFS limits
        (LP: #1687512)
        - sched/fair: Initialize throttle_count for new task-groups lazily
        - sched/fair: Do not announce throttled next buddy in dequeue_task_fair()
      * bonding - mlx5 - speed changed to 0 after changing ring size  (LP: #1687877)
        - bonding: allow notifications for bond_set_slave_link_state
      * Xenial update to 4.4.67 stable release (LP: #1689296)
        - timerfd: Protect the might cancel mechanism proper
        - Handle mismatched open calls
        - ASoC: intel: Fix PM and non-atomic crash in bytcr drivers
        - ALSA: ppc/awacs: shut up maybe-uninitialized warning
        - drbd: avoid redefinition of BITS_PER_PAGE
        - mtd: avoid stack overflow in MTD CFI code
        - net: tg3: avoid uninitialized variable warning
        - netlink: Allow direct reclaim for fallback allocation
        - IB/qib: rename BITS_PER_PAGE to RVT_BITS_PER_PAGE
        - IB/ehca: fix maybe-uninitialized warnings
        - ext4: require encryption feature for EXT4_IOC_SET_ENCRYPTION_POLICY
        - ext4 crypto: revalidate dentry after adding or removing the key
        - ext4 crypto: use dget_parent() in ext4_d_revalidate()
        - ext4/fscrypto: avoid RCU lookup in d_revalidate
        - nfsd4: minor NFSv2/v3 write decoding cleanup
        - nfsd: stricter decoding of write-like NFSv2/v3 ops
        - dm ioctl: prevent stack leak in dm ioctl call
        - Linux 4.4.67
      * Precision Rack failed to resume from S4 (LP: #1686061)
        - x86 / hibernate: Use hlt_play_dead() when resuming from hibernation
        - x86/boot: Split out kernel_ident_mapping_init()
        - x86/power/64: Always create temporary identity mapping correctly
      * Xenial update to 4.4.66 stable release (LP: #1688505)
        - f2fs: do more integrity verification for superblock
        - xc2028: unlock on error in xc2028_set_config()
        - ARM: OMAP2+: timer: add probe for clocksources
        - clk: sunxi: Add apb0 gates for H3
        - crypto: testmgr - fix out of bound read in __test_aead()
        - drm/amdgpu: fix array out of bounds
        - ext4: check if in-inode xattr is corrupted in ext4_expand_extra_isize_ea()
        - md:raid1: fix a dead loop when read from a WriteMostly disk
        - MIPS: Fix crash registers on non-crashing CPUs
        - net: cavium: liquidio: Avoid dma_unmap_single on uninitialized ndata
        - net_sched: close another race condition in tcf_mirred_release()
        - RDS: Fix the atomicity for congestion map update
        - regulator: core: Clear the supply pointer if enabling fails
        - usb: gadget: f_midi: Fixed a bug when buflen was smaller than wMaxPacketSize
        - xen/x86: don't lose event interrupts
        - sparc64: kern_addr_valid regression
        - sparc64: Fix kernel panic due to erroneous #ifdef surrounding pmd_write()
        - net: neigh: guard against NULL solicit() method
        - net: phy: handle state correctly in phy_stop_machine
        - l2tp: purge socket queues in the .destruct() callback
        - l2tp: take reference on sessions being dumped
        - l2tp: fix PPP pseudo-wire auto-loading
        - net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given
        - sctp: listen on the sock only when it's state is listening or closed
        - tcp: clear saved_syn in tcp_disconnect()
        - dp83640: don't recieve time stamps twice
        - net: ipv6: RTF_PCPU should not be settable from userspace
        - netpoll: Check for skb->queue_mapping
        - ip6mr: fix notification device destruction
        - macvlan: Fix device ref leak when purging bc_queue
        - ipv6: check skb->protocol before lookup for nexthop
        - ipv6: check raw payload size correctly in ioctl
        - ALSA: firewire-lib: fix inappropriate assignment between signed/unsigned
          type
        - ALSA: seq: Don't break snd_use_lock_sync() loop by timeout
        - MIPS: KGDB: Use kernel context for sleeping threads
        - MIPS: Avoid BUG warning in arch_check_elf
        - p9_client_readdir() fix
        - Input: i8042 - add Clevo P650RS to the i8042 reset list
        - nfsd: check for oversized NFSv2/v3 arguments
        - ARCv2: save r30 on kernel entry as gcc uses it for code-gen
        - ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram
        - Linux 4.4.66
      * Xenial update to 4.4.65 stable release (LP: #1688483)
        - tipc: make sure IPv6 header fits in skb headroom
        - tipc: make dist queue pernet
        - tipc: re-enable compensation for socket receive buffer double counting
        - tipc: correct error in node fsm
        - tty: nozomi: avoid a harmless gcc warning
        - hostap: avoid uninitialized variable use in hfa384x_get_rid
        - gfs2: avoid uninitialized variable warning
        - tipc: fix random link resets while adding a second bearer
        - tipc: fix socket timer deadlock
        - xc2028: avoid use after free
        - netfilter: nfnetlink: correctly validate length of batch messages
        - tipc: check minimum bearer MTU
        - vfio/pci: Fix integer overflows, bitmask check
        - staging/android/ion : fix a race condition in the ion driver
        - ping: implement proper locking
        - perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
        - Linux 4.4.65
      * Xenial update to 4.4.64 stable release (LP: #1687638)
        - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings
        - KEYS: Change the name of the dead type to ".dead" to prevent user access
        - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
        - tracing: Allocate the snapshot buffer before enabling probe
        - ring-buffer: Have ring_buffer_iter_empty() return true when empty
        - cifs: Do not send echoes before Negotiate is complete
        - CIFS: remove bad_network_name flag
        - s390/mm: fix CMMA vs KSM vs others
        - VSOCK: Detach QP check should filter out non matching QPs.
        - Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled
        - ACPI / power: Avoid maybe-uninitialized warning
        - mmc: sdhci-esdhc-imx: increase the pad I/O drive strength for DDR50 card
        - mac80211: reject ToDS broadcast data frames
        - ubi/upd: Always flush after prepared for an update
        - powerpc/kprobe: Fix oops when kprobed on 'stdu' instruction
        - x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs
        - kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd
        - x86, pmem: fix broken __copy_user_nocache cache-bypass assumptions
        - block: fix del_gendisk() vs blkdev_ioctl crash
        - tipc: fix crash during node removal
        - Linux 4.4.64
      * Xenial update to 4.4.63 stable release (LP: #1687629)
        - cgroup, kthread: close race window where new kthreads can be migrated to
          non-root cgroups
        - thp: fix MADV_DONTNEED vs clear soft dirty race
        - drm/nouveau/mpeg: mthd returns true on success now
        - drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
        - CIFS: store results of cifs_reopen_file to avoid infinite wait
        - Input: xpad - add support for Razer Wildcat gamepad
        - perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()
        - x86/vdso: Ensure vdso32_enabled gets set to valid values only
        - x86/vdso: Plug race between mapping and ELF header setup
        - acpi, nfit, libnvdimm: fix interleave set cookie calculation (64-bit
          comparison)
        - iscsi-target: Fix TMR reference leak during session shutdown
        - iscsi-target: Drop work-around for legacy GlobalSAN initiator
        - scsi: sr: Sanity check returned mode data
        - scsi: sd: Consider max_xfer_blocks if opt_xfer_blocks is unusable
        - scsi: sd: Fix capacity calculation with 32-bit sector_t
        - xen, fbfront: fix connecting to backend
        - libnvdimm: fix reconfig_mutex, mmap_sem, and jbd2_handle lockdep splat
        - irqchip/irq-imx-gpcv2: Fix spinlock initialization
        - ftrace: Fix removing of second function probe
        - char: Drop bogus dependency of DEVPORT on !M68K
        - char: lack of bool string made CONFIG_DEVPORT always on
        - Revert "MIPS: Lantiq: Fix cascaded IRQ setup"
        - kvm: fix page struct leak in handle_vmon
        - zram: do not use copy_page with non-page aligned address
        - powerpc: Disable HFSCR[TM] if TM is not supported
        - crypto: ahash - Fix EINPROGRESS notification callback
        - ath9k: fix NULL pointer dereference
        - dvb-usb-v2: avoid use-after-free
        - ext4: fix inode checksum calculation problem if i_extra_size is small
        - platform/x86: acer-wmi: setup accelerometer when machine has appropriate
          notify event
        - rtc: tegra: Implement clock handling
        - mm: Tighten x86 /dev/mem with zeroing reads
        - dvb-usb: don't use stack for firmware load
        - dvb-usb-firmware: don't do DMA on stack
        - virtio-console: avoid DMA from stack
        - pegasus: Use heap buffers for all register access
        - rtl8150: Use heap buffers for all register access
        - catc: Combine failure cleanup code in catc_probe()
        - catc: Use heap buffer for memory size test
        - tty/serial: atmel: RS485 half duplex w/DMA: enable RX after TX is done
        - net: ipv6: check route protocol when deleting routes
        - MIPS: fix Select HAVE_IRQ_EXIT_ON_IRQ_STACK patch.
        - Linux 4.4.63
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Fri, 19 May 2017 09:39:36 -0300
  • linux-snapdragon (4.4.0-1058.62) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1058.62 -proposed tracker (LP: #1686649)
    
      [ Ubuntu: 4.4.0-78.99 ]
    
      * linux: 4.4.0-78.99 -proposed tracker (LP: #1686645)
      * Please backport fix to reference leak in cgroup blkio throttle
        (LP: #1683976)
        - block: fix module reference leak on put_disk() call for cgroups throttle
      * UbuntuKVM guest crashed while running I/O stress test with Ubuntu kernel
        4.4.0-47-generic (LP: #1659111)
        - block: Unhash block device inodes on gendisk destruction
        - block: Use pointer to backing_dev_info from request_queue
        - block: Dynamically allocate and refcount backing_dev_info
        - block: Make blk_get_backing_dev_info() safe without open bdev
        - block: Get rid of blk_get_backing_dev_info()
        - block: Move bdev_unhash_inode() after invalidate_partition()
        - block: Unhash also block device inode for the whole device
        - block: Revalidate i_bdev reference in bd_aquire()
        - block: Initialize bd_bdi on inode initialization
        - block: Move bdi_unregister() to del_gendisk()
        - block: Allow bdi re-registration
        - bdi: Fix use-after-free in wb_congested_put()
        - block: Make del_gendisk() safer for disks without queues
        - block: Fix bdi assignment to bdev inode when racing with disk delete
        - bdi: Mark congested->bdi as internal
        - bdi: Make wb->bdi a proper reference
        - bdi: Unify bdi->wb_list handling for root wb_writeback
        - bdi: Shutdown writeback on all cgwbs in cgwb_bdi_destroy()
        - bdi: Do not wait for cgwbs release in bdi_unregister()
        - bdi: Rename cgwb_bdi_destroy() to cgwb_bdi_unregister()
        - block: Fix oops in locked_inode_to_wb_and_lock_list()
        - kobject: Export kobject_get_unless_zero()
        - block: Fix oops scsi_disk_get()
      * Touchpad not working correctly after kernel upgrade (LP: #1662589)
        - Input: ALPS - fix V8+ protocol handling (73 03 28)
      * Xenial update to v4.4.62 stable release (LP: #1683728)
        - drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
        - drm/i915: Stop using RP_DOWN_EI on Baytrail
        - usb: dwc3: gadget: delay unmap of bounced requests
        - mtd: bcm47xxpart: fix parsing first block after aligned TRX
        - MIPS: Introduce irq_stack
        - MIPS: Stack unwinding while on IRQ stack
        - MIPS: Only change $28 to thread_info if coming from user mode
        - MIPS: Switch to the irq_stack in interrupts
        - MIPS: Select HAVE_IRQ_EXIT_ON_IRQ_STACK
        - MIPS: IRQ Stack: Fix erroneous jal to plat_irq_dispatch
        - crypto: caam - fix RNG deinstantiation error checking
        - Linux 4.4.62
      * ifup service of network device stay active after driver stop (LP: #1672144)
        - net: use net->count to check whether a netns is alive or not
      * [Hyper-V] mkfs regression in kernel 4.4+ (LP: #1682215)
        - block: relax check on sg gap
      * [Feature] KBL: intel_powerclamp driver support (LP: #1591641)
        - thermal/powerclamp: remove cpu whitelist
        - thermal/powerclamp: correct cpu support check
        - thermal/powerclamp: add back module device table
      * sysfs channel reads of lps22hb pressure sensor are stale (LP: #1682103)
        - iio: st_pressure: initialize lps22hb bootime
      * Backlight control does not work and there are no entries in
        /sys/class/backlight (LP: #1667323)
        - Revert "ACPI / video: Add force_native quirk for HP Pavilion dv6"
      * [Feature] KBL: intel_rapl driver support (LP: #1591640)
        - powercap/intel_rapl: Add support for Kabylake
      * Xenial update to v4.4.61 stable release (LP: #1682140)
        - drm/vmwgfx: Type-check lookups of fence objects
        - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
        - drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
        - drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
        - drm/vmwgfx: Remove getparam error message
        - drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
        - sysfs: be careful of error returns from ops->show()
        - staging: android: ashmem: lseek failed due to no FMODE_LSEEK.
        - arm/arm64: KVM: Take mmap_sem in stage2_unmap_vm
        - arm/arm64: KVM: Take mmap_sem in kvm_arch_prepare_memory_region
        - iio: bmg160: reset chip when probing
        - Reset TreeId to zero on SMB2 TREE_CONNECT
        - ptrace: fix PTRACE_LISTEN race corrupting task->state
        - ring-buffer: Fix return value check in test_ringbuffer()
        - metag/usercopy: Drop unused macros
        - metag/usercopy: Fix alignment error checking
        - metag/usercopy: Add early abort to copy_to_user
        - metag/usercopy: Zero rest of buffer from copy_from_user
        - metag/usercopy: Set flags before ADDZ
        - metag/usercopy: Fix src fixup in from user rapf loops
        - metag/usercopy: Add missing fixups
        - powerpc/mm: Add missing global TLB invalidate if cxl is active
        - powerpc: Don't try to fix up misaligned load-with-reservation instructions
        - nios2: reserve boot memory for device tree
        - s390/decompressor: fix initrd corruption caused by bss clear
        - s390/uaccess: get_user() should zero on failure (again)
        - MIPS: Force o32 fp64 support on 32bit MIPS64r6 kernels
        - MIPS: ralink: Fix typos in rt3883 pinctrl
        - MIPS: End spinlocks with .insn
        - MIPS: Lantiq: fix missing xbar kernel panic
        - MIPS: Flush wrong invalid FTLB entry for huge page
        - mm/mempolicy.c: fix error handling in set_mempolicy and mbind.
        - Linux 4.4.61
      * Xenial update to v4.4.60 stable release (LP: #1681862)
        - libceph: force GFP_NOIO for socket allocations
        - xen/setup: Don't relocate p2m over existing one
        - scsi: mpt3sas: fix hang on ata passthrough commands
        - scsi: sg: check length passed to SG_NEXT_CMD_LEN
        - scsi: libsas: fix ata xfer length
        - ALSA: seq: Fix race during FIFO resize
        - ALSA: hda - fix a problem for lineout on a Dell AIO machine
        - ASoC: atmel-classd: fix audio clock rate
        - ACPI: Fix incompatibility with mcount-based function graph tracing
        - ACPI: Do not create a platform_device for IOAPIC/IOxAPIC
        - tty/serial: atmel: fix race condition (TX+DMA)
        - tty/serial: atmel: fix TX path in atmel_console_write()
        - USB: fix linked-list corruption in rh_call_control()
        - KVM: x86: clear bus pointer when destroyed
        - drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
        - mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd()
        - MIPS: Lantiq: Fix cascaded IRQ setup
        - rtc: s35390a: fix reading out alarm
        - rtc: s35390a: make sure all members in the output are set
        - rtc: s35390a: implement reset routine as suggested by the reference
        - rtc: s35390a: improve irq handling
        - KVM: kvm_io_bus_unregister_dev() should never fail
        - power: reset: at91-poweroff: timely shutdown LPDDR memories
        - blk: improve order of bio handling in generic_make_request()
        - blk: Ensure users for current->bio_list can see the full list.
        - padata: avoid race in reordering
        - Linux 4.4.60
    
      [ Ubuntu: 4.4.0-77.98 ]
    
      * linux: 4.4.0-77.98 -proposed tracker (LP: #1686040)
      * [Hyper-V][SAUCE] pci-hyperv: Use only 16 bit integer for PCI domain
        (LP: #1684971)
        - SAUCE: pci-hyperv: Use only 16 bit integer for PCI domain
      * Upgrade Redpine WLAN/BT driver to ver. 1.2.RC4 (LP: #1669672)
        - SAUCE: sdhci: use PCI ID to identify Dell IoT gateways
        - SAUCE: Redpine: Upgrade to ver. 1.2.RC4
        - [Config] Update CONFIG_VEN_RSI_* configs
        - SAUCE: Redpine: add copyright to kernel packages
      * Fix RX fail issue on Exar USB serial driver after resume from S3/S4
        (LP: #1685133)
        - SAUCE: xr-usb-serial: Update driver for Exar USB serial ports
      * Miscellaneous Ubuntu changes
        - [Config] updating configs to match redpine driver changes
    
      [ Ubuntu: 4.4.0-75.96 ]
    
      * linux: 4.4.0-75.96 -proposed tracker (LP: #1684441)
      * [Hyper-V] hv: util: move waiting for release to hv_utils_transport itself
        (LP: #1682561)
        - Drivers: hv: util: move waiting for release to hv_utils_transport itself
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Thu, 27 Apr 2017 18:07:58 -0300
  • linux-snapdragon (4.4.0-1057.61) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1057.61 -proposed tracker (LP: #1682045)
    
      [ Ubuntu: 4.4.0-74.95 ]
    
      * linux: 4.4.0-74.95 -proposed tracker (LP: #1682041)
      * [Hyper-V] hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
        (LP: #1681893)
        - Drivers: hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
    
    linux-snapdragon (4.4.0-1056.60) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1056.60 -proposed tracker (LP: #1680423)
    
      [ Ubuntu: 4.4.0-73.94 ]
    
      * linux: 4.4.0-73.94 -proposed tracker (LP: #1680416)
      * CVE-2017-6353
        - sctp: deny peeloff operation on asocs with threads sleeping on it
      * vfat: missing iso8859-1 charset (LP: #1677230)
        - [Config] NLS_ISO8859_1=y
      * Regression: KVM modules should be on main kernel package (LP: #1678099)
        - [Config] powerpc: Add kvm-hv and kvm-pr to the generic inclusion list
      * linux-lts-xenial 4.4.0-63.84~14.04.2 ADT test failure with linux-lts-xenial
        4.4.0-63.84~14.04.2 (LP: #1664912)
        - SAUCE: apparmor: fix link auditing failure due to, uninitialized var
      * regession tests failing after stackprofile test is run (LP: #1661030)
        - SAUCE: fix regression with domain change in complain mode
      * Permission denied and inconsistent behavior in complain mode with 'ip netns
        list' command (LP: #1648903)
        - SAUCE: fix regression with domain change in complain mode
      * unexpected errno=13 and disconnected path when trying to open /proc/1/ns/mnt
        from a unshared mount namespace (LP: #1656121)
        - SAUCE: apparmor: null profiles should inherit parent control flags
      * apparmor refcount leak of profile namespace when removing profiles
        (LP: #1660849)
        - SAUCE: apparmor: fix ns ref count link when removing profiles from policy
      * tor in lxd: apparmor="DENIED" operation="change_onexec"
        namespace="root//CONTAINERNAME_<var-lib-lxd>" profile="unconfined"
        name="system_tor" (LP: #1648143)
        - SAUCE: apparmor: Fix no_new_privs blocking change_onexec when using stacked
          namespaces
      * apparmor oops in bind_mnt when dev_path lookup fails (LP: #1660840)
        - SAUCE: apparmor: fix oops in bind_mnt when dev_path lookup fails
      * apparmor  auditing denied access of special apparmor .null fi\ le
        (LP: #1660836)
        - SAUCE: apparmor: Don't audit denied access of special apparmor .null file
      * apparmor label leak when new label is unused (LP: #1660834)
        - SAUCE: apparmor: fix label leak when new label is unused
      * apparmor reference count bug in label_merge_insert() (LP: #1660833)
        - SAUCE: apparmor: fix reference count bug in label_merge_insert()
      * apparmor's raw_data file in securityfs is sometimes truncated (LP: #1638996)
        - SAUCE: apparmor: fix replacement race in reading rawdata
      * unix domain socket cross permission check failing with nested namespaces
        (LP: #1660832)
        - SAUCE: apparmor: fix cross ns perm of unix domain sockets
      * Xenial update to v4.4.59 stable release (LP: #1678960)
        - xfrm: policy: init locks early
        - virtio_balloon: init 1st buffer in stats vq
        - pinctrl: qcom: Don't clear status bit on irq_unmask
        - c6x/ptrace: Remove useless PTRACE_SETREGSET implementation
        - h8300/ptrace: Fix incorrect register transfer count
        - mips/ptrace: Preserve previous registers for short regset write
        - sparc/ptrace: Preserve previous registers for short regset write
        - metag/ptrace: Preserve previous registers for short regset write
        - metag/ptrace: Provide default TXSTATUS for short NT_PRSTATUS
        - metag/ptrace: Reject partial NT_METAG_RPIPE writes
        - fscrypt: remove broken support for detecting keyring key revocation
        - sched/rt: Add a missing rescheduling point
        - Linux 4.4.59
      * Update ENA driver to 1.1.2 from net-next (LP: #1664312)
        - net: ena: Remove unnecessary pci_set_drvdata()
        - net: ena: Fix error return code in ena_device_init()
        - net: ena: change the return type of ena_set_push_mode() to be void.
        - net: ena: use setup_timer() and mod_timer()
        - net/ena: remove ntuple filter support from device feature list
        - net/ena: fix queues number calculation
        - net/ena: fix ethtool RSS flow configuration
        - net/ena: fix RSS default hash configuration
        - net/ena: fix NULL dereference when removing the driver after device reset
          failed
        - net/ena: refactor ena_get_stats64 to be atomic context safe
        - net/ena: fix potential access to freed memory during device reset
        - net/ena: use READ_ONCE to access completion descriptors
        - net/ena: reduce the severity of ena printouts
        - net/ena: change driver's default timeouts
        - net/ena: change condition for host attribute configuration
        - net/ena: update driver version to 1.1.2
      * Xenial update to v4.4.58 stable release (LP: #1677600)
        - net/openvswitch: Set the ipv6 source tunnel key address attribute correctly
        - net: bcmgenet: Do not suspend PHY if Wake-on-LAN is enabled
        - net: properly release sk_frag.page
        - amd-xgbe: Fix jumbo MTU processing on newer hardware
        - net: unix: properly re-increment inflight counter of GC discarded candidates
        - net/mlx5: Increase number of max QPs in default profile
        - net/mlx5e: Count LRO packets correctly
        - net: bcmgenet: remove bcmgenet_internal_phy_setup()
        - ipv4: provide stronger user input validation in nl_fib_input()
        - socket, bpf: fix sk_filter use after free in sk_clone_lock
        - tcp: initialize icsk_ack.lrcvtime at session start time
        - Input: elan_i2c - add ASUS EeeBook X205TA special touchpad fw
        - Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000
        - Input: iforce - validate number of endpoints before using them
        - Input: ims-pcu - validate number of endpoints before using them
        - Input: hanwang - validate number of endpoints before using them
        - Input: yealink - validate number of endpoints before using them
        - Input: cm109 - validate number of endpoints before using them
        - Input: kbtab - validate number of endpoints before using them
        - Input: sur40 - validate number of endpoints before using them
        - ALSA: seq: Fix racy cell insertions during snd_seq_pool_done()
        - ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call
        - ALSA: hda - Adding a group of pin definition to fix headset problem
        - USB: serial: option: add Quectel UC15, UC20, EC21, and EC25 modems
        - USB: serial: qcserial: add Dell DW5811e
        - ACM gadget: fix endianness in notifications
        - usb: gadget: f_uvc: Fix SuperSpeed companion descriptor's wBytesPerInterval
        - usb-core: Add LINEAR_FRAME_INTR_BINTERVAL USB quirk
        - USB: uss720: fix NULL-deref at probe
        - USB: lvtest: fix NULL-deref at probe
        - USB: idmouse: fix NULL-deref at probe
        - USB: wusbcore: fix NULL-deref at probe
        - usb: musb: cppi41: don't check early-TX-interrupt for Isoch transfer
        - usb: hub: Fix crash after failure to read BOS descriptor
        - uwb: i1480-dfu: fix NULL-deref at probe
        - uwb: hwa-rc: fix NULL-deref at probe
        - mmc: ushc: fix NULL-deref at probe
        - iio: adc: ti_am335x_adc: fix fifo overrun recovery
        - iio: hid-sensor-trigger: Change get poll value function order to avoid
          sensor properties losing after resume from S3
        - parport: fix attempt to write duplicate procfiles
        - ext4: mark inode dirty after converting inline directory
        - mmc: sdhci: Do not disable interrupts while waiting for clock
        - xen/acpi: upload PM state from init-domain to Xen
        - iommu/vt-d: Fix NULL pointer dereference in device_to_iommu
        - ARM: at91: pm: cpu_idle: switch DDR to power-down mode
        - ARM: dts: at91: sama5d2: add dma properties to UART nodes
        - cpufreq: Restore policy min/max limits on CPU online
        - raid10: increment write counter after bio is split
        - libceph: don't set weight to IN when OSD is destroyed
        - xfs: don't allow di_size with high bit set
        - xfs: fix up xfs_swap_extent_forks inline extent handling
        - nl80211: fix dumpit error path RTNL deadlocks
        - USB: usbtmc: add missing endpoint sanity check
        - xfs: clear _XBF_PAGES from buffers when readahead page
        - igb: add i211 to i210 PHY workaround
        - vfio/spapr: Postpone allocation of userspace version of TCE table
        - block: allow WRITE_SAME commands with the SG_IO ioctl
        - fbcon: Fix vc attr at deinit
        - crypto: algif_hash - avoid zero-sized array
        - Linux 4.4.58
      * PS/2 mouse does not work on Dell embedded computer (LP: #1591053)
        - Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000
      * Xenial update to v4.4.57 stable release (LP: #1676424)
        - give up on gcc ilog2() constant optimizations
        - perf/core: Fix event inheritance on fork()
        - cpufreq: Fix and clean up show_cpuinfo_cur_freq()
        - powerpc/boot: Fix zImage TOC alignment
        - md/raid1/10: fix potential deadlock
        - target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export
        - scsi: lpfc: Add shutdown method for kexec
        - scsi: libiscsi: add lock around task lists to fix list corruption regression
        - target: Fix VERIFY_16 handling in sbc_parse_cdb
        - isdn/gigaset: fix NULL-deref at probe
        - gfs2: Avoid alignment hole in struct lm_lockname
        - percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages
        - ext4: fix fencepost in s_first_meta_bg validation
        - Linux 4.4.57
      * Xenial update to v4.4.56 stable release (LP: #1675789)
        - netlink: remove mmapped netlink support
        - [Config] CONFIG_NETLINK_MMAP disappeared
        - vxlan: correctly validate VXLAN ID against VXLAN_N_VID
        - vti6: return GRE_KEY for vti6
        - ipv4: mask tos for input route
        - l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv
        - net: don't call strlen() on the user buffer in packet_bind_spkt()
        - net: net_enable_timestamp() can be called from irq contexts
        - dccp: Unlock sock before calling sk_free()
        - tcp: fix various issues for sockets morphing to listen state
        - net: fix socket refcounting in skb_complete_wifi_ack()
        - net: fix socket refcounting in skb_complete_tx_timestamp()
        - dccp: fix use-after-free in dccp_feat_activate_values
        - vrf: Fix use-after-free in vrf_xmit
        - uapi: fix linux/packet_diag.h userspace compilation error
        - act_connmark: avoid crashing on malformed nlattrs with null parms
        - mpls: Send route delete notifications when router module is unloaded
        - ipv6: make ECMP route replacement less greedy
        - ipv6: avoid write to a possibly cloned skb
        - dccp/tcp: fix routing redirect race
        - dccp: fix memory leak during tear-down of unsuccessful connection request
        - net sched actions: decrement module reference count after table flush.
        - fscrypt: fix renaming and linking special files
        - fscrypto: lock inode while setting encryption policy
        - x86/kasan: Fix boot with KASAN=y and PROFILE_ANNOTATED_BRANCHES=y
        - x86/perf: Fix CR4.PCE propagation to use active_mm instead of mm
        - futex: Fix potential use-after-free in FUTEX_REQUEUE_PI
        - futex: Add missing error handling to FUTEX_REQUEUE_PI
        - Linux 4.4.56
      * Kernel linux-image-4.4.0-67-generic prevent the boot on Microsoft Hyper-v
        2012r2 Gen2 VM (LP: #1674635)
        - scsi: storvsc: Workaround for virtual DVD SCSI version
      * [Hyper-V][Mellanox] net/mlx4_core: Avoid delays during VF driver device
        shutdown (LP: #1672785)
        - net/mlx4_core: Avoid delays during VF driver device shutdown
      * Channel data values for IIO based st_sensors (st_accel, st_pressure) are
        incorrect (LP: #1676356)
        - iio: core: added support for IIO_VAL_INT
        - iio: st_sensors: simplify buffer address handling
        - iio: st_sensors: read each channel individually
        - iio:st_sensors: emulate SMBus block read if needed
        - iio:st_sensors: align on storagebits boundaries
        - iio:st_pressure: temperature triggered buffering
        - iio:st_pressure: clean useless static channel initializers
        - iio: st_pressure: Fix data sign
      * Enable lspcon on i915 (LP: #1676747)
        - drm: Helper for lspcon in drm_dp_dual_mode
        - drm/i915: Add lspcon support for I915 driver
        - drm/i915: Parse VBT data for lspcon
        - drm/i915: Enable lspcon initialization
        - drm/i915: Add lspcon resume function
      * stress_smoke_test passing and exiting rc=9 (linux 4.9.0-12.13 ADT test
        failure with linux 4.9.0-12.13) (LP: #1658633)
        - ext4: lock the xattr block before checksuming it
      * Fix line-out port noise on Baytrail-I with RT5660 based sound card
        (LP: #1675327)
        - SAUCE: (no-up): ASoC: Intel: bytcr-rt5660: Fix noise in line-out
      * Kernel 4.4.0-67 Defaults to ACPI-cpufreq rather than P-State - Dell
        Precision 5520  (LP: #1674390)
        - cpufreq: intel_pstate: Enable HWP by default
      * ip_rcv_finish() NULL pointer kernel panic (LP: #1672470)
        - bridge: drop netfilter fake rtable unconditionally
      * dm-queue-length module is not included in installer/initramfs (LP: #1673350)
        - d-i: Also add dm-queue-length to multipath modules
      * Broadcom bluetooth modules sometimes fail to initialize (LP: #1483101)
        - Bluetooth: btbcm: Add a delay for module reset
      * Need support of Broadcom bluetooth device [413c:8143] (LP: #1166113)
        - Bluetooth: btusb: Add support for 413c:8143
      * i40e Intel X710 error during device probe prevents link set up and ip
        association (LP: #1672550)
        - i40e: check for and deal with non-contiguous TCs
      * CIFS: Call echo service immediately after socket reconnect (LP: #1669941)
        - Call echo service immediately after socket reconnect
      * FC Adapter (LPe32000-based) prints "iotag out of range", goes offline, and
        delays boot a lot (Ubuntu17.04/Emulex/lpfc)) (LP: #1670490)
        - scsi: lpfc: Add missing memory barrier
      * No C-State Deeper than C3 utilized by Kaby Lake 7820HQ in Precision 5520
        (LP: #1672439)
        - intel_idle: Add KBL support
      * [Hyper-V] Missing PCI patches breaking SR-IOV hot remove (LP: #1670518)
        - PCI: hv: Fix hv_pci_remove() for hot-remove
        - PCI: hv: Delete the device earlier from hbus->children for hot-remove
        - PCI: hv: Make unnecessarily global IRQ masking functions static
        - PCI: hv: Allocate physically contiguous hypercall params buffer
      * Xenial update to v4.4.55 stable release (LP: #1674292)
        - USB: serial: digi_acceleport: fix OOB data sanity check
        - USB: serial: digi_acceleport: fix OOB-event processing
        - crypto: improve gcc optimization flags for serpent and wp512
        - MIPS: Update defconfigs for NF_CT_PROTO_DCCP/UDPLITE change
        - MIPS: ip27: Disable qlge driver in defconfig
        - MIPS: Update ip27_defconfig for SCSI_DH change
        - MIPS: ip22: Fix ip28 build for modern gcc
        - MIPS: Update lemote2f_defconfig for CPU_FREQ_STAT change
        - mtd: pmcmsp: use kstrndup instead of kmalloc+strncpy
        - MIPS: ralink: Cosmetic change to prom_init().
        - MIPS: ralink: Remove unused rt*_wdt_reset functions
        - cpmac: remove hopeless #warning
        - mm: memcontrol: avoid unused function warning
        - MIPS: DEC: Avoid la pseudo-instruction in delay slots
        - MIPS: Netlogic: Fix CP0_EBASE redefinition warnings
        - tracing: Add #undef to fix compile error
        - powerpc: Emulation support for load/store instructions on LE
        - usb: gadget: dummy_hcd: clear usb_gadget region before registration
        - usb: dwc3: gadget: make Set Endpoint Configuration macros safe
        - usb: gadget: function: f_fs: pass companion descriptor along
        - usb: host: xhci-dbg: HCIVERSION should be a binary number
        - usb: host: xhci-plat: Fix timeout on removal of hot pluggable xhci
          controllers
        - USB: serial: safe_serial: fix information leak in completion handler
        - USB: serial: omninet: fix reference leaks at open
        - USB: iowarrior: fix NULL-deref at probe
        - USB: iowarrior: fix NULL-deref in write
        - USB: serial: io_ti: fix NULL-deref in interrupt callback
        - USB: serial: io_ti: fix information leak in completion handler
        - serial: samsung: Continue to work if DMA request fails
        - mvsas: fix misleading indentation
        - KVM: s390: Fix guest migration for huge guests resulting in panic
        - s390/kdump: Use "LINUX" ELF note name instead of "CORE"
        - nfit, libnvdimm: fix interleave set cookie calculation
        - dm: flush queued bios when process blocks to avoid deadlock
        - ext4: don't BUG when truncating encrypted inodes on the orphan list
        - Linux 4.4.55
      * Xenial update to v4.4.54 stable release (LP: #1673541)
        - serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
        - KVM: s390: Disable dirty log retrieval for UCONTROL guests
        - KVM: VMX: use correct vmcs_read/write for guest segment selector/base
        - Bluetooth: Add another AR3012 04ca:3018 device
        - s390/qdio: clear DSCI prior to scanning multiple input queues
        - s390/dcssblk: fix device size calculation in dcssblk_direct_access()
        - s390: TASK_SIZE for kernel threads
        - s390: make setup_randomness work
        - s390: use correct input data address for setup_randomness
        - net: mvpp2: fix DMA address calculation in mvpp2_txq_inc_put()
        - mnt: Tuck mounts under others instead of creating shadow/side mounts.
        - IB/ipoib: Fix deadlock between rmmod and set_mode
        - IB/IPoIB: Add destination address when re-queue packet
        - IB/srp: Avoid that duplicate responses trigger a kernel bug
        - IB/srp: Fix race conditions related to task management
        - ktest: Fix child exit code processing
        - ceph: remove req from unsafe list when unregistering it
        - target: Fix NULL dereference during LUN lookup + active I/O shutdown
        - nlm: Ensure callback code also checks that the files match
        - pwm: pca9685: Fix period change with same duty cycle
        - xtensa: move parse_tag_fdt out of #ifdef CONFIG_BLK_DEV_INITRD
        - mac80211: flush delayed work when entering suspend
        - drm/amdgpu: add more cases to DCE11 possible crtc mask setup
        - drm/ast: Fix test for VGA enabled
        - drm/ast: Call open_key before enable_mmio in POST code
        - drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
        - drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
        - drm/ttm: Make sure BOs being swapped out are cacheable
        - drm/atomic: fix an error code in mode_fixup()
        - fakelb: fix schedule while atomic
        - drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from
          vlv_init_display_clock_gating
        - libceph: use BUG() instead of BUG_ON(1)
        - fat: fix using uninitialized fields of fat_inode/fsinfo_inode
        - drivers: hv: Turn off write permission on the hypercall page
        - Linux 4.4.54
      * Xenial update to v4.4.53 stable release (LP: #1673538)
        - samples: move mic/mpssd example code from Documentation
        - MIPS: Fix special case in 64 bit IP checksumming.
        - MIPS: BCM47XX: Fix button inversion for Asus WL-500W
        - MIPS: OCTEON: Fix copy_from_user fault handling for large buffers
        - MIPS: Lantiq: Keep ethernet enabled during boot
        - MIPS: Clear ISA bit correctly in get_frame_info()
        - MIPS: Prevent unaligned accesses during stack unwinding
        - MIPS: Fix get_frame_info() handling of microMIPS function size
        - MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions
        - MIPS: Calculate microMIPS ra properly when unwinding the stack
        - MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps
        - am437x-vpfe: always assign bpp variable
        - uvcvideo: Fix a wrong macro
        - media: fix dm1105.c build error
        - ARM: at91: define LPDDR types
        - ARM: dts: at91: Enable DMA on sama5d4_xplained console
        - ARM: dts: at91: Enable DMA on sama5d2_xplained console
        - ALSA: hda/realtek - Cannot adjust speaker's volume on a Dell AIO
        - ALSA: hda - fix Lewisburg audio issue
        - ALSA: timer: Reject user params with too small ticks
        - ALSA: ctxfi: Fallback DMA mask to 32bit
        - ALSA: seq: Fix link corruption by event error handling
        - ALSA: hda - Add subwoofer support for Dell Inspiron 17 7000 Gaming
        - ALSA: hda - Fix micmute hotkey problem for a lenovo AIO machine
        - staging: rtl: fix possible NULL pointer dereference
        - regulator: Fix regulator_summary for deviceless consumers
        - iommu/vt-d: Fix some macros that are incorrectly specified in intel-iommu
        - iommu/vt-d: Tylersburg isoch identity map check is done too late.
        - mm/page_alloc: fix nodes for reclaim in fast path
        - mm: vmpressure: fix sending wrong events on underflow
        - mm: do not access page->mapping directly on page_endio
        - ipc/shm: Fix shmat mmap nil-page protection
        - dm cache: fix corruption seen when using cache > 2TB
        - dm stats: fix a leaked s->histogram_boundaries array
        - Revert "scsi: storvsc: properly set residual data length on errors"
        - scsi: storvsc: properly set residual data length on errors
        - scsi: aacraid: Reorder Adapter status check
        - scsi: use 'scsi_device_from_queue()' for scsi_dh
        - sd: get disk reference in sd_check_events()
        - Fix: Disable sys_membarrier when nohz_full is enabled
        - jbd2: don't leak modified metadata buffers on an aborted journal
        - block/loop: fix race between I/O and set_status
        - loop: fix LO_FLAGS_PARTSCAN hang
        - ext4: Include forgotten start block on fallocate insert range
        - ext4: do not polute the extents cache while shifting extents
        - ext4: trim allocation requests to group size
        - ext4: fix data corruption in data=journal mode
        - ext4: fix inline data error paths
        - ext4: preserve the needs_recovery flag when the journal is aborted
        - ext4: return EROFS if device is r/o and journal replay is needed
        - samples/seccomp: fix 64-bit comparison macros
        - target: Obtain se_node_acl->acl_kref during get_initiator_node_acl
        - target: Fix multi-session dynamic se_node_acl double free OOPs
        - ath5k: drop bogus warning on drv_set_key with unsupported cipher
        - ath9k: fix race condition in enabling/disabling IRQs
        - ath9k: use correct OTP register offsets for the AR9340 and AR9550
        - crypto: testmgr - Pad aes_ccm_enc_tv_template vector
        - fuse: add missing FR_FORCE
        - arm/arm64: KVM: Enforce unconditional flush to PoC when mapping to stage-2
        - iio: pressure: mpl115: do not rely on structure field ordering
        - iio: pressure: mpl3115: do not rely on structure field ordering
        - can: usb_8dev: Fix memory leak of priv->cmd_msg_buffer
        - w1: don't leak refcount on slave attach failure in w1_attach_slave_device()
        - w1: ds2490: USB transfer buffers need to be DMAable
        - usb: musb: da8xx: Remove CPPI 3.0 quirk and methods
        - usb: host: xhci: plat: check hcc_params after add hcd
        - usb: gadget: udc: fsl: Add missing complete function.
        - hv: allocate synic pages for all present CPUs
        - hv: init percpu_list in hv_synic_alloc()
        - Drivers: hv: util: kvp: Fix a rescind processing issue
        - Drivers: hv: util: Fcopy: Fix a rescind processing issue
        - Drivers: hv: util: Backup: Fix a rescind processing issue
        - RDMA/core: Fix incorrect structure packing for booleans
        - rdma_cm: fail iwarp accepts w/o connection params
        - gfs2: Add missing rcu locking for glock lookup
        - rtlwifi: Fix alignment issues
        - rtlwifi: rtl8192c-common: Fix "BUG: KASAN:
        - nfsd: minor nfsd_setattr cleanup
        - nfsd: special case truncates some more
        - NFSv4: Fix memory and state leak in _nfs4_open_and_get_state
        - NFSv4: fix getacl head length estimation
        - NFSv4: fix getacl ERANGE for some ACL buffer sizes
        - rtc: sun6i: Add some locking
        - rtc: sun6i: Switch to the external oscillator
        - md linear: fix a race between linear_add() and linear_congested()
        - bcma: use (get|put)_device when probing/removing device driver
        - dmaengine: ipu: Make sure the interrupt routine checks all interrupts.
        - powerpc/xmon: Fix data-breakpoint
        - MIPS: IP22: Reformat inline assembler code to modern standards.
        - MIPS: IP22: Fix build error due to binutils 2.25 uselessnes.
        - scsi: lpfc: Correct WQ creation for pagesize
        - Linux 4.4.53
      * move aufs.ko from -extra to linux-image package (LP: #1673498)
        - [config] aufs.ko moved to linux-image package
      * [Xenial] net: better skb->sender_cpu and skb->napi_id cohabitation
        (LP: #1673303)
        - net: better skb->sender_cpu and skb->napi_id cohabitation
      * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
        (LP: #1619918)
        - btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls
      * linux-tools-common should Depends: lsb-release (LP: #1667571)
        - [Config] linux-tools-common depends on lsb-release
      * Add Use-After-Free Patch for Ubuntu16.10 - EEH on BELL3 adapter fails to
        recover (serial/tty) (LP: #1669153)
        - 8250_pci: Fix potential use-after-free in error path
      * [Hyper-V] pci-hyperv: Use device serial number as PCI domain (LP: #1667527)
        - net/mlx4_core: Use cq quota in SRIOV when creating completion EQs
        - PCI: hv: Use device serial number as PCI domain
      * [Xenial - 16.04 ]Bonding driver - stack corruption when trying to copy 20
        bytes to a sockaddr (LP: #1668042)
        - net/bonding: Enforce active-backup policy for IPoIB bonds
      * Request to backport cxlflash patches to Xenial SRU stream (LP: #1623750)
        - scsi: cxlflash: Scan host only after the port is ready for I/O
        - scsi: cxlflash: Remove the device cleanly in the system shutdown path
        - scsi: cxlflash: Fix to avoid EEH and host reset collisions
        - scsi: cxlflash: Improve EEH recovery time
      * Xenial update to v4.4.52 stable release (LP: #1669016)
        - net/llc: avoid BUG_ON() in skb_orphan()
        - packet: fix races in fanout_add()
        - packet: Do not call fanout_release from atomic contexts
        - irda: Fix lockdep annotations in hashbin_delete().
        - ip: fix IP_CHECKSUM handling
        - net: socket: fix recvmmsg not returning error from sock_error
        - tty: serial: msm: Fix module autoload
        - USB: serial: mos7840: fix another NULL-deref at open
        - USB: serial: cp210x: add new IDs for GE Bx50v3 boards
        - USB: serial: ftdi_sio: fix modem-status error handling
        - USB: serial: ftdi_sio: fix extreme low-latency setting
        - USB: serial: ftdi_sio: fix line-status over-reporting
        - USB: serial: spcp8x5: fix modem-status handling
        - USB: serial: opticon: fix CTS retrieval at open
        - USB: serial: ark3116: fix register-accessor error handling
        - x86/platform/goldfish: Prevent unconditional loading
        - goldfish: Sanitize the broken interrupt handler
        - block: fix double-free in the failure path of cgwb_bdi_init()
        - rtlwifi: rtl_usb: Fix for URB leaking when doing ifconfig up/down
        - Revert "usb: chipidea: imx: enable CI_HDRC_SET_NON_ZERO_TTHA"
        - kvm: vmx: ensure VMCS is current while enabling PML
        - Linux 4.4.52
      * Xenial update to v4.4.51 stable release (LP: #1669015)
        - vfs: fix uninitialized flags in splice_to_pipe()
        - siano: make it work again with CONFIG_VMAP_STACK
        - fuse: fix use after free issue in fuse_dev_do_read()
        - scsi: don't BUG_ON() empty DMA transfers
        - Fix missing sanity check in /dev/sg
        - Input: elan_i2c - add ELAN0605 to the ACPI table
        - drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
        - drm/dp/mst: fix kernel oops when turning off secondary monitor
        - futex: Move futex_init() to core_initcall
        - ARM: 8658/1: uaccess: fix zeroing of 64-bit get_user()
        - printk: use rcuidle console tracepoint
        - NTB: ntb_transport: fix debugfs_remove_recursive
        - ntb_transport: Pick an unused queue
        - bcache: Make gc wakeup sane, remove set_task_state()
        - mmc: core: fix multi-bit bus width without high-speed mode
        - Linux 4.4.51
      * Xenial update to v4.4.50 stable release (LP: #1666324)
        - can: Fix kernel panic at security_sock_rcv_skb
        - ipv6: fix ip6_tnl_parse_tlv_enc_lim()
        - ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()
        - tcp: fix 0 divide in __tcp_select_window()
        - net: use a work queue to defer net_disable_timestamp() work
        - ipv4: keep skb->dst around in presence of IP options
        - netlabel: out of bound access in cipso_v4_validate()
        - ip6_gre: fix ip6gre_err() invalid reads
        - ipv6: tcp: add a missing tcp_v6_restore_cb()
        - tcp: avoid infinite loop in tcp_splice_read()
        - tun: read vnet_hdr_sz once
        - macvtap: read vnet_hdr_size once
        - mlx4: Invoke softirqs after napi_reschedule
        - sctp: avoid BUG_ON on sctp_wait_for_sndbuf
        - sit: fix a double free on error path
        - net: introduce device min_header_len
        - packet: round up linear to header len
        - ping: fix a null pointer dereference
        - l2tp: do not use udp_ioctl()
        - Linux 4.4.50
      * FlashGT Integration and Setup: fsbmc30: After 17th reboot of soft bootme,
        HTX & Linux errors seen with 256 virtual LUNs (LP: #1667239)
        - cxl: Fix coredump generation when cxl_get_fd() is used
      * [Hyper-V] Ubuntu 14.04.2 LTS Generation 2 SCSI Errors on VSS Based Backups
        (LP: #1470250)
        - Drivers: hv: vss: Operation timeouts should match host expectation
        - SAUCE: Tools: hv: vss: Thaw the filesystem and continue after freeze fails
      * kernel 4.4.0-63 with USB WLAN RTL8192CU freezes desktop (LP: #1666421)
        - rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
      * Export symbol "dev_pm_qos_update_user_latency_tolerance" (LP: #1666401)
        - PM / QoS: Export dev_pm_qos_update_user_latency_tolerance
      * Linux ZFS port doesn't respect RLIMIT_FSIZE (LP: #1656259)
        - SAUCE: (noup) Update zfs to 0.6.5.6-0ubuntu16
    
     -- Stefan Bader <email address hidden>  Wed, 12 Apr 2017 15:27:24 +0200
  • linux-snapdragon (4.4.0-1055.59) xenial; urgency=low
    
      * linux-snapdragon: 4.4.0-1055.59 -proposed tracker (LP: #1678084)
    
      [ Ubuntu: 4.4.0-72.93 ]
    
      * linux: 4.4.0-72.93 -proposed tracker (LP: #1678078)
      * Fix CVE-2017-7308 (LP: #1678009)
        - net/packet: fix overflow in check for priv area size
        - net/packet: fix overflow in check for tp_frame_nr
        - net/packet: fix overflow in check for tp_reserve
    
     -- Stefan Bader <email address hidden>  Fri, 31 Mar 2017 16:49:38 +0200
  • linux-snapdragon (4.4.0-1050.54) xenial; urgency=low
    
      [ Ubuntu: 4.4.0-66.87 ]
    
      * CVE-2017-2636
        - TTY: n_hdlc, fix lockdep false positive
        - tty: n_hdlc: get rid of racy n_hdlc.tbuf
    
     -- Stefan Bader <email address hidden>  Sat, 04 Mar 2017 08:44:00 +0100
  • linux-snapdragon (4.4.0-1048.52) xenial; urgency=low
    
      [ Ubuntu: 4.4.0-64.85 ]
    
      * CVE-2017-6074 (LP: #1665935)
        - dccp: fix freeing skb too early for IPV6_RECVPKTINFO
    
     -- Stefan Bader <email address hidden>  Mon, 20 Feb 2017 12:02:33 +0100
  • linux-snapdragon (4.4.0-1047.51) xenial; urgency=low
    
      [ Thadeu Lima de Souza Cascardo ]
    
      * Release Tracking Bug
        - LP: #1660724
    
      [ Ubuntu: 4.4.0-63.84 ]
    
      * Release Tracking Bug
        - LP: #1660704
      * Backport Dirty COW patch to prevent wineserver freeze (LP: #1658270)
        - SAUCE: mm: Respect FOLL_FORCE/FOLL_COW for thp
      * Kdump through NMI SMP and single core not working on Ubuntu16.10
        (LP: #1630924)
        - x86/hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic
        - SAUCE: hv: don't reset hv_context.tsc_page on crash
      * [regression 4.8.0-14 -> 4.8.0-17] keyboard and touchscreen lost on Acer
        Chromebook R11 (LP: #1630238)
        - [Config] CONFIG_PINCTRL_CHERRYVIEW=y
      * Call trace when testing fstat stressor on ppc64el with virtual  keyboard and
        mouse present (LP: #1652132)
        - SAUCE: HID: usbhid: Quirk a AMI virtual mouse and keyboard with ALWAYS_POLL
      * VLAN SR-IOV regression for IXGBE driver (LP: #1658491)
        - ixgbe: Force VLNCTRL.VFE to be set in all VMDq paths
      * "Out of memory" errors after upgrade to 4.4.0-59 (LP: #1655842)
        - mm, page_alloc: convert alloc_flags to unsigned
        - mm, compaction: change COMPACT_ constants into enum
        - mm, compaction: distinguish COMPACT_DEFERRED from COMPACT_SKIPPED
        - mm, compaction: simplify __alloc_pages_direct_compact feedback interface
        - mm, compaction: distinguish between full and partial COMPACT_COMPLETE
        - mm, compaction: abstract compaction feedback to helpers
        - mm, oom: protect !costly allocations some more
        - mm: consider compaction feedback also for costly allocation
        - mm, oom, compaction: prevent from should_compact_retry looping for ever for
          costly orders
        - mm, oom: protect !costly allocations some more for !CONFIG_COMPACTION
        - mm, oom: prevent premature OOM killer invocation for high order request
      * Backport 3 patches to fix bugs with AIX clients using IBMVSCSI Target Driver
        (LP: #1657194)
        - SAUCE: ibmvscsis: Fix max transfer length
        - SAUCE: ibmvscsis: fix sleeping in interrupt context
        - SAUCE: ibmvscsis: Fix srp_transfer_data fail return code
      * NVMe: adapter is missing after abnormal shutdown followed by quick reboot,
        quirk needed (LP: #1656913)
        - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too
      * Ubuntu 16.10 KVM SRIOV: if enable sriov while ping flood is running ping
        will stop working (LP: #1625318)
        - PCI: Do any VF BAR updates before enabling the BARs
        - PCI: Ignore BAR updates on virtual functions
        - PCI: Update BARs using property bits appropriate for type
        - PCI: Separate VF BAR updates from standard BAR updates
        - PCI: Don't update VF BARs while VF memory space is enabled
        - PCI: Remove pci_resource_bar() and pci_iov_resource_bar()
        - PCI: Decouple IORESOURCE_ROM_ENABLE and PCI_ROM_ADDRESS_ENABLE
        - PCI: Add comments about ROM BAR updating
      * Linux rtc self test fails in a VM under xenial (LP: #1649718)
        - kvm: x86: Convert ioapic->rtc_status.dest_map to a struct
        - kvm: x86: Track irq vectors in ioapic->rtc_status.dest_map
        - kvm: x86: Check dest_map->vector to match eoi signals for rtc
      * Xenial update to v4.4.44 stable release (LP: #1658091)
        - Input: xpad - use correct product id for x360w controllers
        - Input: i8042 - add Pegatron touchpad to noloop table
        - selftests: do not require bash to run netsocktests testcase
        - selftests: do not require bash for the generated test
        - mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}
        - ocfs2: fix crash caused by stale lvb with fsdlm plugin
        - mm/hugetlb.c: fix reservation race when freeing surplus pages
        - KVM: x86: fix emulation of "MOV SS, null selector"
        - KVM: eventfd: fix NULL deref irqbypass consumer
        - jump_labels: API for flushing deferred jump label updates
        - KVM: x86: flush pending lapic jump label updates on module unload
        - KVM: x86: add Align16 instruction flag
        - KVM: x86: add asm_safe wrapper
        - KVM: x86: emulate FXSAVE and FXRSTOR
        - KVM: x86: Introduce segmented_write_std
        - nl80211: fix sched scan netlink socket owner destruction
        - USB: serial: kl5kusb105: fix line-state error handling
        - USB: serial: ch341: fix initial modem-control state
        - USB: serial: ch341: fix open error handling
        - USB: serial: ch341: fix control-message error handling
        - USB: serial: ch341: fix open and resume after B0
        - Input: elants_i2c - avoid divide by 0 errors on bad touchscreen data
        - i2c: print correct device invalid address
        - i2c: fix kernel memory disclosure in dev interface
        - xhci: fix deadlock at host remove by running watchdog correctly
        - vme: Fix wrong pointer utilization in ca91cx42_slave_get
        - mnt: Protect the mountpoint hashtable with mount_lock
        - tty/serial: atmel_serial: BUG: stop DMA from transmitting in stop_tx
        - sysrq: attach sysrq handler correctly for 32-bit kernel
        - sysctl: Drop reference added by grab_header in proc_sys_readdir
        - drm/radeon: drop verde dpm quirks
        - USB: serial: ch341: fix resume after reset
        - USB: serial: ch341: fix modem-control and B0 handling
        - x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid='
          command-line option
        - btrfs: fix locking when we put back a delayed ref that's too new
        - btrfs: fix error handling when run_delayed_extent_op fails
        - pinctrl: meson: fix gpio request disabling other modes
        - pNFS: Fix race in pnfs_wait_on_layoutreturn
        - NFS: Fix a performance regression in readdir
        - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
        - cpufreq: powernv: Disable preemption while checking CPU throttling state
        - block: cfq_cpd_alloc() should use @gfp
        - ACPI / APEI: Fix NMI notification handling
        - blk-mq: Always schedule hctx->next_cpu
        - bus: vexpress-config: fix device reference leak
        - powerpc/ibmebus: Fix further device reference leaks
        - powerpc/ibmebus: Fix device reference leaks in sysfs interface
        - pinctrl: sh-pfc: Do not unconditionally support PIN_CONFIG_BIAS_DISABLE
        - Linux 4.4.44
      * Add support for RT5660 codec based sound cards on Baytrail (LP: #1657674)
        - ASoC: rt5660: add rt5660 codec driver
        - ASoC: rt5660: enable MCLK detection
        - ASoC: Intel: Atom: flip logic for gain Switch
        - SAUCE: (no-up) ASoC: rt5660: Add ACPI support
        - SAUCE: (no-up) ASoC: Intel: Support machine driver for RT5660 on Baytrail
        - [Config] CONFIG_SND_SOC_INTEL_BYTCR_RT5660_MACH=m, CONFIG_SND_SOC_RT5660=m
      * Support latest Redpine WLAN/BT RS9113 driver (LP: #1657682)
        - SAUCE: Support Redpine RS9113 WLAN/BT
        - SAUCE: Separate Redpine RS9113 WLAN/BT vendor and kernel drivers
        - SAUCE: Redpine RS9113 WLAN/BT driver ver. 0.9.7
        - SAUCE: RS9113: Use vendor driver to support WLAN/BT card on Caracalla HW
          only
        - SAUCE: RS9113: Comment out IDs from upstream driver
        - [Config] Enable CONFIG_VEN_RSI_* configs
      * [Hyper-V] netvsc: add rcu_read locked to netvsc callback (LP: #1657540)
        - netvsc: add rcu_read locking to netvsc callback
      * [Hyper-V] Rebase Hyper-V in 16.04 and 16.10 to the the upstream 4.9 kernel
        (LP: #1650059)
        - memory-hotplug: add automatic onlining policy for the newly added memory
        - hv_netvsc: Add query for initial physical link speed
        - hv_netvsc: Add handler for physical link speed change
        - hv_netvsc: Implement batching of receive completions
        - PCI: hv: Use list_move_tail() instead of list_del() + list_add_tail()
        - hv_netvsc: fix rtnl locking in callback
        - hv_netvsc: make RSS hash key static
        - hv_netvsc: use kcalloc
        - hv_netvsc: style cleanups
        - hv_netvsc: make inline functions static
        - hv_netvsc: use ARRAY_SIZE() for NDIS versions
        - hv_netvsc: make device_remove void
        - hv_netvsc: init completion during alloc
        - hv_netvsc: rearrange start_xmit
        - hv_netvsc: refactor completion function
        - hv_netvsc: make netvsc_destroy_buf void
        - hv_netvsc: make variable local
        - hv_netvsc: report vmbus name in ethtool
        - hv_netvsc: add ethtool statistics for tx packet issues
        - Drivers: hv: get rid of redundant messagecount in create_gpadl_header()
        - Drivers: hv: don't leak memory in vmbus_establish_gpadl()
        - Drivers: hv: get rid of timeout in vmbus_open()
        - Drivers: hv: utils: fix a race on userspace daemons registration
        - Drivers: hv: vmbus: fix the race when querying & updating the percpu list
        - Drivers: hv: vmbus: Enable explicit signaling policy for NIC channels
        - Drivers: hv: vmbus: Reduce the delay between retries in vmbus_post_msg()
        - Drivers: hv: vmbus: Implement a mechanism to tag the channel for low latency
        - Tools: hv: kvp: ensure kvp device fd is closed on exec
        - Drivers: hv: balloon: keep track of where ha_region starts
        - Drivers: hv: balloon: account for gaps in hot add regions
        - Drivers: hv: balloon: don't wait for ol_waitevent when memhp_auto_online is
          enabled
        - Drivers: hv: balloon: replace ha_region_mutex with spinlock
        - Drivers: hv: balloon: Use available memory value in pressure report
        - Drivers: hv: cleanup vmbus_open() for wrap around mappings
        - Drivers: hv: ring_buffer: wrap around mappings for ring buffers
        - Drivers: hv: ring_buffer: use wrap around mappings in hv_copy{from,
          to}_ringbuffer()
        - Drivers: hv: ring_buffer: count on wrap around mappings in
          get_next_pkt_raw()
        - Drivers: hv: Introduce a policy for controlling channel affinity
        - Drivers: hv: utils: Continue to poll VSS channel after handling requests.
        - Drivers: hv: utils: Check VSS daemon is listening before a hot backup
        - PCI: hv: Use zero-length array in struct pci_packet
        - PCI: hv: Use pci_function_description[0] in struct definitions
        - PCI: hv: Remove the unused 'wrk' in struct hv_pcibus_device
        - PCI: hv: Handle vmbus_sendpacket() failure in hv_compose_msi_msg()
        - PCI: hv: Handle hv_pci_generic_compl() error case
        - Revert "Drivers: hv: ring_buffer: count on wrap around mappings in
          get_next_pkt_raw()"
        - Driver: hv: vmbus: Make mmio resource local
        - Drivers: hv: vmbus: suppress some "hv_vmbus: Unknown GUID" warnings
        - Drivers: hv: utils: Rename version definitions to reflect protocol version.
        - Drivers: hv: utils: Use TimeSync samples to adjust the clock after boot.
        - Drivers: hv: utils: Support TimeSync version 4.0 protocol samples.
        - Drivers: hv: hv_util: Avoid dynamic allocation in time synch
        - Revert "hv_netvsc: make inline functions static"
        - hv_netvsc: use consume_skb
        - hv_netvsc: dev hold/put reference to VF
        - hv_netvsc: simplify callback event code
        - hv_netvsc: improve VF device matching
        - hv_netvsc: use RCU to protect vf_netdev
        - hv_netvsc: remove VF in flight counters
        - hv_netvsc: count multicast packets received
        - hv_netvsc: fix comments
        - Drivers: hv: make VMBus bus ids persistent
        - Drivers: hv: get rid of id in struct vmbus_channel
        - netvsc: fix checksum on UDP IPV6
        - netvsc: Remove mistaken udp.h inclusion.
        - net/hyperv: avoid uninitialized variable
        - Revert "hv_netvsc: report vmbus name in ethtool"
        - vmbus: make sysfs names consistent with PCI
        - netvsc: reduce maximum GSO size
        - Drivers: hv: vmbus: Base host signaling strictly on the ring state
        - tools: hv: Add a script to help bonding synthetic and VF NICs
      * Ubuntu - ibmveth: abnormally large TCP MSS value caused a TCP session to
        hang with a zero window (LP: #1655420)
        - ibmveth: set correct gso_size and gso_type
        - ibmveth: calculate gso_segs for large packets
      * netfilter regression introducing a performance slowdown in binary
        arp/ip/ip6tables (LP: #1640786)
        - netfilter: x_tables: pass xt_counters struct instead of packet counter
        - netfilter: x_tables: pass xt_counters struct to counter allocator
        - netfilter: x_tables: pack percpu counter allocations
      * Move some kernel modules to the main kernel package (part 2) (LP: #1655002)
        - [Config] Add IBM power drivers to the inclusion list
      * Xenial update to v4.4.43 stable release (LP: #1656876)
        - netvsc: reduce maximum GSO size
        - ser_gigaset: return -ENOMEM on error instead of success
        - net: vrf: Drop conntrack data after pass through VRF device on Tx
        - ipv6: handle -EFAULT from skb_copy_bits
        - net, sched: fix soft lockup in tc_classify
        - net: stmmac: Fix race between stmmac_drv_probe and stmmac_open
        - net/mlx5: Check FW limitations on log_max_qp before setting it
        - net/mlx5: Avoid shadowing numa_node
        - drop_monitor: add missing call to genlmsg_end
        - drop_monitor: consider inserted data in genlmsg_end
        - igmp: Make igmp group member RFC 3376 compliant
        - ipv4: Do not allow MAIN to be alias for new LOCAL w/ custom rules
        - r8152: split rtl8152_suspend function
        - r8152: fix rx issue for runtime suspend
        - gro: Enter slow-path if there is no tailroom
        - gro: use min_t() in skb_gro_reset_offset()
        - gro: Disable frag0 optimization on IPv6 ext headers
        - net: ipv4: Fix multipath selection with vrf
        - net: vrf: do not allow table id 0
        - HID: hid-cypress: validate length of report
        - ALSA: firewire-tascam: Fix to handle error from initialization of stream
          data
        - powerpc: Fix build warning on 32-bit PPC
        - ARM: zynq: Reserve correct amount of non-DMA RAM
        - ARM: OMAP4+: Fix bad fallthrough for cpuidle
        - spi: mvebu: fix baudrate calculation for armada variant
        - ALSA: usb-audio: Add a quirk for Plantronics BT600
        - mm/init: fix zone boundary creation
        - Linux 4.4.43
      * Xenial update to v4.4.42 stable release (LP: #1655969)
        - ALSA: hda - Fix up GPIO for ASUS ROG Ranger
        - ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
        - ALSA: usb-audio: Fix irq/process data synchronization
        - ARM: davinci: da850: don't add emac clock to lookup table twice
        - mac80211: initialize fast-xmit 'info' later
        - KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS
        - KVM: MIPS: Flush KVM entry code from icache globally
        - usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
        - usb: musb: dsps: implement clear_ep_rxintr() callback
        - usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
        - usb: gadgetfs: restrict upper bound on device configuration size
        - USB: gadgetfs: fix unbounded memory allocation bug
        - USB: gadgetfs: fix use-after-free bug
        - USB: gadgetfs: fix checks of wTotalLength in config descriptors
        - USB: fix problems with duplicate endpoint addresses
        - USB: dummy-hcd: fix bug in stop_activity (handle ep0)
        - usb: gadget: composite: Test get_alt() presence instead of set_alt()
        - usb: dwc3: core: avoid Overflow events
        - usb: xhci: fix possible wild pointer
        - xhci: workaround for hosts missing CAS bit
        - usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
        - xhci: free xhci virtual devices with leaf nodes first
        - usb: xhci: fix return value of xhci_setup_device()
        - usb: host: xhci: Fix possible wild pointer when handling abort command
        - xhci: Handle command completion and timeout race
        - usb: xhci: hold lock over xhci_abort_cmd_ring()
        - USB: serial: omninet: fix NULL-derefs at open and disconnect
        - USB: serial: quatech2: fix sleep-while-atomic in close
        - USB: serial: pl2303: fix NULL-deref at open
        - USB: serial: keyspan_pda: verify endpoints at probe
        - USB: serial: spcp8x5: fix NULL-deref at open
        - USB: serial: io_ti: fix NULL-deref at open
        - USB: serial: io_ti: fix another NULL-deref at open
        - USB: serial: io_ti: fix I/O after disconnect
        - USB: serial: iuu_phoenix: fix NULL-deref at open
        - USB: serial: garmin_gps: fix memory leak on failed URB submit
        - USB: serial: ti_usb_3410_5052: fix NULL-deref at open
        - USB: serial: io_edgeport: fix NULL-deref at open
        - USB: serial: oti6858: fix NULL-deref at open
        - USB: serial: cyberjack: fix NULL-deref at open
        - USB: serial: kobil_sct: fix NULL-deref in write
        - USB: serial: mos7840: fix NULL-deref at open
        - USB: serial: mos7720: fix NULL-deref at open
        - USB: serial: mos7720: fix use-after-free on probe errors
        - USB: serial: mos7720: fix parport use-after-free on probe errors
        - USB: serial: mos7720: fix parallel probe
        - usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
        - xhci: Use delayed_work instead of timer for command timeout
        - xhci: Fix race related to abort operation
        - usb: dwc3: pci: add Intel Gemini Lake PCI ID
        - usb: musb: Fix trying to free already-free IRQ 4
        - usb: hub: Move hub_port_disable() to fix warning if PM is disabled
        - usb: musb: blackfin: add bfin_fifo_offset in bfin_ops
        - ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
        - USB: serial: kl5kusb105: abort on open exception path
        - ARM: dts: r8a7794: Correct hsusb parent clock
        - USB: phy: am335x-control: fix device and of_node leaks
        - USB: serial: io_ti: bind to interface after fw download
        - mei: bus: fix mei_cldev_enable KDoc
        - staging: iio: ad7606: fix improper setting of oversampling pins
        - usb: dwc3: gadget: always unmap EP0 requests
        - usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
        - usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb()
        - stable-fixup: hotplug: fix unused function warning
        - ath10k: use the right length of "background"
        - cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected
        - hwmon: (scpi) Fix module autoload
        - hwmon: (amc6821) sign extension temperature
        - hwmon: (ds620) Fix overflows seen when writing temperature limits
        - hwmon: (nct7802) Fix overflows seen when writing into limit attributes
        - hwmon: (g762) Fix overflows and crash seen when writing limit attributes
        - clk: clk-wm831x: fix a logic error
        - clk: imx31: fix rewritten input argument of mx31_clocks_init()
        - iommu/amd: Missing error code in amd_iommu_init_device()
        - iommu/amd: Fix the left value check of cmd buffer
        - iommu/vt-d: Fix pasid table size encoding
        - iommu/vt-d: Flush old iommu caches for kdump when the device gets context
          mapped
        - ASoC: samsung: i2s: Fixup last IRQ unsafe spin lock call
        - scsi: mvsas: fix command_active typo
        - target/iscsi: Fix double free in lio_target_tiqn_addtpg()
        - irqchip/bcm7038-l1: Implement irq_cpu_offline() callback
        - PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
        - mmc: mmc_test: Uninitialized return value
        - s390/crypto: unlock on error in prng_tdes_read()
        - crypto: arm64/sha2-ce - fix for big endian
        - crypto: arm64/ghash-ce - fix for big endian
        - crypto: arm/aes-ce - fix for big endian
        - crypto: arm64/aes-ccm-ce: fix for big endian
        - crypto: arm64/aes-neon - fix for big endian
        - crypto: arm64/sha1-ce - fix for big endian
        - crypto: arm64/aes-xts-ce: fix for big endian
        - crypto: arm64/aes-ce - fix for big endian
        - md: MD_RECOVERY_NEEDED is set for mddev->recovery
        - powerpc/pci/rpadlpar: Fix device reference leaks
        - staging: comedi: dt282x: tidy up register bit defines
        - cred/userns: define current_user_ns() as a function
        - net: ti: cpmac: Fix compiler warning due to type confusion
        - net: vxge: avoid unused function warnings
        - cx23885-dvb: move initialization of a8293_pdata
        - drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
        - tick/broadcast: Prevent NULL pointer dereference
        - Revert "usb: gadget: composite: always set ep->mult to a sensible value"
        - usb: gadget: composite: always set ep->mult to a sensible value
        - Linux 4.4.42
      * Xenial update to v4.4.41 stable release (LP: #1655041)
        - ssb: Fix error routine when fallback SPROM fails
        - rtlwifi: Fix enter/exit power_save
        - cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts
        - ath9k: Really fix LED polarity for some Mini PCI AR9220 MB92 cards.
        - mmc: sdhci: Fix recovery from tuning timeout
        - regulator: stw481x-vmmc: fix ages old enable error
        - timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion
        - clk: bcm2835: Avoid overwriting the div info when disabling a pll_div clk
        - thermal: hwmon: Properly report critical temperature in sysfs
        - staging: comedi: ni_mio_common: fix M Series ni_ai_insn_read() data mask
        - staging: comedi: ni_mio_common: fix E series ni_ai_insn_read() data
        - ACPI / video: Add force_native quirk for Dell XPS 17 L702X
        - ACPI / video: Add force_native quirk for HP Pavilion dv6
        - drm/nouveau/kms: lvds panel strap moved again on maxwell
        - drm/nouveau/bios: require checksum to match for fast acpi shadow method
        - drm/nouveau/ltc: protect clearing of comptags with mutex
        - drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
        - drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
        - drm/radeon: Also call cursor_move_locked when the cursor size changes
        - drm/radeon: Hide the HW cursor while it's out of bounds
        - drm/radeon: add additional pci revision to dpm workaround
        - drm/gma500: Add compat ioctl
        - drivers/gpu/drm/ast: Fix infinite loop if read fails
        - mei: request async autosuspend at the end of enumeration
        - block: protect iterate_bdevs() against concurrent close
        - vt: fix Scroll Lock LED trigger name
        - scsi: megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for
          30secs before reset
        - scsi: megaraid_sas: Do not set MPI2_TYPE_CUDA for JBOD FP path for FW which
          does not support JBOD sequence map
        - scsi: zfcp: fix use-after-"free" in FC ingress path after TMF
        - scsi: zfcp: do not trace pure benign residual HBA responses at default level
        - scsi: zfcp: fix rport unblock race with LUN recovery
        - scsi: avoid a permanent stop of the scsi device's request queue
        - ARC: mm: arc700: Don't assume 2 colours for aliasing VIPT dcache
        - firmware: fix usermode helper fallback loading
        - s390/vmlogrdr: fix IUCV buffer allocation
        - sc16is7xx: Drop bogus use of IRQF_ONESHOT
        - md/raid5: limit request size according to implementation limits
        - KVM: PPC: Book3S HV: Save/restore XER in checkpointed register state
        - KVM: PPC: Book3S HV: Don't lose hardware R/C bit updates in H_PROTECT
        - kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF)
        - platform/x86: asus-nb-wmi.c: Add X45U quirk
        - fgraph: Handle a case where a tracer ignores set_graph_notrace
        - IB/mad: Fix an array index check
        - IPoIB: Avoid reading an uninitialized member variable
        - IB/multicast: Check ib_find_pkey() return value
        - IB/cma: Fix a race condition in iboe_addr_get_sgid()
        - media: solo6x10: fix lockup by avoiding delayed register write
        - Input: drv260x - fix input device's parent assignment
        - PCI: Check for PME in targeted sleep state
        - libceph: verify authorize reply on connect
        - nfs_write_end(): fix handling of short copies
        - powerpc/ps3: Fix system hang with GCC 5 builds
        - powerpc: Convert cmp to cmpd in idle enter sequence
        - kconfig/nconf: Fix hang when editing symbol with a long prompt
        - sg_write()/bsg_write() is not fit to be called under KERNEL_DS
        - net: mvpp2: fix dma unmapping of TX buffers for fragments
        - Linux 4.4.41
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Wed, 01 Feb 2017 11:10:24 -0200
  • linux-snapdragon (4.4.0-1046.50) xenial; urgency=low
    
      [ Thadeu Lima de Souza Cascardo ]
    
      * Release Tracking Bug
        - LP: #1657433
    
      [ Ubuntu: 4.4.0-62.83 ]
    
      * Release Tracking Bug
        - LP: #1657430
      * Backport DP MST fixes to i915 (LP: #1657353)
        - SAUCE: i915_bpo: Fix DP link rate math
        - SAUCE: i915_bpo: Validate mode against max. link data rate for DP MST
      * Ubuntu xenial - 4.4.0-59-generic i3 I/O performance issue (LP: #1657281)
        - blk-mq: really fix plug list flushing for nomerge queues
    
    linux-snapdragon (4.4.0-1045.49) xenial; urgency=low
    
      [ Thadeu Lima de Souza Cascardo ]
    
      * Release Tracking Bug
        - LP: #1656814
    
      [ Ubuntu: 4.4.0-61.82 ]
    
      * Release Tracking Bug
        - LP: #1656810
      * Xen MSI setup code incorrectly re-uses cached pirq (LP: #1656381)
        - SAUCE: xen: do not re-use pirq number cached in pci device msi msg data
      * nvme drive probe failure (LP: #1626894)
        - nvme: revert NVMe: only setup MSIX once
    
      [ Ubuntu: 4.4.0-60.81 ]
    
      * Release Tracking Bug
        - LP: #1656084
      * Couldn't emulate instruction 0x7813427c (LP: #1634129)
        - KVM: PPC: Book3S PR: Fix illegal opcode emulation
      * perf: 24x7: Eliminate domain name suffix in event names (LP: #1560482)
        - powerpc/perf/hv-24x7: Fix usage with chip events.
        - powerpc/perf/hv-24x7: Display change in counter values
        - powerpc/perf/hv-24x7: Display domain indices in sysfs
        - powerpc/perf/24x7: Eliminate domain suffix in event names
      * i386 ftrace tests hang on ADT testing (LP: #1655040)
        - ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short jumps
          to it
      * VMX module autoloading if available (LP: #1651322)
        - powerpc: Add module autoloading based on CPU features
        - crypto: vmx - Convert to CPU feature based module autoloading
      * ACPI probe support for AD5592/3 configurable multi-channel converter
        (LP: #1654497)
        - SAUCE: iio: dac: ad5592r: Add ACPI support
        - SAUCE: iio: dac: ad5593r: Add ACPI support
      * Xenial update to v4.4.40 stable release (LP: #1654602)
        - btrfs: limit async_work allocation and worker func duration
        - Btrfs: fix tree search logic when replaying directory entry deletes
        - btrfs: store and load values of stripes_min/stripes_max in balance status
          item
        - Btrfs: fix qgroup rescan worker initialization
        - USB: serial: option: add support for Telit LE922A PIDs 0x1040, 0x1041
        - USB: serial: option: add dlink dwm-158
        - USB: serial: kl5kusb105: fix open error path
        - USB: cdc-acm: add device id for GW Instek AFG-125
        - usb: hub: Fix auto-remount of safely removed or ejected USB-3 devices
        - usb: gadget: f_uac2: fix error handling at afunc_bind
        - usb: gadget: composite: correctly initialize ep->maxpacket
        - USB: UHCI: report non-PME wakeup signalling for Intel hardware
        - ALSA: usb-audio: Add QuickCam Communicate Deluxe/S7500 to
          volume_control_quirks
        - ALSA: hiface: Fix M2Tech hiFace driver sampling rate change
        - ALSA: hda/ca0132 - Add quirk for Alienware 15 R2 2016
        - ALSA: hda - ignore the assoc and seq when comparing pin configurations
        - ALSA: hda - fix headset-mic problem on a Dell laptop
        - ALSA: hda - Gate the mic jack on HP Z1 Gen3 AiO
        - ALSA: hda: when comparing pin configurations, ignore assoc in addition to
          seq
        - clk: ti: omap36xx: Work around sprz319 advisory 2.1
        - Btrfs: fix memory leak in reading btree blocks
        - Btrfs: bail out if block group has different mixed flag
        - Btrfs: return gracefully from balance if fs tree is corrupted
        - Btrfs: don't leak reloc root nodes on error
        - Btrfs: fix memory leak in do_walk_down
        - Btrfs: don't BUG() during drop snapshot
        - btrfs: make file clone aware of fatal signals
        - block_dev: don't test bdev->bd_contains when it is not stable
        - ptrace: Capture the ptracer's creds not PT_PTRACE_CAP
        - crypto: caam - fix AEAD givenc descriptors
        - ext4: fix mballoc breakage with 64k block size
        - ext4: fix stack memory corruption with 64k block size
        - ext4: use more strict checks for inodes_per_block on mount
        - ext4: fix in-superblock mount options processing
        - ext4: add sanity checking to count_overhead()
        - ext4: reject inodes with negative size
        - ext4: return -ENOMEM instead of success
        - ext4: do not perform data journaling when data is encrypted
        - f2fs: set ->owner for debugfs status file's file_operations
        - loop: return proper error from loop_queue_rq()
        - mm/vmscan.c: set correct defer count for shrinker
        - fs: exec: apply CLOEXEC before changing dumpable task flags
        - exec: Ensure mm->user_ns contains the execed files
        - usb: gadget: composite: always set ep->mult to a sensible value
        - blk-mq: Do not invoke .queue_rq() for a stopped queue
        - dm flakey: return -EINVAL on interval bounds error in flakey_ctr()
        - dm crypt: mark key as invalid until properly loaded
        - dm space map metadata: fix 'struct sm_metadata' leak on failed create
        - ASoC: intel: Fix crash at suspend/resume without card registration
        - CIFS: Fix a possible memory corruption during reconnect
        - CIFS: Fix missing nls unload in smb2_reconnect()
        - CIFS: Fix a possible memory corruption in push locks
        - kernel/watchdog: use nmi registers snapshot in hardlockup handler
        - kernel/debug/debug_core.c: more properly delay for secondary CPUs
        - tpm xen: Remove bogus tpm_chip_unregister
        - xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing
        - arm/xen: Use alloc_percpu rather than __alloc_percpu
        - xfs: set AGI buffer type in xlog_recover_clear_agi_bucket
        - driver core: fix race between creating/querying glue dir and its cleanup
        - ppp: defer netns reference release for ppp channel
        - Linux 4.4.40
      * igb i210 probe of pci device failed with error -2 (LP: #1639810)
        - SAUCE: igb: Workaround for igb i210 firmware issue.
        - SAUCE: igb: add i211 to i210 PHY workaround
      * PowerNV: PCI Slot is invalid after fencedPHB Error injection (LP: #1652018)
        - powerpc/powernv: Call opal_pci_poll() if needed
      * mfd: intel-lpss: Add default I2C device properties for Apollo Lake
        (LP: #1635177)
        - mfd: intel-lpss: Add default I2C device properties for Apollo Lake
      * Xenial update to v4.4.39 stable release (LP: #1650609)
        - powerpc/eeh: Fix deadlock when PE frozen state can't be cleared
        - parisc: Purge TLB before setting PTE
        - parisc: Remove unnecessary TLB purges from flush_dcache_page_asm and
          flush_icache_page_asm
        - parisc: Fix TLB related boot crash on SMP machines
        - zram: restrict add/remove attributes to root only
        - locking/rtmutex: Prevent dequeue vs. unlock race
        - locking/rtmutex: Use READ_ONCE() in rt_mutex_owner()
        - perf/x86: Fix full width counter, counter overflow
        - crypto: mcryptd - Check mcryptd algorithm compatibility
        - can: raw: raw_setsockopt: limit number of can_filter that can be set
        - can: peak: fix bad memory access and free sequence
        - arm64: futex.h: Add missing PAN toggling
        - m68k: Fix ndelay() macro
        - batman-adv: Check for alloc errors when preparing TT local data
        - hotplug: Make register and unregister notifier API symmetric
        - crypto: rsa - Add Makefile dependencies to fix parallel builds
        - Linux 4.4.39
      * Xenial update to v4.4.38 stable release (LP: #1650607)
        - virtio-net: add a missing synchronize_net()
        - net: check dead netns for peernet2id_alloc()
        - ip6_tunnel: disable caching when the traffic class is inherited
        - net: sky2: Fix shutdown crash
        - af_unix: conditionally use freezable blocking calls in read
        - rtnetlink: fix FDB size computation
        - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind()
        - net: dsa: bcm_sf2: Ensure we re-negotiate EEE during after link change
        - net, sched: respect rcu grace period on cls destruction
        - net/sched: pedit: make sure that offset is valid
        - netlink: Call cb->done from a worker thread
        - netlink: Do not schedule work from sk_destruct
        - net/dccp: fix use-after-free in dccp_invalid_packet
        - net: bcmgenet: Utilize correct struct device for all DMA operations
        - sh_eth: remove unchecked interrupts for RZ/A1
        - geneve: avoid use-after-free of skb->data
        - net: ping: check minimum size on ICMP header length
        - sparc32: Fix inverted invalid_frame_pointer checks on sigreturns
        - sparc64: Fix find_node warning if numa node cannot be found
        - sparc64: fix compile warning section mismatch in find_node()
        - constify iov_iter_count() and iter_is_iovec()
        - Don't feed anything but regular iovec's to blk_rq_map_user_iov
        - ipv6: Set skb->protocol properly for local output
        - ipv4: Set skb->protocol properly for local output
        - esp4: Fix integrity verification when ESN are used
        - esp6: Fix integrity verification when ESN are used
        - Linux 4.4.38
      * Xenial update to v4.4.37 stable release (LP: #1650604)
        - ARC: Don't use "+l" inline asm constraint
        - zram: fix unbalanced idr management at hot removal
        - kasan: update kasan_global for gcc 7
        - x86/traps: Ignore high word of regs->cs in early_fixup_exception()
        - rcu: Fix soft lockup for rcu_nocb_kthread
        - PCI: Export pcie_find_root_port
        - PCI: Set Read Completion Boundary to 128 iff Root Port supports it (_HPX)
        - mwifiex: printk() overflow with 32-byte SSIDs
        - pwm: Fix device reference leak
        - arm64: cpufeature: Schedule enable() calls instead of calling them via IPI
        - arm64: mm: Set PSTATE.PAN from the cpu_enable_pan() call
        - arm64: suspend: Reconfigure PSTATE after resume from idle
        - Linux 4.4.37
      * Xenial update to v4.4.36 stable release (LP: #1650601)
        - iommu/vt-d: Fix PASID table allocation
        - iommu/vt-d: Fix IOMMU lookup for SR-IOV Virtual Functions
        - KVM: x86: check for pic and ioapic presence before use
        - usb: chipidea: move the lock initialization to core file
        - USB: serial: cp210x: add ID for the Zone DPMX
        - USB: serial: ftdi_sio: add support for TI CC3200 LaunchPad
        - Fix USB CB/CBI storage devices with CONFIG_VMAP_STACK=y
        - scsi: mpt3sas: Fix secure erase premature termination
        - tile: avoid using clocksource_cyc2ns with absolute cycle count
        - cfg80211: limit scan results cache size
        - NFSv4.x: hide array-bounds warning
        - parisc: Fix races in parisc_setup_cache_timing()
        - parisc: Fix race in pci-dma.c
        - parisc: Also flush data TLB in flush_icache_page_asm
        - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]
        - drm/radeon: Ensure vblank interrupt is enabled on DPMS transition to on
        - mei: me: disable driver on SPT SPS firmware
        - mei: me: fix place for kaby point device ids.
        - mei: fix return value on disconnection
        - scsi: mpt3sas: Unblock device after controller reset
        - Linux 4.4.36
      * Miscellaneous Ubuntu changes
        - [Debian] consider renames in gen-auto-reconstruct
    
     -- Thadeu Lima de Souza Cascardo <email address hidden>  Wed, 18 Jan 2017 15:24:09 -0200
  • linux-snapdragon (4.4.0-1039.43) xenial; urgency=low
    
      * CVE-2016-8655 (LP: #1646318)
          - packet: fix race condition in packet_set_ring
    
     -- Brad Figg <email address hidden>  Fri, 02 Dec 2016 11:24:31 -0800
  • linux-snapdragon (4.4.0-1035.39) xenial; urgency=low
    
      [ Luis Henriques ]
    
      * Release Tracking Bug
        - LP: #1640520
    
      * unexpectedly large memory usage of mounted snaps (LP: #1636847)
        - [Config] switch squashfs to single threaded decode
    
    linux-snapdragon (4.4.0-1034.38) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1636948
    
      [ Ubuntu: 4.4.0-47.68 ]
    
      * Add a driver for Amazon Elastic Network Adapters (ENA) (LP: #1635721)
        - lib/bitmap.c: conversion routines to/from u32 array
        - net: ethtool: add new ETHTOOL_xLINKSETTINGS API
        - net: ena: Add a driver for Amazon Elastic Network Adapters (ENA)
        - [config] enable CONFIG_ENA_ETHERNET=m (Amazon ENA driver)
      * unexpectedly large memory usage of mounted snaps (LP: #1636847)
        - [Config] switch squashfs to single threaded decode
    
    linux-snapdragon (4.4.0-1033.37) xenial; urgency=low
    
      [ Seth Forshee ]
    
      * Release Tracking Bug
        - LP: #1635247
    
      [ Ubuntu: 4.4.0-46.67 ]
    
      * Release Tracking Bug
        - LP: #1635242
      * proc_keys_show crash when reading /proc/keys (LP: #1634496)
        - SAUCE: KEYS: ensure xbuf is large enough to fix buffer overflow in
          proc_keys_show (LP: #1634496)
      * [Trusty->Yakkety] powerpc/64: Fix incorrect return value from
        __copy_tofrom_user (LP: #1632462)
        - SAUCE: (no-up) powerpc/64: Fix incorrect return value from
          __copy_tofrom_user
      * Ubuntu 16.10: Oops panic in move_page_tables/page_remove_rmap after running
        memory_stress_ng. (LP: #1628976)
        - SAUCE: (no-up) powerpc/pseries: Fix stack corruption in htpe code
      * Paths not failed properly when unmapping virtual FC ports in VIOS (using
        ibmvfc) (LP: #1632116)
        - scsi: ibmvfc: Fix I/O hang when port is not mapped
      * PSL data cache should be flushed before resetting CAPI adapter
        (LP: #1632049)
        - cxl: Flush PSL cache before resetting the adapter
      * thunder nic: avoid link delays due to RX_PACKET_DIS (LP: #1630038)
        - net: thunderx: Don't set RX_PACKET_DIS while initializing
      * Support snaps inside of lxd containers (LP: #1611078)
        - Revert "UBUNTU: SAUCE: apparmor: fix sleep in critical section"
        - SAUCE: (no-up) apparmor: sync of apparmor 3.6 (from Ubuntu 16.10)
      * crypto/vmx/p8_ghash memory corruption (LP: #1630970)
        - crypto: ghash-generic - move common definitions to a new header file
        - crypto: vmx - Fix memory corruption caused by p8_ghash
        - crypto: vmx - Ensure ghash-generic is enabled
      * Xenial update to v4.4.24 stable release (LP: #1631468)
        - cpuset: handle race between CPU hotplug and cpuset_hotplug_work
        - mtd: nand: davinci: Reinitialize the HW ECC engine in 4bit hwctl
        - mm,ksm: fix endless looping in allocating memory when ksm enable
        - can: dev: fix deadlock reported after bus-off
        - x86/init: Fix cr4_init_shadow() on CR4-less machines
        - x86/boot: Initialize FPU and X86_FEATURE_ALWAYS even if we don't have CPUID
        - drm/nouveau/fifo/nv04: avoid ramht race against cookie insertion
        - drm/radeon/si/dpm: add workaround for for Jet parts
        - ARM: 8616/1: dt: Respect property size when parsing CPUs
        - ARM: 8617/1: dma: fix dma_max_pfn()
        - usb: musb: Fix DMA desired mode for Mentor DMA engine
        - usb: musb: fix DMA for host mode
        - iwlwifi: mvm: fix a few firmware capability checks
        - perf/core: Fix pmu::filter_match for SW-led groups
        - i40e: avoid null pointer dereference
        - pinctrl: uniphier: fix .pin_dbg_show() callback
        - pinctrl: Flag strict is a field in struct pinmux_ops
        - drivers/perf: arm_pmu: Fix leak in error path
        - mmc: pxamci: fix potential oops
        - tools/vm/slabinfo: fix an unintentional printf
        - ipvs: fix bind to link-local mcast IPv6 address in backup
        - nvmem: Declare nvmem_cell_read() consistently
        - hwmon: (adt7411) set bit 3 in CFG1 register
        - spi: sh-msiof: Avoid invalid clock generator parameters
        - iwlwifi: pcie: fix access to scratch buffer
        - iwlwifi: mvm: don't use ret when not initialised
        - ceph: fix race during filling readdir cache
        - usb: gadget: fsl_qe_udc: signedness bug in qe_get_frame()
        - gpio: sa1100: fix irq probing for ucb1x00
        - irqchip/gicv3: Silence noisy DEBUG_PER_CPU_MAPS warning
        - ARM: 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7
        - arm64: debug: avoid resetting stepping state machine when TIF_SINGLESTEP
        - MIPS: uprobes: remove incorrect set_orig_insn
        - MIPS: fix uretprobe implementation
        - MIPS: Malta: Fix IOCU disable switch read for MIPS64
        - MIPS: uprobes: fix use of uninitialised variable
        - printk: fix parsing of "brl=" option
        - tpm: fix byte-order for the value read by tpm2_get_tpm_pt
        - regulator: qcom_spmi: Add support for S4 supply on pm8941
        - regulator: qcom_spmi: Add support for get_mode/set_mode on switches
        - regulator: qcom_spmi: Update mvs1/mvs2 switches on pm8941
        - regulator: qcom_smd: Fix voltage ranges for pm8x41
        - ARM: sun5i: Fix typo in trip point temperature
        - ARM: sa1100: register clocks early
        - ARM: sa1100: fix 3.6864MHz clock
        - ARM: sa1100: clear reset status prior to reboot
        - ARM: shmobile: fix regulator quirk for Gen2
        - ARM: sa1111: fix pcmcia suspend/resume
        - hwrng: omap - Fix assumption that runtime_get_sync will always succeed
        - blk-mq: actually hook up defer list when running requests
        - pstore: drop file opened reference count
        - tile: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
        - iwlmvm: mvm: set correct state in smart-fifo configuration
        - NFC: fdp: Detect errors from fdp_nci_create_conn()
        - em28xx-i2c: rt_mutex_trylock() returns zero on failure
        - gspca: avoid unused variable warnings
        - ath9k: Fix programming of minCCA power threshold
        - avr32: off by one in at32_init_pio()
        - fnic: pci_dma_mapping_error() doesn't return an error code
        - dmaengine: at_xdmac: fix debug string
        - svc: Avoid garbage replies when pc_func() returns rpc_drop_reply
        - NFS: Don't drop CB requests with invalid principals
        - pNFS/files: Fix layoutcommit after a commit to DS
        - pNFS/flexfiles: Fix layoutcommit after a commit to DS
        - ASoC: Intel: Skylake: Fix error return code in skl_probe()
        - brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain
        - brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill
        - brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get()
        - powerpc/prom: Fix sub-processor option passed to ibm, client-architecture-
          support
        - sysctl: handle error writing UINT_MAX to u32 fields
        - ASoC: omap-mcpdm: Fix irq resource handling
        - kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd
        - dmaengine: at_xdmac: fix to pass correct device identity to free_irq()
        - KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write
        - IB/ipoib: Fix memory corruption in ipoib cm mode connect flow
        - IB/core: Fix use after free in send_leave function
        - IB/ipoib: Don't allow MC joins during light MC flush
        - IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV
        - IB/mlx4: Fix code indentation in QP1 MAD flow
        - IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV
        - batman-adv: remove unused callback from batadv_algo_ops struct
        - aio: mark AIO pseudo-fs noexec
        - clk: xgene: Add missing parenthesis when clearing divider value
        - dm log writes: fix bug with too large bios
        - USB: serial: cp210x: fix hardware flow-control disable
        - usb: misc: legousbtower: Fix NULL pointer deference
        - Staging: fbtft: Fix bug in fbtft-core
        - USB: serial: cp210x: Add ID for a Juniper console
        - Revert "usbtmc: convert to devm_kzalloc"
        - ALSA: hda - Adding one more ALC255 pin definition for headset problem
        - ACPICA: acpi_get_sleep_type_data: Reduce warnings
        - ALSA: hda - Fix headset mic detection problem for several Dell laptops
        - ALSA: hda - Add the top speaker pin config for HP Spectre x360
        - Linux 4.4.24
      * sha1-powerpc returning wrong results (LP: #1629977)
        - crypto: sha1-powerpc - little-endian support
      *  Dell Precision Trackpoint not working after suspend (LP: #1630857)
        - HID: alps: fix stick device not working after resume
      * OOPS on beaglebone on boot of 4.4.0-36-generic under snappy ubuntu core
        xenial (LP: #1625177)
        - net: ethernet: ti: cpdma: fix lockup in cpdma_ctlr_destroy()
        - drivers: net: cpsw: fix wrong regs access in cpsw_remove
        - drivers: net: cpsw: use of_platform_depopulate()
        - ARM: OMAP2+: omap_device: fix crash on omap_device removal
        - ARM: OMAP2+: Fix omap_device for module reload on PM runtime forbid
        - ARM: OMAP2+: Fix typo in omap_device.c
        - drivers: net: cpsw: fix suspend when all ethX devices are down
        - drivers: net: cpsw: fix wrong regs access in cpsw_ndo_open
        - drivers: net: cpsw: check return code from pm runtime calls
        - drivers: net: cpsw: remove pm runtime calls from suspend callbacks
        - drivers: net: cpsw: ethtool: fix accessing to suspended device
        - drivers: net: cpsw: ndev: fix accessing to suspended device
        - drivers: net: cpsw: fix kmemleak false-positive reports for sk buffers
      * Autofs parameter substitution broken in kernel 4.4.0-38 and 4.4.0-40
        (LP: #1629204)
        - SAUCE: (namespace) autofs4: Use real_cred for requestor's ids
      * Xenial update to v4.4.23 stable release (LP: #1629386)
        - include/linux/kernel.h: change abs() macro so it uses consistent return type
        - Fix build warning in kernel/cpuset.c
        - reiserfs: fix "new_insert_key may be used uninitialized ..."
        - ipv4: panic in leaf_walk_rcu due to stale node pointer
        - ipv6: release dst in ping_v6_sendmsg
        - tcp: cwnd does not increase in TCP YeAH
        - tcp: properly scale window in tcp_v[46]_reqsk_send_ack()
        - crypto: arm64/aes-ctr - fix NULL dereference in tail processing
        - crypto: arm/aes-ctr - fix NULL dereference in tail processing
        - crypto: skcipher - Fix blkcipher walk OOM crash
        - crypto: echainiv - Replace chaining with multiplication
        - ocfs2/dlm: fix race between convert and migration
        - ocfs2: fix start offset to ocfs2_zero_range_for_truncate()
        - kbuild: Do not run modules_install and install in paralel
        - Makefile: revert "Makefile: Document ability to make file.lst and file.S"
          partially
        - tools: Support relative directory path for 'O='
        - kbuild: forbid kernel directory to contain spaces and colons
        - Kbuild: disable 'maybe-uninitialized' warning for
          CONFIG_PROFILE_ALL_BRANCHES
        - gcov: disable -Wmaybe-uninitialized warning
        - Disable "maybe-uninitialized" warning globally
        - Disable "frame-address" warning
        - Makefile: Mute warning for __builtin_return_address(>0) for tracing only
        - net: caif: fix misleading indentation
        - Add braces to avoid "ambiguous ‘else’" compiler warnings
        - am437x-vfpe: fix typo in vpfe_get_app_input_index
        - ath9k: fix misleading indentation
        - iwlegacy: avoid warning about missing braces
        - Staging: iio: adc: fix indent on break statement
        - nouveau: fix nv40_perfctr_next() cleanup regression
        - bonding: Fix bonding crash
        - Revert "af_unix: Fix splice-bind deadlock"
        - af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock'
        - vti: flush x-netns xfrm cache when vti interface is removed
        - net/irda: handle iriap_register_lsap() allocation failure
        - tipc: fix NULL pointer dereference in shutdown()
        - net/mlx5: Added missing check of msg length in verifying its signature
        - net: dsa: bcm_sf2: Fix race condition while unmasking interrupts
        - Revert "phy: IRQ cannot be shared"
        - net: smc91x: fix SMC accesses
        - bridge: re-introduce 'fix parsing of MLDv2 reports'
        - autofs races
        - autofs: use dentry flags to block walks during expire
        - xfs: prevent dropping ioend completions during buftarg wait
        - fsnotify: add a way to stop queueing events on group shutdown
        - fanotify: fix list corruption in fanotify_get_response()
        - fix fault_in_multipages_...() on architectures with no-op access_ok()
        - mtd: maps: sa1100-flash: potential NULL dereference
        - mtd: pmcmsp-flash: Allocating too much in init_msp_flash()
        - power: reset: hisi-reboot: Unmap region obtained by of_iomap
        - fix memory leaks in tracing_buffers_splice_read()
        - tracing: Move mutex to protect against resetting of seq data
        - mm: delete unnecessary and unsafe init_tlb_ubc()
        - can: flexcan: fix resume function
        - nl80211: validate number of probe response CSA counters
        - btrfs: ensure that file descriptor used with subvol ioctls is a dir
        - i2c-eg20t: fix race between i2c init and interrupt enable
        - i2c: qup: skip qup_i2c_suspend if the device is already runtime suspended
        - MIPS: Fix pre-r6 emulation FPU initialisation
        - MIPS: SMP: Fix possibility of deadlock when bringing CPUs online
        - MIPS: vDSO: Fix Malta EVA mapping to vDSO page structs
        - MIPS: Remove compact branch policy Kconfig entries
        - MIPS: Avoid a BUG warning during prctl(PR_SET_FP_MODE, ...)
        - MIPS: Add a missing ".set pop" in an early commit
        - MIPS: paravirt: Fix undefined reference to smp_bootstrap
        - PM / hibernate: Restore processor state before using per-CPU variables
        - PM / hibernate: Fix rtree_next_node() to avoid walking off list ends
        - power_supply: tps65217-charger: fix missing platform_set_drvdata()
        - power: supply: max17042_battery: fix model download bug.
        - qxl: check for kmap failures
        - hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common()
        - Linux 4.4.23
      * Xenial update to v4.4.22 stable release (LP: #1627730)
        - ext4: use __GFP_NOFAIL in ext4_free_blocks()
        - fscrypto: add authorization check for setting encryption policy
        - clocksource/drivers/sun4i: Clear interrupts after stopping timer in probe
          function
        - MIPS: KVM: Check for pfn noslot case
        - fscrypto: require write access to mount to set encryption policy
        - lightnvm: put bio before return
        - powerpc/tm: do not use r13 for tabort_syscall
        - powerpc/mm: Don't alias user region to other regions below PAGE_OFFSET
        - kernfs: don't depend on d_find_any_alias() when generating notifications
        - pNFS: The client must not do I/O to the DS if it's lease has expired
        - NFSv4.x: Fix a refcount leak in nfs_callback_up_net
        - nfsd: Close race between nfsd4_release_lockowner and nfsd4_lock
        - pNFS: Ensure LAYOUTGET and LAYOUTRETURN are properly serialised
        - NFSv4.1: Fix the CREATE_SESSION slot number accounting
        - kexec: fix double-free when failing to relocate the purgatory
        - mm: introduce get_task_exe_file
        - audit: fix exe_file access in audit_exe_compare
        - dm flakey: fix reads to be issued if drop_writes configured
        - IB/uverbs: Fix race between uverbs_close and remove_one
        - ARC: mm: fix build breakage with STRICT_MM_TYPECHECKS
        - x86/paravirt: Do not trace _paravirt_ident_*() functions
        - x86/AMD: Apply erratum 665 on machines without a BIOS fix
        - kvm-arm: Unmap shadow pagetables properly
        - iio: accel: kxsd9: Fix raw read return
        - iio: proximity: as3935: set up buffer timestamps for non-zero values
        - iio: adc: rockchip_saradc: reset saradc controller before programming it
        - iio: adc: ti_am335x_adc: Protect FIFO1 from concurrent access
        - iio: adc: ti_am335x_adc: Increase timeout value waiting for ADC sample
        - iio: ad799x: Fix buffered capture for ad7991/ad7995/ad7999
        - iio: adc: at91: unbreak channel adc channel 3
        - iio: accel: bmc150: reset chip at init time
        - iio: fix pressure data output unit in hid-sensor-attributes
        - iio: accel: kxsd9: Fix scaling bug
        - iio:core: fix IIO_VAL_FRACTIONAL sign handling
        - iio: ensure ret is initialized to zero before entering do loop
        - serial: 8250_mid: fix divide error bug if baud rate is 0
        - serial: 8250: added acces i/o products quad and octal serial cards
        - USB: serial: simple: add support for another Infineon flashloader
        - usb: renesas_usbhs: fix clearing the {BRDY,BEMP}STS condition
        - usb: chipidea: udc: fix NULL ptr dereference in isr_setup_status_phase
        - ARM: dts: STiH410: Handle interconnect clock required by EHCI/OHCI (USB)
        - USB: change bInterval default to 10 ms
        - net: thunderx: Fix OOPs with ethtool --register-dump
        - cpuset: make sure new tasks conform to the current config of the cpuset
        - ARM: AM43XX: hwmod: Fix RSTST register offset for pruss
        - ARM: imx6: add missing BM_CLPCR_BYP_MMDC_CH0_LPM_HS setting for imx6ul
        - ARM: imx6: add missing BM_CLPCR_BYPASS_PMIC_READY setting for imx6sx
        - ARM: kirkwood: ib62x0: fix size of u-boot environment partition
        - ARM: OMAP3: hwmod data: Add sysc information for DSI
        - ARM: dts: imx6qdl: Fix SPDIF regression
        - ARM: dts: overo: fix gpmc nand cs0 range
        - ARM: dts: overo: fix gpmc nand on boards with ethernet
        - ARM: dts: STiH407-family: Provide interconnect clock for consumption in ST
          SDHCI
        - bus: arm-ccn: Fix PMU handling of MN
        - bus: arm-ccn: Do not attempt to configure XPs for cycle counter
        - bus: arm-ccn: Fix XP watchpoint settings bitmask
        - dm log writes: fix check of kthread_run() return value
        - dm log writes: move IO accounting earlier to fix error path
        - dm crypt: fix error with too large bios
        - pinctrl: pistachio: fix mfio pll_lock pinmux
        - pinctrl: sunxi: fix uart1 CTS/RTS pins at PG on A23/A33
        - arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb()
        - crypto: cryptd - initialize child shash_desc on import
        - Btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns
        - fuse: direct-io: don't dirty ITER_BVEC pages
        - xhci: fix null pointer dereference in stop command timeout function
        - md-cluster: make md-cluster also can work when compiled into kernel
        - ath9k: fix using sta->drv_priv before initializing it
        - Revert "wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel"
        - sched/core: Fix a race between try_to_wake_up() and a woken up task
        - ipv6: addrconf: fix dev refcont leak when DAD failed
        - gma500: remove annoying deprecation warning
        - mpssd: fix buffer overflow warning
        - drm/i915: Avoid pointer arithmetic in calculating plane surface offset
        - mmc: dw_mmc: use resource_size_t to store physical address
        - pinctrl: at91-pio4: use %pr format string for resource
        - soc: qcom/spm: shut up uninitialized variable warning
        - kconfig: tinyconfig: provide whole choice blocks to avoid warnings
        - net: simplify napi_synchronize() to avoid warnings
        - drm: atmel-hlcdc: Fix vertical scaling
        - drm: Only use compat ioctl for addfb2 on X86/IA64
        - genirq: Provide irq_gc_{lock_irqsave,unlock_irqrestore}() helpers
        - irqchip/atmel-aic: Fix potential deadlock in ->xlate()
        - fix iov_iter_fault_in_readable()
        - microblaze: fix __get_user()
        - avr32: fix copy_from_user()
        - microblaze: fix copy_from_user()
        - fix minor infoleak in get_user_ex()
        - mn10300: failing __get_user() and get_user() should zero
        - m32r: fix __get_user()
        - sh64: failing __get_user() should zero
        - nios2: fix __get_user()
        - score: fix __get_user/get_user
        - s390: get_user() should zero on failure
        - ARC: uaccess: get_user to zero out dest in cause of fault
        - asm-generic: make get_user() clear the destination on errors
        - frv: fix clear_user()
        - cris: buggered copy_from_user/copy_to_user/clear_user
        - blackfin: fix copy_from_user()
        - score: fix copy_from_user() and friends
        - sh: fix copy_from_user()
        - hexagon: fix strncpy_from_user() error return
        - mips: copy_from_user() must zero the destination on access_ok() failure
        - asm-generic: make copy_from_user() zero the destination properly
        - alpha: fix copy_from_user()
        - metag: copy_from_user() should zero the destination on access_ok() failure
        - parisc: fix copy_from_user()
        - openrisc: fix copy_from_user()
        - nios2: copy_from_user() should zero the tail of destination
        - mn10300: copy_from_user() should zero on access_ok() failure...
        - sparc32: fix copy_from_user()
        - ppc32: fix copy_from_user()
        - genirq/msi: Fix broken debug output
        - ia64: copy_from_user() should zero the destination on access_ok() failure
        - avr32: fix 'undefined reference to `___copy_from_user'
        - openrisc: fix the fix of copy_from_user()
        - Linux 4.4.22
      * AES-XTS poor performance in Ubuntu 16.04 (LP: #1613295)
        - crypto: vmx - fix null dereference in p8_aes_xts_crypt
      * i40e/setting some ethtool features and remove module right after (modprobe
        -r) lead to crash in systems with more than 127 CPUs (LP: #1626782)
        - i40e: Fix errors resulted while turning off TSO
      * STC860:alpine-pdq:alpdq5p03: kernel panic when adding vnic (LP: #1626222)
        - ibmvnic: fix to use list_for_each_safe() when delete items
      * Stratton: ISST-LTE:UbuntuKVM: Failed to hotplug virtual devices to guest
        running Ubuntu 16.04.1 on UbuntuKVM16.04.1 #179 (LP: #1625986)
        - PCI: rpaphp: Fix slot registration for multiple slots under a PHB
      * nvme: Missing patch in Ubuntu-4.4.0-41.61 (LP: #1628520)
        - nvme: Call pci_disable_device on the error path.
    
     -- Luis Henriques <email address hidden>  Wed, 09 Nov 2016 15:44:52 +0000
  • linux-snapdragon (4.4.0-1033.37) xenial; urgency=low
    
      [ Seth Forshee ]
    
      * Release Tracking Bug
        - LP: #1635247
    
      [ Ubuntu: 4.4.0-46.67 ]
    
      * Release Tracking Bug
        - LP: #1635242
      * proc_keys_show crash when reading /proc/keys (LP: #1634496)
        - SAUCE: KEYS: ensure xbuf is large enough to fix buffer overflow in
          proc_keys_show (LP: #1634496)
      * [Trusty->Yakkety] powerpc/64: Fix incorrect return value from
        __copy_tofrom_user (LP: #1632462)
        - SAUCE: (no-up) powerpc/64: Fix incorrect return value from
          __copy_tofrom_user
      * Ubuntu 16.10: Oops panic in move_page_tables/page_remove_rmap after running
        memory_stress_ng. (LP: #1628976)
        - SAUCE: (no-up) powerpc/pseries: Fix stack corruption in htpe code
      * Paths not failed properly when unmapping virtual FC ports in VIOS (using
        ibmvfc) (LP: #1632116)
        - scsi: ibmvfc: Fix I/O hang when port is not mapped
      * PSL data cache should be flushed before resetting CAPI adapter
        (LP: #1632049)
        - cxl: Flush PSL cache before resetting the adapter
      * thunder nic: avoid link delays due to RX_PACKET_DIS (LP: #1630038)
        - net: thunderx: Don't set RX_PACKET_DIS while initializing
      * Support snaps inside of lxd containers (LP: #1611078)
        - Revert "UBUNTU: SAUCE: apparmor: fix sleep in critical section"
        - SAUCE: (no-up) apparmor: sync of apparmor 3.6 (from Ubuntu 16.10)
      * crypto/vmx/p8_ghash memory corruption (LP: #1630970)
        - crypto: ghash-generic - move common definitions to a new header file
        - crypto: vmx - Fix memory corruption caused by p8_ghash
        - crypto: vmx - Ensure ghash-generic is enabled
      * Xenial update to v4.4.24 stable release (LP: #1631468)
        - cpuset: handle race between CPU hotplug and cpuset_hotplug_work
        - mtd: nand: davinci: Reinitialize the HW ECC engine in 4bit hwctl
        - mm,ksm: fix endless looping in allocating memory when ksm enable
        - can: dev: fix deadlock reported after bus-off
        - x86/init: Fix cr4_init_shadow() on CR4-less machines
        - x86/boot: Initialize FPU and X86_FEATURE_ALWAYS even if we don't have CPUID
        - drm/nouveau/fifo/nv04: avoid ramht race against cookie insertion
        - drm/radeon/si/dpm: add workaround for for Jet parts
        - ARM: 8616/1: dt: Respect property size when parsing CPUs
        - ARM: 8617/1: dma: fix dma_max_pfn()
        - usb: musb: Fix DMA desired mode for Mentor DMA engine
        - usb: musb: fix DMA for host mode
        - iwlwifi: mvm: fix a few firmware capability checks
        - perf/core: Fix pmu::filter_match for SW-led groups
        - i40e: avoid null pointer dereference
        - pinctrl: uniphier: fix .pin_dbg_show() callback
        - pinctrl: Flag strict is a field in struct pinmux_ops
        - drivers/perf: arm_pmu: Fix leak in error path
        - mmc: pxamci: fix potential oops
        - tools/vm/slabinfo: fix an unintentional printf
        - ipvs: fix bind to link-local mcast IPv6 address in backup
        - nvmem: Declare nvmem_cell_read() consistently
        - hwmon: (adt7411) set bit 3 in CFG1 register
        - spi: sh-msiof: Avoid invalid clock generator parameters
        - iwlwifi: pcie: fix access to scratch buffer
        - iwlwifi: mvm: don't use ret when not initialised
        - ceph: fix race during filling readdir cache
        - usb: gadget: fsl_qe_udc: signedness bug in qe_get_frame()
        - gpio: sa1100: fix irq probing for ucb1x00
        - irqchip/gicv3: Silence noisy DEBUG_PER_CPU_MAPS warning
        - ARM: 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7
        - arm64: debug: avoid resetting stepping state machine when TIF_SINGLESTEP
        - MIPS: uprobes: remove incorrect set_orig_insn
        - MIPS: fix uretprobe implementation
        - MIPS: Malta: Fix IOCU disable switch read for MIPS64
        - MIPS: uprobes: fix use of uninitialised variable
        - printk: fix parsing of "brl=" option
        - tpm: fix byte-order for the value read by tpm2_get_tpm_pt
        - regulator: qcom_spmi: Add support for S4 supply on pm8941
        - regulator: qcom_spmi: Add support for get_mode/set_mode on switches
        - regulator: qcom_spmi: Update mvs1/mvs2 switches on pm8941
        - regulator: qcom_smd: Fix voltage ranges for pm8x41
        - ARM: sun5i: Fix typo in trip point temperature
        - ARM: sa1100: register clocks early
        - ARM: sa1100: fix 3.6864MHz clock
        - ARM: sa1100: clear reset status prior to reboot
        - ARM: shmobile: fix regulator quirk for Gen2
        - ARM: sa1111: fix pcmcia suspend/resume
        - hwrng: omap - Fix assumption that runtime_get_sync will always succeed
        - blk-mq: actually hook up defer list when running requests
        - pstore: drop file opened reference count
        - tile: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
        - iwlmvm: mvm: set correct state in smart-fifo configuration
        - NFC: fdp: Detect errors from fdp_nci_create_conn()
        - em28xx-i2c: rt_mutex_trylock() returns zero on failure
        - gspca: avoid unused variable warnings
        - ath9k: Fix programming of minCCA power threshold
        - avr32: off by one in at32_init_pio()
        - fnic: pci_dma_mapping_error() doesn't return an error code
        - dmaengine: at_xdmac: fix debug string
        - svc: Avoid garbage replies when pc_func() returns rpc_drop_reply
        - NFS: Don't drop CB requests with invalid principals
        - pNFS/files: Fix layoutcommit after a commit to DS
        - pNFS/flexfiles: Fix layoutcommit after a commit to DS
        - ASoC: Intel: Skylake: Fix error return code in skl_probe()
        - brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain
        - brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill
        - brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get()
        - powerpc/prom: Fix sub-processor option passed to ibm, client-architecture-
          support
        - sysctl: handle error writing UINT_MAX to u32 fields
        - ASoC: omap-mcpdm: Fix irq resource handling
        - kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd
        - dmaengine: at_xdmac: fix to pass correct device identity to free_irq()
        - KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write
        - IB/ipoib: Fix memory corruption in ipoib cm mode connect flow
        - IB/core: Fix use after free in send_leave function
        - IB/ipoib: Don't allow MC joins during light MC flush
        - IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV
        - IB/mlx4: Fix code indentation in QP1 MAD flow
        - IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV
        - batman-adv: remove unused callback from batadv_algo_ops struct
        - aio: mark AIO pseudo-fs noexec
        - clk: xgene: Add missing parenthesis when clearing divider value
        - dm log writes: fix bug with too large bios
        - USB: serial: cp210x: fix hardware flow-control disable
        - usb: misc: legousbtower: Fix NULL pointer deference
        - Staging: fbtft: Fix bug in fbtft-core
        - USB: serial: cp210x: Add ID for a Juniper console
        - Revert "usbtmc: convert to devm_kzalloc"
        - ALSA: hda - Adding one more ALC255 pin definition for headset problem
        - ACPICA: acpi_get_sleep_type_data: Reduce warnings
        - ALSA: hda - Fix headset mic detection problem for several Dell laptops
        - ALSA: hda - Add the top speaker pin config for HP Spectre x360
        - Linux 4.4.24
      * sha1-powerpc returning wrong results (LP: #1629977)
        - crypto: sha1-powerpc - little-endian support
      *  Dell Precision Trackpoint not working after suspend (LP: #1630857)
        - HID: alps: fix stick device not working after resume
      * OOPS on beaglebone on boot of 4.4.0-36-generic under snappy ubuntu core
        xenial (LP: #1625177)
        - net: ethernet: ti: cpdma: fix lockup in cpdma_ctlr_destroy()
        - drivers: net: cpsw: fix wrong regs access in cpsw_remove
        - drivers: net: cpsw: use of_platform_depopulate()
        - ARM: OMAP2+: omap_device: fix crash on omap_device removal
        - ARM: OMAP2+: Fix omap_device for module reload on PM runtime forbid
        - ARM: OMAP2+: Fix typo in omap_device.c
        - drivers: net: cpsw: fix suspend when all ethX devices are down
        - drivers: net: cpsw: fix wrong regs access in cpsw_ndo_open
        - drivers: net: cpsw: check return code from pm runtime calls
        - drivers: net: cpsw: remove pm runtime calls from suspend callbacks
        - drivers: net: cpsw: ethtool: fix accessing to suspended device
        - drivers: net: cpsw: ndev: fix accessing to suspended device
        - drivers: net: cpsw: fix kmemleak false-positive reports for sk buffers
      * Autofs parameter substitution broken in kernel 4.4.0-38 and 4.4.0-40
        (LP: #1629204)
        - SAUCE: (namespace) autofs4: Use real_cred for requestor's ids
      * Xenial update to v4.4.23 stable release (LP: #1629386)
        - include/linux/kernel.h: change abs() macro so it uses consistent return type
        - Fix build warning in kernel/cpuset.c
        - reiserfs: fix "new_insert_key may be used uninitialized ..."
        - ipv4: panic in leaf_walk_rcu due to stale node pointer
        - ipv6: release dst in ping_v6_sendmsg
        - tcp: cwnd does not increase in TCP YeAH
        - tcp: properly scale window in tcp_v[46]_reqsk_send_ack()
        - crypto: arm64/aes-ctr - fix NULL dereference in tail processing
        - crypto: arm/aes-ctr - fix NULL dereference in tail processing
        - crypto: skcipher - Fix blkcipher walk OOM crash
        - crypto: echainiv - Replace chaining with multiplication
        - ocfs2/dlm: fix race between convert and migration
        - ocfs2: fix start offset to ocfs2_zero_range_for_truncate()
        - kbuild: Do not run modules_install and install in paralel
        - Makefile: revert "Makefile: Document ability to make file.lst and file.S"
          partially
        - tools: Support relative directory path for 'O='
        - kbuild: forbid kernel directory to contain spaces and colons
        - Kbuild: disable 'maybe-uninitialized' warning for
          CONFIG_PROFILE_ALL_BRANCHES
        - gcov: disable -Wmaybe-uninitialized warning
        - Disable "maybe-uninitialized" warning globally
        - Disable "frame-address" warning
        - Makefile: Mute warning for __builtin_return_address(>0) for tracing only
        - net: caif: fix misleading indentation
        - Add braces to avoid "ambiguous ‘else’" compiler warnings
        - am437x-vfpe: fix typo in vpfe_get_app_input_index
        - ath9k: fix misleading indentation
        - iwlegacy: avoid warning about missing braces
        - Staging: iio: adc: fix indent on break statement
        - nouveau: fix nv40_perfctr_next() cleanup regression
        - bonding: Fix bonding crash
        - Revert "af_unix: Fix splice-bind deadlock"
        - af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock'
        - vti: flush x-netns xfrm cache when vti interface is removed
        - net/irda: handle iriap_register_lsap() allocation failure
        - tipc: fix NULL pointer dereference in shutdown()
        - net/mlx5: Added missing check of msg length in verifying its signature
        - net: dsa: bcm_sf2: Fix race condition while unmasking interrupts
        - Revert "phy: IRQ cannot be shared"
        - net: smc91x: fix SMC accesses
        - bridge: re-introduce 'fix parsing of MLDv2 reports'
        - autofs races
        - autofs: use dentry flags to block walks during expire
        - xfs: prevent dropping ioend completions during buftarg wait
        - fsnotify: add a way to stop queueing events on group shutdown
        - fanotify: fix list corruption in fanotify_get_response()
        - fix fault_in_multipages_...() on architectures with no-op access_ok()
        - mtd: maps: sa1100-flash: potential NULL dereference
        - mtd: pmcmsp-flash: Allocating too much in init_msp_flash()
        - power: reset: hisi-reboot: Unmap region obtained by of_iomap
        - fix memory leaks in tracing_buffers_splice_read()
        - tracing: Move mutex to protect against resetting of seq data
        - mm: delete unnecessary and unsafe init_tlb_ubc()
        - can: flexcan: fix resume function
        - nl80211: validate number of probe response CSA counters
        - btrfs: ensure that file descriptor used with subvol ioctls is a dir
        - i2c-eg20t: fix race between i2c init and interrupt enable
        - i2c: qup: skip qup_i2c_suspend if the device is already runtime suspended
        - MIPS: Fix pre-r6 emulation FPU initialisation
        - MIPS: SMP: Fix possibility of deadlock when bringing CPUs online
        - MIPS: vDSO: Fix Malta EVA mapping to vDSO page structs
        - MIPS: Remove compact branch policy Kconfig entries
        - MIPS: Avoid a BUG warning during prctl(PR_SET_FP_MODE, ...)
        - MIPS: Add a missing ".set pop" in an early commit
        - MIPS: paravirt: Fix undefined reference to smp_bootstrap
        - PM / hibernate: Restore processor state before using per-CPU variables
        - PM / hibernate: Fix rtree_next_node() to avoid walking off list ends
        - power_supply: tps65217-charger: fix missing platform_set_drvdata()
        - power: supply: max17042_battery: fix model download bug.
        - qxl: check for kmap failures
        - hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common()
        - Linux 4.4.23
      * Xenial update to v4.4.22 stable release (LP: #1627730)
        - ext4: use __GFP_NOFAIL in ext4_free_blocks()
        - fscrypto: add authorization check for setting encryption policy
        - clocksource/drivers/sun4i: Clear interrupts after stopping timer in probe
          function
        - MIPS: KVM: Check for pfn noslot case
        - fscrypto: require write access to mount to set encryption policy
        - lightnvm: put bio before return
        - powerpc/tm: do not use r13 for tabort_syscall
        - powerpc/mm: Don't alias user region to other regions below PAGE_OFFSET
        - kernfs: don't depend on d_find_any_alias() when generating notifications
        - pNFS: The client must not do I/O to the DS if it's lease has expired
        - NFSv4.x: Fix a refcount leak in nfs_callback_up_net
        - nfsd: Close race between nfsd4_release_lockowner and nfsd4_lock
        - pNFS: Ensure LAYOUTGET and LAYOUTRETURN are properly serialised
        - NFSv4.1: Fix the CREATE_SESSION slot number accounting
        - kexec: fix double-free when failing to relocate the purgatory
        - mm: introduce get_task_exe_file
        - audit: fix exe_file access in audit_exe_compare
        - dm flakey: fix reads to be issued if drop_writes configured
        - IB/uverbs: Fix race between uverbs_close and remove_one
        - ARC: mm: fix build breakage with STRICT_MM_TYPECHECKS
        - x86/paravirt: Do not trace _paravirt_ident_*() functions
        - x86/AMD: Apply erratum 665 on machines without a BIOS fix
        - kvm-arm: Unmap shadow pagetables properly
        - iio: accel: kxsd9: Fix raw read return
        - iio: proximity: as3935: set up buffer timestamps for non-zero values
        - iio: adc: rockchip_saradc: reset saradc controller before programming it
        - iio: adc: ti_am335x_adc: Protect FIFO1 from concurrent access
        - iio: adc: ti_am335x_adc: Increase timeout value waiting for ADC sample
        - iio: ad799x: Fix buffered capture for ad7991/ad7995/ad7999
        - iio: adc: at91: unbreak channel adc channel 3
        - iio: accel: bmc150: reset chip at init time
        - iio: fix pressure data output unit in hid-sensor-attributes
        - iio: accel: kxsd9: Fix scaling bug
        - iio:core: fix IIO_VAL_FRACTIONAL sign handling
        - iio: ensure ret is initialized to zero before entering do loop
        - serial: 8250_mid: fix divide error bug if baud rate is 0
        - serial: 8250: added acces i/o products quad and octal serial cards
        - USB: serial: simple: add support for another Infineon flashloader
        - usb: renesas_usbhs: fix clearing the {BRDY,BEMP}STS condition
        - usb: chipidea: udc: fix NULL ptr dereference in isr_setup_status_phase
        - ARM: dts: STiH410: Handle interconnect clock required by EHCI/OHCI (USB)
        - USB: change bInterval default to 10 ms
        - net: thunderx: Fix OOPs with ethtool --register-dump
        - cpuset: make sure new tasks conform to the current config of the cpuset
        - ARM: AM43XX: hwmod: Fix RSTST register offset for pruss
        - ARM: imx6: add missing BM_CLPCR_BYP_MMDC_CH0_LPM_HS setting for imx6ul
        - ARM: imx6: add missing BM_CLPCR_BYPASS_PMIC_READY setting for imx6sx
        - ARM: kirkwood: ib62x0: fix size of u-boot environment partition
        - ARM: OMAP3: hwmod data: Add sysc information for DSI
        - ARM: dts: imx6qdl: Fix SPDIF regression
        - ARM: dts: overo: fix gpmc nand cs0 range
        - ARM: dts: overo: fix gpmc nand on boards with ethernet
        - ARM: dts: STiH407-family: Provide interconnect clock for consumption in ST
          SDHCI
        - bus: arm-ccn: Fix PMU handling of MN
        - bus: arm-ccn: Do not attempt to configure XPs for cycle counter
        - bus: arm-ccn: Fix XP watchpoint settings bitmask
        - dm log writes: fix check of kthread_run() return value
        - dm log writes: move IO accounting earlier to fix error path
        - dm crypt: fix error with too large bios
        - pinctrl: pistachio: fix mfio pll_lock pinmux
        - pinctrl: sunxi: fix uart1 CTS/RTS pins at PG on A23/A33
        - arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb()
        - crypto: cryptd - initialize child shash_desc on import
        - Btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns
        - fuse: direct-io: don't dirty ITER_BVEC pages
        - xhci: fix null pointer dereference in stop command timeout function
        - md-cluster: make md-cluster also can work when compiled into kernel
        - ath9k: fix using sta->drv_priv before initializing it
        - Revert "wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel"
        - sched/core: Fix a race between try_to_wake_up() and a woken up task
        - ipv6: addrconf: fix dev refcont leak when DAD failed
        - gma500: remove annoying deprecation warning
        - mpssd: fix buffer overflow warning
        - drm/i915: Avoid pointer arithmetic in calculating plane surface offset
        - mmc: dw_mmc: use resource_size_t to store physical address
        - pinctrl: at91-pio4: use %pr format string for resource
        - soc: qcom/spm: shut up uninitialized variable warning
        - kconfig: tinyconfig: provide whole choice blocks to avoid warnings
        - net: simplify napi_synchronize() to avoid warnings
        - drm: atmel-hlcdc: Fix vertical scaling
        - drm: Only use compat ioctl for addfb2 on X86/IA64
        - genirq: Provide irq_gc_{lock_irqsave,unlock_irqrestore}() helpers
        - irqchip/atmel-aic: Fix potential deadlock in ->xlate()
        - fix iov_iter_fault_in_readable()
        - microblaze: fix __get_user()
        - avr32: fix copy_from_user()
        - microblaze: fix copy_from_user()
        - fix minor infoleak in get_user_ex()
        - mn10300: failing __get_user() and get_user() should zero
        - m32r: fix __get_user()
        - sh64: failing __get_user() should zero
        - nios2: fix __get_user()
        - score: fix __get_user/get_user
        - s390: get_user() should zero on failure
        - ARC: uaccess: get_user to zero out dest in cause of fault
        - asm-generic: make get_user() clear the destination on errors
        - frv: fix clear_user()
        - cris: buggered copy_from_user/copy_to_user/clear_user
        - blackfin: fix copy_from_user()
        - score: fix copy_from_user() and friends
        - sh: fix copy_from_user()
        - hexagon: fix strncpy_from_user() error return
        - mips: copy_from_user() must zero the destination on access_ok() failure
        - asm-generic: make copy_from_user() zero the destination properly
        - alpha: fix copy_from_user()
        - metag: copy_from_user() should zero the destination on access_ok() failure
        - parisc: fix copy_from_user()
        - openrisc: fix copy_from_user()
        - nios2: copy_from_user() should zero the tail of destination
        - mn10300: copy_from_user() should zero on access_ok() failure...
        - sparc32: fix copy_from_user()
        - ppc32: fix copy_from_user()
        - genirq/msi: Fix broken debug output
        - ia64: copy_from_user() should zero the destination on access_ok() failure
        - avr32: fix 'undefined reference to `___copy_from_user'
        - openrisc: fix the fix of copy_from_user()
        - Linux 4.4.22
      * AES-XTS poor performance in Ubuntu 16.04 (LP: #1613295)
        - crypto: vmx - fix null dereference in p8_aes_xts_crypt
      * i40e/setting some ethtool features and remove module right after (modprobe
        -r) lead to crash in systems with more than 127 CPUs (LP: #1626782)
        - i40e: Fix errors resulted while turning off TSO
      * STC860:alpine-pdq:alpdq5p03: kernel panic when adding vnic (LP: #1626222)
        - ibmvnic: fix to use list_for_each_safe() when delete items
      * Stratton: ISST-LTE:UbuntuKVM: Failed to hotplug virtual devices to guest
        running Ubuntu 16.04.1 on UbuntuKVM16.04.1 #179 (LP: #1625986)
        - PCI: rpaphp: Fix slot registration for multiple slots under a PHB
      * nvme: Missing patch in Ubuntu-4.4.0-41.61 (LP: #1628520)
        - nvme: Call pci_disable_device on the error path.
    
     -- Seth Forshee <email address hidden>  Thu, 20 Oct 2016 11:33:44 -0500
  • linux-snapdragon (4.4.0-1032.36) xenial; urgency=low
    
      [ Ubuntu: 4.4.0-45.66 ]
    
      * CVE-2016-5195
        - SAUCE: mm: remove gup_flags FOLL_WRITE games from __get_user_pages()
      * srcname from mount rule corrupted under load (LP: #1634753)
        - SAUCE: apparmor: fix sleep in critical section
    
      [ Ubuntu: 4.4.0-43.63 ]
    
      * kswapd0 100% CPU usage (LP: #1518457)
        - SAUCE: (no-up) If zone is so small that watermarks are the same, stop zone
          balance.
    
     -- Stefan Bader <email address hidden>  Wed, 19 Oct 2016 13:25:51 +0200
  • linux-snapdragon (4.4.0-1029.32) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1628228
    
      [ Ubuntu: 4.4.0-41.61 ]
    
      * nvme drive probe failure (LP: #1626894)
        - (fix) NVMe: Don't unmap controller registers on reset
    
    linux-snapdragon (4.4.0-1028.31) xenial; urgency=low
    
      [ Ubuntu: 4.4.0-40.60 ]
    
      * Release Tracking Bug
        - LP: #1627077
      * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
        - Fix memory leaks in cifs_do_mount()
        - Compare prepaths when comparing superblocks
        - SAUCE: Fix regression which breaks DFS mounting
      * Backlight does not change when adjust it higher than 50% after S3
        (LP: #1625932)
        - SAUCE: i915_bpo: drm/i915/backlight: setup and cache pwm alternate
          increment value
        - SAUCE: i915_bpo: drm/i915/backlight: setup backlight pwm alternate
          increment on backlight enable
    
      [ Ubuntu: 4.4.0-39.59 ]
    
      * thunder: chip errata w/ multiple CQEs for a TSO packet (LP: #1624569)
        - net: thunderx: Fix for issues with multiple CQEs posted for a TSO packet
      * thunder: faulty TSO padding (LP: #1623627)
        - net: thunderx: Fix for HW issue while padding TSO packet
      * CVE-2016-6828
        - tcp: fix use after free in tcp_xmit_retransmit_queue()
      * Sennheiser Officerunner - cannot get freq at ep 0x83 (LP: #1622763)
        - SAUCE: (no-up) ALSA: usb-audio: Add quirk for sennheiser officerunner
      * Backport E3 Skylake Support in ie31200_edac to Xenial (LP: #1619766)
        - EDAC, ie31200_edac: Add Skylake support
      * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
        - SAUCE: nvme: Don't suspend admin queue that wasn't created
      * ISST-LTE:pNV: system ben is hung during ST (nvme) (LP: #1620317)
        - blk-mq: Allow timeouts to run while queue is freezing
        - blk-mq: improve warning for running a queue on the wrong CPU
        - blk-mq: don't overwrite rq->mq_ctx
      * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
        (LP: #1619918)
        - btrfs: bugfix: handle FS_IOC32_{GETFLAGS, SETFLAGS, GETVERSION} in
          btrfs_ioctl
      * radeon: monitor connected to onboard VGA doesn't work with Xenial
        (LP: #1600092)
        - drm/radeon/dp: add back special handling for NUTMEG
      * initramfs includes qle driver, but not firmware (LP: #1623187)
        - qed: add MODULE_FIRMWARE()
      * [Hyper-V] Rebase Hyper-V to 4.7.2 (stable) (LP: #1616677)
        - hv_netvsc: Implement support for VF drivers on Hyper-V
        - hv_netvsc: Fix the list processing for network change event
        - Drivers: hv: vmbus: Introduce functions for estimating room in the ring
          buffer
        - Drivers: hv: vmbus: Use READ_ONCE() to read variables that are volatile
        - Drivers: hv: vmbus: Export the vmbus_set_event() API
        - lcoking/barriers, arch: Use smp barriers in smp_store_release()
        - asm-generic: guard smp_store_release/load_acquire
        - x86: reuse asm-generic/barrier.h
        - asm-generic: add __smp_xxx wrappers
        - x86: define __smp_xxx
        - asm-generic: implement virt_xxx memory barriers
        - Drivers: hv: vmbus: Move some ring buffer functions to hyperv.h
        - Drivers: hv: vmbus: Implement APIs to support "in place" consumption of
          vmbus packets
        - drivers:hv: Lock access to hyperv_mmio resource tree
        - drivers:hv: Make a function to free mmio regions through vmbus
        - drivers:hv: Track allocations of children of hv_vmbus in private resource
          tree
        - drivers:hv: Separate out frame buffer logic when picking MMIO range
        - Drivers: hv: vmbus: handle various crash scenarios
        - Drivers: hv: balloon: don't crash when memory is added in non-sorted order
        - Drivers: hv: balloon: reset host_specified_ha_region
        - tools: hv: lsvmbus: add pci pass-through UUID
        - hv_netvsc: move start_remove flag to net_device_context
        - hv_netvsc: use start_remove flag to protect netvsc_link_change()
        - hv_netvsc: untangle the pointer mess
        - hv_netvsc: get rid of struct net_device pointer in struct netvsc_device
        - hv_netvsc: synchronize netvsc_change_mtu()/netvsc_set_channels() with
          netvsc_remove()
        - hv_netvsc: set nvdev link after populating chn_table
        - hv_netvsc: Fix VF register on vlan devices
        - hv_netvsc: remove redundant assignment in netvsc_recv_callback()
        - hv_netvsc: introduce {net, hv}_device_to_netvsc_device() helpers
        - hv_netvsc: pass struct netvsc_device to rndis_filter_{open, close}()
        - hv_netvsc: pass struct net_device to rndis_filter_set_device_mac()
        - hv_netvsc: pass struct net_device to rndis_filter_set_offload_params()
        - netvsc: get rid of completion timeouts
        - PCI: hv: Don't leak buffer in hv_pci_onchannelcallback()
        - PCI: hv: Handle all pending messages in hv_pci_onchannelcallback()
        - netvsc: Use the new in-place consumption APIs in the rx path
        - x86/kernel: Audit and remove any unnecessary uses of module.h
        - PCI: hv: Fix interrupt cleanup path
        - hv_netvsc: Fix VF register on bonding devices
        - hv_netvsc: don't lose VF information
        - hv_netvsc: avoid deadlocks between rtnl lock and vf_use_cnt wait
        - hv_netvsc: reset vf_inject on VF removal
        - hv_netvsc: protect module refcount by checking net_device_ctx->vf_netdev
        - hv_netvsc: fix bonding devices check in netvsc_netdev_event()
        - Drivers: hv: vmbus: Use the new virt_xx barrier code
        - ixgbevf: call ndo_stop() instead of dev_close() when running offline
          selftest
        - ixgbevf: fix error code path when setting MAC address
        - ixgbevf: use bit operations for setting and checking resets
        - ixgbevf: Add support for generic Tx checksums
        - ixgbe/ixgbevf: Add support for bulk free in Tx cleanup & cleanup boolean
          logic
        - ixgbevf: refactor ethtool stats handling
        - ixgbevf: add support for per-queue ethtool stats
        - ixgbevf: make use of BIT() macro to avoid shift of signed values
        - ixgbevf: Move API negotiation function into mac_ops
        - ixgbevf: Add the device ID's presented while running on Hyper-V
        - ixgbevf: Support Windows hosts (Hyper-V)
        - ixgbevf: Change the relaxed order settings in VF driver for sparc
        - ixgbevf: Use mac_ops instead of trying to identify NIC type
      * New device ID for Kabypoint (LP: #1622469)
        - mfd: lpss: Add Intel Kaby Lake PCH-H PCI IDs
        - SAUCE: i2c: i801: Add support for Kaby Lake PCH-H
      * Xenial update to v4.4.21 stable release (LP: #1624037)
        - Revert "i40e: fix: do not sleep in netdev_ops"
        - fs: Check for invalid i_uid in may_follow_link()
        - netfilter: x_tables: check for size overflow
        - ext4: validate that metadata blocks do not overlap superblock
        - ext4: fix xattr shifting when expanding inodes
        - ext4: fix xattr shifting when expanding inodes part 2
        - ext4: properly align shifted xattrs when expanding inodes
        - ext4: avoid deadlock when expanding inode size
        - ext4: avoid modifying checksum fields directly during checksum verification
        - block: Fix race triggered by blk_set_queue_dying()
        - block: make sure a big bio is split into at most 256 bvecs
        - cgroup: reduce read locked section of cgroup_threadgroup_rwsem during fork
        - s390/sclp_ctl: fix potential information leak with /dev/sclp
        - drm/radeon: fix radeon_move_blit on 32bit systems
        - drm: Reject page_flip for !DRIVER_MODESET
        - drm/msm: fix use of copy_from_user() while holding spinlock
        - ASoC: atmel_ssc_dai: Don't unconditionally reset SSC on stream startup
        - xfs: fix superblock inprogress check
        - timekeeping: Cap array access in timekeeping_debug
        - timekeeping: Avoid taking lock in NMI path with CONFIG_DEBUG_TIMEKEEPING
        - lustre: remove unused declaration
        - wrappers for ->i_mutex access
        - ovl: don't copy up opaqueness
        - ovl: remove posix_acl_default from workdir
        - ovl: listxattr: use strnlen()
        - ovl: fix workdir creation
        - ubifs: Fix assertion in layout_in_gaps()
        - bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power of
          two.
        - vhost/scsi: fix reuse of &vq->iov[out] in response
        - x86/apic: Do not init irq remapping if ioapic is disabled
        - uprobes: Fix the memcg accounting
        - crypto: caam - fix IV loading for authenc (giv)decryption
        - ALSA: usb-audio: Add sample rate inquiry quirk for B850V3 CP2114
        - ALSA: firewire-tascam: accessing to user space outside spinlock
        - ALSA: fireworks: accessing to user space outside spinlock
        - ALSA: rawmidi: Fix possible deadlock with virmidi registration
        - ALSA: hda - Add headset mic quirk for Dell Inspiron 5468
        - ALSA: hda - Enable subwoofer on Dell Inspiron 7559
        - ALSA: timer: fix NULL pointer dereference in read()/ioctl() race
        - ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE
        - ALSA: timer: fix NULL pointer dereference on memory allocation failure
        - scsi: fix upper bounds check of sense key in scsi_sense_key_string()
        - metag: Fix atomic_*_return inline asm constraints
        - cpufreq: Fix GOV_LIMITS handling for the userspace governor
        - hwrng: exynos - Disable runtime PM on probe failure
        - regulator: anatop: allow regulator to be in bypass mode
        - lib/mpi: mpi_write_sgl(): fix skipping of leading zero limbs
        - Linux 4.4.21
      * Headset mic detection on some variants of Dell Inspiron 5468 (LP: #1617900)
        - ALSA: hda - Add headset mic quirk for Dell Inspiron 5468
      * Xenial update to v4.4.20 stable release (LP: #1621113)
        - hugetlb: fix nr_pmds accounting with shared page tables
        - x86/mm: Disable preemption during CR3 read+write
        - uprobes/x86: Fix RIP-relative handling of EVEX-encoded instructions
        - tools/testing/nvdimm: fix SIGTERM vs hotplug crash
        - SUNRPC: Handle EADDRNOTAVAIL on connection failures
        - SUNRPC: allow for upcalls for same uid but different gss service
        - powerpc/eeh: eeh_pci_enable(): fix checking of post-request state
        - ALSA: usb-audio: Add a sample rate quirk for Creative Live! Cam Socialize HD
          (VF0610)
        - ALSA: usb-audio: Add quirk for ELP HD USB Camera
        - arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
        - parisc: Fix order of EREFUSED define in errno.h
        - virtio: fix memory leak in virtqueue_add()
        - vfio/pci: Fix NULL pointer oops in error interrupt setup handling
        - perf intel-pt: Fix occasional decoding errors when tracing system-wide
        - libnvdimm, nd_blk: mask off reserved status bits
        - ALSA: hda - Manage power well properly for resume
        - NVMe: Don't unmap controller registers on reset
        - PCI: Support PCIe devices with short cfg_size
        - PCI: Add Netronome vendor and device IDs
        - PCI: Limit config space size for Netronome NFP6000 family
        - PCI: Add Netronome NFP4000 PF device ID
        - PCI: Limit config space size for Netronome NFP4000
        - mmc: sdhci-acpi: Reduce Baytrail eMMC/SD/SDIO hangs
        - ACPI: CPPC: Return error if _CPC is invalid on a CPU
        - ACPI / CPPC: Prevent cpc_desc_ptr points to the invalid data
        - um: Don't discard .text.exit section
        - genirq/msi: Remove unused MSI_FLAG_IDENTITY_MAP
        - genirq/msi: Make sure PCI MSIs are activated early
        - crypto: caam - fix non-hmac hashes
        - crypto: caam - fix echainiv(authenc) encrypt shared descriptor
        - crypto: caam - defer aead_set_sh_desc in case of zero authsize
        - usb: ehci: change order of register cleanup during shutdown
        - usb: misc: usbtest: add fix for driver hang
        - usb: dwc3: pci: add Intel Kabylake PCI ID
        - usb: dwc3: gadget: increment request->actual once
        - usb: hub: Fix unbalanced reference count/memory leak/deadlocks
        - USB: hub: fix up early-exit pathway in hub_activate
        - USB: hub: change the locking in hub_activate
        - usb: renesas_usbhs: clear the BRDYSTS in usbhsg_ep_enable()
        - usb: renesas_usbhs: Use dmac only if the pipe type is bulk
        - USB: validate wMaxPacketValue entries in endpoint descriptors
        - usb: gadget: fsl_qe_udc: off by one in setup_received_handle()
        - usb/gadget: fix gadgetfs aio support.
        - xhci: always handle "Command Ring Stopped" events
        - usb: xhci: Fix panic if disconnect
        - xhci: don't dereference a xhci member after removing xhci
        - USB: serial: fix memleak in driver-registration error path
        - USB: serial: option: add D-Link DWM-156/A3
        - USB: serial: option: add support for Telit LE920A4
        - USB: serial: ftdi_sio: add device ID for WICED USB UART dev board
        - USB: serial: ftdi_sio: add PIDs for Ivium Technologies devices
        - iommu/dma: Don't put uninitialised IOVA domains
        - iommu/arm-smmu: Fix CMDQ error handling
        - iommu/arm-smmu: Don't BUG() if we find aborting STEs with disable_bypass
        - pinctrl/amd: Remove the default de-bounce time
        - EDAC: Increment correct counter in edac_inc_ue_error()
        - s390/dasd: fix hanging device after clear subchannel
        - mac80211: fix purging multicast PS buffer queue
        - arm64: dts: rockchip: add reset saradc node for rk3368 SoCs
        - of: fix reference counting in of_graph_get_endpoint_by_regs
        - sched/cputime: Fix NO_HZ_FULL getrusage() monotonicity regression
        - sched/nohz: Fix affine unpinned timers mess
        - iio: fix sched WARNING "do not call blocking ops when !TASK_RUNNING"
        - drm/amdgpu: Change GART offset to 64-bit
        - drm/amdgpu: fix amdgpu_move_blit on 32bit systems
        - drm/amdgpu: avoid a possible array overflow
        - drm/amdgpu: skip TV/CV in display parsing
        - drm/amd/amdgpu: sdma resume fail during S4 on CI
        - drm/amdgpu: record error code when ring test failed
        - drm/i915: fix aliasing_ppgtt leak
        - ARC: build: Better way to detect ISA compatible toolchain
        - ARC: use correct offset in pt_regs for saving/restoring user mode r25
        - ARC: Call trace_hardirqs_on() before enabling irqs
        - ARC: Elide redundant setup of DMA callbacks
        - aacraid: Check size values after double-fetch from user
        - mfd: cros_ec: Add cros_ec_cmd_xfer_status() helper
        - i2c: cros-ec-tunnel: Fix usage of cros_ec_cmd_xfer()
        - cdc-acm: fix wrong pipe type on rx interrupt xfers
        - mpt3sas: Fix resume on WarpDrive flash cards
        - megaraid_sas: Fix probing cards without io port
        - usb: renesas_usbhs: gadget: fix return value check in
          usbhs_mod_gadget_probe()
        - gpio: Fix OF build problem on UM
        - fs/seq_file: fix out-of-bounds read
        - btrfs: waiting on qgroup rescan should not always be interruptible
        - btrfs: properly track when rescan worker is running
        - Input: tegra-kbc - fix inverted reset logic
        - Input: i8042 - break load dependency between atkbd/psmouse and i8042
        - Input: i8042 - set up shared ps2_cmd_mutex for AUX ports
        - crypto: nx - off by one bug in nx_of_update_msc()
        - crypto: qat - fix aes-xts key sizes
        - dmaengine: usb-dmac: check CHCR.DE bit in usb_dmac_isr_channel()
        - USB: avoid left shift by -1
        - usb: chipidea: udc: don't touch DP when controller is in host mode
        - USB: fix typo in wMaxPacketSize validation
        - USB: serial: mos7720: fix non-atomic allocation in write path
        - USB: serial: mos7840: fix non-atomic allocation in write path
        - USB: serial: option: add WeTelecom WM-D200
        - USB: serial: option: add WeTelecom 0x6802 and 0x6803 products
        - staging: comedi: daqboard2000: bug fix board type matching code
        - staging: comedi: comedi_test: fix timer race conditions
        - staging: comedi: ni_mio_common: fix AO inttrig backwards compatibility
        - staging: comedi: ni_mio_common: fix wrong insn_write handler
        - ACPI / drivers: fix typo in ACPI_DECLARE_PROBE_ENTRY macro
        - ACPI / drivers: replace acpi_probe_lock spinlock with mutex
        - ACPI / sysfs: fix error code in get_status()
        - ACPI / SRAT: fix SRAT parsing order with both LAPIC and X2APIC present
        - ALSA: line6: Remove double line6_pcm_release() after failed acquire.
        - ALSA: line6: Give up on the lock while URBs are released.
        - ALSA: line6: Fix POD sysfs attributes segfault
        - hwmon: (iio_hwmon) fix memory leak in name attribute
        - sysfs: correctly handle read offset on PREALLOC attrs
        - Linux 4.4.20
      * Failed to acknowledge elog: /sys/firmware/opal/elog/0x5018d709/acknowledge
        (2:No such file or directory) (LP: #1619552)
        - powerpc/powernv : Drop reference added by kset_find_obj()
      * backport support for userspace access of DP aux devices (LP: #1619756)
        - drm/dp: Add a drm_aux-dev module for reading/writing dpcd registers.
        - drm/dp: Allow signals to interrupt drm_aux-dev reads/writes
        - [Config] CONFIG_DRM_DP_AUX_CHARDEV=y
      * Enable virtual scsi server driver for Power (LP: #1615665)
        - SAUCE: Ibmvscsis: Properly deregister target sessions
        - SAUCE: Return TCMU-generated sense data to fabric module
        - SAUCE: Ibmvscsis: Code cleanup of print statements
        - SAUCE: Ibmvscsis: Fixed a bug reported by Dan Carpenter
      * ISST-LTE: system dropped into xmon at pcibios_release_device+0x5c/0x80
        during running dlpar test on monklp3 (LP: #1618151)
        - powerpc/pseries: use pci_host_bridge.release_fn() to kfree(phb)
      * Kernel Build Fails for Fuse Module (LP: #1617550)
        - SAUCE: (namespace) userns: Export current_in_userns to modules
      * boot-time kernel panic introduced in 4.4.0-18, not present in 4.4.0-15
        (LP: #1572630)
        - blk-mq: Reuse hardware context cpumask for tags
        - blk-mq: Use proper cpumask iterator
    
    linux-snapdragon (4.4.0-1027.30) xenial; urgency=low
    
      [ Joseph Salisbury ]
    
      * Release Tracking Bug
        - LP: #1625328
    
      * thunder: chip errata w/ multiple CQEs for a TSO packet (LP: #1624569)
        - net: thunderx: Fix for issues with multiple CQEs posted for a TSO packet
    
      * thunder: faulty TSO padding (LP: #1623627)
        - net: thunderx: Fix for HW issue while padding TSO packet
    
      * CVE-2016-6828
        - tcp: fix use after free in tcp_xmit_retransmit_queue()
    
      * Sennheiser Officerunner - cannot get freq at ep 0x83 (LP: #1622763)
        - SAUCE: (no-up) ALSA: usb-audio: Add quirk for sennheiser officerunner
    
      * Backport E3 Skylake Support in ie31200_edac to Xenial (LP: #1619766)
        - EDAC, ie31200_edac: Add Skylake support
    
      * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
        - SAUCE: nvme: Don't suspend admin queue that wasn't created
    
      * ISST-LTE:pNV: system ben is hung during ST (nvme) (LP: #1620317)
        - blk-mq: Allow timeouts to run while queue is freezing
        - blk-mq: improve warning for running a queue on the wrong CPU
        - blk-mq: don't overwrite rq->mq_ctx
    
      * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
        (LP: #1619918)
        - btrfs: bugfix: handle FS_IOC32_{GETFLAGS, SETFLAGS, GETVERSION} in
          btrfs_ioctl
    
      * radeon: monitor connected to onboard VGA doesn't work with Xenial
        (LP: #1600092)
        - drm/radeon/dp: add back special handling for NUTMEG
    
      * initramfs includes qle driver, but not firmware (LP: #1623187)
        - qed: add MODULE_FIRMWARE()
    
      * [Hyper-V] Rebase Hyper-V to 4.7.2 (stable) (LP: #1616677)
        - hv_netvsc: Implement support for VF drivers on Hyper-V
        - hv_netvsc: Fix the list processing for network change event
        - Drivers: hv: vmbus: Introduce functions for estimating room in the ring
          buffer
        - Drivers: hv: vmbus: Use READ_ONCE() to read variables that are volatile
        - Drivers: hv: vmbus: Export the vmbus_set_event() API
        - lcoking/barriers, arch: Use smp barriers in smp_store_release()
        - asm-generic: guard smp_store_release/load_acquire
        - x86: reuse asm-generic/barrier.h
        - asm-generic: add __smp_xxx wrappers
        - x86: define __smp_xxx
        - asm-generic: implement virt_xxx memory barriers
        - Drivers: hv: vmbus: Move some ring buffer functions to hyperv.h
        - Drivers: hv: vmbus: Implement APIs to support "in place" consumption of
          vmbus packets
        - drivers:hv: Lock access to hyperv_mmio resource tree
        - drivers:hv: Make a function to free mmio regions through vmbus
        - drivers:hv: Track allocations of children of hv_vmbus in private resource
          tree
        - drivers:hv: Separate out frame buffer logic when picking MMIO range
        - Drivers: hv: vmbus: handle various crash scenarios
        - Drivers: hv: balloon: don't crash when memory is added in non-sorted order
        - Drivers: hv: balloon: reset host_specified_ha_region
        - tools: hv: lsvmbus: add pci pass-through UUID
        - hv_netvsc: move start_remove flag to net_device_context
        - hv_netvsc: use start_remove flag to protect netvsc_link_change()
        - hv_netvsc: untangle the pointer mess
        - hv_netvsc: get rid of struct net_device pointer in struct netvsc_device
        - hv_netvsc: synchronize netvsc_change_mtu()/netvsc_set_channels() with
          netvsc_remove()
        - hv_netvsc: set nvdev link after populating chn_table
        - hv_netvsc: Fix VF register on vlan devices
        - hv_netvsc: remove redundant assignment in netvsc_recv_callback()
        - hv_netvsc: introduce {net, hv}_device_to_netvsc_device() helpers
        - hv_netvsc: pass struct netvsc_device to rndis_filter_{open, close}()
        - hv_netvsc: pass struct net_device to rndis_filter_set_device_mac()
        - hv_netvsc: pass struct net_device to rndis_filter_set_offload_params()
        - netvsc: get rid of completion timeouts
        - PCI: hv: Don't leak buffer in hv_pci_onchannelcallback()
        - PCI: hv: Handle all pending messages in hv_pci_onchannelcallback()
        - netvsc: Use the new in-place consumption APIs in the rx path
        - x86/kernel: Audit and remove any unnecessary uses of module.h
        - PCI: hv: Fix interrupt cleanup path
        - hv_netvsc: Fix VF register on bonding devices
        - hv_netvsc: don't lose VF information
        - hv_netvsc: avoid deadlocks between rtnl lock and vf_use_cnt wait
        - hv_netvsc: reset vf_inject on VF removal
        - hv_netvsc: protect module refcount by checking net_device_ctx->vf_netdev
        - hv_netvsc: fix bonding devices check in netvsc_netdev_event()
        - Drivers: hv: vmbus: Use the new virt_xx barrier code
        - ixgbevf: call ndo_stop() instead of dev_close() when running offline
          selftest
        - ixgbevf: fix error code path when setting MAC address
        - ixgbevf: use bit operations for setting and checking resets
        - ixgbevf: Add support for generic Tx checksums
        - ixgbe/ixgbevf: Add support for bulk free in Tx cleanup & cleanup boolean
          logic
        - ixgbevf: refactor ethtool stats handling
        - ixgbevf: add support for per-queue ethtool stats
        - ixgbevf: make use of BIT() macro to avoid shift of signed values
        - ixgbevf: Move API negotiation function into mac_ops
        - ixgbevf: Add the device ID's presented while running on Hyper-V
        - ixgbevf: Support Windows hosts (Hyper-V)
        - ixgbevf: Change the relaxed order settings in VF driver for sparc
        - ixgbevf: Use mac_ops instead of trying to identify NIC type
    
      * New device ID for Kabypoint (LP: #1622469)
        - mfd: lpss: Add Intel Kaby Lake PCH-H PCI IDs
        - SAUCE: i2c: i801: Add support for Kaby Lake PCH-H
    
      * Xenial update to v4.4.21 stable release (LP: #1624037)
        - Revert "i40e: fix: do not sleep in netdev_ops"
        - fs: Check for invalid i_uid in may_follow_link()
        - netfilter: x_tables: check for size overflow
        - ext4: validate that metadata blocks do not overlap superblock
        - ext4: fix xattr shifting when expanding inodes
        - ext4: fix xattr shifting when expanding inodes part 2
        - ext4: properly align shifted xattrs when expanding inodes
        - ext4: avoid deadlock when expanding inode size
        - ext4: avoid modifying checksum fields directly during checksum verification
        - block: Fix race triggered by blk_set_queue_dying()
        - block: make sure a big bio is split into at most 256 bvecs
        - cgroup: reduce read locked section of cgroup_threadgroup_rwsem during fork
        - s390/sclp_ctl: fix potential information leak with /dev/sclp
        - drm/radeon: fix radeon_move_blit on 32bit systems
        - drm: Reject page_flip for !DRIVER_MODESET
        - drm/msm: fix use of copy_from_user() while holding spinlock
        - ASoC: atmel_ssc_dai: Don't unconditionally reset SSC on stream startup
        - xfs: fix superblock inprogress check
        - timekeeping: Cap array access in timekeeping_debug
        - timekeeping: Avoid taking lock in NMI path with CONFIG_DEBUG_TIMEKEEPING
        - lustre: remove unused declaration
        - wrappers for ->i_mutex access
        - ovl: don't copy up opaqueness
        - ovl: remove posix_acl_default from workdir
        - ovl: listxattr: use strnlen()
        - ovl: fix workdir creation
        - ubifs: Fix assertion in layout_in_gaps()
        - bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power of
          two.
        - vhost/scsi: fix reuse of &vq->iov[out] in response
        - x86/apic: Do not init irq remapping if ioapic is disabled
        - uprobes: Fix the memcg accounting
        - crypto: caam - fix IV loading for authenc (giv)decryption
        - ALSA: usb-audio: Add sample rate inquiry quirk for B850V3 CP2114
        - ALSA: firewire-tascam: accessing to user space outside spinlock
        - ALSA: fireworks: accessing to user space outside spinlock
        - ALSA: rawmidi: Fix possible deadlock with virmidi registration
        - ALSA: hda - Add headset mic quirk for Dell Inspiron 5468
        - ALSA: hda - Enable subwoofer on Dell Inspiron 7559
        - ALSA: timer: fix NULL pointer dereference in read()/ioctl() race
        - ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE
        - ALSA: timer: fix NULL pointer dereference on memory allocation failure
        - scsi: fix upper bounds check of sense key in scsi_sense_key_string()
        - metag: Fix atomic_*_return inline asm constraints
        - cpufreq: Fix GOV_LIMITS handling for the userspace governor
        - hwrng: exynos - Disable runtime PM on probe failure
        - regulator: anatop: allow regulator to be in bypass mode
        - lib/mpi: mpi_write_sgl(): fix skipping of leading zero limbs
        - Linux 4.4.21
    
      * Headset mic detection on some variants of Dell Inspiron 5468 (LP: #1617900)
        - ALSA: hda - Add headset mic quirk for Dell Inspiron 5468
    
      * Xenial update to v4.4.20 stable release (LP: #1621113)
        - hugetlb: fix nr_pmds accounting with shared page tables
        - x86/mm: Disable preemption during CR3 read+write
        - uprobes/x86: Fix RIP-relative handling of EVEX-encoded instructions
        - tools/testing/nvdimm: fix SIGTERM vs hotplug crash
        - SUNRPC: Handle EADDRNOTAVAIL on connection failures
        - SUNRPC: allow for upcalls for same uid but different gss service
        - powerpc/eeh: eeh_pci_enable(): fix checking of post-request state
        - ALSA: usb-audio: Add a sample rate quirk for Creative Live! Cam Socialize HD
          (VF0610)
        - ALSA: usb-audio: Add quirk for ELP HD USB Camera
        - arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
        - parisc: Fix order of EREFUSED define in errno.h
        - virtio: fix memory leak in virtqueue_add()
        - vfio/pci: Fix NULL pointer oops in error interrupt setup handling
        - perf intel-pt: Fix occasional decoding errors when tracing system-wide
        - libnvdimm, nd_blk: mask off reserved status bits
        - ALSA: hda - Manage power well properly for resume
        - NVMe: Don't unmap controller registers on reset
        - PCI: Support PCIe devices with short cfg_size
        - PCI: Add Netronome vendor and device IDs
        - PCI: Limit config space size for Netronome NFP6000 family
        - PCI: Add Netronome NFP4000 PF device ID
        - PCI: Limit config space size for Netronome NFP4000
        - mmc: sdhci-acpi: Reduce Baytrail eMMC/SD/SDIO hangs
        - ACPI: CPPC: Return error if _CPC is invalid on a CPU
        - ACPI / CPPC: Prevent cpc_desc_ptr points to the invalid data
        - um: Don't discard .text.exit section
        - genirq/msi: Remove unused MSI_FLAG_IDENTITY_MAP
        - genirq/msi: Make sure PCI MSIs are activated early
        - crypto: caam - fix non-hmac hashes
        - crypto: caam - fix echainiv(authenc) encrypt shared descriptor
        - crypto: caam - defer aead_set_sh_desc in case of zero authsize
        - usb: ehci: change order of register cleanup during shutdown
        - usb: misc: usbtest: add fix for driver hang
        - usb: dwc3: pci: add Intel Kabylake PCI ID
        - usb: dwc3: gadget: increment request->actual once
        - usb: hub: Fix unbalanced reference count/memory leak/deadlocks
        - USB: hub: fix up early-exit pathway in hub_activate
        - USB: hub: change the locking in hub_activate
        - usb: renesas_usbhs: clear the BRDYSTS in usbhsg_ep_enable()
        - usb: renesas_usbhs: Use dmac only if the pipe type is bulk
        - USB: validate wMaxPacketValue entries in endpoint descriptors
        - usb: gadget: fsl_qe_udc: off by one in setup_received_handle()
        - usb/gadget: fix gadgetfs aio support.
        - xhci: always handle "Command Ring Stopped" events
        - usb: xhci: Fix panic if disconnect
        - xhci: don't dereference a xhci member after removing xhci
        - USB: serial: fix memleak in driver-registration error path
        - USB: serial: option: add D-Link DWM-156/A3
        - USB: serial: option: add support for Telit LE920A4
        - USB: serial: ftdi_sio: add device ID for WICED USB UART dev board
        - USB: serial: ftdi_sio: add PIDs for Ivium Technologies devices
        - iommu/dma: Don't put uninitialised IOVA domains
        - iommu/arm-smmu: Fix CMDQ error handling
        - iommu/arm-smmu: Don't BUG() if we find aborting STEs with disable_bypass
        - pinctrl/amd: Remove the default de-bounce time
        - EDAC: Increment correct counter in edac_inc_ue_error()
        - s390/dasd: fix hanging device after clear subchannel
        - mac80211: fix purging multicast PS buffer queue
        - arm64: dts: rockchip: add reset saradc node for rk3368 SoCs
        - of: fix reference counting in of_graph_get_endpoint_by_regs
        - sched/cputime: Fix NO_HZ_FULL getrusage() monotonicity regression
        - sched/nohz: Fix affine unpinned timers mess
        - iio: fix sched WARNING "do not call blocking ops when !TASK_RUNNING"
        - drm/amdgpu: Change GART offset to 64-bit
        - drm/amdgpu: fix amdgpu_move_blit on 32bit systems
        - drm/amdgpu: avoid a possible array overflow
        - drm/amdgpu: skip TV/CV in display parsing
        - drm/amd/amdgpu: sdma resume fail during S4 on CI
        - drm/amdgpu: record error code when ring test failed
        - drm/i915: fix aliasing_ppgtt leak
        - ARC: build: Better way to detect ISA compatible toolchain
        - ARC: use correct offset in pt_regs for saving/restoring user mode r25
        - ARC: Call trace_hardirqs_on() before enabling irqs
        - ARC: Elide redundant setup of DMA callbacks
        - aacraid: Check size values after double-fetch from user
        - mfd: cros_ec: Add cros_ec_cmd_xfer_status() helper
        - i2c: cros-ec-tunnel: Fix usage of cros_ec_cmd_xfer()
        - cdc-acm: fix wrong pipe type on rx interrupt xfers
        - mpt3sas: Fix resume on WarpDrive flash cards
        - megaraid_sas: Fix probing cards without io port
        - usb: renesas_usbhs: gadget: fix return value check in
          usbhs_mod_gadget_probe()
        - gpio: Fix OF build problem on UM
        - fs/seq_file: fix out-of-bounds read
        - btrfs: waiting on qgroup rescan should not always be interruptible
        - btrfs: properly track when rescan worker is running
        - Input: tegra-kbc - fix inverted reset logic
        - Input: i8042 - break load dependency between atkbd/psmouse and i8042
        - Input: i8042 - set up shared ps2_cmd_mutex for AUX ports
        - crypto: nx - off by one bug in nx_of_update_msc()
        - crypto: qat - fix aes-xts key sizes
        - dmaengine: usb-dmac: check CHCR.DE bit in usb_dmac_isr_channel()
        - USB: avoid left shift by -1
        - usb: chipidea: udc: don't touch DP when controller is in host mode
        - USB: fix typo in wMaxPacketSize validation
        - USB: serial: mos7720: fix non-atomic allocation in write path
        - USB: serial: mos7840: fix non-atomic allocation in write path
        - USB: serial: option: add WeTelecom WM-D200
        - USB: serial: option: add WeTelecom 0x6802 and 0x6803 products
        - staging: comedi: daqboard2000: bug fix board type matching code
        - staging: comedi: comedi_test: fix timer race conditions
        - staging: comedi: ni_mio_common: fix AO inttrig backwards compatibility
        - staging: comedi: ni_mio_common: fix wrong insn_write handler
        - ACPI / drivers: fix typo in ACPI_DECLARE_PROBE_ENTRY macro
        - ACPI / drivers: replace acpi_probe_lock spinlock with mutex
        - ACPI / sysfs: fix error code in get_status()
        - ACPI / SRAT: fix SRAT parsing order with both LAPIC and X2APIC present
        - ALSA: line6: Remove double line6_pcm_release() after failed acquire.
        - ALSA: line6: Give up on the lock while URBs are released.
        - ALSA: line6: Fix POD sysfs attributes segfault
        - hwmon: (iio_hwmon) fix memory leak in name attribute
        - sysfs: correctly handle read offset on PREALLOC attrs
        - Linux 4.4.20
    
      * Failed to acknowledge elog: /sys/firmware/opal/elog/0x5018d709/acknowledge
        (2:No such file or directory) (LP: #1619552)
        - powerpc/powernv : Drop reference added by kset_find_obj()
    
      * backport support for userspace access of DP aux devices (LP: #1619756)
        - drm/dp: Add a drm_aux-dev module for reading/writing dpcd registers.
        - drm/dp: Allow signals to interrupt drm_aux-dev reads/writes
        - [Config] CONFIG_DRM_DP_AUX_CHARDEV=y
    
      * Enable virtual scsi server driver for Power (LP: #1615665)
        - SAUCE: Ibmvscsis: Properly deregister target sessions
        - SAUCE: Return TCMU-generated sense data to fabric module
        - SAUCE: Ibmvscsis: Code cleanup of print statements
        - SAUCE: Ibmvscsis: Fixed a bug reported by Dan Carpenter
    
      * ISST-LTE: system dropped into xmon at pcibios_release_device+0x5c/0x80
        during running dlpar test on monklp3 (LP: #1618151)
        - powerpc/pseries: use pci_host_bridge.release_fn() to kfree(phb)
    
      * Kernel Build Fails for Fuse Module (LP: #1617550)
        - SAUCE: (namespace) userns: Export current_in_userns to modules
    
      * boot-time kernel panic introduced in 4.4.0-18, not present in 4.4.0-15
        (LP: #1572630)
        - blk-mq: Reuse hardware context cpumask for tags
        - blk-mq: Use proper cpumask iterator
    
     -- Kamal Mostafa <email address hidden>  Tue, 27 Sep 2016 10:10:15 -0700
  • linux-snapdragon (4.4.0-1022.25) xenial; urgency=low
    
      [ Seth Forshee ]
    
      * Release Tracking Bug
        - LP: #1605716
    
      [ Ubuntu: 4.4.0-33.52 ]
    
      * Release Tracking Bug
        - LP: #1605709
      * [regression] NFS client: access problems after updating to kernel
        4.4.0-31-generic (LP: #1603719)
        - SAUCE: (namespace) Bypass sget() capability check for nfs
    
    linux-snapdragon (4.4.0-1021.24) xenial; urgency=low
    
      [ Seth Forshee ]
    
      * Release Tracking Bug
        - LP: #1604458
    
      * Drop superseded namespace mount patches (LP: #1604830)
        - UBUNTU: SAUCE: fs: Ensure the mounter of a filesystem is privileged towards its inodes
        - UBUNTU: SAUCE: quota: Treat superblock owner as privilged
        - UBUNTU: SAUCE: kernfs: Always set super block owner to init_user_ns
        - UBUNTU: SAUCE: proc: Always set super block owner to init_user_ns
    
      * UBUNTU: [Config] updateconfigs after 4.4.0-32.51 rebase (LP: #1603483)
    
      [ Kamal Mostafa ]
    
      * [Debian] embed derivative target name in release tag (LP: #1599924)
    
      [ Ubuntu: 4.4.0-32.51 ]
    
      * Release Tracking Bug
        - LP: #1604443
      * thinkpad yoga 260 wacom touchscreen not working (LP: #1603975)
        - HID: wacom: break out parsing of device and registering of input
        - HID: wacom: Initialize hid_data.inputmode to -1
        - HID: wacom: Support switching from vendor-defined device mode on G9 and G11
      * changelog: add CVEs as first class citizens (LP: #1604344)
        - use CVE numbers in changelog
      * [Xenial] Include Huawei PCIe SSD hio kernel driver (LP: #1603483)
        - SAUCE: import Huawei ES3000_V2 (2.1.0.23)
        - SAUCE: hio: bio_endio() no longer takes errors arg
        - SAUCE: hio: blk_queue make_request_fn now returns a blk_qc_t
        - SAUCE: hio: use alloc_cpumask_var to avoid -Wframe-larger-than
        - SAUCE: hio: fix mask maybe-uninitialized warning
        - [config] enable CONFIG_HIO (Huawei ES3000_V2 PCIe SSD driver)
        - SAUCE: hio: Makefile and Kconfig
      * CVE-2016-5243 (LP: #1589036)
        - tipc: fix an infoleak in tipc_nl_compat_link_dump
        - tipc: fix nl compat regression for link statistics
      * CVE-2016-4470
        - KEYS: potential uninitialized variable
      * integer overflow in xt_alloc_table_info (LP: #1555353)
        - netfilter: x_tables: check for size overflow
      * CVE-2016-3135:
        - Revert "UBUNTU: SAUCE: (noup) netfilter: x_tables: check for size overflow"
      * CVE-2016-4440 (LP: #1584192)
        - kvm:vmx: more complete state update on APICv on/off
      * the system hangs in the dma driver when reboot or shutdown on a baytrail-m
        laptop (LP: #1602579)
        - dmaengine: dw: platform: power on device on shutdown
        - ACPI / LPSS: override power state for LPSS DMA device
      * Add proper  palm detection support for MS Precision Touchpad (LP: #1593124)
        - Revert "HID: multitouch: enable palm rejection if device implements
          confidence usage"
        - HID: multitouch: enable palm rejection for Windows Precision Touchpad
      * Add support for Intel 8265 Bluetooth ([8087:0A2B]) (LP: #1599068)
        - Bluetooth: Add support for Intel Bluetooth device 8265 [8087:0a2b]
      * CVE-2016-4794 (LP: #1581871)
        - percpu: fix synchronization between chunk->map_extend_work and chunk
          destruction
        - percpu: fix synchronization between synchronous map extension and chunk
          destruction
      * Xenial update to v4.4.15 stable release (LP: #1601952)
        - net_sched: fix pfifo_head_drop behavior vs backlog
        - net: Don't forget pr_fmt on net_dbg_ratelimited for CONFIG_DYNAMIC_DEBUG
        - sit: correct IP protocol used in ipip6_err
        - esp: Fix ESN generation under UDP encapsulation
        - netem: fix a use after free
        - ipmr/ip6mr: Initialize the last assert time of mfc entries.
        - Bridge: Fix ipv6 mc snooping if bridge has no ipv6 address
        - sock_diag: do not broadcast raw socket destruction
        - bpf, perf: delay release of BPF prog after grace period
        - neigh: Explicitly declare RCU-bh read side critical section in neigh_xmit()
        - net: macb: fix default configuration for GMAC on AT91
        - net: alx: Work around the DMA RX overflow issue
        - bpf: try harder on clones when writing into skb
        - AX.25: Close socket connection on session completion
        - crypto: ux500 - memmove the right size
        - crypto: user - re-add size check for CRYPTO_MSG_GETALG
        - USB: uas: Fix slave queue_depth not being set
        - usb: quirks: Fix sorting
        - usb: quirks: Add no-lpm quirk for Acer C120 LED Projector
        - usb: musb: only restore devctl when session was set in backup
        - usb: musb: Stop bulk endpoint while queue is rotated
        - usb: musb: Ensure rx reinit occurs for shared_fifo endpoints
        - usb: musb: host: correct cppi dma channel for isoch transfer
        - usb: xhci-plat: properly handle probe deferral for devm_clk_get()
        - USB: xhci: Add broken streams quirk for Frescologic device id 1009
        - xhci: Fix handling timeouted commands on hosts in weird states.
        - USB: mos7720: delete parport
        - usb: gadget: fix spinlock dead lock in gadgetfs
        - usb: host: ehci-tegra: Grab the correct UTMI pads reset
        - usb: dwc3: exynos: Fix deferred probing storm.
        - Linux 4.4.15
      * qeth: delete napi struct when removing a qeth device (LP: #1601831)
        - qeth: delete napi struct when removing a qeth device
      * Adjust KBL PCI-ID's (LP: #1600124)
        - drm/i915: Add more Kabylake PCI IDs.
        - drm/i915: Removing PCI IDs that are no longer listed as Kabylake.
      * [i915_bpo] Rebase driver to v4.7-rc6 + gen9 workarounds + KBP PCH support
        (LP: #1599109)
        - drm/kms_helper: Add a common place to call init and exit functions.
        - drm: Add helper for DP++ adaptors
        - GPU-DRM: Delete unnecessary checks before drm_property_unreference_blob()
        - drm: introduce pipe color correction properties
        - drm: fix blob pointer check
        - drm: atomic helper: do not unreference error pointer
        - drm: fix lut value extraction function
        - drm/dsi: Add a helper to get bits per pixel of MIPI DSI pixel format
        - SAUCE: drm: Introduce drm_malloc_gfp()
        - SAUCE: i915_bpo: Rebase to v4.7-rc6
        - SAUCE: i915_bpo: Add backported workarounds for gen9
        - SAUCE: i915_bpo: Revert "drm/i915: Get panel_type from OpRegion panel
          details"
        - SAUCE: i915_bpo: Introduce Kabypoint PCH for Kabylake H/DT.
      * Baytrail-I got black screen with HDMI output (LP: #1599379)
        - drm/i915: Only ignore eDP ports that are connected
        - drm/i915: Check VBT for port presence in addition to the strap on VLV/CHV
      * [Hyper-V] storvsc messages for CD-ROM medium not present tray closed
        (LP: #1590655)
        - SAUCE: (no-up) scsi: storvsc: Filter out storvsc messages CD-ROM medium not
          present
      * Hotplug device addition issue - missing patches on Xenial kernel
        (LP: #1599250)
        - Revert "UBUNTU: SAUCE: powerpc/eeh: Validate arch in eeh_add_device_early()"
        - Revert "powerpc/eeh: Fix crash in eeh_add_device_early() on Cell"
        - powerpc/iommu: Remove the dependency on EEH struct in DDW mechanism
        - powerpc/pseries: Fix PCI config address for DDW
      * kernel: signal return with invalid floating-point control (LP: #1597971)
        - s390: fix test_fp_ctl inline assembly contraints
      * [Toshiba P50W-B00F] Touchscreen no longer working (LP: #1498667)
        - SAUCE: (no-up) usb: quirks: Add no-lpm quirk for Elan Microelectronics
          Touchpad
      * [yakkety] d-i does not support (ehci_msm) Qualcomm  On-Chip EHCI Host
        Controller (LP: #1599347)
        - d-i: Add ehci_msm to usb-modules
      * [Bug] Legacy audio couldn't work after S3 resume on Kabylake (LP: #1596871)
        - ALSA: hda - Skip ELD notification during PM process
        - ALSA: hda - hdmi add wmb barrier for audio component
        - ALSA: hda - hdmi defer to register acomp eld notifier
      * sync spl  0.6.5.6-0ubuntu4 changes into Xenial kernel source (LP: #1599257)
        - SAUCE: (noup) Update spl to 0.6.5.6-0ubuntu4
      * Config: missing AMD Seattle platform support (LP: #1597574)
        - [Config] Enable the AMD Seattle platform
      * Network installer fails to detect network on AMD Overdrive (ARM64)
        (LP: #1597573)
        - [Config] Add amd-xgbe to nic-modules udeb
      * exercising ptys causes a kernel oops (LP: #1586418)
        - devpts: fix null pointer dereference on failed memory allocation
      * Regression (constant vibration of device) in xpad driver in Ubuntu 16.04
        (LP: #1574102)
        - Input: xpad - move pending clear to the correct location
      * thunderx nics fail to establish link (LP: #1597867)
        - net: thunderx: Fix link status reporting
      * Xenial update to v4.4.14 stable release (LP: #1596575)
        - scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands
        - scsi: Add QEMU CD-ROM to VPD Inquiry Blacklist
        - netlink: Fix dump skb leak/double free
        - tipc: fix nametable publication field in nl compat
        - switchdev: pass pointer to fib_info instead of copy
        - tuntap: correctly wake up process during uninit
        - udp: prevent skbs lingering in tunnel socket queues
        - uapi glibc compat: fix compilation when !__USE_MISC in glibc
        - sfc: on MC reset, clear PIO buffer linkage in TXQs
        - team: don't call netdev_change_features under team->lock
        - vxlan: Accept user specified MTU value when create new vxlan link
        - tcp: record TLP and ER timer stats in v6 stats
        - bridge: Don't insert unnecessary local fdb entry on changing mac address
        - l2tp: fix configuration passed to setup_udp_tunnel_sock()
        - ipv6: Skip XFRM lookup if dst_entry in socket cache is valid
        - vxlan: Relax MTU constraints
        - geneve: Relax MTU constraints
        - vxlan, gre, geneve: Set a large MTU on ovs-created tunnel devices
        - KVM: x86: fix OOPS after invalid KVM_SET_DEBUGREGS
        - KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi
        - ALSA: hda - Add PCI ID for Kabylake
        - ALSA: hda - Fix headset mic detection problem for Dell machine
        - ALSA: hda/realtek - ALC256 speaker noise issue
        - ALSA: hda/realtek - Add support for new codecs ALC700/ALC701/ALC703
        - ALSA: hda/realtek: Add T560 docking unit fixup
        - ARM: fix PTRACE_SETVFPREGS on SMP systems
        - gpio: bcm-kona: fix bcm_kona_gpio_reset() warnings
        - s390/bpf: fix recache skb->data/hlen for skb_vlan_push/pop
        - s390/bpf: reduce maximum program size to 64 KB
        - irqchip/gic-v3: Fix ICC_SGI1R_EL1.INTID decoding mask
        - crypto: public_key: select CRYPTO_AKCIPHER
        - crypto: ccp - Fix AES XTS error for request sizes above 4096
        - arm64: Provide "model name" in /proc/cpuinfo for PER_LINUX32 tasks
        - arm64: mm: always take dirty state from new pte in ptep_set_access_flags
        - powerpc/pseries/eeh: Handle RTAS delay requests in configure_bridge
        - powerpc: Fix definition of SIAR and SDAR registers
        - powerpc: Use privileged SPR number for MMCR2
        - powerpc/pseries: Add POWER8NVL support to ibm,client-architecture-support
          call
        - pinctrl: mediatek: fix dual-edge code defect
        - parisc: Fix pagefault crash in unaligned __get_user() call
        - memcg: add RCU locking around css_for_each_descendant_pre() in
          memcg_offline_kmem()
        - wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel
        - x86/entry/traps: Don't force in_interrupt() to return true in IST handlers
        - fix d_walk()/non-delayed __d_free() race
        - sparc: Fix system call tracing register handling.
        - sparc64: Fix bootup regressions on some Kconfig combinations.
        - sparc64: Fix numa node distance initialization
        - sparc64: Fix sparc64_set_context stack handling.
        - sparc/PCI: Fix for panic while enabling SR-IOV
        - sparc64: Reduce TLB flushes during hugepte changes
        - sparc64: Take ctx_alloc_lock properly in hugetlb_setup().
        - sparc: Harden signal return frame checks.
        - sparc64: Fix return from trap window fill crashes.
        - MIPS: Fix 64k page support for 32 bit kernels.
        - crypto: qat - fix adf_ctl_drv.c:undefined reference to adf_init_pf_wq
        - drm/core: Do not preserve framebuffer on rmfb, v4.
        - Linux 4.4.14
      * [Hyper-V] Rebase Hyper-V to 4.6 kernel (LP: #1583357)
        - hv_netvsc: rework link status change handling
        - hv_netvsc: Resize some of the variables in hv_netvsc_packet
        - hv_netvsc: Rearrange the hv_negtvsc_packet to be space efficient
        - hv_netvsc: Eliminate the channel field in hv_netvsc_packet structure
        - hv_netvsc: Eliminate rndis_msg pointer from hv_netvsc_packet structure
        - hv_netvsc: Eliminatte the data field from struct hv_netvsc_packet
        - hv_netvsc: Eliminate send_completion from struct hv_netvsc_packet
        - hv_netvsc: Eliminate send_completion_ctx from struct hv_netvsc_packet
        - hv_netvsc: Don't ask for additional head room in the skb
        - hv_netvsc: move subchannel existence check to netvsc_select_queue()
        - hv_netvsc: remove locking in netvsc_send()
        - hv_netvsc: Eliminate page_buf from struct hv_netvsc_packet
        - hv_netvsc: Eliminate send_completion_tid from struct hv_netvsc_packet
        - hv_netvsc: Eliminate is_data_pkt from struct hv_netvsc_packet
        - hv_netvsc: Eliminate completion_func from struct hv_netvsc_packet
        - hv_netvsc: Eliminate xmit_more from struct hv_netvsc_packet
        - hv_netvsc: Eliminate status from struct hv_netvsc_packet
        - hv_netvsc: Eliminate vlan_tci from struct hv_netvsc_packet
        - storvsc: add logging for error/warning messages
        - hv_netvsc: Fix race condition on Multi-Send Data field
        - kvm/x86: split ioapic-handled and EOI exit bitmaps
        - kvm/x86: per-vcpu apicv deactivation support
        - kvm/x86: Hyper-V synthetic interrupt controller
        - kvm/x86: Hyper-V kvm exit
        - kvm/x86: Rearrange func's declarations inside Hyper-V header
        - kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers
        - kvm/x86: Hyper-V internal helper to read MSR HV_X64_MSR_TIME_REF_COUNT
        - kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack
        - kvm/x86: Hyper-V SynIC timers
        - storvsc: Fix a bug in the layout of the hv_fc_wwn_packet
        - storvsc: Properly support Fibre Channel devices
        - storvsc: Refactor the code in storvsc_channel_init()
        - storvsc: Tighten up the interrupt path
        - storvsc: Fix typo in MODULE_PARM_DESC
        - Revert "hv_netvsc: use skb_get_hash() instead of a homegrown implementation"
        - hv_netvsc: use skb_get_hash() instead of a homegrown implementation
        - hv_netvsc: Fix book keeping of skb during batching process
        - storvsc: Install the storvsc specific timeout handler for FC devices
        - storvsc: Use the specified target ID in device lookup
        - Revert "Drivers: hv: vmbus: Cleanup vmbus_set_event()"
        - Drivers: hv: vmbus: Cleanup vmbus_set_event()
        - Revert "Drivers: hv: vmbus: Eliminate the spin lock on the read path"
        - Drivers: hv: vmbus: Eliminate the spin lock on the read path
        - Revert "hv_netvsc: cleanup netdev feature flags for netvsc"
        - hv_netvsc: cleanup netdev feature flags for netvsc
        - hv_netvsc: Restore needed_headroom request
        - kvm/x86: Rename Hyper-V long spin wait hypercall
        - hv_netvsc: add software transmit timestamp support
        - hv_netvsc: add ethtool support for set and get of settings
        - hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
        - hv_netvsc: Fix the array sizes to be max supported channels
        - hv_netvsc: Fix the order of num_sc_offered decrement
        - x86/hyperv: Avoid reporting bogus NMI status for Gen2 instances
        - Drivers: hv: vmbus: Fix signaling logic in hv_need_to_signal_on_read()
        - Drivers: hv: kvp: fix IP Failover
    
      [ Ubuntu: 4.4.0-31.50 ]
    
      * Release Tracking Bug
        - LP: #1602449
      * nouveau: boot hangs at blank screen with unsupported graphics cards
        (LP: #1602340)
        - SAUCE: drm: check for supported chipset before booting fbdev off the hw
    
     -- Seth Forshee <email address hidden>  Fri, 22 Jul 2016 16:52:25 -0500
  • linux-snapdragon (4.4.0-1020.23) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1597903
    
      [ Ubuntu: 4.4.0-30.49 ]
    
      * FCP devices are not detected correctly nor deterministically (LP: #1567602)
        - scsi_dh_alua: Disable ALUA handling for non-disk devices
        - scsi_dh_alua: Use vpd_pg83 information
        - scsi_dh_alua: improved logging
        - scsi_dh_alua: sanitze sense code handling
        - scsi_dh_alua: use standard logging functions
        - scsi_dh_alua: return standard SCSI return codes in submit_rtpg
        - scsi_dh_alua: fixup description of stpg_endio()
        - scsi_dh_alua: use flag for RTPG extended header
        - scsi_dh_alua: use unaligned access macros
        - scsi_dh_alua: rework alua_check_tpgs() to return the tpgs mode
        - scsi_dh_alua: simplify sense code handling
        - scsi: Add scsi_vpd_lun_id()
        - scsi: Add scsi_vpd_tpg_id()
        - scsi_dh_alua: use scsi_vpd_tpg_id()
        - scsi_dh_alua: Remove stale variables
        - scsi_dh_alua: Pass buffer as function argument
        - scsi_dh_alua: separate out alua_stpg()
        - scsi_dh_alua: Make stpg synchronous
        - scsi_dh_alua: call alua_rtpg() if stpg fails
        - scsi_dh_alua: switch to scsi_execute_req_flags()
        - scsi_dh_alua: allocate RTPG buffer separately
        - scsi_dh_alua: Use separate alua_port_group structure
        - scsi_dh_alua: use unique device id
        - scsi_dh_alua: simplify alua_initialize()
        - revert commit a8e5a2d593cb ("[SCSI] scsi_dh_alua: ALUA handler attach should
          succeed while TPG is transitioning")
        - scsi_dh_alua: move optimize_stpg evaluation
        - scsi_dh_alua: remove 'rel_port' from alua_dh_data structure
        - scsi_dh_alua: Use workqueue for RTPG
        - scsi_dh_alua: Allow workqueue to run synchronously
        - scsi_dh_alua: Add new blacklist flag 'BLIST_SYNC_ALUA'
        - scsi_dh_alua: Recheck state on unit attention
        - scsi_dh_alua: update all port states
        - scsi_dh_alua: Send TEST UNIT READY to poll for transitioning
        - scsi_dh_alua: do not fail for unknown VPD identification
    
      [ Ubuntu: 4.4.0-29.48 ]
    
      * Wireless hotkey fails on Dell XPS 15 9550 (LP: #1589886)
        - intel-hid: new hid event driver for hotkeys
        - intel-hid: fix incorrect entries in intel_hid_keymap
        - intel-hid: allocate correct amount of memory for private struct
        - intel-hid: add a workaround to ignore an event after waking up from S4.
        - [Config] CONFIG_INTEL_HID_EVENT=m
      * cgroupfs mounts can hang (LP: #1588056)
        - Revert "UBUNTU: SAUCE: (namespace) mqueue: Super blocks must be owned by the
          user ns which owns the ipc ns"
        - Revert "UBUNTU: SAUCE: kernfs: Do not match superblock in another user
          namespace when mounting"
        - Revert "UBUNTU: SAUCE: cgroup: Use a new super block when mounting in a
          cgroup namespace"
        - (namespace) bpf: Use mount_nodev not mount_ns to mount the bpf filesystem
        - (namespace) bpf, inode: disallow userns mounts
        - (namespace) ipc: Initialize ipc_namespace->user_ns early.
        - (namespace) vfs: Pass data, ns, and ns->userns to mount_ns
        - SAUCE: (namespace) Sync with upstream s_user_ns patches
        - (namespace) kernfs: The cgroup filesystem also benefits from SB_I_NOEXEC
        - (namespace) ipc/mqueue: The mqueue filesystem should never contain
          executables
      * KVM system crashes after starting guest (LP: #1596635)
        - xhci: Cleanup only when releasing primary hcd
      * Upstream patch "crypto: vmx - IV size failing on skcipher API" for Ubuntu
        16.04 (LP: #1596557)
        - crypto: vmx - IV size failing on skcipher API
      * [Bug]tpm initialization fails on x86 (LP: #1596469)
        - tpm_crb: drop struct resource res from struct crb_priv
        - tpm_crb: fix mapping of the buffers
      * Device shutdown notification for CAPI Flash cards (LP: #1592114)
        - cxlflash: Fix regression issue with re-ordering patch
        - cxlflash: Fix to drain operations from previous reset
        - cxlflash: Add device dependent flags
        - cxlflash: Shutdown notify support for CXL Flash cards
      * scsi-modules udeb should include pm80xx (LP: #1595628)
        - [Config] Add pm80xx scsi driver to d-i
      * Sync up latest relevant upstream bug fixes (LP: #1594871)
        - SAUCE: (noup) Update zfs to 0.6.5.6-0ubuntu10
      * Cannot compile module tda10071 (LP: #1592531)
        - [media] tda10071: Fix dependency to REGMAP_I2C
      * lsvpd doesn't show correct location code for devices attached to a CAPI card
        (LP: #1594847)
        - cxl: Make vPHB device node match adapter's
      * enable CRC32 and AES ARM64 by default or as module (LP: #1594455)
        - [Config] Enable arm64 AES and CRC32 crypto
      * VMX kernel crypto module exhibits poor performance in Ubuntu 16.04
        (LP: #1592481)
        - crypto: vmx - comply with ABIs that specify vrsave as reserved.
        - crypto: vmx - Fix ABI detection
        - crypto: vmx - Increase priority of aes-cbc cipher
      * build squashfs into xenial kernels by default (LP: #1593134)
        - [Config] CONFIG_SQUASHFS=y
      * Restore irqfd fast path for PPC (LP: #1592809)
        - KVM: PPC: Book3S HV: Re-enable XICS fast path for irqfd-generated interrupts
      * Unable to start guests with memballoon default. (LP: #1592042)
        - virtio_balloon: fix PFN format for virtio-1
      * Key 5 automatically pressed on some Logitech wireless keyboards
        (LP: #1579190)
        - HID: core: prevent out-of-bound readings
      * ZFS: Running ztest repeatedly for long periods of time eventually results in
        "zdb: can't open 'ztest': No such file or directory" (LP: #1587686)
        - Fix ztest truncated cache file
      * STC840.20:Alpine:alp7fp1:Ubuntu 16.04, BlueFin (SAN) EEH 6 times during boot
        then disabled SRC BA188002:b0314a_1612.840 (LP: #1587316)
        - lpfc: Fix DMA faults observed upon plugging loopback connector
    
     -- Kamal Mostafa <email address hidden>  Thu, 30 Jun 2016 14:22:47 -0700
  • linux-snapdragon (4.4.0-1019.22) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1595882
    
      [ Ubuntu: 4.4.0-28.47 ]
    
      * Linux netfilter local privilege escalation issues (LP: #1595350)
        - netfilter: x_tables: don't move to non-existent next rule
        - netfilter: x_tables: validate targets of jumps
        - netfilter: x_tables: add and use xt_check_entry_offsets
        - netfilter: x_tables: kill check_entry helper
        - netfilter: x_tables: assert minimum target size
        - netfilter: x_tables: add compat version of xt_check_entry_offsets
        - netfilter: x_tables: check standard target size too
        - netfilter: x_tables: check for bogus target offset
        - netfilter: x_tables: validate all offsets and sizes in a rule
        - netfilter: x_tables: don't reject valid target size on some architectures
        - netfilter: arp_tables: simplify translate_compat_table args
        - netfilter: ip_tables: simplify translate_compat_table args
        - netfilter: ip6_tables: simplify translate_compat_table args
        - netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
        - netfilter: x_tables: do compat validation via translate_table
        - netfilter: x_tables: introduce and use xt_copy_counters_from_user
      * Linux netfilter IPT_SO_SET_REPLACE memory corruption (LP: #1555338)
        - netfilter: x_tables: validate e->target_offset early
        - netfilter: x_tables: make sure e->next_offset covers remaining blob size
        - netfilter: x_tables: fix unconditional helper
    
    linux-snapdragon (4.4.0-1018.21) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1594929
    
      [ Ubuntu: 4.4.0-27.46 ]
    
      * Support Edge Gateway's Bluetooth LED (LP: #1512999)
        - Revert "UBUNTU: SAUCE: Bluetooth: Support for LED on Marvell modules"
    
    linux-snapdragon (4.4.0-1017.20) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1594480
    
      [ Ubuntu: 4.4.0-26.45 ]
    
      * linux: Implement secure boot state variables (LP: #1593075)
        - SAUCE: UEFI: Add secure boot and MOK SB State disabled sysctl
      * failures building userspace packages that include ethtool.h (LP: #1592930)
        - ethtool.h: define INT_MAX for userland
    
    linux-snapdragon (4.4.0-1016.19) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1591462
    
      [ Ubuntu: 4.4.0-25.44 ]
    
      * Xenial update to v4.4.13 stable release (LP: #1590455)
        - MIPS64: R6: R2 emulation bugfix
        - MIPS: math-emu: Fix jalr emulation when rd == $0
        - MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
        - MIPS: Don't unwind to user mode with EVA
        - MIPS: Avoid using unwind_stack() with usermode
        - MIPS: Fix siginfo.h to use strict posix types
        - MIPS: Fix uapi include in exported asm/siginfo.h
        - MIPS: Fix watchpoint restoration
        - MIPS: Flush highmem pages in __flush_dcache_page
        - MIPS: Handle highmem pages in __update_cache
        - MIPS: Sync icache & dcache in set_pte_at
        - MIPS: ath79: make bootconsole wait for both THRE and TEMT
        - MIPS: Reserve nosave data for hibernation
        - MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
        - MIPS: Use copy_s.fmt rather than copy_u.fmt
        - MIPS: Fix MSA ld_*/st_* asm macros to use PTR_ADDU
        - MIPS: Prevent "restoration" of MSA context in non-MSA kernels
        - MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
        - MIPS: ptrace: Fix FP context restoration FCSR regression
        - MIPS: ptrace: Prevent writes to read-only FCSR bits
        - MIPS: Fix sigreturn via VDSO on microMIPS kernel
        - MIPS: Build microMIPS VDSO for microMIPS kernels
        - MIPS: lib: Mark intrinsics notrace
        - MIPS: VDSO: Build with `-fno-strict-aliasing'
        - affs: fix remount failure when there are no options changed
        - ASoC: ak4642: Enable cache usage to fix crashes on resume
        - Input: uinput - handle compat ioctl for UI_SET_PHYS
        - ARM: mvebu: fix GPIO config on the Linksys boards
        - ARM: dts: at91: fix typo in sama5d2 PIN_PD24 description
        - ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on exynos4210-trats
        - ARM: dts: imx35: restore existing used clock enumeration
        - ath9k: Add a module parameter to invert LED polarity.
        - ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
        - ath10k: fix debugfs pktlog_filter write
        - ath10k: fix firmware assert in monitor mode
        - ath10k: fix rx_channel during hw reconfigure
        - ath10k: fix kernel panic, move arvifs list head init before htt init
        - ath5k: Change led pin configuration for compaq c700 laptop
        - hwrng: exynos - Fix unbalanced PM runtime put on timeout error path
        - rtlwifi: rtl8723be: Add antenna select module parameter
        - rtlwifi: btcoexist: Implement antenna selection
        - rtlwifi: Fix logic error in enter/exit power-save mode
        - rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in
          rtl_pci_reset_trx_ring
        - aacraid: Relinquish CPU during timeout wait
        - aacraid: Fix for aac_command_thread hang
        - aacraid: Fix for KDUMP driver hang
        - hwmon: (ads7828) Enable internal reference
        - mfd: intel-lpss: Save register context on suspend
        - mfd: intel_soc_pmic_core: Terminate panel control GPIO lookup table
          correctly
        - PM / Runtime: Fix error path in pm_runtime_force_resume()
        - cpuidle: Indicate when a device has been unregistered
        - cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
        - clk: bcm2835: Fix PLL poweron
        - clk: at91: fix check of clk_register() returned value
        - clk: bcm2835: pll_off should only update CM_PLL_ANARST
        - clk: bcm2835: divider value has to be 1 or more
        - pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
        - PCI: Disable all BAR sizing for devices with non-compliant BARs
        - media: v4l2-compat-ioctl32: fix missing reserved field copy in
          put_v4l2_create32
        - mm: use phys_addr_t for reserve_bootmem_region() arguments
        - wait/ptrace: assume __WALL if the child is traced
        - QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
        - powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
        - powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
        - powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
        - xen/events: Don't move disabled irqs
        - xen: use same main loop for counting and remapping pages
        - sunrpc: fix stripping of padded MIC tokens
        - drm/gma500: Fix possible out of bounds read
        - drm/vmwgfx: Enable SVGA_3D_CMD_DX_SET_PREDICATION
        - drm/vmwgfx: use vmw_cmd_dx_cid_check for query commands.
        - drm/vmwgfx: Fix order of operation
        - drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
        - drm/amdgpu: Fix hdmi deep color support.
        - drm/i915/fbdev: Fix num_connector references in intel_fb_initial_config()
        - drm/fb_helper: Fix references to dev->mode_config.num_connector
        - drm/atomic: Verify connector->funcs != NULL when clearing states
        - drm/i915: Don't leave old junk in ilk active watermarks on readout
        - drm/imx: Match imx-ipuv3-crtc components using device node in platform data
        - ext4: fix hang when processing corrupted orphaned inode list
        - ext4: clean up error handling when orphan list is corrupted
        - ext4: fix oops on corrupted filesystem
        - ext4: address UBSAN warning in mb_find_order_for_block()
        - ext4: silence UBSAN in ext4_mb_init()
        - PM / sleep: Handle failures in device_suspend_late() consistently
        - dma-debug: avoid spinlock recursion when disabling dma-debug
        - scripts/package/Makefile: rpmbuild add support of RPMOPTS
        - gcov: disable tree-loop-im to reduce stack usage
        - xfs: disallow rw remount on fs with unknown ro-compat features
        - xfs: Don't wrap growfs AGFL indexes
        - xfs: xfs_iflush_cluster fails to abort on error
        - xfs: fix inode validity check in xfs_iflush_cluster
        - xfs: skip stale inodes in xfs_iflush_cluster
        - xfs: print name of verifier if it fails
        - xfs: handle dquot buffer readahead in log recovery correctly
        - Linux 4.4.13
      * 168c:001c [HP Compaq Presario C700 Notebook PC] Wireless led button doesn't
        switch colors (LP: #972604)
        - ath5k: Change led pin configuration for compaq c700 laptop
      * Extended statistics from balloon for proper memory management (LP: #1587091)
        - mm/page_alloc.c: calculate 'available' memory in a separate function
        - virtio_balloon: export 'available' memory to balloon statistics
      * CAPI: CGZIP AFU contexts do not receive interrupts after heavy afu
        open/close (LP: #1588468)
        - misc: cxl: use kobj_to_dev()
        - cxl: Move common code away from bare-metal-specific files
        - cxl: Move bare-metal specific code to specialized files
        - cxl: Define process problem state area at attach time only
        - cxl: Introduce implementation-specific API
        - cxl: Rename some bare-metal specific functions
        - cxl: Isolate a few bare-metal-specific calls
        - cxl: Update cxl_irq() prototype
        - cxl: IRQ allocation for guests
        - powerpc: New possible return value from hcall
        - cxl: New hcalls to support cxl adapters
        - cxl: Separate bare-metal fields in adapter and AFU data structures
        - cxlflash: Simplify PCI registration
        - cxlflash: Unmap problem state area before detaching master context
        - cxlflash: Split out context initialization
        - cxlflash: Simplify attach path error cleanup
        - cxlflash: Reorder user context initialization
        - cxl: Add guest-specific code
        - cxl: sysfs support for guests
        - cxl: Support to flash a new image on the adapter from a guest
        - cxl: Parse device tree and create cxl device(s) at boot
        - cxl: Support the cxl kernel API from a guest
        - cxl: Adapter failure handling
        - cxl: Add tracepoints around the cxl hcall
        - cxlflash: Use new cxl_pci_read_adapter_vpd() API
        - cxl: Remove cxl_get_phys_dev() kernel API
        - cxl: Ignore probes for virtual afu pci devices
        - cxl: Poll for outstanding IRQs when detaching a context
      * NVMe max_segments queue parameter gets set to 1 (LP: #1588449)
        - nvme: set queue limits for the admin queue
        - nvme: fix max_segments integer truncation
        - block: fix blk_rq_get_max_sectors for driver private requests
      * workaround cavium thunderx silicon erratum 23144 (LP: #1589704)
        - irqchip/gicv3-its: numa: Enable workaround for Cavium thunderx erratum 23144
      * Xenial update to v4.4.12 stable release (LP: #1588945)
        - Btrfs: don't use src fd for printk
        - perf/x86/intel/pt: Generate PMI in the STOP region as well
        - perf/core: Fix perf_event_open() vs. execve() race
        - perf test: Fix build of BPF and LLVM on older glibc libraries
        - ext4: iterate over buffer heads correctly in move_extent_per_page()
        - arm64: Fix typo in the pmdp_huge_get_and_clear() definition
        - arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
        - arm64: Implement ptep_set_access_flags() for hardware AF/DBM
        - arm64: Implement pmdp_set_access_flags() for hardware AF/DBM
        - arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
        - arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
        - kvm: arm64: Fix EC field in inject_abt64
        - remove directory incorrectly tries to set delete on close on non-empty
          directories
        - fs/cifs: correctly to anonymous authentication via NTLMSSP
        - fs/cifs: correctly to anonymous authentication for the LANMAN authentication
        - fs/cifs: correctly to anonymous authentication for the NTLM(v1)
          authentication
        - fs/cifs: correctly to anonymous authentication for the NTLM(v2)
          authentication
        - asix: Fix offset calculation in asix_rx_fixup() causing slow transmissions
        - ring-buffer: Use long for nr_pages to avoid overflow failures
        - ring-buffer: Prevent overflow of size in ring_buffer_resize()
        - crypto: caam - fix caam_jr_alloc() ret code
        - crypto: talitos - fix ahash algorithms registration
        - crypto: sun4i-ss - Replace spinlock_bh by spin_lock_irq{save|restore}
        - clk: qcom: msm8916: Fix crypto clock flags
        - sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded
          systems
        - mfd: omap-usb-tll: Fix scheduling while atomic BUG
        - Input: pwm-beeper - fix - scheduling while atomic
        - irqchip/gic: Ensure ordering between read of INTACK and shared data
        - irqchip/gic-v3: Configure all interrupts as non-secure Group-1
        - can: fix handling of unmodifiable configuration options
        - mmc: mmc: Fix partition switch timeout for some eMMCs
        - mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
        - ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA internal
          strings
        - dell-rbtn: Ignore ACPI notifications if device is suspended
        - mmc: longer timeout for long read time quirk
        - mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
        - Bluetooth: vhci: fix open_timeout vs. hdev race
        - Bluetooth: vhci: purge unhandled skbs
        - Bluetooth: vhci: Fix race at creating hci device
        - mei: fix NULL dereferencing during FW initiated disconnection
        - mei: amthif: discard not read messages
        - mei: bus: call mei_cl_read_start under device lock
        - USB: serial: mxuport: fix use-after-free in probe error path
        - USB: serial: keyspan: fix use-after-free in probe error path
        - USB: serial: quatech2: fix use-after-free in probe error path
        - USB: serial: io_edgeport: fix memory leaks in attach error path
        - USB: serial: io_edgeport: fix memory leaks in probe error path
        - USB: serial: option: add support for Cinterion PH8 and AHxx
        - USB: serial: option: add more ZTE device ids
        - USB: serial: option: add even more ZTE device ids
        - usb: gadget: f_fs: Fix EFAULT generation for async read operations
        - usb: f_mass_storage: test whether thread is running before starting another
        - usb: misc: usbtest: fix pattern tests for scatterlists.
        - usb: gadget: udc: core: Fix argument of dev_err() in
          usb_gadget_map_request()
        - staging: comedi: das1800: fix possible NULL dereference
        - KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
        - MIPS: KVM: Fix timer IRQ race when freezing timer
        - MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
        - KVM: x86: mask CPUID(0xD,0x1).EAX against host value
        - xen/x86: actually allocate legacy interrupts on PV guests
        - tty: vt, return error when con_startup fails
        - TTY: n_gsm, fix false positive WARN_ON
        - tty/serial: atmel: fix hardware handshake selection
        - Fix OpenSSH pty regression on close
        - serial: 8250_pci: fix divide error bug if baud rate is 0
        - serial: 8250_mid: use proper bar for DNV platform
        - serial: 8250_mid: recognize interrupt source in handler
        - serial: samsung: Reorder the sequence of clock control when call
          s3c24xx_serial_set_termios()
        - locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
        - clk: bcm2835: add locking to pll*_on/off methods
        - mcb: Fixed bar number assignment for the gdd
        - ALSA: hda/realtek - New codecs support for ALC234/ALC274/ALC294
        - ALSA: hda - Fix headphone noise on Dell XPS 13 9360
        - ALSA: hda/realtek - Add support for ALC295/ALC3254
        - ALSA: hda - Fix headset mic detection problem for one Dell machine
        - IB/srp: Fix a debug kernel crash
        - thunderbolt: Fix double free of drom buffer
        - SIGNAL: Move generic copy_siginfo() to signal.h
        - UBI: Fix static volume checks when Fastmap is used
        - hpfs: fix remount failure when there are no options changed
        - hpfs: implement the show_options method
        - scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
        - Revert "scsi: fix soft lockup in scsi_remove_target() on module removal"
        - kbuild: move -Wunused-const-variable to W=1 warning level
        - Linux 4.4.12
      * [Hyper-V] fixes for kdump when running on a VM (LP: #1588965)
        - clocksource: Allow unregistering the watchdog
      * net_admin apparmor denial when using Go (LP: #1465724)
        - SAUCE: kernel: Add noaudit variant of ns_capable()
        - SAUCE: net: Use ns_capable_noaudit() when determining net sysctl permissions
      * [Hyper-V] Put tools/hv/lsvmbus in /usr/sbin (LP: #1585311)
        - [Debian] Install lsvmbus in cloud tools
        - SAUCE: tools/hv/lsvmbus -- convert to python3
        - SAUCE: tools/hv/lsvmbus -- add manual page
      * btrfs: file write crashes with false ENOSPC during snapshot creation since
        kernel 4.4 - fix available (LP: #1584052)
        - btrfs: Continue write in case of can_not_nocow
      * boot stalls on USB detection errors (LP: #1437492)
        - usb: core: hub: hub_port_init lock controller instead of bus
      * [Bug]KNL:Spread MWAIT cache lines over all nodes (LP: #1585850)
        - kernek/fork.c: allocate idle task for a CPU always on its local node
      * [Hyper-V] PCI Passthrough kernel hang and explicit barriers (LP: #1581243)
        - PCI: hv: Report resources release after stopping the bus
        - PCI: hv: Add explicit barriers to config space access
      * Kernel 4.2.X and 4.4.X - Fix USB3.0 link power management (LPM)
        claim/release logic in USBFS (LP: #1577024)
        - USB: leave LPM alone if possible when binding/unbinding interface drivers
      * STC840.20:tuleta:tul516p01 panic after injecting Leaf EEH (LP: #1581034)
        - NVMe: Fix namespace removal deadlock
        - NVMe: Requeue requests on suspended queues
        - NVMe: Move error handling to failed reset handler
        - blk-mq: End unstarted requests on dying queue
      * conflicting modules in udebs - arc4.ko (LP: #1582991)
        - [Config] Remove arc4 from nic-modules
      * CVE-2016-4482 (LP: #1578493)
        - USB: usbfs: fix potential infoleak in devio
      * mlx5_core kexec fail  (LP: #1585978)
        - net/mlx5: Add pci shutdown callback
      * backport fix for /proc/net issues with containers (LP: #1584953)
        - netfilter: Set /proc/net entries owner to root in namespace
      * CVE-2016-4951 (LP: #1585365)
        - tipc: check nl sock before parsing nested attributes
      * CVE-2016-4578 (LP: #1581866)
        - ALSA: timer: Fix leak in events via snd_timer_user_ccallback
        - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
      * CVE-2016-4569 (LP: #1580379)
        - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
      * s390/pci: fix use after free in dma_init (LP: #1584828)
        - s390/pci: fix use after free in dma_init
      * s390/mm: fix asce_bits handling with dynamic pagetable levels (LP: #1584827)
        - s390/mm: fix asce_bits handling with dynamic pagetable levels
      * CAPI: CGZIP Wrong CAPI MMIO timeout (256usec desired but 1usec default
        setting in cxl.ko driver) (LP: #1584066)
        - powerpc: Define PVR value for POWER8NVL processor
        - cxl: Configure the PSL for two CAPI ports on POWER8NVL
        - cxl: Increase timeout for detection of AFU mmio hang
      * ThunderX: soft lockup in cursor_timer_handler() (LP: #1574814)
        - SAUCE: tty: vt: Fix soft lockup in fbcon cursor blink timer.
      * debian.master/.../getabis bogus warnings "inconsistant compiler versions"
        and "not a git repository" (LP: #1584890)
        - [debian] getabis: Only git add $abidir if running in local repo
        - [debian] getabis: Fix inconsistent compiler versions check
      * Backport cxlflash patch related to EEH recovery into Xenial SRU stream
        (LP: #1584935)
        - cxlflash: Fix to resolve dead-lock during EEH recovery
      * Xenial update to 4.4.11 stable release (LP: #1584912)
        - decnet: Do not build routes to devices without decnet private data.
        - route: do not cache fib route info on local routes with oif
        - packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
        - net: sched: do not requeue a NULL skb
        - bpf/verifier: reject invalid LD_ABS | BPF_DW instruction
        - cdc_mbim: apply "NDP to end" quirk to all Huawei devices
        - net: use skb_postpush_rcsum instead of own implementations
        - vlan: pull on __vlan_insert_tag error path and fix csum correction
        - openvswitch: use flow protocol when recalculating ipv6 checksums
        - ipv4/fib: don't warn when primary address is missing if in_dev is dead
        - net/mlx4_en: fix spurious timestamping callbacks
        - bpf: fix check_map_func_compatibility logic
        - samples/bpf: fix trace_output example
        - net: Implement net_dbg_ratelimited() for CONFIG_DYNAMIC_DEBUG case
        - gre: do not pull header in ICMP error processing
        - net_sched: introduce qdisc_replace() helper
        - net_sched: update hierarchical backlog too
        - sch_htb: update backlog as well
        - sch_dsmark: update backlog as well
        - netem: Segment GSO packets on enqueue
        - net: fec: only clear a queue's work bit if the queue was emptied
        - VSOCK: do not disconnect socket when peer has shutdown SEND only
        - net: bridge: fix old ioctl unlocked net device walk
        - bridge: fix igmp / mld query parsing
        - uapi glibc compat: fix compile errors when glibc net/if.h included before
          linux/if.h MIME-Version: 1.0
        - net: fix a kernel infoleak in x25 module
        - net: thunderx: avoid exposing kernel stack
        - tcp: refresh skb timestamp at retransmit time
        - net/route: enforce hoplimit max value
        - ocfs2: revert using ocfs2_acl_chmod to avoid inode cluster lock hang
        - ocfs2: fix posix_acl_create deadlock
        - zsmalloc: fix zs_can_compact() integer overflow
        - crypto: qat - fix invalid pf2vf_resp_wq logic
        - crypto: hash - Fix page length clamping in hash walk
        - crypto: testmgr - Use kmalloc memory for RSA input
        - ALSA: usb-audio: Quirk for yet another Phoenix Audio devices (v2)
        - ALSA: usb-audio: Yet another Phoneix Audio device quirk
        - ALSA: hda - Fix subwoofer pin on ASUS N751 and N551
        - ALSA: hda - Fix white noise on Asus UX501VW headset
        - ALSA: hda - Fix broken reconfig
        - spi: pxa2xx: Do not detect number of enabled chip selects on Intel SPT
        - spi: spi-ti-qspi: Fix FLEN and WLEN settings if bits_per_word is overridden
        - spi: spi-ti-qspi: Handle truncated frames properly
        - pinctrl: at91-pio4: fix pull-up/down logic
        - regmap: spmi: Fix regmap_spmi_ext_read in multi-byte case
        - perf/core: Disable the event on a truncated AUX record
        - vfs: add vfs_select_inode() helper
        - vfs: rename: check backing inode being equal
        - ARM: dts: at91: sam9x5: Fix the memory range assigned to the PMC
        - workqueue: fix rebind bound workers warning
        - regulator: s2mps11: Fix invalid selector mask and voltages for buck9
        - regulator: axp20x: Fix axp22x ldo_io voltage ranges
        - atomic_open(): fix the handling of create_error
        - qla1280: Don't allocate 512kb of host tags
        - tools lib traceevent: Do not reassign parg after collapse_tree()
        - get_rock_ridge_filename(): handle malformed NM entries
        - Input: max8997-haptic - fix NULL pointer dereference
        - Revert "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
        - drm/radeon: fix PLL sharing on DCE6.1 (v2)
        - drm/i915: Bail out of pipe config compute loop on LPT
        - drm/i915/bdw: Add missing delay during L3 SQC credit programming
        - drm/radeon: fix DP link training issue with second 4K monitor
        - nf_conntrack: avoid kernel pointer value leak in slab name
        - Linux 4.4.11
      * Support Edge Gateway's Bluetooth LED (LP: #1512999)
        - SAUCE: Bluetooth: Support for LED on Marvell modules
      * Support Edge Gateway's WIFI LED (LP: #1512997)
        - SAUCE: mwifiex: Switch WiFi LED state according to the device status
      * Marvell wireless driver update for FCC regulation (LP: #1528910)
        - mwifiex: parse adhoc start/join result
        - mwifiex: handle start AP error paths correctly
        - mwifiex: set regulatory info from EEPROM
        - mwifiex: don't follow AP if country code received from EEPROM
        - mwifiex: correction in region code to country mapping
        - mwifiex: update region_code_index array
        - mwifiex: use world for unidentified region code
        - SAUCE: mwifiex: add iw vendor command support
      * Kernel can be oopsed using remap_file_pages (LP: #1558120)
        - Revert "UBUNTU: SAUCE: mm/mmap: fix oopsing on remap_file_pages"
        - SAUCE: AUFS: mm/mmap: fix oopsing on remap_file_pages aufs mmap: bugfix,
          mainly for linux-4.5-rc5, remap_file_pages(2) emulation
      * cgroup namespace update (LP: #1584163)
        - Revert "UBUNTU: SAUCE: cgroup mount: ignore nsroot="
        - Revert "UBUNTU: SAUCE: (noup) cgroup namespaces: add a 'nsroot=' mountinfo
          field"
        - cgroup, kernfs: make mountinfo show properly scoped path for cgroup
          namespaces
        - kernfs: kernfs_sop_show_path: don't return 0 after seq_dentry call
        - cgroup: fix compile warning
      * Missing libunwind support in perf (LP: #1248289)
        - [Config] add binutils-dev to the Build-Depends: to fix perf unwinding
      * e1000 Tx Unit Hang  (LP: #1582328)
        - e1000: Double Tx descriptors needed check for 82544
        - e1000: Do not overestimate descriptor counts in Tx pre-check
      * Unsharing user and ipc namespaces simultaneously makes mqueue unmountable
        (LP: #1582378)
        - SAUCE: (namespace) mqueue: Super blocks must be owned by the user ns which
          owns the ipc ns
      * Pull in the amdgpu/radeon code from Linux 4.5.3 (LP: #1580526)
        - drm/radeon: rework fbdev handling on chips with no connectors
        - drm/radeon/mst: fix regression in lane/link handling.
        - drm/amd/powerplay: add uvd/vce dpm enabling flag to fix the performance
          issue for CZ
        - drm/amd/powerplay: fix segment fault issue in multi-display case.
        - drm/ttm: fix kref count mess in ttm_bo_move_to_lru_tail
      * aufs CONFIG_AUFS_EXPORT build option should be enabled (LP: #1121699)
        - [Config] enable CONFIG_AUFS_EXPORT
      * promote *_diag modules from linux-image-extra to linux-image (LP: #1580355)
        - [Config] Update inclusion list for CRIU
      * [Xenial] net: updates to ethtool and virtio_net for speed/duplex support
        (LP: #1581132)
        - ethtool: add speed/duplex validation functions
        - ethtool: make validate_speed accept all speeds between 0 and INT_MAX
        - virtio_net: add ethtool support for set and get of settings
        - virtio_net: validate ethtool port setting and explain the user validation
      * perf tool: Display event codes for Generic HW (PMU) events (LP: #1578211)
        - powerpc/perf: Remove PME_ prefix for power7 events
        - powerpc/perf: Export Power8 generic and cache events to sysfs
      * Mellanox ConnectX4 MTU limits: max and min (LP: #1528466)
        - net/mlx5: Introduce a new header file for physical port functions
        - net/mlx5e: Device's mtu field is u16 and not int
        - net/mlx5e: Fix minimum MTU
      * Miscellaneous Ubuntu changes
        - [Config] CONFIG_CAVIUM_ERRATUM_23144=y
    
     -- Kamal Mostafa <email address hidden>  Fri, 24 Jun 2016 08:22:41 -0700
  • linux-snapdragon (4.4.0-1017.20) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1594480
    
      [ Ubuntu: 4.4.0-26.45 ]
    
      * linux: Implement secure boot state variables (LP: #1593075)
        - SAUCE: UEFI: Add secure boot and MOK SB State disabled sysctl
      * failures building userspace packages that include ethtool.h (LP: #1592930)
        - ethtool.h: define INT_MAX for userland
    
    linux-snapdragon (4.4.0-1016.19) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1591462
    
      [ Ubuntu: 4.4.0-25.44 ]
    
      * Xenial update to v4.4.13 stable release (LP: #1590455)
        - MIPS64: R6: R2 emulation bugfix
        - MIPS: math-emu: Fix jalr emulation when rd == $0
        - MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
        - MIPS: Don't unwind to user mode with EVA
        - MIPS: Avoid using unwind_stack() with usermode
        - MIPS: Fix siginfo.h to use strict posix types
        - MIPS: Fix uapi include in exported asm/siginfo.h
        - MIPS: Fix watchpoint restoration
        - MIPS: Flush highmem pages in __flush_dcache_page
        - MIPS: Handle highmem pages in __update_cache
        - MIPS: Sync icache & dcache in set_pte_at
        - MIPS: ath79: make bootconsole wait for both THRE and TEMT
        - MIPS: Reserve nosave data for hibernation
        - MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
        - MIPS: Use copy_s.fmt rather than copy_u.fmt
        - MIPS: Fix MSA ld_*/st_* asm macros to use PTR_ADDU
        - MIPS: Prevent "restoration" of MSA context in non-MSA kernels
        - MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
        - MIPS: ptrace: Fix FP context restoration FCSR regression
        - MIPS: ptrace: Prevent writes to read-only FCSR bits
        - MIPS: Fix sigreturn via VDSO on microMIPS kernel
        - MIPS: Build microMIPS VDSO for microMIPS kernels
        - MIPS: lib: Mark intrinsics notrace
        - MIPS: VDSO: Build with `-fno-strict-aliasing'
        - affs: fix remount failure when there are no options changed
        - ASoC: ak4642: Enable cache usage to fix crashes on resume
        - Input: uinput - handle compat ioctl for UI_SET_PHYS
        - ARM: mvebu: fix GPIO config on the Linksys boards
        - ARM: dts: at91: fix typo in sama5d2 PIN_PD24 description
        - ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on exynos4210-trats
        - ARM: dts: imx35: restore existing used clock enumeration
        - ath9k: Add a module parameter to invert LED polarity.
        - ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
        - ath10k: fix debugfs pktlog_filter write
        - ath10k: fix firmware assert in monitor mode
        - ath10k: fix rx_channel during hw reconfigure
        - ath10k: fix kernel panic, move arvifs list head init before htt init
        - ath5k: Change led pin configuration for compaq c700 laptop
        - hwrng: exynos - Fix unbalanced PM runtime put on timeout error path
        - rtlwifi: rtl8723be: Add antenna select module parameter
        - rtlwifi: btcoexist: Implement antenna selection
        - rtlwifi: Fix logic error in enter/exit power-save mode
        - rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in
          rtl_pci_reset_trx_ring
        - aacraid: Relinquish CPU during timeout wait
        - aacraid: Fix for aac_command_thread hang
        - aacraid: Fix for KDUMP driver hang
        - hwmon: (ads7828) Enable internal reference
        - mfd: intel-lpss: Save register context on suspend
        - mfd: intel_soc_pmic_core: Terminate panel control GPIO lookup table
          correctly
        - PM / Runtime: Fix error path in pm_runtime_force_resume()
        - cpuidle: Indicate when a device has been unregistered
        - cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
        - clk: bcm2835: Fix PLL poweron
        - clk: at91: fix check of clk_register() returned value
        - clk: bcm2835: pll_off should only update CM_PLL_ANARST
        - clk: bcm2835: divider value has to be 1 or more
        - pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
        - PCI: Disable all BAR sizing for devices with non-compliant BARs
        - media: v4l2-compat-ioctl32: fix missing reserved field copy in
          put_v4l2_create32
        - mm: use phys_addr_t for reserve_bootmem_region() arguments
        - wait/ptrace: assume __WALL if the child is traced
        - QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
        - powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
        - powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
        - powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
        - xen/events: Don't move disabled irqs
        - xen: use same main loop for counting and remapping pages
        - sunrpc: fix stripping of padded MIC tokens
        - drm/gma500: Fix possible out of bounds read
        - drm/vmwgfx: Enable SVGA_3D_CMD_DX_SET_PREDICATION
        - drm/vmwgfx: use vmw_cmd_dx_cid_check for query commands.
        - drm/vmwgfx: Fix order of operation
        - drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
        - drm/amdgpu: Fix hdmi deep color support.
        - drm/i915/fbdev: Fix num_connector references in intel_fb_initial_config()
        - drm/fb_helper: Fix references to dev->mode_config.num_connector
        - drm/atomic: Verify connector->funcs != NULL when clearing states
        - drm/i915: Don't leave old junk in ilk active watermarks on readout
        - drm/imx: Match imx-ipuv3-crtc components using device node in platform data
        - ext4: fix hang when processing corrupted orphaned inode list
        - ext4: clean up error handling when orphan list is corrupted
        - ext4: fix oops on corrupted filesystem
        - ext4: address UBSAN warning in mb_find_order_for_block()
        - ext4: silence UBSAN in ext4_mb_init()
        - PM / sleep: Handle failures in device_suspend_late() consistently
        - dma-debug: avoid spinlock recursion when disabling dma-debug
        - scripts/package/Makefile: rpmbuild add support of RPMOPTS
        - gcov: disable tree-loop-im to reduce stack usage
        - xfs: disallow rw remount on fs with unknown ro-compat features
        - xfs: Don't wrap growfs AGFL indexes
        - xfs: xfs_iflush_cluster fails to abort on error
        - xfs: fix inode validity check in xfs_iflush_cluster
        - xfs: skip stale inodes in xfs_iflush_cluster
        - xfs: print name of verifier if it fails
        - xfs: handle dquot buffer readahead in log recovery correctly
        - Linux 4.4.13
      * 168c:001c [HP Compaq Presario C700 Notebook PC] Wireless led button doesn't
        switch colors (LP: #972604)
        - ath5k: Change led pin configuration for compaq c700 laptop
      * Extended statistics from balloon for proper memory management (LP: #1587091)
        - mm/page_alloc.c: calculate 'available' memory in a separate function
        - virtio_balloon: export 'available' memory to balloon statistics
      * CAPI: CGZIP AFU contexts do not receive interrupts after heavy afu
        open/close (LP: #1588468)
        - misc: cxl: use kobj_to_dev()
        - cxl: Move common code away from bare-metal-specific files
        - cxl: Move bare-metal specific code to specialized files
        - cxl: Define process problem state area at attach time only
        - cxl: Introduce implementation-specific API
        - cxl: Rename some bare-metal specific functions
        - cxl: Isolate a few bare-metal-specific calls
        - cxl: Update cxl_irq() prototype
        - cxl: IRQ allocation for guests
        - powerpc: New possible return value from hcall
        - cxl: New hcalls to support cxl adapters
        - cxl: Separate bare-metal fields in adapter and AFU data structures
        - cxlflash: Simplify PCI registration
        - cxlflash: Unmap problem state area before detaching master context
        - cxlflash: Split out context initialization
        - cxlflash: Simplify attach path error cleanup
        - cxlflash: Reorder user context initialization
        - cxl: Add guest-specific code
        - cxl: sysfs support for guests
        - cxl: Support to flash a new image on the adapter from a guest
        - cxl: Parse device tree and create cxl device(s) at boot
        - cxl: Support the cxl kernel API from a guest
        - cxl: Adapter failure handling
        - cxl: Add tracepoints around the cxl hcall
        - cxlflash: Use new cxl_pci_read_adapter_vpd() API
        - cxl: Remove cxl_get_phys_dev() kernel API
        - cxl: Ignore probes for virtual afu pci devices
        - cxl: Poll for outstanding IRQs when detaching a context
      * NVMe max_segments queue parameter gets set to 1 (LP: #1588449)
        - nvme: set queue limits for the admin queue
        - nvme: fix max_segments integer truncation
        - block: fix blk_rq_get_max_sectors for driver private requests
      * workaround cavium thunderx silicon erratum 23144 (LP: #1589704)
        - irqchip/gicv3-its: numa: Enable workaround for Cavium thunderx erratum 23144
      * Xenial update to v4.4.12 stable release (LP: #1588945)
        - Btrfs: don't use src fd for printk
        - perf/x86/intel/pt: Generate PMI in the STOP region as well
        - perf/core: Fix perf_event_open() vs. execve() race
        - perf test: Fix build of BPF and LLVM on older glibc libraries
        - ext4: iterate over buffer heads correctly in move_extent_per_page()
        - arm64: Fix typo in the pmdp_huge_get_and_clear() definition
        - arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
        - arm64: Implement ptep_set_access_flags() for hardware AF/DBM
        - arm64: Implement pmdp_set_access_flags() for hardware AF/DBM
        - arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
        - arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
        - kvm: arm64: Fix EC field in inject_abt64
        - remove directory incorrectly tries to set delete on close on non-empty
          directories
        - fs/cifs: correctly to anonymous authentication via NTLMSSP
        - fs/cifs: correctly to anonymous authentication for the LANMAN authentication
        - fs/cifs: correctly to anonymous authentication for the NTLM(v1)
          authentication
        - fs/cifs: correctly to anonymous authentication for the NTLM(v2)
          authentication
        - asix: Fix offset calculation in asix_rx_fixup() causing slow transmissions
        - ring-buffer: Use long for nr_pages to avoid overflow failures
        - ring-buffer: Prevent overflow of size in ring_buffer_resize()
        - crypto: caam - fix caam_jr_alloc() ret code
        - crypto: talitos - fix ahash algorithms registration
        - crypto: sun4i-ss - Replace spinlock_bh by spin_lock_irq{save|restore}
        - clk: qcom: msm8916: Fix crypto clock flags
        - sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded
          systems
        - mfd: omap-usb-tll: Fix scheduling while atomic BUG
        - Input: pwm-beeper - fix - scheduling while atomic
        - irqchip/gic: Ensure ordering between read of INTACK and shared data
        - irqchip/gic-v3: Configure all interrupts as non-secure Group-1
        - can: fix handling of unmodifiable configuration options
        - mmc: mmc: Fix partition switch timeout for some eMMCs
        - mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
        - ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA internal
          strings
        - dell-rbtn: Ignore ACPI notifications if device is suspended
        - mmc: longer timeout for long read time quirk
        - mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
        - Bluetooth: vhci: fix open_timeout vs. hdev race
        - Bluetooth: vhci: purge unhandled skbs
        - Bluetooth: vhci: Fix race at creating hci device
        - mei: fix NULL dereferencing during FW initiated disconnection
        - mei: amthif: discard not read messages
        - mei: bus: call mei_cl_read_start under device lock
        - USB: serial: mxuport: fix use-after-free in probe error path
        - USB: serial: keyspan: fix use-after-free in probe error path
        - USB: serial: quatech2: fix use-after-free in probe error path
        - USB: serial: io_edgeport: fix memory leaks in attach error path
        - USB: serial: io_edgeport: fix memory leaks in probe error path
        - USB: serial: option: add support for Cinterion PH8 and AHxx
        - USB: serial: option: add more ZTE device ids
        - USB: serial: option: add even more ZTE device ids
        - usb: gadget: f_fs: Fix EFAULT generation for async read operations
        - usb: f_mass_storage: test whether thread is running before starting another
        - usb: misc: usbtest: fix pattern tests for scatterlists.
        - usb: gadget: udc: core: Fix argument of dev_err() in
          usb_gadget_map_request()
        - staging: comedi: das1800: fix possible NULL dereference
        - KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
        - MIPS: KVM: Fix timer IRQ race when freezing timer
        - MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
        - KVM: x86: mask CPUID(0xD,0x1).EAX against host value
        - xen/x86: actually allocate legacy interrupts on PV guests
        - tty: vt, return error when con_startup fails
        - TTY: n_gsm, fix false positive WARN_ON
        - tty/serial: atmel: fix hardware handshake selection
        - Fix OpenSSH pty regression on close
        - serial: 8250_pci: fix divide error bug if baud rate is 0
        - serial: 8250_mid: use proper bar for DNV platform
        - serial: 8250_mid: recognize interrupt source in handler
        - serial: samsung: Reorder the sequence of clock control when call
          s3c24xx_serial_set_termios()
        - locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
        - clk: bcm2835: add locking to pll*_on/off methods
        - mcb: Fixed bar number assignment for the gdd
        - ALSA: hda/realtek - New codecs support for ALC234/ALC274/ALC294
        - ALSA: hda - Fix headphone noise on Dell XPS 13 9360
        - ALSA: hda/realtek - Add support for ALC295/ALC3254
        - ALSA: hda - Fix headset mic detection problem for one Dell machine
        - IB/srp: Fix a debug kernel crash
        - thunderbolt: Fix double free of drom buffer
        - SIGNAL: Move generic copy_siginfo() to signal.h
        - UBI: Fix static volume checks when Fastmap is used
        - hpfs: fix remount failure when there are no options changed
        - hpfs: implement the show_options method
        - scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
        - Revert "scsi: fix soft lockup in scsi_remove_target() on module removal"
        - kbuild: move -Wunused-const-variable to W=1 warning level
        - Linux 4.4.12
      * [Hyper-V] fixes for kdump when running on a VM (LP: #1588965)
        - clocksource: Allow unregistering the watchdog
      * net_admin apparmor denial when using Go (LP: #1465724)
        - SAUCE: kernel: Add noaudit variant of ns_capable()
        - SAUCE: net: Use ns_capable_noaudit() when determining net sysctl permissions
      * [Hyper-V] Put tools/hv/lsvmbus in /usr/sbin (LP: #1585311)
        - [Debian] Install lsvmbus in cloud tools
        - SAUCE: tools/hv/lsvmbus -- convert to python3
        - SAUCE: tools/hv/lsvmbus -- add manual page
      * btrfs: file write crashes with false ENOSPC during snapshot creation since
        kernel 4.4 - fix available (LP: #1584052)
        - btrfs: Continue write in case of can_not_nocow
      * boot stalls on USB detection errors (LP: #1437492)
        - usb: core: hub: hub_port_init lock controller instead of bus
      * [Bug]KNL:Spread MWAIT cache lines over all nodes (LP: #1585850)
        - kernek/fork.c: allocate idle task for a CPU always on its local node
      * [Hyper-V] PCI Passthrough kernel hang and explicit barriers (LP: #1581243)
        - PCI: hv: Report resources release after stopping the bus
        - PCI: hv: Add explicit barriers to config space access
      * Kernel 4.2.X and 4.4.X - Fix USB3.0 link power management (LPM)
        claim/release logic in USBFS (LP: #1577024)
        - USB: leave LPM alone if possible when binding/unbinding interface drivers
      * STC840.20:tuleta:tul516p01 panic after injecting Leaf EEH (LP: #1581034)
        - NVMe: Fix namespace removal deadlock
        - NVMe: Requeue requests on suspended queues
        - NVMe: Move error handling to failed reset handler
        - blk-mq: End unstarted requests on dying queue
      * conflicting modules in udebs - arc4.ko (LP: #1582991)
        - [Config] Remove arc4 from nic-modules
      * CVE-2016-4482 (LP: #1578493)
        - USB: usbfs: fix potential infoleak in devio
      * mlx5_core kexec fail  (LP: #1585978)
        - net/mlx5: Add pci shutdown callback
      * backport fix for /proc/net issues with containers (LP: #1584953)
        - netfilter: Set /proc/net entries owner to root in namespace
      * CVE-2016-4951 (LP: #1585365)
        - tipc: check nl sock before parsing nested attributes
      * CVE-2016-4578 (LP: #1581866)
        - ALSA: timer: Fix leak in events via snd_timer_user_ccallback
        - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
      * CVE-2016-4569 (LP: #1580379)
        - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
      * s390/pci: fix use after free in dma_init (LP: #1584828)
        - s390/pci: fix use after free in dma_init
      * s390/mm: fix asce_bits handling with dynamic pagetable levels (LP: #1584827)
        - s390/mm: fix asce_bits handling with dynamic pagetable levels
      * CAPI: CGZIP Wrong CAPI MMIO timeout (256usec desired but 1usec default
        setting in cxl.ko driver) (LP: #1584066)
        - powerpc: Define PVR value for POWER8NVL processor
        - cxl: Configure the PSL for two CAPI ports on POWER8NVL
        - cxl: Increase timeout for detection of AFU mmio hang
      * ThunderX: soft lockup in cursor_timer_handler() (LP: #1574814)
        - SAUCE: tty: vt: Fix soft lockup in fbcon cursor blink timer.
      * debian.master/.../getabis bogus warnings "inconsistant compiler versions"
        and "not a git repository" (LP: #1584890)
        - [debian] getabis: Only git add $abidir if running in local repo
        - [debian] getabis: Fix inconsistent compiler versions check
      * Backport cxlflash patch related to EEH recovery into Xenial SRU stream
        (LP: #1584935)
        - cxlflash: Fix to resolve dead-lock during EEH recovery
      * Xenial update to 4.4.11 stable release (LP: #1584912)
        - decnet: Do not build routes to devices without decnet private data.
        - route: do not cache fib route info on local routes with oif
        - packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
        - net: sched: do not requeue a NULL skb
        - bpf/verifier: reject invalid LD_ABS | BPF_DW instruction
        - cdc_mbim: apply "NDP to end" quirk to all Huawei devices
        - net: use skb_postpush_rcsum instead of own implementations
        - vlan: pull on __vlan_insert_tag error path and fix csum correction
        - openvswitch: use flow protocol when recalculating ipv6 checksums
        - ipv4/fib: don't warn when primary address is missing if in_dev is dead
        - net/mlx4_en: fix spurious timestamping callbacks
        - bpf: fix check_map_func_compatibility logic
        - samples/bpf: fix trace_output example
        - net: Implement net_dbg_ratelimited() for CONFIG_DYNAMIC_DEBUG case
        - gre: do not pull header in ICMP error processing
        - net_sched: introduce qdisc_replace() helper
        - net_sched: update hierarchical backlog too
        - sch_htb: update backlog as well
        - sch_dsmark: update backlog as well
        - netem: Segment GSO packets on enqueue
        - net: fec: only clear a queue's work bit if the queue was emptied
        - VSOCK: do not disconnect socket when peer has shutdown SEND only
        - net: bridge: fix old ioctl unlocked net device walk
        - bridge: fix igmp / mld query parsing
        - uapi glibc compat: fix compile errors when glibc net/if.h included before
          linux/if.h MIME-Version: 1.0
        - net: fix a kernel infoleak in x25 module
        - net: thunderx: avoid exposing kernel stack
        - tcp: refresh skb timestamp at retransmit time
        - net/route: enforce hoplimit max value
        - ocfs2: revert using ocfs2_acl_chmod to avoid inode cluster lock hang
        - ocfs2: fix posix_acl_create deadlock
        - zsmalloc: fix zs_can_compact() integer overflow
        - crypto: qat - fix invalid pf2vf_resp_wq logic
        - crypto: hash - Fix page length clamping in hash walk
        - crypto: testmgr - Use kmalloc memory for RSA input
        - ALSA: usb-audio: Quirk for yet another Phoenix Audio devices (v2)
        - ALSA: usb-audio: Yet another Phoneix Audio device quirk
        - ALSA: hda - Fix subwoofer pin on ASUS N751 and N551
        - ALSA: hda - Fix white noise on Asus UX501VW headset
        - ALSA: hda - Fix broken reconfig
        - spi: pxa2xx: Do not detect number of enabled chip selects on Intel SPT
        - spi: spi-ti-qspi: Fix FLEN and WLEN settings if bits_per_word is overridden
        - spi: spi-ti-qspi: Handle truncated frames properly
        - pinctrl: at91-pio4: fix pull-up/down logic
        - regmap: spmi: Fix regmap_spmi_ext_read in multi-byte case
        - perf/core: Disable the event on a truncated AUX record
        - vfs: add vfs_select_inode() helper
        - vfs: rename: check backing inode being equal
        - ARM: dts: at91: sam9x5: Fix the memory range assigned to the PMC
        - workqueue: fix rebind bound workers warning
        - regulator: s2mps11: Fix invalid selector mask and voltages for buck9
        - regulator: axp20x: Fix axp22x ldo_io voltage ranges
        - atomic_open(): fix the handling of create_error
        - qla1280: Don't allocate 512kb of host tags
        - tools lib traceevent: Do not reassign parg after collapse_tree()
        - get_rock_ridge_filename(): handle malformed NM entries
        - Input: max8997-haptic - fix NULL pointer dereference
        - Revert "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
        - drm/radeon: fix PLL sharing on DCE6.1 (v2)
        - drm/i915: Bail out of pipe config compute loop on LPT
        - drm/i915/bdw: Add missing delay during L3 SQC credit programming
        - drm/radeon: fix DP link training issue with second 4K monitor
        - nf_conntrack: avoid kernel pointer value leak in slab name
        - Linux 4.4.11
      * Support Edge Gateway's Bluetooth LED (LP: #1512999)
        - SAUCE: Bluetooth: Support for LED on Marvell modules
      * Support Edge Gateway's WIFI LED (LP: #1512997)
        - SAUCE: mwifiex: Switch WiFi LED state according to the device status
      * Marvell wireless driver update for FCC regulation (LP: #1528910)
        - mwifiex: parse adhoc start/join result
        - mwifiex: handle start AP error paths correctly
        - mwifiex: set regulatory info from EEPROM
        - mwifiex: don't follow AP if country code received from EEPROM
        - mwifiex: correction in region code to country mapping
        - mwifiex: update region_code_index array
        - mwifiex: use world for unidentified region code
        - SAUCE: mwifiex: add iw vendor command support
      * Kernel can be oopsed using remap_file_pages (LP: #1558120)
        - Revert "UBUNTU: SAUCE: mm/mmap: fix oopsing on remap_file_pages"
        - SAUCE: AUFS: mm/mmap: fix oopsing on remap_file_pages aufs mmap: bugfix,
          mainly for linux-4.5-rc5, remap_file_pages(2) emulation
      * cgroup namespace update (LP: #1584163)
        - Revert "UBUNTU: SAUCE: cgroup mount: ignore nsroot="
        - Revert "UBUNTU: SAUCE: (noup) cgroup namespaces: add a 'nsroot=' mountinfo
          field"
        - cgroup, kernfs: make mountinfo show properly scoped path for cgroup
          namespaces
        - kernfs: kernfs_sop_show_path: don't return 0 after seq_dentry call
        - cgroup: fix compile warning
      * Missing libunwind support in perf (LP: #1248289)
        - [Config] add binutils-dev to the Build-Depends: to fix perf unwinding
      * e1000 Tx Unit Hang  (LP: #1582328)
        - e1000: Double Tx descriptors needed check for 82544
        - e1000: Do not overestimate descriptor counts in Tx pre-check
      * Unsharing user and ipc namespaces simultaneously makes mqueue unmountable
        (LP: #1582378)
        - SAUCE: (namespace) mqueue: Super blocks must be owned by the user ns which
          owns the ipc ns
      * Pull in the amdgpu/radeon code from Linux 4.5.3 (LP: #1580526)
        - drm/radeon: rework fbdev handling on chips with no connectors
        - drm/radeon/mst: fix regression in lane/link handling.
        - drm/amd/powerplay: add uvd/vce dpm enabling flag to fix the performance
          issue for CZ
        - drm/amd/powerplay: fix segment fault issue in multi-display case.
        - drm/ttm: fix kref count mess in ttm_bo_move_to_lru_tail
      * aufs CONFIG_AUFS_EXPORT build option should be enabled (LP: #1121699)
        - [Config] enable CONFIG_AUFS_EXPORT
      * promote *_diag modules from linux-image-extra to linux-image (LP: #1580355)
        - [Config] Update inclusion list for CRIU
      * [Xenial] net: updates to ethtool and virtio_net for speed/duplex support
        (LP: #1581132)
        - ethtool: add speed/duplex validation functions
        - ethtool: make validate_speed accept all speeds between 0 and INT_MAX
        - virtio_net: add ethtool support for set and get of settings
        - virtio_net: validate ethtool port setting and explain the user validation
      * perf tool: Display event codes for Generic HW (PMU) events (LP: #1578211)
        - powerpc/perf: Remove PME_ prefix for power7 events
        - powerpc/perf: Export Power8 generic and cache events to sysfs
      * Mellanox ConnectX4 MTU limits: max and min (LP: #1528466)
        - net/mlx5: Introduce a new header file for physical port functions
        - net/mlx5e: Device's mtu field is u16 and not int
        - net/mlx5e: Fix minimum MTU
      * Miscellaneous Ubuntu changes
        - [Config] CONFIG_CAVIUM_ERRATUM_23144=y
    
     -- Kamal Mostafa <email address hidden>  Mon, 20 Jun 2016 11:48:30 -0700
  • linux-snapdragon (4.4.0-1016.19) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1591462
    
      [ Ubuntu: 4.4.0-25.44 ]
    
      * Xenial update to v4.4.13 stable release (LP: #1590455)
        - MIPS64: R6: R2 emulation bugfix
        - MIPS: math-emu: Fix jalr emulation when rd == $0
        - MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
        - MIPS: Don't unwind to user mode with EVA
        - MIPS: Avoid using unwind_stack() with usermode
        - MIPS: Fix siginfo.h to use strict posix types
        - MIPS: Fix uapi include in exported asm/siginfo.h
        - MIPS: Fix watchpoint restoration
        - MIPS: Flush highmem pages in __flush_dcache_page
        - MIPS: Handle highmem pages in __update_cache
        - MIPS: Sync icache & dcache in set_pte_at
        - MIPS: ath79: make bootconsole wait for both THRE and TEMT
        - MIPS: Reserve nosave data for hibernation
        - MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
        - MIPS: Use copy_s.fmt rather than copy_u.fmt
        - MIPS: Fix MSA ld_*/st_* asm macros to use PTR_ADDU
        - MIPS: Prevent "restoration" of MSA context in non-MSA kernels
        - MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
        - MIPS: ptrace: Fix FP context restoration FCSR regression
        - MIPS: ptrace: Prevent writes to read-only FCSR bits
        - MIPS: Fix sigreturn via VDSO on microMIPS kernel
        - MIPS: Build microMIPS VDSO for microMIPS kernels
        - MIPS: lib: Mark intrinsics notrace
        - MIPS: VDSO: Build with `-fno-strict-aliasing'
        - affs: fix remount failure when there are no options changed
        - ASoC: ak4642: Enable cache usage to fix crashes on resume
        - Input: uinput - handle compat ioctl for UI_SET_PHYS
        - ARM: mvebu: fix GPIO config on the Linksys boards
        - ARM: dts: at91: fix typo in sama5d2 PIN_PD24 description
        - ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on exynos4210-trats
        - ARM: dts: imx35: restore existing used clock enumeration
        - ath9k: Add a module parameter to invert LED polarity.
        - ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
        - ath10k: fix debugfs pktlog_filter write
        - ath10k: fix firmware assert in monitor mode
        - ath10k: fix rx_channel during hw reconfigure
        - ath10k: fix kernel panic, move arvifs list head init before htt init
        - ath5k: Change led pin configuration for compaq c700 laptop
        - hwrng: exynos - Fix unbalanced PM runtime put on timeout error path
        - rtlwifi: rtl8723be: Add antenna select module parameter
        - rtlwifi: btcoexist: Implement antenna selection
        - rtlwifi: Fix logic error in enter/exit power-save mode
        - rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in
          rtl_pci_reset_trx_ring
        - aacraid: Relinquish CPU during timeout wait
        - aacraid: Fix for aac_command_thread hang
        - aacraid: Fix for KDUMP driver hang
        - hwmon: (ads7828) Enable internal reference
        - mfd: intel-lpss: Save register context on suspend
        - mfd: intel_soc_pmic_core: Terminate panel control GPIO lookup table
          correctly
        - PM / Runtime: Fix error path in pm_runtime_force_resume()
        - cpuidle: Indicate when a device has been unregistered
        - cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
        - clk: bcm2835: Fix PLL poweron
        - clk: at91: fix check of clk_register() returned value
        - clk: bcm2835: pll_off should only update CM_PLL_ANARST
        - clk: bcm2835: divider value has to be 1 or more
        - pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
        - PCI: Disable all BAR sizing for devices with non-compliant BARs
        - media: v4l2-compat-ioctl32: fix missing reserved field copy in
          put_v4l2_create32
        - mm: use phys_addr_t for reserve_bootmem_region() arguments
        - wait/ptrace: assume __WALL if the child is traced
        - QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
        - powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
        - powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
        - powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
        - xen/events: Don't move disabled irqs
        - xen: use same main loop for counting and remapping pages
        - sunrpc: fix stripping of padded MIC tokens
        - drm/gma500: Fix possible out of bounds read
        - drm/vmwgfx: Enable SVGA_3D_CMD_DX_SET_PREDICATION
        - drm/vmwgfx: use vmw_cmd_dx_cid_check for query commands.
        - drm/vmwgfx: Fix order of operation
        - drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
        - drm/amdgpu: Fix hdmi deep color support.
        - drm/i915/fbdev: Fix num_connector references in intel_fb_initial_config()
        - drm/fb_helper: Fix references to dev->mode_config.num_connector
        - drm/atomic: Verify connector->funcs != NULL when clearing states
        - drm/i915: Don't leave old junk in ilk active watermarks on readout
        - drm/imx: Match imx-ipuv3-crtc components using device node in platform data
        - ext4: fix hang when processing corrupted orphaned inode list
        - ext4: clean up error handling when orphan list is corrupted
        - ext4: fix oops on corrupted filesystem
        - ext4: address UBSAN warning in mb_find_order_for_block()
        - ext4: silence UBSAN in ext4_mb_init()
        - PM / sleep: Handle failures in device_suspend_late() consistently
        - dma-debug: avoid spinlock recursion when disabling dma-debug
        - scripts/package/Makefile: rpmbuild add support of RPMOPTS
        - gcov: disable tree-loop-im to reduce stack usage
        - xfs: disallow rw remount on fs with unknown ro-compat features
        - xfs: Don't wrap growfs AGFL indexes
        - xfs: xfs_iflush_cluster fails to abort on error
        - xfs: fix inode validity check in xfs_iflush_cluster
        - xfs: skip stale inodes in xfs_iflush_cluster
        - xfs: print name of verifier if it fails
        - xfs: handle dquot buffer readahead in log recovery correctly
        - Linux 4.4.13
      * 168c:001c [HP Compaq Presario C700 Notebook PC] Wireless led button doesn't
        switch colors (LP: #972604)
        - ath5k: Change led pin configuration for compaq c700 laptop
      * Extended statistics from balloon for proper memory management (LP: #1587091)
        - mm/page_alloc.c: calculate 'available' memory in a separate function
        - virtio_balloon: export 'available' memory to balloon statistics
      * CAPI: CGZIP AFU contexts do not receive interrupts after heavy afu
        open/close (LP: #1588468)
        - misc: cxl: use kobj_to_dev()
        - cxl: Move common code away from bare-metal-specific files
        - cxl: Move bare-metal specific code to specialized files
        - cxl: Define process problem state area at attach time only
        - cxl: Introduce implementation-specific API
        - cxl: Rename some bare-metal specific functions
        - cxl: Isolate a few bare-metal-specific calls
        - cxl: Update cxl_irq() prototype
        - cxl: IRQ allocation for guests
        - powerpc: New possible return value from hcall
        - cxl: New hcalls to support cxl adapters
        - cxl: Separate bare-metal fields in adapter and AFU data structures
        - cxlflash: Simplify PCI registration
        - cxlflash: Unmap problem state area before detaching master context
        - cxlflash: Split out context initialization
        - cxlflash: Simplify attach path error cleanup
        - cxlflash: Reorder user context initialization
        - cxl: Add guest-specific code
        - cxl: sysfs support for guests
        - cxl: Support to flash a new image on the adapter from a guest
        - cxl: Parse device tree and create cxl device(s) at boot
        - cxl: Support the cxl kernel API from a guest
        - cxl: Adapter failure handling
        - cxl: Add tracepoints around the cxl hcall
        - cxlflash: Use new cxl_pci_read_adapter_vpd() API
        - cxl: Remove cxl_get_phys_dev() kernel API
        - cxl: Ignore probes for virtual afu pci devices
        - cxl: Poll for outstanding IRQs when detaching a context
      * NVMe max_segments queue parameter gets set to 1 (LP: #1588449)
        - nvme: set queue limits for the admin queue
        - nvme: fix max_segments integer truncation
        - block: fix blk_rq_get_max_sectors for driver private requests
      * workaround cavium thunderx silicon erratum 23144 (LP: #1589704)
        - irqchip/gicv3-its: numa: Enable workaround for Cavium thunderx erratum 23144
      * Xenial update to v4.4.12 stable release (LP: #1588945)
        - Btrfs: don't use src fd for printk
        - perf/x86/intel/pt: Generate PMI in the STOP region as well
        - perf/core: Fix perf_event_open() vs. execve() race
        - perf test: Fix build of BPF and LLVM on older glibc libraries
        - ext4: iterate over buffer heads correctly in move_extent_per_page()
        - arm64: Fix typo in the pmdp_huge_get_and_clear() definition
        - arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
        - arm64: Implement ptep_set_access_flags() for hardware AF/DBM
        - arm64: Implement pmdp_set_access_flags() for hardware AF/DBM
        - arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
        - arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
        - kvm: arm64: Fix EC field in inject_abt64
        - remove directory incorrectly tries to set delete on close on non-empty
          directories
        - fs/cifs: correctly to anonymous authentication via NTLMSSP
        - fs/cifs: correctly to anonymous authentication for the LANMAN authentication
        - fs/cifs: correctly to anonymous authentication for the NTLM(v1)
          authentication
        - fs/cifs: correctly to anonymous authentication for the NTLM(v2)
          authentication
        - asix: Fix offset calculation in asix_rx_fixup() causing slow transmissions
        - ring-buffer: Use long for nr_pages to avoid overflow failures
        - ring-buffer: Prevent overflow of size in ring_buffer_resize()
        - crypto: caam - fix caam_jr_alloc() ret code
        - crypto: talitos - fix ahash algorithms registration
        - crypto: sun4i-ss - Replace spinlock_bh by spin_lock_irq{save|restore}
        - clk: qcom: msm8916: Fix crypto clock flags
        - sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded
          systems
        - mfd: omap-usb-tll: Fix scheduling while atomic BUG
        - Input: pwm-beeper - fix - scheduling while atomic
        - irqchip/gic: Ensure ordering between read of INTACK and shared data
        - irqchip/gic-v3: Configure all interrupts as non-secure Group-1
        - can: fix handling of unmodifiable configuration options
        - mmc: mmc: Fix partition switch timeout for some eMMCs
        - mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
        - ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA internal
          strings
        - dell-rbtn: Ignore ACPI notifications if device is suspended
        - mmc: longer timeout for long read time quirk
        - mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
        - Bluetooth: vhci: fix open_timeout vs. hdev race
        - Bluetooth: vhci: purge unhandled skbs
        - Bluetooth: vhci: Fix race at creating hci device
        - mei: fix NULL dereferencing during FW initiated disconnection
        - mei: amthif: discard not read messages
        - mei: bus: call mei_cl_read_start under device lock
        - USB: serial: mxuport: fix use-after-free in probe error path
        - USB: serial: keyspan: fix use-after-free in probe error path
        - USB: serial: quatech2: fix use-after-free in probe error path
        - USB: serial: io_edgeport: fix memory leaks in attach error path
        - USB: serial: io_edgeport: fix memory leaks in probe error path
        - USB: serial: option: add support for Cinterion PH8 and AHxx
        - USB: serial: option: add more ZTE device ids
        - USB: serial: option: add even more ZTE device ids
        - usb: gadget: f_fs: Fix EFAULT generation for async read operations
        - usb: f_mass_storage: test whether thread is running before starting another
        - usb: misc: usbtest: fix pattern tests for scatterlists.
        - usb: gadget: udc: core: Fix argument of dev_err() in
          usb_gadget_map_request()
        - staging: comedi: das1800: fix possible NULL dereference
        - KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
        - MIPS: KVM: Fix timer IRQ race when freezing timer
        - MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
        - KVM: x86: mask CPUID(0xD,0x1).EAX against host value
        - xen/x86: actually allocate legacy interrupts on PV guests
        - tty: vt, return error when con_startup fails
        - TTY: n_gsm, fix false positive WARN_ON
        - tty/serial: atmel: fix hardware handshake selection
        - Fix OpenSSH pty regression on close
        - serial: 8250_pci: fix divide error bug if baud rate is 0
        - serial: 8250_mid: use proper bar for DNV platform
        - serial: 8250_mid: recognize interrupt source in handler
        - serial: samsung: Reorder the sequence of clock control when call
          s3c24xx_serial_set_termios()
        - locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
        - clk: bcm2835: add locking to pll*_on/off methods
        - mcb: Fixed bar number assignment for the gdd
        - ALSA: hda/realtek - New codecs support for ALC234/ALC274/ALC294
        - ALSA: hda - Fix headphone noise on Dell XPS 13 9360
        - ALSA: hda/realtek - Add support for ALC295/ALC3254
        - ALSA: hda - Fix headset mic detection problem for one Dell machine
        - IB/srp: Fix a debug kernel crash
        - thunderbolt: Fix double free of drom buffer
        - SIGNAL: Move generic copy_siginfo() to signal.h
        - UBI: Fix static volume checks when Fastmap is used
        - hpfs: fix remount failure when there are no options changed
        - hpfs: implement the show_options method
        - scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
        - Revert "scsi: fix soft lockup in scsi_remove_target() on module removal"
        - kbuild: move -Wunused-const-variable to W=1 warning level
        - Linux 4.4.12
      * [Hyper-V] fixes for kdump when running on a VM (LP: #1588965)
        - clocksource: Allow unregistering the watchdog
      * net_admin apparmor denial when using Go (LP: #1465724)
        - SAUCE: kernel: Add noaudit variant of ns_capable()
        - SAUCE: net: Use ns_capable_noaudit() when determining net sysctl permissions
      * [Hyper-V] Put tools/hv/lsvmbus in /usr/sbin (LP: #1585311)
        - [Debian] Install lsvmbus in cloud tools
        - SAUCE: tools/hv/lsvmbus -- convert to python3
        - SAUCE: tools/hv/lsvmbus -- add manual page
      * btrfs: file write crashes with false ENOSPC during snapshot creation since
        kernel 4.4 - fix available (LP: #1584052)
        - btrfs: Continue write in case of can_not_nocow
      * boot stalls on USB detection errors (LP: #1437492)
        - usb: core: hub: hub_port_init lock controller instead of bus
      * [Bug]KNL:Spread MWAIT cache lines over all nodes (LP: #1585850)
        - kernek/fork.c: allocate idle task for a CPU always on its local node
      * [Hyper-V] PCI Passthrough kernel hang and explicit barriers (LP: #1581243)
        - PCI: hv: Report resources release after stopping the bus
        - PCI: hv: Add explicit barriers to config space access
      * Kernel 4.2.X and 4.4.X - Fix USB3.0 link power management (LPM)
        claim/release logic in USBFS (LP: #1577024)
        - USB: leave LPM alone if possible when binding/unbinding interface drivers
      * STC840.20:tuleta:tul516p01 panic after injecting Leaf EEH (LP: #1581034)
        - NVMe: Fix namespace removal deadlock
        - NVMe: Requeue requests on suspended queues
        - NVMe: Move error handling to failed reset handler
        - blk-mq: End unstarted requests on dying queue
      * conflicting modules in udebs - arc4.ko (LP: #1582991)
        - [Config] Remove arc4 from nic-modules
      * CVE-2016-4482 (LP: #1578493)
        - USB: usbfs: fix potential infoleak in devio
      * mlx5_core kexec fail  (LP: #1585978)
        - net/mlx5: Add pci shutdown callback
      * backport fix for /proc/net issues with containers (LP: #1584953)
        - netfilter: Set /proc/net entries owner to root in namespace
      * CVE-2016-4951 (LP: #1585365)
        - tipc: check nl sock before parsing nested attributes
      * CVE-2016-4578 (LP: #1581866)
        - ALSA: timer: Fix leak in events via snd_timer_user_ccallback
        - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
      * CVE-2016-4569 (LP: #1580379)
        - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
      * s390/pci: fix use after free in dma_init (LP: #1584828)
        - s390/pci: fix use after free in dma_init
      * s390/mm: fix asce_bits handling with dynamic pagetable levels (LP: #1584827)
        - s390/mm: fix asce_bits handling with dynamic pagetable levels
      * CAPI: CGZIP Wrong CAPI MMIO timeout (256usec desired but 1usec default
        setting in cxl.ko driver) (LP: #1584066)
        - powerpc: Define PVR value for POWER8NVL processor
        - cxl: Configure the PSL for two CAPI ports on POWER8NVL
        - cxl: Increase timeout for detection of AFU mmio hang
      * ThunderX: soft lockup in cursor_timer_handler() (LP: #1574814)
        - SAUCE: tty: vt: Fix soft lockup in fbcon cursor blink timer.
      * debian.master/.../getabis bogus warnings "inconsistant compiler versions"
        and "not a git repository" (LP: #1584890)
        - [debian] getabis: Only git add $abidir if running in local repo
        - [debian] getabis: Fix inconsistent compiler versions check
      * Backport cxlflash patch related to EEH recovery into Xenial SRU stream
        (LP: #1584935)
        - cxlflash: Fix to resolve dead-lock during EEH recovery
      * Xenial update to 4.4.11 stable release (LP: #1584912)
        - decnet: Do not build routes to devices without decnet private data.
        - route: do not cache fib route info on local routes with oif
        - packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
        - net: sched: do not requeue a NULL skb
        - bpf/verifier: reject invalid LD_ABS | BPF_DW instruction
        - cdc_mbim: apply "NDP to end" quirk to all Huawei devices
        - net: use skb_postpush_rcsum instead of own implementations
        - vlan: pull on __vlan_insert_tag error path and fix csum correction
        - openvswitch: use flow protocol when recalculating ipv6 checksums
        - ipv4/fib: don't warn when primary address is missing if in_dev is dead
        - net/mlx4_en: fix spurious timestamping callbacks
        - bpf: fix check_map_func_compatibility logic
        - samples/bpf: fix trace_output example
        - net: Implement net_dbg_ratelimited() for CONFIG_DYNAMIC_DEBUG case
        - gre: do not pull header in ICMP error processing
        - net_sched: introduce qdisc_replace() helper
        - net_sched: update hierarchical backlog too
        - sch_htb: update backlog as well
        - sch_dsmark: update backlog as well
        - netem: Segment GSO packets on enqueue
        - net: fec: only clear a queue's work bit if the queue was emptied
        - VSOCK: do not disconnect socket when peer has shutdown SEND only
        - net: bridge: fix old ioctl unlocked net device walk
        - bridge: fix igmp / mld query parsing
        - uapi glibc compat: fix compile errors when glibc net/if.h included before
          linux/if.h MIME-Version: 1.0
        - net: fix a kernel infoleak in x25 module
        - net: thunderx: avoid exposing kernel stack
        - tcp: refresh skb timestamp at retransmit time
        - net/route: enforce hoplimit max value
        - ocfs2: revert using ocfs2_acl_chmod to avoid inode cluster lock hang
        - ocfs2: fix posix_acl_create deadlock
        - zsmalloc: fix zs_can_compact() integer overflow
        - crypto: qat - fix invalid pf2vf_resp_wq logic
        - crypto: hash - Fix page length clamping in hash walk
        - crypto: testmgr - Use kmalloc memory for RSA input
        - ALSA: usb-audio: Quirk for yet another Phoenix Audio devices (v2)
        - ALSA: usb-audio: Yet another Phoneix Audio device quirk
        - ALSA: hda - Fix subwoofer pin on ASUS N751 and N551
        - ALSA: hda - Fix white noise on Asus UX501VW headset
        - ALSA: hda - Fix broken reconfig
        - spi: pxa2xx: Do not detect number of enabled chip selects on Intel SPT
        - spi: spi-ti-qspi: Fix FLEN and WLEN settings if bits_per_word is overridden
        - spi: spi-ti-qspi: Handle truncated frames properly
        - pinctrl: at91-pio4: fix pull-up/down logic
        - regmap: spmi: Fix regmap_spmi_ext_read in multi-byte case
        - perf/core: Disable the event on a truncated AUX record
        - vfs: add vfs_select_inode() helper
        - vfs: rename: check backing inode being equal
        - ARM: dts: at91: sam9x5: Fix the memory range assigned to the PMC
        - workqueue: fix rebind bound workers warning
        - regulator: s2mps11: Fix invalid selector mask and voltages for buck9
        - regulator: axp20x: Fix axp22x ldo_io voltage ranges
        - atomic_open(): fix the handling of create_error
        - qla1280: Don't allocate 512kb of host tags
        - tools lib traceevent: Do not reassign parg after collapse_tree()
        - get_rock_ridge_filename(): handle malformed NM entries
        - Input: max8997-haptic - fix NULL pointer dereference
        - Revert "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing"
        - drm/radeon: fix PLL sharing on DCE6.1 (v2)
        - drm/i915: Bail out of pipe config compute loop on LPT
        - drm/i915/bdw: Add missing delay during L3 SQC credit programming
        - drm/radeon: fix DP link training issue with second 4K monitor
        - nf_conntrack: avoid kernel pointer value leak in slab name
        - Linux 4.4.11
      * Support Edge Gateway's Bluetooth LED (LP: #1512999)
        - SAUCE: Bluetooth: Support for LED on Marvell modules
      * Support Edge Gateway's WIFI LED (LP: #1512997)
        - SAUCE: mwifiex: Switch WiFi LED state according to the device status
      * Marvell wireless driver update for FCC regulation (LP: #1528910)
        - mwifiex: parse adhoc start/join result
        - mwifiex: handle start AP error paths correctly
        - mwifiex: set regulatory info from EEPROM
        - mwifiex: don't follow AP if country code received from EEPROM
        - mwifiex: correction in region code to country mapping
        - mwifiex: update region_code_index array
        - mwifiex: use world for unidentified region code
        - SAUCE: mwifiex: add iw vendor command support
      * Kernel can be oopsed using remap_file_pages (LP: #1558120)
        - Revert "UBUNTU: SAUCE: mm/mmap: fix oopsing on remap_file_pages"
        - SAUCE: AUFS: mm/mmap: fix oopsing on remap_file_pages aufs mmap: bugfix,
          mainly for linux-4.5-rc5, remap_file_pages(2) emulation
      * cgroup namespace update (LP: #1584163)
        - Revert "UBUNTU: SAUCE: cgroup mount: ignore nsroot="
        - Revert "UBUNTU: SAUCE: (noup) cgroup namespaces: add a 'nsroot=' mountinfo
          field"
        - cgroup, kernfs: make mountinfo show properly scoped path for cgroup
          namespaces
        - kernfs: kernfs_sop_show_path: don't return 0 after seq_dentry call
        - cgroup: fix compile warning
      * Missing libunwind support in perf (LP: #1248289)
        - [Config] add binutils-dev to the Build-Depends: to fix perf unwinding
      * e1000 Tx Unit Hang  (LP: #1582328)
        - e1000: Double Tx descriptors needed check for 82544
        - e1000: Do not overestimate descriptor counts in Tx pre-check
      * Unsharing user and ipc namespaces simultaneously makes mqueue unmountable
        (LP: #1582378)
        - SAUCE: (namespace) mqueue: Super blocks must be owned by the user ns which
          owns the ipc ns
      * Pull in the amdgpu/radeon code from Linux 4.5.3 (LP: #1580526)
        - drm/radeon: rework fbdev handling on chips with no connectors
        - drm/radeon/mst: fix regression in lane/link handling.
        - drm/amd/powerplay: add uvd/vce dpm enabling flag to fix the performance
          issue for CZ
        - drm/amd/powerplay: fix segment fault issue in multi-display case.
        - drm/ttm: fix kref count mess in ttm_bo_move_to_lru_tail
      * aufs CONFIG_AUFS_EXPORT build option should be enabled (LP: #1121699)
        - [Config] enable CONFIG_AUFS_EXPORT
      * promote *_diag modules from linux-image-extra to linux-image (LP: #1580355)
        - [Config] Update inclusion list for CRIU
      * [Xenial] net: updates to ethtool and virtio_net for speed/duplex support
        (LP: #1581132)
        - ethtool: add speed/duplex validation functions
        - ethtool: make validate_speed accept all speeds between 0 and INT_MAX
        - virtio_net: add ethtool support for set and get of settings
        - virtio_net: validate ethtool port setting and explain the user validation
      * perf tool: Display event codes for Generic HW (PMU) events (LP: #1578211)
        - powerpc/perf: Remove PME_ prefix for power7 events
        - powerpc/perf: Export Power8 generic and cache events to sysfs
      * Mellanox ConnectX4 MTU limits: max and min (LP: #1528466)
        - net/mlx5: Introduce a new header file for physical port functions
        - net/mlx5e: Device's mtu field is u16 and not int
        - net/mlx5e: Fix minimum MTU
      * Miscellaneous Ubuntu changes
        - [Config] CONFIG_CAVIUM_ERRATUM_23144=y
    
     -- Kamal Mostafa <email address hidden>  Mon, 13 Jun 2016 11:42:36 -0700
  • linux-snapdragon (4.4.0-1015.18) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      [ Ubuntu: 4.4.0-24.42 ]
    
      * CVE-2016-1583 (LP: #1588871)
        - ecryptfs: fix handling of directory opening
        - SAUCE: proc: prevent stacking filesystems on top
        - SAUCE: ecryptfs: forbid opening files without mmap handler
        - SAUCE: sched: panic on corrupted stack end
      * arm64: statically link rtc-efi (LP: #1583738)
        - [Config] Link rtc-efi statically on arm64
    
     -- Andy Whitcroft <email address hidden>  Wed, 08 Jun 2016 21:34:43 +0100
  • linux-snapdragon (4.4.0-1014.16) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Rebase against Ubuntu-4.4.0-23.41
      * Release Tracking Bug
        - LP: #1582679
    
      * zfs: disable module checks for zfs when cross-compiling (LP: #1581127)
        - [Packaging] disable zfs module checks when cross-compiling
    
      * Xenial update to v4.4.10 stable release (LP: #1580754)
        - Revert "UBUNTU: SAUCE: (no-up) ACPICA: Dispatcher: Update thread ID for
          recursive method calls"
        - Revert "UBUNTU: SAUCE: nbd: ratelimit error msgs after socket close"
        - Revert: "powerpc/tm: Check for already reclaimed tasks"
        - RDMA/iw_cxgb4: Fix bar2 virt addr calculation for T4 chips
        - ipvs: handle ip_vs_fill_iph_skb_off failure
        - ipvs: correct initial offset of Call-ID header search in SIP persistence
          engine
        - ipvs: drop first packet to redirect conntrack
        - mfd: intel-lpss: Remove clock tree on error path
        - nbd: ratelimit error msgs after socket close
        - ata: ahci_xgene: dereferencing uninitialized pointer in probe
        - mwifiex: fix corner case association failure
        - CNS3xxx: Fix PCI cns3xxx_write_config()
        - clk-divider: make sure read-only dividers do not write to their register
        - soc: rockchip: power-domain: fix err handle while probing
        - clk: rockchip: free memory in error cases when registering clock branches
        - clk: meson: Fix meson_clk_register_clks() signature type mismatch
        - clk: qcom: msm8960: fix ce3_core clk enable register
        - clk: versatile: sp810: support reentrance
        - clk: qcom: msm8960: Fix ce3_src register offset
        - lpfc: fix misleading indentation
        - ath9k: ar5008_hw_cmn_spur_mitigate: add missing mask_m & mask_p
          initialisation
        - mac80211: fix statistics leak if dev_alloc_name() fails
        - tracing: Don't display trigger file for events that can't be enabled
        - MD: make bio mergeable
        - Minimal fix-up of bad hashing behavior of hash_64()
        - mm, cma: prevent nr_isolated_* counters from going negative
        - mm/zswap: provide unique zpool name
        - ARM: EXYNOS: Properly skip unitialized parent clock in power domain on
        - ARM: SoCFPGA: Fix secondary CPU startup in thumb2 kernel
        - xen: Fix page <-> pfn conversion on 32 bit systems
        - xen/balloon: Fix crash when ballooning on x86 32 bit PAE
        - xen/evtchn: fix ring resize when binding new events
        - HID: wacom: Add support for DTK-1651
        - HID: Fix boot delay for Creative SB Omni Surround 5.1 with quirk
        - Input: zforce_ts - fix dual touch recognition
        - proc: prevent accessing /proc/<PID>/environ until it's ready
        - mm: update min_free_kbytes from khugepaged after core initialization
        - batman-adv: fix DAT candidate selection (must use vid)
        - batman-adv: Check skb size before using encapsulated ETH+VLAN header
        - batman-adv: Fix broadcast/ogm queue limit on a removed interface
        - batman-adv: Reduce refcnt of removed router when updating route
        - writeback: Fix performance regression in wb_over_bg_thresh()
        - MAINTAINERS: Remove asterisk from EFI directory names
        - x86/tsc: Read all ratio bits from MSR_PLATFORM_INFO
        - ARM: cpuidle: Pass on arm_cpuidle_suspend()'s return value
        - ARC: Add missing io barriers to io{read,write}{16,32}be()
        - x86/sysfb_efi: Fix valid BAR address range check
        - ACPICA: Dispatcher: Update thread ID for recursive method calls
        - powerpc: Fix bad inline asm constraint in create_zero_mask()
        - libahci: save port map for forced port map
        - ata: ahci-platform: Add ports-implemented DT bindings.
        - USB: serial: cp210x: add ID for Link ECU
        - USB: serial: cp210x: add Straizona Focusers device ids
        - nvmem: mxs-ocotp: fix buffer overflow in read
        - gpu: ipu-v3: Fix imx-ipuv3-crtc module autoloading
        - drm/amdgpu: make sure vertical front porch is at least 1
        - drm/amdgpu: set metadata pointer to NULL after freeing.
        - iio: ak8975: Fix NULL pointer exception on early interrupt
        - iio: ak8975: fix maybe-uninitialized warning
        - drm/radeon: make sure vertical front porch is at least 1
        - drm/i915/ddi: Fix eDP VDD handling during booting and suspend/resume
        - drm/i915: Fix eDP low vswing for Broadwell
        - drm/i915: Make RPS EI/thresholds multiple of 25 on SNB-BDW
        - drm/i915: Fake HDMI live status
        - lib/test-string_helpers.c: fix and improve string_get_size() tests
        - drm/i915/skl: Fix DMC load on Skylake J0 and K0
        - Linux 4.4.10
    
      * HDMI audio playback noise  observed on AMD Polaris 10/11 GPU (LP: #1577288)
        - ALSA: hda: add AMD Polaris-10/11 AZ PCI IDs with proper driver caps
    
      * [i915_bpo] Update i915 backport driver (LP: #1580114)
        - SAUCE: i915_bpo: Drop is_preliminary from BXT/KBL.
        - SAUCE: i915_bpo: Sync with v4.6-rc7
    
      * CVE-2016-4486 (LP: #1578497)
        - net: fix infoleak in rtnetlink
    
      * CVE-2016-4485 (LP: #1578496)
        - net: fix infoleak in llc
    
      * drm.ko < kernel version 4.5 has a dead lock bug (LP: #1579610)
        - drm: Balance error path for GEM handle allocation
    
      * Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong not
        supported by compiler (LP: #1574982)
        - SAUCE: (no-up) disable -pie when gcc has it enabled by default
    
      * system freeze after vt switching (LP: #1542939)
        - drm/atomic: Add __drm_atomic_helper_connector_reset, v2.
        - drm/atomic: Remove drm_atomic_connectors_for_crtc.
    
      * CVE-2016-4558 (LP: #1579140)
        - bpf: fix refcnt overflow
    
      * Kernel Panic on EC2 After Upgrading from 14.04 to 16.04 via do-release-
        upgrade -d (LP: #1573231)
        - SAUCE: (no-up) x86/topology: Handle CPUID bogosity gracefully
    
      * PCI Call Traces  hw csum failure in dmesg with  4.4.0-2-generic
        (LP: #1544978)
        - net/mlx4_en: Fix endianness bug in IPV6 csum calculation
    
      * Missing libunwind support in perf (LP: #1248289)
        - [Config] Add liblzma-dev to enable libunwind support in perf
    
      * thunderbolt hotplug is broken (LP: #1577898)
        - SAUCE: (no-up) ACPICA: Dispatcher: Update thread ID for recursive method
          calls
    
      * Kernel can be oopsed using remap_file_pages (LP: #1558120)
        - SAUCE: mm/mmap: fix oopsing on remap_file_pages
    
      * ZFS is confused by user namespaces (uid/gid mapping) when used with
        acltype=posixac (LP: #1567558)
        - zfs: Fix user namespaces uid/gid mapping
    
      * oops when propagating mounts into containers - RIP:
        0010:[<ffffffff8123cb3e>] [<ffffffff8123cb3e>] propagate_one+0xbe/0x1c0
        (LP: #1572316)
        - fs/pnode.c: treat zero mnt_group_id-s as unequal
        - propogate_mnt: Handle the first propogated copy being a slave
    
      * OOPS on wily+ for Haswell-ULT and Broadwell (LP: #1577748)
        - PNP: Add Broadwell to Intel MCH size workaround
        - PNP: Add Haswell-ULT to Intel MCH size workaround
    
      * Xenial update to v4.4.9 stable release (LP: #1578798)
        - block: loop: fix filesystem corruption in case of aio/dio
        - x86/mce: Avoid using object after free in genpool
        - kvm: x86: do not leak guest xcr0 into host interrupt handlers
        - ARM: dts: AM43x-epos: Fix clk parent for synctimer
        - ARM: mvebu: Correct unit address for linksys
        - ARM: OMAP2: Fix up interconnect barrier initialization for DRA7
        - ARM: OMAP2+: hwmod: Fix updating of sysconfig register
        - assoc_array: don't call compare_object() on a node
        - usb: xhci: applying XHCI_PME_STUCK_QUIRK to Intel BXT B0 host
        - xhci: resume USB 3 roothub first
        - usb: xhci: fix wild pointers in xhci_mem_cleanup
        - xhci: fix 10 second timeout on removal of PCI hotpluggable xhci controllers
        - usb: hcd: out of bounds access in for_each_companion
        - usb: gadget: f_fs: Fix use-after-free
        - dm cache metadata: fix READ_LOCK macros and cleanup WRITE_LOCK macros
        - dm cache metadata: fix cmd_read_lock() acquiring write lock
        - lib: lz4: fixed zram with lz4 on big endian machines
        - debugfs: Make automount point inodes permanently empty
        - dmaengine: dw: fix master selection
        - dmaengine: hsu: correct use of channel status register
        - dmaengine: pxa_dma: fix the maximum requestor line
        - sched/cgroup: Fix/cleanup cgroup teardown/init
        - x86/mm/xen: Suppress hugetlbfs in PV guests
        - x86 EDAC, sb_edac.c: Repair damage introduced when "fixing" channel address
        - ALSA: hda - Don't trust the reported actual power state
        - ALSA: hda/realtek - Add ALC3234 headset mode for Optiplex 9020m
        - ALSA: hda - Keep powering up ADCs on Cirrus codecs
        - ALSA: hda - add PCI ID for Intel Broxton-T
        - ALSA: pcxhr: Fix missing mutex unlock
        - ALSA: hda - Add dock support for ThinkPad X260
        - asm-generic/futex: Re-enable preemption in futex_atomic_cmpxchg_inatomic()
        - futex: Handle unlock_pi race gracefully
        - futex: Acknowledge a new waiter in counter before plist
        - drm/nouveau/core: use vzalloc for allocating ramht
        - drm/qxl: fix cursor position with non-zero hotspot
        - drm/i915: Fix race condition in intel_dp_destroy_mst_connector()
        - Revert "drm/radeon: disable runtime pm on PX laptops without dGPU power
          control"
        - Revert "drm/amdgpu: disable runtime pm on PX laptops without dGPU power
          control"
        - cpufreq: intel_pstate: Fix processing for turbo activation ratio
        - iwlwifi: pcie: lower the debug level for RSA semaphore access
        - iwlwifi: mvm: fix memory leak in paging
        - crypto: ccp - Prevent information leakage on export
        - crypto: sha1-mb - use corrcet pointer while completing jobs
        - crypto: talitos - fix crash in talitos_cra_init()
        - crypto: talitos - fix AEAD tcrypt tests
        - powerpc: scan_features() updates incorrect bits for REAL_LE
        - powerpc: Update cpu_user_features2 in scan_features()
        - powerpc: Update TM user feature bits in scan_features()
        - nl80211: check netlink protocol in socket release notification
        - netlink: don't send NETLINK_URELEASE for unbound sockets
        - Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay
        - xen kconfig: don't "select INPUT_XEN_KBDDEV_FRONTEND"
        - pinctrl: mediatek: correct debounce time unit in mtk_gpio_set_debounce
        - pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs
        - iommu/amd: Fix checking of pci dma aliases
        - iommu/dma: Restore scatterlist offsets correctly
        - drm/amdgpu: when suspending, if uvd/vce was running. need to cancel delay
          work.
        - drm/amdgpu: use defines for CRTCs and AMFT blocks
        - drm/amdgpu: bump the afmt limit for CZ, ST, Polaris
        - amdgpu/uvd: add uvd fw version for amdgpu
        - drm/amdgpu: fix regression on CIK (v2)
        - drm/radeon: add a quirk for a XFX R9 270X
        - drm/radeon: fix initial connector audio value
        - drm/radeon: forbid mapping of userptr bo through radeon device file
        - drm/radeon: fix vertical bars appear on monitor (v2)
        - drm: Loongson-3 doesn't fully support wc memory
        - drm/nouveau/gr/gf100: select a stream master to fixup tfb offset queries
        - drm/dp/mst: Validate port in drm_dp_payload_send_msg()
        - drm/dp/mst: Restore primary hub guid on resume
        - drm/dp/mst: Get validated port ref in drm_dp_update_payload_part1()
        - pwm: brcmstb: Fix check of devm_ioremap_resource() return code
        - drm/i915: Cleanup phys status page too
        - drm/i915: skl_update_scaler() wants a rotation bitmask instead of bit number
        - drm/amdkfd: uninitialized variable in dbgdev_wave_control_set_registers()
        - drm/i915: Fixup the free space logic in ring_prepare
        - drm/i915: Use fw_domains_put_with_fifo() on HSW
        - perf intel-pt: Fix segfault tracing transactions
        - i2c: cpm: Fix build break due to incompatible pointer types
        - i2c: exynos5: Fix possible ABBA deadlock by keeping I2C clock prepared
        - toshiba_acpi: Fix regression caused by hotkey enabling value
        - EDAC: i7core, sb_edac: Don't return NOTIFY_BAD from mce_decoder callback
        - ASoC: s3c24xx: use const snd_soc_component_driver pointer
        - ASoC: ssm4567: Reset device before regcache_sync()
        - ASoC: dapm: Make sure we have a card when displaying component widgets
        - ASoC: rt5640: Correct the digital interface data select
        - vb2-memops: Fix over allocation of frame vectors
        - v4l2-dv-timings.h: fix polarity for 4k formats
        - cxl: Keep IRQ mappings on context teardown
        - IB/mlx5: Expose correct max_sge_rd limit
        - IB/security: Restrict use of the write() interface
        - efi: Fix out-of-bounds read in variable_matches()
        - efi: Expose non-blocking set_variable() wrapper to efivars
        - x86/apic: Handle zero vector gracefully in clear_vector_irq()
        - workqueue: fix ghost PENDING flag while doing MQ IO
        - slub: clean up code for kmem cgroup support to kmem_cache_free_bulk
        - cgroup, cpuset: replace cpuset_post_attach_flush() with
          cgroup_subsys->post_attach callback
        - memcg: relocate charge moving from ->attach to ->post_attach
        - mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check
        - numa: fix /proc/<pid>/numa_maps for THP
        - mm: vmscan: reclaim highmem zone if buffer_heads is over limit
        - mm/hwpoison: fix wrong num_poisoned_pages accounting
        - cgroup: make sure a parent css isn't freed before its children
        - videobuf2-core: Check user space planes array in dqbuf
        - videobuf2-v4l2: Verify planes array in buffer dequeueing
        - Revert "regulator: core: Fix nested locking of supplies"
        - regulator: core: fix regulator_lock_supply regression
        - regulator: core: Ensure we lock all regulators
        - regulator: core: Fix nested locking of supplies
        - locking/mcs: Fix mcs_spin_lock() ordering
        - spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs
        - irqchip/sunxi-nmi: Fix error check of of_io_request_and_map()
        - irqchip/mxs: Fix error check of of_io_request_and_map()
        - regulator: s5m8767: fix get_register() error handling
        - paride: make 'verbose' parameter an 'int' again
        - scsi_dh: force modular build if SCSI is a module
        - fbdev: da8xx-fb: fix videomodes of lcd panels
        - misc/bmp085: Enable building as a module
        - misc: mic/scif: fix wrap around tests
        - PM / OPP: Initialize u_volt_min/max to a valid value
        - PM / Domains: Fix removal of a subdomain
        - rtc: hym8563: fix invalid year calculation
        - rtc: vr41xx: Wire up alarm_irq_enable
        - rtc: ds1685: passing bogus values to irq_restore
        - rtc: rx8025: remove rv8803 id
        - rtc: max77686: Properly handle regmap_irq_get_virq() error code
        - drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
        - perf evlist: Reference count the cpu and thread maps at set_maps()
        - x86/mm/kmmio: Fix mmiotrace for hugepages
        - ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()
        - serial: sh-sci: Remove cpufreq notifier to fix crash/deadlock
        - mtd: spi-nor: remove micron_quad_enable()
        - mtd: brcmnand: Fix v7.1 register offsets
        - mtd: nand: Drop mtd.owner requirement in nand_scan
        - perf hists browser: Only offer symbol scripting when a symbol is under the
          cursor
        - perf tools: handle spaces in file names obtained from /proc/pid/maps
        - perf stat: Document --detailed option
        - ext4: fix races between page faults and hole punching
        - ext4: move unlocked dio protection from ext4_alloc_file_blocks()
        - ext4: fix races between buffered IO and collapse / insert range
        - ext4: fix races of writeback with punch hole and zero range
        - ARM: OMAP3: Add cpuidle parameters table for omap3430
        - ARM: prima2: always enable reset controller
        - ARM: EXYNOS: select THERMAL_OF
        - ARM: dts: armada-375: use armada-370-sata for SATA
        - ARM: dts: pxa: fix dma engine node to pxa3xx-nand
        - bus: imx-weim: Take the 'status' property value into account
        - jme: Do not enable NIC WoL functions on S0
        - jme: Fix device PM wakeup API usage
        - unbreak allmodconfig KCONFIG_ALLCONFIG=...
        - thermal: rockchip: fix a impossible condition caused by the warning
        - sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a race
        - megaraid_sas: add missing curly braces in ioctl handler
        - stm class: Select CONFIG_SRCU
        - extcon: max77843: Use correct size for reading the interrupt register
        - Linux 4.4.9
    
      * Stoney powerplay support (LP: #1578305)
        - amdgpu/powerplay: Add Stoney to list of early init cases
    
      * CVE-2016-2117 (LP: #1561403)
        - atl2: Disable unimplemented scatter/gather feature
    
      * CVE-2016-2187 (LP: #1575706)
        - Input: gtco - fix crash on detecting device without endpoints
    
      * zfs posix default permissions lost on reboot or unmount (LP: #1574801)
        - Fix ZPL miswrite of default POSIX ACL
    
      * WARNING: at /build/linux-aWXT0l/linux-4.4.0/drivers/pci/pci.c:1595
        [travis3EN] (LP: #1574697)
        - net/mlx4_core: Implement pci_resume callback
        - net/mlx4_core: Avoid repeated calls to pci enable/disable
    
      * Add support to thinkpad keyboard backlight (LP: #1574498)
        - thinkpad_acpi: Add support for keyboard backlight
    
      * Please enable kconfig X86_LEGACY_VM86 for i386 (LP: #1499089)
        - [Config] CONFIG_VM86=y, CONFIG_X86_LEGACY_VM86=y
    
      * Miscellaneous Ubuntu changes
        - updateconfigs for Linux v4.4.9
    
     -- Kamal Mostafa <email address hidden>  Tue, 17 May 2016 11:25:43 -0700
  • linux-snapdragon (4.4.0-1013.14) xenial; urgency=low
    
      [ Kamal Mostafa ]
    
      * Release Tracking Bug
        - LP: #1578759
    
      * Rebase to Ubuntu-4.4.0-22.39
    
     -- Kamal Mostafa <email address hidden>  Thu, 05 May 2016 11:17:11 -0700
  • linux-snapdragon (4.4.0-1012.12) xenial; urgency=low
    
      [ Tim Gardner ]
    
      * Release Tracking Bug
        - LP: #1572284
    
      * Rebase to Ubuntu-4.4.0-21.37
    
     -- Tim Gardner <email address hidden>  Tue, 19 Apr 2016 13:03:54 -0600