[Xenial SRU] Xenial update: 4.4.160 upstream stable release
Stefan Bader
stefan.bader at canonical.com
Fri Oct 19 11:38:29 UTC 2018
https://bugs.launchpad.net/ubuntu/xenial/+source/linux/+bug/1798770
Modified "floppy: Do not copy a kernel pointer to user memory in
FDGETPRM ioctl" to only make the change for the "too long line" that
got added by upstream. Otherwise we already carry the change for
CVE-2018-7755.
Modified "arm64: cpufeature: Track 32bit EL0 support" to make up for
us already having an additional feature defined.
Did replace the SAUCE patch we had for "media: uvcvideo: Support
realtek's UVC 1.5 device" by this upstream stable version.
-Stefan
---
The following changes since commit 4c45702457361c276979b7589b51f0ec926811af:
Linux 4.4.159 (2018-10-18 17:58:25 +0200)
are available in the git repository at:
https://git.launchpad.net/~smb/+git/linux-xenial stable-4.4
for you to fetch changes up to 17deef4a60946f73a6e8d4b748d37e9f9947cced:
Linux 4.4.160 (2018-10-19 11:41:35 +0200)
----------------------------------------------------------------
Aaron Ma (1):
Input: elantech - enable middle button of touchpad on ThinkPad P72
Akinobu Mita (2):
media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
media: soc_camera: ov772x: correct setting of banding filter
Alan Stern (3):
USB: fix error handling in usb_driver_claim_interface()
USB: handle NULL config in usb_find_alt_setting()
USB: remove LPM management from usb_driver_claim_interface()
Alexey Dobriyan (1):
slub: make ->cpu_partial unsigned int
Alexey Kardashevskiy (1):
powerpc/powernv/ioda2: Reduce upper limit for DMA window size
Alexey Khoroshilov (1):
media: fsl-viu: fix error handling in viu_of_probe()
Alistair Strachan (1):
staging: android: ashmem: Fix mmap size validation
Andy Shevchenko (1):
x86/tsc: Add missing header to tsc_msr.c
Andy Whitcroft (1):
floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
Anson Huang (1):
thermal: of-thermal: disable passive polling when thermal zone is disabled
Anton Vasilyev (2):
uwb: hwa-rc: fix memory leak at probe
usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i]
Arunk Khandavalli (1):
cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
Ashish Samant (1):
ocfs2: fix locking for res->tracking and dlm->tracking_list
Aurelien Aptel (1):
smb2: fix missing files in root share directory listing
Bart Van Assche (3):
scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size
scsi: klist: Make it safe to use klists in atomic context
IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
Ben Greear (1):
ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
Ben Hutchings (1):
USB: yurex: Check for truncation in yurex_read()
Ben Skeggs (1):
drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
Bo Chen (2):
e1000: check on netif_running() before calling e1000_up()
e1000: ensure to free old tx/rx rings in set_ringparam()
Breno Leitao (1):
scsi: ibmvscsi: Improve strings handling
Christophe Leroy (1):
serial: cpm_uart: return immediately from console poll
Colin Ian King (1):
staging: rts5208: fix missing error check on call to rtsx_write_register
Dan Carpenter (5):
vmci: type promotion bug in qp_host_get_user_memory()
rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
hwmon: (adt7475) Make adt7475_read_word() return errors
cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
cifs: read overflow in is_valid_oplock_break()
Dan Williams (1):
x86/numa_emulation: Fix emulated-to-physical node mapping
Danek Duvall (2):
mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
Daniel Black (1):
mm: madvise(MADV_DODUMP): allow hugetlbfs pages
Dave Martin (1):
arm64: KVM: Tighten guest core register access from userspace
Emmanuel Grumbach (2):
mac80211: fix a race between restart and CSA flows
mac80211: shorten the IBSS debug messages
Ethan Tuttle (1):
ARM: mvebu: declare asm symbols as character arrays in pmsu.c
Gaku Inami (1):
spi: sh-msiof: Fix invalid SPI use during system suspend
Geert Uytterhoeven (2):
spi: rspi: Fix invalid SPI use during system suspend
spi: rspi: Fix interrupted DMA transfers
Greg Kroah-Hartman (1):
Linux 4.4.160
Guoqing Jiang (1):
md-cluster: clear another node's suspend_area after the copy is finished
Hari Bathini (1):
powerpc/kdump: Handle crashkernel memory reservation failure
Hiromitsu Yamasaki (1):
spi: sh-msiof: Fix handling of write value for SISTR register
Huazhong Tan (1):
net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
Ilan Peer (1):
mac80211: Fix station bandwidth setting after channel switch
J. Bruce Fields (1):
nfsd: fix corrupted reply to badly ordered compound
Jan Beulich (1):
x86/entry/64: Add two more instruction suffixes
Jann Horn (2):
RDMA/ucma: check fd type in ucma_migrate_id()
proc: restrict kernel stack dumps to root
Javier Martinez Canillas (1):
media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data
Jessica Yu (1):
module: exclude SHN_UNDEF symbols from kallsyms api
Jia-Ju Bai (1):
net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()
Jian-Hong Pan (1):
Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
Joe Thornber (1):
dm thin metadata: try to avoid ever aborting transactions
Johan Hovold (2):
USB: serial: kobil_sct: fix modem-status error handling
EDAC, i7core: Fix memleaks and use-after-free on probe and remove
Jon Kuhn (1):
fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
Josh Abraham (1):
xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage
Julia Lawall (1):
usb: wusbcore: security: cast sizeof to int for comparison
Julian Wiedmann (1):
s390/qeth: don't dump past end of unknown HW header
Kai-Heng Feng (3):
ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
Kevin Hilman (1):
ARM: dts: dra7: fix DCAN node addresses
Leonard Crestez (1):
crypto: mxs-dcp - Fix wait logic on chan threads
Liam Girdwood (1):
ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs
Lothar Felten (1):
hwmon: (ina2xx) fix sysfs shunt resistor read access
Marc Zyngier (1):
arm64: KVM: Sanitize PSTATE.M when being set from userspace
Marcel Ziswiler (1):
spi: tegra20-slink: explicitly enable/disable clock
Masahiro Yamada (2):
i2c: uniphier: issue STOP only for last message or I2C_M_STOP
i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP
Matt Ranostay (1):
tsl2550: fix lux1_input error in low light
Michael Hennerich (1):
gpio: adp5588: Fix sleep-in-atomic-context bug
Michael Scott (1):
6lowpan: iphc: reset mac_header after decompress to fix panic
Miguel Ojeda (1):
arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto"
Mika Westerberg (1):
i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
Mike Snitzer (1):
dm thin metadata: fix __udivdi3 undefined on 32-bit
Naoya Horiguchi (2):
tools/vm/slabinfo.c: fix sign-compare warning
tools/vm/page-types.c: fix "defined but not used" warning
Nicholas Mc Guire (1):
ALSA: snd-aoa: add of_node_put() in error path
Olaf Hering (1):
xen: avoid crash in disable_hotplug_cpu
Oliver Neukum (2):
USB: usbdevfs: sanitize flags more
USB: usbdevfs: restore warning for nonsensical flags
Paul Mackerras (1):
KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function
Randy Dunlap (2):
arch/hexagon: fix kernel/dma.c build warning
hexagon: modify ffs() and fls() to return int
Sakari Ailus (1):
media: v4l: event: Prevent freeing event subscriptions while accessed
Sandipan Das (1):
perf probe powerpc: Ignore SyS symbols irrespective of endianness
Sebastian Andrzej Siewior (1):
Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()"
Stafford Horne (1):
crypto: skcipher - Fix -Wstringop-truncation warnings
Stefan Bader (1):
Revert "UBUNTU: SAUCE: media: uvcvideo: Support realtek's UVC 1.5 device"
Stephen Rothwell (1):
fs/cifs: suppress a string overflow warning
Sudeep Holla (1):
power: vexpress: fix corruption in notifier registration
Suzuki K Poulose (1):
arm64: cpufeature: Track 32bit EL0 support
Sylwester Nawrocki (1):
media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
Theodore Ts'o (1):
ext4: never move the system.data xattr out of the inode body
Thomas Gleixner (1):
alarmtimer: Prevent overflow for relative nanosleep
Tony Lindgren (1):
wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()
Uwe Kleine-König (1):
serial: imx: restore handshaking irq for imx1
Vasily Gorbik (1):
s390/extmem: fix gcc 8 stringop-overflow warning
Vincent Pelletier (1):
scsi: target: iscsi: Use bin2hex instead of a re-implementation
Vitaly Kuznetsov (1):
xen/manage: don't complain about an empty value in control/sysrq node
Xiao Ni (1):
RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
Yuan-Chi Pang (1):
mac80211: mesh: fix HWMP sequence numbering to follow standard
Zhouyang Jia (4):
drivers/tty: add error handling for pcmcia_loop_config
media: tm6000: add error handling for dvb_register_adapter
HID: hid-ntrig: add error handling for sysfs_create_group
scsi: bnx2i: add error handling for ioremap_nocache
ming_qian (1):
media: uvcvideo: Support realtek's UVC 1.5 device
Documentation/hwmon/ina2xx | 2 +-
Makefile | 2 +-
arch/arm/boot/dts/dra7.dtsi | 4 +-
arch/arm/mach-mvebu/pmsu.c | 6 +-
arch/arm64/include/asm/cpufeature.h | 8 ++-
arch/arm64/include/asm/jump_label.h | 4 +-
arch/arm64/include/asm/kvm_emulate.h | 5 ++
arch/arm64/include/asm/sysreg.h | 1 +
arch/arm64/kernel/cpufeature.c | 8 +++
arch/arm64/kvm/guest.c | 55 +++++++++++++++-
arch/hexagon/include/asm/bitops.h | 4 +-
arch/hexagon/kernel/dma.c | 2 +-
arch/powerpc/kernel/machine_kexec.c | 7 ++-
arch/powerpc/kvm/book3s_64_mmu_hv.c | 2 +-
arch/powerpc/platforms/powernv/pci-ioda.c | 2 +-
arch/s390/mm/extmem.c | 4 +-
arch/x86/entry/entry_64.S | 4 +-
arch/x86/kernel/tsc_msr.c | 1 +
arch/x86/mm/numa_emulation.c | 2 +-
crypto/ablkcipher.c | 2 +
crypto/blkcipher.c | 1 +
drivers/block/floppy.c | 3 +-
drivers/bluetooth/btusb.c | 1 +
drivers/crypto/mxs-dcp.c | 53 +++++++++-------
drivers/edac/i7core_edac.c | 22 ++++---
drivers/gpio/gpio-adp5588.c | 24 +++++--
.../gpu/drm/nouveau/nvkm/subdev/devinit/gm204.c | 3 +-
drivers/hid/hid-ntrig.c | 2 +
drivers/hwmon/adt7475.c | 14 +++--
drivers/hwmon/ina2xx.c | 13 +++-
drivers/i2c/busses/i2c-i801.c | 9 ++-
drivers/i2c/busses/i2c-uniphier-f.c | 7 +--
drivers/i2c/busses/i2c-uniphier.c | 7 +--
drivers/infiniband/core/ucma.c | 6 ++
drivers/infiniband/ulp/srp/ib_srp.c | 6 +-
drivers/input/mouse/elantech.c | 2 +
drivers/md/dm-thin-metadata.c | 34 +++++++++-
drivers/md/dm-thin.c | 73 +++++++++++++++++++---
drivers/md/md-cluster.c | 19 +++---
drivers/md/raid10.c | 5 +-
drivers/media/i2c/soc_camera/ov772x.c | 2 +-
drivers/media/platform/exynos4-is/fimc-isp-video.c | 11 +++-
drivers/media/platform/fsl-viu.c | 38 ++++++-----
drivers/media/platform/omap3isp/isp.c | 2 +-
drivers/media/platform/s3c-camif/camif-capture.c | 2 +
drivers/media/usb/tm6000/tm6000-dvb.c | 5 ++
drivers/media/usb/uvc/uvc_video.c | 28 ++++++---
drivers/media/v4l2-core/v4l2-event.c | 37 +++++------
drivers/media/v4l2-core/v4l2-fh.c | 2 +
drivers/misc/tsl2550.c | 2 +-
drivers/misc/vmw_vmci/vmci_queue_pair.c | 4 +-
drivers/net/ethernet/cadence/macb.c | 2 +-
drivers/net/ethernet/hisilicon/hns/hnae.h | 6 +-
drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 7 ++-
drivers/net/ethernet/realtek/r8169.c | 9 ++-
drivers/net/wireless/ath/ath10k/htt_rx.c | 5 +-
drivers/net/wireless/mac80211_hwsim.c | 3 -
drivers/net/wireless/rndis_wlan.c | 2 +
drivers/net/wireless/ti/wlcore/cmd.c | 6 ++
drivers/power/reset/vexpress-poweroff.c | 12 ++--
drivers/s390/net/qeth_l2_main.c | 2 +-
drivers/s390/net/qeth_l3_main.c | 2 +-
drivers/scsi/bnx2i/bnx2i_hwi.c | 2 +
drivers/scsi/ibmvscsi/ibmvscsi.c | 4 +-
drivers/spi/spi-rspi.c | 34 ++++++++--
drivers/spi/spi-sh-msiof.c | 28 ++++++++-
drivers/spi/spi-tegra20-slink.c | 31 ++++++---
drivers/staging/android/ashmem.c | 6 ++
drivers/staging/rts5208/sd.c | 2 +-
drivers/target/iscsi/iscsi_target_auth.c | 15 +----
drivers/target/iscsi/iscsi_target_tpg.c | 3 +-
drivers/thermal/of-thermal.c | 7 ++-
drivers/tty/serial/8250/serial_cs.c | 6 +-
drivers/tty/serial/cpm_uart/cpm_uart_core.c | 10 ++-
drivers/tty/serial/imx.c | 8 +++
drivers/usb/class/cdc-wdm.c | 2 +-
drivers/usb/core/devio.c | 24 ++++++-
drivers/usb/core/driver.c | 28 ++++-----
drivers/usb/core/usb.c | 2 +
drivers/usb/gadget/udc/fotg210-udc.c | 15 +++--
drivers/usb/misc/yurex.c | 3 +
drivers/usb/serial/kobil_sct.c | 12 +++-
drivers/usb/wusbcore/security.c | 2 +-
drivers/uwb/hwa-rc.c | 1 +
drivers/xen/cpu_hotplug.c | 15 ++---
drivers/xen/events/events_base.c | 2 +-
drivers/xen/manage.c | 6 +-
fs/cifs/cifs_unicode.c | 3 -
fs/cifs/cifssmb.c | 11 +++-
fs/cifs/misc.c | 8 +++
fs/cifs/smb2ops.c | 2 +-
fs/ext4/xattr.c | 5 ++
fs/nfsd/nfs4proc.c | 1 +
fs/ocfs2/dlm/dlmmaster.c | 4 +-
fs/proc/base.c | 14 +++++
include/linux/platform_data/ina2xx.h | 2 +-
include/linux/slub_def.h | 3 +-
include/media/v4l2-fh.h | 1 +
kernel/module.c | 6 +-
kernel/time/alarmtimer.c | 3 +-
lib/klist.c | 10 +--
mm/madvise.c | 2 +-
mm/slub.c | 6 +-
net/6lowpan/iphc.c | 1 +
net/mac80211/ibss.c | 22 +++----
net/mac80211/main.c | 26 ++++++--
net/mac80211/mesh_hwmp.c | 4 ++
net/mac80211/mlme.c | 53 ++++++++++++++++
net/wireless/nl80211.c | 1 +
net/wireless/util.c | 2 +-
sound/aoa/core/gpio-feature.c | 4 +-
sound/pci/hda/hda_intel.c | 3 +-
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/soc-dapm.c | 7 +++
tools/perf/arch/powerpc/util/sym-handling.c | 4 +-
tools/vm/page-types.c | 6 --
tools/vm/slabinfo.c | 4 +-
117 files changed, 814 insertions(+), 291 deletions(-)
More information about the kernel-team
mailing list