Changelog
linux (4.5.3-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3
- mmc: block: Use the mmc host device index as the mmcblk device index
- block: partition: initialize percpuref before sending out KOBJ_ADD
- block: loop: fix filesystem corruption in case of aio/dio
- [arm64] efi: Don't apply MEMBLOCK_NOMAP to UEFI memory map mapping
- [x86] mce: Avoid using object after free in genpool
- [x86] kvm: do not leak guest xcr0 into host interrupt handlers
- [arm*] KVM: Handle forward time correction gracefully
- [armhf] mvebu: Correct unit address for linksys
- [armhf] OMAP2: Fix up interconnect barrier initialization for DRA7
- [armhf] OMAP2+: hwmod: Fix updating of sysconfig register
- assoc_array: don't call compare_object() on a node
- [x86] usb: xhci: applying XHCI_PME_STUCK_QUIRK to Intel BXT B0 host
- xhci: resume USB 3 roothub first
- usb: host: xhci: add a new quirk XHCI_NO_64BIT_SUPPORT
- usb: xhci: fix wild pointers in xhci_mem_cleanup
- xhci: fix 10 second timeout on removal of PCI hotpluggable xhci
controllers
- usb: host: xhci-plat: Make enum xhci_plat_type start at a non zero value
- usb: hcd: out of bounds access in for_each_companion
- usb: gadget: f_fs: Fix use-after-free
- dm cache metadata: fix READ_LOCK macros and cleanup WRITE_LOCK macros
- dm cache metadata: fix cmd_read_lock() acquiring write lock
- lib: lz4: fixed zram with lz4 on big endian machines
- debugfs: Make automount point inodes permanently empty
- dmaengine: dw: fix master selection
- [armhf] dmaengine: omap-dma: Fix polled channel completion detection
and handling
- dmaengine: edma: Remove dynamic TPTC power management feature
- mtd: nand: pxa3xx_nand: fix dmaengine initialization
- sched/cgroup: Fix/cleanup cgroup teardown/init
- [x86] EDAC, sb_edac.c: Repair damage introduced when "fixing"
channel address
- [x86] EDAC, sb_edac.c: Take account of channel hashing when needed
- ALSA: hda - Don't trust the reported actual power state
- [x86] ALSA: hda/realtek - Add ALC3234 headset mode for Optiplex 9020m
- ALSA: hda - Keep powering up ADCs on Cirrus codecs
- [x86] ALSA: hda - add PCI ID for Intel Broxton-T
- ALSA: pcxhr: Fix missing mutex unlock
- [x86] ALSA: hda - Add dock support for ThinkPad X260
- [x86] ALSA: hda - Update BCLK also at hotplug for i915 HSW/BDW
- asm-generic/futex: Re-enable preemption in futex_atomic_cmpxchg_inatomic()
- futex: Handle unlock_pi race gracefully
- futex: Acknowledge a new waiter in counter before plist
- drm/nouveau/core: use vzalloc for allocating ramht
- drm/qxl: fix cursor position with non-zero hotspot
- [x86] drm/i915: Fix race condition in intel_dp_destroy_mst_connector()
- Revert "drm/radeon: disable runtime pm on PX laptops without dGPU
power control"
- [armhf] Revert "PCI: imx6: Add support for active-low reset GPIO"
- usbvision: revert commit 588afcc1
- [x86] Revert "drm/amdgpu: disable runtime pm on PX laptops without dGPU
power control"
- cpufreq: intel_pstate: Fix processing for turbo activation ratio
- [s390x] pci: add extra padding to function measurement block
- iwlwifi: pcie: lower the debug level for RSA semaphore access
- iwlwifi: mvm: fix memory leak in paging
- crypto: rsa-pkcs1pad - fix dst len
- [x86] crypto: ccp - Prevent information leakage on export
- crypto: sha1-mb - use corrcet pointer while completing jobs
- [powerpc*] scan_features() updates incorrect bits for REAL_LE
- [powerpc*] Update cpu_user_features2 in scan_features()
- [powerpc*] Update TM user feature bits in scan_features()
- nl80211: check netlink protocol in socket release notification
- netlink: don't send NETLINK_URELEASE for unbound sockets
- pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs
- [x86] iommu/amd: Fix checking of pci dma aliases
- iommu/dma: Restore scatterlist offsets correctly
- [x86] drm/amdgpu: when suspending, if uvd/vce was running. need to cancel
delay work.
- [x86] drm/amdgpu: use defines for CRTCs and AMFT blocks
- [x86] drm/amdgpu: bump the afmt limit for CZ, ST, Polaris
- [x86] amdgpu/uvd: add uvd fw version for amdgpu
- [x86] drm/amdgpu: fix regression on CIK (v2)
- drm/radeon: add a quirk for a XFX R9 270X
- drm/radeon: fix initial connector audio value
- drm/radeon: forbid mapping of userptr bo through radeon device file
- drm/radeon: fix vertical bars appear on monitor (v2)
- [mips*el/loongson-3] drm: Loongson-3 doesn't fully support wc memory
- drm/nouveau/gr/gf100: select a stream master to fixup tfb offset queries
- drm/dp/mst: Validate port in drm_dp_payload_send_msg()
- drm/dp/mst: Restore primary hub guid on resume
- drm/dp/mst: Get validated port ref in drm_dp_update_payload_part1()
- [x86] drm/i915: Pass the correct encoder to intel_ddi_clk_select()
with MST
- [x86] drm/i915: Cleanup phys status page too
- [x86] drm/i915: Use the active wm config for merging on ILK-BDW
- [x86] drm/i915: Start WM computation from scratch on ILK-BDW
- [x86] drm/i915: skl_update_scaler() wants a rotation bitmask instead of
bit number
- [x86] drm/amdkfd: uninitialized variable in
dbgdev_wave_control_set_registers()
- [x86] drm/i915/skl: Fix DMC load on Skylake J0 and K0
- [x86] drm/i915/skl: Fix spurious gpu hang with gt3/gt4 revs
- [x86] drm/i915: Fixup the free space logic in ring_prepare
- [x86] drm/i915: Force ringbuffers to not be at offset 0
- [x86] drm/i915: Use fw_domains_put_with_fifo() on HSW
- drm/ttm: fix kref count mess in ttm_bo_move_to_lru_tail
- [x86] perf intel-pt: Fix segfault tracing transactions
- [armhf] i2c: exynos5: Fix possible ABBA deadlock by keeping I2C
clock prepared
- ACPICA / Interpreter: Fix a regression triggered because of wrong Linux
ECDT support
- [x86] mmc: sdhci-acpi: Reduce Baytrail eMMC/SD/SDIO hangs
- [x86] toshiba_acpi: Fix regression caused by hotkey enabling value
- [x86] EDAC: i7core, sb_edac: Don't return NOTIFY_BAD from mce_decoder
callback
- [x86] ASoC: ssm4567: Reset device before regcache_sync()
- [x86] ASoC: rt5640: Correct the digital interface data select
- vb2-memops: Fix over allocation of frame vectors
- media: vb2: Fix regression on poll() for RW mode
- videobuf2-core: Check user space planes array in dqbuf
- videobuf2-v4l2: Verify planes array in buffer dequeueing (CVE-2016-4568)
- v4l2-dv-timings.h: fix polarity for 4k formats
- IB/core: Fix oops in ib_cache_gid_set_default_gid
- mwifiex: fix IBSS data path issue.
- IB/mlx5: Expose correct max_sge_rd limit
- IB/security: Restrict use of the write() interface (CVE-2016-4565)
- efi: Fix out-of-bounds read in variable_matches()
- efi: Expose non-blocking set_variable() wrapper to efivars
- [x86] apic: Handle zero vector gracefully in clear_vector_irq()
- workqueue: fix ghost PENDING flag while doing MQ IO
- slub: clean up code for kmem cgroup support to kmem_cache_free_bulk
- cgroup, cpuset: replace cpuset_post_attach_flush() with
cgroup_subsys->post_attach callback
- memcg: relocate charge moving from ->attach to ->post_attach
- mm: exclude HugeTLB pages from THP page_mapped() logic
- mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check
- numa: fix /proc/<pid>/numa_maps for THP
- mm: vmscan: reclaim highmem zone if buffer_heads is over limit
- mm/hwpoison: fix wrong num_poisoned_pages accounting
- locking/mcs: Fix mcs_spin_lock() ordering
- [armhf] spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs
- [armhf] irqchip/sunxi-nmi: Fix error check of of_io_request_and_map()
- [armhf] regulator: s5m8767: fix get_register() error handling
- scsi_dh: force modular build if SCSI is a module
- lib/mpi: Endianness fix
- [x86] misc: mic/scif: fix wrap around tests
- PM / OPP: Initialize u_volt_min/max to a valid value
- PM / Domains: Fix removal of a subdomain
- drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
- perf evlist: Reference count the cpu and thread maps at set_maps()
- perf tools: Fix perf script python database export crash
- [x86] mm/kmmio: Fix mmiotrace for hugepages
- ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()
- f2fs crypto: fix corrupted symlink in encrypted case
- f2fs: slightly reorganize read_raw_super_block
- f2fs: cover large section in sanity check of super
- ext4/fscrypto: avoid RCU lookup in d_revalidate
- f2fs: do f2fs_balance_fs when block is allocated
- f2fs: don't need to call set_page_dirty for io error
- f2fs crypto: handle unexpected lack of encryption keys
- f2fs crypto: make sure the encryption info is initialized on opendir(2)
- bus: uniphier-system-bus: fix condition of overlap check
- mtd: spi-nor: remove micron_quad_enable()
- mtd: brcmnand: Fix v7.1 register offsets
- mtd: nand: Drop mtd.owner requirement in nand_scan
- perf hists browser: Only offer symbol scripting when a symbol is under
the cursor
- perf hists browser: Fix dump to show correct callchain style
- perf tools: handle spaces in file names obtained from /proc/pid/maps
- NTB: Remove _addr functions from ntb_hw_amd
- perf/core: Don't leak event in the syscall error path
- perf/core: Fix time tracking bug with multiplexing
- perf hists: Fix determination of a callchain node's childlessness
- [armhf] OMAP3: Add cpuidle parameters table for omap3430
- [armhf] dts: armada-375: use armada-370-sata for SATA
- [armhf] dts: am33xx: Fix GPMC dma properties
- btrfs: fix memory leak of fs_info in block group cache
- btrfs: cleaner_kthread() doesn't need explicit freeze
- [armhf] thermal: rockchip: fix a impossible condition caused by the
warning
- sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects
a race
- megaraid_sas: add missing curly braces in ioctl handler
- tpm: fix checks for policy digest existence in tpm2_seal_trusted()
- tpm: fix: set continueSession attribute for the unseal operation
[ Uwe Kleine-König ]
* [armhf] enable I2C_MUX_PCA954x, MMC_SDHCI_PXAV3, AHCI_MVEBU
[ Ben Hutchings ]
* bug control: Update list of related firmware packages
* Revert "sp5100_tco: fix the device check for SB800 and later chipsets"
(Closes: #823146; probably fixes #822651)
* bpf: fix double-fdput in replace_map_fd_with_map_ptr() (CVE-2016-4557)
(Closes: #823603)
* bpf: fix refcnt overflow (CVE-2016-4558)
* bpf: fix check_map_func_compatibility logic
* stable-update: Rewrite stable-update.sh in Python
-- Ben Hutchings <email address hidden> Sat, 07 May 2016 21:59:15 +0100
