Changelog
linux (4.9.6-1) unstable; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.3
- iio: common: st_sensors: fix channel data parsing
- [mips] staging: octeon: Call SET_NETDEV_DEV()
- ALSA: hda - Fix up GPIO for ASUS ROG Ranger
- ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
- ALSA: usb-audio: Fix irq/process data synchronization
- fscrypt: fix renaming and linking special files
- [hppa/parisc] Add line-break when printing segfault info
- [hppa/parisc] Mark cr16 clocksource unstable on SMP systems
- HID: sensor-hub: Move the memset to sensor_hub_get_feature()
- mac80211: initialize fast-xmit 'info' later
- asm-prototypes: Clear any CPP defines before declaring the functions
- [x86] drm/i915: Fix oopses in the overlay code due to i915_gem_active
stuff
- [x86] drm/i915: Fix oops in overlay due to frontbuffer tracking
- [x86] drm/i915: Force VDD off on the new power seqeuencer before
starting to use it
- [x86] drm/i915: Initialize overlay->last_flip properly
- [x86] KVM: reset MMU on KVM_SET_VCPU_EVENTS
- [armhf] usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
- [armhf] usb: musb: dsps: implement clear_ep_rxintr() callback
- usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
- usb: gadgetfs: restrict upper bound on device configuration size
- USB: gadgetfs: fix unbounded memory allocation bug
- USB: gadgetfs: fix use-after-free bug
- USB: gadgetfs: fix checks of wTotalLength in config descriptors
- USB: fix problems with duplicate endpoint addresses
- usb: gadget: composite: Test get_alt() presence instead of set_alt()
- [arm64, armhf] usb: dwc3: core: avoid Overflow events
- usb: xhci: fix possible wild pointer
- [x86] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
- xhci: free xhci virtual devices with leaf nodes first
- usb: xhci: fix return value of xhci_setup_device()
- usb: host: xhci: Fix possible wild pointer when handling abort command
- xhci: Handle command completion and timeout race
- usb: xhci: hold lock over xhci_abort_cmd_ring()
- USB: serial: omninet: fix NULL-derefs at open and disconnect
- USB: serial: quatech2: fix sleep-while-atomic in close
- USB: serial: pl2303: fix NULL-deref at open
- USB: serial: keyspan_pda: verify endpoints at probe
- USB: serial: spcp8x5: fix NULL-deref at open
- USB: serial: io_ti: fix NULL-deref at open
- USB: serial: io_ti: fix another NULL-deref at open
- USB: serial: io_ti: fix I/O after disconnect
- USB: serial: iuu_phoenix: fix NULL-deref at open
- USB: serial: garmin_gps: fix memory leak on failed URB submit
- USB: serial: ti_usb_3410_5052: fix NULL-deref at open
- USB: serial: io_edgeport: fix NULL-deref at open
- USB: serial: oti6858: fix NULL-deref at open
- USB: serial: cyberjack: fix NULL-deref at open
- USB: serial: kobil_sct: fix NULL-deref in write
- USB: serial: mos7840: fix NULL-deref at open
- USB: serial: mos7720: fix NULL-deref at open
- USB: serial: mos7720: fix use-after-free on probe errors
- USB: serial: mos7720: fix parport use-after-free on probe errors
- USB: serial: mos7720: fix parallel probe
- usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
- xhci: Use delayed_work instead of timer for command timeout
- xhci: Fix race related to abort operation
- [armhf] usb: musb: Fix trying to free already-free IRQ 4
- usb: hub: Move hub_port_disable() to fix warning if PM is disabled
- usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
- ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
- USB: serial: kl5kusb105: abort on open exception path
- usb: gadget: Fix second argument of percpu_ida_alloc()
- usb: gadget: fix request length error for isoc transfer
- [armhf] dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host
support
- dibusb: fix possible memory leak in dibusb_rc_query()
- USB: serial: io_ti: bind to interface after fw download
- [x86] mei: move write cb to completion on credentials failures
- iio: accel: st_accel: fix LIS3LV02 reading and scaling
- [arm64, armhf] usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
- [arm64, armhf] usb: dwc3: ep0: explicitly call
dwc3_ep0_prepare_one_trb()
- [arm64, armhf] usb: dwc3: gadget: always unmap EP0 requests
- [x86] drm/i915/dp: add lane_count check in intel_dp_check_link_status
- [x86] drm/i915: tune down the fast link training vs boot fail
- mac80211: fix tid_agg_rx NULL dereference
- nl80211: Use different attrs for BSSID and random MAC addr in scan req
- ath10k: fix failure to send NULL func frame for 10.4
- ath10k: use the right length of "background"
- efi/efivar_ssdt_load: Don't return success on allocation failure
- debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
- [x86] prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
- [x86] cpu: Probe CPUID leaf 6 even when cpuid_level == 6
- [x86] platform/x86: fujitsu-laptop: use brightness_set_blocking for
LED-setting callbacks
- hwmon: (amc6821) sign extension temperature
- hwmon: (ds620) Fix overflows seen when writing temperature limits
- [armhf] hwmon: (g762) Fix overflows and crash seen when writing limit
attributes
- hwmon: (lm90) fix temp1_max_alarm attribute
- Input: synaptics-rmi4 - unlock on error
- [armhf] clk: ti: dra7: fix "failed to lookup clock node
gmac_gmii_ref_clk_div" boot message
- [amd64] iommu/amd: Missing error code in amd_iommu_init_device()
- [amd64] iommu/amd: Fix the left value check of cmd buffer
- [x86] iommu/vt-d: Fix pasid table size encoding
- [x86] iommu/vt-d: Flush old iommu caches for kdump when the device gets
context mapped
- [x86] ASoC: cht_bsw_rt5645: Fix leftover kmalloc
- [x86] ASoC: Intel: Skylake: Fix a shift wrapping bug
- scsi: mvsas: fix command_active typo
- target/iscsi: Fix double free in lio_target_tiqn_addtpg()
- sbp-target: Fix second argument of percpu_ida_alloc()
- relay: check array offset before using it
- PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
- PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
- genirq/affinity: Fix node generation from cpumask
- mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
- docs-rst: fix LaTeX \DURole renewcommand with Sphinx 1.3+
- mm: khugepaged: close use-after-free race during shmem collapsing
- mm: khugepaged: fix radix tree node leak in shmem collapse error path
- mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
- [s390x] crypto: unlock on error in prng_tdes_read()
- [arm64] crypto: sha2-ce - fix for big endian
- [arm64] crypto: ghash-ce - fix for big endian
- [arm64] crypto: aes-ccm-ce: fix for big endian
- [arm64] crypto: sha1-ce - fix for big endian
- [arm64] crypto: aes-xts-ce: fix for big endian
- [arm64] crypto: aes-ce - fix for big endian
- md: MD_RECOVERY_NEEDED is set for mddev->recovery
- md: fix refcount problem on mddev when stopping array.
- f2fs: remove percpu_count due to performance regression
- f2fs: hide a maybe-uninitialized warning
- PCI: Add Mellanox device IDs
- PCI: Convert broken INTx masking quirks from HEADER to FINAL
- PCI: Convert Mellanox broken INTx quirks to be for listed devices only
- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
- PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
- [powerpc/powerpc64,ppc64*] pci/rpadlpar: Fix device reference leaks
- [s390x] topology: always use s390 specific sched_domain_topology_level
- [s390x] pci: fix dma address calculation in map_sg
- drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
- [x86] drm/i915: disable PSR by default on HSW/BDW
- [x86] drm/i915/gen9: unconditionally apply the memory bandwidth WA
- [x86] drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
- xfs: don't call xfs_sb_quota_from_disk twice
- xfs: check return value of _trans_reserve_quota_nblks
- xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
- xfs: don't BUG() on mixed direct and mapped I/O
- xfs: provide helper for counting extents from if_bytes
- xfs: check minimum block size for CRC filesystems
- xfs: fix unbalanced inode reclaim flush locking
- xfs: new inode extent list lookup helpers
- xfs: factor rmap btree size into the indlen calculations
- xfs: always succeed when deduping zero bytes
- xfs: remove prev argument to xfs_bmapi_reserve_delalloc
- xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
- xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
- xfs: clean up cow fork reservation and tag inodes correctly
- xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
- xfs: pass post-eof speculative prealloc blocks to bmapi
- xfs: Move AGI buffer type setting to xfs_read_agi
- xfs: pass state not whichfork to trace_xfs_extlist
- xfs: handle cow fork in xfs_bmap_trace_exlist
- xfs: forbid AG btrees with level == 0
- xfs: check for bogus values in btree block headers
- xfs: complain if we don't get nextents bmap records
- xfs: don't crash if reading a directory results in an unexpected hole
- xfs: error out if trying to add attrs and anextents > 0
- xfs: don't allow di_size with high bit set
- xfs: don't cap maximum dedupe request length
- xfs: ignore leaf attr ichdr.count in verifier during log replay
- xfs: use GPF_NOFS when allocating btree cursors
- xfs: fix double-cleanup when CUI recovery fails
- xfs: use the actual AG length when reserving blocks
- xfs: fix crash and data corruption due to removal of busy COW extents
- xfs: fix max_retries _show and _store functions
- clocksource/dummy_timer: Move hotplug callback after the real timers
- tick/broadcast: Prevent NULL pointer dereference
- Revert "rtlwifi: Fix enter/exit power_save"
- Revert "usb: gadget: composite: always set ep->mult to a sensible value"
- usb: gadget: composite: always set ep->mult to a sensible value
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4
- net: vrf: Fix NAT within a VRF
- net: vrf: Drop conntrack data after pass through VRF device on Tx
- sctp: sctp_transport_lookup_process should rcu_read_unlock when transport
is null
- inet: fix IP(V6)_RECVORIGDSTADDR for udp sockets
- ipv6: handle -EFAULT from skb_copy_bits
- net, sched: fix soft lockup in tc_classify
- [arm64, armhf] net: stmmac: Fix race between stmmac_drv_probe and
stmmac_open
- net/sched: cls_flower: Fix missing addr_type in classify
- net/mlx5: Check FW limitations on log_max_qp before setting it
- net/mlx5: Cancel recovery work in remove flow
- net/mlx5: Avoid shadowing numa_node
- net/mlx5: Mask destination mac value in ethtool steering rules
- net/mlx5: Prevent setting multicast macs for VFs
- net/mlx5e: Don't sync netdev state when not registered
- net/mlx5e: Disable netdev after close
- rtnl: stats - add missing netlink message size checks
- net: fix incorrect original ingress device index in PKTINFO
- net: ipv4: dst for local input routes should use l3mdev if relevant
- drop_monitor: add missing call to genlmsg_end
- drop_monitor: consider inserted data in genlmsg_end
- flow_dissector: Update pptp handling to avoid null pointer deref.
- igmp: Make igmp group member RFC 3376 compliant
- ipv4: Do not allow MAIN to be alias for new LOCAL w/ custom rules
- net: vrf: Add missing Rx counters
- [x86] bpf: change back to orig prog on too many passes
- [armhf] net: dsa: bcm_sf2: Do not clobber b53_switch_ops
- [armhf] net: dsa: bcm_sf2: Utilize nested MDIO read/write
- r8152: split rtl8152_suspend function
- r8152: fix rx issue for runtime suspend
- [armhf] net: dsa: Ensure validity of dst->ds[0]
- net: add the AF_QIPCRTR entries to family name tables
- gro: Enter slow-path if there is no tailroom
- gro: use min_t() in skb_gro_reset_offset()
- gro: Disable frag0 optimization on IPv6 ext headers
- net/mlx5e: Remove WARN_ONCE from adaptive moderation code
- net: ipv4: Fix multipath selection with vrf
- net: vrf: do not allow table id 0
- HID: hid-cypress: validate length of report
- ALSA: firewire-tascam: Fix to handle error from initialization of stream
data
- [powerpc] Fix build warning on 32-bit PPC
- [arm64] dts: mt8173: Fix auxadc node
- [arm64] dts: bcm2837-rpi-3-b: remove incorrect pwr LED
- [arm64] dts: bcm2835: Fix bcm2837 compatible string
- svcrdma: Clear xpt_bc_xps in xprt_setup_rdma_bc() error exit arm
- [armhf] OMAP5: Fix mpuss_early_init
- [armhf] OMAP5: Fix build for PM code
- [armhf] OMAP4+: Fix bad fallthrough for cpuidle
- [armhf] omap2+: am437x: rollback to use omap3_gptimer_timer_init()
- [armel/marvell, armhf] spi: mvebu: fix baudrate calculation for armada
variant
- ALSA: usb-audio: Add a quirk for Plantronics BT600
- [x86] drm/i915/gen9: Fix PCODE polling during CDCLK change notification
- rtlwifi: Fix enter/exit power_save
- rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5
- Input: xpad - use correct product id for x360w controllers
- Input: i8042 - add Pegatron touchpad to noloop table
- [armhf] regulator: axp20x: Fix axp809 ldo_io registration error on cold
boot
- [arm64, armhf] drm/tegra: dpaux: Fix error handling
- [arm64, armhf] drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
- drm/savage: dereferencing an error pointer
- zram: revalidate disk under init_lock
- zram: support BDI_CAP_STABLE_WRITES
- dax: fix deadlock with DAX 4k holes
- mm: pmd dirty emulation in page fault handler
- mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}
- ocfs2: fix crash caused by stale lvb with fsdlm plugin
- mm, memcg: fix the active list aging for lowmem requests when memcg is
enabled
- mm: support anonymous stable page
- mm/slab.c: fix SLAB freelist randomization duplicate entries
(CVE-2017-5546)
- mm/hugetlb.c: fix reservation race when freeing surplus pages
- [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
- KVM: eventfd: fix NULL deref irqbypass consumer
- jump_labels: API for flushing deferred jump label updates
- [x86] KVM: flush pending lapic jump label updates on module unload
- [x86] KVM: fix NULL deref in vcpu_scan_ioapic
- [x86] KVM: add Align16 instruction flag
- [x86] KVM: add asm_safe wrapper
- [x86] KVM: emulate FXSAVE and FXRSTOR
- [x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
- efi/libstub/arm*: Pass latest memory map to the kernel
- [x86] efi: Prune invalid memory map entries and fix boot regression
- [x86] efi: Don't allocate memmap through memblock after mm_init()
(Closes: #851928)
- nl80211: fix sched scan netlink socket owner destruction
- gpio: Move freeing of GPIO hogs before numbing of the device
- xfs: Timely free truncated dirty pages
- bridge: netfilter: Fix dropping packets that moving through bridge
interface
- [x86] cpu/AMD: Clean up cpu_llc_id assignment per topology feature
- [x86] bugs: Separate AMD E400 erratum and C1E bug
- [x86] CPU/AMD: Fix Bulldozer topology
- wusbcore: Fix one more crypto-on-the-stack bug
- [armhf] usb: musb: fix runtime PM in debugfs
- USB: serial: kl5kusb105: fix line-state error handling (CVE-2017-5549)
- USB: serial: ch341: fix initial modem-control state
- USB: serial: ch341: fix resume after reset
- USB: serial: ch341: fix open error handling
- USB: serial: ch341: fix control-message error handling
- USB: serial: ch341: fix open and resume after B0
- i2c: print correct device invalid address
- i2c: fix kernel memory disclosure in dev interface
- fix a fencepost error in pipe_advance() (CVE-2017-5550)
- xhci: fix deadlock at host remove by running watchdog correctly
- btrfs: fix crash when tracepoint arguments are freed by wq callbacks
- ASoC: hdmi-codec: use unsigned type to structure members with bit-field
- Revert "tty: serial: 8250: add CON_CONSDEV to flags"
- pid: fix lockdep deadlock warning due to ucount_lock
- mnt: Protect the mountpoint hashtable with mount_lock
- drivers: char: mem: Fix thinkos in kmem address checks
- [armhf] dmaengine: omap-dma: Fix dynamic lch_map allocation
- virtio_blk: avoid DMA to stack for the sense buffer
- orinoco: Use shash instead of ahash for MIC calculations
- sysrq: attach sysrq handler correctly for 32-bit kernel
- [arm64, armhf] extcon: return error code on failure
- Clearing FIFOs in RS485 emulation mode causes subsequent transmits to
break
- sysctl: Drop reference added by grab_header in proc_sys_readdir
(CVE-2016-9191)
- [s390x] net/af_iucv: don't use paged skbs for TX on HiperSockets
- [x86] drm/i915/gen9: Fix PCODE polling timeout in stable backport
- drm: Clean up planes in atomic commit helper failure path
- drm/radeon: update smc firmware selection for SI
- drm/radeon: drop verde dpm quirks
- [x86] drm/amdgpu: update si kicker smc firmware
- [x86] drm/amdgpu: drop verde dpm quirks
- USB: serial: ch341: fix modem-control and B0 handling
- net/mlx5: Only cancel recovery work when cleaning up device
- i2c: piix4: Avoid race conditions with IMC
- [x86] cpu: Fix bootup crashes by sanitizing the argument of the
'clearcpuid=' command-line option
- nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too
- btrfs: fix locking when we put back a delayed ref that's too new
- btrfs: fix error handling when run_delayed_extent_op fails
- NFS: fix typo in parameter description
- pNFS: Fix race in pnfs_wait_on_layoutreturn
- NFS: Fix a performance regression in readdir
- NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
- [armhf] i2c: mux: pca954x: fix i2c mux selection caching
- [x86] drm/i915/gen9: Fix PCODE polling during SAGV disabling
- drm: avoid uninitialized timestamp use in wait_vblank
- [arm64, armhf] drm/panel: simple: Check against num_timings when setting
preferred for timing
- [x86] drm/i915: Move the min_pixclk[] handling to the end of readout
- drm: Initialise drm_mm.head_node.allocated
- block: Change extern inline to static inline
- block: cfq_cpd_alloc() should use @gfp
- [x86] ACPI / APEI: Fix NMI notification handling
- [x86] powercap/intel_rapl: fix and tidy up error handling
- iw_cxgb4: Fix error return code in c4iw_rdev_open()
- [arm64, armhf] power: supply: bq27xxx_battery: Fix register map for
BQ27510 and BQ27520
- blk-mq: Always schedule hctx->next_cpu
- [powerpc] mm: Correct process and partition table max size
- [powerpc*] ibmebus: Fix further device reference leaks
- [powerpc*] ibmebus: Fix device reference leaks in sysfs interface
- [powerpc*] powernv: Don't warn on PE init if unfreeze is unsupported
- [arm64] hugetlb: fix the wrong address for several functions
- [arm64] hugetlb: remove the wrong pmd check in find_num_contig()
- [arm64] hugetlb: fix the wrong return value for
huge_ptep_set_access_flags
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6
- IB/core: Release allocated memory in cache setup failure
- IB/rxe: Increase max number of completions to 32k
- IB/rxe: avoid putting a large struct rxe_qp on stack
- IB/mlx5: Avoid system crash when enabling many VFs
- IB/mlx5: Fix reported max SGE calculation
- IB/mlx5: Assign SRQ type earlier
- IB/mlx5: Wait for all async command completions to complete
- IB/mlx4: Set traffic class in AH
- IB/mlx4: Fix out-of-range array index in destroy qp flow
- IB/mlx4: Handle well-known-gid in mad_demux processing
- IB/mlx4: Fix port query for 56Gb Ethernet links
- IB/mlx4: When no DMFS for IPoIB, don't allow NET_IF QPs
- IB/mlx4: Check if GRH is available before using it
- IB/IPoIB: Remove can't use GFP_NOIO warning
- perf trace: Use the syscall raw_syscalls:sys_enter timestamp
- perf mem: Fix --all-user/--all-kernel options
- perf trace: Check if MAP_32BIT is defined (again)
- perf diff: Do not overwrite valid build id
- perf callchain: Fixup help/config for no-unwinding
- perf scripting: Avoid leaking the scripting_context variable
- perf jit: Enable jitdump support without dwarf
- [armhf] dts: bcm283x: fix typo in mailbox address
- [armhf] dts: imx6q-cm-fx6: fix fec pinctrl
- [armhf] dts: omap3: Add DTS for Logic PD SOM-LV 37xx Dev Kit
- tmpfs: clear S_ISGID when setting posix ACLs (CVE-2017-5551)
- [x86] PCI: Ignore _CRS on Supermicro X8DTH-i/6/iF/6F
- rcu: Narrow early boot window of illegal synchronous grace periods
- sunrpc: don't call sleeping functions from the notifier block callbacks
- svcrpc: don't leak contexts on PROC_DESTROY
- libnvdimm, namespace: fix pmem namespace leak, delete when size set to
zero
- fuse: clear FR_PENDING flag when moving requests out of pending queue
- fuse: fix time_to_jiffies nsec sanity check
- PCI: Enumerate switches below PCI-to-PCIe bridges
- HID: corsair: fix DMA buffers on stack (CVE-2017-5547)
- HID: corsair: fix control-transfer error handling
- mmc: sdhci-acpi: Only powered up enabled acpi child devices
- ieee802154: atusb: do not use the stack for buffers to make them DMA able
(CVE-2017-5548)
- [s390x] KVM: do not expose random data via facility bitmap
- [armhf,arm64] KVM: vgic: Fix deadlock on error handling
- [powerpc*] icp-opal: Fix missing KVM case and harden replay
- [powerpc*] perf: Fix PM_BRU_CMPL event code for power9
- [powerpc*] ptrace: Preserve previous fprs/vsrs on short regset write
- [powerpc*] ptrace: Preserve previous TM fprs/vsrs on short regset write
- [powerpc*] Ignore reserved field in DCSR and PVR reads and writes
- [x86] ioapic: Restore IO-APIC irq_chip retrigger callback
- qla2xxx: Fix crash due to null pointer access
- mac80211: implement multicast forwarding on fast-RX path
- ubifs: Fix journal replay wrt. xattr nodes
- [armhf] clocksource/exynos_mct: Clear interrupt when cpu is shut down
- svcrdma: avoid duplicate dma unmapping during error recovery
- ceph: fix bad endianness handling in parse_reply_info_extra
- [armhf] dts: OMAP5 / DRA7: indicate that SATA port 0 is available.
- [arm64] avoid returning from bad_mode
- [arm64] ptrace: Preserve previous registers for short regset write
- [arm64] ptrace: Avoid uninitialised struct padding in fpr_set()
- [arm64] ptrace: Reject attempts to set incomplete hardware breakpoint
fields
- Input: ALPS - fix TrackStick support for SS5 hardware
- libceph: ceph_x_encrypt_buflen() takes in_len
- libceph: old_key in process_one_ticket() is redundant
- libceph: introduce ceph_x_encrypt_offset()
- libceph: introduce ceph_crypt() for in-place en/decryption
(CVE-2016-10153)
- libceph: rename and align ceph_x_authorizer::reply_buf
- libceph: tweak calcu_signature() a little
- libceph: switch ceph_x_encrypt() to ceph_crypt()
- libceph: switch ceph_x_decrypt() to ceph_crypt()
- libceph: remove now unused ceph_*{en,de}crypt*() functions
- [armhf] dts: Add an empty chosen node to top level DTSI
- [armel,armhf] 8613/1: Fix the uaccess crash on PB11MPCore
- ceph: fix scheduler warning due to nested blocking
- ceph: fix ceph_get_caps() interruption
- ceph: fix endianness of getattr mask in ceph_d_revalidate
- ceph: fix endianness bug in frag_tree_split_cmp
- libceph: make sure ceph_aes_crypt() IV is aligned
- xprtrdma: Make FRWR send queue entry accounting more accurate
- xprtrdma: Squelch "max send, max recv" messages at connect time
- [arm64] mm: avoid name clash in __page_to_voff()
- [arm64] Fix swiotlb fallback allocation
- swiotlb: Convert swiotlb_force from int to enum
- swiotlb: Add swiotlb=noforce debug option
- scsi: ses: Fix SAS device detection in enclosure
- scsi: mpt3sas: fix hang on ata passthrough commands
- [armhf] PM / devfreq: exynos-bus: Fix the wrong return value
- PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL
- mtd: spi-nor: Off by one in cqspi_setup_flash()
- mtd: spi-nor: Fix some error codes in cqspi_setup_flash()
- [x86] ite-cir: initialize use_demodulator before using it
- [armhf] dmaengine: pl330: Fix runtime PM support for terminated transfers
- [armhf] soc: ti: wkup_m3_ipc: Fix error return code in wkup_m3_ipc_probe()
- libceph: uninline ceph_crypto_key_destroy()
- libceph: stop allocating a new cipher on every crypto request
[ Ben Hutchings ]
* [armel,armhf,s390x,x86] linux-headers: Fix regression of multilib compiler
support (Closes: #851481)
* nbd: use loff_t for blocksize and nbd_set_size args (Closes: #851533)
* ath9k: fix NULL pointer dereference (Closes: #851621)
* cfg80211,memcg,power: Avoid ABI changes
* bq27xxx_battery,cpuhp,libceph,orinoco,xhci: Ignore ABI changes
* linux-image: Increase minimum version of initramfs-tools (Closes: #808038)
* [x86] linux-cpupower: Add turbostat and x86_energy_perf_policy commands
(Closes: #778249)
* [arm64] Enable ARCH_MESON and related drivers (Closes: #852132)
* [arm64] dts: meson-gx: Add firmware reserved memory zones
* [x86] ASoC: Intel: select DW_DMAC_CORE since it's mandatory
* [x86] sound/soc/intel: Enable SND_SOC_INTEL_BDW_RT5677_MACH as module
(Closes: #851916)
* [arm64] video/fbdev: Change FB from module to built-in
* [arm64,armhf] video/fbdev: Enable FB_EFI (Closes: #851778)
* fs: Disable LOGFS, as it is unmaintained and will be removed in 4.10
* [rt] genpatch.py: Verify tag and tarball signatures
* fbdev: color map copying bounds checking (CVE-2016-8405)
* [armhf,arm64] drm/vc4: Fix an integer overflow in temporary allocation
layout. (CVE-2017-5576)
* [armhf,arm64] drm/vc4: Return -EINVAL on the overflow checks failing.
(CVE-2017-5577)
* [arm64] ptrace: Avoid ABI change in 4.9.6
* [arm64] Enable ARM64_ACPI_PARKING_PROTOCOL, ARCH_THUNDER, GPIO_PL061,
GPIO_XGENE, ARM_SMMU, ARM_SMMU_V3, PCI_HOST_THUNDER_PEM, and
PCI_HOST_THUNDER_ECAM; PINCTRL_AMD as built-in; SATA_AHCI_SEATTLE,
HW_RANDOM_XGENE, HW_RANDOM_CAVIUM, CPUFREQ_DT, K3_DMA, GPIO_XGENE_SB,
SENSORS_XGENE, I2C_THUNDERX, KEYBOARD_GPIO, TI_ST, THUNDER_NIC_PF,
THUNDER_NIC_VF (Closes: #852493), THUNDER_NIC_BGX, THUNDER_NIC_RGX,
MDIO_THUNDER, MDIO_XGENE, SPI_THUNDERX, and SND_SOC_APQ8016_SBC as
modules (thanks to Riku Voipio)
[ Roger Shimizu ]
* [armel] Add DT support of Buffalo Linkstation Live v3 (LS-CHL)
* drivers/input: Enable TOUCHSCREEN_GOODIX as module (Closes: #851821).
* [mips/octeon] hwmon: Enable SENSORS_ADM1031 as module (Closes: #851963).
Thanks to James Cowgill.
* nbd: fix 64-bit division.
-- Ben Hutchings <email address hidden> Fri, 27 Jan 2017 07:44:54 +0000
