[ubuntu/artful-proposed] linux 4.11.0-5.10 (Accepted)

[Seth Forshee]

linux (4.11.0-5.10) artful; urgency=low

  [ Seth Forshee ]

  * Release Tracking Bug
    - LP: #1693962

  * Artful update to v4.11.3 stable release (LP: #1693932)
    - usb: misc: legousbtower: Fix buffers on stack
    - usb: misc: legousbtower: Fix memory leak
    - USB: ene_usb6250: fix DMA to the stack
    - watchdog: pcwd_usb: fix NULL-deref at probe
    - char: lp: fix possible integer overflow in lp_setup()
    - USB: core: replace %p with %pK
    - tpm_tis_core: Choose appropriate timeout for reading burstcount
    - ALSA: hda: Fix cpu lockup when stopping the cmd dmas
    - fanotify: don't expose EOPENSTALE to userspace
    - tpm_tis_spi: Use single function to transfer data
    - tpm_tis_spi: Abort transfer when too many wait states are signaled
    - tpm_tis_spi: Check correct byte for wait state indicator
    - tpm_tis_spi: Remove limitation of transfers to MAX_SPI_FRAMESIZE bytes
    - tpm_tis_spi: Add small delay after last transfer
    - tpm: msleep() delays - replace with usleep_range() in i2c nuvoton driver
    - tpm_crb: check for bad response size
    - vTPM: Fix missing NULL check
    - tpm: fix handling of the TPM 2.0 event logs
    - ASoC: cs4271: configure reset GPIO as output
    - mlx5: Fix mlx5_ib_map_mr_sg mr length
    - infiniband: call ipv6 route lookup via the stub interface
    - dm btree: fix for dm_btree_find_lowest_key()
    - dm raid: select the Kconfig option CONFIG_MD_RAID0
    - dm bufio: avoid a possible ABBA deadlock
    - dm bufio: check new buffer allocation watermark every 30 seconds
    - dm mpath: requeue after a small delay if blk_get_request() fails
    - dm mpath: split and rename activate_path() to prepare for its expanded use
    - dm mpath: avoid that path removal can trigger an infinite loop
    - dm mpath: delay requeuing while path initialization is in progress
    - dm cache metadata: fail operations if fail_io mode has been established
    - dm bufio: make the parameter "retain_bytes" unsigned long
    - dm thin metadata: call precommit before saving the roots
    - dm space map disk: fix some book keeping in the disk space map
    - md: update slab_cache before releasing new stripes when stripes resizing
    - md: MD_CLOSING needs to be cleared after called md_set_readonly or
      do_md_stop
    - rtlwifi: rtl8821ae: setup 8812ae RFE according to device type
    - mwifiex: MAC randomization should not be persistent
    - mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
    - ima: accept previously set IMA_NEW_FILE
    - KVM: x86: Fix load damaged SSEx MXCSR register
    - KVM: x86: Fix potential preemption when get the current kvmclock timestamp
    - KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
    - x86: fix 32-bit case of __get_user_asm_u64()
    - regulator: rk808: Fix RK818 LDO2
    - regulator: tps65023: Fix inverted core enable logic.
    - s390/kdump: Add final note
    - s390/cputime: fix incorrect system time
    - ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
    - ath9k_htc: fix NULL-deref at probe
    - drm/amdgpu: Make display watermark calculations more accurate
    - drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark
      calculations.
    - drm/amdgpu: Add missing lb_vblank_lead_lines setup to DCE-6 path.
    - drm/nouveau/therm: remove ineffective workarounds for alarm bugs
    - drm/nouveau/kms/nv50: fix source-rect-only plane updates
    - drm/nouveau/kms/nv50: skip core channel cursor update on position-only
      changes
    - drm/nouveau/tmr: ack interrupt before processing alarms
    - drm/nouveau/tmr: fix corruption of the pending list when rescheduling an
      alarm
    - drm/nouveau/tmr: avoid processing completed alarms when adding a new one
    - drm/nouveau/tmr: handle races with hw when updating the next alarm time
    - gpio: omap: return error if requested debounce time is not possible
    - cdc-acm: fix possible invalid access when processing notification
    - ohci-pci: add qemu quirk
    - cxl: Force context lock during EEH flow
    - cxl: Route eeh events to all drivers in cxl_pci_error_detected()
    - proc: Fix unbalanced hard link numbers
    - of: fix sparse warning in of_pci_range_parser_one
    - of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
    - of: fdt: add missing allocation-failure check
    - ibmvscsis: Do not send aborted task response
    - scsi: lpfc: Fix panic on BFS configuration
    - iio: dac: ad7303: fix channel description
    - IIO: bmp280-core.c: fix error in humidity calculation
    - iio: stm32 trigger: fix sampling_frequency read
    - IB/hfi1: Return an error on memory allocation failure
    - IB/hfi1: Fix a subcontext memory leak
    - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
    - pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
    - USB: serial: ftdi_sio: fix setting latency for unprivileged users
    - USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
    - USB: chaoskey: fix Alea quirk on big-endian hosts
    - Make stat/lstat/fstatat pass AT_NO_AUTOMOUNT to vfs_statx()
    - libnvdimm: fix clear length of nvdimm_forget_poison()
    - dax: fix data corruption when fault races with write
    - EDAC, amd64: Fix reporting of Chip Select sizes on Fam17h
    - xhci: Fix command ring stop regression in 4.11
    - xhci: remove GFP_DMA flag from allocation
    - usb: host: xhci-plat: propagate return value of platform_get_irq()
    - USB: xhci: fix lock-inversion problem
    - xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
    - usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
    - net: irda: irda-usb: fix firmware name on big-endian hosts
    - usbvision: fix NULL-deref at probe
    - mceusb: fix NULL-deref at probe
    - ttusb2: limit messages to buffer size
    - dvb-usb-dibusb-mc-common: Add MODULE_LICENSE
    - usb: dwc3: gadget: Prevent losing events in event cache
    - usb: musb: tusb6010_omap: Do not reset the other direction's packet size
    - usb: musb: Fix trying to suspend while active for OTG configurations
    - USB: iowarrior: fix info ioctl on big-endian hosts
    - usb: serial: option: add Telit ME910 support
    - USB: serial: qcserial: add more Lenovo EM74xx device IDs
    - USB: serial: mct_u232: fix big-endian baud-rate handling
    - USB: serial: io_ti: fix div-by-zero in set_termios
    - USB: hub: fix SS hub-descriptor handling
    - USB: hub: fix non-SS hub-descriptor handling
    - ipx: call ipxitf_put() in ioctl error path
    - iio: proximity: as3935: fix as3935_write
    - iio: hid-sensor: Store restore poll and hysteresis on S3
    - cec: Fix runtime BUG when (CONFIG_RC_CORE && !CEC_CAP_RC)
    - s5p-mfc: Fix race between interrupt routine and device functions
    - gspca: konica: add missing endpoint sanity check
    - s5p-mfc: Fix unbalanced call to clock management
    - dib0700: fix NULL-deref at probe
    - zr364xx: enforce minimum size when reading header
    - dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops
    - digitv: limit messages to buffer size
    - dw2102: limit messages to buffer size
    - cx231xx-audio: fix init error path
    - cx231xx-audio: fix NULL-deref at probe
    - cx231xx-cards: fix NULL-deref at probe
    - powerpc/mm: Ensure IRQs are off in switch_mm()
    - powerpc/eeh: Avoid use after free in eeh_handle_special_event()
    - powerpc/book3s/mce: Move add_taint() later in virtual mode
    - powerpc/pseries: Fix of_node_put() underflow during DLPAR remove
    - powerpc/sysfs: Fix reference leak of cpu device_nodes present at boot
    - powerpc/iommu: Do not call PageTransHuge() on tail pages
    - powerpc/64e: Fix hang when debugging programs with relocated kernel
    - powerpc/mm: Fix crash in page table dump with huge pages
    - arm64: KVM: Do not use stack-protector to compile EL2 code
    - arm: KVM: Do not use stack-protector to compile HYP code
    - KVM: arm/arm64: vgic-v2: Do not use Active+Pending state for a HW interrupt
    - KVM: arm/arm64: vgic-v3: Do not use Active+Pending state for a HW interrupt
    - KVM: arm: plug potential guest hardware debug leakage
    - ARM: 8662/1: module: split core and init PLT sections
    - ARM: 8667/3: Fix memory attribute inconsistencies when using fixmap
    - ARM: 8670/1: V7M: Do not corrupt vector table around v7m_invalidate_l1 call
    - ARM: dts: at91: sama5d3_xplained: fix ADC vref
    - ARM: dts: at91: sama5d3_xplained: not all ADC channels are available
    - ARM: dts: imx6sx-sdb: Remove OPP override
    - arm64: dts: hi6220: Reset the mmc hosts
    - arm64: xchg: hazard against entire exchange variable
    - arm64: ensure extension of smp_store_release value
    - arm64: armv8_deprecated: ensure extension of addr
    - arm64: uaccess: ensure extension of access_ok() addr
    - arm64: traps: fix userspace cache maintenance emulation on a tagged pointer
    - arm64: hw_breakpoint: fix watchpoint matching for tagged pointers
    - arm64: entry: improve data abort handling of tagged pointers
    - arm64: documentation: document tagged pointer stack constraints
    - staging: vc04_services: Fix bulk cache maintenance
    - staging: rtl8192e: rtl92e_fill_tx_desc fix write to mapped out memory.
    - staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
    - staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.
    - staging: rtl8192e: GetTs Fix invalid TID 7 warning.
    - iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
    - cpuidle: check dev before usage in cpuidle_use_deepest_state()
    - metag/uaccess: Fix access_ok()
    - metag/uaccess: Check access_ok in strncpy_from_user
    - stackprotector: Increase the per-task stack canary's random range from 32
      bits to 64 bits on 64-bit platforms
    - uwb: fix device quirk on big-endian hosts
    - genirq: Fix chained interrupt data ordering
    - nvme: unmap CMB and remove sysfs file in reset path
    - MIPS: Loongson-3: Select MIPS_L1_CACHE_SHIFT_6
    - kvm: arm/arm64: Fix race in resetting stage2 PGD
    - kvm: arm/arm64: Fix use after free of stage2 page table
    - kvm: arm/arm64: Force reading uncached stage2 PGD
    - osf_wait4(): fix infoleak
    - drbd: fix request leak introduced by locking/atomic, kref: Kill kref_sub()
    - um: Fix to call read_initrd after init_bootmem
    - firmware: ti_sci: fix strncat length check
    - tracing/kprobes: Enforce kprobes teardown after testing
    - thermal: mt8173: minor mtk_thermal.c cleanups
    - PCI/ACPI: Tidy up MCFG quirk whitespace
    - PCI/ACPI: Add ThunderX pass2.x 2nd node MCFG quirk
    - PCI: hv: Allocate interrupt descriptors with GFP_ATOMIC
    - PCI: hv: Specify CPU_AFFINITY_ALL for MSI affinity when >= 32 CPUs
    - PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
    - PCI: Fix another sanity check bug in /proc/pci mmap
    - PCI: Only allow WC mmap on prefetchable resources
    - PCI: Freeze PME scan before suspending devices
    - mtd: nand: orion: fix clk handling
    - mtd: nand: omap2: Fix partition creation via cmdline mtdparts
    - mtd: nand: add ooblayout for old hamming layout
    - drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
    - NFSv4: Fix a hang in OPEN related to server reboot
    - NFS: Fix use after free in write error path
    - NFS: Use GFP_NOIO for two allocations in writeback
    - pNFS/flexfiles: Check the result of nfs4_pnfs_ds_connect
    - NFSv4: Fix an rcu lock leak
    - nfsd: fix undefined behavior in nfsd4_layout_verify
    - nfsd: encoders mustn't use unitialized values in error cases
    - nfsd: Fix up the "supattr_exclcreat" attributes
    - drivers: char: mem: Check for address space wraparound with mmap()
    - drm/i915/gvt: Disable access to stolen memory as a guest
    - IB/hfi1: Protect the global dev_cntr_names and port_cntr_names
    - Linux 4.11.3

  * iptables/ip6tables regressions in deleting rules (LP: #1691752)
    - SAUCE: iptables/ip6tables: Ensure entries are fully copied to userspace

  * Enable Matrox driver for Ubuntu 16.04.3 (LP: #1693337)
    - [Config] Enable CONFIG_DRM_MGAG200 as module

  * Miscellaneous Ubuntu changes
    - Update configs for PPC xive options
    - [Debian] Run 'silentoldconfig' when not editing a configuration

Date: 2017-05-27 04:17:19.217700+00:00
Changed-By: Seth Forshee <seth.forshee+lp at canonical.com>
https://launchpad.net/ubuntu/+source/linux/4.11.0-5.10
-------------- next part --------------
Sorry, changesfile not available.