[3.16.y-ckt stable] Linux 3.16.7-ckt19 stable review
Luis Henriques
luis.henriques at canonical.com
Mon Oct 26 19:02:01 UTC 2015
On Mon, Oct 26, 2015 at 01:41:42PM +0000, Luis Henriques wrote:
> This is the start of the review cycle for the Linux 3.16.7-ckt19 stable kernel.
>
> This version contains 104 new patches, summarized below. The new patches are
> posted as replies to this message and also available in this git branch:
>
I am adding 3 additional patches for this 3.16 stable kernel release,
that fix CVE-2015-7872:
911b79cde95c KEYS: Don't permit request_key() to construct a new keyring
f05819df10d7 KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
94c4554ba07a KEYS: Fix race between key destruction and finding a keyring by name
Cheers,
--
Luís
> http://kernel.ubuntu.com/git/ubuntu/linux.git/log/?h=linux-3.16.y-review
>
> git://kernel.ubuntu.com/ubuntu/linux.git linux-3.16.y-review
>
> The review period for version 3.16.7-ckt19 will be open for the next three days.
> To report a problem, please reply to the relevant follow-up patch message.
>
> For more information about the Linux 3.16.y-ckt extended stable kernel version,
> see https://wiki.ubuntu.com/Kernel/Dev/ExtendedStable .
>
> -Luis
>
> --
> arch/arm/Kconfig | 1 -
> arch/arm/Makefile | 8 ++
> arch/arm/boot/dts/omap3-beagle.dts | 2 +-
> arch/arm/boot/dts/omap5-uevm.dts | 4 +-
> arch/arm/kernel/signal.c | 15 ++--
> arch/arm/kvm/interrupts_head.S | 6 +-
> arch/arm/mach-orion5x/include/mach/irqs.h | 64 +++++++--------
> arch/arm/mach-orion5x/irq.c | 4 +-
> arch/arm64/Kconfig | 16 ++++
> arch/arm64/Makefile | 4 +
> arch/arm64/kernel/head.S | 5 ++
> arch/arm64/kernel/module.c | 2 +
> arch/arm64/kernel/signal32.c | 47 ++++++++---
> arch/arm64/kvm/hyp.S | 5 +-
> arch/m68k/include/asm/linkage.h | 30 +++++++
> arch/mips/kernel/cps-vec.S | 12 +--
> arch/mips/mm/dma-default.c | 2 +-
> arch/powerpc/boot/Makefile | 3 +
> arch/powerpc/mm/hugepage-hash64.c | 3 +-
> arch/x86/include/uapi/asm/msr-index.h | 1 +
> arch/x86/kernel/apic/apic.c | 7 ++
> arch/x86/kernel/entry_64.S | 16 +++-
> arch/x86/kernel/paravirt.c | 16 +++-
> arch/x86/kernel/tsc.c | 17 ++--
> arch/x86/kvm/svm.c | 2 +-
> arch/x86/kvm/x86.c | 2 +
> arch/x86/mm/init_64.c | 2 +-
> arch/x86/platform/efi/efi.c | 67 +++++++++++++++-
> drivers/block/zram/zcomp.c | 12 +--
> drivers/cpufreq/intel_pstate.c | 10 +--
> drivers/dma/dw/core.c | 4 +-
> drivers/gpu/drm/i915/intel_bios.c | 12 ++-
> drivers/gpu/drm/qxl/qxl_display.c | 14 ++--
> drivers/gpu/drm/radeon/atombios_encoders.c | 8 +-
> drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 6 +-
> drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 6 +-
> drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c | 2 +-
> drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 29 +++++--
> drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 2 +-
> drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 12 ++-
> drivers/hwmon/nct6775.c | 16 ++--
> drivers/infiniband/ulp/isert/ib_isert.c | 9 ++-
> drivers/mtd/ubi/io.c | 5 ++
> drivers/mtd/ubi/vtbl.c | 1 +
> drivers/mtd/ubi/wl.c | 1 +
> drivers/net/ethernet/marvell/mvneta.c | 4 +-
> drivers/net/ppp/pppoe.c | 1 -
> drivers/net/usb/asix_devices.c | 16 +---
> drivers/net/vxlan.c | 10 +--
> drivers/net/xen-netfront.c | 3 +-
> drivers/pci/access.c | 27 +------
> drivers/pci/quirks.c | 20 ++++-
> drivers/platform/x86/hp-wmi.c | 35 +++++---
> drivers/spi/spi-pxa2xx.c | 4 +
> drivers/spi/spi-xtensa-xtfpga.c | 4 +-
> drivers/spi/spi.c | 3 +-
> drivers/staging/android/ion/ion.c | 6 +-
> drivers/usb/chipidea/udc.c | 84 +++++++++----------
> drivers/usb/core/config.c | 5 +-
> drivers/usb/host/ehci-fsl.c | 13 +++
> drivers/usb/host/ehci-hub.c | 7 ++
> drivers/usb/host/ehci.h | 12 +++
> drivers/usb/host/fsl-mph-dr-of.c | 10 +++
> drivers/usb/host/xhci-mem.c | 23 +++---
> drivers/usb/host/xhci-ring.c | 13 ++-
> drivers/usb/host/xhci.c | 9 +--
> drivers/usb/serial/option.c | 24 ++++++
> drivers/usb/serial/whiteheat.c | 31 ++++++++
> fs/btrfs/extent_io.c | 65 +++++++++++++--
> fs/btrfs/inode.c | 3 +-
> fs/cifs/cifsencrypt.c | 53 +++++++++++-
> fs/cifs/ioctl.c | 6 ++
> fs/cifs/smb2ops.c | 8 +-
> fs/coredump.c | 38 +++++++--
> fs/dcache.c | 7 ++
> fs/jbd2/checkpoint.c | 39 +++++++--
> fs/jbd2/commit.c | 2 +-
> fs/jbd2/journal.c | 11 ++-
> fs/namei.c | 31 +++++++-
> fs/ocfs2/dlm/dlmmaster.c | 9 ++-
> fs/ocfs2/dlm/dlmrecovery.c | 8 +-
> include/linux/fsl_devices.h | 2 +
> include/linux/jbd2.h | 3 +-
> include/linux/skbuff.h | 5 +-
> include/net/af_unix.h | 6 +-
> include/net/sock.h | 8 ++
> ipc/msg.c | 14 ++--
> ipc/sem.c | 15 ++--
> ipc/shm.c | 12 +--
> ipc/util.c | 8 +-
> kernel/irq/proc.c | 19 ++++-
> kernel/time/clocksource.c | 2 +-
> mm/hugetlb.c | 8 ++
> mm/slab.c | 13 ++-
> net/core/datagram.c | 6 +-
> net/core/ethtool.c | 2 +-
> net/core/fib_rules.c | 2 +-
> net/core/skbuff.c | 9 ++-
> net/ipv4/tcp_input.c | 2 +-
> net/ipv4/udp.c | 2 +-
> net/ipv6/raw.c | 2 +-
> net/ipv6/udp.c | 3 +-
> net/l2tp/l2tp_core.c | 11 ++-
> net/netfilter/nft_compat.c | 24 ++++--
> net/netlink/af_netlink.c | 34 +++++---
> net/openvswitch/flow_table.c | 3 +-
> net/sctp/sm_sideeffect.c | 2 +-
> net/unix/af_unix.c | 16 +++-
> sound/arm/Kconfig | 15 ++--
> sound/soc/pxa/Kconfig | 2 -
> sound/soc/pxa/pxa2xx-ac97.c | 4 +-
> tools/lib/traceevent/event-parse.c | 23 +++++-
> tools/perf/util/header.c | 4 +-
> tools/perf/util/symbol-elf.c | 35 +++-----
> virt/kvm/eventfd.c | 124 +++++++++++++++++------------
> virt/kvm/kvm_main.c | 19 ++++-
> 116 files changed, 1164 insertions(+), 451 deletions(-)
>
> Aaron Conole (2):
> af_unix: Convert the unix_sk macro to an inline function for type safety
> af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag
>
> Adrian Hunter (1):
> perf tools: Fix copying of /proc/kcore
>
> Alex Williamson (2):
> PCI: Fix devfn for VPD access through function 0
> PCI: Use function 0 VPD for identical functions, regular VPD for others
>
> Alexander Couzens (1):
> l2tp: protect tunnel->del_work by ref_count
>
> Andreas Schwab (1):
> m68k: Define asmlinkage_protect
>
> Andrey Vagin (1):
> net/unix: fix logic about sk_peek_offset
>
> Andy Lutomirski (2):
> x86/paravirt: Replace the paravirt nop with a bona fide empty function
> x86/nmi/64: Fix a paravirt stack-clobbering bug in the NMI code
>
> Andy Shevchenko (1):
> dmaengine: dw: properly read DWC_PARAMS register
>
> Aneesh Kumar K.V (1):
> powerpc/mm: Recompute hash value after a failed update
>
> Arad, Ronen (1):
> netlink: Trim skb to alloc size to avoid MSG_TRUNC
>
> Ard Biesheuvel (1):
> ARM: 8429/1: disable GCC SRA optimization
>
> Arnaldo Carvalho de Melo (1):
> perf header: Fixup reading of HEADER_NRCPUS feature
>
> Ben Hutchings (1):
> genirq: Fix race in register_irq_proc()
>
> Benjamin Herrenschmidt (1):
> powerpc/boot: Specify ABI v2 when building an LE boot wrapper
>
> Carl Frederik Werner (1):
> ARM: dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again
>
> Charles Keepax (1):
> asix: Do full reset during ax88772_bind
>
> Chas Williams (1):
> net/xen-netfront: only napi_synchronize() if running
>
> Dave Airlie (1):
> drm/qxl: only report first monitor as connected if we have no state
>
> David Woodhouse (1):
> x86/platform: Fix Geode LX timekeeping in the generic x86 build
>
> Dirk Müller (1):
> Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS
>
> Eric Dumazet (1):
> net: add pfmemalloc check in sk_add_backlog()
>
> Eric W. Biederman (2):
> dcache: Handle escaped paths in prepend_path
> vfs: Test for and handle paths that are unreachable from their mnt_root
>
> Fabiano Fidêncio (1):
> drm/qxl: recreate the primary surface when the bo is not primary
>
> Filipe Manana (1):
> Btrfs: fix read corruption of compressed and shared extents
>
> Grazvydas Ignotas (1):
> ARM: dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
>
> Guenter Roeck (2):
> hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for most chips
> spi: Fix documentation of spi_alloc_master()
>
> Guillaume Nault (1):
> ppp: don't override sk->sk_state in pppoe_flush_dev()
>
> James Hogan (1):
> MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
>
> Jan Kara (1):
> jbd2: avoid infinite loop when destroying aborted journal
>
> Jani Nikula (1):
> drm/i915/bios: handle MIPI Sequence Block v3+ gracefully
>
> Jann Horn (2):
> CIFS: fix type confusion in copy offload ioctl
> fs: if a coredump already exists, unlink and recreate with O_EXCL
>
> Jason Wang (4):
> kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd
> kvm: factor out core eventfd assign/deassign logic
> kvm: fix double free for fast mmio eventfd
> kvm: fix zero length mmio searching
>
> Jeff Mahoney (1):
> btrfs: skip waiting on ordered range for special files
>
> Jenny Derzhavetz (1):
> iser-target: remove command with state ISTATE_REMOVE
>
> Jiri Benc (1):
> vxlan: set needed headroom correctly
>
> Joe Perches (1):
> ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
>
> Johan Hovold (1):
> USB: whiteheat: fix potential null-deref at probe
>
> John Stultz (1):
> clocksource: Fix abs() usage w/ 64bit values
>
> Joonsoo Kim (1):
> mm/slab: fix unexpected index mapping result of kmalloc_size(INDEX_NODE+1)
>
> Joseph Qi (1):
> ocfs2/dlm: fix deadlock when dispatch assert master
>
> Julia Lawall (1):
> xhci-mem: Use setup_timer
>
> Kapileshwar Singh (1):
> tools lib traceevent: Fix string handling in heterogeneous arch environments
>
> Konstantin Khlebnikov (1):
> ovs: do not allocate memory from offline numa node
>
> Kyle Evans (1):
> hp-wmi: limit hotkey enable
>
> Linus Torvalds (1):
> Initialize msg/shm IPC objects before doing ipc_addid()
>
> Liu.Zhao (1):
> USB: option: add ZTE PIDs
>
> Luis Henriques (2):
> zram: fix possible use after free in zcomp_create()
> Revert "ARM: orion5x: fix legacy orion5x IRQ numbers"
>
> Manfred Spraul (1):
> ipc/sem.c: fully initialize sem_array before making it visible
>
> Marc Zyngier (2):
> arm64: KVM: Disable virtual timer even if the guest is not using it
> arm: KVM: Disable virtual timer even if the guest is not using it
>
> Mathias Krause (1):
> hp-wmi: Add missing __init annotations to initialization code
>
> Mathias Nyman (4):
> usb: Use the USB_SS_MULT() macro to get the burst multiplier.
> xhci: give command abortion one more chance before killing xhci
> xhci: change xhci 1.0 only restrictions to support xhci 1.1
> xhci: init command timeout timer earlier to avoid deleting it uninitialized
>
> Matt Fleming (1):
> x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at runtime, instead of top-down
>
> Max Filippov (1):
> spi: xtensa-xtfpga: fix register endianness
>
> Mel Gorman (1):
> mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault
>
> Michel Dänzer (1):
> drm/radeon: Restore LCD backlight level on resume (>= R5xx)
>
> Michel Stam (1):
> asix: Don't reset PHY on if_up for ASIX 88772
>
> Nikhil Badola (2):
> drivers: usb :fsl: Implement Workaround for USB Erratum A007792
> drivers: usb: fsl: Workaround for USB erratum-A005275
>
> Pablo Neira Ayuso (1):
> netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC
>
> Paolo Bonzini (1):
> KVM: x86: trap AMD MSRs for the TSeg base and mask
>
> Paul Burton (3):
> MIPS: CPS: Stop dangling delay slot from has_mt.
> MIPS: CPS: Don't include MT code in non-MT kernels.
> MIPS: CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT
>
> Peter Chen (1):
> usb: chipidea: udc: using the correct stall implementation
>
> Peter Seiderer (1):
> cifs: use server timestamp for ntlmv2 authentication
>
> Prarit Bhargava (1):
> intel_pstate: Fix overflow in busy_scaled due to long delay
>
> Pravin B Shelar (2):
> skbuff: Fix skb checksum flag on skb pull
> skbuff: Fix skb checksum partial check.
>
> Richard Weinberger (1):
> UBI: Validate data_size
>
> Robert Jarzmik (2):
> ASoC: pxa: pxa2xx-ac97: fix dma requestor lines
> ASoC: fix broken pxa SoC support
>
> Roger Quadros (2):
> usb: xhci: Clear XHCI_STATE_DYING on start
> usb: xhci: Allow usb_add/remove_hcd() to be called repeatedly
>
> Roland Dreier (1):
> fib_rules: Fix dump_rules() not to exit early
>
> Russell King (1):
> ARM: fix Thumb2 signal handling when ARMv6 is enabled
>
> Sabrina Dubroca (1):
> net: add length argument to skb_copy_and_csum_datagram_iovec
>
> Shaohua Li (1):
> x86/apic: Serialize LVTT and TSC_DEADLINE writes
>
> Shawn Lin (1):
> staging: ion: fix corruption of ion_import_dma_buf
>
> Simon Guinot (1):
> net: mvneta: fix DMA buffer unmapping in mvneta_rx()
>
> Stephen Smalley (1):
> x86/mm: Set NX on gap between __ex_table and rodata
>
> Steve French (1):
> disabling oplocks/leases via module parm enable_oplocks broken for SMB3
>
> Stratos Karafotis (1):
> cpufreq: intel_pstate: Remove unnecessary type casting in div_s64() call
>
> Tan, Jui Nee (1):
> spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is disabled
>
> Thomas Hellstrom (2):
> drm/vmwgfx: Fix up user_dmabuf refcounting
> drm/vmwgfx: Fix kernel NULL pointer dereference on older hardware
>
> Will Deacon (3):
> arm64: head.S: initialise mdcr_el2 in el2_setup
> arm64: compat: fix vfp save/restore across signal handlers in big-endian
> arm64: errata: add module build workaround for erratum #843419
>
> lucien (1):
> sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state
>
> shengyong (1):
> UBI: return ENOSPC if no enough space available
More information about the kernel-team
mailing list