[PATCH 4.3 00/55] 4.3.4-stable review

From: Greg Kroah-Hartman
Date: Wed Jan 20 2016 - 19:45:27 EST


This is the start of the stable review cycle for the 4.3.4 release.
There are 55 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri Jan 22 23:21:49 UTC 2016.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.3.4-rc1.gz
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.3.4-rc1

Yevgeny Pats <yevgeny@xxxxxxxxxxxxxxxxxxx>
KEYS: Fix keyring ref leak in join_session_keyring()

David Howells <dhowells@xxxxxxxxxx>
KEYS: Fix race between read and revoke

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
rhashtable: Fix walker list corruption

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: restore fastopen with no data in SYN packet

Rainer Weikusat <rweikusat@xxxxxxxxxxxxxxxxxxxxxxx>
af_unix: Revert 'lock_interruptible' in stream receive code

Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
fou: clean up socket with kfree_rcu

Hamish Martin <hamish.martin@xxxxxxxxxxxxxxxxxxx>
gianfar: Don't enable RX Filer if not supported

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
rhashtable: Enforce minimum size on initial hash table

Eric Dumazet <edumazet@xxxxxxxxxx>
inet: tcp: fix inetpeer_set_addr_v4()

Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
ipv6: automatically enable stable privacy mode if stable_secret set

tadeusz.struk@xxxxxxxxx <tadeusz.struk@xxxxxxxxx>
net: fix uninitialized variable issue

David S. Miller <davem@xxxxxxxxxxxxx>
bluetooth: Validate socket address length in sco_sock_bind().

Eric Dumazet <edumazet@xxxxxxxxxx>
net_sched: make qdisc_tree_decrease_qlen() work for non mq

WANG Cong <xiyou.wangcong@xxxxxxxxx>
net: check both type and procotol for tcp sockets

Vlad Yasevich <vyasevich@xxxxxxxxx>
skbuff: Fix offset error in skb_reorder_vlan_header

Vlad Yasevich <vyasevich@xxxxxxxxx>
vlan: Fix untag operations of stacked vlans with REORDER_HEADER off

WANG Cong <xiyou.wangcong@xxxxxxxxx>
pptp: verify sockaddr_len in pptp_bind() and pptp_connect()

Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix IP early demux races

Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
sh_eth: fix kernel oops in skb_put()

Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
net: add validation for the socket syscall protocol argument

stephen hemminger <stephen@xxxxxxxxxxxxxxxxxx>
uapi: export ila.h

Joe Stringer <joe@xxxxxxx>
openvswitch: Respect conntrack zone even if invalid

Joe Stringer <joe@xxxxxxx>
openvswitch: Fix helper reference leak

Andrew Lunn <andrew@xxxxxxx>
phy: micrel: Fix finding PHY properties in MAC node.

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: sctp: clone options to avoid use after free

Peter Wu <peter@xxxxxxxxxxxxx>
r8152: fix lockup when runtime PM is enabled

Stefan Wahren <stefan.wahren@xxxxxxxx>
net: qca_spi: fix transmit queue timeout handling

BjÃrn Mork <bjorn@xxxxxxx>
net: cdc_mbim: add "NDP to end" quirk for Huawei E3372

Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
sctp: also copy sk_tsflags when copying the socket

Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
sctp: update the netstamp_needed counter when copying sockets

Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
sctp: use the same clock as if sock source timestamps were on

Jiri Benc <jbenc@xxxxxxxxxx>
vxlan: fix incorrect RCO bit in VXLAN header

BjÃrn Mork <bjorn@xxxxxxx>
ipv6: keep existing flags when setting IFA_F_OPTIMISTIC

Pavel Machek <pavel@xxxxxx>
atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation

Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx>
gre6: allow to update all parameters via rtnl

Guillaume Nault <g.nault@xxxxxxxxxxxx>
pppoe: fix memory corruption in padt work structure

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message

Hans Yang <hansy@xxxxxxxxxx>
usb: core : hub: Fix BOS 'NULL pointer' kernel panic

Arnd Bergmann <arnd@xxxxxxxx>
usb: musb: USB_TI_CPPI41_DMA requires dmaengine support

Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
USB: host: ohci-at91: fix a crash in ohci_hcd_at91_overcurrent_irq

Felipe Balbi <balbi@xxxxxx>
usb: gadget: pxa27x: fix suspend callback

Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
USB: whci-hcd: add check for dma mapping error

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: add quirk for devices with broken LPM

Konstantin Shkolnyy <konstantin.shkolnyy@xxxxxxxxx>
USB: cp210x: Remove CP2110 ID from compatibility list

Dmitry Katsubo <dmitry.katsubo@xxxxxxxxx>
usb-storage: Fix scsi-sd failure "Invalid field in cdb" for USB adapter JMicron

Jonas Jonsson <jonas@xxxxxxxxxxx>
USB: serial: Another Infineon flash loader USB ID

Jonas Jonsson <jonas@xxxxxxxxxxx>
USB: cdc_acm: Ignore Infineon Flash Loader utility

Azael Avalos <coproscefalo@xxxxxxxxx>
toshiba_acpi: Initialize hotkey_event_type variable

Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
tpm, tpm_tis: fix tpm_tis ACPI detection issue with TPM 2.0

Chen Yu <yu.c.chen@xxxxxxxxx>
ACPI / PM: Fix incorrect wakeup IRQ setting during suspend-to-idle

Chen Yu <yu.c.chen@xxxxxxxxx>
ACPI: Using correct irq when waiting for events

Chen Yu <yu.c.chen@xxxxxxxxx>
ACPI: Use correct IRQ when uninstalling ACPI interrupt handler

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
tipc: Fix kfree_skb() of uninitialised pointer

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
vrf: fix double free and memory corruption on register_netdevice failure

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
Revert "vrf: fix double free and memory corruption on register_netdevice failure"


-------------

Diffstat:

Makefile | 4 +-
drivers/acpi/osl.c | 13 +-
drivers/acpi/sleep.c | 6 +-
drivers/char/tpm/tpm.h | 7 +
drivers/char/tpm/tpm_crb.c | 32 ++--
drivers/char/tpm/tpm_tis.c | 192 ++++++++++++++++++++----
drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 7 +-
drivers/net/ethernet/freescale/gianfar.c | 8 +-
drivers/net/ethernet/freescale/gianfar.h | 1 +
drivers/net/ethernet/qualcomm/qca_spi.c | 5 +-
drivers/net/ethernet/renesas/sh_eth.c | 4 +-
drivers/net/phy/micrel.c | 13 +-
drivers/net/ppp/pppoe.c | 14 +-
drivers/net/ppp/pptp.c | 6 +
drivers/net/usb/cdc_mbim.c | 26 +++-
drivers/net/usb/cdc_ncm.c | 10 +-
drivers/net/usb/r8152.c | 21 +--
drivers/net/vrf.c | 14 +-
drivers/platform/x86/toshiba_acpi.c | 1 +
drivers/usb/class/cdc-acm.c | 5 +
drivers/usb/core/config.c | 3 +-
drivers/usb/core/hub.c | 22 ++-
drivers/usb/core/quirks.c | 6 +
drivers/usb/gadget/udc/pxa27x_udc.c | 3 +
drivers/usb/host/ohci-at91.c | 11 +-
drivers/usb/host/whci/qset.c | 4 +
drivers/usb/musb/Kconfig | 2 +-
drivers/usb/serial/cp210x.c | 1 -
drivers/usb/serial/usb-serial-simple.c | 1 +
drivers/usb/storage/uas.c | 4 +
drivers/usb/storage/unusual_devs.h | 2 +-
drivers/usb/storage/unusual_uas.h | 2 +-
include/linux/acpi.h | 6 +
include/linux/usb/quirks.h | 3 +
include/net/dst.h | 33 ++++
include/net/inetpeer.h | 1 +
include/net/sock.h | 5 +-
include/net/vxlan.h | 2 +-
include/uapi/linux/Kbuild | 1 +
lib/rhashtable.c | 25 ++-
net/ax25/af_ax25.c | 3 +
net/bluetooth/sco.c | 3 +
net/core/skbuff.c | 6 +-
net/core/sock.c | 5 +-
net/decnet/af_decnet.c | 3 +
net/ipv4/af_inet.c | 3 +
net/ipv4/fou.c | 3 +-
net/ipv4/tcp_ipv4.c | 5 +-
net/ipv4/tcp_output.c | 23 +--
net/ipv6/addrconf.c | 8 +-
net/ipv6/af_inet6.c | 3 +
net/ipv6/ip6_gre.c | 8 +-
net/ipv6/tcp_ipv6.c | 3 +-
net/irda/af_irda.c | 3 +
net/openvswitch/conntrack.c | 16 +-
net/sched/sch_api.c | 2 +-
net/sctp/ipv6.c | 8 +
net/sctp/sm_make_chunk.c | 4 +-
net/sctp/socket.c | 4 +
net/socket.c | 1 +
net/tipc/udp_media.c | 2 +-
net/unix/af_unix.c | 13 +-
security/keys/keyctl.c | 18 +--
security/keys/process_keys.c | 1 +
64 files changed, 487 insertions(+), 187 deletions(-)