[PATCH 4.4 000/103] 4.4.70-stable review

From: Greg Kroah-Hartman
Date: Tue May 23 2017 - 16:53:50 EST


This is the start of the stable review cycle for the 4.4.70 release.
There are 103 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu May 25 20:08:25 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.70-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.4.70-rc1

Julius Werner <jwerner@xxxxxxxxxxxx>
drivers: char: mem: Check for address space wraparound with mmap()

J. Bruce Fields <bfields@xxxxxxxxxx>
nfsd: encoders mustn't use unitialized values in error cases

Mario Kleiner <mario.kleiner.de@xxxxxxxxx>
drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2

Lukas Wunner <lukas@xxxxxxxxx>
PCI: Freeze PME scan before suspending devices

David Woodhouse <dwmw@xxxxxxxxxxxx>
PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
tracing/kprobes: Enforce kprobes teardown after testing

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
osf_wait4(): fix infoleak

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
genirq: Fix chained interrupt data ordering

Johan Hovold <johan@xxxxxxxxxx>
uwb: fix device quirk on big-endian hosts

Daniel Micay <danielmicay@xxxxxxxxx>
stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms

James Hogan <james.hogan@xxxxxxxxxx>
metag/uaccess: Check access_ok in strncpy_from_user

James Hogan <james.hogan@xxxxxxxxxx>
metag/uaccess: Fix access_ok()

KarimAllah Ahmed <karahmed@xxxxxxxxx>
iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings

Malcolm Priestley <tvboxspy@xxxxxxxxx>
staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.

Malcolm Priestley <tvboxspy@xxxxxxxxx>
staging: rtl8192e: fix 2 byte alignment of register BSSIDR.

Keno Fischer <keno@xxxxxxxxxxxxxxxxxx>
mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp

Takashi Iwai <tiwai@xxxxxxx>
xc2028: Fix use-after-free bug properly

Kristina Martsenko <kristina.martsenko@xxxxxxx>
arm64: documentation: document tagged pointer stack constraints

Mark Rutland <mark.rutland@xxxxxxx>
arm64: uaccess: ensure extension of access_ok() addr

Mark Rutland <mark.rutland@xxxxxxx>
arm64: xchg: hazard against entire exchange variable

Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx>
ARM: dts: at91: sama5d3_xplained: not all ADC channels are available

Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx>
ARM: dts: at91: sama5d3_xplained: fix ADC vref

LiuHailong <liu.hailong6@xxxxxxxxxx>
powerpc/64e: Fix hang when debugging programs with relocated kernel

Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx>
powerpc/pseries: Fix of_node_put() underflow during DLPAR remove

Mahesh Salgaonkar <mahesh@xxxxxxxxxxxxxxxxxx>
powerpc/book3s/mce: Move add_taint() later in virtual mode

Johan Hovold <johan@xxxxxxxxxx>
cx231xx-cards: fix NULL-deref at probe

Johan Hovold <johan@xxxxxxxxxx>
cx231xx-audio: fix NULL-deref at probe

Johan Hovold <johan@xxxxxxxxxx>
cx231xx-audio: fix init error path

Daniel Scheller <d.scheller@xxxxxxx>
dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops

Alyssa Milburn <amilburn@xxxxxxxx>
zr364xx: enforce minimum size when reading header

Johan Hovold <johan@xxxxxxxxxx>
dib0700: fix NULL-deref at probe

Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
s5p-mfc: Fix unbalanced call to clock management

Johan Hovold <johan@xxxxxxxxxx>
gspca: konica: add missing endpoint sanity check

Yan, Zheng <zyan@xxxxxxxxxx>
ceph: fix recursion between ceph_set_acl() and __ceph_setattr()

Matt Ranostay <matt.ranostay@xxxxxxxxxxxx>
iio: proximity: as3935: fix as3935_write

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
ipx: call ipxitf_put() in ioctl error path

Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
tty: Prevent ldisc drivers from re-using stale tty fields

Johan Hovold <johan@xxxxxxxxxx>
USB: hub: fix non-SS hub-descriptor handling

Johan Hovold <johan@xxxxxxxxxx>
USB: hub: fix SS hub-descriptor handling

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: io_ti: fix div-by-zero in set_termios

Johan Hovold <johan@xxxxxxxxxx>
USB: serial: mct_u232: fix big-endian baud-rate handling

BjÃrn Mork <bjorn@xxxxxxx>
USB: serial: qcserial: add more Lenovo EM74xx device IDs

Daniele Palmas <dnlplm@xxxxxxxxx>
usb: serial: option: add Telit ME910 support

Johan Hovold <johan@xxxxxxxxxx>
USB: iowarrior: fix info ioctl on big-endian hosts

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
usb: musb: tusb6010_omap: Do not reset the other direction's packet size

Alyssa Milburn <amilburn@xxxxxxxx>
ttusb2: limit messages to buffer size

Johan Hovold <johan@xxxxxxxxxx>
mceusb: fix NULL-deref at probe

Johan Hovold <johan@xxxxxxxxxx>
usbvision: fix NULL-deref at probe

Johan Hovold <johan@xxxxxxxxxx>
net: irda: irda-usb: fix firmware name on big-endian hosts

Peter Chen <peter.chen@xxxxxxx>
usb: host: xhci-mem: allocate zeroed Scratchpad Buffer

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton

Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
usb: host: xhci-plat: propagate return value of platform_get_irq()

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
sched/fair: Initialize throttle_count for new task-groups lazily

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
sched/fair: Do not announce throttled next buddy in dequeue_task_fair()

Eric Biggers <ebiggers@xxxxxxxxxx>
fscrypt: avoid collisions when presenting long encrypted filenames

Jaegeuk Kim <jaegeuk@xxxxxxxxxx>
f2fs: check entire encrypted bigname when finding a dentry

Eric Biggers <ebiggers@xxxxxxxxxx>
fscrypt: fix context consistency check when key(s) unavailable

Kristian Evensen <kristian.evensen@xxxxxxxxx>
net: qmi_wwan: Add SIMCom 7230E

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
ext4 crypto: fix some error handling

Theodore Ts'o <tytso@xxxxxxx>
ext4 crypto: don't let data integrity writebacks fail with ENOMEM

Andrey Korolyov <andrey@xxxxxxx>
USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs

Anthony Mallet <anthony.mallet@xxxxxxx>
USB: serial: ftdi_sio: fix setting latency for unprivileged users

Kirill Tkhai <ktkhai@xxxxxxxxxxxxx>
pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes

Pavel Roskin <plroskin@xxxxxxxxx>
iio: dac: ad7303: fix channel description

Rob Herring <robh@xxxxxxxxxx>
of: fix sparse warning in of_pci_range_parser_one

Takashi Iwai <tiwai@xxxxxxx>
proc: Fix unbalanced hard link numbers

Tobias Herzog <t-herzog@xxxxxx>
cdc-acm: fix possible invalid access when processing notification

Ben Skeggs <bskeggs@xxxxxxxxxx>
drm/nouveau/tmr: handle races with hw when updating the next alarm time

Ben Skeggs <bskeggs@xxxxxxxxxx>
drm/nouveau/tmr: avoid processing completed alarms when adding a new one

Ben Skeggs <bskeggs@xxxxxxxxxx>
drm/nouveau/tmr: fix corruption of the pending list when rescheduling an alarm

Ben Skeggs <bskeggs@xxxxxxxxxx>
drm/nouveau/tmr: ack interrupt before processing alarms

Ben Skeggs <bskeggs@xxxxxxxxxx>
drm/nouveau/therm: remove ineffective workarounds for alarm bugs

Mario Kleiner <mario.kleiner.de@xxxxxxxxx>
drm/amdgpu: Make display watermark calculations more accurate

Mario Kleiner <mario.kleiner.de@xxxxxxxxx>
drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark calculations.

Johan Hovold <johan@xxxxxxxxxx>
ath9k_htc: fix NULL-deref at probe

Dmitry Tunin <hanipouspilot@xxxxxxxxx>
ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device

Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
s390/cputime: fix incorrect system time

Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
s390/kdump: Add final note

Richard Cochran <rcochran@xxxxxxxxxxxxx>
regulator: tps65023: Fix inverted core enable logic.

Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation

Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
KVM: x86: Fix load damaged SSEx MXCSR register

Daniel GlÃckner <dg@xxxxxxxxx>
ima: accept previously set IMA_NEW_FILE

Brian Norris <briannorris@xxxxxxxxxxxx>
mwifiex: pcie: fix cmd_buf use-after-free in remove/reset

Larry Finger <Larry.Finger@xxxxxxxxxxxx>
rtlwifi: rtl8821ae: setup 8812ae RFE according to device type

Dennis Yang <dennisyang@xxxxxxxx>
md: update slab_cache before releasing new stripes when stripes resizing

Joe Thornber <ejt@xxxxxxxxxx>
dm space map disk: fix some book keeping in the disk space map

Joe Thornber <ejt@xxxxxxxxxx>
dm thin metadata: call precommit before saving the roots

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm bufio: make the parameter "retain_bytes" unsigned long

Mike Snitzer <snitzer@xxxxxxxxxx>
dm cache metadata: fail operations if fail_io mode has been established

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm bufio: check new buffer allocation watermark every 30 seconds

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm bufio: avoid a possible ABBA deadlock

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm raid: select the Kconfig option CONFIG_MD_RAID0

Vinothkumar Raja <vinraja@xxxxxxxxxxxxxxxxx>
dm btree: fix for dm_btree_find_lowest_key()

Paolo Abeni <pabeni@xxxxxxxxxx>
infiniband: call ipv6 route lookup via the stub interface

Jerry Snitselaar <jsnitsel@xxxxxxxxxx>
tpm_crb: check for bad response size

Marc Dietrich <marvin24@xxxxxx>
ARM: tegra: paz00: Mark panel regulator as enabled on boot

Vamsi Krishna Samavedam <vskrishn@xxxxxxxxxxxxxx>
USB: core: replace %p with %pK

Willy Tarreau <w@xxxxxx>
char: lp: fix possible integer overflow in lp_setup()

Johan Hovold <johan@xxxxxxxxxx>
watchdog: pcwd_usb: fix NULL-deref at probe

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: ene_usb6250: fix DMA to the stack

Maksim Salau <maksim.salau@xxxxxxxxx>
usb: misc: legousbtower: Fix memory leak

Maksim Salau <maksim.salau@xxxxxxxxx>
usb: misc: legousbtower: Fix buffers on stack


-------------

Diffstat:

Documentation/arm64/tagged-pointers.txt | 62 ++++++++---
Makefile | 4 +-
arch/alpha/kernel/osf_sys.c | 6 +-
arch/arm/boot/dts/at91-sama5d3_xplained.dts | 5 +-
arch/arm/boot/dts/tegra20-paz00.dts | 1 +
arch/arm64/include/asm/cmpxchg.h | 2 +-
arch/arm64/include/asm/uaccess.h | 3 +-
arch/metag/include/asm/uaccess.h | 49 ++++++---
arch/powerpc/kernel/exceptions-64e.S | 12 ++
arch/powerpc/kernel/mce.c | 2 +
arch/powerpc/kernel/traps.c | 4 +-
arch/powerpc/platforms/pseries/dlpar.c | 1 -
arch/s390/kernel/crash_dump.c | 15 +++
arch/s390/kernel/entry.S | 21 +++-
arch/x86/kernel/fpu/init.c | 1 +
arch/x86/kvm/x86.c | 33 ++++--
drivers/char/lp.c | 6 +-
drivers/char/mem.c | 5 +
drivers/char/tpm/tpm_crb.c | 3 +-
drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 29 ++---
drivers/gpu/drm/amd/amdgpu/dce_v11_0.c | 29 ++---
drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 29 ++---
drivers/gpu/drm/drm_edid.c | 8 ++
drivers/gpu/drm/nouveau/nvkm/subdev/therm/base.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/subdev/therm/fan.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/subdev/therm/fantog.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/subdev/therm/temp.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/subdev/timer/base.c | 59 ++++++----
drivers/gpu/drm/nouveau/nvkm/subdev/timer/nv04.c | 2 +-
drivers/iio/dac/ad7303.c | 6 +-
drivers/iio/proximity/as3935.c | 3 +-
drivers/infiniband/core/addr.c | 4 +-
drivers/iommu/intel-iommu.c | 5 +-
drivers/md/Kconfig | 1 +
drivers/md/dm-bufio.c | 35 ++++--
drivers/md/dm-cache-metadata.c | 12 +-
drivers/md/dm-thin-metadata.c | 4 +-
drivers/md/persistent-data/dm-btree.c | 8 +-
drivers/md/persistent-data/dm-space-map-disk.c | 15 ++-
drivers/md/raid5.c | 6 +-
drivers/media/dvb-frontends/cxd2841er.c | 4 +-
drivers/media/platform/s5p-mfc/s5p_mfc.c | 1 +
drivers/media/rc/mceusb.c | 4 +-
drivers/media/tuners/tuner-xc2028.c | 37 +++----
drivers/media/usb/cx231xx/cx231xx-audio.c | 42 ++++---
drivers/media/usb/cx231xx/cx231xx-cards.c | 45 +++++++-
drivers/media/usb/dvb-usb/dib0700_core.c | 3 +
drivers/media/usb/dvb-usb/ttusb2.c | 19 ++++
drivers/media/usb/gspca/konica.c | 3 +
drivers/media/usb/usbvision/usbvision-video.c | 9 +-
drivers/media/usb/zr364xx/zr364xx.c | 8 ++
drivers/net/irda/irda-usb.c | 2 +-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/ath/ath9k/hif_usb.c | 4 +
drivers/net/wireless/mwifiex/pcie.c | 7 ++
.../net/wireless/realtek/rtlwifi/rtl8821ae/phy.c | 122 ++++++++++++++++++---
.../net/wireless/realtek/rtlwifi/rtl8821ae/reg.h | 1 +
drivers/of/address.c | 2 +-
drivers/pci/pci-sysfs.c | 10 +-
drivers/pci/pci.c | 9 +-
drivers/regulator/tps65023-regulator.c | 3 +-
drivers/staging/rtl8192e/rtl8192e/r8192E_dev.c | 11 +-
drivers/tty/tty_ldisc.c | 7 ++
drivers/usb/class/cdc-acm.c | 13 ++-
drivers/usb/core/devio.c | 4 +-
drivers/usb/core/hcd.c | 4 +-
drivers/usb/core/hub.c | 19 +++-
drivers/usb/core/urb.c | 2 +-
drivers/usb/host/xhci-mem.c | 2 +-
drivers/usb/host/xhci-pci.c | 7 +-
drivers/usb/host/xhci-plat.c | 2 +-
drivers/usb/misc/iowarrior.c | 2 +-
drivers/usb/misc/legousbtower.c | 38 +++++--
drivers/usb/musb/tusb6010_omap.c | 13 ++-
drivers/usb/serial/ftdi_sio.c | 10 +-
drivers/usb/serial/ftdi_sio_ids.h | 2 +
drivers/usb/serial/io_ti.c | 5 +-
drivers/usb/serial/mct_u232.c | 2 +-
drivers/usb/serial/option.c | 8 ++
drivers/usb/serial/qcserial.c | 2 +
drivers/usb/storage/ene_ub6250.c | 90 +++++++++------
drivers/uwb/i1480/dfu/usb.c | 5 +-
drivers/watchdog/pcwd_usb.c | 3 +
fs/ceph/acl.c | 4 +-
fs/ceph/inode.c | 27 +++--
fs/ceph/super.h | 1 +
fs/ext4/crypto.c | 37 ++++---
fs/ext4/crypto_fname.c | 2 +-
fs/ext4/crypto_policy.c | 66 ++++++++---
fs/ext4/ext4.h | 6 +-
fs/ext4/namei.c | 4 +-
fs/ext4/page-io.c | 14 ++-
fs/ext4/readpage.c | 2 +-
fs/f2fs/crypto_fname.c | 2 +-
fs/f2fs/crypto_policy.c | 65 ++++++++---
fs/f2fs/dir.c | 32 ++++--
fs/f2fs/f2fs.h | 3 +-
fs/f2fs/hash.c | 7 +-
fs/f2fs/inline.c | 4 +-
fs/nfsd/nfs4xdr.c | 8 +-
fs/proc/generic.c | 1 +
include/linux/kprobes.h | 4 +-
kernel/fork.c | 10 +-
kernel/irq/chip.c | 2 +-
kernel/kprobes.c | 2 +-
kernel/pid_namespace.c | 2 +-
kernel/sched/fair.c | 29 ++++-
kernel/sched/sched.h | 2 +-
kernel/trace/trace_kprobe.c | 5 +
mm/huge_memory.c | 12 +-
net/ipx/af_ipx.c | 5 +-
security/integrity/ima/ima_appraise.c | 5 +-
112 files changed, 1005 insertions(+), 443 deletions(-)