Linux 3.10.105 was just released. All users of the 3.10 kernel series must upgrade. As a reminder, the 3.10.y extended LTS series is scheduled for end of life on end of October 2017 so it may only get a few more versions. Extended LTS kernels are generally not suitable for new deployments but only to maintain existing systems under operational condition for the time it takes to migrate to a newer version. The patch and changelog will appear soon at the following locations: https://www.kernel.org/pub/linux/kernel/v3.x/ https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.105.xz https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.105.gz https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.105 The updated 3.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.10.y http://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.10.y The tree can be browsed on the git web interface: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/?h=linux-3.10.y Thanks to everyone involved, Willy --------- Makefile | 2 +- arch/alpha/include/asm/uaccess.h | 19 +- arch/arc/include/asm/uaccess.h | 11 +- arch/arc/kernel/signal.c | 11 +- arch/arm/boot/compressed/head.S | 2 +- arch/arm/common/sa1111.c | 22 +- arch/arm/kernel/devtree.c | 14 +- arch/arm/mach-sa1100/generic.c | 2 + arch/arm64/include/asm/elf.h | 1 + arch/arm64/include/asm/spinlock.h | 10 + arch/arm64/include/uapi/asm/auxvec.h | 2 + arch/arm64/kernel/debug-monitors.c | 6 +- arch/arm64/kernel/entry.S | 2 +- arch/arm64/kernel/traps.c | 25 +- arch/avr32/include/asm/uaccess.h | 11 +- arch/avr32/kernel/avr32_ksyms.c | 2 +- arch/avr32/lib/copy_user.S | 8 +- arch/avr32/mach-at32ap/pio.c | 2 +- arch/blackfin/include/asm/uaccess.h | 9 +- arch/cris/include/asm/uaccess.h | 71 +++--- arch/frv/include/asm/uaccess.h | 12 +- arch/hexagon/include/asm/uaccess.h | 3 +- arch/ia64/include/asm/uaccess.h | 20 +- arch/m32r/include/asm/uaccess.h | 2 +- arch/metag/include/asm/atomic.h | 3 +- arch/metag/include/asm/uaccess.h | 3 +- arch/microblaze/include/asm/uaccess.h | 11 +- arch/mips/include/asm/kvm_host.h | 7 +- arch/mips/include/asm/ptrace.h | 2 +- arch/mips/include/asm/uaccess.h | 3 + arch/mips/kvm/kvm_mips_emul.c | 100 ++++++-- arch/mips/mti-malta/malta-setup.c | 8 +- arch/mn10300/include/asm/uaccess.h | 1 + arch/mn10300/lib/usercopy.c | 4 +- arch/openrisc/include/asm/uaccess.h | 35 +-- arch/parisc/include/asm/uaccess.h | 7 +- arch/parisc/kernel/syscall.S | 11 +- arch/powerpc/include/asm/uaccess.h | 21 +- arch/powerpc/kernel/nvram_64.c | 6 +- arch/powerpc/kernel/vdso64/datapage.S | 2 +- arch/powerpc/kernel/vdso64/gettimeofday.S | 2 +- arch/powerpc/lib/copyuser_64.S | 2 +- arch/powerpc/mm/slb_low.S | 7 +- arch/powerpc/platforms/powernv/pci.c | 4 +- arch/s390/include/asm/uaccess.h | 8 +- arch/score/include/asm/uaccess.h | 46 ++-- arch/sh/include/asm/uaccess.h | 5 +- arch/sh/include/asm/uaccess_64.h | 1 + arch/sparc/include/asm/uaccess_32.h | 4 +- arch/tile/kernel/time.c | 4 +- arch/x86/boot/compressed/Makefile | 14 +- arch/x86/boot/compressed/head_32.S | 28 ++ arch/x86/boot/compressed/head_64.S | 8 + arch/x86/include/asm/hugetlb.h | 1 + arch/x86/include/asm/tlbflush.h | 7 + arch/x86/include/asm/uaccess.h | 2 +- arch/x86/kernel/apic/apic.c | 3 + arch/x86/kernel/head_32.S | 2 +- arch/x86/kernel/paravirt.c | 4 +- arch/x86/kvm/vmx.c | 13 + arch/x86/kvm/x86.c | 20 +- arch/x86/mm/pat.c | 5 +- arch/x86/um/asm/barrier.h | 6 +- arch/x86/xen/mmu.c | 2 +- block/cfq-iosched.c | 13 +- crypto/ablkcipher.c | 2 + crypto/af_alg.c | 51 +++- crypto/ahash.c | 5 +- crypto/algif_hash.c | 165 +++++++++++- crypto/algif_skcipher.c | 172 +++++++++++-- crypto/blkcipher.c | 4 +- crypto/cryptd.c | 9 +- crypto/gcm.c | 2 +- crypto/shash.c | 5 +- drivers/acpi/apei/ghes.c | 2 +- drivers/base/core.c | 42 ++- drivers/block/drbd/drbd_main.c | 2 +- drivers/block/xen-blkback/common.h | 8 +- drivers/char/hw_random/exynos-rng.c | 9 +- drivers/char/hw_random/omap-rng.c | 16 +- drivers/char/mem.c | 6 +- drivers/devfreq/devfreq.c | 2 +- drivers/edac/edac_mc.c | 2 +- drivers/firewire/net.c | 59 +++-- drivers/gpio/gpio-mpc8xxx.c | 2 +- drivers/gpu/drm/drm_crtc.c | 3 + drivers/gpu/drm/qxl/qxl_draw.c | 2 + drivers/gpu/drm/radeon/atombios_crtc.c | 2 + drivers/gpu/drm/radeon/radeon_legacy_crtc.c | 2 + drivers/gpu/drm/radeon/radeon_ttm.c | 4 +- drivers/hv/hv_util.c | 10 +- drivers/hwmon/adt7411.c | 5 +- drivers/i2c/busses/i2c-at91.c | 58 ++++- drivers/i2c/busses/i2c-eg20t.c | 18 +- drivers/i2c/i2c-core.c | 2 +- drivers/iio/accel/kxsd9.c | 2 + drivers/infiniband/core/cm.c | 127 +++++++-- drivers/infiniband/core/multicast.c | 13 +- drivers/infiniband/core/uverbs_main.c | 7 +- drivers/infiniband/hw/mlx4/cq.c | 5 +- drivers/infiniband/hw/mlx4/mcg.c | 14 +- drivers/infiniband/ulp/ipoib/ipoib.h | 1 + drivers/infiniband/ulp/ipoib/ipoib_cm.c | 16 ++ drivers/infiniband/ulp/ipoib/ipoib_ib.c | 9 + drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +- drivers/input/serio/i8042.c | 17 +- drivers/input/serio/libps2.c | 10 +- drivers/input/touchscreen/ili210x.c | 2 +- drivers/iommu/amd_iommu.c | 13 +- drivers/isdn/hardware/mISDN/ipac.h | 1 + drivers/isdn/hardware/mISDN/mISDNipac.c | 2 + drivers/isdn/mISDN/socket.c | 3 + drivers/md/dm-flakey.c | 27 +- drivers/md/dm.c | 5 + drivers/media/dvb-frontends/mb86a20s.c | 104 ++++---- drivers/media/usb/cx231xx/cx231xx-avcore.c | 5 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 2 +- drivers/media/usb/cx231xx/cx231xx-core.c | 3 +- drivers/media/usb/em28xx/em28xx-i2c.c | 5 +- drivers/mfd/mfd-core.c | 2 + drivers/misc/mei/nfc.c | 2 +- drivers/mmc/card/block.c | 3 +- drivers/mmc/host/mxs-mmc.c | 4 +- drivers/mtd/maps/pmcmsp-flash.c | 6 +- drivers/mtd/mtd_blkdevs.c | 10 +- drivers/mtd/nand/davinci_nand.c | 3 + drivers/mtd/ubi/fastmap.c | 7 +- drivers/net/bonding/bond_main.c | 7 +- drivers/net/can/dev.c | 27 +- drivers/net/ethernet/marvell/sky2.c | 13 + drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 2 +- drivers/net/ppp/ppp_generic.c | 5 +- drivers/net/usb/kaweth.c | 3 +- .../net/wireless/brcm80211/brcmfmac/wl_cfg80211.c | 2 +- drivers/net/wireless/brcm80211/brcmsmac/dma.c | 4 +- drivers/net/wireless/brcm80211/brcmsmac/stf.c | 2 +- drivers/net/wireless/iwlwifi/pcie/tx.c | 4 +- drivers/net/wireless/mwifiex/cfg80211.c | 13 +- drivers/net/xen-netback/netback.c | 34 ++- drivers/pci/quirks.c | 41 ++- drivers/regulator/tps65910-regulator.c | 6 + drivers/s390/block/dasd.c | 10 +- drivers/s390/scsi/zfcp_dbf.c | 162 ++++++++++-- drivers/s390/scsi/zfcp_dbf.h | 14 +- drivers/s390/scsi/zfcp_erp.c | 12 +- drivers/s390/scsi/zfcp_ext.h | 8 +- drivers/s390/scsi/zfcp_fsf.c | 22 +- drivers/s390/scsi/zfcp_fsf.h | 4 +- drivers/s390/scsi/zfcp_scsi.c | 8 +- drivers/scsi/arcmsr/arcmsr_hba.c | 17 +- drivers/scsi/ibmvscsi/ibmvfc.c | 1 - drivers/scsi/megaraid/megaraid_sas.h | 2 +- drivers/scsi/megaraid/megaraid_sas_base.c | 13 +- drivers/scsi/mpt2sas/mpt2sas_scsih.c | 15 ++ drivers/scsi/mpt3sas/mpt3sas_base.h | 12 + drivers/scsi/mpt3sas/mpt3sas_scsih.c | 31 ++- drivers/scsi/scsi_debug.c | 1 + drivers/scsi/scsi_scan.c | 2 +- drivers/staging/iio/impedance-analyzer/ad5933.c | 17 +- drivers/thermal/thermal_core.c | 2 +- drivers/tty/tty_ldisc.c | 7 + drivers/tty/vt/vt.c | 7 +- drivers/uio/uio_dmem_genirq.c | 2 +- drivers/usb/chipidea/core.c | 1 + drivers/usb/chipidea/udc.c | 2 - drivers/usb/class/cdc-acm.c | 5 +- drivers/usb/class/cdc-acm.h | 1 - drivers/usb/core/config.c | 93 ++++++- drivers/usb/dwc3/gadget.c | 19 +- drivers/usb/gadget/fsl_qe_udc.c | 7 +- drivers/usb/gadget/u_ether.c | 7 - drivers/usb/host/xhci-hub.c | 3 + drivers/usb/misc/legousbtower.c | 35 ++- drivers/usb/renesas_usbhs/mod.c | 11 +- drivers/usb/serial/cp210x.c | 6 +- drivers/usb/serial/kobil_sct.c | 5 +- drivers/usb/serial/mos7720.c | 2 +- drivers/usb/serial/mos7840.c | 4 +- drivers/usb/serial/usb-serial.c | 4 +- drivers/usb/storage/transport.c | 7 +- drivers/video/efifb.c | 6 +- drivers/xen/xen-pciback/conf_space.c | 6 +- drivers/xen/xen-pciback/conf_space.h | 2 +- drivers/xen/xen-pciback/conf_space_header.c | 2 +- drivers/xen/xen-pciback/pciback.h | 1 + drivers/xen/xen-pciback/pciback_ops.c | 79 ++++-- fs/btrfs/ioctl.c | 12 + fs/coredump.c | 3 + fs/ext4/ext4.h | 1 + fs/ext4/inode.c | 50 ++-- fs/ext4/mballoc.c | 47 ++-- fs/ext4/namei.c | 9 +- fs/ext4/super.c | 53 +++- fs/ext4/xattr.c | 13 +- fs/hostfs/hostfs_kern.c | 7 +- fs/isofs/inode.c | 8 +- fs/nfs/callback.c | 1 + fs/nfs/callback_xdr.c | 6 +- fs/nfs/nfs4state.c | 3 + fs/nfsd/nfs4state.c | 3 +- fs/ocfs2/dlm/dlmconvert.c | 12 +- fs/ocfs2/file.c | 34 ++- fs/pstore/ram_core.c | 51 +--- fs/reiserfs/ibalance.c | 3 +- fs/reiserfs/super.c | 12 +- fs/seq_file.c | 4 +- fs/super.c | 6 +- fs/ubifs/dir.c | 22 +- fs/ubifs/tnc_commit.c | 2 +- fs/ubifs/xattr.c | 2 + fs/xfs/xfs_dquot.c | 3 +- fs/xfs/xfs_mount.c | 3 +- include/asm-generic/uaccess.h | 20 +- include/crypto/hash.h | 6 + include/crypto/if_alg.h | 11 +- include/linux/can/dev.h | 3 +- include/linux/crypto.h | 8 + include/linux/filter.h | 6 +- include/linux/i8042.h | 6 - include/linux/mfd/88pm80x.h | 4 +- include/linux/mroute.h | 2 +- include/linux/mroute6.h | 2 +- include/linux/netdevice.h | 1 + include/linux/pagemap.h | 38 +-- include/linux/perf_event.h | 6 - include/linux/serio.h | 24 +- include/linux/stddef.h | 15 +- include/linux/vfio.h | 14 - include/net/if_inet6.h | 10 +- include/net/ip6_tunnel.h | 1 + include/net/ndisc.h | 2 + include/net/sock.h | 16 +- include/net/tcp.h | 3 + include/xen/interface/io/ring.h | 14 + ipc/sem.c | 8 - kernel/events/core.c | 15 +- kernel/fork.c | 10 +- kernel/power/suspend_test.c | 4 +- kernel/rcutree_plugin.h | 1 + kernel/sched/core.c | 41 +++ kernel/timer.c | 19 +- kernel/trace/trace.c | 32 +-- lib/genalloc.c | 3 +- lib/mpi/mpi-pow.c | 7 +- lib/ratelimit.c | 2 +- mm/ksm.c | 3 +- mm/swapfile.c | 2 + net/can/bcm.c | 32 ++- net/core/dev.c | 18 +- net/core/dst.c | 4 +- net/core/filter.c | 10 +- net/core/sock.c | 10 +- net/dccp/ipv4.c | 14 +- net/dccp/ipv6.c | 16 +- net/dccp/proto.c | 4 + net/ipv4/ip_fragment.c | 4 + net/ipv4/ip_output.c | 3 + net/ipv4/ipmr.c | 3 +- net/ipv4/route.c | 9 +- net/ipv4/tcp_ipv4.c | 22 +- net/ipv4/tcp_output.c | 15 +- net/ipv6/addrconf.c | 283 ++++++++++++++------- net/ipv6/af_inet6.c | 6 + net/ipv6/anycast.c | 12 + net/ipv6/ip6_gre.c | 1 - net/ipv6/ip6_tunnel.c | 13 +- net/ipv6/ip6mr.c | 5 +- net/ipv6/mcast.c | 14 + net/ipv6/ndisc.c | 18 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 + net/ipv6/reassembly.c | 4 + net/ipv6/route.c | 4 +- net/ipv6/tcp_ipv6.c | 14 +- net/irda/iriap.c | 8 +- net/mac80211/cfg.c | 2 +- net/mac80211/rx.c | 24 +- net/mac80211/tx.c | 6 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 25 +- net/netfilter/nf_log.c | 6 +- net/packet/af_packet.c | 1 + net/sctp/sm_statefuns.c | 12 +- net/sctp/socket.c | 12 +- net/sunrpc/svc.c | 8 +- net/wireless/core.h | 1 + net/wireless/scan.c | 69 +++++ security/keys/proc.c | 2 +- sound/core/pcm_lib.c | 2 +- sound/core/rawmidi.c | 4 +- sound/core/timer.c | 20 +- sound/pci/ali5451/ali5451.c | 2 + sound/soc/omap/omap-mcpdm.c | 5 +- tools/perf/util/symbol-elf.c | 2 +- tools/perf/util/symbol.c | 2 +- tools/vm/slabinfo.c | 3 +- 294 files changed, 2960 insertions(+), 1173 deletions(-) Summary of changes from 3.10.104 to 3.10.105 ============================================== Al Viro (28): avr32: fix copy_from_user() microblaze: fix __get_user() microblaze: fix copy_from_user() mn10300: failing __get_user() and get_user() should zero m32r: fix __get_user() sh64: failing __get_user() should zero score: fix __get_user/get_user s390: get_user() should zero on failure asm-generic: make get_user() clear the destination on errors frv: fix clear_user() cris: buggered copy_from_user/copy_to_user/clear_user blackfin: fix copy_from_user() score: fix copy_from_user() and friends sh: fix copy_from_user() hexagon: fix strncpy_from_user() error return mips: copy_from_user() must zero the destination on access_ok() failure asm-generic: make copy_from_user() zero the destination properly alpha: fix copy_from_user() metag: copy_from_user() should zero the destination on access_ok() failure parisc: fix copy_from_user() openrisc: fix copy_from_user() mn10300: copy_from_user() should zero on access_ok() failure... sparc32: fix copy_from_user() ppc32: fix copy_from_user() ia64: copy_from_user() should zero the destination on access_ok() failure fix fault_in_multipages_...() on architectures with no-op access_ok() fix memory leaks in tracing_buffers_splice_read() arc: don't leak bits of kernel stack into coredump Alan Stern (3): USB: validate wMaxPacketValue entries in endpoint descriptors USB: fix typo in wMaxPacketSize validation USB: change bInterval default to 10 ms Alex Vesker (2): IB/ipoib: Don't allow MC joins during light MC flush IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV Alexander Usyskin (1): mei: bus: fix received data size check in NFC fixup Alexey Khoroshilov (2): USB: serial: mos7720: fix non-atomic allocation in write path USB: serial: mos7840: fix non-atomic allocation in write path Alexey Klimov (1): USB: serial: fix memleak in driver-registration error path Andrew Bresticker (1): pstore/ram: Use memcpy_fromio() to save old buffer Andrey Grodzovsky (2): scsi: mpt3sas: Fix secure erase premature termination mpt2sas: Fix secure erase premature termination Andrey Ryabinin (2): coredump: fix unfreezable coredumping task mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] Andy Lutomirski (1): x86/traps: Ignore high word of regs->cs in early_idt_handler_common Anoob Soman (1): packet: call fanout_release, while UNREGISTERING a netdev Anton Blanchard (1): powerpc/vdso64: Use double word compare on pointers Ard Biesheuvel (1): crypto: cryptd - initialize child shash_desc on import Arend Van Spriel (1): brcmfmac: avoid potential stack overflow in brcmf_cfg80211_start_ap() Arnaldo Carvalho de Melo (1): perf symbols: Fixup symbol sizes before picking best ones Arnd Bergmann (1): staging: iio: ad5933: avoid uninitialized variable in error case Ashish Samant (1): ocfs2: fix start offset to ocfs2_zero_range_for_truncate() Balbir Singh (1): sched/core: Fix a race between try_to_wake_up() and a woken up task Baoquan He (1): iommu/amd: Free domain id when free a domain of struct dma_ops_domain Bart Van Assche (1): dm: mark request_queue dead before destroying the DM device Ben Hutchings (1): xen-pciback: Add name prefix to global 'permissive' variable Boris Brezillon (1): UBI: fastmap: scrub PEB when bitflips are detected in a free PEB EC header Brian King (1): scsi: ibmvfc: Fix I/O hang when port is not mapped Brian Norris (2): mtd: blkdevs: fix potential deadlock + lockdep warnings mwifiex: printk() overflow with 32-byte SSIDs Ching Huang (1): scsi: arcmsr: Send SYNCHRONIZE_CACHE command to firmware Chris Metcalf (1): tile: avoid using clocksource_cyc2ns with absolute cycle count Christian König (1): drm/radeon: fix radeon_move_blit on 32bit systems Chuck Lever (2): NFS: Don't drop CB requests with invalid principals svc: Avoid garbage replies when pc_func() returns rpc_drop_reply Cyrille Pitchen (1): i2c: at91: fix write transfers by clearing pending interrupt first Daeho Jeong (2): ext4: avoid modifying checksum fields directly during checksum verification ext4: reinforce check of i_dtime when clearing high fields of uid and gid Dan Carpenter (10): avr32: off by one in at32_init_pio() usb: gadget: fsl_qe_udc: signedness bug in qe_get_frame() scsi: zfcp: spin_lock_irqsave() is not nestable scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common() qxl: check for kmap failures em28xx-i2c: rt_mutex_trylock() returns zero on failure mtd: pmcmsp-flash: Allocating too much in init_msp_flash() tools/vm/slabinfo: fix an unintentional printf mfd: 88pm80x: Double shifting bug in suspend/resume Daniel Glöckner (1): mmc: block: don't use CMD23 with very old MMC cards Daniel Mentz (1): lib/genalloc.c: start search from start of chunk Daniel Vetter (1): drm: Reject page_flip for !DRIVER_MODESET Darrick J. Wong (1): libxfs: clean up _calc_dquots_per_chunk Dave Chinner (1): xfs: fix superblock inprogress check Dave Gerlach (1): hwrng: omap - Only fail if pm_runtime_get_sync returns < 0 David Howells (1): KEYS: Fix short sprintf buffer in /proc/keys show function David Vrabel (3): xen: Add RING_COPY_REQUEST() xen-netback: don't use last request to determine minimum Tx credit xen-netback: use RING_COPY_REQUEST() throughout Denys Vlasenko (1): include/stddef.h: Move offsetofend() from vfio.h to a generic kernel header Ding Tianhong (1): rcu: Fix soft lockup for rcu_nocb_kthread Dmitry Torokhov (3): Input: i8042 - break load dependency between atkbd/psmouse and i8042 Input: i8042 - set up shared ps2_cmd_mutex for AUX ports Input: ili210x - fix permissions on "calibrate" attribute Dmitry Vyukov (1): tty: limit terminal size to 4M chars Douglas Caetano dos Santos (1): tcp: fix wrong checksum calculation on MTU probing Eli Cooper (2): ip6_tunnel: Clear IP6CB in ip6tunnel_xmit() ipv4: Set skb->protocol properly for local output Emmanouil Maroudas (1): EDAC: Increment correct counter in edac_inc_ue_error() Emrah Demir (1): mISDN: Fixing missing validation in base_sock_bind() Erez Shitrit (2): IB/ipoib: Fix memory corruption in ipoib cm mode connect flow IB/core: Fix use after free in send_leave function Eric Dumazet (12): ipv6: dccp: fix out of bound access in dccp_v6_err() ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped tcp: fix use after free in tcp_xmit_retransmit_queue() tcp: properly scale window in tcp_v[46]_reqsk_send_ack() tcp: fix overflow in __tcp_retransmit_skb() tcp: take care of truncations done by sk_filter() net: fix sk_mem_reclaim_partial() net: avoid sk_forward_alloc overflows net: clear sk_err_soft in sk_clone_lock() net: mangle zero checksum in skb_checksum_help() dccp: do not send reset to already closed sockets dccp: fix out of bound access in dccp_v4_err() Ewan D. Milne (1): scsi: scsi_debug: Fix memory leak if LBP enabled and module is unloaded Fabio Estevam (1): mmc: mxs: Initialize the spinlock prior to using it Felipe Balbi (3): usb: dwc3: gadget: increment request->actual once usb: gadget: function: u_ether: don't starve tx request queue usb: gadget: u_ether: remove interrupt throttling Felix Fietkau (1): mac80211: fix purging multicast PS buffer queue Florian Fainelli (2): brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get() Furquan Shaikh (1): pstore/ram: Use memcpy_toio instead of memcpy Gavin Li (1): cdc-acm: fix wrong pipe type on rx interrupt xfers Gavin Shan (2): powerpc/powernv: Use CPU-endian PEST in pnv_pci_dump_p7ioc_diag_data() drivers/vfio: Rework offsetofend() Glauber Costa (1): cfq: fix starvation of asynchronous writes Greg Kroah-Hartman (1): usb: misc: legousbtower: Fix NULL pointer deference Guenter Roeck (3): avr32: fix 'undefined reference to `___copy_from_user' openrisc: fix the fix of copy_from_user() metag: Only define atomic_dec_if_positive conditionally H.J. Lu (1): x86/build: Build compressed x86 kernels as PIE Hannes Frederic Sowa (2): ipv6: split duplicate address detection and router solicitation timer ipv6: move DAD and addrconf_verify processing to workqueue Herbert Xu (17): crypto: algif_skcipher - Require setkey before accept(2) crypto: af_alg - Disallow bind/setkey/... after accept(2) crypto: af_alg - Add nokey compatibility path crypto: algif_skcipher - Add nokey compatibility path crypto: hash - Add crypto_ahash_has_setkey crypto: shash - Fix has_key setting crypto: algif_hash - Require setkey before accept(2) crypto: skcipher - Add crypto_skcipher_has_setkey crypto: algif_skcipher - Add key check exception for cipher_null crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path crypto: algif_hash - Remove custom release parent function crypto: algif_skcipher - Remove custom release parent function crypto: af_alg - Forbid bind(2) when nokey child sockets are present crypto: algif_hash - Fix race condition in hash_check_key crypto: algif_skcipher - Fix race condition in skcipher_check_key crypto: algif_skcipher - Load TX SG list after waiting crypto: skcipher - Fix blkcipher walk OOM crash Ido Yariv (1): KVM: x86: fix wbinvd_dirty_mask use-after-free Ignacio Alvarado (1): KVM: Disable irq while unregistering user notifier Jack Morgenstein (1): net/mlx4_core: Allow resetting VF admin mac to zero Jaewon Kim (1): ratelimit: fix bug in time interval by resetting right begin time James Bottomley (1): scsi: mpt3sas: fix hang on ata passthrough commands James Hogan (4): KVM: MIPS: Precalculate MMIO load resume PC KVM: MIPS: Drop other CPU ASIDs on guest MMU changes KVM: MIPS: Make ERET handle ERL before EXL arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO Jan Beulich (1): x86/mm/xen: Suppress hugetlbfs in PV guests Jan Kara (1): isofs: Do not return EACCES for unknown filesystems Jan Remmet (1): regulator: tps65910: Work around silicon erratum SWCZ010 Jan Viktorin (1): uio: fix dmem_region_start computation Jann Horn (2): swapfile: fix memory corruption via malformed swapfile netfilter: fix namespace handling in nf_log_proc_dostring Jeff Mahoney (2): reiserfs: fix "new_insert_key may be used uninitialized ..." btrfs: ensure that file descriptor used with subvol ioctls is a dir Jeremy Linton (1): net: sky2: Fix shutdown crash Jim Lin (1): usb: xhci: Fix panic if disconnect Jiri Kosina (1): x86/mm/pat, /dev/mem: Remove superfluous error message Jiri Slaby (2): tty: vt, fix bogus division in csi_J net: sctp, forbid negative length Joe Perches (1): stddef.h: move offsetofend inside #ifndef/#endif guard, neaten Joerg Roedel (1): iommu/amd: Update Alias-DTE in update_device_table() Johan Hovold (4): USB: kobil_sct: fix non-atomic allocation in write path USB: serial: cp210x: fix tiocmget error handling mfd: core: Fix device reference leak in mfd_clone_cell PM / sleep: fix device reference leak in test_suspend Johannes Berg (2): mac80211: discard multicast and 4-addr A-MSDUs cfg80211: limit scan results cache size John David Anglin (1): parisc: Ensure consistent state when switching to kernel stack at syscall entry Joseph Qi (1): ocfs2/dlm: fix race between convert and migration Juergen Gross (1): x86/xen: fix upper bound of pmd loop in xen_cleanhighmap() Karl Beldan (1): mtd: nand: davinci: Reinitialize the HW ECC engine in 4bit hwctl Kashyap Desai (1): scsi: megaraid_sas: Fix data integrity failure for JBOD (passthrough) devices Kinglong Mee (1): NFSD: Using free_conn free connection Konrad Rzeszutek Wilk (7): xen/pciback: Save xen_pci_op commands before processing it xen/pciback: Save the number of MSI-X entries to be copied later. xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI or MSI-X enabled xen/pciback: Do not install an IRQ handler for MSI interrupts. xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled. xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set. Konstantin Khlebnikov (2): ext4: use __GFP_NOFAIL in ext4_free_blocks() net: ratelimit warnings about dst entry refcount underflow or overflow Konstantin Shkolnyy (1): USB: serial: cp210x: fix hardware flow-control disable Krzysztof Kozlowski (2): hwrng: exynos - Disable runtime PM on probe failure thermal: hwmon: Properly report critical temperature in sysfs Lance Richardson (1): ip6_gre: fix flowi6_proto value in ip6gre_xmit_other() Linus Torvalds (1): Fix potential infoleak in older kernels Linus Walleij (2): iio: accel: kxsd9: Fix raw read return iio: accel: kxsd9: Fix scaling bug Liu Gang (1): gpio: mpc8xxx: Correct irq handler function Liu ShuoX (1): pstore: Fix buffer overflow while write offset equal to buffer size Long Li (1): hv: do not lose pending heartbeat vmbus packets Maciej S. Szmigiero (1): mISDN: Support DR6 indication in mISDNipac driver Mahesh Bandewar (1): bonding: Fix bonding crash Marcelo Ricardo Leitner (2): sctp: validate chunk len before actually using it sctp: assign assoc_id earlier in __sctp_connect Marcin Nowakowski (1): MIPS: ptrace: Fix regs_return_value for kernel context Mark Bloch (1): IB/cm: Mark stale CM id's whenever the mad agent was unregistered Mark Rutland (1): arm64: avoid returning from bad_mode Markus Elfring (1): driver core: Delete an unnecessary check before the function call "put_device" Matan Barak (1): IB/mlx4: Fix create CQ error flow Mauro Carvalho Chehab (4): mb86a20s: fix the locking logic mb86a20s: fix demod settings cx231xx: don't return error on success cx231xx: fix GPIOs for Pixelview SBTVD hybrid Max Staudt (1): fbdev/efifb: Fix 16 color palette entry calculation Michael S. Tsirkin (1): x86/um: reuse asm-generic/barrier.h Michael Walle (1): hwmon: (adt7411) set bit 3 in CFG1 register Michal Hocko (1): kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd Michal Kubecek (2): net: disable fragment reassembly if high_thresh is set to zero ipvs: count pre-established TCP states as active Michal KubeÄ?ek (1): ipv6: don't call fib6_run_gc() until routing is ready Michel Dänzer (1): drm/radeon: Ensure vblank interrupt is enabled on DPMS transition to on Mike Galbraith (1): reiserfs: Unlock superblock before calling reiserfs_quota_on_mount() Mike Snitzer (1): dm flakey: fix reads to be issued if drop_writes configured Ming Lei (2): scsi: Fix use-after-free driver core: fix race between creating/querying glue dir and its cleanup Myron Stowe (1): PCI: Handle read-only BARs on AMD CS553x devices Nicholas Mc Guire (1): MIPS: KVM: Fix unused variable build warning Nicolas Dichtel (1): ipv6: correctly add local routes when lo goes up Nikolay Aleksandrov (1): ipmr, ip6mr: fix scheduling while atomic and a deadlock with ipmr_get_route Nishanth Menon (1): hwrng: omap - Fix assumption that runtime_get_sync will always succeed Oleg Nesterov (1): fs/super.c: fix race between freeze_super() and thaw_super() Oliver Hartkopp (1): can: bcm: fix warning in bcm_connect/proc_register Oliver Neukum (1): kaweth: fix firmware download Ondrej MosnáÄ?ek (1): crypto: gcm - Fix IV buffer size in crypto_gcm_setkey Pan Xinhui (1): powerpc/nvram: Fix an incorrect partition merge Paolo Abeni (1): ip6_tunnel: disable caching when the traffic class is inherited Paolo Bonzini (1): KVM: x86: fix missed SRCU usage in kvm_lapic_set_vapic_addr Paul Burton (1): MIPS: Malta: Fix IOCU disable switch read for MIPS64 Paul Mackerras (2): powerpc/mm: Don't alias user region to other regions below PAGE_OFFSET powerpc/64: Fix incorrect return value from __copy_tofrom_user Peter Chen (1): usb: chipidea: move the lock initialization to core file Peter Hurley (1): tty: Prevent ldisc drivers from re-using stale tty fields Peter Ujfalusi (1): ASoC: omap-mcpdm: Fix irq resource handling Peter Zijlstra (2): sched/core: Fix an SMP ordering race in try_to_wake_up() vs. schedule() perf: Tighten (and fix) the grouping condition Petr Vandrovec (1): Fix USB CB/CBI storage devices with CONFIG_VMAP_STACK=y Punit Agrawal (1): ACPI / APEI: Fix incorrect return value of ghes_proc() Radim KrÄ?máÅ? (1): KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write Richard Weinberger (5): ubifs: Fix xattr_names length in exit paths UBIFS: Fix possible memory leak in ubifs_readdir() ubifs: Abort readdir upon error ubifs: Fix regression in ubifs_readdir() drbd: Fix kernel_sendmsg() usage - potential NULL deref Robin Murphy (1): ARM: 8616/1: dt: Respect property size when parsing CPUs Roger Pau Monné (1): xen-blkback: only read request operation from shared ring once Ross Zwisler (1): ext4: allow DAX writeback for hole punch Russell King (2): ARM: sa1100: clear reset status prior to reboot ARM: sa1111: fix pcmcia suspend/resume Sabrina Dubroca (1): ipv6: fix rtnl locking in setsockopt for anycast and multicast Sara Sharon (1): iwlwifi: pcie: fix access to scratch buffer Scot Doyle (1): vt: clear selection before resizing Sebastian Andrzej Siewior (2): x86/mm: Disable preemption during CR3 read+write pstore/core: drop cmpxchg based updates Sergei Miroshnichenko (1): can: dev: fix deadlock reported after bus-off Srinivas Ramana (1): ARM: 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7 Stefan Haberland (1): s390/dasd: fix hanging device after clear subchannel Stefan Richter (2): firewire: net: guard against rx buffer overflows firewire: net: fix fragmented datagram_size off-by-one Steffen Maier (10): zfcp: fix fc_host port_type with NPIV zfcp: fix ELS/GS request&response length for hardware data router zfcp: close window with unblocked rport during rport gone zfcp: retain trace level for SCSI and HBA FSF response records zfcp: restore: Dont use 0 to indicate invalid LUN in rec trace zfcp: trace on request for open and close of WKA port zfcp: restore tracing of handle for port and LUN with HBA records zfcp: fix D_ID field with actual value on tracing SAN responses zfcp: fix payload trace length for SAN request&response zfcp: trace full payload of all SAN records (req,resp,iels) Stephen Suryaputra Lin (1): ipv4: use new_gw for redirect neigh lookup Steven Rostedt (1): x86/paravirt: Do not trace _paravirt_ident_*() functions Steven Rostedt (Red Hat) (1): tracing: Move mutex to protect against resetting of seq data Suganath Prabu S (1): scsi: mpt3sas: Unblock device after controller reset Sumit Saxena (1): scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression Takashi Iwai (3): ALSA: rawmidi: Fix possible deadlock with virmidi registration ALSA: ali5451: Fix out-of-bound position reporting ALSA: pcm : Call kill_fasync() in stream lock Tariq Toukan (1): IB/uverbs: Fix leak of XRC target QPs Tejun Heo (1): timers: Use proper base migration in add_timer_on() Theodore Ts'o (2): ext4: validate that metadata blocks do not overlap superblock ext4: sanity check the block and cluster size at mount time Trond Myklebust (2): NFSv4.x: Fix a refcount leak in nfs_callback_up_net NFSv4: Open state recovery must account for file permission changes Vegard Nossum (5): ALSA: timer: fix NULL pointer dereference in read()/ioctl() race ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE ALSA: timer: fix NULL pointer dereference on memory allocation failure fs/seq_file: fix out-of-bounds read net/irda: handle iriap_register_lsap() allocation failure Vincent Stehlé (1): ubifs: Fix assertion in layout_in_gaps() Vineet Gupta (1): ARC: uaccess: get_user to zero out dest in cause of fault Vladimir Zapolskiy (1): i2c: core: fix NULL pointer dereference under race condition WANG Cong (2): ppp: defer netns reference release for ppp channel neigh: check error pointer instead of NULL for ipv4_neigh_lookup() Wanpeng Li (1): x86/apic: Do not init irq remapping if ioapic is disabled Wei Yongjun (1): ipv6: addrconf: fix dev refcont leak when DAD failed Will Deacon (2): arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb() arm64: debug: avoid resetting stepping state machine when TIF_SINGLESTEP Willy Tarreau (2): Revert "ipc/sem.c: optimize sem_lock()" Linux 3.10.105 Xiaolong Ye (1): PM / devfreq: Fix incorrect type issue. Yadi.hu (1): i2c-eg20t: fix race between i2c init and interrupt enable Yoshihiro Shimoda (1): usb: renesas_usbhs: fix clearing the {BRDY,BEMP}STS condition zhong jiang (1): mm,ksm: fix endless looping in allocating memory when ksm enable -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html