This is the start of the stable review cycle for the 4.4.70 release. There are 103 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu May 25 20:08:25 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.70-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.70-rc1 Julius Werner <jwerner@xxxxxxxxxxxx> drivers: char: mem: Check for address space wraparound with mmap() J. Bruce Fields <bfields@xxxxxxxxxx> nfsd: encoders mustn't use unitialized values in error cases Mario Kleiner <mario.kleiner.de@xxxxxxxxx> drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2 Lukas Wunner <lukas@xxxxxxxxx> PCI: Freeze PME scan before suspending devices David Woodhouse <dwmw@xxxxxxxxxxxx> PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms Thomas Gleixner <tglx@xxxxxxxxxxxxx> tracing/kprobes: Enforce kprobes teardown after testing Al Viro <viro@xxxxxxxxxxxxxxxxxx> osf_wait4(): fix infoleak Thomas Gleixner <tglx@xxxxxxxxxxxxx> genirq: Fix chained interrupt data ordering Johan Hovold <johan@xxxxxxxxxx> uwb: fix device quirk on big-endian hosts Daniel Micay <danielmicay@xxxxxxxxx> stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms James Hogan <james.hogan@xxxxxxxxxx> metag/uaccess: Check access_ok in strncpy_from_user James Hogan <james.hogan@xxxxxxxxxx> metag/uaccess: Fix access_ok() KarimAllah Ahmed <karahmed@xxxxxxxxx> iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings Malcolm Priestley <tvboxspy@xxxxxxxxx> staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD. Malcolm Priestley <tvboxspy@xxxxxxxxx> staging: rtl8192e: fix 2 byte alignment of register BSSIDR. Keno Fischer <keno@xxxxxxxxxxxxxxxxxx> mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp Takashi Iwai <tiwai@xxxxxxx> xc2028: Fix use-after-free bug properly Kristina Martsenko <kristina.martsenko@xxxxxxx> arm64: documentation: document tagged pointer stack constraints Mark Rutland <mark.rutland@xxxxxxx> arm64: uaccess: ensure extension of access_ok() addr Mark Rutland <mark.rutland@xxxxxxx> arm64: xchg: hazard against entire exchange variable Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx> ARM: dts: at91: sama5d3_xplained: not all ADC channels are available Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx> ARM: dts: at91: sama5d3_xplained: fix ADC vref LiuHailong <liu.hailong6@xxxxxxxxxx> powerpc/64e: Fix hang when debugging programs with relocated kernel Tyrel Datwyler <tyreld@xxxxxxxxxxxxxxxxxx> powerpc/pseries: Fix of_node_put() underflow during DLPAR remove Mahesh Salgaonkar <mahesh@xxxxxxxxxxxxxxxxxx> powerpc/book3s/mce: Move add_taint() later in virtual mode Johan Hovold <johan@xxxxxxxxxx> cx231xx-cards: fix NULL-deref at probe Johan Hovold <johan@xxxxxxxxxx> cx231xx-audio: fix NULL-deref at probe Johan Hovold <johan@xxxxxxxxxx> cx231xx-audio: fix init error path Daniel Scheller <d.scheller@xxxxxxx> dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops Alyssa Milburn <amilburn@xxxxxxxx> zr364xx: enforce minimum size when reading header Johan Hovold <johan@xxxxxxxxxx> dib0700: fix NULL-deref at probe Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> s5p-mfc: Fix unbalanced call to clock management Johan Hovold <johan@xxxxxxxxxx> gspca: konica: add missing endpoint sanity check Yan, Zheng <zyan@xxxxxxxxxx> ceph: fix recursion between ceph_set_acl() and __ceph_setattr() Matt Ranostay <matt.ranostay@xxxxxxxxxxxx> iio: proximity: as3935: fix as3935_write Dan Carpenter <dan.carpenter@xxxxxxxxxx> ipx: call ipxitf_put() in ioctl error path Peter Hurley <peter@xxxxxxxxxxxxxxxxxx> tty: Prevent ldisc drivers from re-using stale tty fields Johan Hovold <johan@xxxxxxxxxx> USB: hub: fix non-SS hub-descriptor handling Johan Hovold <johan@xxxxxxxxxx> USB: hub: fix SS hub-descriptor handling Johan Hovold <johan@xxxxxxxxxx> USB: serial: io_ti: fix div-by-zero in set_termios Johan Hovold <johan@xxxxxxxxxx> USB: serial: mct_u232: fix big-endian baud-rate handling Bjørn Mork <bjorn@xxxxxxx> USB: serial: qcserial: add more Lenovo EM74xx device IDs Daniele Palmas <dnlplm@xxxxxxxxx> usb: serial: option: add Telit ME910 support Johan Hovold <johan@xxxxxxxxxx> USB: iowarrior: fix info ioctl on big-endian hosts Peter Ujfalusi <peter.ujfalusi@xxxxxx> usb: musb: tusb6010_omap: Do not reset the other direction's packet size Alyssa Milburn <amilburn@xxxxxxxx> ttusb2: limit messages to buffer size Johan Hovold <johan@xxxxxxxxxx> mceusb: fix NULL-deref at probe Johan Hovold <johan@xxxxxxxxxx> usbvision: fix NULL-deref at probe Johan Hovold <johan@xxxxxxxxxx> net: irda: irda-usb: fix firmware name on big-endian hosts Peter Chen <peter.chen@xxxxxxx> usb: host: xhci-mem: allocate zeroed Scratchpad Buffer Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx> usb: host: xhci-plat: propagate return value of platform_get_irq() Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> sched/fair: Initialize throttle_count for new task-groups lazily Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> sched/fair: Do not announce throttled next buddy in dequeue_task_fair() Eric Biggers <ebiggers@xxxxxxxxxx> fscrypt: avoid collisions when presenting long encrypted filenames Jaegeuk Kim <jaegeuk@xxxxxxxxxx> f2fs: check entire encrypted bigname when finding a dentry Eric Biggers <ebiggers@xxxxxxxxxx> fscrypt: fix context consistency check when key(s) unavailable Kristian Evensen <kristian.evensen@xxxxxxxxx> net: qmi_wwan: Add SIMCom 7230E Dan Carpenter <dan.carpenter@xxxxxxxxxx> ext4 crypto: fix some error handling Theodore Ts'o <tytso@xxxxxxx> ext4 crypto: don't let data integrity writebacks fail with ENOMEM Andrey Korolyov <andrey@xxxxxxx> USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs Anthony Mallet <anthony.mallet@xxxxxxx> USB: serial: ftdi_sio: fix setting latency for unprivileged users Kirill Tkhai <ktkhai@xxxxxxxxxxxxx> pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes() Eric W. Biederman <ebiederm@xxxxxxxxxxxx> pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes Pavel Roskin <plroskin@xxxxxxxxx> iio: dac: ad7303: fix channel description Rob Herring <robh@xxxxxxxxxx> of: fix sparse warning in of_pci_range_parser_one Takashi Iwai <tiwai@xxxxxxx> proc: Fix unbalanced hard link numbers Tobias Herzog <t-herzog@xxxxxx> cdc-acm: fix possible invalid access when processing notification Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/tmr: handle races with hw when updating the next alarm time Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/tmr: avoid processing completed alarms when adding a new one Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/tmr: fix corruption of the pending list when rescheduling an alarm Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/tmr: ack interrupt before processing alarms Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/therm: remove ineffective workarounds for alarm bugs Mario Kleiner <mario.kleiner.de@xxxxxxxxx> drm/amdgpu: Make display watermark calculations more accurate Mario Kleiner <mario.kleiner.de@xxxxxxxxx> drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark calculations. Johan Hovold <johan@xxxxxxxxxx> ath9k_htc: fix NULL-deref at probe Dmitry Tunin <hanipouspilot@xxxxxxxxx> ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390/cputime: fix incorrect system time Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx> s390/kdump: Add final note Richard Cochran <rcochran@xxxxxxxxxxxxx> regulator: tps65023: Fix inverted core enable logic. Wanpeng Li <wanpeng.li@xxxxxxxxxxx> KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation Wanpeng Li <wanpeng.li@xxxxxxxxxxx> KVM: x86: Fix load damaged SSEx MXCSR register Daniel Glöckner <dg@xxxxxxxxx> ima: accept previously set IMA_NEW_FILE Brian Norris <briannorris@xxxxxxxxxxxx> mwifiex: pcie: fix cmd_buf use-after-free in remove/reset Larry Finger <Larry.Finger@xxxxxxxxxxxx> rtlwifi: rtl8821ae: setup 8812ae RFE according to device type Dennis Yang <dennisyang@xxxxxxxx> md: update slab_cache before releasing new stripes when stripes resizing Joe Thornber <ejt@xxxxxxxxxx> dm space map disk: fix some book keeping in the disk space map Joe Thornber <ejt@xxxxxxxxxx> dm thin metadata: call precommit before saving the roots Mikulas Patocka <mpatocka@xxxxxxxxxx> dm bufio: make the parameter "retain_bytes" unsigned long Mike Snitzer <snitzer@xxxxxxxxxx> dm cache metadata: fail operations if fail_io mode has been established Mikulas Patocka <mpatocka@xxxxxxxxxx> dm bufio: check new buffer allocation watermark every 30 seconds Mikulas Patocka <mpatocka@xxxxxxxxxx> dm bufio: avoid a possible ABBA deadlock Mikulas Patocka <mpatocka@xxxxxxxxxx> dm raid: select the Kconfig option CONFIG_MD_RAID0 Vinothkumar Raja <vinraja@xxxxxxxxxxxxxxxxx> dm btree: fix for dm_btree_find_lowest_key() Paolo Abeni <pabeni@xxxxxxxxxx> infiniband: call ipv6 route lookup via the stub interface Jerry Snitselaar <jsnitsel@xxxxxxxxxx> tpm_crb: check for bad response size Marc Dietrich <marvin24@xxxxxx> ARM: tegra: paz00: Mark panel regulator as enabled on boot Vamsi Krishna Samavedam <vskrishn@xxxxxxxxxxxxxx> USB: core: replace %p with %pK Willy Tarreau <w@xxxxxx> char: lp: fix possible integer overflow in lp_setup() Johan Hovold <johan@xxxxxxxxxx> watchdog: pcwd_usb: fix NULL-deref at probe Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: ene_usb6250: fix DMA to the stack Maksim Salau <maksim.salau@xxxxxxxxx> usb: misc: legousbtower: Fix memory leak Maksim Salau <maksim.salau@xxxxxxxxx> usb: misc: legousbtower: Fix buffers on stack ------------- Diffstat: Documentation/arm64/tagged-pointers.txt | 62 ++++++++--- Makefile | 4 +- arch/alpha/kernel/osf_sys.c | 6 +- arch/arm/boot/dts/at91-sama5d3_xplained.dts | 5 +- arch/arm/boot/dts/tegra20-paz00.dts | 1 + arch/arm64/include/asm/cmpxchg.h | 2 +- arch/arm64/include/asm/uaccess.h | 3 +- arch/metag/include/asm/uaccess.h | 49 ++++++--- arch/powerpc/kernel/exceptions-64e.S | 12 ++ arch/powerpc/kernel/mce.c | 2 + arch/powerpc/kernel/traps.c | 4 +- arch/powerpc/platforms/pseries/dlpar.c | 1 - arch/s390/kernel/crash_dump.c | 15 +++ arch/s390/kernel/entry.S | 21 +++- arch/x86/kernel/fpu/init.c | 1 + arch/x86/kvm/x86.c | 33 ++++-- drivers/char/lp.c | 6 +- drivers/char/mem.c | 5 + drivers/char/tpm/tpm_crb.c | 3 +- drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 29 ++--- drivers/gpu/drm/amd/amdgpu/dce_v11_0.c | 29 ++--- drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 29 ++--- drivers/gpu/drm/drm_edid.c | 8 ++ drivers/gpu/drm/nouveau/nvkm/subdev/therm/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/therm/fan.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/therm/fantog.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/therm/temp.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/timer/base.c | 59 ++++++---- drivers/gpu/drm/nouveau/nvkm/subdev/timer/nv04.c | 2 +- drivers/iio/dac/ad7303.c | 6 +- drivers/iio/proximity/as3935.c | 3 +- drivers/infiniband/core/addr.c | 4 +- drivers/iommu/intel-iommu.c | 5 +- drivers/md/Kconfig | 1 + drivers/md/dm-bufio.c | 35 ++++-- drivers/md/dm-cache-metadata.c | 12 +- drivers/md/dm-thin-metadata.c | 4 +- drivers/md/persistent-data/dm-btree.c | 8 +- drivers/md/persistent-data/dm-space-map-disk.c | 15 ++- drivers/md/raid5.c | 6 +- drivers/media/dvb-frontends/cxd2841er.c | 4 +- drivers/media/platform/s5p-mfc/s5p_mfc.c | 1 + drivers/media/rc/mceusb.c | 4 +- drivers/media/tuners/tuner-xc2028.c | 37 +++---- drivers/media/usb/cx231xx/cx231xx-audio.c | 42 ++++--- drivers/media/usb/cx231xx/cx231xx-cards.c | 45 +++++++- drivers/media/usb/dvb-usb/dib0700_core.c | 3 + drivers/media/usb/dvb-usb/ttusb2.c | 19 ++++ drivers/media/usb/gspca/konica.c | 3 + drivers/media/usb/usbvision/usbvision-video.c | 9 +- drivers/media/usb/zr364xx/zr364xx.c | 8 ++ drivers/net/irda/irda-usb.c | 2 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/wireless/ath/ath9k/hif_usb.c | 4 + drivers/net/wireless/mwifiex/pcie.c | 7 ++ .../net/wireless/realtek/rtlwifi/rtl8821ae/phy.c | 122 ++++++++++++++++++--- .../net/wireless/realtek/rtlwifi/rtl8821ae/reg.h | 1 + drivers/of/address.c | 2 +- drivers/pci/pci-sysfs.c | 10 +- drivers/pci/pci.c | 9 +- drivers/regulator/tps65023-regulator.c | 3 +- drivers/staging/rtl8192e/rtl8192e/r8192E_dev.c | 11 +- drivers/tty/tty_ldisc.c | 7 ++ drivers/usb/class/cdc-acm.c | 13 ++- drivers/usb/core/devio.c | 4 +- drivers/usb/core/hcd.c | 4 +- drivers/usb/core/hub.c | 19 +++- drivers/usb/core/urb.c | 2 +- drivers/usb/host/xhci-mem.c | 2 +- drivers/usb/host/xhci-pci.c | 7 +- drivers/usb/host/xhci-plat.c | 2 +- drivers/usb/misc/iowarrior.c | 2 +- drivers/usb/misc/legousbtower.c | 38 +++++-- drivers/usb/musb/tusb6010_omap.c | 13 ++- drivers/usb/serial/ftdi_sio.c | 10 +- drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/io_ti.c | 5 +- drivers/usb/serial/mct_u232.c | 2 +- drivers/usb/serial/option.c | 8 ++ drivers/usb/serial/qcserial.c | 2 + drivers/usb/storage/ene_ub6250.c | 90 +++++++++------ drivers/uwb/i1480/dfu/usb.c | 5 +- drivers/watchdog/pcwd_usb.c | 3 + fs/ceph/acl.c | 4 +- fs/ceph/inode.c | 27 +++-- fs/ceph/super.h | 1 + fs/ext4/crypto.c | 37 ++++--- fs/ext4/crypto_fname.c | 2 +- fs/ext4/crypto_policy.c | 66 ++++++++--- fs/ext4/ext4.h | 6 +- fs/ext4/namei.c | 4 +- fs/ext4/page-io.c | 14 ++- fs/ext4/readpage.c | 2 +- fs/f2fs/crypto_fname.c | 2 +- fs/f2fs/crypto_policy.c | 65 ++++++++--- fs/f2fs/dir.c | 32 ++++-- fs/f2fs/f2fs.h | 3 +- fs/f2fs/hash.c | 7 +- fs/f2fs/inline.c | 4 +- fs/nfsd/nfs4xdr.c | 8 +- fs/proc/generic.c | 1 + include/linux/kprobes.h | 4 +- kernel/fork.c | 10 +- kernel/irq/chip.c | 2 +- kernel/kprobes.c | 2 +- kernel/pid_namespace.c | 2 +- kernel/sched/fair.c | 29 ++++- kernel/sched/sched.h | 2 +- kernel/trace/trace_kprobe.c | 5 + mm/huge_memory.c | 12 +- net/ipx/af_ipx.c | 5 +- security/integrity/ima/ima_appraise.c | 5 +- 112 files changed, 1005 insertions(+), 443 deletions(-)