Linux 3.10.106 was just released. All users of the 3.10 kernel series must upgrade. As a reminder, the 3.10.y extended LTS series is scheduled for end of life on end of October 2017 so it may only get a few more versions. Extended LTS kernels are generally not suitable for new deployments but only to maintain existing systems under operational condition for the time it takes to migrate to a newer version. The patch and changelog will appear soon at the following locations: https://www.kernel.org/pub/linux/kernel/v3.x/ https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.106.xz https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.106.gz https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.106 The updated 3.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.10.y http://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.10.y The tree can be browsed on the git web interface: http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/log/?h=linux-3.10.y Thanks to everyone involved, Willy --------- .../devicetree/bindings/clock/imx31-clock.txt | 2 +- Documentation/kernel-parameters.txt | 4 + Makefile | 2 +- arch/arm/boot/dts/imx31.dtsi | 18 +-- arch/arm/kernel/ptrace.c | 2 +- arch/arm/mach-ux500/pm.c | 4 +- arch/arm64/include/uapi/asm/ptrace.h | 1 + arch/arm64/kernel/ptrace.c | 11 +- arch/cris/boot/rescue/Makefile | 8 ++ arch/m68k/include/asm/delay.h | 2 +- arch/metag/lib/usercopy.c | 146 ++++++++++++++------ arch/mips/cavium-octeon/octeon-memcpy.S | 20 +-- arch/mips/configs/ip27_defconfig | 1 - arch/mips/kernel/kgdb.c | 48 +++++-- arch/mips/kernel/process.c | 153 +++++++++++++-------- arch/powerpc/kernel/ibmebus.c | 16 ++- arch/powerpc/kernel/idle_power7.S | 2 +- arch/powerpc/kernel/misc_32.S | 2 +- arch/powerpc/kernel/setup_64.c | 9 ++ arch/s390/boot/compressed/misc.c | 35 ++--- arch/x86/kernel/cpu/common.c | 2 +- arch/x86/kernel/entry_32.S | 4 +- arch/x86/kvm/emulate.c | 66 +++++++-- arch/x86/pci/xen.c | 23 +--- arch/x86/platform/goldfish/goldfish.c | 14 +- crypto/Makefile | 7 +- crypto/asymmetric_keys/rsa.c | 5 +- crypto/authenc.c | 6 +- crypto/authencesn.c | 8 +- crypto/ccm.c | 4 +- crypto/gcm.c | 2 +- crypto/memneq.c | 138 +++++++++++++++++++ drivers/acpi/osl.c | 6 +- drivers/char/Kconfig | 1 - drivers/char/lp.c | 6 +- drivers/clk/clk-wm831x.c | 2 +- drivers/crypto/caam/caamalg.c | 4 +- drivers/crypto/caam/caamhash.c | 1 + drivers/gpu/drm/i915/intel_crt.c | 9 +- drivers/gpu/drm/i915/intel_display.c | 4 +- drivers/gpu/drm/nouveau/nv50_display.c | 2 +- drivers/hv/hv.c | 5 +- drivers/hv/hyperv_vmbus.h | 2 +- drivers/hv/vmbus_drv.c | 4 +- drivers/hwmon/ds620.c | 2 +- drivers/i2c/busses/i2c-at91.c | 36 +++-- drivers/infiniband/core/mad.c | 2 +- drivers/infiniband/core/multicast.c | 7 +- drivers/infiniband/hw/mlx4/ah.c | 6 +- drivers/infiniband/hw/mlx4/main.c | 8 +- drivers/infiniband/ulp/ipoib/ipoib_cm.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_main.c | 6 +- drivers/input/misc/cm109.c | 4 + drivers/input/misc/ims-pcu.c | 4 + drivers/input/misc/yealink.c | 4 + drivers/input/serio/i8042-x86ia64io.h | 6 + drivers/input/tablet/hanwang.c | 3 + drivers/iommu/amd_iommu.c | 2 +- drivers/isdn/gigaset/bas-gigaset.c | 3 + drivers/isdn/gigaset/ser-gigaset.c | 4 +- drivers/md/dm.c | 55 ++++++++ drivers/media/i2c/Kconfig | 1 + drivers/media/rc/ite-cir.c | 2 + drivers/media/tuners/tuner-xc2028.c | 34 ++--- drivers/media/usb/uvc/uvc_queue.c | 2 +- drivers/mfd/pm8921-core.c | 9 +- drivers/mmc/card/mmc_test.c | 2 +- drivers/mmc/host/mxs-mmc.c | 6 +- drivers/mmc/host/ushc.c | 3 + drivers/mtd/nand/Kconfig | 2 +- drivers/net/ethernet/mellanox/mlx4/cq.c | 38 ++--- drivers/net/ethernet/mellanox/mlx4/en_rx.c | 8 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 20 +-- drivers/net/phy/phy.c | 2 +- drivers/net/tun.c | 12 +- drivers/net/usb/pegasus.c | 29 +++- drivers/net/usb/rtl8150.c | 34 ++++- drivers/net/vxlan.c | 2 +- drivers/net/wireless/ath/ath9k/ar9003_eeprom.h | 4 +- drivers/pci/hotplug/rpadlpar_core.c | 10 +- drivers/platform/goldfish/pdev_bus.c | 13 +- drivers/platform/x86/intel_mid_powerbtn.c | 4 +- drivers/s390/cio/qdio_thinint.c | 8 +- drivers/s390/scsi/zfcp_dbf.c | 17 ++- drivers/s390/scsi/zfcp_dbf.h | 41 +++++- drivers/s390/scsi/zfcp_erp.c | 61 +++++++- drivers/s390/scsi/zfcp_ext.h | 4 +- drivers/s390/scsi/zfcp_fsf.c | 8 +- drivers/s390/scsi/zfcp_fsf.h | 3 +- drivers/s390/scsi/zfcp_reqlist.h | 30 +++- drivers/s390/scsi/zfcp_scsi.c | 61 +++++++- drivers/scsi/aacraid/src.c | 21 ++- drivers/scsi/libsas/sas_ata.c | 2 +- drivers/scsi/mvsas/mv_94xx.c | 2 +- drivers/staging/iio/adc/ad7606_core.c | 2 +- drivers/staging/vt6656/hostap.c | 3 +- drivers/target/iscsi/iscsi_target_tpg.c | 1 - drivers/tty/n_hdlc.c | 143 ++++++++++--------- drivers/usb/class/usbtmc.c | 9 +- drivers/usb/core/config.c | 10 ++ drivers/usb/dwc3/gadget.c | 8 +- drivers/usb/gadget/composite.c | 12 +- drivers/usb/gadget/dummy_hcd.c | 6 +- drivers/usb/host/ohci-q.c | 7 +- drivers/usb/host/xhci-mem.c | 4 +- drivers/usb/misc/idmouse.c | 3 + drivers/usb/misc/iowarrior.c | 21 ++- drivers/usb/misc/uss720.c | 5 + drivers/usb/musb/musbhsdma.h | 2 +- drivers/usb/serial/ark3116.c | 13 +- drivers/usb/serial/ch341.c | 90 +++++++----- drivers/usb/serial/cyberjack.c | 10 ++ drivers/usb/serial/digi_acceleport.c | 14 +- drivers/usb/serial/ftdi_sio.c | 31 +++-- drivers/usb/serial/garmin_gps.c | 1 + drivers/usb/serial/io_edgeport.c | 5 + drivers/usb/serial/io_ti.c | 22 ++- drivers/usb/serial/iuu_phoenix.c | 11 ++ drivers/usb/serial/keyspan_pda.c | 14 ++ drivers/usb/serial/kl5kusb105.c | 44 ++++-- drivers/usb/serial/kobil_sct.c | 12 ++ drivers/usb/serial/mos7720.c | 51 +++---- drivers/usb/serial/mos7840.c | 14 ++ drivers/usb/serial/omninet.c | 19 ++- drivers/usb/serial/opticon.c | 2 +- drivers/usb/serial/oti6858.c | 16 +++ drivers/usb/serial/pl2303.c | 8 ++ drivers/usb/serial/quatech2.c | 4 - drivers/usb/serial/safe_serial.c | 5 + drivers/usb/serial/spcp8x5.c | 22 ++- drivers/usb/serial/ti_usb_3410_5052.c | 7 + drivers/usb/wusbcore/wa-hc.c | 3 + drivers/uwb/hwa-rc.c | 3 + drivers/uwb/i1480/dfu/usb.c | 3 + drivers/video/fbcmap.c | 26 ++-- fs/9p/acl.c | 40 +++--- fs/block_dev.c | 9 +- fs/btrfs/acl.c | 6 +- fs/btrfs/tree-log.c | 3 +- fs/exec.c | 10 +- fs/ext2/acl.c | 12 +- fs/ext3/acl.c | 10 +- fs/ext4/acl.c | 12 +- fs/ext4/inline.c | 9 +- fs/ext4/inode.c | 29 ++-- fs/ext4/mballoc.c | 4 +- fs/f2fs/acl.c | 6 +- fs/f2fs/debug.c | 1 + fs/fuse/file.c | 6 +- fs/generic_acl.c | 12 +- fs/gfs2/acl.c | 14 +- fs/jffs2/acl.c | 9 +- fs/jfs/xattr.c | 5 +- fs/nfs/nfs4filelayoutdev.c | 3 +- fs/nfs/nfs4xdr.c | 2 +- fs/ocfs2/acl.c | 20 +-- fs/ocfs2/ioctl.c | 129 ++++++----------- fs/posix_acl.c | 31 +++++ fs/reiserfs/xattr_acl.c | 8 +- fs/ubifs/tnc.c | 25 +++- fs/xfs/xfs_acl.c | 15 +- include/crypto/algapi.h | 18 ++- include/linux/can/core.h | 7 +- include/linux/cpu.h | 12 +- include/linux/jump_label.h | 16 +++ include/linux/kvm_host.h | 7 +- include/linux/lockd/lockd.h | 3 +- include/linux/netdevice.h | 9 +- include/linux/posix_acl.h | 1 + include/net/cipso_ipv4.h | 4 + include/rdma/ib_sa.h | 6 +- include/trace/events/syscalls.h | 1 + kernel/cpu.c | 3 +- kernel/events/core.c | 5 +- kernel/ptrace.c | 14 +- kernel/rtmutex.c | 68 ++++++++- kernel/sched/core.c | 6 +- kernel/trace/ring_buffer.c | 24 +++- kernel/trace/trace.c | 8 +- mm/huge_memory.c | 19 ++- mm/hugetlb.c | 37 +++-- mm/page_alloc.c | 17 ++- net/can/af_can.c | 12 +- net/can/af_can.h | 3 +- net/can/bcm.c | 4 +- net/can/gw.c | 2 +- net/can/raw.c | 4 +- net/ceph/osdmap.c | 1 - net/core/dev.c | 58 +++++--- net/core/sock.c | 10 +- net/dccp/input.c | 3 +- net/dccp/ipv4.c | 3 +- net/dccp/ipv6.c | 8 +- net/ieee802154/6lowpan.c | 2 +- net/ipv4/cipso_ipv4.c | 4 + net/ipv4/igmp.c | 6 +- net/ipv4/inet_connection_sock.c | 2 + net/ipv4/ip_sockglue.c | 9 +- net/ipv4/ip_vti.c | 1 - net/ipv4/netfilter/arp_tables.c | 4 +- net/ipv4/ping.c | 7 +- net/ipv4/route.c | 1 + net/ipv4/tcp.c | 6 + net/ipv4/tcp_ipv4.c | 4 +- net/ipv6/ip6_gre.c | 41 +++--- net/ipv6/ip6_offload.c | 1 + net/ipv6/ip6_tunnel.c | 55 +++++--- net/ipv6/raw.c | 7 +- net/ipv6/tcp_ipv6.c | 8 +- net/l2tp/l2tp_core.c | 8 +- net/l2tp/l2tp_core.h | 4 +- net/l2tp/l2tp_debugfs.c | 10 +- net/l2tp/l2tp_ip.c | 27 +++- net/l2tp/l2tp_ip6.c | 2 +- net/l2tp/l2tp_netlink.c | 7 +- net/l2tp/l2tp_ppp.c | 10 +- net/mac80211/mesh.c | 2 +- net/packet/af_packet.c | 65 ++++++--- net/sched/act_api.c | 5 +- net/sched/cls_api.c | 4 +- net/sched/em_meta.c | 9 +- net/sctp/associola.c | 131 +++++++++++------- net/sctp/socket.c | 7 +- net/socket.c | 4 +- net/sunrpc/auth_gss/gss_rpc_xdr.c | 2 +- net/sunrpc/auth_gss/svcauth_gss.c | 2 +- net/unix/garbage.c | 18 +-- net/xfrm/xfrm_user.c | 9 +- security/integrity/evm/evm_main.c | 3 +- security/keys/gc.c | 2 +- security/keys/keyctl.c | 20 +-- security/keys/process_keys.c | 44 +++--- security/selinux/hooks.c | 2 +- sound/pci/ctxfi/cthw20k1.c | 19 +-- sound/pci/ctxfi/cthw20k2.c | 18 +-- sound/usb/card.c | 1 - tools/perf/builtin-trace.c | 4 +- tools/perf/util/trace-event-scripting.c | 6 +- tools/testing/ktest/ktest.pl | 2 +- virt/kvm/eventfd.c | 3 + virt/kvm/kvm_main.c | 41 ++++-- 241 files changed, 2490 insertions(+), 1138 deletions(-) Summary of changes from 3.10.105 to 3.10.106 ============================================== Alan Stern (3): USB: OHCI: Fix race between ED unlink and URB submission USB: fix problems with duplicate endpoint addresses USB: dummy-hcd: fix bug in stop_activity (handle ep0) Aleksa Sarai (1): fs: exec: apply CLOEXEC before changing dumpable task flags Alex Porosanu (1): crypto: caam - fix AEAD givenc descriptors Alexander Popov (1): tty: n_hdlc: get rid of racy n_hdlc.tbuf Alexey Kodanev (1): tcp: initialize max window for a new fastopen socket Amos Kong (1): kvm: exclude ioeventfd from counting kvm_io_range limit Ander Conselvan de Oliveira (1): drm/i915: Don't leak edid in intel_crt_detect_ddc() Andrew Lunn (1): ipv4: igmp: Allow removing groups from a removed interface Andrey Konovalov (1): dccp: fix freeing skb too early for IPV6_RECVPKTINFO Andrey Ryabinin (1): drm/i915: fix use-after-free in page_flip_completed() Andrey Ulanov (1): net: unix: properly re-increment inflight counter of GC discarded candidates Andy Shevchenko (1): platform/x86: intel_mid_powerbtn: Set IRQ_ONESHOT Andy Whitcroft (2): xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder Anoob Soman (1): packet: Do not call fanout_release from atomic contexts Arnaldo Carvalho de Melo (2): perf scripting: Avoid leaking the scripting_context variable perf trace: Use the syscall raw_syscalls:sys_enter timestamp Arnd Bergmann (4): scsi: mvsas: fix command_active typo ARM: ux500: fix prcmu_is_cpu_in_wfi() calculation s5k4ecgx: select CRC32 helper MIPS: ip27: Disable qlge driver in defconfig Bart Van Assche (2): IB/mad: Fix an array index check IB/multicast: Check ib_find_pkey() return value Ben Hutchings (3): ocfs2: do not write error flag to user structure we cannot copy from/to pegasus: Use heap buffers for all register access rtl8150: Use heap buffers for all register access Benjamin Block (1): scsi: zfcp: fix use-after-"free" in FC ingress path after TMF Benjamin Herrenschmidt (1): powerpc: Disable HFSCR[TM] if TM is not supported Boris Brezillon (1): m68k: Fix ndelay() macro Chandan Rajendra (2): ext4: fix mballoc breakage with 64k block size ext4: fix stack memory corruption with 64k block size Christian Lamparter (1): ath9k: use correct OTP register offsets for the AR9340 and AR9550 Dan Carpenter (11): ext4: return -ENOMEM instead of success usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL target/iscsi: Fix double free in lio_target_tiqn_addtpg() mmc: mmc_test: Uninitialized return value ser_gigaset: return -ENOMEM on error instead of success mfd: pm8921: Potential NULL dereference in pm8921_remove() drm/nv50/disp: min/max are reversed in nv50_crtc_gamma_set() ACPI / resources: free memory on error in add_region_before() Staging: vt6655-6: potential NULL dereference in hostap_disable_hostapd() xc2028: unlock on error in xc2028_set_config() ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim() Dan Streetman (1): xen: do not re-use pirq number cached in pci device msi msg data Daniel Borkmann (3): net, sched: fix soft lockup in tc_classify net: 6lowpan: fix lowpan_header_create non-compression memcpy call net: sctp: rework multihoming retransmission path selection to rfc4960 Darrick J. Wong (1): ext4: reject inodes with negative size Dave Jones (1): ipv6: handle -EFAULT from skb_copy_bits Dave Martin (4): arm64/ptrace: Preserve previous registers for short regset write arm64/ptrace: Avoid uninitialised struct padding in fpr_set() arm64/ptrace: Reject attempts to set incomplete hardware breakpoint fields ARM: 8643/3: arm/ptrace: Preserve previous registers for short regset write David Hildenbrand (1): KVM: kvm_io_bus_unregister_dev() should never fail David Howells (2): KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings KEYS: Change the name of the dead type to ".dead" to prevent user access Eric Biggers (2): KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings ext4: mark inode dirty after converting inline directory Eric Dumazet (15): tcp: avoid infinite loop in tcp_splice_read() gro: use min_t() in skb_gro_reset_offset() net: fix harmonize_features() vs NETIF_F_HIGHDMA net: use a work queue to defer net_disable_timestamp() work ipv4: keep skb->dst around in presence of IP options netlabel: out of bound access in cipso_v4_validate() ip6_gre: fix ip6gre_err() invalid reads l2tp: do not use udp_ioctl() packet: fix races in fanout_add() net: net_enable_timestamp() can be called from irq contexts net: properly release sk_frag.page ping: implement proper locking can: Fix kernel panic at security_sock_rcv_skb ipv6: fix ip6_tnl_parse_tlv_enc_lim() dccp/tcp: do not inherit mc_list from parent Eugenia Emantayev (1): net/mlx4_en: Fix bad WQE issue Eva Rachel Retuya (1): staging: iio: ad7606: fix improper setting of oversampling pins Felipe Balbi (1): usb: dwc3: gadget: always unmap EP0 requests Feras Daoud (1): IB/ipoib: Fix deadlock between rmmod and set_mode Florian Fainelli (1): net: stmmac: Fix race between stmmac_drv_probe and stmmac_open Geert Uytterhoeven (1): char: Drop bogus dependency of DEVPORT on !M68K Gu Zheng (1): tmpfs: clear S_ISGID when setting posix ACLs Guennadi Liakhovetski (1): uvcvideo: Fix a wrong macro Guenter Roeck (2): cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected hwmon: (ds620) Fix overflows seen when writing temperature limits Guillaume Nault (1): l2tp: take reference on sessions being dumped Hauke Mehrtens (1): mtd: nand: xway: disable module support Herbert Xu (3): gro: Enter slow-path if there is no tailroom gro: Disable frag0 optimization on IPv6 ext headers tun: Fix TUN_PKT_STRIP setting Hongxu Jia (1): netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel Huang Rui (1): iommu/amd: Fix the left value check of cmd buffer Ilya Dryomov (1): libceph: don't set weight to IN when OSD is destroyed J. Bruce Fields (3): svcrpc: don't leak contexts on PROC_DESTROY svcrpc: fix oops in absence of krb5 module NFSv4: fix getacl head length estimation Jack Morgenstein (1): net/mlx4_core: Fix racy CQ (Completion Queue) free James Cowgill (1): MIPS: OCTEON: Fix copy_from_user fault handling for large buffers James Hogan (6): metag/usercopy: Fix alignment error checking metag/usercopy: Add early abort to copy_to_user metag/usercopy: Set flags before ADDZ metag/usercopy: Fix src fixup in from user rapf loops metag/usercopy: Add missing fixups MIPS: KGDB: Use kernel context for sleeping threads James Yonan (1): crypto: crypto_memneq - add equality testing of memory regions w/o timing leaks Jan Kara (2): posix_acl: Clear SGID bit when setting file permissions ext4: fix data exposure after a crash Jason Gunthorpe (1): RDMA/core: Fix incorrect structure packing for booleans Jiri Slaby (1): TTY: n_hdlc, fix lockdep false positive Johan Hovold (57): USB: serial: kl5kusb105: fix open error path USB: serial: omninet: fix NULL-derefs at open and disconnect USB: serial: quatech2: fix sleep-while-atomic in close USB: serial: pl2303: fix NULL-deref at open USB: serial: keyspan_pda: verify endpoints at probe USB: serial: spcp8x5: fix NULL-deref at open USB: serial: io_ti: fix NULL-deref at open USB: serial: io_ti: fix another NULL-deref at open USB: serial: iuu_phoenix: fix NULL-deref at open USB: serial: garmin_gps: fix memory leak on failed URB submit USB: serial: ti_usb_3410_5052: fix NULL-deref at open USB: serial: io_edgeport: fix NULL-deref at open USB: serial: oti6858: fix NULL-deref at open USB: serial: cyberjack: fix NULL-deref at open USB: serial: kobil_sct: fix NULL-deref in write USB: serial: mos7840: fix NULL-deref at open USB: serial: mos7720: fix NULL-deref at open USB: serial: mos7720: fix use-after-free on probe errors USB: serial: mos7720: fix parport use-after-free on probe errors USB: serial: mos7720: fix parallel probe powerpc/pci/rpadlpar: Fix device reference leaks USB: serial: kl5kusb105: fix line-state error handling USB: serial: ch341: fix initial modem-control state USB: serial: ch341: fix open error handling USB: serial: ch341: fix control-message error handling USB: serial: ch341: fix open and resume after B0 USB: serial: ch341: fix resume after reset USB: serial: ch341: fix modem-control and B0 handling powerpc/ibmebus: Fix further device reference leaks powerpc/ibmebus: Fix device reference leaks in sysfs interface USB: serial: mos7840: fix another NULL-deref at open USB: serial: ftdi_sio: fix modem-status error handling USB: serial: ftdi_sio: fix extreme low-latency setting USB: serial: ftdi_sio: fix line-status over-reporting USB: serial: spcp8x5: fix modem-status handling USB: serial: opticon: fix CTS retrieval at open USB: serial: ark3116: fix register-accessor error handling USB: serial: digi_acceleport: fix OOB data sanity check USB: serial: digi_acceleport: fix OOB-event processing USB: serial: safe_serial: fix information leak in completion handler USB: serial: omninet: fix reference leaks at open USB: iowarrior: fix NULL-deref at probe USB: iowarrior: fix NULL-deref in write USB: serial: io_ti: fix NULL-deref in interrupt callback USB: serial: io_ti: fix information leak in completion handler isdn/gigaset: fix NULL-deref at probe Input: ims-pcu - validate number of endpoints before using them Input: hanwang - validate number of endpoints before using them Input: yealink - validate number of endpoints before using them Input: cm109 - validate number of endpoints before using them USB: uss720: fix NULL-deref at probe USB: idmouse: fix NULL-deref at probe USB: wusbcore: fix NULL-deref at probe uwb: i1480-dfu: fix NULL-deref at probe uwb: hwa-rc: fix NULL-deref at probe mmc: ushc: fix NULL-deref at probe USB: usbtmc: add missing endpoint sanity check John Garry (1): scsi: libsas: fix ata xfer length Jon Maxwell (1): dccp/tcp: fix routing redirect race Julian Anastasov (1): ipv4: mask tos for input route Julian Wiedmann (1): s390/qdio: clear DSCI prior to scanning multiple input queues Kees Cook (1): fbdev: color map copying bounds checking Keno Fischer (1): mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp Krzysztof Opasiak (1): usb: gadget: composite: Test get_alt() presence instead of set_alt() Larry Finger (1): powerpc: Fix build warning on 32-bit PPC Li RongQing (1): ipv6: fix the use of pcpu_tstats in ip6_tunnel Ludovic Desroches (1): i2c: at91: manage unexpected RXRDY flag when starting a transfer Lukasz Odzioba (1): x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option Maor Gottlieb (1): IB/mlx4: Set traffic class in AH Marcelo Henrique Cerri (1): s390/decompressor: fix initrd corruption caused by bss clear Marcelo Ricardo Leitner (2): sctp: avoid BUG_ON on sctp_wait_for_sndbuf sctp: deny peeloff operation on asocs with threads sleeping on it Marcos Paulo de Souza (1): Input: i8042 - add Pegatron touchpad to noloop table Matthias Schiffer (1): vxlan: correctly validate VXLAN ID against VXLAN_N_VID Mauro Carvalho Chehab (1): xc2028: avoid use after free Maxime Jayat (1): net: socket: fix recvmmsg not returning error from sock_error Michal Hocko (1): hotplug: Make register and unregister notifier API symmetric Mike Kravetz (1): mm/hugetlb.c: fix reservation race when freeing surplus pages Miklos Szeredi (1): fuse: add missing FR_FORCE Mikulas Patocka (1): dm: flush queued bios when process blocks to avoid deadlock Nathan Sullivan (1): net: phy: handle state correctly in phy_stop_machine NeilBrown (2): block_dev: don't test bdev->bd_contains when it is not stable NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. Nicolai Stange (1): f2fs: set ->owner for debugfs status file's file_operations Nicolas Iooss (1): ite-cir: initialize use_demodulator before using it Oliver O'Halloran (1): mm/init: fix zone boundary creation Pan Bian (2): USB: serial: kl5kusb105: abort on open exception path clk: clk-wm831x: fix a logic error Paolo Bonzini (1): KVM: x86: fix emulation of "MOV SS, null selector" Paul Burton (6): MIPS: Clear ISA bit correctly in get_frame_info() MIPS: Prevent unaligned accesses during stack unwinding MIPS: Fix get_frame_info() handling of microMIPS function size MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions MIPS: Calculate microMIPS ra properly when unwinding the stack MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps Peter Xu (1): KVM: x86: clear bus pointer when destroyed Peter Zijlstra (2): locking/static_keys: Add static_key_{en,dis}able() helpers perf/core: Fix event inheritance on fork() Philip Pettersson (1): packet: fix race condition in packet_set_ring Rabin Vincent (1): block: protect iterate_bdevs() against concurrent close Rafael J. Wysocki (2): ACPI / PNP: Avoid conflicting resource reservations ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage Raghava Aditya Renukunta (1): scsi: aacraid: Reorder Adapter status check Richard Weinberger (1): ubifs: Fix journal replay wrt. xattr nodes Rik van Riel (1): tracing: Add #undef to fix compile error Robbie Ko (1): Btrfs: fix tree search logic when replaying directory entry deletes Robert Doebbelin (1): fuse: do not use iocb after it may have been freed Roman Mashak (1): net sched actions: decrement module reference count after table flush. Russell King (1): crypto: caam - fix non-hmac hashes Ryan Ware (1): EVM: Use crypto_memneq() for digest comparisons Saeed Mahameed (1): IB/mlx4: Fix port query for 56Gb Ethernet links Segher Boessenkool (1): powerpc: Convert cmp to cmpd in idle enter sequence Shmulik Ladkani (1): net/sched: em_meta: Fix 'meta vlan' to correctly recognize zero VID frames Stefan Wahren (1): mmc: mxs-mmc: Fix additional cycles after transmission stop Steffen Klassert (1): vti4: Don't count header length twice. Steffen Maier (3): scsi: zfcp: do not trace pure benign residual HBA responses at default level scsi: zfcp: fix rport unblock race with LUN recovery scsi: zfcp: fix use-after-free by not tracing WKA port open/close on failed send Stephen Smalley (1): selinux: fix off-by-one in setprocattr Steve Rutherford (1): KVM: x86: Introduce segmented_write_std Steven Rostedt (Red Hat) (1): ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short jumps to it Steven Rostedt (VMware) (3): ktest: Fix child exit code processing tracing: Allocate the snapshot buffer before enabling probe ring-buffer: Have ring_buffer_iter_empty() return true when empty Takashi Iwai (4): ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream() ALSA: ctxfi: Fallback DMA mask to 32bit ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call xc2028: Fix use-after-free bug properly Thomas Gleixner (3): locking/rtmutex: Prevent dequeue vs. unlock race x86/platform/goldfish: Prevent unconditional loading goldfish: Sanitize the broken interrupt handler Thorsten Horstmann (1): mac80211: Fix adding of mesh vendor IEs Tony Lindgren (1): usb: musb: Fix trying to free already-free IRQ 4 Trond Myklebust (1): nlm: Ensure callback code also checks that the files match Vitaly Kuznetsov (1): Drivers: hv: avoid vfree() on crash Vladimir Zapolskiy (3): ARM: dts: imx31: fix clock control module interrupts description ARM: dts: imx31: move CCM device node to AIPS2 bus devices ARM: dts: imx31: fix AVIC base address WANG Cong (1): ping: fix a null pointer dereference Wei Yongjun (1): ring-buffer: Fix return value check in test_ringbuffer() Willy Tarreau (2): char: lp: fix possible integer overflow in lp_setup() Linux 3.10.106 bsegall@xxxxxxxxxx (1): ptrace: fix PTRACE_LISTEN race corrupting task->state