linux (4.4.0-47.68) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1636941

  * Add a driver for Amazon Elastic Network Adapters (ENA) (LP: #1635721)
    - lib/bitmap.c: conversion routines to/from u32 array
    - net: ethtool: add new ETHTOOL_xLINKSETTINGS API
    - net: ena: Add a driver for Amazon Elastic Network Adapters (ENA)
    - [config] enable CONFIG_ENA_ETHERNET=m (Amazon ENA driver)

  * unexpectedly large memory usage of mounted snaps (LP: #1636847)
    - [Config] switch squashfs to single threaded decode

 -- Kamal Mostafa <kamal@canonical.com>  Wed, 26 Oct 2016 10:47:55 -0700

linux (4.4.0-46.67) xenial; urgency=low

  [ Seth Forshee ]

  * Release Tracking Bug
    - LP: #1635242

  * proc_keys_show crash when reading /proc/keys (LP: #1634496)
    - SAUCE: KEYS: ensure xbuf is large enough to fix buffer overflow in
      proc_keys_show (LP: #1634496)

  * [Trusty->Yakkety] powerpc/64: Fix incorrect return value from
    __copy_tofrom_user (LP: #1632462)
    - SAUCE: (no-up) powerpc/64: Fix incorrect return value from
      __copy_tofrom_user

  * Ubuntu 16.10: Oops panic in move_page_tables/page_remove_rmap after running
    memory_stress_ng. (LP: #1628976)
    - SAUCE: (no-up) powerpc/pseries: Fix stack corruption in htpe code

  * Paths not failed properly when unmapping virtual FC ports in VIOS (using
    ibmvfc) (LP: #1632116)
    - scsi: ibmvfc: Fix I/O hang when port is not mapped

  * PSL data cache should be flushed before resetting CAPI adapter
    (LP: #1632049)
    - cxl: Flush PSL cache before resetting the adapter

  * thunder nic: avoid link delays due to RX_PACKET_DIS (LP: #1630038)
    - net: thunderx: Don't set RX_PACKET_DIS while initializing

  * Support snaps inside of lxd containers (LP: #1611078)
    - Revert "UBUNTU: SAUCE: apparmor: fix sleep in critical section"
    - SAUCE: (no-up) apparmor: sync of apparmor 3.6 (from Ubuntu 16.10)

  * crypto/vmx/p8_ghash memory corruption (LP: #1630970)
    - crypto: ghash-generic - move common definitions to a new header file
    - crypto: vmx - Fix memory corruption caused by p8_ghash
    - crypto: vmx - Ensure ghash-generic is enabled

  * Xenial update to v4.4.24 stable release (LP: #1631468)
    - cpuset: handle race between CPU hotplug and cpuset_hotplug_work
    - mtd: nand: davinci: Reinitialize the HW ECC engine in 4bit hwctl
    - mm,ksm: fix endless looping in allocating memory when ksm enable
    - can: dev: fix deadlock reported after bus-off
    - x86/init: Fix cr4_init_shadow() on CR4-less machines
    - x86/boot: Initialize FPU and X86_FEATURE_ALWAYS even if we don't have CPUID
    - drm/nouveau/fifo/nv04: avoid ramht race against cookie insertion
    - drm/radeon/si/dpm: add workaround for for Jet parts
    - ARM: 8616/1: dt: Respect property size when parsing CPUs
    - ARM: 8617/1: dma: fix dma_max_pfn()
    - usb: musb: Fix DMA desired mode for Mentor DMA engine
    - usb: musb: fix DMA for host mode
    - iwlwifi: mvm: fix a few firmware capability checks
    - perf/core: Fix pmu::filter_match for SW-led groups
    - i40e: avoid null pointer dereference
    - pinctrl: uniphier: fix .pin_dbg_show() callback
    - pinctrl: Flag strict is a field in struct pinmux_ops
    - drivers/perf: arm_pmu: Fix leak in error path
    - mmc: pxamci: fix potential oops
    - tools/vm/slabinfo: fix an unintentional printf
    - ipvs: fix bind to link-local mcast IPv6 address in backup
    - nvmem: Declare nvmem_cell_read() consistently
    - hwmon: (adt7411) set bit 3 in CFG1 register
    - spi: sh-msiof: Avoid invalid clock generator parameters
    - iwlwifi: pcie: fix access to scratch buffer
    - iwlwifi: mvm: don't use ret when not initialised
    - ceph: fix race during filling readdir cache
    - usb: gadget: fsl_qe_udc: signedness bug in qe_get_frame()
    - gpio: sa1100: fix irq probing for ucb1x00
    - irqchip/gicv3: Silence noisy DEBUG_PER_CPU_MAPS warning
    - ARM: 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7
    - arm64: debug: avoid resetting stepping state machine when TIF_SINGLESTEP
    - MIPS: uprobes: remove incorrect set_orig_insn
    - MIPS: fix uretprobe implementation
    - MIPS: Malta: Fix IOCU disable switch read for MIPS64
    - MIPS: uprobes: fix use of uninitialised variable
    - printk: fix parsing of "brl=" option
    - tpm: fix byte-order for the value read by tpm2_get_tpm_pt
    - regulator: qcom_spmi: Add support for S4 supply on pm8941
    - regulator: qcom_spmi: Add support for get_mode/set_mode on switches
    - regulator: qcom_spmi: Update mvs1/mvs2 switches on pm8941
    - regulator: qcom_smd: Fix voltage ranges for pm8x41
    - ARM: sun5i: Fix typo in trip point temperature
    - ARM: sa1100: register clocks early
    - ARM: sa1100: fix 3.6864MHz clock
    - ARM: sa1100: clear reset status prior to reboot
    - ARM: shmobile: fix regulator quirk for Gen2
    - ARM: sa1111: fix pcmcia suspend/resume
    - hwrng: omap - Fix assumption that runtime_get_sync will always succeed
    - blk-mq: actually hook up defer list when running requests
    - pstore: drop file opened reference count
    - tile: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
    - iwlmvm: mvm: set correct state in smart-fifo configuration
    - NFC: fdp: Detect errors from fdp_nci_create_conn()
    - em28xx-i2c: rt_mutex_trylock() returns zero on failure
    - gspca: avoid unused variable warnings
    - ath9k: Fix programming of minCCA power threshold
    - avr32: off by one in at32_init_pio()
    - fnic: pci_dma_mapping_error() doesn't return an error code
    - dmaengine: at_xdmac: fix debug string
    - svc: Avoid garbage replies when pc_func() returns rpc_drop_reply
    - NFS: Don't drop CB requests with invalid principals
    - pNFS/files: Fix layoutcommit after a commit to DS
    - pNFS/flexfiles: Fix layoutcommit after a commit to DS
    - ASoC: Intel: Skylake: Fix error return code in skl_probe()
    - brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain
    - brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill
    - brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get()
    - powerpc/prom: Fix sub-processor option passed to ibm, client-architecture-
      support
    - sysctl: handle error writing UINT_MAX to u32 fields
    - ASoC: omap-mcpdm: Fix irq resource handling
    - kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd
    - dmaengine: at_xdmac: fix to pass correct device identity to free_irq()
    - KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write
    - IB/ipoib: Fix memory corruption in ipoib cm mode connect flow
    - IB/core: Fix use after free in send_leave function
    - IB/ipoib: Don't allow MC joins during light MC flush
    - IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV
    - IB/mlx4: Fix code indentation in QP1 MAD flow
    - IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV
    - batman-adv: remove unused callback from batadv_algo_ops struct
    - aio: mark AIO pseudo-fs noexec
    - clk: xgene: Add missing parenthesis when clearing divider value
    - dm log writes: fix bug with too large bios
    - USB: serial: cp210x: fix hardware flow-control disable
    - usb: misc: legousbtower: Fix NULL pointer deference
    - Staging: fbtft: Fix bug in fbtft-core
    - USB: serial: cp210x: Add ID for a Juniper console
    - Revert "usbtmc: convert to devm_kzalloc"
    - ALSA: hda - Adding one more ALC255 pin definition for headset problem
    - ACPICA: acpi_get_sleep_type_data: Reduce warnings
    - ALSA: hda - Fix headset mic detection problem for several Dell laptops
    - ALSA: hda - Add the top speaker pin config for HP Spectre x360
    - Linux 4.4.24

  * sha1-powerpc returning wrong results (LP: #1629977)
    - crypto: sha1-powerpc - little-endian support

  *  Dell Precision Trackpoint not working after suspend (LP: #1630857)
    - HID: alps: fix stick device not working after resume

  * OOPS on beaglebone on boot of 4.4.0-36-generic under snappy ubuntu core
    xenial (LP: #1625177)
    - net: ethernet: ti: cpdma: fix lockup in cpdma_ctlr_destroy()
    - drivers: net: cpsw: fix wrong regs access in cpsw_remove
    - drivers: net: cpsw: use of_platform_depopulate()
    - ARM: OMAP2+: omap_device: fix crash on omap_device removal
    - ARM: OMAP2+: Fix omap_device for module reload on PM runtime forbid
    - ARM: OMAP2+: Fix typo in omap_device.c
    - drivers: net: cpsw: fix suspend when all ethX devices are down
    - drivers: net: cpsw: fix wrong regs access in cpsw_ndo_open
    - drivers: net: cpsw: check return code from pm runtime calls
    - drivers: net: cpsw: remove pm runtime calls from suspend callbacks
    - drivers: net: cpsw: ethtool: fix accessing to suspended device
    - drivers: net: cpsw: ndev: fix accessing to suspended device
    - drivers: net: cpsw: fix kmemleak false-positive reports for sk buffers

  * Autofs parameter substitution broken in kernel 4.4.0-38 and 4.4.0-40
    (LP: #1629204)
    - SAUCE: (namespace) autofs4: Use real_cred for requestor's ids

  * Xenial update to v4.4.23 stable release (LP: #1629386)
    - include/linux/kernel.h: change abs() macro so it uses consistent return type
    - Fix build warning in kernel/cpuset.c
    - reiserfs: fix "new_insert_key may be used uninitialized ..."
    - ipv4: panic in leaf_walk_rcu due to stale node pointer
    - ipv6: release dst in ping_v6_sendmsg
    - tcp: cwnd does not increase in TCP YeAH
    - tcp: properly scale window in tcp_v[46]_reqsk_send_ack()
    - crypto: arm64/aes-ctr - fix NULL dereference in tail processing
    - crypto: arm/aes-ctr - fix NULL dereference in tail processing
    - crypto: skcipher - Fix blkcipher walk OOM crash
    - crypto: echainiv - Replace chaining with multiplication
    - ocfs2/dlm: fix race between convert and migration
    - ocfs2: fix start offset to ocfs2_zero_range_for_truncate()
    - kbuild: Do not run modules_install and install in paralel
    - Makefile: revert "Makefile: Document ability to make file.lst and file.S"
      partially
    - tools: Support relative directory path for 'O='
    - kbuild: forbid kernel directory to contain spaces and colons
    - Kbuild: disable 'maybe-uninitialized' warning for
      CONFIG_PROFILE_ALL_BRANCHES
    - gcov: disable -Wmaybe-uninitialized warning
    - Disable "maybe-uninitialized" warning globally
    - Disable "frame-address" warning
    - Makefile: Mute warning for __builtin_return_address(>0) for tracing only
    - net: caif: fix misleading indentation
    - Add braces to avoid "ambiguous ‘else’" compiler warnings
    - am437x-vfpe: fix typo in vpfe_get_app_input_index
    - ath9k: fix misleading indentation
    - iwlegacy: avoid warning about missing braces
    - Staging: iio: adc: fix indent on break statement
    - nouveau: fix nv40_perfctr_next() cleanup regression
    - bonding: Fix bonding crash
    - Revert "af_unix: Fix splice-bind deadlock"
    - af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock'
    - vti: flush x-netns xfrm cache when vti interface is removed
    - net/irda: handle iriap_register_lsap() allocation failure
    - tipc: fix NULL pointer dereference in shutdown()
    - net/mlx5: Added missing check of msg length in verifying its signature
    - net: dsa: bcm_sf2: Fix race condition while unmasking interrupts
    - Revert "phy: IRQ cannot be shared"
    - net: smc91x: fix SMC accesses
    - bridge: re-introduce 'fix parsing of MLDv2 reports'
    - autofs races
    - autofs: use dentry flags to block walks during expire
    - xfs: prevent dropping ioend completions during buftarg wait
    - fsnotify: add a way to stop queueing events on group shutdown
    - fanotify: fix list corruption in fanotify_get_response()
    - fix fault_in_multipages_...() on architectures with no-op access_ok()
    - mtd: maps: sa1100-flash: potential NULL dereference
    - mtd: pmcmsp-flash: Allocating too much in init_msp_flash()
    - power: reset: hisi-reboot: Unmap region obtained by of_iomap
    - fix memory leaks in tracing_buffers_splice_read()
    - tracing: Move mutex to protect against resetting of seq data
    - mm: delete unnecessary and unsafe init_tlb_ubc()
    - can: flexcan: fix resume function
    - nl80211: validate number of probe response CSA counters
    - btrfs: ensure that file descriptor used with subvol ioctls is a dir
    - i2c-eg20t: fix race between i2c init and interrupt enable
    - i2c: qup: skip qup_i2c_suspend if the device is already runtime suspended
    - MIPS: Fix pre-r6 emulation FPU initialisation
    - MIPS: SMP: Fix possibility of deadlock when bringing CPUs online
    - MIPS: vDSO: Fix Malta EVA mapping to vDSO page structs
    - MIPS: Remove compact branch policy Kconfig entries
    - MIPS: Avoid a BUG warning during prctl(PR_SET_FP_MODE, ...)
    - MIPS: Add a missing ".set pop" in an early commit
    - MIPS: paravirt: Fix undefined reference to smp_bootstrap
    - PM / hibernate: Restore processor state before using per-CPU variables
    - PM / hibernate: Fix rtree_next_node() to avoid walking off list ends
    - power_supply: tps65217-charger: fix missing platform_set_drvdata()
    - power: supply: max17042_battery: fix model download bug.
    - qxl: check for kmap failures
    - hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common()
    - Linux 4.4.23

  * Xenial update to v4.4.22 stable release (LP: #1627730)
    - ext4: use __GFP_NOFAIL in ext4_free_blocks()
    - fscrypto: add authorization check for setting encryption policy
    - clocksource/drivers/sun4i: Clear interrupts after stopping timer in probe
      function
    - MIPS: KVM: Check for pfn noslot case
    - fscrypto: require write access to mount to set encryption policy
    - lightnvm: put bio before return
    - powerpc/tm: do not use r13 for tabort_syscall
    - powerpc/mm: Don't alias user region to other regions below PAGE_OFFSET
    - kernfs: don't depend on d_find_any_alias() when generating notifications
    - pNFS: The client must not do I/O to the DS if it's lease has expired
    - NFSv4.x: Fix a refcount leak in nfs_callback_up_net
    - nfsd: Close race between nfsd4_release_lockowner and nfsd4_lock
    - pNFS: Ensure LAYOUTGET and LAYOUTRETURN are properly serialised
    - NFSv4.1: Fix the CREATE_SESSION slot number accounting
    - kexec: fix double-free when failing to relocate the purgatory
    - mm: introduce get_task_exe_file
    - audit: fix exe_file access in audit_exe_compare
    - dm flakey: fix reads to be issued if drop_writes configured
    - IB/uverbs: Fix race between uverbs_close and remove_one
    - ARC: mm: fix build breakage with STRICT_MM_TYPECHECKS
    - x86/paravirt: Do not trace _paravirt_ident_*() functions
    - x86/AMD: Apply erratum 665 on machines without a BIOS fix
    - kvm-arm: Unmap shadow pagetables properly
    - iio: accel: kxsd9: Fix raw read return
    - iio: proximity: as3935: set up buffer timestamps for non-zero values
    - iio: adc: rockchip_saradc: reset saradc controller before programming it
    - iio: adc: ti_am335x_adc: Protect FIFO1 from concurrent access
    - iio: adc: ti_am335x_adc: Increase timeout value waiting for ADC sample
    - iio: ad799x: Fix buffered capture for ad7991/ad7995/ad7999
    - iio: adc: at91: unbreak channel adc channel 3
    - iio: accel: bmc150: reset chip at init time
    - iio: fix pressure data output unit in hid-sensor-attributes
    - iio: accel: kxsd9: Fix scaling bug
    - iio:core: fix IIO_VAL_FRACTIONAL sign handling
    - iio: ensure ret is initialized to zero before entering do loop
    - serial: 8250_mid: fix divide error bug if baud rate is 0
    - serial: 8250: added acces i/o products quad and octal serial cards
    - USB: serial: simple: add support for another Infineon flashloader
    - usb: renesas_usbhs: fix clearing the {BRDY,BEMP}STS condition
    - usb: chipidea: udc: fix NULL ptr dereference in isr_setup_status_phase
    - ARM: dts: STiH410: Handle interconnect clock required by EHCI/OHCI (USB)
    - USB: change bInterval default to 10 ms
    - net: thunderx: Fix OOPs with ethtool --register-dump
    - cpuset: make sure new tasks conform to the current config of the cpuset
    - ARM: AM43XX: hwmod: Fix RSTST register offset for pruss
    - ARM: imx6: add missing BM_CLPCR_BYP_MMDC_CH0_LPM_HS setting for imx6ul
    - ARM: imx6: add missing BM_CLPCR_BYPASS_PMIC_READY setting for imx6sx
    - ARM: kirkwood: ib62x0: fix size of u-boot environment partition
    - ARM: OMAP3: hwmod data: Add sysc information for DSI
    - ARM: dts: imx6qdl: Fix SPDIF regression
    - ARM: dts: overo: fix gpmc nand cs0 range
    - ARM: dts: overo: fix gpmc nand on boards with ethernet
    - ARM: dts: STiH407-family: Provide interconnect clock for consumption in ST
      SDHCI
    - bus: arm-ccn: Fix PMU handling of MN
    - bus: arm-ccn: Do not attempt to configure XPs for cycle counter
    - bus: arm-ccn: Fix XP watchpoint settings bitmask
    - dm log writes: fix check of kthread_run() return value
    - dm log writes: move IO accounting earlier to fix error path
    - dm crypt: fix error with too large bios
    - pinctrl: pistachio: fix mfio pll_lock pinmux
    - pinctrl: sunxi: fix uart1 CTS/RTS pins at PG on A23/A33
    - arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb()
    - crypto: cryptd - initialize child shash_desc on import
    - Btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns
    - fuse: direct-io: don't dirty ITER_BVEC pages
    - xhci: fix null pointer dereference in stop command timeout function
    - md-cluster: make md-cluster also can work when compiled into kernel
    - ath9k: fix using sta->drv_priv before initializing it
    - Revert "wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel"
    - sched/core: Fix a race between try_to_wake_up() and a woken up task
    - ipv6: addrconf: fix dev refcont leak when DAD failed
    - gma500: remove annoying deprecation warning
    - mpssd: fix buffer overflow warning
    - drm/i915: Avoid pointer arithmetic in calculating plane surface offset
    - mmc: dw_mmc: use resource_size_t to store physical address
    - pinctrl: at91-pio4: use %pr format string for resource
    - soc: qcom/spm: shut up uninitialized variable warning
    - kconfig: tinyconfig: provide whole choice blocks to avoid warnings
    - net: simplify napi_synchronize() to avoid warnings
    - drm: atmel-hlcdc: Fix vertical scaling
    - drm: Only use compat ioctl for addfb2 on X86/IA64
    - genirq: Provide irq_gc_{lock_irqsave,unlock_irqrestore}() helpers
    - irqchip/atmel-aic: Fix potential deadlock in ->xlate()
    - fix iov_iter_fault_in_readable()
    - microblaze: fix __get_user()
    - avr32: fix copy_from_user()
    - microblaze: fix copy_from_user()
    - fix minor infoleak in get_user_ex()
    - mn10300: failing __get_user() and get_user() should zero
    - m32r: fix __get_user()
    - sh64: failing __get_user() should zero
    - nios2: fix __get_user()
    - score: fix __get_user/get_user
    - s390: get_user() should zero on failure
    - ARC: uaccess: get_user to zero out dest in cause of fault
    - asm-generic: make get_user() clear the destination on errors
    - frv: fix clear_user()
    - cris: buggered copy_from_user/copy_to_user/clear_user
    - blackfin: fix copy_from_user()
    - score: fix copy_from_user() and friends
    - sh: fix copy_from_user()
    - hexagon: fix strncpy_from_user() error return
    - mips: copy_from_user() must zero the destination on access_ok() failure
    - asm-generic: make copy_from_user() zero the destination properly
    - alpha: fix copy_from_user()
    - metag: copy_from_user() should zero the destination on access_ok() failure
    - parisc: fix copy_from_user()
    - openrisc: fix copy_from_user()
    - nios2: copy_from_user() should zero the tail of destination
    - mn10300: copy_from_user() should zero on access_ok() failure...
    - sparc32: fix copy_from_user()
    - ppc32: fix copy_from_user()
    - genirq/msi: Fix broken debug output
    - ia64: copy_from_user() should zero the destination on access_ok() failure
    - avr32: fix 'undefined reference to `___copy_from_user'
    - openrisc: fix the fix of copy_from_user()
    - Linux 4.4.22

  * AES-XTS poor performance in Ubuntu 16.04 (LP: #1613295)
    - crypto: vmx - fix null dereference in p8_aes_xts_crypt

  * i40e/setting some ethtool features and remove module right after (modprobe
    -r) lead to crash in systems with more than 127 CPUs (LP: #1626782)
    - i40e: Fix errors resulted while turning off TSO

  * STC860:alpine-pdq:alpdq5p03: kernel panic when adding vnic (LP: #1626222)
    - ibmvnic: fix to use list_for_each_safe() when delete items

  * Stratton: ISST-LTE:UbuntuKVM: Failed to hotplug virtual devices to guest
    running Ubuntu 16.04.1 on UbuntuKVM16.04.1 #179 (LP: #1625986)
    - PCI: rpaphp: Fix slot registration for multiple slots under a PHB

  * nvme: Missing patch in Ubuntu-4.4.0-41.61 (LP: #1628520)
    - nvme: Call pci_disable_device on the error path.

 -- Seth Forshee <seth.forshee@canonical.com>  Thu, 20 Oct 2016 08:09:34 -0500

linux (4.4.0-45.66) xenial; urgency=low

  * CVE-2016-5195
    - SAUCE: mm: remove gup_flags FOLL_WRITE games from __get_user_pages()

  * srcname from mount rule corrupted under load (LP: #1634753)
    - SAUCE: apparmor: fix sleep in critical section

 -- Stefan Bader <stefan.bader@canonical.com>  Wed, 19 Oct 2016 11:24:20 +0200

linux (4.4.0-43.63) xenial; urgency=low

  [ Seth Forshee ]

  * Release Tracking Bug
    - LP: #1632375

  * kswapd0 100% CPU usage (LP: #1518457)
    - SAUCE: (no-up) If zone is so small that watermarks are the same, stop zone
      balance.

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 11 Oct 2016 07:54:56 -0500

linux (4.4.0-42.62) xenial; urgency=low

  * Fix GRO recursion overflow for tunneling protocols (LP: #1631287)
    - tunnels: Don't apply GRO to multiple layers of encapsulation.
    - gro: Allow tunnel stacking in the case of FOU/GUE

  * CVE-2016-7039
    - SAUCE: net: add recursion limit to GRO

 -- Seth Forshee <seth.forshee@canonical.com>  Fri, 07 Oct 2016 12:03:55 -0500

linux (4.4.0-41.61) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1628204

  * nvme drive probe failure (LP: #1626894)
    - (fix) NVMe: Don't unmap controller registers on reset

 -- Kamal Mostafa <kamal@canonical.com>  Tue, 27 Sep 2016 09:40:42 -0700

linux (4.4.0-40.60) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1627074

  * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
    - Fix memory leaks in cifs_do_mount()
    - Compare prepaths when comparing superblocks
    - SAUCE: Fix regression which breaks DFS mounting

  * Backlight does not change when adjust it higher than 50% after S3
    (LP: #1625932)
    - SAUCE: i915_bpo: drm/i915/backlight: setup and cache pwm alternate
      increment value
    - SAUCE: i915_bpo: drm/i915/backlight: setup backlight pwm alternate
      increment on backlight enable

 -- Kamal Mostafa <kamal@canonical.com>  Fri, 23 Sep 2016 08:53:31 -0700

linux (4.4.0-39.59) xenial; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1625303

  * thunder: chip errata w/ multiple CQEs for a TSO packet (LP: #1624569)
    - net: thunderx: Fix for issues with multiple CQEs posted for a TSO packet

  * thunder: faulty TSO padding (LP: #1623627)
    - net: thunderx: Fix for HW issue while padding TSO packet

  * CVE-2016-6828
    - tcp: fix use after free in tcp_xmit_retransmit_queue()

  * Sennheiser Officerunner - cannot get freq at ep 0x83 (LP: #1622763)
    - SAUCE: (no-up) ALSA: usb-audio: Add quirk for sennheiser officerunner

  * Backport E3 Skylake Support in ie31200_edac to Xenial (LP: #1619766)
    - EDAC, ie31200_edac: Add Skylake support

  * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
    - SAUCE: nvme: Don't suspend admin queue that wasn't created

  * ISST-LTE:pNV: system ben is hung during ST (nvme) (LP: #1620317)
    - blk-mq: Allow timeouts to run while queue is freezing
    - blk-mq: improve warning for running a queue on the wrong CPU
    - blk-mq: don't overwrite rq->mq_ctx

  * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
    (LP: #1619918)
    - btrfs: bugfix: handle FS_IOC32_{GETFLAGS, SETFLAGS, GETVERSION} in
      btrfs_ioctl

  * radeon: monitor connected to onboard VGA doesn't work with Xenial
    (LP: #1600092)
    - drm/radeon/dp: add back special handling for NUTMEG

  * initramfs includes qle driver, but not firmware (LP: #1623187)
    - qed: add MODULE_FIRMWARE()

  * [Hyper-V] Rebase Hyper-V to 4.7.2 (stable) (LP: #1616677)
    - hv_netvsc: Implement support for VF drivers on Hyper-V
    - hv_netvsc: Fix the list processing for network change event
    - Drivers: hv: vmbus: Introduce functions for estimating room in the ring
      buffer
    - Drivers: hv: vmbus: Use READ_ONCE() to read variables that are volatile
    - Drivers: hv: vmbus: Export the vmbus_set_event() API
    - lcoking/barriers, arch: Use smp barriers in smp_store_release()
    - asm-generic: guard smp_store_release/load_acquire
    - x86: reuse asm-generic/barrier.h
    - asm-generic: add __smp_xxx wrappers
    - x86: define __smp_xxx
    - asm-generic: implement virt_xxx memory barriers
    - Drivers: hv: vmbus: Move some ring buffer functions to hyperv.h
    - Drivers: hv: vmbus: Implement APIs to support "in place" consumption of
      vmbus packets
    - drivers:hv: Lock access to hyperv_mmio resource tree
    - drivers:hv: Make a function to free mmio regions through vmbus
    - drivers:hv: Track allocations of children of hv_vmbus in private resource
      tree
    - drivers:hv: Separate out frame buffer logic when picking MMIO range
    - Drivers: hv: vmbus: handle various crash scenarios
    - Drivers: hv: balloon: don't crash when memory is added in non-sorted order
    - Drivers: hv: balloon: reset host_specified_ha_region
    - tools: hv: lsvmbus: add pci pass-through UUID
    - hv_netvsc: move start_remove flag to net_device_context
    - hv_netvsc: use start_remove flag to protect netvsc_link_change()
    - hv_netvsc: untangle the pointer mess
    - hv_netvsc: get rid of struct net_device pointer in struct netvsc_device
    - hv_netvsc: synchronize netvsc_change_mtu()/netvsc_set_channels() with
      netvsc_remove()
    - hv_netvsc: set nvdev link after populating chn_table
    - hv_netvsc: Fix VF register on vlan devices
    - hv_netvsc: remove redundant assignment in netvsc_recv_callback()
    - hv_netvsc: introduce {net, hv}_device_to_netvsc_device() helpers
    - hv_netvsc: pass struct netvsc_device to rndis_filter_{open, close}()
    - hv_netvsc: pass struct net_device to rndis_filter_set_device_mac()
    - hv_netvsc: pass struct net_device to rndis_filter_set_offload_params()
    - netvsc: get rid of completion timeouts
    - PCI: hv: Don't leak buffer in hv_pci_onchannelcallback()
    - PCI: hv: Handle all pending messages in hv_pci_onchannelcallback()
    - netvsc: Use the new in-place consumption APIs in the rx path
    - x86/kernel: Audit and remove any unnecessary uses of module.h
    - PCI: hv: Fix interrupt cleanup path
    - hv_netvsc: Fix VF register on bonding devices
    - hv_netvsc: don't lose VF information
    - hv_netvsc: avoid deadlocks between rtnl lock and vf_use_cnt wait
    - hv_netvsc: reset vf_inject on VF removal
    - hv_netvsc: protect module refcount by checking net_device_ctx->vf_netdev
    - hv_netvsc: fix bonding devices check in netvsc_netdev_event()
    - Drivers: hv: vmbus: Use the new virt_xx barrier code
    - ixgbevf: call ndo_stop() instead of dev_close() when running offline
      selftest
    - ixgbevf: fix error code path when setting MAC address
    - ixgbevf: use bit operations for setting and checking resets
    - ixgbevf: Add support for generic Tx checksums
    - ixgbe/ixgbevf: Add support for bulk free in Tx cleanup & cleanup boolean
      logic
    - ixgbevf: refactor ethtool stats handling
    - ixgbevf: add support for per-queue ethtool stats
    - ixgbevf: make use of BIT() macro to avoid shift of signed values
    - ixgbevf: Move API negotiation function into mac_ops
    - ixgbevf: Add the device ID's presented while running on Hyper-V
    - ixgbevf: Support Windows hosts (Hyper-V)
    - ixgbevf: Change the relaxed order settings in VF driver for sparc
    - ixgbevf: Use mac_ops instead of trying to identify NIC type

  * New device ID for Kabypoint (LP: #1622469)
    - mfd: lpss: Add Intel Kaby Lake PCH-H PCI IDs
    - SAUCE: i2c: i801: Add support for Kaby Lake PCH-H

  * Xenial update to v4.4.21 stable release (LP: #1624037)
    - Revert "i40e: fix: do not sleep in netdev_ops"
    - fs: Check for invalid i_uid in may_follow_link()
    - netfilter: x_tables: check for size overflow
    - ext4: validate that metadata blocks do not overlap superblock
    - ext4: fix xattr shifting when expanding inodes
    - ext4: fix xattr shifting when expanding inodes part 2
    - ext4: properly align shifted xattrs when expanding inodes
    - ext4: avoid deadlock when expanding inode size
    - ext4: avoid modifying checksum fields directly during checksum verification
    - block: Fix race triggered by blk_set_queue_dying()
    - block: make sure a big bio is split into at most 256 bvecs
    - cgroup: reduce read locked section of cgroup_threadgroup_rwsem during fork
    - s390/sclp_ctl: fix potential information leak with /dev/sclp
    - drm/radeon: fix radeon_move_blit on 32bit systems
    - drm: Reject page_flip for !DRIVER_MODESET
    - drm/msm: fix use of copy_from_user() while holding spinlock
    - ASoC: atmel_ssc_dai: Don't unconditionally reset SSC on stream startup
    - xfs: fix superblock inprogress check
    - timekeeping: Cap array access in timekeeping_debug
    - timekeeping: Avoid taking lock in NMI path with CONFIG_DEBUG_TIMEKEEPING
    - lustre: remove unused declaration
    - wrappers for ->i_mutex access
    - ovl: don't copy up opaqueness
    - ovl: remove posix_acl_default from workdir
    - ovl: listxattr: use strnlen()
    - ovl: fix workdir creation
    - ubifs: Fix assertion in layout_in_gaps()
    - bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power of
      two.
    - vhost/scsi: fix reuse of &vq->iov[out] in response
    - x86/apic: Do not init irq remapping if ioapic is disabled
    - uprobes: Fix the memcg accounting
    - crypto: caam - fix IV loading for authenc (giv)decryption
    - ALSA: usb-audio: Add sample rate inquiry quirk for B850V3 CP2114
    - ALSA: firewire-tascam: accessing to user space outside spinlock
    - ALSA: fireworks: accessing to user space outside spinlock
    - ALSA: rawmidi: Fix possible deadlock with virmidi registration
    - ALSA: hda - Add headset mic quirk for Dell Inspiron 5468
    - ALSA: hda - Enable subwoofer on Dell Inspiron 7559
    - ALSA: timer: fix NULL pointer dereference in read()/ioctl() race
    - ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE
    - ALSA: timer: fix NULL pointer dereference on memory allocation failure
    - scsi: fix upper bounds check of sense key in scsi_sense_key_string()
    - metag: Fix atomic_*_return inline asm constraints
    - cpufreq: Fix GOV_LIMITS handling for the userspace governor
    - hwrng: exynos - Disable runtime PM on probe failure
    - regulator: anatop: allow regulator to be in bypass mode
    - lib/mpi: mpi_write_sgl(): fix skipping of leading zero limbs
    - Linux 4.4.21

  * Headset mic detection on some variants of Dell Inspiron 5468 (LP: #1617900)
    - ALSA: hda - Add headset mic quirk for Dell Inspiron 5468

  * Xenial update to v4.4.20 stable release (LP: #1621113)
    - hugetlb: fix nr_pmds accounting with shared page tables
    - x86/mm: Disable preemption during CR3 read+write
    - uprobes/x86: Fix RIP-relative handling of EVEX-encoded instructions
    - tools/testing/nvdimm: fix SIGTERM vs hotplug crash
    - SUNRPC: Handle EADDRNOTAVAIL on connection failures
    - SUNRPC: allow for upcalls for same uid but different gss service
    - powerpc/eeh: eeh_pci_enable(): fix checking of post-request state
    - ALSA: usb-audio: Add a sample rate quirk for Creative Live! Cam Socialize HD
      (VF0610)
    - ALSA: usb-audio: Add quirk for ELP HD USB Camera
    - arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
    - parisc: Fix order of EREFUSED define in errno.h
    - virtio: fix memory leak in virtqueue_add()
    - vfio/pci: Fix NULL pointer oops in error interrupt setup handling
    - perf intel-pt: Fix occasional decoding errors when tracing system-wide
    - libnvdimm, nd_blk: mask off reserved status bits
    - ALSA: hda - Manage power well properly for resume
    - NVMe: Don't unmap controller registers on reset
    - PCI: Support PCIe devices with short cfg_size
    - PCI: Add Netronome vendor and device IDs
    - PCI: Limit config space size for Netronome NFP6000 family
    - PCI: Add Netronome NFP4000 PF device ID
    - PCI: Limit config space size for Netronome NFP4000
    - mmc: sdhci-acpi: Reduce Baytrail eMMC/SD/SDIO hangs
    - ACPI: CPPC: Return error if _CPC is invalid on a CPU
    - ACPI / CPPC: Prevent cpc_desc_ptr points to the invalid data
    - um: Don't discard .text.exit section
    - genirq/msi: Remove unused MSI_FLAG_IDENTITY_MAP
    - genirq/msi: Make sure PCI MSIs are activated early
    - crypto: caam - fix non-hmac hashes
    - crypto: caam - fix echainiv(authenc) encrypt shared descriptor
    - crypto: caam - defer aead_set_sh_desc in case of zero authsize
    - usb: ehci: change order of register cleanup during shutdown
    - usb: misc: usbtest: add fix for driver hang
    - usb: dwc3: pci: add Intel Kabylake PCI ID
    - usb: dwc3: gadget: increment request->actual once
    - usb: hub: Fix unbalanced reference count/memory leak/deadlocks
    - USB: hub: fix up early-exit pathway in hub_activate
    - USB: hub: change the locking in hub_activate
    - usb: renesas_usbhs: clear the BRDYSTS in usbhsg_ep_enable()
    - usb: renesas_usbhs: Use dmac only if the pipe type is bulk
    - USB: validate wMaxPacketValue entries in endpoint descriptors
    - usb: gadget: fsl_qe_udc: off by one in setup_received_handle()
    - usb/gadget: fix gadgetfs aio support.
    - xhci: always handle "Command Ring Stopped" events
    - usb: xhci: Fix panic if disconnect
    - xhci: don't dereference a xhci member after removing xhci
    - USB: serial: fix memleak in driver-registration error path
    - USB: serial: option: add D-Link DWM-156/A3
    - USB: serial: option: add support for Telit LE920A4
    - USB: serial: ftdi_sio: add device ID for WICED USB UART dev board
    - USB: serial: ftdi_sio: add PIDs for Ivium Technologies devices
    - iommu/dma: Don't put uninitialised IOVA domains
    - iommu/arm-smmu: Fix CMDQ error handling
    - iommu/arm-smmu: Don't BUG() if we find aborting STEs with disable_bypass
    - pinctrl/amd: Remove the default de-bounce time
    - EDAC: Increment correct counter in edac_inc_ue_error()
    - s390/dasd: fix hanging device after clear subchannel
    - mac80211: fix purging multicast PS buffer queue
    - arm64: dts: rockchip: add reset saradc node for rk3368 SoCs
    - of: fix reference counting in of_graph_get_endpoint_by_regs
    - sched/cputime: Fix NO_HZ_FULL getrusage() monotonicity regression
    - sched/nohz: Fix affine unpinned timers mess
    - iio: fix sched WARNING "do not call blocking ops when !TASK_RUNNING"
    - drm/amdgpu: Change GART offset to 64-bit
    - drm/amdgpu: fix amdgpu_move_blit on 32bit systems
    - drm/amdgpu: avoid a possible array overflow
    - drm/amdgpu: skip TV/CV in display parsing
    - drm/amd/amdgpu: sdma resume fail during S4 on CI
    - drm/amdgpu: record error code when ring test failed
    - drm/i915: fix aliasing_ppgtt leak
    - ARC: build: Better way to detect ISA compatible toolchain
    - ARC: use correct offset in pt_regs for saving/restoring user mode r25
    - ARC: Call trace_hardirqs_on() before enabling irqs
    - ARC: Elide redundant setup of DMA callbacks
    - aacraid: Check size values after double-fetch from user
    - mfd: cros_ec: Add cros_ec_cmd_xfer_status() helper
    - i2c: cros-ec-tunnel: Fix usage of cros_ec_cmd_xfer()
    - cdc-acm: fix wrong pipe type on rx interrupt xfers
    - mpt3sas: Fix resume on WarpDrive flash cards
    - megaraid_sas: Fix probing cards without io port
    - usb: renesas_usbhs: gadget: fix return value check in
      usbhs_mod_gadget_probe()
    - gpio: Fix OF build problem on UM
    - fs/seq_file: fix out-of-bounds read
    - btrfs: waiting on qgroup rescan should not always be interruptible
    - btrfs: properly track when rescan worker is running
    - Input: tegra-kbc - fix inverted reset logic
    - Input: i8042 - break load dependency between atkbd/psmouse and i8042
    - Input: i8042 - set up shared ps2_cmd_mutex for AUX ports
    - crypto: nx - off by one bug in nx_of_update_msc()
    - crypto: qat - fix aes-xts key sizes
    - dmaengine: usb-dmac: check CHCR.DE bit in usb_dmac_isr_channel()
    - USB: avoid left shift by -1
    - usb: chipidea: udc: don't touch DP when controller is in host mode
    - USB: fix typo in wMaxPacketSize validation
    - USB: serial: mos7720: fix non-atomic allocation in write path
    - USB: serial: mos7840: fix non-atomic allocation in write path
    - USB: serial: option: add WeTelecom WM-D200
    - USB: serial: option: add WeTelecom 0x6802 and 0x6803 products
    - staging: comedi: daqboard2000: bug fix board type matching code
    - staging: comedi: comedi_test: fix timer race conditions
    - staging: comedi: ni_mio_common: fix AO inttrig backwards compatibility
    - staging: comedi: ni_mio_common: fix wrong insn_write handler
    - ACPI / drivers: fix typo in ACPI_DECLARE_PROBE_ENTRY macro
    - ACPI / drivers: replace acpi_probe_lock spinlock with mutex
    - ACPI / sysfs: fix error code in get_status()
    - ACPI / SRAT: fix SRAT parsing order with both LAPIC and X2APIC present
    - ALSA: line6: Remove double line6_pcm_release() after failed acquire.
    - ALSA: line6: Give up on the lock while URBs are released.
    - ALSA: line6: Fix POD sysfs attributes segfault
    - hwmon: (iio_hwmon) fix memory leak in name attribute
    - sysfs: correctly handle read offset on PREALLOC attrs
    - Linux 4.4.20

  * Failed to acknowledge elog: /sys/firmware/opal/elog/0x5018d709/acknowledge
    (2:No such file or directory) (LP: #1619552)
    - powerpc/powernv : Drop reference added by kset_find_obj()

  * backport support for userspace access of DP aux devices (LP: #1619756)
    - drm/dp: Add a drm_aux-dev module for reading/writing dpcd registers.
    - drm/dp: Allow signals to interrupt drm_aux-dev reads/writes
    - [Config] CONFIG_DRM_DP_AUX_CHARDEV=y

  * Enable virtual scsi server driver for Power (LP: #1615665)
    - SAUCE: Ibmvscsis: Properly deregister target sessions
    - SAUCE: Return TCMU-generated sense data to fabric module
    - SAUCE: Ibmvscsis: Code cleanup of print statements
    - SAUCE: Ibmvscsis: Fixed a bug reported by Dan Carpenter

  * ISST-LTE: system dropped into xmon at pcibios_release_device+0x5c/0x80
    during running dlpar test on monklp3 (LP: #1618151)
    - powerpc/pseries: use pci_host_bridge.release_fn() to kfree(phb)

  * Kernel Build Fails for Fuse Module (LP: #1617550)
    - SAUCE: (namespace) userns: Export current_in_userns to modules

  * boot-time kernel panic introduced in 4.4.0-18, not present in 4.4.0-15
    (LP: #1572630)
    - blk-mq: Reuse hardware context cpumask for tags
    - blk-mq: Use proper cpumask iterator

 -- Joseph Salisbury <joseph.salisbury@canonical.com>  Mon, 19 Sep 2016 14:23:10 -0400

linux (4.4.0-38.57) xenial; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1620658

  * CIFS client: access problems after updating to kernel 4.4.0-29-generic
    (LP: #1612135)
    - Revert "UBUNTU: SAUCE: (namespace) Bypass sget() capability check for nfs"
    - fs: Call d_automount with the filesystems creds

  * apt-key add fails in overlayfs (LP: #1618572)
    - SAUCE: overlayfs: fix regression in whiteout detection

 -- Tim Gardner <tim.gardner@canonical.com>  Tue, 30 Aug 2016 12:24:30 -0600

linux (4.4.0-37.56) xenial; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1618040

  * [Feature] Instruction decoder support for new SKX instructions- AVX512
    (LP: #1591655)
    - x86/insn: perf tools: Fix vcvtph2ps instruction decoding
    - x86/insn: Add AVX-512 support to the instruction decoder
    - perf tools: Add AVX-512 support to the instruction decoder used by Intel PT
    - perf tools: Add AVX-512 instructions to the new instructions test

  * [Ubuntu 16.04] FCoE Lun not visible in OS with inbox driver - Issue with
    ioremap() call on 32bit kernel (LP: #1608652)
    - lpfc: Correct issue with ioremap() call on 32bit kernel

  * [Feature] turbostat support for Skylake-SP server (LP: #1591802)
    - tools/power turbostat: decode more CPUID fields
    - tools/power turbostat: CPUID(0x16) leaf shows base, max, and bus frequency
    - tools/power turbostat: decode HWP registers
    - tools/power turbostat: Decode MSR_MISC_PWR_MGMT
    - tools/power turbostat: allow sub-sec intervals
    - tools/power turbostat: Intel Xeon x200: fix erroneous bclk value
    - tools/power turbostat: Intel Xeon x200: fix turbo-ratio decoding
    - tools/power turbostat: re-name "%Busy" field to "Busy%"
    - tools/power turbostat: add --out option for saving output in a file
    - tools/power turbostat: fix compiler warnings
    - tools/power turbostat: make fewer systems calls
    - tools/power turbostat: show IRQs per CPU
    - tools/power turbostat: show GFXMHz
    - tools/power turbostat: show GFX%rc6
    - tools/power turbostat: detect and work around syscall jitter
    - tools/power turbostat: indicate SMX and SGX support
    - tools/power turbostat: call __cpuid() instead of __get_cpuid()
    - tools/power turbostat: correct output for MSR_NHM_SNB_PKG_CST_CFG_CTL dump
    - tools/power turbostat: bugfix: TDP MSRs print bits fixing
    - tools/power turbostat: SGX state should print only if --debug
    - tools/power turbostat: print IRTL MSRs
    - tools/power turbostat: initial BXT support
    - tools/power turbostat: decode BXT TSC frequency via CPUID
    - tools/power turbostat: initial SKX support

  * [BYT] display hotplug doesn't work on console (LP: #1616894)
    - drm/i915/vlv: Make intel_crt_reset() per-encoder
    - drm/i915/vlv: Reset the ADPA in vlv_display_power_well_init()
    - drm/i915/vlv: Disable HPD in valleyview_crt_detect_hotplug()
    - drm/i915: Enable polling when we don't have hpd

  * [Feature]intel_idle enabling on Broxton-P (LP: #1520446)
    - intel_idle: add BXT support

  * [Feature] EDAC: Update driver for SKX-SP (LP: #1591815)
    - [Config] CONFIG_EDAC_SKX=m
    - EDAC, skx_edac: Add EDAC driver for Skylake

  * [Feature] KBL: Sandy Peak(3168) WiFi/BT support (LP: #1591648)
    - Bluetooth: Add support for Intel Bluetooth device 3168 [8087:0aa7]

  * MacBookPro11,4 fails to poweroff or suspend (LP: #1587714)
    - SAUCE: PCI: Workaround to enable poweroff on Mac Pro 11

  * Support Edge Gateway's Bluetooth LED (LP: #1512999)
    - SAUCE: Bluetooth: Support for LED on Edge Gateways
    - SAUCE: Bluetooth: Use host bridge subsystem IDs to identify Edge Gateways

  * Please add support for alps touchpad. (LP: #1616813)
    - [Config] CONFIG_HID_ALPS=m
    - HID: add Alps I2C HID Touchpad-Stick support
    - HID: alps: struct u1_dev *priv is internal to the driver
    - HID: alps: pass correct sizes to hid_hw_raw_request()
    - HID: alps: match alps devices in core
    - HID: alps: a few cleanups

  * DINO2M - System hangs with a black screen during s4 stress test
    (LP: #1616781)
    - x86/power/64: Fix kernel text mapping corruption during image restoration

  * Xenial update to v4.4.17 stable release (LP: #1611833)
    - USB: OHCI: Don't mark EDs as ED_OPER if scheduling fails
    - x86/quirks: Apply nvidia_bugs quirk only on root bus
    - x86/quirks: Reintroduce scanning of secondary buses
    - x86/quirks: Add early quirk to reset Apple AirPort card
    - dmaengine: at_xdmac: align descriptors on 64 bits
    - dmaengine: at_xdmac: fix residue corruption
    - dmaengine: at_xdmac: double FIFO flush needed to compute residue
    - mm, sl[au]b: add __GFP_ATOMIC to the GFP reclaim mask
    - mm, compaction: abort free scanner if split fails
    - fs/nilfs2: fix potential underflow in call to crc32_le
    - mm, compaction: prevent VM_BUG_ON when terminating freeing scanner
    - mm, meminit: always return a valid node from early_pfn_to_nid
    - mm, meminit: ensure node is online before checking whether pages are
      uninitialised
    - vmlinux.lds: account for destructor sections
    - pps: do not crash when failed to register
    - kernel/sysrq, watchdog, sched/core: Reset watchdog on all CPUs while
      processing sysrq-w
    - arc: unwind: warn only once if DW2_UNWIND is disabled
    - ARC: unwind: ensure that .debug_frame is generated (vs. .eh_frame)
    - xen/pciback: Fix conf_space read/write overlap check.
    - xenbus: don't BUG() on user mode induced condition
    - xenbus: don't bail early from xenbus_dev_request_and_reply()
    - Input: vmmouse - remove port reservation
    - Input: elantech - add more IC body types to the list
    - Input: xpad - fix oops when attaching an unknown Xbox One gamepad
    - Input: wacom_w8001 - w8001_MAX_LENGTH should be 13
    - Input: xpad - validate USB endpoint count during probe
    - Input: tsc200x - report proper input_dev name
    - pvclock: Add CPU barriers to get correct version value
    - pinctrl: single: Fix missing flush of posted write for a wakeirq
    - pinctrl: imx: Do not treat a PIN without MUX register as an error
    - cgroup: set css->id to -1 during init
    - power_supply: power_supply_read_temp only if use_cnt > 0
    - locks: use file_inode()
    - Revert "ecryptfs: forbid opening files without mmap handler"
    - ecryptfs: don't allow mmap when the lower fs doesn't support it
    - ext4: verify extent header depth
    - 9p: use file_dentry()
    - namespace: update event counter when umounting a deleted dentry
    - spi: sunxi: fix transfer timeout
    - spi: sun4i: fix FIFO limit
    - clk: rockchip: initialize flags of clk_init_data in mmc-phase clock
    - platform/chrome: cros_ec_dev - double fetch bug in ioctl
    - block: fix use-after-free in sys_ioprio_get()
    - mmc: block: fix packed command header endianness
    - sched/fair: Fix effective_load() to consistently use smoothed load
    - ovl: handle ATTR_KILL*
    - perf/x86: fix PEBS issues on Intel Atom/Core2
    - can: at91_can: RX queue could get stuck at high bus load
    - can: c_can: Update D_CAN TX and RX functions to 32 bit - fix Altera Cyclone
      access
    - can: fix handling of unmodifiable configuration options fix
    - can: fix oops caused by wrong rtnl dellink usage
    - RDS: fix rds_tcp_init() error path
    - SCSI: fix new bug in scsi_dev_info_list string matching
    - ipr: Clear interrupt on croc/crocodile when running with LSI
    - posix_cpu_timer: Exit early when process has been reaped
    - i2c: mux: reg: wrong condition checked for of_address_to_resource return
      value
    - libata: LITE-ON CX1-JB256-HP needs lower max_sectors
    - libceph: apply new_state before new_up_client on incrementals
    - net: mvneta: set real interrupt per packet for tx_done
    - intel_th: pci: Add Kaby Lake PCH-H support
    - intel_th: Fix a deadlock in modprobing
    - vfs: fix deadlock in file_remove_privs() on overlayfs
    - Linux 4.4.17
    - xenbus: don't look up transaction IDs for ordinary writes

  * Enable virtual scsi server driver for Power (LP: #1615665)
    - [Config] CONFIG_SCSI_IBMVSCSIS=m
    - target: Add target_alloc_session() helper function
    - ibmvscsis: Initial commit of IBM VSCSI Tgt Driver

  * AES-XTS poor performance in Ubuntu 16.04 (LP: #1613295)
    - crypto: vmx: Only call enable_kernel_vsx()
    - powerpc: Create disable_kernel_{fp,altivec,vsx,spe}()
    - crypto: vmx - Adding asm subroutines for XTS
    - crypto: xts - consolidate sanity check for keys
    - crypto: vmx - Adding support for XTS
    - crypto: vmx - Fix aes_p8_xts_decrypt build failure
    - crypto: xts - fix compile errors

  *  System hang when plug/pull USB 3.1 key via thunderbolt port over 5 times
    (LP: #1616318)
    - USB: don't free bandwidth_mutex too early

  * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
    - nvme: Suspend all queues before deletion

  * change_hat is logging failures during expected hat probing (LP: #1615893)
    - SAUCE: apparmor: Fix auditing behavior for change_hat probing

  * deleted files outside of the namespace are not being treated as disconnected
    (LP: #1615892)
    - SAUCE: apparmor: deleted dentries can be disconnected

  * stacking to unconfined in a child namespace confuses mediation
    (LP: #1615890)
    - SAUCE: apparmor: special case unconfined when determining the mode

  * apparmor module parameters can be changed after the policy is locked
    (LP: #1615895)
    - SAUCE: apparmor: fix: parameters can be changed after policy is locked

  * AppArmor profile reloading causes an intermittent kernel BUG (LP: #1579135)
    - SAUCE: apparmor: fix vec_unique for vectors larger than 8

  * label vec reductions can result in reference labels instead of direct access
    to labels (LP: #1615889)
    - SAUCE: apparmor: reduction of vec to single entry is just that entry

  * profiles from different namespaces can block other namespaces from being
    able to load a profile (LP: #1615887)
    - SAUCE: apparmor: profiles in one ns can affect mediation in another ns

  * vmalloc failure leads to null ptr dereference in aa_dfa_next (LP: #1592547)
    - SAUCE: apparmor: oops in profile_unpack() when policy_db is not present

  * vmalloc_addr is being checked on the failed return address of kvzalloc()
    (LP: #1615885)
    - SAUCE: apparmor: fix: don't check for vmalloc_addr if kvzalloc() failed

  * dfa is missing a bounds check which can cause an oops (LP: #1615882)
    - SAUCE: apparmor: Add missing id bounds check on dfa verification

  * The label build for onexec when stacking is wrong (LP: #1615881)
    - SAUCE: apparmor: Fix label build for onexec stacking.

  * The inherit check for new to old label comparison for domain transitions is
    wrong (LP: #1615880)
    - SAUCE: apparmor: Fix new to old label comparison for domain transitions

  * warning stack trace while playing with apparmor namespaces (LP: #1593874)
    - SAUCE: apparmor: fix stack trace when removing namespace with profiles

  * __label_update proxy comparison test is wrong (LP: #1615878)
    - SAUCE: apparmor: Fix __label_update proxy comparison test

  * Xenial update to v4.4.19 stable release (LP: #1615620)
    - usb: gadget: avoid exposing kernel stack
    - usb: f_fs: off by one bug in _ffs_func_bind()
    - usb: renesas_usbhs: protect the CFIFOSEL setting in usbhsg_ep_enable()
    - usb: dwc3: fix for the isoc transfer EP_BUSY flag
    - USB: serial: option: add support for Telit LE910 PID 0x1206
    - usb: renesas_usbhs: fix NULL pointer dereference in xfer_work()
    - arm64: kernel: Save and restore UAO and addr_limit on exception entry
    - arm64: debug: unmask PSTATE.D earlier
    - arm64: Fix incorrect per-cpu usage for boot CPU
    - tty: serial: msm: Don't read off end of tx fifo
    - serial: samsung: Fix ERR pointer dereference on deferred probe
    - tty/serial: atmel: fix RS485 half duplex with DMA
    - gpio: pca953x: Fix NBANK calculation for PCA9536
    - gpio: intel-mid: Remove potentially harmful code
    - Bluetooth: hci_intel: Fix null gpio desc pointer dereference
    - pinctrl: cherryview: prevent concurrent access to GPIO controllers
    - arm64: dts: rockchip: fixes the gic400 2nd region size for rk3368
    - arm64: mm: avoid fdt_check_header() before the FDT is fully mapped
    - KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures
    - KVM: PPC: Book3S HV: Save/restore TM state in H_CEDE
    - KVM: MTRR: fix kvm_mtrr_check_gfn_range_consistency page fault
    - KVM: VMX: handle PML full VMEXIT that occurs during event delivery
    - KVM: nVMX: Fix memory corruption when using VMCS shadowing
    - intel_pstate: Fix MSR_CONFIG_TDP_x addressing in core_get_max_pstate()
    - mfd: qcom_rpm: Fix offset error for msm8660
    - mfd: qcom_rpm: Parametrize also ack selector size
    - media: usbtv: prevent access to free'd resources
    - media: dvb_ringbuffer: Add memory barriers
    - vb2: core: Skip planes array verification if pb is NULL
    - Fix RC5 decoding with Fintek CIR chipset
    - sur40: lower poll interval to fix occasional FPS drops to ~56 FPS
    - sur40: fix occasional oopses on device close
    - dm: set DMF_SUSPENDED* _before_ clearing DMF_NOFLUSH_SUSPENDING
    - hp-wmi: Fix wifi cannot be hard-unblocked
    - s5p-mfc: Set device name for reserved memory region devs
    - s5p-mfc: Add release callback for memory region devs
    - i2c: efm32: fix a failure path in efm32_i2c_probe()
    - spi: pxa2xx: Clear all RFT bits in reset_sccr1() on Intel Quark
    - Bluetooth: Fix l2cap_sock_setsockopt() with optname BT_RCVMTU
    - EDAC: Correct channel count limit
    - HID: uhid: fix timeout when probe races with IO
    - ovl: disallow overlayfs as upperdir
    - remoteproc: Fix potential race condition in rproc_add
    - ARC: mm: don't loose PTE_SPECIAL in pte_modify()
    - jbd2: make journal y2038 safe
    - fs/cifs: make share unaccessible at root level mountable
    - cifs: Check for existing directory when opening file with O_CREAT
    - cifs: fix crash due to race in hmac(md5) handling
    - CIFS: Fix a possible invalid memory access in smb2_query_symlink()
    - random: initialize the non-blocking pool via add_hwgenerator_randomness()
    - random: print a warning for the first ten uninitialized random users
    - random: add interrupt callback to VMBus IRQ handler
    - MIPS: KVM: Fix mapped fault broken commpage handling
    - MIPS: KVM: Add missing gfn range check
    - MIPS: KVM: Fix gfn range check in kseg0 tlb faults
    - MIPS: KVM: Propagate kseg0/mapped tlb fault errors
    - nfs: don't create zero-length requests
    - nfsd: Fix race between FREE_STATEID and LOCK
    - nfsd: don't return an unhashed lock stateid after taking mutex
    - drm/i915: Don't complain about lack of ACPI video bios
    - iommu/exynos: Suppress unbinding to prevent system failure
    - iommu/vt-d: Return error code in domain_context_mapping_one()
    - iommu/amd: Handle IOMMU_DOMAIN_DMA in ops->domain_free call-back
    - iommu/amd: Init unity mappings only for dma_ops domains
    - iommu/amd: Update Alias-DTE in update_device_table()
    - audit: fix a double fetch in audit_log_single_execve_arg()
    - ARM: dts: sunxi: Add a startup delay for fixed regulator enabled phys
    - netlabel: add address family checks to netlbl_{sock,req}_delattr()
    - w1:omap_hdq: fix regression
    - drm/amdgpu: add a delay after ATPX dGPU power off
    - drm/amdgpu: Poll for both connect/disconnect on analog connectors
    - drm/amdgpu: support backlight control for UNIPHY3
    - drm/amdgpu: Disable RPM helpers while reprobing connectors on resume
    - drm/amdgpu: fix firmware info version checks
    - drm/amdgpu/gmc7: add missing mullins case
    - drm/radeon: add a delay after ATPX dGPU power off
    - drm/radeon: Poll for both connect/disconnect on analog connectors
    - drm/radeon: fix firmware info version checks
    - drm/radeon: support backlight control for UNIPHY3
    - drm/nouveau/gr/nv3x: fix instobj write offsets in gr setup
    - drm/nouveau/fbcon: fix font width not divisible by 8
    - drm: Restore double clflush on the last partial cacheline
    - drm/edid: Add 6 bpc quirk for display AEO model 0.
    - drm/i915: Never fully mask the the EI up rps interrupt on SNB/IVB
    - drm/i915/dp: Revert "drm/i915/dp: fall back to 18 bpp when sink capability
      is unknown"
    - balloon: check the number of available pages in leak balloon
    - ftrace/recordmcount: Work around for addition of metag magic but not
      relocations
    - metag: Fix __cmpxchg_u32 asm constraint for CMP
    - block: add missing group association in bio-cloning functions
    - block: fix bdi vs gendisk lifetime mismatch
    - mtd: nand: fix bug writing 1 byte less than page size
    - mm/hugetlb: avoid soft lockup in set_max_huge_pages()
    - ALSA: hda: Fix krealloc() with __GFP_ZERO usage
    - ALSA: hda/realtek - Can't adjust speaker's volume on a Dell AIO
    - ALSA: hda: add AMD Bonaire AZ PCI ID with proper driver caps
    - ALSA: hda - Fix headset mic detection problem for two dell machines
    - IB/mlx5: Fix MODIFY_QP command input structure
    - IB/mlx5: Fix entries checks in mlx5_ib_create_cq
    - IB/mlx5: Fix returned values of query QP
    - IB/mlx5: Fix entries check in mlx5_ib_resize_cq
    - IB/mlx5: Fix post send fence logic
    - IB/mlx5: Return PORT_ERR in Active to Initializing tranisition
    - IB/SA: Use correct free function
    - IB/IPoIB: Don't update neigh validity for unresolved entries
    - IB/IWPM: Fix a potential skb leak
    - IB/mlx4: Fix the SQ size of an RC QP
    - IB/mlx4: Fix error flow when sending mads under SRIOV
    - IB/mlx4: Fix memory leak if QP creation failed
    - of: fix memory leak related to safe_name()
    - ubi: Make volume resize power cut aware
    - ubi: Fix early logging
    - ubi: Fix race condition between ubi device creation and udev
    - iscsi-target: Fix panic when adding second TCP connection to iSCSI session
    - target: Fix ordered task target_setup_cmd_from_cdb exception hang
    - target: Fix missing complete during ABORT_TASK + CMD_T_FABRIC_STOP
    - target: Fix race between iscsi-target connection shutdown + ABORT_TASK
    - target: Fix max_unmap_lba_count calc overflow
    - target: Fix ordered task CHECK_CONDITION early exception handling
    - Input: elan_i2c - properly wake up touchpad on ASUS laptops
    - SUNRPC: Don't allocate a full sockaddr_storage for tracing
    - MIPS: mm: Fix definition of R6 cache instruction
    - MIPS: Don't register r4k sched clock when CPUFREQ enabled
    - MIPS: hpet: Increase HPET_MIN_PROG_DELTA and decrease HPET_MIN_CYCLES
    - PCI: Mark Atheros AR9485 and QCA9882 to avoid bus reset
    - x86/platform/intel_mid_pci: Rework IRQ0 workaround
    - ACPI / EC: Work around method reentrancy limit in ACPICA for _Qxx
    - rtc: s3c: Add s3c_rtc_{enable/disable}_clk in s3c_rtc_setfreq()
    - dm flakey: error READ bios during the down_interval
    - module: Invalidate signatures on force-loaded modules
    - Documentation/module-signing.txt: Note need for version info if reusing a
      key
    - Linux 4.4.19

  * xfrm: ipsec crash when updating spd thresholds (LP: #1613787)
    - xfrm: Ignore socket policies when rebuilding hash tables

  * ISST-LTE:pKVM311:lotg5:Ubutu16041:lotg5 crashed @
    writeback_sb_inodes+0x30c/0x590 (LP: #1614565)
    - writeback: Write dirty times for WB_SYNC_ALL writeback

  * IBM Power 720 Ethernet Not Seen (LP: #1612725)
    - [Config] CONFIG_IBMEBUS=y for powerpc

  * CAPI: Update default setting for the psl_fir_cntl register (LP: #1612431)
    - cxl: Set psl_fir_cntl to production environment value

  * Xenial update to v4.4.18 stable release (LP: #1614560)
    - tcp: enable per-socket rate limiting of all 'challenge acks'
    - ipv4: reject RTNH_F_DEAD and RTNH_F_LINKDOWN from user space
    - bonding: set carrier off for devices created through netlink
    - net: bgmac: Fix infinite loop in bgmac_dma_tx_add()
    - net/irda: fix NULL pointer dereference on memory allocation failure
    - qed: Fix setting/clearing bit in completion bitmap
    - tcp: consider recv buf for the initial window scale
    - ipath: Restrict use of the write() interface
    - scsi: ignore errors from scsi_dh_add_device()
    - HID: sony: do not bail out when the sixaxis refuses the output report
    - i2c: i801: Allow ACPI SystemIO OpRegion to conflict with PCI BAR
    - arm: oabi compat: add missing access checks
    - KEYS: 64-bit MIPS needs to use compat_sys_keyctl for 32-bit userspace
    - Revert "s390/kdump: Clear subchannel ID to signal non-CCW/SCSI IPL"
    - random: strengthen input validation for RNDADDTOENTCNT
    - devpts: clean up interface to pty drivers
    - x86/mm/pat: Add support of non-default PAT MSR setting
    - x86/mm/pat: Add pat_disable() interface
    - x86/mm/pat: Replace cpu_has_pat with boot_cpu_has()
    - x86/mtrr: Fix Xorg crashes in Qemu sessions
    - x86/mtrr: Fix PAT init handling when MTRR is disabled
    - x86/xen, pat: Remove PAT table init code from Xen
    - x86/pat: Document the PAT initialization sequence
    - x86/mm/pat: Fix BUG_ON() in mmap_mem() on QEMU/i386
    - drm/i915: Pretend cursor is always on for ILK-style WM calculations (v2)
    - x86/syscalls/64: Add compat_sys_keyctl for 32-bit userspace
    - block: fix use-after-free in seq file
    - sysv, ipc: fix security-layer leaking
    - fuse: fsync() did not return IO errors
    - fuse: fuse_flush must check mapping->flags for errors
    - fuse: fix wrong assignment of ->flags in fuse_send_init()
    - fs/dcache.c: avoid soft-lockup in dput()
    - crypto: gcm - Filter out async ghash if necessary
    - crypto: scatterwalk - Fix test in scatterwalk_done
    - ext4: check for extents that wrap around
    - ext4: fix deadlock during page writeback
    - ext4: don't call ext4_should_journal_data() on the journal inode
    - ext4: validate s_reserved_gdt_blocks on mount
    - ext4: short-cut orphan cleanup on error
    - ext4: fix reference counting bug on block allocation error
    - mm: memcontrol: fix cgroup creation failure after many small jobs
    - mm: memcontrol: fix swap counter leak on swapout from offline cgroup
    - mm: memcontrol: fix memcg id ref counter on swap charge move
    - Linux 4.4.18

  * Ubuntu16.10:installation fails on Brazos system (31TB and 192 cores) No
    memory for flatten_device_tree (no room) (LP: #1614309)
    - SAUCE: powerpc/pseries: Increase RMA size to 512MB.

  * [SRU] xgene_enet: 10g performance only hits ~75% on multi-client tests
    (LP: #1613157)
    - drivers: net: xgene: Add support for Classifier engine
    - drivers: net: xgene: Add support for RSS
    - drivers: net: xgene: Add support for multiple queues

  * [SRU] xgene_enet: an extra interrupt may be pending for an interrupt
    controller that doesn't support irq_disable and hardware with level
    interrupt (LP: #1611399)
    - drivers: net: xgene: fix extra IRQ issue

  * Mic mute hotkey does not work on usb keyboard [03f0:2f4a] (LP: #1609606)
    - HID: input: add mic mute key on HP slim keyboard

 -- Stefan Bader <stefan.bader@canonical.com>  Fri, 12 Aug 2016 09:05:59 +0200

# For older changelog entries, run 'apt-get changelog linux-cloud-tools-common'
