linux (3.13.0-91.138) trusty; urgency=medium

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1595991

  [ Upstream Kernel Changes ]

  * netfilter: x_tables: validate e->target_offset early
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: make sure e->next_offset covers remaining blob
    size
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: fix unconditional helper
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: don't move to non-existent next rule
    - LP: #1595350
  * netfilter: x_tables: validate targets of jumps
    - LP: #1595350
  * netfilter: x_tables: add and use xt_check_entry_offsets
    - LP: #1595350
  * netfilter: x_tables: kill check_entry helper
    - LP: #1595350
  * netfilter: x_tables: assert minimum target size
    - LP: #1595350
  * netfilter: x_tables: add compat version of xt_check_entry_offsets
    - LP: #1595350
  * netfilter: x_tables: check standard target size too
    - LP: #1595350
  * netfilter: x_tables: check for bogus target offset
    - LP: #1595350
  * netfilter: x_tables: validate all offsets and sizes in a rule
    - LP: #1595350
  * netfilter: x_tables: don't reject valid target size on some
    architectures
    - LP: #1595350
  * netfilter: arp_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: ip_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: ip6_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
    - LP: #1595350
  * netfilter: x_tables: do compat validation via translate_table
    - LP: #1595350
  * netfilter: x_tables: introduce and use xt_copy_counters_from_user
    - LP: #1595350

 -- Luis Henriques <luis.henriques@canonical.com>  Fri, 24 Jun 2016 16:19:03 +0100

linux (3.13.0-90.137) trusty; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1595693

  [ Serge Hallyn ]

  * SAUCE: add a sysctl to disable unprivileged user namespace unsharing
    - LP: #1555338, #1595350

 -- Kamal Mostafa <kamal@canonical.com>  Thu, 23 Jun 2016 13:10:53 -0700

linux (3.13.0-89.136) trusty; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1591315

  [ Kamal Mostafa ]

  * [debian] getabis: Only git add $abidir if running in local repo
    - LP: #1584890
  * [debian] getabis: Fix inconsistent compiler versions check
    - LP: #1584890

  [ Stefan Bader ]

  * SAUCE: powerpc/powernv: Fix incomplete backport of 8117ac6
    - LP: #1589910

  [ Tim Gardner ]

  * [Config] Remove arc4 from nic-modules
    - LP: #1582991

  [ Upstream Kernel Changes ]

  * KVM: x86: move steal time initialization to vcpu entry time
    - LP: #1494350
  * lpfc: Fix premature release of rpi bit in bitmask
    - LP: #1580560
  * lpfc: Correct loss of target discovery after cable swap.
    - LP: #1580560
  * mm/balloon_compaction: redesign ballooned pages management
    - LP: #1572562
  * mm/balloon_compaction: fix deflation when compaction is disabled
    - LP: #1572562
  * bridge: Fix the way to find old local fdb entries in br_fdb_changeaddr
    - LP: #1581585
  * bridge: notify user space after fdb update
    - LP: #1581585
  * ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
    - LP: #1580379
    - CVE-2016-4569
  * ALSA: timer: Fix leak in events via snd_timer_user_ccallback
    - LP: #1581866
    - CVE-2016-4578
  * ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
    - LP: #1581866
    - CVE-2016-4578
  * net: fix a kernel infoleak in x25 module
    - LP: #1585366
    - CVE-2016-4580
  * get_rock_ridge_filename(): handle malformed NM entries
    - LP: #1583962
    - CVE-2016-4913
  * netfilter: Set /proc/net entries owner to root in namespace
    - LP: #1584953
  * USB: usbfs: fix potential infoleak in devio
    - LP: #1578493
    - CVE-2016-4482
  * IB/security: Restrict use of the write() interface
    - LP: #1580372
    - CVE-2016-4565
  * netlink: autosize skb lengthes
    - LP: #1568969
  * xfs: allow inode allocations in post-growfs disk space
    - LP: #1560142

 -- Kamal Mostafa <kamal@canonical.com>  Fri, 10 Jun 2016 11:38:36 -0700

linux (3.13.0-88.135) trusty; urgency=low

  [ Kamal Mostafa ]

  * CVE-2016-1583 (LP: #1588871)
    - ecryptfs: fix handling of directory opening
    - SAUCE: proc: prevent stacking filesystems on top
    - SAUCE: ecryptfs: forbid opening files without mmap handler

 -- Andy Whitcroft <apw@canonical.com>  Wed, 08 Jun 2016 21:55:49 +0100

linux (3.13.0-87.133) trusty; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1585315

  [ Upstream Kernel Changes ]

  * Revert "usb: hub: do not clear BOS field during reset device"
    - LP: #1582864

 -- Kamal Mostafa <kamal@canonical.com>  Tue, 24 May 2016 11:04:30 -0700

linux (3.13.0-87.132) trusty; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1582398

  [ Kamal Mostafa ]

  * [Config] Drop ozwpan from the ABI

  [ Luis Henriques ]

  * [Config] CONFIG_USB_WPAN_HCD=n
    - LP: #1463740
    - CVE-2015-4004

  [ Prarit Bhargava ]

  * SAUCE: (no-up) ACPICA: Dispatcher: Update thread ID for recursive
    method calls
    - LP: #1577898

  [ Upstream Kernel Changes ]

  * usbnet: cleanup after bind() in probe()
    - LP: #1567191
    - CVE-2016-3951
  * KVM: x86: bit-ops emulation ignores offset on 64-bit
    - LP: #1423672
  * USB: usbip: fix potential out-of-bounds write
    - LP: #1572666
    - CVE-2016-3955
  * x86/mm/32: Enable full randomization on i386 and X86_32
    - LP: #1568523
    - CVE-2016-3672
  * Input: gtco - fix crash on detecting device without endpoints
    - LP: #1575706
    - CVE-2016-2187
  * atl2: Disable unimplemented scatter/gather feature
    - LP: #1561403
    - CVE-2016-2117
  * ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
    - LP: #1577905
  * fs/pnode.c: treat zero mnt_group_id-s as unequal
    - LP: #1572316
  * propogate_mnt: Handle the first propogated copy being a slave
    - LP: #1572316
  * drm: Balance error path for GEM handle allocation
    - LP: #1579610
  * x86/mm: Add barriers and document switch_mm()-vs-flush synchronization
    - LP: #1538429
    - CVE-2016-2069
  * x86/mm: Improve switch_mm() barrier comments
    - LP: #1538429
    - CVE-2016-2069
  * net: fix infoleak in llc
    - LP: #1578496
    - CVE-2016-4485
  * net: fix infoleak in rtnetlink
    - LP: #1578497
    - CVE-2016-4486

 -- Kamal Mostafa <kamal@canonical.com>  Mon, 16 May 2016 13:28:38 -0700

linux (3.13.0-86.131) trusty; urgency=low

  [ Kamal Mostafa ]

  * CVE-2016-0758 (LP: #1581202)
    - SAUCE: KEYS: Fix ASN.1 indefinite length object parsing

 -- Kamal Mostafa <kamal@canonical.com>  Thu, 12 May 2016 15:36:26 -0700

linux (3.13.0-86.130) trusty; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1571718

  [ Benjamin Tissoires ]

  * SAUCE: Input: synaptics - handle spurious release of trackstick
    buttons, again
    - LP: #1553811

  [ K. Y. Srinivasan ]

  * SAUCE: (noup): Drivers: hv: vmbus: Fix a bug in
    hv_need_to_signal_on_read()
    - LP: #1556264

  [ Kamal Mostafa ]

  * [debian] BugLink: close LP: bugs only for Launchpad urls
  * [Config] updateconfigs after v3.13.11-ckt38

  [ Tim Gardner ]

  * [Debian] Fix linux-doc dangling symlinks
    - LP: #661306

  [ Upstream Kernel Changes ]

  * Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
    - LP: #1562900
  * [stable-only] AIO: properly check iovec sizes
    - LP: #1562900
  * Input: aiptek - fix crash on detecting device without endpoints
    - LP: #1562900
  * wext: fix message delay/ordering
    - LP: #1562900
  * cfg80211/wext: fix message ordering
    - LP: #1562900
  * mac80211: fix use of uninitialised values in RX aggregation
    - LP: #1562900
  * libata: fix HDIO_GET_32BIT ioctl
    - LP: #1562900
  * mac80211: minstrel_ht: set default tx aggregation timeout to 0
    - LP: #1562900
  * jffs2: Fix page lock / f->sem deadlock
    - LP: #1562900
  * Fix directory hardlinks from deleted directories
    - LP: #1562900
  * iommu/amd: Fix boot warning when device 00:00.0 is not iommu covered
    - LP: #1562900
  * libata: Align ata_device's id on a cacheline
    - LP: #1562900
  * vfio: fix ioctl error handling
    - LP: #1562900
  * ALSA: ctl: Fix ioctls for X32 ABI
    - LP: #1562900
  * ALSA: rawmidi: Fix ioctls X32 ABI
    - LP: #1562900
  * ALSA: timer: Fix broken compat timer user status ioctl
    - LP: #1562900
  * ALSA: timer: Fix ioctls for X32 ABI
    - LP: #1562900
  * cifs: fix out-of-bounds access in lease parsing
    - LP: #1562900
  * CIFS: Fix SMB2+ interim response processing for read requests
    - LP: #1562900
  * ALSA: hdspm: Fix wrong boolean ctl value accesses
    - LP: #1562900
  * ALSA: hdspm: Fix zero-division
    - LP: #1562900
  * ALSA: hdsp: Fix wrong boolean ctl value accesses
    - LP: #1562900
  * USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
    - LP: #1562900
  * ASoC: wm8958: Fix enum ctl accesses in a wrong type
    - LP: #1562900
  * ASoC: wm8994: Fix enum ctl accesses in a wrong type
    - LP: #1562900
  * ASoC: wm_adsp: Fix enum ctl accesses in a wrong type
    - LP: #1562900
  * USB: serial: option: add support for Telit LE922 PID 0x1045
    - LP: #1562900
  * USB: serial: option: add support for Quectel UC20
    - LP: #1562900
  * ALSA: seq: oss: Don't drain at closing a client
    - LP: #1562900
  * drm/ast: Fix incorrect register check for DRAM width
    - LP: #1562900
  * drm/radeon/pm: update current crtc info after setting the powerstate
    - LP: #1562900
  * PM / sleep / x86: Fix crash on graph trace through x86 suspend
    - LP: #1562900
  * ALSA: hda - Fix mic issues on Acer Aspire E1-472
    - LP: #1562900
  * MIPS: traps: Fix SIGFPE information leak from `do_ov' and
    `do_trap_or_bp'
    - LP: #1562900
  * ubi: Fix out of bounds write in volume update code
    - LP: #1562900
  * KVM: VMX: disable PEBS before a guest entry
    - LP: #1562900
  * ext4: iterate over buffer heads correctly in move_extent_per_page()
    - LP: #1562900
  * net/mlx4_core: Allow resetting VF admin mac to zero
    - LP: #1562900
  * ipv6: re-enable fragment header matching in ipv6_find_hdr
    - LP: #1562900
  * cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind
    - LP: #1562900
  * net: moxa: fix an error code
    - LP: #1562900
  * IB/core: Use GRH when the path hop-limit > 0
    - LP: #1562900
  * Linux 3.13.11-ckt37
    - LP: #1562900
  * Drivers: hv_vmbus: Fix signal to host condition
    - LP: #1556264
  * [stable-only] pipe: Fix buffer offset after partially failed read
    - LP: #1563916
  * EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr()
    - LP: #1567615
  * tty: Fix GPF in flush_to_ldisc(), part 2
    - LP: #1567615
  * [media] media: v4l2-compat-ioctl32: fix missing length copy in
    put_v4l2_buffer32
    - LP: #1567615
  * [media] pwc: Add USB id for Philips Spc880nc webcam
    - LP: #1567615
  * 8250: use callbacks to access UART_DLL/UART_DLM
    - LP: #1567615
  * net: irda: Fix use-after-free in irtty_open()
    - LP: #1567615
  * usb: retry reset if a device times out
    - LP: #1567615
  * HID: core: do not scan reports if the group is already set
    - LP: #1567615
  * HID: fix hid_ignore_special_drivers module parameter
    - LP: #1567615
  * scripts/coccinelle: modernize &
    - LP: #1567615
  * [media] adv7511: TX_EDID_PRESENT is still 1 after a disconnect
    - LP: #1567615
  * [media] saa7134: Fix bytesperline not being set correctly for planar
    formats
    - LP: #1567615
  * perf tools: Dont stop PMU parsing on alias parse error
    - LP: #1567615
  * Bluetooth: btusb: Add new AR3012 ID 13d3:3395
    - LP: #1542564, #1567615
  * Bluetooth: Add new AR3012 ID 0489:e095
    - LP: #1542944, #1567615
  * aacraid: Fix memory leak in aac_fib_map_free
    - LP: #1567615
  * mtd: onenand: fix deadlock in onenand_block_markbad
    - LP: #1567615
  * PCI: Disable IO/MEM decoding for devices with non-compliant BARs
    - LP: #1567615
  * md/raid5: Compare apples to apples (or sectors to sectors)
    - LP: #1567615
  * Bluetooth: btusb: Add a new AR3012 ID 04ca:3014
    - LP: #1546694, #1567615
  * IB/srpt: Simplify srpt_handle_tsk_mgmt()
    - LP: #1567615
  * [media] bttv: Width must be a multiple of 16 when capturing planar
    formats
    - LP: #1567615
  * watchdog: rc32434_wdt: fix ioctl error handling
    - LP: #1567615
  * xfs: fix two memory leaks in xfs_attr_list.c error paths
    - LP: #1567615
  * quota: Fix possible GPF due to uninitialised pointers
    - LP: #1567615
  * mtip32xx: Print exact time when an internal command is interrupted
    - LP: #1567615
  * KVM: i8254: change PIT discard tick policy
    - LP: #1567615
  * sched/cputime: Fix steal time accounting vs. CPU hotplug
    - LP: #1567615
  * rt2x00: add new rt2800usb device Buffalo WLI-UC-G450
    - LP: #1567615
  * pinctrl-bcm2835: Fix cut-and-paste error in "pull" parsing
    - LP: #1567615
  * perf/core: Fix perf_sched_count derailment
    - LP: #1567615
  * perf/x86/intel: Use PAGE_SIZE for PEBS buffer size on Core2
    - LP: #1567615
  * bcache: fix cache_set_flush() NULL pointer dereference on OOM
    - LP: #1567615
  * x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant
    BARs
    - LP: #1567615
  * be2iscsi: set the boot_kset pointer to NULL in case of failure
    - LP: #1567615
  * drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards.
    - LP: #1567615
  * sg: fix dxferp in from_to case
    - LP: #1567615
  * jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount
    path
    - LP: #1567615
  * Bluetooth: btusb: Add a new AR3012 ID 13d3:3472
    - LP: #1552925, #1567615
  * iser-target: Separate flows for np listeners and connections cma events
    - LP: #1567615
  * xtensa: ISS: don't hang if stdin EOF is reached
    - LP: #1567615
  * xtensa: clear all DBREAKC registers on start
    - LP: #1567615
  * bus: imx-weim: Take the 'status' property value into account
    - LP: #1567615
  * ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41.
    - LP: #1567615
  * s390/pci: enforce fmb page boundary rule
    - LP: #1567615
  * Input: powermate - fix oops with malicious USB descriptors
    - LP: #1567615
  * net: mvneta: enable change MAC address when interface is up
    - LP: #1567615
  * HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report()
    - LP: #1567615
  * ALSA: hda - Fix unconditional GPIO toggle via automute
    - LP: #1567615
  * ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk()
    - LP: #1567615
  * ALSA: usb-audio: Add sanity checks for endpoint accesses
    - LP: #1567615
  * nfsd: fix deadlock secinfo+readdir compound
    - LP: #1567615
  * x86/iopl: Fix iopl capability check on Xen PV
    - LP: #1567615
  * Input: ims-pcu - sanity check against missing interfaces
    - LP: #1567615
  * x86/apic: Fix suspicious RCU usage in
    smp_trace_call_function_interrupt()
    - LP: #1567615
  * USB: iowarrior: fix oops with malicious USB descriptors
    - LP: #1567615
  * USB: usb_driver_claim_interface: add sanity checking
    - LP: #1567615
  * USB: cdc-acm: more sanity checking
    - LP: #1567615
  * USB: uas: Reduce can_queue to MAX_CMNDS
    - LP: #1567615
  * tracing: Have preempt(irqs)off trace preempt disabled functions
    - LP: #1567615
  * tracing: Fix crash from reading trace_pipe with sendfile
    - LP: #1567615
  * splice: handle zero nr_pages in splice_to_pipe()
    - LP: #1567615
  * target: Fix target_release_cmd_kref shutdown comp leak
    - LP: #1567615
  * KVM: VMX: avoid guest hang on invalid invept instruction
    - LP: #1567615
  * KVM: fix spin_lock_init order on x86
    - LP: #1567615
  * tracing: Fix trace_printk() to print when not using bprintk()
    - LP: #1567615
  * fs/coredump: prevent fsuid=0 dumps into user-controlled directories
    - LP: #1567615
  * rapidio/rionet: fix deadlock on SMP
    - LP: #1567615
  * Input: ati_remote2 - fix crashes on detecting device with invalid
    descriptor
    - LP: #1567615
  * MAINTAINERS: Update mailing list and web page for hwmon subsystem
    - LP: #1567615
  * ocfs2/dlm: fix race between convert and recovery
    - LP: #1567615
  * ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
    - LP: #1567615
  * clk: xgene: Add missing parenthesis when clearing divider value
    - LP: #1567615
  * ppp: take reference on channels netns
    - LP: #1567615
  * mdio-sun4i: oops in error handling in probe
    - LP: #1567615
  * net: Fix use after free in the recvmmsg exit path
    - LP: #1567615
  * ethernet: micrel: fix some error codes
    - LP: #1567615
  * misc/bmp085: Enable building as a module
    - LP: #1567615
  * net/mlx5: Make command timeout way shorter
    - LP: #1567615
  * ipvs: correct initial offset of Call-ID header search in SIP
    persistence engine
    - LP: #1567615
  * ath9k: fix buffer overrun for ar9287
    - LP: #1567615
  * mtd: map: fix .set_vpp() documentation
    - LP: #1567615
  * ARM: OMAP3: Add cpuidle parameters table for omap3430
    - LP: #1567615
  * rtc: vr41xx: Wire up alarm_irq_enable
    - LP: #1567615
  * sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a
    race
    - LP: #1567615
  * ipv4: fix broadcast packets reception
    - LP: #1567615
  * lpfc: fix misleading indentation
    - LP: #1567615
  * ASoC: s3c24xx: use const snd_soc_component_driver pointer
    - LP: #1567615
  * kbuild/mkspec: fix grub2 installkernel issue
    - LP: #1567615
  * paride: make 'verbose' parameter an 'int' again
    - LP: #1567615
  * ppp: ensure file->private_data can't be overridden
    - LP: #1567615
  * clk: versatile: sp810: support reentrance
    - LP: #1567615
  * drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
    - LP: #1567615
  * perf stat: Document --detailed option
    - LP: #1567615
  * x86/iopl/64: Properly context-switch IOPL on Xen PV
    - LP: #1567615
  * Linux 3.13.11-ckt38
    - LP: #1567615
  * drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
    - LP: #1571041
  * hwmon: (max1111) Return -ENODEV from max1111_read_channel if not
    instantiated
    - LP: #1571041
  * drm/radeon: add another R7 370 quirk
    - LP: #1571041
  * usb: renesas_usbhs: avoid NULL pointer derefernce in
    usbhsf_pkt_handler()
    - LP: #1571041
  * usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer
    - LP: #1571041
  * USB: mct_u232: add sanity checking in probe
    - LP: #1571041
    - CVE-2016-3136
  * USB: cypress_m8: add endpoint sanity check
    - LP: #1571041
    - CVE-2016-3137
  * USB: digi_acceleport: do sanity checking for the number of ports
    - LP: #1571041
  * ALSA: timer: Use mod_timer() for rearming the system timer
    - LP: #1571041
  * mm: fix invalid node in alloc_migrate_target()
    - LP: #1571041
  * iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
    - LP: #1571041
  * USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices
    - LP: #1571041
  * USB: serial: cp210x: Adding GE Healthcare Device ID
    - LP: #1571041
  * USB: option: add "D-Link DWM-221 B1" device id
    - LP: #1571041
  * parisc: Avoid function pointers for kernel exception routines
    - LP: #1571041
  * ip6_tunnel: set rtnl_link_ops before calling register_netdevice
    - LP: #1571041
  * Linux 3.13.11-ckt39
    - LP: #1571041
  * include/linux/poison.h: fix LIST_POISON{1,2} offset
    - LP: #1561389
    - CVE-2016-0821
  * ipv4: Don't do expensive useless work during inetdev destroy.
    - LP: #1558847
    - CVE-2016-3156

 -- Kamal Mostafa <kamal@canonical.com>  Mon, 18 Apr 2016 09:03:12 -0700

linux (3.13.0-85.129) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1558727

  [ Upstream Kernel Changes ]

  * Revert "Revert "af_unix: Revert 'lock_interruptible' in stream receive
    code""

 -- Brad Figg <brad.figg@canonical.com>  Thu, 17 Mar 2016 11:42:09 -0700

linux (3.13.0-84.128) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1557596

  [ Upstream Kernel Changes ]

  * Revert "af_unix: Revert 'lock_interruptible' in stream receive code"
    - LP: #1540731
  * seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO
    - LP: #1496073
  * net/mlx4_en: Remove dependency between timestamping capability and
    service_task
    - LP: #1537859
  * net/mlx4_en: Fix HW timestamp init issue upon system startup
    - LP: #1537859
  * x86/mm: Fix slow_virt_to_phys() for X86_PAE again
    - LP: #1549601
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1557191
  * EVM: Use crypto_memneq() for digest comparisons
    - LP: #1557191
  * x86/entry/compat: Add missing CLAC to entry_INT80_32
    - LP: #1557191
  * iio: dac: mcp4725: set iio name property in sysfs
    - LP: #1557191
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1557191
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1557191
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1557191
  * mac80211: start_next_roc only if scan was actually running
    - LP: #1557191
  * mac80211: Requeue work after scan complete for all VIF types.
    - LP: #1557191
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1557191
  * crypto: shash - Fix has_key setting
    - LP: #1557191
  * drm/i915/dp: fall back to 18 bpp when sink capability is unknown
    - LP: #1557191
  * target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
    - LP: #1557191
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1557191
  * iio: inkern: fix a NULL dereference on error
    - LP: #1557191
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1557191
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1557191
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1557191
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1557191
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1557191
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1557191
  * libata: fix sff host state machine locking while polling
    - LP: #1557191
  * cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
    - LP: #1557191
  * ASoC: dpcm: fix the BE state on hw_free
    - LP: #1557191
  * module: wrapper for symbol name.
    - LP: #1557191
  * ALSA: hda - Add fixup for Mac Mini 7,1 model
    - LP: #1557191
  * ALSA: Move EXPORT_SYMBOL() in appropriate places
    - LP: #1557191
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1557191
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1557191
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1557191
  * drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
    - LP: #1557191
  * radix-tree: fix race in gang lookup
    - LP: #1557191
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1557191
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1557191
  * target: Fix Task Aborted Status (TAS) handling
    - LP: #1557191
  * target: Add TFO->abort_task for aborted task resources release
    - LP: #1557191
  * target: Fix LUN_RESET active TMR descriptor handling
    - LP: #1557191
  * target: Fix LUN_RESET active I/O handling for ACK_KREF
    - LP: #1557191
  * target: Fix TAS handling for multi-session se_node_acls
    - LP: #1557191
  * target: Fix remote-port TMR ABORT + se_cmd fabric stop
    - LP: #1557191
  * target: Fix race with SCF_SEND_DELAYED_TAS handling
    - LP: #1557191
  * [media] tda1004x: only update the frontend properties if locked
    - LP: #1557191
  * ALSA: timer: Fix leftover link at closing
    - LP: #1557191
  * [media] saa7134-alsa: Only frees registered sound cards
    - LP: #1557191
  * Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
    - LP: #1557191
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1557191
  * SCSI: Add Marvell Console to VPD blacklist
    - LP: #1557191
  * drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
    - LP: #1557191
  * ALSA: hda - Fix static checker warning in patch_hdmi.c
    - LP: #1557191
  * dump_stack: avoid potential deadlocks
    - LP: #1557191
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1557191
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1557191
  * mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
    - LP: #1557191
  * radix-tree: fix oops after radix_tree_iter_retry
    - LP: #1557191
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1557191
  * serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
    - LP: #1557191
  * pty: fix possible use after free of tty->driver_data
    - LP: #1557191
  * pty: make sure super_block is still valid in final /dev/tty close
    - LP: #1557191
  * ALSA: hda - Fix speaker output from VAIO AiO machines
    - LP: #1557191
  * klist: fix starting point removed bug in klist iterators
    - LP: #1557191
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1557191
  * powerpc: Fix dedotify for binutils >= 2.26
    - LP: #1557191
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1557191
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1557191
  * nfs: fix nfs_size_to_loff_t
    - LP: #1557191
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1557191
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1557191
  * phy: twl4030-usb: Relase usb phy on unload
    - LP: #1557191
  * drm/i915: fix error path in intel_setup_gmbus()
    - LP: #1557191
  * ahci: Intel DNV device IDs SATA
    - LP: #1557191
  * workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
    - LP: #1557191
  * cifs: fix erroneous return value
    - LP: #1557191
  * s390/dasd: prevent incorrect length error under z/VM after PAV changes
    - LP: #1557191
  * s390/dasd: fix refcount for PAV reassignment
    - LP: #1557191
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1557191
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1557191
  * ext4: fix potential integer overflow
    - LP: #1557191
  * ext4: don't read blocks from disk after extents being swapped
    - LP: #1557191
  * bio: return EINTR if copying to user space got interrupted
    - LP: #1557191
  * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
    - LP: #1557191
  * xen/pciback: Save the number of MSI-X entries to be copied later.
    - LP: #1557191
  * xen/pcifront: Fix mysterious crashes when NUMA locality information was
    extracted.
    - LP: #1557191
  * ALSA: seq: Drop superfluous error/debug messages after malloc failures
    - LP: #1557191
  * ALSA: seq: Fix leak of pool buffer at concurrent writes
    - LP: #1557191
  * dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
    - LP: #1557191
  * tracepoints: Do not trace when cpu is offline
    - LP: #1557191
  * tracing: Fix freak link error caused by branch tracer
    - LP: #1557191
  * ALSA: seq: Fix double port list deletion
    - LP: #1557191
  * drm/radeon: use post-decrement in error handling
    - LP: #1557191
  * drm/qxl: use kmalloc_array to alloc reloc_info in
    qxl_process_single_command
    - LP: #1557191
  * NFSv4: Fix a dentry leak on alias use
    - LP: #1557191
  * USB: option: add support for SIM7100E
    - LP: #1557191
  * USB: cp210x: add IDs for GE B650V3 and B850V3 boards
    - LP: #1557191
  * USB: option: add "4G LTE usb-modem U901"
    - LP: #1557191
  * hwmon: (ads1015) Handle negative conversion values correctly
    - LP: #1557191
  * ext4: fix bh->b_state corruption
    - LP: #1557191
  * ext4: fix crashes in dioread_nolock mode
    - LP: #1557191
  * kernel/resource.c: fix muxed resource handling in __request_region()
    - LP: #1557191
  * drivers: android: correct the size of struct binder_uintptr_t for
    BC_DEAD_BINDER_DONE
    - LP: #1557191
  * can: ems_usb: Fix possible tx overflow
    - LP: #1557191
  * sunrpc/cache: fix off-by-one in qword_get()
    - LP: #1557191
  * KVM: async_pf: do not warn on page allocation failures
    - LP: #1557191
  * tracing: Fix showing function event in available_events
    - LP: #1557191
  * libceph: don't bail early from try_read() when skipping a message
    - LP: #1557191
  * KVM: x86: MMU: fix ubsan index-out-of-range warning
    - LP: #1557191
  * hpfs: don't truncate the file when delete fails
    - LP: #1557191
  * do_last(): don't let a bogus return value from ->open() et.al. to
    confuse us
    - LP: #1557191
  * af_iucv: Validate socket address length in iucv_sock_bind()
    - LP: #1557191
  * net: dp83640: Fix tx timestamp overflow handling.
    - LP: #1557191
  * tcp: fix NULL deref in tcp_v4_send_ack()
    - LP: #1557191
  * af_unix: fix struct pid memory leak
    - LP: #1557191
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1557191
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1557191
  * ipv6/udp: use sticky pktinfo egress ifindex on connect()
    - LP: #1557191
  * net/ipv6: add sysctl option accept_ra_min_hop_limit
    - LP: #1557191
  * ipv6: fix a lockdep splat
    - LP: #1557191
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1557191
  * net:Add sysctl_max_skb_frags
    - LP: #1557191
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1557191
  * af_unix: Guard against other == sk in unix_dgram_sendmsg
    - LP: #1543980, #1557191
  * qmi_wwan: add "4G LTE usb-modem U901"
    - LP: #1557191
  * net/mlx4_en: Count HW buffer overrun only once
    - LP: #1557191
  * pppoe: fix reference counting in PPPoE proxy
    - LP: #1557191
  * rtnl: RTM_GETNETCONF: fix wrong return value
    - LP: #1557191
  * unix_diag: fix incorrect sign extension in unix_lookup_by_ino
    - LP: #1557191
  * sctp: Fix port hash table size computation
    - LP: #1557191
  * bonding: Fix ARP monitor validation
    - LP: #1557191
  * ipv4: fix memory leaks in ip_cmsg_send() callers
    - LP: #1557191
  * net/mlx4_en: Choose time-stamping shift value according to HW frequency
    - LP: #1557191
  * af_unix: Don't set err in unix_stream_read_generic unless there was an
    error
    - LP: #1557191
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1557191
  * Linux 3.13.11-ckt36
    - LP: #1557191
  * sched/numa: Move task_numa_free() to __put_task_struct()
    - LP: #1527643
  * sched/numa: Fix unsafe get_task_struct() in task_numa_assign()
    - LP: #1527643
  * sched/numa: Fix use-after-free bug in the task_numa_compare
    - LP: #1527643

 -- Brad Figg <brad.figg@canonical.com>  Tue, 15 Mar 2016 08:41:17 -0700

# For older changelog entries, run 'apt-get changelog linux-tools-common'
