linux-lts-wily (4.2.0-42.49~14.04.1) trusty; urgency=low

  [ Ben Romer ]

  * Release Tracking Bug
    - LP: #1597108

  [ Josh Boyer ]

  * SAUCE: UEFI: acpi: Ignore acpi_rsdp kernel parameter when module
    loading is restricted
    - LP: #1566221
  * SAUCE: UEFI: efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI
    - LP: #1566221
  * SAUCE: UEFI MODSIGN: Import certificates from UEFI Secure Boot
    - LP: #1571691
  * SAUCE: UEFI: efi: Disable secure boot if shim is in insecure mode
    - LP: #1571691

  [ Matthew Garrett ]

  * SAUCE: UEFI: Add secure_modules() call
    - LP: #1566221
  * SAUCE: UEFI: PCI: Lock down BAR access when module security is enabled
    - LP: #1566221
  * SAUCE: UEFI: x86: Lock down IO port access when module security is
    enabled
    - LP: #1566221
  * SAUCE: UEFI: ACPI: Limit access to custom_method
    - LP: #1566221
  * SAUCE: UEFI: asus-wmi: Restrict debugfs interface when module loading
    is restricted
    - LP: #1566221
  * SAUCE: UEFI: Restrict /dev/mem and /dev/kmem when module loading is
    restricted
    - LP: #1566221
  * SAUCE: UEFI: kexec: Disable at runtime if the kernel enforces module
    loading restrictions
    - LP: #1566221
  * SAUCE: UEFI: x86: Restrict MSR access when module loading is restricted
    - LP: #1566221
  * SAUCE: UEFI: Add option to automatically enforce module signatures when
    in Secure Boot mode
    - LP: #1566221

  [ Stefan Bader ]

  * [Config] Add pm80xx scsi driver to d-i
    - LP: #1595628

  [ Tim Gardner ]

  * [Config] CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE=y
  * SAUCE: UEFI: Display MOKSBState when disabled
    - LP: #1571691
  * SAUCE: UEFI: Add secure boot and MOK SB State disabled sysctl
    - LP: #1593075

  [ Upstream Kernel Changes ]

  * Revert "scsi: fix soft lockup in scsi_remove_target() on module
    removal"
    - LP: #1592552
  * ath10k: fix firmware assert in monitor mode
    - LP: #1592552
  * drm/i915: Fix race condition in intel_dp_destroy_mst_connector()
    - LP: #1592552
  * ath10k: fix debugfs pktlog_filter write
    - LP: #1592552
  * drm/i915: Call intel_dp_mst_resume() before resuming displays
    - LP: #1592552
  * ARM: mvebu: fix GPIO config on the Linksys boards
    - LP: #1592552
  * ath5k: Change led pin configuration for compaq c700 laptop
    - LP: #1592552, #972604
  * xfs: disallow rw remount on fs with unknown ro-compat features
    - LP: #1592552
  * xfs: Don't wrap growfs AGFL indexes
    - LP: #1592552
  * rtlwifi: rtl8723be: Add antenna select module parameter
    - LP: #1592552
  * rtlwifi: btcoexist: Implement antenna selection
    - LP: #1592552
  * drm/gma500: Fix possible out of bounds read
    - LP: #1592552
  * Bluetooth: vhci: fix open_timeout vs. hdev race
    - LP: #1592552
  * Bluetooth: vhci: purge unhandled skbs
    - LP: #1592552
  * cpuidle: Indicate when a device has been unregistered
    - LP: #1592552
  * mfd: intel_quark_i2c_gpio: Use clkdev_create()
    - LP: #1592552
  * mfd: intel_quark_i2c_gpio: Remove clock tree on error path
    - LP: #1592552
  * [media] media: v4l2-compat-ioctl32: fix missing reserved field copy in
    put_v4l2_create32
    - LP: #1592552
  * scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
    - LP: #1592552
  * drm/i915/dsi: fix CHV dsi encoder hardware state readout on port C
    - LP: #1592552
  * usb: f_mass_storage: test whether thread is running before starting
    another
    - LP: #1592552
  * hwmon: (ads7828) Enable internal reference
    - LP: #1592552
  * ath10k: fix rx_channel during hw reconfigure
    - LP: #1592552
  * Bluetooth: vhci: Fix race at creating hci device
    - LP: #1592552
  * powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
    - LP: #1592552
  * PM / Runtime: Fix error path in pm_runtime_force_resume()
    - LP: #1592552
  * crypto: s5p-sss - Fix missed interrupts when working with 8 kB blocks
    - LP: #1592552
  * ath9k: Add a module parameter to invert LED polarity.
    - LP: #1592552
  * ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
    - LP: #1592552
  * pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
    - LP: #1592552
  * btrfs: bugfix: handle FS_IOC32_{GETFLAGS,SETFLAGS,GETVERSION} in
    btrfs_ioctl
    - LP: #1592552
  * serial: 8250_pci: fix divide error bug if baud rate is 0
    - LP: #1592552
  * TTY: n_gsm, fix false positive WARN_ON
    - LP: #1592552
  * staging: comedi: das1800: fix possible NULL dereference
    - LP: #1592552
  * arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
    - LP: #1592552
  * KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
    - LP: #1592552
  * aacraid: Relinquish CPU during timeout wait
    - LP: #1592552
  * aacraid: Fix for aac_command_thread hang
    - LP: #1592552
  * aacraid: Fix for KDUMP driver hang
    - LP: #1592552
  * ext4: fix hang when processing corrupted orphaned inode list
    - LP: #1592552
  * MIPS: ath79: make bootconsole wait for both THRE and TEMT
    - LP: #1592552
  * Drivers: hv: ring_buffer.c: fix comment style
    - LP: #1592552
  * mei: fix NULL dereferencing during FW initiated disconnection
    - LP: #1592552
  * mei: amthif: discard not read messages
    - LP: #1592552
  * tty: Abstract tty buffer work
    - LP: #1592552
  * Fix OpenSSH pty regression on close
    - LP: #1592552
  * QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
    - LP: #1592552
  * thunderbolt: Fix double free of drom buffer
    - LP: #1592552
  * USB: serial: option: add support for Cinterion PH8 and AHxx
    - LP: #1592552
  * usb: misc: usbtest: format the data pattern according to max packet
    size
    - LP: #1592552
  * usb: misc: usbtest: fix pattern tests for scatterlists.
    - LP: #1592552
  * mcb: Fixed bar number assignment for the gdd
    - LP: #1592552
  * USB: serial: option: add more ZTE device ids
    - LP: #1592552
  * USB: serial: option: add even more ZTE device ids
    - LP: #1592552
  * ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA
    internal strings
    - LP: #1592552
  * drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
    - LP: #1592552
  * USB: serial: cp210x: fix hardware flow-control disable
    - LP: #1592552
  * ext4: fix oops on corrupted filesystem
    - LP: #1592552
  * ext4: address UBSAN warning in mb_find_order_for_block()
    - LP: #1592552
  * ext4: silence UBSAN in ext4_mb_init()
    - LP: #1592552
  * arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
    - LP: #1592552
  * ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on
    exynos4210-trats
    - LP: #1592552
  * ath10k: fix kernel panic, move arvifs list head init before htt init
    - LP: #1592552
  * can: fix handling of unmodifiable configuration options
    - LP: #1592552
  * MIPS: Fix siginfo.h to use strict posix types
    - LP: #1592552
  * MIPS: Don't unwind to user mode with EVA
    - LP: #1592552
  * MIPS: Avoid using unwind_stack() with usermode
    - LP: #1592552
  * MIPS: Reserve nosave data for hibernation
    - LP: #1592552
  * MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
    - LP: #1592552
  * MIPS64: R6: R2 emulation bugfix
    - LP: #1592552
  * usb: host: xhci-rcar: Avoid long wait in xhci_reset()
    - LP: #1592552
  * mfd: omap-usb-tll: Fix scheduling while atomic BUG
    - LP: #1592552
  * USB: serial: io_edgeport: fix memory leaks in attach error path
    - LP: #1592552
  * USB: serial: io_edgeport: fix memory leaks in probe error path
    - LP: #1592552
  * USB: serial: keyspan: fix use-after-free in probe error path
    - LP: #1592552
  * USB: serial: mxuport: fix use-after-free in probe error path
    - LP: #1592552
  * USB: serial: quatech2: fix use-after-free in probe error path
    - LP: #1592552
  * crypto: caam - fix caam_jr_alloc() ret code
    - LP: #1592552
  * MIPS: KVM: Fix timer IRQ race when freezing timer
    - LP: #1592552
  * MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
    - LP: #1592552
  * gcov: disable tree-loop-im to reduce stack usage
    - LP: #1592552
  * irqchip/gic: Ensure ordering between read of INTACK and shared data
    - LP: #1592552
  * irqchip/gic-v3: Configure all interrupts as non-secure Group-1
    - LP: #1592552
  * arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
    - LP: #1592552
  * kbuild: move -Wunused-const-variable to W=1 warning level
    - LP: #1592552
  * rtlwifi: Fix logic error in enter/exit power-save mode
    - LP: #1592552
  * rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in
    rtl_pci_reset_trx_ring
    - LP: #1592552
  * sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded
    systems
    - LP: #1592552
  * powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
    - LP: #1592552
  * powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
    - LP: #1592552
  * MIPS: Handle highmem pages in __update_cache
    - LP: #1592552
  * MIPS: Sync icache & dcache in set_pte_at
    - LP: #1592552
  * SIGNAL: Move generic copy_siginfo() to signal.h
    - LP: #1592552
  * MIPS: Fix uapi include in exported asm/siginfo.h
    - LP: #1592552
  * MIPS: math-emu: Fix jalr emulation when rd == $0
    - LP: #1592552
  * MIPS: ptrace: Fix FP context restoration FCSR regression
    - LP: #1592552
  * MIPS: ptrace: Prevent writes to read-only FCSR bits
    - LP: #1592552
  * MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
    - LP: #1592552
  * MIPS: Force CPUs to lose FP context during mode switches
    - LP: #1592552
  * ring-buffer: Use long for nr_pages to avoid overflow failures
    - LP: #1592552
  * ring-buffer: Prevent overflow of size in ring_buffer_resize()
    - LP: #1592552
  * mmc: mmc: Fix partition switch timeout for some eMMCs
    - LP: #1592552
  * PCI: Disable all BAR sizing for devices with non-compliant BARs
    - LP: #1592552
  * MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
    - LP: #1592552
  * drm/i915/fbdev: Fix num_connector references in
    intel_fb_initial_config()
    - LP: #1592552
  * drm/fb_helper: Fix references to dev->mode_config.num_connector
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication via NTLMSSP
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication for the LANMAN
    authentication
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication for the NTLM(v1)
    authentication
    - LP: #1592552
  * fs/cifs: correctly to anonymous authentication for the NTLM(v2)
    authentication
    - LP: #1592552
  * remove directory incorrectly tries to set delete on close on non-empty
    directories
    - LP: #1592552
  * cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
    - LP: #1592552
  * xfs: xfs_iflush_cluster fails to abort on error
    - LP: #1592552
  * xfs: fix inode validity check in xfs_iflush_cluster
    - LP: #1592552
  * xfs: skip stale inodes in xfs_iflush_cluster
    - LP: #1592552
  * ASoC: ak4642: Enable cache usage to fix crashes on resume
    - LP: #1592552
  * cifs: Create dedicated keyring for spnego operations
    - LP: #1592552
  * ALSA: hda - Fix headphone noise on Dell XPS 13 9360
    - LP: #1592552
  * kvm: arm64: Fix EC field in inject_abt64
    - LP: #1592552
  * Input: uinput - handle compat ioctl for UI_SET_PHYS
    - LP: #1592552
  * PM / sleep: Handle failures in device_suspend_late() consistently
    - LP: #1592552
  * mm: use phys_addr_t for reserve_bootmem_region() arguments
    - LP: #1592552
  * locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
    - LP: #1592552
  * drm/i915: Don't leave old junk in ilk active watermarks on readout
    - LP: #1592552
  * mmc: longer timeout for long read time quirk
    - LP: #1592552
  * mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
    - LP: #1592552
  * mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
    - LP: #1592552
  * sunrpc: fix stripping of padded MIC tokens
    - LP: #1592552
  * wait/ptrace: assume __WALL if the child is traced
    - LP: #1592552
  * xen/x86: actually allocate legacy interrupts on PV guests
    - LP: #1592552
  * xen/events: Don't move disabled irqs
    - LP: #1592552
  * UBI: Fix static volume checks when Fastmap is used
    - LP: #1592552
  * drm/amdgpu: Fix hdmi deep color support.
    - LP: #1592552
  * dma-debug: avoid spinlock recursion when disabling dma-debug
    - LP: #1592552
  * dell-rbtn: Ignore ACPI notifications if device is suspended
    - LP: #1592552
  * Input: xpad - prevent spurious input from wired Xbox 360 controllers
    - LP: #1592552
  * Input: pwm-beeper - fix - scheduling while atomic
    - LP: #1592552
  * MIPS: lib: Mark intrinsics notrace
    - LP: #1592552
  * hpfs: fix remount failure when there are no options changed
    - LP: #1592552
  * affs: fix remount failure when there are no options changed
    - LP: #1592552
  * hpfs: implement the show_options method
    - LP: #1592552
  * regmap: cache: Fix typo in cache_bypass parameter description
    - LP: #1592552
  * ARM: dts: kirkwood: add kirkwood-ds112.dtb to Makefile
    - LP: #1592552
  * serial: doc: Un-document non-existing uart_write_console()
    - LP: #1592552
  * iio: buffer: add missing descriptions in iio_buffer_access_funcs
    - LP: #1592552
  * iommu/vt-d: Ratelimit fault handler
    - LP: #1592552
  * iommu/vt-d: Improve fault handler error messages
    - LP: #1592552
  * power: ipaq-micro-battery: freeing the wrong variable
    - LP: #1592552
  * ARM: OMAP2+: hwmod: fix _idle() hwmod state sanity check sequence
    - LP: #1592552
  * security: drop the unused hook skb_owned_by
    - LP: #1592552
  * mfd: lp8788-irq: Uninitialized variable in irq handler
    - LP: #1592552
  * am437x-vfpe: fix typo in vpfe_get_app_input_index
    - LP: #1592552
  * am437x-vpfe: fix an uninitialized variable bug
    - LP: #1592552
  * cx23885: uninitialized variable in cx23885_av_work_handler()
    - LP: #1592552
  * ipv6, token: allow for clearing the current device token
    - LP: #1592552
  * usb: gadget: f_fs: Fix EFAULT generation for async read operations
    - LP: #1592552
  * EDAC: Increment correct counter in edac_inc_ue_error()
    - LP: #1592552
  * PCI: Supply CPU physical address (not bus address) to
    iomem_is_exclusive()
    - LP: #1592552
  * alpha/PCI: Call iomem_is_exclusive() for IORESOURCE_MEM, but not
    IORESOURCE_IO
    - LP: #1592552
  * ARM: debug: remove extraneous DEBUG_HI3716_UART option
    - LP: #1592552
  * cxl: Fix DAR check & use REGION_ID instead of opencoding
    - LP: #1592552
  * taskstats: fix nl parsing in accounting/getdelays.c
    - LP: #1592552
  * char: Drop bogus dependency of DEVPORT on !M68K
    - LP: #1592552
  * driver-core: use 'dev' argument in dev_dbg_ratelimited stub
    - LP: #1592552
  * metag: Fix atomic_*_return inline asm constraints
    - LP: #1592552
  * tty: vt, return error when con_startup fails
    - LP: #1592552
  * cpufreq: Fix GOV_LIMITS handling for the userspace governor
    - LP: #1592552
  * ACPI / sysfs: fix error code in get_status()
    - LP: #1592552
  * clk: qcom: msm8916: Fix crypto clock flags
    - LP: #1592552
  * MIPS: BMIPS: Fix PRID_IMP_BMIPS5000 masking for BMIPS5200
    - LP: #1592552
  * NFS: Fix an LOCK/OPEN race when unlinking an open file
    - LP: #1592552
  * ata: sata_dwc_460ex: remove incorrect locking
    - LP: #1592552
  * s390/vmem: fix identity mapping
    - LP: #1592552
  * perf tools: Fix perf regs mask generation
    - LP: #1592552
  * powerpc/sstep: Fix sstep.c compile on powerpcspe
    - LP: #1592552
  * MIPS: BMIPS: BMIPS5000 has I cache filing from D cache
    - LP: #1592552
  * MIPS: BMIPS: Clear MIPS_CACHE_ALIASES earlier
    - LP: #1592552
  * MIPS: BMIPS: local_r4k___flush_cache_all needs to blast S-cache
    - LP: #1592552
  * MIPS: BMIPS: Pretty print BMIPS5200 processor name
    - LP: #1592552
  * MIPS: math-emu: Fix BC1{EQ,NE}Z emulation
    - LP: #1592552
  * MIPS: Fix BC1{EQ,NE}Z return offset calculation
    - LP: #1592552
  * MIPS: BMIPS: Adjust mips-hpt-frequency for BCM7435
    - LP: #1592552
  * IB/srp: Print "ib_srp: " prefix once
    - LP: #1592552
  * IB/IWPM: Fix a potential skb leak
    - LP: #1592552
  * i40e: fix an uninitialized variable bug
    - LP: #1592552
  * blk-mq: fix undefined behaviour in order_to_size()
    - LP: #1592552
  * x86/PCI: Mark Broadwell-EP Home Agent 1 as having non-compliant BARs
    - LP: #1592552
  * netlink: Fix dump skb leak/double free
    - LP: #1592552
  * MIPS: ath79: fix regression in PCI window initialization
    - LP: #1592552
  * sched/preempt: Fix preempt_count manipulations
    - LP: #1592552
  * tipc: fix nametable publication field in nl compat
    - LP: #1592552
  * sunrpc: Update RPCBIND_MAXNETIDLEN
    - LP: #1592552
  * batman-adv: fix skb deref after free
    - LP: #1592552
  * net: ehea: avoid null pointer dereference
    - LP: #1592552
  * tuntap: correctly wake up process during uninit
    - LP: #1592552
  * uapi glibc compat: fix compilation when !__USE_MISC in glibc
    - LP: #1592552
  * drivers/hwspinlock: use correct radix tree API
    - LP: #1592552
  * RDMA/cxgb3: device driver frees DMA memory with different size
    - LP: #1592552
  * Linux 4.2.8-ckt12
    - LP: #1592552
  * HID: core: prevent out-of-bound readings
    - LP: #1579190
  * mm: migrate dirty page without clear_page_dirty_for_io etc
    - LP: #1581865
    - CVE-2016-3070

 -- Benjamin M Romer <benjamin.romer@canonical.com>  Tue, 28 Jun 2016 14:57:26 -0400

linux (4.2.0-41.48) wily; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1595914

  [ Upstream Kernel Changes ]

  * netfilter: x_tables: validate e->target_offset early
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: make sure e->next_offset covers remaining blob
    size
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: fix unconditional helper
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: don't move to non-existent next rule
    - LP: #1595350
  * netfilter: x_tables: validate targets of jumps
    - LP: #1595350
  * netfilter: x_tables: add and use xt_check_entry_offsets
    - LP: #1595350
  * netfilter: x_tables: kill check_entry helper
    - LP: #1595350
  * netfilter: x_tables: assert minimum target size
    - LP: #1595350
  * netfilter: x_tables: add compat version of xt_check_entry_offsets
    - LP: #1595350
  * netfilter: x_tables: check standard target size too
    - LP: #1595350
  * netfilter: x_tables: check for bogus target offset
    - LP: #1595350
  * netfilter: x_tables: validate all offsets and sizes in a rule
    - LP: #1595350
  * netfilter: x_tables: don't reject valid target size on some
    architectures
    - LP: #1595350
  * netfilter: arp_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: ip_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: ip6_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
    - LP: #1595350
  * netfilter: x_tables: do compat validation via translate_table
    - LP: #1595350
  * netfilter: x_tables: introduce and use xt_copy_counters_from_user
    - LP: #1595350

 -- Luis Henriques <luis.henriques@canonical.com>  Fri, 24 Jun 2016 11:46:57 +0100

linux (4.2.0-40.47) wily; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1595725

  [ Serge Hallyn ]

  * SAUCE: add a sysctl to disable unprivileged user namespace unsharing
    - LP: #1555338, #1595350

 -- Kamal Mostafa <kamal@canonical.com>  Thu, 23 Jun 2016 14:32:47 -0700

linux (4.2.0-39.46) wily; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1591301

  [ J. R. Okajima ]

  * SAUCE: AUFS: mm/mmap: fix oopsing on remap_file_pages aufs mmap:
    bugfix, mainly for linux-4.5-rc5, remap_file_pages(2) emulation
    - LP: #1558120

  [ Kamal Mostafa ]

  * [debian] getabis: Only git add $abidir if running in local repo
    - LP: #1584890
  * [debian] getabis: Fix inconsistent compiler versions check
    - LP: #1584890

  [ Tim Gardner ]

  * Revert "SAUCE: mm/mmap: fix oopsing on remap_file_pages"
    - LP: #1558120
  * [Config] Remove arc4 from nic-modules
    - LP: #1582991

  [ Upstream Kernel Changes ]

  * Revert "usb: hub: do not clear BOS field during reset device"
    - LP: #1582864
  * hpsa: move lockup_detected attribute to host attr
    - LP: #1581169
  * ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
    - LP: #1580379
    - CVE-2016-4569
  * ALSA: timer: Fix leak in events via snd_timer_user_ccallback
    - LP: #1581866
    - CVE-2016-4578
  * ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
    - LP: #1581866
    - CVE-2016-4578
  * net: fix a kernel infoleak in x25 module
    - LP: #1585366
    - CVE-2016-4580
  * get_rock_ridge_filename(): handle malformed NM entries
    - LP: #1583962
    - CVE-2016-4913
  * tipc: check nl sock before parsing nested attributes
    - LP: #1585365
    - CVE-2016-4951
  * netfilter: Set /proc/net entries owner to root in namespace
    - LP: #1584953
  * USB: usbfs: fix potential infoleak in devio
    - LP: #1578493
    - CVE-2016-4482
  * USB: leave LPM alone if possible when binding/unbinding interface
    drivers
    - LP: #1577024
  * [4.2-stable only] fix backport "IB/security: restrict use of the
    write() interface"
    - LP: #1586447
  * regulator: s2mps11: Fix invalid selector mask and voltages for buck9
    - LP: #1586447
  * regmap: spmi: Fix regmap_spmi_ext_read in multi-byte case
    - LP: #1586447
  * ALSA: usb-audio: Quirk for yet another Phoenix Audio devices (v2)
    - LP: #1586447
  * atomic_open(): fix the handling of create_error
    - LP: #1586447
  * drm/i915/bdw: Add missing delay during L3 SQC credit programming
    - LP: #1586447
  * crypto: hash - Fix page length clamping in hash walk
    - LP: #1586447
  * drm/radeon: fix DP link training issue with second 4K monitor
    - LP: #1586447
  * drm/radeon: fix PLL sharing on DCE6.1 (v2)
    - LP: #1586447
  * ALSA: hda - Fix white noise on Asus UX501VW headset
    - LP: #1586447
  * Input: max8997-haptic - fix NULL pointer dereference
    - LP: #1586447
  * drm/i915: Bail out of pipe config compute loop on LPT
    - LP: #1586447
  * ALSA: hda - Fix broken reconfig
    - LP: #1586447
  * ALSA: hda - Fix subwoofer pin on ASUS N751 and N551
    - LP: #1586447
  * vfs: add vfs_select_inode() helper
    - LP: #1586447
  * vfs: rename: check backing inode being equal
    - LP: #1586447
  * ALSA: usb-audio: Yet another Phoneix Audio device quirk
    - LP: #1586447
  * perf/x86: Fix undefined shift on 32-bit kernels
    - LP: #1586447
  * perf/x86/intel/pt: Generate PMI in the STOP region as well
    - LP: #1586447
  * perf/core: Disable the event on a truncated AUX record
    - LP: #1586447
  * tools lib traceevent: Do not reassign parg after collapse_tree()
    - LP: #1586447
  * workqueue: fix rebind bound workers warning
    - LP: #1586447
  * ocfs2: fix posix_acl_create deadlock
    - LP: #1586447
  * nf_conntrack: avoid kernel pointer value leak in slab name
    - LP: #1586447
  * macvtap: segmented packet is consumed
    - LP: #1586447
  * regulator: axp20x: Fix axp22x ldo_io voltage ranges
    - LP: #1586447
  * arm64: bpf: jit JMP_JSET_{X,K}
    - LP: #1586447
  * bridge: fix igmp / mld query parsing
    - LP: #1586447
  * net/mlx4_en: Fix endianness bug in IPV6 csum calculation
    - LP: #1586447
  * net: fec: only clear a queue's work bit if the queue was emptied
    - LP: #1586447
  * tcp: refresh skb timestamp at retransmit time
    - LP: #1586447
  * net/route: enforce hoplimit max value
    - LP: #1586447
  * decnet: Do not build routes to devices without decnet private data.
    - LP: #1586447
  * route: do not cache fib route info on local routes with oif
    - LP: #1586447
  * net: use skb_postpush_rcsum instead of own implementations
    - LP: #1586447
  * vlan: pull on __vlan_insert_tag error path and fix csum correction
    - LP: #1586447
  * ipv4/fib: don't warn when primary address is missing if in_dev is dead
    - LP: #1586447
  * bpf: fix double-fdput in replace_map_fd_with_map_ptr()
    - LP: #1586447
  * net_sched: introduce qdisc_replace() helper
    - LP: #1586447
  * net_sched: update hierarchical backlog too
    - LP: #1586447
  * sch_htb: update backlog as well
    - LP: #1586447
  * sch_dsmark: update backlog as well
    - LP: #1586447
  * netem: Segment GSO packets on enqueue
    - LP: #1586447
  * VSOCK: do not disconnect socket when peer has shutdown SEND only
    - LP: #1586447
  * net: bridge: fix old ioctl unlocked net device walk
    - LP: #1586447
  * cdc_mbim: apply "NDP to end" quirk to all Huawei devices
    - LP: #1586447
  * soreuseport: fix ordering for mixed v4/v6 sockets
    - LP: #1586447
  * uapi glibc compat: fix compile errors when glibc net/if.h included
    before linux/if.h
    - LP: #1586447
  * Linux 4.2.8-ckt11
    - LP: #1586447
  * usb: core: hub: hub_port_init lock controller instead of bus
    - LP: #1437492

 -- Kamal Mostafa <kamal@canonical.com>  Fri, 10 Jun 2016 10:54:42 -0700

linux (4.2.0-38.45) wily; urgency=low

  [ Kamal Mostafa ]

  * CVE-2016-1583 (LP: #1588871)
    - ecryptfs: fix handling of directory opening
    - SAUCE: proc: prevent stacking filesystems on top
    - SAUCE: ecryptfs: forbid opening files without mmap handler
    - SAUCE: sched: panic on corrupted stack end

 -- Andy Whitcroft <apw@canonical.com>  Wed, 08 Jun 2016 22:10:39 +0100

linux (4.2.0-37.43) wily; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1582765

  [ Colin Ian King ]

  * SAUCE: mm/mmap: fix oopsing on remap_file_pages
    - LP: #1558120

  [ Kamal Mostafa ]

  * [Config] Drop ozwpan from the ABI

  [ Luis Henriques ]

  * [Config] CONFIG_USB_WPAN_HCD=n
    - LP: #1463740
    - CVE-2015-4004

  [ Prarit Bhargava ]

  * SAUCE: (no-up) ACPICA: Dispatcher: Update thread ID for recursive
    method calls
    - LP: #1577898

  [ Tim Gardner ]

  * [Config] CONFIG_AUFS_XATTR=y
    - LP: #1557776

  [ Upstream Kernel Changes ]

  * usbnet: cleanup after bind() in probe()
    - LP: #1567191
    - CVE-2016-3951
  * USB: usbip: fix potential out-of-bounds write
    - LP: #1572666
    - CVE-2016-3955
  * x86/mm/32: Enable full randomization on i386 and X86_32
    - LP: #1568523
    - CVE-2016-3672
  * net/mlx4_core: Implement pci_resume callback
    - LP: #1574697
  * net/mlx4_core: Avoid repeated calls to pci enable/disable
    - LP: #1574697
  * Input: gtco - fix crash on detecting device without endpoints
    - LP: #1575706
    - CVE-2016-2187
  * tunnel: Clear IPCB(skb)->opt before dst_link_failure called
    - LP: #1576829
  * net: jme: fix suspend/resume on JMC260
    - LP: #1576829
  * net: qca_spi: clear IFF_TX_SKB_SHARING
    - LP: #1576829
  * sctp: lack the check for ports in sctp_v6_cmp_addr
    - LP: #1576829
  * qmi_wwan: add Sierra Wireless EM74xx device ID
    - LP: #1576829
  * cdc_ncm: toggle altsetting to force reset before setup
    - LP: #1576829
  * udp6: fix UDP/IPv6 encap resubmit path
    - LP: #1576829
  * net: validate variable length ll headers
    - LP: #1576829
  * ax25: add link layer header validation function
    - LP: #1576829
  * packet: validate variable length ll headers
    - LP: #1576829
  * sh_eth: fix NULL pointer dereference in sh_eth_ring_format()
    - LP: #1576829
  * macvtap: always pass ethernet header in linear
    - LP: #1576829
  * farsync: fix off-by-one bug in fst_add_one
    - LP: #1576829
  * qlge: Fix receive packets drop.
    - LP: #1576829
  * bonding: fix bond_get_stats()
    - LP: #1576829
  * xfrm: Fix crash observed during device unregistration and decryption
    - LP: #1576829
  * qmi_wwan: add "D-Link DWM-221 B1" device id
    - LP: #1576829
  * rtnl: fix msg size calculation in if_nlmsg_size()
    - LP: #1576829
  * tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter
    - LP: #1576829
  * ipv4: l2tp: fix a potential issue in l2tp_ip_recv
    - LP: #1576829
  * ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
    - LP: #1576829
  * ipv6: Count in extension headers in skb->network_header
    - LP: #1576829
  * iwlwifi: pcie: lower the debug level for RSA semaphore access
    - LP: #1576829
  * HID: usbhid: fix inconsistent reset/resume/reset-resume behavior
    - LP: #1576829
  * ARM: OMAP2+: hwmod: Fix updating of sysconfig register
    - LP: #1576829
  * ARM: mvebu: Correct unit address for linksys
    - LP: #1576829
  * drm/qxl: fix cursor position with non-zero hotspot
    - LP: #1576829
  * s390/pci: add extra padding to function measurement block
    - LP: #1576829
  * ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320
    - LP: #1576829
  * dmaengine: hsu: correct use of channel status register
    - LP: #1576829
  * ALSA: usb-audio: Add a quirk for Plantronics BT300
    - LP: #1576829
  * assoc_array: don't call compare_object() on a node
    - LP: #1576829
  * kvm: x86: do not leak guest xcr0 into host interrupt handlers
    - LP: #1576829
  * netlink: don't send NETLINK_URELEASE for unbound sockets
    - LP: #1576829
  * ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T460s
    - LP: #1576829
  * ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
    - LP: #1576829
  * nl80211: check netlink protocol in socket release notification
    - LP: #1576829
  * debugfs: Make automount point inodes permanently empty
    - LP: #1576829
  * ALSA: hda - Fix regression of monitor_present flag in eld proc file
    - LP: #1576829
  * dmaengine: dw: fix master selection
    - LP: #1576829
  * lib: lz4: fixed zram with lz4 on big endian machines
    - LP: #1576829
  * usb: xhci: applying XHCI_PME_STUCK_QUIRK to Intel BXT B0 host
    - LP: #1576829
  * xhci: resume USB 3 roothub first
    - LP: #1576829
  * usb: host: xhci: add a new quirk XHCI_NO_64BIT_SUPPORT
    - LP: #1576829
  * usb: xhci: fix wild pointers in xhci_mem_cleanup
    - LP: #1576829
  * xhci: fix 10 second timeout on removal of PCI hotpluggable xhci
    controllers
    - LP: #1576829
  * USB: uas: Add a new NO_REPORT_LUNS quirk
    - LP: #1576829
  * usb: hcd: out of bounds access in for_each_companion
    - LP: #1576829
  * drm/radeon: fix initial connector audio value
    - LP: #1576829
  * drm/amdgpu: when suspending, if uvd/vce was running. need to cancel
    delay work.
    - LP: #1576829
  * dm cache metadata: fix READ_LOCK macros and cleanup WRITE_LOCK macros
    - LP: #1576829
  * pinctrl: mediatek: correct debounce time unit in mtk_gpio_set_debounce
    - LP: #1576829
  * crypto: sha1-mb - use corrcet pointer while completing jobs
    - LP: #1576829
  * crypto: ccp - Prevent information leakage on export
    - LP: #1576829
  * dm cache metadata: fix cmd_read_lock() acquiring write lock
    - LP: #1576829
  * video: ARM CLCD: runtime check for Versatile
    - LP: #1576829
  * drm/i915/userptr: Hold mmref whilst calling get-user-pages
    - LP: #1576829
  * drm/i915: Use fw_domains_put_with_fifo() on HSW
    - LP: #1576829
  * ALSA: hda/realtek - Add ALC3234 headset mode for Optiplex 9020m
    - LP: #1576829
  * powerpc: scan_features() updates incorrect bits for REAL_LE
    - LP: #1576829
  * powerpc: Update cpu_user_features2 in scan_features()
    - LP: #1576829
  * powerpc: Update TM user feature bits in scan_features()
    - LP: #1576829
  * drm/radeon: add a quirk for a XFX R9 270X
    - LP: #1576829
  * usb: gadget: f_fs: Fix use-after-free
    - LP: #1576829
  * futex: Handle unlock_pi race gracefully
    - LP: #1576829
  * futex: Acknowledge a new waiter in counter before plist
    - LP: #1576829
  * asm-generic/futex: Re-enable preemption in
    futex_atomic_cmpxchg_inatomic()
    - LP: #1576829
  * ALSA: pcxhr: Fix missing mutex unlock
    - LP: #1576829
  * drm/dp/mst: Validate port in drm_dp_payload_send_msg()
    - LP: #1576829
  * drm/amdgpu: use defines for CRTCs and AMFT blocks
    - LP: #1576829
  * drm/amdgpu: bump the afmt limit for CZ, ST, Polaris
    - LP: #1576829
  * drm/radeon: forbid mapping of userptr bo through radeon device file
    - LP: #1576829
  * amdgpu/uvd: add uvd fw version for amdgpu
    - LP: #1576829
  * drm: Loongson-3 doesn't fully support wc memory
    - LP: #1576829
  * x86/mm/xen: Suppress hugetlbfs in PV guests
    - LP: #1576829
  * x86 EDAC, sb_edac.c: Repair damage introduced when "fixing" channel
    address
    - LP: #1576829
  * x86 EDAC, sb_edac.c: Take account of channel hashing when needed
    - LP: #1576829
  * s390/scm_blk: fix deadlock for requests != REQ_TYPE_FS
    - LP: #1576829
  * packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
    - LP: #1576829
  * net: sched: do not requeue a NULL skb
    - LP: #1576829
  * bpf/verifier: reject invalid LD_ABS | BPF_DW instruction
    - LP: #1576829
  * pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than
    ffs
    - LP: #1576829
  * s390/spinlock: avoid yield to non existent cpu
    - LP: #1576829
  * net: bcmgenet: device stats are unsigned long
    - LP: #1576829
  * Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay
    - LP: #1576829
  * net: ethernet: davinci_emac: Fix Unbalanced pm_runtime_enable
    - LP: #1576829
  * net: ethernet: davinci_emac: Fix platform_data overwrite
    - LP: #1576829
  * atl2: Disable unimplemented scatter/gather feature
    - LP: #1576829
  * openvswitch: use flow protocol when recalculating ipv6 checksums
    - LP: #1576829
  * Linux 4.2.8-ckt9
    - LP: #1576829
  * PNP: Add Broadwell to Intel MCH size workaround
    - LP: #1577748
  * PNP: Add Haswell-ULT to Intel MCH size workaround
    - LP: #1577748
  * device core: add BUS_NOTIFY_DRIVER_NOT_BOUND notification
    - LP: #1549354
  * ACPI / LPSS: allow to use specific PM domain during ->probe()
    - LP: #1549354
  * fs/pnode.c: treat zero mnt_group_id-s as unequal
    - LP: #1572316
  * propogate_mnt: Handle the first propogated copy being a slave
    - LP: #1572316
  * drm: Balance error path for GEM handle allocation
    - LP: #1579610
  * net: fix infoleak in llc
    - LP: #1578496
    - CVE-2016-4485
  * net: fix infoleak in rtnetlink
    - LP: #1578497
    - CVE-2016-4486
  * ASoC: rt5640: Correct the digital interface data select
    - LP: #1582758
  * ASoC: dapm: Make sure we have a card when displaying component widgets
    - LP: #1582758
  * ath9k: ar5008_hw_cmn_spur_mitigate: add missing mask_m & mask_p
    initialisation
    - LP: #1582758
  * iio: ak8975: Fix NULL pointer exception on early interrupt
    - LP: #1582758
  * iio: ak8975: fix maybe-uninitialized warning
    - LP: #1582758
  * i2c: cpm: Fix build break due to incompatible pointer types
    - LP: #1582758
  * i2c: exynos5: Fix possible ABBA deadlock by keeping I2C clock prepared
    - LP: #1582758
  * efi: Fix out-of-bounds read in variable_matches()
    - LP: #1582758
  * USB: serial: cp210x: add ID for Link ECU
    - LP: #1582758
  * USB: serial: cp210x: add Straizona Focusers device ids
    - LP: #1582758
  * [media] v4l2-dv-timings.h: fix polarity for 4k formats
    - LP: #1582758
  * ALSA: hda - Add dock support for ThinkPad X260
    - LP: #1582758
  * workqueue: fix ghost PENDING flag while doing MQ IO
    - LP: #1582758
  * drm/dp/mst: Get validated port ref in drm_dp_update_payload_part1()
    - LP: #1582758
  * drm/virtio: send vblank event after crtc updates
    - LP: #1582758
  * cxl: Keep IRQ mappings on context teardown
    - LP: #1582758
  * drm/i915: Fix system resume if PCI device remained enabled
    - LP: #1582758
  * drm/i915/ddi: Fix eDP VDD handling during booting and suspend/resume
    - LP: #1582758
  * drm/i915: Fix eDP low vswing for Broadwell
    - LP: #1582758
  * drm/i915: Make RPS EI/thresholds multiple of 25 on SNB-BDW
    - LP: #1582758
  * mac80211: fix statistics leak if dev_alloc_name() fails
    - LP: #1582758
  * drm/radeon: fix vertical bars appear on monitor (v2)
    - LP: #1582758
  * ARM: SoCFPGA: Fix secondary CPU startup in thumb2 kernel
    - LP: #1582758
  * x86/irq: Fix a race in x86_vector_free_irqs()
    - LP: #1582758
  * x86/apic: Handle zero vector gracefully in clear_vector_irq()
    - LP: #1582758
  * ARM: cpuidle: Pass on arm_cpuidle_suspend()'s return value
    - LP: #1582758
  * IB/security: Restrict use of the write() interface
    - LP: #1582758
  * mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check
    - LP: #1582758
  * mm: vmscan: reclaim highmem zone if buffer_heads is over limit
    - LP: #1582758
  * EDAC: i7core, sb_edac: Don't return NOTIFY_BAD from mce_decoder
    callback
    - LP: #1582758
  * powerpc: Fix bad inline asm constraint in create_zero_mask()
    - LP: #1582758
  * Minimal fix-up of bad hashing behavior of hash_64()
    - LP: #1582758
  * drm/amdgpu: set metadata pointer to NULL after freeing.
    - LP: #1582758
  * tracing: Don't display trigger file for events that can't be enabled
    - LP: #1582758
  * drm/radeon: make sure vertical front porch is at least 1
    - LP: #1582758
  * drm/amdgpu: make sure vertical front porch is at least 1
    - LP: #1582758
  * MAINTAINERS: Remove asterisk from EFI directory names
    - LP: #1582758
  * ARC: Add missing io barriers to io{read,write}{16,32}be()
    - LP: #1582758
  * x86/sysfb_efi: Fix valid BAR address range check
    - LP: #1582758
  * writeback: Fix performance regression in wb_over_bg_thresh()
    - LP: #1582758
  * mm, cma: prevent nr_isolated_* counters from going negative
    - LP: #1582758
  * x86/tsc: Read all ratio bits from MSR_PLATFORM_INFO
    - LP: #1582758
  * parisc: fix a bug when syscall number of tracee is __NR_Linux_syscalls
    - LP: #1582758
  * jme: Do not enable NIC WoL functions on S0
    - LP: #1582758
  * jme: Fix device PM wakeup API usage
    - LP: #1582758
  * net/mlx4_en: fix spurious timestamping callbacks
    - LP: #1582758
  * batman-adv: Reduce refcnt of removed router when updating route
    - LP: #1582758
  * batman-adv: Check skb size before using encapsulated ETH+VLAN header
    - LP: #1582758
  * batman-adv: Fix broadcast/ogm queue limit on a removed interface
    - LP: #1582758
  * mm: update min_free_kbytes from khugepaged after core initialization
    - LP: #1582758
  * ARM: EXYNOS: Properly skip unitialized parent clock in power domain on
    - LP: #1582758
  * net/mlx5e: Fix MLX5E_100BASE_T define
    - LP: #1582758
  * cxgbi: fix uninitialized flowi6
    - LP: #1582758
  * RDMA/iw_cxgb4: Fix bar2 virt addr calculation for T4 chips
    - LP: #1582758
  * Linux 4.2.8-ckt10
    - LP: #1582758

 -- Kamal Mostafa <kamal@canonical.com>  Tue, 17 May 2016 07:52:57 -0700

linux (4.2.0-36.42) wily; urgency=low

  [ Kamal Mostafa ]

  * CVE-2016-3713 (LP: #1581201)
    - SAUCE: KVM: MTRR: remove MSR 0x2f8

  * CVE-2016-0758 (LP: #1581202)
    - SAUCE: KEYS: Fix ASN.1 indefinite length object parsing

 -- Kamal Mostafa <kamal@canonical.com>  Thu, 12 May 2016 14:26:43 -0700

linux (4.2.0-36.41) wily; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1571667

  [ Benjamin Tissoires ]

  * SAUCE: Input: synaptics - handle spurious release of trackstick
    buttons, again
    - LP: #1553811

  [ dann frazier ]

  * Revert "SAUCE: arm64, numa, dt: adding dt based numa support using dt
    node property arm, associativity"
    - LP: #1558828
  * Revert "SAUCE: Documentation: arm64/arm: dt bindings for numa."
    - LP: #1558828
  * Revert "SAUCE: arm64, numa: adding numa support for arm64 platforms."
    - LP: #1558828
  * Revert "[Config] Enable NUMA on ARM64"
    - LP: #1558828

  [ K. Y. Srinivasan ]

  * SAUCE: (noup): Drivers: hv: vmbus: Fix a bug in
    hv_need_to_signal_on_read()
    - LP: #1556264

  [ Kamal Mostafa ]

  * [debian] BugLink: close LP: bugs only for Launchpad urls
  * [Config] updateconfigs after v4.2.8-ckt7

  [ Upstream Kernel Changes ]

  * Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
    - LP: #1561677
  * tipc: fix connection abort during subscription cancel
    - LP: #1561677
  * tipc: fix nullptr crash during subscription cancel
    - LP: #1561677
  * s390/mm: four page table levels vs. fork
    - LP: #1561677
  * Input: aiptek - fix crash on detecting device without endpoints
    - LP: #1561677
  * wext: fix message delay/ordering
    - LP: #1561677
  * cfg80211/wext: fix message ordering
    - LP: #1561677
  * mac80211: fix use of uninitialised values in RX aggregation
    - LP: #1561677
  * mac80211: minstrel: Change expected throughput unit back to Kbps
    - LP: #1561677
  * libata: fix HDIO_GET_32BIT ioctl
    - LP: #1561677
  * iwlwifi: mvm: inc pending frames counter also when txing non-sta
    - LP: #1561677
  * [media] adv7604: fix tx 5v detect regression
    - LP: #1561677
  * ahci: add new Intel device IDs
    - LP: #1561677
  * ahci: Order SATA device IDs for codename Lewisburg
    - LP: #1561677
  * Adding Intel Lewisburg device IDs for SATA
    - LP: #1561677
  * ASoC: samsung: Use IRQ safe spin lock calls
    - LP: #1561677
  * mac80211: minstrel_ht: set default tx aggregation timeout to 0
    - LP: #1561677
  * usb: chipidea: otg: change workqueue ci_otg as freezable
    - LP: #1561677
  * jffs2: Fix page lock / f->sem deadlock
    - LP: #1561677
  * Fix directory hardlinks from deleted directories
    - LP: #1561677
  * iommu/amd: Fix boot warning when device 00:00.0 is not iommu covered
    - LP: #1561677
  * iommu/amd: Apply workaround for ATS write permission check
    - LP: #1561677
  * libata: Align ata_device's id on a cacheline
    - LP: #1561677
  * can: gs_usb: fixed disconnect bug by removing erroneous use of kfree()
    - LP: #1561677
  * fbcon: set a default value to blink interval
    - LP: #1561677
  * KVM: x86: fix root cause for missed hardware breakpoints
    - LP: #1561677
  * arm64: vmemmap: use virtual projection of linear region
    - LP: #1561677
  * vfio: fix ioctl error handling
    - LP: #1561677
  * ALSA: ctl: Fix ioctls for X32 ABI
    - LP: #1561677
  * ALSA: pcm: Fix ioctls for X32 ABI
    - LP: #1561677
  * ALSA: rawmidi: Fix ioctls X32 ABI
    - LP: #1561677
  * ALSA: timer: Fix broken compat timer user status ioctl
    - LP: #1561677
  * ALSA: timer: Fix ioctls for X32 ABI
    - LP: #1561677
  * cifs: fix out-of-bounds access in lease parsing
    - LP: #1561677
  * CIFS: Fix SMB2+ interim response processing for read requests
    - LP: #1561677
  * Fix cifs_uniqueid_to_ino_t() function for s390x
    - LP: #1561677
  * arm/arm64: KVM: Fix ioctl error handling
    - LP: #1561677
  * MIPS: kvm: Fix ioctl error handling.
    - LP: #1561677
  * ALSA: hdspm: Fix wrong boolean ctl value accesses
    - LP: #1561677
  * ALSA: hdspm: Fix zero-division
    - LP: #1561677
  * ALSA: hdsp: Fix wrong boolean ctl value accesses
    - LP: #1561677
  * use ->d_seq to get coherency between ->d_inode and ->d_flags
    - LP: #1561677
  * USB: qcserial: add Dell Wireless 5809e Gobi 4G HSPA+ (rev3)
    - LP: #1561677
  * USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
    - LP: #1561677
  * ASoC: dapm: Fix ctl value accesses in a wrong type
    - LP: #1561677
  * ASoC: wm8958: Fix enum ctl accesses in a wrong type
    - LP: #1561677
  * ASoC: wm8994: Fix enum ctl accesses in a wrong type
    - LP: #1561677
  * ASoC: wm_adsp: Fix enum ctl accesses in a wrong type
    - LP: #1561677
  * USB: serial: option: add support for Telit LE922 PID 0x1045
    - LP: #1561677
  * USB: serial: option: add support for Quectel UC20
    - LP: #1561677
  * ALSA: usb-audio: Add a quirk for Plantronics DA45
    - LP: #1561677
  * mac80211: check PN correctly for GCMP-encrypted fragmented MPDUs
    - LP: #1561677
  * mac80211: Fix Public Action frame RX in AP mode
    - LP: #1561677
  * i2c: brcmstb: allocate correct amount of memory for regmap
    - LP: #1561677
  * ALSA: seq: oss: Don't drain at closing a client
    - LP: #1561677
  * parisc: Fix ptrace syscall number and return value modification
    - LP: #1561677
  * drm/ast: Fix incorrect register check for DRAM width
    - LP: #1561677
  * USB: qcserial: add Sierra Wireless EM74xx device ID
    - LP: #1561677
  * drm/amdgpu/pm: update current crtc info after setting the powerstate
    - LP: #1561677
  * drm/radeon/pm: update current crtc info after setting the powerstate
    - LP: #1561677
  * drm/amdgpu: return from atombios_dp_get_dpcd only when error
    - LP: #1561677
  * PM / sleep / x86: Fix crash on graph trace through x86 suspend
    - LP: #1561677
  * ALSA: hda - Fix mic issues on Acer Aspire E1-472
    - LP: #1561677
  * ovl: fix working on distributed fs as lower layer
    - LP: #1561677
  * ovl: fix getcwd() failure after unsuccessful rmdir
    - LP: #1561677
  * ovl: ignore lower entries when checking purity of non-directory entries
    - LP: #1561677
  * MIPS: traps: Fix SIGFPE information leak from `do_ov' and
    `do_trap_or_bp'
    - LP: #1561677
  * ubi: Fix out of bounds write in volume update code
    - LP: #1561677
  * target: Drop incorrect ABORT_TASK put for completed commands
    - LP: #1561677
  * ARM: OMAP2+: hwmod: Introduce ti,no-idle dt property
    - LP: #1561677
  * ARM: dts: dra7: do not gate cpsw clock due to errata i877
    - LP: #1561677
  * PCI: Allow a NULL "parent" pointer in pci_bus_assign_domain_nr()
    - LP: #1561677
  * KVM: PPC: Book3S HV: Sanitize special-purpose register values on guest
    exit
    - LP: #1561677
  * ncpfs: fix a braino in OOM handling in ncp_fill_cache()
    - LP: #1561677
  * jffs2: reduce the breakage on recovery from halfway failed rename()
    - LP: #1561677
  * KVM: VMX: disable PEBS before a guest entry
    - LP: #1561677
  * arm64: account for sparsemem section alignment when choosing vmemmap
    offset
    - LP: #1561677
  * tracing: Fix check for cpu online when event is disabled
    - LP: #1561677
  * KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
    - LP: #1561677
  * dmaengine: at_xdmac: fix residue computation
    - LP: #1561677
  * MIPS: Fix build error when SMP is used without GIC
    - LP: #1561677
  * IB/core: Use GRH when the path hop-limit > 0
    - LP: #1561677
  * dmaengine: pxa_dma: fix cyclic transfers
    - LP: #1561677
  * MIPS: smp.c: Fix uninitialised temp_foreign_map
    - LP: #1561677
  * tcp: fix tcpi_segs_in after connection establishment
    - LP: #1561677
  * be2net: Don't leak iomapped memory on removal.
    - LP: #1561677
  * tcp: convert cached rtt from usec to jiffies when feeding initial rto
    - LP: #1561677
  * ext4: iterate over buffer heads correctly in move_extent_per_page()
    - LP: #1561677
  * ppp: release rtnl mutex when interface creation fails
    - LP: #1561677
  * net/mlx4_core: Allow resetting VF admin mac to zero
    - LP: #1561677
  * ipv6: re-enable fragment header matching in ipv6_find_hdr
    - LP: #1561677
  * net/mlx5e: Remove wrong poll CQ optimization
    - LP: #1561677
  * cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind
    - LP: #1561677
  * net: qca_spi: Don't clear IFF_BROADCAST
    - LP: #1561677
  * net: moxa: fix an error code
    - LP: #1561677
  * mld, igmp: Fix reserved tailroom calculation
    - LP: #1561677
  * Linux 4.2.8-ckt6
    - LP: #1561677
  * (upstream) net/mlx5e: Avoid NULL pointer access in case of
    configuration failure
    - LP: #1528466
  * PCI: Disable IO/MEM decoding for devices with non-compliant BARs
    - LP: #1559929
  * x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant
    BARs
    - LP: #1559929
  * fuse: do not use iocb after it may have been freed
    - LP: #1505948
  * fuse: Add reference counting for fuse_io_priv
    - LP: #1505948
  * intel_idle: prevent SKL-H boot failure when C8+C9+C10 enabled
    - LP: #1559918
  * crypto: skcipher - Add crypto_skcipher_has_setkey
    - LP: #1556562
  * crypto: algif_skcipher - Add key check exception for cipher_null
    - LP: #1556562
  * crypto: algif_skcipher - Do not assume that req is unchanged
    - LP: #1556562
  * crypto: algif_skcipher - Do not dereference ctx without socket lock
    - LP: #1556562
  * proc: revert /proc/<pid>/maps [stack:TID] annotation
    - LP: #1547231
  * ACPI / processor: Request native thermal interrupt handling via _OSC
    - LP: #1559923
  * gpiolib: do not allow to insert an empty gpiochip
    - LP: #1566544
  * gpio: add a data pointer to gpio_chip
    - LP: #1566544
  * gpio: rcar: Add Runtime PM handling for interrupts
    - LP: #1566544
  * ipv4: Don't do expensive useless work during inetdev destroy.
    - LP: #1566544
  * Input: powermate - fix oops with malicious USB descriptors
    - LP: #1566544
  * USB: iowarrior: fix oops with malicious USB descriptors
    - LP: #1566544
  * ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk()
    - LP: #1566544
  * ALSA: usb-audio: Add sanity checks for endpoint accesses
    - LP: #1566544
  * include/linux/poison.h: fix LIST_POISON{1,2} offset
    - LP: #1566544
  * Input: ati_remote2 - fix crashes on detecting device with invalid
    descriptor
    - LP: #1566544
  * USB: cdc-acm: more sanity checking
    - LP: #1566544
  * drm/i915: Workaround CHV pipe C cursor fail
    - LP: #1566544
  * EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr()
    - LP: #1566544
  * crypto: ccp - Add hash state import and export support
    - LP: #1566544
  * clk: rockchip: add pclk_cpu to the list of rk3188 critical clocks
    - LP: #1566544
  * clk: rockchip: Add pclk_peri to critical clocks on RK3066/RK3188
    - LP: #1566544
  * clk: rockchip: add hclk_cpubus to the list of rk3188 critical clocks
    - LP: #1566544
  * tty: Fix GPF in flush_to_ldisc(), part 2
    - LP: #1566544
  * media: v4l2-compat-ioctl32: fix missing length copy in
    put_v4l2_buffer32
    - LP: #1566544
  * pwc: Add USB id for Philips Spc880nc webcam
    - LP: #1566544
  * crypto: ccp - Limit the amount of information exported
    - LP: #1566544
  * crypto: ccp - Don't assume export/import areas are aligned
    - LP: #1566544
  * 8250: use callbacks to access UART_DLL/UART_DLM
    - LP: #1566544
  * net: irda: Fix use-after-free in irtty_open()
    - LP: #1566544
  * mei: bus: check if the device is enabled before data transfer
    - LP: #1566544
  * staging: comedi: ni_tiocmd: change mistaken use of start_src for
    start_arg
    - LP: #1566544
  * tools/hv: Use include/uapi with __EXPORTED_HEADERS__
    - LP: #1566544
  * tpm: fix the rollback in tpm_chip_register()
    - LP: #1566544
  * tpm: fix the cleanup of struct tpm_chip
    - LP: #1566544
  * ARM: dts: armada-375: use armada-370-sata for SATA
    - LP: #1566544
  * usb: retry reset if a device times out
    - LP: #1566544
  * HID: fix hid_ignore_special_drivers module parameter
    - LP: #1566544
  * scripts/coccinelle: modernize &
    - LP: #1566544
  * adv7511: TX_EDID_PRESENT is still 1 after a disconnect
    - LP: #1566544
  * saa7134: Fix bytesperline not being set correctly for planar formats
    - LP: #1566544
  * tpm_crb: tpm2_shutdown() must be called before tpm_chip_unregister()
    - LP: #1566544
  * perf tools: Dont stop PMU parsing on alias parse error
    - LP: #1566544
  * Bluetooth: btusb: Add new AR3012 ID 13d3:3395
    - LP: #1542564, #1566544
  * Bluetooth: Add new AR3012 ID 0489:e095
    - LP: #1542944, #1566544
  * aacraid: Fix RRQ overload
    - LP: #1566544
  * aacraid: Fix memory leak in aac_fib_map_free
    - LP: #1566544
  * aic7xxx: Fix queue depth handling
    - LP: #1566544
  * mtd: onenand: fix deadlock in onenand_block_markbad
    - LP: #1566544
  * md/raid5: Compare apples to apples (or sectors to sectors)
    - LP: #1566544
  * RAID5: check_reshape() shouldn't call mddev_suspend
    - LP: #1566544
  * RAID5: revert e9e4c377e2f563 to fix a livelock
    - LP: #1566544
  * crypto: ccp - memset request context to zero during import
    - LP: #1566544
  * Bluetooth: btusb: Add a new AR3012 ID 04ca:3014
    - LP: #1546694, #1566544
  * mmc: sdhci: fix data timeout (part 1)
    - LP: #1566544
  * mmc: sdhci: fix data timeout (part 2)
    - LP: #1566544
  * perf tools: Fix python extension build
    - LP: #1566544
  * IB/srpt: Simplify srpt_handle_tsk_mgmt()
    - LP: #1566544
  * bttv: Width must be a multiple of 16 when capturing planar formats
    - LP: #1566544
  * watchdog: rc32434_wdt: fix ioctl error handling
    - LP: #1566544
  * nfsd4: fix bad bounds checking
    - LP: #1566544
  * xfs: fix two memory leaks in xfs_attr_list.c error paths
    - LP: #1566544
  * quota: Fix possible GPF due to uninitialised pointers
    - LP: #1566544
  * mtip32xx: Fix broken service thread handling
    - LP: #1566544
  * mtip32xx: Remove unwanted code from taskfile error handler
    - LP: #1566544
  * mtip32xx: Print exact time when an internal command is interrupted
    - LP: #1566544
  * mtip32xx: Avoid issuing standby immediate cmd during FTL rebuild
    - LP: #1566544
  * mtip32xx: Fix for rmmod crash when drive is in FTL rebuild
    - LP: #1566544
  * mtip32xx: Handle safe removal during IO
    - LP: #1566544
  * mtip32xx: Handle FTL rebuild failure state during device initialization
    - LP: #1566544
  * of: alloc anywhere from memblock if range not specified
    - LP: #1566544
  * usb: hub: fix a typo in hub_port_init() leading to wrong logic
    - LP: #1566544
  * KVM: i8254: change PIT discard tick policy
    - LP: #1566544
  * sched/cputime: Fix steal time accounting vs. CPU hotplug
    - LP: #1566544
  * libnvdimm: Fix security issue with DSM IOCTL.
    - LP: #1566544
  * rt2x00: add new rt2800usb device Buffalo WLI-UC-G450
    - LP: #1566544
  * pinctrl-bcm2835: Fix cut-and-paste error in "pull" parsing
    - LP: #1566544
  * perf/core: Fix perf_sched_count derailment
    - LP: #1566544
  * perf/x86/intel: Use PAGE_SIZE for PEBS buffer size on Core2
    - LP: #1566544
  * perf/x86/intel: Fix PEBS warning by only restoring active PMU in pmi
    - LP: #1566544
  * sched/cputime: Fix steal_account_process_tick() to always return
    jiffies
    - LP: #1566544
  * bcache: fix race of writeback thread starting before complete
    initialization
    - LP: #1566544
  * bcache: cleaned up error handling around register_cache()
    - LP: #1566544
  * bcache: fix cache_set_flush() NULL pointer dereference on OOM
    - LP: #1566544
  * be2iscsi: set the boot_kset pointer to NULL in case of failure
    - LP: #1566544
  * md/raid5: preserve STRIPE_PREREAD_ACTIVE in break_stripe_batch_list
    - LP: #1566544
  * drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards.
    - LP: #1566544
  * sg: fix dxferp in from_to case
    - LP: #1566544
  * jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount
    path
    - LP: #1566544
  * ALSA: hda - Apply reboot D3 fix for CX20724 codec, too
    - LP: #1566544
  * EDAC/sb_edac: Fix computation of channel address
    - LP: #1566544
  * Bluetooth: btusb: Add a new AR3012 ID 13d3:3472
    - LP: #1552925, #1566544
  * ALSA: pcm: Avoid "BUG:" string for warnings again
    - LP: #1566544
  * dm snapshot: disallow the COW and origin devices from being identical
    - LP: #1566544
  * dm thin metadata: don't issue prefetches if a transaction abort has
    failed
    - LP: #1566544
  * dm cache: make sure every metadata function checks fail_io
    - LP: #1566544
  * iser-target: Fix identification of login rx descriptor type
    - LP: #1566544
  * iser-target: Add new state ISER_CONN_BOUND to isert_conn
    - LP: #1566544
  * iser-target: Separate flows for np listeners and connections cma events
    - LP: #1566544
  * ALSA: hda - fix the mic mute button and led problem for a Lenovo AIO
    - LP: #1555912, #1566544
  * xtensa: ISS: don't hang if stdin EOF is reached
    - LP: #1566544
  * xtensa: fix preemption in {clear,copy}_user_highpage
    - LP: #1566544
  * xtensa: clear all DBREAKC registers on start
    - LP: #1566544
  * Bluetooth: Fix potential buffer overflow with Add Advertising
    - LP: #1566544
  * ARC: [BE] readl()/writel() to work in Big Endian CPU configuration
    - LP: #1566544
  * bus: imx-weim: Take the 'status' property value into account
    - LP: #1566544
  * ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41.
    - LP: #1566544
  * s390/pci: enforce fmb page boundary rule
    - LP: #1566544
  * drm/radeon: rework fbdev handling on chips with no connectors
    - LP: #1566544
  * md: multipath: don't hardcopy bio in .make_request path
    - LP: #1566544
  * net: mvneta: enable change MAC address when interface is up
    - LP: #1566544
  * dm: fix rq_end_stats() NULL pointer in dm_requeue_original_request()
    - LP: #1566544
  * HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report()
    - LP: #1566544
  * ALSA: hda - Fix unconditional GPIO toggle via automute
    - LP: #1566544
  * mmc: mmc_spi: Add Card Detect comments and fix CD GPIO case
    - LP: #1566544
  * nfsd: fix deadlock secinfo+readdir compound
    - LP: #1566544
  * vfs: show_vfsstat: do not ignore errors from show_devname method
    - LP: #1566544
  * x86/iopl: Fix iopl capability check on Xen PV
    - LP: #1566544
  * crypto: marvell/cesa - forward devm_ioremap_resource() error code
    - LP: #1566544
  * mmc: sdhci: Fix override of timeout clk wrt max_busy_timeout
    - LP: #1566544
  * drm/amdgpu: include the right version of gmc header files for iceland
    - LP: #1566544
  * Input: ims-pcu - sanity check against missing interfaces
    - LP: #1566544
  * watchdog: don't run proc_watchdog_update if new value is same as old
    - LP: #1566544
  * mm: memcontrol: reclaim when shrinking memory.high below usage
    - LP: #1566544
  * mm: memcontrol: reclaim and OOM kill when shrinking memory.max below
    usage
    - LP: #1566544
  * x86/apic: Fix suspicious RCU usage in
    smp_trace_call_function_interrupt()
    - LP: #1566544
  * USB: usb_driver_claim_interface: add sanity checking
    - LP: #1566544
  * USB: uas: Reduce can_queue to MAX_CMNDS
    - LP: #1566544
  * tracing: Have preempt(irqs)off trace preempt disabled functions
    - LP: #1566544
  * tracing: Fix crash from reading trace_pipe with sendfile
    - LP: #1566544
  * splice: handle zero nr_pages in splice_to_pipe()
    - LP: #1566544
  * ALSA: usb-audio: add Microsoft HD-5001 to quirks
    - LP: #1566544
  * writeback, cgroup: fix premature wb_put() in
    locked_inode_to_wb_and_lock_list()
    - LP: #1566544
  * fs-writeback: unplug before cond_resched in writeback_sb_inodes
    - LP: #1566544
  * writeback, cgroup: fix use of the wrong bdi_writeback which mismatches
    the inode
    - LP: #1566544
  * bitops: Do not default to __clear_bit() for __clear_bit_unlock()
    - LP: #1566544
  * target: Fix target_release_cmd_kref shutdown comp leak
    - LP: #1566544
  * KVM: VMX: avoid guest hang on invalid invept instruction
    - LP: #1566544
  * KVM: fix spin_lock_init order on x86
    - LP: #1566544
  * tracing: Fix trace_printk() to print when not using bprintk()
    - LP: #1566544
  * fs/coredump: prevent fsuid=0 dumps into user-controlled directories
    - LP: #1566544
  * rapidio/rionet: fix deadlock on SMP
    - LP: #1566544
  * staging: comedi: ni_mio_common: fix the ni_write[blw]() functions
    - LP: #1566544
  * staging: android: ion_test: fix check of
    platform_device_register_simple() error code
    - LP: #1566544
  * ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list
    - LP: #1566544
  * MAINTAINERS: Update mailing list and web page for hwmon subsystem
    - LP: #1566544
  * ocfs2/dlm: fix race between convert and recovery
    - LP: #1566544
  * ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
    - LP: #1566544
  * mm/page_alloc: prevent merging between isolated and other pageblocks
    - LP: #1566544
  * mac80211: avoid excessive stack usage in sta_info
    - LP: #1566544
  * clk: xgene: Add missing parenthesis when clearing divider value
    - LP: #1566544
  * clk: qcom: msm8960: Fix ce3_src register offset
    - LP: #1566544
  * xen kconfig: don't "select INPUT_XEN_KBDDEV_FRONTEND"
    - LP: #1566544
  * ppp: take reference on channels netns
    - LP: #1566544
  * mdio-sun4i: oops in error handling in probe
    - LP: #1566544
  * clk: rockchip: free memory in error cases when registering clock
    branches
    - LP: #1566544
  * ARC: bitops: Remove non relevant comments
    - LP: #1566544
  * mac80211: fix txq queue related crashes
    - LP: #1566544
  * net: Fix use after free in the recvmmsg exit path
    - LP: #1566544
  * ath9k: fix misleading indentation
    - LP: #1566544
  * sctp: fix the transports round robin issue when init is retransmitted
    - LP: #1566544
  * ethernet: micrel: fix some error codes
    - LP: #1566544
  * megaraid_sas: add missing curly braces in ioctl handler
    - LP: #1566544
  * clk-divider: make sure read-only dividers do not write to their
    register
    - LP: #1566544
  * misc/bmp085: Enable building as a module
    - LP: #1566544
  * HID: logitech: fix Dual Action gamepad support
    - LP: #1566544
  * net/mlx5: Make command timeout way shorter
    - LP: #1566544
  * ASoC: ssm4567: Reset device before regcache_sync()
    - LP: #1566544
  * fbdev: da8xx-fb: fix videomodes of lcd panels
    - LP: #1566544
  * clk: qcom: msm8960: fix ce3_core clk enable register
    - LP: #1566544
  * ipvs: correct initial offset of Call-ID header search in SIP
    persistence engine
    - LP: #1566544
  * drm/i915: Cleanup phys status page too
    - LP: #1566544
  * ata: ahci_xgene: dereferencing uninitialized pointer in probe
    - LP: #1566544
  * ath9k: fix buffer overrun for ar9287
    - LP: #1566544
  * perf tools: handle spaces in file names obtained from /proc/pid/maps
    - LP: #1566544
  * rtc: ds1685: passing bogus values to irq_restore
    - LP: #1566544
  * ARM: davinci: make I2C support optional
    - LP: #1566544
  * drm/amdkfd: uninitialized variable in
    dbgdev_wave_control_set_registers()
    - LP: #1566544
  * mtd: map: fix .set_vpp() documentation
    - LP: #1566544
  * ARM: OMAP3: Add cpuidle parameters table for omap3430
    - LP: #1566544
  * efi: Expose non-blocking set_variable() wrapper to efivars
    - LP: #1566544
  * rtc: vr41xx: Wire up alarm_irq_enable
    - LP: #1566544
  * sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a
    race
    - LP: #1566544
  * ipv4: fix broadcast packets reception
    - LP: #1566544
  * lpfc: fix misleading indentation
    - LP: #1566544
  * sched/preempt, sh: kmap_coherent relies on disabled preemption
    - LP: #1566544
  * ipip: Properly mark ipip GRO packets as encapsulated.
    - LP: #1566544
  * spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs
    - LP: #1566544
  * ASoC: s3c24xx: use const snd_soc_component_driver pointer
    - LP: #1566544
  * mlx4: add missing braces in verify_qp_parameters
    - LP: #1566544
  * clk: meson: Fix meson_clk_register_clks() signature type mismatch
    - LP: #1566544
  * coda: fix error path in case of missing pdata on non-DT platform
    - LP: #1566544
  * kbuild/mkspec: fix grub2 installkernel issue
    - LP: #1566544
  * bpf: avoid copying junk bytes in bpf_get_current_comm()
    - LP: #1566544
  * mac80211: fix unnecessary frame drops in mesh fwding
    - LP: #1566544
  * mtd: brcmnand: Fix v7.1 register offsets
    - LP: #1566544
  * mac80211: fix ibss scan parameters
    - LP: #1566544
  * at803x: fix reset handling
    - LP: #1566544
  * rtc: hym8563: fix invalid year calculation
    - LP: #1566544
  * perf pmu: Fix misleadingly indented assignment (whitespace)
    - LP: #1566544
  * paride: make 'verbose' parameter an 'int' again
    - LP: #1566544
  * regulator: s5m8767: fix get_register() error handling
    - LP: #1566544
  * ppp: ensure file->private_data can't be overridden
    - LP: #1566544
  * clk: versatile: sp810: support reentrance
    - LP: #1566544
  * net: add description for len argument of dev_get_phys_port_name
    - LP: #1566544
  * net: bcmgenet: fix dma api length mismatch
    - LP: #1566544
  * ARM: prima2: always enable reset controller
    - LP: #1566544
  * drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
    - LP: #1566544
  * perf stat: Document --detailed option
    - LP: #1566544
  * v4l: vsp1: Set the SRU CTRL0 register when starting the stream
    - LP: #1566544
  * ipvs: drop first packet to redirect conntrack
    - LP: #1566544
  * rtc: max77686: Properly handle regmap_irq_get_virq() error code
    - LP: #1566544
  * x86/iopl/64: Properly context-switch IOPL on Xen PV
    - LP: #1566544
  * Linux 4.2.8-ckt7
    - LP: #1566544
  * PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
    - LP: #1571027
  * ALSA: hda - Asus N750JV external subwoofer fixup
    - LP: #1571027
  * ALSA: hda - Fix white noise on Asus N750JV headphone
    - LP: #1571027
  * ALSA: hda - Apply fix for white noise on Asus N550JV, too
    - LP: #1571027
  * drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
    - LP: #1571027
  * fs: add file_dentry()
    - LP: #1571027
  * nfs: use file_dentry()
    - LP: #1571027
  * hwmon: (max1111) Return -ENODEV from max1111_read_channel if not
    instantiated
    - LP: #1571027
  * drm/radeon: add another R7 370 quirk
    - LP: #1571027
  * drm/radeon: add a dpm quirk for all R7 370 parts
    - LP: #1571027
  * powerpc/mm: Fixup preempt underflow with huge pages
    - LP: #1571027
  * pinctrl: pistachio: fix mfio84-89 function description and pinmux.
    - LP: #1571027
  * pinctrl: sunxi: Fix A33 external interrupts not working
    - LP: #1571027
  * usb: renesas_usbhs: avoid NULL pointer derefernce in
    usbhsf_pkt_handler()
    - LP: #1571027
  * usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer
    - LP: #1571027
  * btrfs: fix crash/invalid memory access on fsync when using overlayfs
    - LP: #1571027
  * ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk()
    - LP: #1571027
  * ALSA: usb-audio: Fix double-free in error paths after
    snd_usb_add_audio_stream() call
    - LP: #1571027
  * USB: mct_u232: add sanity checking in probe
    - LP: #1571027
    - CVE-2016-3136
  * USB: cypress_m8: add endpoint sanity check
    - LP: #1571027
    - CVE-2016-3137
  * USB: digi_acceleport: do sanity checking for the number of ports
    - LP: #1571027
  * [media] au0828: fix au0828_v4l2_close() dev_state race condition
    - LP: #1571027
  * [media] au0828: Fix dev_state handling
    - LP: #1571027
  * sd: Fix excessive capacity printing on devices with blocks bigger than
    512 bytes
    - LP: #1571027
  * drm/dp: move hw_mutex up the call stack
    - LP: #1571027
  * drm/udl: Use unlocked gem unreferencing
    - LP: #1571027
  * ext4: add lockdep annotations for i_data_sem
    - LP: #1571027
  * ALSA: hda - fix front mic problem for a HP desktop
    - LP: #1564712, #1571027
  * KVM: x86: Inject pending interrupt even if pending nmi exist
    - LP: #1571027
  * ALSA: timer: Use mod_timer() for rearming the system timer
    - LP: #1571027
  * mm: fix invalid node in alloc_migrate_target()
    - LP: #1571027
  * iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
    - LP: #1571027
  * ext4: ignore quota mount options if the quota feature is enabled
    - LP: #1571027
  * xen/events: Mask a moving irq
    - LP: #1571027
  * usb: renesas_usbhs: fix to avoid using a disabled ep in
    usbhsg_queue_done()
    - LP: #1571027
  * mac80211: properly deal with station hashtable insert errors
    - LP: #1571027
  * compiler-gcc: disable -ftracer for __noclone functions
    - LP: #1571027
  * rbd: use GFP_NOIO consistently for request allocations
    - LP: #1571027
  * Btrfs: fix file/data loss caused by fsync after rename and new inode
    - LP: #1571027
  * USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices
    - LP: #1571027
  * USB: serial: cp210x: Adding GE Healthcare Device ID
    - LP: #1571027
  * USB: option: add "D-Link DWM-221 B1" device id
    - LP: #1571027
  * virtio: virtio 1.0 cs04 spec compliance for reset
    - LP: #1571027
  * libnvdimm: fix smart data retrieval
    - LP: #1571027
  * gpio: pca953x: Use correct u16 value for register word write
    - LP: #1571027
  * parisc: Avoid function pointers for kernel exception routines
    - LP: #1571027
  * parisc: Fix kernel crash with reversed copy_from_user()
    - LP: #1571027
  * parisc: Unbreak handling exceptions from kernel modules
    - LP: #1571027
  * net: macb: replace macb_writel() call by queue_writel() to update queue
    ISR
    - LP: #1571027
  * net: bcmgenet: fix dev->stats.tx_bytes accounting
    - LP: #1571027
  * net: bcmgenet: fix skb_len in bcmgenet_xmit_single()
    - LP: #1571027
  * ipv6: udp: fix UDP_MIB_IGNOREDMULTI updates
    - LP: #1571027
  * pinctrl: nomadik: fix pull debug print inversion
    - LP: #1571027
  * ip6_tunnel: set rtnl_link_ops before calling register_netdevice
    - LP: #1571027
  * KVM: x86: move steal time initialization to vcpu entry time
    - LP: #1571027
  * lib/ucs2_string: Add ucs2 -> utf8 helper functions
    - LP: #1571027
  * efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
    - LP: #1571027
  * efi: Do variable name validation tests in utf8
    - LP: #1571027
  * efi: Make our variable validation list include the guid
    - LP: #1571027
  * efi: Make efivarfs entries immutable by default
    - LP: #1571027
  * efi: Add pstore variables to the deletion whitelist
    - LP: #1571027
  * lib/ucs2_string: Correct ucs2 -> utf8 conversion
    - LP: #1571027
  * ipr: Fix out-of-bounds null overwrite
    - LP: #1571027
  * ipr: Fix regression when loading firmware
    - LP: #1571027
  * perf/x86/intel: Fix PEBS data source interpretation on Nehalem/Westmere
    - LP: #1571027
  * ALSA: hda - Add new GPU codec ID 0x10de0082 to snd-hda
    - LP: #1571027
  * mwifiex: fix corner case association failure
    - LP: #1571027
  * net: phy: at803x: Request 'reset' GPIO only for AT8030 PHY
    - LP: #1571027
  * Linux 4.2.8-ckt8
    - LP: #1571027

 -- Kamal Mostafa <kamal@canonical.com>  Mon, 18 Apr 2016 06:54:19 -0700

linux (4.2.0-35.40) wily; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1557706

  [ Upstream Kernel Changes ]

  * Revert "workqueue: make sure delayed work run in local cpu"
    - LP: #1556269
  * Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo"
    - LP: #1556269
  * KVM: VMX: Fix host initiated access to guest MSR_TSC_AUX
    - LP: #1552592
  * locking/qspinlock: Move __ARCH_SPIN_LOCK_UNLOCKED to qspinlock_types.h
    - LP: #1545330
  * [media] usbvision fix overflow of interfaces array
    - LP: #1556269
  * [media] usbvision: fix crash on detecting device with invalid
    configuration
    - LP: #1556269
  * ASN.1: Fix non-match detection failure on data overrun
    - LP: #1556269
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1556269
  * EVM: Use crypto_memneq() for digest comparisons
    - LP: #1556269
  * vmstat: explicitly schedule per-cpu work on the CPU we need it to run
    on
    - LP: #1556269
  * x86/entry/compat: Add missing CLAC to entry_INT80_32
    - LP: #1556269
  * iio-light: Use a signed return type for ltr501_match_samp_freq()
    - LP: #1556269
  * iio: add IIO_TRIGGER dependency to STK8BA50
    - LP: #1556269
  * iio: add HAS_IOMEM dependency to VF610_ADC
    - LP: #1556269
  * iio: dac: mcp4725: set iio name property in sysfs
    - LP: #1556269
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1556269
  * iio: light: acpi-als: Report data as processed
    - LP: #1556269
  * iio:adc:ti_am335x_adc Fix buffered mode by identifying as software
    buffer.
    - LP: #1556269
  * ASoC: rt5645: fix the shift bit of IN1 boost
    - LP: #1556269
  * ARCv2: STAR 9000950267: Handle return from intr to Delay Slot #2
    - LP: #1556269
  * cgroup: make sure a parent css isn't offlined before its children
    - LP: #1556269
  * ARM: OMAP2+: Fix wait_dll_lock_timed for rodata
    - LP: #1556269
  * ARM: OMAP2+: Fix l2dis_3630 for rodata
    - LP: #1556269
  * ARM: OMAP2+: Fix save_secure_ram_context for rodata
    - LP: #1556269
  * ARM: OMAP2+: Fix l2_inv_api_params for rodata
    - LP: #1556269
  * ARM: OMAP2+: Fix ppa_zero_params and ppa_por_params for rodata
    - LP: #1556269
  * rtlwifi: rtl8821ae: Fix 5G failure when EEPROM is incorrectly encoded
    - LP: #1556269
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1556269
  * ARM: dts: Fix wl12xx missing clocks that cause hangs
    - LP: #1556269
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1556269
  * mac80211: Requeue work after scan complete for all VIF types.
    - LP: #1556269
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1556269
  * ARM: dts: at91: sama5d4: fix instance id of DBGU
    - LP: #1556269
  * ARM: dts: at91: sama5d4ek: add phy address and IRQ for macb0
    - LP: #1556269
  * ARM: dts: at91: sama5d4 xplained: fix phy0 IRQ type
    - LP: #1556269
  * crypto: shash - Fix has_key setting
    - LP: #1556269
  * Input: vmmouse - fix absolute device registration
    - LP: #1556269
  * spi: atmel: fix gpio chip-select in case of non-DT platform
    - LP: #1556269
  * drm/i915/dp: fall back to 18 bpp when sink capability is unknown
    - LP: #1556269
  * ALSA: usb-audio: Fix OPPO HA-1 vendor ID
    - LP: #1556269
  * ALSA: usb-audio: Add native DSD support for PS Audio NuWave DAC
    - LP: #1556269
  * ALSA: usb-audio: Add quirk for Microsoft LifeCam HD-6000
    - LP: #1556269
  * target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
    - LP: #1556269
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1556269
  * iio: inkern: fix a NULL dereference on error
    - LP: #1556269
  * iio: pressure: mpl115: fix temperature offset sign
    - LP: #1556269
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1556269
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1556269
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1556269
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1556269
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1556269
  * ALSA: timer: Code cleanup
    - LP: #1556269
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1556269
  * libata: fix sff host state machine locking while polling
    - LP: #1556269
  * MIPS: Fix buffer overflow in syscall_get_arguments()
    - LP: #1556269
  * cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
    - LP: #1556269
  * drm: add helper to check for wc memory support
    - LP: #1556269
  * drm/radeon: mask out WC from BO on unsupported arches
    - LP: #1556269
  * drm/amdgpu: mask out WC from BO on unsupported arches
    - LP: #1556269
  * ASoC: dpcm: fix the BE state on hw_free
    - LP: #1556269
  * drm/amdgpu: move gmc7 support out of CIK dependency
    - LP: #1556269
  * drm/amdgpu: iceland use CI based MC IP
    - LP: #1556269
  * drm/amdgpu: The VI specific EXE bit should only apply to GMC v8.0 above
    - LP: #1556269
  * drm/amdgpu: pull topaz gmc bits into gmc_v7
    - LP: #1556269
  * drm/amdgpu: drop topaz support from gmc8 module
    - LP: #1556269
  * modules: fix modparam async_probe request
    - LP: #1556269
  * module: wrapper for symbol name.
    - LP: #1556269
  * ALSA: hda - Add fixup for Mac Mini 7,1 model
    - LP: #1556269
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1556269
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1556269
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1556269
  * drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
    - LP: #1556269
  * radix-tree: fix race in gang lookup
    - LP: #1556269
  * drivers/hwspinlock: fix race between radix tree insertion and lookup
    - LP: #1556269
  * btrfs: fix clone / extent-same deadlocks
    - LP: #1556269
  * Btrfs: fix invalid page accesses in extent_same (dedup) ioctl
    - LP: #1556269
  * Btrfs: fix page reading in extent_same ioctl leading to csum errors
    - LP: #1556269
  * usb: xhci: handle both SSIC ports in PME stuck quirk
    - LP: #1556269
  * usb: xhci: add a quirk bit for ssic port unused
    - LP: #1556269
  * usb: xhci: set SSIC port unused only if xhci_suspend succeeds
    - LP: #1556269
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1556269
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1556269
  * target: Invoke release_cmd() callback without holding a spinlock
    - LP: #1556269
  * target: Fix LUN_RESET active I/O handling for ACK_KREF
    - LP: #1556269
  * target: Fix LUN_RESET active TMR descriptor handling
    - LP: #1556269
  * target: Fix TAS handling for multi-session se_node_acls
    - LP: #1556269
  * [media] tda1004x: only update the frontend properties if locked
    - LP: #1556269
  * ALSA: timer: Fix leftover link at closing
    - LP: #1556269
  * [media] saa7134-alsa: Only frees registered sound cards
    - LP: #1556269
  * ARM: nomadik: fix up SD/MMC DT settings
    - LP: #1556269
  * Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
    - LP: #1556269
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1556269
  * SCSI: Add Marvell Console to VPD blacklist
    - LP: #1556269
  * drm: fix missing reference counting decrease
    - LP: #1556269
  * drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
    - LP: #1556269
  * drm/dp/mst: Calculate MST PBN with 31.32 fixed point
    - LP: #1556269
  * drm/dp/mst: Reverse order of MST enable and clearing VC payload table.
    - LP: #1556269
  * drm/dp/mst: deallocate payload on port destruction
    - LP: #1556269
  * ALSA: hda - Fix static checker warning in patch_hdmi.c
    - LP: #1556269
  * target: Fix remote-port TMR ABORT + se_cmd fabric stop
    - LP: #1556269
  * dump_stack: avoid potential deadlocks
    - LP: #1556269
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1556269
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1556269
  * mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
    - LP: #1556269
  * radix-tree: fix oops after radix_tree_iter_retry
    - LP: #1556269
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1556269
  * crypto: algif_skcipher - Do not set MAY_BACKLOG on the async path
    - LP: #1556269
  * crypto: atmel-sha - fix atmel_sha_remove()
    - LP: #1556269
  * crypto: marvell/cesa - fix test in mv_cesa_dev_dma_init()
    - LP: #1556269
  * target: Fix race with SCF_SEND_DELAYED_TAS handling
    - LP: #1556269
  * qla2xxx: Fix stale pointer access.
    - LP: #1556269
  * serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
    - LP: #1556269
  * tty: Add support for PCIe WCH382 2S multi-IO card
    - LP: #1556269
  * pty: fix possible use after free of tty->driver_data
    - LP: #1556269
  * pty: make sure super_block is still valid in final /dev/tty close
    - LP: #1556269
  * ALSA: hda - Fix speaker output from VAIO AiO machines
    - LP: #1556269
  * klist: fix starting point removed bug in klist iterators
    - LP: #1556269
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1556269
  * drm/i915/dsi: defend gpio table against out of bounds access
    - LP: #1556269
  * drm/i915/dsi: don't pass arbitrary data to sideband
    - LP: #1556269
  * powerpc: Fix dedotify for binutils >= 2.26
    - LP: #1556269
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1556269
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1556269
  * xen/scsiback: correct frontend counting
    - LP: #1556269
  * nfs: fix nfs_size_to_loff_t
    - LP: #1556269
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1556269
  * ALSA: hda - Fix bad dereference of jack object
    - LP: #1556269
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1556269
  * phy: core: fix wrong err handle for phy_power_on
    - LP: #1556269
  * phy: twl4030-usb: Relase usb phy on unload
    - LP: #1556269
  * phy: twl4030-usb: Fix unbalanced pm_runtime_enable on module reload
    - LP: #1556269
  * drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select()
    - LP: #1556269
  * drm/i915: fix error path in intel_setup_gmbus()
    - LP: #1556269
  * ahci: Intel DNV device IDs SATA
    - LP: #1556269
  * workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
    - LP: #1556269
  * drm/amdgpu: fix s4 resume
    - LP: #1556269
  * drm/amdgpu: remove unnecessary forward declaration
    - LP: #1556269
  * drm/radeon: hold reference to fences in radeon_sa_bo_new
    - LP: #1556269
  * drm/amdgpu: fix issue with overlapping userptrs
    - LP: #1556269
  * cifs: fix erroneous return value
    - LP: #1556269
  * s390/dasd: prevent incorrect length error under z/VM after PAV changes
    - LP: #1556269
  * s390/dasd: fix refcount for PAV reassignment
    - LP: #1556269
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1556269
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1556269
  * irqchip/gic-v3-its: Fix double ICC_EOIR write for LPI in EOImode==1
    - LP: #1556269
  * scsi: fix soft lockup in scsi_remove_target() on module removal
    - LP: #1556269
  * ext4: fix potential integer overflow
    - LP: #1556269
  * ext4: don't read blocks from disk after extents being swapped
    - LP: #1556269
  * bio: return EINTR if copying to user space got interrupted
    - LP: #1556269
  * iwlwifi: mvm: don't allow sched scans without matches to be started
    - LP: #1556269
  * powerpc/eeh: Fix stale cached primary bus
    - LP: #1556269
  * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
    - LP: #1556269
  * xen/pciback: Save the number of MSI-X entries to be copied later.
    - LP: #1556269
  * xen/pcifront: Fix mysterious crashes when NUMA locality information was
    extracted.
    - LP: #1556269
  * ALSA: seq: Fix leak of pool buffer at concurrent writes
    - LP: #1556269
  * ALSA: hda - Cancel probe work instead of flush at remove
    - LP: #1556269
  * dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
    - LP: #1556269
  * tracepoints: Do not trace when cpu is offline
    - LP: #1556269
  * tracing: Fix freak link error caused by branch tracer
    - LP: #1556269
  * ALSA: seq: Fix double port list deletion
    - LP: #1556269
  * drm/amdgpu: use post-decrement in error handling
    - LP: #1556269
  * drm/radeon: use post-decrement in error handling
    - LP: #1556269
  * drm/qxl: use kmalloc_array to alloc reloc_info in
    qxl_process_single_command
    - LP: #1556269
  * drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2)
    - LP: #1556269
  * x86/uaccess/64: Make the __copy_user_nocache() assembly code more
    readable
    - LP: #1556269
  * x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in
    __copy_user_nocache()
    - LP: #1556269
  * usb: dwc3: Fix assignment of EP transfer resources
    - LP: #1556269
  * powerpc/ioda: Set "read" permission when "write" is set
    - LP: #1556269
  * NFSv4: Fix a dentry leak on alias use
    - LP: #1556269
  * x86/mm: Fix vmalloc_fault() to handle large pages properly
    - LP: #1556269
  * ALSA: pcm: Fix rwsem deadlock for non-atomic PCM stream
    - LP: #1556269
  * USB: option: add support for SIM7100E
    - LP: #1556269
  * USB: cp210x: add IDs for GE B650V3 and B850V3 boards
    - LP: #1556269
  * USB: option: add "4G LTE usb-modem U901"
    - LP: #1556269
  * mm: fix regression in remap_file_pages() emulation
    - LP: #1556269
  * ipc: convert invalid scenarios to use WARN_ON
    - LP: #1556269
  * ipc/shm: handle removed segments gracefully in shm_mmap()
    - LP: #1556269
  * hwmon: (ads1015) Handle negative conversion values correctly
    - LP: #1556269
  * ext4: fix bh->b_state corruption
    - LP: #1556269
  * ext4: fix crashes in dioread_nolock mode
    - LP: #1556269
  * nfit: fix multi-interface dimm handling, acpi6.1 compatibility
    - LP: #1556269
  * hwmon: (gpio-fan) Remove un-necessary speed_index lookup for thermal
    hook
    - LP: #1556269
  * kernel/resource.c: fix muxed resource handling in __request_region()
    - LP: #1556269
  * drivers: android: correct the size of struct binder_uintptr_t for
    BC_DEAD_BINDER_DONE
    - LP: #1556269
  * can: ems_usb: Fix possible tx overflow
    - LP: #1556269
  * dm: fix dm_rq_target_io leak on faults with .request_fn DM w/ blk-mq
    paths
    - LP: #1556269
  * s390/compat: correct restore of high gprs on signal return
    - LP: #1556269
  * drm/amdgpu/pm: adjust display configuration after powerstate
    - LP: #1556269
  * ARM: OMAP2+: Fix onenand initialization to avoid filesystem corruption
    - LP: #1556269
  * sunrpc/cache: fix off-by-one in qword_get()
    - LP: #1556269
  * KVM: arm/arm64: vgic: Ensure bitmaps are long enough
    - LP: #1556269
  * ARCv2: SMP: Emulate IPI to self using software triggered interrupt
    - LP: #1556269
  * KVM: x86: fix missed hardware breakpoints
    - LP: #1556269
  * KVM: async_pf: do not warn on page allocation failures
    - LP: #1556269
  * tracing: Fix showing function event in available_events
    - LP: #1556269
  * libceph: don't bail early from try_read() when skipping a message
    - LP: #1556269
  * libceph: use the right footer size when skipping a message
    - LP: #1556269
  * ALSA: hda - Fixing background noise on Dell Inspiron 3162
    - LP: #1549620, #1556269
  * KVM: x86: MMU: fix ubsan index-out-of-range warning
    - LP: #1556269
  * ALSA: hda/realtek - Support Dell headset mode for ALC225
    - LP: #1556269
  * ALSA: hda - Fixup speaker pass-through control for nid 0x14 on ALC225
    - LP: #1549660, #1556269
  * ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2
    - LP: #1556269
  * ALSA: hda - Loop interrupt handling until really cleared
    - LP: #1556269
  * x86/mpx: Fix off-by-one comparison with nr_registers
    - LP: #1556269
  * mm: thp: fix SMP race condition between THP page fault and
    MADV_DONTNEED
    - LP: #1556269
  * ocfs2: unlock inode if deleting inode from orphan fails
    - LP: #1556269
  * hpfs: don't truncate the file when delete fails
    - LP: #1556269
  * do_last(): don't let a bogus return value from ->open() et.al. to
    confuse us
    - LP: #1556269
  * namei: ->d_inode of a pinned dentry is stable only for positives
    - LP: #1556269
  * should_follow_link(): validate ->d_seq after having decided to follow
    - LP: #1556269
  * do_last(): ELOOP failure exit should be done after leaving RCU mode
    - LP: #1556269
  * af_iucv: Validate socket address length in iucv_sock_bind()
    - LP: #1556269
  * net: dp83640: Fix tx timestamp overflow handling.
    - LP: #1556269
  * tcp: fix NULL deref in tcp_v4_send_ack()
    - LP: #1556269
  * af_unix: fix struct pid memory leak
    - LP: #1556269
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1556269
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1556269
  * switchdev: Require RTNL mutex to be held when sending FDB notifications
    - LP: #1556269
  * tcp: beware of alignments in tcp_get_info()
    - LP: #1556269
  * ipv6: enforce flowi6_oif usage in ip6_dst_lookup_tail()
    - LP: #1556269
  * ipv6/udp: use sticky pktinfo egress ifindex on connect()
    - LP: #1556269
  * net/ipv6: add sysctl option accept_ra_min_hop_limit
    - LP: #1556269
  * ipv6: addrconf: Fix recursive spin lock call
    - LP: #1556269
  * ipv6: fix a lockdep splat
    - LP: #1556269
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1556269
  * net:Add sysctl_max_skb_frags
    - LP: #1556269
  * tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs
    - LP: #1556269
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1556269
  * flow_dissector: Fix unaligned access in __skb_flow_dissector when used
    by eth_get_headlen
    - LP: #1556269
  * net: Copy inner L3 and L4 headers as unaligned on GRE TEB
    - LP: #1556269
  * bpf: fix branch offset adjustment on backjumps after patching ctx
    expansion
    - LP: #1556269
  * bonding: Fix ARP monitor validation
    - LP: #1556269
  * ipv4: fix memory leaks in ip_cmsg_send() callers
    - LP: #1556269
  * af_unix: Guard against other == sk in unix_dgram_sendmsg
    - LP: #1556269
  * qmi_wwan: add "4G LTE usb-modem U901"
    - LP: #1556269
  * net/mlx4_en: Count HW buffer overrun only once
    - LP: #1556269
  * net/mlx4_en: Choose time-stamping shift value according to HW frequency
    - LP: #1556269
  * net/mlx4_en: Avoid changing dev->features directly in run-time
    - LP: #1556269
  * l2tp: Fix error creating L2TP tunnels
    - LP: #1556269
  * pppoe: fix reference counting in PPPoE proxy
    - LP: #1556269
  * route: check and remove route cache when we get route
    - LP: #1556269
  * rtnl: RTM_GETNETCONF: fix wrong return value
    - LP: #1556269
  * unix_diag: fix incorrect sign extension in unix_lookup_by_ino
    - LP: #1556269
  * sctp: Fix port hash table size computation
    - LP: #1556269
  * net/mlx4_core: Do not BUG_ON during reset when PCI is offline
    - LP: #1556269
  * s390/perf_event: fix address range for asynchronous stack
    - LP: #1556269
  * batman-adv: Avoid endless loop in bat-on-bat netdevice check
    - LP: #1556269
  * af_unix: Don't set err in unix_stream_read_generic unless there was an
    error
    - LP: #1556269
  * netlink: not trim skb for mmaped socket when dump
    - LP: #1556269
  * Input: xpad - remove unused function
    - LP: #1556269
  * ARM: dts: kirkwood: use unique machine name for ds112
    - LP: #1556269
  * s390/stacktrace: fix address ranges for asynchronous and panic stack
    - LP: #1556269
  * MAINTAINERS: Remove stale entry for BCM33xx chips
    - LP: #1556269
  * [media] exynos4-is: fix a format string bug
    - LP: #1556269
  * net/mlx4_core: Fix potential corruption in counters database
    - LP: #1556269
  * net: phy: bcm7xxx: Fix shadow mode 2 disabling
    - LP: #1556269
  * writeback: initialize inode members that track writeback history
    - LP: #1556269
  * bonding: don't use stale speed and duplex information
    - LP: #1556269
  * net: phy: bcm7xxx: Fix bcm7xxx_config_init() check
    - LP: #1556269
  * s390/oprofile: fix address range for asynchronous stack
    - LP: #1556269
  * net: phy: Fix phy_mac_interrupt()
    - LP: #1556269
  * net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS
    - LP: #1556269
  * net: phy: bcm7xxx: Fix 40nm EPHY features
    - LP: #1556269
  * netfilter: nfnetlink: correctly validate length of batch messages
    - LP: #1556269
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1556269
  * Linux 4.2.8-ckt5
    - LP: #1556269
  * x86/mm: Fix slow_virt_to_phys() for X86_PAE again
    - LP: #1549601
  * Drivers: hv: vss: run only on supported host versions
    - LP: #1496927
  * ovl: copy new uid/gid into overlayfs runtime inode
    - LP: #1555997
  * sched/numa: Fix use-after-free bug in the task_numa_compare
    - LP: #1527643

 -- Brad Figg <brad.figg@canonical.com>  Tue, 15 Mar 2016 11:48:50 -0700

linux (4.2.0-34.39) wily; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1555821

  [ Florian Westphal ]

  * SAUCE: [nf] netfilter: x_tables: check for size overflow
    - LP: #1555353
  * SAUCE: [nf,v2] netfilter: x_tables: don't rely on well-behaving
    userspace
    - LP: #1555338

 -- Brad Figg <brad.figg@canonical.com>  Thu, 10 Mar 2016 13:46:44 -0800

# For older changelog entries, run 'apt-get changelog linux-headers-4.2.0-42-lowlatency'
