[PATCH 4.4 104/163] mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Konstantin Khlebnikov commit 3486b85a29c1741db99d0c522211c82d2b7a56d0 upstream. Khugepaged detects own VMAs by checking vm_file and vm_ops but this way it cannot distinguish private /dev/zero

[PATCH 4.4 103/163] memcg: relocate charge moving from ->attach to ->post_attach

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 264a0ae164bc0e9144bebcd25ff030d067b1a878 upstream. Hello, So, this ended up a lot simpler than I originally expected. I tested it lightly and it seems to work fine. Petr,

[PATCH 4.4 039/163] drm/qxl: fix cursor position with non-zero hotspot

4.4-stable review patch. If anyone has any objections, please let me know. -- From: John Keeping commit d59a1f71ff1aeda4b4630df92d3ad4e3b1dfc885 upstream. The SPICE protocol considers the position of a cursor to be the location of its active pixel on the

[PATCH 4.4 106/163] mm: vmscan: reclaim highmem zone if buffer_heads is over limit

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Minchan Kim commit 7bf52fb891b64b8d61caf0b82060adb9db761aec upstream. We have been reclaimed highmem zone if buffer_heads is over limit but commit 6b4f7799c6a5 ("mm:

[PATCH 4.4 105/163] numa: fix /proc//numa_maps for THP

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Gerald Schaefer commit 28093f9f34cedeaea0f481c58446d9dac6dd620f upstream. In gather_pte_stats() a THP pmd is cast into a pte, which is wrong because the layouts may

[PATCH 4.4 102/163] cgroup, cpuset: replace cpuset_post_attach_flush() with cgroup_subsys->post_attach callback

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 5cf1cacb49aee39c3e02ae87068fc3c6430659b0 upstream. Since e93ad19d0564 ("cpuset: make mm migration asynchronous"), cpuset kicks off asynchronous NUMA node

[PATCH 4.4 106/163] mm: vmscan: reclaim highmem zone if buffer_heads is over limit

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Minchan Kim commit 7bf52fb891b64b8d61caf0b82060adb9db761aec upstream. We have been reclaimed highmem zone if buffer_heads is over limit but commit 6b4f7799c6a5 ("mm: vmscan: invoke slab

[PATCH 4.4 105/163] numa: fix /proc//numa_maps for THP

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Gerald Schaefer commit 28093f9f34cedeaea0f481c58446d9dac6dd620f upstream. In gather_pte_stats() a THP pmd is cast into a pte, which is wrong because the layouts may differ depending on the

[PATCH 4.4 102/163] cgroup, cpuset: replace cpuset_post_attach_flush() with cgroup_subsys->post_attach callback

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 5cf1cacb49aee39c3e02ae87068fc3c6430659b0 upstream. Since e93ad19d0564 ("cpuset: make mm migration asynchronous"), cpuset kicks off asynchronous NUMA node migration if

[PATCH 4.4 039/163] drm/qxl: fix cursor position with non-zero hotspot

4.4-stable review patch. If anyone has any objections, please let me know. -- From: John Keeping commit d59a1f71ff1aeda4b4630df92d3ad4e3b1dfc885 upstream. The SPICE protocol considers the position of a cursor to be the location of its active pixel on the display, so the

[PATCH 4.4 100/163] workqueue: fix ghost PENDING flag while doing MQ IO

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Roman Pen commit 346c09f80459a3ad97df1816d6d606169a51001a upstream. The bug in a workqueue leads to a stalled IO request in MQ ctx->rq_list with the following

[PATCH 4.4 048/163] crypto: sha1-mb - use corrcet pointer while completing jobs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Xiaodong Liu commit 0851561d9c965df086ef8a53f981f5f95a57c2c8 upstream. In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used when check and complete

[PATCH 4.4 098/163] efi: Expose non-blocking set_variable() wrapper to efivars

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ard Biesheuvel commit 9c6672ac9c91f7eb1ec436be1442b8c26d098e55 upstream. Commit 6d80dba1c9fe ("efi: Provide a non-blocking SetVariable() operation") implemented a

[PATCH 4.4 048/163] crypto: sha1-mb - use corrcet pointer while completing jobs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Xiaodong Liu commit 0851561d9c965df086ef8a53f981f5f95a57c2c8 upstream. In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used when check and complete other jobs. If the memory

[PATCH 4.4 098/163] efi: Expose non-blocking set_variable() wrapper to efivars

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ard Biesheuvel commit 9c6672ac9c91f7eb1ec436be1442b8c26d098e55 upstream. Commit 6d80dba1c9fe ("efi: Provide a non-blocking SetVariable() operation") implemented a non-blocking alternative for

[PATCH 4.4 100/163] workqueue: fix ghost PENDING flag while doing MQ IO

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Roman Pen commit 346c09f80459a3ad97df1816d6d606169a51001a upstream. The bug in a workqueue leads to a stalled IO request in MQ ctx->rq_list with the following backtrace: [ 601.347452] INFO:

[PATCH 4.4 099/163] x86/apic: Handle zero vector gracefully in clear_vector_irq()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Keith Busch commit 1bdb8970392a68489b469c3a330a1adb5ef61beb upstream. If x86_vector_alloc_irq() fails x86_vector_free_irqs() is invoked to cleanup the already allocated

[PATCH 4.4 099/163] x86/apic: Handle zero vector gracefully in clear_vector_irq()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Keith Busch commit 1bdb8970392a68489b469c3a330a1adb5ef61beb upstream. If x86_vector_alloc_irq() fails x86_vector_free_irqs() is invoked to cleanup the already allocated vectors. This

[PATCH 4.4 088/163] ASoC: s3c24xx: use const snd_soc_component_driver pointer

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit ba4bc32eaa39ba7687f0958ae90eec94da613b46 upstream. An older patch to convert the API in the s3c i2s driver ended up passing a const pointer into a function

[PATCH 4.4 088/163] ASoC: s3c24xx: use const snd_soc_component_driver pointer

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit ba4bc32eaa39ba7687f0958ae90eec94da613b46 upstream. An older patch to convert the API in the s3c i2s driver ended up passing a const pointer into a function that takes a

[PATCH 4.4 072/163] drm: Loongson-3 doesnt fully support wc memory

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Huacai Chen commit 221004c66a58949a0f25c937a6789c0839feb530 upstream. Signed-off-by: Huacai Chen Reviewed-by: Alex Deucher

[PATCH 4.4 069/163] drm/radeon: fix initial connector audio value

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 7403c515c49c033fec33df0814fffdc977e6acdc upstream. This got lost somewhere along the way. This fixes audio not working until set_property was

[PATCH 4.4 101/163] slub: clean up code for kmem cgroup support to kmem_cache_free_bulk

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jesper Dangaard Brouer commit 376bf125ac781d32e202760ed7deb1ae4ed35d31 upstream. This change is primarily an attempt to make it easier to realize the optimizations the

[PATCH 4.4 072/163] drm: Loongson-3 doesnt fully support wc memory

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Huacai Chen commit 221004c66a58949a0f25c937a6789c0839feb530 upstream. Signed-off-by: Huacai Chen Reviewed-by: Alex Deucher Signed-off-by: Dave Airlie Signed-off-by: Greg Kroah-Hartman ---

[PATCH 4.4 069/163] drm/radeon: fix initial connector audio value

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 7403c515c49c033fec33df0814fffdc977e6acdc upstream. This got lost somewhere along the way. This fixes audio not working until set_property was called. Noticed-by: Hyungwon

[PATCH 4.4 101/163] slub: clean up code for kmem cgroup support to kmem_cache_free_bulk

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jesper Dangaard Brouer commit 376bf125ac781d32e202760ed7deb1ae4ed35d31 upstream. This change is primarily an attempt to make it easier to realize the optimizations the compiler performs

[PATCH 4.4 097/163] efi: Fix out-of-bounds read in variable_matches()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Laszlo Ersek commit 630ba0cc7a6dbafbdee43795617c872b35cde1b4 upstream. The variable_matches() function can currently read "var_name[len]", for example when: - var_name[0]

[PATCH 4.4 097/163] efi: Fix out-of-bounds read in variable_matches()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Laszlo Ersek commit 630ba0cc7a6dbafbdee43795617c872b35cde1b4 upstream. The variable_matches() function can currently read "var_name[len]", for example when: - var_name[0] == 'a', - len == 1

[PATCH 4.4 007/163] ARM: mvebu: Correct unit address for linksys

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Patrick Uiterwijk commit 199831c77c50e6913e893b6bc268ba9f4a9a2bf8 upstream. The USB2 port for Armada 38x is defined to be at 58000, not at 5. Fixes: 2d0a7addbd10

[PATCH 4.4 007/163] ARM: mvebu: Correct unit address for linksys

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Patrick Uiterwijk commit 199831c77c50e6913e893b6bc268ba9f4a9a2bf8 upstream. The USB2 port for Armada 38x is defined to be at 58000, not at 5. Fixes: 2d0a7addbd10 ("ARM: Kirkwood: Add

[PATCH 4.4 008/163] ARM: OMAP2: Fix up interconnect barrier initialization for DRA7

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nishanth Menon commit 456e8d53482537616899a146b706eccd095404e6 upstream. The following commits: commit 3fa609755c11 ("ARM: omap2: restore OMAP4 barrier behaviour") commit

[PATCH 4.4 000/163] 4.4.9-stable review

This is the start of the stable review cycle for the 4.4.9 release. There are 163 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu May 5 00:04:47 UTC 2016. Anything

[PATCH 4.4 008/163] ARM: OMAP2: Fix up interconnect barrier initialization for DRA7

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Nishanth Menon commit 456e8d53482537616899a146b706eccd095404e6 upstream. The following commits: commit 3fa609755c11 ("ARM: omap2: restore OMAP4 barrier behaviour") commit f746929ffdc8 ("Revert

[PATCH 4.4 000/163] 4.4.9-stable review

This is the start of the stable review cycle for the 4.4.9 release. There are 163 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu May 5 00:04:47 UTC 2016. Anything

[PATCH 4.4 056/163] Input: gtco - fix crash on detecting device without endpoints

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vladis Dronov commit 162f98dea487206d9ab79fc12ed64700667a894d upstream. The gtco driver expects at least one valid endpoint. If given malicious descriptors that specify 0

[PATCH 4.4 055/163] netlink: dont send NETLINK_URELEASE for unbound sockets

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Ivanov commit e27260203912b40751fa353d009eaa5a642c739f upstream. All existing users of NETLINK_URELEASE use it to clean up resources that were previously

[PATCH 4.4 049/163] crypto: talitos - fix crash in talitos_cra_init()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jonas Eymann commit 89d124cb61b39900959e2839ac06b6339b6a54cb upstream. Conversion of talitos driver to the new AEAD interface hasn't been properly tested. AEAD algorithms

[PATCH 4.4 056/163] Input: gtco - fix crash on detecting device without endpoints

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Vladis Dronov commit 162f98dea487206d9ab79fc12ed64700667a894d upstream. The gtco driver expects at least one valid endpoint. If given malicious descriptors that specify 0 for the number of

[PATCH 4.4 055/163] netlink: dont send NETLINK_URELEASE for unbound sockets

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Ivanov commit e27260203912b40751fa353d009eaa5a642c739f upstream. All existing users of NETLINK_URELEASE use it to clean up resources that were previously allocated to a socket via some

[PATCH 4.4 049/163] crypto: talitos - fix crash in talitos_cra_init()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jonas Eymann commit 89d124cb61b39900959e2839ac06b6339b6a54cb upstream. Conversion of talitos driver to the new AEAD interface hasn't been properly tested. AEAD algorithms crash in

[PATCH 4.4 050/163] crypto: talitos - fix AEAD tcrypt tests

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Horia Geant? commit 340ff60ae93a5db2b2be6f38868df9a1293b6007 upstream. After conversion to new AEAD interface, tcrypt tests fail as follows: [...] [1.145414] alg:

[PATCH 4.4 050/163] crypto: talitos - fix AEAD tcrypt tests

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Horia Geant? commit 340ff60ae93a5db2b2be6f38868df9a1293b6007 upstream. After conversion to new AEAD interface, tcrypt tests fail as follows: [...] [1.145414] alg: aead: Test 1 failed on

[PATCH 4.4 052/163] powerpc: Update cpu_user_features2 in scan_features()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit beff82374b259d726e2625ec6c518a5f2613f0ae upstream. scan_features() updates cpu_user_features but not cpu_user_features2. Amongst other things,

[PATCH 4.4 052/163] powerpc: Update cpu_user_features2 in scan_features()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit beff82374b259d726e2625ec6c518a5f2613f0ae upstream. scan_features() updates cpu_user_features but not cpu_user_features2. Amongst other things, cpu_user_features2

[PATCH 4.4 051/163] powerpc: scan_features() updates incorrect bits for REAL_LE

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit 6997e57d693b07289694239e52a10d2f02c3a46f upstream. The REAL_LE feature entry in the ibm_pa_feature struct is missing an MMU feature value, meaning all

[PATCH 4.4 054/163] nl80211: check netlink protocol in socket release notification

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Ivanov commit 8f815cdde3e550e10c2736990d791f60c2ce43eb upstream. A non-privileged user can create a netlink socket with the same port_id as used by an

[PATCH 4.4 051/163] powerpc: scan_features() updates incorrect bits for REAL_LE

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit 6997e57d693b07289694239e52a10d2f02c3a46f upstream. The REAL_LE feature entry in the ibm_pa_feature struct is missing an MMU feature value, meaning all the remaining

[PATCH 4.4 054/163] nl80211: check netlink protocol in socket release notification

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Ivanov commit 8f815cdde3e550e10c2736990d791f60c2ce43eb upstream. A non-privileged user can create a netlink socket with the same port_id as used by an existing open nl80211 netlink

[PATCH 4.4 053/163] powerpc: Update TM user feature bits in scan_features()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit 4705e02498d6d5a7ab98dfee9595cd5e91db2017 upstream. We need to update the user TM feature bits (PPC_FEATURE2_HTM and PPC_FEATURE2_HTM) to mirror what we

[PATCH 4.4 058/163] xen kconfig: dont "select INPUT_XEN_KBDDEV_FRONTEND"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 13aa38e291bdd4e4018f40dd2f75e464814dcbf3 upstream. The Xen framebuffer driver selects the xen keyboard driver, so the latter will be built-in if

[PATCH 4.4 041/163] Revert "drm/radeon: disable runtime pm on PX laptops without dGPU power control"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit bfaddd9fc8ac048b99475f000dbef6f08297417f upstream. This reverts commit e64c952efb8e0c15ae82cec8e455ab4910690ef1. ATPX is the ACPI method for

[PATCH 4.4 053/163] powerpc: Update TM user feature bits in scan_features()

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Anton Blanchard commit 4705e02498d6d5a7ab98dfee9595cd5e91db2017 upstream. We need to update the user TM feature bits (PPC_FEATURE2_HTM and PPC_FEATURE2_HTM) to mirror what we do with the

[PATCH 4.4 058/163] xen kconfig: dont "select INPUT_XEN_KBDDEV_FRONTEND"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit 13aa38e291bdd4e4018f40dd2f75e464814dcbf3 upstream. The Xen framebuffer driver selects the xen keyboard driver, so the latter will be built-in if XEN_FBDEV_FRONTEND=y.

[PATCH 4.4 041/163] Revert "drm/radeon: disable runtime pm on PX laptops without dGPU power control"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit bfaddd9fc8ac048b99475f000dbef6f08297417f upstream. This reverts commit e64c952efb8e0c15ae82cec8e455ab4910690ef1. ATPX is the ACPI method for controlling AMD PowerXpress

[PATCH 4.4 068/163] drm/radeon: add a quirk for a XFX R9 270X

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit bcb31eba4a4ea356fd61cbd5dec5511c3883f57e upstream. bug: https://bugs.freedesktop.org/show_bug.cgi?id=76490 Signed-off-by: Alex Deucher

[PATCH 4.4 066/163] amdgpu/uvd: add uvd fw version for amdgpu

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sonny Jiang commit 562e2689baebaa2ac25b7ec934385480ed1cb7d6 upstream. Was previously always hardcoded to 0. Signed-off-by: Sonny Jiang Reviewed-by:

[PATCH 4.4 057/163] Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit eda5ecc0a6b865561997e177c393f0b0136fe3b7 upstream. The trigger delay algorithm that converts from microseconds to the register value looks incorrect.

[PATCH 4.4 068/163] drm/radeon: add a quirk for a XFX R9 270X

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit bcb31eba4a4ea356fd61cbd5dec5511c3883f57e upstream. bug: https://bugs.freedesktop.org/show_bug.cgi?id=76490 Signed-off-by: Alex Deucher Signed-off-by: Greg Kroah-Hartman

[PATCH 4.4 066/163] amdgpu/uvd: add uvd fw version for amdgpu

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sonny Jiang commit 562e2689baebaa2ac25b7ec934385480ed1cb7d6 upstream. Was previously always hardcoded to 0. Signed-off-by: Sonny Jiang Reviewed-by: Alex Deucher Signed-off-by: Alex Deucher

[PATCH 4.4 057/163] Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Stephen Boyd commit eda5ecc0a6b865561997e177c393f0b0136fe3b7 upstream. The trigger delay algorithm that converts from microseconds to the register value looks incorrect. According to most of

[PATCH 4.4 064/163] drm/amdgpu: use defines for CRTCs and AMFT blocks

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 3ea25f858fd5aeee888059952bbb8e910541eebb upstream. Prerequiste for the next patch which ups the limits. Reviewed-by: Harry Wentland

[PATCH 4.4 064/163] drm/amdgpu: use defines for CRTCs and AMFT blocks

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 3ea25f858fd5aeee888059952bbb8e910541eebb upstream. Prerequiste for the next patch which ups the limits. Reviewed-by: Harry Wentland Signed-off-by: Alex Deucher

[PATCH 4.4 061/163] iommu/amd: Fix checking of pci dma aliases

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Joerg Roedel commit e3156048346c28c695f5cf9db67a8cf88c90f947 upstream. Commit 61289cb ('iommu/amd: Remove old alias handling code') removed the old alias handling code from

[PATCH 4.4 059/163] pinctrl: mediatek: correct debounce time unit in mtk_gpio_set_debounce

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yingjoe Chen commit 5fedbb923936174ab4d1d5cc92bca1cf6b2e0ca2 upstream. The debounce time unit for gpio_chip.set_debounce is us but mtk_gpio_set_debounce regard it as

[PATCH 4.4 061/163] iommu/amd: Fix checking of pci dma aliases

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Joerg Roedel commit e3156048346c28c695f5cf9db67a8cf88c90f947 upstream. Commit 61289cb ('iommu/amd: Remove old alias handling code') removed the old alias handling code from the AMD IOMMU

[PATCH 4.4 059/163] pinctrl: mediatek: correct debounce time unit in mtk_gpio_set_debounce

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yingjoe Chen commit 5fedbb923936174ab4d1d5cc92bca1cf6b2e0ca2 upstream. The debounce time unit for gpio_chip.set_debounce is us but mtk_gpio_set_debounce regard it as ms. Fix this by correct

[PATCH 4.4 033/163] ALSA: pcxhr: Fix missing mutex unlock

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 67f3754b51f22b18c4820fb84062f658c30e8644 upstream. The commit [9bef72bdb26e: ALSA: pcxhr: Use nonatomic PCM ops] converted to non-atomic PCM ops, but

[PATCH 4.4 062/163] iommu/dma: Restore scatterlist offsets correctly

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Robin Murphy commit 07b48ac4bbe527e68cfc555f2b2b206908437141 upstream. With the change to stashing just the IOVA-page-aligned remainder of the CPU-page offset rather than

[PATCH 4.4 060/163] pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Keerthy commit 56b367c0cd67d4c3006738e7dc9dda9273fd2bfe upstream. pcs_parse_bits_in_pinctrl_entry uses ffs which gives bit indices ranging from 1 to MAX. This leads to a

[PATCH 4.4 033/163] ALSA: pcxhr: Fix missing mutex unlock

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 67f3754b51f22b18c4820fb84062f658c30e8644 upstream. The commit [9bef72bdb26e: ALSA: pcxhr: Use nonatomic PCM ops] converted to non-atomic PCM ops, but shamelessly with an

[PATCH 4.4 062/163] iommu/dma: Restore scatterlist offsets correctly

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Robin Murphy commit 07b48ac4bbe527e68cfc555f2b2b206908437141 upstream. With the change to stashing just the IOVA-page-aligned remainder of the CPU-page offset rather than the whole thing, the

[PATCH 4.4 060/163] pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Keerthy commit 56b367c0cd67d4c3006738e7dc9dda9273fd2bfe upstream. pcs_parse_bits_in_pinctrl_entry uses ffs which gives bit indices ranging from 1 to MAX. This leads to a corner case where we

[PATCH 4.4 042/163] Revert "drm/amdgpu: disable runtime pm on PX laptops without dGPU power control"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit e9bef455af8eb0e837e179aab8988ae2649fd8d3 upstream. This reverts commit bedf2a65c1aa8fb29ba8527fd00c0f68ec1f55f1. See the radeon revert for an

[PATCH 4.4 042/163] Revert "drm/amdgpu: disable runtime pm on PX laptops without dGPU power control"

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit e9bef455af8eb0e837e179aab8988ae2649fd8d3 upstream. This reverts commit bedf2a65c1aa8fb29ba8527fd00c0f68ec1f55f1. See the radeon revert for an extended description.

[PATCH 4.4 067/163] drm/amdgpu: fix regression on CIK (v2)

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Grigori Goronzy This fix was written against drm-next, but when it was backported to 4.5 as a stable fix, the driver internal structure change was missed. Fix that up here

[PATCH 4.4 065/163] drm/amdgpu: bump the afmt limit for CZ, ST, Polaris

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 83c5cda2ccf40a7a7e4bb674321509b346e23d5a upstream. Fixes array overflow on these chips. Reviewed-by: Harry Wentland

[PATCH 4.4 034/163] ALSA: hda - Add dock support for ThinkPad X260

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Conrad Kostecki commit 037e119738120c1cdc460c6ae33871c3000531f3 upstream. Fixes audio output on a ThinkPad X260, when using Lenovo CES 2013 docking station series

[PATCH 4.4 067/163] drm/amdgpu: fix regression on CIK (v2)

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Grigori Goronzy This fix was written against drm-next, but when it was backported to 4.5 as a stable fix, the driver internal structure change was missed. Fix that up here to avoid a hang due

[PATCH 4.4 065/163] drm/amdgpu: bump the afmt limit for CZ, ST, Polaris

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alex Deucher commit 83c5cda2ccf40a7a7e4bb674321509b346e23d5a upstream. Fixes array overflow on these chips. Reviewed-by: Harry Wentland Signed-off-by: Alex Deucher Signed-off-by: Greg

[PATCH 4.4 034/163] ALSA: hda - Add dock support for ThinkPad X260

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Conrad Kostecki commit 037e119738120c1cdc460c6ae33871c3000531f3 upstream. Fixes audio output on a ThinkPad X260, when using Lenovo CES 2013 docking station series (basic, pro, ultra).

[PATCH 4.4 001/163] block: partition: initialize percpuref before sending out KOBJ_ADD

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit b30a337ca27c4f40439e4bfb290cba5f88d73bb7 upstream. The initialization of partition's percpu_ref should have been done before sending out KOBJ_ADD

[PATCH 4.4 001/163] block: partition: initialize percpuref before sending out KOBJ_ADD

4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ming Lei commit b30a337ca27c4f40439e4bfb290cba5f88d73bb7 upstream. The initialization of partition's percpu_ref should have been done before sending out KOBJ_ADD uevent, which may cause

[PATCH 3.14 19/37] efi: Fix out-of-bounds read in variable_matches()

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Laszlo Ersek commit 630ba0cc7a6dbafbdee43795617c872b35cde1b4 upstream. The variable_matches() function can currently read "var_name[len]", for example when: - var_name[0]

[PATCH 3.14 19/37] efi: Fix out-of-bounds read in variable_matches()

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Laszlo Ersek commit 630ba0cc7a6dbafbdee43795617c872b35cde1b4 upstream. The variable_matches() function can currently read "var_name[len]", for example when: - var_name[0] == 'a', - len ==

[PATCH 3.14 18/37] ASoC: rt5640: Correct the digital interface data select

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Sugar Zhang commit 653aa4645244042826f105aab1be3d01b3d493ca upstream. this patch corrects the interface adc/dac control register definition according to datasheet.

[PATCH 3.14 18/37] ASoC: rt5640: Correct the digital interface data select

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Sugar Zhang commit 653aa4645244042826f105aab1be3d01b3d493ca upstream. this patch corrects the interface adc/dac control register definition according to datasheet. Signed-off-by: Sugar Zhang

[PATCH 3.14 34/37] bus: imx-weim: Take the status property value into account

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Fabio Estevam commit 33b96d2c9579213cf3f36d7b29841b1e464750c4 upstream. Currently we have an incorrect behaviour when multiple devices are present under the weim node.

[PATCH 3.14 35/37] jme: Do not enable NIC WoL functions on S0

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Guo-Fu Tseng commit 0772a99b818079e628a1da122ac7ee023faed83e upstream. Otherwise it might be back on resume right after going to suspend in some hardware.

[PATCH 3.14 25/37] rtc: hym8563: fix invalid year calculation

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Kochetkov commit d5861262210067fc01b2fb4f7af2fd85a3453f15 upstream. Year field must be in BCD format, according to hym8563 datasheet. Due to the bug year 2016

[PATCH 3.14 34/37] bus: imx-weim: Take the status property value into account

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Fabio Estevam commit 33b96d2c9579213cf3f36d7b29841b1e464750c4 upstream. Currently we have an incorrect behaviour when multiple devices are present under the weim node. For example: {

[PATCH 3.14 35/37] jme: Do not enable NIC WoL functions on S0

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Guo-Fu Tseng commit 0772a99b818079e628a1da122ac7ee023faed83e upstream. Otherwise it might be back on resume right after going to suspend in some hardware. Reported-by: Diego Viola

[PATCH 3.14 25/37] rtc: hym8563: fix invalid year calculation

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Kochetkov commit d5861262210067fc01b2fb4f7af2fd85a3453f15 upstream. Year field must be in BCD format, according to hym8563 datasheet. Due to the bug year 2016 became 2010. Fixes:

[PATCH 3.14 30/37] include/linux/poison.h: fix LIST_POISON{1,2} offset

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Vasily Kulikov commit 8a5e5e02fc83aaf67053ab53b359af08c6c49aaf upstream. Poison pointer values should be small enough to find a room in non-mmap'able/hardly-mmap'able

[PATCH 3.14 37/37] sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a race

3.14-stable review patch. If anyone has any objections, please let me know. -- From: NeilBrown commit a6ab1e8126d205238defbb55d23661a3a5c6a0d8 upstream. sunrpc_cache_pipe_upcall() can detect a race if CACHE_PENDING is no longer set. In this case it aborts the

[PATCH 3.14 37/37] sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a race

3.14-stable review patch. If anyone has any objections, please let me know. -- From: NeilBrown commit a6ab1e8126d205238defbb55d23661a3a5c6a0d8 upstream. sunrpc_cache_pipe_upcall() can detect a race if CACHE_PENDING is no longer set. In this case it aborts the queuing of the

[PATCH 3.14 30/37] include/linux/poison.h: fix LIST_POISON{1,2} offset

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Vasily Kulikov commit 8a5e5e02fc83aaf67053ab53b359af08c6c49aaf upstream. Poison pointer values should be small enough to find a room in non-mmap'able/hardly-mmap'able space. E.g. on x86

[PATCH 3.14 09/37] crypto: ccp - Prevent information leakage on export

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Tom Lendacky commit f709b45ec461b548c41a00044dba1f1b572783bf upstream. Prevent information from leaking to userspace by doing a memset to 0 of the export state

[PATCH 3.14 08/37] drm/qxl: fix cursor position with non-zero hotspot

3.14-stable review patch. If anyone has any objections, please let me know. -- From: John Keeping commit d59a1f71ff1aeda4b4630df92d3ad4e3b1dfc885 upstream. The SPICE protocol considers the position of a cursor to be the location of its active pixel on the

[PATCH 3.14 28/37] ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Eryu Guan commit 5e1021f2b6dff1a86a468a1424d59faae2bc63c1 upstream. ext4_reserve_inode_write() in ext4_mark_inode_dirty() could fail on error (e.g. EIO) and iloc.bh can be

[PATCH 3.14 09/37] crypto: ccp - Prevent information leakage on export

3.14-stable review patch. If anyone has any objections, please let me know. -- From: Tom Lendacky commit f709b45ec461b548c41a00044dba1f1b572783bf upstream. Prevent information from leaking to userspace by doing a memset to 0 of the export state structure before setting the

<    5   6   7   8   9   10   11   12   13   14   >