Package "linux-doc"

 linux (4.4.0-205.237) xenial; urgency=medium
 .
   * xenial/linux: 4.4.0-205.237 -proposed tracker (LP: #1918844)
 .
   * CVE-2018-13095
     - xfs: More robust inode extent count validation
 .
   * i40e PF reset due to incorrect MDD event (LP: #1772675)
     - i40e: change behavior on PF in response to MDD event
 .
   * Xenial update: v4.4.260 upstream stable release (LP: #1918184)
     - futex: Ensure the correct return value from futex_lock_pi()
     - net: usb: qmi_wwan: support ZTE P685M modem
     - iwlwifi: pcie: fix to correct null check
     - mmc: sdhci-esdhc-imx: fix kernel panic when remove module
     - scripts: use pkg-config to locate libcrypto
     - scripts: set proper OpenSSL include dir also for sign-file
     - hugetlb: fix update_and_free_page contig page struct assumption
     - JFS: more checks for invalid superblock
     - xfs: Fix assert failure in xfs_setattr_size()
     - net: fix up truesize of cloned skb in skb_prepare_for_shift()
     - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing
     - staging: fwserial: Fix error handling in fwserial_create
     - x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk
     - vt/consolemap: do font sum unsigned
     - wlcore: Fix command execute failure 19 for wl12xx
     - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()
     - ath10k: fix wmi mgmt tx queue full due to race condition
     - x86/build: Treat R_386_PLT32 relocation as R_386_PC32
     - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
     - staging: most: sound: add sanity check for function argument
     - media: uvcvideo: Allow entities with no pads
     - scsi: iscsi: Restrict sessions and handles to admin capabilities
     - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output
     - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
     - scsi: iscsi: Verify lengths on passthrough PDUs
     - Xen/gnttab: handle p2m update errors on a per-slot basis
     - xen-netback: respect gnttab_map_refs()'s return value
     - zsmalloc: account the number of compacted pages correctly
     - swap: fix swapfile read/write offset
     - media: v4l: ioctl: Fix memory leak in video_usercopy
     - Linux 4.4.260
 .
   * Xenial update: v4.4.259 upstream stable release (LP: #1918182)
     - HID: make arrays usage and value to be the same
     - usb: quirks: add quirk to start video capture on ELMO L-12F document camera
       reliable
     - xen-netback: delete NAPI instance when queue fails to initialize
     - ntfs: check for valid standard information attribute
     - igb: Remove incorrect "unexpected SYS WRAP" log message
     - scripts/recordmcount.pl: support big endian for ARCH sh
     - kdb: Make memory allocations more robust
     - MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section
     - Bluetooth: Fix initializing response id after clearing struct
     - ARM: dts: exynos: correct PMIC interrupt trigger level on Spring
     - ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa
     - Bluetooth: drop HCI device reference before return
     - Bluetooth: Put HCI device if inquiry procedure interrupts
     - usb: dwc2: Abort transaction after errors with unknown reason
     - usb: dwc2: Make "trimming xfer length" a debug message
     - ARM: s3c: fix fiq for clang IAS
     - bnxt_en: reverse order of TX disable and carrier off
     - xen/netback: fix spurious event detection for common event case
     - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case
     - fbdev: aty: SPARC64 requires FB_ATY_CT
     - drm/gma500: Fix error return code in psb_driver_load()
     - gma500: clean up error handling in init
     - MIPS: c-r4k: Fix section mismatch for loongson2_sc_init
     - MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0
     - media: media/pci: Fix memleak in empress_init
     - media: tm6000: Fix memleak in tm6000_start_stream
     - ASoC: cs42l56: fix up error handling in probe
     - media: lmedm04: Fix misuse of comma
     - media: cx25821: Fix a bug when reallocating some dma memory
     - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values
     - btrfs: clarify error returns values in __load_free_space_cache
     - fs/jfs: fix potential integer overflow on shift of a int
     - jffs2: fix use after free in jffs2_sum_write_data()
     - clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
     - HID: core: detect and skip invalid inputs to snto32()
     - dmaengine: fsldma: Fix a resource leak in the remove function
     - dmaengine: fsldma: Fix a resource leak in an error handling path of the
       probe function
     - clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
     - regulator: axp20x: Fix reference cout leak
     - isofs: release buffer head before return
     - IB/umad: Return EIO in case of when device disassociated
     - powerpc/47x: Disable 256k page size
     - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe
     - ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores
     - amba: Fix resource leak for drivers without .remove
     - tracepoint: Do not fail unregistering a probe due to memory failure
     - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
     - powerpc/pseries/dlpar: handle ibm, configure-connector delay status
     - perf intel-pt: Fix missing CYC processing in PSB
     - perf test: Fix unaligned access in sample parsing test
     - Input: elo - fix an error code in elo_connect()
     - sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set
     - misc: eeprom_93xx46: Fix module alias to enable module autoprobe
     - misc: eeprom_93xx46: Add module alias to avoid breaking support for non
       device tree users
     - VMCI: Use set_page_dirty_lock() when unregistering guest memory
     - PCI: Align checking of syscall user config accessors
     - mm/memory.c: fix

 linux (4.4.0-204.236) xenial; urgency=medium
 .
   * xenial/linux: 4.4.0-204.236 -proposed tracker (LP: #1916222)
 .
   * Xenial update: v4.4.254 upstream stable release (LP: #1914648)
     - ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
     - ALSA: hda/via: Add minimum mute flag
     - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error
     - dm: avoid filesystem lookup in dm_get_dev_t()
     - ASoC: Intel: haswell: Add missing pm_ops
     - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
     - drm/nouveau/bios: fix issue shadowing expansion ROMs
     - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields
     - can: dev: can_restart: fix use after free bug
     - iio: ad5504: Fix setting power-down state
     - ehci: fix EHCI host controller initialization sequence
     - usb: bdc: Make bdc pci driver depend on BROKEN
     - [Config] updateconfigs for USB_BDC_PCI
     - xhci: make sure TRB is fully written before giving it to the controller
     - compiler.h: Raise minimum version of GCC to 5.1 for arm64
     - netfilter: rpfilter: mask ecn bits before fib lookup
     - sh: dma: fix kconfig dependency for G2_DMA
     - sh_eth: Fix power down vs. is_opened flag ordering
     - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too
     - ipv6: create multicast route with RTPROT_KERNEL
     - net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
     - Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
     - tracing: Fix race in trace_open and buffer resize call
     - xen-blkback: set ring->xenblkd to NULL after kthread_stop()
     - x86/boot/compressed: Disable relocation relaxation
     - Linux 4.4.254
 .
   * Xenial update: v4.4.253 upstream stable release (LP: #1914647)
     - ASoC: dapm: remove widget from dirty list on free
     - mm/hugetlb: fix potential missing huge page size info
     - ext4: fix bug for rename with RENAME_WHITEOUT
     - ARC: build: add boot_targets to PHONY
     - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram
     - arch/arc: add copy_user_page() to to fix build error on ARC
     - misdn: dsp: select CONFIG_BITREVERSE
     - net: ethernet: fs_enet: Add missing MODULE_LICENSE
     - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI
     - ARM: picoxcell: fix missing interrupt-parent properties
     - Input: uinput - avoid FF flush when destroying device
     - dump_common_audit_data(): fix racy accesses to ->d_name
     - NFS: nfs_igrab_and_active must first reference the superblock
     - ext4: fix superblock checksum failure when setting password salt
     - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp
     - mm, slub: consider rest of partial list if acquire_slab() fails
     - net: sunrpc: interpret the return value of kstrtou32 correctly
     - usb: ohci: Make distrust_firmware param default to false
     - iio: buffer: Fix demux update
     - nfsd4: readdirplus shouldn't return parent of export
     - net: cdc_ncm: correct overhead in delayed_ndp_size
     - netxen_nic: fix MSI/MSI-x interrupts
     - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request
     - net: dcb: Validate netlink message in DCB handler
     - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
     - net: sit: unregister_netdevice on newlink's error path
     - rxrpc: Fix handling of an unsupported token type in rxrpc_read()
     - net: avoid 32 x truesize under-estimation for tiny skbs
     - spi: cadence: cache reference clock rate during probe
     - Linux 4.4.253
 .
   * Xenial update: v4.4.252 upstream stable release (LP: #1913479)
     - Revert "UBUNTU: SAUCE: target: fix XCOPY NAA identifier lookup"
     - target: add XCOPY target/segment desc sense codes
     - target: bounds check XCOPY segment descriptor list
     - target: use XCOPY segment descriptor CSCD IDs
     - xcopy: loop over devices using idr helper
     - scsi: target: Fix XCOPY NAA identifier lookup
     - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at
     - net: ip: always refragment ip defragmented packets
     - net: fix pmtu check in nopmtudisc mode
     - vmlinux.lds.h: Add PGO and AutoFDO input sections
     - ubifs: wbuf: Don't leak kernel memory to flash
     - spi: pxa2xx: Fix use-after-free on unbind
     - cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()
     - wil6210: select CONFIG_CRC32
     - block: rsxx: select CONFIG_CRC32
     - iommu/intel: Fix memleak in intel_irq_remapping_alloc
     - block: fix use-after-free in disk_part_iter_next
     - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed
       packet
     - Linux 4.4.252
 .
   * Xenial update: v4.4.251 upstream stable release (LP: #1913478)
     - kbuild: don't hardcode depmod path
     - workqueue: Kick a worker based on the actual activation of delayed works
     - lib/genalloc: fix the overflow when size is too big
     - depmod: handle the case of /sbin/depmod without /sbin in PATH
     - atm: idt77252: call pci_disable_device() on error path
     - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()
     - net: hns: fix return value check in __lb_other_process()
     - net: hdlc_ppp: Fix issues when mod_timer is called while timer is running
     - CDC-NCM: remove "connected" log message
     - vhost_net: fix ubuf refcount incorrectly when sendmsg fails
     - net: sched: prevent invalid Scell_log shift count
     - virtio_net: Fix recursive call to cpus_read_lock()
     - ethernet: ucc_geth: fix use-after-free in ucc_geth_remove()
     - video: hyperv_fb: Fix the mmap() regression for v5.4.y and older
     - usb: gadget: enable super speed plus
     - USB: cdc-acm: blacklist another IR Droid device
     - usb: chipidea: ci_hdrc_imx: add missing put_device() call in
       usbmisc_get_init_data()
     - USB: xhci: fix U1/U2 handling for hardware with XH

 linux (4.4.0-203.235) xenial; urgency=medium
 .
   * xenial/linux: 4.4.0-203.235 -proposed tracker (LP: #1914140)
 .
   * Ubuntu 16.04 kernel 4.4.0-202 basic commands hanging (LP: #1913853)
     - SAUCE: Revert "mm: check that mm is still valid in madvise()"
 .

 linux (4.4.0-202.234) xenial; urgency=medium
 .
   * xenial/linux: 4.4.0-202.234 -proposed tracker (LP: #1913086)
 .
   * DMI entry syntax fix for Pegatron / ByteSpeed C15B (LP: #1910639)
     - Input: i8042 - unbreak Pegatron C15B
 .
   * CVE-2020-29372
     - mm: check that mm is still valid in madvise()
 .
   * errinjct open fails on IBM POWER LPAR (LP: #1908710)
     - powerpc/rtas: Fix typo of ibm, open-errinjct in RTAS filter
 .
   * 4.4 kernel panics in kvm wake_up() handler (LP: #1908428)
     - kvm: vmx: rename vmx_pre/post_block to pi_pre/post_block
     - KVM: VMX: extract __pi_post_block
     - KVM: VMX: avoid double list add with VT-d posted interrupts
 .
   * restore reverted commit "crypto: arm64/sha - avoid non-standard inline asm
     tricks" (LP: #1907489)
     - crypto: arm64/sha - avoid non-standard inline asm tricks
 .
   * CVE-2020-29374
     - gup: document and work around "COW can break either way" issue
 .
   * Xenial update: v4.4.249 upstream stable release (LP: #1910139)
     - spi: bcm2835aux: Fix use-after-free on unbind
     - spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
     - ARC: stack unwinding: don't assume non-current task is sleeping
     - platform/x86: acer-wmi: add automatic keyboard background light toggle key
       as KEY_LIGHTS_TOGGLE
     - Input: cm109 - do not stomp on control URB
     - Input: i8042 - add Acer laptops to the i8042 reset list
     - [Config] updateconfigs for SPI_DYNAMIC
     - spi: Prevent adding devices below an unregistering controller
     - net/mlx4_en: Avoid scheduling restart task if it is already running
     - tcp: fix cwnd-limited bug for TSO deferral where we send nothing
     - net: stmmac: delete the eee_ctrl_timer after napi disabled
     - net: bridge: vlan: fix error return code in __vlan_add()
     - USB: dummy-hcd: Fix uninitialized array use in init()
     - USB: add RESET_RESUME quirk for Snapscan 1212
     - ALSA: usb-audio: Fix potential out-of-bounds shift
     - ALSA: usb-audio: Fix control 'access overflow' errors from chmap
     - xhci: Give USB2 ports time to enter U3 in bus suspend
     - USB: sisusbvga: Make console support depend on BROKEN
     - [Config] updateconfigs for USB_SISUSBVGA_CON
     - ALSA: pcm: oss: Fix potential out-of-bounds shift
     - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access
     - USB: serial: cp210x: enable usb generic throttle/unthrottle
     - scsi: bnx2i: Requires MMU
     - can: softing: softing_netdev_open(): fix error handling
     - RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait
     - dm table: Remove BUG_ON(in_interrupt())
     - soc/tegra: fuse: Fix index bug in get_process_id
     - USB: serial: option: add interface-number sanity check to flag handling
     - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
     - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul
     - media: msi2500: assign SPI bus number dynamically
     - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
     - drm/gma500: fix double free of gma_connector
     - ARM: p2v: fix handling of LPAE translation in BE mode
     - crypto: talitos - Fix return type of current_desc_hdr()
     - spi: img-spfi: fix reference leak in img_spfi_resume
     - ASoC: pcm: DRAIN support reactivation
     - Bluetooth: Fix null pointer dereference in hci_event_packet()
     - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup
     - spi: tegra20-slink: fix reference leak in slink ops of tegra20
     - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume
     - spi: tegra114: fix reference leak in tegra spi ops
     - RDMa/mthca: Work around -Wenum-conversion warning
     - MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA
     - media: solo6x10: fix missing snd_card_free in error handling case
     - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
     - Input: ads7846 - fix integer overflow on Rt calculation
     - Input: ads7846 - fix unaligned access on 7845
     - powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32
     - soc: ti: knav_qmss: fix reference leak in knav_queue_probe
     - soc: ti: Fix reference imbalance in knav_dma_probe
     - drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe
     - memstick: fix a double-free bug in memstick_check
     - ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host
     - ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host
     - orinoco: Move context allocation after processing the skb
     - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common
     - mips: cdmm: fix use-after-free in mips_cdmm_bus_discover
     - NFSv4.2: condition READDIR's mask for security label based on LSM state
     - lockd: don't use interval-based rebinding over TCP
     - NFS: switch nfsiod to be an UNBOUND workqueue.
     - media: saa7146: fix array overflow in vidioc_s_audio()
     - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()
     - memstick: r592: Fix error return in r592_probe()
     - ASoC: jz4740-i2s: add missed checks for clk_get()
     - dm ioctl: fix error return code in target_message
     - clocksource/drivers/arm_arch_timer: Correct fault programming of
       CNTKCTL_EL1.EVNTI
     - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE
     - cpufreq: loongson1: Add missing MODULE_ALIAS
     - cpufreq: scpi: Add missing MODULE_ALIAS
     - scsi: pm80xx: Fix error return in pm8001_pci_probe()
     - seq_buf: Avoid type mismatch for seq_buf_init
     - scsi: fnic: Fix error return code in fnic_probe()
     - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops
     - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe
     - usb: oxu210hp-hcd: Fix memory leak in oxu_create
     - speakup: fix uninitialized flush_lock
     - nfs_common: need lock during iterate through the list

 linux (4.4.0-200.232) xenial; urgency=medium
 .
   * xenial/linux: 4.4.0-200.232 -proposed tracker (LP: #1911151)
 .
   * CVE-2020-28374
     - target: simplify XCOPY wwn->se_dev lookup helper
     - SAUCE: target: fix XCOPY NAA identifier lookup