I'm announcing the release of the 3.16.66 kernel.

All users of the 3.16 kernel series should upgrade.

The updated 3.16.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git

The diff from 3.16.65 is attached to this message.

Ben.

------------

Makefile | 2 +- arch/alpha/mm/fault.c | 2 +- arch/arc/kernel/head.S | 4 +- arch/arc/kernel/setup.c | 88 ++++++++++---- arch/arc/kernel/signal.c | 39 +++--- arch/arc/kernel/troubleshoot.c | 27 ++--- arch/arc/mm/fault.c | 13 +- arch/arm/boot/dts/kirkwood-dnskw.dtsi | 4 +- arch/arm/mach-iop32x/n2100.c | 3 +- arch/arm/plat-pxa/ssp.c | 3 - arch/arm64/include/asm/signal32.h | 11 +- arch/arm64/kernel/signal.c | 48 ++++---- arch/arm64/kernel/signal32.c | 14 +-- arch/avr32/kernel/signal.c | 43 +++---- arch/blackfin/kernel/signal.c | 39 +++--- arch/c6x/kernel/signal.c | 43 +++---- arch/cris/arch-v10/kernel/signal.c | 79 +++++------- arch/cris/arch-v32/kernel/signal.c | 77 +++++------- arch/frv/kernel/signal.c | 99 +++++++-------- arch/hexagon/kernel/signal.c | 45 +++---- arch/ia64/kernel/signal.c | 46 ++++--- arch/m32r/kernel/signal.c | 47 ++++---- arch/m68k/kernel/signal.c | 63 ++++------ arch/microblaze/kernel/signal.c | 48 +++----- arch/mips/include/asm/abi.h | 10 +- arch/mips/kernel/process.c | 7 +- arch/mips/kernel/signal-common.h | 2 +- arch/mips/kernel/signal.c | 72 +++++------ arch/mips/kernel/signal32.c | 39 +++--- arch/mips/kernel/signal_n32.c | 20 ++-- arch/mips/pci/msi-octeon.c | 4 +- arch/mips/pci/pci-octeon.c | 10 +- arch/mn10300/kernel/signal.c | 89 ++++++-------- arch/parisc/kernel/signal.c | 58 ++++----- arch/powerpc/kernel/signal.c | 41 ++----- arch/powerpc/kernel/signal.h | 14 +-- arch/powerpc/kernel/signal_32.c | 36 +++--- arch/powerpc/kernel/signal_64.c | 28 ++--- arch/s390/include/asm/mmu_context.h | 12 +- arch/s390/kernel/compat_signal.c | 79 ++++++------ arch/s390/kernel/early.c | 4 +- arch/s390/kernel/entry.h | 4 +- arch/s390/kernel/setup.c | 2 + arch/s390/kernel/signal.c | 78 +++++------- arch/s390/kernel/smp.c | 4 + arch/score/kernel/signal.c | 43 +++---- arch/sh/kernel/signal_32.c | 79 +++++------- arch/sh/kernel/signal_64.c | 82 +++++-------- arch/tile/include/asm/compat.h | 3 +- arch/tile/kernel/compat_signal.c | 29 ++--- arch/tile/kernel/signal.c | 54 ++++----- arch/um/include/shared/frame_kern.h | 12 +- arch/um/kernel/signal.c | 27 ++--- arch/unicore32/kernel/signal.c | 51 ++++---- arch/x86/boot/compressed/aslr.c | 4 +- arch/x86/ia32/ia32_aout.c | 6 +- arch/x86/include/asm/uaccess.h | 7 +- arch/x86/kernel/cpu/perf_event.c | 9 ++ arch/x86/kernel/cpu/perf_event.h | 21 ++++ arch/x86/kernel/cpu/perf_event_intel.c | 9 ++ arch/x86/kernel/cpu/perf_event_intel_uncore.c | 4 +- arch/x86/kvm/vmx.c | 7 +- arch/x86/kvm/x86.c | 3 +- arch/x86/um/signal.c | 45 ++++--- arch/xtensa/kernel/signal.c | 43 +++---- crypto/authenc.c | 14 ++- drivers/acpi/power.c | 22 ++++ drivers/ata/libata-core.c | 1 + drivers/block/rbd.c | 9 +- drivers/char/Kconfig | 2 +- drivers/char/ipmi/ipmi_msghandler.c | 6 + drivers/char/mwave/mwavedd.c | 7 ++ drivers/dma/bcm2835-dma.c | 124 +++++++++++-------- drivers/dma/dmatest.c | 30 ++--- drivers/dma/imx-dma.c | 8 +- drivers/gpu/drm/drm_fb_helper.c | 133 ++++++++++++--------- drivers/gpu/drm/drm_modes.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 9 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +- drivers/hv/hyperv_vmbus.h | 5 +- drivers/hv/ring_buffer.c | 31 +++-- drivers/hv/vmbus_drv.c | 91 +++++++++----- drivers/i2c/busses/i2c-cadence.c | 9 +- drivers/i2c/i2c-dev.c | 6 + drivers/infiniband/ulp/ipoib/ipoib.h | 1 - drivers/infiniband/ulp/ipoib/ipoib_cm.c | 3 +- drivers/input/misc/bma150.c | 9 +- drivers/input/mouse/elantech.c | 23 ++++ drivers/iommu/amd_iommu.c | 15 ++- drivers/md/dm-thin.c | 55 ++++++++- drivers/media/usb/em28xx/em28xx-dvb.c | 20 +--- drivers/media/v4l2-core/v4l2-ioctl.c | 4 +- drivers/mfd/ab8500-core.c | 2 +- drivers/mfd/tps6586x.c | 24 ++++ drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/tmio_mmc_pio.c | 8 +- drivers/mtd/nand/gpmi-nand/gpmi-lib.c | 13 +- drivers/net/can/dev.c | 27 ++--- drivers/net/ethernet/marvell/skge.c | 6 +- drivers/net/ethernet/mellanox/mlx4/fw.c | 68 +++++++---- .../net/ethernet/stmicro/stmmac/stmmac_ethtool.c | 22 ++-- drivers/net/phy/mdio_bus.c | 1 - drivers/net/phy/micrel.c | 41 ++++++- drivers/net/team/team.c | 27 +---- drivers/net/vxlan.c | 13 +- drivers/net/wireless/brcm80211/brcmfmac/bcdc.c | 29 ++--- drivers/net/wireless/brcm80211/brcmfmac/dhd.h | 2 +- drivers/net/wireless/brcm80211/brcmfmac/dhd_bus.h | 4 +- .../net/wireless/brcm80211/brcmfmac/dhd_linux.c | 76 +++++++++--- drivers/net/wireless/brcm80211/brcmfmac/dhd_sdio.c | 32 +++-- drivers/net/wireless/brcm80211/brcmfmac/fweh.h | 16 ++- drivers/net/wireless/brcm80211/brcmfmac/fwsignal.c | 11 +- drivers/net/wireless/brcm80211/brcmfmac/proto.h | 18 ++- drivers/net/wireless/brcm80211/brcmfmac/usb.c | 2 +- .../net/wireless/brcm80211/brcmfmac/wl_cfg80211.c | 2 + drivers/s390/block/dasd_eckd.c | 8 ++ drivers/s390/char/sclp_config.c | 2 + drivers/s390/net/qeth_core.h | 3 +- drivers/s390/net/qeth_core_main.c | 35 ++++-- drivers/s390/net/qeth_l2_main.c | 7 +- drivers/s390/net/qeth_l3_main.c | 3 + drivers/scsi/bnx2fc/bnx2fc_io.c | 4 +- drivers/scsi/isci/init.c | 14 +-- drivers/scsi/libsas/sas_expander.c | 2 + drivers/scsi/sd.c | 7 ++ drivers/staging/rtl8188eu/os_dep/usb_intf.c | 1 + drivers/tty/n_hdlc.c | 1 + drivers/tty/serial/serial_core.c | 12 +- drivers/tty/tty_io.c | 3 +- drivers/tty/vt/vt.c | 3 +- drivers/usb/class/cdc-acm.c | 7 ++ drivers/usb/core/quirks.c | 3 +- drivers/usb/gadget/net2272.c | 2 +- drivers/usb/musb/musb_gadget.c | 13 +- drivers/usb/musb/musbhsdma.c | 21 ++-- drivers/usb/phy/phy-am335x.c | 5 +- drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 2 + drivers/usb/serial/usb-serial-simple.c | 3 +- drivers/usb/storage/scsiglue.c | 8 +- drivers/usb/storage/unusual_devs.h | 12 ++ drivers/vfio/vfio_iommu_type1.c | 15 +++ drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c | 2 + fs/binfmt_elf.c | 3 +- fs/ceph/snap.c | 3 +- fs/cifs/file.c | 8 +- fs/cifs/smb2file.c | 4 +- fs/cifs/smb2pdu.c | 6 +- fs/cifs/transport.c | 2 +- fs/dcache.c | 6 +- fs/debugfs/inode.c | 7 ++ fs/fuse/dev.c | 4 +- fs/fuse/file.c | 2 +- fs/proc/task_mmu.c | 22 +++- include/keys/user-type.h | 2 +- include/linux/perf_event.h | 5 + include/linux/sched.h | 21 ++++ include/linux/signal.h | 15 +-- include/linux/tracehook.h | 8 +- include/sound/compress_driver.h | 6 +- ipc/shm.c | 4 +- kernel/events/core.c | 70 ++++++++--- kernel/events/ring_buffer.c | 3 + kernel/signal.c | 105 ++++++++++++---- lib/assoc_array.c | 8 +- mm/memory-failure.c | 3 +- mm/migrate.c | 8 +- mm/mmap.c | 24 ++-- mm/oom_kill.c | 8 ++ mm/shmem.c | 12 +- net/batman-adv/hard-interface.c | 4 +- net/batman-adv/soft-interface.c | 4 + net/bluetooth/l2cap_core.c | 83 ++++++++----- net/bridge/br_forward.c | 26 ++-- net/can/bcm.c | 27 +++++ net/dsa/slave.c | 13 +- net/ipv4/cipso_ipv4.c | 6 +- net/ipv6/addrconf.c | 3 +- net/ipv6/sit.c | 3 +- net/l2tp/l2tp_core.c | 5 +- net/mac80211/tx.c | 9 +- net/netfilter/nf_tables_api.c | 3 + net/netfilter/nft_compat.c | 120 +++++++++++-------- net/nfc/llcp_commands.c | 20 ++++ net/nfc/llcp_core.c | 24 +++- net/packet/af_packet.c | 12 +- net/sched/sch_netem.c | 10 +- net/vmw_vsock/vmci_transport.c | 4 + net/x25/af_x25.c | 13 +- scripts/kallsyms.c | 4 +- security/apparmor/apparmorfs.c | 1 + security/keys/key.c | 4 +- security/keys/keyring.c | 4 +- security/keys/proc.c | 11 +- security/keys/request_key.c | 1 + security/keys/request_key_auth.c | 2 +- security/yama/yama_lsm.c | 4 +- sound/pci/cs46xx/dsp_spos.c | 3 + sound/soc/codecs/tlv320aic32x4.c | 4 + sound/soc/intel/sst-mfld-platform-pcm.c | 8 +- sound/usb/card.c | 5 + sound/usb/mixer.c | 10 +- sound/usb/pcm.c | 9 +- sound/usb/quirks-table.h | 6 + sound/usb/stream.c | 31 +++-- tools/perf/tests/evsel-tp-sched.c | 8 +- 206 files changed, 2363 insertions(+), 1833 deletions(-)

Aaro Koskinen (1): MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled

Alex Williamson (1): vfio/type1: Limit DMA mappings per container

Alexander Popov (1): KVM: x86: Fix single-step debugging

Alexandru Ardelean (1): dmaengine: dmatest: unmap data on a single code-path when xfer done

Andrea Arcangeli (1): coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

Andy Lutomirski (1): x86/uaccess: Don't leak the AC flag into __put_user() value evaluation

Andy Shevchenko (1): dmaengine: dmatest: Abort test in case of mapping error

Arend van Spriel (5): brcmfmac: assure SSID length from firmware is limited brcmfmac: consolidate ifp lookup in driver core brcmfmac: make brcmf_proto_hdrpull() return struct brcmf_if instance brcmfmac: revise handling events in receive path brcmfmac: add subtype check for event handling in data path

Aya Levin (1): net/mlx4_core: Add masking for a few queries on HCA caps

Ben Hutchings (2): binfmt_elf: Fix missing SIGKILL for empty PIE Linux 3.16.66

Bin Liu (1): usb: phy: am335x: fix race condition in _probe

Borislav Petkov (1): x86/a.out: Clear the dump structure initially

Charles Keepax (1): ALSA: compress: Fix stop handling on compressed capture streams

Charles Yeh (1): USB: serial: pl2303: add new PID to support PL2303TB

Christian Borntraeger (1): s390/early: improve machine detection

Christoph Paasch (1): net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec

Cong Wang (1): team: avoid complex list operations in team_nl_cmd_options_set()

Dan Carpenter (4): mfd: ab8500-core: Return zero in get_register_interruptible() ALSA: cs46xx: Potential NULL dereference in probe scsi: bnx2fc: Fix error handling in probe() skge: potential memory corruption in skge_get_regs()

Daniel Drake (1): x86/kaslr: Fix incorrect i8254 outb() parameters

Daniele Palmas (1): usb: cdc-acm: send ZLP for Telit 3G Intel based modems

Darrick J. Wong (2): tmpfs: fix link accounting when a tmpfile is linked in tmpfs: fix uninitialized return value in shmem_link

David Hildenbrand (1): mm: migrate: don't rely on __PageMovable() of newpage after unlocking it

David Howells (1): assoc_array: Fix shortcut creation

Davidlohr Bueso (1): arc: do not export symbols in troubleshoot.c

Dexuan Cui (1): Drivers: hv: vmbus: Check for ring when getting debug info

Eric Biggers (5): crypto: authenc - fix parsing key with misaligned rta_len KEYS: allow reaching the keys quotas exactly KEYS: user: Align the payload buffer KEYS: restrict /proc/keys by credentials at open time KEYS: always initialize keyring_index_key::desc_len

Eric Dumazet (3): vxlan: test dev->flags & IFF_UP before calling netif_rx() batman-adv: fix uninit-value in batadv_interface_tx() net/x25: fix a race in x25_bind()

Eric W. Biederman (4): signal: Always notice exiting tasks signal: Better detection of synchronous signals signal: Restore the stop PTRACE_EVENT_EXIT ipc/shm: Fix pid freeing.

Eugene Loh (1): kallsyms: Handle too long symbols in kallsyms.c

Eugeniy Paltsev (1): ARC: U-boot: check arguments paranoidly

Felix Fietkau (1): mac80211: ensure that mgmt tx skbs have tailroom for encryption

Feras Daoud (1): IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start

Florian Westphal (1): netfilter: nf_tables: nft_compat: fix refcount leak on xt module

Franky Lin (1): brcmfmac: screening firmware event packet

Gabriel Krisman Bertazi (1): sd: Clear PS bit before Mode Select.

Gavin Li (1): brcmfmac: fix incorrect event channel deduction

Gerald Schaefer (1): s390/smp: fix CPU hotplug deadlock with CPU rescan

Greg Kroah-Hartman (3): tty: Handle problem if line discipline does not have receive_buf debugfs: fix debugfs_rename parameter checking tty: mark Siemens R3964 line discipline as BROKEN

Grygorii Strashko (1): net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg workaround

Guenter Roeck (1): unicore32: Fix build error

Gustavo A. R. Silva (4): char/mwave: fix potential Spectre v1 vulnerability ipmi: msghandler: Fix potential Spectre v1 vulnerabilities usb: gadget: udc: net2272: Fix bitwise and boolean operations perf tests evsel-tp-sched: Fix bitwise operator

Hangbin Liu (1): sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()

Hans de Goede (2): ACPI: power: Skip duplicate power resource references in _PRx libata: Add NOLPM quirk for SAMSUNG MZ7TE512HMHP-000L1 SSD

Heiner Kallweit (1): net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ9031

Hui Peng (1): ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks

Icenowy Zheng (2): USB: storage: don't insert sane sense for SPC3+ when bad sense specified USB: storage: add quirk for SMI SM3350

Ilya Dryomov (1): rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set

Ingo Molnar (1): perf/core: Fix impossible ring-buffer sizes warning

Ivan Mironov (3): scsi: sd: Fix cache_type_store() drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2 drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock

Jack Stocker (1): USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB

Jacob Wen (1): l2tp: copy 4 more bytes to linear part if necessary

Jann Horn (2): fuse: call pipe_buf_release() under pipe lock mm: enforce min addr even if capable() in expand_downwards()

Jason Gunthorpe (1): packet: Do not leak dev refcounts on error exit

Jiri Olsa (1): perf/x86: Add check_period PMU callback

John Garry (1): scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached

John Johansen (1): apparmor: provide userspace flag indicating binfmt_elf_mmap change

Jonathan Bakker (1): Input: bma150 - register input device after setting private data

Jonathan Hunter (1): mfd: tps6586x: Handle interrupts on suspend

Jonathan Neuschäfer (1): mmc: spi: Fix card detection during probe

Jose Abreu (1): net: stmmac: Fix a race in EEE enable callback

Julian Wiedmann (3): s390/qeth: fix use-after-free in error path s390/qeth: cancel close_dev work before removing a card s390/qeth: conclude all event processing before offlining a card

Jun-Ru Chang (1): MIPS: Remove function size check in get_frame_info()

Kal Conley (1): net/packet: fix 4gb buffer limit due to overflow check

Kan Liang (1): perf/x86/intel/uncore: Add Node ID mask

Kangjie Lu (1): ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages

Kees Cook (1): Yama: Check for pid death before checking ancestry

Leonid Iziumtsev (1): dmaengine: imx-dma: fix wrong callback invoke

Linus Torvalds (1): binfmt_elf: switch to new creds when switching to new mm

Linus Walleij (1): ARM: dts: kirkwood: Fix polarity of GPIO fan lines

Liping Zhang (1): netfilter: nft_compat: fix crash when related match/target module is removed

Logan Gunthorpe (1): scsi: isci: initialize shost fully before calling scsi_add_host()

Lukas Wunner (2): dmaengine: bcm2835: Fix interrupt race on RT dmaengine: bcm2835: Fix abort of transactions

Manfred Schlaegl (1): can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by removing it

Manuel Reinhardt (1): ALSA: usb-audio: Fix implicit fb endpoint setup by quirk

Marcel Holtmann (2): Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt

Mark Rutland (1): perf/core: Don't WARN() for impossible ring-buffer sizes

Martin Kepplinger (1): mtd: rawnand: gpmi: fix MX28 bus master lockup problem

Martin Schwidefsky (1): s390/mm: always force a load of the primary ASCE on context switch

Martin Sperl (1): dmaengine: bcm2835: add additional defines for DMA-registers

Matthias Schwarzott (1): media: em28xx: Fix use-after-free when disconnecting

Matti Kurkela (2): Input: elantech - force needed quirks on Fujitsu H760 Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780

Max Schulze (1): USB: serial: simple: add Motorola Tetra TPG2200 device id

Michael Straube (1): staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1

Miklos Szeredi (2): fuse: handle zero sized retrieve correctly fuse: decrement NR_WRITEBACK_TEMP on the right page

Naoya Horiguchi (1): mm: hwpoison: use do_send_sig_info() instead of force_sig()

Nathan Sullivan (1): net/phy: micrel: Add workaround for bad autoneg

Naveen N. Rao (1): powerpc/signal: Properly handle return value from uprobe_deny_signal()

Nicolas Pitre (2): vt: always call notifier with the console lock held vt: invoke notifier on screen size change

Nikos Tsironis (1): dm thin: fix bug where bio that overwrites thin block ignores FUA

Oleg Nesterov (1): mm/mmap.c: expand_downwards: don't require the gap if !vm_prev

Oliver Hartkopp (1): can: bcm: check timer values before ktime conversion

Pablo Neira Ayuso (2): netfilter: nft_compat: use-after-free when deleting targets netfilter: nf_tables: fix flush after rule deletion in the same batch

Paolo Abeni (1): vsock: cope with memory allocation failure at socket creation time

Paul Elder (1): usb: gadget: musb: fix short isoc packets with inventra dma

Paul Fulghum (1): tty/n_hdlc: fix __might_sleep warning

Paul Moore (1): netlabel: fix out-of-bounds memory accesses

Pavel Shilovsky (3): CIFS: Do not hide EINTR after sending network packets CIFS: Do not count -ENODATA as failure for query directory CIFS: Do not consider -ENODATA as stat failure for reads

Peng Hao (1): ARM: pxa: ssp: unneeded to free devm_ allocated data

Peter Zijlstra (1): perf/core: Fix perf_event_open() vs. execve() race

Rajasingh Thavamani (1): net: phy: Micrel KSZ8061: link failure after cable connect

Richard Weinberger (28): arc: Use get_signal() signal_setup_done() arm64: Use get_signal() signal_setup_done() avr32: Use get_signal() signal_setup_done() blackfin: Use get_signal() signal_setup_done() c6x: Use get_signal() signal_setup_done() cris: Use get_signal() signal_setup_done() frv: Use get_signal() signal_setup_done() hexagon: Use get_signal() signal_setup_done() ia64: Use get_signal() signal_setup_done() m32r: Use get_signal() signal_setup_done() m68k: Use get_signal() signal_setup_done() microblaze: Use get_signal() signal_setup_done() mips: Use get_signal() signal_setup_done() mips: Use sigsp() mn10300: Use get_signal() signal_setup_done() parisc: Use get_signal() signal_setup_done() powerpc: Use get_signal() signal_setup_done() powerpc: Use sigsp() s390: Use get_signal() signal_setup_done() score: Use get_signal() signal_setup_done() sh: Use get_signal() signal_setup_done() tile: Use get_signal() signal_setup_done() um: Use get_signal() signal_setup_done() unicore32: Use get_signal() signal_setup_done() xtensa: Use get_signal() signal_setup_done() tracehook_signal_handler: Remove sig, info, ka and regs Clean up signal_delivered() Rip out get_signal_to_deliver()

Ross Lagerwall (1): cifs: Fix potential OOB access of lock element array

Rundong Ge (1): net: dsa: slave: Don't propagate flag changes on down slave interfaces

Russell King (1): ARM: iop32x/n2100: fix PCI IRQ mapping

Sakari Ailus (1): media: v4l: ioctl: Validate num_planes for debug messages

Samir Virmani (1): uart: Fix crash in uart_write and uart_put_char

Sergei Shtylyov (1): mmc: tmio_mmc_core: don't claim spurious interrupts

Sergei Trofimovich (1): alpha: fix page fault handling for r16-r18 targets

Shakeel Butt (1): mm, oom: fix use-after-free in oom_kill_process

Sheng Lan (1): net: netem: fix skb length BUG_ON in __skb_to_sgvec

Shuah Khan (1): media: em28xx-dvb - fix em28xx_dvb_resume() to not unregister i2c and dvb

Shubhrajyoti Datta (1): i2c: cadence: Fix the hold bit setting

Stefan Haberland (1): s390/dasd: fix using offset into zero size array error

Suravee Suthikulpanit (1): iommu/amd: Fix IOMMU page flush when detach device from a domain

Sven Eckelmann (2): batman-adv: Avoid WARN on net_device without parent in netns batman-adv: Force mac header to start of data on xmit

Takashi Iwai (2): ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() ALSA: usb-audio: Always check descriptor sizes in parser code

Thomas Hellstrom (2): drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user drm/vmwgfx: Fix setting of dma masks

Thomas Richter (1): perf test: Fix failure of 'evsel-tp-sched' test on s390

Tina Zhang (1): drm/modes: Prevent division by zero htotal

Vineet Gupta (2): ARC: show_regs: lockdep: avoid page allocator... ARC: mm: do_page_fault fixes #1: relinquish mmap_sem if signal arrives while handle_mm_fault

Vitaly Kuznetsov (1): x86/kvm/nVMX: read from MSR_IA32_VMX_PROCBASED_CTLS2 only when it is available

Vlad Tsyrklevich (1): omap2fb: Fix stack memory disclosure

Waiman Long (1): fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb()

Willem de Bruijn (2): packet: validate address length packet: validate address length if non-zero

Yan, Zheng (1): ceph: avoid repeatedly adding inode to mdsc->snap_flush_list

Yi Zeng (1): i2c: dev: prevent adapter retries and timeout being set as minus value

YueHaibing (2): mdio_bus: Fix use-after-free on device_register fails net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails

YunQiang Su (1): Disable MSI also when pcie-octeon.pcie_disable on

Yunjian Wang (1): net: bridge: Fix ethernet header pointer before check skb forwardable

Zach Brown (1): net/phy: micrel: configure intterupts after autoneg workaround

Zhiqiang Liu (1): net: fix IPv6 prefix route residue

b-ak (1): ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode