Linux 3.16.66 Release

This post summarizes new features, bugfixes and changes in Linux 3.16.66 kernel release. In total, there are 158247 lines of Linux source code changed/added in Linux 3.16.66 release compared to Linux 3.16 release.

To view the source code of Linux 3.16.66 kernel release online, please check the linux-stable tree for Linux 3.16.66. If you would like to download the release package for Linux 3.16.66, please click: Linux 3.16.66. To download the patchset for Linux 3.16.66 release, please click: Linux 3.16.66 patch.

Linux 3.16.66

This change is authored by Ben Hutchings <ben [at] decadent.org.uk> on Thu May 2 21:42:08 2019 +0100.


Linux 3.16.66

The commit for this change in Linux stable tree is 0e3910b (patch) which is from upstream commit e0d2ad5.

All changes in this Linux release are as follows.

  • tty: mark Siemens R3964 line discipline as BROKEN
  • apparmor: provide userspace flag indicating binfmt_elf_mmap change
  • binfmt_elf: switch to new creds when switching to new mm
  • binfmt_elf: Fix missing SIGKILL for empty PIE
  • brcmfmac: add subtype check for event handling in data path
  • brcmfmac: revise handling events in receive path
  • brcmfmac: fix incorrect event channel deduction
  • brcmfmac: screening firmware event packet
  • brcmfmac: make brcmf_proto_hdrpull() return struct brcmf_if instance
  • brcmfmac: consolidate ifp lookup in driver core
  • brcmfmac: assure SSID length from firmware is limited
  • perf/core: Fix perf_event_open() vs. execve() race
  • coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
  • vfio/type1: Limit DMA mappings per container
  • Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt
  • Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer
  • media: em28xx: Fix use-after-free when disconnecting
  • media: em28xx-dvb – fix em28xx_dvb_resume() to not unregister i2c and dvb
  • ipc/shm: Fix pid freeing.
  • net: netem: fix skb length BUG_ON in __skb_to_sgvec
  • netlabel: fix out-of-bounds memory accesses
  • mm: enforce min addr even if capable() in expand_downwards()
  • mm/mmap.c: expand_downwards: don’t require the gap if !vm_prev
  • net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
  • net: phy: Micrel KSZ8061: link failure after cable connect
  • tmpfs: fix uninitialized return value in shmem_link
  • x86/uaccess: Don’t leak the AC flag into __put_user() value evaluation
  • mmc: tmio_mmc_core: don’t claim spurious interrupts
  • mmc: spi: Fix card detection during probe
  • net/x25: fix a race in x25_bind()
  • mdio_bus: Fix use-after-free on device_register fails
  • KEYS: always initialize keyring_index_key::desc_len
  • KEYS: restrict /proc/keys by credentials at open time
  • KEYS: user: Align the payload buffer
  • ARC: U-boot: check arguments paranoidly
  • tmpfs: fix link accounting when a tmpfile is linked in
  • net: stmmac: Fix a race in EEE enable callback
  • ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
  • scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
  • assoc_array: Fix shortcut creation
  • KEYS: allow reaching the keys quotas exactly
  • netfilter: nf_tables: fix flush after rule deletion in the same batch
  • i2c: cadence: Fix the hold bit setting
  • dm thin: fix bug where bio that overwrites thin block ignores FUA
  • netfilter: nft_compat: use-after-free when deleting targets
  • netfilter: nf_tables: nft_compat: fix refcount leak on xt module
  • netfilter: nft_compat: fix crash when related match/target module is removed
  • signal: Restore the stop PTRACE_EVENT_EXIT
  • x86/a.out: Clear the dump structure initially
  • perf/core: Fix impossible ring-buffer sizes warning
  • team: avoid complex list operations in team_nl_cmd_options_set()
  • net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
  • net/packet: fix 4gb buffer limit due to overflow check
  • batman-adv: fix uninit-value in batadv_interface_tx()
  • x86/kvm/nVMX: read from MSR_IA32_VMX_PROCBASED_CTLS2 only when it is available
  • net: fix IPv6 prefix route residue
  • vxlan: test dev->flags & IFF_UP before calling netif_rx()
  • perf/x86: Add check_period PMU callback
  • alpha: fix page fault handling for r16-r18 targets
  • vsock: cope with memory allocation failure at socket creation time
  • Input: elantech – enable 3rd button support on Fujitsu CELSIUS H780
  • Input: elantech – force needed quirks on Fujitsu H760
  • ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
  • sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
  • signal: Better detection of synchronous signals
  • signal: Always notice exiting tasks
  • Rip out get_signal_to_deliver()
  • Clean up signal_delivered()
  • tracehook_signal_handler: Remove sig, info, ka and regs
  • xtensa: Use get_signal() signal_setup_done()
  • unicore32: Fix build error
  • unicore32: Use get_signal() signal_setup_done()
  • um: Use get_signal() signal_setup_done()
  • tile: Use get_signal() signal_setup_done()
  • sh: Use get_signal() signal_setup_done()
  • score: Use get_signal() signal_setup_done()
  • s390: Use get_signal() signal_setup_done()
  • powerpc/signal: Properly handle return value from uprobe_deny_signal()
  • powerpc: Use sigsp()
  • powerpc: Use get_signal() signal_setup_done()
  • parisc: Use get_signal() signal_setup_done()
  • mn10300: Use get_signal() signal_setup_done()
  • mips: Use sigsp()
  • mips: Use get_signal() signal_setup_done()
  • microblaze: Use get_signal() signal_setup_done()
  • m68k: Use get_signal() signal_setup_done()
  • m32r: Use get_signal() signal_setup_done()
  • ia64: Use get_signal() signal_setup_done()
  • hexagon: Use get_signal() signal_setup_done()
  • frv: Use get_signal() signal_setup_done()
  • cris: Use get_signal() signal_setup_done()
  • c6x: Use get_signal() signal_setup_done()
  • blackfin: Use get_signal() signal_setup_done()
  • avr32: Use get_signal() signal_setup_done()
  • arm64: Use get_signal() signal_setup_done()
  • arc: Use get_signal() signal_setup_done()
  • libata: Add NOLPM quirk for SAMSUNG MZ7TE512HMHP-000L1 SSD
  • Input: bma150 – register input device after setting private data
  • mtd: rawnand: gpmi: fix MX28 bus master lockup problem
  • ALSA: compress: Fix stop handling on compressed capture streams
  • drm/vmwgfx: Fix setting of dma masks
  • drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
  • net: dsa: slave: Don’t propagate flag changes on down slave interfaces
  • MIPS: Remove function size check in get_frame_info()
  • s390/qeth: conclude all event processing before offlining a card
  • s390/qeth: cancel close_dev work before removing a card
  • s390/qeth: fix use-after-free in error path
  • perf test: Fix failure of ‘evsel-tp-sched’ test on s390
  • perf tests evsel-tp-sched: Fix bitwise operator
  • dmaengine: dmatest: Abort test in case of mapping error
  • dmaengine: dmatest: unmap data on a single code-path when xfer done
  • perf/core: Don’t WARN() for impossible ring-buffer sizes
  • perf/x86/intel/uncore: Add Node ID mask
  • dmaengine: bcm2835: Fix abort of transactions
  • dmaengine: bcm2835: Fix interrupt race on RT
  • dmaengine: bcm2835: add additional defines for DMA-registers
  • dmaengine: imx-dma: fix wrong callback invoke
  • mm: migrate: don’t rely on __PageMovable() of newpage after unlocking it
  • mm: hwpoison: use do_send_sig_info() instead of force_sig()
  • mm, oom: fix use-after-free in oom_kill_process
  • skge: potential memory corruption in skge_get_regs()
  • mac80211: ensure that mgmt tx skbs have tailroom for encryption
  • l2tp: copy 4 more bytes to linear part if necessary
  • fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb()
  • usb: gadget: musb: fix short isoc packets with inventra dma
  • ARM: iop32x/n2100: fix PCI IRQ mapping
  • CIFS: Do not consider -ENODATA as stat failure for reads
  • CIFS: Do not count -ENODATA as failure for query directory
  • MIPS: OCTEON: don’t set octeon_dma_bar_type if PCI is disabled
  • scsi: bnx2fc: Fix error handling in probe()
  • s390/dasd: fix using offset into zero size array error
  • usb: phy: am335x: fix race condition in _probe
  • usb: gadget: udc: net2272: Fix bitwise and boolean operations
  • kallsyms: Handle too long symbols in kallsyms.c
  • IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start
  • KVM: x86: Fix single-step debugging
  • debugfs: fix debugfs_rename parameter checking
  • net/mlx4_core: Add masking for a few queries on HCA caps
  • iommu/amd: Fix IOMMU page flush when detach device from a domain
  • drm/modes: Prevent division by zero htotal
  • ARM: pxa: ssp: unneeded to free devm_ allocated data
  • ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
  • can: bcm: check timer values before ktime conversion
  • can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by removing it
  • tty: Handle problem if line discipline does not have receive_buf
  • char/mwave: fix potential Spectre v1 vulnerability
  • vt: invoke notifier on screen size change
  • vt: always call notifier with the console lock held
  • tty/n_hdlc: fix __might_sleep warning
  • uart: Fix crash in uart_write and uart_put_char
  • net: bridge: Fix ethernet header pointer before check skb forwardable
  • ARC: mm: do_page_fault fixes #1: relinquish mmap_sem if signal arrives while handle_mm_fault
  • ARC: show_regs: lockdep: avoid page allocator…
  • arc: do not export symbols in troubleshoot.c
  • USB: serial: pl2303: add new PID to support PL2303TB
  • Yama: Check for pid death before checking ancestry
  • media: v4l: ioctl: Validate num_planes for debug messages
  • fuse: decrement NR_WRITEBACK_TEMP on the right page
  • fuse: call pipe_buf_release() under pipe lock
  • fuse: handle zero sized retrieve correctly
  • net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ9031
  • net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg workaround
  • net/phy: micrel: configure intterupts after autoneg workaround
  • net/phy: micrel: Add workaround for bad autoneg
  • staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
  • x86/kaslr: Fix incorrect i8254 outb() parameters
  • s390/smp: fix CPU hotplug deadlock with CPU rescan
  • s390/mm: always force a load of the primary ASCE on context switch
  • s390/early: improve machine detection
  • omap2fb: Fix stack memory disclosure
  • cifs: Fix potential OOB access of lock element array
  • CIFS: Do not hide EINTR after sending network packets
  • i2c: dev: prevent adapter retries and timeout being set as minus value
  • Disable MSI also when pcie-octeon.pcie_disable on
  • crypto: authenc – fix parsing key with misaligned rta_len
  • ARM: dts: kirkwood: Fix polarity of GPIO fan lines
  • rbd: don’t return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
  • drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
  • drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
  • Drivers: hv: vmbus: Check for ring when getting debug info
  • scsi: isci: initialize shost fully before calling scsi_add_host()
  • scsi: sd: Fix cache_type_store()
  • sd: Clear PS bit before Mode Select.
  • packet: Do not leak dev refcounts on error exit
  • packet: validate address length if non-zero
  • packet: validate address length
  • ALSA: cs46xx: Potential NULL dereference in probe
  • ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
  • ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
  • USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
  • USB: storage: add quirk for SMI SM3350
  • USB: storage: don’t insert sane sense for SPC3+ when bad sense specified
  • usb: cdc-acm: send ZLP for Telit 3G Intel based modems
  • USB: serial: simple: add Motorola Tetra TPG2200 device id
  • ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
  • ALSA: usb-audio: Always check descriptor sizes in parser code
  • ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
  • mfd: tps6586x: Handle interrupts on suspend
  • mfd: ab8500-core: Return zero in get_register_interruptible()
  • ACPI: power: Skip duplicate power resource references in _PRx
  • batman-adv: Force mac header to start of data on xmit
  • batman-adv: Avoid WARN on net_device without parent in netns

Leave a Reply

Your email address will not be published. Required fields are marked *