I'm announcing the release of the 3.16.75 kernel.

All users of the 3.16 kernel series should upgrade.

The updated 3.16.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git

The diff from 3.16.74 is attached to this message.

Ben.

------------

Makefile | 2 +- arch/arm64/kvm/guest.c | 49 ++++++++++++--- arch/mips/mm/tlbex.c | 29 ++++++--- arch/powerpc/perf/core-book3s.c | 8 ++- arch/powerpc/perf/power8-pmu.c | 3 + arch/s390/crypto/aes_s390.c | 10 +-- arch/s390/crypto/des_s390.c | 9 +-- arch/x86/kernel/apic/apic.c | 3 +- arch/x86/kernel/cpu/bugs.c | 11 +++- block/blk-mq-tag.c | 2 +- crypto/crypto_user.c | 3 + drivers/ata/libata-core.c | 9 ++- drivers/gpio/Kconfig | 1 + drivers/gpu/drm/gma500/cdv_intel_lvds.c | 3 + drivers/gpu/drm/gma500/intel_bios.c | 3 + drivers/gpu/drm/gma500/psb_drv.h | 1 + drivers/hwmon/pmbus/pmbus_core.c | 34 ++++++++-- drivers/i2c/busses/i2c-acorn.c | 1 + drivers/i2c/i2c-dev.c | 1 + drivers/input/misc/uinput.c | 22 ++++++- drivers/md/bcache/bset.c | 16 ++++- drivers/md/bcache/bset.h | 34 +++++----- drivers/misc/genwqe/card_dev.c | 2 + drivers/misc/genwqe/card_utils.c | 4 ++ drivers/net/bonding/bond_main.c | 6 +- drivers/net/can/flexcan.c | 2 +- drivers/net/ethernet/dec/tulip/de4x5.c | 1 - drivers/net/ethernet/emulex/benet/be_ethtool.c | 30 ++++++--- drivers/net/ethernet/mellanox/mlx4/mcg.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c | 3 +- drivers/parisc/ccio-dma.c | 4 +- drivers/parisc/sba_iommu.c | 3 +- drivers/s390/net/qeth_l2_main.c | 2 +- drivers/s390/scsi/zfcp_ext.h | 1 + drivers/s390/scsi/zfcp_scsi.c | 9 +++ drivers/s390/scsi/zfcp_sysfs.c | 55 +++++++++++++++-- drivers/s390/scsi/zfcp_unit.c | 8 ++- drivers/scsi/bnx2fc/bnx2fc_hwi.c | 2 +- drivers/scsi/ufs/ufshcd-pltfrm.c | 11 ++-- drivers/scsi/vmw_pvscsi.c | 6 +- drivers/spi/spi-bitbang.c | 2 +- drivers/staging/usbip/stub_dev.c | 75 ++++++++++++++++------- drivers/target/target_core_iblock.c | 2 +- drivers/tty/serial/max310x.c | 2 +- drivers/tty/serial/sh-sci.c | 7 +++ drivers/usb/core/config.c | 4 +- drivers/usb/core/quirks.c | 6 ++ drivers/usb/host/xhci.c | 2 +- drivers/usb/misc/rio500.c | 17 ++++- drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 3 + drivers/usb/storage/unusual_realtek.h | 5 ++ fs/btrfs/file.c | 12 ++++ fs/btrfs/reada.c | 7 +++ fs/cifs/cifsfs.c | 1 + fs/cifs/cifsglob.h | 5 ++ fs/cifs/file.c | 12 +++- fs/cifs/smb2maperror.c | 2 +- fs/configfs/dir.c | 14 ++--- fs/ocfs2/dcache.c | 12 ++++ include/linux/sched.h | 4 ++ kernel/cpu.c | 3 + kernel/cred.c | 9 +++ kernel/events/core.c | 5 +- kernel/events/ring_buffer.c | 33 ++++++++-- kernel/ptrace.c | 20 +++++- kernel/signal.c | 2 + kernel/trace/trace.c | 10 +-- lib/mpi/mpi-pow.c | 6 +- mm/huge_memory.c | 2 + net/can/af_can.c | 24 +++++++- net/core/dev.c | 2 +- net/core/neighbour.c | 7 +++ net/core/pktgen.c | 11 ++++ net/ipv4/igmp.c | 53 +++++++++++----- net/ipv6/ip6_flowlabel.c | 7 ++- net/iucv/af_iucv.c | 33 +++++++--- net/llc/llc_output.c | 2 + net/rds/ib_rdma.c | 10 +-- net/sched/sch_netem.c | 13 ++-- net/sctp/endpointola.c | 8 +-- net/wireless/core.c | 2 +- security/apparmor/policy_unpack.c | 2 +- sound/core/seq/oss/seq_oss_ioctl.c | 2 +- sound/core/seq/oss/seq_oss_rw.c | 2 +- sound/soc/codecs/cs42xx8.c | 1 + 86 files changed, 671 insertions(+), 198 deletions(-)

Alan Stern (1): USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor

Alejandro Jimenez (1): x86/speculation: Allow guests to use SSBD even if host does not

Alexandra Winter (1): s390/qeth: fix VLAN attribute in bridge_hostnotify udev event

Andrea Arcangeli (1): coredump: fix race condition between collapse_huge_page() and core dumping

Andrea Parri (1): sbitmap: fix improper use of smp_mb__before_atomic()

Andrey Smirnov (1): Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD

Ben Hutchings (1): Linux 3.16.75

Carsten Schmid (1): usb: xhci: avoid null pointer deref when bos field is NULL

Chris Packham (1): USB: serial: pl2303: add Allied Telesis VT-Kit3

Colin Ian King (3): scsi: bnx2fc: fix incorrect cast to u64 on shift operation x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz ALSA: seq: fix incorrect order of dest_client/dest_ports arguments

Coly Li (1): bcache: fix stack corruption by PRECEDING_KEY()

Dan Carpenter (1): genwqe: Prevent an integer overflow in the ioctl

Dave Martin (1): KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST

Dmitry Korotin (1): MIPS: Add missing EHB in mtc0 -> mfc0 sequence.

Eiichi Tsukata (1): tracing/snapshot: Resize spare buffer if size changed

Eric Biggers (2): cfg80211: fix memory leak of wiphy device name crypto: user - prevent operating on larval algorithms

Eric Dumazet (6): ipv4/igmp: fix another memory leak in igmpv3_del_delrec() ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST llc: fix skb leak in llc_build_and_send_ui_pkt() net-gro: fix use-after-free read in napi_gro_frags() ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero neigh: fix use-after-free read in pneigh_get_next

Eric W. Biederman (1): signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO

Filipe Manana (2): Btrfs: fix race between ranged fsync and writeback of adjacent ranges Btrfs: fix race between readahead and device replace/removal

Geert Uytterhoeven (1): cpu/speculation: Warn on unsupported mitigations= parameter

George G. Davis (1): serial: sh-sci: disable DMA for uart_console

Hans de Goede (1): libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk

Harald Freudenberger (1): s390/crypto: fix possible sleep during spinlock aquired

Herbert Xu (1): lib/mpi: Fix karactx leak in mpi_powm

Ivan Vecera (1): be2net: Fix number of Rx queues used for flow hashing

Jakub Kicinski (1): net: netem: fix backlog accounting for corrupted GSO frames

Jan Kara (1): scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()

Jan Stancek (1): powerpc/perf: add missing put_cpu_var in power_pmu_event_init

Jann Horn (2): ptrace: restore smp_rmb() in __ptrace_may_access() apparmor: enforce nullbyte at end of tag string

Jisheng Zhang (1): net: stmmac: fix reset gpio free missing

Joakim Zhang (1): can: flexcan: fix timeout when set small bitrate

Joe Burmeister (1): tty: max310x: Fix external crystal register setup

John David Anglin (1): parisc: Use implicit space register selection for loading the coherence index of I/O pdirs

Julian Wiedmann (2): net/af_iucv: remove GFP_DMA restriction for HiperTransport net/af_iucv: always register net_device notifier

Kai-Heng Feng (1): USB: usb-storage: Add new ID to ums-realtek

Kees Cook (1): net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()

Marco Zatta (1): USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.

Maximilian Luz (1): USB: Add LPM quirk for Surface Dock GigE adapter

Naohiro Aota (1): btrfs: start readahead also in seed devices

Oliver Neukum (1): USB: rio500: fix memory leak in close after disconnect

Paolo Abeni (1): pktgen: do not sleep with the thread lock held.

Patrik Jakobsson (1): drm/gma500/cdv: Check vbt config bits when detecting lvds panels

Peter Zijlstra (2): perf/ring_buffer: Add ordering to rb->nest increment perf/core: Fix perf_sample_regs_user() mm check

Petr Oros (1): be2net: fix link failure after ethtool offline test

Randy Dunlap (1): gpio: fix gpio-adp5588 build errors

Ravi Bangoria (2): powerpc/perf: Fix MMCRA corruption by bhrb_filter perf/ioctl: Add check for the sample_period value

Robert Hancock (1): hwmon: (pmbus/core) Treat parameters as paged if on multiple pages

Roberto Bergantinos Corpas (1): CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM

Roman Bolshakov (1): scsi: target/iblock: Fix overrun in WRITE SAME emulation

Ronnie Sahlberg (1): cifs: add spinlock for the openFileList to cifsInodeInfo

Russell King (1): i2c: acorn: fix i2c warning

S.j. Wang (1): ASoC: cs42xx8: Add regcache mask dirty

Sahitya Tummala (1): configfs: Fix use-after-free when accessing sd->s_dentry

Shuah Khan (2): usbip: usbip_host: fix BUG: sleeping function called from invalid context usbip: usbip_host: fix stub_dev lock context imbalance regression

Stanley Chu (1): scsi: ufs: Avoid runtime suspend possibly being blocked forever

Steffen Maier (2): scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)

Steve French (1): SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write

WANG Cong (2): igmp: acquire pmc lock for ip_mc_clear_src() igmp: add a missing spin_lock_init()

Wengang Wang (1): fs/ocfs2: fix race in ocfs2_dentry_attach_lock()

Willem de Bruijn (1): can: purge socket error queue on sock destruct

Xin Long (1): sctp: change to hold sk after auth shkey is created successfully

Yabin Cui (1): perf/ring_buffer: Fix exposing a temporarily decreased data_head

Yingjoe Chen (1): i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr

YueHaibing (4): spi: bitbang: Fix NULL pointer dereference in spi_unregister_master can: af_can: Fix error path of can_init() bonding: Always enable vlan tx offload bonding: Add vlan tx offload to hw_enc_features

Yunjian Wang (1): net/mlx4_core: Change the error print to info print

Zhenliang Wei (1): kernel/signal.c: trace_signal_deliver when signal_group_exit

Zhu Yanjun (1): net: rds: fix memory leak in rds_ib_flush_mr_pool