Xenial update to 4.4.131 stable release

[Juerg Haefliger]

SRU Justification

Impact:
   The upstream process for stable tree updates is quite similar
   in scope to the Ubuntu SRU process, e.g., each patch has to
   demonstrably fix a bug, and each patch is vetted by upstream
   by originating either directly from a mainline/stable Linux tree
   or a minimally backported form of that patch. The 4.4.131 upstream
   stable stable patch set is now available. It should be included
   in the Ubuntu kernel as well.

   git://git.kernel.org/

TEST CASE: TBD

   The following patches from the 4.4.131 stable release shall be
   applied:
   * Linux 4.4.131
   * serial: mctrl_gpio: Add missing module license
   * serial: mctrl_gpio: export mctrl_gpio_disable_ms and mctrl_gpio_init
   * x86/smpboot: Don't use mwait_play_dead() on AMD systems
   * x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds
   * libceph: validate con->state at the top of try_write()
   * ASoC: fsl_esai: Fix divisor calculation failure at lower ratio
   * ARM: amba: Don't read past the end of sysfs "driver_override" buffer
   * ARM: amba: Fix race condition with driver_override
   * ARM: amba: Make driver_override output consistent with other buses
   * scsi: sd: Defer spinning up drive while SANITIZE is in progress
   * kobject: don't use WARN for registration failures
   * mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.
   * mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.
   * mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.
   * ALSA: hda/realtek - Add some fixes for ALC233
   * ALSA: hda: Hardening for potential Spectre v1
   * ALSA: seq: oss: Hardening for potential Spectre v1
   * ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device
   * ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr
   * ALSA: control: Hardening for potential Spectre v1
   * ALSA: rme9652: Hardening for potential Spectre v1
   * ALSA: hdspm: Hardening for potential Spectre v1
   * ALSA: asihpi: Hardening for potential Spectre v1
   * ALSA: opl3: Hardening for potential Spectre v1
   * tty: Use __GFP_NOFAIL for tty_ldisc_get()
   * tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set
   * tty: n_gsm: Fix long delays with control frame timeouts in ADM mode
   * tty: Don't call panic() at tty_ldisc_init()
   * drm/virtio: fix vq wait_event condition
   * virtio_console: free buffers after reset
   * virtio: add ability to iterate over vqs
   * ALSA: usb-audio: Skip broken EU on Dell dock USB-audio
   * USB: Increment wakeup count on remote wakeup.
   * usb: core: Add quirk for HP v222w 16GB Mini
   * USB: serial: cp210x: add ID for NI USB serial console
   * USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster
   * USB: serial: simple: add libtransistor console
   * usbip: vhci_hcd: Fix usb device and sockfd leaks
   * usbip: usbip_host: fix to hold parent lock for device_attach() calls
   * ext4: fix bitmap position validation
   * ext4: add validity checks for bitmap block numbers
   * ext4: set h_journal if there is a failure starting a reserved handle
   * ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS

[Juerg Haefliger (juergh)]

Skipped the following commits:
   * ALSA: hda: Hardening for potential Spectre v1
   * ALSA: seq: oss: Hardening for potential Spectre v1
   * ALSA: control: Hardening for potential Spectre v1
   * ALSA: rme9652: Hardening for potential Spectre v1
   * ALSA: hdspm: Hardening for potential Spectre v1
   * ALSA: asihpi: Hardening for potential Spectre v1
   * ALSA: opl3: Hardening for potential Spectre v1

These depend on upstream's version of spectre v1 which we haven't pulled in with the update to 4.4.118.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-128.154

---------------
linux (4.4.0-128.154) xenial; urgency=medium

  * linux: 4.4.0-128.154 -proposed tracker (LP: #1772960)

  * CVE-2018-3639 (x86)
    - x86/cpu: Make alternative_msr_write work for 32-bit code
    - x86/bugs: Fix the parameters alignment and missing void
    - KVM: SVM: Move spec control call after restore of GS
    - x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
    - x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS
    - x86/cpufeatures: Disentangle SSBD enumeration
    - x86/cpu/AMD: Fix erratum 1076 (CPB bit)
    - x86/cpufeatures: Add FEATURE_ZEN
    - x86/speculation: Handle HT correctly on AMD
    - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
    - x86/speculation: Add virtualized speculative store bypass disable support
    - x86/speculation: Rework speculative_store_bypass_update()
    - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host}
    - x86/bugs: Expose x86_spec_ctrl_base directly
    - x86/bugs: Remove x86_spec_ctrl_set()
    - x86/bugs: Rework spec_ctrl base and mask logic
    - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG
    - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
    - x86/bugs: Rename SSBD_NO to SSB_NO
    - KVM: VMX: Expose SSBD properly to guests.

  * [i915_bpo] Fix flickering issue after panel change (LP: #1770565)
    - drm/i915: Fix iboost setting for DDI with 4 lanes on SKL
    - drm/i915: Name the "iboost bit"
    - drm/i915: Program iboost settings for HDMI/DVI on SKL
    - drm/i915: Move bxt_ddi_vswing_sequence() call into intel_ddi_pre_enable()
      for HDMI
    - drm/i915: Explicitly use ddi buf trans entry 9 for hdmi
    - drm/i915: Split DP/eDP/FDI and HDMI/DVI DDI buffer programming apart
    - drm/i915: Get the iboost setting based on the port type
    - drm/i915: Simplify intel_ddi_get_encoder_port()
    - drm/i915: Fix iboost setting for SKL Y/U DP DDI buffer translation entry 2
    - drm/i915: KBL - Recommended buffer translation programming for DisplayPort
    - drm/i915: Ignore OpRegion panel type except on select machines

  * [SRU][Bionic/Artful] fix false positives in W+X checking (LP: #1769696)
    - init: fix false positives in W+X checking

  * [Ubuntu 16.04] kernel: fix rwlock implementation (LP: #1761674)
    - SAUCE: (no-up) s390: fix rwlock implementation

  * linux < 4.11: unable to use netfilter logging from non-init namespaces
    (LP: #1766573)
    - netfilter: allow logging from non-init namespaces

  * [LTC Test] Ubuntu 18.04: tm_sigreturn failed on P8 compat mode 16.04.04
    guest (LP: #1771439)
    - powerpc: signals: Discard transaction state from signal frames

  * QCA9377 requires more IRAM banks for its new firmware (LP: #1748345)
    - ath10k: update the IRAM bank number for QCA9377

  * i915/kbl_dmc_ver1.bin failed with error -2 package 1.157.17 kernel
    4.4.0-116-generic (LP: #1752536)
    - ubuntu: i915_bpo - Add MODULE_FIRMWARE for Geminilake's DMC

  * Xenial update to 4.4.131 stable release (LP: #1768825)
    - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS
    - ext4: set h_journal if there is a failure...