Xenial update to v4.4.21 stable release

[Tim Gardner]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.4.21 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the v4.4.21 stable release shall be applied:

Revert "i40e: fix: do not sleep in netdev_ops"
fs: Check for invalid i_uid in may_follow_link()
netfilter: x_tables: check for size overflow
ext4: validate that metadata blocks do not overlap superblock
ext4: fix xattr shifting when expanding inodes
ext4: fix xattr shifting when expanding inodes part 2
ext4: properly align shifted xattrs when expanding inodes
ext4: avoid deadlock when expanding inode size
ext4: avoid modifying checksum fields directly during checksum verification
block: Fix race triggered by blk_set_queue_dying()
block: make sure a big bio is split into at most 256 bvecs
cgroup: reduce read locked section of cgroup_threadgroup_rwsem during fork
s390/sclp_ctl: fix potential information leak with /dev/sclp
drm/radeon: fix radeon_move_blit on 32bit systems
drm: Reject page_flip for !DRIVER_MODESET
drm/msm: fix use of copy_from_user() while holding spinlock
ASoC: atmel_ssc_dai: Don't unconditionally reset SSC on stream startup
xfs: fix superblock inprogress check
timekeeping: Cap array access in timekeeping_debug
timekeeping: Avoid taking lock in NMI path with CONFIG_DEBUG_TIMEKEEPING
lustre: remove unused declaration
wrappers for ->i_mutex access
ovl: don't copy up opaqueness
ovl: remove posix_acl_default from workdir
ovl: listxattr: use strnlen()
ovl: fix workdir creation
ubifs: Fix assertion in layout_in_gaps()
bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power of two.
vhost/scsi: fix reuse of &vq->iov[out] in response
x86/apic: Do not init irq remapping if ioapic is disabled
uprobes: Fix the memcg accounting
crypto: caam - fix IV loading for authenc (giv)decryption
ALSA: usb-audio: Add sample rate inquiry quirk for B850V3 CP2114
ALSA: firewire-tascam: accessing to user space outside spinlock
ALSA: fireworks: accessing to user space outside spinlock
ALSA: rawmidi: Fix possible deadlock with virmidi registration
ALSA: hda - Add headset mic quirk for Dell Inspiron 5468
ALSA: hda - Enable subwoofer on Dell Inspiron 7559
ALSA: timer: fix NULL pointer dereference in read()/ioctl() race
ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE
ALSA: timer: fix NULL pointer dereference on memory allocation failure
scsi: fix upper bounds check of sense key in scsi_sense_key_string()
metag: Fix atomic_*_return inline asm constraints
cpufreq: Fix GOV_LIMITS handling for the userspace governor
hwrng: exynos - Disable runtime PM on probe failure
regulator: anatop: allow regulator to be in bypass mode
lib/mpi: mpi_write_sgl(): fix skipping of leading zero limbs
Linux 4.4.21

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-42.62

---------------
linux (4.4.0-42.62) xenial; urgency=low

  * Fix GRO recursion overflow for tunneling protocols (LP: #1631287)
    - tunnels: Don't apply GRO to multiple layers of encapsulation.
    - gro: Allow tunnel stacking in the case of FOU/GUE

  * CVE-2016-7039
    - SAUCE: net: add recursion limit to GRO

linux (4.4.0-41.61) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1628204

  * nvme drive probe failure (LP: #1626894)
    - (fix) NVMe: Don't unmap controller registers on reset

linux (4.4.0-40.60) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1627074

  * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
    - Fix memory leaks in cifs_do_mount()
    - Compare prepaths when comparing superblocks
    - SAUCE: Fix regression which breaks DFS mounting

  * Backlight does not change when adjust it higher than 50% after S3
    (LP: #1625932)
    - SAUCE: i915_bpo: drm/i915/backlight: setup and cache pwm alternate
      increment value
    - SAUCE: i915_bpo: drm/i915/backlight: setup backlight pwm alternate
      increment on backlight enable

linux (4.4.0-39.59) xenial; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1625303

  * thunder: chip errata w/ multiple CQEs for a TSO packet (LP: #1624569)
    - net: thunderx: Fix for issues with multiple CQEs posted for a TSO packet

  * thunder: faulty TSO padding (LP: #1623627)
    - net: thunderx: Fix for HW issue while padding TSO packet

  * CVE-2016-6828
    - tcp: fix use after free in tcp_xmit_retransmit_queue()

  * Sennheiser Officerunner - cannot get freq at ep 0x83 (LP: #1622763)
    - SAUCE: (no-up) ALSA: usb-audio: Add quirk for sennheiser officerunner

  * Backport E3 Skylake Support in ie31200_edac to Xenial (LP: #1619766)
    - EDAC, ie31200_edac: Add Skylake support

  * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
    - SAUCE: nvme: Don't suspend admin queue that wasn't created

  * ISST-LTE:pNV: system ben is hung during ST (nvme) (LP: #1620317)
    - blk-mq: Allow timeouts to run while queue is freezing
    - blk-mq: improve warning for running a queue on the wrong CPU
    - blk-mq: don't overwrite rq->mq_ctx

  * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
    (LP: #1619918)
    - btrfs: bugfix: handle FS_IOC32_{GETFLAGS, SETFLAGS, GETVERSION} in
      btrfs_ioctl

  * radeon: monitor connected to onboard VGA doesn't work with Xenial
    (LP: #1600092)
    - drm/radeon/dp: add back special handling for NUTMEG

  * initramfs includes qle driver, but not firmware (LP: #1623187)
    - qed: add MODULE_FIRMWARE()

  * [Hyper-V] Rebase Hyper-V to 4.7.2 (stable) (LP: #1616677)
    - hv_netvsc: Implement support for VF drivers on Hyper-V
    - hv_netvsc: Fix the list processing for network change event
    - Drivers: hv: vmbus: Introduce functions for estimating room in the ring
      buffer
    - Drivers: hv: vmbus: Use READ_ONCE() to read variables that are volatile
    - Drivers: hv: vmbus: Export the vmbus_set_event() API
    - lcoking/barriers, arch: Use smp barriers...

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.