Xenial update: 4.4.183 upstream stable release

[Khaled El Mously]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       4.4.183 upstream stable release
       from git://git.kernel.org/

[Khaled El Mously (kmously)]

Applied patches:

* fs/fat/file.c: issue flush after the writeback of FAT
* sysctl: return -EINVAL if val violates minmax
* ipc: prevent lockup on alloc_msg and free_msg
* hugetlbfs: on restore reserve error path retain subpool reservation
* mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
* mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
* kernel/sys.c: prctl: fix false positive in validate_prctl_map()
* mfd: intel-lpss: Set the device in reset state when init
* mfd: twl6040: Fix device init errors for ACCCTL register
* perf/x86/intel: Allow PEBS multi-entry in watermark mode
* drm/bridge: adv7511: Fix low refresh rate selection
* ntp: Allow TAI-UTC offset to be set to zero
* f2fs: fix to avoid panic in do_recover_data()
* f2fs: fix to do sanity check on valid block count of segment
* iommu/vt-d: Set intel_iommu_gfx_mapped correctly
* ALSA: hda - Register irq handler after the chip initialization
* nvmem: core: fix read buffer in place
* fuse: retrieve: cap requested size to negotiated max_write
* nfsd: allow fh_want_write to be called twice
* x86/PCI: Fix PCI IRQ routing table memory leak
* platform/chrome: cros_ec_proto: check for NULL transfer function
* soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
* clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
* ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
* ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
* ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
* PCI: rpadlpar: Fix leaked device_node references in add/remove paths
* PCI: rcar: Fix a potential NULL pointer dereference
* video: hgafb: fix potential NULL pointer dereference
* video: imsttfb: fix potential NULL pointer dereferences
* PCI: xilinx: Check for __get_free_pages() failure
* gpio: gpio-omap: add check for off wake capable gpios
* dmaengine: idma64: Use actual device for DMA transfers
* pwm: tiehrpwm: Update shadow register for disabling PWMs
* ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa
* pwm: Fix deadlock warning when removing PWM device
* ARM: exynos: Fix undefined instruction during Exynos5422 resume
* futex: Fix futex lock the wrong page
* ALSA: seq: Cover unsubscribe_port() in list_mutex
* libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
* mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
* fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
* signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
* ptrace: restore smp_rmb() in __ptrace_may_access()
* i2c: acorn: fix i2c warning
* bcache: fix stack corruption by PRECEDING_KEY()
* cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
* ASoC: cs42xx8: Add regcache mask dirty
* Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
* scsi: lpfc: add check for loss of ndlp when sending RRQ
* scsi: bnx2fc: fix incorrect cast to u64 on shift operation
* usbnet: ipheth: fix racing condition
* KVM: x86/pmu: do not mask the value that is written to fixed PMUs
* KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
* drm/vmwgfx: integer u...

[Khaled El Mously (kmously)]

One patch was skipped as it was already present:

0039-Revert-Bluetooth-Align-minimum-encryption-key-size-f.patch

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-159.187

---------------
linux (4.4.0-159.187) xenial; urgency=medium

  * CVE-2019-1125
    - x86/cpufeatures: Carve out CQM features retrieval
    - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
    - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
    - x86/speculation: Enable Spectre v1 swapgs mitigations
    - x86/entry/64: Use JMP instead of JMPQ
    - x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS

linux (4.4.0-158.186) xenial; urgency=medium

  * xenial/linux: 4.4.0-158.186 -proposed tracker (LP: #1837609)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] update helper scripts

  * ixgbe{vf} - Physical Function gets IRQ when VF checks link state
    (LP: #1836760)
    - ixgbevf: Use cached link state instead of re-reading the value for ethtool

  * CVE-2018-5383
    - crypto: kpp - Key-agreement Protocol Primitives API (KPP)
    - crypto: dh - Add DH software implementation
    - crypto: ecdh - Add ECDH software support
    - crypto: ecdh - make ecdh_shared_secret unique
    - crypto: doc - add KPP documentation
    - crypto: kpp, (ec)dh - fix typos
    - crypto: ecc - remove unused function arguments
    - crypto: ecc - remove unnecessary casts
    - crypto: ecc - rename ecdh_make_pub_key()
    - crypto: ecdh - add privkey generation support
    - crypto: ecc - Fix NULL pointer deref. on no default_rng
    - [Config] CRYPTO_ECDH=m
    - Bluetooth: convert smp and selftest to crypto kpp API
    - crypto: ecdh - add public key verification test

  * Xenial update: 4.4.185 upstream stable release (LP: #1836668)
    - fs/binfmt_flat.c: make load_flat_shared_library() work
    - scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
    - tracing: Silence GCC 9 array bounds warning
    - gcc-9: silence 'address-of-packed-member' warning
    - usb: chipidea: udc: workaround for endpoint conflict issue
    - Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
    - apparmor: enforce nullbyte at end of tag string
    - parport: Fix mem leak in parport_register_dev_model
    - parisc: Fix compiler warnings in float emulation code
    - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
    - MIPS: uprobes: remove set but not used variable 'epc'
    - net: hns: Fix loopback test failed at copper ports
    - sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
    - scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
    - scsi: ufs: Check that space was properly alloced in copy_query_response
    - s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
    - hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
    - Btrfs: fix race between readahead and device replace/removal
    - btrfs: start readahead also in seed devices
    - can: flexcan: fix timeout when set small bitrate
    - can: purge socket error queue on sock destruct
    - ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
    - Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
    - Bluet...