kernel: backport upstream challenge ACK fix (CVE-2016-5696)