Precise update to v3.2.58 and v3.2.59 stable release

[Joseph Salisbury]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The v3.2.58 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the v3.2.58 and v3.2.59 stable releases:
Linux 3.2.59
floppy: don't write kernel-only members to FDRAWCMD ioctl output
floppy: ignore kernel-only members in FDRAWCMD ioctl input
rtl8192ce: Fix null dereference in watchdog
usb: option: add and update a number of CMOTech devices
usb: option: add Alcatel L800MA
usb: option: add Olivetti Olicard 500
USB: io_ti: fix firmware download on big-endian machines
usb/xhci: fix compilation warning when !CONFIG_PCI && !CONFIG_PM
usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb
xhci: For streams the css flag most be read from the stream-ctx on ep stop
Btrfs: fix inode caching vs tree log
Btrfs: Don't allocate inode that is already in use
USB: serial: fix sysfs-attribute removal deadlock
ARM: 8027/1: fix do_div() bug in big-endian systems
mm: make fixup_user_fault() check the vma access rights too
Input: synaptics - add min/max quirk for ThinkPad T431s, L440, L540, S1 Yoga and X1
dmi: add support for exact DMI matches in addition to substring matching
mm/hugetlb.c: add cond_resched_lock() in return_unused_surplus_pages()
libata/ahci: accommodate tag ordered controllers
nfsd: set timeparms.to_maxval in setup_callback_client
USB: cdc-acm: Remove Motorola/Telit H24 serial interfaces from ACM driver
USB: pl2303: add ids for Hewlett-Packard HP POS pole displays
USB: cp210x: Add 8281 (Nanotec Plug & Drive)
usb: option driver, add support for Telit UE910v2
Revert "USB: serial: add usbid for dell wwan card to sierra.c"
USB: serial: ftdi_sio: add id for Brainboxes serial cards
staging: r8712u: Fix case where ethtype was never obtained and always be checked against 0
mlx4_en: don't use napi_synchronize inside mlx4_en_netpoll
locks: allow __break_lease to sleep even when break_time is 0
parisc: fix epoll_pwait syscall on compat kernel
ext4: use i_size_read in ext4_unaligned_aio()
ext4: note the error in ext4_end_bio()
ext4: FIBMAP ioctl causes BUG_ON due to handle EXT_MAX_BLOCKS
Linux 3.2.58
Revert "isci: fix reset timeout handling"
Revert "alpha: fix broken network checksum"
powernow-k6: reorder frequencies
powernow-k6: correctly initialize default parameters
powernow-k6: disable cache when changing frequency
selinux: correctly label /proc inodes in use before the policy is loaded
Char: ipmi_bt_sm, fix infinite loop
drivers: hv: additional switch to use mb() instead of smp_mb()
target/tcm_fc: Fix use-after-free of ft_tpg
x86-64, modify_ldt: Ban 16-bit segments on 64-bit kernels
b43: Fix machine check error due to improper access of B43_MMIO_PSM_PHY_HDR
lib/percpu_counter.c: fix bad percpu counter state during suspend
ALSA: ice1712: Fix boundary checks in PCM pointer ops
wait: fix reparent_leader() vs EXIT_DEAD->EXIT_ZOMBIE race
mm: hugetlb: fix softlockup when a large number of hugepages are freed.
iscsi-target: Fix ERL=2 ASYNC_EVENT connection pointer bug
ocfs2: do not put bh when buffer_uptodate failed
ocfs2: dlm: fix recovery hung
ocfs2: dlm: fix lock migration crash
sh: fix format string bug in stack tracer
drm/radeon: call drm_edid_to_eld when we update the edid
drm/vmwgfx: correct fb_fix_screeninfo.line_length
reiserfs: fix race in readdir
IB/ehca: Returns an error on ib_copy_to_udata() failure
IB/mthca: Return an error on ib_copy_to_udata() failure
ALSA: hda - Enable beep for ASUS 1015E
MIPS: Hibernate: Flush TLB entries in swsusp_arch_resume()
nfsd4: fix setclientid encode size
dm thin: fix dangling bio in process_deferred_bios error path
drm/i915/tv: fix gen4 composite s-video tv-out
nfsd: notify_change needs elevated write count
nfsd: Add fh_{want,drop}_write()
nfsd4: session needs room for following op to error out
nfsd4: buffer-length check for SUPPATTR_EXCLCREAT
x86, hyperv: Bypass the timer_irq_works() check
gpio: mxs: Allow for recursive enable_irq_wake() call
Btrfs: fix deadlock with nested trans handles
audit: convert PPIDs to the inital PID namespace.
pid: get pid_t ppid of task in init_pid_ns
mfd: 88pm860x: Fix possible NULL pointer dereference on i2c_new_dummy error
mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy error
mfd: max8998: Fix possible NULL pointer dereference on i2c_new_dummy error
mfd: max8997: Fix possible NULL pointer dereference on i2c_new_dummy error
mfd: Include all drivers in subsystem menu
IB/nes: Return an error on ib_copy_from_udata() failure instead of NULL
IB/ipath: Fix potential buffer overrun in sending diag packet routine
ath9k: fix ready time of the multicast buffer queue
ext4: fix partial cluster handling for bigalloc file systems
virtio_balloon: don't softlockup on huge balloon changes.
iwlwifi: dvm: take mutex when sending SYNC BT config command
jffs2: Fix crash due to truncation of csize
jffs2: Fix segmentation fault found in stress test
jffs2: avoid soft-lockup in jffs2_reserve_space_gc()
jffs2: remove from wait queue after schedule()
Btrfs: skip submitting barrier for missing device
staging:serqt_usb2: Fix sparse warning restricted __le16 degrades to integer
rtlwifi: rtl8192se: Fix too long disable of IRQs
blktrace: fix accounting of partially completed requests
usb: gadget: atmel_usba: fix crashed during stopping when DEBUG is enabled
uvcvideo: Do not use usb_set_interface on bulk EP
tty: Set correct tty name in 'active' sysfs attribute
media: gspca: sn9c20x: add ID for Genius Look 1320 V2
usb: dwc3: fix wrong bit mask in dwc3_event_devt
hvc: ensure hvc_init is only ever called once in hvc_console.c
tgafb: fix data copying
mach64: fix cursor when character width is not a multiple of 8 pixels
mach64: use unaligned access
framebuffer: fix cfb_copyarea
matroxfb: restore the registers M_ACCESS and M_PITCH
ARM: 7954/1: mm: remove remaining domain support from ARMv6
ARM: mm: introduce present, faulting entries for PAGE_NONE
w1: fix w1_send_slave dropping a slave id
drm/i915: quirk invert brightness for Acer Aspire 5336
drm/i915: inverted brightness quirk for Acer Aspire 4736Z
sparc64: don't treat 64-bit syscall return codes as 32-bit
sparc32: fix build failure for arch_jump_label_transform
Revert "sparc64: Fix __copy_{to,from}_user_inatomic defines."
sparc: PCI: Fix incorrect address calculation of PCI Bridge windows on Simba-bridges
isdnloop: several buffer overflows
isdnloop: Validate NUL-terminated strings from user.
netlink: don't compare the nul-termination in nla_strcmp
ipv6: some ipv6 statistic counters failed to disable bh
xen-netback: remove pointless clause from if statement
vhost: validate vhost_get_vq_desc return value
ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment properly
ipv6: Avoid unnecessary temporary addresses being generated
net: socket: error on a negative msg_namelen
vlan: Set correct source MAC address with TX VLAN offload enabled
net: unix: non blocking recvmsg() should not return -EINTR
bridge: multicast: add sanity check for query source addresses
net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk

[Joseph Salisbury (jsalisbury)]

The following patches were skipped since they were already applied:

 0008-vhost-fix-total-length-when-packets-are-too-short.patch
 0015-rds-prevent-dereference-of-a-NULL-device-in-rds_iw_l.patch
 0020-ipv6-don-t-set-DST_NOCOUNT-for-remotely-added-routes.patch
 0080-mm-try_to_unmap_cluster-should-lock_page-before-mloc.patch
 0128-n_tty-Fix-n_tty_write-crash-when-echoing-in-raw-mode.patch
 0129-floppy-ignore-kernel-only-members-in-FDRAWCMD-ioctl-.patch
 0130-floppy-don-t-write-kernel-only-members-to-FDRAWCMD-i.patch

[Luis Henriques (henrix)]

Patch "dmi: add support for exact DMI matches in addition to substring matching" (upstream 5017b2851373ee15c7035151853bb1448800cae2) introduces DMI_EXACT_MATCH macro, which was already defined in -lbm package (updates/cw-3.11/backport-include/linux/mod_devicetable.h).

The definition of this macro in the -lbm package has been dropped.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.2.0-64.97

---------------
linux (3.2.0-64.97) precise; urgency=low

  [ Upstream Kernel Changes ]

  * futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
    uaddr2 in futex_requeue(..., requeue_pi=1)
    - LP: #1326367
    - CVE-2014-3153
  * futex: Validate atomic acquisition in futex_lock_pi_atomic()
    - LP: #1326367
    - CVE-2014-3153
  * futex: Always cleanup owner tid in unlock_pi
    - LP: #1326367
    - CVE-2014-3153
  * futex: Make lookup_pi_state more robust
    - LP: #1326367
    - CVE-2014-3153
 -- Brad Figg <email address hidden> Wed, 04 Jun 2014 10:48:57 -0700

[rojer (rojer9)]

this patch:

drm/vmwgfx: correct fb_fix_screeninfo.line_length (https://lkml.org/lkml/2014/2/1/41)

introduces a regression in vmware video drivers widely reported here: https://communities.vmware.com/message/2388776

i also reported it here against xserver-xorg-video-vmware here: https://bugs.launchpad.net/ubuntu/+source/xserver-xorg-video-vmware/+bug/1328898

in the mean time, it would be nice to get a rollback.