Precise update to 3.2.69 stable release

[Luis Henriques]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.69 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.69 stable release:

ARM: pxa: add regulator_has_full_constraints to corgi board file
ARM: pxa: add regulator_has_full_constraints to poodle board file
ARM: pxa: add regulator_has_full_constraints to spitz board file
hx4700: regulator: declare full constraints
udf: Remove repeated loads blocksize
udf: Check length of extended attributes and allocation descriptors
PCI: Generate uppercase hex for modalias var in uevent
kernel.h: add BUILD_BUG() macro
usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN
axonram: Fix bug in direct_access
TPM: Add new TPMs to the tail of the list to prevent inadvertent change of dev
Bluetooth: ath3k: Add support of AR3012 bluetooth 13d3:3423 device
smack: fix possible use after frees in task_security() callers
KVM: s390: base hrtimer on a monotonic clock
PCI: Fix infinite loop with ROM image of size 0
USB: cp210x: add ID for RUGGEDCOM USB Serial Console
iio: imu: adis16400: Fix sign extension
staging: comedi: comedi_compat32.c: fix COMEDI_CMD copy back
ARM: 8284/1: sa1100: clear RCSR_SMR on resume
xprtrdma: Free the pd if ib_query_qp() fails
nfs: don't call blocking operations while !TASK_RUNNING
cdc-acm: add sanity checks
USB: add flag for HCDs that can't receive wakeup requests (isp1760-hcd)
USB: fix use-after-free bug in usb_hcd_unlink_urb()
vt: provide notifications on selection changes
tty: Prevent untrappable signals from malicious program
lmedm04: Fix usb_submit_urb BOGUS urb xfer, pipe 1 != type 3 in interrupt urb
xen/manage: Fix USB interaction issues when resuming
rtnetlink: ifla_vf_policy: fix misuses of NLA_BINARY
ALSA: off by one bug in snd_riptide_joystick_probe()
fsnotify: fix handling of renames in audit
NFSv4.1: Fix a kfree() of uninitialised pointers in decode_cb_sequence_args
cpufreq: speedstep-smi: enable interrupts when waiting
mm/hugetlb: fix getting refcount 0 page in hugetlb_fault()
mm/hugetlb: add migration/hwpoisoned entry check in hugetlb_change_protection
mm/hugetlb: add migration entry check in __unmap_hugepage_range
mm/mmap.c: fix arithmetic overflow in __vm_enough_memory()
mm/nommu.c: fix arithmetic overflow in __vm_enough_memory()
iscsi-target: Drop problematic active_ts_list usage
mm/memory.c: actually remap enough memory
drm/radeon/dp: Set EDP_CONFIGURATION_SET for bridge chips if necessary
ALSA: hdspm - Constrain periods to 2 on older cards
jffs2: fix handling of corrupted summary length
dm mirror: do not degrade the mirror on discard error
dm io: reject unsupported DISCARD requests with EOPNOTSUPP
ipv6: fix ipv6_cow_metrics for non DST_HOST case
fixed invalid assignment of 64bit mask to host dma_boundary for scatter gather segment boundary limit.
sg: fix read() error reporting
netfilter: xt_socket: fix a stack corruption bug
IB/qib: Do not write EEPROM
dm: fix a race condition in dm_get_md
dm snapshot: fix a possible invalid memory access on unload
sched/autogroup: Fix failure to set cpu.rt_runtime_us
libceph: fix double __remove_osd() problem
kdb: fix incorrect counts in KDB summary command output
ipv4: ip_check_defrag should correctly check return value of skb_copy_bits
debugfs: leave freeing a symlink body until inode eviction
autofs4: check dev ioctl size before allocating
autofs4 copy_dev_ioctl(): keep the value of ->size we'd used for allocation
xfs: ensure truncate forces zeroed blocks to disk
gpio: tps65912: fix wrong container_of arguments
ALSA: pcm: Don't leave PREPARED state after draining
KVM: emulate: fix CMPXCHG8B on 32-bit hosts
net: compat: Ignore MSG_CMSG_COMPAT in compat_sys_{send, recv}msg
xhci: Allocate correct amount of scratchpad buffers
USB: usbfs: don't leak kernel data in siginfo
USB: ftdi_sio: add PIDs for Actisense USB devices
USB: serial: fix potential use-after-free after failed probe
USB: serial: fix tty-device error handling at probe
mac80211: Send EAPOL frames at lowest rate
USB: serial: cp210x: Adding Seletek device id's
nilfs2: fix potential memory overrun on inode
NFSv4: Don't call put_rpccred() under the rcu_read_lock()
usb: ftdi_sio: Add jtag quirk support for Cyber Cortex AV boards
eCryptfs: don't pass fs-specific ioctl commands through
drm/radeon: do a posting read in r100_set_irq
drm/radeon: do a posting read in rs600_set_irq
drm/radeon: do a posting read in r600_set_irq
drm/radeon: do a posting read in evergreen_set_irq
drm/radeon: fix DRM_IOCTL_RADEON_CS oops
ACPI / video: Load the module even if ACPI is disabled
ASoC: omap-pcm: Correct dma mask
x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization
xhci: fix reporting of 0-sized URBs in control endpoint
xhci: Workaround for PME stuck issues in Intel xhci
Change email address for 8250_pci
tty: fix up atime/mtime mess, take four
console: Fix console name size mismatch
net: irda: fix wait_until_sent poll timeout
TTY: fix tty_wait_until_sent on 64-bit machines
sunrpc: fix braino in ->poll()
gadgetfs: use-after-free in ->aio_read()
gadgetfs: Fix leak on error in aio_read()
ipvs: add missing ip_vs_pe_put in sync code
spi: dw: revisit FIFO size detection again
fuse: notify: don't move pages
fuse: set stolen page uptodate
dm: hold suspend_lock while suspending device during device deletion
dm io: deal with wandering queue limits when handling REQ_DISCARD and REQ_WRITE_SAME
mac80211: drop unencrypted frames in mesh fwding
mac80211: set only VO as a U-APSD enabled AC
mac80211: disable u-APSD queues by default
virtio_console: avoid config access from irq
bnx2x: Force fundamental reset for EEH recovery
x86/vdso: Fix the build on GCC5
ASoC: sgtl5000: remove useless register write clearing CHRGPUMP_POWERUP
libsas: Fix Kernel Crash in smp_execute_task
Input: synaptics - query min dimensions for fw v8.1
Input: synaptics - fix middle button on Lenovo 2015 products
Input: synaptics - handle spurious release of trackstick buttons
can: add missing initialisations in CAN related skbuffs
vt6655: RFbSetPower fix missing rate RATE_12M
ftrace: Fix en(dis)able graph caller when en(dis)abling record via sysctl
ftrace: Fix ftrace enable ordering of sysctl ftrace_enabled
x86/asm/entry/32: Fix user_mode() misuses
ASoC: adav80x: Fix wrong value references for boolean kctl
ASoC: ak4641: Fix wrong value references for boolean kctl
ASoC: cs4271: Fix wrong value references for boolean kctl
ASoC: wm2000: Fix wrong value references for boolean kctl
ASoC: wm8731: Fix wrong value references for boolean kctl
ASoC: wm8903: Fix wrong value references for boolean kctl
ASoC: wm8904: Fix wrong value references for boolean kctl
ASoC: wm8955: Fix wrong value references for boolean kctl
ASoC: wm8960: Fix wrong value references for boolean kctl
xen-pciback: limit guest control of command register
drm/vmwgfx: Reorder device takedown somewhat
ALSA: control: Add sanity checks for user ctl id name string
ALSA: snd-usb: add quirks for Roland UA-22
nilfs2: fix deadlock of segment constructor during recovery
crypto: aesni - fix memory usage in GCM decryption
nl80211: ignore HT/VHT capabilities without QoS/WMM
pagemap: do not leak physical addresses to non-privileged userspace
IB/mlx4: Saturate RoCE port PMA counters in case of overflow
tcm_fc: missing curly braces in ft_invl_hw_context()
target/pscsi: Fix NULL pointer dereference in get_device_type
writeback: add missing INITIAL_JIFFIES init in global_update_bandwidth()
nbd: fix possible memory leak
iio: core: Fix double free.
USB: ftdi_sio: Added custom PID for Synapse Wireless product
USB: serial: keyspan_pda: fix Entrega company name spelling
USB: keyspan_pda: add new device id
net: ethernet: pcnet32: Setup the SRAM and NOUFLO on Am79C97{3, 5}
net: compat: Update get_compat_msghdr() to match copy_msghdr_from_user() behaviour
cifs: fix use-after-free bug in find_writable_file
perf: Fix irq_work 'tail' recursion
sched: Fix RLIMIT_RTTIME when PI-boosting to RT
writeback: fix possible underflow in write bandwidth calculation
usb: xhci: handle Config Error Change (CEC) in xhci driver
usb: xhci: apply XHCI_AVOID_BEI quirk to all Intel xHCI controllers
net: use for_each_netdev_safe() in rtnl_group_changelink()
USB: ftdi_sio: Use jtag quirk for SNAP Connect E10
selinux: fix sel_write_enforce broken return value
mm: fix anon_vma->degree underflow in anon_vma endless growing prevention
hfsplus: fix B-tree corruption after insertion at position 0
ALSA: hda - Add one more node in the EAPD supporting candidate list
radeon: Do not directly dereference pointers to BIOS area.
x86/reboot: Remove VersaLogic Menlow reboot quirk
ACPI, x86: fix Dell M6600 ACPI reboot regression via DMI
x86/reboot: Remove quirk entry for SBC FITPC
x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically
x86/reboot: Fix apparent cut-n-paste mistake in Dell reboot workaround
x86/reboot: Remove the duplicate C6100 entry in the reboot quirks list
x86/reboot: Add reboot quirk for Dell Latitude E5410
x86/reboot: Add reboot quirk for Certec BPC600
x86/reboot: Add ASRock Q1900DC-ITX mainboard reboot quirk
mac80211: fix RX A-MPDU session reorder timer deletion
xen-netfront: transmit fully GSO-sized packets
be2iscsi: Fix kernel panic when device initialization fails
Defer processing of REQ_PREEMPT requests for blocked devices
ocfs2: _really_ sync the right range
ALSA: usb - Creative USB X-Fi Pro SB1095 volume knob support
ipv4: Missing sk_nulls_node_init() in ping_unhash().
jfs: fix readdir regression
ip: zero sockaddr returned on error queue
net: rps: fix cpu unplug
ipv6: stop sending PTB packets for MTU < 1280
netxen: fix netxen_nic_poll() logic
ping: Fix race in free in receive path
ppp: deflate: never return len larger than output buffer
rtnetlink: call ->dellink on failure when ->newlink exists
gen_stats.c: Duplicate xstats buffer for later use
ipv4: ip_check_defrag should not assume that skb_network_offset is zero
ematch: Fix auto-loading of ematch modules.
net: reject creation of netdev names with colons
macvtap: limit head length of skb allocated
macvtap: make sure neighbour code can push ethernet header
usb: plusb: Add support for National Instruments host-to-host cable
udp: only allow UFO for packets from SOCK_DGRAM sockets
net: ping: Return EAFNOSUPPORT when appropriate.
net: avoid to hang up on sending due to sysctl configuration overflow.
net: sysctl_net_core: check SNDBUF and RCVBUF for min length
rds: avoid potential stack overflow
caif: fix MSG_OOB test in caif_seqpkt_recvmsg()
rxrpc: bogus MSG_PEEK test in rxrpc_recvmsg()
tcp: make connect() mem charging friendly
8139cp: Call dev_kfree_skby_any instead of kfree_skb.
8139too: Call dev_kfree_skby_any instead of dev_kfree_skb.
r8169: Call dev_kfree_skby_any instead of dev_kfree_skb.
tg3: Call dev_kfree_skby_any instead of dev_kfree_skb.
ixgb: Call dev_kfree_skby_any instead of dev_kfree_skb.
benet: Call dev_kfree_skby_any instead of kfree_skb.
gianfar: Carefully free skbs in functions called by netpoll.
ip_forward: Drop frames with attached skb->sk
tcp: avoid looping in tcp_send_fin()
net: make skb_gso_segment error handling more robust
spi: spidev: fix possible arithmetic overflow for multi-transfer message
IB/core: Avoid leakage from kernel to user space
ipvs: rerouting to local clients is not needed anymore
ipvs: uninitialized data with IP_VS_IPV6
Revert "KVM: s390: flush CPU on load control"
Linux 3.2.69

The following patches from 3.2.69 were already applied in the Precise kernel:

x86, mm/ASLR: Fix stack randomization on 64-bit systems
IB/uverbs: Prevent integer overflow in ib_umem_get address arithmetic
netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
net: llc: use correct size for sysctl timeout entries
net: rds: use correct size for max unacked packets and bytes
ipv6: Don't reduce hop limit for an interface
fs: take i_mutex during prepare_binprm for set[ug]id executables
net:socket: set msg_namelen to 0 if msg_name is passed as NULL in msghdr struct from userland.
NFSv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.2.0-85.122

---------------
linux (3.2.0-85.122) precise; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1458901

  [ Upstream Kernel Changes ]

  * Revert "KVM: s390: flush CPU on load control"
    - LP: #1454300
  * ARM: pxa: add regulator_has_full_constraints to corgi board file
    - LP: #1454300
  * ARM: pxa: add regulator_has_full_constraints to poodle board file
    - LP: #1454300
  * ARM: pxa: add regulator_has_full_constraints to spitz board file
    - LP: #1454300
  * hx4700: regulator: declare full constraints
    - LP: #1454300
  * udf: Remove repeated loads blocksize
    - LP: #1454300
  * udf: Check length of extended attributes and allocation descriptors
    - LP: #1454300
  * PCI: Generate uppercase hex for modalias var in uevent
    - LP: #1454300
  * kernel.h: add BUILD_BUG() macro
    - LP: #1454300
  * usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN
    - LP: #1454300
  * axonram: Fix bug in direct_access
    - LP: #1454300
  * TPM: Add new TPMs to the tail of the list to prevent inadvertent change
    of dev
    - LP: #1454300
  * Bluetooth: ath3k: Add support of AR3012 bluetooth 13d3:3423 device
    - LP: #1411193, #1454300
  * smack: fix possible use after frees in task_security() callers
    - LP: #1454300
  * KVM: s390: base hrtimer on a monotonic clock
    - LP: #1454300
  * PCI: Fix infinite loop with ROM image of size 0
    - LP: #1454300
  * USB: cp210x: add ID for RUGGEDCOM USB Serial Console
    - LP: #1454300
  * iio: imu: adis16400: Fix sign extension
    - LP: #1454300
  * staging: comedi: comedi_compat32.c: fix COMEDI_CMD copy back
    - LP: #1454300
  * ARM: 8284/1: sa1100: clear RCSR_SMR on resume
    - LP: #1454300
  * xprtrdma: Free the pd if ib_query_qp() fails
    - LP: #1454300
  * nfs: don't call blocking operations while !TASK_RUNNING
    - LP: #1454300
  * cdc-acm: add sanity checks
    - LP: #1454300
  * USB: add flag for HCDs that can't receive wakeup requests (isp1760-hcd)
    - LP: #1454300
  * USB: fix use-after-free bug in usb_hcd_unlink_urb()
    - LP: #1454300
  * vt: provide notifications on selection changes
    - LP: #1454300
  * tty: Prevent untrappable signals from malicious program
    - LP: #1454300
  * lmedm04: Fix usb_submit_urb BOGUS urb xfer, pipe 1 != type 3 in
    interrupt urb
    - LP: #1454300
  * xen/manage: Fix USB interaction issues when resuming
    - LP: #1454300
  * rtnetlink: ifla_vf_policy: fix misuses of NLA_BINARY
    - LP: #1454300
  * ALSA: off by one bug in snd_riptide_joystick_probe()
    - LP: #1454300
  * fsnotify: fix handling of renames in audit
    - LP: #1454300
  * NFSv4.1: Fix a kfree() of uninitialised pointers in
    decode_cb_sequence_args
    - LP: #1454300
  * cpufreq: speedstep-smi: enable interrupts when waiting
    - LP: #1454300
  * mm/hugetlb: fix getting refcount 0 page in hugetlb_fault()
    - LP: #1454300
  * mm/hugetlb: add migration/hwpoisoned entry check in
    hugetlb_change_protection
    - LP: #1454300
  * mm/hugetlb: add migration entry check in __unmap_hugepage_range
    - LP: #1454300
  * mm/mmap.c: fix arithmetic overflow in __vm_enough_memory...