This bug was fixed in the package linux-ti-omap4 - 3.2.0-1475.97 --------------- linux-ti-omap4 (3.2.0-1475.97) precise; urgency=low * Release Tracking Bug - LP: #1521445 [ Luis Henriques ] * rebased on Ubuntu-3.2.0-96.136 [ Ubuntu: 3.2.0-96.136 ] * Release Tracking Bug - LP: #1521325 * [Packaging] control -- make element ordering deterministic - LP: #1516686 * [Packaging] control -- prepare for new kernel-wedge semantics - LP: #1516686 * Revert "KVM: x86: vmx: avoid guest->host DOS by intercepting #AC" * Revert "KVM: MMU: fix validation of mmio page fault" - LP: #1520200 * module: Fix locking in symbol_put_addr() - LP: #1520200 * regmap: debugfs: Ensure we don't underflow when printing access masks - LP: #1520200 * regmap: debugfs: Don't bother actually printing when calculating max length - LP: #1520200 * ath9k: declare required extra tx headroom - LP: #1520200 * m68k: Define asmlinkage_protect - LP: #1520200 * x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map - LP: #1520200 * UBI: Validate data_size - LP: #1520200 * UBI: return ENOSPC if no enough space available - LP: #1520200 * MIPS: dma-default: Fix 32-bit fall back to GFP_DMA - LP: #1520200 * x86/process: Add proper bound checks in 64bit get_wchan() - LP: #1520200 * genirq: Fix race in register_irq_proc() - LP: #1520200 * mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault - LP: #1520200 * Do not fall back to SMBWriteX in set_file_size error cases - LP: #1520200 * md/raid0: update queue parameter in a safer location. - LP: #1520200 * md/raid0: apply base queue limits *before* disk_stack_limits - LP: #1520200 * clocksource: Fix abs() usage w/ 64bit values - LP: #1520200 * iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb() - LP: #1520200 * USB: Add reset-resume quirk for two Plantronics usb headphones. - LP: #1520200 * usb: Add device quirk for Logitech PTZ cameras - LP: #1520200 * tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c - LP: #1520200 * drivers/tty: require read access for controlling terminal - LP: #1520200 * ppp: don't override sk->sk_state in pppoe_flush_dev() - LP: #1520200 * iwlwifi: dvm: fix D3 firmware PN programming - LP: #1520200 * ALSA: synth: Fix conflicting OSS device registration on AWE32 - LP: #1520200 * sched/core: Fix TASK_DEAD race in finish_task_switch() - LP: #1520200 * 3w-9xxx: don't unmap bounce buffered commands - LP: #1520200 * xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing) - LP: #1520200 * ALSA: hda - Fix inverted internal mic on Lenovo G50-80 - LP: #1504778, #1520200 * crypto: ahash - ensure statesize is non-zero - LP: #1520200 * iommu/vt-d: fix range computation when making room for large pages - LP: #1520200 * xhci: don't finish a TD if we get a short transfer event mid TD - LP: #1520200 * xhci: handle no ping response error properly - LP: #1520200 * xhci: Switch Intel Lynx Point LP ports to EHCI on shutdown. - LP: #1520200 * xhci: Add spurious wakeup quirk for LynxPoint-LP controllers - LP: #1520200 * crypto: api - Only abort operations on fatal signal - LP: #1520200 * ASoC: wm8904: Correct number of EQ registers - LP: #1520200 * IB/cm: Fix rb-tree duplicate free and use-after-free - LP: #1520200 * drm/nouveau/gem: return only valid domain when there's only one - LP: #1520200 * powerpc/rtas: Validate rtas.entry before calling enter_rtas() - LP: #1520200 * mm: make sendfile(2) killable - LP: #1520200 * ppp: fix pppoe_dev deletion condition in pppoe_release() - LP: #1520200 * dm btree remove: fix a bug when rebalancing nodes after removal - LP: #1520200 * dm btree: fix leak of bufio-backed block in btree_split_beneath error path - LP: #1520200 * md/raid1: ensure device failure recorded before write request returns. - LP: #1520200 * md/raid1: don't clear bitmap bit when bad-block-list write fails. - LP: #1520200 * md/raid10: ensure device failure recorded before write request returns. - LP: #1520200 * md/raid10: don't clear bitmap bit when bad-block-list write fails. - LP: #1520200 * mvsas: Fix NULL pointer dereference in mvs_slot_task_free - LP: #1520200 * sched: declare pid_alive as inline - LP: #1520200 * net: add length argument to skb_copy_and_csum_datagram_iovec - LP: #1520200 * skbuff: Fix skb checksum flag on skb pull - LP: #1520200 * skbuff: Fix skb checksum partial check. - LP: #1520200 * ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings - LP: #1520200 * asix: Don't reset PHY on if_up for ASIX 88772 - LP: #1520200 * asix: Do full reset during ax88772_bind - LP: #1520200 * Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount - LP: #1520200 * KVM: x86: work around infinite loop in microcode when #AC is delivered - LP: #1520200 * KEYS: Fix race between key destruction and finding a keyring by name - LP: #1520200 * KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring - LP: #1520200 * Linux 3.2.73 - LP: #1520200 * KVM: svm: unconditionally intercept #DB - LP: #1520184 - CVE-2015-8104 linux-ti-omap4 (3.2.0-1474.96) precise; urgency=low * Release Tracking Bug - LP: #1514962 [ Luis Henriques ] * rebased on Ubuntu-3.2.0-95.135 [ Ubuntu: 3.2.0-95.135 ] * Release Tracking Bug - LP: #1514808 * Drivers: hv: Support handling multiple VMBUS versions - LP: #1454758 * Drivers: hv: Save and export negotiated vmbus version - LP: #1454758 * Drivers: hv: Move vmbus version definitions to hyperv.h - LP: #1454758 * storvsc: Update the storage protocol to win8 level - LP: #1454758 * storvsc: Set the SRB flags correctly when no data transfer is needed - LP: #1454758 [ Ubuntu: 3.2.0-94.134 ] * KVM: x86: vmx: avoid guest->host DOS by intercepting #AC - LP: #1513540 - CVE-2015-5307 -- Luis Henriques