Ubuntu
linux-ti-omap4 package

CVE-2014-3122

Bug #1316268 reported by John Johansen on 2014-05-05

256

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-armadaxp (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ec2 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-flo (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-fsl-imx51 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-goldfish (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-lts-backport-maverick (Ubuntu)	Invalid	Undecided	Unassigned
Lucid	Won't Fix	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Quantal	Won't Fix	Undecided	Unassigned
Saucy	Won't Fix	Undecided	Unassigned
Trusty	Won't Fix	Undecided	Unassigned
Utopic	Won't Fix	Undecided	Unassigned
Vivid	Invalid	Undecided	Unassigned
Wily	Invalid	Undecided	Unassigned
Xenial	Invalid	Undecided	Unassigned
Yakkety	Invalid	Undecided	Unassigned
linux-lts-backport-natty (Ubuntu)	Invalid	Undecided	Unassigned
Lucid	Won't Fix	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Quantal	Won't Fix	Undecided	Unassigned
Saucy	Won't Fix	Undecided	Unassigned
Trusty	Won't Fix	Undecided	Unassigned
Utopic	Won't Fix	Undecided	Unassigned
Vivid	Invalid	Undecided	Unassigned
Wily	Invalid	Undecided	Unassigned
Xenial	Invalid	Undecided	Unassigned
Yakkety	Invalid	Undecided	Unassigned
linux-lts-quantal (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-raring (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-saucy (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-trusty (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-utopic (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-vivid (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Committed	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-wily (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-xenial (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Committed	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mako (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-manta (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mvl-dove (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-raspi2 (Ubuntu)	Fix Committed	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Fix Committed	Medium	Unassigned
Yakkety	Fix Committed	Medium	Unassigned
linux-snapdragon (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned

Bug Description

The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages must be locked, which allows local users to cause a denial of service (system crash) by triggering a memory-usage pattern that requires removal of page-table mappings.

Break-Fix: b291f000393f5a0b679012b39d79fbc85c018233 57e68e9cd65b4b8eb4045a1e0d0746458502554c

See original description

Tags:

CVE References

Revision history for this message

John Johansen (jjohansen) wrote on 2014-05-05:

CVE-2014-3122

tags:	added: kernel-cve-tracking-bug
information type:	Public → Public Security
Changed in linux-armadaxp (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Quantal):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Quantal):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Precise):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Quantal):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Quantal):
status:	New → Invalid
Changed in linux (Ubuntu Utopic):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Quantal):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-lts-raring (Ubuntu Saucy):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Quantal):
status:	New → Invalid
description:	updated
Changed in linux-armadaxp (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Lucid):
importance:	Undecided → Medium

John Johansen (jjohansen) on 2014-05-05

Changed in linux-lts-saucy (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Quantal):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Saucy):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Quantal):
importance:	Undecided → Medium

John Johansen (jjohansen) on 2014-05-11

Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-armadaxp (Ubuntu Quantal):
status:	New → Fix Committed
Changed in linux-ec2 (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux-lts-quantal (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux (Ubuntu Quantal):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Saucy):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Quantal):
status:	New → Fix Committed

John Johansen (jjohansen) on 2014-05-20

no longer affects:	linux-armadaxp (Ubuntu Quantal)
no longer affects:	linux-ec2 (Ubuntu Quantal)
no longer affects:	linux-lts-saucy (Ubuntu Quantal)
no longer affects:	linux-lts-quantal (Ubuntu Quantal)
no longer affects:	linux-mvl-dove (Ubuntu Quantal)
no longer affects:	linux (Ubuntu Quantal)
no longer affects:	linux-fsl-imx51 (Ubuntu Quantal)
no longer affects:	linux-ti-omap4 (Ubuntu Quantal)
no longer affects:	linux-lts-raring (Ubuntu Quantal)
description:	updated

John Johansen (jjohansen) on 2014-05-22

Changed in linux-lts-saucy (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux (Ubuntu Saucy):
status:	New → Fix Committed
Changed in linux (Ubuntu Trusty):
status:	New → Fix Committed

John Johansen (jjohansen) on 2014-05-28

Changed in linux-lts-quantal (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux-lts-raring (Ubuntu Precise):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-06-05:

This bug was fixed in the package linux - 2.6.32-61.124

---------------
linux (2.6.32-61.124) lucid; urgency=low

[ Luis Henriques ]

  * Revert "sysctl net: Keep tcp_syn_retries inside the boundary"
    - LP: #1326473
  * Revert "net: check net.core.somaxconn sysctl values"
    - LP: #1326473

[ Upstream Kernel Changes ]

  * futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
    uaddr2 in futex_requeue(..., requeue_pi=1)
    - LP: #1326367
    - CVE-2014-3153
  * futex: Validate atomic acquisition in futex_lock_pi_atomic()
    - LP: #1326367
    - CVE-2014-3153
  * futex: Always cleanup owner tid in unlock_pi
    - LP: #1326367
    - CVE-2014-3153
  * futex: Make lookup_pi_state more robust
    - LP: #1326367
    - CVE-2014-3153
-- Brad Figg <email address hidden> Wed, 04 Jun 2014 07:21:55 -0700

Changed in linux (Ubuntu Lucid):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-06-05:

This bug was fixed in the package linux-ec2 - 2.6.32-365.79

---------------
linux-ec2 (2.6.32-365.79) lucid; urgency=low

[ Brad Figg ]

* Rebased to Ubuntu-2.6.32-61.124
-- Brad Figg <email address hidden> Wed, 04 Jun 2014 15:25:02 -0700

Changed in linux-ec2 (Ubuntu Lucid):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-06-05:

This bug was fixed in the package linux - 3.2.0-64.97

---------------
linux (3.2.0-64.97) precise; urgency=low

[ Upstream Kernel Changes ]

Changed in linux (Ubuntu Precise):
status:	Fix Committed → Fix Released
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-06-05:

This bug was fixed in the package linux-armadaxp - 3.2.0-1634.49

---------------
linux-armadaxp (3.2.0-1634.49) precise-proposed; urgency=low

[ Ike Panhc ]

  * Release Tracking Bug
    - LP: #1326748
  * Rebase to Ubuntu-3.2.0-64.97

[ Ubuntu: 3.2.0-64.97 ]

  * futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
    uaddr2 in futex_requeue(..., requeue_pi=1)
    - LP: #1326367
    - CVE-2014-3153
  * futex: Validate atomic acquisition in futex_lock_pi_atomic()
    - LP: #1326367
    - CVE-2014-3153
  * futex: Always cleanup owner tid in unlock_pi
    - LP: #1326367
    - CVE-2014-3153
  * futex: Make lookup_pi_state more robust
    - LP: #1326367
    - CVE-2014-3153
-- Ike Panhc <email address hidden> Thu, 05 Jun 2014 19:41:05 +0800

Changed in linux-armadaxp (Ubuntu Precise):
status:	Fix Committed → Fix Released
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2014-06-05:

Download full text (10.9 KiB)

This bug was fixed in the package linux-ti-omap4 - 3.2.0-1449.68

---------------
linux-ti-omap4 (3.2.0-1449.68) precise; urgency=low

* Release Tracking Bug
- LP: #1326747

[ Paolo Pisati ]

* rebased on Ubuntu-3.2.0-64.97

[ Ubuntu: 3.2.0-64.97 ]

linux-ti-omap4 (3.2.0-1448.67) precise; urgency=low

* Release Tracking Bug
- LP: #1322135

[ Paolo Pisati ]

* rebased on Ubuntu-3.2.0-64.96
* [Config] BLK_DEV_DM_BUILTIN=y

[ Ubuntu: 3.2.0-64.96 ]

This bug was fixed in the package linux-ti-omap4 - 3.2.0-1449.68

---------------
linux-ti-omap4 (3.2.0-1449.68) precise; urgency=low

* Release Tracking Bug
    - LP: #1326747

[ Paolo Pisati ]

* rebased on Ubuntu-3.2.0-64.97

[ Ubuntu: 3.2.0-64.97 ]

linux-ti-omap4 (3.2.0-1448.67) precise; urgency=low

* Release Tracking Bug
    - LP: #1322135

[ Paolo Pisati ]

* rebased on Ubuntu-3.2.0-64.96
  * [Config] BLK_DEV_DM_BUILTIN=y

[ Ubuntu: 3.2.0-64.96 ]

* Release Tracking Bug
    - LP: #1321792
  * [Config] updateconfigs after Linux v3.2.58 and v3.2.59 updates
  * Revert "sparc64: Fix __copy_{to,from}_user_inatomic defines."
    - LP: #1319885
  * Revert "alpha: fix broken network checksum"
    - LP: #1319885
  * Revert "isci: fix reset timeout handling"
    - LP: #1319885
  * Revert "USB: serial: add usbid for dell wwan card to sierra.c"
    - LP: #1319885
  * mm: try_to_unmap_cluster() should lock_page() before mlocking
    - LP: #1316268
    - CVE-2014-3122
  * net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk
    - LP: #1319885
  * bridge: multicast: add sanity check for query source addresses
    - LP: #1319885
  * net: unix: non blocking recvmsg() should not return -EINTR
    - LP: #1319885
  * vlan: Set correct source MAC address with TX VLAN offload enabled
    - LP: #1319885
  * net: socket: error on a negative msg_namelen
    - LP: #1319885
  * ipv6: Avoid unnecessary temporary addresses being generated
    - LP: #1319885
  * ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment
    properly
    - LP: #1319885
  * vhost: validate vhost_get_vq_desc return value
    - LP: #1319885
    - CVE-2014-0055
  * xen-netback: remove pointless clause from if statement
    - LP: #1319885
  * ipv6: some ipv6 statistic counters failed to disable bh
    - LP: #1319885
  * netlink: don't compare the nul-termination in nla_strcmp
    - LP: #1319885
  * isdnloop: Validate NUL-terminated strings from user.
    - LP: #1319885
  * isdnloop: several buffer overflows
    - LP: #1319885
  * sparc: PCI: Fix incorrect address calculation of PCI Bridge windows on
    Simba-bridges
    - LP: #1319885
  * sparc32: fix build failure for arch_jump_label_transform
    - LP: #1319885
  * sparc64: don't treat 64-bit syscall return codes as 32-bit
    - LP: #1319885
  * drm/i915: inverted brightness quirk for Acer Aspire 4736Z
    - LP: #1319885
  * drm/i915: quirk invert brightness for Acer Aspire 5336
    - LP: #1319885
  * w1: fix w1_send_slave dropping a slave id
    - LP: #1319885
  * ARM: mm: introduce present, faulting entries for PAGE_NONE
    - LP: #1319885
  * ARM: 7954/1: mm: remove remaining domain support from ARMv6
    - LP: #1319885
  * matroxfb: restore the registers M_ACCESS and M_PITCH
    - LP: #1319885
  * framebuffer: fix cfb_copyarea
    - LP: #1319885
  * mach64: use unaligned access
    - LP: #1319885
  * mach64: fix cursor when character width is not a multiple of 8 pixels
    - LP: #1319885
  * tgafb: fix data copying
    - LP: #1319885
  * hvc: ensure hvc_init is only ever called once in hvc_console.c
    - LP: #1319885
  * usb: dwc3: fix wrong bit mask in dwc3_event_devt
    - LP: #1319885
  * media: gspca: sn9c20x: add ID for Genius Look 1320 V2
    - LP: #1319885
  * tty: Set correct tty name in 'active' sysfs attribute
    - LP: #1319885
  * uvcvideo: Do not use usb_set_interface on bulk EP
    - LP: #1319885
  * usb: gadget: atmel_usba: fix crashed during stopping when DEBUG is
    enabled
    - LP: #1319885
  * blktrace: fix accounting of partially completed requests
    - LP: #1319885
  * rtlwifi: rtl8192se: Fix too long disable of IRQs
    - LP: #1319885
  * staging:serqt_usb2: Fix sparse warning restricted __le16 degrades to
    integer
    - LP: #1319885
  * Btrfs: skip submitting barrier for missing device
    - LP: #1319885
  * jffs2: remove from wait queue after schedule()
    - LP: #1319885
  * jffs2: avoid soft-lockup in jffs2_reserve_space_gc()
    - LP: #1319885
  * jffs2: Fix segmentation fault found in stress test
    - LP: #1319885
  * jffs2: Fix crash due to truncation of csize
    - LP: #1319885
  * iwlwifi: dvm: take mutex when sending SYNC BT config command
    - LP: #1319885
  * virtio_balloon: don't softlockup on huge balloon changes.
    - LP: #1319885
  * ext4: fix partial cluster handling for bigalloc file systems
    - LP: #1319885
  * ath9k: fix ready time of the multicast buffer queue
    - LP: #1319885
  * IB/ipath: Fix potential buffer overrun in sending diag packet routine
    - LP: #1319885
  * IB/nes: Return an error on ib_copy_from_udata() failure instead of NULL
    - LP: #1319885
  * mfd: Include all drivers in subsystem menu
    - LP: #1319885
  * mfd: max8997: Fix possible NULL pointer dereference on i2c_new_dummy
    error
    - LP: #1319885
  * mfd: max8998: Fix possible NULL pointer dereference on i2c_new_dummy
    error
    - LP: #1319885
  * mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy
    error
    - LP: #1319885
  * mfd: 88pm860x: Fix possible NULL pointer dereference on i2c_new_dummy
    error
    - LP: #1319885
  * pid: get pid_t ppid of task in init_pid_ns
    - LP: #1319885
  * audit: convert PPIDs to the inital PID namespace.
    - LP: #1319885
  * Btrfs: fix deadlock with nested trans handles
    - LP: #1319885
  * gpio: mxs: Allow for recursive enable_irq_wake() call
    - LP: #1319885
  * x86, hyperv: Bypass the timer_irq_works() check
    - LP: #1319885
  * nfsd4: buffer-length check for SUPPATTR_EXCLCREAT
    - LP: #1319885
  * nfsd4: session needs room for following op to error out
    - LP: #1319885
  * nfsd: Add fh_{want,drop}_write()
    - LP: #1319885
  * nfsd: notify_change needs elevated write count
    - LP: #1319885
  * drm/i915/tv: fix gen4 composite s-video tv-out
    - LP: #1319885
  * dm thin: fix dangling bio in process_deferred_bios error path
    - LP: #1319885
  * nfsd4: fix setclientid encode size
    - LP: #1319885
  * MIPS: Hibernate: Flush TLB entries in swsusp_arch_resume()
    - LP: #1319885
  * ALSA: hda - Enable beep for ASUS 1015E
    - LP: #1319885
  * IB/mthca: Return an error on ib_copy_to_udata() failure
    - LP: #1319885
  * IB/ehca: Returns an error on ib_copy_to_udata() failure
    - LP: #1319885
  * reiserfs: fix race in readdir
    - LP: #1319885
  * drm/vmwgfx: correct fb_fix_screeninfo.line_length
    - LP: #1319885
  * drm/radeon: call drm_edid_to_eld when we update the edid
    - LP: #1319885
  * sh: fix format string bug in stack tracer
    - LP: #1319885
  * ocfs2: dlm: fix lock migration crash
    - LP: #1319885
  * ocfs2: dlm: fix recovery hung
    - LP: #1319885
  * ocfs2: do not put bh when buffer_uptodate failed
    - LP: #1319885
  * iscsi-target: Fix ERL=2 ASYNC_EVENT connection pointer bug
    - LP: #1319885
  * mm: hugetlb: fix softlockup when a large number of hugepages are freed.
    - LP: #1319885
  * wait: fix reparent_leader() vs EXIT_DEAD->EXIT_ZOMBIE race
    - LP: #1319885
  * ALSA: ice1712: Fix boundary checks in PCM pointer ops
    - LP: #1319885
  * lib/percpu_counter.c: fix bad percpu counter state during suspend
    - LP: #1319885
  * b43: Fix machine check error due to improper access of
    B43_MMIO_PSM_PHY_HDR
    - LP: #1319885
  * x86-64, modify_ldt: Ban 16-bit segments on 64-bit kernels
    - LP: #1319885
  * target/tcm_fc: Fix use-after-free of ft_tpg
    - LP: #1319885
  * drivers: hv: additional switch to use mb() instead of smp_mb()
    - LP: #1319885
  * Char: ipmi_bt_sm, fix infinite loop
    - LP: #1319885
  * selinux: correctly label /proc inodes in use before the policy is
    loaded
    - LP: #1319885
  * powernow-k6: disable cache when changing frequency
    - LP: #1319885
  * powernow-k6: correctly initialize default parameters
    - LP: #1319885
  * powernow-k6: reorder frequencies
    - LP: #1319885
  * Linux 3.2.58
    - LP: #1319885
  * ext4: FIBMAP ioctl causes BUG_ON due to handle EXT_MAX_BLOCKS
    - LP: #1319885
  * ext4: note the error in ext4_end_bio()
    - LP: #1319885
  * ext4: use i_size_read in ext4_unaligned_aio()
    - LP: #1319885
  * parisc: fix epoll_pwait syscall on compat kernel
    - LP: #1319885
  * locks: allow __break_lease to sleep even when break_time is 0
    - LP: #1319885
  * mlx4_en: don't use napi_synchronize inside mlx4_en_netpoll
    - LP: #1319885
  * staging: r8712u: Fix case where ethtype was never obtained and always
    be checked against 0
    - LP: #1319885
  * USB: serial: ftdi_sio: add id for Brainboxes serial cards
    - LP: #1319885
  * usb: option driver, add support for Telit UE910v2
    - LP: #1319885
  * USB: cp210x: Add 8281 (Nanotec Plug & Drive)
    - LP: #1319885
  * USB: pl2303: add ids for Hewlett-Packard HP POS pole displays
    - LP: #1319885
  * USB: cdc-acm: Remove Motorola/Telit H24 serial interfaces from ACM
    driver
    - LP: #1319885
  * nfsd: set timeparms.to_maxval in setup_callback_client
    - LP: #1319885
  * libata/ahci: accommodate tag ordered controllers
    - LP: #1319885
  * mm/hugetlb.c: add cond_resched_lock() in return_unused_surplus_pages()
    - LP: #1319885
  * dmi: add support for exact DMI matches in addition to substring
    matching
    - LP: #1319885
  * Input: synaptics - add min/max quirk for ThinkPad T431s, L440, L540, S1
    Yoga and X1
    - LP: #1319885
  * mm: make fixup_user_fault() check the vma access rights too
    - LP: #1319885
  * ARM: 8027/1: fix do_div() bug in big-endian systems
    - LP: #1319885
  * USB: serial: fix sysfs-attribute removal deadlock
    - LP: #1319885
  * Btrfs: Don't allocate inode that is already in use
    - LP: #1319885
  * Btrfs: fix inode caching vs tree log
    - LP: #1319885
  * xhci: For streams the css flag most be read from the stream-ctx on ep
    stop
    - LP: #1319885
  * usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb
    - LP: #1319885
  * usb/xhci: fix compilation warning when !CONFIG_PCI && !CONFIG_PM
    - LP: #1319885
  * USB: io_ti: fix firmware download on big-endian machines
    - LP: #1319885
  * usb: option: add Olivetti Olicard 500
    - LP: #1319885
  * usb: option: add Alcatel L800MA
    - LP: #1319885
  * usb: option: add and update a number of CMOTech devices
    - LP: #1319885
  * rtl8192ce: Fix null dereference in watchdog
    - LP: #1319885
  * Linux 3.2.59
    - LP: #1319885

linux-ti-omap4 (3.2.0-1447.66) precise; urgency=low

* Release Tracking Bug
    - LP: #1320043

[ Paolo Pisati ]

* rebased on Ubuntu-3.2.0-63.95

[ Ubuntu: 3.2.0-63.95 ]

* Revert "rtlwifi: Set the link state"
    - LP: #1319735
  * Release Tracking Bug
    - re-used previous tracking bug
 -- Paolo Pisati <paolo.pisati@canonical.com>   Thu, 05 Jun 2014 13:33:19 +0200

Changed in linux-ti-omap4 (Ubuntu Precise):
status:	Fix Committed → Fix Released
status:	Fix Committed → Fix Released

John Johansen (jjohansen) on 2014-06-07

Changed in linux-lts-saucy (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux (Ubuntu Saucy):
status:	Fix Committed → Fix Released
Changed in linux (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Jamie Strandboge (jdstrand) on 2014-06-26

Changed in linux-lts-backport-maverick (Ubuntu Lucid):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Lucid):
status:	New → Won't Fix
Changed in linux-lts-backport-maverick (Ubuntu Precise):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Precise):
status:	New → Won't Fix
Changed in linux-lts-backport-maverick (Ubuntu Quantal):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Quantal):
status:	New → Won't Fix
Changed in linux-lts-backport-maverick (Ubuntu Saucy):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Saucy):
status:	New → Won't Fix
Changed in linux-lts-backport-maverick (Ubuntu Trusty):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Trusty):
status:	New → Won't Fix
Changed in linux-lts-backport-maverick (Ubuntu Utopic):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Utopic):
status:	New → Won't Fix

John Johansen (jjohansen) on 2014-07-23

no longer affects:	linux-armadaxp (Ubuntu Saucy)
no longer affects:	linux-ec2 (Ubuntu Saucy)
no longer affects:	linux-lts-saucy (Ubuntu Saucy)
no longer affects:	linux-lts-quantal (Ubuntu Saucy)
no longer affects:	linux-mvl-dove (Ubuntu Saucy)
no longer affects:	linux (Ubuntu Saucy)
no longer affects:	linux-fsl-imx51 (Ubuntu Saucy)
no longer affects:	linux-ti-omap4 (Ubuntu Saucy)
no longer affects:	linux-lts-raring (Ubuntu Saucy)

John Johansen (jjohansen) on 2014-12-08

Changed in linux-lts-trusty (Ubuntu Precise):
status:	New → Fix Released
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → Medium

John Johansen (jjohansen) on 2015-01-28

Changed in linux-flo (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Utopic):
importance:	Undecided → Medium

Mathew Hodson (mhodson) on 2015-03-29

Changed in linux (Ubuntu Utopic):
status:	Fix Committed → Invalid
Changed in linux (Ubuntu Vivid):
status:	Fix Committed → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Vivid):
status:	New → Invalid

John Johansen (jjohansen) on 2015-05-04

no longer affects:	linux-lts-trusty (Ubuntu Lucid)
no longer affects:	linux-armadaxp (Ubuntu Lucid)
no longer affects:	linux-ec2 (Ubuntu Lucid)
no longer affects:	linux-goldfish (Ubuntu Lucid)
no longer affects:	linux-lts-saucy (Ubuntu Lucid)
no longer affects:	linux-lts-quantal (Ubuntu Lucid)
no longer affects:	linux-mvl-dove (Ubuntu Lucid)
no longer affects:	linux-ti-omap4 (Ubuntu Lucid)
no longer affects:	linux (Ubuntu Lucid)
no longer affects:	linux-mako (Ubuntu Lucid)
no longer affects:	linux-fsl-imx51 (Ubuntu Lucid)
no longer affects:	linux-lts-utopic (Ubuntu Lucid)
no longer affects:	linux-flo (Ubuntu Lucid)
no longer affects:	linux-lts-raring (Ubuntu Lucid)
no longer affects:	linux-manta (Ubuntu Lucid)

John Johansen (jjohansen) on 2015-05-08

Changed in linux-lts-vivid (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Utopic):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	New → Fix Committed
importance:	Undecided → Medium

John Johansen (jjohansen) on 2015-07-28

no longer affects:	linux-lts-trusty (Ubuntu Utopic)
no longer affects:	linux-armadaxp (Ubuntu Utopic)
no longer affects:	linux-ec2 (Ubuntu Utopic)
no longer affects:	linux-goldfish (Ubuntu Utopic)
no longer affects:	linux-lts-saucy (Ubuntu Utopic)
no longer affects:	linux-lts-quantal (Ubuntu Utopic)
no longer affects:	linux-mvl-dove (Ubuntu Utopic)
no longer affects:	linux-ti-omap4 (Ubuntu Utopic)
no longer affects:	linux-lts-vivid (Ubuntu Utopic)
no longer affects:	linux (Ubuntu Utopic)
no longer affects:	linux-mako (Ubuntu Utopic)
no longer affects:	linux-fsl-imx51 (Ubuntu Utopic)
no longer affects:	linux-lts-utopic (Ubuntu Utopic)
no longer affects:	linux-flo (Ubuntu Utopic)
no longer affects:	linux-lts-raring (Ubuntu Utopic)
no longer affects:	linux-manta (Ubuntu Utopic)

Steve Beattie (sbeattie) on 2015-11-10

Changed in linux-lts-wily (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2015-11-16

Changed in linux-raspi2 (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2015-12-03

Changed in linux-raspi2 (Ubuntu Xenial):
status:	Invalid → Fix Committed

Steve Beattie (sbeattie) on 2016-02-10

Changed in linux-lts-xenial (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Trusty):
status:	New → Fix Committed
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2016-04-18

Changed in linux-manta (Ubuntu Xenial):
status:	New → Invalid

Steve Beattie (sbeattie) on 2016-05-05

Changed in linux-snapdragon (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Yakkety):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium

Revision history for this message

Andy Whitcroft (apw) wrote on 2017-10-17: Closing unsupported series nomination.

#10

This bug was nominated against a series that is no longer supported, ie vivid. The bug task representing the vivid nomination is being closed as Won't Fix.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux-flo (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-goldfish (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-manta (Ubuntu Vivid):
status:	New → Won't Fix

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-ti-omap4 package

CVE-2014-3122

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-ti-omap4 package