Quantal update to 3.5.7.13 stable release

Bug #1186062 reported by Steve Conklin on 2013-05-31
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Quantal
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.5.7.13 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.5.7.13 stable release:

* Linux 3.5.7.13
* watchdog: Fix race condition in registration code
* ARM: EXYNOS5: Fix kernel dump in AFTR idle mode
* pch_dma: Use GFP_ATOMIC because called from interrupt context
* drivers/rtc/rtc-pcf2123.c: fix error return code in pcf2123_probe()
* dm thin: do not set discard_zeroes_data
* ipmi: ipmi_devintf: compat_ioctl method fails to take ipmi_mutex
* drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory overflow
* usermodehelper: check subprocess_info->path != NULL
* tracing: Fix leaks of filter preds
* timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE
* powerpc: Bring all threads online prior to migration/hibernation
* ARM: 7720/1: ARM v6/v7 cmpxchg64 shouldn't clear upper 32 bits of the old/new value
* drm/radeon: check incoming cliprects pointer
* ACPI / EC: Restart transaction even when the IBF flag set
* tick: Cleanup NOHZ per cpu data on cpu down
* iscsi-target: Fix processing of OOO commands
* ext4: limit group search loop for non-extent files
* xfrm6: release dev before returning error
* ipv6: do not clear pinet6 field
* macvlan: fix passthru mode race between dev removal and rx path
* if_cablemodem.h: Add parenthesis around ioctl macros
* 3c59x: fix PCI resource management
* 3c59x: fix freeing nonexistent resource on driver unload
* packet: tpacket_v3: do not trigger bug() on wrong header status
* bridge: fix race with topology change timer
* net: vlan,ethtool: netdev_features_t is more than 32 bit
* net: use netdev_features_t in skb_needs_linearize()
* net_sched: act_ipt forward compat with xtables
* 3c509.c: call SET_NETDEV_DEV for all device types (ISA/ISAPnP/EISA)
* sfc: Fix naming of MTD partitions for FPGA bitfiles
* tcp: force a dst refcount when prequeue packet
* net: qmi_wwan: prevent duplicate mac address on link (firmware bug workaround)
* net: qmi_wwan: fixup destination address (firmware bug workaround)
* net: qmi_wwan: fixup missing ethernet header (firmware bug workaround)
* hugetlbfs: fix mmap failure in unaligned size request
* iwlwifi: add new pci id for 6x35 series
* drm/mgag200: Fix framebuffer base address programming
* drm/mgag200: Fix writes into MGA1064_PIX_CLK_CTL register
* dm snapshot: fix error return code in snapshot_ctr
* KVM: VMX: fix halt emulation while emulating invalid guest sate
* hp_accel: Ignore the error from lis3lv02d_poweron() at resume
* ARM: OMAP: RX-51: change probe order of touchscreen and panel SPI devices
* mwifiex: fix setting of multicast filter
* mwifiex: clear is_suspended flag when interrupt is received early
* B43: Handle DMA RX descriptor underrun
* qmi_wwan/cdc_ether: add device IDs for Dell 5804 (Novatel E371) WWAN card
* ACPICA: Fix possible buffer overflow during a field unit read operation
* ALSA: HDA: Fix Oops caused by dereference NULL pointer
* xen/vcpu/pvhvm: Fix vcpu hotplugging hanging.
* nfsd4: don't allow owner override on 4.1 CLAIM_FH opens
* ath9k: fix key allocation error handling for powersave keys
* sd: fix array cache flushing bug causing performance problems
* tile: support new Tilera hypervisor
* ASoC: wm8994: missing break in wm8994_aif3_hw_params()
* audit: Syscall rules are not applied to existing processes on non-x86
* powerpc: Emulate non privileged DSCR read and write
* ext4: add check for inodes_count overflow in new resize ioctl
* cpufreq / Longhaul: Disable driver by default
* drbd: fix for deadlock when using automatic split-brain-recovery
* x86/mm: account for PGDIR_SIZE alignment
* s390: move dummy io_remap_pfn_range() to asm/pgtable.h
* drm/i915: Fix detection of base of stolen memory
* r8169: honor jumbo settings when chipset is requested to start.
* r8169: fix vlan tag read ordering.
* drm/radeon: use frac fb div on RS780/RS880
* drm/i915: ensure single initialization and cleanup of backlight device
* ARM: 7692/1: iop3xx: move IOP3XX_PERIPHERAL_VIRT_BASE
* cpufreq: exynos: Get booting freq value in exynos_cpufreq_init
* xhci: Don't warn on empty ring for suspended devices.
* kernel/audit_tree.c: tree will leak memory when failure occurs in audit_trim_trees()
* powerpc: fix numa distance for form0 device tree
* drm/radeon: disable the crtcs in mc_stop (evergreen+) (v2)
* drm/radeon: properly lock disp in mc_stop/resume for evergreen+
* autofs - remove autofs dentry mount check
* net/eth/ibmveth: Fixup retrieval of MAC address
* perf/x86/intel/lbr: Demand proper privileges for PERF_SAMPLE_BRANCH_KERNEL
* perf/x86/intel/lbr: Fix LBR filter
* drm/radeon: fix handling of v6 power tables
* drm/radeon: add new richland pci ids
* drm/radeon: add some new SI PCI ids
* drm/radeon: fix possible segfault when parsing pm tables
* drm/radeon: fix endian bugs in atom_allocate_fb_scratch()
* drm/cirrus: deal with bo reserve fail in dirty update path
* drm/ast: deal with bo reserve fail in dirty update path
* drm/mgag200: deal with bo reserve fail in dirty update path
* drm/prime: keep a reference from the handle to exported dma-buf (v6)
* x86: Eliminate irq_mis_count counted in arch_irq_stat
* ARM: u300: fix ages old copy/paste bug
* powerpc: Add isync to copy_and_flush
* drm/gma500: fix backlight hotkeys behaviour on netbooks
* ALSA: usb-audio: Fix autopm error during probing
* ALSA: snd-usb: try harder to find USB_DT_CS_ENDPOINT
* powerpc/spufs: Initialise inode->i_ino in spufs_new_inode()
* fbcon: when font is freed, clear also vc_font.data
* drm/radeon: fix typo in si_select_se_sh()
* nfsd: Decode and send 64bit time values
* i2c: xiic: must always write 16-bit words to TX_FIFO
* drm/radeon: fix hdmi mode enable on RS600/RS690/RS740
* drm/i915: Fall back to bit banging mode for DVO transmitter detection
* drm/i915: Workaround incoherence between fences and LLC across multiple CPUs
* ASoC: max98088: Fix logging of hardware revision.
* drm/radeon: cleanup properly if mmio mapping fails
* drm/radeon/evergreen+: don't enable HPD interrupts on eDP/LVDS
* ALSA: usb-audio: disable autopm for MIDI devices
* ALSA: usb: Add quirk for 192KHz recording on E-Mu devices
* drm/radeon/dce6: add missing display reg for tiling setup
* nfsd4: don't close read-write opens too soon
* mmc: atmel-mci: pio hang on block errors
* mfd: adp5520: Restore mode bits on resume
* drm/i915: Add no-lvds quirk for Fujitsu Esprimo Q900
* mmc: core: Fix bit width test failing on old eMMC cards
* nfsd: don't run get_file if nfs4_preprocess_stateid_op return error
* drm/radeon: don't use get_engine_clock() on APUs
* ARM: at91: Fix typo in restart code panic message
* mmc: at91/avr32/atmel-mci: fix DMA-channel leak on module unload
* Linux 3.5.7.12
* ARM: 7699/1: sched_clock: Add more notrace to prevent recursion
* Revert "drm/i915: GFX_MODE Flush TLB Invalidate Mode must be '1' for scanline waits"
* ipc: sysv shared memory limited to 8TiB
* tty: fix up atime/mtime mess, take three
* exec: do not abuse ->cred_guard_mutex in threadgroup_lock()
* fs/dcache.c: add cond_resched() to shrink_dcache_parent()
* inotify: invalid mask should return a error number but not set it
* md: bad block list should default to disabled.
* drivers/rtc/rtc-at91rm9200.c: fix missing iounmap
* drivers/rtc/rtc-cmos.c: don't disable hpet emulation on suspend
* arm: set the page table freeing ceiling to TASK_SIZE
* mm: allow arch code to control the user page table ceiling
* fs/fscache/stats.c: fix memory leak
* mwifiex: Call pci_release_region after calling pci_disable_device
* mwifiex: Use pci_release_region() instead of a pci_release_regions()
* ixgbe: fix EICR write in ixgbe_msix_other
* clockevents: Set dummy handler on CPU_DEAD shutdown
* gianfar: do not advertise any alarm capability.
* USB: ftdi_sio: enable two UART ports on ST Microconnect Lite
* usb-storage: CY7C68300A chips do not support Cypress ATACB
* USB: serial: option: Added support Olivetti Olicard 145
* USB: ftdi_sio: correct ST Micro Connect Lite PIDs
* rt2x00: Fix transmit power troubles on some Ralink RT30xx cards
* ext4: fix Kconfig documentation for CONFIG_EXT4_DEBUG
* ext4: fix online resizing for ext3-compat file systems
* LOCKD: Ensure that nlmclnt_block resets block->b_status after a server reboot
* iwlwifi: dvm: don't send zeroed LQ cmd
* iwlwifi: fix freeing uninitialized pointer
* usbfs: Always allow ctrl requests with USB_RECIP_ENDPOINT on the ctrl ep
* wireless: regulatory: fix channel disabling race condition
* PCI/PM: Fix fallback to PCI_D0 in pci_platform_power_transition()
* serial_core.c: add put_device() after device_find_child()
* tracing: Check return value of tracing_init_dentry()
* tracing: Reset ftrace_graph_filter_enabled if count is zero
* ext4: fix big-endian bug in metadata checksum calculations
* USB: option: add a D-Link DWM-156 variant
* tracing: Fix off-by-one on allocating stat->pages
* ARM: omap3: cpuidle: enable time keeping
* hrtimer: Fix ktime_add_ns() overflow on 32bit architectures
* hrtimer: Add expiry time overflow check in hrtimer_interrupt
* USB: add ftdi_sio USB ID for GDM Boost V1.x
* usb: chipidea: udc: fix memory leak in _ep_nuke
* NFSv4: Handle NFS4ERR_DELAY and NFS4ERR_GRACE in nfs4_open_delegation_recall
* usb: chipidea: udc: fix memory access of shared memory on armv5 machines
* ext4: fix journal callback list traversal
* jbd2: fix race between jbd2_journal_remove_checkpoint and ->j_commit_callback
* ext4/jbd2: don't wait (forever) for stale tid caused by wraparound
* usb/misc/appledisplay: Add 24" LED Cinema display
* sysfs: fix use after free in case of concurrent read/write and readdir
* Fix initialization of CMCI/CMCP interrupts
* PCI / ACPI: Don't query OSC support with all possible controls
* cgroup: fix an off-by-one bug which may trigger BUG_ON()
* Wrong asm register contraints in the kvm implementation
* Wrong asm register contraints in the futex implementation
* tracing: Fix ftrace_dump()
* tracing: Remove most or all of stack tracer stack size from stack_max_size
* tracing: Fix stack tracer with fentry use
* tracing: Use stack of calling function for stack tracer
* l2tp: fix info leak in l2tp_ip6_recvmsg()
* sparc64: Fix race in TLB batch processing.
* net: drop dst before queueing fragments
* net: fix incorrect credentials passing
* net: rate-limit warn-bad-offload splats.
* tcp: call tcp_replace_ts_recent() from tcp_ack()
* net: sctp: sctp_auth_key_put: use kzfree instead of kfree
* esp4: fix error return code in esp_output()
* tcp: Reallocate headroom if it would overflow csum_start
* tcp: incoming connections might use wrong route under synflood
* rtnetlink: Call nlmsg_parse() with correct header length
* netfilter: don't reset nf_trace in nf_reset()
* af_unix: If we don't care about credentials coallesce all messages
* bonding: IFF_BONDING is not stripped on enslave failure
* bonding: fix bonding_masters race condition in bond unloading
* atl1e: limit gso segment size to prevent generation of wrong ip length fields
* net: count hw_addr syncs so that unsync works properly.
* net IPv6 : Fix broken IPv6 routing table after loopback down-up
* cbq: incorrect processing of high limits
* tipc: fix info leaks via msg_name in recv_msg/recv_stream
* rose: fix info leak via msg_name in rose_recvmsg()
* NFC: llcp: fix info leaks via msg_name in llcp_sock_recvmsg()
* netrom: fix invalid use of sizeof in nr_recvmsg()
* netrom: fix info leak via msg_name in nr_recvmsg()
* llc: Fix missing msg_namelen update in llc_ui_recvmsg()
* iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()
* irda: Fix missing msg_namelen update in irda_recvmsg_dgram()
* caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg()
* Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg()
* Bluetooth: fix possible info leak in bt_sock_recvmsg()
* ax25: fix info leak via msg_name in ax25_recvmsg()
* atm: update msg_namelen in vcc_recvmsg()
* TTY: fix atime/mtime regression
* TTY: do not update atime/mtime on read/write
* aio: fix possible invalid memory access when DEBUG is enabled
* s390/memory hotplug: prevent offline of active memory increments
* xen/time: Fix kasprintf splat when allocating timer%d IRQ line.
* xen/smp/spinlock: Fix leakage of the spinlock interrupt line for every CPU online/offline
* xen/smp: Fix leakage of timer interrupt line for every CPU online/offline.
* perf: Fix error return code
* regulator: fixed regulator_bulk_enable unwinding code
* vm: convert mtdchar mmap to vm_iomap_memory() helper
* vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper
* vm: convert fb_mmap to vm_iomap_memory() helper
* vm: convert HPET mmap to vm_iomap_memory() helper
* vm: add vm_iomap_memory() helper function
* perf/x86: Fix offcore_rsp valid mask for SNB/IVB
* perf: Treat attr.config as u64 in perf_swevent_init()
* crypto: algif - suppress sending source address information in recvmsg
* sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s
* hfsplus: fix potential overflow in hfsplus_file_truncate()
* kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
* hugetlbfs: add swap entry check in follow_hugetlb_page()
* ARM: 7698/1: perf: fix group validation when using enable_on_exec
* ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon
* ath9k_hw: change AR9580 initvals to fix a stability issue
* can: sja1000: fix handling on dt properties on little endian systems
* can: mcp251x: add missing IRQF_ONESHOT to request_threaded_irq
* ssb: implement spurious tone avoidance
* ath9k_htc: accept 1.x firmware newer than 1.3

Steve Conklin (sconklin) on 2013-05-31
tags: added: kernel-stable-tracking-bug
description: updated

The verification of this Stable Release Update has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.

Launchpad Janitor (janitor) wrote :
Download full text (18.4 KiB)

This bug was fixed in the package linux - 3.5.0-34.55

---------------
linux (3.5.0-34.55) quantal; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1187926

  [ Upstream Kernel Changes ]

  * iwlwifi: dvm: fix zero LQ CMD sending avoidance
    - LP: #1186932

linux (3.5.0-33.54) quantal; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1186271

  [ Upstream Kernel Changes ]

  * crypto: algif - suppress sending source address information in recvmsg
    - LP: #1172363
    - CVE-2013-3076
  * ax25: fix info leak via msg_name in ax25_recvmsg()
    - LP: #1172366
    - CVE-2013-3223
  * Bluetooth: fix possible info leak in bt_sock_recvmsg()
    - LP: #1172368
    - CVE-2013-3224
  * tipc: fix info leaks via msg_name in recv_msg/recv_stream
    - LP: #1172403
    - CVE-2013-3235
  * rose: fix info leak via msg_name in rose_recvmsg()
    - LP: #1172394
    - CVE-2013-3234
  * Bluetooth: RFCOMM - Fix missing msg_namelen update in
    rfcomm_sock_recvmsg()
    - LP: #1172369
    - CVE-2013-3225
  * atm: update msg_namelen in vcc_recvmsg()
    - LP: #1172365
    - CVE-2013-3222
  * iwlwifi: add new pci id for 6x35 series
    - LP: #1180256
  * ath9k_htc: accept 1.x firmware newer than 1.3
    - LP: #1186062
  * ssb: implement spurious tone avoidance
    - LP: #1186062
  * can: mcp251x: add missing IRQF_ONESHOT to request_threaded_irq
    - LP: #1186062
  * can: sja1000: fix handling on dt properties on little endian systems
    - LP: #1186062
  * ath9k_hw: change AR9580 initvals to fix a stability issue
    - LP: #1186062
  * ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon
    - LP: #1186062
  * ARM: 7698/1: perf: fix group validation when using enable_on_exec
    - LP: #1186062
  * hugetlbfs: add swap entry check in follow_hugetlb_page()
    - LP: #1186062
  * kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
    - LP: #1186062
  * hfsplus: fix potential overflow in hfsplus_file_truncate()
    - LP: #1186062
  * sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s
    - LP: #1186062
  * perf/x86: Fix offcore_rsp valid mask for SNB/IVB
    - LP: #1186062
  * vm: add vm_iomap_memory() helper function
    - LP: #1186062
  * vm: convert HPET mmap to vm_iomap_memory() helper
    - LP: #1186062
  * vm: convert fb_mmap to vm_iomap_memory() helper
    - LP: #1186062
  * vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper
    - LP: #1186062
  * vm: convert mtdchar mmap to vm_iomap_memory() helper
    - LP: #1186062
  * regulator: fixed regulator_bulk_enable unwinding code
    - LP: #1186062
  * perf: Fix error return code
    - LP: #1186062
  * xen/smp: Fix leakage of timer interrupt line for every CPU
    online/offline.
    - LP: #1186062
  * xen/smp/spinlock: Fix leakage of the spinlock interrupt line for every
    CPU online/offline
    - LP: #1186062
  * xen/time: Fix kasprintf splat when allocating timer%d IRQ line.
    - LP: #1186062
  * s390/memory hotplug: prevent offline of active memory increments
    - LP: #1186062
  * aio: fix possible invalid memory access when DEBUG is enabled
    - LP: #1186062
  * TTY: do not update atime/mtime on read/...

Changed in linux (Ubuntu Quantal):
status: New → Fix Released
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers