Precise update to 3.2.52 stable release

Bug #1249089 reported by Brad Figg
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Precise
Fix Released
High
Brad Figg

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.52 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.52 stable release:
            Linux 3.2.52
            can: flexcan: flexcan_chip_start: fix regression, mark one MB for TX and abort pending TX
            gianfar: Change default HW Tx queue scheduling mode
            mm, show_mem: suppress page counts in non-blockable contexts
            ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler()
            staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice
            ext4: avoid hang when mounting non-journal filesystems with orphan list
            hwmon: (applesmc) Silence uninitialized warnings
            xhci: Fix race between ep halt and URB cancellation
            cciss: fix info leak in cciss_ioctl32_passthru()
            cpqarray: fix info leak in ida_locked_ioctl()
            iscsi: don't hang in endless loop if no targets present
            Revert "sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()"
            isofs: Refuse RW mount of the filesystem instead of making it RO
            HID: usbhid: quirk for N-Trig DuoSense Touch Screen
            HID: Fix Speedlink VAD Cezanne support for some devices
            fanotify: dont merge permission events
            perf tools: Handle JITed code in shared memory
            perf: Fix perf_cgroup_switch for sw-events
            perf: Clarify perf_cpu_context::active_pmu usage by renaming it to ::unique_pmu
            cgroup: fail if monitored file and event_control are in different cgroup
            sfc: Fix efx_rx_buf_offset() for recycled pages
            macvtap: do not zerocopy if iov needs more pages than MAX_SKB_FRAGS
            Revert "zram: use zram->lock to protect zram_free_page() in swap free notify path"
            powerpc/pseries/lparcfg: Fix possible overflow are more than 1026
            m68knommu: clean up linker script
            m68k: use non-MMU linker script for ColdFire MMU builds
            m68k: consolidate the vmlinux.lds linker scripts
            usb: core: don't try to reset_device() a port that got just disconnected
            debugfs: debugfs_remove_recursive() must not rely on list_empty(d_subdirs)
            perf: Use css_tryget() to avoid propping up css refcount
            kernel-doc: bugfix - multi-line macros
            sparc32: Fix exit flag passed from traced sys_sigreturn
            sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall
            sparc64: Fix off by one in trampoline TLB mapping installation loop.
            sparc64: Remove RWSEM export leftovers
            sparc64: Fix ITLB handler of null page
            esp_scsi: Fix tag state corruption when autosensing.
            ll_temac: Reset dma descriptors indexes on ndo_open
            ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put
            ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put
            bonding: Fix broken promiscuity reference counting issue
            dm9601: fix IFF_ALLMULTI handling
            via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)
            ipv6: udp packets following an UFO enqueued packet need also be handled by UFO
            ip: generate unique IP identificator if local fragmentation is allowed
            resubmit bridge: fix message_age_timer calculation
            net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit
            netpoll: fix NULL pointer dereference in netpoll_cleanup
            net: sctp: fix smatch warning in sctp_send_asconf_del_ip
            caif: Add missing braces to multiline if in cfctrl_linkup_request
            powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()
            powerpc/sysfs: Disable writing to PURR in guest mode
            powerpc: Restore registers on error exit from csum_partial_copy_generic()
            powerpc: Fix parameter clobber in csum_partial_copy_generic()
            USB: serial: option: Ignore card reader interface on Huawei E1750
            nilfs2: fix issue with race condition of competition between segments for dirty blocks
            can: flexcan: fix flexcan_chip_start() on imx6
            usb: dwc3: add support for Merrifield
            usb: dwc3: pci: add support for BayTrail
            p54usb: add USB ID for Corega WLUSB2GTST USB adapter
            rtlwifi: Align private space in rtl_priv struct
            hwmon: (applesmc) Check key count before proceeding
            usb/core/devio.c: Don't reject control message to endpoint with wrong direction bit
            USB: fix PM config symbol in uhci-hcd, ehci-hcd, and xhci-hcd
            staging: vt6656: [BUG] main_usb.c oops on device_close move flag earlier.
            drm/i915/dp: increase i2c-over-aux retry interval on AUX DEFER
            drm/radeon: disable tests/benchmarks if accel is disabled
            x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically
            dm-snapshot: fix performance degradation due to small hash size
            x86, efi: Don't map Boot Services on i386
            serial: pch_uart: fix tty-kref leak in dma-rx path
            serial: pch_uart: fix tty-kref leak in rx-error path
            net: usb: cdc_ether: Use wwan interface for Telit modules
            Bluetooth: Add support for BCM20702A0 [0b05, 17cb]
            Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.
            drm/radeon: fix panel scaling with eDP and LVDS bridges
            ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()
            ASoC: max98095: a couple array underflows
            HID: logitech-dj: validate output report details
            HID: validate feature and input report details
            HID: LG: validate HID output report details
            HID: zeroplus: validate output report details
            HID: provide a helper for validating hid reports
            sched/fair: Fix small race where child->se.parent,cfs_rq might point to invalid ones
            memcg: fix multiple large threshold notifications
            mm/huge_memory.c: fix potential NULL pointer dereference
            ocfs2: fix the end cluster offset of FIEMAP
            sd: Fix potential out-of-bounds access
            drm/radeon/atom: workaround vbios bug in transmitter table on rs880 (v2)
            ALSA: hda - Add Toshiba Satellite C870 to MSI blacklist
            crypto: api - Fix race condition in larval lookup
            drm/i915: try not to lose backlight CBLV precision
            ARM: PCI: versatile: Fix SMAP register offsets
            HID: check for NULL field when setting values
            HID: picolcd_core: validate output report details
            HID: ntrig: validate feature report details
            HID: pantherlord: validate output report details
            fuse: readdir: check for slash in names
            hdpvr: fix iteration over uninitialized lists in hdpvr_probe()
            hdpvr: register the video node at the end of probe
            fuse: hotfix truncate_pagecache() issue
            fuse: invalidate inode attributes on xattr modification
            fuse: postpone end_page_writeback() in fuse_writepage_locked()
            ALSA: hda - hdmi: Fallback to ALSA allocation when selecting CA
            drm/radeon: fix handling of variable sized arrays for router objects
            drm/radeon: fix resume on some rs4xx boards (v2)
            drm/radeon: fix LCD record parsing
            drm/radeon: update line buffer allocation for dce4.1/5
            drm/edid: add quirk for Medion MD30217PG
            USB: fix build error when CONFIG_PM_SLEEP isn't enabled
            of: Fix missing memory initialization on FDT unflattening
            HID: validate HID report id size
            ACPI / EC: Add ASUSTEK L4R to quirk list in order to validate ECDT
            USB: OHCI: Allow runtime PM without system sleep
            usb: xhci: Disable runtime PM suspend for quirky controllers
            rt2800: fix wrong TX power compensation
            mmc: tmio_mmc_dma: fix PIO fallback on SDHI
            usb: ehci-mxc: check for pdata before dereferencing
            staging: comedi: dt282x: dt282x_ai_insn_read() always fails
            USB: mos7720: fix big-endian control requests
            USB: mos7720: use GFP_ATOMIC under spinlock
            rculist: list_first_or_null_rcu() should use list_entry_rcu()
            ASoC: wm8960: Fix PLL register writes
            ath9k: avoid accessing MRC registers on single-chain devices
            ath9k: fix rx descriptor related race condition
            intel-iommu: Fix leaks in pagetable freeing
            powerpc: Handle unaligned ldbrx/stdbrx
            USB: cdc-wdm: fix race between interrupt handler and tasklet
            usb: config->desc.bLength may not exceed amount of data returned by the device
            libceph: unregister request in __map_request failed and nofail == false
            ath9k: always clear ps filter bit on new assoc
            xen-gnt: prevent adding duplicate gnt callbacks
            HID: hidraw: correctly deallocate memory on device disconnect
            HID: hidraw: put old deallocation mechanism in place
            inetpeer: fix a race in inetpeer_gc_worker()
            inetpeer: Invalidate the inetpeer tree along with the routing cache
            tipc: fix lockdep warning during bearer initialization
            ICMPv6: treat dest unreachable codes 5 and 6 as EACCES, not EPROTO
            net: bridge: convert MLDv2 Query MRC into msecs_to_jiffies for max_delay
            ipv6: Don't depend on per socket memory for neighbour discovery messages
            ipv6: drop packets with multiple fragmentation headers
            ipv6: remove max_addresses check from ipv6_create_tempaddr
            tun: signedness bug in tun_get_user()
            8139cp: Add dma_mapping_error checking
            ipv6: don't stop backtracking in fib6_lookup_1 if subtree does not match
            tcp: cubic: fix bug in bictcp_acked()
            tcp: cubic: fix overflow error in bictcp_update()
            fib_trie: remove potential out of bound access
            net: check net.core.somaxconn sysctl values
            htb: fix sign extension bug

Brad Figg (brad-figg)
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Precise):
status: New → In Progress
importance: Undecided → High
assignee: nobody → Brad Figg (brad-figg)
description: updated
Brad Figg (brad-figg)
Changed in linux (Ubuntu Precise):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (12.2 KiB)

This bug was fixed in the package linux - 3.2.0-57.87

---------------
linux (3.2.0-57.87) precise; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1250622

  [ Andy Whitcroft ]

  * tools -- upgrade to common generic helper
    - LP: #1205284

  [ Kees Cook ]

  * SAUCE: backport ARM seccomp-bpf support
    - LP: #1183616

  [ Luis Henriques ]

  * SAUCE: ACPI battery: fix compiler warning
    - LP: #1247154

  [ Tim Gardner ]

  * [Config] updateconfigs: CONFIG_HAVE_AOUT=n for arm

  [ Upstream Kernel Changes ]

  * Revert "sctp: fix call to SCTP_CMD_PROCESS_SACK in
    sctp_cmd_interpreter()"
    - LP: #1249089
  * xen/blkback: Check device permissions before allowing OP_DISCARD
    - LP: #1091187
    - CVE-2013-2140
  * zram: allow request end to coincide with disksize
    - LP: #1246664
  * ARM: 7373/1: add support for the generic syscall.h interface
    - LP: #1183616
  * ARM: 7577/1: arch/add syscall_get_arch
    - LP: #1183616
  * htb: fix sign extension bug
    - LP: #1249089
  * net: check net.core.somaxconn sysctl values
    - LP: #1249089
  * fib_trie: remove potential out of bound access
    - LP: #1249089
  * tcp: cubic: fix overflow error in bictcp_update()
    - LP: #1249089
  * tcp: cubic: fix bug in bictcp_acked()
    - LP: #1249089
  * ipv6: don't stop backtracking in fib6_lookup_1 if subtree does not
    match
    - LP: #1249089
  * 8139cp: Add dma_mapping_error checking
    - LP: #1249089
  * tun: signedness bug in tun_get_user()
    - LP: #1249089
  * ipv6: remove max_addresses check from ipv6_create_tempaddr
    - LP: #1249089
  * ipv6: drop packets with multiple fragmentation headers
    - LP: #1249089
  * ipv6: Don't depend on per socket memory for neighbour discovery
    messages
    - LP: #1249089
  * net: bridge: convert MLDv2 Query MRC into msecs_to_jiffies for
    max_delay
    - LP: #1249089
  * ICMPv6: treat dest unreachable codes 5 and 6 as EACCES, not EPROTO
    - LP: #1249089
  * tipc: fix lockdep warning during bearer initialization
    - LP: #1249089
  * HID: hidraw: put old deallocation mechanism in place
    - LP: #1249089
  * HID: hidraw: correctly deallocate memory on device disconnect
    - LP: #1249089
  * xen-gnt: prevent adding duplicate gnt callbacks
    - LP: #1249089
  * ath9k: always clear ps filter bit on new assoc
    - LP: #1249089
  * libceph: unregister request in __map_request failed and nofail == false
    - LP: #1249089
  * usb: config->desc.bLength may not exceed amount of data returned by the
    device
    - LP: #1249089
  * USB: cdc-wdm: fix race between interrupt handler and tasklet
    - LP: #1249089
  * powerpc: Handle unaligned ldbrx/stdbrx
    - LP: #1249089
  * intel-iommu: Fix leaks in pagetable freeing
    - LP: #1249089
  * ath9k: fix rx descriptor related race condition
    - LP: #1249089
  * ath9k: avoid accessing MRC registers on single-chain devices
    - LP: #1249089
  * ASoC: wm8960: Fix PLL register writes
    - LP: #1249089
  * rculist: list_first_or_null_rcu() should use list_entry_rcu()
    - LP: #1249089
  * USB: mos7720: use GFP_ATOMIC under spinlock
    - LP: #1249089
  * USB: mos7720: fix big-endian control requests
    - LP: #1249089
  * s...

Changed in linux (Ubuntu Precise):
status: Fix Committed → Fix Released
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.