Precise update to 3.2.52 stable release

Bug #1249089 reported by Brad Figg on 2013-11-07
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Precise
High
Brad Figg

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.52 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.52 stable release:
            Linux 3.2.52
            can: flexcan: flexcan_chip_start: fix regression, mark one MB for TX and abort pending TX
            gianfar: Change default HW Tx queue scheduling mode
            mm, show_mem: suppress page counts in non-blockable contexts
            ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler()
            staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice
            ext4: avoid hang when mounting non-journal filesystems with orphan list
            hwmon: (applesmc) Silence uninitialized warnings
            xhci: Fix race between ep halt and URB cancellation
            cciss: fix info leak in cciss_ioctl32_passthru()
            cpqarray: fix info leak in ida_locked_ioctl()
            iscsi: don't hang in endless loop if no targets present
            Revert "sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()"
            isofs: Refuse RW mount of the filesystem instead of making it RO
            HID: usbhid: quirk for N-Trig DuoSense Touch Screen
            HID: Fix Speedlink VAD Cezanne support for some devices
            fanotify: dont merge permission events
            perf tools: Handle JITed code in shared memory
            perf: Fix perf_cgroup_switch for sw-events
            perf: Clarify perf_cpu_context::active_pmu usage by renaming it to ::unique_pmu
            cgroup: fail if monitored file and event_control are in different cgroup
            sfc: Fix efx_rx_buf_offset() for recycled pages
            macvtap: do not zerocopy if iov needs more pages than MAX_SKB_FRAGS
            Revert "zram: use zram->lock to protect zram_free_page() in swap free notify path"
            powerpc/pseries/lparcfg: Fix possible overflow are more than 1026
            m68knommu: clean up linker script
            m68k: use non-MMU linker script for ColdFire MMU builds
            m68k: consolidate the vmlinux.lds linker scripts
            usb: core: don't try to reset_device() a port that got just disconnected
            debugfs: debugfs_remove_recursive() must not rely on list_empty(d_subdirs)
            perf: Use css_tryget() to avoid propping up css refcount
            kernel-doc: bugfix - multi-line macros
            sparc32: Fix exit flag passed from traced sys_sigreturn
            sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall
            sparc64: Fix off by one in trampoline TLB mapping installation loop.
            sparc64: Remove RWSEM export leftovers
            sparc64: Fix ITLB handler of null page
            esp_scsi: Fix tag state corruption when autosensing.
            ll_temac: Reset dma descriptors indexes on ndo_open
            ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put
            ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put
            bonding: Fix broken promiscuity reference counting issue
            dm9601: fix IFF_ALLMULTI handling
            via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)
            ipv6: udp packets following an UFO enqueued packet need also be handled by UFO
            ip: generate unique IP identificator if local fragmentation is allowed
            resubmit bridge: fix message_age_timer calculation
            net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit
            netpoll: fix NULL pointer dereference in netpoll_cleanup
            net: sctp: fix smatch warning in sctp_send_asconf_del_ip
            caif: Add missing braces to multiline if in cfctrl_linkup_request
            powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()
            powerpc/sysfs: Disable writing to PURR in guest mode
            powerpc: Restore registers on error exit from csum_partial_copy_generic()
            powerpc: Fix parameter clobber in csum_partial_copy_generic()
            USB: serial: option: Ignore card reader interface on Huawei E1750
            nilfs2: fix issue with race condition of competition between segments for dirty blocks
            can: flexcan: fix flexcan_chip_start() on imx6
            usb: dwc3: add support for Merrifield
            usb: dwc3: pci: add support for BayTrail
            p54usb: add USB ID for Corega WLUSB2GTST USB adapter
            rtlwifi: Align private space in rtl_priv struct
            hwmon: (applesmc) Check key count before proceeding
            usb/core/devio.c: Don't reject control message to endpoint with wrong direction bit
            USB: fix PM config symbol in uhci-hcd, ehci-hcd, and xhci-hcd
            staging: vt6656: [BUG] main_usb.c oops on device_close move flag earlier.
            drm/i915/dp: increase i2c-over-aux retry interval on AUX DEFER
            drm/radeon: disable tests/benchmarks if accel is disabled
            x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically
            dm-snapshot: fix performance degradation due to small hash size
            x86, efi: Don't map Boot Services on i386
            serial: pch_uart: fix tty-kref leak in dma-rx path
            serial: pch_uart: fix tty-kref leak in rx-error path
            net: usb: cdc_ether: Use wwan interface for Telit modules
            Bluetooth: Add support for BCM20702A0 [0b05, 17cb]
            Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.
            drm/radeon: fix panel scaling with eDP and LVDS bridges
            ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()
            ASoC: max98095: a couple array underflows
            HID: logitech-dj: validate output report details
            HID: validate feature and input report details
            HID: LG: validate HID output report details
            HID: zeroplus: validate output report details
            HID: provide a helper for validating hid reports
            sched/fair: Fix small race where child->se.parent,cfs_rq might point to invalid ones
            memcg: fix multiple large threshold notifications
            mm/huge_memory.c: fix potential NULL pointer dereference
            ocfs2: fix the end cluster offset of FIEMAP
            sd: Fix potential out-of-bounds access
            drm/radeon/atom: workaround vbios bug in transmitter table on rs880 (v2)
            ALSA: hda - Add Toshiba Satellite C870 to MSI blacklist
            crypto: api - Fix race condition in larval lookup
            drm/i915: try not to lose backlight CBLV precision
            ARM: PCI: versatile: Fix SMAP register offsets
            HID: check for NULL field when setting values
            HID: picolcd_core: validate output report details
            HID: ntrig: validate feature report details
            HID: pantherlord: validate output report details
            fuse: readdir: check for slash in names
            hdpvr: fix iteration over uninitialized lists in hdpvr_probe()
            hdpvr: register the video node at the end of probe
            fuse: hotfix truncate_pagecache() issue
            fuse: invalidate inode attributes on xattr modification
            fuse: postpone end_page_writeback() in fuse_writepage_locked()
            ALSA: hda - hdmi: Fallback to ALSA allocation when selecting CA
            drm/radeon: fix handling of variable sized arrays for router objects
            drm/radeon: fix resume on some rs4xx boards (v2)
            drm/radeon: fix LCD record parsing
            drm/radeon: update line buffer allocation for dce4.1/5
            drm/edid: add quirk for Medion MD30217PG
            USB: fix build error when CONFIG_PM_SLEEP isn't enabled
            of: Fix missing memory initialization on FDT unflattening
            HID: validate HID report id size
            ACPI / EC: Add ASUSTEK L4R to quirk list in order to validate ECDT
            USB: OHCI: Allow runtime PM without system sleep
            usb: xhci: Disable runtime PM suspend for quirky controllers
            rt2800: fix wrong TX power compensation
            mmc: tmio_mmc_dma: fix PIO fallback on SDHI
            usb: ehci-mxc: check for pdata before dereferencing
            staging: comedi: dt282x: dt282x_ai_insn_read() always fails
            USB: mos7720: fix big-endian control requests
            USB: mos7720: use GFP_ATOMIC under spinlock
            rculist: list_first_or_null_rcu() should use list_entry_rcu()
            ASoC: wm8960: Fix PLL register writes
            ath9k: avoid accessing MRC registers on single-chain devices
            ath9k: fix rx descriptor related race condition
            intel-iommu: Fix leaks in pagetable freeing
            powerpc: Handle unaligned ldbrx/stdbrx
            USB: cdc-wdm: fix race between interrupt handler and tasklet
            usb: config->desc.bLength may not exceed amount of data returned by the device
            libceph: unregister request in __map_request failed and nofail == false
            ath9k: always clear ps filter bit on new assoc
            xen-gnt: prevent adding duplicate gnt callbacks
            HID: hidraw: correctly deallocate memory on device disconnect
            HID: hidraw: put old deallocation mechanism in place
            inetpeer: fix a race in inetpeer_gc_worker()
            inetpeer: Invalidate the inetpeer tree along with the routing cache
            tipc: fix lockdep warning during bearer initialization
            ICMPv6: treat dest unreachable codes 5 and 6 as EACCES, not EPROTO
            net: bridge: convert MLDv2 Query MRC into msecs_to_jiffies for max_delay
            ipv6: Don't depend on per socket memory for neighbour discovery messages
            ipv6: drop packets with multiple fragmentation headers
            ipv6: remove max_addresses check from ipv6_create_tempaddr
            tun: signedness bug in tun_get_user()
            8139cp: Add dma_mapping_error checking
            ipv6: don't stop backtracking in fib6_lookup_1 if subtree does not match
            tcp: cubic: fix bug in bictcp_acked()
            tcp: cubic: fix overflow error in bictcp_update()
            fib_trie: remove potential out of bound access
            net: check net.core.somaxconn sysctl values
            htb: fix sign extension bug

Brad Figg (brad-figg) on 2013-11-07
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Precise):
status: New → In Progress
importance: Undecided → High
assignee: nobody → Brad Figg (brad-figg)
description: updated
Brad Figg (brad-figg) on 2013-11-07
Changed in linux (Ubuntu Precise):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (12.2 KiB)

This bug was fixed in the package linux - 3.2.0-57.87

---------------
linux (3.2.0-57.87) precise; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1250622

  [ Andy Whitcroft ]

  * tools -- upgrade to common generic helper
    - LP: #1205284

  [ Kees Cook ]

  * SAUCE: backport ARM seccomp-bpf support
    - LP: #1183616

  [ Luis Henriques ]

  * SAUCE: ACPI battery: fix compiler warning
    - LP: #1247154

  [ Tim Gardner ]

  * [Config] updateconfigs: CONFIG_HAVE_AOUT=n for arm

  [ Upstream Kernel Changes ]

  * Revert "sctp: fix call to SCTP_CMD_PROCESS_SACK in
    sctp_cmd_interpreter()"
    - LP: #1249089
  * xen/blkback: Check device permissions before allowing OP_DISCARD
    - LP: #1091187
    - CVE-2013-2140
  * zram: allow request end to coincide with disksize
    - LP: #1246664
  * ARM: 7373/1: add support for the generic syscall.h interface
    - LP: #1183616
  * ARM: 7577/1: arch/add syscall_get_arch
    - LP: #1183616
  * htb: fix sign extension bug
    - LP: #1249089
  * net: check net.core.somaxconn sysctl values
    - LP: #1249089
  * fib_trie: remove potential out of bound access
    - LP: #1249089
  * tcp: cubic: fix overflow error in bictcp_update()
    - LP: #1249089
  * tcp: cubic: fix bug in bictcp_acked()
    - LP: #1249089
  * ipv6: don't stop backtracking in fib6_lookup_1 if subtree does not
    match
    - LP: #1249089
  * 8139cp: Add dma_mapping_error checking
    - LP: #1249089
  * tun: signedness bug in tun_get_user()
    - LP: #1249089
  * ipv6: remove max_addresses check from ipv6_create_tempaddr
    - LP: #1249089
  * ipv6: drop packets with multiple fragmentation headers
    - LP: #1249089
  * ipv6: Don't depend on per socket memory for neighbour discovery
    messages
    - LP: #1249089
  * net: bridge: convert MLDv2 Query MRC into msecs_to_jiffies for
    max_delay
    - LP: #1249089
  * ICMPv6: treat dest unreachable codes 5 and 6 as EACCES, not EPROTO
    - LP: #1249089
  * tipc: fix lockdep warning during bearer initialization
    - LP: #1249089
  * HID: hidraw: put old deallocation mechanism in place
    - LP: #1249089
  * HID: hidraw: correctly deallocate memory on device disconnect
    - LP: #1249089
  * xen-gnt: prevent adding duplicate gnt callbacks
    - LP: #1249089
  * ath9k: always clear ps filter bit on new assoc
    - LP: #1249089
  * libceph: unregister request in __map_request failed and nofail == false
    - LP: #1249089
  * usb: config->desc.bLength may not exceed amount of data returned by the
    device
    - LP: #1249089
  * USB: cdc-wdm: fix race between interrupt handler and tasklet
    - LP: #1249089
  * powerpc: Handle unaligned ldbrx/stdbrx
    - LP: #1249089
  * intel-iommu: Fix leaks in pagetable freeing
    - LP: #1249089
  * ath9k: fix rx descriptor related race condition
    - LP: #1249089
  * ath9k: avoid accessing MRC registers on single-chain devices
    - LP: #1249089
  * ASoC: wm8960: Fix PLL register writes
    - LP: #1249089
  * rculist: list_first_or_null_rcu() should use list_entry_rcu()
    - LP: #1249089
  * USB: mos7720: use GFP_ATOMIC under spinlock
    - LP: #1249089
  * USB: mos7720: fix big-endian control requests
    - LP: #1249089
  * s...

Changed in linux (Ubuntu Precise):
status: Fix Committed → Fix Released
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers