Precise update to 3.2.55 stable release

Bug #1281620 reported by Brad Figg
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Precise
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.55 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.55 stable release:
            Linux 3.2.55
            sched/rt: Avoid updating RT entry timeout twice within one tick period
            sched: Unthrottle rt runqueues in __disable_runtime()
            sched,rt: fix isolated CPUs leaving root_task_group indefinitely throttled
            sched/rt: Fix SCHED_RR across cgroups
            mm: hugetlbfs: fix hugetlbfs optimization
            mm: fix aio performance regression for database caused by THP
            perf/x86/amd/ibs: Fix waking up from S3 for AMD family 10h
            nilfs2: fix segctor bug that causes file system corruption
            hwmon: (coretemp) Fix truncated name of alarm attributes
            md/raid10: fix bug when raid10 recovery fails to recover a block.
            md/raid10: fix two bugs in handling of known-bad-blocks.
            md/raid5: Fix possible confusion when multiple write errors occur.
            SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()
            ARM: fix "bad mode in ... handler" message for undefined instructions
            ahci: add PCI ID for Marvell 88SE9170 SATA controller
            pci: Add PCI_DEVICE_SUB() macro
            ahci: add an observed PCI ID for Marvell 88se9172 SATA controller
            ahci: Use PCI_VENDOR_ID_MARVELL_EXT for 0x1b4b
            powerpc: Fix bad stack check in exception entry
            ARM: fix footbridge clockevent device
            selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()
            selinux: fix broken peer recv check
            drm/radeon: 0x9649 is SUMO2 not SUMO
            ext4: add explicit casts when masking cluster sizes
            dm9601: work around tx fifo sync issue on dm962x
            dm9601: fix reception of full size ethernet frames on dm9620/dm9621a
            net_dma: mark broken
            ASoC: wm8904: fix DSP mode B configuration
            cpupower: Fix segfault due to incorrect getopt_long arugments
            ath9k: Fix interrupt handling for the AR9002 family
            rtlwifi: pci: Fix oops on driver unload
            drm/i915: Use the correct GMCH_CTRL register for Sandybridge+
            ALSA: Add SNDRV_PCM_STATE_PAUSED case in wait_for_avail function
            sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities
            drm/ttm: Fix accesses through vmas with only partial coverage
            libata: disable a disk via libata.force params
            ftrace: Initialize the ftrace profiler for each possible cpu
            radiotap: fix bitmap-end-finding buffer overrun
            gpio: msm: Fix irq mask/unmask by writing bits instead of numbers
            ALSA: hda - Add enable_msi=0 workaround for four HP machines
            drm/radeon: Fix sideport problems on certain RS690 boards
            iscsi-target: Fix-up all zero data-length CDBs with R/W_BIT set
            xhci: Limit the spurious wakeup fix only to HP machines
            ext4: fix del_timer() misuse for ->s_err_report
            ext2: Fix oops in ext2_get_block() called from ext2_quota_write()
            ext4: check for overlapping extents in ext4_valid_extent_entries()
            ext4: fix use-after-free in ext4_mb_new_blocks
            ext4: call ext4_error_inode() if jbd2_journal_dirty_metadata() fails
            libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus SpinPoint M8
            sh: always link in helper functions extracted from libgcc
            ceph: wake up 'safe' waiters when unregistering request
            ceph: cleanup aborted requests when re-sending requests.
            mm: ensure get_unmapped_area() returns higher address than mmap_min_addr
            x86, fpu, amd: Clear exceptions in AMD FXSAVE workaround
            KVM: x86: Convert vapic synchronization to _cached functions (CVE-2013-6368)
            ath9k_htc: properly set MAC address and BSSID mask
            hpfs: fix warnings when the filesystem fills up
            Fix warning from machine_kexec.c
            staging: comedi: cb_pcidio: fix for newer PCI-DIO48H
            mm/memory-failure.c: recheck PageHuge() after hugetlb page migrate successfully
            PCI: Enable ARI if dev and upstream bridge support it; disable otherwise
            xfs: Account log unmount transaction correctly
            net: avoid reference counter overflows on fib_rules in multicast forwarding
            inet_diag: fix inet_diag_dump_icsk() timewait socket state logic
            bnx2x: fix DMA unmapping of TSO split BDs
            bridge: use spin_lock_bh() in br_multicast_set_hash_max
            net: llc: fix use after free in llc_ui_recvmsg
            vlan: Fix header ops passthru when doing TX VLAN offload.
            net: rose: restore old recvmsg behavior
            rds: prevent dereference of a NULL device
            hamradio/yam: fix info leak in ioctl
            drivers/net/hamradio: Integer overflow in hdlcdrv_ioctl()
            net: inet_diag: zero out uninitialized idiag_{src,dst} fields
            net: unix: allow bind to fail on mutex lock
            tg3: Initialize REG_BASE_ADDR at PCI config offset 120 to 0
            net: drop_monitor: fix the value of maxattr
            ipv6: don't count addrconf generated routes against gc limit
            rds: prevent BUG_ON triggered on congestion update to loopback
            net: do not pretend FRAGLIST support

CVE References

Brad Figg (brad-figg)
tags: added: kernel-stable-tracking-bug
Brad Figg (brad-figg)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu Precise):
status: New → Confirmed
Changed in linux (Ubuntu):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (6.7 KiB)

This bug was fixed in the package linux - 3.2.0-60.91

---------------
linux (3.2.0-60.91) precise; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1281800

  [ Andy Whitcroft ]

  * [Config] d-i -- add xts.ko to crypto-modules udeb
    - LP: #1276739

  [ Upstream Kernel Changes ]

  * ath9k_htc: properly set MAC address and BSSID mask
    - LP: #1252422
    - CVE-2013-4579
  * SELinux: Fix kernel BUG on empty security contexts.
    - CVE-2014-1874
  * net: do not pretend FRAGLIST support
    - LP: #1281620
  * rds: prevent BUG_ON triggered on congestion update to loopback
    - LP: #1281620
  * ipv6: don't count addrconf generated routes against gc limit
    - LP: #1281620
  * net: drop_monitor: fix the value of maxattr
    - LP: #1281620
  * tg3: Initialize REG_BASE_ADDR at PCI config offset 120 to 0
    - LP: #1281620
  * net: unix: allow bind to fail on mutex lock
    - LP: #1281620
  * net: inet_diag: zero out uninitialized idiag_{src,dst} fields
    - LP: #1281620
  * drivers/net/hamradio: Integer overflow in hdlcdrv_ioctl()
    - LP: #1281620
  * hamradio/yam: fix info leak in ioctl
    - LP: #1281620
  * rds: prevent dereference of a NULL device
    - LP: #1281620
  * net: rose: restore old recvmsg behavior
    - LP: #1281620
  * vlan: Fix header ops passthru when doing TX VLAN offload.
    - LP: #1281620
  * net: llc: fix use after free in llc_ui_recvmsg
    - LP: #1281620
  * bridge: use spin_lock_bh() in br_multicast_set_hash_max
    - LP: #1281620
  * bnx2x: fix DMA unmapping of TSO split BDs
    - LP: #1281620
  * inet_diag: fix inet_diag_dump_icsk() timewait socket state logic
    - LP: #1281620
  * net: avoid reference counter overflows on fib_rules in multicast
    forwarding
    - LP: #1281620
  * xfs: Account log unmount transaction correctly
    - LP: #1281620
  * PCI: Enable ARI if dev and upstream bridge support it; disable
    otherwise
    - LP: #1281620
  * mm/memory-failure.c: recheck PageHuge() after hugetlb page migrate
    successfully
    - LP: #1281620
  * staging: comedi: cb_pcidio: fix for newer PCI-DIO48H
    - LP: #1281620
  * Fix warning from machine_kexec.c
    - LP: #1281620
  * hpfs: fix warnings when the filesystem fills up
    - LP: #1281620
  * KVM: x86: Convert vapic synchronization to _cached functions
    (CVE-2013-6368)
    - LP: #1281620
  * x86, fpu, amd: Clear exceptions in AMD FXSAVE workaround
    - LP: #1281620
  * mm: ensure get_unmapped_area() returns higher address than
    mmap_min_addr
    - LP: #1281620
  * ceph: cleanup aborted requests when re-sending requests.
    - LP: #1281620
  * ceph: wake up 'safe' waiters when unregistering request
    - LP: #1281620
  * sh: always link in helper functions extracted from libgcc
    - LP: #1281620
  * libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus
    SpinPoint M8
    - LP: #1281620
  * ext4: call ext4_error_inode() if jbd2_journal_dirty_metadata() fails
    - LP: #1281620
  * ext4: fix use-after-free in ext4_mb_new_blocks
    - LP: #1281620
  * ext4: check for overlapping extents in ext4_valid_extent_entries()
    - LP: #1281620
  * ext2: Fix oops in ext2_get_block() called from ext2_quota_write()
    - LP...

Read more...

Changed in linux (Ubuntu Precise):
status: Confirmed → Fix Released
Brad Figg (brad-figg)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.