Trusty update to 3.13.11.5 stable release

Bug #1347088 reported by Brad Figg on 2014-07-22
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Trusty
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.13.11.5 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.13.11.5 stable release:
                Linux 3.13.11.5
                iscsi-target: fix iscsit_del_np deadlock on unload
                iscsi-target: Avoid rejecting incorrect ITT for Data-Out
                lz4: fix another possible overrun
                efi-pstore: Fix an overflow on 32-bit builds
                iscsi-target: Explicily clear login response PDU in exception path
                target: Fix left-over se_lun->lun_sep pointer OOPs
                ALSA: hda - restore BCLK M/N values when resuming HSW/BDW display controller
                MIPS: MSC: Prevent out-of-bounds writes to MIPS SC ioremap'd region
                recordmcount/MIPS: Fix possible incorrect mcount_loc table entries in modules
                ALSA: usb-audio: Fix races at disconnection and PCM closing
                net: allwinner: emac: Add missing free_irq
                powerpc: Don't skip ePAPR spin-table CPUs
                nfs: Fix cache_validity check in nfs_write_pageuptodate()
                aio: fix kernel memory disclosure in io_getevents() introduced in v3.10
                aio: fix aio request leak when events are reaped by userspace
                [CIFS] fix mount failure with broken pathnames when smb3 mount with mapchars option
                drm/i915: Hold the table lock whilst walking the file's idr and counting the objects in debugfs
                mm: fix crashes from mbind() merging vmas
                DMA, CMA: fix possible memory leak
                mm, pcp: allow restoring percpu_pagelist_fraction default
                kernel/watchdog.c: remove preemption restrictions when restarting lockup detector
                hugetlb: fix copy_hugetlb_page_range() to handle migration/hwpoisoned entry
                x86_32, entry: Do syscall exit work on badsys (CVE-2014-4508)
                lz4: ensure length does not wrap
                lzo: properly check for overruns
                ALSA: hda - hdmi: call overridden init on resume
                rbd: handle parent_overlap on writes correctly
                blkcg: fix use-after-free in __blkg_release_rcu() by making blkcg_gq refcnt an atomic_t
                rt2x00: fix rfkill regression on rt2500pci
                b43: fix frequency reported on G-PHY with /new/ firmware
                rt2x00: disable TKIP on USB
                Bluetooth: Allow change security level on ATT_CID in slave role
                Bluetooth: Fix locking of hdev when calling into SMP code
                Bluetooth: Fix indicating discovery state when canceling inquiry
                Bluetooth: Fix setting correct authentication information for SMP STK
                Bluetooth: Fix SSP acceptor just-works confirmation without MITM
                ALSA: control: Make sure that id->index does not overflow
                ALSA: control: Handle numid overflow
                ALSA: control: Don't access controls outside of protected regions
                ALSA: control: Fix replacing user controls
                ALSA: control: Protect user controls against concurrent access
                arm64/dma: Removing ARCH_HAS_DMA_GET_REQUIRED_MASK macro
                arm64: ptrace: fix empty registers set in prstatus of aarch32 process core
                arm64: uid16: fix __kernel_old_{gid,uid}_t definitions
                arm64: ptrace: change fs when passing kernel pointer to regset code
                arm64: Bug fix in stack alignment exception
                USB: EHCI: avoid BIOS handover on the HASEE E200
                ARM: mvebu: DT: fix OpenBlocks AX3-4 RAM size
                drm/nouveau/kms: reference vblank for crtc during pageflip.
                epoll: fix use-after-free in eventpoll_release_file
                ACPI / ia64 / sba_iommu: Restore the working initialization ordering
                Revert "offb: Add palette hack for little endian"
                rtmutex: Plug slow unlock race
                iio: adc: at91: signedness bug in at91_adc_get_trigger_value_by_name()
                drm/i915: Reorder semaphore deadlock check
                drm/i915: Avoid div-by-zero when pixel_multiplier is zero
                drm/i915: Disable FBC by default also on Haswell and later
                rtmutex: Detect changes in the pi lock chain
                rtmutex: Handle deadlock detection smarter
                iio: Fix endianness issue in ak8975_read_axis()
                staging: iio: tsl2x7x_core: fix proximity treshold
                ACPI / video: Add Dell Inspiron 5737 to the blacklist
                ALSA: hda/realtek - Add more entry for enable HP mute led
                ALSA: hda/realtek - Add more entry for enable HP mute led
                ALSA: hda - Add quirk for external mic on Lifebook U904
                evm: prohibit userspace writing 'security.evm' HMAC value
                hwmon: (ina2xx) Cast to s16 on shunt and current regs
                ALSA: compress: Cancel the optimization of compiler and fix the size of struct for all platform.
                dm thin: update discard_granularity to reflect the thin-pool blocksize
                target: Report correct response length for some commands
                Target/iscsi: Fix sendtargets response pdu for iser transport
                powerpc/perf: Ensure all EBB register state is cleared on fork()
                powerpc: Don't setup CPUs with bad status
                powerpc: Correct DSCR during TM context switch
                powerpc: Add AT_HWCAP2 to indicate V.CRYPTO category support
                fs,userns: Change inode_capable to capable_wrt_inode_uidgid
                watchdog: sp805: Set watchdog_device->timeout from ->set_timeout()
                watchdog: ath79_wdt: avoid spurious restarts on AR934x
                watchdog: kempld-wdt: Use the correct value when configuring the prescaler with the watchdog
                auditsc: audit_krule mask accesses need bounds checking
                NFS: populate ->net in mount data when remounting
                drm/nouveau/kms/nv04-nv40: fix pageflip events via special case.
                drm/nv50-/mc: fix kms pageflip events by reordering irq handling order.
                iscsi-target: Fix ABORT_TASK + connection reset iscsi_queue_req memory leak
                target: Use complete_all for se_cmd->t_transport_stop_comp
                target: Set CMD_T_ACTIVE bit for Task Management Requests
                Btrfs: fix double free in find_lock_delalloc_range
                nfsd4: fix FREE_STATEID lockowner leak
                Input: elantech - don't set bit 1 of reg_10 when the no_hw_res quirk is set
                Input: elantech - deal with clickpads reporting right button events
                idr: fix overflow bug during maximum ID calculation at maximum height
                ptrace: fix fork event messages across pid namespaces
                rtc: rtc-at91rm9200: fix infinite wait for ACKUPD irq
                mm: vmscan: clear kswapd's special reclaim powers before exiting
                IB/umad: Fix use-after-free on close
                powerpc/mm: Check paca psize is up to date for huge mappings
                iscsi-target: Reject mutual authentication with reflected CHAP_C
                rbd: use reference counts for image requests
                ALSA: hda/realtek - Add support of ALC891 codec
                powerpc: 64bit sendfile is capped at 2GB
                powerpc/serial: Use saner flags when creating legacy ports
                mm/memory-failure.c: support use of a dedicated thread to handle SIGBUS(BUS_MCEERR_AO)
                mm/memory-failure.c: don't let collect_procs() skip over processes for MF_ACTION_REQUIRED
                mm/memory-failure.c-failure: send right signal code to correct thread
                mm: page_alloc: use word-based accesses for get/set pageblock bitmaps
                memcg: do not hang on OOM when killed by userspace OOM access to memory reserves
                mm: vmscan: do not throttle based on pfmemalloc reserves if node has no ZONE_NORMAL
                kthread: fix return value of kthread_create() upon SIGKILL.
                hugetlb: restrict hugepage_migration_support() to x86_64
                mm: fix sleeping function warning from __put_anon_vma
                ahci: Add Device ID for HighPoint RocketRaid 642L
                drm/radeon: only apply hdmi bpc pll flags when encoder mode is hdmi
                drm/radeon/atom: fix dithering on certain panels
                drm/radeon/dp: fix lane/clock setup for dp 1.2 capable devices
                drm/radeon: fix typo in radeon_connector_is_dp12_capable()
                vgaswitcheroo: switch the mux to the igp on power down when runpm is enabled
                Bluetooth: Fix L2CAP deadlock
                UBIFS: Remove incorrect assertion in shrink_tnc()
                ASoC: tlv320aci3x: Fix custom snd_soc_dapm_put_volsw_aic3x() function
                nfsd: getattr for FATTR4_WORD0_FILES_AVAIL needs the statfs buffer
                block: virtio_blk: don't hold spin lock during world switch
                MIPS: KVM: Allocate at least 16KB for exception handlers
                RDMA/cxgb4: Add missing padding at end of struct c4iw_create_cq_resp
                IB/umad: Fix error handling
                usb: qcserial: add additional Sierra Wireless QMI devices
                usb: qcserial: add Netgear AirCard 341U
                hv: use correct order when freeing monitor_pages
                mtd: pxa3xx_nand: make the driver work on big-endian systems
                mac80211: don't check netdev state for debugfs read/write
                mac80211: fix a memory leak on sta rate selection table
                s390/lowcore: reserve 96 bytes for IRB in lowcore
                usb: usbtest: fix unlink write error with pattern 1
                mei: me: read H_CSR after asserting reset
                mei: me: drop harmful wait optimization
                mei: me: fix hw ready reset flow
                IB/ipath: Translate legacy diagpkt into newer extended diagpkt
                IB/qib: Fix port in pkey change event
                IB/mlx5: add missing padding at end of struct mlx5_ib_create_srq
                IB/mlx5: add missing padding at end of struct mlx5_ib_create_cq
                ext4: fix wrong assert in ext4_mb_normalize_request()
                ext4: fix zeroing of page during writeback
                ahci: add PCI ID for Marvell 88SE91A0 SATA Controller
                s390/time: cast tv_nsec to u64 prior to shift in update_vsyscall
                KVM: lapic: sync highest ISR to hardware apic on EOI
                mac80211: fix IBSS join by initializing last_scan_completed
                staging/mt29f_spinand: Terminate of match table
                iio:adc:max1363 incorrect resolutions for max11604, max11605, max11610 and max11611.
                CIFS: Fix memory leaks in SMB2_open
                [media] ivtv: Fix Oops when no firmware is loaded
                [media] uvcvideo: Fix clock param realtime setting
                SUNRPC: Fix a module reference leak in svc_handle_xprt
                ARM: stacktrace: avoid listing stacktrace functions in stacktrace
                reiserfs: call truncate_setsize under tailpack mutex
                mtd: eLBC NAND: fix subpage write support
                mtd: nand: omap: fix BCHx ecc.correct to return detected bit-flips in erased-page
                Target/iser: Wait for proper cleanup before unloading
                Target/iser: Improve cm events handling
                IB/srp: Fix a sporadic crash triggered by cable pulling
                HID: core: fix validation of report id 0
                Target/iser: Fix hangs in connection teardown
                Target/iser: Bail from accept_np if np_thread is trying to close
                PM / OPP: fix incorrect OPP count handling in of_init_opp_table
                hpsa: add new Smart Array PCI IDs (May 2014)
                ACPI: Fix conflict between customized DSDT and DSDT local copy
                ASoC: max98090: Fix reset at resume time
                [media] rtl28xxu: add [1b80:d3af] Sveon STV27
                [media] rtl28xxu: add [1b80:d39d] Sveon STV20
                [media] rtl28xxu: add 1b80:d395 Peak DVB-T USB
                [media] rtl28xxu: add USB ID for Genius TVGo DVB-T03
                UBIFS: fix an mmap and fsync race condition
                ext4: fix data integrity sync in ordered mode
                iwlwifi: pcie: try to get ownership several times
                x86, x32: Use compat shims for io_{setup,submit}
                Drivers: hv: balloon: Ensure pressure reports are posted regularly
                genirq: Sanitize spurious interrupt detection of threaded irqs
                x86-32, espfix: Remove filter for espfix32 due to race
                PCI: Add new ID for Intel GPU "spurious interrupt" quirk
                powerpc/pseries: Fix overwritten PE state
                bluetooth: hci_ldisc: fix deadlock condition
                builddeb: use $OBJCOPY variable instead of objcopy
                extcon: max8997: Fix NULL pointer exception on missing pdata
                extcon: max77693: Fix two NULL pointer exceptions on missing pdata
                mtip32xx: Fix ERO and NoSnoop values in PCIe upstream on AMD systems
                mtip32xx: Remove dfs_parent after pci unregister
                mtip32xx: Increase timeout for STANDBY IMMEDIATE command
                ACPICA: utstring: Check array index bound before use.
                usb: dwc3: gadget: clear stall when disabling endpoint
                NFS: Don't declare inode uptodate unless all attributes were checked
                introduce for_each_thread() to replace the buggy while_each_thread()
                netfilter: nf_nat: fix oops on netns removal
                igb: fix stats for i210 rx_fifo_errors
                Bluetooth: Fix check for connection encryption
                Bluetooth: Fix redundant encryption request for reauthentication
                ipv6: Fix regression caused by efe4208 in udp_v6_mcast_next()
                ALSA: usb-audio: Prevent printk ratelimiting from spamming kernel log while DEBUG not defined
                btrfs: fix defrag 32-bit integer overflow

Brad Figg (brad-figg) on 2014-07-22
tags: added: kernel-stable-tracking-bug
Brad Figg (brad-figg) on 2014-07-22
description: updated
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu Trusty):
status: New → Confirmed
Changed in linux (Ubuntu):
status: New → Confirmed

The verification of the Stable Release Update for linux-lts-trusty has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 3.13.0-33.58

---------------
linux (3.13.0-33.58) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1349897

  [ Upstream Kernel Changes ]

  * mm: numa: do not automatically migrate KSM pages
    - LP: #1346917
  * net: fix UDP tunnel GSO of frag_list GRO packets
    - LP: #1331219
  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1347088
  * n_tty: Fix buffer overruns with larger-than-4k pastes
    - LP: #1208740
 -- Tim Gardner <email address hidden> Fri, 18 Jul 2014 14:57:50 +0000

Changed in linux (Ubuntu Trusty):
status: Confirmed → Fix Released
Kees Cook (kees) wrote :

Reopened; it looks like this never landed and the auditsc fix in 3.13.0-33.58 typoed which bug it should close?

Changed in linux (Ubuntu Trusty):
status: Fix Released → Confirmed
Launchpad Janitor (janitor) wrote :
Download full text (38.9 KiB)

This bug was fixed in the package linux - 3.13.0-35.62

---------------
linux (3.13.0-35.62) trusty; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1357148

  [ Brad Figg ]

  * Start new release

  [ dann frazier ]

  * SAUCE: (no-up) Fix build failure on arm64
    - LP: #1353657
  * [debian] Allow for package revisions condusive for branching

  [ David Henningsson ]

  * SAUCE: Call broadwell specific functions from the hda driver
    - LP: #1317865

  [ Edward Lin ]

  * SAUCE: (no-up) Add use native backlight quirk for Dell Inspiron
    5547/5447
    - LP: #1332437

  [ Imre Deak ]

  * SAUCE: drm/i915: move power domain init earlier during system resume
    - LP: #1353405

  [ Jani Nikula ]

  * SAUCE: drm/i915: use lane count and link rate from VBT as minimums for
    eDP
    - LP: #1338582
  * SAUCE: drm/i915/dp: force eDP lane count to max available lanes on BDW
    - LP: #1338582
  * SAUCE: drm/i915: provide interface for audio driver to query cdclk
    - LP: #1188091
  * SAUCE: drm/i915: demote opregion excessive timeout WARN_ONCE to
    DRM_INFO_ONCE
    - LP: #1351014

  [ Joseph Salisbury ]

  * [Config] updateconfigs after Linux 3.13.11.6 updates

  [ Luis Henriques ]

  * Revert "[Packaging] linux-udeb-flavour -- standardise on linux prefix"

  [ Ming Lei ]

  * Revert "SAUCE: (no-up) ata: Fix the dma state machine lockup for the
    IDENTIFY DEVICE PIO mode command."
    - LP: #1335645

  [ Paulo Zanoni ]

  * SAUCE: drm/i915: consider the source max DP lane count too
    - LP: #1338582

  [ Tim Gardner ]

  * [Config] CONFIG_GPIO_SYSFS=y
    - LP: #1342153
  * [Config] CONFIG_KEYS_DEBUG_PROC_KEYS=y
    - LP: #1344405
  * [Config] updateconfigs
  * [Config] CONFIG_SCSI_IPR_TRACE=y, CONFIG_SCSI_IPR_DUMP=y
    - LP: #1343109
  * [Config] CONFIG_CONTEXT_TRACKING_FORCE=n
    - LP: #1349028

  [ Timo Aaltonen ]

  * SAUCE: Fix a typo in hda i915_bdw support.
    - LP: #1343140

  [ Upstream Kernel Changes ]

  * Revert "net/mlx4_en: Fix bad use of dev_id"
    - LP: #1347012
  * Revert "ACPI / AC: Remove AC's proc directory."
    - LP: #1356913
  * Revert "mac80211: move "bufferable MMPDU" check to fix AP mode scan"
    - LP: #1356913
  * mm, pcp: allow restoring percpu_pagelist_fraction default
    - LP: #1347088
  * net: Fix permission check in netlink_connect()
    - LP: #1312989
  * netlink: Rename netlink_capable netlink_allowed
    - LP: #1312989
  * net: Move the permission check in sock_diag_put_filterinfo to
    packet_diag_dump
    - LP: #1312989
  * net: Add variants of capable for use on on sockets
    - LP: #1312989
  * net: Add variants of capable for use on netlink messages
    - LP: #1312989
  * net: Use netlink_ns_capable to verify the permisions of netlink
    messages
    - LP: #1312989
  * netlink: Only check file credentials for implicit destinations
    - LP: #1312989
  * igb: fix stats for i210 rx_fifo_errors
    - LP: #1338893
  * HID: use multi input quirk for 22b9:2968
    - LP: #1339567
  * crypto/nx: disable NX on little endian builds
    - LP: #1338666
  * ACPI / video: Add Dell Inspiron 5737 to the blacklist
    - LP: #1250401
  * Input: elantech - deal with clickpads reportin...

Changed in linux (Ubuntu Trusty):
status: Confirmed → Fix Released
Brad Figg (brad-figg) on 2014-10-10
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers