This bug was fixed in the package linux - 3.2.0-85.122

---------------
linux (3.2.0-85.122) precise; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1458901

  [ Upstream Kernel Changes ]

  * Revert "KVM: s390: flush CPU on load control"
    - LP: #1454300
  * ARM: pxa: add regulator_has_full_constraints to corgi board file
    - LP: #1454300
  * ARM: pxa: add regulator_has_full_constraints to poodle board file
    - LP: #1454300
  * ARM: pxa: add regulator_has_full_constraints to spitz board file
    - LP: #1454300
  * hx4700: regulator: declare full constraints
    - LP: #1454300
  * udf: Remove repeated loads blocksize
    - LP: #1454300
  * udf: Check length of extended attributes and allocation descriptors
    - LP: #1454300
  * PCI: Generate uppercase hex for modalias var in uevent
    - LP: #1454300
  * kernel.h: add BUILD_BUG() macro
    - LP: #1454300
  * usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN
    - LP: #1454300
  * axonram: Fix bug in direct_access
    - LP: #1454300
  * TPM: Add new TPMs to the tail of the list to prevent inadvertent change
    of dev
    - LP: #1454300
  * Bluetooth: ath3k: Add support of AR3012 bluetooth 13d3:3423 device
    - LP: #1411193, #1454300
  * smack: fix possible use after frees in task_security() callers
    - LP: #1454300
  * KVM: s390: base hrtimer on a monotonic clock
    - LP: #1454300
  * PCI: Fix infinite loop with ROM image of size 0
    - LP: #1454300
  * USB: cp210x: add ID for RUGGEDCOM USB Serial Console
    - LP: #1454300
  * iio: imu: adis16400: Fix sign extension
    - LP: #1454300
  * staging: comedi: comedi_compat32.c: fix COMEDI_CMD copy back
    - LP: #1454300
  * ARM: 8284/1: sa1100: clear RCSR_SMR on resume
    - LP: #1454300
  * xprtrdma: Free the pd if ib_query_qp() fails
    - LP: #1454300
  * nfs: don't call blocking operations while !TASK_RUNNING
    - LP: #1454300
  * cdc-acm: add sanity checks
    - LP: #1454300
  * USB: add flag for HCDs that can't receive wakeup requests (isp1760-hcd)
    - LP: #1454300
  * USB: fix use-after-free bug in usb_hcd_unlink_urb()
    - LP: #1454300
  * vt: provide notifications on selection changes
    - LP: #1454300
  * tty: Prevent untrappable signals from malicious program
    - LP: #1454300
  * lmedm04: Fix usb_submit_urb BOGUS urb xfer, pipe 1 != type 3 in
    interrupt urb
    - LP: #1454300
  * xen/manage: Fix USB interaction issues when resuming
    - LP: #1454300
  * rtnetlink: ifla_vf_policy: fix misuses of NLA_BINARY
    - LP: #1454300
  * ALSA: off by one bug in snd_riptide_joystick_probe()
    - LP: #1454300
  * fsnotify: fix handling of renames in audit
    - LP: #1454300
  * NFSv4.1: Fix a kfree() of uninitialised pointers in
    decode_cb_sequence_args
    - LP: #1454300
  * cpufreq: speedstep-smi: enable interrupts when waiting
    - LP: #1454300
  * mm/hugetlb: fix getting refcount 0 page in hugetlb_fault()
    - LP: #1454300
  * mm/hugetlb: add migration/hwpoisoned entry check in
    hugetlb_change_protection
    - LP: #1454300
  * mm/hugetlb: add migration entry check in __unmap_hugepage_range
    - LP: #1454300
  * mm/mmap.c: fix arithmetic overflow in __vm_enough_memory()
    - LP: #1454300
  * mm/nommu.c: fix arithmetic overflow in __vm_enough_memory()
    - LP: #1454300
  * iscsi-target: Drop problematic active_ts_list usage
    - LP: #1454300
  * mm/memory.c: actually remap enough memory
    - LP: #1454300
  * drm/radeon/dp: Set EDP_CONFIGURATION_SET for bridge chips if necessary
    - LP: #1454300
  * ALSA: hdspm - Constrain periods to 2 on older cards
    - LP: #1454300
  * jffs2: fix handling of corrupted summary length
    - LP: #1454300
  * dm mirror: do not degrade the mirror on discard error
    - LP: #1454300
  * dm io: reject unsupported DISCARD requests with EOPNOTSUPP
    - LP: #1454300
  * ipv6: fix ipv6_cow_metrics for non DST_HOST case
    - LP: #1454300
  * fixed invalid assignment of 64bit mask to host dma_boundary for scatter
    gather segment boundary limit.
    - LP: #1454300
  * sg: fix read() error reporting
    - LP: #1454300
  * netfilter: xt_socket: fix a stack corruption bug
    - LP: #1454300
  * IB/qib: Do not write EEPROM
    - LP: #1454300
  * dm: fix a race condition in dm_get_md
    - LP: #1454300
  * dm snapshot: fix a possible invalid memory access on unload
    - LP: #1454300
  * sched/autogroup: Fix failure to set cpu.rt_runtime_us
    - LP: #1454300
  * libceph: fix double __remove_osd() problem
    - LP: #1454300
  * kdb: fix incorrect counts in KDB summary command output
    - LP: #1454300
  * ipv4: ip_check_defrag should correctly check return value of
    skb_copy_bits
    - LP: #1454300
  * debugfs: leave freeing a symlink body until inode eviction
    - LP: #1454300
  * autofs4: check dev ioctl size before allocating
    - LP: #1454300
  * autofs4 copy_dev_ioctl(): keep the value of ->size we'd used for
    allocation
    - LP: #1454300
  * xfs: ensure truncate forces zeroed blocks to disk
    - LP: #1454300
  * gpio: tps65912: fix wrong container_of arguments
    - LP: #1454300
  * ALSA: pcm: Don't leave PREPARED state after draining
    - LP: #1454300
  * KVM: emulate: fix CMPXCHG8B on 32-bit hosts
    - LP: #1454300
  * net: compat: Ignore MSG_CMSG_COMPAT in compat_sys_{send, recv}msg
    - LP: #1454300
  * xhci: Allocate correct amount of scratchpad buffers
    - LP: #1454300
  * USB: usbfs: don't leak kernel data in siginfo
    - LP: #1454300
  * USB: ftdi_sio: add PIDs for Actisense USB devices
    - LP: #1454300
  * USB: serial: fix potential use-after-free after failed probe
    - LP: #1454300
  * USB: serial: fix tty-device error handling at probe
    - LP: #1454300
  * mac80211: Send EAPOL frames at lowest rate
    - LP: #1454300
  * USB: serial: cp210x: Adding Seletek device id's
    - LP: #1454300
  * nilfs2: fix potential memory overrun on inode
    - LP: #1454300
  * NFSv4: Don't call put_rpccred() under the rcu_read_lock()
    - LP: #1454300
  * usb: ftdi_sio: Add jtag quirk support for Cyber Cortex AV boards
    - LP: #1454300
  * eCryptfs: don't pass fs-specific ioctl commands through
    - LP: #1454300
  * drm/radeon: do a posting read in r100_set_irq
    - LP: #1454300
  * drm/radeon: do a posting read in rs600_set_irq
    - LP: #1454300
  * drm/radeon: do a posting read in r600_set_irq
    - LP: #1454300
  * drm/radeon: do a posting read in evergreen_set_irq
    - LP: #1454300
  * drm/radeon: fix DRM_IOCTL_RADEON_CS oops
    - LP: #1454300
  * ACPI / video: Load the module even if ACPI is disabled
    - LP: #1454300
  * ASoC: omap-pcm: Correct dma mask
    - LP: #1454300
  * x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization
    - LP: #1454300
  * xhci: fix reporting of 0-sized URBs in control endpoint
    - LP: #1454300
  * xhci: Workaround for PME stuck issues in Intel xhci
    - LP: #1454300
  * Change email address for 8250_pci
    - LP: #1454300
  * tty: fix up atime/mtime mess, take four
    - LP: #1454300
  * console: Fix console name size mismatch
    - LP: #1454300
  * net: irda: fix wait_until_sent poll timeout
    - LP: #1454300
  * TTY: fix tty_wait_until_sent on 64-bit machines
    - LP: #1454300
  * sunrpc: fix braino in ->poll()
    - LP: #1454300
  * gadgetfs: use-after-free in ->aio_read()
    - LP: #1454300
  * gadgetfs: Fix leak on error in aio_read()
    - LP: #1454300
  * ipvs: add missing ip_vs_pe_put in sync code
    - LP: #1454300
  * spi: dw: revisit FIFO size detection again
    - LP: #1454300
  * fuse: notify: don't move pages
    - LP: #1454300
  * fuse: set stolen page uptodate
    - LP: #1454300
  * dm: hold suspend_lock while suspending device during device deletion
    - LP: #1454300
  * dm io: deal with wandering queue limits when handling REQ_DISCARD and
    REQ_WRITE_SAME
    - LP: #1454300
  * mac80211: drop unencrypted frames in mesh fwding
    - LP: #1454300
  * mac80211: set only VO as a U-APSD enabled AC
    - LP: #1454300
  * mac80211: disable u-APSD queues by default
    - LP: #1454300
  * virtio_console: avoid config access from irq
    - LP: #1454300
  * bnx2x: Force fundamental reset for EEH recovery
    - LP: #1454300
  * x86/vdso: Fix the build on GCC5
    - LP: #1454300
  * ASoC: sgtl5000: remove useless register write clearing CHRGPUMP_POWERUP
    - LP: #1454300
  * libsas: Fix Kernel Crash in smp_execute_task
    - LP: #1454300
  * Input: synaptics - query min dimensions for fw v8.1
    - LP: #1454300
  * Input: synaptics - fix middle button on Lenovo 2015 products
    - LP: #1454300
  * Input: synaptics - handle spurious release of trackstick buttons
    - LP: #1454300
  * can: add missing initialisations in CAN related skbuffs
    - LP: #1454300
  * vt6655: RFbSetPower fix missing rate RATE_12M
    - LP: #1454300
  * ftrace: Fix en(dis)able graph caller when en(dis)abling record via
    sysctl
    - LP: #1454300
  * ftrace: Fix ftrace enable ordering of sysctl ftrace_enabled
    - LP: #1454300
  * x86/asm/entry/32: Fix user_mode() misuses
    - LP: #1454300
  * ASoC: adav80x: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: ak4641: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: cs4271: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: wm2000: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: wm8731: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: wm8903: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: wm8904: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: wm8955: Fix wrong value references for boolean kctl
    - LP: #1454300
  * ASoC: wm8960: Fix wrong value references for boolean kctl
    - LP: #1454300
  * xen-pciback: limit guest control of command register
    - LP: #1454300
  * drm/vmwgfx: Reorder device takedown somewhat
    - LP: #1454300
  * ALSA: control: Add sanity checks for user ctl id name string
    - LP: #1454300
  * ALSA: snd-usb: add quirks for Roland UA-22
    - LP: #1454300
  * nilfs2: fix deadlock of segment constructor during recovery
    - LP: #1454300
  * crypto: aesni - fix memory usage in GCM decryption
    - LP: #1454300
  * nl80211: ignore HT/VHT capabilities without QoS/WMM
    - LP: #1454300
  * pagemap: do not leak physical addresses to non-privileged userspace
    - LP: #1454300
  * IB/mlx4: Saturate RoCE port PMA counters in case of overflow
    - LP: #1454300
  * tcm_fc: missing curly braces in ft_invl_hw_context()
    - LP: #1454300
  * target/pscsi: Fix NULL pointer dereference in get_device_type
    - LP: #1454300
  * writeback: add missing INITIAL_JIFFIES init in
    global_update_bandwidth()
    - LP: #1454300
  * nbd: fix possible memory leak
    - LP: #1454300
  * iio: core: Fix double free.
    - LP: #1454300
  * USB: ftdi_sio: Added custom PID for Synapse Wireless product
    - LP: #1454300
  * USB: serial: keyspan_pda: fix Entrega company name spelling
    - LP: #1454300
  * USB: keyspan_pda: add new device id
    - LP: #1454300
  * net: ethernet: pcnet32: Setup the SRAM and NOUFLO on Am79C97{3, 5}
    - LP: #1454300
  * net: compat: Update get_compat_msghdr() to match
    copy_msghdr_from_user() behaviour
    - LP: #1454300
  * cifs: fix use-after-free bug in find_writable_file
    - LP: #1454300
  * perf: Fix irq_work 'tail' recursion
    - LP: #1454300
  * sched: Fix RLIMIT_RTTIME when PI-boosting to RT
    - LP: #1454300
  * writeback: fix possible underflow in write bandwidth calculation
    - LP: #1454300
  * usb: xhci: handle Config Error Change (CEC) in xhci driver
    - LP: #1454300
  * usb: xhci: apply XHCI_AVOID_BEI quirk to all Intel xHCI controllers
    - LP: #1454300
  * net: use for_each_netdev_safe() in rtnl_group_changelink()
    - LP: #1454300
  * USB: ftdi_sio: Use jtag quirk for SNAP Connect E10
    - LP: #1454300
  * selinux: fix sel_write_enforce broken return value
    - LP: #1454300
  * mm: fix anon_vma->degree underflow in anon_vma endless growing
    prevention
    - LP: #1454300
  * hfsplus: fix B-tree corruption after insertion at position 0
    - LP: #1454300
  * ALSA: hda - Add one more node in the EAPD supporting candidate list
    - LP: #1436745, #1454300
  * radeon: Do not directly dereference pointers to BIOS area.
    - LP: #1454300
  * x86/reboot: Remove VersaLogic Menlow reboot quirk
    - LP: #1454300
  * ACPI, x86: fix Dell M6600 ACPI reboot regression via DMI
    - LP: #1454300
  * x86/reboot: Remove quirk entry for SBC FITPC
    - LP: #1454300
  * x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically
    - LP: #1454300
  * x86/reboot: Fix apparent cut-n-paste mistake in Dell reboot workaround
    - LP: #1454300
  * x86/reboot: Remove the duplicate C6100 entry in the reboot quirks list
    - LP: #1454300
  * x86/reboot: Add reboot quirk for Dell Latitude E5410
    - LP: #1454300
  * x86/reboot: Add reboot quirk for Certec BPC600
    - LP: #1454300
  * x86/reboot: Add ASRock Q1900DC-ITX mainboard reboot quirk
    - LP: #1454300
  * mac80211: fix RX A-MPDU session reorder timer deletion
    - LP: #1454300
  * xen-netfront: transmit fully GSO-sized packets
    - LP: #1454300
  * be2iscsi: Fix kernel panic when device initialization fails
    - LP: #1454300
  * Defer processing of REQ_PREEMPT requests for blocked devices
    - LP: #1454300
  * ocfs2: _really_ sync the right range
    - LP: #1454300
  * ALSA: usb - Creative USB X-Fi Pro SB1095 volume knob support
    - LP: #1454300
  * ipv4: Missing sk_nulls_node_init() in ping_unhash().
    - LP: #1454300
  * jfs: fix readdir regression
    - LP: #1454300
  * ip: zero sockaddr returned on error queue
    - LP: #1454300
  * net: rps: fix cpu unplug
    - LP: #1454300
  * ipv6: stop sending PTB packets for MTU < 1280
    - LP: #1454300
  * netxen: fix netxen_nic_poll() logic
    - LP: #1454300
  * ping: Fix race in free in receive path
    - LP: #1454300
  * ppp: deflate: never return len larger than output buffer
    - LP: #1454300
  * rtnetlink: call ->dellink on failure when ->newlink exists
    - LP: #1454300
  * gen_stats.c: Duplicate xstats buffer for later use
    - LP: #1454300
  * ipv4: ip_check_defrag should not assume that skb_network_offset is zero
    - LP: #1454300
  * ematch: Fix auto-loading of ematch modules.
    - LP: #1454300
  * net: reject creation of netdev names with colons
    - LP: #1454300
  * macvtap: limit head length of skb allocated
    - LP: #1454300
  * macvtap: make sure neighbour code can push ethernet header
    - LP: #1454300
  * usb: plusb: Add support for National Instruments host-to-host cable
    - LP: #1454300
  * udp: only allow UFO for packets from SOCK_DGRAM sockets
    - LP: #1454300
  * net: ping: Return EAFNOSUPPORT when appropriate.
    - LP: #1454300
  * net: avoid to hang up on sending due to sysctl configuration overflow.
    - LP: #1454300
  * net: sysctl_net_core: check SNDBUF and RCVBUF for min length
    - LP: #1454300
  * rds: avoid potential stack overflow
    - LP: #1454300
  * caif: fix MSG_OOB test in caif_seqpkt_recvmsg()
    - LP: #1454300
  * rxrpc: bogus MSG_PEEK test in rxrpc_recvmsg()
    - LP: #1454300
  * tcp: make connect() mem charging friendly
    - LP: #1454300
  * 8139cp: Call dev_kfree_skby_any instead of kfree_skb.
    - LP: #1454300
  * 8139too: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454300
  * r8169: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454300
  * tg3: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454300
  * ixgb: Call dev_kfree_skby_any instead of dev_kfree_skb.
    - LP: #1454300
  * benet: Call dev_kfree_skby_any instead of kfree_skb.
    - LP: #1454300
  * gianfar: Carefully free skbs in functions called by netpoll.
    - LP: #1454300
  * ip_forward: Drop frames with attached skb->sk
    - LP: #1454300
  * tcp: avoid looping in tcp_send_fin()
    - LP: #1454300
  * net: make skb_gso_segment error handling more robust
    - LP: #1454300
  * spi: spidev: fix possible arithmetic overflow for multi-transfer
    message
    - LP: #1454300
  * IB/core: Avoid leakage from kernel to user space
    - LP: #1454300
  * ipvs: rerouting to local clients is not needed anymore
    - LP: #1454300
  * ipvs: uninitialized data with IP_VS_IPV6
    - LP: #1454300
  * Linux 3.2.69
    - LP: #1454300

 -- Luis Henriques <email address hidden>  Tue, 26 May 2015 15:41:24 +0100