Trusty update to v3.13.11-ckt15 stable release

Bug #1419838 reported by Seth Forshee
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Trusty
Fix Released
Undecided
Seth Forshee

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The v3.13.11-ckt15 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the v3.13.11-ckt15 stable release:

gre: fix the inner mac header in nbma tunnel xmit path
netlink: Always copy on mmap TX.
netlink: Don't reorder loads/stores before marking mmap netlink frame as available
in6: fix conflict with glibc
tg3: tg3_disable_ints using uninitialized mailbox value to disable interrupts
batman-adv: Unify fragment size calculation
batman-adv: avoid NULL dereferences and fix if check
net: Fix stacked vlan offload features computation
net: Reset secmark when scrubbing packet
tcp: Do not apply TSO segment limit to non-TSO packets
alx: fix alx_poll()
team: avoid possible underflow of count_pending value for notify_peers and mcast_rejoin
enic: fix rx skb checksum
net/core: Handle csum for CHECKSUM_COMPLETE VXLAN forwarding
macvlan: unregister net device when netdev_upper_dev_link() fails
netfilter: conntrack: disable generic tracking for known protocols
xen-netfront: Fix handling packets on compound pages with skb_linearize
xen-netfront: use correct linear area after linearizing an skb
eCryptfs: Force RO mount when encrypted view is enabled
[media] smiapp: Take mutex during PLL update in sensor initialisation
[media] smiapp-pll: Correct clock debug prints
[media] sound: simplify au0828 quirk table
[media] sound: Update au0828 quirks table
[media] af9005: fix kernel panic on init if compiled without IR
writeback: fix a subtle race condition in I_DIRTY clearing
usb: renesas_usbhs: gadget: fix NULL pointer dereference in ep_disable()
KVM: s390: flush CPU on load control
UBI: Fix double free after do_sync_erase()
UBI: Fix invalid vfree()
Drivers: hv: vmbus: Fix a race condition when unregistering a device
driver core: Fix unbalanced device reference in drivers_probe
PCI: Restore detection of read-only BARs
scsi: correct return values for .eh_abort_handler implementations
drm/radeon: fix typo in CI dpm disable
ARM: tegra: Re-add removed SoC id macro to tegra_resume()
arm64: Add COMPAT_HWCAP_LPAE
genhd: check for int overflow in disk_expand_part_tbl()
ftrace/x86: Add frames pointers to trampoline as necessary
drm/ttm: Avoid memory allocation from shrinker functions.
ASoC: sigmadsp: Refuse to load firmware files with a non-supported version
drm/radeon: work around a hw bug in MGCG on CIK
Btrfs: make sure we wait on logged extents when fsycning two subvols
Btrfs: do not move em to modified list when unpinning
megaraid_sas: corrected return of wait_event from abort frame path
ASoC: max98090: Fix ill-defined sidetone route
blk-mq: use 'nr_cpu_ids' as highest CPU ID count for hwq <-> cpu map
nfs41: fix nfs4_proc_layoutget error handling
cdc-acm: memory leak in error case
USB: cdc-acm: check for valid interfaces
x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs
[media] uvcvideo: Fix destruction order in uvc_delete()
HID: i2c-hid: fix race condition reading reports
mfd: tc6393xb: Fail ohci suspend if full state restore is required
serial: samsung: wait for transfer completion before clock disable
mmc: dw_mmc: avoid write to CDTHRCTL on older versions
Bluetooth: ath3k: Add support of MCI 13d3:3408 bt device
eCryptfs: Remove buggy and unnecessary write in file name decode routine
n_tty: Fix read_buf race condition, increment read_head after pushing data
dm cache: only use overwrite optimisation for promotion when in writeback mode
dm cache: dirty flag was mistakenly being cleared when promoting via overwrite
dm bufio: fix memleak when using a dm_buffer's inline bio
ath9k_hw: fix hardware queue allocation
ath9k: fix BE/BK queue order
ath5k: fix hardware queue index assignment
tcm_loop: Fix wrong I_T nexus association
iwlwifi: dvm: fix flush support for old firmware
iommu/vt-d: Fix an off-by-one bug in __domain_mapping()
dm crypt: use memzero_explicit for on-stack buffer
mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount
mnt: Update unprivileged remount test
umount: Disallow unprivileged mount force
md/raid56: Don't perform reads to support writes until stripe is ready.
md/raid5: avoid livelock caused by non-aligned writes.
md/raid5: fetch_block must fetch all the blocks handle_stripe_dirtying wants.
drm/i915: Disallow pin ioctl completely for kms drivers
drm/vmwgfx: Don't use memory accounting for kernel-side fence objects
drm/vmwgfx: Fix fence event code
hp_accel: Add support for HP ZBook 15
drm/radeon: check the right ring in radeon_evict_flags()
Revert "[SCSI] mpt2sas: Remove phys on topology change."
Revert "[SCSI] mpt3sas: Remove phys on topology change"
swiotlb-xen: pass dev_addr to xen_dma_unmap_page and xen_dma_sync_single_for_cpu
swiotlb-xen: call xen_dma_sync_single_for_device when appropriate
clocksource: arch_timer: Fix code to use physical timers when requested
ALSA: hda - Fix built-in mic at resume on Lenovo Ideapad S210
can: peak_usb: fix memset() usage
can: peak_usb: fix cleanup sequence order in case of error during init
ALSA: usb-audio: Don't resubmit pending URBs at MIDI error recovery
KEYS: Fix stale key registration at error path
thermal: Fix error path in thermal_init()
blk-mq: Fix a use-after-free
fs: nfsd: Fix signedness bug in compare_blob
nfsd4: fix xdr4 inclusion of escaped char
userns: Rename id_map_mutex to userns_state_mutex
drm/i915: Don't complain about stolen conflicts on gen3
ALSA: hda - Add EAPD fixup for ASUS Z99He laptop
Btrfs: fix fs corruption on transaction abort if device supports discard
ncpfs: return proper error from NCP_IOC_SETROOT ioctl
drivers/rtc/rtc-sirfsoc.c: move hardware initilization earlier in probe
rtc: omap: fix missing wakealarm attribute
exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting
perf/x86/intel/uncore: Make sure only uncore events are collected
perf: Fix events installation during moving group
KVM: nVMX: Disable unrestricted mode if ept=0
drm/i915: save/restore GMBUS freq across suspend/resume on gen4
pstore-ram: Fix hangs by using write-combine mappings
pstore-ram: Allow optional mapping with pgprot_noncached
userns: Add a knob to disable setgroups on a per user namespace basis
userns: Allow setting gid_maps without privilege when setgroups is disabled
userns: Unbreak the unprivileged remount tests
HID: i2c-hid: prevent buffer overflow in early IRQ
mac80211: fix multicast LED blinking and counter
cfg80211: avoid mem leak on driver hint set
mtd: tests: abort torturetest on erase errors
tracing/sched: Check preempt_count() for current when reading task->state
iscsi,iser-target: Initiate termination only once
iser-target: Fix flush + disconnect completion handling
iser-target: Parallelize CM connection establishment
iser-target: Fix connected_handler + teardown flow race
iser-target: Handle ADDR_CHANGE event for listener cm_id
iser-target: Fix implicit termination of connections
genirq: Prevent proc race against freeing of irq descriptors
x86/tls: Disallow unusual TLS segments
powerpc/powernv: Switch off MMU before entering nap/sleep/rvwinkle mode
ARC: [nsimosci] move peripherals to match model to FPGA
scsi: blacklist RSOC for Microsoft iSCSI target devices
rtlwifi: rtl8192ce: Set fw_ready flag
iscsi-target: Fail connection on short sendmsg writes
mac80211: free management frame keys when removing station
ceph: do_sync is never initialized
x86/tls: Don't validate lm in set_thread_area() after all
ALSA: usb-audio: extend KEF X300A FU 10 tweak to Arcam rPAC
mnt: Fix a memory stomp in umount
ocfs2: fix journal commit deadlock
tick/powerclamp: Remove tick_nohz_idle abuse
Linux 3.13.11-ckt15

The following patches were already applied to the Trusty kernel:

x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit
storvsc: ring buffer failures may result in I/O freeze

CVE References

Seth Forshee (sforshee)
tags: added: kernel-stable-tracking-bug
Seth Forshee (sforshee)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Seth Forshee (sforshee)
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
assignee: nobody → Seth Forshee (sforshee)
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (12.8 KiB)

This bug was fixed in the package linux - 3.13.0-46.75

---------------
linux (3.13.0-46.75) trusty; urgency=low

  [ Seth Forshee ]

  * Release Tracking Bug
    - LP: #1419963

  [ Andy Whitcroft ]

  * [Debian] arm64 -- build ubuntu drivers
    - LP: #1411284
  * hyper-v -- fix comment handing in /etc/network/interfaces
    - LP: #1413020

  [ Kamal Mostafa ]

  * [Packaging] force "dpkg-source -I -i" behavior

  [ Upstream Kernel Changes ]

  * Revert "[SCSI] mpt2sas: Remove phys on topology change."
    - LP: #1419838
  * Revert "[SCSI] mpt3sas: Remove phys on topology change"
    - LP: #1419838
  * Btrfs: fix transaction abortion when remounting btrfs from RW to RO
    - LP: #1411320
  * Btrfs: fix a crash of clone with inline extents's split
    - LP: #1413129
  * net/mlx4_en: Add VXLAN ndo calls to the PF net device ops too
    - LP: #1407760
  * KVM: x86: SYSENTER emulation is broken
    - LP: #1414651
    - CVE-2015-0239
  * powerpc/xmon: Fix another endiannes issue in RTAS call from xmon
    - LP: #1415919
  * ipv6: fix swapped ipv4/ipv6 mtu_reduced callbacks
    - LP: #1404558, #1419837
  * usb: gadget: at91_udc: move prepare clk into process context
    - LP: #1419837
  * KVM: x86: Fix far-jump to non-canonical check
    - LP: #1419837
  * x86/tls: Validate TLS entries to protect espfix
    - LP: #1419837
  * userns: Check euid no fsuid when establishing an unprivileged uid
    mapping
    - LP: #1419837
  * userns: Document what the invariant required for safe unprivileged
    mappings.
    - LP: #1419837
  * userns: Only allow the creator of the userns unprivileged mappings
    - LP: #1419837
  * x86_64, switch_to(): Load TLS descriptors before switching DS and ES
    - LP: #1419837
  * isofs: Fix infinite looping over CE entries
    - LP: #1419837
  * batman-adv: Calculate extra tail size based on queued fragments
    - LP: #1419837
  * KEYS: close race between key lookup and freeing
    - LP: #1419837
  * isofs: Fix unchecked printing of ER records
    - LP: #1419837
  * x86_64, vdso: Fix the vdso address randomization algorithm
    - LP: #1419837
  * groups: Consolidate the setgroups permission checks
    - LP: #1419837
  * userns: Don't allow setgroups until a gid mapping has been setablished
    - LP: #1419837
  * userns: Don't allow unprivileged creation of gid mappings
    - LP: #1419837
  * move d_rcu from overlapping d_child to overlapping d_alias
    - LP: #1419837
  * deal with deadlock in d_walk()
    - LP: #1419837
  * Linux 3.13.11-ckt14
    - LP: #1419837
  * gre: fix the inner mac header in nbma tunnel xmit path
    - LP: #1419838
  * netlink: Always copy on mmap TX.
    - LP: #1419838
  * netlink: Don't reorder loads/stores before marking mmap netlink frame
    as available
    - LP: #1419838
  * in6: fix conflict with glibc
    - LP: #1419838
  * tg3: tg3_disable_ints using uninitialized mailbox value to disable
    interrupts
    - LP: #1419838
  * batman-adv: Unify fragment size calculation
    - LP: #1419838
  * batman-adv: avoid NULL dereferences and fix if check
    - LP: #1419838
  * net: Fix stacked vlan offload features computation
    - LP: #1419838
  * net: Reset secmark when scrubbing packet
    - L...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
Mathew Hodson (mhodson)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.