Trusty update to v3.13.11-ckt15 stable release

Bug #1419838 reported by Seth Forshee on 2015-02-09
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Trusty
Undecided
Seth Forshee

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The v3.13.11-ckt15 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the v3.13.11-ckt15 stable release:

gre: fix the inner mac header in nbma tunnel xmit path
netlink: Always copy on mmap TX.
netlink: Don't reorder loads/stores before marking mmap netlink frame as available
in6: fix conflict with glibc
tg3: tg3_disable_ints using uninitialized mailbox value to disable interrupts
batman-adv: Unify fragment size calculation
batman-adv: avoid NULL dereferences and fix if check
net: Fix stacked vlan offload features computation
net: Reset secmark when scrubbing packet
tcp: Do not apply TSO segment limit to non-TSO packets
alx: fix alx_poll()
team: avoid possible underflow of count_pending value for notify_peers and mcast_rejoin
enic: fix rx skb checksum
net/core: Handle csum for CHECKSUM_COMPLETE VXLAN forwarding
macvlan: unregister net device when netdev_upper_dev_link() fails
netfilter: conntrack: disable generic tracking for known protocols
xen-netfront: Fix handling packets on compound pages with skb_linearize
xen-netfront: use correct linear area after linearizing an skb
eCryptfs: Force RO mount when encrypted view is enabled
[media] smiapp: Take mutex during PLL update in sensor initialisation
[media] smiapp-pll: Correct clock debug prints
[media] sound: simplify au0828 quirk table
[media] sound: Update au0828 quirks table
[media] af9005: fix kernel panic on init if compiled without IR
writeback: fix a subtle race condition in I_DIRTY clearing
usb: renesas_usbhs: gadget: fix NULL pointer dereference in ep_disable()
KVM: s390: flush CPU on load control
UBI: Fix double free after do_sync_erase()
UBI: Fix invalid vfree()
Drivers: hv: vmbus: Fix a race condition when unregistering a device
driver core: Fix unbalanced device reference in drivers_probe
PCI: Restore detection of read-only BARs
scsi: correct return values for .eh_abort_handler implementations
drm/radeon: fix typo in CI dpm disable
ARM: tegra: Re-add removed SoC id macro to tegra_resume()
arm64: Add COMPAT_HWCAP_LPAE
genhd: check for int overflow in disk_expand_part_tbl()
ftrace/x86: Add frames pointers to trampoline as necessary
drm/ttm: Avoid memory allocation from shrinker functions.
ASoC: sigmadsp: Refuse to load firmware files with a non-supported version
drm/radeon: work around a hw bug in MGCG on CIK
Btrfs: make sure we wait on logged extents when fsycning two subvols
Btrfs: do not move em to modified list when unpinning
megaraid_sas: corrected return of wait_event from abort frame path
ASoC: max98090: Fix ill-defined sidetone route
blk-mq: use 'nr_cpu_ids' as highest CPU ID count for hwq <-> cpu map
nfs41: fix nfs4_proc_layoutget error handling
cdc-acm: memory leak in error case
USB: cdc-acm: check for valid interfaces
x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs
[media] uvcvideo: Fix destruction order in uvc_delete()
HID: i2c-hid: fix race condition reading reports
mfd: tc6393xb: Fail ohci suspend if full state restore is required
serial: samsung: wait for transfer completion before clock disable
mmc: dw_mmc: avoid write to CDTHRCTL on older versions
Bluetooth: ath3k: Add support of MCI 13d3:3408 bt device
eCryptfs: Remove buggy and unnecessary write in file name decode routine
n_tty: Fix read_buf race condition, increment read_head after pushing data
dm cache: only use overwrite optimisation for promotion when in writeback mode
dm cache: dirty flag was mistakenly being cleared when promoting via overwrite
dm bufio: fix memleak when using a dm_buffer's inline bio
ath9k_hw: fix hardware queue allocation
ath9k: fix BE/BK queue order
ath5k: fix hardware queue index assignment
tcm_loop: Fix wrong I_T nexus association
iwlwifi: dvm: fix flush support for old firmware
iommu/vt-d: Fix an off-by-one bug in __domain_mapping()
dm crypt: use memzero_explicit for on-stack buffer
mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount
mnt: Update unprivileged remount test
umount: Disallow unprivileged mount force
md/raid56: Don't perform reads to support writes until stripe is ready.
md/raid5: avoid livelock caused by non-aligned writes.
md/raid5: fetch_block must fetch all the blocks handle_stripe_dirtying wants.
drm/i915: Disallow pin ioctl completely for kms drivers
drm/vmwgfx: Don't use memory accounting for kernel-side fence objects
drm/vmwgfx: Fix fence event code
hp_accel: Add support for HP ZBook 15
drm/radeon: check the right ring in radeon_evict_flags()
Revert "[SCSI] mpt2sas: Remove phys on topology change."
Revert "[SCSI] mpt3sas: Remove phys on topology change"
swiotlb-xen: pass dev_addr to xen_dma_unmap_page and xen_dma_sync_single_for_cpu
swiotlb-xen: call xen_dma_sync_single_for_device when appropriate
clocksource: arch_timer: Fix code to use physical timers when requested
ALSA: hda - Fix built-in mic at resume on Lenovo Ideapad S210
can: peak_usb: fix memset() usage
can: peak_usb: fix cleanup sequence order in case of error during init
ALSA: usb-audio: Don't resubmit pending URBs at MIDI error recovery
KEYS: Fix stale key registration at error path
thermal: Fix error path in thermal_init()
blk-mq: Fix a use-after-free
fs: nfsd: Fix signedness bug in compare_blob
nfsd4: fix xdr4 inclusion of escaped char
userns: Rename id_map_mutex to userns_state_mutex
drm/i915: Don't complain about stolen conflicts on gen3
ALSA: hda - Add EAPD fixup for ASUS Z99He laptop
Btrfs: fix fs corruption on transaction abort if device supports discard
ncpfs: return proper error from NCP_IOC_SETROOT ioctl
drivers/rtc/rtc-sirfsoc.c: move hardware initilization earlier in probe
rtc: omap: fix missing wakealarm attribute
exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting
perf/x86/intel/uncore: Make sure only uncore events are collected
perf: Fix events installation during moving group
KVM: nVMX: Disable unrestricted mode if ept=0
drm/i915: save/restore GMBUS freq across suspend/resume on gen4
pstore-ram: Fix hangs by using write-combine mappings
pstore-ram: Allow optional mapping with pgprot_noncached
userns: Add a knob to disable setgroups on a per user namespace basis
userns: Allow setting gid_maps without privilege when setgroups is disabled
userns: Unbreak the unprivileged remount tests
HID: i2c-hid: prevent buffer overflow in early IRQ
mac80211: fix multicast LED blinking and counter
cfg80211: avoid mem leak on driver hint set
mtd: tests: abort torturetest on erase errors
tracing/sched: Check preempt_count() for current when reading task->state
iscsi,iser-target: Initiate termination only once
iser-target: Fix flush + disconnect completion handling
iser-target: Parallelize CM connection establishment
iser-target: Fix connected_handler + teardown flow race
iser-target: Handle ADDR_CHANGE event for listener cm_id
iser-target: Fix implicit termination of connections
genirq: Prevent proc race against freeing of irq descriptors
x86/tls: Disallow unusual TLS segments
powerpc/powernv: Switch off MMU before entering nap/sleep/rvwinkle mode
ARC: [nsimosci] move peripherals to match model to FPGA
scsi: blacklist RSOC for Microsoft iSCSI target devices
rtlwifi: rtl8192ce: Set fw_ready flag
iscsi-target: Fail connection on short sendmsg writes
mac80211: free management frame keys when removing station
ceph: do_sync is never initialized
x86/tls: Don't validate lm in set_thread_area() after all
ALSA: usb-audio: extend KEF X300A FU 10 tweak to Arcam rPAC
mnt: Fix a memory stomp in umount
ocfs2: fix journal commit deadlock
tick/powerclamp: Remove tick_nohz_idle abuse
Linux 3.13.11-ckt15

The following patches were already applied to the Trusty kernel:

x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit
storvsc: ring buffer failures may result in I/O freeze

CVE References

Seth Forshee (sforshee) on 2015-02-09
tags: added: kernel-stable-tracking-bug
Seth Forshee (sforshee) on 2015-02-09
description: updated
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Seth Forshee (sforshee) on 2015-02-09
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
assignee: nobody → Seth Forshee (sforshee)
Launchpad Janitor (janitor) wrote :
Download full text (12.8 KiB)

This bug was fixed in the package linux - 3.13.0-46.75

---------------
linux (3.13.0-46.75) trusty; urgency=low

  [ Seth Forshee ]

  * Release Tracking Bug
    - LP: #1419963

  [ Andy Whitcroft ]

  * [Debian] arm64 -- build ubuntu drivers
    - LP: #1411284
  * hyper-v -- fix comment handing in /etc/network/interfaces
    - LP: #1413020

  [ Kamal Mostafa ]

  * [Packaging] force "dpkg-source -I -i" behavior

  [ Upstream Kernel Changes ]

  * Revert "[SCSI] mpt2sas: Remove phys on topology change."
    - LP: #1419838
  * Revert "[SCSI] mpt3sas: Remove phys on topology change"
    - LP: #1419838
  * Btrfs: fix transaction abortion when remounting btrfs from RW to RO
    - LP: #1411320
  * Btrfs: fix a crash of clone with inline extents's split
    - LP: #1413129
  * net/mlx4_en: Add VXLAN ndo calls to the PF net device ops too
    - LP: #1407760
  * KVM: x86: SYSENTER emulation is broken
    - LP: #1414651
    - CVE-2015-0239
  * powerpc/xmon: Fix another endiannes issue in RTAS call from xmon
    - LP: #1415919
  * ipv6: fix swapped ipv4/ipv6 mtu_reduced callbacks
    - LP: #1404558, #1419837
  * usb: gadget: at91_udc: move prepare clk into process context
    - LP: #1419837
  * KVM: x86: Fix far-jump to non-canonical check
    - LP: #1419837
  * x86/tls: Validate TLS entries to protect espfix
    - LP: #1419837
  * userns: Check euid no fsuid when establishing an unprivileged uid
    mapping
    - LP: #1419837
  * userns: Document what the invariant required for safe unprivileged
    mappings.
    - LP: #1419837
  * userns: Only allow the creator of the userns unprivileged mappings
    - LP: #1419837
  * x86_64, switch_to(): Load TLS descriptors before switching DS and ES
    - LP: #1419837
  * isofs: Fix infinite looping over CE entries
    - LP: #1419837
  * batman-adv: Calculate extra tail size based on queued fragments
    - LP: #1419837
  * KEYS: close race between key lookup and freeing
    - LP: #1419837
  * isofs: Fix unchecked printing of ER records
    - LP: #1419837
  * x86_64, vdso: Fix the vdso address randomization algorithm
    - LP: #1419837
  * groups: Consolidate the setgroups permission checks
    - LP: #1419837
  * userns: Don't allow setgroups until a gid mapping has been setablished
    - LP: #1419837
  * userns: Don't allow unprivileged creation of gid mappings
    - LP: #1419837
  * move d_rcu from overlapping d_child to overlapping d_alias
    - LP: #1419837
  * deal with deadlock in d_walk()
    - LP: #1419837
  * Linux 3.13.11-ckt14
    - LP: #1419837
  * gre: fix the inner mac header in nbma tunnel xmit path
    - LP: #1419838
  * netlink: Always copy on mmap TX.
    - LP: #1419838
  * netlink: Don't reorder loads/stores before marking mmap netlink frame
    as available
    - LP: #1419838
  * in6: fix conflict with glibc
    - LP: #1419838
  * tg3: tg3_disable_ints using uninitialized mailbox value to disable
    interrupts
    - LP: #1419838
  * batman-adv: Unify fragment size calculation
    - LP: #1419838
  * batman-adv: avoid NULL dereferences and fix if check
    - LP: #1419838
  * net: Fix stacked vlan offload features computation
    - LP: #1419838
  * net: Reset secmark when scrubbing packet
    - L...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers