Trusty update to 3.13.11-ckt18 stable release

Bug #1441284 reported by Brad Figg on 2015-04-07
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Trusty
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.13.11-ckt18 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.13.11-ckt18 stable release:
                quota: Store maximum space limit in bytes
                ip: zero sockaddr returned on error queue
                net: rps: fix cpu unplug
                ipv6: stop sending PTB packets for MTU < 1280
                netxen: fix netxen_nic_poll() logic
                udp_diag: Fix socket skipping within chain
                ping: Fix race in free in receive path
                bnx2x: fix napi poll return value for repoll
                net: don't OOPS on socket aio
                bridge: dont send notification when skb->len == 0 in rtnl_bridge_notify
                ipv4: tcp: get rid of ugly unicast_sock
                ppp: deflate: never return len larger than output buffer
                net: sctp: fix passing wrong parameter header to param_type2af in sctp_process_param
                ARM: pxa: add regulator_has_full_constraints to corgi board file
                ARM: pxa: add regulator_has_full_constraints to poodle board file
                ARM: pxa: add regulator_has_full_constraints to spitz board file
                hx4700: regulator: declare full constraints
                HID: input: fix confusion on conflicting mappings
                HID: fixup the conflicting keyboard mappings quirk
                megaraid_sas: disable interrupt_mask before enabling hardware interrupts
                PCI: Generate uppercase hex for modalias var in uevent
                usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN
                tty/serial: at91: enable peripheral clock before accessing I/O registers
                tty/serial: at91: fix error handling in atmel_serial_probe()
                axonram: Fix bug in direct_access
                ksoftirqd: Enable IRQs and call cond_resched() before poking RCU
                TPM: Add new TPMs to the tail of the list to prevent inadvertent change of dev
                char: tpm: Add missing error check for devm_kzalloc
                tpm_tis: verify interrupt during init
                tpm: Fix NULL return in tpm_ibmvtpm_get_desired_dma
                tpm/tpm_i2c_stm_st33: Fix potential bug in tpm_stm_i2c_send
                tpm/tpm_i2c_stm_st33: Add status check when reading data on the FIFO
                mmc: sdhci-pxav3: fix unbalanced clock issues during probe
                iwlwifi: mvm: validate tid and sta_id in ba_notif
                power: bq24190: Fix ignored supplicants
                ARM: DRA7: hwmod: Fix boot crash with DEBUG_LL enabled on UART3
                Bluetooth: ath3k: Add support of AR3012 bluetooth 13d3:3423 device
                cfq-iosched: fix incorrect filing of rt async cfqq
                smack: fix possible use after frees in task_security() callers
                xfs: ensure buffer types are set correctly
                xfs: inode unlink does not set AGI buffer type
                xfs: set buf types when converting extent formats
                xfs: set superblock buffer type correctly
                btrfs: set proper message level for skinny metadata
                KVM: s390: base hrtimer on a monotonic clock
                PCI: Fix infinite loop with ROM image of size 0
                USB: cp210x: add ID for RUGGEDCOM USB Serial Console
                clk: zynq: Force CPU_2X clock to be ungated
                mmc: sdhci-pxav3: Remove checks for mandatory host clock
                mmc: sdhci-pxav3: fix race between runtime pm and irq
                power_supply: 88pm860x: Fix leaked power supply on probe fail
                staging: comedi: comedi_compat32.c: fix COMEDI_CMD copy back
                mmc: sdhci-pxav3: fix setting of pdata->clk_delay_cycles
                ARM: 8284/1: sa1100: clear RCSR_SMR on resume
                usb: musb: omap2plus bus glue needs USB host support
                cdc-acm: add sanity checks
                USB: add flag for HCDs that can't receive wakeup requests (isp1760-hcd)
                USB: fix use-after-free bug in usb_hcd_unlink_urb()
                iwlwifi: mvm: always use mac color zero
                iwlwifi: pcie: disable the SCD_BASE_ADDR when we resume from WoWLAN
                vt: provide notifications on selection changes
                tty: Prevent untrappable signals from malicious program
                cpufreq: Set cpufreq_cpu_data to NULL before putting kobject
                [media] lmedm04: Fix usb_submit_urb BOGUS urb xfer, pipe 1 != type 3 in interrupt urb
                mei: mask interrupt set bit on clean reset bit
                mei: me: release hw from reset only during the reset flow
                MIPS: KVM: Deliver guest interrupts after local_irq_disable()
                KVM: MIPS: Don't leak FPU/DSP to guest
                ALSA: hda - Add the pin fixup for HP Envy TS bass speaker
                ALSA: hda - Set up GPIO for Toshiba Satellite S50D
                xen/manage: Fix USB interaction issues when resuming
                drm/i915: Correct the IOSF Dev_FN field for IOSF transfers
                cfq-iosched: handle failure of cfq group allocation
                tracing: Fix unmapping loop in tracing_mark_write
                fsnotify: fix handling of renames in audit
                drm/radeon: workaround for CP HW bug on CIK
                drm/radeon: only enable kv/kb dpm interrupts once v3
                NFSv4.1: Fix a kfree() of uninitialised pointers in decode_cb_sequence_args
                cpufreq: speedstep-smi: enable interrupts when waiting
                mm/hugetlb: pmd_huge() returns true for non-present hugepage
                mm: cleanup follow_page_mask()
                mm/hugetlb: take page table lock in follow_huge_pmd()
                mm/hugetlb: fix getting refcount 0 page in hugetlb_fault()
                mm/hugetlb: add migration/hwpoisoned entry check in hugetlb_change_protection
                mm/hugetlb: add migration entry check in __unmap_hugepage_range
                mm: softdirty: unmapped addresses between VMAs are clean
                proc/pagemap: walk page tables under pte lock
                mm: when stealing freepages, also take pages created by splitting buddy page
                mm/mmap.c: fix arithmetic overflow in __vm_enough_memory()
                mm/nommu.c: fix arithmetic overflow in __vm_enough_memory()
                iscsi-target: Drop problematic active_ts_list usage
                target: Fix PR_APTPL_BUF_LEN buffer size limitation
                mm/compaction: fix wrong order check in compact_finished()
                mm/memory.c: actually remap enough memory
                mm: hwpoison: drop lru_add_drain_all() in __soft_offline_page()
                ALSA: hda - enable mute led quirk for one more hp machine.
                ARC: fix page address calculation if PAGE_OFFSET != LINUX_LINK_BASE
                drm/radeon/dp: Set EDP_CONFIGURATION_SET for bridge chips if necessary
                drm/radeon: fix voltage setup on hawaii
                ALSA: hdspm - Constrain periods to 2 on older cards
                jffs2: fix handling of corrupted summary length
                dm mirror: do not degrade the mirror on discard error
                dm io: reject unsupported DISCARD requests with EOPNOTSUPP
                target: Add missing WRITE_SAME end-of-device sanity check
                target: Check for LBA + sectors wrap-around in sbc_parse_cdb
                Btrfs: fix fsync data loss after adding hard link to inode
                Added Little Endian support to vtpm module
                fixed invalid assignment of 64bit mask to host dma_boundary for scatter gather segment boundary limit.
                sg: fix read() error reporting
                IB/qib: Do not write EEPROM
                md/raid5: Fix livelock when array is both resyncing and degraded.
                dm: fix a race condition in dm_get_md
                dm snapshot: fix a possible invalid memory access on unload
                cpufreq: s3c: remove incorrect __init annotations
                libceph: assert both regular and lingering lists in __remove_osd()
                libceph: change from BUG to WARN for __remove_osd() asserts
                libceph: fix double __remove_osd() problem
                MIPS: Export FP functions used by lose_fpu(1) for KVM
                kdb: fix incorrect counts in KDB summary command output
                blk-throttle: check stats_cpu before reading it from sysfs
                procfs: fix race between symlink removals and traversals
                autofs4 copy_dev_ioctl(): keep the value of ->size we'd used for allocation
                pktgen: fix UDP checksum computation
                ipv6: fix ipv6_cow_metrics for non DST_HOST case
                clk-gate: fix bit # check in clk_register_gate()
                ALSA: off by one bug in snd_riptide_joystick_probe()
                ath5k: fix spontaneus AR5312 freezes
                pinctrl: pinctrl-imx: don't use invalid value of conf_reg
                ALSA: hda - Add one more node in the EAPD supporting candidate list
                ALSA: hda - Add pin configs for ASUS mobo with IDT 92HD73XX codec
                drm/i915/bdw: PCI IDs ending in 0xb are ULT.
                xfs: Fix quota type in quota structures when reusing quota file
                gpiolib: of: allow of_gpiochip_find_and_xlate to find more than one chip per node
                gpio: tps65912: fix wrong container_of arguments
                ALSA: pcm: Don't leave PREPARED state after draining
                metag: Fix KSTK_EIP() and KSTK_ESP() macros
                md/raid1: fix read balance when a drive is write-mostly.
                drm/radeon: use drm_mode_vrefresh() rather than mode->vrefresh
                drm/radeon: fix 1 RB harvest config setup for TN/RL
                arm64: compat Fix siginfo_t -> compat_siginfo_t conversion on big endian
                nilfs2: fix potential memory overrun on inode
                HID: i2c-hid: Limit reads to wMaxInputLength bytes for input events
                Linux 3.13.11-ckt18

CVE References

Brad Figg (brad-figg) on 2015-04-07
tags: added: kernel-stable-tracking-bug
Brad Figg (brad-figg) on 2015-04-07
description: updated
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (13.4 KiB)

This bug was fixed in the package linux - 3.13.0-51.84

---------------
linux (3.13.0-51.84) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1444141
  * Merged back Ubuntu-3.13.0-49.83 security release

linux (3.13.0-50.82) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1442285

  [ Andy Whitcroft ]

  * [Config] CONFIG_DEFAULT_MMAP_MIN_ADDR needs to match on armhf and arm64
    - LP: #1418140

  [ Chris J Arges ]

  * [Config] CONFIG_PCIEASPM_DEBUG=y
    - LP: #1398544

  [ Upstream Kernel Changes ]

  * KEYS: request_key() should reget expired keys rather than give
    EKEYEXPIRED
    - LP: #1124250
  * audit: correctly record file names with different path name types
    - LP: #1439441
  * KVM: x86: Check for nested events if there is an injectable interrupt
    - LP: #1413540
  * be2iscsi: fix memory leak in error path
    - LP: #1440156
  * block: remove old blk_iopoll_enabled variable
    - LP: #1440156
  * be2iscsi: Fix handling timed out MBX completion from FW
    - LP: #1440156
  * be2iscsi: Fix doorbell format for EQ/CQ/RQ s per SLI spec.
    - LP: #1440156
  * be2iscsi: Fix the session cleanup when reboot/shutdown happens
    - LP: #1440156
  * be2iscsi: Fix scsi_cmnd leakage in driver.
    - LP: #1440156
  * be2iscsi : Fix DMA Out of SW-IOMMU space error
    - LP: #1440156
  * be2iscsi: Fix retrieving MCCQ_WRB in non-embedded Mbox path
    - LP: #1440156
  * be2iscsi: Fix exposing Host in sysfs after adapter initialization is
    complete
    - LP: #1440156
  * be2iscsi: Fix interrupt Coalescing mechanism.
    - LP: #1440156
  * be2iscsi: Fix TCP parameters while connection offloading.
    - LP: #1440156
  * be2iscsi: Fix memory corruption in MBX path
    - LP: #1440156
  * be2iscsi: Fix destroy MCC-CQ before MCC-EQ is destroyed
    - LP: #1440156
  * be2iscsi: add an missing goto in error path
    - LP: #1440156
  * be2iscsi: remove potential junk pointer free
    - LP: #1440156
  * be2iscsi: Fix memory leak in mgmt_set_ip()
    - LP: #1440156
  * be2iscsi: Fix the sparse warning introduced in previous submission
    - LP: #1440156
  * be2iscsi: Fix updating the boot enteries in sysfs
    - LP: #1440156
  * be2iscsi: Fix processing CQE before connection resources are freed
    - LP: #1440156
  * be2iscsi : Fix kernel panic during reboot/shutdown
    - LP: #1440156
  * fixed invalid assignment of 64bit mask to host dma_boundary for scatter
    gather segment boundary limit.
    - LP: #1440156
  * quota: Store maximum space limit in bytes
    - LP: #1441284
  * ip: zero sockaddr returned on error queue
    - LP: #1441284
  * net: rps: fix cpu unplug
    - LP: #1441284
  * ipv6: stop sending PTB packets for MTU < 1280
    - LP: #1441284
  * netxen: fix netxen_nic_poll() logic
    - LP: #1441284
  * udp_diag: Fix socket skipping within chain
    - LP: #1441284
  * ping: Fix race in free in receive path
    - LP: #1441284
  * bnx2x: fix napi poll return value for repoll
    - LP: #1441284
  * net: don't OOPS on socket aio
    - LP: #1441284
  * bridge: dont send notification when skb->len == 0 in rtnl_bridge_notify
    - LP: #1441284
  * ipv4: tcp: get rid of ugly unicast_sock
...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers