Trusty update to 3.13.11-ckt18 stable release

Bug #1441284 reported by Brad Figg on 2015-04-07
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.13.11-ckt18 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches are in the 3.13.11-ckt18 stable release:
                quota: Store maximum space limit in bytes
                ip: zero sockaddr returned on error queue
                net: rps: fix cpu unplug
                ipv6: stop sending PTB packets for MTU < 1280
                netxen: fix netxen_nic_poll() logic
                udp_diag: Fix socket skipping within chain
                ping: Fix race in free in receive path
                bnx2x: fix napi poll return value for repoll
                net: don't OOPS on socket aio
                bridge: dont send notification when skb->len == 0 in rtnl_bridge_notify
                ipv4: tcp: get rid of ugly unicast_sock
                ppp: deflate: never return len larger than output buffer
                net: sctp: fix passing wrong parameter header to param_type2af in sctp_process_param
                ARM: pxa: add regulator_has_full_constraints to corgi board file
                ARM: pxa: add regulator_has_full_constraints to poodle board file
                ARM: pxa: add regulator_has_full_constraints to spitz board file
                hx4700: regulator: declare full constraints
                HID: input: fix confusion on conflicting mappings
                HID: fixup the conflicting keyboard mappings quirk
                megaraid_sas: disable interrupt_mask before enabling hardware interrupts
                PCI: Generate uppercase hex for modalias var in uevent
                usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN
                tty/serial: at91: enable peripheral clock before accessing I/O registers
                tty/serial: at91: fix error handling in atmel_serial_probe()
                axonram: Fix bug in direct_access
                ksoftirqd: Enable IRQs and call cond_resched() before poking RCU
                TPM: Add new TPMs to the tail of the list to prevent inadvertent change of dev
                char: tpm: Add missing error check for devm_kzalloc
                tpm_tis: verify interrupt during init
                tpm: Fix NULL return in tpm_ibmvtpm_get_desired_dma
                tpm/tpm_i2c_stm_st33: Fix potential bug in tpm_stm_i2c_send
                tpm/tpm_i2c_stm_st33: Add status check when reading data on the FIFO
                mmc: sdhci-pxav3: fix unbalanced clock issues during probe
                iwlwifi: mvm: validate tid and sta_id in ba_notif
                power: bq24190: Fix ignored supplicants
                ARM: DRA7: hwmod: Fix boot crash with DEBUG_LL enabled on UART3
                Bluetooth: ath3k: Add support of AR3012 bluetooth 13d3:3423 device
                cfq-iosched: fix incorrect filing of rt async cfqq
                smack: fix possible use after frees in task_security() callers
                xfs: ensure buffer types are set correctly
                xfs: inode unlink does not set AGI buffer type
                xfs: set buf types when converting extent formats
                xfs: set superblock buffer type correctly
                btrfs: set proper message level for skinny metadata
                KVM: s390: base hrtimer on a monotonic clock
                PCI: Fix infinite loop with ROM image of size 0
                USB: cp210x: add ID for RUGGEDCOM USB Serial Console
                clk: zynq: Force CPU_2X clock to be ungated
                mmc: sdhci-pxav3: Remove checks for mandatory host clock
                mmc: sdhci-pxav3: fix race between runtime pm and irq
                power_supply: 88pm860x: Fix leaked power supply on probe fail
                staging: comedi: comedi_compat32.c: fix COMEDI_CMD copy back
                mmc: sdhci-pxav3: fix setting of pdata->clk_delay_cycles
                ARM: 8284/1: sa1100: clear RCSR_SMR on resume
                usb: musb: omap2plus bus glue needs USB host support
                cdc-acm: add sanity checks
                USB: add flag for HCDs that can't receive wakeup requests (isp1760-hcd)
                USB: fix use-after-free bug in usb_hcd_unlink_urb()
                iwlwifi: mvm: always use mac color zero
                iwlwifi: pcie: disable the SCD_BASE_ADDR when we resume from WoWLAN
                vt: provide notifications on selection changes
                tty: Prevent untrappable signals from malicious program
                cpufreq: Set cpufreq_cpu_data to NULL before putting kobject
                [media] lmedm04: Fix usb_submit_urb BOGUS urb xfer, pipe 1 != type 3 in interrupt urb
                mei: mask interrupt set bit on clean reset bit
                mei: me: release hw from reset only during the reset flow
                MIPS: KVM: Deliver guest interrupts after local_irq_disable()
                KVM: MIPS: Don't leak FPU/DSP to guest
                ALSA: hda - Add the pin fixup for HP Envy TS bass speaker
                ALSA: hda - Set up GPIO for Toshiba Satellite S50D
                xen/manage: Fix USB interaction issues when resuming
                drm/i915: Correct the IOSF Dev_FN field for IOSF transfers
                cfq-iosched: handle failure of cfq group allocation
                tracing: Fix unmapping loop in tracing_mark_write
                fsnotify: fix handling of renames in audit
                drm/radeon: workaround for CP HW bug on CIK
                drm/radeon: only enable kv/kb dpm interrupts once v3
                NFSv4.1: Fix a kfree() of uninitialised pointers in decode_cb_sequence_args
                cpufreq: speedstep-smi: enable interrupts when waiting
                mm/hugetlb: pmd_huge() returns true for non-present hugepage
                mm: cleanup follow_page_mask()
                mm/hugetlb: take page table lock in follow_huge_pmd()
                mm/hugetlb: fix getting refcount 0 page in hugetlb_fault()
                mm/hugetlb: add migration/hwpoisoned entry check in hugetlb_change_protection
                mm/hugetlb: add migration entry check in __unmap_hugepage_range
                mm: softdirty: unmapped addresses between VMAs are clean
                proc/pagemap: walk page tables under pte lock
                mm: when stealing freepages, also take pages created by splitting buddy page
                mm/mmap.c: fix arithmetic overflow in __vm_enough_memory()
                mm/nommu.c: fix arithmetic overflow in __vm_enough_memory()
                iscsi-target: Drop problematic active_ts_list usage
                target: Fix PR_APTPL_BUF_LEN buffer size limitation
                mm/compaction: fix wrong order check in compact_finished()
                mm/memory.c: actually remap enough memory
                mm: hwpoison: drop lru_add_drain_all() in __soft_offline_page()
                ALSA: hda - enable mute led quirk for one more hp machine.
                ARC: fix page address calculation if PAGE_OFFSET != LINUX_LINK_BASE
                drm/radeon/dp: Set EDP_CONFIGURATION_SET for bridge chips if necessary
                drm/radeon: fix voltage setup on hawaii
                ALSA: hdspm - Constrain periods to 2 on older cards
                jffs2: fix handling of corrupted summary length
                dm mirror: do not degrade the mirror on discard error
                dm io: reject unsupported DISCARD requests with EOPNOTSUPP
                target: Add missing WRITE_SAME end-of-device sanity check
                target: Check for LBA + sectors wrap-around in sbc_parse_cdb
                Btrfs: fix fsync data loss after adding hard link to inode
                Added Little Endian support to vtpm module
                fixed invalid assignment of 64bit mask to host dma_boundary for scatter gather segment boundary limit.
                sg: fix read() error reporting
                IB/qib: Do not write EEPROM
                md/raid5: Fix livelock when array is both resyncing and degraded.
                dm: fix a race condition in dm_get_md
                dm snapshot: fix a possible invalid memory access on unload
                cpufreq: s3c: remove incorrect __init annotations
                libceph: assert both regular and lingering lists in __remove_osd()
                libceph: change from BUG to WARN for __remove_osd() asserts
                libceph: fix double __remove_osd() problem
                MIPS: Export FP functions used by lose_fpu(1) for KVM
                kdb: fix incorrect counts in KDB summary command output
                blk-throttle: check stats_cpu before reading it from sysfs
                procfs: fix race between symlink removals and traversals
                autofs4 copy_dev_ioctl(): keep the value of ->size we'd used for allocation
                pktgen: fix UDP checksum computation
                ipv6: fix ipv6_cow_metrics for non DST_HOST case
                clk-gate: fix bit # check in clk_register_gate()
                ALSA: off by one bug in snd_riptide_joystick_probe()
                ath5k: fix spontaneus AR5312 freezes
                pinctrl: pinctrl-imx: don't use invalid value of conf_reg
                ALSA: hda - Add one more node in the EAPD supporting candidate list
                ALSA: hda - Add pin configs for ASUS mobo with IDT 92HD73XX codec
                drm/i915/bdw: PCI IDs ending in 0xb are ULT.
                xfs: Fix quota type in quota structures when reusing quota file
                gpiolib: of: allow of_gpiochip_find_and_xlate to find more than one chip per node
                gpio: tps65912: fix wrong container_of arguments
                ALSA: pcm: Don't leave PREPARED state after draining
                metag: Fix KSTK_EIP() and KSTK_ESP() macros
                md/raid1: fix read balance when a drive is write-mostly.
                drm/radeon: use drm_mode_vrefresh() rather than mode->vrefresh
                drm/radeon: fix 1 RB harvest config setup for TN/RL
                arm64: compat Fix siginfo_t -> compat_siginfo_t conversion on big endian
                nilfs2: fix potential memory overrun on inode
                HID: i2c-hid: Limit reads to wMaxInputLength bytes for input events
                Linux 3.13.11-ckt18

CVE References

Brad Figg (brad-figg) on 2015-04-07
tags: added: kernel-stable-tracking-bug
Brad Figg (brad-figg) on 2015-04-07
description: updated
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (13.4 KiB)

This bug was fixed in the package linux - 3.13.0-51.84

linux (3.13.0-51.84) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1444141
  * Merged back Ubuntu-3.13.0-49.83 security release

linux (3.13.0-50.82) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1442285

  [ Andy Whitcroft ]

  * [Config] CONFIG_DEFAULT_MMAP_MIN_ADDR needs to match on armhf and arm64
    - LP: #1418140

  [ Chris J Arges ]

    - LP: #1398544

  [ Upstream Kernel Changes ]

  * KEYS: request_key() should reget expired keys rather than give
    - LP: #1124250
  * audit: correctly record file names with different path name types
    - LP: #1439441
  * KVM: x86: Check for nested events if there is an injectable interrupt
    - LP: #1413540
  * be2iscsi: fix memory leak in error path
    - LP: #1440156
  * block: remove old blk_iopoll_enabled variable
    - LP: #1440156
  * be2iscsi: Fix handling timed out MBX completion from FW
    - LP: #1440156
  * be2iscsi: Fix doorbell format for EQ/CQ/RQ s per SLI spec.
    - LP: #1440156
  * be2iscsi: Fix the session cleanup when reboot/shutdown happens
    - LP: #1440156
  * be2iscsi: Fix scsi_cmnd leakage in driver.
    - LP: #1440156
  * be2iscsi : Fix DMA Out of SW-IOMMU space error
    - LP: #1440156
  * be2iscsi: Fix retrieving MCCQ_WRB in non-embedded Mbox path
    - LP: #1440156
  * be2iscsi: Fix exposing Host in sysfs after adapter initialization is
    - LP: #1440156
  * be2iscsi: Fix interrupt Coalescing mechanism.
    - LP: #1440156
  * be2iscsi: Fix TCP parameters while connection offloading.
    - LP: #1440156
  * be2iscsi: Fix memory corruption in MBX path
    - LP: #1440156
  * be2iscsi: Fix destroy MCC-CQ before MCC-EQ is destroyed
    - LP: #1440156
  * be2iscsi: add an missing goto in error path
    - LP: #1440156
  * be2iscsi: remove potential junk pointer free
    - LP: #1440156
  * be2iscsi: Fix memory leak in mgmt_set_ip()
    - LP: #1440156
  * be2iscsi: Fix the sparse warning introduced in previous submission
    - LP: #1440156
  * be2iscsi: Fix updating the boot enteries in sysfs
    - LP: #1440156
  * be2iscsi: Fix processing CQE before connection resources are freed
    - LP: #1440156
  * be2iscsi : Fix kernel panic during reboot/shutdown
    - LP: #1440156
  * fixed invalid assignment of 64bit mask to host dma_boundary for scatter
    gather segment boundary limit.
    - LP: #1440156
  * quota: Store maximum space limit in bytes
    - LP: #1441284
  * ip: zero sockaddr returned on error queue
    - LP: #1441284
  * net: rps: fix cpu unplug
    - LP: #1441284
  * ipv6: stop sending PTB packets for MTU < 1280
    - LP: #1441284
  * netxen: fix netxen_nic_poll() logic
    - LP: #1441284
  * udp_diag: Fix socket skipping within chain
    - LP: #1441284
  * ping: Fix race in free in receive path
    - LP: #1441284
  * bnx2x: fix napi poll return value for repoll
    - LP: #1441284
  * net: don't OOPS on socket aio
    - LP: #1441284
  * bridge: dont send notification when skb->len == 0 in rtnl_bridge_notify
    - LP: #1441284
  * ipv4: tcp: get rid of ugly unicast_sock

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers