Vivid update to 3.19.8-ckt7 stable release

Bug #1500493 reported by Luis Henriques on 2015-09-28
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Vivid
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.19.8-ckt7 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.19.8-ckt7 stable release:

x86/ldt: Make modify_ldt synchronous
x86/ldt: Correct LDT access in single stepping logic
x86/ldt: Correct FPU emulation access to LDT
md: flush ->event_work before stopping array.
ipv6: addrconf: validate new MTU before applying it
virtio-net: drop NETIF_F_FRAGLIST
RDS: verify the underlying transport exists before creating a connection
xen/gntdev: convert priv->lock to a mutex
xen/gntdevt: Fix race condition in gntdev_release()
PCI: Restore PCI_MSIX_FLAGS_BIRMASK definition
USB: qcserial/option: make AT URCs work for Sierra Wireless MC7305/MC7355
USB: qcserial: Add support for Dell Wireless 5809e 4G Modem
nfsd: Drop BUG_ON and ignore SECLABEL on absent filesystem
usb: chipidea: ehci_init_driver is intended to call one time
crypto: qat - Fix invalid synchronization between register/unregister sym algs
crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer
mfd: arizona: Fix initialisation of the PM runtime
xen-blkfront: don't add indirect pages to list when !feature_persistent
xen-blkback: replace work_pending with work_busy in purge_persistent_gnt()
usb: gadget: f_uac2: fix calculation of uac2->p_interval
hwrng: core - correct error check of kthread_run call
USB: sierra: add 1199:68AB device ID
regmap: regcache-rbtree: Clean new present bits on present bitmap resize
target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
rbd: fix copyup completion race
md/raid1: extend spinlock to protect raid1_end_read_request against inconsistencies
target: REPORT LUNS should return LUN 0 even for dynamic ACLs
MIPS: Fix sched_getaffinity with MT FPAFF enabled
MIPS: Malta: Don't reinitialise RTC
MIPS: do_mcheck: Fix kernel code dump with EVA
MIPS: show_stack: Fix stack trace with EVA
MIPS: Export get_c0_perfcount_int()
rtlwifi: rtl8723be: Add module parameter for MSI interrupts
MIPS: Flush RPS on kernel entry with EVA
usb: udc: core: add device_del() call to error pathway
xhci: fix off by one error in TRB DMA address boundary check
drivers/usb: Delete XHCI command timer if necessary
staging: vt6655: vnt_bss_info_changed check conf->beacon_rate is not NULL
dm: fix dm_merge_bvec regression on 32 bit systems
perf: Fix fasync handling on inherited events
drm/dp-mst: Remove debug WARN_ON
ALSA: fireworks/firewire-lib: add support for recent firmware quirk
mm, vmscan: Do not wait for page writeback for GFP_NOFS allocations
MIPS: Make set_pte() SMP safe.
ipc: modify message queue accounting to not take kernel data structures into account
ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
fsnotify: fix oops in fsnotify_clear_marks_by_group_flags()
KVM: x86: Use adjustment in guest cycles when handling MSR_IA32_TSC_ADJUST
x86/xen: build "Xen PV" APIC driver for domU as well
cpuset: use trialcs->mems_allowed as a temp variable
drm/dp/mst: Remove port after removing connector.
localmodconfig: Use Kbuild files too
dm thin metadata: delete btrees when releasing metadata snapshot
dm btree: add ref counting ops for the leaves of top level btrees
drm/radeon: add new OLAND pci id
libiscsi: Fix host busy blocking during connection teardown
libfc: Fix fc_exch_recv_req() error path
libfc: Fix fc_fcp_cleanup_each_cmd()
sd: Fix maximum I/O size for BLOCK_PC requests
EDAC, ppc4xx: Access mci->csrows array elements properly
crypto: caam - fix memory corruption in ahash_final_ctx
drm/vmwgfx: Fix execbuf locking issues
mm/hwpoison: fix page refcount of unknown non LRU page
ipc,sem: fix use after free on IPC_RMID after a task using same semaphore set exits
ipc/sem.c: update/correct memory barriers
MIPS: Fix seccomp syscall argument for MIPS64
x86/ldt: Further fix FPU emulation
drm/i915: Flag the execlists context object as dirty after every use
fnic: Use the local variable instead of I/O flag to acquire io_req_lock in fnic_queuecommand() to avoid deadloack
SCSI: Fix NULL pointer dereference in runtime PM
ALSA: usb-audio: Fix runtime PM unbalance
x86/xen: make CONFIG_XEN depend on CONFIG_X86_LOCAL_APIC
Input: gpio_keys_polled - request GPIO pin as input.
PCI: Don't use 64-bit bus addresses on PA-RISC
ALSA: usb: Add native DSD support for Gustard DAC-X20U
Add factory recertified Crucial M500s to blacklist
arm64: KVM: Fix host crash when injecting a fault into a 32bit guest
batman-adv: protect tt_local_entry from concurrent delete events
ip6_gre: release cached dst on tunnel removal
perf: Fix PERF_EVENT_IOC_PERIOD migration race
net: Fix RCU splat in af_key
bna: fix interrupts storm caused by erroneous packets
rds: fix an integer overflow test in rds_info_getsockopt()
fq_codel: explicitly reset flows in ->reset()
bridge: netlink: account for the IFLA_BRPORT_PROXYARP attribute size and policy
batman-adv: fix kernel crash due to missing NULL checks
fbdev: select versatile helpers for the integrator
rocker: free netdevice during netdevice removal
udp: fix dst races with multicast early demux
net: phy: add locking to phy_read_mmd_indirect()/phy_write_mmd_indirect()
sparc64: Fix userspace FPU register corruptions.
rtnetlink: verify IFLA_VF_INFO attributes before passing them to driver
net/tipc: initialize security state for new connection socket
net: pktgen: fix race between pktgen_thread_worker() and kthread_stop()
net: Fix skb csum races when peeking
ipv6: lock socket in ip6_datagram_connect()
Revert "sit: Add gro callbacks to sit_offload"
bonding: correct the MAC address for "follow" fail_over_mac policy
netlink: don't hold mutex in rcu callback when releasing mmapd ring
ext4: fix loss of delalloc extent info in ext4_zero_range()
ACPI, PCI: Penalize legacy IRQ used by ACPI SCI
Linux 3.19.8-ckt7

The following patches from 3.19.8-ckt7 were already applied to the Vivid kernel:

[3.19-stable only] Revert "dmaengine: pl330: Fix overflow when reporting residue in memcpy"
ipmi/powernv: Fix minor locking bug
net: Fix skb_set_peeked use-after-free bug

CVE References

Luis Henriques (henrix) on 2015-09-28
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: New → Invalid
Luis Henriques (henrix) on 2015-09-28
description: updated
Luis Henriques (henrix) on 2015-09-28
Changed in linux (Ubuntu Vivid):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (10.5 KiB)

This bug was fixed in the package linux - 3.19.0-31.36

---------------
linux (3.19.0-31.36) vivid; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1503703

  [ Andy Whitcroft ]

  * Revert "SAUCE: aufs3: mmap: Fix races in madvise_remove() and
    sys_msync()"
    - LP: #1503655

  [ Ben Hutchings ]

  * SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - LP: #1503655
    - CVE-2015-7312

linux (3.19.0-31.35) vivid; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1503005

  [ Ben Hutchings ]

  * SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - CVE-2015-7312

  [ Craig Magina ]

  * [Config] Add XGENE_EDAC, EDAC_SUPPORT and EDAC_ATOMIC_SCRUB
    - LP: #1494357

  [ John Johansen ]

  * SAUCE: (no-up) apparmor: fix mount not handling disconnected paths
    - LP: #1496430

  [ Laurent Dufour ]

  * SAUCE: powerpc/hvsi: Fix endianness issues in the HVSI driver
    - LP: #1499357

  [ Tim Gardner ]

  * [Config] CONFIG_RTC_DRV_XGENE=y for only arm64
    - LP: #1499869

  [ Upstream Kernel Changes ]

  * Revert "sit: Add gro callbacks to sit_offload"
    - LP: #1500493
  * ipmi/powernv: Fix minor locking bug
    - LP: #1493017
  * mmc: sdhci-pci: set the clear transfer mode register quirk for O2Micro
    - LP: #1472843
  * perf probe ppc: Fix symbol fixup issues due to ELF type
    - LP: #1485528
  * perf probe ppc: Use the right prefix when ignoring SyS symbols on ppc
    - LP: #1485528
  * perf probe ppc: Enable matching against dot symbols automatically
    - LP: #1485528
  * perf probe ppc64le: Fix ppc64 ABIv2 symbol decoding
    - LP: #1485528
  * perf probe ppc64le: Prefer symbol table lookup over DWARF
    - LP: #1485528
  * perf probe ppc64le: Fixup function entry if using kallsyms lookup
    - LP: #1485528
  * perf probe: Improve detection of file/function name in the probe
    pattern
    - LP: #1485528
  * perf probe: Ignore tail calls to probed functions
    - LP: #1485528
  * seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO
    - LP: #1496073
  * EDAC: Cleanup atomic_scrub mess
    - LP: #1494357
  * arm64: Enable EDAC on ARM64
    - LP: #1494357
  * MAINTAINERS: Add entry for APM X-Gene SoC EDAC driver
    - LP: #1494357
  * Documentation: Add documentation for the APM X-Gene SoC EDAC DTS
    binding
    - LP: #1494357
  * EDAC: Add APM X-Gene SoC EDAC driver
    - LP: #1494357
  * arm64: Add APM X-Gene SoC EDAC DTS entries
    - LP: #1494357
  * EDAC, edac_stub: Drop arch-specific include
    - LP: #1494357
  * NVMe: Fix blk-mq hot cpu notification
    - LP: #1498778
  * blk-mq: Shared tag enhancements
    - LP: #1498778
  * blk-mq: avoid access hctx->tags->cpumask before allocation
    - LP: #1498778
  * x86/ldt: Make modify_ldt synchronous
    - LP: #1500493
  * x86/ldt: Correct LDT access in single stepping logic
    - LP: #1500493
  * x86/ldt: Correct FPU emulation access to LDT
    - LP: #1500493
  * md: flush ->event_work before stopping array.
    - LP: #1500493
  * ipv6: addrconf: validate new MTU before applying it
    - LP: #1500493
  * virtio-net: drop NETIF_F_FRAGLIST
    - LP: #1500493
  * RDS: verify the underlying transport exists bef...

Changed in linux (Ubuntu Vivid):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers