Vivid update to 3.19.8-ckt7 stable release

Bug #1500493 reported by Luis Henriques on 2015-09-28
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.19.8-ckt7 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches are in the 3.19.8-ckt7 stable release:

x86/ldt: Make modify_ldt synchronous
x86/ldt: Correct LDT access in single stepping logic
x86/ldt: Correct FPU emulation access to LDT
md: flush ->event_work before stopping array.
ipv6: addrconf: validate new MTU before applying it
virtio-net: drop NETIF_F_FRAGLIST
RDS: verify the underlying transport exists before creating a connection
xen/gntdev: convert priv->lock to a mutex
xen/gntdevt: Fix race condition in gntdev_release()
PCI: Restore PCI_MSIX_FLAGS_BIRMASK definition
USB: qcserial/option: make AT URCs work for Sierra Wireless MC7305/MC7355
USB: qcserial: Add support for Dell Wireless 5809e 4G Modem
nfsd: Drop BUG_ON and ignore SECLABEL on absent filesystem
usb: chipidea: ehci_init_driver is intended to call one time
crypto: qat - Fix invalid synchronization between register/unregister sym algs
crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer
mfd: arizona: Fix initialisation of the PM runtime
xen-blkfront: don't add indirect pages to list when !feature_persistent
xen-blkback: replace work_pending with work_busy in purge_persistent_gnt()
usb: gadget: f_uac2: fix calculation of uac2->p_interval
hwrng: core - correct error check of kthread_run call
USB: sierra: add 1199:68AB device ID
regmap: regcache-rbtree: Clean new present bits on present bitmap resize
target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
rbd: fix copyup completion race
md/raid1: extend spinlock to protect raid1_end_read_request against inconsistencies
target: REPORT LUNS should return LUN 0 even for dynamic ACLs
MIPS: Fix sched_getaffinity with MT FPAFF enabled
MIPS: Malta: Don't reinitialise RTC
MIPS: do_mcheck: Fix kernel code dump with EVA
MIPS: show_stack: Fix stack trace with EVA
MIPS: Export get_c0_perfcount_int()
rtlwifi: rtl8723be: Add module parameter for MSI interrupts
MIPS: Flush RPS on kernel entry with EVA
usb: udc: core: add device_del() call to error pathway
xhci: fix off by one error in TRB DMA address boundary check
drivers/usb: Delete XHCI command timer if necessary
staging: vt6655: vnt_bss_info_changed check conf->beacon_rate is not NULL
dm: fix dm_merge_bvec regression on 32 bit systems
perf: Fix fasync handling on inherited events
drm/dp-mst: Remove debug WARN_ON
ALSA: fireworks/firewire-lib: add support for recent firmware quirk
mm, vmscan: Do not wait for page writeback for GFP_NOFS allocations
MIPS: Make set_pte() SMP safe.
ipc: modify message queue accounting to not take kernel data structures into account
ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
fsnotify: fix oops in fsnotify_clear_marks_by_group_flags()
KVM: x86: Use adjustment in guest cycles when handling MSR_IA32_TSC_ADJUST
x86/xen: build "Xen PV" APIC driver for domU as well
cpuset: use trialcs->mems_allowed as a temp variable
drm/dp/mst: Remove port after removing connector.
localmodconfig: Use Kbuild files too
dm thin metadata: delete btrees when releasing metadata snapshot
dm btree: add ref counting ops for the leaves of top level btrees
drm/radeon: add new OLAND pci id
libiscsi: Fix host busy blocking during connection teardown
libfc: Fix fc_exch_recv_req() error path
libfc: Fix fc_fcp_cleanup_each_cmd()
sd: Fix maximum I/O size for BLOCK_PC requests
EDAC, ppc4xx: Access mci->csrows array elements properly
crypto: caam - fix memory corruption in ahash_final_ctx
drm/vmwgfx: Fix execbuf locking issues
mm/hwpoison: fix page refcount of unknown non LRU page
ipc,sem: fix use after free on IPC_RMID after a task using same semaphore set exits
ipc/sem.c: update/correct memory barriers
MIPS: Fix seccomp syscall argument for MIPS64
x86/ldt: Further fix FPU emulation
drm/i915: Flag the execlists context object as dirty after every use
fnic: Use the local variable instead of I/O flag to acquire io_req_lock in fnic_queuecommand() to avoid deadloack
SCSI: Fix NULL pointer dereference in runtime PM
ALSA: usb-audio: Fix runtime PM unbalance
x86/xen: make CONFIG_XEN depend on CONFIG_X86_LOCAL_APIC
Input: gpio_keys_polled - request GPIO pin as input.
PCI: Don't use 64-bit bus addresses on PA-RISC
ALSA: usb: Add native DSD support for Gustard DAC-X20U
Add factory recertified Crucial M500s to blacklist
arm64: KVM: Fix host crash when injecting a fault into a 32bit guest
batman-adv: protect tt_local_entry from concurrent delete events
ip6_gre: release cached dst on tunnel removal
perf: Fix PERF_EVENT_IOC_PERIOD migration race
net: Fix RCU splat in af_key
bna: fix interrupts storm caused by erroneous packets
rds: fix an integer overflow test in rds_info_getsockopt()
fq_codel: explicitly reset flows in ->reset()
bridge: netlink: account for the IFLA_BRPORT_PROXYARP attribute size and policy
batman-adv: fix kernel crash due to missing NULL checks
fbdev: select versatile helpers for the integrator
rocker: free netdevice during netdevice removal
udp: fix dst races with multicast early demux
net: phy: add locking to phy_read_mmd_indirect()/phy_write_mmd_indirect()
sparc64: Fix userspace FPU register corruptions.
rtnetlink: verify IFLA_VF_INFO attributes before passing them to driver
net/tipc: initialize security state for new connection socket
net: pktgen: fix race between pktgen_thread_worker() and kthread_stop()
net: Fix skb csum races when peeking
ipv6: lock socket in ip6_datagram_connect()
Revert "sit: Add gro callbacks to sit_offload"
bonding: correct the MAC address for "follow" fail_over_mac policy
netlink: don't hold mutex in rcu callback when releasing mmapd ring
ext4: fix loss of delalloc extent info in ext4_zero_range()
ACPI, PCI: Penalize legacy IRQ used by ACPI SCI
Linux 3.19.8-ckt7

The following patches from 3.19.8-ckt7 were already applied to the Vivid kernel:

[3.19-stable only] Revert "dmaengine: pl330: Fix overflow when reporting residue in memcpy"
ipmi/powernv: Fix minor locking bug
net: Fix skb_set_peeked use-after-free bug

CVE References

Luis Henriques (henrix) on 2015-09-28
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: New → Invalid
Luis Henriques (henrix) on 2015-09-28
description: updated
Luis Henriques (henrix) on 2015-09-28
Changed in linux (Ubuntu Vivid):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (10.5 KiB)

This bug was fixed in the package linux - 3.19.0-31.36

linux (3.19.0-31.36) vivid; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1503703

  [ Andy Whitcroft ]

  * Revert "SAUCE: aufs3: mmap: Fix races in madvise_remove() and
    - LP: #1503655

  [ Ben Hutchings ]

  * SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - LP: #1503655
    - CVE-2015-7312

linux (3.19.0-31.35) vivid; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1503005

  [ Ben Hutchings ]

  * SAUCE: aufs3: mmap: Fix races in madvise_remove() and sys_msync()
    - CVE-2015-7312

  [ Craig Magina ]

    - LP: #1494357

  [ John Johansen ]

  * SAUCE: (no-up) apparmor: fix mount not handling disconnected paths
    - LP: #1496430

  [ Laurent Dufour ]

  * SAUCE: powerpc/hvsi: Fix endianness issues in the HVSI driver
    - LP: #1499357

  [ Tim Gardner ]

  * [Config] CONFIG_RTC_DRV_XGENE=y for only arm64
    - LP: #1499869

  [ Upstream Kernel Changes ]

  * Revert "sit: Add gro callbacks to sit_offload"
    - LP: #1500493
  * ipmi/powernv: Fix minor locking bug
    - LP: #1493017
  * mmc: sdhci-pci: set the clear transfer mode register quirk for O2Micro
    - LP: #1472843
  * perf probe ppc: Fix symbol fixup issues due to ELF type
    - LP: #1485528
  * perf probe ppc: Use the right prefix when ignoring SyS symbols on ppc
    - LP: #1485528
  * perf probe ppc: Enable matching against dot symbols automatically
    - LP: #1485528
  * perf probe ppc64le: Fix ppc64 ABIv2 symbol decoding
    - LP: #1485528
  * perf probe ppc64le: Prefer symbol table lookup over DWARF
    - LP: #1485528
  * perf probe ppc64le: Fixup function entry if using kallsyms lookup
    - LP: #1485528
  * perf probe: Improve detection of file/function name in the probe
    - LP: #1485528
  * perf probe: Ignore tail calls to probed functions
    - LP: #1485528
  * seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO
    - LP: #1496073
  * EDAC: Cleanup atomic_scrub mess
    - LP: #1494357
  * arm64: Enable EDAC on ARM64
    - LP: #1494357
  * MAINTAINERS: Add entry for APM X-Gene SoC EDAC driver
    - LP: #1494357
  * Documentation: Add documentation for the APM X-Gene SoC EDAC DTS
    - LP: #1494357
  * EDAC: Add APM X-Gene SoC EDAC driver
    - LP: #1494357
  * arm64: Add APM X-Gene SoC EDAC DTS entries
    - LP: #1494357
  * EDAC, edac_stub: Drop arch-specific include
    - LP: #1494357
  * NVMe: Fix blk-mq hot cpu notification
    - LP: #1498778
  * blk-mq: Shared tag enhancements
    - LP: #1498778
  * blk-mq: avoid access hctx->tags->cpumask before allocation
    - LP: #1498778
  * x86/ldt: Make modify_ldt synchronous
    - LP: #1500493
  * x86/ldt: Correct LDT access in single stepping logic
    - LP: #1500493
  * x86/ldt: Correct FPU emulation access to LDT
    - LP: #1500493
  * md: flush ->event_work before stopping array.
    - LP: #1500493
  * ipv6: addrconf: validate new MTU before applying it
    - LP: #1500493
  * virtio-net: drop NETIF_F_FRAGLIST
    - LP: #1500493
  * RDS: verify the underlying transport exists bef...

Changed in linux (Ubuntu Vivid):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers