Precise update to 3.2.72 stable release

Bug #1507665 reported by Brad Figg
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Precise
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.72 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.72 stable release:
            Linux 3.2.72
            Revert "sctp: Fix race between OOTB responce and route removal"
            jbd2: avoid infinite loop when destroying aborted journal
            parisc: Filter out spurious interrupts in PA-RISC irq handler
            ipv6: update ip6_rt_last_gc every time GC is run
            ipv6: prevent fib6_run_gc() contention
            perf tools: Fix build with perl 5.18
            fib_rules: fix fib rule dumps across multiple skbs
            net/ipv6: Correct PIM6 mrt_lock handling
            bonding: correct the MAC address for "follow" fail_over_mac policy
            ipv6: lock socket in ip6_datagram_connect()
            net: Fix skb csum races when peeking
            net: pktgen: fix race between pktgen_thread_worker() and kthread_stop()
            net/tipc: initialize security state for new connection socket
            Initialize msg/shm IPC objects before doing ipc_addid()
            ipc/sem.c: fully initialize sem_array before making it visible
            RDS: verify the underlying transport exists before creating a connection
            virtio-net: drop NETIF_F_FRAGLIST
            ipv6: addrconf: validate new MTU before applying it
            md: use kzalloc() when bitmap is disabled
            USB: whiteheat: fix potential null-deref at probe
            ocfs2/dlm: fix deadlock when dispatch assert master
            x86/paravirt: Replace the paravirt nop with a bona fide empty function
            cifs: use server timestamp for ntlmv2 authentication
            xhci: change xhci 1.0 only restrictions to support xhci 1.1
            usb: xhci: Clear XHCI_STATE_DYING on start
            xhci: give command abortion one more chance before killing xhci
            usb: Use the USB_SS_MULT() macro to get the burst multiplier.
            KVM: x86: trap AMD MSRs for the TSeg base and mask
            s390/compat: correct uc_sigmask of the compat signal frame
            ASoC: fix broken pxa SoC support
            x86/platform: Fix Geode LX timekeeping in the generic x86 build
            ARM: fix Thumb2 signal handling when ARMv6 is enabled
            ARM: 7880/1: Clear the IT state independent of the Thumb-2 mode
            btrfs: skip waiting on ordered range for special files
            Btrfs: fix read corruption of compressed and shared extents
            USB: option: add ZTE PIDs
            perf header: Fixup reading of HEADER_NRCPUS feature
            hfs: fix B-tree corruption after insertion at position 0
            hfs,hfsplus: cache pages correctly between bnode_create and bnode_free
            powerpc/MSI: Fix race condition in tearing down MSI interrupts
            pagemap: hide physical addresses from non-privileged users
            ARM: 8429/1: disable GCC SRA optimization
            fs: create and use seq_show_option for escaping
            crypto: ghash-clmulni: specify context size for ghash async algorithm
            Input: evdev - do not report errors form flush()
            IB/uverbs: reject invalid or unknown opcodes
            Add radeon suspend/resume quirk for HP Compaq dc5750.
            drm/i915: Always mark the object as dirty when used by the GPU
            spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is disabled
            IB/uverbs: Fix race between ib_uverbs_open and remove_one
            IB/mlx4: Use correct SL on AH query under RoCE
            SUNRPC: xs_reset_transport must mark the connection as disconnected
            IB/qib: Change lkey table allocation to support more MRs
            xfs: return errors from partial I/O failures to files
            drivercore: Fix unregistration path of platform devices
            of/address: Don't loop forever in of_find_matching_node_by_address().
            rtlwifi: rtl8192cu: Add new device ID
            rtlwifi: rtl8192cu: Add new device ID
            DRM - radeon: Don't link train DisplayPort on HPD until we get the dpcd
            xfs: Fix xfs_attr_leafblock definition
            eCryptfs: Invalidate dcache entries when lower i_nlink is zero
            USB: ftdi_sio: Added custom PID for CustomWare products
            usb: host: ehci-sys: delete useless bus_to_hcd conversion
            serial: 8250: bind to ALi Fast Infrared Controller (ALI5123)
            drivers: usb: fsl: Workaround for USB erratum-A005275
            NFSv4: don't set SETATTR for O_RDONLY|O_EXCL
            windfarm: decrement client count when unregistering
            devres: fix devres_get()
            auxdisplay: ks0108: fix refcount
            KVM: MMU: fix validation of mmio page fault
            usb: gadget: m66592-udc: forever loop in set_feature()
            PCI: Add VPD function 0 quirk for Intel Ethernet devices
            PCI: Add dev_flags bit to access VPD through function 0
            mac80211: enable assoc check for mesh interfaces
            PCI: Fix TI816X class code quirk
            rc-core: fix remove uevent generation
            vfs: Test for and handle paths that are unreachable from their mnt_root
            dcache: Handle escaped paths in prepend_path
            sparc64: Fix userspace FPU register corruptions.
            sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state
            net: Fix RCU splat in af_key
            x86/ldt: Further fix FPU emulation
            ipc,sem: fix use after free on IPC_RMID after a task using same semaphore set exits
            libfc: Fix fc_fcp_cleanup_each_cmd()
            libiscsi: Fix host busy blocking during connection teardown
            dm btree: add ref counting ops for the leaves of top level btrees
            localmodconfig: Use Kbuild files too
            x86/ldt: Correct FPU emulation access to LDT
            x86/ldt: Correct LDT access in single stepping logic
            x86/ldt: Make modify_ldt synchronous
            net: Fix skb_set_peeked use-after-free bug
            net: Clone skb before setting peeked flag
            ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
            MIPS: Make set_pte() SMP safe.
            perf: Fix fasync handling on inherited events
            rds: fix an integer overflow test in rds_info_getsockopt()
            xhci: fix off by one error in TRB DMA address boundary check
            MIPS: Fix sched_getaffinity with MT FPAFF enabled
            target: REPORT LUNS should return LUN 0 even for dynamic ACLs
            md/raid1: extend spinlock to protect raid1_end_read_request against inconsistencies
            target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
            USB: sierra: add 1199:68AB device ID
            crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer
            xen/gntdevt: Fix race condition in gntdev_release()
            xen/gntdev: convert priv->lock to a mutex
            jbd2: protect all log tail updates with j_checkpoint_mutex
            pktgen: Require CONFIG_INET due to use of IPv4 checksum function
            ipv6: Fix build failure when CONFIG_INET disabled

CVE References

Brad Figg (brad-figg)
tags: added: kernel-stable-tracking-bug
description: updated
Brad Figg (brad-figg)
Changed in linux (Ubuntu Precise):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (8.3 KiB)

This bug was fixed in the package linux - 3.2.0-93.133

---------------
linux (3.2.0-93.133) precise; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1509350

  [ Upstream Kernel Changes ]

  * Revert "net: Fix skb csum races when peeking"
    - LP: #1508510

linux (3.2.0-93.132) precise; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1508939

  [ Upstream Kernel Changes ]

  * Revert "sctp: Fix race between OOTB responce and route removal"
    - LP: #1507665
  * USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - LP: #1441108
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - LP: #1441108
    - CVE-2015-2925
  * ipv6: Fix build failure when CONFIG_INET disabled
    - LP: #1507665
  * pktgen: Require CONFIG_INET due to use of IPv4 checksum function
    - LP: #1507665
  * xen/gntdev: convert priv->lock to a mutex
    - LP: #1507665
  * xen/gntdevt: Fix race condition in gntdev_release()
    - LP: #1507665
  * crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer
    - LP: #1507665
  * USB: sierra: add 1199:68AB device ID
    - LP: #1507665
  * target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
    - LP: #1507665
  * md/raid1: extend spinlock to protect raid1_end_read_request against
    inconsistencies
    - LP: #1507665
  * target: REPORT LUNS should return LUN 0 even for dynamic ACLs
    - LP: #1507665
  * MIPS: Fix sched_getaffinity with MT FPAFF enabled
    - LP: #1507665
  * xhci: fix off by one error in TRB DMA address boundary check
    - LP: #1507665
  * rds: fix an integer overflow test in rds_info_getsockopt()
    - LP: #1507665
  * perf: Fix fasync handling on inherited events
    - LP: #1507665
  * MIPS: Make set_pte() SMP safe.
    - LP: #1507665
  * ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
    - LP: #1507665
  * net: Clone skb before setting peeked flag
    - LP: #1507665
  * net: Fix skb_set_peeked use-after-free bug
    - LP: #1507665
  * x86/ldt: Make modify_ldt synchronous
    - LP: #1507665
  * x86/ldt: Correct LDT access in single stepping logic
    - LP: #1507665
  * x86/ldt: Correct FPU emulation access to LDT
    - LP: #1507665
  * localmodconfig: Use Kbuild files too
    - LP: #1507665
  * dm btree: add ref counting ops for the leaves of top level btrees
    - LP: #1507665
  * libiscsi: Fix host busy blocking during connection teardown
    - LP: #1507665
  * libfc: Fix fc_fcp_cleanup_each_cmd()
    - LP: #1507665
  * ipc,sem: fix use after free on IPC_RMID after a task using same
    semaphore set exits
    - LP: #1507665
  * x86/ldt: Further fix FPU emulation
    - LP: #1507665
  * net: Fix RCU splat in af_key
    - LP: #1507665
  * sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state
    - LP: #1507665
  * sparc64: Fix userspace FPU register corruptions.
    - LP: #1507665
  * rc-core: fix remove uevent generation
    - LP: #1507665
  * PCI: Fix TI816X class code quirk
    - LP: #1507665
  * mac80211: enable assoc check for mesh interfaces
    - LP: #1507665
  * PCI: Add dev_flags bit...

Read more...

Changed in linux (Ubuntu Precise):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.