Bug #1508510 “Something in the Kernel crashes when I try to moun...” : Bugs : linux package : Ubuntu

Revision history for this message

Paul Weber (p4ul-weber+ubuntuone) wrote on 2015-10-21:

#1

dmesg.log Edit (81.3 KiB, text/plain)
AlsaInfo.txt Edit (40.3 KiB, text/plain; charset="utf-8")
BootDmesg.txt Edit (73.2 KiB, text/plain; charset="utf-8")
CRDA.txt Edit (257 bytes, text/plain; charset="utf-8")
CurrentDmesg.txt Edit (8.0 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (2.9 KiB, text/plain; charset="utf-8")
IwConfig.txt Edit (578 bytes, text/plain; charset="utf-8")
Lspci.txt Edit (11.2 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (1001 bytes, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (3.7 KiB, text/plain; charset="utf-8")
ProcEnviron.txt Edit (321 bytes, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (2.4 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (5.2 KiB, text/plain; charset="utf-8")
PulseList.txt Edit (19.4 KiB, text/plain; charset="utf-8")
RfKill.txt Edit (250 bytes, text/plain; charset="utf-8")
UdevDb.txt Edit (194.6 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (438.5 KiB, text/plain; charset="utf-8")
WifiSyslog.txt Edit (537.5 KiB, text/plain; charset="utf-8")

Revision history for this message

Brad Figg (brad-figg) wrote on 2015-10-21: Status changed to Confirmed

#2

This change was made by a bot.

Changed in linux (Ubuntu):
status:	New → Confirmed

Revision history for this message

Joseph Salisbury (jsalisbury) wrote on 2015-10-21:

#3

Would it be possible for you to test the latest upstream stable kernel? Refer to https://wiki.ubuntu.com/KernelMainlineBuilds . Please test the latest v3.13 stable kernel[0].

If this bug is fixed in the mainline kernel, please add the following tag 'kernel-fixed-upstream'.

If the mainline kernel does not fix this bug, please add the tag: 'kernel-bug-exists-upstream'.

If you are unable to test the mainline kernel, for example it will not boot, please add the tag: 'kernel-unable-to-test-upstream'.
Once testing of the upstream kernel is complete, please mark this bug as "Confirmed".

Thanks in advance.

[0] http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.13.11-ckt27-trusty/

Changed in linux (Ubuntu):
importance:	Undecided → High
tags:	added: kernel-da-key regression-update
Changed in linux (Ubuntu):
status:	Confirmed → Incomplete

Revision history for this message

Paul Weber (p4ul-weber+ubuntuone) wrote on 2015-10-21:

#4

Will try.

Revision history for this message

Paul Weber (p4ul-weber+ubuntuone) wrote on 2015-10-21:

#5

Download full text (4.4 KiB)

Nope ... did not work

uname -a
Linux paul-ThinkPad-T430s 3.13.11-031311ckt27-generic #201509251131 SMP Fri Sep 25 15:34:16 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

[ 133.141688] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
[ 133.141734] IP: [<ffffffff8160f10d>] skb_copy_and_csum_datagram_iovec+0x2d/0x110
[ 133.141773] PGD 0
[ 133.141785] Oops: 0000 [#1] SMP
[ 133.141804] Modules linked in: ctr ccm pci_stub vboxpci(OF) vboxnetadp(OF) vboxnetflt(OF) vboxdrv(OF) vmw_vsock_vmci_transport vsock vmw_vmci rfcomm bnep snd_hda_codec_hdmi snd_hda_codec_realtek binfmt_misc nfsd auth_rpcgss nfs_acl nfs lockd sunrpc fscache nls_iso8859_1 arc4 iwldvm mac80211 hid_generic intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm crct10dif_pclmul crc32_pclmul usbhid ghash_clmulni_intel aesni_intel hid cdc_mbim cdc_ncm btusb snd_hda_intel aes_x86_64 usbnet snd_hda_codec bluetooth lrw mii gf128mul uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core videodev snd_hwdep glue_helper cdc_acm iwlwifi cdc_wdm ablk_helper thinkpad_acpi cryptd snd_pcm snd_page_alloc nvram cfg80211 snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq joydev i915 serio_raw shpchp snd_seq_device mei_me wmi snd_timer mei drm_kms_helper drm snd lpc_ich soundcore parport_pc ppdev i2c_algo_bit mac_hid video lp parport mmc_block psmouse ahci e1000e sdhci_pci libahci sdhci ptp pps_core
[ 133.142227] CPU: 3 PID: 1503 Comm: nfsd Tainted: GF O 3.13.11-031311ckt27-generic #201509251131
[ 133.142251] Hardware name: LENOVO 2355CTO/2355CTO, BIOS G7ET95WW (2.55 ) 07/10/2013
[ 133.142271] task: ffff8803f588c800 ti: ffff8803f4c4a000 task.ti: ffff8803f4c4a000
[ 133.142291] RIP: 0010:[<ffffffff8160f10d>] [<ffffffff8160f10d>] skb_copy_and_csum_datagram_iovec+0x2d/0x110
[ 133.142318] RSP: 0018:ffff8803f4c4bbc0 EFLAGS: 00010216
[ 133.142332] RAX: 0000000000000000 RBX: ffff880425cf0380 RCX: 0000000000000000
[ 133.142350] RDX: 0000000000000000 RSI: 0000000000000030 RDI: ffff8803756e7100
[ 133.142369] RBP: ffff8803f4c4bbf8 R08: 0000000000000000 R09: 000000005fe5a01a
[ 133.142388] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000008
[ 133.142406] R13: ffff8803756e7100 R14: 0000000000000028 R15: ffff8803756e7100
[ 133.142425] FS: 0000000000000000(0000) GS:ffff88043e2c0000(0000) knlGS:0000000000000000
[ 133.142445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 133.142460] CR2: 0000000000000008 CR3: 0000000002c0e000 CR4: 00000000001427e0
[ 133.142479] Stack:
[ 133.142486] ffffffff81608836 ffffffff81608880 ffff880425cf0380 ffff8803f4c4bdf8
[ 133.142509] 0000000000000000 0000000000000028 ffff8803756e7100 ffff8803f4c4bc60
[ 133.142532] ffffffff8167c6dc ffff880426ff8028 ffff880425cf03f0 0000000200000000
[ 133.142555] Call Trace:
[ 133.142564] [<ffffffff81608836>] ? skb_checksum+0x26/0x30
[ 133.142580] [<ffffffff81608880>] ? skb_push+0x40/0x40
[ 133.142596] [<ffffffff8167c6dc>] udp_recvmsg+0x1dc/0x380
[ 133.142612] [<ffffffff816875cc>] inet_recvmsg+0x6c/0x80
[ 133.142628] [<ffffffff8160096a>] sock_recvmsg+0x9a/0xd0
[ 133.142644] [<ffffffff8107414a>] ? del_timer_sync+0x4a/0x60
[ 133.142661] [<fffffff...

Nope ... did not work

uname -a
Linux paul-ThinkPad-T430s 3.13.11-031311ckt27-generic #201509251131 SMP Fri Sep 25 15:34:16 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

[  133.141688] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
[  133.141734] IP: [<ffffffff8160f10d>] skb_copy_and_csum_datagram_iovec+0x2d/0x110
[  133.141773] PGD 0 
[  133.141785] Oops: 0000 [#1] SMP 
[  133.141804] Modules linked in: ctr ccm pci_stub vboxpci(OF) vboxnetadp(OF) vboxnetflt(OF) vboxdrv(OF) vmw_vsock_vmci_transport vsock vmw_vmci rfcomm bnep snd_hda_codec_hdmi snd_hda_codec_realtek binfmt_misc nfsd auth_rpcgss nfs_acl nfs lockd sunrpc fscache nls_iso8859_1 arc4 iwldvm mac80211 hid_generic intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm crct10dif_pclmul crc32_pclmul usbhid ghash_clmulni_intel aesni_intel hid cdc_mbim cdc_ncm btusb snd_hda_intel aes_x86_64 usbnet snd_hda_codec bluetooth lrw mii gf128mul uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core videodev snd_hwdep glue_helper cdc_acm iwlwifi cdc_wdm ablk_helper thinkpad_acpi cryptd snd_pcm snd_page_alloc nvram cfg80211 snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq joydev i915 serio_raw shpchp snd_seq_device mei_me wmi snd_timer mei drm_kms_helper drm snd lpc_ich soundcore parport_pc ppdev i2c_algo_bit mac_hid video lp parport mmc_block psmouse ahci e1000e sdhci_pci libahci sdhci ptp pps_core
[  133.142227] CPU: 3 PID: 1503 Comm: nfsd Tainted: GF          O 3.13.11-031311ckt27-generic #201509251131
[  133.142251] Hardware name: LENOVO 2355CTO/2355CTO, BIOS G7ET95WW (2.55 ) 07/10/2013
[  133.142271] task: ffff8803f588c800 ti: ffff8803f4c4a000 task.ti: ffff8803f4c4a000
[  133.142291] RIP: 0010:[<ffffffff8160f10d>]  [<ffffffff8160f10d>] skb_copy_and_csum_datagram_iovec+0x2d/0x110
[  133.142318] RSP: 0018:ffff8803f4c4bbc0  EFLAGS: 00010216
[  133.142332] RAX: 0000000000000000 RBX: ffff880425cf0380 RCX: 0000000000000000
[  133.142350] RDX: 0000000000000000 RSI: 0000000000000030 RDI: ffff8803756e7100
[  133.142369] RBP: ffff8803f4c4bbf8 R08: 0000000000000000 R09: 000000005fe5a01a
[  133.142388] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000008
[  133.142406] R13: ffff8803756e7100 R14: 0000000000000028 R15: ffff8803756e7100
[  133.142425] FS:  0000000000000000(0000) GS:ffff88043e2c0000(0000) knlGS:0000000000000000
[  133.142445] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.142460] CR2: 0000000000000008 CR3: 0000000002c0e000 CR4: 00000000001427e0
[  133.142479] Stack:
[  133.142486]  ffffffff81608836 ffffffff81608880 ffff880425cf0380 ffff8803f4c4bdf8
[  133.142509]  0000000000000000 0000000000000028 ffff8803756e7100 ffff8803f4c4bc60
[  133.142532]  ffffffff8167c6dc ffff880426ff8028 ffff880425cf03f0 0000000200000000
[  133.142555] Call Trace:
[  133.142564]  [<ffffffff81608836>] ? skb_checksum+0x26/0x30
[  133.142580]  [<ffffffff81608880>] ? skb_push+0x40/0x40
[  133.142596]  [<ffffffff8167c6dc>] udp_recvmsg+0x1dc/0x380
[  133.142612]  [<ffffffff816875cc>] inet_recvmsg+0x6c/0x80
[  133.142628]  [<ffffffff8160096a>] sock_recvmsg+0x9a/0xd0
[  133.142644]  [<ffffffff8107414a>] ? del_timer_sync+0x4a/0x60
[  133.142661]  [<ffffffff8171791d>] ? schedule_timeout+0x17d/0x2d0
[  133.142678]  [<ffffffff8109c065>] ? sched_clock_cpu+0xb5/0x100
[  133.142695]  [<ffffffff816009da>] kernel_recvmsg+0x3a/0x50
[  133.142719]  [<ffffffffa06f0d19>] svc_udp_recvfrom+0x89/0x440 [sunrpc]
[  133.142738]  [<ffffffff8171c2cb>] ? _raw_spin_unlock_bh+0x1b/0x40
[  133.142761]  [<ffffffffa06fdb08>] ? svc_get_next_xprt+0xd8/0x300 [sunrpc]
[  133.142785]  [<ffffffffa06fe280>] svc_recv+0x4a0/0x5c0 [sunrpc]
[  133.142802]  [<ffffffff8107617b>] ? recalc_sigpending+0x1b/0x50
[  133.142822]  [<ffffffffa07b270d>] nfsd+0xad/0x130 [nfsd]
[  133.142839]  [<ffffffffa07b2660>] ? nfsd_destroy+0x80/0x80 [nfsd]
[  133.142857]  [<ffffffff8108a0c9>] kthread+0xc9/0xe0
[  133.142871]  [<ffffffff8108a000>] ? kthread_create_on_node+0x180/0x180
[  133.142889]  [<ffffffff81724de8>] ret_from_fork+0x58/0x90
[  133.142904]  [<ffffffff8108a000>] ? kthread_create_on_node+0x180/0x180
[  133.142921] Code: 44 00 00 55 31 c0 48 89 e5 41 57 41 56 41 55 49 89 fd 41 54 41 89 f4 53 48 83 ec 10 8b 77 68 41 89 f6 45 29 e6 0f 84 89 00 00 00 <48> 8b 42 08 48 89 d3 48 85 c0 75 14 0f 1f 80 00 00 00 00 48 83 
[  133.143042] RIP  [<ffffffff8160f10d>] skb_copy_and_csum_datagram_iovec+0x2d/0x110
[  133.143063]  RSP <ffff8803f4c4bbc0>
[  133.143073] CR2: 0000000000000008
[  133.147406] ---[ end trace 247e1a3a36cb883b ]---

tags:

added: kernel-bug-exists-upstream

Paul Weber (p4ul-weber+ubuntuone) on 2015-10-21

Changed in linux (Ubuntu):
status:	Incomplete → Confirmed

Revision history for this message

Andreas Bouché (a-bouche) wrote on 2015-10-22:

#6

I can confirm this. The same behaviour occurs with the latest utopic-kernel (3.16.0-51). Going back to 3.16.0-50 solves the problem.
This happens only when using nfs v3 over UDP like so:

mount -o 'vers=3,udp' 192.168.56.1:'/home/andreas/somefolder' /mnt/nfs-somefolder

Using NFS v4 and/or TCP works without problem. For vagrant, you can use nfs_udp: false as a workaround, as I described here:
https://github.com/mitchellh/vagrant/issues/6423

Revision history for this message

Luis Henriques (henrix) wrote on 2015-10-22:

#8

We do suspect of a backport of upstream commit 89c22d8c3b27 ("net: Fix skb csum races when peeking") (which is 2dde51aa5339 in the trusty git tree). I've built a test kernel with this commit reverted on top of 3.13.0-66.108 and uploaded it here:

http://people.canonical.com/~henrix/LP1508510/v1/amd64/

Could you please verify if this solves the issue? Thanks.

Revision history for this message

Andreas Bouché (a-bouche) wrote on 2015-10-22:

#9

Yes, this patch solves the issue for me. Mount command works as expected and kernel-log stays quiet.

Revision history for this message

Luis Henriques (henrix) wrote on 2015-10-22: Re: [Bug 1508510] Re: Something in the Kernel crashes when I try to mount via NFS

#10

Thanks a lot for testing, Andreas. Regarding the utopic kernel
(3.16.0-51) issue you also refer, are you absolutely sure it's the
same problem? Can you please share the kernel log?

I'm assuming you're running trusty lts-utopic for this, so in the
morning I will try to reproduce it (I was able to reproduce it with
the 3.13).

Revision history for this message

marius888 (madawi) wrote on 2015-10-23:

#11

trace on lts-utopic Edit (4.1 KiB, text/plain)

I have kernel 3.16.0-51 and the issue is the same. Going back to 3.16.0-50 solves the problem.

Revision history for this message

Andreas Bouché (a-bouche) wrote on 2015-10-23:

#12

Thanks @marius888.

Yes, behaviour and the log-messages were exactly the same under 3.16.0-51, as you can see in marius' stacktrace.
We were both facing this using vagrant-built virtualbox-machines with NFS-shares on Lenovo Thinkpads W520/30.

I will try to reproduce it also on lts-vivid shortly.

Revision history for this message

Luis Henriques (henrix) wrote on 2015-10-23:

#13

Thank you. Andreas, I believe vivid is not impacted by this bug. Looks like the issue has been reported to the stable mailing-list:

http://thread.gmane.org/gmane.linux.kernel.stable/153526

Thank you all for reporting and testing.

Changed in linux (Ubuntu Trusty):
status:	New → Triaged
Changed in linux (Ubuntu Precise):
status:	New → Triaged
assignee:	nobody → Luis Henriques (henrix)
Changed in linux (Ubuntu Trusty):
assignee:	nobody → Luis Henriques (henrix)
Changed in linux-lts-utopic (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	New → Triaged
assignee:	nobody → Luis Henriques (henrix)
Changed in linux-lts-utopic (Ubuntu):
status:	New → Invalid
Changed in linux (Ubuntu):
status:	Confirmed → Invalid

Revision history for this message

Andreas Bouché (a-bouche) wrote on 2015-10-23:

#14

You are right, no problems, neither with 3.19.0-31 nor with 3.19.0-30.

Luis Henriques (henrix) on 2015-10-23

Changed in linux (Ubuntu Trusty):
status:	Triaged → Fix Committed

Luis Henriques (henrix) on 2015-10-23

Changed in linux (Ubuntu Precise):
status:	Triaged → Fix Committed

Luis Henriques (henrix) on 2015-10-23

Changed in linux-lts-utopic (Ubuntu Trusty):
status:	Triaged → Fix Committed

Revision history for this message

Brad Figg (brad-figg) wrote on 2015-10-26:

#15

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-precise' to 'verification-done-precise'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:	added: verification-needed-precise
tags:	added: verification-needed-trusty

Revision history for this message

Brad Figg (brad-figg) wrote on 2015-10-26:

#16

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-trusty' to 'verification-done-trusty'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

Revision history for this message

Nick Sillito (nick-sillitos) wrote on 2015-10-26:

#17

Based on the duplicate bug that I raised, 1509666, I can confirm that with kernel 3.13.0-67-generic loaded, the bug I saw (relating to mounting in OSX) is solved.
I have added the verification-done-trusty tag.

tags:

added: verification-done-trusty
removed: verification-needed-trusty

Revision history for this message

Andreas Bouché (a-bouche) wrote on 2015-10-27:

#18

I can confirm that, too. No issue with kernel 3.13.0-67 from trusty-proposed.

Revision history for this message

Luis Henriques (henrix) wrote on 2015-10-29:

#19

I can also confirm that all the kernels have this bug fixed (precise 3.2.0-93.133, trusty 3.13.0-67.110 and lts-utopic 3.16.0-52.71~14.04.1).

tags:

added: verification-done-precise verification-done-utopic
removed: verification-needed-precise

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-11-04:

#20

Download full text (8.3 KiB)

This bug was fixed in the package linux - 3.2.0-93.133

---------------
linux (3.2.0-93.133) precise; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1509350

[ Upstream Kernel Changes ]

* Revert "net: Fix skb csum races when peeking"
- LP: #1508510

linux (3.2.0-93.132) precise; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #1508939

[ Upstream Kernel Changes ]

  * Revert "sctp: Fix race between OOTB responce and route removal"
    - LP: #1507665
  * USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - LP: #1441108
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - LP: #1441108
    - CVE-2015-2925
  * ipv6: Fix build failure when CONFIG_INET disabled
    - LP: #1507665
  * pktgen: Require CONFIG_INET due to use of IPv4 checksum function
    - LP: #1507665
  * xen/gntdev: convert priv->lock to a mutex
    - LP: #1507665
  * xen/gntdevt: Fix race condition in gntdev_release()
    - LP: #1507665
  * crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer
    - LP: #1507665
  * USB: sierra: add 1199:68AB device ID
    - LP: #1507665
  * target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
    - LP: #1507665
  * md/raid1: extend spinlock to protect raid1_end_read_request against
    inconsistencies
    - LP: #1507665
  * target: REPORT LUNS should return LUN 0 even for dynamic ACLs
    - LP: #1507665
  * MIPS: Fix sched_getaffinity with MT FPAFF enabled
    - LP: #1507665
  * xhci: fix off by one error in TRB DMA address boundary check
    - LP: #1507665
  * rds: fix an integer overflow test in rds_info_getsockopt()
    - LP: #1507665
  * perf: Fix fasync handling on inherited events
    - LP: #1507665
  * MIPS: Make set_pte() SMP safe.
    - LP: #1507665
  * ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
    - LP: #1507665
  * net: Clone skb before setting peeked flag
    - LP: #1507665
  * net: Fix skb_set_peeked use-after-free bug
    - LP: #1507665
  * x86/ldt: Make modify_ldt synchronous
    - LP: #1507665
  * x86/ldt: Correct LDT access in single stepping logic
    - LP: #1507665
  * x86/ldt: Correct FPU emulation access to LDT
    - LP: #1507665
  * localmodconfig: Use Kbuild files too
    - LP: #1507665
  * dm btree: add ref counting ops for the leaves of top level btrees
    - LP: #1507665
  * libiscsi: Fix host busy blocking during connection teardown
    - LP: #1507665
  * libfc: Fix fc_fcp_cleanup_each_cmd()
    - LP: #1507665
  * ipc,sem: fix use after free on IPC_RMID after a task using same
    semaphore set exits
    - LP: #1507665
  * x86/ldt: Further fix FPU emulation
    - LP: #1507665
  * net: Fix RCU splat in af_key
    - LP: #1507665
  * sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state
    - LP: #1507665
  * sparc64: Fix userspace FPU register corruptions.
    - LP: #1507665
  * rc-core: fix remove uevent generation
    - LP: #1507665
  * PCI: Fix TI816X class code quirk
    - LP: #1507665
  * mac80211: enable assoc check for mesh interfaces
    - LP: #1507665
  * PCI: Add dev_flags bit...

This bug was fixed in the package linux - 3.2.0-93.133

---------------
linux (3.2.0-93.133) precise; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1509350

[ Upstream Kernel Changes ]

* Revert "net: Fix skb csum races when peeking"
    - LP: #1508510

linux (3.2.0-93.132) precise; urgency=low

[ Brad Figg ]

* Release Tracking Bug
    - LP: #1508939

[ Upstream Kernel Changes ]

* Revert "sctp: Fix race between OOTB responce and route removal"
    - LP: #1507665
  * USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - LP: #1441108
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - LP: #1441108
    - CVE-2015-2925
  * ipv6: Fix build failure when CONFIG_INET disabled
    - LP: #1507665
  * pktgen: Require CONFIG_INET due to use of IPv4 checksum function
    - LP: #1507665
  * xen/gntdev: convert priv->lock to a mutex
    - LP: #1507665
  * xen/gntdevt: Fix race condition in gntdev_release()
    - LP: #1507665
  * crypto: ixp4xx - Remove bogus BUG_ON on scattered dst buffer
    - LP: #1507665
  * USB: sierra: add 1199:68AB device ID
    - LP: #1507665
  * target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT
    - LP: #1507665
  * md/raid1: extend spinlock to protect raid1_end_read_request against
    inconsistencies
    - LP: #1507665
  * target: REPORT LUNS should return LUN 0 even for dynamic ACLs
    - LP: #1507665
  * MIPS: Fix sched_getaffinity with MT FPAFF enabled
    - LP: #1507665
  * xhci: fix off by one error in TRB DMA address boundary check
    - LP: #1507665
  * rds: fix an integer overflow test in rds_info_getsockopt()
    - LP: #1507665
  * perf: Fix fasync handling on inherited events
    - LP: #1507665
  * MIPS: Make set_pte() SMP safe.
    - LP: #1507665
  * ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
    - LP: #1507665
  * net: Clone skb before setting peeked flag
    - LP: #1507665
  * net: Fix skb_set_peeked use-after-free bug
    - LP: #1507665
  * x86/ldt: Make modify_ldt synchronous
    - LP: #1507665
  * x86/ldt: Correct LDT access in single stepping logic
    - LP: #1507665
  * x86/ldt: Correct FPU emulation access to LDT
    - LP: #1507665
  * localmodconfig: Use Kbuild files too
    - LP: #1507665
  * dm btree: add ref counting ops for the leaves of top level btrees
    - LP: #1507665
  * libiscsi: Fix host busy blocking during connection teardown
    - LP: #1507665
  * libfc: Fix fc_fcp_cleanup_each_cmd()
    - LP: #1507665
  * ipc,sem: fix use after free on IPC_RMID after a task using same
    semaphore set exits
    - LP: #1507665
  * x86/ldt: Further fix FPU emulation
    - LP: #1507665
  * net: Fix RCU splat in af_key
    - LP: #1507665
  * sctp: donot reset the overall_error_count in SHUTDOWN_RECEIVE state
    - LP: #1507665
  * sparc64: Fix userspace FPU register corruptions.
    - LP: #1507665
  * rc-core: fix remove uevent generation
    - LP: #1507665
  * PCI: Fix TI816X class code quirk
    - LP: #1507665
  * mac80211: enable assoc check for mesh interfaces
    - LP: #1507665
  * PCI: Add dev_flags bit to access VPD through function 0
    - LP: #1507665
  * PCI: Add VPD function 0 quirk for Intel Ethernet devices
    - LP: #1507665
  * usb: gadget: m66592-udc: forever loop in set_feature()
    - LP: #1507665
  * KVM: MMU: fix validation of mmio page fault
    - LP: #1507665
  * auxdisplay: ks0108: fix refcount
    - LP: #1507665
  * devres: fix devres_get()
    - LP: #1507665
  * windfarm: decrement client count when unregistering
    - LP: #1507665
  * NFSv4: don't set SETATTR for O_RDONLY|O_EXCL
    - LP: #1507665
  * drivers: usb: fsl: Workaround for USB erratum-A005275
    - LP: #1507665
  * serial: 8250: bind to ALi Fast Infrared Controller (ALI5123)
    - LP: #1507665
  * usb: host: ehci-sys: delete useless bus_to_hcd conversion
    - LP: #1507665
  * USB: ftdi_sio: Added custom PID for CustomWare products
    - LP: #1507665
  * eCryptfs: Invalidate dcache entries when lower i_nlink is zero
    - LP: #1507665
  * xfs: Fix xfs_attr_leafblock definition
    - LP: #1507665
  * DRM - radeon: Don't link train DisplayPort on HPD until we get the dpcd
    - LP: #1507665
  * rtlwifi: rtl8192cu: Add new device ID
    - LP: #1507665
  * rtlwifi: rtl8192cu: Add new device ID
    - LP: #1507665
  * of/address: Don't loop forever in of_find_matching_node_by_address().
    - LP: #1507665
  * drivercore: Fix unregistration path of platform devices
    - LP: #1507665
  * xfs: return errors from partial I/O failures to files
    - LP: #1507665
  * IB/qib: Change lkey table allocation to support more MRs
    - LP: #1507665
  * SUNRPC: xs_reset_transport must mark the connection as disconnected
    - LP: #1507665
  * IB/mlx4: Use correct SL on AH query under RoCE
    - LP: #1507665
  * IB/uverbs: Fix race between ib_uverbs_open and remove_one
    - LP: #1507665
  * spi: spi-pxa2xx: Check status register to determine if SSSR_TINT is
    disabled
    - LP: #1507665
  * drm/i915: Always mark the object as dirty when used by the GPU
    - LP: #1507665
  * Add radeon suspend/resume quirk for HP Compaq dc5750.
    - LP: #1507665
  * IB/uverbs: reject invalid or unknown opcodes
    - LP: #1507665
  * Input: evdev - do not report errors form flush()
    - LP: #1507665
  * crypto: ghash-clmulni: specify context size for ghash async algorithm
    - LP: #1507665
  * fs: create and use seq_show_option for escaping
    - LP: #1507665
  * ARM: 8429/1: disable GCC SRA optimization
    - LP: #1507665
  * pagemap: hide physical addresses from non-privileged users
    - LP: #1507665
  * powerpc/MSI: Fix race condition in tearing down MSI interrupts
    - LP: #1507665
  * hfs,hfsplus: cache pages correctly between bnode_create and bnode_free
    - LP: #1507665
  * hfs: fix B-tree corruption after insertion at position 0
    - LP: #1507665
  * perf header: Fixup reading of HEADER_NRCPUS feature
    - LP: #1507665
  * USB: option: add ZTE PIDs
    - LP: #1507665
  * Btrfs: fix read corruption of compressed and shared extents
    - LP: #1507665
  * btrfs: skip waiting on ordered range for special files
    - LP: #1507665
  * ARM: 7880/1: Clear the IT state independent of the Thumb-2 mode
    - LP: #1507665
  * ARM: fix Thumb2 signal handling when ARMv6 is enabled
    - LP: #1507665
  * x86/platform: Fix Geode LX timekeeping in the generic x86 build
    - LP: #1507665
  * ASoC: fix broken pxa SoC support
    - LP: #1507665
  * s390/compat: correct uc_sigmask of the compat signal frame
    - LP: #1507665
  * KVM: x86: trap AMD MSRs for the TSeg base and mask
    - LP: #1507665
  * usb: Use the USB_SS_MULT() macro to get the burst multiplier.
    - LP: #1507665
  * xhci: give command abortion one more chance before killing xhci
    - LP: #1507665
  * usb: xhci: Clear XHCI_STATE_DYING on start
    - LP: #1507665
  * xhci: change xhci 1.0 only restrictions to support xhci 1.1
    - LP: #1507665
  * cifs: use server timestamp for ntlmv2 authentication
    - LP: #1507665
  * x86/paravirt: Replace the paravirt nop with a bona fide empty function
    - LP: #1507665
  * ocfs2/dlm: fix deadlock when dispatch assert master
    - LP: #1507665
  * ipv6: addrconf: validate new MTU before applying it
    - LP: #1507665
  * ipc/sem.c: fully initialize sem_array before making it visible
    - LP: #1507665
  * Initialize msg/shm IPC objects before doing ipc_addid()
    - LP: #1507665
  * net/tipc: initialize security state for new connection socket
    - LP: #1507665
  * net: pktgen: fix race between pktgen_thread_worker() and kthread_stop()
    - LP: #1507665
  * net: Fix skb csum races when peeking
    - LP: #1507665
  * ipv6: lock socket in ip6_datagram_connect()
    - LP: #1507665
  * bonding: correct the MAC address for "follow" fail_over_mac policy
    - LP: #1507665
  * net/ipv6: Correct PIM6 mrt_lock handling
    - LP: #1507665
  * fib_rules: fix fib rule dumps across multiple skbs
    - LP: #1507665
  * perf tools: Fix build with perl 5.18
    - LP: #1507665
  * ipv6: prevent fib6_run_gc() contention
    - LP: #1507665
  * ipv6: update ip6_rt_last_gc every time GC is run
    - LP: #1507665
  * parisc: Filter out spurious interrupts in PA-RISC irq handler
    - LP: #1507665
  * jbd2: avoid infinite loop when destroying aborted journal
    - LP: #1507665
  * Linux 3.2.72
    - LP: #1507665

-- Luis Henriques <luis.henriques@canonical.com>  Fri, 23 Oct 2015 12:17:43 +0100

Changed in linux (Ubuntu Precise):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-11-04:

#21

This bug was fixed in the package linux - 3.13.0-67.110

---------------
linux (3.13.0-67.110) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1509341

[ Upstream Kernel Changes ]

* Revert "net: Fix skb csum races when peeking"
- LP: #1508510

linux (3.13.0-67.109) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1507963

[ Tim Gardner ]

* [Config] Add MMC modules sufficient for net booting
- LP: #1502772

[ Upstream Kernel Changes ]

  * USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - LP: #1441108
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - LP: #1441108
    - CVE-2015-2925

-- Luis Henriques <email address hidden> Fri, 23 Oct 2015 11:53:53 +0100

Changed in linux (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-11-04:

#22

Download full text (11.0 KiB)

This bug was fixed in the package linux-lts-utopic - 3.16.0-52.71~14.04.1

---------------
linux-lts-utopic (3.16.0-52.71~14.04.1) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1509362

[ Upstream Kernel Changes ]

* Revert "net: Fix skb csum races when peeking"
- LP: #1508510

linux-lts-utopic (3.16.0-52.70~14.04.1) trusty; urgency=low

[ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1508145
  * [Config] updateconfigs after 3.16.7-ckt18 stable update

[ Tim Gardner ]

* [Config] Add MMC modules sufficient for net booting
- LP: #1502772

[ Upstream Kernel Changes ]

  * USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - LP: #1441108
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - LP: #1441108
    - CVE-2015-2925
  * hyperv: Add processing of MTU reduced by the host
    - LP: #1494431
  * hv_netvsc: Add support to set MTU reservation from guest side
    - LP: #1494431
  * hv_netvsc: Add close of RNDIS filter into change mtu call
    - LP: #1494431
  * ipv6: addrconf: validate new MTU before applying it
    - LP: #1508133
  * v4l: omap3isp: Fix sub-device power management code
    - LP: #1508133
  * rc-core: fix remove uevent generation
    - LP: #1508133
  * HID: cp2112: fix I2C_SMBUS_BYTE write
    - LP: #1508133
  * HID: cp2112: fix byte order in SMBUS operations
    - LP: #1508133
  * xtensa: fix threadptr reload on return to userspace
    - LP: #1508133
  * ARM: OMAP2+: DRA7: clockdomain: change l4per2_7xx_clkdm to SW_WKUP
    - LP: #1508133
  * mac80211: enable assoc check for mesh interfaces
    - LP: #1508133
  * PCI: Add dev_flags bit to access VPD through function 0
    - LP: #1508133
  * PCI: Add VPD function 0 quirk for Intel Ethernet devices
    - LP: #1508133
  * staging: comedi: usbduxsigma: don't clobber ai_timer in command test
    - LP: #1508133
  * staging: comedi: usbduxsigma: don't clobber ao_timer in command test
    - LP: #1508133
  * clk: exynos4: Fix wrong clock for Exynos4x12 ADC
    - LP: #1508133
  * usb: dwc3: ep0: Fix mem corruption on OUT transfers of more than 512
    bytes
    - LP: #1508133
  * Doc: ABI: testing: configfs-usb-gadget-loopback
    - LP: #1508133
  * Doc: ABI: testing: configfs-usb-gadget-sourcesink
    - LP: #1508133
  * serial: 8250_pci: Add support for Pericom PI7C9X795[1248]
    - LP: #1508133
  * KVM: MMU: fix validation of mmio page fault
    - LP: #1508133
  * auxdisplay: ks0108: fix refcount
    - LP: #1508133
  * devres: fix devres_get()
    - LP: #1508133
  * iio: adis16400: Fix adis16448 gyroscope scale
    - LP: #1508133
  * iio: Add inverse unit conversion macros
    - LP: #1508133
  * iio: adis16480: Fix scale factors
    - LP: #1508133
  * ideapad-laptop: Add Lenovo Yoga 3 14 to no_hw_rfkill dmi list
    - LP: #1508133
  * ASoC: rt5640: fix line out no sound issue
    - LP: #1508133
  * iio: industrialio-buffer: Fix iio_buffer_poll return value
    - LP: #1508133
  * iio: event: Remove negative error code from iio_event_poll
    - LP: #1508133
  * NFSv4: don't set SETATTR for O_...

This bug was fixed in the package linux-lts-utopic - 3.16.0-52.71~14.04.1

---------------
linux-lts-utopic (3.16.0-52.71~14.04.1) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1509362

[ Upstream Kernel Changes ]

* Revert "net: Fix skb csum races when peeking"
    - LP: #1508510

linux-lts-utopic (3.16.0-52.70~14.04.1) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1508145
  * [Config] updateconfigs after 3.16.7-ckt18 stable update

[ Tim Gardner ]

* [Config] Add MMC modules sufficient for net booting
    - LP: #1502772

[ Upstream Kernel Changes ]

* USB: whiteheat: fix potential null-deref at probe
    - LP: #1478826
    - CVE-2015-5257
  * dcache: Handle escaped paths in prepend_path
    - LP: #1441108
    - CVE-2015-2925
  * vfs: Test for and handle paths that are unreachable from their mnt_root
    - LP: #1441108
    - CVE-2015-2925
  * hyperv: Add processing of MTU reduced by the host
    - LP: #1494431
  * hv_netvsc: Add support to set MTU reservation from guest side
    - LP: #1494431
  * hv_netvsc: Add close of RNDIS filter into change mtu call
    - LP: #1494431
  * ipv6: addrconf: validate new MTU before applying it
    - LP: #1508133
  * v4l: omap3isp: Fix sub-device power management code
    - LP: #1508133
  * rc-core: fix remove uevent generation
    - LP: #1508133
  * HID: cp2112: fix I2C_SMBUS_BYTE write
    - LP: #1508133
  * HID: cp2112: fix byte order in SMBUS operations
    - LP: #1508133
  * xtensa: fix threadptr reload on return to userspace
    - LP: #1508133
  * ARM: OMAP2+: DRA7: clockdomain: change l4per2_7xx_clkdm to SW_WKUP
    - LP: #1508133
  * mac80211: enable assoc check for mesh interfaces
    - LP: #1508133
  * PCI: Add dev_flags bit to access VPD through function 0
    - LP: #1508133
  * PCI: Add VPD function 0 quirk for Intel Ethernet devices
    - LP: #1508133
  * staging: comedi: usbduxsigma: don't clobber ai_timer in command test
    - LP: #1508133
  * staging: comedi: usbduxsigma: don't clobber ao_timer in command test
    - LP: #1508133
  * clk: exynos4: Fix wrong clock for Exynos4x12 ADC
    - LP: #1508133
  * usb: dwc3: ep0: Fix mem corruption on OUT transfers of more than 512
    bytes
    - LP: #1508133
  * Doc: ABI: testing: configfs-usb-gadget-loopback
    - LP: #1508133
  * Doc: ABI: testing: configfs-usb-gadget-sourcesink
    - LP: #1508133
  * serial: 8250_pci: Add support for Pericom PI7C9X795[1248]
    - LP: #1508133
  * KVM: MMU: fix validation of mmio page fault
    - LP: #1508133
  * auxdisplay: ks0108: fix refcount
    - LP: #1508133
  * devres: fix devres_get()
    - LP: #1508133
  * iio: adis16400: Fix adis16448 gyroscope scale
    - LP: #1508133
  * iio: Add inverse unit conversion macros
    - LP: #1508133
  * iio: adis16480: Fix scale factors
    - LP: #1508133
  * ideapad-laptop: Add Lenovo Yoga 3 14 to no_hw_rfkill dmi list
    - LP: #1508133
  * ASoC: rt5640: fix line out no sound issue
    - LP: #1508133
  * iio: industrialio-buffer: Fix iio_buffer_poll return value
    - LP: #1508133
  * iio: event: Remove negative error code from iio_event_poll
    - LP: #1508133
  * NFSv4: don't set SETATTR for O_RDONLY|O_EXCL
    - LP: #1508133
  * unshare: Unsharing a thread does not require unsharing a vm
    - LP: #1508133
  * fs: Set the size of empty dirs to 0.
    - LP: #1508133
  * x86/mce: Reenable CMCI banks when swiching back to interrupt mode
    - LP: #1508133
  * ASoC: adav80x: Remove .read_flag_mask setting from
    adav80x_regmap_config
    - LP: #1508133
  * regulator: pbias: Fix broken pbias disable functionality
    - LP: #1508133
  * serial: 8250: don't bind to SMSC IrCC IR port
    - LP: #1508133
  * serial: 8250: bind to ALi Fast Infrared Controller (ALI5123)
    - LP: #1508133
  * staging: comedi: adl_pci7x3x: fix digital output on PCI-7230
    - LP: #1508133
  * blk-mq: fix buffer overflow when reading sysfs file of 'pending'
    - LP: #1508133
  * xtensa: fix kernel register spilling
    - LP: #1508133
  * NFS: nfs_set_pgio_error sometimes misses errors
    - LP: #1508133
  * NFS: Fix a NULL pointer dereference of migration recovery ops for v4.2
    client
    - LP: #1508133
  * usb: host: ehci-sys: delete useless bus_to_hcd conversion
    - LP: #1508133
  * USB: symbolserial: Use usb_get_serial_port_data
    - LP: #1508133
  * USB: ftdi_sio: Added custom PID for CustomWare products
    - LP: #1508133
  * USB: qcserial: add HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module
    - LP: #1508133
  * igb: Fix oops caused by missing queue pairing
    - LP: #1508133
  * HID: usbhid: Fix the check for HID_RESET_PENDING in hid_io_error
    - LP: #1508133
  * eCryptfs: Invalidate dcache entries when lower i_nlink is zero
    - LP: #1508133
  * libxfs: readahead of dir3 data blocks should use the read verifier
    - LP: #1508133
  * xfs: Fix xfs_attr_leafblock definition
    - LP: #1508133
  * arm64: kconfig: Move LIST_POISON to a safe value
    - LP: #1508133
  * Btrfs: check if previous transaction aborted to avoid fs corruption
    - LP: #1508133
  * ARM: orion5x: fix legacy orion5x IRQ numbers
    - LP: #1508133
  * DRM - radeon: Don't link train DisplayPort on HPD until we get the dpcd
    - LP: #1508133
  * xfs: Fix file type directory corruption for btree directories
    - LP: #1508133
  * sched: Fix cpu_active_mask/cpu_online_mask race
    - LP: #1508133
  * rtlwifi: rtl8192cu: Add new device ID
    - LP: #1508133
  * of/address: Don't loop forever in of_find_matching_node_by_address().
    - LP: #1508133
  * drivercore: Fix unregistration path of platform devices
    - LP: #1508133
  * arm64: flush FP/SIMD state correctly after execve()
    - LP: #1508133
  * xfs: return errors from partial I/O failures to files
    - LP: #1508133
  * ALSA: usb-audio: correct the value cache check.
    - LP: #1508133
  * IB/qib: Change lkey table allocation to support more MRs
    - LP: #1508133
  * drm/radeon/atom: Send out the full AUX address
    - LP: #1508133
  * tg3: Fix temperature reporting
    - LP: #1508133
  * drm/i915: Always mark the object as dirty when used by the GPU
    - LP: #1508133
  * Add radeon suspend/resume quirk for HP Compaq dc5750.
    - LP: #1508133
  * IB/uverbs: reject invalid or unknown opcodes
    - LP: #1508133
  * hpfs: update ctime and mtime on directory modification
    - LP: #1508133
  * Input: evdev - do not report errors form flush()
    - LP: #1508133
  * crypto: ghash-clmulni: specify context size for ghash async algorithm
    - LP: #1508133
  * mm: check if section present during memory block registering
    - LP: #1508133
  * fs: create and use seq_show_option for escaping
    - LP: #1508133
  * ALSA: hda - Enable headphone jack detect on old Fujitsu laptops
    - LP: #1508133
  * ALSA: hda - Use ALC880_FIXUP_FUJITSU for FSC Amilo M1437
    - LP: #1508133
  * rtc: s5m: fix to update ctrl register
    - LP: #1508133
  * scsi: fix scsi_error_handler vs. scsi_host_dev_release race
    - LP: #1508133
  * parisc: Use double word condition in 64bit CAS operation
    - LP: #1508133
  * vmscan: fix increasing nr_isolated incurred by putback unevictable
    pages
    - LP: #1508133
  * drm/i915: Limit the number of loops for reading a split 64bit register
    - LP: #1508133
  * hfs,hfsplus: cache pages correctly between bnode_create and bnode_free
    - LP: #1508133
  * hfs: fix B-tree corruption after insertion at position 0
    - LP: #1508133
  * drm/qxl: validate monitors config modes
    - LP: #1508133
  * PCI: Fix TI816X class code quirk
    - LP: #1508133
  * Input: ambakmi - fix system PM by converting to modern callbacks
    - LP: #1508133
  * svcrdma: Fix send_reply() scatter/gather set-up
    - LP: #1508133
  * x86/mm: Initialize pmd_idx in page_table_range_init_count()
    - LP: #1508133
  * net: bcmgenet: Use correct dev_id for free_irq
    - LP: #1508133
  * powerpc/rtas: Introduce rtas_get_sensor_fast() for IRQ handlers
    - LP: #1508133
  * clk: versatile: off by one in clk_sp810_timerclken_of_get()
    - LP: #1508133
  * usb: gadget: m66592-udc: forever loop in set_feature()
    - LP: #1508133
  * windfarm: decrement client count when unregistering
    - LP: #1508133
  * perf hists: Update the column width for the "srcline" sort key
    - LP: #1508133
  * batman-adv: Make DAT capability changes atomic
    - LP: #1508133
  * batman-adv: Make NC capability changes atomic
    - LP: #1508133
  * batman-adv: Make TT capability changes atomic
    - LP: #1508133
  * batman-adv: fix multicast counter when purging originators
    - LP: #1508133
  * batman-adv: fix counter for multicast supporting nodes
    - LP: #1508133
  * batman-adv: Make MCAST capability changes atomic
    - LP: #1508133
  * batman-adv: Fix potential synchronization issues in mcast tvlv handler
    - LP: #1508133
  * batman-adv: Fix potentially broken skb network header access
    - LP: #1508133
  * net: fix endian check warning in etherdevice.h
    - LP: #1508133
  * powerpc/mm: Fix pte_pagesize_index() crash on 4K w/64K hash
    - LP: #1508133
  * mtd: pxa3xx_nand: add a default chunk size
    - LP: #1508133
  * ath10k: fix dma_mapping_error() handling
    - LP: #1508133
  * mmc: sdhci: also get preset value and driver type for MMC_DDR52
    - LP: #1508133
  * perf stat: Get correct cpu id for print_aggr
    - LP: #1508133
  * ASoC: spear_pcm: Use devm_snd_dmaengine_pcm_register to fix resource
    leak
    - LP: #1508133
  * IB/mlx4: Fix potential deadlock when sending mad to wire
    - LP: #1508133
  * IB/mlx4: Forbid using sysfs to change RoCE pkeys
    - LP: #1508133
  * IB/mlx4: Use correct SL on AH query under RoCE
    - LP: #1508133
  * IB/uverbs: Fix race between ib_uverbs_open and remove_one
    - LP: #1508133
  * mmc: core: fix race condition in mmc_wait_data_done
    - LP: #1508133
  * ipv6: fix exthdrs offload registration in out_rt path
    - LP: #1508133
  * task_work: remove fifo ordering guarantee
    - LP: #1508133
  * fixed_phy: pass 'irq' to fixed_phy_add()
    - LP: #1508133
  * netlink, mmap: fix edge-case leakages in nf queue zero-copy
    - LP: #1508133
  * scsi_dh: fix randconfig build error
    - LP: #1508133
  * md: flush ->event_work before stopping array.
    - LP: #1508133
  * md/raid10: always set reshape_safe when initializing reshape_position.
    - LP: #1508133
  * perf/x86: Fix copy_from_user_nmi() return if range is not ok
    - LP: #1508133
  * ext4: fix loss of delalloc extent info in ext4_zero_range()
    - LP: #1508133
  * powerpc/MSI: Fix race condition in tearing down MSI interrupts
    - LP: #1508133
  * UBI: block: Add missing cache flushes
    - LP: #1508133
  * usbnet: Get EVENT_NO_RUNTIME_PM bit before it is cleared
    - LP: #1508133
  * net/ipv6: Correct PIM6 mrt_lock handling
    - LP: #1508133
  * netlink, mmap: transform mmap skb into full skb on taps
    - LP: #1508133
  * sctp: fix race on protocol/netns initialization
    - LP: #1508133
  * openvswitch: Zero flows on allocation.
    - LP: #1508133
  * fib_rules: fix fib rule dumps across multiple skbs
    - LP: #1508133
  * parisc: Filter out spurious interrupts in PA-RISC irq handler
    - LP: #1508133
  * Linux 3.16.7-ckt18
    - LP: #1508133

-- Luis Henriques <luis.henriques@canonical.com>  Fri, 23 Oct 2015 12:21:56 +0100

Changed in linux-lts-utopic (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Ubuntu
linux package

Something in the Kernel crashes when I try to mount via NFS

Bug Description

CVE References

Duplicates of this bug

Other bug subscribers

Bug attachments

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	High	Unassigned
Precise	Fix Released	Undecided	Luis Henriques
Trusty	Fix Released	Undecided	Luis Henriques
linux-lts-utopic (Ubuntu)	Invalid	Undecided	Unassigned
Precise	Invalid	Undecided	Unassigned
Trusty	Fix Released	Undecided	Luis Henriques

Ubuntulinux package

Something in the Kernel crashes when I try to mount via NFS

Bug Description

CVE References

Duplicates of this bug

Other bug subscribers

Bug attachments

Ubuntu
linux package