Precise update to 3.2.73 stable release

Bug #1520200 reported by Luis Henriques on 2015-11-26
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Precise
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.73 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.73 stable release:

Revert "KVM: MMU: fix validation of mmio page fault"
module: Fix locking in symbol_put_addr()
regmap: debugfs: Ensure we don't underflow when printing access masks
regmap: debugfs: Don't bother actually printing when calculating max length
ath9k: declare required extra tx headroom
m68k: Define asmlinkage_protect
x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map
UBI: Validate data_size
UBI: return ENOSPC if no enough space available
MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
x86/process: Add proper bound checks in 64bit get_wchan()
genirq: Fix race in register_irq_proc()
mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault
Do not fall back to SMBWriteX in set_file_size error cases
md/raid0: update queue parameter in a safer location.
md/raid0: apply base queue limits *before* disk_stack_limits
clocksource: Fix abs() usage w/ 64bit values
iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
USB: Add reset-resume quirk for two Plantronics usb headphones.
usb: Add device quirk for Logitech PTZ cameras
tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
drivers/tty: require read access for controlling terminal
ppp: don't override sk->sk_state in pppoe_flush_dev()
iwlwifi: dvm: fix D3 firmware PN programming
ALSA: synth: Fix conflicting OSS device registration on AWE32
sched/core: Fix TASK_DEAD race in finish_task_switch()
3w-9xxx: don't unmap bounce buffered commands
xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing)
ALSA: hda - Fix inverted internal mic on Lenovo G50-80
crypto: ahash - ensure statesize is non-zero
iommu/vt-d: fix range computation when making room for large pages
xhci: don't finish a TD if we get a short transfer event mid TD
xhci: handle no ping response error properly
xhci: Switch Intel Lynx Point LP ports to EHCI on shutdown.
xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
crypto: api - Only abort operations on fatal signal
ASoC: wm8904: Correct number of EQ registers
IB/cm: Fix rb-tree duplicate free and use-after-free
drm/nouveau/gem: return only valid domain when there's only one
powerpc/rtas: Validate rtas.entry before calling enter_rtas()
mm: make sendfile(2) killable
ppp: fix pppoe_dev deletion condition in pppoe_release()
dm btree remove: fix a bug when rebalancing nodes after removal
dm btree: fix leak of bufio-backed block in btree_split_beneath error path
md/raid1: ensure device failure recorded before write request returns.
md/raid1: don't clear bitmap bit when bad-block-list write fails.
md/raid10: ensure device failure recorded before write request returns.
md/raid10: don't clear bitmap bit when bad-block-list write fails.
mvsas: Fix NULL pointer dereference in mvs_slot_task_free
sched: declare pid_alive as inline
net: add length argument to skb_copy_and_csum_datagram_iovec
skbuff: Fix skb checksum flag on skb pull
skbuff: Fix skb checksum partial check.
ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
asix: Don't reset PHY on if_up for ASIX 88772
asix: Do full reset during ax88772_bind
Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount
KVM: x86: work around infinite loop in microcode when #AC is delivered
KEYS: Fix race between key destruction and finding a keyring by name
KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
Linux 3.2.73

CVE References

Luis Henriques (henrix) on 2015-11-26
tags: added: kernel-stable-tracking-bug
Luis Henriques (henrix) on 2015-11-26
description: updated
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Precise):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (5.4 KiB)

This bug was fixed in the package linux - 3.2.0-96.136

---------------
linux (3.2.0-96.136) precise; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1521325

  [ Andy Whitcroft ]

  * [Packaging] control -- make element ordering deterministic
    - LP: #1516686
  * [Packaging] control -- prepare for new kernel-wedge semantics
    - LP: #1516686

  [ Upstream Kernel Changes ]

  * Revert "KVM: x86: vmx: avoid guest->host DOS by intercepting #AC"
  * Revert "KVM: MMU: fix validation of mmio page fault"
    - LP: #1520200
  * module: Fix locking in symbol_put_addr()
    - LP: #1520200
  * regmap: debugfs: Ensure we don't underflow when printing access masks
    - LP: #1520200
  * regmap: debugfs: Don't bother actually printing when calculating max
    length
    - LP: #1520200
  * ath9k: declare required extra tx headroom
    - LP: #1520200
  * m68k: Define asmlinkage_protect
    - LP: #1520200
  * x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when
    sanitizing map
    - LP: #1520200
  * UBI: Validate data_size
    - LP: #1520200
  * UBI: return ENOSPC if no enough space available
    - LP: #1520200
  * MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
    - LP: #1520200
  * x86/process: Add proper bound checks in 64bit get_wchan()
    - LP: #1520200
  * genirq: Fix race in register_irq_proc()
    - LP: #1520200
  * mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy
    a fault
    - LP: #1520200
  * Do not fall back to SMBWriteX in set_file_size error cases
    - LP: #1520200
  * md/raid0: update queue parameter in a safer location.
    - LP: #1520200
  * md/raid0: apply base queue limits *before* disk_stack_limits
    - LP: #1520200
  * clocksource: Fix abs() usage w/ 64bit values
    - LP: #1520200
  * iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
    - LP: #1520200
  * USB: Add reset-resume quirk for two Plantronics usb headphones.
    - LP: #1520200
  * usb: Add device quirk for Logitech PTZ cameras
    - LP: #1520200
  * tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
    - LP: #1520200
  * drivers/tty: require read access for controlling terminal
    - LP: #1520200
  * ppp: don't override sk->sk_state in pppoe_flush_dev()
    - LP: #1520200
  * iwlwifi: dvm: fix D3 firmware PN programming
    - LP: #1520200
  * ALSA: synth: Fix conflicting OSS device registration on AWE32
    - LP: #1520200
  * sched/core: Fix TASK_DEAD race in finish_task_switch()
    - LP: #1520200
  * 3w-9xxx: don't unmap bounce buffered commands
    - LP: #1520200
  * xen-blkfront: check for null drvdata in blkback_changed
    (XenbusStateClosing)
    - LP: #1520200
  * ALSA: hda - Fix inverted internal mic on Lenovo G50-80
    - LP: #1504778, #1520200
  * crypto: ahash - ensure statesize is non-zero
    - LP: #1520200
  * iommu/vt-d: fix range computation when making room for large pages
    - LP: #1520200
  * xhci: don't finish a TD if we get a short transfer event mid TD
    - LP: #1520200
  * xhci: handle no ping response error properly
    - LP: #1520200
  * xhci: Switch Intel Lynx Point LP ports to EHCI on shutdown.
    - LP: #1520200
  * xhci: Add spurious wak...

Read more...

Changed in linux (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers