Precise update to 3.2.73 stable release

Bug #1520200 reported by Luis Henriques
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Precise
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.73 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.73 stable release:

Revert "KVM: MMU: fix validation of mmio page fault"
module: Fix locking in symbol_put_addr()
regmap: debugfs: Ensure we don't underflow when printing access masks
regmap: debugfs: Don't bother actually printing when calculating max length
ath9k: declare required extra tx headroom
m68k: Define asmlinkage_protect
x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map
UBI: Validate data_size
UBI: return ENOSPC if no enough space available
MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
x86/process: Add proper bound checks in 64bit get_wchan()
genirq: Fix race in register_irq_proc()
mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault
Do not fall back to SMBWriteX in set_file_size error cases
md/raid0: update queue parameter in a safer location.
md/raid0: apply base queue limits *before* disk_stack_limits
clocksource: Fix abs() usage w/ 64bit values
iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
USB: Add reset-resume quirk for two Plantronics usb headphones.
usb: Add device quirk for Logitech PTZ cameras
tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
drivers/tty: require read access for controlling terminal
ppp: don't override sk->sk_state in pppoe_flush_dev()
iwlwifi: dvm: fix D3 firmware PN programming
ALSA: synth: Fix conflicting OSS device registration on AWE32
sched/core: Fix TASK_DEAD race in finish_task_switch()
3w-9xxx: don't unmap bounce buffered commands
xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing)
ALSA: hda - Fix inverted internal mic on Lenovo G50-80
crypto: ahash - ensure statesize is non-zero
iommu/vt-d: fix range computation when making room for large pages
xhci: don't finish a TD if we get a short transfer event mid TD
xhci: handle no ping response error properly
xhci: Switch Intel Lynx Point LP ports to EHCI on shutdown.
xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
crypto: api - Only abort operations on fatal signal
ASoC: wm8904: Correct number of EQ registers
IB/cm: Fix rb-tree duplicate free and use-after-free
drm/nouveau/gem: return only valid domain when there's only one
powerpc/rtas: Validate rtas.entry before calling enter_rtas()
mm: make sendfile(2) killable
ppp: fix pppoe_dev deletion condition in pppoe_release()
dm btree remove: fix a bug when rebalancing nodes after removal
dm btree: fix leak of bufio-backed block in btree_split_beneath error path
md/raid1: ensure device failure recorded before write request returns.
md/raid1: don't clear bitmap bit when bad-block-list write fails.
md/raid10: ensure device failure recorded before write request returns.
md/raid10: don't clear bitmap bit when bad-block-list write fails.
mvsas: Fix NULL pointer dereference in mvs_slot_task_free
sched: declare pid_alive as inline
net: add length argument to skb_copy_and_csum_datagram_iovec
skbuff: Fix skb checksum flag on skb pull
skbuff: Fix skb checksum partial check.
ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
asix: Don't reset PHY on if_up for ASIX 88772
asix: Do full reset during ax88772_bind
Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount
KVM: x86: work around infinite loop in microcode when #AC is delivered
KEYS: Fix race between key destruction and finding a keyring by name
KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
Linux 3.2.73

CVE References

Luis Henriques (henrix)
tags: added: kernel-stable-tracking-bug
Luis Henriques (henrix)
description: updated
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Precise):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (5.4 KiB)

This bug was fixed in the package linux - 3.2.0-96.136

---------------
linux (3.2.0-96.136) precise; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1521325

  [ Andy Whitcroft ]

  * [Packaging] control -- make element ordering deterministic
    - LP: #1516686
  * [Packaging] control -- prepare for new kernel-wedge semantics
    - LP: #1516686

  [ Upstream Kernel Changes ]

  * Revert "KVM: x86: vmx: avoid guest->host DOS by intercepting #AC"
  * Revert "KVM: MMU: fix validation of mmio page fault"
    - LP: #1520200
  * module: Fix locking in symbol_put_addr()
    - LP: #1520200
  * regmap: debugfs: Ensure we don't underflow when printing access masks
    - LP: #1520200
  * regmap: debugfs: Don't bother actually printing when calculating max
    length
    - LP: #1520200
  * ath9k: declare required extra tx headroom
    - LP: #1520200
  * m68k: Define asmlinkage_protect
    - LP: #1520200
  * x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when
    sanitizing map
    - LP: #1520200
  * UBI: Validate data_size
    - LP: #1520200
  * UBI: return ENOSPC if no enough space available
    - LP: #1520200
  * MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
    - LP: #1520200
  * x86/process: Add proper bound checks in 64bit get_wchan()
    - LP: #1520200
  * genirq: Fix race in register_irq_proc()
    - LP: #1520200
  * mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy
    a fault
    - LP: #1520200
  * Do not fall back to SMBWriteX in set_file_size error cases
    - LP: #1520200
  * md/raid0: update queue parameter in a safer location.
    - LP: #1520200
  * md/raid0: apply base queue limits *before* disk_stack_limits
    - LP: #1520200
  * clocksource: Fix abs() usage w/ 64bit values
    - LP: #1520200
  * iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
    - LP: #1520200
  * USB: Add reset-resume quirk for two Plantronics usb headphones.
    - LP: #1520200
  * usb: Add device quirk for Logitech PTZ cameras
    - LP: #1520200
  * tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
    - LP: #1520200
  * drivers/tty: require read access for controlling terminal
    - LP: #1520200
  * ppp: don't override sk->sk_state in pppoe_flush_dev()
    - LP: #1520200
  * iwlwifi: dvm: fix D3 firmware PN programming
    - LP: #1520200
  * ALSA: synth: Fix conflicting OSS device registration on AWE32
    - LP: #1520200
  * sched/core: Fix TASK_DEAD race in finish_task_switch()
    - LP: #1520200
  * 3w-9xxx: don't unmap bounce buffered commands
    - LP: #1520200
  * xen-blkfront: check for null drvdata in blkback_changed
    (XenbusStateClosing)
    - LP: #1520200
  * ALSA: hda - Fix inverted internal mic on Lenovo G50-80
    - LP: #1504778, #1520200
  * crypto: ahash - ensure statesize is non-zero
    - LP: #1520200
  * iommu/vt-d: fix range computation when making room for large pages
    - LP: #1520200
  * xhci: don't finish a TD if we get a short transfer event mid TD
    - LP: #1520200
  * xhci: handle no ping response error properly
    - LP: #1520200
  * xhci: Switch Intel Lynx Point LP ports to EHCI on shutdown.
    - LP: #1520200
  * xhci: Add spurious wak...

Read more...

Changed in linux (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.