Wily update to v4.2.8-ckt2 stable release

Bug #1536370 reported by Kamal Mostafa
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.2.8-ckt2 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches from the v4.2.8-ckt2 stable release shall be applied:

Linux 4.2.8-ckt2
net: possible use after free in dst_release
sched/core: Reset task's lockless wake-queues on fork()
net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
net: sched: fix missing free per cpu on qstats
ASoC: Use nested lock for snd_soc_dapm_mutex_lock
kvm: x86: only channel 0 of the i8254 is linked to the HPET
firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6
vmstat: allocate vmstat_wq before it is used
ftrace/module: Call clean up function when module init fails early
dts: vt8500: Add SDHC node to DTS file for WM8650
async_tx: use GFP_NOWAIT rather than GFP_IO
ARM: versatile: fix MMC/SD interrupt assignment
ARM: OMAP2+: Fix onenand rate detection to avoid filesystem corruption
tile: provide CONFIG_PAGE_SIZE_64KB etc for tilepro
tracing: Fix setting of start_index in find_next()
ftrace/scripts: Fix incorrect use of sprintf in recordmcount
ALSA: hda - Add keycode map for alc input device
ALSA: hda - Add mic mute hotkey quirk for Lenovo ThinkCentre AIO
ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz
x86/paravirt: Prevent rtc_cmos platform device init on PV guests
x86/mce: Ensure offline CPUs don't participate in rendezvous process
genirq: Prevent chip buslock deadlock
include/linux/mmdebug.h: should include linux/bug.h
net: phy: mdio-mux: Check return value of mdiobus_alloc()
dmaengine: bcm2835-dma: Convert to use DMA pool
qlcnic: fix a timeout loop
sh_eth: fix TX buffer byte-swapping
mISDN: fix a loop count
pinctrl: bcm2835: Fix initial value for direction_output
ser_gigaset: fix deallocation of platform device structure
addrconf: always initialize sysctl table data
netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failure
net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration
serial: 8250_uniphier: fix dl_read and dl_write functions
sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING
sctp: convert sack_needed and sack_generation to bits
phy: sun9i-usb: add USB dependency
amd-xgbe: fix a couple timeout loops
xfrm: add rcu protection to sk->sk_policy[]
ipv6/addrlabel: fix ip6addrlbl_get()
mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()
ocfs2: fix BUG when calculate new backup super
[PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
KVM: MTRR: treat memory as writeback if MTRR is disabled in guest CPUID
KVM: MTRR: observe maxphyaddr from guest CPUID, not host
KVM: MTRR: fix fixed MTRR segment look up
MIPS: CPS: drop .set mips64r2 directives
drm/i915: Only spin whilst waiting on the current request
drm/i915: Limit the busy wait on requests to 5us not 10ms!
drm/i915: Break busywaiting for requests on pending signals
MIPS: uaccess: Fix strlen_user with EVA
ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2)
parisc: Fix syscall restarts
md: remove check for MD_RECOVERY_NEEDED in action_store.
i2c: rcar: disable runtime PM correctly in slave mode
USB: fix invalid memory access in hub_activate()
USB: ipaq.c: fix a timeout loop
[media] airspy: increase USB control message buffer size
[media] Revert "[media] ivtv: avoid going past input/audio array"
s390/dis: Fix handling of format specifiers
ALSA: hda - Set SKL+ hda controller power at freeze() and thaw()
md/raid10: fix data corruption and crash during resync
drm/nouveau/bios/fan: hardcode the fan mode to linear
powerpc/powernv: pr_warn_once on unsupported OPAL_MSG type
ARC: dw2 unwind: Ignore CIE version !=1 gracefully instead of bailing
ARC: dw2 unwind: Reinstante unwinding out of modules
mtd: ubi: don't leak e if schedule_erase() fails
mtd: ubi: fixup error correction in do_sync_erase()
ftrace/scripts: Have recordmcount copy the object file
dma-debug: Fix dma_debug_entry offset calculation
scripts: recordmcount: break hardlinks
spi: fix parent-device reference leak
ALSA: hda - Add a fixup for Thinkpad X1 Carbon 2nd
ALSA: hda - Set codec to D3 at reboot/shutdown on Thinkpads
ALSA: hda - Apply click noise workaround for Thinkpads generically
ALSA: hda - Fix headphone mic input on a few Dell ALC293 machines
ARM: 8471/1: need to save/restore arm register(r11) when it is corrupted
ARM: dts: imx6: Fix Ethernet PHY mode on Ventana boards
drm: Don't overwrite UNVERFIED mode status to OK
ALSA: usb-audio: Add sample rate inquiry quirk for AudioQuest DragonFly
ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly
tty: Fix GPF in flush_to_ldisc()
n_tty: Fix poll() after buffer-limited eof push read
ASoC: wm8974: set cache type for regmap
i2c: designware: fix IO timeout issue for AMD controller
i2c: designware: reverts "i2c: designware: Add support for AMD I2C controller"
ARCv2: intc: Fix random perf irq disabling in SMP setup
powercap / RAPL: fix BIOS lock check
ses: fix additional element traversal bug
ASoC: davinci-mcasp: Fix XDATA check in mcasp_start_tx
Revert "SCSI: Fix NULL pointer dereference in runtime PM"
ses: Fix problems with simple enclosures
rfkill: copy the name into the rfkill struct
dmaengine: at_xdmac: fix at_xdmac_prep_dma_memcpy()
KVM: PPC: Book3S HV: Prohibit setting illegal transaction state in MSR
ASoC: es8328: Fix deemphasis values
crypto: skcipher - Copy iv from desc even for 0-len walks
video: fbdev: fsl: Fix kernel crash when diu_ops is not implemented
dmaengine: at_xdmac: fix macro typo
net: mvpp2: fix refilling BM pools in RX path
net: mvpp2: fix buffers' DMA handling on RX path
net: mvpp2: fix missing DMA region unmap in egress processing
ARM: 8465/1: mm: keep reserved ASIDs in sync with mm after multiple rollovers
xen/events/fifo: Consume unprocessed events when a CPU dies
i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs
i2c: rk3x: populate correct variable for sda_falling_time
usb: musb: USB_TI_CPPI41_DMA requires dmaengine support
sata/mvebu: use #ifdef around suspend/resume code
sched/wait: Fix the signal handling fix
sh64: fix __NR_fgetxattr
ocfs2: fix SGID not inherited issue
drivers/base/memory.c: prohibit offlining of memory blocks with missing sections
mm: hugetlb: call huge_pte_alloc() only if ptep is null
mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress
mm: hugetlb: fix hugepage memory leak caused by wrong reserve count
parisc iommu: fix panic due to trying to allocate too large region
USB: add quirk for devices with broken LPM
xhci: fix usb2 resume timing and races.
ARM: dts: vf610: use reset values for L2 cache latencies
vgaarb: fix signal handling in vga_get()
dm btree: fix bufio buffer leaks in dm_btree_del() error path
ipmi: move timer init to before irq is setup
dm space map metadata: fix ref counting bug when bootstrapping a new space map
dm thin metadata: fix bug when taking a metadata snapshot
ALSA: hda/ca0132 - quirk for Alienware 17 2015
ALSA: hda - Fix noise problems on Thinkpad T440s
radeon: Fix VCE IB test on Big-Endian systems
radeon: Fix VCE ring test for Big-Endian systems
radeon/cik: Fix GFX IB test on Big-Endian
fix the regression from "direct-io: Fix negative return from dio read beyond eof"
9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
of/fdt: Add mutex protection for calls to __unflatten_device_tree()
ALSA: hda - Fixing speaker noise on the two latest thinkpad models
cxl: Set endianess of kernel contexts
powerpc/opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"
powerpc/opal-irqchip: Fix double endian conversion
IB/srp: Fix possible send queue overflow
IB/srp: Fix a memory leak
virtio: fix memory leak of virtio ida cache layers
vhost: relax log address alignment
ALSA: hda - Add inverted dmic for Packard Bell DOTS
ALSA: rme96: Fix unexpected volume reset after rate changes
block: detach bdev inode from its wb in __blkdev_put()
jbd2: fix null committed data return in undo_access
usb: xhci: fix config fail of FS hub behind a HS hub with MTT
xhci: Fix memory leak in xhci_pme_acpi_rtd3_enable()
perf: Fix PERF_EVENT_IOC_PERIOD deadlock
SCSI: Fix NULL pointer dereference in runtime PM
dm thin metadata: fix bug in dm_thin_remove_range()
dm btree: fix leak of bufio-backed block in btree_split_sibling error path
usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message
USB: whci-hcd: add check for dma mapping error
usb: core : hub: Fix BOS 'NULL pointer' kernel panic
irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB
staging: lustre: echo_copy.._lsm() dereferences userland pointers directly
usb-storage: Fix scsi-sd failure "Invalid field in cdb" for USB adapter JMicron
sata_sil: disable trim
AHCI: Fix softreset failed issue of Port Multiplier
ext4: fix an endianness bug in ext4_encrypted_follow_link()
ext4: fix an endianness bug in ext4_encrypted_zeroout()
drm/ttm: Fixed a read/write lock imbalance
jbd2: Fix unreclaimed pages after truncate in data=journal mode
ext4: Fix handling of extended tv_sec
USB: serial: Another Infineon flash loader USB ID
USB: cdc_acm: Ignore Infineon Flash Loader utility
USB: cp210x: Remove CP2110 ID from compatibility list
iio: adc: spmi-vadc: add missing of_node_put
iio: fix some warning messages
usb: gadget: pxa27x: fix suspend callback
fuse: break infinite loop in fuse_fill_write_pages()
cuse: fix memory leak
SUNRPC: Fix callback channel
gpio: omap: drop omap1 mpuio specific irq_mask/unmask callbacks
sched/core: Remove false-positive warning from wake_up_process()
isdn: Partially revert debug format string usage clean up
ipv4: igmp: Allow removing groups from a removed interface
ACPI / property: fix compile error for acpi_node_get_property_reference() when CONFIG_ACPI=n
sched/wait: Fix signal handling in bit wait helpers
drm: imx: convert to drm_crtc_send_vblank_event()
sched/rt: Hide the push_irq_work_func() declaration
remoteproc: avoid stack overflow in debugfs file
drm/rockchip: unset pgoff when mmap'ing gems
mac80211: fix off-channel mgmt-tx uninitialized variable usage
iwlwifi: mvm: don't overwrite the key indices in D3 entry
net: mvneta: add configuration for MBUS windows access protection
net: mvneta: fix bit assignment for RX packet irq enable
net: mvneta: fix bit assignment in MVNETA_RXQ_CONFIG_REG
Don't reset ->total_link_count on nested calls of vfs_path_lookup()
x86/signal: Fix restart_syscall number for x32 tasks
x86/mpx: Fix instruction decoder condition
drm/amdgpu: partially revert "drm/amdgpu: fix VM_CONTEXT*_PAGE_TABLE_END_ADDR" v2
ARM/arm64: KVM: correct PTE uncachedness check
sched/core: Clear the root_domain cpumasks in init_rootdomain()
drm: Fix an unwanted master inheritance v2
PM / Domains: Fix bad of_node_put() in failure paths of genpd_dev_pm_attach()
mac80211: do not actively scan DFS channels
wan/x25: Fix use-after-free in x25_asy_open_tty()
Fix a memory leak in scsi_host_dev_release()
virtio-gpu: use no-merge for fill-modes
drm/amdgpu: fix userptr flags check
direct-io: Fix negative return from dio read beyond eof
block: Always check queue limits for cloned requests
drm/i915: Don't override output type for DDI HDMI
ring-buffer: Update read stamp with first real commit on page
drm/i915: Mark uneven memory banks on gen4 desktop as unknown swizzling
mac80211: ensure we don't update tx power on a non-running sdata
advansys: fix big-endian builds
mac80211: mesh: fix call_rcu() usage
rtlwifi: rtl8821ae: Fix lockups on boot
ASoC: wm8962: correct addresses for HPF_C_0/1
crypto: talitos - Fix timing leak in ESP ICV verification
crypto: nx - Fix timing leak in GCM and CCM decryption
Bluetooth: Fix l2cap_chan leak in SMP
ASoC: rsnd: fixup SCU_SYS_INT_EN1 address
ARM: dts: Kirkwood: Fix QNAP TS219 power-off
ARM: 8454/1: OF implies OF_FLATTREE
thermal: fix thermal_zone_bind_cooling_device prototype
target: fix COMPARE_AND_WRITE non zero SGL offset data corruption
target: Fix race for SCF_COMPARE_AND_WRITE_POST checking
iscsi-target: Fix rx_login_comp hang after login failure
xen/gntdev: Grant maps should not be subject to NUMA balancing
nfs4: resend LAYOUTGET when there is a race that changes the seqid
NFSv4.1/pNFS: Don't request a minimal read layout beyond the end of file
drm/radeon: make some dpm errors debug only
ARM: orion5x: Fix legacy get_irqnr_and_base
ARM: dove: Fix legacy get_irqnr_and_base
ALSA: hda - Fix noise on Gigabyte Z170X mobo
PCI: Prevent out of bounds access in numa_node override
drm/radeon: make rv770_set_sw_state failures non-fatal
arm64: KVM: Fix AArch32 to AArch64 register mapping
ARM/arm64: KVM: test properly for a PTE's uncachedness
ARM: dts: vfxxx: Fix dspi[01] spi-num-chipselects.
ALSA: hda - Fix headphone noise after Dell XPS 13 resume back from S3
nfs4: limit callback decoding to received bytes
vfs: Avoid softlockups with sendfile(2)
vfs: Make sendfile(2) killable even better
fix sysvfs symlinks
dm thin: fix regression in advertised discard limits
ARC: dw2 unwind: Remove falllback linear search thru FDE entries
watchdog: omap_wdt: fix null pointer dereference
ARM: imx: add platform irq type setting in gpc
blk-mq: fix calling unplug callbacks with preempt disabled
ALSA: hda - Apply HP headphone fixups more generically
mac: validate mac_partition is within sector
dm crypt: fix a possible hang due to race condition on exit
ALSA: hda - Add fixup for Acer Aspire One Cloudbook 14
dm thin: restore requested 'error_if_no_space' setting on OODS to WRITE transition
ALSA: hda - Fix noise on Dell Latitude E6440
macvlan: fix leak in macvlan_handle_frame
ipvlan: fix use after free of skb
ipvlan: fix leak in ipvlan_rcv_frame
FS-Cache: Add missing initialization of ret in cachefiles_write_page()
mtd: nand: fix shutdown/reboot for multi-chip systems
net/mlx4_core: Avoid returning success in case of an error flow
perf symbols: Fix dso lookup by long name and missing buildids
stmmac: avoid ipq806x constant overflow warning
mmc: remove bondage between REQ_META and reliable write
parisc: Drop unused MADV_xxxK_PAGES flags from asm/mman.h
kernel/signal.c: unexport sigsuspend()
fat: fix fake_offset handling on error path
xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices
usb: chipidea: debug: disable usb irq while role switch
arm64: kernel: pause/unpause function graph tracer in cpu_suspend()
drm/i915: Don't clobber the addfb2 ioctl params
arm64: mm: use correct mapping granularity under DEBUG_RODATA
ext2, ext4: warn when mounting with dax enabled
USB: qcserial: Fix support for HP lt4112 LTE/HSPA+ Gobi 4G Modem
drm/amdgpu: Fix default page access routing
drm/radeon: unconditionally set sysfs_initialized
drm/radeon: Disable uncacheable CPU mappings of GTT with RV6xx
drm/i915: get runtime PM reference around GEM set_caching IOCTL
drm/i915: quirk backlight present on Macbook 4, 1
ipmi: Start the timer and thread on internal msgs
iio: adc: xilinx: Fix VREFN scale
iio: si7020: Swap data byte order
crypto: qat - don't use userspace pointer
mmc: mmc: Improve reliability of mmc_select_hs400()
mmc: mmc: Move mmc_switch_status()
mmc: mmc: Fix HS setting in mmc_select_hs400()
mmc: mmc: Improve reliability of mmc_select_hs200()
iio: adc: vf610_adc: Fix division by zero error
iio:ad7793: Fix ad7785 product ID
iio: ad5064: Fix ad5629/ad5669 shift
iio:ad5064: Make sure ad5064_i2c_write() returns 0 on success
iio: lpc32xx_adc: fix warnings caused by enabling unprepared clock
vf610_adc: Fix internal temperature calculation
tools: Add a "make all" rule

tags: added: kernel-stable-tracking-bug
description: updated
Brad Figg (brad-figg)
Changed in linux (Ubuntu Wily):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (43.7 KiB)

This bug was fixed in the package linux - 4.2.0-30.35

linux (4.2.0-30.35) wily; urgency=low

  [ Seth Forshee ]

  * SAUCE: cred: Add clone_cred() interface
    - LP: #1531747, #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Use mounter's credentials instead of selectively
    raising caps
    - LP: #1531747, #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.*
    - LP: #1531747, #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Be more careful about copying up sxid files
    - LP: #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Propogate nosuid from lower and upper mounts
    - LP: #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576

linux (4.2.0-29.34) wily; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1543167

  [ Brad Figg ]

  * Revert "SAUCE: apparmor: fix sleep from invalid context"
    - LP: #1542049

  [ Upstream Kernel Changes ]

  * Revert "af_unix: Revert 'lock_interruptible' in stream receive code"
    - LP: #1540731

linux (4.2.0-28.33) wily; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1540634

  [ Brad Figg ]


  [ J. R. Okajima ]

  * SAUCE: ubuntu: aufs: tiny, extract a new func xino_fwrite_wkq()
    - LP: #1533043
  * SAUCE: ubuntu: aufs: for 4.3, XINO handles EINTR from the dying process
    - LP: #1533043

  [ John Johansen ]

  * SAUCE: (no-up): apparmor: fix for failed mediation of socket that is
    being shutdown
    - LP: #1446906
  * SAUCE: apparmor: fix sleep from invalid context
    - LP: #1539349

  [ Tim Gardner ]

  * [Config] Add pvpanic to virtual flavour
    - LP: #1537923

  [ Upstream Kernel Changes ]

  * Revert "ACPI / LPSS: allow to use specific PM domain during ->probe()"
    - LP: #1540532
  * tools: Add a "make all" rule
    - LP: #1536370
  * vf610_adc: Fix internal temperature calculation
    - LP: #1536370
  * iio: lpc32xx_adc: fix warnings caused by enabling unprepared clock
    - LP: #1536370
  * iio:ad5064: Make sure ad5064_i2c_write() returns 0 on success
    - LP: #1536370
  * iio: ad5064: Fix ad5629/ad5669 shift
    - LP: #1536370
  * iio:ad7793: Fix ad7785 product ID
    - LP: #1536370
  * iio: adc: vf610_adc: Fix division by zero error
    - LP: #1536370
  * mmc: mmc: Improve reliability of mmc_select_hs200()
    - LP: #1536370
  * mmc: mmc: Fix HS setting in mmc_select_hs400()
    - LP: #1536370
  * mmc: mmc: Move mmc_switch_status()
    - LP: #1536370
  * mmc: mmc: Improve reliability of mmc_select_hs400()
    - LP: #1536370
  * crypto: qat - don't use userspace pointer
    - LP: #1536370
  * iio: si7020: Swap data byte order
    - LP: #1536370
  * iio: adc: xilinx: Fix VREFN scale
    - LP: #1536370
  * ipmi: Start the timer and thread on internal msgs
    - LP: #1536370
  * drm/i915: quirk backlight present on Macbook 4, 1
    - LP: #1536370
  * drm/i915: get runtime PM reference around GEM set_caching IOCTL
    - LP: #1536370
  * drm/radeon: Disable uncacheable CPU mappings of GTT with RV6xx
    - LP: #1536370

Changed in linux (Ubuntu Wily):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.