Vivid update to 3.19.8-ckt13 stable release

Bug #1537859 reported by Kamal Mostafa on 2016-01-25
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Trusty
Undecided
Unassigned
Vivid
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 3.19.8-ckt13 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches from the 3.19.8-ckt13 stable release shall be applied:

Linux 3.19.8-ckt13
firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6
kvm: x86: only channel 0 of the i8254 is linked to the HPET
net: possible use after free in dst_release
net: sched: fix missing free per cpu on qstats
net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
ASoC: Use nested lock for snd_soc_dapm_mutex_lock
ipv6/addrlabel: fix ip6addrlbl_get()
include/linux/mmdebug.h: should include linux/bug.h
net/mlx4_en: Fix HW timestamp init issue upon system startup
net/mlx4_en: Remove dependency between timestamping capability and service_task
net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration
ser_gigaset: fix deallocation of platform device structure
qlcnic: fix a timeout loop
amd-xgbe: fix a couple timeout loops
mISDN: fix a loop count
sh_eth: fix TX buffer byte-swapping
net: phy: mdio-mux: Check return value of mdiobus_alloc()
pinctrl: bcm2835: Fix initial value for direction_output
sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING
sctp: convert sack_needed and sack_generation to bits
usb: musb: USB_TI_CPPI41_DMA requires dmaengine support
vmstat: allocate vmstat_wq before it is used
ftrace/module: Call clean up function when module init fails early
dts: vt8500: Add SDHC node to DTS file for WM8650
async_tx: use GFP_NOWAIT rather than GFP_IO
ARM: versatile: fix MMC/SD interrupt assignment
tile: provide CONFIG_PAGE_SIZE_64KB etc for tilepro
tracing: Fix setting of start_index in find_next()
ftrace/scripts: Fix incorrect use of sprintf in recordmcount
mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()
ocfs2: fix BUG when calculate new backup super
[PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz
MIPS: uaccess: Fix strlen_user with EVA
ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2)
parisc: Fix syscall restarts
i2c: rcar: disable runtime PM correctly in slave mode
x86/mce: Ensure offline CPUs don't participate in rendezvous process
USB: fix invalid memory access in hub_activate()
USB: ipaq.c: fix a timeout loop
[media] airspy: increase USB control message buffer size
s390/dis: Fix handling of format specifiers
ALSA: hda - Set SKL+ hda controller power at freeze() and thaw()
powerpc/powernv: pr_warn_once on unsupported OPAL_MSG type
ARC: dw2 unwind: Ignore CIE version !=1 gracefully instead of bailing
ARC: dw2 unwind: Reinstante unwinding out of modules
ftrace/scripts: Have recordmcount copy the object file
dma-debug: Fix dma_debug_entry offset calculation
scripts: recordmcount: break hardlinks
spi: fix parent-device reference leak
ALSA: hda - Add a fixup for Thinkpad X1 Carbon 2nd
ARM: 8471/1: need to save/restore arm register(r11) when it is corrupted
ARM: dts: imx6: Fix Ethernet PHY mode on Ventana boards
ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly
genirq: Prevent chip buslock deadlock
tty: Fix GPF in flush_to_ldisc()
n_tty: Fix poll() after buffer-limited eof push read
ASoC: wm8974: set cache type for regmap
sh64: fix __NR_fgetxattr
ocfs2: fix SGID not inherited issue
drivers/base/memory.c: prohibit offlining of memory blocks with missing sections
mm: hugetlb: call huge_pte_alloc() only if ptep is null
mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress
vmstat: Reduce time interval to stat update on idle cpu
mm: hugetlb: fix hugepage memory leak caused by wrong reserve count
parisc iommu: fix panic due to trying to allocate too large region
powercap / RAPL: fix BIOS lock check
USB: add quirk for devices with broken LPM
xhci: fix usb2 resume timing and races.
ses: fix additional element traversal bug
ARM: dts: vf610: use reset values for L2 cache latencies
ASoC: davinci-mcasp: Fix XDATA check in mcasp_start_tx
vgaarb: fix signal handling in vga_get()
ses: Fix problems with simple enclosures
dm btree: fix bufio buffer leaks in dm_btree_del() error path
rfkill: copy the name into the rfkill struct
KVM: PPC: Book3S HV: Prohibit setting illegal transaction state in MSR
ASoC: es8328: Fix deemphasis values
ipmi: move timer init to before irq is setup
dm space map metadata: fix ref counting bug when bootstrapping a new space map
dm thin metadata: fix bug when taking a metadata snapshot
ALSA: hda - Fix noise problems on Thinkpad T440s
crypto: skcipher - Copy iv from desc even for 0-len walks
video: fbdev: fsl: Fix kernel crash when diu_ops is not implemented
radeon: Fix VCE IB test on Big-Endian systems
radeon: Fix VCE ring test for Big-Endian systems
radeon/cik: Fix GFX IB test on Big-Endian
9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
ALSA: hda - Fixing speaker noise on the two latest thinkpad models
IB/srp: Fix possible send queue overflow
IB/srp: Fix a memory leak
virtio: fix memory leak of virtio ida cache layers
vhost: relax log address alignment
ALSA: hda - Add inverted dmic for Packard Bell DOTS
dmaengine: at_xdmac: fix macro typo
net: mvpp2: fix refilling BM pools in RX path
net: mvpp2: fix buffers' DMA handling on RX path
net: mvpp2: fix missing DMA region unmap in egress processing
ALSA: rme96: Fix unexpected volume reset after rate changes
usb: xhci: fix config fail of FS hub behind a HS hub with MTT
perf: Fix PERF_EVENT_IOC_PERIOD deadlock
ARM: 8465/1: mm: keep reserved ASIDs in sync with mm after multiple rollovers
dm btree: fix leak of bufio-backed block in btree_split_sibling error path
xen/events/fifo: Consume unprocessed events when a CPU dies
usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message
USB: whci-hcd: add check for dma mapping error
usb: core : hub: Fix BOS 'NULL pointer' kernel panic
irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB
staging: lustre: echo_copy.._lsm() dereferences userland pointers directly
usb-storage: Fix scsi-sd failure "Invalid field in cdb" for USB adapter JMicron
sata_sil: disable trim
AHCI: Fix softreset failed issue of Port Multiplier
i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs
drm/ttm: Fixed a read/write lock imbalance
jbd2: Fix unreclaimed pages after truncate in data=journal mode
ext4: Fix handling of extended tv_sec
USB: cdc_acm: Ignore Infineon Flash Loader utility
USB: cp210x: Remove CP2110 ID from compatibility list
iio: fix some warning messages
usb: gadget: pxa27x: fix suspend callback
fuse: break infinite loop in fuse_fill_write_pages()
efi: Disable interrupts around EFI calls, not in the epilog/prolog calls
tools: Add a "make all" rule
KEYS: Fix race between read and revoke
af_unix: Revert 'lock_interruptible' in stream receive code
fou: clean up socket with kfree_rcu
bluetooth: Validate socket address length in sco_sock_bind().
pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
skbuff: Fix offset error in skb_reorder_vlan_header
vlan: Fix untag operations of stacked vlans with REORDER_HEADER off
net: fix IP early demux races
sh_eth: fix kernel oops in skb_put()
net: add validation for the socket syscall protocol argument
ipv6: sctp: clone options to avoid use after free
net: qca_spi: fix transmit queue timeout handling
sctp: also copy sk_tsflags when copying the socket
sctp: update the netstamp_needed counter when copying sockets
sctp: use the same clock as if sock source timestamps were on
atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
gre6: allow to update all parameters via rtnl
ip6mr: call del_timer_sync() in ip6mr_free_table()
ARC: Fix silly typo in MAINTAINERS file
sched/wait: Fix the signal handling fix
sched/wait: Fix signal handling in bit wait helpers

tags: added: kernel-stable-tracking-bug
no longer affects: linux (Ubuntu Trusty)
no longer affects: linux (Ubuntu)
description: updated
Brad Figg (brad-figg) on 2016-02-01
summary: - Trusty update to 3.19.8-ckt13 stable release
+ Vivid update to 3.19.8-ckt13 stable release
affects: linux-lts-vivid (Ubuntu) → linux (Ubuntu)
no longer affects: linux (Ubuntu Trusty)
Changed in linux (Ubuntu Vivid):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (12.3 KiB)

This bug was fixed in the package linux - 3.19.0-51.57

---------------
linux (3.19.0-51.57) vivid; urgency=low

  [ Seth Forshee ]

  * SAUCE: cred: Add clone_cred() interface
    - LP: #1531747, #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Use mounter's credentials instead of selectively
    raising caps
    - LP: #1531747, #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.*
    xattrs
    - LP: #1531747, #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Be more careful about copying up sxid files
    - LP: #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576
  * SAUCE: overlayfs: Propogate nosuid from lower and upper mounts
    - LP: #1534961, #1535150
    - CVE-2016-1575 CVE-2016-1576

linux (3.19.0-50.56) vivid; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1540576

  [ J. R. Okajima ]

  * SAUCE: ubuntu: aufs: tiny, extract a new func xino_fwrite_wkq()
    - LP: #1533043
  * SAUCE: ubuntu: aufs: for 4.3, XINO handles EINTR from the dying process
    - LP: #1533043

  [ John Johansen ]

  * SAUCE: (no-up): apparmor: fix for failed mediation of socket that is
    being shutdown
    - LP: #1446906

  [ Upstream Kernel Changes ]

  * drivers/base/memory.c: fix kernel warning during memory hotplug on
    ppc64
    - LP: #1463654
  * sched/wait: Fix signal handling in bit wait helpers
    - LP: #1537859
  * sched/wait: Fix the signal handling fix
    - LP: #1537859
  * ARC: Fix silly typo in MAINTAINERS file
    - LP: #1537859
  * ip6mr: call del_timer_sync() in ip6mr_free_table()
    - LP: #1537859
  * gre6: allow to update all parameters via rtnl
    - LP: #1537859
  * atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
    - LP: #1537859
  * sctp: use the same clock as if sock source timestamps were on
    - LP: #1537859
  * sctp: update the netstamp_needed counter when copying sockets
    - LP: #1537859
  * sctp: also copy sk_tsflags when copying the socket
    - LP: #1537859
  * net: qca_spi: fix transmit queue timeout handling
    - LP: #1537859
  * ipv6: sctp: clone options to avoid use after free
    - LP: #1537859
  * net: add validation for the socket syscall protocol argument
    - LP: #1537859
  * sh_eth: fix kernel oops in skb_put()
    - LP: #1537859
  * net: fix IP early demux races
    - LP: #1537859
  * vlan: Fix untag operations of stacked vlans with REORDER_HEADER off
    - LP: #1537859
  * skbuff: Fix offset error in skb_reorder_vlan_header
    - LP: #1537859
  * pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
    - LP: #1537859
  * bluetooth: Validate socket address length in sco_sock_bind().
    - LP: #1537859
  * fou: clean up socket with kfree_rcu
    - LP: #1537859
  * af_unix: Revert 'lock_interruptible' in stream receive code
    - LP: #1537859
  * KEYS: Fix race between read and revoke
    - LP: #1537859
  * tools: Add a "make all" rule
    - LP: #1537859
  * efi: Disable interrupts around EFI calls, not in the epilog/prolog
    calls
    - LP: #1537859
  * fuse: break infinite loop in fuse_fill_write_pages()
    - LP: #1537859
  * usb: gadget: pxa2...

Changed in linux (Ubuntu Vivid):
status: Fix Committed → Fix Released
Tim Gardner (timg-tpi) on 2016-03-07
Changed in linux (Ubuntu Trusty):
status: New → Invalid
Tim Gardner (timg-tpi) on 2016-03-14
Changed in linux (Ubuntu Trusty):
status: Invalid → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (11.0 KiB)

This bug was fixed in the package linux - 3.13.0-85.129

---------------
linux (3.13.0-85.129) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1558727

  [ Upstream Kernel Changes ]

  * Revert "Revert "af_unix: Revert 'lock_interruptible' in stream receive
    code""

linux (3.13.0-84.128) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1557596

  [ Upstream Kernel Changes ]

  * Revert "af_unix: Revert 'lock_interruptible' in stream receive code"
    - LP: #1540731
  * seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO
    - LP: #1496073
  * net/mlx4_en: Remove dependency between timestamping capability and
    service_task
    - LP: #1537859
  * net/mlx4_en: Fix HW timestamp init issue upon system startup
    - LP: #1537859
  * x86/mm: Fix slow_virt_to_phys() for X86_PAE again
    - LP: #1549601
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1557191
  * EVM: Use crypto_memneq() for digest comparisons
    - LP: #1557191
  * x86/entry/compat: Add missing CLAC to entry_INT80_32
    - LP: #1557191
  * iio: dac: mcp4725: set iio name property in sysfs
    - LP: #1557191
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1557191
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1557191
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1557191
  * mac80211: start_next_roc only if scan was actually running
    - LP: #1557191
  * mac80211: Requeue work after scan complete for all VIF types.
    - LP: #1557191
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1557191
  * crypto: shash - Fix has_key setting
    - LP: #1557191
  * drm/i915/dp: fall back to 18 bpp when sink capability is unknown
    - LP: #1557191
  * target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
    - LP: #1557191
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1557191
  * iio: inkern: fix a NULL dereference on error
    - LP: #1557191
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1557191
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1557191
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1557191
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1557191
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1557191
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1557191
  * libata: fix sff host state machine locking while polling
    - LP: #1557191
  * cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
    - LP: #1557191
  * ASoC: dpcm: fix the BE state on hw_free
    - LP: #1557191
  * module: wrapper for symbol name.
    - LP: #1557191
  * ALSA: hda - Add fixup for Mac Mini 7,1 model
    - LP: #1557191
  * ALSA: Move EXPORT_SYMBOL() in appropriate places
    - LP: #1557191
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1557191
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1557191
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1557191
  * drivers/scsi/sg.c: mark VMA as VM_IO...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers