Trusty update to v3.13.11-ckt33 stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Trusty |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The v3.13.11-ckt33 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
TEST CASE: TBD
The following patches from the v3.13.11-ckt33 stable release shall be applied:
Linux 3.13.11-ckt33
Revert "[stable-only] net: add length argument to skb_copy_
net: possible use after free in dst_release
include/
net: phy: mdio-mux: Check return value of mdiobus_alloc()
qlcnic: fix a timeout loop
sh_eth: fix TX buffer byte-swapping
mISDN: fix a loop count
pinctrl: bcm2835: Fix initial value for direction_output
ser_gigaset: fix deallocation of platform device structure
net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration
ipv6/addrlabel: fix ip6addrlbl_get()
kvm: x86: only channel 0 of the i8254 is linked to the HPET
firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6
vmstat: allocate vmstat_wq before it is used
ftrace/module: Call clean up function when module init fails early
dts: vt8500: Add SDHC node to DTS file for WM8650
async_tx: use GFP_NOWAIT rather than GFP_IO
tracing: Fix setting of start_index in find_next()
ftrace/scripts: Fix incorrect use of sprintf in recordmcount
mm/memory_
ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz
ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2)
parisc: Fix syscall restarts
x86/mce: Ensure offline CPUs don't participate in rendezvous process
USB: fix invalid memory access in hub_activate()
USB: ipaq.c: fix a timeout loop
s390/dis: Fix handling of format specifiers
ALSA: hda - Set SKL+ hda controller power at freeze() and thaw()
ARC: dw2 unwind: Ignore CIE version !=1 gracefully instead of bailing
ARC: dw2 unwind: Reinstante unwinding out of modules
ftrace/scripts: Have recordmcount copy the object file
scripts: recordmcount: break hardlinks
spi: fix parent-device reference leak
ARM: 8471/1: need to save/restore arm register(r11) when it is corrupted
ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly
genirq: Prevent chip buslock deadlock
tty: Fix GPF in flush_to_ldisc()
n_tty: Fix poll() after buffer-limited eof push read
sh64: fix __NR_fgetxattr
drivers/
mm: hugetlb: call huge_pte_alloc() only if ptep is null
mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress
parisc iommu: fix panic due to trying to allocate too large region
powercap / RAPL: fix BIOS lock check
USB: add quirk for devices with broken LPM
xhci: fix usb2 resume timing and races.
ses: fix additional element traversal bug
vgaarb: fix signal handling in vga_get()
ses: Fix problems with simple enclosures
dm btree: fix bufio buffer leaks in dm_btree_del() error path
rfkill: copy the name into the rfkill struct
KVM: PPC: Book3S HV: Prohibit setting illegal transaction state in MSR
ipmi: move timer init to before irq is setup
dm space map metadata: fix ref counting bug when bootstrapping a new space map
dm thin metadata: fix bug when taking a metadata snapshot
crypto: skcipher - Copy iv from desc even for 0-len walks
radeon/cik: Fix GFX IB test on Big-Endian
9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
virtio: fix memory leak of virtio ida cache layers
ALSA: hda - Add inverted dmic for Packard Bell DOTS
ALSA: rme96: Fix unexpected volume reset after rate changes
usb: xhci: fix config fail of FS hub behind a HS hub with MTT
SCSI: Fix NULL pointer dereference in runtime PM
dm btree: fix leak of bufio-backed block in btree_split_sibling error path
usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message
USB: whci-hcd: add check for dma mapping error
usb: core : hub: Fix BOS 'NULL pointer' kernel panic
irqchip/
staging: lustre: echo_copy.._lsm() dereferences userland pointers directly
sata_sil: disable trim
AHCI: Fix softreset failed issue of Port Multiplier
i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs
drm/ttm: Fixed a read/write lock imbalance
jbd2: Fix unreclaimed pages after truncate in data=journal mode
ext4: Fix handling of extended tv_sec
USB: serial: Another Infineon flash loader USB ID
USB: cdc_acm: Ignore Infineon Flash Loader utility
USB: cp210x: Remove CP2110 ID from compatibility list
iio: fix some warning messages
usb: gadget: pxa27x: fix suspend callback
fuse: break infinite loop in fuse_fill_
net: ipmr: fix static mfc/dev leaks on table destruction
efi: Disable interrupts around EFI calls, not in the epilog/prolog calls
tools: Add a "make all" rule
KEYS: Fix race between read and revoke
af_unix: Revert 'lock_interrupt
bluetooth: Validate socket address length in sco_sock_bind().
pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
sh_eth: fix kernel oops in skb_put()
net: add validation for the socket syscall protocol argument
ipv6: sctp: clone options to avoid use after free
sctp: update the netstamp_needed counter when copying sockets
sctp: use the same clock as if sock source timestamps were on
atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
gre6: allow to update all parameters via rtnl
ip6mr: call del_timer_sync() in ip6mr_free_table()
ARC: Fix silly typo in MAINTAINERS file
tags: | added: kernel-stable-tracking-bug |
description: | updated |
Changed in linux (Ubuntu Trusty): | |
status: | New → Fix Committed |
Changed in linux (Ubuntu): | |
status: | New → Invalid |
This bug was fixed in the package linux - 3.13.0-79.123
---------------
linux (3.13.0-79.123) trusty; urgency=low
[ Seth Forshee ]
* SAUCE: cred: Add clone_cred() interface
- LP: #1534961, #1535150
- CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Use mounter's credentials instead of full kernel
credentials
- LP: #1534961, #1535150
- CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.*
xattrs
- LP: #1534961, #1535150
- CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Be more careful about copying up sxid files
- LP: #1534961, #1535150
- CVE-2016-1575 CVE-2016-1576
* SAUCE: overlayfs: Propogate nosuid from lower and upper mounts
- LP: #1534961, #1535150
- CVE-2016-1575 CVE-2016-1576
linux (3.13.0-78.122) trusty; urgency=low
[ Brad Figg ]
* Release Tracking Bug
- LP: #1540559
[ Eric Dumazet ]
* SAUCE: (no-up) udp: properly support MSG_PEEK with truncated buffers
- LP: #1527902
[ J. R. Okajima ]
* SAUCE: ubuntu: aufs: tiny, extract a new func xino_fwrite_wkq()
- LP: #1533043
* SAUCE: ubuntu: aufs: for 4.3, XINO handles EINTR from the dying process
- LP: #1533043
[ Upstream Kernel Changes ]
* Revert "[stable-only] net: add length argument to copy_and_ csum_datagram_ iovec" netdevice : move RTM_DELLINK to until after ndo_uninit t_pagebuffer_ ctl() ible' in stream receive code
skb_
- LP: #1538756
* unregister_
- LP: #1525324
* rtnetlink: delay RTM_DELLINK notification until after ndo_uninit()
- LP: #1525324
* Drivers: hv: Eliminate the channel spinlock in the callback path
- LP: #1519897
* Drivers: hv: vmbus: Implement per-CPU mapping of relid to channel
- LP: #1519897
* Drivers: hv: vmbus: Suport an API to send pagebuffers with additional
control
- LP: #1519897
* Drivers: hv: vmbus: Suport an API to send packet with additional
control
- LP: #1519897
* Drivers: hv: vmbus: Export the vmbus_sendpacke
- LP: #1519897
* Drivers: hv: vmbus: Fix a siganlling host signalling issue
- LP: #1519897
* Drivers: hv: vmbus: Fix a Host signaling bug
- LP: #1519897
* ARC: Fix silly typo in MAINTAINERS file
- LP: #1538756
* ip6mr: call del_timer_sync() in ip6mr_free_table()
- LP: #1538756
* gre6: allow to update all parameters via rtnl
- LP: #1538756
* atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
- LP: #1538756
* sctp: use the same clock as if sock source timestamps were on
- LP: #1538756
* sctp: update the netstamp_needed counter when copying sockets
- LP: #1538756
* ipv6: sctp: clone options to avoid use after free
- LP: #1538756
* net: add validation for the socket syscall protocol argument
- LP: #1538756
* sh_eth: fix kernel oops in skb_put()
- LP: #1538756
* pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
- LP: #1538756
* bluetooth: Validate socket address length in sco_sock_bind().
- LP: #1538756
* af_unix: Revert 'lock_interrupt
- LP: #1538756
* KEYS: Fix race between read and revoke
- LP: #1538756
* tools: Add a "make all" rule
- LP: #1538...