Ubuntu
linux-lts-utopic package

CVE-2016-0774

Precise (12.04)
Bug #1563916

Bug #1563916 reported by Steve Beattie on 2016-03-30

256

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-armadaxp (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-flo (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-goldfish (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-lts-quantal (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-raring (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-saucy (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-trusty (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-utopic (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-vivid (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-wily (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-xenial (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mako (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-manta (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-raspi2 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-snapdragon (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned

Bug Description

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.

Break-Fix: local-2016-0774-break local-2016-0774-fix

See original description

Tags:

CVE References

Revision history for this message

Steve Beattie (sbeattie) wrote on 2016-03-30:

CVE-2016-0774

tags:	added: kernel-cve-tracking-bug
information type:	Public → Public Security
Changed in linux-lts-trusty (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Wily):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-xenial (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-xenial (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-xenial (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-manta (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-mako (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-goldfish (Ubuntu Precise):
status:	New → Invalid
Changed in linux-flo (Ubuntu Precise):
status:	New → Invalid
description:	updated
Changed in linux-lts-trusty (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Wily):
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2016-03-30

Changed in linux-lts-raring (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
description:	updated

Steve Beattie (sbeattie) on 2016-04-19

Changed in linux-manta (Ubuntu Xenial):
status:	New → Invalid

Steve Beattie (sbeattie) on 2016-04-19

description:

updated

Steve Beattie (sbeattie) on 2016-04-20

Changed in linux-lts-trusty (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-lts-wily (Ubuntu Trusty):
status:	New → Invalid
Changed in linux (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux (Ubuntu Wily):
status:	New → Invalid
Changed in linux (Ubuntu Xenial):
status:	New → Invalid
Changed in linux (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux-lts-xenial (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	New → Invalid

Steve Beattie (sbeattie) on 2016-04-22

Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Fix Committed

Steve Beattie (sbeattie) on 2016-05-06

Changed in linux-snapdragon (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Yakkety):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
description:	updated

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-05-09:

Download full text (12.7 KiB)

This bug was fixed in the package linux - 3.13.0-86.130

---------------
linux (3.13.0-86.130) trusty; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
- LP: #1571718

[ Benjamin Tissoires ]

  * SAUCE: Input: synaptics - handle spurious release of trackstick
    buttons, again
    - LP: #1553811

[ K. Y. Srinivasan ]

  * SAUCE: (noup): Drivers: hv: vmbus: Fix a bug in
    hv_need_to_signal_on_read()
    - LP: #1556264

[ Kamal Mostafa ]

* [debian] BugLink: close LP: bugs only for Launchpad urls
* [Config] updateconfigs after v3.13.11-ckt38

[ Tim Gardner ]

* [Debian] Fix linux-doc dangling symlinks
- LP: #661306

[ Upstream Kernel Changes ]

This bug was fixed in the package linux - 3.13.0-86.130

---------------
linux (3.13.0-86.130) trusty; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
    - LP: #1571718

[ Benjamin Tissoires ]

* SAUCE: Input: synaptics - handle spurious release of trackstick
    buttons, again
    - LP: #1553811

[ K. Y. Srinivasan ]

* SAUCE: (noup): Drivers: hv: vmbus: Fix a bug in
    hv_need_to_signal_on_read()
    - LP: #1556264

[ Kamal Mostafa ]

* [debian] BugLink: close LP: bugs only for Launchpad urls
  * [Config] updateconfigs after v3.13.11-ckt38

[ Tim Gardner ]

* [Debian] Fix linux-doc dangling symlinks
    - LP: #661306

[ Upstream Kernel Changes ]

* Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
    - LP: #1562900
  * [stable-only] AIO: properly check iovec sizes
    - LP: #1562900
  * Input: aiptek - fix crash on detecting device without endpoints
    - LP: #1562900
  * wext: fix message delay/ordering
    - LP: #1562900
  * cfg80211/wext: fix message ordering
    - LP: #1562900
  * mac80211: fix use of uninitialised values in RX aggregation
    - LP: #1562900
  * libata: fix HDIO_GET_32BIT ioctl
    - LP: #1562900
  * mac80211: minstrel_ht: set default tx aggregation timeout to 0
    - LP: #1562900
  * jffs2: Fix page lock / f->sem deadlock
    - LP: #1562900
  * Fix directory hardlinks from deleted directories
    - LP: #1562900
  * iommu/amd: Fix boot warning when device 00:00.0 is not iommu covered
    - LP: #1562900
  * libata: Align ata_device's id on a cacheline
    - LP: #1562900
  * vfio: fix ioctl error handling
    - LP: #1562900
  * ALSA: ctl: Fix ioctls for X32 ABI
    - LP: #1562900
  * ALSA: rawmidi: Fix ioctls X32 ABI
    - LP: #1562900
  * ALSA: timer: Fix broken compat timer user status ioctl
    - LP: #1562900
  * ALSA: timer: Fix ioctls for X32 ABI
    - LP: #1562900
  * cifs: fix out-of-bounds access in lease parsing
    - LP: #1562900
  * CIFS: Fix SMB2+ interim response processing for read requests
    - LP: #1562900
  * ALSA: hdspm: Fix wrong boolean ctl value accesses
    - LP: #1562900
  * ALSA: hdspm: Fix zero-division
    - LP: #1562900
  * ALSA: hdsp: Fix wrong boolean ctl value accesses
    - LP: #1562900
  * USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
    - LP: #1562900
  * ASoC: wm8958: Fix enum ctl accesses in a wrong type
    - LP: #1562900
  * ASoC: wm8994: Fix enum ctl accesses in a wrong type
    - LP: #1562900
  * ASoC: wm_adsp: Fix enum ctl accesses in a wrong type
    - LP: #1562900
  * USB: serial: option: add support for Telit LE922 PID 0x1045
    - LP: #1562900
  * USB: serial: option: add support for Quectel UC20
    - LP: #1562900
  * ALSA: seq: oss: Don't drain at closing a client
    - LP: #1562900
  * drm/ast: Fix incorrect register check for DRAM width
    - LP: #1562900
  * drm/radeon/pm: update current crtc info after setting the powerstate
    - LP: #1562900
  * PM / sleep / x86: Fix crash on graph trace through x86 suspend
    - LP: #1562900
  * ALSA: hda - Fix mic issues on Acer Aspire E1-472
    - LP: #1562900
  * MIPS: traps: Fix SIGFPE information leak from `do_ov' and
    `do_trap_or_bp'
    - LP: #1562900
  * ubi: Fix out of bounds write in volume update code
    - LP: #1562900
  * KVM: VMX: disable PEBS before a guest entry
    - LP: #1562900
  * ext4: iterate over buffer heads correctly in move_extent_per_page()
    - LP: #1562900
  * net/mlx4_core: Allow resetting VF admin mac to zero
    - LP: #1562900
  * ipv6: re-enable fragment header matching in ipv6_find_hdr
    - LP: #1562900
  * cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind
    - LP: #1562900
  * net: moxa: fix an error code
    - LP: #1562900
  * IB/core: Use GRH when the path hop-limit > 0
    - LP: #1562900
  * Linux 3.13.11-ckt37
    - LP: #1562900
  * Drivers: hv_vmbus: Fix signal to host condition
    - LP: #1556264
  * [stable-only] pipe: Fix buffer offset after partially failed read
    - LP: #1563916
  * EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr()
    - LP: #1567615
  * tty: Fix GPF in flush_to_ldisc(), part 2
    - LP: #1567615
  * [media] media: v4l2-compat-ioctl32: fix missing length copy in
    put_v4l2_buffer32
    - LP: #1567615
  * [media] pwc: Add USB id for Philips Spc880nc webcam
    - LP: #1567615
  * 8250: use callbacks to access UART_DLL/UART_DLM
    - LP: #1567615
  * net: irda: Fix use-after-free in irtty_open()
    - LP: #1567615
  * usb: retry reset if a device times out
    - LP: #1567615
  * HID: core: do not scan reports if the group is already set
    - LP: #1567615
  * HID: fix hid_ignore_special_drivers module parameter
    - LP: #1567615
  * scripts/coccinelle: modernize &
    - LP: #1567615
  * [media] adv7511: TX_EDID_PRESENT is still 1 after a disconnect
    - LP: #1567615
  * [media] saa7134: Fix bytesperline not being set correctly for planar
    formats
    - LP: #1567615
  * perf tools: Dont stop PMU parsing on alias parse error
    - LP: #1567615
  * Bluetooth: btusb: Add new AR3012 ID 13d3:3395
    - LP: #1542564, #1567615
  * Bluetooth: Add new AR3012 ID 0489:e095
    - LP: #1542944, #1567615
  * aacraid: Fix memory leak in aac_fib_map_free
    - LP: #1567615
  * mtd: onenand: fix deadlock in onenand_block_markbad
    - LP: #1567615
  * PCI: Disable IO/MEM decoding for devices with non-compliant BARs
    - LP: #1567615
  * md/raid5: Compare apples to apples (or sectors to sectors)
    - LP: #1567615
  * Bluetooth: btusb: Add a new AR3012 ID 04ca:3014
    - LP: #1546694, #1567615
  * IB/srpt: Simplify srpt_handle_tsk_mgmt()
    - LP: #1567615
  * [media] bttv: Width must be a multiple of 16 when capturing planar
    formats
    - LP: #1567615
  * watchdog: rc32434_wdt: fix ioctl error handling
    - LP: #1567615
  * xfs: fix two memory leaks in xfs_attr_list.c error paths
    - LP: #1567615
  * quota: Fix possible GPF due to uninitialised pointers
    - LP: #1567615
  * mtip32xx: Print exact time when an internal command is interrupted
    - LP: #1567615
  * KVM: i8254: change PIT discard tick policy
    - LP: #1567615
  * sched/cputime: Fix steal time accounting vs. CPU hotplug
    - LP: #1567615
  * rt2x00: add new rt2800usb device Buffalo WLI-UC-G450
    - LP: #1567615
  * pinctrl-bcm2835: Fix cut-and-paste error in "pull" parsing
    - LP: #1567615
  * perf/core: Fix perf_sched_count derailment
    - LP: #1567615
  * perf/x86/intel: Use PAGE_SIZE for PEBS buffer size on Core2
    - LP: #1567615
  * bcache: fix cache_set_flush() NULL pointer dereference on OOM
    - LP: #1567615
  * x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant
    BARs
    - LP: #1567615
  * be2iscsi: set the boot_kset pointer to NULL in case of failure
    - LP: #1567615
  * drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards.
    - LP: #1567615
  * sg: fix dxferp in from_to case
    - LP: #1567615
  * jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount
    path
    - LP: #1567615
  * Bluetooth: btusb: Add a new AR3012 ID 13d3:3472
    - LP: #1552925, #1567615
  * iser-target: Separate flows for np listeners and connections cma events
    - LP: #1567615
  * xtensa: ISS: don't hang if stdin EOF is reached
    - LP: #1567615
  * xtensa: clear all DBREAKC registers on start
    - LP: #1567615
  * bus: imx-weim: Take the 'status' property value into account
    - LP: #1567615
  * ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41.
    - LP: #1567615
  * s390/pci: enforce fmb page boundary rule
    - LP: #1567615
  * Input: powermate - fix oops with malicious USB descriptors
    - LP: #1567615
  * net: mvneta: enable change MAC address when interface is up
    - LP: #1567615
  * HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report()
    - LP: #1567615
  * ALSA: hda - Fix unconditional GPIO toggle via automute
    - LP: #1567615
  * ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk()
    - LP: #1567615
  * ALSA: usb-audio: Add sanity checks for endpoint accesses
    - LP: #1567615
  * nfsd: fix deadlock secinfo+readdir compound
    - LP: #1567615
  * x86/iopl: Fix iopl capability check on Xen PV
    - LP: #1567615
  * Input: ims-pcu - sanity check against missing interfaces
    - LP: #1567615
  * x86/apic: Fix suspicious RCU usage in
    smp_trace_call_function_interrupt()
    - LP: #1567615
  * USB: iowarrior: fix oops with malicious USB descriptors
    - LP: #1567615
  * USB: usb_driver_claim_interface: add sanity checking
    - LP: #1567615
  * USB: cdc-acm: more sanity checking
    - LP: #1567615
  * USB: uas: Reduce can_queue to MAX_CMNDS
    - LP: #1567615
  * tracing: Have preempt(irqs)off trace preempt disabled functions
    - LP: #1567615
  * tracing: Fix crash from reading trace_pipe with sendfile
    - LP: #1567615
  * splice: handle zero nr_pages in splice_to_pipe()
    - LP: #1567615
  * target: Fix target_release_cmd_kref shutdown comp leak
    - LP: #1567615
  * KVM: VMX: avoid guest hang on invalid invept instruction
    - LP: #1567615
  * KVM: fix spin_lock_init order on x86
    - LP: #1567615
  * tracing: Fix trace_printk() to print when not using bprintk()
    - LP: #1567615
  * fs/coredump: prevent fsuid=0 dumps into user-controlled directories
    - LP: #1567615
  * rapidio/rionet: fix deadlock on SMP
    - LP: #1567615
  * Input: ati_remote2 - fix crashes on detecting device with invalid
    descriptor
    - LP: #1567615
  * MAINTAINERS: Update mailing list and web page for hwmon subsystem
    - LP: #1567615
  * ocfs2/dlm: fix race between convert and recovery
    - LP: #1567615
  * ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
    - LP: #1567615
  * clk: xgene: Add missing parenthesis when clearing divider value
    - LP: #1567615
  * ppp: take reference on channels netns
    - LP: #1567615
  * mdio-sun4i: oops in error handling in probe
    - LP: #1567615
  * net: Fix use after free in the recvmmsg exit path
    - LP: #1567615
  * ethernet: micrel: fix some error codes
    - LP: #1567615
  * misc/bmp085: Enable building as a module
    - LP: #1567615
  * net/mlx5: Make command timeout way shorter
    - LP: #1567615
  * ipvs: correct initial offset of Call-ID header search in SIP
    persistence engine
    - LP: #1567615
  * ath9k: fix buffer overrun for ar9287
    - LP: #1567615
  * mtd: map: fix .set_vpp() documentation
    - LP: #1567615
  * ARM: OMAP3: Add cpuidle parameters table for omap3430
    - LP: #1567615
  * rtc: vr41xx: Wire up alarm_irq_enable
    - LP: #1567615
  * sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a
    race
    - LP: #1567615
  * ipv4: fix broadcast packets reception
    - LP: #1567615
  * lpfc: fix misleading indentation
    - LP: #1567615
  * ASoC: s3c24xx: use const snd_soc_component_driver pointer
    - LP: #1567615
  * kbuild/mkspec: fix grub2 installkernel issue
    - LP: #1567615
  * paride: make 'verbose' parameter an 'int' again
    - LP: #1567615
  * ppp: ensure file->private_data can't be overridden
    - LP: #1567615
  * clk: versatile: sp810: support reentrance
    - LP: #1567615
  * drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
    - LP: #1567615
  * perf stat: Document --detailed option
    - LP: #1567615
  * x86/iopl/64: Properly context-switch IOPL on Xen PV
    - LP: #1567615
  * Linux 3.13.11-ckt38
    - LP: #1567615
  * drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
    - LP: #1571041
  * hwmon: (max1111) Return -ENODEV from max1111_read_channel if not
    instantiated
    - LP: #1571041
  * drm/radeon: add another R7 370 quirk
    - LP: #1571041
  * usb: renesas_usbhs: avoid NULL pointer derefernce in
    usbhsf_pkt_handler()
    - LP: #1571041
  * usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer
    - LP: #1571041
  * USB: mct_u232: add sanity checking in probe
    - LP: #1571041
    - CVE-2016-3136
  * USB: cypress_m8: add endpoint sanity check
    - LP: #1571041
    - CVE-2016-3137
  * USB: digi_acceleport: do sanity checking for the number of ports
    - LP: #1571041
  * ALSA: timer: Use mod_timer() for rearming the system timer
    - LP: #1571041
  * mm: fix invalid node in alloc_migrate_target()
    - LP: #1571041
  * iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
    - LP: #1571041
  * USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices
    - LP: #1571041
  * USB: serial: cp210x: Adding GE Healthcare Device ID
    - LP: #1571041
  * USB: option: add "D-Link DWM-221 B1" device id
    - LP: #1571041
  * parisc: Avoid function pointers for kernel exception routines
    - LP: #1571041
  * ip6_tunnel: set rtnl_link_ops before calling register_netdevice
    - LP: #1571041
  * Linux 3.13.11-ckt39
    - LP: #1571041
  * include/linux/poison.h: fix LIST_POISON{1,2} offset
    - LP: #1561389
    - CVE-2016-0821
  * ipv4: Don't do expensive useless work during inetdev destroy.
    - LP: #1558847
    - CVE-2016-3156

-- Kamal Mostafa <kamal@canonical.com>  Mon, 18 Apr 2016 09:03:12 -0700

Changed in linux (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-05-09:

Download full text (16.2 KiB)

This bug was fixed in the package linux - 3.2.0-102.142

---------------
linux (3.2.0-102.142) precise; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
- LP: #1571853

[ Kamal Mostafa ]

* [debian] BugLink: close LP: bugs only for Launchpad urls

[ Upstream Kernel Changes ]

This bug was fixed in the package linux - 3.2.0-102.142

---------------
linux (3.2.0-102.142) precise; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
    - LP: #1571853

[ Kamal Mostafa ]

* [debian] BugLink: close LP: bugs only for Launchpad urls

[ Upstream Kernel Changes ]

* Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
    - LP: #1564815
  * gspca: ov534/topro: prevent a division by 0
    - LP: #1563911
  * media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
    - LP: #1563911
  * rc: allow rc modules to be loaded if rc-main is not a module
    - LP: #1563911
  * SCSI: initio: remove duplicate module device table
    - LP: #1563911
  * KVM: x86: expose MSR_TSC_AUX to userspace
    - LP: #1563911
  * KVM: x86: correctly print #AC in traces
    - LP: #1563911
  * ath9k_htc: check for underflow in ath9k_htc_rx_msg()
    - LP: #1563911
  * mtd: nand: fix ONFI parameter page layout
    - LP: #1563911
  * xhci: refuse loading if nousb is used
    - LP: #1563911
  * rtlwifi: fix memory leak for USB device
    - LP: #1563911
  * wlcore: SPI - fix spi transfer_list
    - LP: #1563911
  * wlcore/wl12xx: spi: fix oops on firmware load
    - LP: #1563911
  * EDAC: Robustify workqueues destruction
    - LP: #1563911
  * powerpc: Make value-returning atomics fully ordered
    - LP: #1563911
  * powerpc: Make {cmp}xchg* and their atomic_ versions fully ordered
    - LP: #1563911
  * asix: silence log message from oversize packet
    - LP: #1563911
  * futex: Drop refcount if requeue_pi() acquired the rtmutex
    - LP: #1563911
  * ALSA: fm801: propagate TUNER_ONLY bit when autodetected
    - LP: #1563911
  * drm/radeon: clean up fujitsu quirks
    - LP: #1563911
  * udf: limit the maximum number of indirect extents in a row
    - LP: #1563911
  * USB: cp210x: add ID for ELV Marble Sound Board 1
    - LP: #1563911
  * posix-clock: Fix return code on the poll method's error path
    - LP: #1563911
  * x86/LDT: Print the real LDT base address
    - LP: #1563911
  * rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
    - LP: #1563911
  * rtlwifi: rtl8192se: Fix module parameter initialization
    - LP: #1563911
  * rtlwifi: rtl8192ce: Fix handling of module parameters
    - LP: #1563911
  * rtlwifi: rtl8192cu: Add missing parameter setup
    - LP: #1563911
  * NFS: Fix attribute cache revalidation
    - LP: #1563911
  * Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
    - LP: #1563911
  * x86/xen: don't reset vcpu_info on a cancelled suspend
    - LP: #1563911
  * udf: Prevent buffer overrun with multi-byte characters
    - LP: #1563911
  * udf: Check output buffer length when converting name to CS0
    - LP: #1563911
  * power: test_power: correctly handle empty writes
    - LP: #1563911
  * locks: fix unlock when fcntl_setlk races with a close
    - LP: #1563911
  * dm snapshot: fix hung bios when copy error occurs
    - LP: #1563911
  * uml: fix hostfs mknod()
    - LP: #1563911
  * uml: flush stdout before forking
    - LP: #1563911
  * ipv6: tcp: add rcu locking in tcp_v6_send_synack()
    - LP: #1563911
  * x86/mm: Add barriers and document switch_mm()-vs-flush synchronization
    - LP: #1563911
  * x86/boot: Double BOOT_HEAP_SIZE to 64KB
    - LP: #1563911
  * x86/reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[]
    - LP: #1563911
  * ALSA: seq: Fix missing NULL check at remove_events ioctl
    - LP: #1563911
  * ALSA: seq: Fix race at timer setup and close
    - LP: #1563911
  * parisc: Fix __ARCH_SI_PREAMBLE_SIZE
    - LP: #1563911
  * x86/mm: Improve switch_mm() barrier comments
    - LP: #1563911
  * ALSA: timer: Fix double unlink of active_list
    - LP: #1563911
  * ALSA: timer: Fix race among timer ioctls
    - LP: #1563911
  * sparc64: fix incorrect sign extension in sys_sparc64_personality
    - LP: #1563911
  * cifs: Ratelimit kernel log messages
    - LP: #1563911
  * cifs: fix race between call_async() and reconnect()
    - LP: #1563911
  * cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
    - LP: #1563911
  * m32r: fix m32104ut_defconfig build fail
    - LP: #1563911
  * dma-debug: switch check from _text to _stext
    - LP: #1563911
  * scripts/bloat-o-meter: fix python3 syntax error
    - LP: #1563911
  * ocfs2/dlm: ignore cleaning the migration mle that is inuse
    - LP: #1563911
  * ALSA: timer: Harden slave timer list handling
    - LP: #1563911
  * memcg: only free spare array when readers are done
    - LP: #1563911
  * printk: help pr_debug and pr_devel to optimize out arguments
    - LP: #1563911
  * crypto: af_alg - Fix socket double-free when accept fails
    - LP: #1563911
  * ALSA: hrtimer: Fix stall by hrtimer_cancel()
    - LP: #1563911
  * ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode
    - LP: #1563911
  * ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode
    - LP: #1563911
  * ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0
    - LP: #1563911
  * IB/qib: fix mcast detach when qp not attached
    - LP: #1563911
  * IB/mlx4: Initialize hop_limit when creating address handle
    - LP: #1563911
  * ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with
    ocfs2_unblock_lock
    - LP: #1563911
  * crypto: algif_skcipher - Require setkey before accept(2)
    - LP: #1563911
  * crypto: af_alg - Disallow bind/setkey/... after accept(2)
    - LP: #1563911
  * crypto: af_alg - Add nokey compatibility path
    - LP: #1563911
  * crypto: algif_skcipher - Add nokey compatibility path
    - LP: #1563911
  * crypto: hash - Add crypto_ahash_has_setkey
    - LP: #1563911
  * crypto: algif_hash - Require setkey before accept(2)
    - LP: #1563911
  * crypto: skcipher - Add crypto_skcipher_has_setkey
    - LP: #1563911
  * crypto: algif_skcipher - Add key check exception for cipher_null
    - LP: #1563911
  * crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey
    path
    - LP: #1563911
  * crypto: algif_hash - Remove custom release parent function
    - LP: #1563911
  * crypto: algif_skcipher - Remove custom release parent function
    - LP: #1563911
  * crypto: af_alg - Forbid bind(2) when nokey child sockets are present
    - LP: #1563911
  * crypto: algif_hash - Fix race condition in hash_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Fix race condition in skcipher_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Load TX SG list after waiting
    - LP: #1563911
  * sctp: Prevent soft lockup when sctp_accept() is called during a timeout
    event
    - LP: #1563911
  * usbvision-video: fix memory leak of alt_max_pkt_size
    - LP: #1563911
  * usbvision: fix leak of usb_dev on failure paths in usbvision_probe()
    - LP: #1563911
  * usbvision fix overflow of interfaces array
    - LP: #1563911
  * usbvision: fix crash on detecting device with invalid configuration
    - LP: #1563911
  * Linux 3.2.77
    - LP: #1563911
  * KVM: vmx: fix MPX detection
    - LP: #1563914
  * hrtimer: Handle remaining time proper for TIME_LOW_RES
    - LP: #1563914
  * timerfd: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * posix-timers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * itimers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * usb: cdc-acm: send zero packet for intel 7260 modem
    - LP: #1563914
  * cdc-acm:exclude Samsung phone 04e8:685d
    - LP: #1563914
  * af_unix: fix struct pid memory leak
    - LP: #1563914
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1563914
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1563914
  * USB: cp210x: add ID for IAI USB to RS485 adaptor
    - LP: #1563914
  * USB: visor: fix null-deref at probe
    - LP: #1563914
  * USB: serial: visor: fix crash on detecting device without write_urbs
    - LP: #1563914
  * USB: serial: option: Adding support for Telit LE922
    - LP: #1563914
  * ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
    - LP: #1563914
  * ALSA: seq: Degrade the error message for too many opens
    - LP: #1563914
  * USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
    - LP: #1563914
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1563914
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1563914
  * virtio_pci: fix use after free on release
    - LP: #1563914
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1563914
  * perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed
    - LP: #1563914
  * SCSI: fix crashes in sd and sr runtime PM
    - LP: #1563914
  * tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
    - LP: #1563914
  * crypto: shash - Fix has_key setting
    - LP: #1563914
  * ALSA: dummy: Disable switching timer backend via sysfs
    - LP: #1563914
  * drm/vmwgfx: respect 'nomodeset'
    - LP: #1563914
  * x86/mm/pat: Avoid truncation when converting cpa->numpages to address
    - LP: #1563914
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1563914
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1563914
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1563914
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1563914
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1563914
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1563914
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1563914
  * libata: fix sff host state machine locking while polling
    - LP: #1563914
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1563914
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1563914
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1563914
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1563914
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1563914
  * tda1004x: only update the frontend properties if locked
    - LP: #1563914
  * ALSA: timer: Fix leftover link at closing
    - LP: #1563914
  * saa7134-alsa: Only frees registered sound cards
    - LP: #1563914
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1563914
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1563914
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1563914
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1563914
  * klist: fix starting point removed bug in klist iterators
    - LP: #1563914
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1563914
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1563914
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1563914
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1563914
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1563914
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1563914
  * ahci: Intel DNV device IDs SATA
    - LP: #1563914
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1563914
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1563914
  * unix: properly account for FDs passed over unix sockets
    - LP: #1563914
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1563914
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1563914
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1563914
  * pipe: Fix buffer offset after partially failed read
    - LP: #1563914, #1563916
    - CVE-2016-0774
  * sched: fix __sched_setscheduler() vs load balancing race
    - LP: #1563914
  * Linux 3.2.78
    - LP: #1563914
  * crypto: {blk,giv}cipher: Set has_setkey
    - LP: #1564815
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1564815
  * wext: fix message delay/ordering
    - LP: #1564815
  * cfg80211/wext: fix message ordering
    - LP: #1564815
  * mac80211: fix use of uninitialised values in RX aggregation
    - LP: #1564815
  * nfs: fix nfs_size_to_loff_t
    - LP: #1564815
  * drm/i915: fix error path in intel_setup_gmbus()
    - LP: #1564815
  * cifs: fix erroneous return value
    - LP: #1564815
  * s390/dasd: prevent incorrect length error under z/VM after PAV changes
    - LP: #1564815
  * s390/dasd: fix refcount for PAV reassignment
    - LP: #1564815
  * libata: fix HDIO_GET_32BIT ioctl
    - LP: #1564815
  * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
    - LP: #1564815
  * xen/pciback: Save the number of MSI-X entries to be copied later.
    - LP: #1564815
  * xen/pcifront: Fix mysterious crashes when NUMA locality information was
    extracted.
    - LP: #1564815
  * ALSA: seq: Fix leak of pool buffer at concurrent writes
    - LP: #1564815
  * tracepoints: Do not trace when cpu is offline
    - LP: #1564815
  * tracing: Fix freak link error caused by branch tracer
    - LP: #1564815
  * ALSA: seq: Fix double port list deletion
    - LP: #1564815
  * af_unix: Don't set err in unix_stream_read_generic unless there was an
    error
    - LP: #1564815
  * af_unix: Guard against other == sk in unix_dgram_sendmsg
    - LP: #1564815
  * x86, extable: Remove open-coded exception table entries in
    arch/x86/lib/copy_user_nocache_64.S
    - LP: #1564815
  * x86/uaccess/64: Make the __copy_user_nocache() assembly code more
    readable
    - LP: #1564815
  * x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in
    __copy_user_nocache()
    - LP: #1564815
  * usb: dwc3: Fix assignment of EP transfer resources
    - LP: #1564815
  * net/mlx4_en: Count HW buffer overrun only once
    - LP: #1564815
  * USB: option: add support for SIM7100E
    - LP: #1564815
  * USB: cp210x: add IDs for GE B650V3 and B850V3 boards
    - LP: #1564815
  * USB: option: add "4G LTE usb-modem U901"
    - LP: #1564815
  * Adding Intel Lewisburg device IDs for SATA
    - LP: #1564815
  * ext4: fix bh->b_state corruption
    - LP: #1564815
  * kernel/resource.c: fix muxed resource handling in __request_region()
    - LP: #1564815
  * can: ems_usb: Fix possible tx overflow
    - LP: #1564815
  * mac80211: minstrel_ht: set default tx aggregation timeout to 0
    - LP: #1564815
  * sunrpc/cache: fix off-by-one in qword_get()
    - LP: #1564815
  * KVM: async_pf: do not warn on page allocation failures
    - LP: #1564815
  * jffs2: Fix page lock / f->sem deadlock
    - LP: #1564815
  * Fix directory hardlinks from deleted directories
    - LP: #1564815
  * libata: Align ata_device's id on a cacheline
    - LP: #1564815
  * ipr: Fix out-of-bounds null overwrite
    - LP: #1564815
  * ipr: Fix regression when loading firmware
    - LP: #1564815
  * mm: thp: fix SMP race condition between THP page fault and
    MADV_DONTNEED
    - LP: #1564815
  * hpfs: don't truncate the file when delete fails
    - LP: #1564815
  * ALSA: timer: Fix broken compat timer user status ioctl
    - LP: #1564815
  * ALSA: hdspm: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * ALSA: hdsp: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
    - LP: #1564815
  * ASoC: wm8958: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * ASoC: wm8994: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * USB: serial: option: add support for Quectel UC20
    - LP: #1564815
  * ALSA: seq: oss: Don't drain at closing a client
    - LP: #1564815
  * PM / sleep / x86: Fix crash on graph trace through x86 suspend
    - LP: #1564815
  * IB/core: Use GRH when the path hop-limit > 0
    - LP: #1564815
  * mld, igmp: Fix reserved tailroom calculation
    - LP: #1564815
  * MIPS: traps: Fix SIGFPE information leak from `do_ov' and
    `do_trap_or_bp'
    - LP: #1564815
  * ubi: Fix out of bounds write in volume update code
    - LP: #1564815
  * s390/mm: four page table levels vs. fork
    - LP: #1564815
  * Input: aiptek - fix crash on detecting device without endpoints
    - LP: #1564815
  * include/linux/poison.h: fix LIST_POISON{1,2} offset
    - LP: #1564815
  * HID: usbhid: fix recursive deadlock
    - LP: #1564815
  * Linux 3.2.79
    - LP: #1564815

-- Kamal Mostafa <kamal@canonical.com>  Mon, 18 Apr 2016 14:51:21 -0700

Changed in linux (Ubuntu Precise):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-05-09:

Download full text (16.3 KiB)

This bug was fixed in the package linux-armadaxp - 3.2.0-1665.90

---------------
linux-armadaxp (3.2.0-1665.90) precise; urgency=low

[ Ike Panhc ]

  * Release Tracking Bug
    - LP: #1572755
  * Rebase to Ubuntu-3.2.0-102.142

[ Ubuntu: 3.2.0-102.142 ]

This bug was fixed in the package linux-armadaxp - 3.2.0-1665.90

---------------
linux-armadaxp (3.2.0-1665.90) precise; urgency=low

[ Ike Panhc ]

* Release Tracking Bug
    - LP: #1572755
  * Rebase to Ubuntu-3.2.0-102.142

[ Ubuntu: 3.2.0-102.142 ]

* Release Tracking Bug
    - LP: #1571853
  * [debian] BugLink: close LP: bugs only for Launchpad urls
  * Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
    - LP: #1564815
  * gspca: ov534/topro: prevent a division by 0
    - LP: #1563911
  * media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
    - LP: #1563911
  * rc: allow rc modules to be loaded if rc-main is not a module
    - LP: #1563911
  * SCSI: initio: remove duplicate module device table
    - LP: #1563911
  * KVM: x86: expose MSR_TSC_AUX to userspace
    - LP: #1563911
  * KVM: x86: correctly print #AC in traces
    - LP: #1563911
  * ath9k_htc: check for underflow in ath9k_htc_rx_msg()
    - LP: #1563911
  * mtd: nand: fix ONFI parameter page layout
    - LP: #1563911
  * xhci: refuse loading if nousb is used
    - LP: #1563911
  * rtlwifi: fix memory leak for USB device
    - LP: #1563911
  * wlcore: SPI - fix spi transfer_list
    - LP: #1563911
  * wlcore/wl12xx: spi: fix oops on firmware load
    - LP: #1563911
  * EDAC: Robustify workqueues destruction
    - LP: #1563911
  * powerpc: Make value-returning atomics fully ordered
    - LP: #1563911
  * powerpc: Make {cmp}xchg* and their atomic_ versions fully ordered
    - LP: #1563911
  * asix: silence log message from oversize packet
    - LP: #1563911
  * futex: Drop refcount if requeue_pi() acquired the rtmutex
    - LP: #1563911
  * ALSA: fm801: propagate TUNER_ONLY bit when autodetected
    - LP: #1563911
  * drm/radeon: clean up fujitsu quirks
    - LP: #1563911
  * udf: limit the maximum number of indirect extents in a row
    - LP: #1563911
  * USB: cp210x: add ID for ELV Marble Sound Board 1
    - LP: #1563911
  * posix-clock: Fix return code on the poll method's error path
    - LP: #1563911
  * x86/LDT: Print the real LDT base address
    - LP: #1563911
  * rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
    - LP: #1563911
  * rtlwifi: rtl8192se: Fix module parameter initialization
    - LP: #1563911
  * rtlwifi: rtl8192ce: Fix handling of module parameters
    - LP: #1563911
  * rtlwifi: rtl8192cu: Add missing parameter setup
    - LP: #1563911
  * NFS: Fix attribute cache revalidation
    - LP: #1563911
  * Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
    - LP: #1563911
  * x86/xen: don't reset vcpu_info on a cancelled suspend
    - LP: #1563911
  * udf: Prevent buffer overrun with multi-byte characters
    - LP: #1563911
  * udf: Check output buffer length when converting name to CS0
    - LP: #1563911
  * power: test_power: correctly handle empty writes
    - LP: #1563911
  * locks: fix unlock when fcntl_setlk races with a close
    - LP: #1563911
  * dm snapshot: fix hung bios when copy error occurs
    - LP: #1563911
  * uml: fix hostfs mknod()
    - LP: #1563911
  * uml: flush stdout before forking
    - LP: #1563911
  * ipv6: tcp: add rcu locking in tcp_v6_send_synack()
    - LP: #1563911
  * x86/mm: Add barriers and document switch_mm()-vs-flush synchronization
    - LP: #1563911
  * x86/boot: Double BOOT_HEAP_SIZE to 64KB
    - LP: #1563911
  * x86/reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[]
    - LP: #1563911
  * ALSA: seq: Fix missing NULL check at remove_events ioctl
    - LP: #1563911
  * ALSA: seq: Fix race at timer setup and close
    - LP: #1563911
  * parisc: Fix __ARCH_SI_PREAMBLE_SIZE
    - LP: #1563911
  * x86/mm: Improve switch_mm() barrier comments
    - LP: #1563911
  * ALSA: timer: Fix double unlink of active_list
    - LP: #1563911
  * ALSA: timer: Fix race among timer ioctls
    - LP: #1563911
  * sparc64: fix incorrect sign extension in sys_sparc64_personality
    - LP: #1563911
  * cifs: Ratelimit kernel log messages
    - LP: #1563911
  * cifs: fix race between call_async() and reconnect()
    - LP: #1563911
  * cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
    - LP: #1563911
  * m32r: fix m32104ut_defconfig build fail
    - LP: #1563911
  * dma-debug: switch check from _text to _stext
    - LP: #1563911
  * scripts/bloat-o-meter: fix python3 syntax error
    - LP: #1563911
  * ocfs2/dlm: ignore cleaning the migration mle that is inuse
    - LP: #1563911
  * ALSA: timer: Harden slave timer list handling
    - LP: #1563911
  * memcg: only free spare array when readers are done
    - LP: #1563911
  * printk: help pr_debug and pr_devel to optimize out arguments
    - LP: #1563911
  * crypto: af_alg - Fix socket double-free when accept fails
    - LP: #1563911
  * ALSA: hrtimer: Fix stall by hrtimer_cancel()
    - LP: #1563911
  * ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode
    - LP: #1563911
  * ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode
    - LP: #1563911
  * ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0
    - LP: #1563911
  * IB/qib: fix mcast detach when qp not attached
    - LP: #1563911
  * IB/mlx4: Initialize hop_limit when creating address handle
    - LP: #1563911
  * ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with
    ocfs2_unblock_lock
    - LP: #1563911
  * crypto: algif_skcipher - Require setkey before accept(2)
    - LP: #1563911
  * crypto: af_alg - Disallow bind/setkey/... after accept(2)
    - LP: #1563911
  * crypto: af_alg - Add nokey compatibility path
    - LP: #1563911
  * crypto: algif_skcipher - Add nokey compatibility path
    - LP: #1563911
  * crypto: hash - Add crypto_ahash_has_setkey
    - LP: #1563911
  * crypto: algif_hash - Require setkey before accept(2)
    - LP: #1563911
  * crypto: skcipher - Add crypto_skcipher_has_setkey
    - LP: #1563911
  * crypto: algif_skcipher - Add key check exception for cipher_null
    - LP: #1563911
  * crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey
    path
    - LP: #1563911
  * crypto: algif_hash - Remove custom release parent function
    - LP: #1563911
  * crypto: algif_skcipher - Remove custom release parent function
    - LP: #1563911
  * crypto: af_alg - Forbid bind(2) when nokey child sockets are present
    - LP: #1563911
  * crypto: algif_hash - Fix race condition in hash_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Fix race condition in skcipher_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Load TX SG list after waiting
    - LP: #1563911
  * sctp: Prevent soft lockup when sctp_accept() is called during a timeout
    event
    - LP: #1563911
  * usbvision-video: fix memory leak of alt_max_pkt_size
    - LP: #1563911
  * usbvision: fix leak of usb_dev on failure paths in usbvision_probe()
    - LP: #1563911
  * usbvision fix overflow of interfaces array
    - LP: #1563911
  * usbvision: fix crash on detecting device with invalid configuration
    - LP: #1563911
  * Linux 3.2.77
    - LP: #1563911
  * KVM: vmx: fix MPX detection
    - LP: #1563914
  * hrtimer: Handle remaining time proper for TIME_LOW_RES
    - LP: #1563914
  * timerfd: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * posix-timers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * itimers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * usb: cdc-acm: send zero packet for intel 7260 modem
    - LP: #1563914
  * cdc-acm:exclude Samsung phone 04e8:685d
    - LP: #1563914
  * af_unix: fix struct pid memory leak
    - LP: #1563914
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1563914
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1563914
  * USB: cp210x: add ID for IAI USB to RS485 adaptor
    - LP: #1563914
  * USB: visor: fix null-deref at probe
    - LP: #1563914
  * USB: serial: visor: fix crash on detecting device without write_urbs
    - LP: #1563914
  * USB: serial: option: Adding support for Telit LE922
    - LP: #1563914
  * ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
    - LP: #1563914
  * ALSA: seq: Degrade the error message for too many opens
    - LP: #1563914
  * USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
    - LP: #1563914
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1563914
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1563914
  * virtio_pci: fix use after free on release
    - LP: #1563914
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1563914
  * perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed
    - LP: #1563914
  * SCSI: fix crashes in sd and sr runtime PM
    - LP: #1563914
  * tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
    - LP: #1563914
  * crypto: shash - Fix has_key setting
    - LP: #1563914
  * ALSA: dummy: Disable switching timer backend via sysfs
    - LP: #1563914
  * drm/vmwgfx: respect 'nomodeset'
    - LP: #1563914
  * x86/mm/pat: Avoid truncation when converting cpa->numpages to address
    - LP: #1563914
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1563914
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1563914
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1563914
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1563914
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1563914
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1563914
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1563914
  * libata: fix sff host state machine locking while polling
    - LP: #1563914
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1563914
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1563914
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1563914
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1563914
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1563914
  * tda1004x: only update the frontend properties if locked
    - LP: #1563914
  * ALSA: timer: Fix leftover link at closing
    - LP: #1563914
  * saa7134-alsa: Only frees registered sound cards
    - LP: #1563914
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1563914
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1563914
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1563914
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1563914
  * klist: fix starting point removed bug in klist iterators
    - LP: #1563914
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1563914
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1563914
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1563914
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1563914
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1563914
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1563914
  * ahci: Intel DNV device IDs SATA
    - LP: #1563914
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1563914
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1563914
  * unix: properly account for FDs passed over unix sockets
    - LP: #1563914
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1563914
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1563914
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1563914
  * pipe: Fix buffer offset after partially failed read
    - LP: #1563914, #1563916
    - CVE-2016-0774
  * sched: fix __sched_setscheduler() vs load balancing race
    - LP: #1563914
  * Linux 3.2.78
    - LP: #1563914
  * crypto: {blk,giv}cipher: Set has_setkey
    - LP: #1564815
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1564815
  * wext: fix message delay/ordering
    - LP: #1564815
  * cfg80211/wext: fix message ordering
    - LP: #1564815
  * mac80211: fix use of uninitialised values in RX aggregation
    - LP: #1564815
  * nfs: fix nfs_size_to_loff_t
    - LP: #1564815
  * drm/i915: fix error path in intel_setup_gmbus()
    - LP: #1564815
  * cifs: fix erroneous return value
    - LP: #1564815
  * s390/dasd: prevent incorrect length error under z/VM after PAV changes
    - LP: #1564815
  * s390/dasd: fix refcount for PAV reassignment
    - LP: #1564815
  * libata: fix HDIO_GET_32BIT ioctl
    - LP: #1564815
  * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
    - LP: #1564815
  * xen/pciback: Save the number of MSI-X entries to be copied later.
    - LP: #1564815
  * xen/pcifront: Fix mysterious crashes when NUMA locality information was
    extracted.
    - LP: #1564815
  * ALSA: seq: Fix leak of pool buffer at concurrent writes
    - LP: #1564815
  * tracepoints: Do not trace when cpu is offline
    - LP: #1564815
  * tracing: Fix freak link error caused by branch tracer
    - LP: #1564815
  * ALSA: seq: Fix double port list deletion
    - LP: #1564815
  * af_unix: Don't set err in unix_stream_read_generic unless there was an
    error
    - LP: #1564815
  * af_unix: Guard against other == sk in unix_dgram_sendmsg
    - LP: #1564815
  * x86, extable: Remove open-coded exception table entries in
    arch/x86/lib/copy_user_nocache_64.S
    - LP: #1564815
  * x86/uaccess/64: Make the __copy_user_nocache() assembly code more
    readable
    - LP: #1564815
  * x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in
    __copy_user_nocache()
    - LP: #1564815
  * usb: dwc3: Fix assignment of EP transfer resources
    - LP: #1564815
  * net/mlx4_en: Count HW buffer overrun only once
    - LP: #1564815
  * USB: option: add support for SIM7100E
    - LP: #1564815
  * USB: cp210x: add IDs for GE B650V3 and B850V3 boards
    - LP: #1564815
  * USB: option: add "4G LTE usb-modem U901"
    - LP: #1564815
  * Adding Intel Lewisburg device IDs for SATA
    - LP: #1564815
  * ext4: fix bh->b_state corruption
    - LP: #1564815
  * kernel/resource.c: fix muxed resource handling in __request_region()
    - LP: #1564815
  * can: ems_usb: Fix possible tx overflow
    - LP: #1564815
  * mac80211: minstrel_ht: set default tx aggregation timeout to 0
    - LP: #1564815
  * sunrpc/cache: fix off-by-one in qword_get()
    - LP: #1564815
  * KVM: async_pf: do not warn on page allocation failures
    - LP: #1564815
  * jffs2: Fix page lock / f->sem deadlock
    - LP: #1564815
  * Fix directory hardlinks from deleted directories
    - LP: #1564815
  * libata: Align ata_device's id on a cacheline
    - LP: #1564815
  * ipr: Fix out-of-bounds null overwrite
    - LP: #1564815
  * ipr: Fix regression when loading firmware
    - LP: #1564815
  * mm: thp: fix SMP race condition between THP page fault and
    MADV_DONTNEED
    - LP: #1564815
  * hpfs: don't truncate the file when delete fails
    - LP: #1564815
  * ALSA: timer: Fix broken compat timer user status ioctl
    - LP: #1564815
  * ALSA: hdspm: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * ALSA: hdsp: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
    - LP: #1564815
  * ASoC: wm8958: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * ASoC: wm8994: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * USB: serial: option: add support for Quectel UC20
    - LP: #1564815
  * ALSA: seq: oss: Don't drain at closing a client
    - LP: #1564815
  * PM / sleep / x86: Fix crash on graph trace through x86 suspend
    - LP: #1564815
  * IB/core: Use GRH when the path hop-limit > 0
    - LP: #1564815
  * mld, igmp: Fix reserved tailroom calculation
    - LP: #1564815
  * MIPS: traps: Fix SIGFPE information leak from `do_ov' and
    `do_trap_or_bp'
    - LP: #1564815
  * ubi: Fix out of bounds write in volume update code
    - LP: #1564815
  * s390/mm: four page table levels vs. fork
    - LP: #1564815
  * Input: aiptek - fix crash on detecting device without endpoints
    - LP: #1564815
  * include/linux/poison.h: fix LIST_POISON{1,2} offset
    - LP: #1564815
  * HID: usbhid: fix recursive deadlock
    - LP: #1564815
  * Linux 3.2.79
    - LP: #1564815

-- Ike Panhc <ike.pan@canonical.com>  Wed, 16 Mar 2016 15:55:51 +0800

Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Released
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-05-09:

Download full text (12.7 KiB)

This bug was fixed in the package linux-lts-trusty - 3.13.0-86.130~precise1

---------------
linux-lts-trusty (3.13.0-86.130~precise1) precise; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
- LP: #1572261

[ Benjamin Tissoires ]

  * SAUCE: Input: synaptics - handle spurious release of trackstick
    buttons, again
    - LP: #1553811

[ K. Y. Srinivasan ]

  * SAUCE: (noup): Drivers: hv: vmbus: Fix a bug in
    hv_need_to_signal_on_read()
    - LP: #1556264

[ Kamal Mostafa ]

* [debian] BugLink: close LP: bugs only for Launchpad urls
* [Config] updateconfigs after v3.13.11-ckt38

[ Tim Gardner ]

* [Debian] Fix linux-doc dangling symlinks
- LP: #661306

[ Upstream Kernel Changes ]

This bug was fixed in the package linux-lts-trusty - 3.13.0-86.130~precise1

---------------
linux-lts-trusty (3.13.0-86.130~precise1) precise; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
    - LP: #1572261

[ Benjamin Tissoires ]

* SAUCE: Input: synaptics - handle spurious release of trackstick
    buttons, again
    - LP: #1553811

[ K. Y. Srinivasan ]

* SAUCE: (noup): Drivers: hv: vmbus: Fix a bug in
    hv_need_to_signal_on_read()
    - LP: #1556264

[ Kamal Mostafa ]

* [debian] BugLink: close LP: bugs only for Launchpad urls
  * [Config] updateconfigs after v3.13.11-ckt38

[ Tim Gardner ]

* [Debian] Fix linux-doc dangling symlinks
    - LP: #661306

[ Upstream Kernel Changes ]

-- Kamal Mostafa <kamal@canonical.com>  Mon, 18 Apr 2016 09:03:12 -0700

Changed in linux-lts-trusty (Ubuntu Precise):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-05-09:

Download full text (16.2 KiB)

This bug was fixed in the package linux-ti-omap4 - 3.2.0-1480.106

---------------
linux-ti-omap4 (3.2.0-1480.106) precise; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
- LP: #1573271

[ Ubuntu-3.2.0-102.142 ]

This bug was fixed in the package linux-ti-omap4 - 3.2.0-1480.106

---------------
linux-ti-omap4 (3.2.0-1480.106) precise; urgency=low

[ Kamal Mostafa ]

* Release Tracking Bug
    - LP: #1573271

[ Ubuntu-3.2.0-102.142 ]

* [debian] BugLink: close LP: bugs only for Launchpad urls
  * Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
    - LP: #1564815
  * gspca: ov534/topro: prevent a division by 0
    - LP: #1563911
  * media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
    - LP: #1563911
  * rc: allow rc modules to be loaded if rc-main is not a module
    - LP: #1563911
  * SCSI: initio: remove duplicate module device table
    - LP: #1563911
  * KVM: x86: expose MSR_TSC_AUX to userspace
    - LP: #1563911
  * KVM: x86: correctly print #AC in traces
    - LP: #1563911
  * ath9k_htc: check for underflow in ath9k_htc_rx_msg()
    - LP: #1563911
  * mtd: nand: fix ONFI parameter page layout
    - LP: #1563911
  * xhci: refuse loading if nousb is used
    - LP: #1563911
  * rtlwifi: fix memory leak for USB device
    - LP: #1563911
  * wlcore: SPI - fix spi transfer_list
    - LP: #1563911
  * wlcore/wl12xx: spi: fix oops on firmware load
    - LP: #1563911
  * EDAC: Robustify workqueues destruction
    - LP: #1563911
  * powerpc: Make value-returning atomics fully ordered
    - LP: #1563911
  * powerpc: Make {cmp}xchg* and their atomic_ versions fully ordered
    - LP: #1563911
  * asix: silence log message from oversize packet
    - LP: #1563911
  * futex: Drop refcount if requeue_pi() acquired the rtmutex
    - LP: #1563911
  * ALSA: fm801: propagate TUNER_ONLY bit when autodetected
    - LP: #1563911
  * drm/radeon: clean up fujitsu quirks
    - LP: #1563911
  * udf: limit the maximum number of indirect extents in a row
    - LP: #1563911
  * USB: cp210x: add ID for ELV Marble Sound Board 1
    - LP: #1563911
  * posix-clock: Fix return code on the poll method's error path
    - LP: #1563911
  * x86/LDT: Print the real LDT base address
    - LP: #1563911
  * rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
    - LP: #1563911
  * rtlwifi: rtl8192se: Fix module parameter initialization
    - LP: #1563911
  * rtlwifi: rtl8192ce: Fix handling of module parameters
    - LP: #1563911
  * rtlwifi: rtl8192cu: Add missing parameter setup
    - LP: #1563911
  * NFS: Fix attribute cache revalidation
    - LP: #1563911
  * Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
    - LP: #1563911
  * x86/xen: don't reset vcpu_info on a cancelled suspend
    - LP: #1563911
  * udf: Prevent buffer overrun with multi-byte characters
    - LP: #1563911
  * udf: Check output buffer length when converting name to CS0
    - LP: #1563911
  * power: test_power: correctly handle empty writes
    - LP: #1563911
  * locks: fix unlock when fcntl_setlk races with a close
    - LP: #1563911
  * dm snapshot: fix hung bios when copy error occurs
    - LP: #1563911
  * uml: fix hostfs mknod()
    - LP: #1563911
  * uml: flush stdout before forking
    - LP: #1563911
  * ipv6: tcp: add rcu locking in tcp_v6_send_synack()
    - LP: #1563911
  * x86/mm: Add barriers and document switch_mm()-vs-flush synchronization
    - LP: #1563911
  * x86/boot: Double BOOT_HEAP_SIZE to 64KB
    - LP: #1563911
  * x86/reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[]
    - LP: #1563911
  * ALSA: seq: Fix missing NULL check at remove_events ioctl
    - LP: #1563911
  * ALSA: seq: Fix race at timer setup and close
    - LP: #1563911
  * parisc: Fix __ARCH_SI_PREAMBLE_SIZE
    - LP: #1563911
  * x86/mm: Improve switch_mm() barrier comments
    - LP: #1563911
  * ALSA: timer: Fix double unlink of active_list
    - LP: #1563911
  * ALSA: timer: Fix race among timer ioctls
    - LP: #1563911
  * sparc64: fix incorrect sign extension in sys_sparc64_personality
    - LP: #1563911
  * cifs: Ratelimit kernel log messages
    - LP: #1563911
  * cifs: fix race between call_async() and reconnect()
    - LP: #1563911
  * cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
    - LP: #1563911
  * m32r: fix m32104ut_defconfig build fail
    - LP: #1563911
  * dma-debug: switch check from _text to _stext
    - LP: #1563911
  * scripts/bloat-o-meter: fix python3 syntax error
    - LP: #1563911
  * ocfs2/dlm: ignore cleaning the migration mle that is inuse
    - LP: #1563911
  * ALSA: timer: Harden slave timer list handling
    - LP: #1563911
  * memcg: only free spare array when readers are done
    - LP: #1563911
  * printk: help pr_debug and pr_devel to optimize out arguments
    - LP: #1563911
  * crypto: af_alg - Fix socket double-free when accept fails
    - LP: #1563911
  * ALSA: hrtimer: Fix stall by hrtimer_cancel()
    - LP: #1563911
  * ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode
    - LP: #1563911
  * ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode
    - LP: #1563911
  * ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0
    - LP: #1563911
  * IB/qib: fix mcast detach when qp not attached
    - LP: #1563911
  * IB/mlx4: Initialize hop_limit when creating address handle
    - LP: #1563911
  * ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with
    ocfs2_unblock_lock
    - LP: #1563911
  * crypto: algif_skcipher - Require setkey before accept(2)
    - LP: #1563911
  * crypto: af_alg - Disallow bind/setkey/... after accept(2)
    - LP: #1563911
  * crypto: af_alg - Add nokey compatibility path
    - LP: #1563911
  * crypto: algif_skcipher - Add nokey compatibility path
    - LP: #1563911
  * crypto: hash - Add crypto_ahash_has_setkey
    - LP: #1563911
  * crypto: algif_hash - Require setkey before accept(2)
    - LP: #1563911
  * crypto: skcipher - Add crypto_skcipher_has_setkey
    - LP: #1563911
  * crypto: algif_skcipher - Add key check exception for cipher_null
    - LP: #1563911
  * crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey
    path
    - LP: #1563911
  * crypto: algif_hash - Remove custom release parent function
    - LP: #1563911
  * crypto: algif_skcipher - Remove custom release parent function
    - LP: #1563911
  * crypto: af_alg - Forbid bind(2) when nokey child sockets are present
    - LP: #1563911
  * crypto: algif_hash - Fix race condition in hash_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Fix race condition in skcipher_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Load TX SG list after waiting
    - LP: #1563911
  * sctp: Prevent soft lockup when sctp_accept() is called during a timeout
    event
    - LP: #1563911
  * usbvision-video: fix memory leak of alt_max_pkt_size
    - LP: #1563911
  * usbvision: fix leak of usb_dev on failure paths in usbvision_probe()
    - LP: #1563911
  * usbvision fix overflow of interfaces array
    - LP: #1563911
  * usbvision: fix crash on detecting device with invalid configuration
    - LP: #1563911
  * Linux 3.2.77
    - LP: #1563911
  * KVM: vmx: fix MPX detection
    - LP: #1563914
  * hrtimer: Handle remaining time proper for TIME_LOW_RES
    - LP: #1563914
  * timerfd: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * posix-timers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * itimers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * usb: cdc-acm: send zero packet for intel 7260 modem
    - LP: #1563914
  * cdc-acm:exclude Samsung phone 04e8:685d
    - LP: #1563914
  * af_unix: fix struct pid memory leak
    - LP: #1563914
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1563914
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1563914
  * USB: cp210x: add ID for IAI USB to RS485 adaptor
    - LP: #1563914
  * USB: visor: fix null-deref at probe
    - LP: #1563914
  * USB: serial: visor: fix crash on detecting device without write_urbs
    - LP: #1563914
  * USB: serial: option: Adding support for Telit LE922
    - LP: #1563914
  * ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
    - LP: #1563914
  * ALSA: seq: Degrade the error message for too many opens
    - LP: #1563914
  * USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
    - LP: #1563914
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1563914
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1563914
  * virtio_pci: fix use after free on release
    - LP: #1563914
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1563914
  * perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed
    - LP: #1563914
  * SCSI: fix crashes in sd and sr runtime PM
    - LP: #1563914
  * tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
    - LP: #1563914
  * crypto: shash - Fix has_key setting
    - LP: #1563914
  * ALSA: dummy: Disable switching timer backend via sysfs
    - LP: #1563914
  * drm/vmwgfx: respect 'nomodeset'
    - LP: #1563914
  * x86/mm/pat: Avoid truncation when converting cpa->numpages to address
    - LP: #1563914
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1563914
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1563914
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1563914
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1563914
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1563914
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1563914
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1563914
  * libata: fix sff host state machine locking while polling
    - LP: #1563914
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1563914
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1563914
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1563914
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1563914
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1563914
  * tda1004x: only update the frontend properties if locked
    - LP: #1563914
  * ALSA: timer: Fix leftover link at closing
    - LP: #1563914
  * saa7134-alsa: Only frees registered sound cards
    - LP: #1563914
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1563914
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1563914
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1563914
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1563914
  * klist: fix starting point removed bug in klist iterators
    - LP: #1563914
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1563914
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1563914
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1563914
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1563914
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1563914
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1563914
  * ahci: Intel DNV device IDs SATA
    - LP: #1563914
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1563914
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1563914
  * unix: properly account for FDs passed over unix sockets
    - LP: #1563914
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1563914
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1563914
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1563914
  * pipe: Fix buffer offset after partially failed read
    - LP: #1563914, #1563916
    - CVE-2016-0774
  * sched: fix __sched_setscheduler() vs load balancing race
    - LP: #1563914
  * Linux 3.2.78
    - LP: #1563914
  * crypto: {blk,giv}cipher: Set has_setkey
    - LP: #1564815
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1564815
  * wext: fix message delay/ordering
    - LP: #1564815
  * cfg80211/wext: fix message ordering
    - LP: #1564815
  * mac80211: fix use of uninitialised values in RX aggregation
    - LP: #1564815
  * nfs: fix nfs_size_to_loff_t
    - LP: #1564815
  * drm/i915: fix error path in intel_setup_gmbus()
    - LP: #1564815
  * cifs: fix erroneous return value
    - LP: #1564815
  * s390/dasd: prevent incorrect length error under z/VM after PAV changes
    - LP: #1564815
  * s390/dasd: fix refcount for PAV reassignment
    - LP: #1564815
  * libata: fix HDIO_GET_32BIT ioctl
    - LP: #1564815
  * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
    - LP: #1564815
  * xen/pciback: Save the number of MSI-X entries to be copied later.
    - LP: #1564815
  * xen/pcifront: Fix mysterious crashes when NUMA locality information was
    extracted.
    - LP: #1564815
  * ALSA: seq: Fix leak of pool buffer at concurrent writes
    - LP: #1564815
  * tracepoints: Do not trace when cpu is offline
    - LP: #1564815
  * tracing: Fix freak link error caused by branch tracer
    - LP: #1564815
  * ALSA: seq: Fix double port list deletion
    - LP: #1564815
  * af_unix: Don't set err in unix_stream_read_generic unless there was an
    error
    - LP: #1564815
  * af_unix: Guard against other == sk in unix_dgram_sendmsg
    - LP: #1564815
  * x86, extable: Remove open-coded exception table entries in
    arch/x86/lib/copy_user_nocache_64.S
    - LP: #1564815
  * x86/uaccess/64: Make the __copy_user_nocache() assembly code more
    readable
    - LP: #1564815
  * x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in
    __copy_user_nocache()
    - LP: #1564815
  * usb: dwc3: Fix assignment of EP transfer resources
    - LP: #1564815
  * net/mlx4_en: Count HW buffer overrun only once
    - LP: #1564815
  * USB: option: add support for SIM7100E
    - LP: #1564815
  * USB: cp210x: add IDs for GE B650V3 and B850V3 boards
    - LP: #1564815
  * USB: option: add "4G LTE usb-modem U901"
    - LP: #1564815
  * Adding Intel Lewisburg device IDs for SATA
    - LP: #1564815
  * ext4: fix bh->b_state corruption
    - LP: #1564815
  * kernel/resource.c: fix muxed resource handling in __request_region()
    - LP: #1564815
  * can: ems_usb: Fix possible tx overflow
    - LP: #1564815
  * mac80211: minstrel_ht: set default tx aggregation timeout to 0
    - LP: #1564815
  * sunrpc/cache: fix off-by-one in qword_get()
    - LP: #1564815
  * KVM: async_pf: do not warn on page allocation failures
    - LP: #1564815
  * jffs2: Fix page lock / f->sem deadlock
    - LP: #1564815
  * Fix directory hardlinks from deleted directories
    - LP: #1564815
  * libata: Align ata_device's id on a cacheline
    - LP: #1564815
  * ipr: Fix out-of-bounds null overwrite
    - LP: #1564815
  * ipr: Fix regression when loading firmware
    - LP: #1564815
  * mm: thp: fix SMP race condition between THP page fault and
    MADV_DONTNEED
    - LP: #1564815
  * hpfs: don't truncate the file when delete fails
    - LP: #1564815
  * ALSA: timer: Fix broken compat timer user status ioctl
    - LP: #1564815
  * ALSA: hdspm: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * ALSA: hdsp: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
    - LP: #1564815
  * ASoC: wm8958: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * ASoC: wm8994: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * USB: serial: option: add support for Quectel UC20
    - LP: #1564815
  * ALSA: seq: oss: Don't drain at closing a client
    - LP: #1564815
  * PM / sleep / x86: Fix crash on graph trace through x86 suspend
    - LP: #1564815
  * IB/core: Use GRH when the path hop-limit > 0
    - LP: #1564815
  * mld, igmp: Fix reserved tailroom calculation
    - LP: #1564815
  * MIPS: traps: Fix SIGFPE information leak from `do_ov' and
    `do_trap_or_bp'
    - LP: #1564815
  * ubi: Fix out of bounds write in volume update code
    - LP: #1564815
  * s390/mm: four page table levels vs. fork
    - LP: #1564815
  * Input: aiptek - fix crash on detecting device without endpoints
    - LP: #1564815
  * include/linux/poison.h: fix LIST_POISON{1,2} offset
    - LP: #1564815
  * HID: usbhid: fix recursive deadlock
    - LP: #1564815
  * Linux 3.2.79
    - LP: #1564815

-- Kamal Mostafa <kamal@canonical.com>  Thu, 21 Apr 2016 15:09:27 -0700

Changed in linux-ti-omap4 (Ubuntu Precise):
status:	Fix Committed → Fix Released

Revision history for this message

Andy Whitcroft (apw) wrote on 2017-10-17: Closing unsupported series nomination.

This bug was nominated against a series that is no longer supported, ie vivid. The bug task representing the vivid nomination is being closed as Won't Fix.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-armadaxp (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-flo (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-quantal (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-saucy (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-trusty (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-utopic (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-vivid (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-mako (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-raspi2 (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-ti-omap4 (Ubuntu Vivid):
status:	New → Won't Fix

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-lts-utopic package

CVE-2016-0774

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-lts-utopic package