This bug was fixed in the package linux - 3.0.0-32.51 --------------- linux (3.0.0-32.51) oneiric-proposed; urgency=low [Steve Conklin] * Release Tracking Bug - LP: #1158340 [ Upstream Kernel Changes ] * printk: fix buffer overflow when calling log_prefix function from call_console_drivers - LP: #1145196 * 3.0.66 - LP: #1145196 * x86-32, mm: Remove reference to resume_map_numa_kva() - LP: #1145196 * mm: fix pageblock bitmap allocation - LP: #1145196 * timeconst.pl: Eliminate Perl warning - LP: #1145196 * genirq: Avoid deadlock in spurious handling - LP: #1145196 * posix-cpu-timers: Fix nanosleep task_struct leak - LP: #1145196 * hrtimer: Prevent hrtimer_enqueue_reprogram race - LP: #1145196 * ALSA: ali5451: remove irq enabling in pointer callback - LP: #1145196 * ALSA: rme32.c irq enabling after spin_lock_irq - LP: #1145196 * tty: set_termios/set_termiox should not return -EINTR - LP: #1145196 * xen: Send spinlock IPI to all waiters - LP: #1011792, #1145196 * Driver core: treat unregistered bus_types as having no devices - LP: #1145196 * mm: mmu_notifier: have mmu_notifiers use a global SRCU so they may safely schedule - LP: #1145196 * mm: mmu_notifier: make the mmu_notifier srcu static - LP: #1145196 * mmu_notifier_unregister NULL Pointer deref and multiple ->release() callouts - LP: #1145196 * KVM: s390: Handle hosts not supporting s390-virtio. - LP: #1145196 * s390/kvm: Fix store status for ACRS/FPRS - LP: #1145196 * inotify: remove broken mask checks causing unmount to be EINVAL - LP: #1145196 * ocfs2: unlock super lock if lockres refresh failed - LP: #1145196 * drivers/video/backlight/adp88?0_bl.c: fix resume - LP: #1145196 * tmpfs: fix use-after-free of mempolicy object - LP: #1145196 * mm/fadvise.c: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages - LP: #1145196 * NLM: Ensure that we resend all pending blocking locks after a reclaim - LP: #1145196 * p54usb: corrected USB ID for T-Com Sinus 154 data II - LP: #1145196 * ALSA: usb-audio: fix Roland A-PRO support - LP: #1145196 * ALSA: usb: Fix Processing Unit Descriptor parsers - LP: #1145196 * ext4: Free resources in some error path in ext4_fill_super - LP: #1145196 * ext4: add missing kfree() on error return path in add_new_gdb() - LP: #1145196 * sunvdc: Fix off-by-one in generic_request(). - LP: #1145196 * drm/usb: bind driver to correct device - LP: #1145196 * drm/i915: disable shared panel fitter for pipe - LP: #1145196 * staging: comedi: disallow COMEDI_DEVCONFIG on non-board minors - LP: #1145196 * staging: vt6656: Fix URB submitted while active warning. - LP: #1145196 * ARM: PXA3xx: program the CSMSADRCFG register - LP: #1145196 * powerpc/kexec: Disable hard IRQ before kexec - LP: #1145196 * Purge existing TLB entries in set_pte_at and ptep_set_wrprotect - LP: #1145196 * pcmcia/vrc4171: Add missing spinlock init - LP: #1145196 * fbcon: don't lose the console font across generic->chip driver switch - LP: #1145196 * fb: rework locking to fix lock ordering on takeover - LP: #1145196 * bridge: set priority of STP packets - LP: #1145196 * xen-netback: correctly return errors from netbk_count_requests() - LP: #1145196 * xen-netback: cancel the credit timer when taking the vif down - LP: #1145196 * ipv4: fix a bug in ping_err(). - LP: #1145196 * ipv6: use a stronger hash for tcp - LP: #1145196 * dca: check against empty dca_domains list before unregister provider - LP: #1145196 * USB: option: add and update Alcatel modems - LP: #1145196 * USB: option: add Yota / Megafon M100-1 4g modem - LP: #1145196 * USB: option: add Huawei "ACM" devices using protocol = vendor - LP: #1145196 * USB: ehci-omap: Fix autoloading of module - LP: #1145196 * USB: storage: properly handle the endian issues of idProduct - LP: #1145196 * USB: usb-storage: unusual_devs update for Super TOP SATA bridge - LP: #1145196 * Linux 3.0.67 - LP: #1145196 * quota: autoload the quota_v2 module for QFMT_VFS_V1 quota format - LP: #1145196 * iommu/amd: Initialize device table after dma_ops - LP: #1145196 * posix-timer: Don't call idr_find() with out-of-range ID - LP: #1145196 * ftrace: Call ftrace cleanup module notifier after all other notifiers - LP: #1145196 * doc, xen: Mention 'earlyprintk=xen' in the documentation. - LP: #1145196 * doc, kernel-parameters: Document 'console=hvc' - LP: #1145196 * x86: Make sure we can boot in the case the BDA contains pure garbage - LP: #1145196 * target: Add missing mapped_lun bounds checking during make_mappedlun setup - LP: #1145196 * ocfs2: ac->ac_allow_chain_relink=0 won't disable group relink - LP: #1145196 * xen-blkback: do not leak mode property - LP: #1145196 * idr: fix a subtle bug in idr_get_next() - LP: #1145196 * firewire: add minor number range check to fw_device_init() - LP: #1145196 * sysctl: fix null checking in bin_dn_node_address() - LP: #1145196 * ext4: fix race in ext4_mb_add_n_trim() - LP: #1145196 * svcrpc: make svc_age_temp_xprts enqueue under sv_lock - LP: #1145196 * unbreak automounter support on 64-bit kernel with 32-bit userspace (v2) - LP: #1145196 * x86: Do not leak kernel page mapping locations - LP: #1145196 * x86/apic: Work around boot failure on HP ProLiant DL980 G7 Server systems - LP: #1145196 * cpuset: fix cpuset_print_task_mems_allowed() vs rename() race - LP: #1145196 * cgroup: fix exit() vs rmdir() race - LP: #1145196 * dca: check against empty dca_domains list before unregister provider fix - LP: #1145196 * s390/kvm: Fix store status for ACRS/FPRS fix - LP: #1145196 * staging: comedi: ni_labpc: correct differential channel sequence for AI commands - LP: #1145196 * staging: comedi: ni_labpc: set up command4 register *after* command3 - LP: #1145196 * staging: comedi: check s->async for poll(), read() and write() - LP: #1145196 * Linux 3.0.68 - LP: #1145196 * keys: fix race with concurrent install_user_keyrings() - LP: #1152788 - CVE-2013-1792 * ARM: VFP: fix emulation of second VFP instruction - LP: #1155651 * ARM: fix scheduling while atomic warning in alignment handling code - LP: #1155651 * SCSI: dc395x: uninitialized variable in device_alloc() - LP: #1155651 * target/pscsi: Fix page increment - LP: #1155651 * btrfs: Init io_lock after cloning btrfs device struct - LP: #1155651 * cifs: ensure that cifs_get_root() only traverses directories - LP: #1155651 * SUNRPC: Don't start the retransmission timer when out of socket space - LP: #1155651 * hw_random: make buffer usable in scatterlist. - LP: #1155651 * ath9k: fix RSSI dummy marker value - LP: #1155651 * md: raid0: fix error return from create_stripe_zones. - LP: #1155651 * hwmon: (sht15) Check return value of regulator_enable() - LP: #1155651 * drm/radeon: add primary dac adj quirk for R200 board - LP: #1155651 * ALSA: ice1712: Initialize card->private_data properly - LP: #1155651 * ALSA: vmaster: Fix slave change notification - LP: #1155651 * e1000e: fix pci-device enable-counter balance - LP: #1155651 * vfs: fix pipe counter breakage - LP: #1155651 * Fix memory leak in cpufreq stats. - LP: #1155651 * ftrace: Update the kconfig for DYNAMIC_FTRACE - LP: #1155651 * decnet: Fix disappearing sysctl entries - LP: #1155651 * dmi_scan: fix missing check for _DMI_ signature in smbios_present() - LP: #1155651 * Linux 3.0.69 - LP: #1155651 * signal: always clear sa_restorer on execve - LP: #1153813 - CVE-2013-0914 -- Steve Conklin