This bug was fixed in the package linux-ti-omap4 - 3.0.0-1207.16 --------------- linux-ti-omap4 (3.0.0-1207.16) oneiric-proposed; urgency=low * Release Tracking Bug - LP: #922006 [ Upstream Kernel Changes ] * omap4: add 4430 ES2.3 support - LP: #917264 [ Ubuntu: 3.0.0-16.27 ] * Release Tracking Bug - LP: #920735 * Revert "SAUCE: omap3: beagle: if rev unknown, assume xM revision C" - LP: #912199 * Revert "SAUCE: omap3: beagle: detect new xM revision C" - LP: #912199 * Revert "SAUCE: omap3: beagle: detect new xM revision B" - LP: #912199 * Revert "SAUCE: omap3: beaglexm: fix DVI initialization" - LP: #912199 * [Config] DEFAULT_MMAP_MIN_ADDR=32k on arm - LP: #903346 * Revert "rtc: Disable the alarm in the hardware" - LP: #913373 * Support for Terratec G1 - LP: #821061 * drm/radeon/kms: fix DP detect and EDID fetch for DP bridges - LP: #825777 * drm/radeon/kms/DCE4.1: fix Select_CrtcSource EncodeMode setting for DP bridges (v2) - LP: #825777 * drm/radeon/kms: cleanup atombios_adjust_pll() - LP: #825777 * drm/radeon/kms/atom: rework encoder dpms - LP: #825777 * drm/radeon/kms: check for DP MST mode in a few more places (v2) - LP: #825777 * drm/radeon/kms: rework DP bridge checks - LP: #825777 * drm/radeon/kms: fix DP setup on TRAVIS bridges - LP: #825777 * ALSA: sis7019 - give slow codecs more time to reset - LP: #907778 * ALSA: hda/realtek - Fix Oops in alc_mux_select() - LP: #907778 * alarmtimers: Fix time comparison - LP: #907778 * ARM: davinci: da850 evm: change audio edma event queue to EVENTQ_0 - LP: #907778 * arm: mx23: recognise stmp378x as mx23 - LP: #907778 * ARM: at91: fix clock conid for atmel_tcb.1 on 9260/9g20 - LP: #907778 * ARM: davinci: dm646x evm: wrong register used in setup_vpif_input_channel_mode - LP: #907778 * ASoC: Provide a more complete DMA driver stub - LP: #907778 * fs/proc/meminfo.c: fix compilation error - LP: #907778 * thp: add compound tail page _mapcount when mapped - LP: #907778 * thp: set compound tail page _count to zero - LP: #907778 * ptp: Fix clock_getres() implementation - LP: #907778 * mm: Ensure that pfn_valid() is called once per pageblock when reserving pageblocks - LP: #907778 * mm: vmalloc: check for page allocation failure before vmlist insertion - LP: #907778 * fix apparmor dereferencing potentially freed dentry, sanitize __d_path() API - LP: #907778 * target: Handle 0 correctly in transport_get_sectors_6() - LP: #907778 * intel-iommu: fix return value of iommu_unmap() API - LP: #907778 * intel-iommu: set iommu_superpage on VM domains to lowest common denominator - LP: #907778 * intel-iommu: fix superpage support in pfn_to_dma_pte() - LP: #907778 * percpu: fix chunk range calculation - LP: #907778 * iwlwifi: do not re-configure HT40 after associated - LP: #907778 * mac80211: fix race condition caused by late addBA response - LP: #907778 * linux/log2.h: Fix rounddown_pow_of_two(1) - LP: #907778 * hwmon: (jz4740) fix signedness bug - LP: #907778 * mmc: mxcmmc: fix falling back to PIO - LP: #907778 * x86, hpet: Immediately disable HPET timer 1 if rtc irq is masked - LP: #907778 * jbd/jbd2: validate sb->s_first in journal_get_superblock() - LP: #907778 * hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops - LP: #907778 * hwmon: (coretemp) Fix oops on CPU offlining - LP: #907778 * xfs: fix nfs export of 64-bit inodes numbers on 32-bit kernels - LP: #907778 * xfs: avoid synchronous transactions when deleting attr blocks - LP: #907778 * md/raid5: fix bug that could result in reads from a failed device. - LP: #907778 * xen: only limit memory map to maximum reservation for domain 0. - LP: #907778 * ext4: display the correct mount option in /proc/mounts for [no]init_itable - LP: #907778 * ext4: avoid hangs in ext4_da_should_update_i_disksize() - LP: #907778 * ext4: avoid potential hang in mpage_submit_io() when blocksize < pagesize - LP: #907778 * ext4: handle EOF correctly in ext4_bio_write_page() - LP: #907778 * fuse: fix fuse_retrieve - LP: #907778 * staging: r8712u: Add new USB ID - LP: #907778 * drm/radeon/kms: add some new pci ids - LP: #907778 * ibft: Fix finding IBFT ACPI table on UEFI - LP: #907778 * USB: cdc-acm: add IDs for Motorola H24 HSPA USB module. - LP: #907778 * usb: option: Add Huawei E398 controlling interfaces - LP: #907778 * USB: option: Removing one bogus and adding some new Huawei combinations - LP: #907778 * ASoC: core: Don't schedule deferred_resume_work twice - LP: #907778 * Linux 3.0.14 - LP: #907778 * drm/i915: Fix PCH port pipe select in CPT disable paths - LP: #906756 * KVM: x86: Prevent starting PIT timers in the absence of irqchip support - LP: #911303 - CVE-2011-4622 * Linux 3.0.15 - LP: #913373 * ARM: OMAP: rx51: fix USB - LP: #913373 * ipip, sit: copy parms.name after register_netdevice - LP: #913373 * rtc: m41t80: Workaround broken alarm functionality - LP: #913373 * drm/i915: prevent division by zero when asking for chipset power - LP: #913373 * cfq-iosched: free cic_index if blkio_alloc_blkg_stats fails - LP: #913373 * cfq-iosched: fix cfq_cic_link() race confition - LP: #913373 * SCSI: zfcp: return early from slave_destroy if slave_alloc returned early - LP: #913373 * SCSI: mpt2sas: _scsih_smart_predicted_fault uses GFP_KERNEL in interrupt context - LP: #913373 * SCSI: fcoe: Fix preempt count leak in fcoe_filter_frames() - LP: #913373 * mac80211: fix another race in aggregation start - LP: #913373 * block: initialize request_queue's numa node during - LP: #913373 * ssb: fix init regression with SoCs - LP: #913373 * MXC PWM: should active during DOZE/WAIT/DBG mode - LP: #913373 * Input: synaptics - fix touchpad not working after S2R on Vostro V13 - LP: #913373 * percpu: fix per_cpu_ptr_to_phys() handling of non-page-aligned addresses - LP: #913373 * binary_sysctl(): fix memory leak - LP: #913373 * oom: fix integer overflow of points in oom_badness - LP: #913373 * oprofile: Fix uninitialized memory access when writing to writing to oprofilefs - LP: #913373 * NFSv4.1: Ensure that we handle _all_ SEQUENCE status bits. - LP: #913373 * SELinux: Fix RCU deref check warning in sel_netport_insert() - LP: #913373 * nilfs2: unbreak compat ioctl - LP: #913373 * mmc: vub300: fix type of firmware_rom_wait_states module parameter - LP: #913373 * cgroups: fix a css_set not found bug in cgroup_attach_proc - LP: #913373 * mfd: Fix twl-core oops while calling twl_i2c_* for unbound driver - LP: #913373 * vfs: __read_cache_page should use gfp argument rather than GFP_KERNEL - LP: #913373 * media: s5p-fimc: Use correct fourcc for RGB565 colour format - LP: #913373 * ath9k: fix max phy rate at rate control init - LP: #913373 * iwlwifi: do not set the sequence control bit is not needed - LP: #913373 * iwlwifi: allow to switch to HT40 if not associated - LP: #913373 * memcg: keep root group unchanged if creation fails - LP: #913373 * VFS: Fix race between CPU hotplug and lglocks - LP: #913373 * ARM:imx:fix pwm period value - LP: #913373 * ARM: 7214/1: mmc: mmci: Fixup handling of MCI_STARTBITERR - LP: #913373 * ARM: 7220/1: mmc: mmci: Fixup error handling for dma - LP: #913373 * oprofile, arm/sh: Fix oprofile_arch_exit() linkage issue - LP: #913373 * futex: Fix uninterruptible loop due to gate_area - LP: #913373 * watchdog: hpwdt: Changes to handle NX secure bit in 32bit path - LP: #913373 * drm/radeon/kms: bail on BTC parts if MC ucode is missing - LP: #913373 * mm: hugetlb: fix non-atomic enqueue of huge page - LP: #913373 * mpt2sas: fix non-x86 crash on shutdown - LP: #913373 * sparc64: Fix MSIQ HV call ordering in pci_sun4v_msiq_build_irq(). - LP: #913373 * sparc32: Be less strict in matching %lo part of relocation. - LP: #913373 * sparc64: Patch sun4v code sequences properly on module load. - LP: #913373 * sparc: Kill custom io_remap_pfn_range(). - LP: #913373 * sparc32: Remove non-kernel code from memcpy implementation. - LP: #913373 * sparc32: Remove uses of %g7 in memcpy implementation. - LP: #913373 * sparc32: Correct the return value of memcpy. - LP: #913373 * sparc64: Fix masking and shifting in VIS fpcmp emulation. - LP: #913373 * sparc: Fix handling of orig_i0 wrt. debugging when restarting syscalls. - LP: #913373 * net: bpf_jit: fix an off-one bug in x86_64 cond jump target - LP: #913373 * ppp: fix pptp double release_sock in pptp_bind() - LP: #913373 * llc: llc_cmsg_rcv was getting called after sk_eat_skb. - LP: #913373 * mqprio: Avoid panic if no options are provided - LP: #913373 * net: have ipconfig not wait if no dev is available - LP: #913373 * sch_gred: should not use GFP_KERNEL while holding a spinlock - LP: #913373 * sctp: fix incorrect overflow check on autoclose - LP: #913373 * sctp: Do not account for sizeof(struct sk_buff) in estimated rwnd - LP: #913373 * ipv4: flush route cache after change accept_local - LP: #913373 * ipv4: reintroduce route cache garbage collector - LP: #913373 * ipv4: using prefetch requires including prefetch.h - LP: #913373 * iwlwifi: update SCD BC table for all SCD queues - LP: #913373 * mfd: Fix mismatch in twl4030 mutex lock-unlock - LP: #913373 * mfd: Copy the device pointer to the twl4030-madc structure - LP: #913373 * mfd: Check for twl4030-madc NULL pointer - LP: #913373 * mfd: Turn on the twl4030-madc MADC clock - LP: #913373 * xen/swiotlb: Use page alignment for early buffer allocation. - LP: #913373 * xfs: log the inode in ->write_inode calls for kupdate - LP: #913373 * xfs: log all dirty inodes in xfs_fs_sync_fs - LP: #913373 * drm/radeon/kms/atom: fix possible segfault in pm setup - LP: #913373 * hung_task: fix false positive during vfork - LP: #913373 * ptrace: partially fix the do_wait(WEXITED) vs EXIT_DEAD->EXIT_ZOMBIE race - LP: #913373 * ath9k: Fix kernel panic in AR2427 in AP mode - LP: #913373 * Linux 3.0.16 - LP: #913373 * OMAP3: beagle: add support for beagleboard xM revision C - LP: #912199 * MAINTAINERS: stable: Update address - LP: #915926 * Documentation: Update stable address - LP: #915926 * firmware: Fix an oops on reading fw_priv->fw in sysfs loading file - LP: #915926 * rt2800usb: Move ID out of unknown - LP: #915926 * offb: Fix setting of the pseudo-palette for >8bpp - LP: #915926 * offb: Fix bug in calculating requested vram size - LP: #915926 * wl12xx: Validate FEM index from ini file and FW - LP: #915926 * wl12xx: Check buffer bound when processing nvs data - LP: #915926 * powerpc/time: Handle wrapping of decrementer - LP: #915926 * powerpc: Fix unpaired probe_hcall_entry and probe_hcall_exit - LP: #915926 * asix: new device id - LP: #915926 * IB/qib: Fix a possible data corruption when receiving packets - LP: #915926 * perf: Fix parsing of __print_flags() in TP_printk() - LP: #915926 * reiserfs: Fix quota mount option parsing - LP: #915926 * reiserfs: Force inode evictions before umount to avoid crash - LP: #915926 * ext3: Don't warn from writepage when readonly inode is spotted after error - LP: #915926 * USB: update documentation for usbmon - LP: #915926 * atmel_serial: fix spinlock lockup in RS485 code - LP: #915926 * cgroup: fix to allow mounting a hierarchy by name - LP: #915926 * udf: Fix deadlock when converting file from in-ICB one to normal one - LP: #915926 * drivers/usb/class/cdc-acm.c: clear dangling pointer - LP: #915926 * USB: isight: fix kernel bug when loading firmware - LP: #915926 * usb: usb-storage doesn't support dynamic id currently, the patch disables the feature to fix an oops - LP: #915926 * USB: add quirk for another camera - LP: #915926 * usb: musb: fix pm_runtime mismatch - LP: #915926 * USB: omninet: fix write_room - LP: #915926 * USB: Add USB-ID for Multiplex RC serial adapter to cp210x.c - LP: #915926 * usb: fix number of mapped SG DMA entries - LP: #915926 * xhci: Properly handle COMP_2ND_BW_ERR - LP: #915926 * USB: option: add id for 3G dongle Model VT1000 of Viettel - LP: #915926 * usb: option: add ZD Incorporated HSPA modem - LP: #915926 * usb: ch9: fix up MaxStreams helper - LP: #915926 * OHCI: final fix for NVIDIA problems (I hope) - LP: #915926 * igmp: Avoid zero delay when receiving odd mixture of IGMP queries - LP: #915926 * asix: fix infinite loop in rx_fixup() - LP: #915926 * bonding: fix error handling if slave is busy (v2) - LP: #915926 * PM / Sleep: Fix race between CPU hotplug and freezer - LP: #915926 * SCSI: mpt2sas: Added missing mpt2sas_base_detach call from scsih_remove context - LP: #915926 * usb: cdc-acm: Fix acm_tty_hangup() vs. acm_tty_close() race - LP: #915926 * xfs: fix acl count validation in xfs_acl_from_disk() - LP: #915926 * Linux 3.0.17 - LP: #915926 * use cache type functions for arch_get_unmapped_area - LP: #861296 * topdown mmap support - LP: #861296 * x86/PCI: amd: factor out MMCONFIG discovery - LP: #647043 * PNP: work around Dell 1536/1546 BIOS MMCONFIG bug that breaks USB - LP: #647043 * overlayfs: apply device cgroup and security permissions to overlay files - LP: #915941, #918212 - CVE-2012-0055 * drivers/block/loop.c: emit uevent on auto release - LP: #548546 [ Ubuntu: 3.0.0-15.26 ] * Revert "proc: enable writing to /proc/pid/mem" - LP: #919115 - CVE-2012-0056 -- Paolo Pisati