This bug was fixed in the package linux - 3.0.0-22.36 --------------- linux (3.0.0-22.36) oneiric-proposed; urgency=low [Luis Henriques] * Release Tracking Bug - LP: #1012040 [ Herton Ronaldo Krzesinski ] * SAUCE: fix get_gate_vma call in i386 NX emulation code - LP: #1009200 [ Upstream Kernel Changes ] * Avoid reading past buffer when calling GETACL - LP: #1002505 - CVE-2012-2375 * Avoid beyond bounds copy while caching ACL - LP: #1002505 - CVE-2012-2375 * Fix length of buffer copied in __nfs4_get_acl_uncached - LP: #1002505 - CVE-2012-2375 * tilegx: enable SYSCALL_WRAPPERS support - LP: #1008697 * block: fix buffer overflow when printing partition UUIDs - LP: #1008697 * block: don't mark buffers beyond end of disk as mapped - LP: #1008697 * PARISC: fix PA1.1 oops on boot - LP: #1008697 * PARISC: fix crash in flush_icache_page_asm on PA1.1 - LP: #1008697 * PARISC: fix panic on prefetch(NULL) on PA7300LC - LP: #1008697 * isdn/gigaset: ratelimit CAPI message dumps - LP: #1008697 * vfs: make AIO use the proper rw_verify_area() area helpers - LP: #1008697 * cfg80211: warn if db.txt is empty with CONFIG_CFG80211_INTERNAL_REGDB - LP: #1008697 * Fix blocking allocations called very early during bootup - LP: #1008697 * s390/pfault: fix task state race - LP: #1008697 * SCSI: mpt2sas: Fix for panic happening because of improper memory allocation - LP: #1008697 * RDMA/cxgb4: Drop peer_abort when no endpoint found - LP: #1008697 * KEYS: Use the compat keyctl() syscall wrapper on Sparc64 for Sparc32 compat - LP: #1008697 * SELinux: if sel_make_bools errors don't leave inconsistent state - LP: #1008697 * drivers/staging/comedi/comedi_fops.c: add missing vfree - LP: #1008697 * perf/x86: Update event scheduling constraints for AMD family 15h models - LP: #1008697 * mtd: sm_ftl: fix typo in major number. - LP: #1008697 * ahci: Detect Marvell 88SE9172 SATA controller - LP: #1008697 * um: Fix __swp_type() - LP: #1008697 * um: Implement a custom pte_same() function - LP: #1008697 * docs: update HOWTO for 2.6.x -> 3.x versioning - LP: #1008697 * USB: cdc-wdm: poll must return POLLHUP if device is gone - LP: #1008697 * workqueue: skip nr_running sanity check in worker_enter_idle() if trustee is active - LP: #1008697 * mm: mempolicy: Let vma_merge and vma_split handle vma->vm_policy linkages - LP: #1008697 * md: using GFP_NOIO to allocate bio for flush request - LP: #1008697 * Add missing call to uart_update_timeout() - LP: #1008697 * tty: Allow uart_register/unregister/register - LP: #1008697 * USB: ftdi-sio: add support for Physik Instrumente E-861 - LP: #1008697 * usb-storage: unusual_devs entry for Yarvik PMP400 MP4 player - LP: #1008697 * USB: ffs-test: fix length argument of out function call - LP: #1008697 * drivers/rtc/rtc-pl031.c: configure correct wday for 2000-01-01 - LP: #1008697 * SCSI: hpsa: Fix problem with MSA2xxx devices - LP: #1008697 * usb: usbtest: two super speed fixes for usbtest - LP: #1008697 * USB: Remove races in devio.c - LP: #1008697 * USB: serial: ti_usb_3410_5052: Add support for the FRI2 serial console - LP: #1008697 * usb: gadget: fsl_udc_core: dTD's next dtd pointer need to be updated once written - LP: #1008697 * usb: add USB_QUIRK_RESET_RESUME for M-Audio 88es - LP: #1008697 * xhci: Add Lynx Point to list of Intel switchable hosts. - LP: #1008697 * usb-xhci: Handle COMP_TX_ERR for isoc tds - LP: #1008697 * xhci: Reset reserved command ring TRBs on cleanup. - LP: #1008697 * xhci: Add new short TX quirk for Fresco Logic host. - LP: #1008697 * drm/i915: Avoid a double-read of PCH_IIR during interrupt handling - LP: #1008697 * drm/i915: [GEN7] Use HW scheduler for fixed function shaders - LP: #1008697 * drm/i915: don't clobber the pipe param in sanitize_modesetting - LP: #1008697 * nouveau: nouveau_set_bo_placement takes TTM flags - LP: #1008697 * smsusb: add autodetection support for USB ID 2040:c0a0 - LP: #1008697 * media: uvcvideo: Fix ENUMINPUT handling - LP: #1008697 * x86/mce: Fix check for processor context when machine check was taken. - LP: #1008697 * mmc: sdio: avoid spurious calls to interrupt handlers - LP: #1008697 * tile: fix bug where fls(0) was not returning 0 - LP: #1008697 * isci: fix oem parameter validation on single controller skus - LP: #1008697 * ARM: 7365/1: drop unused parameter from flush_cache_user_range - LP: #1008697 * ARM: 7409/1: Do not call flush_cache_user_range with mmap_sem held - LP: #1008697 * i2c: davinci: Free requested IRQ in remove - LP: #1008697 * Linux 3.0.33 - LP: #1008697 -- Luis Henriques