Ubuntu
linux-goldfish package

CVE-2015-4167

Wily (15.10)
Bug #1462173

Bug #1462173 reported by John Johansen on 2015-06-05

256

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-armadaxp (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ec2 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-flo (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-fsl-imx51 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-goldfish (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-lts-backport-maverick (Ubuntu)	New	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Trusty	New	Undecided	Unassigned
Utopic	Won't Fix	Undecided	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Undecided	Unassigned
Xenial	New	Undecided	Unassigned
Yakkety	New	Undecided	Unassigned
linux-lts-backport-natty (Ubuntu)	New	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Trusty	New	Undecided	Unassigned
Utopic	Won't Fix	Undecided	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Undecided	Unassigned
Xenial	New	Undecided	Unassigned
Yakkety	New	Undecided	Unassigned
linux-lts-quantal (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-raring (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-saucy (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-trusty (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-utopic (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-vivid (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-wily (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-xenial (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Committed	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mako (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-manta (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mvl-dove (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-raspi2 (Ubuntu)	Fix Committed	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Fix Committed	Medium	Unassigned
Yakkety	Fix Committed	Medium	Unassigned
linux-snapdragon (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned

Bug Description

The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.

Break-Fix: - 23b133bdc452aa441fcb9b82cbf6dd05cfd342d0

See original description

Tags:

CVE References

Revision history for this message

John Johansen (jjohansen) wrote on 2015-06-05:

CVE-2015-4167

tags:	added: kernel-cve-tracking-bug
information type:	Public → Public Security
Changed in linux-lts-trusty (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Wily):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Precise):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Wily):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-manta (Ubuntu Precise):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-mako (Ubuntu Precise):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Utopic):
status:	New → Invalid
Changed in linux-goldfish (Ubuntu Precise):
status:	New → Invalid
Changed in linux-flo (Ubuntu Precise):
status:	New → Invalid
description:	updated
Changed in linux-lts-trusty (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Utopic):
importance:	Undecided → Medium

John Johansen (jjohansen) on 2015-06-05

Changed in linux-lts-saucy (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Utopic):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium

Brad Figg (brad-figg) on 2015-06-05

Changed in linux (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux (Ubuntu Utopic):
status:	New → Fix Committed

John Johansen (jjohansen) on 2015-06-06

Changed in linux (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux (Ubuntu Vivid):
status:	New → Invalid
Changed in linux (Ubuntu Wily):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-lts-raring (Ubuntu Precise):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	New → Invalid

John Johansen (jjohansen) on 2015-06-17

Changed in linux (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	Fix Committed → Fix Released

John Johansen (jjohansen) on 2015-07-02

Changed in linux-lts-trusty (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-armadaxp (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	New → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-07-06:

Download full text (20.2 KiB)

This bug was fixed in the package linux - 3.16.0-43.58

---------------
linux (3.16.0-43.58) utopic; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1466792

[ Brad Figg ]

* Merged back Ubuntu-3.16.0-41.57 regression fix for security release

linux (3.16.0-42.56) utopic; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #1465714

[ Chris J Arges ]

* [config] CONFIG_IPMI_POWERNV=m on ppc64el
- LP: #1439562

[ Luis Henriques ]

* [Config] Disable CONFIG_USB_OTG
- LP: #1411295

[ Upstream Kernel Changes ]

This bug was fixed in the package linux - 3.16.0-43.58

---------------
linux (3.16.0-43.58) utopic; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1466792

[ Brad Figg ]

* Merged back Ubuntu-3.16.0-41.57 regression fix for security release

linux (3.16.0-42.56) utopic; urgency=low

[ Brad Figg ]

* Release Tracking Bug
    - LP: #1465714

[ Chris J Arges ]

* [config] CONFIG_IPMI_POWERNV=m on ppc64el
    - LP: #1439562

[ Luis Henriques ]

* [Config] Disable CONFIG_USB_OTG
    - LP: #1411295

[ Upstream Kernel Changes ]

* Revert "i2c: Mark adapter devices with pm_runtime_no_callbacks"
    - LP: #1465613
  * Revert "mm/hugetlb: use pmd_page() in follow_huge_pmd()"
    - LP: #1465613
  * cdc-acm: prevent infinite loop when parsing CDC headers.
    - LP: #1460657
  * drivers/char/ipmi: Add powernv IPMI driver
    - LP: #1439562
  * powerpc/powernv: Add OPAL IPMI interface
    - LP: #1439562
  * powerpc/powernv: Support OPAL requested heartbeat
    - LP: #1439562
  * powerpc/kernel: Make syscall_exit a local label
    - LP: #1439562
  * powerpc: Remove old compile time disabled syscall tracing code
    - LP: #1439562
  * powerpc/powernv: Remove "opal" prefix from pr_xxx()s
    - LP: #1439562
  * powerpc/powernv: Separate function for OPAL IRQ setup
    - LP: #1439562
  * powerpc/powernv: Add OPAL message notifier unregister function
    - LP: #1439562
  * device: Add dev_of_node() accessor
    - LP: #1439562
  * drivers/core/of: Add symlink to device-tree from devices with an OF
    node
    - LP: #1439562
  * powerpc: Add a proper syscall for switching endianness
    - LP: #1439562
  * (upstream) libata: Blacklist queued TRIM on all Samsung 800-series
    - LP: #1338706, #1449005
  * ahci: avoton port-disable reset-quirk
    - LP: #1458617
  * udf: Remove repeated loads blocksize
    - LP: #1462173
    - CVE-2015-4167
  * udf: Check length of extended attributes and allocation descriptors
    - LP: #1462173
    - CVE-2015-4167
  * (upstream)scsi_lib: remove the description string in
    scsi_io_completion()
    - LP: #1449372
  * vfs: read file_handle only once in handle_to_path
    - LP: #1416503
    - CVE-2015-1420
  * ozwpan: Use unsigned ints to prevent heap overflow
    - LP: #1463442
    - CVE-2015-4001
  * ozwpan: divide-by-zero leading to panic
    - LP: #1463445
    - CVE-2015-4003
  * ozwpan: Use proper check to prevent heap overflow
    - LP: #1463444
    - CVE-2015-4002
  * ozwpan: unchecked signed subtraction leads to DoS
    - LP: #1463444
    - CVE-2015-4002
  * net: eth: xgene: devm_ioremap() returns NULL on error
    - LP: #1458042
  * drivers: net: xgene: fix new firmware backward compatibility with older
    driver
    - LP: #1458042
  * drivers: net: xgene: constify of_device_id array
    - LP: #1458042
  * drivers: net: xgene: Add second SGMII based 1G interface
    - LP: #1458042
  * dtb: change binding name to match with newer firmware DT
    - LP: #1458042
  * dtb: xgene: Add second SGMII based 1G interface node
    - LP: #1458042
  * mlx4: Fix tx ring affinity_mask creation
    - LP: #1465613
  * net/mlx4_en: Schedule napi when RX buffers allocation fails
    - LP: #1465613
  * efi/reboot: Add generic wrapper around EfiResetSystem()
    - LP: #1465613
  * efi/reboot: Allow powering off machines using EFI
    - LP: #1465613
  * x86/reboot: Add EFI reboot quirk for ACPI Hardware Reduced flag
    - LP: #1465613
  * ARC: signal handling robustify
    - LP: #1465613
  * UBI: fix soft lockup in ubi_check_volume()
    - LP: #1465613
  * mnt: Fail collect_mounts when applied to unmounted mounts
    - LP: #1465613
  * ASoC: dapm: Enable autodisable on SOC_DAPM_SINGLE_TLV_AUTODISABLE
    - LP: #1465613
  * ASoC: rt5677: add register patch for PLL
    - LP: #1465613
  * btrfs: unlock i_mutex after attempting to delete subvolume during send
    - LP: #1465613
  * ALSA: hda - Fix mute-LED fixed mode
    - LP: #1465613
  * arm64: dma-mapping: always clear allocated buffers
    - LP: #1465613
  * ALSA: emu10k1: Fix card shortname string buffer overflow
    - LP: #1465613
  * ALSA: emux: Fix mutex deadlock at unloading
    - LP: #1465613
  * drm/radeon: add SI DPM quirk for Sapphire R9 270 Dual-X 2G GDDR5
    - LP: #1465613
  * SCSI: add 1024 max sectors black list flag
    - LP: #1465613
  * 3w-sas: fix command completion race
    - LP: #1465613
  * 3w-xxxx: fix command completion race
    - LP: #1465613
  * 3w-9xxx: fix command completion race
    - LP: #1465613
  * uas: Allow uas_use_uas_driver to return usb-storage flags
    - LP: #1465613
  * uas: Add US_FL_MAX_SECTORS_240 flag
    - LP: #1465613
  * uas: Set max_sectors_240 quirk for ASM1053 devices
    - LP: #1465613
  * usb: chipidea: otg: remove mutex unlock and lock while stop and start
    role
    - LP: #1465613
  * serial: xilinx: Use platform_get_irq to get irq description structure
    - LP: #1465613
  * serial: of-serial: Remove device_type = "serial" registration
    - LP: #1465613
  * tty/serial: at91: maxburst was missing for dma transfers
    - LP: #1465613
  * ALSA: emux: Fix mutex deadlock in OSS emulation
    - LP: #1465613
  * ALSA: emu10k1: Emu10k2 32 bit DMA mode
    - LP: #1465613
  * rbd: end I/O the entire obj_request on error
    - LP: #1465613
  * ext4: fix data corruption caused by unwritten and delayed extents
    - LP: #1465613
  * ext4: move check under lock scope to close a race.
    - LP: #1465613
  * bridge/mdb: remove wrong use of NLM_F_MULTI
    - LP: #1465613
  * mlx4_en: Use correct loop cursor in error path.
    - LP: #1465613
  * powerpc/pseries: Correct cpu affinity for dlpar added cpus
    - LP: #1465613
  * arm/arm64: KVM: Fix and refactor unmap_range
    - LP: #1465613
  * ARM: KVM: Unmap IPA on memslot delete/move
    - LP: #1465613
  * ARM: KVM: user_mem_abort: support stage 2 MMIO page mapping
    - LP: #1465613
  * arm64: KVM: export demux regids as KVM_REG_ARM64
    - LP: #1465613
  * ARM: virt: fix wrong HSCTLR.EE bit setting
    - LP: #1465613
  * ARM64: KVM: store kvm_vcpu_fault_info est_el2 as word
    - LP: #1465613
  * KVM: ARM/arm64: fix non-const declaration of function returning const
    - LP: #1465613
  * KVM: ARM/arm64: fix broken __percpu annotation
    - LP: #1465613
  * KVM: ARM/arm64: avoid returning negative error code as bool
    - LP: #1465613
  * KVM: vgic: return int instead of bool when checking I/O ranges
    - LP: #1465613
  * ARM/arm64: KVM: fix use of WnR bit in kvm_is_write_fault()
    - LP: #1465613
  * KVM: ARM: vgic: plug irq injection race
    - LP: #1465613
  * arm/arm64: KVM: Fix set_clear_sgi_pend_reg offset
    - LP: #1465613
  * arm/arm64: KVM: Fix VTTBR_BADDR_MASK and pgd alloc
    - LP: #1465613
  * arm: kvm: fix CPU hotplug
    - LP: #1465613
  * arm/arm64: KVM: fix potential NULL dereference in user_mem_abort()
    - LP: #1465613
  * arm/arm64: KVM: Ensure memslots are within KVM_PHYS_SIZE
    - LP: #1465613
  * arm: kvm: STRICT_MM_TYPECHECKS fix for user_mem_abort
    - LP: #1465613
  * arm64: KVM: fix unmapping with 48-bit VAs
    - LP: #1465613
  * arm/arm64: KVM: vgic: Fix error code in kvm_vgic_create()
    - LP: #1465613
  * arm64/kvm: Fix assembler compatibility of macros
    - LP: #1465613
  * arm/arm64: kvm: drop inappropriate use of kvm_is_mmio_pfn()
    - LP: #1465613
  * arm/arm64: KVM: Don't clear the VCPU_POWER_OFF flag
    - LP: #1465613
  * arm/arm64: KVM: Correct KVM_ARM_VCPU_INIT power off option
    - LP: #1465613
  * arm/arm64: KVM: Reset the HCR on each vcpu when resetting the vcpu
    - LP: #1465613
  * arm/arm64: KVM: Introduce stage2_unmap_vm
    - LP: #1465613
  * arm/arm64: KVM: Don't allow creating VCPUs after vgic_initialized
    - LP: #1465613
  * arm/arm64: KVM: Require in-kernel vgic for the arch timers
    - LP: #1465613
  * arm64: KVM: Fix TLB invalidation by IPA/VMID
    - LP: #1465613
  * arm64: KVM: Fix HCR setting for 32bit guests
    - LP: #1465613
  * arm64: KVM: Do not use pgd_index to index stage-2 pgd
    - LP: #1465613
  * net: make skb_gso_segment error handling more robust
    - LP: #1465613
  * efivarfs: Ensure VariableName is NUL-terminated
    - LP: #1465613
  * x86/efi: Store upper bits of command line buffer address in
    ext_cmd_line_ptr
    - LP: #1465613
  * blk-mq: fix CPU hotplug handling
    - LP: #1465613
  * writeback: use |1 instead of +1 to protect against div by zero
    - LP: #1465613
  * ARM: mvebu: armada-xp-openblocks-ax3-4: Disable internal RTC
    - LP: #1465613
  * ARM: dts: imx23-olinuxino: Fix polarity of LED GPIO
    - LP: #1465613
  * ARM: dts: imx23-olinuxino: Fix dr_mode of usb0
    - LP: #1465613
  * ARM: dts: imx6: phyFLEX: USB VBUS control is active-high
    - LP: #1465613
  * ARM: dts: imx25: Add #pwm-cells to pwm4
    - LP: #1465613
  * ARM: dts: imx28: Fix AUART4 TX-DMA interrupt name
    - LP: #1465613
  * gpio: unregister gpiochip device before removing it
    - LP: #1465613
  * gpio: sysfs: fix memory leaks and device hotplug
    - LP: #1465613
  * ACPI / PNP: add two IDs to list for PNPACPI device enumeration
    - LP: #1465613
  * ARM: OMAP2+: Fix omap off idle power consumption creeping up
    - LP: #1465613
  * ARM: dts: OMAP3-N900: Add microphone bias voltages
    - LP: #1465613
  * drm/radeon: disable semaphores for UVD V1 (v2)
    - LP: #1465613
  * RDMA/CMA: Canonize IPv4 on IPV6 sockets properly
    - LP: #1465613
  * drm/i915: Add missing MacBook Pro models with dual channel LVDS
    - LP: #1465613
  * efi: Fix error handling in add_sysfs_runtime_map_entry()
    - LP: #1465613
  * xen/events: Clear cpu_evtchn_mask before resuming
    - LP: #1465613
  * xen/xenbus: Update xenbus event channel on resume
    - LP: #1465613
  * xen/console: Update console event channel on resume
    - LP: #1465613
  * xen/events: Set irq_info->evtchn before binding the channel to CPU in
    __startup_pirq()
    - LP: #1465613
  * mm/memory-failure: call shake_page() when error hits thp tail page
    - LP: #1465613
  * mm: soft-offline: fix num_poisoned_pages counting on concurrent events
    - LP: #1465613
  * nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
    - LP: #1465613
  * ocfs2: dlm: fix race between purge and get lock resource
    - LP: #1465613
  * drm/i915/dp: there is no audio on port A
    - LP: #1465613
  * drm/radeon: make VCE handle check more strict
    - LP: #1465613
  * drm/radeon: make UVD handle checking more strict
    - LP: #1465613
  * drm/radeon: more strictly validate the UVD codec
    - LP: #1465613
  * path_openat(): fix double fput()
    - LP: #1465613
  * mnt: Fix fs_fully_visible to verify the root directory is visible
    - LP: #1465613
  * ARM: ux500: Move GPIO regulator for SD-card into board DTSs
    - LP: #1465613
  * ARM: ux500: Enable GPIO regulator for SD-card for HREF boards
    - LP: #1465613
  * ARM: ux500: Enable GPIO regulator for SD-card for snowball
    - LP: #1465613
  * xen-pciback: Add name prefix to global 'permissive' variable
    - LP: #1465613
  * mmc: core: add missing pm event in mmc_pm_notify to fix hib restore
    - LP: #1465613
  * mmc: sh_mmcif: Fix timeout value for command request
    - LP: #1465613
  * pinctrl: Don't just pretend to protect pinctrl_maps, do it for real
    - LP: #1465613
  * ACPICA: Utilities: split IO address types from data type models.
    - LP: #1465613
  * ACPICA: Tables: Change acpi_find_root_pointer() to use
    acpi_physical_address.
    - LP: #1465613
  * ACPICA: Utilities: Cleanup to enforce
    ACPI_PHYSADDR_TO_PTR()/ACPI_PTR_TO_PHYSADDR().
    - LP: #1465613
  * ACPICA: Utilities: Cleanup to convert physical address printing
    formats.
    - LP: #1465613
  * ACPICA: Utilities: Cleanup to remove useless ACPI_PRINTF/FORMAT_xxx
    helpers.
    - LP: #1465613
  * crush: ensuring at most num-rep osds are selected
    - LP: #1465613
  * netfilter: nf_tables: fix error handling of rule replacement
    - LP: #1465613
  * netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
    - LP: #1465613
  * netfilter: nf_tables: check for overflow of rule dlen field
    - LP: #1465613
  * netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
    - LP: #1465613
  * netfilter: nf_tables: allow to change chain policy without hook if it
    exists
    - LP: #1465613
  * netfilter: nft_rbtree: fix locking
    - LP: #1465613
  * arm64/mm: Remove hack in mmap randomize layout
    - LP: #1465613
  * sched/autogroup: Fix failure to set cpu.rt_runtime_us
    - LP: #1465613
  * xprtrdma: Free the pd if ib_query_qp() fails
    - LP: #1465613
  * xfs: ensure truncate forces zeroed blocks to disk
    - LP: #1465613
  * Linux 3.16.7-ckt12
    - LP: #1465613
  * kprobes/x86: Return correct length in __copy_instruction()
    - LP: #1465653
  * iio: light: hid-sensor-prox: Fix modifier
    - LP: #1465653
  * iio: pressure: hid-sensor-press: Fix modifier
    - LP: #1465653
  * iio: adc: xilinx: Fix register addresses
    - LP: #1465653
  * iio: adc: xilinx: Fix "vccaux" channel .address
    - LP: #1465653
  * iio: adc: xilinx: Fix VREFP scale
    - LP: #1465653
  * iio: adc: xilinx: Fix VREFN sign
    - LP: #1465653
  * libata: Add helper to determine when PHY events should be ignored
    - LP: #1465653
  * libata: Ignore spurious PHY event on LPM policy change
    - LP: #1465653
  * iio:st_sensors: Fix oops when probing SPI devices
    - LP: #1465653
  * usb: gadget: configfs: Fix interfaces array NULL-termination
    - LP: #1465653
  * rtlwifi: rtl8192cu: Fix kernel deadlock
    - LP: #1465653
  * USB: cp210x: add ID for KCF Technologies PRN device
    - LP: #1465653
  * USB: pl2303: Remove support for Samsung I330
    - LP: #1465653
  * USB: visor: Match I330 phone more precisely
    - LP: #1465653
  * net: can: xilinx_can: fix extended frame handling
    - LP: #1465653
  * nfsd: fix the check for confirmed openowner in
    nfs4_preprocess_stateid_op
    - LP: #1465653
  * svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
    - LP: #1465653
  * libata: Update Crucial/Micron blacklist
    - LP: #1465653
  * ACPI / init: Fix the ordering of acpi_reserve_resources()
    - LP: #1465653
  * md/raid5: don't record new size if resize_stripes fails.
    - LP: #1465653
  * sched: Handle priority boosted tasks proper in setscheduler()
    - LP: #1465653
  * xhci: fix isoc endpoint dequeue from advancing too far on transaction
    error
    - LP: #1465653
  * xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256
    - LP: #1465653
  * xhci: gracefully handle xhci_irq dead device
    - LP: #1465653
  * staging: gdm724x: Correction of variable usage after applying ALIGN()
    - LP: #1465653
  * usb-storage: Add NO_WP_DETECT quirk for Lacie 059f:0651 devices
    - LP: #1465653
  * tty/n_gsm.c: fix a memory leak when gsmtty is removed
    - LP: #1465653
  * ARM: net fix emit_udiv() for BPF_ALU | BPF_DIV | BPF_K intruction.
    - LP: #1465653
  * x86/vdso: Fix the x86 vdso2c tool includes
    - LP: #1465653
  * x86/vdso: Fix 'make bzImage' on older distros
    - LP: #1465653
  * perf/x86/rapl: Enable Broadwell-U RAPL support
    - LP: #1465653
  * drm/radeon: fix VM_CONTEXT*_PAGE_TABLE_END_ADDR handling
    - LP: #1465653
  * RDMA/core: Fix for parsing netlink string attribute
    - LP: #1465653
  * drm/radeon: add new bonaire pci id
    - LP: #1465653
  * parisc,metag: Fix crashes due to stack randomization on
    stack-grows-upwards architectures
    - LP: #1465653
  * firmware: dmi_scan: Fix ordering of product_uuid
    - LP: #1465653
  * ext4: fix NULL pointer dereference when journal restart fails
    - LP: #1465653
  * ext4: check for zero length extent explicitly
    - LP: #1465653
  * jbd2: fix r_count overflows leading to buffer overflow in journal
    recovery
    - LP: #1465653
  * mm, numa: really disable NUMA balancing by default on single node
    machines
    - LP: #1465653
  * spi: bitbang: Make setup_transfer() callback optional
    - LP: #1465653
  * igb: Fix oops on changing number of rings
    - LP: #1465653
  * igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector
    - LP: #1465653
  * ARM: gemini: fix compiler warning due wrong data type
    - LP: #1465653
  * arm64: add missing PAGE_ALIGN() to __dma_free()
    - LP: #1465653
  * sound/oss: fix deadlock in sequencer_ioctl(SNDCTL_SEQ_OUTOFBAND)
    - LP: #1465653
  * ARM: 8307/1: psci: move psci firmware calls out of line
    - LP: #1465653
  * config: Enable NEED_DMA_MAP_STATE by default when SWIOTLB is selected
    - LP: #1465653
  * staging, rtl8192e, LLVMLinux: Change extern inline to static inline
    - LP: #1465653
  * kernel: use the gnu89 standard explicitly
    - LP: #1465653
  * staging, rtl8192e, LLVMLinux: Remove unused inline prototype
    - LP: #1465653
  * staging: wlags49_h2: fix extern inline functions
    - LP: #1465653
  * staging: rtl8712, rtl8712: avoid lots of build warnings
    - LP: #1465653
  * qla2xxx: remove redundant declaration in 'qla_gbl.h'
    - LP: #1465653
  * ARM: mvebu: do not register custom DMA operations when coherency is
    disabled
    - LP: #1465653
  * net: socket: Fix the wrong returns for recvmsg and sendmsg
    - LP: #1465653
  * ALSA: hda - Add headphone quirk for Lifebook E752
    - LP: #1465653
  * ASoC: mc13783: Fix wrong mask value used in mc13xxx_reg_rmw() calls
    - LP: #1465653
  * thermal: armada: Update Armada 380 thermal sensor coefficients
    - LP: #1465653
  * mac80211: move WEP tailroom size check
    - LP: #1465653
  * KVM: MMU: fix smap permission check
    - LP: #1465653
  * KVM: MMU: fix CR4.SMEP=1, CR0.WP=0 with shadow pages
    - LP: #1465653
  * KVM: MMU: fix SMAP virtualization
    - LP: #1465653
  * storvsc: Set the SRB flags correctly when no data transfer is needed
    - LP: #1465653
  * ASoC: wm8960: fix "RINPUT3" audio route error
    - LP: #1465653
  * ASoC: wm8994: correct BCLK DIV 348 to 384
    - LP: #1465653
  * Input: elantech - fix semi-mt protocol for v3 HW
    - LP: #1465653
  * powerpc: Align TOC to 256 bytes
    - LP: #1465653
  * ALSA: hda - Add Conexant codecs CX20721, CX20722, CX20723 and CX20724
    - LP: #1454656, #1465653
  * ALSA: hda/realtek - ALC292 dock fix for Thinkpad L450
    - LP: #1465653
  * mmc: atmel-mci: fix bad variable type for clkdiv
    - LP: #1465653
  * sd: Disable support for 256 byte/sector disks
    - LP: #1465653
  * xen/events: don't bind non-percpu VIRQs with percpu chip
    - LP: #1465653
  * libceph: request a new osdmap if lingering request maps to no osd
    - LP: #1465653
  * crypto: s390/ghash - Fix incorrect ghash icv buffer handling.
    - LP: #1465653
  * ipvs: fix memory leak in ip_vs_ctl.c
    - LP: #1465653
  * tcp/ipv6: fix flow label setting in TIME_WAIT state
    - LP: #1465653
  * ipv6: do not delete previously existing ECMP routes if add fails
    - LP: #1465653
  * ipv6: fix ECMP route replacement
    - LP: #1465653
  * ipv4: Avoid crashing in ip_error
    - LP: #1465653
  * cdc_ncm: Fix tx_bytes statistics
    - LP: #1465653
  * bridge: fix parsing of MLDv2 reports
    - LP: #1465653
  * ARM: fix missing syscall trace exit
    - LP: #1465653
  * module: Call module notifier on failure after complete_formation()
    - LP: #1465653
  * gpio: gpio-kempld: Fix get_direction return value
    - LP: #1465653
  * ARM: dts: imx27: only map 4 Kbyte for fec registers
    - LP: #1465653
  * ARM: 8356/1: mm: handle non-pmd-aligned end of RAM
    - LP: #1465653
  * mac80211: don't use napi_gro_receive() outside NAPI context
    - LP: #1465653
  * ARM: dts: set display clock correctly for exynos4412-trats2
    - LP: #1465653
  * hwmon: (ntc_thermistor) Ensure iio channel is of type IIO_VOLTAGE
    - LP: #1465653
  * lguest: fix out-by-one error in address checking.
    - LP: #1465653
  * drm/radeon: partially revert "fix VM_CONTEXT*_PAGE_TABLE_END_ADDR
    handling"
    - LP: #1465653
  * xfs: xfs_attr_inactive leaves inconsistent attr fork state behind
    - LP: #1465653
  * fs, omfs: add NULL terminator in the end up the token list
    - LP: #1465653
  * d_walk() might skip too much
    - LP: #1465653
  * hwmon: (nct6775) Add missing sysfs attribute initialization
    - LP: #1465653
  * target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST
    - LP: #1465653
  * x86: bpf_jit: fix compilation of large bpf programs
    - LP: #1465653
  * net_sched: invoke ->attach() after setting dev->qdisc
    - LP: #1465653
  * fs/binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length
    mappings
    - LP: #1465653
  * tools/vm: fix page-flags build
    - LP: #1465653
  * rt2x00: add new rt2800usb device DWA 130
    - LP: #1465653
  * Linux 3.16.7-ckt13
    - LP: #1465653

-- Luis Henriques <luis.henriques@canonical.com>  Fri, 19 Jun 2015 10:52:34 +0100

Changed in linux (Ubuntu Utopic):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-07-06:

Download full text (9.2 KiB)

This bug was fixed in the package linux - 3.13.0-57.95

---------------
linux (3.13.0-57.95) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1466592

[ Brad Figg ]

* Merged back Ubuntu-3.13.0-55.94 regression fix for security release

linux (3.13.0-56.93) trusty; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #1465798

[ Upstream Kernel Changes ]

This bug was fixed in the package linux - 3.13.0-57.95

---------------
linux (3.13.0-57.95) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1466592

[ Brad Figg ]

* Merged back Ubuntu-3.13.0-55.94 regression fix for security release

linux (3.13.0-56.93) trusty; urgency=low

[ Brad Figg ]

* Release Tracking Bug
    - LP: #1465798

[ Upstream Kernel Changes ]

* net: eth: xgene: devm_ioremap() returns NULL on error
    - LP: #1458042
  * drivers: net: xgene: fix new firmware backward compatibility with older
    driver
    - LP: #1458042
  * drivers: net: xgene: constify of_device_id array
    - LP: #1458042
  * drivers: net: xgene: Add second SGMII based 1G interface
    - LP: #1458042
  * net: phy: re-design phy_modes to be self-contained
    - LP: #1458042
  * dtb: change binding name to match with newer firmware DT
    - LP: #1458042
  * dtb: xgene: Add second SGMII based 1G interface node
    - LP: #1458042
  * Btrfs: make xattr replace operations atomic
    - LP: #1438501
    - CVE-2014-9710
  * cdc-acm: prevent infinite loop when parsing CDC headers.
    - LP: #1460657
  * (upstream) libata: Blacklist queued TRIM on all Samsung 800-series
    - LP: #1338706, #1449005
  * ahci: avoton port-disable reset-quirk
    - LP: #1458617
  * xfs: avoid false quotacheck after unclean shutdown
    - LP: #1461730
  * (upstream)[SCSI] Add timeout to avoid infinite command retry
    - LP: #1449372
  * (upstream)scsi_lib: remove the description string in
    scsi_io_completion()
    - LP: #1449372
  * udf: Remove repeated loads blocksize
    - LP: #1462173
    - CVE-2015-4167
  * udf: Check length of extended attributes and allocation descriptors
    - LP: #1462173
    - CVE-2015-4167
  * vfs: read file_handle only once in handle_to_path
    - LP: #1416503
    - CVE-2015-1420
  * ozwpan: Use unsigned ints to prevent heap overflow
    - LP: #1463442
    - CVE-2015-4001
  * ozwpan: divide-by-zero leading to panic
    - LP: #1463445
    - CVE-2015-4003
  * ozwpan: Use proper check to prevent heap overflow
    - LP: #1463444
    - CVE-2015-4002
  * ozwpan: unchecked signed subtraction leads to DoS
    - LP: #1463444
    - CVE-2015-4002
  * Input: elantech - add new icbody type
    - LP: #1464490
  * Bluetooth: ath3k: Add support Atheros AR5B195 combo Mini PCIe card
    - LP: #1465796
  * power_supply: twl4030_madc: Check return value of power_supply_register
    - LP: #1465796
  * power_supply: lp8788-charger: Fix leaked power supply on probe fail
    - LP: #1465796
  * ARM: dts: dove: Fix uart[23] reg property
    - LP: #1465796
  * xtensa: xtfpga: fix hardware lockup caused by LCD driver
    - LP: #1465796
  * Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open()
    - LP: #1465796
  * xtensa: provide __NR_sync_file_range2 instead of __NR_sync_file_range
    - LP: #1465796
  * KVM: s390: Zero out current VMDB of STSI before including level3 data.
    - LP: #1465796
  * usb: musb: core: fix TX/RX endpoint order
    - LP: #1465796
  * drm/radeon: fix doublescan modes (v2)
    - LP: #1465796
  * usb: phy: Find the right match in devm_usb_phy_match
    - LP: #1465796
  * tools lib traceevent kbuffer: Remove extra update to data pointer in
    PADDING
    - LP: #1465796
  * ring-buffer: Replace this_cpu_*() with __this_cpu_*()
    - LP: #1465796
  * ASoC: wm8741: Fix rates constraints values
    - LP: #1465796
  * cdc-wdm: fix endianness bug in debug statements
    - LP: #1465796
  * staging: panel: fix lcd type
    - LP: #1465796
  * UBI: account for bitflips in both the VID header and data
    - LP: #1465796
  * UBI: fix out of bounds write
    - LP: #1465796
  * UBI: initialize LEB number variable
    - LP: #1465796
  * UBI: fix check for "too many bytes"
    - LP: #1465796
  * ARM: S3C64XX: Use fixed IRQ bases to avoid conflicts on Cragganmore
    - LP: #1465796
  * ASoC: davinci-evm: drop un-necessary remove function
    - LP: #1465796
  * iscsi-target: Convert iscsi_thread_set usage to kthread.h
    - LP: #1465796
  * Drivers: hv: vmbus: Don't wait after requesting offers
    - LP: #1465796
  * Btrfs: fix log tree corruption when fs mounted with -o discard
    - LP: #1465796
  * btrfs: don't accept bare namespace as a valid xattr
    - LP: #1465796
  * ARM: 8320/1: fix integer overflow in ELF_ET_DYN_BASE
    - LP: #1465796
  * rtlwifi: rtl8192cu: Add new USB ID
    - LP: #1465796
  * MIPS: Hibernate: flush TLB entries earlier
    - LP: #1465796
  * ASoC: cs4271: Increase delay time after reset
    - LP: #1465796
  * stk1160: Make sure current buffer is released
    - LP: #1465796
  * mnt: Improve the umount_tree flags
    - LP: #1465796
  * ext4: make fsync to sync parent dir in no-journal for real this time
    - LP: #1465796
  * Input: elantech - fix absolute mode setting on some ASUS laptops
    - LP: #1465796
  * usb: define a generic USB_RESUME_TIMEOUT macro
    - LP: #1465796
  * usb: host: xhci: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: ehci: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: uhci: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: musb: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: isp116x: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: fotg210: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: fusbh200: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: oxu210hp: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: r8a66597: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: host: sl811: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: dwc2: hcd: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: isp1760: hcd: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * usb: core: hub: use new USB_RESUME_TIMEOUT
    - LP: #1465796
  * iser-target: Fix possible deadlock in RDMA_CM connection error
    - LP: #1465796
  * gpio: mvebu: Fix mask/unmask managment per irq chip type
    - LP: #1465796
  * scsi: storvsc: Fix a bug in copy_from_bounce_buffer()
    - LP: #1465796
  * ALSA: emu10k1: don't deadlock in proc-functions
    - LP: #1465796
  * xtensa: ISS: fix locking in TAP network adapter
    - LP: #1465796
  * s390/hibernate: fix save and restore of kernel text section
    - LP: #1465796
  * Btrfs: fix inode eviction infinite loop after extent_same ioctl
    - LP: #1465796
  * Btrfs: fix inode eviction infinite loop after cloning into it
    - LP: #1465796
  * ACPICA: Utilities: split IO address types from data type models.
    - LP: #1465796
  * drm/i915: Dont enable CS_PARSER_ERROR interrupts at all
    - LP: #1465796
  * target: Fix COMPARE_AND_WRITE with SG_TO_MEM_NOALLOC handling
    - LP: #1465796
  * mm/hugetlb: use pmd_page() in follow_huge_pmd()
    - LP: #1465796
  * fs/binfmt_elf.c: fix bug in loading of PIE binaries
    - LP: #1465796
  * IB/core: disallow registering 0-sized memory region
    - LP: #1465796
  * IB/core: don't disallow registering region starting at 0x0
    - LP: #1465796
  * ptrace: fix race between ptrace_resume() and wait_task_stopped()
    - LP: #1465796
  * mvsas: fix panic on expander attached SATA devices
    - LP: #1465796
  * drm/i915: cope with large i2c transfers
    - LP: #1465796
  * RCU pathwalk breakage when running into a symlink overmounting
    something
    - LP: #1465796
  * compal-laptop: Check return value of power_supply_register
    - LP: #1465796
  * sched/idle/x86: Restore mwait_idle() to fix boot hangs, to improve
    power savings and to improve performance
    - LP: #1465796
  * nfs: don't call blocking operations while !TASK_RUNNING
    - LP: #1465796
  * nfs: fix high load average due to callback thread sleeping
    - LP: #1465796
  * e1000: add dummy allocator to fix race condition between mtu change and
    netpoll
    - LP: #1465796
  * wl18xx: show rx_frames_per_rates as an array as it really is
    - LP: #1465796
  * lib: memzero_explicit: use barrier instead of OPTIMIZER_HIDE_VAR
    - LP: #1465796
  * driver core: bus: Goto appropriate labels on failure in bus_add_device
    - LP: #1465796
  * C6x: time: Ensure consistency in __init
    - LP: #1465796
  * crypto: omap-aes - Fix support for unequal lengths
    - LP: #1465796
  * jhash: Update jhash_[321]words functions to use correct initval
    - LP: #1465796
  * KVM: use slowpath for cross page cached accesses
    - LP: #1465796
  * powerpc: Fix missing L2 cache size in /sys/devices/system/cpu
    - LP: #1465796
  * NFS: fix BUG() crash in notify_change() with patch to chown_common()
    - LP: #1465796
  * i2c: core: Export bus recovery functions
    - LP: #1465796
  * IB/mlx4: Fix WQE LSO segment calculation
    - LP: #1465796
  * mlx5: wrong page mask if CONFIG_ARCH_DMA_ADDR_T_64BIT enabled for 32Bit
    architectures
    - LP: #1465796
  * skbuff: Do not scrub skb mark within the same name space
    - LP: #1465796
  * firmware/ihex2fw.c: restore missing default in switch statement
    - LP: #1465796
  * memstick: mspro_block: add missing curly braces
    - LP: #1465796
  * tools/power turbostat: Use $(CURDIR) instead of $(PWD) and add support
    for O= option in Makefile
    - LP: #1465796
  * ext4: fix data corruption caused by unwritten and delayed extents
    - LP: #1465796
  * powerpc: Add vr save/restore functions
    - LP: #1465796
  * Linux 3.13.11-ckt21
    - LP: #1465796

-- Luis Henriques <luis.henriques@canonical.com>  Thu, 18 Jun 2015 18:19:14 +0100

Changed in linux (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-07-06:

Download full text (20.3 KiB)

This bug was fixed in the package linux-lts-utopic - 3.16.0-43.58~14.04.1

---------------
linux-lts-utopic (3.16.0-43.58~14.04.1) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1466983

[ Brad Figg ]

* Merged back Ubuntu-3.16.0-41.57 regression fix for security release

linux (3.16.0-42.56) utopic; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #1465714

[ Chris J Arges ]

* [config] CONFIG_IPMI_POWERNV=m on ppc64el
- LP: #1439562

[ Luis Henriques ]

* [Config] Disable CONFIG_USB_OTG
- LP: #1411295

[ Upstream Kernel Changes ]

This bug was fixed in the package linux-lts-utopic - 3.16.0-43.58~14.04.1

---------------
linux-lts-utopic (3.16.0-43.58~14.04.1) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1466983

[ Brad Figg ]

* Merged back Ubuntu-3.16.0-41.57 regression fix for security release

linux (3.16.0-42.56) utopic; urgency=low

[ Brad Figg ]

* Release Tracking Bug
    - LP: #1465714

[ Chris J Arges ]

* [config] CONFIG_IPMI_POWERNV=m on ppc64el
    - LP: #1439562

[ Luis Henriques ]

* [Config] Disable CONFIG_USB_OTG
    - LP: #1411295

[ Upstream Kernel Changes ]

-- Luis Henriques <luis.henriques@canonical.com>  Mon, 22 Jun 2015 10:44:45 +0100

Changed in linux-lts-utopic (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-07-06:

Download full text (9.2 KiB)

This bug was fixed in the package linux-lts-trusty - 3.13.0-57.95~precise1

---------------
linux-lts-trusty (3.13.0-57.95~precise1) precise; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1466938

[ Brad Figg ]

* Merged back Ubuntu-3.13.0-55.94 regression fix for security release

linux (3.13.0-56.93) trusty; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #1465798

[ Upstream Kernel Changes ]

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Changed in linux-lts-backport-maverick (Ubuntu Utopic):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Utopic):
status:	New → Won't Fix

Changed in linux-lts-backport-maverick (Ubuntu Precise):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Precise):
status:	New → Won't Fix

no longer affects:	linux-lts-trusty (Ubuntu Utopic)
no longer affects:	linux-armadaxp (Ubuntu Utopic)
no longer affects:	linux-ec2 (Ubuntu Utopic)
no longer affects:	linux-goldfish (Ubuntu Utopic)
no longer affects:	linux-lts-saucy (Ubuntu Utopic)
no longer affects:	linux-lts-quantal (Ubuntu Utopic)
no longer affects:	linux-mvl-dove (Ubuntu Utopic)
no longer affects:	linux-ti-omap4 (Ubuntu Utopic)
no longer affects:	linux-lts-vivid (Ubuntu Utopic)
no longer affects:	linux (Ubuntu Utopic)
no longer affects:	linux-mako (Ubuntu Utopic)
no longer affects:	linux-fsl-imx51 (Ubuntu Utopic)
no longer affects:	linux-lts-utopic (Ubuntu Utopic)
no longer affects:	linux-flo (Ubuntu Utopic)
no longer affects:	linux-lts-raring (Ubuntu Utopic)
no longer affects:	linux-manta (Ubuntu Utopic)

Changed in linux-lts-wily (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → Medium

Changed in linux-raspi2 (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Vivid):
status:	New → Invalid
importance:	Undecided → Medium

Changed in linux-raspi2 (Ubuntu Xenial):
status:	Invalid → Fix Committed

Changed in linux-lts-xenial (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Trusty):
status:	New → Fix Committed
importance:	Undecided → Medium

Changed in linux-manta (Ubuntu Xenial):
status:	New → Invalid

Changed in linux-snapdragon (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Yakkety):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium

Ubuntulinux-goldfish package

CVE-2015-4167

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-goldfish package