Trusty update to v3.13.11.4 stable release

Bug #1333838 reported by Kamal Mostafa
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Trusty
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The v3.13.11.4 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the v3.13.11.4 stable release:
Linux 3.13.11.4
target: Fix NULL pointer dereference for XCOPY in target_put_sess_cmd
mm: add !pte_present() check on existing hugetlb_entry callbacks
mm: rmap: fix use-after-free in __put_anon_vma
target: Fix alua_access_state attribute OOPs for un-configured devices
percpu-refcount: fix usage of this_cpu_ops
iscsi-target: Fix wrong buffer / buffer overrun in iscsi_change_param_value()
iser-target: Add missing target_put_sess_cmd for ImmedateData failure
ALSA: hda/realtek - Fix COEF widget NID for ALC260 replacer fixup
ALSA: hda/realtek - Correction of fixup codes for PB V7900 laptop
drm/radeon: use the CP DMA on CIK
drm/radeon/dpm: resume fixes for some systems
ALSA: hda/analog - Fix silent output on ASUS A8JN
md: always set MD_RECOVERY_INTR when interrupting a reshape thread.
xhci: delete endpoints from bandwidth list before freeing whole device
md: always set MD_RECOVERY_INTR when aborting a reshape or other "resync".
USB: cdc-wdm: properly include types.h
USB: serial: option: add support for Novatel E371 PCIe card
USB: ftdi_sio: add NovaTech OrionLXm product ID
USB: io_ti: fix firmware download on big-endian machines (part 2)
can: only rename enabled led triggers when changing the netdev name
USB: Avoid runtime suspend loops for HCDs that can't handle suspend/resume
Staging: speakup: Move pasting into a work item
iwlwifi: mvm: fix setting channel in monitor mode
drm/radeon: don't allow RADEON_GEM_DOMAIN_CPU for command submission
drm/radeon: avoid crash if VM command submission isn't available
rtmutex: Fix deadlock detector for real
powerpc, kexec: Fix "Processor X is stuck" issue during kexec from ST mode
powerpc: Fix 64 bit builds with binutils 2.24
virtio_blk: fix race between start and stop queue
virtio_blk: don't crash, report error if virtqueue is broken.
dm cache: always split discards on cache block boundaries
drm/i915: Only copy back the modified fields to userspace from execbuffer
Input: synaptics - T540p - unify with other LEN0034 models
ARM: 8064/1: fix v7-M signal return
ARM: 8051/1: put_user: fix possible data corruption in put_user
ALSA: hda - Fix onboard audio on Intel H97/Z97 chipsets
ARM: imx: fix error handling in ipu device registration
cpufreq: cpu0: drop wrong devm usage
cpufreq: remove race while accessing cur_policy
ARM: OMAP4: Fix the boot regression with CPU_IDLE enabled
futex: Prevent attaching to kernel threads
futex: Add another early deadlock detection check
ARM: OMAP2+: nand: Fix NAND on OMAP2 and OMAP3 boards
Input: synaptics - add min/max quirk for the ThinkPad W540
ARM: omap5: hwmod_data: Correct IDLEMODE for McPDM
dmaengine: dw: went back to plain {request,free}_irq() calls
ARM: OMAP3: clock: Back-propagate rate change from cam_mclk to dpll4_m5 on all OMAP3 platforms
mm/memory-failure.c: fix memory leak by race between poison and unpoison
hwpoison, hugetlb: lock_page/unlock_page does not match for handling a free hugepage
dmaengine: fix dmaengine_unmap failure
dma: mv_xor: Flush descriptors before activating a channel
nfsd4: warn on finding lockowner without stateid's
nfsd4: remove lockowner when removing lock stateid
can: peak_pci: prevent use after free at netdev removal
drm/radeon/pm: don't allow debugfs/sysfs access when PX card is off (v2)
drm/radeon: avoid segfault on device open when accel is not working.
drm/radeon: fix register typo on si
drm/radeon: handle non-VGA class pci devices with ATRM
drm/radeon: also try GART for CPU accessed buffers
drm/gf119-/disp: fix nasty bug which can clobber SOR0's clock setup
perf: Prevent false warning in perf_swevent_add
perf: Limit perf_event_attr::sample_period to 63 bits
af_iucv: wrong mapping of sent and confirmed skbs
mac80211: fix on-channel remain-on-channel
mac80211: fix suspend vs. association race
sched: Use CPUPRI_NR_PRIORITIES instead of MAX_RT_PRIO in cpupri check
sched: Sanitize irq accounting madness
cfg80211: free sme on connection failures
sysfs: make sure read buffer is zeroed
target: fix memory leak on XCOPY
clk: tegra: Fix wrong value written to PLLE_AUX
clk: tegra: use pll_ref as the pll_e parent
libceph: fix corruption when using page_count 0 page in rbd
arm64: fix pud_huge() for 2-level pagetables
mips: dts: Fix missing device_type="memory" property in memory nodes
arm: dts: Fix missing device_type="memory" for ste-ccu8540
target: Don't allow setting WC emulation if device doesn't support
tcm_fc: Fix free-after-use regression in ft_free_cmd
iscsi-target: Change BUG_ON to REJECT in iscsit_process_nop_out
Target/iser: Fix iscsit_accept_np and rdma_cm racy flow
Target/iser: Fix wrong connection requests list addition
parisc: Improve LWS-CAS performance
parisc: ratelimit userspace segfault printing
PCI: shpchp: Check bridge's secondary (not primary) bus speed
drm/i915: Increase WM memory latency values on SNB
drm/i915: restore backlight precision when converting from ACPI
metag: Reduce maximum stack size to 256MB
metag: fix memory barriers
dm crypt: fix cpu hotplug crash by removing per-cpu structure
i2c: rcar: bail out on zero length transfers
i2c: s3c2410: resume race fix
i2c: designware: Mask all interrupts during i2c controller enable
x86, mm, hugetlb: Add missing TLB page invalidation for hugetlb_cow()
[media] V4L2: fix VIDIOC_CREATE_BUFS in 64- / 32-bit compatibility mode
[media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel from user-space
ASoC: wm8962: Update register CLASS_D_CONTROL_1 to be non-volatile
iommu/amd: Fix interrupt remapping for aliased devices
hwmon: (emc1403) Support full range of known chip revision numbers
hwmon: (emc1403) Fix resource leak on module unload
hwmon: (emc1403) fix inverted store_hyst()
hrtimer: Set expiry time before switch_hrtimer_base()
powerpc/powernv: Reset root port in firmware
intel_pstate: Set turbo VID for BayTrail
mm, thp: close race between mremap() and split_huge_page()
ARM: dts: i.MX53: Fix ipu register space size
drm/i915/vlv: reset VLV media force wake request register
gpio: mcp23s08: Bug fix of SPI device tree registration.
ALSA: hda - add headset mic detect quirks for three Dell laptops
NFSD: Call ->set_acl with a NULL ACL structure if no entries
ACPI / processor: do not mark present at boot but not onlined CPU as onlined
ACPI: Revert "ACPI / AC: convert ACPI ac driver to platform bus"
ACPI / blacklist: Add dmi_enable_osi_linux quirk for Asus EEE PC 1015PX
libata: clean up ZPODD when a port is detached
genirq: Provide irq_force_affinity fallback for non-SMP
NFSd: call rpc_destroy_wait_queue() from free_client()
NFSd: Move default initialisers from create_client() to alloc_client()
ACPI: Revert "ACPI / Battery: Remove battery's proc directory"
ACPI: Revert "ACPI: Remove CONFIG_ACPI_PROCFS_POWER and cm_sbsc.c"
ACPI: Remove Kconfig symbol ACPI_PROCFS
md: avoid possible spinning md thread at shutdown.
device_cgroup: check if exception removal is allowed
ARM: dts: kirkwood: fix mislocated pcie-controller nodes
[media] media-device: fix infoleak in ioctl media_enum_entities()
clk: Fix double free due to devm_clk_register()
ARM: common: edma: Fix xbar mapping
crypto: caam - add allocation failure handling in SPRINTFCAT macro
ARM: mvebu: fix NOR bus-width in Armada XP OpenBlocks AX3 Device Tree
ARM: mvebu: fix NOR bus-width in Armada XP DB Device Tree
ARM: mvebu: fix NOR bus-width in Armada XP GP Device Tree
PCI: mvebu: split PCIe BARs into multiple MBus windows when needed
bus: mvebu-mbus: allow several windows with the same target/attribute
PCI: mvebu: fix off-by-one in the computed size of the mbus windows
device_cgroup: rework device access check and exception checking
spi: core: Ignore unsupported Dual/Quad Transfer Mode bits
workqueue: fix a possible race condition between rescuer and pwq-release
workqueue: make rescuer_thread() empty wq->maydays list before exiting
ARM: orion5x: fix target ID for crypto SRAM window
memory: mvebu-devbus: fix the conversion of the bus width
[media] fc2580: fix tuning failure on 32-bit arch
workqueue: fix bugs in wq_update_unbound_numa() failure path
percpu: make pcpu_alloc_chunk() use pcpu_mem_free() instead of kfree()
ima: audit log files opened with O_DIRECT flag
ima: introduce ima_kernel_read()
netfilter: ipv4: defrag: set local_df flag on defragmented skb
net-gro: reset skb->truesize in napi_reuse_skb()
ipv4: initialise the itag variable in __mkroute_input
ip_tunnel: Initialize the fallback device properly
batman-adv: fix local TT check for outgoing arp requests in DAT
batman-adv: increase orig refcount when storing ref in gw_node
batman-adv: fix reference counting imbalance while sending fragment
net: gro: make sure skb->cb[] initial content has not to be zero
rtnetlink: wait for unregistering devices in rtnl_link_unregister()
ipv6: fix calculation of option len in ip6_append_data
net: filter: s390: fix JIT address randomization
net: filter: x86: fix JIT address randomization
ip6_tunnel: fix potential NULL pointer dereference
sfc: fix calling of free_irq with already free vector
macvlan: Don't propagate IFF_ALLMULTI changes on down interfaces.
net: cdc_mbim: handle unaccelerated VLAN tagged frames
ipv4: fib_semantics: increment fib_info_cnt after fib_info allocation
net: ipv6: send pkttoobig immediately if orig frag size > mtu
net: ipv4: ip_forward: fix inverted local_df test
net: cdc_mbim: __vlan_find_dev_deep need rcu_read_lock
ip_tunnel: Set network header properly for IP_ECN_decapsulate()
net: cdc_ncm: fix buffer overflow
vsock: Make transport the proto owner
tcp_cubic: fix the range of delayed_ack
Revert "macvlan : fix checksums error when we are in bridge mode"
mactap: Fix checksum errors for non-gso packets in bridge mode
net: sctp: Don't transition to PF state when transport has exhausted 'Path.Max.Retrans'.
net: sctp: Potentially-Failed state should not be reached from unconfirmed state
slip: fix spinlock variant
net: qmi_wwan: add a number of Dell devices
net: qmi_wwan: add a number of CMOTech devices
net: qmi_wwan: add Alcatel L800MA
net: qmi_wwan: add Olivetti Olicard 500
net: qmi_wwan: add Sierra Wireless MC7305/MC7355
net: qmi_wwan: add Sierra Wireless MC73xx
net: qmi_wwan: add Sierra Wireless EM7355
sctp: reset flowi4_oif parameter on route lookup
bridge: Handle IFLA_ADDRESS correctly when creating bridge device
ipv6: fib: fix fib dump restart
rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF is set
rtnetlink: Warn when interface's information won't fit in our packet
net: sctp: cache auth_enable per endpoint
tg3: update rx_jumbo_pending ring param only when jumbo frames are enabled
macvlan: Fix lockdep warnings with stacked macvlan devices
vlan: Fix lockdep warning with stacked vlan devices.
net: Allow for more then a single subclass for netif_addr_lock
net: Find the nesting level of a given device by type.
vlan: Fix lockdep warning when vlan dev handle notification
ip6_gre: don't allow to remove the fb_tunnel_dev
filter: prevent nla extensions to peek beyond the end of the message
ipv4: return valid RTA_IIF on ip route get
vti: don't allow to add the same tunnel twice
gre: don't allow to add the same tunnel twice
ipv6: Limit mtu to 65575 bytes
bridge: Fix double free and memory leak around br_allowed_ingress
bonding: Remove debug_fs files when module init fails
net: core: don't account for udp header size when computing seglen
l2tp: take PMTU from tunnel UDP socket
net: sctp: test if association is dead in sctp_wake_up_waiters
net: sctp: wake up all assocs if sndbuf policy is per socket

tags: added: kernel-stable-tracking-bug
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (35.8 KiB)

This bug was fixed in the package linux - 3.13.0-32.57

---------------
linux (3.13.0-32.57) trusty; urgency=low

  [ Upstream Kernel Changes ]

  * l2tp: Privilege escalation in ppp over l2tp sockets
    - LP: #1341472
    - CVE-2014-4943

linux (3.13.0-32.56) trusty; urgency=low

  [ Luis Henriques ]

  * Merged back Ubuntu-3.13.0-30.55 security release
  * Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"
    - LP: #1337339
  * Release Tracking Bug
    - LP: #1338524

  [ Upstream Kernel Changes ]

  * ptrace,x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699
  * hpsa: add new Smart Array PCI IDs (May 2014)
    - LP: #1337516

linux (3.13.0-31.55) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1336278

  [ Andy Whitcroft ]

  * [Config] switch hyper-keyboard to virtual
    - LP: #1325306
  * [Packaging] linux-udeb-flavour -- standardise on linux prefix

  [ dann frazier ]

  * [Config] CONFIG_GPIO_DWAPB=m
    - LP: #1334823

  [ Feng Kan ]

  * SAUCE: (no-up) arm64: dts: Add Designware GPIO dts binding to APM
    X-Gene platform
    - LP: #1334823

  [ John Johansen ]

  * SAUCE: (no-up) apparmor: fix apparmor spams log with warning message
    - LP: #1308761

  [ Kamal Mostafa ]

  * [Config] updateconfigs ACPI_PROCFS_POWER=y after v3.13.11.4 rebase

  [ Loc Ho ]

  * SAUCE: (no-up) phy-xgene: Use correct tuning for Mustang
    - LP: #1335636

  [ Michael Ellerman ]

  * SAUCE: (no-up) powerpc/perf: Ensure all EBB register state is cleared
    on fork()
    - LP: #1328914

  [ Ming Lei ]

  * Revert "SAUCE: (no-up) rtc: Add X-Gene SoC Real Time Clock Driver"
    - LP: #1274305

  [ Suman Tripathi ]

  * SAUCE: (no-up) libahci: Implement the function ahci_restart_engine to
    restart the port dma engine.
    - LP: #1335645
  * SAUCE: (no-up) ata: Fix the dma state machine lockup for the IDENTIFY
    DEVICE PIO mode command.
    - LP: #1335645

  [ Tim Gardner ]

  * [Config] CONFIG_POWERNV_CPUFREQ=y for powerpc, ppc64el
    - LP: #1324571
  * [Debian] Add UTS_UBUNTU_RELEASE_ABI to utsrelease.h
    - LP: #1327619
  * [Config] CONFIG_HAVE_MEMORYLESS_NODES=y
    - LP: #1332063
  * [Config] CONFIG_HID_RMI=m
    - LP: #1305522

  [ Upstream Kernel Changes ]

  * Revert "offb: Add palette hack for little endian"
    - LP: #1333430
  * Revert "net: mvneta: fix usage as a module on RGMII configurations"
    - LP: #1333837
  * Revert "USB: serial: add usbid for dell wwan card to sierra.c"
    - LP: #1333837
  * Revert "macvlan : fix checksums error when we are in bridge mode"
    - LP: #1333838
  * serial: uart: add hw flow control support configuration
    - LP: #1328295
  * mm/numa: Remove BUG_ON() in __handle_mm_fault()
    - LP: #1323165
  * Tools: hv: Handle the case when the target file exists correctly
    - LP: #1306215
  * Documentation/devicetree/bindings: add documentation for the APM X-Gene
    SoC RTC DTS binding
    - LP: #1274305
  * drivers/rtc: add APM X-Gene SoC RTC driver
    - LP: #1274305
  * arm64: add APM X-Gene SoC RTC DTS entry
    - LP: #1274305
  * powerpc/perf: Add Power8 cache & TLB events
    - LP: #1328914
  * powerpc/perf: Configure BH...

Changed in linux (Ubuntu Trusty):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Mathew Hodson (mhodson)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.