Trusty update to v3.13.11-ckt36 stable release

Bug #1557191 reported by Kamal Mostafa
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Trusty
Fix Released
Undecided
Kamal Mostafa

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v3.13.11-ckt36 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches from the v3.13.11-ckt36 stable release shall be applied:

Linux 3.13.11-ckt36
pipe: limit the per-user amount of pages allocated in pipes
af_unix: Don't set err in unix_stream_read_generic unless there was an error
net/mlx4_en: Choose time-stamping shift value according to HW frequency
ipv4: fix memory leaks in ip_cmsg_send() callers
bonding: Fix ARP monitor validation
sctp: Fix port hash table size computation
unix_diag: fix incorrect sign extension in unix_lookup_by_ino
rtnl: RTM_GETNETCONF: fix wrong return value
pppoe: fix reference counting in PPPoE proxy
net/mlx4_en: Count HW buffer overrun only once
qmi_wwan: add "4G LTE usb-modem U901"
af_unix: Guard against other == sk in unix_dgram_sendmsg
sctp: translate network order to host order when users get a hmacid
net:Add sysctl_max_skb_frags
unix: correctly track in-flight fds in sending process user_struct
ipv6: fix a lockdep splat
net/ipv6: add sysctl option accept_ra_min_hop_limit
ipv6/udp: use sticky pktinfo egress ifindex on connect()
sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
pptp: fix illegal memory access caused by multiple bind()s
af_unix: fix struct pid memory leak
tcp: fix NULL deref in tcp_v4_send_ack()
net: dp83640: Fix tx timestamp overflow handling.
af_iucv: Validate socket address length in iucv_sock_bind()
do_last(): don't let a bogus return value from ->open() et.al. to confuse us
hpfs: don't truncate the file when delete fails
KVM: x86: MMU: fix ubsan index-out-of-range warning
libceph: don't bail early from try_read() when skipping a message
tracing: Fix showing function event in available_events
KVM: async_pf: do not warn on page allocation failures
sunrpc/cache: fix off-by-one in qword_get()
can: ems_usb: Fix possible tx overflow
drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE
kernel/resource.c: fix muxed resource handling in __request_region()
ext4: fix crashes in dioread_nolock mode
ext4: fix bh->b_state corruption
hwmon: (ads1015) Handle negative conversion values correctly
USB: option: add "4G LTE usb-modem U901"
USB: cp210x: add IDs for GE B650V3 and B850V3 boards
USB: option: add support for SIM7100E
NFSv4: Fix a dentry leak on alias use
drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
drm/radeon: use post-decrement in error handling
ALSA: seq: Fix double port list deletion
tracing: Fix freak link error caused by branch tracer
tracepoints: Do not trace when cpu is offline
dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
ALSA: seq: Fix leak of pool buffer at concurrent writes
ALSA: seq: Drop superfluous error/debug messages after malloc failures
xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted.
xen/pciback: Save the number of MSI-X entries to be copied later.
xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
bio: return EINTR if copying to user space got interrupted
ext4: don't read blocks from disk after extents being swapped
ext4: fix potential integer overflow
btrfs: properly set the termination value of ctx->pos in readdir
ARM: 8519/1: ICST: try other dividends than 1
s390/dasd: fix refcount for PAV reassignment
s390/dasd: prevent incorrect length error under z/VM after PAV changes
cifs: fix erroneous return value
workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
ahci: Intel DNV device IDs SATA
drm/i915: fix error path in intel_setup_gmbus()
phy: twl4030-usb: Relase usb phy on unload
ALSA: timer: Fix race at concurrent reads
ALSA: timer: Fix race between stop and interrupt
nfs: fix nfs_size_to_loff_t
ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
ALSA: timer: Fix wrong instance passed to slave callbacks
powerpc: Fix dedotify for binutils >= 2.26
ALSA: dummy: Implement timer backend switching more safely
klist: fix starting point removed bug in klist iterators
ALSA: hda - Fix speaker output from VAIO AiO machines
pty: make sure super_block is still valid in final /dev/tty close
pty: fix possible use after free of tty->driver_data
serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
crypto: user - lock crypto_alg_list on alg dump
radix-tree: fix oops after radix_tree_iter_retry
mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup
mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress
dump_stack: avoid potential deadlocks
ALSA: hda - Fix static checker warning in patch_hdmi.c
drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
SCSI: Add Marvell Console to VPD blacklist
scsi_dh_rdac: always retry MODE SELECT on command lock violation
Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
[media] saa7134-alsa: Only frees registered sound cards
ALSA: timer: Fix leftover link at closing
[media] tda1004x: only update the frontend properties if locked
target: Fix race with SCF_SEND_DELAYED_TAS handling
target: Fix remote-port TMR ABORT + se_cmd fabric stop
target: Fix TAS handling for multi-session se_node_acls
target: Fix LUN_RESET active I/O handling for ACK_KREF
target: Fix LUN_RESET active TMR descriptor handling
target: Add TFO->abort_task for aborted task resources release
target: Fix Task Aborted Status (TAS) handling
xhci: Fix list corruption in urb dequeue at host removal
usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
radix-tree: fix race in gang lookup
drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
ALSA: seq: Fix lockdep warnings due to double mutex locks
ALSA: rawmidi: Fix race at copying & updating the position
ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
ALSA: Move EXPORT_SYMBOL() in appropriate places
ALSA: hda - Add fixup for Mac Mini 7,1 model
module: wrapper for symbol name.
ASoC: dpcm: fix the BE state on hw_free
cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
libata: fix sff host state machine locking while polling
ALSA: timer: Fix link corruption due to double start or stop
ALSA: seq: Fix yet another races among ALSA timer accesses
ALSA: pcm: Fix potential deadlock in OSS emulation
ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
ALSA: seq: Fix race at closing in virmidi driver
intel_scu_ipcutil: underflow in scu_reg_access()
iio: inkern: fix a NULL dereference on error
crypto: algif_hash - wait for crypto_ahash_init() to complete
target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
drm/i915/dp: fall back to 18 bpp when sink capability is unknown
crypto: shash - Fix has_key setting
rfkill: fix rfkill_fop_read wait_event usage
mac80211: Requeue work after scan complete for all VIF types.
mac80211: start_next_roc only if scan was actually running
libata: disable forced PORTS_IMPL for >= AHCI 1.3
PCI/AER: Flush workqueue on device remove to avoid use-after-free
iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
iio: dac: mcp4725: set iio name property in sysfs
x86/entry/compat: Add missing CLAC to entry_INT80_32
EVM: Use crypto_memneq() for digest comparisons
iw_cxgb3: Fix incorrectly returning error on success

tags: added: kernel-stable-tracking-bug
description: updated
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
assignee: nobody → Kamal Mostafa (kamalmostafa)
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (11.0 KiB)

This bug was fixed in the package linux - 3.13.0-85.129

---------------
linux (3.13.0-85.129) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1558727

  [ Upstream Kernel Changes ]

  * Revert "Revert "af_unix: Revert 'lock_interruptible' in stream receive
    code""

linux (3.13.0-84.128) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1557596

  [ Upstream Kernel Changes ]

  * Revert "af_unix: Revert 'lock_interruptible' in stream receive code"
    - LP: #1540731
  * seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO
    - LP: #1496073
  * net/mlx4_en: Remove dependency between timestamping capability and
    service_task
    - LP: #1537859
  * net/mlx4_en: Fix HW timestamp init issue upon system startup
    - LP: #1537859
  * x86/mm: Fix slow_virt_to_phys() for X86_PAE again
    - LP: #1549601
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1557191
  * EVM: Use crypto_memneq() for digest comparisons
    - LP: #1557191
  * x86/entry/compat: Add missing CLAC to entry_INT80_32
    - LP: #1557191
  * iio: dac: mcp4725: set iio name property in sysfs
    - LP: #1557191
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1557191
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1557191
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1557191
  * mac80211: start_next_roc only if scan was actually running
    - LP: #1557191
  * mac80211: Requeue work after scan complete for all VIF types.
    - LP: #1557191
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1557191
  * crypto: shash - Fix has_key setting
    - LP: #1557191
  * drm/i915/dp: fall back to 18 bpp when sink capability is unknown
    - LP: #1557191
  * target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
    - LP: #1557191
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1557191
  * iio: inkern: fix a NULL dereference on error
    - LP: #1557191
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1557191
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1557191
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1557191
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1557191
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1557191
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1557191
  * libata: fix sff host state machine locking while polling
    - LP: #1557191
  * cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
    - LP: #1557191
  * ASoC: dpcm: fix the BE state on hw_free
    - LP: #1557191
  * module: wrapper for symbol name.
    - LP: #1557191
  * ALSA: hda - Add fixup for Mac Mini 7,1 model
    - LP: #1557191
  * ALSA: Move EXPORT_SYMBOL() in appropriate places
    - LP: #1557191
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1557191
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1557191
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1557191
  * drivers/scsi/sg.c: mark VMA as VM_IO...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.