Trusty update to 3.13.11-ckt22 stable release

Bug #1471233 reported by Luis Henriques
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Trusty
Fix Released
Medium
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.13.11-ckt22 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.13.11-ckt22 stable release:

staging, rtl8192e, LLVMLinux: Change extern inline to static inline
kernel: use the gnu89 standard explicitly
staging, rtl8192e, LLVMLinux: Remove unused inline prototype
staging: rtl8712, rtl8712: avoid lots of build warnings
qla2xxx: remove redundant declaration in 'qla_gbl.h'
staging: wlags49_h2: fix extern inline functions
ARM: 8307/1: psci: move psci firmware calls out of line
kconfig: Fix warning "‘jump’ may be used uninitialized"
scripts/sortextable: suppress warning: `relocs_size' may be used uninitialized
ASoC: dapm: Enable autodisable on SOC_DAPM_SINGLE_TLV_AUTODISABLE
ALSA: hda - Fix mute-LED fixed mode
ALSA: emu10k1: Fix card shortname string buffer overflow
ALSA: emux: Fix mutex deadlock at unloading
drm/radeon: add SI DPM quirk for Sapphire R9 270 Dual-X 2G GDDR5
SCSI: add 1024 max sectors black list flag
3w-sas: fix command completion race
3w-xxxx: fix command completion race
3w-9xxx: fix command completion race
serial: xilinx: Use platform_get_irq to get irq description structure
serial: of-serial: Remove device_type = "serial" registration
tty/serial: at91: maxburst was missing for dma transfers
ALSA: emux: Fix mutex deadlock in OSS emulation
ALSA: emu10k1: Emu10k2 32 bit DMA mode
rbd: end I/O the entire obj_request on error
powerpc/pseries: Correct cpu affinity for dlpar added cpus
bridge/mdb: remove wrong use of NLM_F_MULTI
efivarfs: Ensure VariableName is NUL-terminated
x86/efi: Store upper bits of command line buffer address in ext_cmd_line_ptr
writeback: use |1 instead of +1 to protect against div by zero
ARM: mvebu: armada-xp-openblocks-ax3-4: Disable internal RTC
ARM: dts: imx23-olinuxino: Fix polarity of LED GPIO
ARM: dts: imx23-olinuxino: Fix dr_mode of usb0
ARM: dts: imx25: Add #pwm-cells to pwm4
ARM: dts: imx28: Fix AUART4 TX-DMA interrupt name
gpio: sysfs: fix memory leaks and device hotplug
drm/radeon: disable semaphores for UVD V1 (v2)
RDMA/CMA: Canonize IPv4 on IPV6 sockets properly
drm/i915: Assume dual channel LVDS if pixel clock necessitates it
drm/i915: Add missing MacBook Pro models with dual channel LVDS
xen/console: Update console event channel on resume
xen/events: Set irq_info->evtchn before binding the channel to CPU in __startup_pirq()
mm/memory-failure: call shake_page() when error hits thp tail page
nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
ocfs2: dlm: fix race between purge and get lock resource
drm/radeon: make UVD handle checking more strict
drm/radeon: more strictly validate the UVD codec
path_openat(): fix double fput()
mnt: Fix fs_fully_visible to verify the root directory is visible
pinctrl: Don't just pretend to protect pinctrl_maps, do it for real
mmc: sh_mmcif: Fix timeout value for command request
xen-pciback: Add name prefix to global 'permissive' variable
mmc: core: add missing pm event in mmc_pm_notify to fix hib restore
thermal: step_wise: Revert optimization
libata: Add helper to determine when PHY events should be ignored
libata: Ignore spurious PHY event on LPM policy change
usb: gadget: configfs: Fix interfaces array NULL-termination
rtlwifi: rtl8192cu: Fix kernel deadlock
USB: cp210x: add ID for KCF Technologies PRN device
USB: pl2303: Remove support for Samsung I330
USB: visor: Match I330 phone more precisely
nfsd: fix the check for confirmed openowner in nfs4_preprocess_stateid_op
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
ACPI / init: Fix the ordering of acpi_reserve_resources()
md/raid5: don't record new size if resize_stripes fails.
xhci: fix isoc endpoint dequeue from advancing too far on transaction error
xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256
xhci: gracefully handle xhci_irq dead device
usb-storage: Add NO_WP_DETECT quirk for Lacie 059f:0651 devices
ARM: net fix emit_udiv() for BPF_ALU | BPF_DIV | BPF_K intruction.
drm/radeon: fix VM_CONTEXT*_PAGE_TABLE_END_ADDR handling
drm/radeon: add new bonaire pci id
firmware: dmi_scan: Fix ordering of product_uuid
ext4: fix NULL pointer dereference when journal restart fails
ext4: check for zero length extent explicitly
jbd2: fix r_count overflows leading to buffer overflow in journal recovery
mm, numa: really disable NUMA balancing by default on single node machines
spi: bitbang: Make setup_transfer() callback optional
igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector
ARM: net: delegate filter to kernel interpreter when imm_offset() return value can't fit into 12bits.
HV_CRASH_CTL_CRASH_NOTIFY
ALSA: hda - Add headphone quirk for Lifebook E752
ASoC: mc13783: Fix wrong mask value used in mc13xxx_reg_rmw() calls
ASoC: uda1380: Avoid accessing i2c bus when codec is disabled
mac80211: move WEP tailroom size check
KVM: MMU: fix smap permission check
KVM: MMU: fix CR4.SMEP=1, CR0.WP=0 with shadow pages
KVM: MMU: fix SMAP virtualization
storvsc: Set the SRB flags correctly when no data transfer is needed
ASoC: wm8960: fix "RINPUT3" audio route error
ASoC: wm8994: correct BCLK DIV 348 to 384
Input: elantech - fix semi-mt protocol for v3 HW
powerpc: Align TOC to 256 bytes
ALSA: hda - Add Conexant codecs CX20721, CX20722, CX20723 and CX20724
mmc: atmel-mci: fix bad variable type for clkdiv
sd: Disable support for 256 byte/sector disks
libceph: request a new osdmap if lingering request maps to no osd
crypto: s390/ghash - Fix incorrect ghash icv buffer handling.
ipvs: fix memory leak in ip_vs_ctl.c
net: phy: Allow EEE for all RGMII variants
bridge: fix parsing of MLDv2 reports
ipv4: Avoid crashing in ip_error
ipv6: do not delete previously existing ECMP routes if add fails
ipv6: fix ECMP route replacement
net: core: Correct an over-stringent device loop detection.
x86: bpf_jit: fix compilation of large bpf programs
net: dp83640: fix broken calibration routine.
unix/caif: sk_socket can disappear when state is unlocked
net_sched: invoke ->attach() after setting dev->qdisc
udp: fix behavior of wrong checksums
xen: netback: read hotplug script once at start of day.
ipv4/udp: Verify multicast group is ours in upd_v4_early_demux()
drm/radeon: partially revert "fix VM_CONTEXT*_PAGE_TABLE_END_ADDR handling"
Linux 3.13.11-ckt22

The following patches from 3.13.11-ckt22 were already applied in the Trusty kernel:

Btrfs: make xattr replace operations atomic
vhost/scsi: potential memory corruption
udf: Remove repeated loads blocksize
udf: Check length of extended attributes and allocation descriptors
ozwpan: Use unsigned ints to prevent heap overflow
ozwpan: divide-by-zero leading to panic
ozwpan: Use proper check to prevent heap overflow
ozwpan: unchecked signed subtraction leads to DoS
cdc-acm: prevent infinite loop when parsing CDC headers.
mmc: card: Don't access RPMB partitions for normal read/write
Drivers: hv: vmbus: Add support for VMBus panic notifier handler
Drivers: hv: vmbus: Correcting truncation error for constant

CVE References

Luis Henriques (henrix)
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Trusty):
importance: Undecided → Medium
description: updated
Luis Henriques (henrix)
description: updated
Luis Henriques (henrix)
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (9.8 KiB)

This bug was fixed in the package linux - 3.13.0-58.97

---------------
linux (3.13.0-58.97) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1472453

  [ Upstream Kernel Changes ]

  * vm: Fix incomplete backport of VM_FAULT_SIGSEGV handling support
    - LP: #1471892

linux (3.13.0-58.96) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1471991

  [ Iyappan Subramanian ]

  * SAUCE: (no-up): drivers: net: xgene: fix: Out of order descriptor bytes
    read
    - LP: #1425576

  [ Upstream Kernel Changes ]

  * NVMe: Add shutdown timeout as module parameter.
    - LP: #1465136
  * Drivers: hv: vmbus: Add support for VMBus panic notifier handler
    - LP: #1463584
  * Drivers: hv: vmbus: Correcting truncation error for constant
    HV_CRASH_CTL_CRASH_NOTIFY
    - LP: #1463584
  * netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt
    - LP: #1466135
  * lpfc: Add iotag memory barrier
    - LP: #1468416
  * mm/slab_common: support the slub_debug boot option on specific object
    size
    - LP: #1456952
  * pipe: iovec: Fix memory corruption when retrying atomic copy as
    non-atomic
    - CVE-2015-1805
  * kvm: x86: fix kvm_apic_has_events to check for NULL pointer
  * staging, rtl8192e, LLVMLinux: Change extern inline to static inline
    - LP: #1471233
  * kernel: use the gnu89 standard explicitly
    - LP: #1471233
  * staging, rtl8192e, LLVMLinux: Remove unused inline prototype
    - LP: #1471233
  * staging: rtl8712, rtl8712: avoid lots of build warnings
    - LP: #1471233
  * qla2xxx: remove redundant declaration in 'qla_gbl.h'
    - LP: #1471233
  * staging: wlags49_h2: fix extern inline functions
    - LP: #1471233
  * ARM: 8307/1: psci: move psci firmware calls out of line
    - LP: #1471233
  * kconfig: Fix warning "‘jump’ may be used uninitialized"
    - LP: #1471233
  * scripts/sortextable: suppress warning: `relocs_size' may be used
    uninitialized
    - LP: #1471233
  * ASoC: dapm: Enable autodisable on SOC_DAPM_SINGLE_TLV_AUTODISABLE
    - LP: #1471233
  * ALSA: hda - Fix mute-LED fixed mode
    - LP: #1471233
  * ALSA: emu10k1: Fix card shortname string buffer overflow
    - LP: #1471233
  * ALSA: emux: Fix mutex deadlock at unloading
    - LP: #1471233
  * drm/radeon: add SI DPM quirk for Sapphire R9 270 Dual-X 2G GDDR5
    - LP: #1471233
  * SCSI: add 1024 max sectors black list flag
    - LP: #1471233
  * 3w-sas: fix command completion race
    - LP: #1471233
  * 3w-xxxx: fix command completion race
    - LP: #1471233
  * 3w-9xxx: fix command completion race
    - LP: #1471233
  * serial: xilinx: Use platform_get_irq to get irq description structure
    - LP: #1471233
  * serial: of-serial: Remove device_type = "serial" registration
    - LP: #1471233
  * tty/serial: at91: maxburst was missing for dma transfers
    - LP: #1471233
  * ALSA: emux: Fix mutex deadlock in OSS emulation
    - LP: #1471233
  * ALSA: emu10k1: Emu10k2 32 bit DMA mode
    - LP: #1471233
  * rbd: end I/O the entire obj_request on error
    - LP: #1471233
  * powerpc/pseries: Correct cpu affinity for dlpar added cpus
    - LP: #1471233
  * bridge/mdb: remove wrong use of NLM_F_MULT...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.