Trusty update to 3.13.11-ckt20 stable release

Bug #1454746 reported by Luis Henriques
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Trusty
Fix Released
Undecided
Luis Henriques

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.13.11-ckt20 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.13.11-ckt20 stable release:

n_tty: Merge .receive_buf() flavors
n_tty: Fix read buffer overwrite when no newline
KVM: x86: Fix lost interrupt on irr_pending race
tcp: Fix crash in TCP Fast Open
writeback: add missing INITIAL_JIFFIES init in global_update_bandwidth()
nbd: fix possible memory leak
mfd: kempld-core: Fix callback return value check
KVM: nVMX: mask unrestricted_guest if disabled on L0
spi: trigger trace event for message-done before mesg->complete
powerpc/pseries: Little endian fixes for post mobility device tree update
net: ethernet: pcnet32: Setup the SRAM and NOUFLO on Am79C97{3, 5}
perf: Fix irq_work 'tail' recursion
arm64: Use the reserved TTBR0 if context switching to the init_mm
selinux: fix sel_write_enforce broken return value
mm: fix anon_vma->degree underflow in anon_vma endless growing prevention
mm/memory hotplug: postpone the reset of obsolete pgdat
hfsplus: fix B-tree corruption after insertion at position 0
ARC: SA_SIGINFO ucontext regs off-by-one
writeback: fix possible underflow in write bandwidth calculation
iio: fix drivers that check buffer->scan_mask
iio: inv_mpu6050: Clear timestamps fifo while resetting hardware fifo
iio: core: Fix double free.
USB: ftdi_sio: Added custom PID for Synapse Wireless product
iwlwifi: dvm: run INIT firmware again upon .start()
USB: keyspan_pda: add new device id
cifs: smb2_clone_range() - exit on unhandled error
cifs: fix use-after-free bug in find_writable_file
can: flexcan: Deferred on Regulator return EPROBE_DEFER
usb: xhci: handle Config Error Change (CEC) in xhci driver
usb: xhci: apply XHCI_AVOID_BEI quirk to all Intel xHCI controllers
USB: ftdi_sio: Use jtag quirk for SNAP Connect E10
tty: serial: fsl_lpuart: clear receive flag on FIFO flush
radeon: Do not directly dereference pointers to BIOS area.
iio: imu: Use iio_trigger_get for indio_dev->trig assignment
dmaengine: edma: fix memory leak when terminating running transfers
dmaengine: omap-dma: Fix memory leak when terminating running transfer
x86/reboot: Add ASRock Q1900DC-ITX mainboard reboot quirk
mac80211: fix RX A-MPDU session reorder timer deletion
tcp: prevent fetching dst twice in early demux code
net: use for_each_netdev_safe() in rtnl_group_changelink()
xen-netfront: transmit fully GSO-sized packets
tcp: fix FRTO undo on cumulative ACK of SACKed range
PCI: cpcihp: Add missing curly braces in cpci_configure_slot()
[media] sh_veu: v4l2_dev wasn't set
[media] media: s5p-mfc: fix mmap support for 64bit arch
cpuidle: ACPI: do not overwrite name and description of C0
ioctx_alloc(): fix vma (and file) leak on failure
ALSA: hda/realtek - Make more stable to get pin sense for ALC283
be2iscsi: Fix kernel panic when device initialization fails
Defer processing of REQ_PREEMPT requests for blocked devices
ALSA: hda - Fix headphone pin config for Lifebook T731
ocfs2: _really_ sync the right range
ALSA: usb - Creative USB X-Fi Pro SB1095 volume knob support
iscsi target: fix oops when adding reject pdu
net/mlx4_en: Call register_netdevice in the proper location
ipv6: protect skb->sk accesses from recursive dereference inside the stack
tcp: tcp_make_synack() should clear skb->tstamp
8139cp: Call dev_kfree_skby_any instead of kfree_skb.
8139too: Call dev_kfree_skby_any instead of dev_kfree_skb.
r8169: Call dev_kfree_skby_any instead of dev_kfree_skb.
bonding: Call dev_kfree_skby_any instead of kfree_skb.
bnx2: Call dev_kfree_skby_any instead of dev_kfree_skb.
tg3: Call dev_kfree_skby_any instead of dev_kfree_skb.
ixgb: Call dev_kfree_skby_any instead of dev_kfree_skb.
benet: Call dev_kfree_skby_any instead of kfree_skb.
gianfar: Carefully free skbs in functions called by netpoll.
ip_forward: Drop frames with attached skb->sk
tcp: fix possible deadlock in tcp_send_fin()
tcp: avoid looping in tcp_send_fin()
net: do not deplete pfmemalloc reserve
net: fix crash in build_skb()
ipv4: Missing sk_nulls_node_init() in ping_unhash().
Linux 3.13.11-ckt20

The following patches from 3.13.11-ckt20 were already applied in the Trusty kernel:

Input: serio - add firmware_id sysfs attribute
Input: i8042 - add firmware_id support
Input: Add INPUT_PROP_TOPBUTTONPAD device property
Input: synaptics - report INPUT_PROP_TOPBUTTONPAD property
Input: synaptics - add a matches_pnp_id helper function
Input: synaptics - change min/max quirk table to pnp-id matching
Input: psmouse - add psmouse_matches_pnp_id helper function
Input: synaptics - split synaptics_resolution(), query first
Input: synaptics - log queried and quirked dimension values
Input: synaptics - remove obsolete min/max quirk for X240
Input: synaptics - add min/max quirk for pnp-id LEN2002 (Edge E531)
Input: synaptics - add min/max quirk for Lenovo T440s
Input: synaptics - adjust min/max for Lenovo ThinkPad X1 Carbon 2nd
Input: synaptics - adjust min/max on Thinkpad E540
Input: synaptics - support min/max board id in min_max_pnpid_table
Input: synaptics - skip quirks when post-2013 dimensions
fs: take i_mutex during prepare_binprm for set[ug]id executables
IB/uverbs: Prevent integer overflow in ib_umem_get address arithmetic

Additionally, the following patch was also applied (from 3.13.11-queue branch) to fix a build failure on powerpc:

[3.13-stable only] Revert "gianfar: Carefully free skbs in functions called by netpoll."

CVE References

Luis Henriques (henrix)
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Trusty):
assignee: nobody → Luis Henriques (henrix)
Luis Henriques (henrix)
description: updated
Luis Henriques (henrix)
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
Luis Henriques (henrix)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (9.3 KiB)

This bug was fixed in the package linux - 3.13.0-54.91

---------------
linux (3.13.0-54.91) trusty; urgency=medium

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1458618

  [ Upstream Kernel Changes ]

  * [3.13-stable only] Revert "gianfar: Carefully free skbs in functions
    called by netpoll."
    - LP: #1454746

linux (3.13.0-54.90) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1458618

  [ Andy Whitcroft ]

  * [Config] push off linux-lts-{utopic, vivid}-tools-common
    - LP: #1405807

  [ Brad Figg ]

  * hyper-v -- add hid and fb drivers to linux-virtual
    - LP: #1444179

  [ Upstream Kernel Changes ]

  * DT doc: net: cpsw mac-address is optional
    - LP: #1452628
  * net: cpsw: Add missing return value
    - LP: #1452628
  * net: cpsw: header, Add missing include
    - LP: #1452628
  * net: cpsw: Add am33xx MACID readout
    - LP: #1452628
  * am33xx: define syscon control module device node
    - LP: #1452628
  * arm: dts: am33xx, Add syscon phandle to cpsw node
    - LP: #1452628
  * net: cpsw: do not register cpts twice
    - LP: #1452620
  * x86: kvm: Revert "remove sched notifier for cross-cpu migrations"
    - LP: #1450584
  * x86: vdso: fix pvclock races with task migration
    - LP: #1450584
  * n_tty: Fix read buffer overwrite when no newline
    - LP: #1381005, #1454746
  * KVM: x86: Fix lost interrupt on irr_pending race
    - LP: #1454746
  * writeback: add missing INITIAL_JIFFIES init in
    global_update_bandwidth()
    - LP: #1454746
  * nbd: fix possible memory leak
    - LP: #1454746
  * mfd: kempld-core: Fix callback return value check
    - LP: #1454746
  * KVM: nVMX: mask unrestricted_guest if disabled on L0
    - LP: #1454746
  * spi: trigger trace event for message-done before mesg->complete
    - LP: #1454746
  * powerpc/pseries: Little endian fixes for post mobility device tree
    update
    - LP: #1454746
  * net: ethernet: pcnet32: Setup the SRAM and NOUFLO on Am79C97{3, 5}
    - LP: #1454746
  * perf: Fix irq_work 'tail' recursion
    - LP: #1454746
  * arm64: Use the reserved TTBR0 if context switching to the init_mm
    - LP: #1454746
  * selinux: fix sel_write_enforce broken return value
    - LP: #1454746
  * mm: fix anon_vma->degree underflow in anon_vma endless growing
    prevention
    - LP: #1454746
  * mm/memory hotplug: postpone the reset of obsolete pgdat
    - LP: #1454746
  * hfsplus: fix B-tree corruption after insertion at position 0
    - LP: #1454746
  * ARC: SA_SIGINFO ucontext regs off-by-one
    - LP: #1454746
  * writeback: fix possible underflow in write bandwidth calculation
    - LP: #1454746
  * iio: fix drivers that check buffer->scan_mask
    - LP: #1454746
  * iio: inv_mpu6050: Clear timestamps fifo while resetting hardware fifo
    - LP: #1454746
  * iio: core: Fix double free.
    - LP: #1454746
  * USB: ftdi_sio: Added custom PID for Synapse Wireless product
    - LP: #1454746
  * iwlwifi: dvm: run INIT firmware again upon .start()
    - LP: #1454746
  * USB: keyspan_pda: add new device id
    - LP: #1454746
  * cifs: smb2_clone_range() - exit on unhandled error
    - LP: #1454746
  * cifs: fix use-after-free bug in find_wri...

Read more...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.