Trusty update to v3.13.11-ckt34 stable release

Bug #1542497 reported by Kamal Mostafa
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Trusty
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v3.13.11-ckt34 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches from the v3.13.11-ckt34 stable release shall be applied:

Linux 3.13.11-ckt34
team: Replace rcu_read_lock with a mutex in team_vlan_rx_kill_vid
ipv6: update skb->csum when CE mark is propagated
phonet: properly unshare skbs in phonet_rcv()
bonding: Prevent IPv6 link local address on enslaved devices
tcp_yeah: don't set ssthresh below 2
net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
bridge: Only call /sbin/bridge-stp for the initial network namespace
unix: properly account for FDs passed over unix sockets
connector: bump skb->users before callback invocation
sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close
veth: don’t modify ip_summed; doing so treats packets with bad checksums as good.
IB/mlx4: Initialize hop_limit when creating address handle
mmc: debugfs: correct wrong voltage value
printk: help pr_debug and pr_devel to optimize out arguments
batman-adv: Drop immediate orig_node free function
batman-adv: Avoid recursive call_rcu for batadv_nc_node
batman-adv: Avoid recursive call_rcu for batadv_bla_claim
Btrfs: clean up an error code in btrfs_init_space_info()
mmc: sd: limit SD card power limit according to cards capabilities
firmware: actually return NULL on failed request_firmware_nowait()
power: test_power: correctly handle empty writes
perf/x86: Fix filter_events() bug with event mappings
kconfig: return 'false' instead of 'no' in bool function
pinctrl: bcm2835: Fix memory leak in error path
ALSA: fm801: propagate TUNER_ONLY bit when autodetected
mtd: nand: fix ONFI parameter page layout
ath9k_htc: check for underflow in ath9k_htc_rx_msg()
clk: xgene: Fix divider with non-zero shift value
SCSI: initio: remove duplicate module device table
[media] rc: allow rc modules to be loaded if rc-main is not a module
ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with ocfs2_unblock_lock
iscsi-target: Fix potential dead-lock during node acl delete
IB/qib: fix mcast detach when qp not attached
crypto: crc32c - Fix crc32c soft dependency
crypto: algif_skcipher - Load TX SG list after waiting
ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0
ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode
ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode
ALSA: hrtimer: Fix stall by hrtimer_cancel()
crypto: af_alg - Forbid bind(2) when nokey child sockets are present
crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path
crypto: hash - Add crypto_ahash_has_setkey
crypto: af_alg - Add nokey compatibility path
crypto: af_alg - Fix socket double-free when accept fails
crypto: af_alg - Disallow bind/setkey/... after accept(2)
ALSA: hda - Fix bass pin fixup for ASUS N550JX
printk: do cond_resched() between lines while outputting to consoles
kernel/panic.c: turn off locks debug before releasing console lock
panic: release stale console lock to always get the logbuf printed out
memcg: only free spare array when readers are done
mm: soft-offline: check return value in second __get_any_page() call
ALSA: timer: Harden slave timer list handling
ocfs2/dlm: ignore cleaning the migration mle that is inuse
scripts/bloat-o-meter: fix python3 syntax error
dma-debug: switch check from _text to _stext
m32r: fix m32104ut_defconfig build fail
cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
cifs: fix race between call_async() and reconnect()
cifs: Ratelimit kernel log messages
sparc64: fix incorrect sign extension in sys_sparc64_personality
ALSA: timer: Fix race among timer ioctls
mmc: mmci: fix an ages old detection error
dmaengine: dw: fix cyclic transfer callbacks
dmaengine: dw: fix cyclic transfer setup
ALSA: timer: Fix double unlink of active_list
powerpc/module: Handle R_PPC64_ENTRY relocations
scripts/recordmcount.pl: support data in text section on powerpc
parisc: Fix __ARCH_SI_PREAMBLE_SIZE
virtio_balloon: fix race between migration and ballooning
virtio_balloon: fix race by fill and leak
ALSA: seq: Fix race at timer setup and close
ALSA: seq: Fix missing NULL check at remove_events ioctl
x86/reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[]
Input: elantech - mark protocols v2 and v3 as semi-mt
clocksource/drivers/vt8500: Increase the minimum delta
xfs: inode recovery readahead can race with inode buffer creation
s390: fix normalization bug in exception table sorting
x86/boot: Double BOOT_HEAP_SIZE to 64KB
drm/nouveau/kms: take mode_config mutex in connector hotplug path
uml: flush stdout before forking
uml: fix hostfs mknod()
dm snapshot: fix hung bios when copy error occurs
ASoC: compress: Fix compress device direction check
locks: fix unlock when fcntl_setlk races with a close
iwlwifi: update and fix 7265 series PCI IDs
PCI: host: Mark PCIe/PCI (MSI) IRQ cascade handlers as IRQF_NO_THREAD
udf: Check output buffer length when converting name to CS0
udf: Prevent buffer overrun with multi-byte characters
x86/xen: don't reset vcpu_info on a cancelled suspend
libxfs: pack the agfl header structure so XFS_AGFL_SIZE is correct
Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
wlcore/wl12xx: spi: fix NULL pointer dereference (Oops)
bcache: Change refill_dirty() to always scan entire disk if necessary
bcache: allows use of register in udev to avoid "device_busy" error.
bcache: add mutex lock for bch_is_open
bcache: unregister reboot notifier if bcache fails to unregister device
bcache: fix a leak in bch_cached_dev_run()
bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device
bcache: Add a cond_resched() call to gc
bcache: fix a livelock when we cause a huge number of cache misses
rtlwifi: rtl8192cu: Add missing parameter setup
rtlwifi: rtl8192ce: Fix handling of module parameters
rtlwifi: rtl8192se: Fix module parameter initialization
rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
posix-clock: Fix return code on the poll method's error path
NFS: Fix attribute cache revalidation
NFSv4: Don't perform cached access checks before we've OPENed the file
USB: cp210x: add ID for ELV Marble Sound Board 1
nfs: Fix race in __update_open_stateid()
udf: limit the maximum number of indirect extents in a row
mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off()
mmc: sdio: Fix invalid vdd in voltage switch power cycle
drm/radeon: clean up fujitsu quirks
futex: Drop refcount if requeue_pi() acquired the rtmutex
dm thin: fix race condition when destroying thin pool workqueue
dm space map metadata: remove unused variable in brb_pop()
powerpc: Make {cmp}xchg* and their atomic_ versions fully ordered
powerpc: Make value-returning atomics fully ordered
EDAC: Robustify workqueues destruction
EDAC: Don't try to cancel workqueue when it's never setup
EDAC, mc_sysfs: Fix freeing bus' name
wlcore/wl12xx: spi: fix oops on firmware load
rtlwifi: fix memory leak for USB device
time: Avoid signed overflow in timekeeping_get_ns()
arm64: Clear out any singlestep state on a ptrace detach operation
xhci: refuse loading if nousb is used
drm/radeon: call hpd_irq_event on resume
KVM: x86: correctly print #AC in traces
tools lib traceevent: Fix output of %llu for 64 bit values read on 32 bit machines
[media] media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
[media] gspca: ov534/topro: prevent a division by 0

CVE References

tags: added: kernel-stable-tracking-bug
description: updated
Andy Whitcroft (apw)
Changed in linux (Ubuntu Trusty):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (14.5 KiB)

This bug was fixed in the package linux - 3.13.0-83.127

---------------
linux (3.13.0-83.127) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1555839

  [ Florian Westphal ]

  * SAUCE: [nf,v2] netfilter: x_tables: don't rely on well-behaving
    userspace
    - LP: #1555338

linux (3.13.0-82.126) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1554732

  [ Upstream Kernel Changes ]

  * Revert "drm/radeon: call hpd_irq_event on resume"
    - LP: #1554608
  * net: generic dev_disable_lro() stacked device handling
    - LP: #1547680

linux (3.13.0-81.125) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1552316

  [ Upstream Kernel Changes ]

  * Revert "firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6"
    - LP: #1551419
  * bcache: Fix a lockdep splat in an error path
    - LP: #1551327

linux (3.13.0-80.124) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1548519

  [ Andy Whitcroft ]

  * [Debian] hv: hv_set_ifconfig -- convert to python3
    - LP: #1506521
  * [Debian] hv: hv_set_ifconfig -- switch to approved indentation
    - LP: #1540586
  * [Debian] hv: hv_set_ifconfig -- fix numerous parameter handling issues
    - LP: #1540586

  [ Dan Streetman ]

  * SAUCE: nbd: ratelimit error msgs after socket close
    - LP: #1505564

  [ Upstream Kernel Changes ]

  * Revert "workqueue: make sure delayed work run in local cpu"
    - LP: #1546320
  * [media] gspca: ov534/topro: prevent a division by 0
    - LP: #1542497
  * [media] media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
    - LP: #1542497
  * tools lib traceevent: Fix output of %llu for 64 bit values read on 32
    bit machines
    - LP: #1542497
  * KVM: x86: correctly print #AC in traces
    - LP: #1542497
  * drm/radeon: call hpd_irq_event on resume
    - LP: #1542497
  * xhci: refuse loading if nousb is used
    - LP: #1542497
  * arm64: Clear out any singlestep state on a ptrace detach operation
    - LP: #1542497
  * time: Avoid signed overflow in timekeeping_get_ns()
    - LP: #1542497
  * rtlwifi: fix memory leak for USB device
    - LP: #1542497
  * wlcore/wl12xx: spi: fix oops on firmware load
    - LP: #1542497
  * EDAC, mc_sysfs: Fix freeing bus' name
    - LP: #1542497
  * EDAC: Don't try to cancel workqueue when it's never setup
    - LP: #1542497
  * EDAC: Robustify workqueues destruction
    - LP: #1542497
  * powerpc: Make value-returning atomics fully ordered
    - LP: #1542497
  * powerpc: Make {cmp}xchg* and their atomic_ versions fully ordered
    - LP: #1542497
  * dm space map metadata: remove unused variable in brb_pop()
    - LP: #1542497
  * dm thin: fix race condition when destroying thin pool workqueue
    - LP: #1542497
  * futex: Drop refcount if requeue_pi() acquired the rtmutex
    - LP: #1542497
  * drm/radeon: clean up fujitsu quirks
    - LP: #1542497
  * mmc: sdio: Fix invalid vdd in voltage switch power cycle
    - LP: #1542497
  * mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off()
    - LP: #1542497
  * udf: limit the maximum number of indirect extents in a row
    - LP: #1542497
  * nfs: Fix race in __update_open_stateid...

Changed in linux (Ubuntu Trusty):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.