Trusty update to stable release

Bug #1347088 reported by Brad Figg
This bug affects 3 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches are in the stable release:
                iscsi-target: fix iscsit_del_np deadlock on unload
                iscsi-target: Avoid rejecting incorrect ITT for Data-Out
                lz4: fix another possible overrun
                efi-pstore: Fix an overflow on 32-bit builds
                iscsi-target: Explicily clear login response PDU in exception path
                target: Fix left-over se_lun->lun_sep pointer OOPs
                ALSA: hda - restore BCLK M/N values when resuming HSW/BDW display controller
                MIPS: MSC: Prevent out-of-bounds writes to MIPS SC ioremap'd region
                recordmcount/MIPS: Fix possible incorrect mcount_loc table entries in modules
                ALSA: usb-audio: Fix races at disconnection and PCM closing
                net: allwinner: emac: Add missing free_irq
                powerpc: Don't skip ePAPR spin-table CPUs
                nfs: Fix cache_validity check in nfs_write_pageuptodate()
                aio: fix kernel memory disclosure in io_getevents() introduced in v3.10
                aio: fix aio request leak when events are reaped by userspace
                [CIFS] fix mount failure with broken pathnames when smb3 mount with mapchars option
                drm/i915: Hold the table lock whilst walking the file's idr and counting the objects in debugfs
                mm: fix crashes from mbind() merging vmas
                DMA, CMA: fix possible memory leak
                mm, pcp: allow restoring percpu_pagelist_fraction default
                kernel/watchdog.c: remove preemption restrictions when restarting lockup detector
                hugetlb: fix copy_hugetlb_page_range() to handle migration/hwpoisoned entry
                x86_32, entry: Do syscall exit work on badsys (CVE-2014-4508)
                lz4: ensure length does not wrap
                lzo: properly check for overruns
                ALSA: hda - hdmi: call overridden init on resume
                rbd: handle parent_overlap on writes correctly
                blkcg: fix use-after-free in __blkg_release_rcu() by making blkcg_gq refcnt an atomic_t
                rt2x00: fix rfkill regression on rt2500pci
                b43: fix frequency reported on G-PHY with /new/ firmware
                rt2x00: disable TKIP on USB
                Bluetooth: Allow change security level on ATT_CID in slave role
                Bluetooth: Fix locking of hdev when calling into SMP code
                Bluetooth: Fix indicating discovery state when canceling inquiry
                Bluetooth: Fix setting correct authentication information for SMP STK
                Bluetooth: Fix SSP acceptor just-works confirmation without MITM
                ALSA: control: Make sure that id->index does not overflow
                ALSA: control: Handle numid overflow
                ALSA: control: Don't access controls outside of protected regions
                ALSA: control: Fix replacing user controls
                ALSA: control: Protect user controls against concurrent access
                arm64/dma: Removing ARCH_HAS_DMA_GET_REQUIRED_MASK macro
                arm64: ptrace: fix empty registers set in prstatus of aarch32 process core
                arm64: uid16: fix __kernel_old_{gid,uid}_t definitions
                arm64: ptrace: change fs when passing kernel pointer to regset code
                arm64: Bug fix in stack alignment exception
                USB: EHCI: avoid BIOS handover on the HASEE E200
                ARM: mvebu: DT: fix OpenBlocks AX3-4 RAM size
                drm/nouveau/kms: reference vblank for crtc during pageflip.
                epoll: fix use-after-free in eventpoll_release_file
                ACPI / ia64 / sba_iommu: Restore the working initialization ordering
                Revert "offb: Add palette hack for little endian"
                rtmutex: Plug slow unlock race
                iio: adc: at91: signedness bug in at91_adc_get_trigger_value_by_name()
                drm/i915: Reorder semaphore deadlock check
                drm/i915: Avoid div-by-zero when pixel_multiplier is zero
                drm/i915: Disable FBC by default also on Haswell and later
                rtmutex: Detect changes in the pi lock chain
                rtmutex: Handle deadlock detection smarter
                iio: Fix endianness issue in ak8975_read_axis()
                staging: iio: tsl2x7x_core: fix proximity treshold
                ACPI / video: Add Dell Inspiron 5737 to the blacklist
                ALSA: hda/realtek - Add more entry for enable HP mute led
                ALSA: hda/realtek - Add more entry for enable HP mute led
                ALSA: hda - Add quirk for external mic on Lifebook U904
                evm: prohibit userspace writing 'security.evm' HMAC value
                hwmon: (ina2xx) Cast to s16 on shunt and current regs
                ALSA: compress: Cancel the optimization of compiler and fix the size of struct for all platform.
                dm thin: update discard_granularity to reflect the thin-pool blocksize
                target: Report correct response length for some commands
                Target/iscsi: Fix sendtargets response pdu for iser transport
                powerpc/perf: Ensure all EBB register state is cleared on fork()
                powerpc: Don't setup CPUs with bad status
                powerpc: Correct DSCR during TM context switch
                powerpc: Add AT_HWCAP2 to indicate V.CRYPTO category support
                fs,userns: Change inode_capable to capable_wrt_inode_uidgid
                watchdog: sp805: Set watchdog_device->timeout from ->set_timeout()
                watchdog: ath79_wdt: avoid spurious restarts on AR934x
                watchdog: kempld-wdt: Use the correct value when configuring the prescaler with the watchdog
                auditsc: audit_krule mask accesses need bounds checking
                NFS: populate ->net in mount data when remounting
                drm/nouveau/kms/nv04-nv40: fix pageflip events via special case.
                drm/nv50-/mc: fix kms pageflip events by reordering irq handling order.
                iscsi-target: Fix ABORT_TASK + connection reset iscsi_queue_req memory leak
                target: Use complete_all for se_cmd->t_transport_stop_comp
                target: Set CMD_T_ACTIVE bit for Task Management Requests
                Btrfs: fix double free in find_lock_delalloc_range
                nfsd4: fix FREE_STATEID lockowner leak
                Input: elantech - don't set bit 1 of reg_10 when the no_hw_res quirk is set
                Input: elantech - deal with clickpads reporting right button events
                idr: fix overflow bug during maximum ID calculation at maximum height
                ptrace: fix fork event messages across pid namespaces
                rtc: rtc-at91rm9200: fix infinite wait for ACKUPD irq
                mm: vmscan: clear kswapd's special reclaim powers before exiting
                IB/umad: Fix use-after-free on close
                powerpc/mm: Check paca psize is up to date for huge mappings
                iscsi-target: Reject mutual authentication with reflected CHAP_C
                rbd: use reference counts for image requests
                ALSA: hda/realtek - Add support of ALC891 codec
                powerpc: 64bit sendfile is capped at 2GB
                powerpc/serial: Use saner flags when creating legacy ports
                mm/memory-failure.c: support use of a dedicated thread to handle SIGBUS(BUS_MCEERR_AO)
                mm/memory-failure.c: don't let collect_procs() skip over processes for MF_ACTION_REQUIRED
                mm/memory-failure.c-failure: send right signal code to correct thread
                mm: page_alloc: use word-based accesses for get/set pageblock bitmaps
                memcg: do not hang on OOM when killed by userspace OOM access to memory reserves
                mm: vmscan: do not throttle based on pfmemalloc reserves if node has no ZONE_NORMAL
                kthread: fix return value of kthread_create() upon SIGKILL.
                hugetlb: restrict hugepage_migration_support() to x86_64
                mm: fix sleeping function warning from __put_anon_vma
                ahci: Add Device ID for HighPoint RocketRaid 642L
                drm/radeon: only apply hdmi bpc pll flags when encoder mode is hdmi
                drm/radeon/atom: fix dithering on certain panels
                drm/radeon/dp: fix lane/clock setup for dp 1.2 capable devices
                drm/radeon: fix typo in radeon_connector_is_dp12_capable()
                vgaswitcheroo: switch the mux to the igp on power down when runpm is enabled
                Bluetooth: Fix L2CAP deadlock
                UBIFS: Remove incorrect assertion in shrink_tnc()
                ASoC: tlv320aci3x: Fix custom snd_soc_dapm_put_volsw_aic3x() function
                nfsd: getattr for FATTR4_WORD0_FILES_AVAIL needs the statfs buffer
                block: virtio_blk: don't hold spin lock during world switch
                MIPS: KVM: Allocate at least 16KB for exception handlers
                RDMA/cxgb4: Add missing padding at end of struct c4iw_create_cq_resp
                IB/umad: Fix error handling
                usb: qcserial: add additional Sierra Wireless QMI devices
                usb: qcserial: add Netgear AirCard 341U
                hv: use correct order when freeing monitor_pages
                mtd: pxa3xx_nand: make the driver work on big-endian systems
                mac80211: don't check netdev state for debugfs read/write
                mac80211: fix a memory leak on sta rate selection table
                s390/lowcore: reserve 96 bytes for IRB in lowcore
                usb: usbtest: fix unlink write error with pattern 1
                mei: me: read H_CSR after asserting reset
                mei: me: drop harmful wait optimization
                mei: me: fix hw ready reset flow
                IB/ipath: Translate legacy diagpkt into newer extended diagpkt
                IB/qib: Fix port in pkey change event
                IB/mlx5: add missing padding at end of struct mlx5_ib_create_srq
                IB/mlx5: add missing padding at end of struct mlx5_ib_create_cq
                ext4: fix wrong assert in ext4_mb_normalize_request()
                ext4: fix zeroing of page during writeback
                ahci: add PCI ID for Marvell 88SE91A0 SATA Controller
                s390/time: cast tv_nsec to u64 prior to shift in update_vsyscall
                KVM: lapic: sync highest ISR to hardware apic on EOI
                mac80211: fix IBSS join by initializing last_scan_completed
                staging/mt29f_spinand: Terminate of match table
                iio:adc:max1363 incorrect resolutions for max11604, max11605, max11610 and max11611.
                CIFS: Fix memory leaks in SMB2_open
                [media] ivtv: Fix Oops when no firmware is loaded
                [media] uvcvideo: Fix clock param realtime setting
                SUNRPC: Fix a module reference leak in svc_handle_xprt
                ARM: stacktrace: avoid listing stacktrace functions in stacktrace
                reiserfs: call truncate_setsize under tailpack mutex
                mtd: eLBC NAND: fix subpage write support
                mtd: nand: omap: fix BCHx ecc.correct to return detected bit-flips in erased-page
                Target/iser: Wait for proper cleanup before unloading
                Target/iser: Improve cm events handling
                IB/srp: Fix a sporadic crash triggered by cable pulling
                HID: core: fix validation of report id 0
                Target/iser: Fix hangs in connection teardown
                Target/iser: Bail from accept_np if np_thread is trying to close
                PM / OPP: fix incorrect OPP count handling in of_init_opp_table
                hpsa: add new Smart Array PCI IDs (May 2014)
                ACPI: Fix conflict between customized DSDT and DSDT local copy
                ASoC: max98090: Fix reset at resume time
                [media] rtl28xxu: add [1b80:d3af] Sveon STV27
                [media] rtl28xxu: add [1b80:d39d] Sveon STV20
                [media] rtl28xxu: add 1b80:d395 Peak DVB-T USB
                [media] rtl28xxu: add USB ID for Genius TVGo DVB-T03
                UBIFS: fix an mmap and fsync race condition
                ext4: fix data integrity sync in ordered mode
                iwlwifi: pcie: try to get ownership several times
                x86, x32: Use compat shims for io_{setup,submit}
                Drivers: hv: balloon: Ensure pressure reports are posted regularly
                genirq: Sanitize spurious interrupt detection of threaded irqs
                x86-32, espfix: Remove filter for espfix32 due to race
                PCI: Add new ID for Intel GPU "spurious interrupt" quirk
                powerpc/pseries: Fix overwritten PE state
                bluetooth: hci_ldisc: fix deadlock condition
                builddeb: use $OBJCOPY variable instead of objcopy
                extcon: max8997: Fix NULL pointer exception on missing pdata
                extcon: max77693: Fix two NULL pointer exceptions on missing pdata
                mtip32xx: Fix ERO and NoSnoop values in PCIe upstream on AMD systems
                mtip32xx: Remove dfs_parent after pci unregister
                mtip32xx: Increase timeout for STANDBY IMMEDIATE command
                ACPICA: utstring: Check array index bound before use.
                usb: dwc3: gadget: clear stall when disabling endpoint
                NFS: Don't declare inode uptodate unless all attributes were checked
                introduce for_each_thread() to replace the buggy while_each_thread()
                netfilter: nf_nat: fix oops on netns removal
                igb: fix stats for i210 rx_fifo_errors
                Bluetooth: Fix check for connection encryption
                Bluetooth: Fix redundant encryption request for reauthentication
                ipv6: Fix regression caused by efe4208 in udp_v6_mcast_next()
                ALSA: usb-audio: Prevent printk ratelimiting from spamming kernel log while DEBUG not defined
                btrfs: fix defrag 32-bit integer overflow

Brad Figg (brad-figg)
tags: added: kernel-stable-tracking-bug
Brad Figg (brad-figg)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu Trusty):
status: New → Confirmed
Changed in linux (Ubuntu):
status: New → Confirmed
Revision history for this message
Adam Conrad (adconrad) wrote : Update Released

The verification of the Stable Release Update for linux-lts-trusty has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 3.13.0-33.58

linux (3.13.0-33.58) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1349897

  [ Upstream Kernel Changes ]

  * mm: numa: do not automatically migrate KSM pages
    - LP: #1346917
  * net: fix UDP tunnel GSO of frag_list GRO packets
    - LP: #1331219
  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1347088
  * n_tty: Fix buffer overruns with larger-than-4k pastes
    - LP: #1208740
 -- Tim Gardner <email address hidden> Fri, 18 Jul 2014 14:57:50 +0000

Changed in linux (Ubuntu Trusty):
status: Confirmed → Fix Released
Revision history for this message
Kees Cook (kees) wrote :

Reopened; it looks like this never landed and the auditsc fix in 3.13.0-33.58 typoed which bug it should close?

Changed in linux (Ubuntu Trusty):
status: Fix Released → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (38.9 KiB)

This bug was fixed in the package linux - 3.13.0-35.62

linux (3.13.0-35.62) trusty; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1357148

  [ Brad Figg ]

  * Start new release

  [ dann frazier ]

  * SAUCE: (no-up) Fix build failure on arm64
    - LP: #1353657
  * [debian] Allow for package revisions condusive for branching

  [ David Henningsson ]

  * SAUCE: Call broadwell specific functions from the hda driver
    - LP: #1317865

  [ Edward Lin ]

  * SAUCE: (no-up) Add use native backlight quirk for Dell Inspiron
    - LP: #1332437

  [ Imre Deak ]

  * SAUCE: drm/i915: move power domain init earlier during system resume
    - LP: #1353405

  [ Jani Nikula ]

  * SAUCE: drm/i915: use lane count and link rate from VBT as minimums for
    - LP: #1338582
  * SAUCE: drm/i915/dp: force eDP lane count to max available lanes on BDW
    - LP: #1338582
  * SAUCE: drm/i915: provide interface for audio driver to query cdclk
    - LP: #1188091
  * SAUCE: drm/i915: demote opregion excessive timeout WARN_ONCE to
    - LP: #1351014

  [ Joseph Salisbury ]

  * [Config] updateconfigs after Linux updates

  [ Luis Henriques ]

  * Revert "[Packaging] linux-udeb-flavour -- standardise on linux prefix"

  [ Ming Lei ]

  * Revert "SAUCE: (no-up) ata: Fix the dma state machine lockup for the
    IDENTIFY DEVICE PIO mode command."
    - LP: #1335645

  [ Paulo Zanoni ]

  * SAUCE: drm/i915: consider the source max DP lane count too
    - LP: #1338582

  [ Tim Gardner ]

  * [Config] CONFIG_GPIO_SYSFS=y
    - LP: #1342153
    - LP: #1344405
  * [Config] updateconfigs
    - LP: #1343109
    - LP: #1349028

  [ Timo Aaltonen ]

  * SAUCE: Fix a typo in hda i915_bdw support.
    - LP: #1343140

  [ Upstream Kernel Changes ]

  * Revert "net/mlx4_en: Fix bad use of dev_id"
    - LP: #1347012
  * Revert "ACPI / AC: Remove AC's proc directory."
    - LP: #1356913
  * Revert "mac80211: move "bufferable MMPDU" check to fix AP mode scan"
    - LP: #1356913
  * mm, pcp: allow restoring percpu_pagelist_fraction default
    - LP: #1347088
  * net: Fix permission check in netlink_connect()
    - LP: #1312989
  * netlink: Rename netlink_capable netlink_allowed
    - LP: #1312989
  * net: Move the permission check in sock_diag_put_filterinfo to
    - LP: #1312989
  * net: Add variants of capable for use on on sockets
    - LP: #1312989
  * net: Add variants of capable for use on netlink messages
    - LP: #1312989
  * net: Use netlink_ns_capable to verify the permisions of netlink
    - LP: #1312989
  * netlink: Only check file credentials for implicit destinations
    - LP: #1312989
  * igb: fix stats for i210 rx_fifo_errors
    - LP: #1338893
  * HID: use multi input quirk for 22b9:2968
    - LP: #1339567
  * crypto/nx: disable NX on little endian builds
    - LP: #1338666
  * ACPI / video: Add Dell Inspiron 5737 to the blacklist
    - LP: #1250401
  * Input: elantech - deal with clickpads reportin...

Changed in linux (Ubuntu Trusty):
status: Confirmed → Fix Released
Brad Figg (brad-figg)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.