Ubuntu
linux-mvl-dove package

CVE-2015-7513

Trusty (14.04)
Bug #1530956

Bug #1530956 reported by Steve Beattie on 2016-01-04

256

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Fix Released	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Fix Released	Medium	Unassigned
Wily	Fix Released	Medium	Unassigned
Xenial	Fix Committed	Medium	Unassigned
Yakkety	Won't Fix	Medium	Unassigned
linux-armadaxp (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ec2 (Ubuntu)	New	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Trusty	New	Undecided	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Undecided	Unassigned
Xenial	New	Undecided	Unassigned
Yakkety	New	Undecided	Unassigned
linux-flo (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-fsl-imx51 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-goldfish (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-lts-backport-maverick (Ubuntu)	New	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Trusty	New	Undecided	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Undecided	Unassigned
Xenial	New	Undecided	Unassigned
Yakkety	New	Undecided	Unassigned
linux-lts-backport-natty (Ubuntu)	New	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Trusty	New	Undecided	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Undecided	Unassigned
Xenial	New	Undecided	Unassigned
Yakkety	New	Undecided	Unassigned
linux-lts-quantal (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-raring (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-saucy (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-trusty (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-utopic (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-vivid (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-wily (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-xenial (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Committed	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mako (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-manta (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Medium	Unassigned
Wily	New	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mvl-dove (Ubuntu)	New	Undecided	Unassigned
Precise	Won't Fix	Undecided	Unassigned
Trusty	New	Undecided	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Undecided	Unassigned
Xenial	New	Undecided	Unassigned
Yakkety	New	Undecided	Unassigned
linux-raspi2 (Ubuntu)	Fix Committed	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Fix Released	Medium	Unassigned
Xenial	Fix Committed	Medium	Unassigned
Yakkety	Fix Committed	Medium	Unassigned
linux-snapdragon (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Invalid	Medium	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned

Bug Description

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions.

Break-Fix: - 0185604c2d82c560dab2f2933a18f797e74ab5a8

See original description

Tags:

Related branches

lp://staging/ubuntu/trusty-proposed/linux-lts-wily

CVE References

Revision history for this message

Steve Beattie (sbeattie) wrote on 2016-01-04:

CVE-2015-7513

tags:	added: kernel-cve-tracking-bug
information type:	Public → Public Security
Changed in linux-lts-trusty (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Wily):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-manta (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-mako (Ubuntu Precise):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Vivid):
status:	New → Invalid
Changed in linux-goldfish (Ubuntu Precise):
status:	New → Invalid
Changed in linux-flo (Ubuntu Precise):
status:	New → Invalid
description:	updated
Changed in linux-lts-trusty (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Vivid):
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2016-01-04

Changed in linux-lts-raring (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Vivid):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Vivid):
importance:	Undecided → Medium

Luis Henriques (henrix) on 2016-01-08

Changed in linux (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux (Ubuntu Vivid):
status:	New → Fix Committed
Changed in linux (Ubuntu Wily):
status:	New → Fix Committed
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	New → Fix Committed

Steve Beattie (sbeattie) on 2016-01-12

Changed in linux (Ubuntu Xenial):
status:	New → Fix Committed

Steve Beattie (sbeattie) on 2016-01-15

Changed in linux-lts-trusty (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-lts-wily (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux-raspi2 (Ubuntu Wily):
status:	New → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-01-19:

Download full text (14.4 KiB)

This bug was fixed in the package linux-lts-trusty - 3.13.0-75.119~precise1

---------------
linux-lts-trusty (3.13.0-75.119~precise1) precise; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1532956

[ Kamal Mostafa ]

* Revert "SAUCE: disable stack-protector for ARM compressed bootloader"
* [Config] updateconfigs: select CC_STACKPROTECTOR_REGULAR

[ Upstream Kernel Changes ]

This bug was fixed in the package linux-lts-trusty - 3.13.0-75.119~precise1

---------------
linux-lts-trusty (3.13.0-75.119~precise1) precise; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1532956

[ Kamal Mostafa ]

* Revert "SAUCE: disable stack-protector for ARM compressed bootloader"
  * [Config] updateconfigs: select CC_STACKPROTECTOR_REGULAR

[ Upstream Kernel Changes ]

* Revert "dm mpath: fix stalls when handling invalid ioctls"
    - LP: #1523661
  * Revert "xhci: don't finish a TD if we get a short transfer event mid
    TD"
    - LP: #1529077
  * x86/setup: Extend low identity map to cover whole kernel range
    - LP: #1523661
  * x86/setup: Fix low identity map for >= 2GB kernel range
    - LP: #1523661
  * drm/radeon: add quirk for MSI R7 370
    - LP: #1523661
  * drm/radeon: add quirk for ASUS R7 370
    - LP: #1523661
  * drm/radeon: fix quirk for MSI R7 370 Armor 2X
    - LP: #1523661
  * irda: precedence bug in irlmp_seq_hb_idx()
    - LP: #1523661
  * macvtap: unbreak receiving of gro skb with frag list
    - LP: #1523661
  * RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in
    rds_tcp_data_recv
    - LP: #1523661
  * stmmac: Correctly report PTP capabilities.
    - LP: #1523661
  * ipmr: fix possible race resulting from improper usage of
    IP_INC_STATS_BH() in preemptible context.
    - LP: #1523661
  * qmi_wwan: fix entry for HP lt4112 LTE/HSPA+ Gobi 4G Module
    - LP: #1523661
  * net: avoid NULL deref in inet_ctl_sock_destroy()
    - LP: #1523661
  * net: fix a race in dst_release()
    - LP: #1523661
  * HID: core: Avoid uninitialized buffer access
    - LP: #1523661
  * [media] v4l2-compat-ioctl32: fix alignment for ARM64
    - LP: #1523661
  * net: mvneta: Fix CPU_MAP registers initialisation
    - LP: #1523661
  * mtd: mtdpart: fix add_mtd_partitions error path
    - LP: #1523661
  * fs/proc, core/debug: Don't expose absolute kernel addresses via wchan
    - LP: #1523661
  * ARM: 8426/1: dma-mapping: add missing range check in dma_mmap()
    - LP: #1523661
  * ARM: 8427/1: dma-mapping: add support for offset parameter in
    dma_mmap()
    - LP: #1523661
  * spi: ti-qspi: Fix data corruption seen on r/w stress test
    - LP: #1523661
  * lockd: create NSM handles per net namespace
    - LP: #1523661
  * ARM: common: edma: Fix channel parameter for irq callbacks
    - LP: #1523661
  * iommu/vt-d: Fix error in detect ATS capability
    - LP: #1523661
  * iommu/vt-d: Fix ATSR handling for Root-Complex integrated endpoints
    - LP: #1523661
  * ext4: fix potential use after free in __ext4_journal_stop
    - LP: #1523661
  * fix calculation of meta_bg descriptor backups
    - LP: #1523661
  * ext4, jbd2: ensure entering into panic after recording an error in
    superblock
    - LP: #1523661
  * vTPM: fix memory allocation flag for rtce buffer at kernel boot
    - LP: #1523661
  * [media] media: vb2 dma-contig: Fully cache synchronise buffers in
    prepare and finish
    - LP: #1523661
  * Bluetooth: hidp: fix device disconnect on idle timeout
    - LP: #1523661
  * Bluetooth: ath3k: Add new AR3012 0930:021c id
    - LP: #1502781, #1523661
  * Bluetooth: ath3k: Add support of AR3012 0cf3:817b device
    - LP: #1506615, #1523661
  * spi: atmel: Fix DMA-setup for transfers with more than 8 bits per word
    - LP: #1523661
  * staging: rtl8712: Add device ID for Sitecom WLA2100
    - LP: #1523661
  * ACPI: Use correct IRQ when uninstalling ACPI interrupt handler
    - LP: #1523661
  * ALSA: hda/realtek - Dell XPS one ALC3260 speaker no sound after resume
    back
    - LP: #1523661
  * ALSA: hda - Disable 64bit address for Creative HDA controllers
    - LP: #1523661
  * MAINTAINERS: Add public mailing list for ARC
    - LP: #1523661
  * megaraid_sas: Do not use PAGE_SIZE for max_sectors
    - LP: #1523661
  * arm64: Fix compat register mappings
    - LP: #1523661
  * can: Use correct type in sizeof() in nla_put()
    - LP: #1523661
  * mtd: blkdevs: fix potential deadlock + lockdep warnings
    - LP: #1523661
  * crypto: algif_hash - Only export and import on sockets with data
    - LP: #1523661
  * xtensa: fixes for configs without loop option
    - LP: #1523661
  * megaraid_sas : SMAP restriction--do not access user memory from IOCTL
    code
    - LP: #1523661
  * mac80211: allow null chandef in tracing
    - LP: #1523661
  * recordmcount: Fix endianness handling bug for nop_mcount
    - LP: #1523661
  * KVM: Disable SMAP for guests in EPT realmode and EPT unpaging mode
    - LP: #1523661
  * KVM: VMX: fix SMEP and SMAP without EPT
    - LP: #1523661
  * ALSA: hda - Apply pin fixup for HP ProBook 6550b
    - LP: #1523661
  * ALSA: hda - Add Intel Lewisburg device IDs Audio
    - LP: #1523661
  * firewire: ohci: fix JMicron JMB38x IT context discovery
    - LP: #1523661
  * proc: actually make proc_fd_permission() thread-friendly
    - LP: #1523661
  * printk: prevent userland from spoofing kernel messages
    - LP: #1523661
  * x86/cpu: Call verify_cpu() after having entered long mode too
    - LP: #1523661
  * Btrfs: fix race leading to incorrect item deletion when dropping
    extents
    - LP: #1523661
  * Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow
    - LP: #1523661
  * perf: Fix inherited events vs. tracepoint filters
    - LP: #1523661
  * scsi_sysfs: Fix queue_ramp_up_period return code
    - LP: #1523661
  * Btrfs: fix race when listing an inode's xattrs
    - LP: #1523661
  * storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag
    - LP: #1523661
  * drm/ast: Initialized data needed to map fbdev memory
    - LP: #1523661
  * FS-Cache: Increase reference of parent after registering, netfs success
    - LP: #1523661
  * FS-Cache: Don't override netfs's primary_index if registering failed
    - LP: #1523661
  * FS-Cache: Handle a write to the page immediately beyond the EOF marker
    - LP: #1523661
  * binfmt_elf: Don't clobber passed executable's file header
    - LP: #1523661
  * wm831x_power: Use IRQF_ONESHOT to request threaded IRQs
    - LP: #1523661
  * mwifiex: fix mwifiex_rdeeprom_read()
    - LP: #1523661
  * dmaengine: dw: convert to __ffs()
    - LP: #1523661
  * devres: fix a for loop bounds check
    - LP: #1523661
  * MIPS: atomic: Fix comment describing atomic64_add_unless's return
    value.
    - LP: #1523661
  * ipv6: fix tunnel error handling
    - LP: #1523661
  * perf trace: Fix documentation for -i
    - LP: #1523661
  * bonding: fix panic on non-ARPHRD_ETHER enslave failure
    - LP: #1523661
  * mac80211: fix driver RSSI event calculations
    - LP: #1523661
  * packet: fix match_fanout_group()
    - LP: #1523661
  * ARM: pxa: remove incorrect __init annotation on pxa27x_set_pwrmode
    - LP: #1523661
  * drm: Fix return value of drm_framebuffer_init()
    - LP: #1523661
  * netfilter: nfnetlink: don't probe module if it exists
    - LP: #1523661
  * TPM: Avoid reference to potentially freed memory
    - LP: #1523661
  * Btrfs: fix file corruption and data loss after cloning inline extents
    - LP: #1523661
  * Btrfs: don't use ram_bytes for uncompressed inline items
    - LP: #1523661
  * Btrfs: fix truncation of compressed and inlined extents
    - LP: #1523661
  * Linux 3.13.11-ckt31
    - LP: #1523661
  * stackprotector: Unify the HAVE_CC_STACKPROTECTOR logic between
    architectures
  * stackprotector: Introduce CONFIG_CC_STACKPROTECTOR_STRONG
  * powerpc/tm: Check for already reclaimed tasks
    - LP: #1520411
  * powerpc/tm: Block signal return setting invalid MSR state
    - LP: #1520411
  * include/linux/mm.h: remove ifdef condition
    - LP: #1294283
  * hv: hv_balloon: avoid memory leak on alloc_error of 2MB memory block
    - LP: #1294283
  * Drivers: hv: hv_balloon: Fix a locking bug in the balloon driver
    - LP: #1294283
  * Drivers: hv: hv_balloon: refuse to balloon below the floor
    - LP: #1294283
  * Drivers: hv: hv_balloon: survive ballooning request with num_pages=0
    - LP: #1294283
  * Drivers: hv: hv_balloon: correctly handle val.freeram<num_pages case
    - LP: #1294283
  * Drivers: hv: hv_balloon: correctly handle num_pages>INT_MAX case
    - LP: #1294283
  * Drivers: hv: balloon: check if ha_region_mutex was acquired in
    MEM_CANCEL_ONLINE case
    - LP: #1294283
  * mm: meminit: make __early_pfn_to_nid SMP-safe and introduce
    meminit_pfn_in_nid
    - LP: #1294283
  * mm: meminit: inline some helper functions
    - LP: #1294283
  * mm, meminit: allow early_pfn_to_nid to be used during runtime
    - LP: #1294283
  * mm: initialize hotplugged pages as reserved
    - LP: #1294283
  * fanotify: fix -EOVERFLOW with large files on 64-bit
    - LP: #1527039
  * tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
    - LP: #1512815, #1528377
  * iio: lpc32xx_adc: fix warnings caused by enabling unprepared clock
    - LP: #1528377
  * iio:ad5064: Make sure ad5064_i2c_write() returns 0 on success
    - LP: #1528377
  * iio: ad5064: Fix ad5629/ad5669 shift
    - LP: #1528377
  * iio:ad7793: Fix ad7785 product ID
    - LP: #1528377
  * x86/fpu: Fix 32-bit signal frame handling
    - LP: #1528377
  * ALSA: usb-audio: add packet size quirk for the Medeli DD305
    - LP: #1528377
  * ALSA: usb-audio: prevent CH345 multiport output SysEx corruption
    - LP: #1528377
  * ALSA: usb-audio: work around CH345 input SysEx corruption
    - LP: #1528377
  * USB: serial: option: add support for Novatel MiFi USB620L
    - LP: #1528377
  * USB: ti_usb_3410_5052: Add Honeywell HGI80 ID
    - LP: #1528377
  * ASoC: wm8962: correct addresses for HPF_C_0/1
    - LP: #1528377
  * mac80211: mesh: fix call_rcu() usage
    - LP: #1528377
  * usb: dwc3: gadget: let us set lower max_speed
    - LP: #1528377
  * dm: fix ioctl retry termination with signal
    - LP: #1528377
  * usb: chipidea: debug: disable usb irq while role switch
    - LP: #1528377
  * MIPS: KVM: Fix ASID restoration logic
    - LP: #1528377
  * MIPS: KVM: Fix CACHE immediate offset sign extension
    - LP: #1528377
  * MIPS: KVM: Uninit VCPU in vcpu_create error path
    - LP: #1528377
  * xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices
    - LP: #1528377
  * x86/cpu: Fix SMAP check in PVOPS environments
    - LP: #1528377
  * ALSA: hda - Add fixup for Acer Aspire One Cloudbook 14
    - LP: #1528377
  * arm64: restore bogomips information in /proc/cpuinfo
    - LP: #1528377
  * USB: option: add XS Stick W100-2 from 4G Systems
    - LP: #1528377
  * usblp: do not set TASK_INTERRUPTIBLE before lock
    - LP: #1528377
  * mac: validate mac_partition is within sector
    - LP: #1528377
  * ALSA: hda - Apply HP headphone fixups more generically
    - LP: #1528377
  * fat: fix fake_offset handling on error path
    - LP: #1528377
  * kernel/signal.c: unexport sigsuspend()
    - LP: #1528377
  * parisc: Drop unused MADV_xxxK_PAGES flags from asm/mman.h
    - LP: #1528377
  * can: sja1000: clear interrupts on start
    - LP: #1528377
  * ARC: dw2 unwind: Remove falllback linear search thru FDE entries
    - LP: #1528377
  * fix sysvfs symlinks
    - LP: #1528377
  * vfs: Make sendfile(2) killable even better
    - LP: #1528377
  * vfs: Avoid softlockups with sendfile(2)
    - LP: #1528377
  * nfs4: start callback_ident at idr 1
    - LP: #1528377
  * ALSA: hda - Fix headphone noise after Dell XPS 13 resume back from S3
    - LP: #1519168, #1528377
  * ring-buffer: Update read stamp with first real commit on page
    - LP: #1528377
  * arm64: KVM: Fix AArch32 to AArch64 register mapping
    - LP: #1528377
  * drm/radeon: make rv770_set_sw_state failures non-fatal
    - LP: #1528377
  * RDS: fix race condition when sending a message on unbound socket
    - LP: #1528377
  * btrfs: fix signed overflows in btrfs_sync_file
    - LP: #1528377
  * drm/radeon: make some dpm errors debug only
    - LP: #1528377
  * nfs: if we have no valid attrs, then don't declare the attribute cache
    valid
    - LP: #1528377
  * xen/gntdev: Grant maps should not be subject to NUMA balancing
    - LP: #1528377
  * iscsi-target: Fix rx_login_comp hang after login failure
    - LP: #1528377
  * target: Fix race for SCF_COMPARE_AND_WRITE_POST checking
    - LP: #1528377
  * target: fix COMPARE_AND_WRITE non zero SGL offset data corruption
    - LP: #1528377
  * block: Always check queue limits for cloned requests
    - LP: #1528377
  * Fix a memory leak in scsi_host_dev_release()
    - LP: #1528377
  * wan/x25: Fix use-after-free in x25_asy_open_tty()
    - LP: #1528377
  * sched/core: Clear the root_domain cpumasks in init_rootdomain()
    - LP: #1528377
  * x86/signal: Fix restart_syscall number for x32 tasks
    - LP: #1528377
  * mmc: remove bondage between REQ_META and reliable write
    - LP: #1528377
  * sctp: translate host order to network order when setting a hmacid
    - LP: #1528377
  * usb: musb: core: fix order of arguments to ulpi write callback
    - LP: #1528377
  * FS-Cache: Add missing initialization of ret in cachefiles_write_page()
    - LP: #1528377
  * tcp: md5: fix lockdep annotation
    - LP: #1528377
  * ARM: dts: Kirkwood: Fix QNAP TS219 power-off
    - LP: #1528377
  * isdn: Partially revert debug format string usage clean up
    - LP: #1528377
  * remoteproc: avoid stack overflow in debugfs file
    - LP: #1528377
  * net: mvneta: add configuration for MBUS windows access protection
    - LP: #1528377
  * net: mvneta: fix bit assignment in MVNETA_RXQ_CONFIG_REG
    - LP: #1528377
  * net: mvneta: fix bit assignment for RX packet irq enable
    - LP: #1528377
  * sched/core: Remove false-positive warning from wake_up_process()
    - LP: #1528377
  * packet: allow to transmit +4 byte in TX_RING slot for VLAN case
    - LP: #1528377
  * packet: tpacket_snd(): fix signed/unsigned comparison
    - LP: #1528377
  * packet: only allow extra vlan len on ethernet devices
    - LP: #1528377
  * packet: fix tpacket_snd max frame len
    - LP: #1528377
  * net/mlx4_core: Avoid returning success in case of an error flow
    - LP: #1528377
  * net: ip6mr: fix static mfc/dev leaks on table destruction
    - LP: #1528377
  * unix: avoid use-after-free in ep_remove_wait_queue
    - LP: #1528377
  * broadcom: fix PHY_ID_BCM5481 entry in the id table
    - LP: #1528377
  * net/neighbour: fix crash at dumping device-agnostic proxy entries
    - LP: #1528377
  * Linux 3.13.11-ckt32
    - LP: #1528377
  * KVM: x86: Reload pit counters for all channels when restoring state
    - LP: #1530956
    - CVE-2015-7513
  * HID: wacom - make sure touch_input is valid before using it
    - LP: #1310800
  * xfs: give all workqueues rescuer threads
    - LP: #1527062

-- Luis Henriques <luis.henriques@canonical.com>  Tue, 12 Jan 2016 11:29:36 +0000

Changed in linux-lts-trusty (Ubuntu Precise):
status:	Fix Committed → Fix Released
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-02-01:

Download full text (10.4 KiB)

This bug was fixed in the package linux - 3.2.0-98.138

---------------
linux (3.2.0-98.138) precise; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1532774

[ Upstream Kernel Changes ]

This bug was fixed in the package linux - 3.2.0-98.138

---------------
linux (3.2.0-98.138) precise; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1532774

[ Upstream Kernel Changes ]

* Revert "xhci: don't finish a TD if we get a short transfer event mid
    TD"
    - LP: #1529077
  * PCI: Fix devfn for VPD access through function 0
    - LP: #1524292
  * PCI: Use function 0 VPD for identical functions, regular VPD for others
    - LP: #1524292
  * mac80211: fix driver RSSI event calculations
    - LP: #1524292
  * HID: core: Avoid uninitialized buffer access
    - LP: #1524292
  * wm831x_power: Use IRQF_ONESHOT to request threaded IRQs
    - LP: #1524292
  * mwifiex: fix mwifiex_rdeeprom_read()
    - LP: #1524292
  * mtd: mtdpart: fix add_mtd_partitions error path
    - LP: #1524292
  * devres: fix a for loop bounds check
    - LP: #1524292
  * packet: fix match_fanout_group()
    - LP: #1524292
  * Btrfs: added helper btrfs_next_item()
    - LP: #1524292
  * Btrfs: fix file corruption and data loss after cloning inline extents
    - LP: #1524292
  * iommu/vt-d: Fix ATSR handling for Root-Complex integrated endpoints
    - LP: #1524292
  * ARM: pxa: remove incorrect __init annotation on pxa27x_set_pwrmode
    - LP: #1524292
  * Btrfs: don't use ram_bytes for uncompressed inline items
    - LP: #1524292
  * Btrfs: fix truncation of compressed and inlined extents
    - LP: #1524292
  * ext4, jbd2: ensure entering into panic after recording an error in
    superblock
    - LP: #1524292
  * Bluetooth: ath3k: Add new AR3012 0930:021c id
    - LP: #1502781, #1524292
  * Bluetooth: ath3k: Add support of AR3012 0cf3:817b device
    - LP: #1506615, #1524292
  * staging: rtl8712: Add device ID for Sitecom WLA2100
    - LP: #1524292
  * ACPI: Use correct IRQ when uninstalling ACPI interrupt handler
    - LP: #1524292
  * MIPS: atomic: Fix comment describing atomic64_add_unless's return
    value.
    - LP: #1524292
  * ALSA: hda - Disable 64bit address for Creative HDA controllers
    - LP: #1524292
  * megaraid_sas: Do not use PAGE_SIZE for max_sectors
    - LP: #1524292
  * can: Use correct type in sizeof() in nla_put()
    - LP: #1524292
  * mtd: blkdevs: fix potential deadlock + lockdep warnings
    - LP: #1524292
  * crypto: algif_hash - Only export and import on sockets with data
    - LP: #1524292
  * megaraid_sas : SMAP restriction--do not access user memory from IOCTL
    code
    - LP: #1524292
  * recordmcount: Fix endianness handling bug for nop_mcount
    - LP: #1524292
  * ipv6: fix tunnel error handling
    - LP: #1524292
  * ALSA: hda - Apply pin fixup for HP ProBook 6550b
    - LP: #1524292
  * firewire: ohci: fix JMicron JMB38x IT context discovery
    - LP: #1524292
  * scsi: restart list search after unlock in scsi_remove_target
    - LP: #1524292
  * x86/cpu: Call verify_cpu() after having entered long mode too
    - LP: #1524292
  * Btrfs: fix race leading to incorrect item deletion when dropping
    extents
    - LP: #1524292
  * Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow
    - LP: #1524292
  * perf: Fix inherited events vs. tracepoint filters
    - LP: #1524292
  * scsi_sysfs: Fix queue_ramp_up_period return code
    - LP: #1524292
  * Btrfs: fix race when listing an inode's xattrs
    - LP: #1524292
  * net: fix a race in dst_release()
    - LP: #1524292
  * FS-Cache: Increase reference of parent after registering, netfs success
    - LP: #1524292
  * FS-Cache: Don't override netfs's primary_index if registering failed
    - LP: #1524292
  * FS-Cache: Handle a write to the page immediately beyond the EOF marker
    - LP: #1524292
  * binfmt_elf: Don't clobber passed executable's file header
    - LP: #1524292
  * fs: make dumpable=2 require fully qualified path
    - LP: #1524292
    - CVE-2006-2451, allowing local users to gain root privileges.
  * fs: if a coredump already exists, unlink and recreate with O_EXCL
    - LP: #1524292
  * irda: precedence bug in irlmp_seq_hb_idx()
    - LP: #1524292
  * RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in
    rds_tcp_data_recv
    - LP: #1524292
  * ipmr: fix possible race resulting from improper usage of
    IP_INC_STATS_BH() in preemptible context.
    - LP: #1524292
  * net: avoid NULL deref in inet_ctl_sock_destroy()
    - LP: #1524292
  * splice: sendfile() at once fails for big files
    - LP: #1524292
  * Linux 3.2.74
    - LP: #1524292
  * fuse: break infinite loop in fuse_fill_write_pages()
    - LP: #1530842
  * sctp: translate host order to network order when setting a hmacid
    - LP: #1530842
  * ALSA: usb-audio: add packet size quirk for the Medeli DD305
    - LP: #1530842
  * ALSA: usb-audio: prevent CH345 multiport output SysEx corruption
    - LP: #1530842
  * ALSA: usb-audio: work around CH345 input SysEx corruption
    - LP: #1530842
  * USB: serial: option: add support for Novatel MiFi USB620L
    - LP: #1530842
  * USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined
    table as well.
    - LP: #1530842
  * USB: ti_usb_3410_502: Fix ID table size
    - LP: #1530842
  * USB: ti_usb_3410_5052: Add Honeywell HGI80 ID
    - LP: #1530842
  * usb: musb: core: fix order of arguments to ulpi write callback
    - LP: #1530842
  * ASoC: wm8962: correct addresses for HPF_C_0/1
    - LP: #1530842
  * net: fix __netdev_update_features return on ndo_set_features failure
    - LP: #1530842
  * FS-Cache: Add missing initialization of ret in cachefiles_write_page()
    - LP: #1530842
  * mac80211: mesh: fix call_rcu() usage
    - LP: #1530842
  * macvlan: fix leak in macvlan_handle_frame
    - LP: #1530842
  * xhci: Add XHCI_INTEL_HOST quirk
    - LP: #1530842
  * xhci: Workaround to get Intel xHCI reset working more reliably
    - LP: #1530842
  * USB: option: add XS Stick W100-2 from 4G Systems
    - LP: #1530842
  * usblp: do not set TASK_INTERRUPTIBLE before lock
    - LP: #1530842
  * mac: validate mac_partition is within sector
    - LP: #1530842
  * ip6mr: call del_timer_sync() in ip6mr_free_table()
    - LP: #1530842
  * net: ip6mr: fix static mfc/dev leaks on table destruction
    - LP: #1530842
  * can: sja1000: clear interrupts on start
    - LP: #1530842
  * USB: cp210x: Remove CP2110 ID from compatibility list
    - LP: #1530842
  * USB: cdc-acm - Add IGNORE_DEVICE quirk
    - LP: #1530842
  * USB: cdc_acm: Ignore Infineon Flash Loader utility
    - LP: #1530842
  * unix: avoid use-after-free in ep_remove_wait_queue
    - LP: #1530842
  * fix sysvfs symlinks
    - LP: #1530842
  * vfs: Make sendfile(2) killable even better
    - LP: #1530842
  * vfs: Avoid softlockups with sendfile(2)
    - LP: #1530842
  * broadcom: fix PHY_ID_BCM5481 entry in the id table
    - LP: #1530842
  * ring-buffer: Update read stamp with first real commit on page
    - LP: #1530842
  * ext4: Fix handling of extended tv_sec
    - LP: #1530842
  * jbd2: Fix unreclaimed pages after truncate in data=journal mode
    - LP: #1530842
  * RDS: fix race condition when sending a message on unbound socket
    - LP: #1530842
  * nfs: if we have no valid attrs, then don't declare the attribute cache
    valid
    - LP: #1530842
  * drm/ttm: Fixed a read/write lock imbalance
    - LP: #1530842
  * AHCI: Fix softreset failed issue of Port Multiplier
    - LP: #1530842
  * sata_sil: disable trim
    - LP: #1530842
  * wan/x25: Fix use-after-free in x25_asy_open_tty()
    - LP: #1530842
  * USB: whci-hcd: add check for dma mapping error
    - LP: #1530842
  * usb: Use the USB_SS_MULT() macro to decode burst multiplier for log
    message
    - LP: #1530842
  * dm btree: fix leak of bufio-backed block in btree_split_sibling error
    path
    - LP: #1530842
  * ipv4: igmp: Allow removing groups from a removed interface
    - LP: #1530842
  * locking: Add WARN_ON_ONCE lock assertion
    - LP: #1530842
  * drm: Fix an unwanted master inheritance v2
    - LP: #1530842
  * sched/core: Remove false-positive warning from wake_up_process()
    - LP: #1530842
  * sched/core: Clear the root_domain cpumasks in init_rootdomain()
    - LP: #1530842
  * usb: xhci: fix config fail of FS hub behind a HS hub with MTT
    - LP: #1530842
  * ALSA: rme96: Fix unexpected volume reset after rate changes
    - LP: #1530842
  * 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
    - LP: #1530842
  * ipmi: move timer init to before irq is setup
    - LP: #1530842
  * dm btree: fix bufio buffer leaks in dm_btree_del() error path
    - LP: #1530842
  * vgaarb: fix signal handling in vga_get()
    - LP: #1530842
  * parisc iommu: fix panic due to trying to allocate too large region
    - LP: #1530842
  * mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't
    make any progress
    - LP: #1530842
  * mm: hugetlb: call huge_pte_alloc() only if ptep is null
    - LP: #1530842
  * sh64: fix __NR_fgetxattr
    - LP: #1530842
  * snmp: Remove duplicate OUTMCAST stat increment
    - LP: #1530842
  * tcp: initialize tp->copied_seq in case of cross SYN connection
    - LP: #1530842
  * net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds
    - LP: #1530842
  * net: ipmr: fix static mfc/dev leaks on table destruction
    - LP: #1530842
  * ipv6: distinguish frag queues by device for multicast and link-local
    packets
    - LP: #1530842
  * dccp: remove unnecessary codes in ipv6.c
    - LP: #1530842
  * ipv6: add complete rcu protection around np->opt
    - LP: #1530842
  * ipv6: sctp: implement sctp_v6_destroy_sock()
    - LP: #1530842
  * atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
    - LP: #1530842
  * sctp: update the netstamp_needed counter when copying sockets
    - LP: #1530842
  * ipv6: sctp: clone options to avoid use after free
    - LP: #1530842
  * net: add validation for the socket syscall protocol argument
    - LP: #1530842
  * sh_eth: fix kernel oops in skb_put()
    - LP: #1530842
  * pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
    - LP: #1530842
  * bluetooth: Validate socket address length in sco_sock_bind().
    - LP: #1530842
  * af_unix: Revert 'lock_interruptible' in stream receive code
    - LP: #1530842
  * af_unix: fix a fatal race with bit fields
    - LP: #1530842
  * isdn_ppp: Add checks for allocation failure in isdn_ppp_open()
    - LP: #1530842
  * ppp, slip: Validate VJ compression slot parameters completely
    - LP: #1530842
  * Linux 3.2.75
    - LP: #1530842
  * KVM: x86: Reload pit counters for all channels when restoring state
    - LP: #1530956
    - CVE-2015-7513

-- Luis Henriques <luis.henriques@canonical.com>  Mon, 11 Jan 2016 11:54:41 +0000

Changed in linux (Ubuntu Precise):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-02-01:

Download full text (11.6 KiB)

This bug was fixed in the package linux-armadaxp - 3.2.0-1661.85

---------------
linux-armadaxp (3.2.0-1661.85) precise; urgency=low

[ Ike Panhc ]

  * Release Tracking Bug
    - LP: #1532929
  * Rebase to Ubuntu-3.2.0-98.138

[ Ubuntu: 3.2.0-98.138 ]

This bug was fixed in the package linux-armadaxp - 3.2.0-1661.85

---------------
linux-armadaxp (3.2.0-1661.85) precise; urgency=low

[ Ike Panhc ]

* Release Tracking Bug
    - LP: #1532929
  * Rebase to Ubuntu-3.2.0-98.138

[ Ubuntu: 3.2.0-98.138 ]

* Release Tracking Bug
    - LP: #1532774
  * Revert "xhci: don't finish a TD if we get a short transfer event mid
    TD"
    - LP: #1529077
  * PCI: Fix devfn for VPD access through function 0
    - LP: #1524292
  * PCI: Use function 0 VPD for identical functions, regular VPD for others
    - LP: #1524292
  * mac80211: fix driver RSSI event calculations
    - LP: #1524292
  * HID: core: Avoid uninitialized buffer access
    - LP: #1524292
  * wm831x_power: Use IRQF_ONESHOT to request threaded IRQs
    - LP: #1524292
  * mwifiex: fix mwifiex_rdeeprom_read()
    - LP: #1524292
  * mtd: mtdpart: fix add_mtd_partitions error path
    - LP: #1524292
  * devres: fix a for loop bounds check
    - LP: #1524292
  * packet: fix match_fanout_group()
    - LP: #1524292
  * Btrfs: added helper btrfs_next_item()
    - LP: #1524292
  * Btrfs: fix file corruption and data loss after cloning inline extents
    - LP: #1524292
  * iommu/vt-d: Fix ATSR handling for Root-Complex integrated endpoints
    - LP: #1524292
  * ARM: pxa: remove incorrect __init annotation on pxa27x_set_pwrmode
    - LP: #1524292
  * Btrfs: don't use ram_bytes for uncompressed inline items
    - LP: #1524292
  * Btrfs: fix truncation of compressed and inlined extents
    - LP: #1524292
  * ext4, jbd2: ensure entering into panic after recording an error in
    superblock
    - LP: #1524292
  * Bluetooth: ath3k: Add new AR3012 0930:021c id
    - LP: #1502781, #1524292
  * Bluetooth: ath3k: Add support of AR3012 0cf3:817b device
    - LP: #1506615, #1524292
  * staging: rtl8712: Add device ID for Sitecom WLA2100
    - LP: #1524292
  * ACPI: Use correct IRQ when uninstalling ACPI interrupt handler
    - LP: #1524292
  * MIPS: atomic: Fix comment describing atomic64_add_unless's return
    value.
    - LP: #1524292
  * ALSA: hda - Disable 64bit address for Creative HDA controllers
    - LP: #1524292
  * megaraid_sas: Do not use PAGE_SIZE for max_sectors
    - LP: #1524292
  * can: Use correct type in sizeof() in nla_put()
    - LP: #1524292
  * mtd: blkdevs: fix potential deadlock + lockdep warnings
    - LP: #1524292
  * crypto: algif_hash - Only export and import on sockets with data
    - LP: #1524292
  * megaraid_sas : SMAP restriction--do not access user memory from IOCTL
    code
    - LP: #1524292
  * recordmcount: Fix endianness handling bug for nop_mcount
    - LP: #1524292
  * ipv6: fix tunnel error handling
    - LP: #1524292
  * ALSA: hda - Apply pin fixup for HP ProBook 6550b
    - LP: #1524292
  * firewire: ohci: fix JMicron JMB38x IT context discovery
    - LP: #1524292
  * scsi: restart list search after unlock in scsi_remove_target
    - LP: #1524292
  * x86/cpu: Call verify_cpu() after having entered long mode too
    - LP: #1524292
  * Btrfs: fix race leading to incorrect item deletion when dropping
    extents
    - LP: #1524292
  * Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow
    - LP: #1524292
  * perf: Fix inherited events vs. tracepoint filters
    - LP: #1524292
  * scsi_sysfs: Fix queue_ramp_up_period return code
    - LP: #1524292
  * Btrfs: fix race when listing an inode's xattrs
    - LP: #1524292
  * net: fix a race in dst_release()
    - LP: #1524292
  * FS-Cache: Increase reference of parent after registering, netfs success
    - LP: #1524292
  * FS-Cache: Don't override netfs's primary_index if registering failed
    - LP: #1524292
  * FS-Cache: Handle a write to the page immediately beyond the EOF marker
    - LP: #1524292
  * binfmt_elf: Don't clobber passed executable's file header
    - LP: #1524292
  * fs: make dumpable=2 require fully qualified path
    - LP: #1524292
    - CVE-2006-2451, allowing local users to gain root privileges.
  * fs: if a coredump already exists, unlink and recreate with O_EXCL
    - LP: #1524292
  * irda: precedence bug in irlmp_seq_hb_idx()
    - LP: #1524292
  * RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in
    rds_tcp_data_recv
    - LP: #1524292
  * ipmr: fix possible race resulting from improper usage of
    IP_INC_STATS_BH() in preemptible context.
    - LP: #1524292
  * net: avoid NULL deref in inet_ctl_sock_destroy()
    - LP: #1524292
  * splice: sendfile() at once fails for big files
    - LP: #1524292
  * Linux 3.2.74
    - LP: #1524292
  * fuse: break infinite loop in fuse_fill_write_pages()
    - LP: #1530842
  * sctp: translate host order to network order when setting a hmacid
    - LP: #1530842
  * ALSA: usb-audio: add packet size quirk for the Medeli DD305
    - LP: #1530842
  * ALSA: usb-audio: prevent CH345 multiport output SysEx corruption
    - LP: #1530842
  * ALSA: usb-audio: work around CH345 input SysEx corruption
    - LP: #1530842
  * USB: serial: option: add support for Novatel MiFi USB620L
    - LP: #1530842
  * USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined
    table as well.
    - LP: #1530842
  * USB: ti_usb_3410_502: Fix ID table size
    - LP: #1530842
  * USB: ti_usb_3410_5052: Add Honeywell HGI80 ID
    - LP: #1530842
  * usb: musb: core: fix order of arguments to ulpi write callback
    - LP: #1530842
  * ASoC: wm8962: correct addresses for HPF_C_0/1
    - LP: #1530842
  * net: fix __netdev_update_features return on ndo_set_features failure
    - LP: #1530842
  * FS-Cache: Add missing initialization of ret in cachefiles_write_page()
    - LP: #1530842
  * mac80211: mesh: fix call_rcu() usage
    - LP: #1530842
  * macvlan: fix leak in macvlan_handle_frame
    - LP: #1530842
  * xhci: Add XHCI_INTEL_HOST quirk
    - LP: #1530842
  * xhci: Workaround to get Intel xHCI reset working more reliably
    - LP: #1530842
  * USB: option: add XS Stick W100-2 from 4G Systems
    - LP: #1530842
  * usblp: do not set TASK_INTERRUPTIBLE before lock
    - LP: #1530842
  * mac: validate mac_partition is within sector
    - LP: #1530842
  * ip6mr: call del_timer_sync() in ip6mr_free_table()
    - LP: #1530842
  * net: ip6mr: fix static mfc/dev leaks on table destruction
    - LP: #1530842
  * can: sja1000: clear interrupts on start
    - LP: #1530842
  * USB: cp210x: Remove CP2110 ID from compatibility list
    - LP: #1530842
  * USB: cdc-acm - Add IGNORE_DEVICE quirk
    - LP: #1530842
  * USB: cdc_acm: Ignore Infineon Flash Loader utility
    - LP: #1530842
  * unix: avoid use-after-free in ep_remove_wait_queue
    - LP: #1530842
  * fix sysvfs symlinks
    - LP: #1530842
  * vfs: Make sendfile(2) killable even better
    - LP: #1530842
  * vfs: Avoid softlockups with sendfile(2)
    - LP: #1530842
  * broadcom: fix PHY_ID_BCM5481 entry in the id table
    - LP: #1530842
  * ring-buffer: Update read stamp with first real commit on page
    - LP: #1530842
  * ext4: Fix handling of extended tv_sec
    - LP: #1530842
  * jbd2: Fix unreclaimed pages after truncate in data=journal mode
    - LP: #1530842
  * RDS: fix race condition when sending a message on unbound socket
    - LP: #1530842
  * nfs: if we have no valid attrs, then don't declare the attribute cache
    valid
    - LP: #1530842
  * drm/ttm: Fixed a read/write lock imbalance
    - LP: #1530842
  * AHCI: Fix softreset failed issue of Port Multiplier
    - LP: #1530842
  * sata_sil: disable trim
    - LP: #1530842
  * wan/x25: Fix use-after-free in x25_asy_open_tty()
    - LP: #1530842
  * USB: whci-hcd: add check for dma mapping error
    - LP: #1530842
  * usb: Use the USB_SS_MULT() macro to decode burst multiplier for log
    message
    - LP: #1530842
  * dm btree: fix leak of bufio-backed block in btree_split_sibling error
    path
    - LP: #1530842
  * ipv4: igmp: Allow removing groups from a removed interface
    - LP: #1530842
  * locking: Add WARN_ON_ONCE lock assertion
    - LP: #1530842
  * drm: Fix an unwanted master inheritance v2
    - LP: #1530842
  * sched/core: Remove false-positive warning from wake_up_process()
    - LP: #1530842
  * sched/core: Clear the root_domain cpumasks in init_rootdomain()
    - LP: #1530842
  * usb: xhci: fix config fail of FS hub behind a HS hub with MTT
    - LP: #1530842
  * ALSA: rme96: Fix unexpected volume reset after rate changes
    - LP: #1530842
  * 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
    - LP: #1530842
  * ipmi: move timer init to before irq is setup
    - LP: #1530842
  * dm btree: fix bufio buffer leaks in dm_btree_del() error path
    - LP: #1530842
  * vgaarb: fix signal handling in vga_get()
    - LP: #1530842
  * parisc iommu: fix panic due to trying to allocate too large region
    - LP: #1530842
  * mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't
    make any progress
    - LP: #1530842
  * mm: hugetlb: call huge_pte_alloc() only if ptep is null
    - LP: #1530842
  * sh64: fix __NR_fgetxattr
    - LP: #1530842
  * snmp: Remove duplicate OUTMCAST stat increment
    - LP: #1530842
  * tcp: initialize tp->copied_seq in case of cross SYN connection
    - LP: #1530842
  * net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds
    - LP: #1530842
  * net: ipmr: fix static mfc/dev leaks on table destruction
    - LP: #1530842
  * ipv6: distinguish frag queues by device for multicast and link-local
    packets
    - LP: #1530842
  * dccp: remove unnecessary codes in ipv6.c
    - LP: #1530842
  * ipv6: add complete rcu protection around np->opt
    - LP: #1530842
  * ipv6: sctp: implement sctp_v6_destroy_sock()
    - LP: #1530842
  * atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
    - LP: #1530842
  * sctp: update the netstamp_needed counter when copying sockets
    - LP: #1530842
  * ipv6: sctp: clone options to avoid use after free
    - LP: #1530842
  * net: add validation for the socket syscall protocol argument
    - LP: #1530842
  * sh_eth: fix kernel oops in skb_put()
    - LP: #1530842
  * pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
    - LP: #1530842
  * bluetooth: Validate socket address length in sco_sock_bind().
    - LP: #1530842
  * af_unix: Revert 'lock_interruptible' in stream receive code
    - LP: #1530842
  * af_unix: fix a fatal race with bit fields
    - LP: #1530842
  * isdn_ppp: Add checks for allocation failure in isdn_ppp_open()
    - LP: #1530842
  * ppp, slip: Validate VJ compression slot parameters completely
    - LP: #1530842
  * Linux 3.2.75
    - LP: #1530842
  * KVM: x86: Reload pit counters for all channels when restoring state
    - LP: #1530956
    - CVE-2015-7513

[ Ubuntu: 3.2.0-97.137 ]

* xen: Add RING_COPY_REQUEST()
    - CVE-2015-8550
  * xen-netback: don't use last request to determine minimum Tx credit
    - CVE-2015-8550
  * xen-netback: use RING_COPY_REQUEST() throughout
    - CVE-2015-8550
  * xen-blkback: only read request operation from shared ring once
    - CVE-2015-8550
  * xen/pciback: Save xen_pci_op commands before processing it
    - CVE-2015-8550
  * xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI
    or MSI-X enabled
    - CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
  * xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI
    or MSI-X enabled
    - CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
  * xen/pciback: Do not install an IRQ handler for MSI interrupts.
    - CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
  * xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has
    MSI(X) enabled.
    - CVE-2015-8551, CVE-2015-8552, CVE-2015-8553
  * xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set.
    - CVE-2015-8551, CVE-2015-8552, CVE-2015-8553

-- Ike Panhc <ike.pan@canonical.com>  Tue, 12 Jan 2016 13:45:42 +0800

Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Released
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-02-01:

Download full text (11.7 KiB)

This bug was fixed in the package linux-ti-omap4 - 3.2.0-1476.99

---------------
linux-ti-omap4 (3.2.0-1476.99) precise; urgency=medium

[ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1532928
  * No change upload to override old version in PPA

linux-ti-omap4 (3.2.0-1476.98) precise; urgency=low

* Release Tracking Bug
- LP: #1532928

[ Luis Henriques ]

* rebased on Ubuntu-3.2.0-98.138

[ Ubuntu: 3.2.0-98.138 ]

This bug was fixed in the package linux-ti-omap4 - 3.2.0-1476.99

---------------
linux-ti-omap4 (3.2.0-1476.99) precise; urgency=medium

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1532928
  * No change upload to override old version in PPA

linux-ti-omap4 (3.2.0-1476.98) precise; urgency=low

* Release Tracking Bug
    - LP: #1532928

[ Luis Henriques ]

* rebased on Ubuntu-3.2.0-98.138

[ Ubuntu: 3.2.0-98.138 ]

[ Ubuntu: 3.2.0-97.137 ]

-- Luis Henriques <luis.henriques@canonical.com>  Tue, 12 Jan 2016 16:18:52 +0000

Changed in linux-ti-omap4 (Ubuntu Precise):
status:	Fix Committed → Fix Released
status:	Fix Committed → Fix Released

Revision history for this message

Andy Whitcroft (apw) wrote on 2016-02-02:

Fix released in 3.19.0-47.53

Changed in linux (Ubuntu Vivid):
status:	Fix Committed → Fix Released

Revision history for this message

Andy Whitcroft (apw) wrote on 2016-02-02:

#10

Fix released in 4.2.0-27.32

Changed in linux (Ubuntu Wily):
status:	Fix Committed → Fix Released

Revision history for this message

Andy Whitcroft (apw) wrote on 2016-02-02:

#11

Fix released in 3.13.0-77.121

Changed in linux (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Steve Beattie (sbeattie) on 2016-02-02

Changed in linux-lts-wily (Ubuntu Trusty):
status:	Fix Committed → Fix Released
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	Fix Committed → Fix Released
Changed in linux-raspi2 (Ubuntu Wily):
status:	Fix Committed → Fix Released
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Steve Beattie (sbeattie) on 2016-02-10

Changed in linux-raspi2 (Ubuntu Xenial):
status:	New → Fix Committed
description:	updated

Steve Beattie (sbeattie) on 2016-02-11

Changed in linux-lts-xenial (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Trusty):
status:	New → Fix Committed
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2016-04-19

Changed in linux-manta (Ubuntu Xenial):
status:	New → Invalid

Steve Beattie (sbeattie) on 2016-05-05

Changed in linux-snapdragon (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Yakkety):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium

Revision history for this message

Andy Whitcroft (apw) wrote on 2017-07-26: Closing unsupported series nomination.

#12

This bug was nominated against a series that is no longer supported, ie yakkety. The bug task representing the yakkety nomination is being closed as Won't Fix.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu Yakkety):
status:	Fix Committed → Won't Fix

Revision history for this message

Andy Whitcroft (apw) wrote on 2017-10-17:

#13

This bug was nominated against a series that is no longer supported, ie vivid. The bug task representing the vivid nomination is being closed as Won't Fix.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux-flo (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-mako (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-manta (Ubuntu Vivid):
status:	New → Won't Fix

Po-Hsu Lin (cypressyew) on 2019-10-03

Changed in linux (Ubuntu):
status:	Fix Committed → Fix Released

Revision history for this message

Steve Langasek (vorlon) wrote on 2021-10-14:

#16

The Precise Pangolin has reached end of life, so this bug will not be fixed for that release

Changed in linux-ec2 (Ubuntu Precise):
status:	New → Won't Fix
Changed in linux-lts-backport-maverick (Ubuntu Precise):
status:	New → Won't Fix
Changed in linux-lts-backport-natty (Ubuntu Precise):
status:	New → Won't Fix
Changed in linux-mvl-dove (Ubuntu Precise):
status:	New → Won't Fix

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-mvl-dove package

CVE-2015-7513

Bug Description

Related branches

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-mvl-dove package