This bug was fixed in the package linux - 3.13.0-85.129 --------------- linux (3.13.0-85.129) trusty; urgency=low
[ Brad Figg ] * Release Tracking Bug - LP: #1558727 [ Upstream Kernel Changes ] * Revert "Revert "af_unix: Revert 'lock_interruptible' in stream receive code"" linux (3.13.0-84.128) trusty; urgency=low [ Brad Figg ] * Release Tracking Bug - LP: #1557596 [ Upstream Kernel Changes ] * Revert "af_unix: Revert 'lock_interruptible' in stream receive code" - LP: #1540731 * seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO - LP: #1496073 * net/mlx4_en: Remove dependency between timestamping capability and service_task - LP: #1537859 * net/mlx4_en: Fix HW timestamp init issue upon system startup - LP: #1537859 * x86/mm: Fix slow_virt_to_phys() for X86_PAE again - LP: #1549601 * iw_cxgb3: Fix incorrectly returning error on success - LP: #1557191 * EVM: Use crypto_memneq() for digest comparisons - LP: #1557191 * x86/entry/compat: Add missing CLAC to entry_INT80_32 - LP: #1557191 * iio: dac: mcp4725: set iio name property in sysfs - LP: #1557191 * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG - LP: #1557191 * PCI/AER: Flush workqueue on device remove to avoid use-after-free - LP: #1557191 * libata: disable forced PORTS_IMPL for >= AHCI 1.3 - LP: #1557191 * mac80211: start_next_roc only if scan was actually running - LP: #1557191 * mac80211: Requeue work after scan complete for all VIF types. - LP: #1557191 * rfkill: fix rfkill_fop_read wait_event usage - LP: #1557191 * crypto: shash - Fix has_key setting - LP: #1557191 * drm/i915/dp: fall back to 18 bpp when sink capability is unknown - LP: #1557191 * target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors - LP: #1557191 * crypto: algif_hash - wait for crypto_ahash_init() to complete - LP: #1557191 * iio: inkern: fix a NULL dereference on error - LP: #1557191 * intel_scu_ipcutil: underflow in scu_reg_access() - LP: #1557191 * ALSA: seq: Fix race at closing in virmidi driver - LP: #1557191 * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check - LP: #1557191 * ALSA: pcm: Fix potential deadlock in OSS emulation - LP: #1557191 * ALSA: seq: Fix yet another races among ALSA timer accesses - LP: #1557191 * ALSA: timer: Fix link corruption due to double start or stop - LP: #1557191 * libata: fix sff host state machine locking while polling - LP: #1557191 * cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() - LP: #1557191 * ASoC: dpcm: fix the BE state on hw_free - LP: #1557191 * module: wrapper for symbol name. - LP: #1557191 * ALSA: hda - Add fixup for Mac Mini 7,1 model - LP: #1557191 * ALSA: Move EXPORT_SYMBOL() in appropriate places - LP: #1557191 * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free - LP: #1557191 * ALSA: rawmidi: Fix race at copying & updating the position - LP: #1557191 * ALSA: seq: Fix lockdep warnings due to double mutex locks - LP: #1557191 * drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration - LP: #1557191 * radix-tree: fix race in gang lookup - LP: #1557191 * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms - LP: #1557191 * xhci: Fix list corruption in urb dequeue at host removal - LP: #1557191 * target: Fix Task Aborted Status (TAS) handling - LP: #1557191 * target: Add TFO->abort_task for aborted task resources release - LP: #1557191 * target: Fix LUN_RESET active TMR descriptor handling - LP: #1557191 * target: Fix LUN_RESET active I/O handling for ACK_KREF - LP: #1557191 * target: Fix TAS handling for multi-session se_node_acls - LP: #1557191 * target: Fix remote-port TMR ABORT + se_cmd fabric stop - LP: #1557191 * target: Fix race with SCF_SEND_DELAYED_TAS handling - LP: #1557191 * [media] tda1004x: only update the frontend properties if locked - LP: #1557191 * ALSA: timer: Fix leftover link at closing - LP: #1557191 * [media] saa7134-alsa: Only frees registered sound cards - LP: #1557191 * Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl - LP: #1557191 * scsi_dh_rdac: always retry MODE SELECT on command lock violation - LP: #1557191 * SCSI: Add Marvell Console to VPD blacklist - LP: #1557191 * drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil - LP: #1557191 * ALSA: hda - Fix static checker warning in patch_hdmi.c - LP: #1557191 * dump_stack: avoid potential deadlocks - LP: #1557191 * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress - LP: #1557191 * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup - LP: #1557191 * mm: replace vma_lock_anon_vma with anon_vma_lock_read/write - LP: #1557191 * radix-tree: fix oops after radix_tree_iter_retry - LP: #1557191 * crypto: user - lock crypto_alg_list on alg dump - LP: #1557191 * serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) - LP: #1557191 * pty: fix possible use after free of tty->driver_data - LP: #1557191 * pty: make sure super_block is still valid in final /dev/tty close - LP: #1557191 * ALSA: hda - Fix speaker output from VAIO AiO machines - LP: #1557191 * klist: fix starting point removed bug in klist iterators - LP: #1557191 * ALSA: dummy: Implement timer backend switching more safely - LP: #1557191 * powerpc: Fix dedotify for binutils >= 2.26 - LP: #1557191 * ALSA: timer: Fix wrong instance passed to slave callbacks - LP: #1557191 * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz() - LP: #1557191 * nfs: fix nfs_size_to_loff_t - LP: #1557191 * ALSA: timer: Fix race between stop and interrupt - LP: #1557191 * ALSA: timer: Fix race at concurrent reads - LP: #1557191 * phy: twl4030-usb: Relase usb phy on unload - LP: #1557191 * drm/i915: fix error path in intel_setup_gmbus() - LP: #1557191 * ahci: Intel DNV device IDs SATA - LP: #1557191 * workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup - LP: #1557191 * cifs: fix erroneous return value - LP: #1557191 * s390/dasd: prevent incorrect length error under z/VM after PAV changes - LP: #1557191 * s390/dasd: fix refcount for PAV reassignment - LP: #1557191 * ARM: 8519/1: ICST: try other dividends than 1 - LP: #1557191 * btrfs: properly set the termination value of ctx->pos in readdir - LP: #1557191 * ext4: fix potential integer overflow - LP: #1557191 * ext4: don't read blocks from disk after extents being swapped - LP: #1557191 * bio: return EINTR if copying to user space got interrupted - LP: #1557191 * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY - LP: #1557191 * xen/pciback: Save the number of MSI-X entries to be copied later. - LP: #1557191 * xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted. - LP: #1557191 * ALSA: seq: Drop superfluous error/debug messages after malloc failures - LP: #1557191 * ALSA: seq: Fix leak of pool buffer at concurrent writes - LP: #1557191 * dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer - LP: #1557191 * tracepoints: Do not trace when cpu is offline - LP: #1557191 * tracing: Fix freak link error caused by branch tracer - LP: #1557191 * ALSA: seq: Fix double port list deletion - LP: #1557191 * drm/radeon: use post-decrement in error handling - LP: #1557191 * drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command - LP: #1557191 * NFSv4: Fix a dentry leak on alias use - LP: #1557191 * USB: option: add support for SIM7100E - LP: #1557191 * USB: cp210x: add IDs for GE B650V3 and B850V3 boards - LP: #1557191 * USB: option: add "4G LTE usb-modem U901" - LP: #1557191 * hwmon: (ads1015) Handle negative conversion values correctly - LP: #1557191 * ext4: fix bh->b_state corruption - LP: #1557191 * ext4: fix crashes in dioread_nolock mode - LP: #1557191 * kernel/resource.c: fix muxed resource handling in __request_region() - LP: #1557191 * drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE - LP: #1557191 * can: ems_usb: Fix possible tx overflow - LP: #1557191 * sunrpc/cache: fix off-by-one in qword_get() - LP: #1557191 * KVM: async_pf: do not warn on page allocation failures - LP: #1557191 * tracing: Fix showing function event in available_events - LP: #1557191 * libceph: don't bail early from try_read() when skipping a message - LP: #1557191 * KVM: x86: MMU: fix ubsan index-out-of-range warning - LP: #1557191 * hpfs: don't truncate the file when delete fails - LP: #1557191 * do_last(): don't let a bogus return value from ->open() et.al. to confuse us - LP: #1557191 * af_iucv: Validate socket address length in iucv_sock_bind() - LP: #1557191 * net: dp83640: Fix tx timestamp overflow handling. - LP: #1557191 * tcp: fix NULL deref in tcp_v4_send_ack() - LP: #1557191 * af_unix: fix struct pid memory leak - LP: #1557191 * pptp: fix illegal memory access caused by multiple bind()s - LP: #1557191 * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application - LP: #1557191 * ipv6/udp: use sticky pktinfo egress ifindex on connect() - LP: #1557191 * net/ipv6: add sysctl option accept_ra_min_hop_limit - LP: #1557191 * ipv6: fix a lockdep splat - LP: #1557191 * unix: correctly track in-flight fds in sending process user_struct - LP: #1557191 * net:Add sysctl_max_skb_frags - LP: #1557191 * sctp: translate network order to host order when users get a hmacid - LP: #1557191 * af_unix: Guard against other == sk in unix_dgram_sendmsg - LP: #1543980, #1557191 * qmi_wwan: add "4G LTE usb-modem U901" - LP: #1557191 * net/mlx4_en: Count HW buffer overrun only once - LP: #1557191 * pppoe: fix reference counting in PPPoE proxy - LP: #1557191 * rtnl: RTM_GETNETCONF: fix wrong return value - LP: #1557191 * unix_diag: fix incorrect sign extension in unix_lookup_by_ino - LP: #1557191 * sctp: Fix port hash table size computation - LP: #1557191 * bonding: Fix ARP monitor validation - LP: #1557191 * ipv4: fix memory leaks in ip_cmsg_send() callers - LP: #1557191 * net/mlx4_en: Choose time-stamping shift value according to HW frequency - LP: #1557191 * af_unix: Don't set err in unix_stream_read_generic unless there was an error - LP: #1557191 * pipe: limit the per-user amount of pages allocated in pipes - LP: #1557191 * Linux 3.13.11-ckt36 - LP: #1557191 * sched/numa: Move task_numa_free() to __put_task_struct() - LP: #1527643 * sched/numa: Fix unsafe get_task_struct() in task_numa_assign() - LP: #1527643 * sched/numa: Fix use-after-free bug in the task_numa_compare - LP: #1527643 -- Brad Figg <brad.f...@canonical.com> Thu, 17 Mar 2016 11:42:09 -0700 ** Changed in: linux (Ubuntu Trusty) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1537859 Title: Vivid update to 3.19.8-ckt13 stable release Status in linux package in Ubuntu: New Status in linux source package in Trusty: Fix Released Status in linux source package in Vivid: Fix Released Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The 3.19.8-ckt13 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well. git://kernel.ubuntu.com/ubuntu/linux.git TEST CASE: TBD The following patches from the 3.19.8-ckt13 stable release shall be applied: Linux 3.19.8-ckt13 firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6 kvm: x86: only channel 0 of the i8254 is linked to the HPET net: possible use after free in dst_release net: sched: fix missing free per cpu on qstats net: filter: make JITs zero A for SKF_AD_ALU_XOR_X ASoC: Use nested lock for snd_soc_dapm_mutex_lock ipv6/addrlabel: fix ip6addrlbl_get() include/linux/mmdebug.h: should include linux/bug.h net/mlx4_en: Fix HW timestamp init issue upon system startup net/mlx4_en: Remove dependency between timestamping capability and service_task net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration ser_gigaset: fix deallocation of platform device structure qlcnic: fix a timeout loop amd-xgbe: fix a couple timeout loops mISDN: fix a loop count sh_eth: fix TX buffer byte-swapping net: phy: mdio-mux: Check return value of mdiobus_alloc() pinctrl: bcm2835: Fix initial value for direction_output sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING sctp: convert sack_needed and sack_generation to bits usb: musb: USB_TI_CPPI41_DMA requires dmaengine support vmstat: allocate vmstat_wq before it is used ftrace/module: Call clean up function when module init fails early dts: vt8500: Add SDHC node to DTS file for WM8650 async_tx: use GFP_NOWAIT rather than GFP_IO ARM: versatile: fix MMC/SD interrupt assignment tile: provide CONFIG_PAGE_SIZE_64KB etc for tilepro tracing: Fix setting of start_index in find_next() ftrace/scripts: Fix incorrect use of sprintf in recordmcount mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() ocfs2: fix BUG when calculate new backup super [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64() ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz MIPS: uaccess: Fix strlen_user with EVA ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2) parisc: Fix syscall restarts i2c: rcar: disable runtime PM correctly in slave mode x86/mce: Ensure offline CPUs don't participate in rendezvous process USB: fix invalid memory access in hub_activate() USB: ipaq.c: fix a timeout loop [media] airspy: increase USB control message buffer size s390/dis: Fix handling of format specifiers ALSA: hda - Set SKL+ hda controller power at freeze() and thaw() powerpc/powernv: pr_warn_once on unsupported OPAL_MSG type ARC: dw2 unwind: Ignore CIE version !=1 gracefully instead of bailing ARC: dw2 unwind: Reinstante unwinding out of modules ftrace/scripts: Have recordmcount copy the object file dma-debug: Fix dma_debug_entry offset calculation scripts: recordmcount: break hardlinks spi: fix parent-device reference leak ALSA: hda - Add a fixup for Thinkpad X1 Carbon 2nd ARM: 8471/1: need to save/restore arm register(r11) when it is corrupted ARM: dts: imx6: Fix Ethernet PHY mode on Ventana boards ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly genirq: Prevent chip buslock deadlock tty: Fix GPF in flush_to_ldisc() n_tty: Fix poll() after buffer-limited eof push read ASoC: wm8974: set cache type for regmap sh64: fix __NR_fgetxattr ocfs2: fix SGID not inherited issue drivers/base/memory.c: prohibit offlining of memory blocks with missing sections mm: hugetlb: call huge_pte_alloc() only if ptep is null mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress vmstat: Reduce time interval to stat update on idle cpu mm: hugetlb: fix hugepage memory leak caused by wrong reserve count parisc iommu: fix panic due to trying to allocate too large region powercap / RAPL: fix BIOS lock check USB: add quirk for devices with broken LPM xhci: fix usb2 resume timing and races. ses: fix additional element traversal bug ARM: dts: vf610: use reset values for L2 cache latencies ASoC: davinci-mcasp: Fix XDATA check in mcasp_start_tx vgaarb: fix signal handling in vga_get() ses: Fix problems with simple enclosures dm btree: fix bufio buffer leaks in dm_btree_del() error path rfkill: copy the name into the rfkill struct KVM: PPC: Book3S HV: Prohibit setting illegal transaction state in MSR ASoC: es8328: Fix deemphasis values ipmi: move timer init to before irq is setup dm space map metadata: fix ref counting bug when bootstrapping a new space map dm thin metadata: fix bug when taking a metadata snapshot ALSA: hda - Fix noise problems on Thinkpad T440s crypto: skcipher - Copy iv from desc even for 0-len walks video: fbdev: fsl: Fix kernel crash when diu_ops is not implemented radeon: Fix VCE IB test on Big-Endian systems radeon: Fix VCE ring test for Big-Endian systems radeon/cik: Fix GFX IB test on Big-Endian 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping ALSA: hda - Fixing speaker noise on the two latest thinkpad models IB/srp: Fix possible send queue overflow IB/srp: Fix a memory leak virtio: fix memory leak of virtio ida cache layers vhost: relax log address alignment ALSA: hda - Add inverted dmic for Packard Bell DOTS dmaengine: at_xdmac: fix macro typo net: mvpp2: fix refilling BM pools in RX path net: mvpp2: fix buffers' DMA handling on RX path net: mvpp2: fix missing DMA region unmap in egress processing ALSA: rme96: Fix unexpected volume reset after rate changes usb: xhci: fix config fail of FS hub behind a HS hub with MTT perf: Fix PERF_EVENT_IOC_PERIOD deadlock ARM: 8465/1: mm: keep reserved ASIDs in sync with mm after multiple rollovers dm btree: fix leak of bufio-backed block in btree_split_sibling error path xen/events/fifo: Consume unprocessed events when a CPU dies usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message USB: whci-hcd: add check for dma mapping error usb: core : hub: Fix BOS 'NULL pointer' kernel panic irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB staging: lustre: echo_copy.._lsm() dereferences userland pointers directly usb-storage: Fix scsi-sd failure "Invalid field in cdb" for USB adapter JMicron sata_sil: disable trim AHCI: Fix softreset failed issue of Port Multiplier i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs drm/ttm: Fixed a read/write lock imbalance jbd2: Fix unreclaimed pages after truncate in data=journal mode ext4: Fix handling of extended tv_sec USB: cdc_acm: Ignore Infineon Flash Loader utility USB: cp210x: Remove CP2110 ID from compatibility list iio: fix some warning messages usb: gadget: pxa27x: fix suspend callback fuse: break infinite loop in fuse_fill_write_pages() efi: Disable interrupts around EFI calls, not in the epilog/prolog calls tools: Add a "make all" rule KEYS: Fix race between read and revoke af_unix: Revert 'lock_interruptible' in stream receive code fou: clean up socket with kfree_rcu bluetooth: Validate socket address length in sco_sock_bind(). pptp: verify sockaddr_len in pptp_bind() and pptp_connect() skbuff: Fix offset error in skb_reorder_vlan_header vlan: Fix untag operations of stacked vlans with REORDER_HEADER off net: fix IP early demux races sh_eth: fix kernel oops in skb_put() net: add validation for the socket syscall protocol argument ipv6: sctp: clone options to avoid use after free net: qca_spi: fix transmit queue timeout handling sctp: also copy sk_tsflags when copying the socket sctp: update the netstamp_needed counter when copying sockets sctp: use the same clock as if sock source timestamps were on atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation gre6: allow to update all parameters via rtnl ip6mr: call del_timer_sync() in ip6mr_free_table() ARC: Fix silly typo in MAINTAINERS file sched/wait: Fix the signal handling fix sched/wait: Fix signal handling in bit wait helpers To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1537859/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp