** Description changed:
-
- SRU Justification
-
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from Linus' tree or in a minimally
- backported form of that patch. The 3.2.54 upstream stable
- patch set is now available. It should be included in the Ubuntu
- kernel as well.
-
- git://git.kernel.org/
-
- TEST CASE: TBD
-
- The following patches are in the 3.2.54 stable release:
+ SRU Justification
+
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from Linus' tree or in a minimally
+ backported form of that patch. The 3.2.54 upstream stable
+ patch set is now available. It should be included in the Ubuntu
+ kernel as well.
+
+ git://git.kernel.org/
+
+ TEST CASE: TBD
+
+ The following patches are in the 3.2.54 stable release:
+ Linux 3.2.54
+ mmc: block: fix a bug of error handling in MMC driver
+ ftrace: Fix function graph with loading of modules
+ ftrace: Check module functions being traced on reload
+ ftrace: Create ftrace_hash_empty() helper routine
+ ftrace: Fix ftrace hash record update with notrace
+ net: flow_dissector: fail on evil iph->ihl
+ xfs: underflow bug in xfs_attrlist_by_handle()
+ aacraid: prevent invalid pointer dereference
+ libertas: potential oops in debugfs
+ ARM: 7527/1: uaccess: explicitly check __user pointer when
!CPU_USE_DOMAINS
+ KVM: Fix iommu map/unmap to handle memory slot moves
+ KVM: perform an invalid memslot step for gpa base change
+ crypto: ansi_cprng - Fix off by one error in non-block size
request
+ HID: multitouch: validate indexes details
+ {pktgen, xfrm} Update IPv4 header total len and checksum after
tranformation
+ ipv6: fix possible seqlock deadlock in ip6_finish_output2
+ inet: fix possible seqlock deadlocks
+ af_packet: block BH in prb_shutdown_retire_blk_timer()
+ packet: fix use after free race in send path when dev is released
+ bridge: flush br's address entry in fdb when remove the bridge dev
+ net: core: Always propagate flag changes to interfaces
+ atm: idt77252: fix dev refcnt leak
+ ipv6: fix leaking uninitialized port number of offender sockaddr
+ net: clamp ->msg_namelen instead of returning an error
+ inet: fix addr_len/msg->msg_namelen assignment in recv_error and
rxpmtu functions
+ net: add BUG_ON if kernel advertises msg_namelen > sizeof(struct
sockaddr_storage)
+ net: rework recvmsg handler msg_name and msg_namelen logic
+ inet: prevent leakage of uninitialized memory to user in recv
syscalls
+ ipv4: fix possible seqlock deadlock
+ connector: improved unaligned access error fix
+ isdnloop: use strlcpy() instead of strcpy()
+ bonding: fix two race conditions in bond_store_updelay/downdelay
+ 6lowpan: Uncompression of traffic class field was incorrect
+ bonding: don't permit to use ARP monitoring in 802.3ad mode
+ random32: fix off-by-one in seeding requirement
+ ipv6: use rt6_get_dflt_router to get default router in
rt6_route_rcv
+ net: Fix "ip rule delete table 256"
+ um: add missing declaration of 'getrlimit()' and friends
+ sched: Avoid throttle_cfs_rq() racing with period_timer stopping
+ drivers/rtc/rtc-at91rm9200.c: correct alarm over day/month wrap
+ selinux: handle TCP SYN-ACK packets correctly in
selinux_ip_postroute()
+ selinux: handle TCP SYN-ACK packets correctly in
selinux_ip_output()
+ KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367)
+ KVM: Improve create VCPU parameter (CVE-2013-4587)
+ futex: fix handling of read-only-mapped hugepages
+ hwmon: Prevent some divide by zeros in FAN_TO_REG()
+ hwmon: (w83l768ng) Fix fan speed control range
+ hwmon: (w83l786ng) Fix fan speed control mode setting and
reporting
+ ARM: pxa: prevent PXA270 occasional reboot freezes
+ ARM: pxa: tosa: fix keys mapping
+ dm bufio: initialize read-only module parameters
+ x86, efi: Don't use (U)EFI time services on 32 bit
+ x86, build, icc: Remove uninitialized_var() from compiler-intel.h
+ dm table: fail dm_table_create on dm_round_up overflow
+ dm snapshot: avoid snapshot space leak on crash
+ ALSA: memalloc.h - fix wrong truncation of dma_addr_t
+ x86, build: Pass in additional -mno-mmx, -mno-sse options
+ ARM: 7913/1: fix framepointer check in unwind_frame
+ ARM: 7912/1: check stack pointer in get_wchan
+ crypto: scatterwalk - Use sg_chain_ptr on chain entries
+ drivers/char/i8k.c: add Dell XPLS L421X
+ usb: hub: Use correct reset for wedged USB3 devices that are
NOTATTACHED
+ USB: cdc-acm: Added support for the Lenovo RD02-D400 USB Modem
+ ASoC: wm8731: fix dsp mode configuration
+ powerpc/gpio: Fix the wrong GPIO input data on MPC8572/MPC8536
+ USB: pl2303: fixed handling of CS5 setting
+ USB: ftdi_sio: fixed handling of unsupported CSIZE setting
+ USB: mos7840: correct handling of CS5 setting
+ USB: spcp8x5: correct handling of CS5 setting
+ USB: option: support new huawei devices
+ USB: serial: option: blacklist interface 1 for Huawei E173s-6
+ enclosure: fix WARN_ON in dual path device removing
+ hpsa: return 0 from driver probe function on success, not 1
+ hpsa: do not discard scsi status on aborted commands
+ ARM: footbridge: fix VGA initialisation
+ net: update consumers of MSG_MORE to recognize
MSG_SENDPAGE_NOTLAST
+ net: smc91: fix crash regression on the versatile
+ saa7164: fix return value check in saa7164_initdev()
+ crypto: ccm - Fix handling of zero plaintext when computing mac
+ crypto: s390 - Fix aes-xts parameter corruption
+ crypto: scatterwalk - Set the chain pointer indication bit
+ crypto: authenc - Find proper IV address in ablkcipher callback
+ cpuset: Fix memory allocator deadlock
+ Staging: tidspbridge: disable driver
+ libsas: fix usage of ata_tf_to_fis
+ tracing: Allow events to have NULL strings
+ ALSA: hda/realtek - Set pcbeep amp for ALC668
+ ALSA: hda/realtek - Add support of ALC231 codec
+ irq: Enable all irqs unconditionally in irq_resume
+ can: sja1000: fix {pre,post}_irq() handling and IRQ handler
return value
+ Staging: zram: Fix memory leak by refcount mismatch
+ Staging: zram: Fix access of NULL pointer
+ usb: dwc3: fix implementation of endpoint wedge
+ usb: gadget: composite: reset delayed_status on reset_config
+ USB: serial: fix race in generic write
+ mac80211: don't attempt to reorder multicast frames
+ ASoC: wm8990: Mark the register map as dirty when powering down
+ powerpc/signals: Improved mark VSX not saved with small contexts
fix
+ ahci: add Marvell 9230 to the AHCI PCI device list
+ PCI: Define macro for Marvell vendor ID
+ ahci: add support for IBM Akebono platform device
+ configfs: fix race between dentry put and lookup
+ iscsi-target: chap auth shouldn't match username with trailing
garbage
+ iscsi-target: fix extract_param to handle buffer length corner
case
+ powerpc/signals: Mark VSX not saved with small contexts
+ powerpc/pseries: Duplicate dtl entries sometimes sent to userspace
+ PCI: Remove duplicate pci_disable_device() from
pcie_portdrv_remove()
+ NFSv4: Update list of irrecoverable errors on DELEGRETURN
+ NFSv4 wait on recovery for async session errors
+ avr32: fix out-of-range jump in large kernels
+ avr32: setup crt for early panic()
+ nfsd4: fix xdr decoding of large non-write compounds
+ nfsd: make sure to balance get/put_write_access
+ nfsd: split up nfsd_setattr
+ dm delay: fix a possible deadlock due to shared workqueue
+ setfacl removes part of ACL when setting POSIX ACLs to Samba
+ radeon: workaround pinning failure on low ram gpu
+ rtlwifi: rtl8192cu: Fix more pointer arithmetic errors
+ drm/i915: flush cursors harder
+ hwmon: (lm90) Fix max6696 alarm handling
+ ARM: integrator_cp: Set LCD{0,1} enable lines when turning on CLCD
+ ALSA: pcsp: Fix the order of input device unregistration
+ drm/nouveau: when bailing out of a pushbuf ioctl, do not remove
previous fence
+ ipc, msg: fix message length check for negative values
+ devpts: plug the memory leak in kill_sb
+ exec/ptrace: fix get_dumpable() incorrect tests
+ backlight: atmel-pwm-bl: fix gpio polarity in remove
+ backlight: atmel-pwm-bl: fix reported brightness
+ vsprintf: check real user/group id for %pK
+ cris: media platform drivers: fix build
+ x86/microcode/amd: Tone down printk(), don't treat a missing
firmware file as an error
+ ALSA: msnd: Avoid duplicated driver name
+ prism54: set netdev type to "wlan"
+ mtd: gpmi: fix kernel BUG due to racing DMA operations
+ mwifiex: correct packet length for packets from SDIO interface
+ rtlwifi: rtl8192de: Fix incorrect signal strength for
unassociated AP
+ rtlwifi: rtl8192cu: Fix incorrect signal strength for
unassociated AP
+ rtlwifi: rtl8192se: Fix incorrect signal strength for
unassociated AP
+ rtlwifi: Fix endian error in extracting packet type
+ rtlwifi: rtl8192se: Fix wrong assignment
+ IB/qib: Convert qib_user_sdma_pin_pages() to use
get_user_pages_fast()
+ IB/ipath: Convert ipath_user_sdma_pin_pages() to use
get_user_pages_fast()
+ SUNRPC: Fix a data corruption issue when retransmitting RPC calls
+ block: fix a probe argument to blk_register_region
+ loop: fix crash if blk_alloc_queue fails
+ blk-core: Fix memory corruption if blkcg_init_queue fails
+ block: fix race between request completion and timeout handling
+ x86/apic: Disable I/O APIC before shutdown of the local APIC
+ qeth: avoid buffer overflow in snmp ioctl
+ mtd: m25p80: fix allocation size
+ mtd: map: fixed bug in 64-bit systems
+ mtd: nand: hack ONFI for non-power-of-2 dimensions
+ ALSA: hda - Add support for CX20952
+ PM / hibernate: Avoid overflow in hibernate_preallocate_memory()
+ drm/ttm: Fix memory type compatibility check
+ audit: use nlmsg_len() to get message payload length
+ audit: fix info leak in AUDIT_GET requests
+ audit: printk USER_AVC messages when audit isn't enabled
+ crypto: s390 - Fix aes-cbc IV corruption
+ KVM: IOMMU: hva align mapping page size
+ ahci: Add Device IDs for Intel Wildcat Point-LP
+ ASoC: ak4642: prevent un-necessary changes to SG_SL1
+ ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()
+ dm mpath: fix race condition between multipath_dtr and
pg_init_done
+ can: c_can: Fix RX message handling, handle lost message before
EOB
+ dm: allocate buffer for messages with small number of arguments
using GFP_NOIO
+ powerpc/vio: use strcpy in modalias_show
+ powerpc/vio: Fix modalias_show return values
+ usb: wusbcore: change WA_SEGS_MAX to a legal value
+ usb: wusbcore: set the RPIPE wMaxPacketSize value correctly
+ ARM: sa11x0/assabet: ensure CS2 is configured appropriately
+ ALSA: 6fire: Fix probe of multiple cards
+ drivers/libata: Set max sector to 65535 for Slimtype DVD A
DS8A9SH drive
+ ahci: disabled FBS prior to issuing software reset
+ libata: Fix display of sata speed
+ USB：add new zte 3g-dongle's pid to option.c
+ alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't
exist
+ rt2x00: check if device is still available on rt2x00mac_flush()
+ rt2400pci: fix RSSI read
+ usb: hub: Clear Port Reset Change during init/resume
+ usb: Disable USB 2.0 Link PM before device reset.
+ USB: mos7840: fix tiocmget error handling
+ NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk()
+ selinux: correct locking in selinux_netlbl_socket_connect)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1266546
Title:
Precise update to 3.2.54 stable release
Status in “linux” package in Ubuntu:
Invalid
Status in “linux” source package in Precise:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from Linus' tree or in a minimally
backported form of that patch. The 3.2.54 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/
TEST CASE: TBD
The following patches are in the 3.2.54 stable release:
Linux 3.2.54
mmc: block: fix a bug of error handling in MMC driver
ftrace: Fix function graph with loading of modules
ftrace: Check module functions being traced on reload
ftrace: Create ftrace_hash_empty() helper routine
ftrace: Fix ftrace hash record update with notrace
net: flow_dissector: fail on evil iph->ihl
xfs: underflow bug in xfs_attrlist_by_handle()
aacraid: prevent invalid pointer dereference
libertas: potential oops in debugfs
ARM: 7527/1: uaccess: explicitly check __user pointer when
!CPU_USE_DOMAINS
KVM: Fix iommu map/unmap to handle memory slot moves
KVM: perform an invalid memslot step for gpa base change
crypto: ansi_cprng - Fix off by one error in non-block size
request
HID: multitouch: validate indexes details
{pktgen, xfrm} Update IPv4 header total len and checksum after
tranformation
ipv6: fix possible seqlock deadlock in ip6_finish_output2
inet: fix possible seqlock deadlocks
af_packet: block BH in prb_shutdown_retire_blk_timer()
packet: fix use after free race in send path when dev is released
bridge: flush br's address entry in fdb when remove the bridge dev
net: core: Always propagate flag changes to interfaces
atm: idt77252: fix dev refcnt leak
ipv6: fix leaking uninitialized port number of offender sockaddr
net: clamp ->msg_namelen instead of returning an error
inet: fix addr_len/msg->msg_namelen assignment in recv_error and
rxpmtu functions
net: add BUG_ON if kernel advertises msg_namelen > sizeof(struct
sockaddr_storage)
net: rework recvmsg handler msg_name and msg_namelen logic
inet: prevent leakage of uninitialized memory to user in recv
syscalls
ipv4: fix possible seqlock deadlock
connector: improved unaligned access error fix
isdnloop: use strlcpy() instead of strcpy()
bonding: fix two race conditions in bond_store_updelay/downdelay
6lowpan: Uncompression of traffic class field was incorrect
bonding: don't permit to use ARP monitoring in 802.3ad mode
random32: fix off-by-one in seeding requirement
ipv6: use rt6_get_dflt_router to get default router in
rt6_route_rcv
net: Fix "ip rule delete table 256"
um: add missing declaration of 'getrlimit()' and friends
sched: Avoid throttle_cfs_rq() racing with period_timer stopping
drivers/rtc/rtc-at91rm9200.c: correct alarm over day/month wrap
selinux: handle TCP SYN-ACK packets correctly in
selinux_ip_postroute()
selinux: handle TCP SYN-ACK packets correctly in
selinux_ip_output()
KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367)
KVM: Improve create VCPU parameter (CVE-2013-4587)
futex: fix handling of read-only-mapped hugepages
hwmon: Prevent some divide by zeros in FAN_TO_REG()
hwmon: (w83l768ng) Fix fan speed control range
hwmon: (w83l786ng) Fix fan speed control mode setting and
reporting
ARM: pxa: prevent PXA270 occasional reboot freezes
ARM: pxa: tosa: fix keys mapping
dm bufio: initialize read-only module parameters
x86, efi: Don't use (U)EFI time services on 32 bit
x86, build, icc: Remove uninitialized_var() from compiler-intel.h
dm table: fail dm_table_create on dm_round_up overflow
dm snapshot: avoid snapshot space leak on crash
ALSA: memalloc.h - fix wrong truncation of dma_addr_t
x86, build: Pass in additional -mno-mmx, -mno-sse options
ARM: 7913/1: fix framepointer check in unwind_frame
ARM: 7912/1: check stack pointer in get_wchan
crypto: scatterwalk - Use sg_chain_ptr on chain entries
drivers/char/i8k.c: add Dell XPLS L421X
usb: hub: Use correct reset for wedged USB3 devices that are
NOTATTACHED
USB: cdc-acm: Added support for the Lenovo RD02-D400 USB Modem
ASoC: wm8731: fix dsp mode configuration
powerpc/gpio: Fix the wrong GPIO input data on MPC8572/MPC8536
USB: pl2303: fixed handling of CS5 setting
USB: ftdi_sio: fixed handling of unsupported CSIZE setting
USB: mos7840: correct handling of CS5 setting
USB: spcp8x5: correct handling of CS5 setting
USB: option: support new huawei devices
USB: serial: option: blacklist interface 1 for Huawei E173s-6
enclosure: fix WARN_ON in dual path device removing
hpsa: return 0 from driver probe function on success, not 1
hpsa: do not discard scsi status on aborted commands
ARM: footbridge: fix VGA initialisation
net: update consumers of MSG_MORE to recognize
MSG_SENDPAGE_NOTLAST
net: smc91: fix crash regression on the versatile
saa7164: fix return value check in saa7164_initdev()
crypto: ccm - Fix handling of zero plaintext when computing mac
crypto: s390 - Fix aes-xts parameter corruption
crypto: scatterwalk - Set the chain pointer indication bit
crypto: authenc - Find proper IV address in ablkcipher callback
cpuset: Fix memory allocator deadlock
Staging: tidspbridge: disable driver
libsas: fix usage of ata_tf_to_fis
tracing: Allow events to have NULL strings
ALSA: hda/realtek - Set pcbeep amp for ALC668
ALSA: hda/realtek - Add support of ALC231 codec
irq: Enable all irqs unconditionally in irq_resume
can: sja1000: fix {pre,post}_irq() handling and IRQ handler
return value
Staging: zram: Fix memory leak by refcount mismatch
Staging: zram: Fix access of NULL pointer
usb: dwc3: fix implementation of endpoint wedge
usb: gadget: composite: reset delayed_status on reset_config
USB: serial: fix race in generic write
mac80211: don't attempt to reorder multicast frames
ASoC: wm8990: Mark the register map as dirty when powering down
powerpc/signals: Improved mark VSX not saved with small contexts
fix
ahci: add Marvell 9230 to the AHCI PCI device list
PCI: Define macro for Marvell vendor ID
ahci: add support for IBM Akebono platform device
configfs: fix race between dentry put and lookup
iscsi-target: chap auth shouldn't match username with trailing
garbage
iscsi-target: fix extract_param to handle buffer length corner
case
powerpc/signals: Mark VSX not saved with small contexts
powerpc/pseries: Duplicate dtl entries sometimes sent to userspace
PCI: Remove duplicate pci_disable_device() from
pcie_portdrv_remove()
NFSv4: Update list of irrecoverable errors on DELEGRETURN
NFSv4 wait on recovery for async session errors
avr32: fix out-of-range jump in large kernels
avr32: setup crt for early panic()
nfsd4: fix xdr decoding of large non-write compounds
nfsd: make sure to balance get/put_write_access
nfsd: split up nfsd_setattr
dm delay: fix a possible deadlock due to shared workqueue
setfacl removes part of ACL when setting POSIX ACLs to Samba
radeon: workaround pinning failure on low ram gpu
rtlwifi: rtl8192cu: Fix more pointer arithmetic errors
drm/i915: flush cursors harder
hwmon: (lm90) Fix max6696 alarm handling
ARM: integrator_cp: Set LCD{0,1} enable lines when turning on CLCD
ALSA: pcsp: Fix the order of input device unregistration
drm/nouveau: when bailing out of a pushbuf ioctl, do not remove
previous fence
ipc, msg: fix message length check for negative values
devpts: plug the memory leak in kill_sb
exec/ptrace: fix get_dumpable() incorrect tests
backlight: atmel-pwm-bl: fix gpio polarity in remove
backlight: atmel-pwm-bl: fix reported brightness
vsprintf: check real user/group id for %pK
cris: media platform drivers: fix build
x86/microcode/amd: Tone down printk(), don't treat a missing
firmware file as an error
ALSA: msnd: Avoid duplicated driver name
prism54: set netdev type to "wlan"
mtd: gpmi: fix kernel BUG due to racing DMA operations
mwifiex: correct packet length for packets from SDIO interface
rtlwifi: rtl8192de: Fix incorrect signal strength for
unassociated AP
rtlwifi: rtl8192cu: Fix incorrect signal strength for
unassociated AP
rtlwifi: rtl8192se: Fix incorrect signal strength for
unassociated AP
rtlwifi: Fix endian error in extracting packet type
rtlwifi: rtl8192se: Fix wrong assignment
IB/qib: Convert qib_user_sdma_pin_pages() to use
get_user_pages_fast()
IB/ipath: Convert ipath_user_sdma_pin_pages() to use
get_user_pages_fast()
SUNRPC: Fix a data corruption issue when retransmitting RPC calls
block: fix a probe argument to blk_register_region
loop: fix crash if blk_alloc_queue fails
blk-core: Fix memory corruption if blkcg_init_queue fails
block: fix race between request completion and timeout handling
x86/apic: Disable I/O APIC before shutdown of the local APIC
qeth: avoid buffer overflow in snmp ioctl
mtd: m25p80: fix allocation size
mtd: map: fixed bug in 64-bit systems
mtd: nand: hack ONFI for non-power-of-2 dimensions
ALSA: hda - Add support for CX20952
PM / hibernate: Avoid overflow in hibernate_preallocate_memory()
drm/ttm: Fix memory type compatibility check
audit: use nlmsg_len() to get message payload length
audit: fix info leak in AUDIT_GET requests
audit: printk USER_AVC messages when audit isn't enabled
crypto: s390 - Fix aes-cbc IV corruption
KVM: IOMMU: hva align mapping page size
ahci: Add Device IDs for Intel Wildcat Point-LP
ASoC: ak4642: prevent un-necessary changes to SG_SL1
ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()
dm mpath: fix race condition between multipath_dtr and
pg_init_done
can: c_can: Fix RX message handling, handle lost message before
EOB
dm: allocate buffer for messages with small number of arguments
using GFP_NOIO
powerpc/vio: use strcpy in modalias_show
powerpc/vio: Fix modalias_show return values
usb: wusbcore: change WA_SEGS_MAX to a legal value
usb: wusbcore: set the RPIPE wMaxPacketSize value correctly
ARM: sa11x0/assabet: ensure CS2 is configured appropriately
ALSA: 6fire: Fix probe of multiple cards
drivers/libata: Set max sector to 65535 for Slimtype DVD A
DS8A9SH drive
ahci: disabled FBS prior to issuing software reset
libata: Fix display of sata speed
USB：add new zte 3g-dongle's pid to option.c
alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't
exist
rt2x00: check if device is still available on rt2x00mac_flush()
rt2400pci: fix RSSI read
usb: hub: Clear Port Reset Change during init/resume
usb: Disable USB 2.0 Link PM before device reset.
USB: mos7840: fix tiocmget error handling
NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk()
selinux: correct locking in selinux_netlbl_socket_connect)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1266546/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
