kernel-packages team mailing list archive

[Mathew Hodson <mathew.hodson@xxxxxxxxx>]

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-0155

** CVE removed: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-4508

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1356913

Title:
  Trusty update to v3.13.11.6 stable release

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Trusty:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from Linus' tree or in a minimally
         backported form of that patch. The v3.13.11.6 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches are in the v3.13.11.6 stable release:
  Linux 3.13.11.6
  x86/xen: no need to explicitly register an NMI callback
  ipv4: fix buffer overflow in ip_options_compile()
  dns_resolver: Null-terminate the right string
  dns_resolver: assure that dns_query() result is null-terminated
  net: huawei_cdc_ncm: add "subclass 3" devices
  sunvnet: clean up objects created in vnet_new() on vnet_exit()
  net: pppoe: use correct channel MTU when using Multilink PPP
  net: sctp: fix information leaks in ulpevent layer
  tipc: clear 'next'-pointer of message fragments before reassembly
  be2net: set EQ DB clear-intr bit in be_open()
  netlink: Fix handling of error from netlink_dump().
  appletalk: Fix socket referencing in skb
  tcp: fix false undo corner cases
  igmp: fix the problem when mc leave group
  net: Fix NETDEV_CHANGE notifier usage causing spurious arp flush
  net: qmi_wwan: add two Sierra Wireless/Netgear devices
  net: qmi_wwan: Add ID for Telewell TW-LTE 4G v2
  ipv4: icmp: Fix pMTU handling for rare case
  tcp: Fix divide by zero when pushing during tcp-repair
  bnx2x: fix possible panic under memory stress
  vlan: free percpu stats in device destructor
  net: fix sparse warning in sk_dst_set()
  ipv4: irq safe sk_dst_[re]set() and ipv4_sk_update_pmtu() fix
  ipv4: fix dst race in sk_dst_get()
  net: huawei_cdc_ncm: increase command buffer size
  8021q: fix a potential memory leak
  net: sctp: check proc_dointvec result in proc_sctp_do_auth
  tcp: fix tcp_match_skb_to_sack() for unaligned SACK at end of an skb
  net: sctp: propagate sysctl errors from proc_do* properly
  slcan: Port write_wakeup deadlock fix from slip
  slip: Fix deadlock in write_wakeup
  ip_tunnel: fix ip_tunnel_lookup
  udp: ipv4: do not waste time in __udp4_lib_mcast_demux_lookup
  vxlan: use dev->needed_headroom instead of dev->hard_header_len
  rtnetlink: fix userspace API breakage for iproute2 < v3.9.0
  ipv4: fix a race in ip4_datagram_release_cb()
  sfc: PIO:Restrict to 64bit arch and use 64-bit writes.
  ipip, sit: fix ipv4_{update_pmtu,redirect} calls
  net: force a list_del() in unregister_netdevice_many()
  net: qmi_wwan: add Olivetti Olicard modems
  net: filter: fix sparc32 typo
  net: filter: fix typo in sparc BPF JIT
  sh_eth: fix SH7619/771x support
  sh_eth: use RNC mode for packet reception
  tcp: fix cwnd undo on DSACK in F-RTO
  team: fix mtu setting
  net: fix inet_getid() and ipv6_select_ident() bugs
  net: tunnels - enable module autoloading
  bridge: Prevent insertion of FDB entry with disallowed vlan
  netlink: rate-limit leftover bytes warning and print process name
  qlcnic: info leak in qlcnic_dcb_peer_app_info()
  dm cache: fix race affecting dirty block count
  dm bufio: fully initialize shrinker
  timer: Fix lock inversion between hrtimer_bases.lock and scheduler locks
  printk: rename printk_sched to printk_deferred
  crypto: af_alg - properly label AF_ALG socket
  memcg: oom_notify use-after-free fix
  rapidio/tsi721_dma: fix failure to obtain transaction descriptor
  mm, thp: do not allow thp faults to avoid cpuset restrictions
  mm/page-writeback.c: fix divide by zero in bdi_dirty_limits()
  net: sendmsg: fix NULL pointer dereference
  ARM: fix alignment of keystone page table fixup
  crypto: arm-aes - fix encryption of unaligned data
  can: c_can_platform: Fix raminit, use devm_ioremap() instead of devm_ioremap_resource()
  staging: vt6655: Fix disassociated messages every 10 seconds
  staging: vt6655: Fix Warning on boot handle_irq_event_percpu.
  sched_clock: Avoid corrupting hrtimer tree during suspend
  ath9k: fix aggregation session lockup
  powerpc/perf: Fix MMCR2 handling for EBB
  iio:bma180: Missing check for frequency fractional part
  iio:bma180: Fix scale factors to report correct acceleration units
  iio: buffer: Fix demux table creation
  cfg80211: fix mic_failure tracing
  scsi: handle flush errors properly
  Revert "mac80211: move "bufferable MMPDU" check to fix AP mode scan"
  Fix gcc-4.9.0 miscompilation of load_balance()  in scheduler
  parport: fix menu breakage
  drm/radeon: fix cut and paste issue for hawaii.
  parisc: Remove SA_RESTORER define
  hwmon: (smsc47m192) Fix temperature limit and vrm write operations
  fs: umount on symlink leaks mnt count
  coredump: fix the setting of PF_DUMPCORE
  drm/radeon: fix irq ring buffer overflow handling
  libata: introduce ata_host->n_tags to avoid oops on SAS controllers
  drm/i915: Reorder the semaphore deadlock check, again
  tracing: Fix wraparound problems in "uptime" trace clock
  Input: fix defuzzing logic
  ahci: add support for the Promise FastTrak TX8660 SATA HBA (ahci mode)
  s390/ptrace: fix PSW mask check
  [media] gspca_pac7302: Add new usb-id for Genius i-Look 317
  [media] tda10071: force modulation to QPSK on DVB-S
  libata: support the ata host which implements a queue depth less than 32
  block: provide compat ioctl for BLKZEROOUT
  blkcg: don't call into policy draining if root_blkg is already gone
  block: don't assume last put of shared tags is for the host
  [media] hdpvr: fix two audio bugs
  [media] media: v4l2-core: v4l2-dv-timings.c: Cleaning up code wrong value used in aspect ratio
  xtensa: add fixup for double exception raised in window overflow
  slab_common: fix the check for duplicate slab names
  irqchip: gic: Fix core ID calculation when topology is read from DT
  usb: chipidea: udc: Disable auto ZLP generation on ep0
  drm/radeon: set default bl level to something reasonable
  drm/radeon: avoid leaking edid data
  cpufreq: move policy kobj to policy->cpu at resume
  hwmon: (adt7470) Fix writes to temperature limit registers
  drm/qxl: return IRQ_NONE if it was not our irq
  locking/mutex: Disable optimistic spinning on some architectures
  sched: Fix possible divide by zero in avg_atom() calculation
  ring-buffer: Fix polling on trace_pipe
  quota: missing lock in dqcache_shrink_scan()
  dm cache metadata: do not allow the data block size to change
  dm thin metadata: do not allow the data block size to change
  tracing: Add TRACE_ITER_PRINTK flag check in __trace_puts/__trace_bputs
  tracing: Fix graph tracer with stack tracer on other archs
  tracing: Add ftrace_trace_stack into __trace_puts/__trace_bputs
  ALSA: hda - Fix broken PM due to incomplete i915 initialization
  PM / sleep: Fix request_firmware() error at resume
  hwmon: (da9055) Don't use dash in the name attribute
  hwmon: (da9052) Don't use dash in the name attribute
  aio: protect reqs_available updates from changes in interrupt handlers
  platform_get_irq: Revert to platform_get_resource if of_irq_get fails
  of/irq: do irq resolution in platform_get_irq_byname()
  iio:core: Handle error when mask type is not separate
  igb: do a reset on SR-IOV re-init if device is down
  x86/efi: Include a .bss section within the PE/COFF headers
  igb: Workaround for i210 Errata 25: Slow System Clock
  net: mvneta: Fix big endian issue in mvneta_txq_desc_csum()
  net: mvneta: fix operation in 10 Mbit/s mode
  irqchip: gic: Add support for cortex a7 compatible string
  alarmtimer: Fix bug where relative alarm timers were treated as absolute
  fuse: handle large user and group ID
  fuse: ignore entry-timeout on LOOKUP_REVAL
  fuse: timeout comparison fix
  mtd: devices: elm: fix elm_context_save() and elm_context_restore() functions
  xen/balloon: set ballooned out pages as invalid in p2m
  iwlwifi: mvm: disable CTS to Self
  iwlwifi: dvm: don't enable CTS to self
  xen/manage: fix potential deadlock when resuming the console
  perf: Do not allow optimized switch for non-cloned events
  perf/x86/intel: ignore CondChgd bit to avoid false NMI handling
  x86, tsc: Fix cpufreq lockup
  mwifiex: fix Tx timeout issue
  iwlwifi: update the 7265 series HW IDs
  Bluetooth: Ignore H5 non-link packets in non-active state
  clk: spear3xx: Use proper control register offset
  parisc: drop unused defines and header includes
  parisc: fix fanotify_mark() syscall on 32bit compat kernel
  parisc: add serial ports of C8000/1GHz machine to hardware database
  ext4: fix a potential deadlock in __ext4_es_shrink()
  phy: core: Fix error path in phy_create()
  USB: serial: ftdi_sio: Add Infineon Triboard
  powerpc/perf: Never program book3s PMCs with values >= 0x80000000
  powerpc/perf: Clear MMCR2 when enabling PMU
  powerpc/perf: Add PPMU_ARCH_207S define
  drm/radeon/dpm: Reenabling SS on Cayman
  drm/radeon: fix typo in ci_stop_dpm()
  drm/radeon: fix typo in golden register setup on evergreen
  drm/radeon/dp: return -EIO for flags not zero case
  dm io: fix a race condition in the wake up code for sync_io
  dm: allocate a special workqueue for deferred device removal
  crypto: caam - fix memleak in caam_jr module
  USB: ftdi_sio: Add extra PID.
  Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code
  drm/i915: Don't clobber the GTT when it's within stolen memory
  cpufreq: Makefile: fix compilation for davinci platform
  iio: ti_am335x_adc: Fix: Use same step id at FIFOs both ends
  arm64: implement TASK_SIZE_OF
  hwmon: (emc2103) Clamp limits instead of bailing out
  workqueue: zero cpumask of wq_numa_possible_cpumask on init
  hwmon: (adm1031) Fix writes to limit registers
  ACPI / battery: Retry to get battery information if failed during probing
  ACPI / EC: Fix race condition in ec_transaction_completed()
  ACPI / EC: Remove duplicated ec_wait_ibf0() waiter
  ACPI / EC: Add asynchronous command byte write support
  ACPI / EC: Avoid race condition related to advance_transaction()
  usb: option: Add ID for Telewell TW-LTE 4G v2
  USB: cp210x: add support for Corsair usb dongle
  intel_pstate: Set CPU number before accessing MSRs
  intel_pstate: don't touch turbo bit if turbo disabled or unavailable.
  intel_pstate: Fix setting VID
  Revert "ACPI / AC: Remove AC's proc directory."
  ext4: disable synchronous transaction batching if max_batch_time==0
  ext4: clarify ext4_error message in ext4_mb_generate_buddy_error()
  ext4: clarify error count warning messages
  ext4: fix unjournalled bg descriptor while initializing inode bitmap
  hwmon: (adm1021) Fix cache problem when writing temperature limits
  hwmon: (adm1029) Ensure the fan_div cache is updated in set_fan_div
  hwmon: (amc6821) Fix permissions for temp2_input
  clk: s2mps11: Fix double free corruption during driver unbind
  thermal: hwmon: Make the check for critical temp valid consistent
  crypto: sha512_ssse3 - fix byte count to bit count conversion
  cpuset,mempolicy: fix sleeping function called from invalid context
  workqueue: fix dev_set_uevent_suppress() imbalance
  arm64: mm: Make icache synchronisation logic huge page aware
  lz4: add overrun checks to lz4_uncompress_unknownoutputsize()
  fs/seq_file: fallback to vmalloc allocation
  nick kvfree() from apparmor
  /proc/stat: convert to single_open_size()
  mm: page_alloc: fix CMA area initialisation when pageblock > MAX_ORDER
  drm/vmwgfx: Fix incorrect write to read-only register v2:
  md: flush writes before starting a recovery.
  drm/radeon/cik: fix typo in EOP packet
  usb: chipidea: udc: delete td from req's td list at ep_dequeue
  tracing: Remove ftrace_stop/start() from reading the trace file
  drm/radeon/dpm: fix vddci setup typo on cayman
  drm/radeon/dpm: fix typo in vddci setup for eg/btc
  usb-storage/SCSI: Add broken_fua blacklist flag
  tools: ffs-test: fix header values endianess
  nfsd: fix rare symlink decoding bug
  usb: musb: Ensure that cppi41 timer gets armed on premature DMA TX irq
  usb: musb: Fix panic upon musb_am335x module removal
  ext4: Fix hole punching for files with indirect blocks
  MIPS: KVM: Fix memory leak on VCPU
  virtio-scsi: fix various bad behavior on aborted requests
  virtio-scsi: avoid cancelling uninitialized work items
  ibmvscsi: Add memory barriers for send / receive
  ibmvscsi: Abort init sequence during error recovery
  xhci: Fix runtime suspended xhci from blocking system suspend.
  xhci: clear root port wake on bits if controller isn't wake-up capable
  xhci: correct burst count field for isoc transfers on 1.0 xhci hosts
  xhci: Use correct SLOT ID when handling a reset device command
  scsi_error: fix invalid setting of host byte
  usb: option: add/modify Olivetti Olicard modems
  USB: ftdi_sio: fix null deref at port probe
  USB: option: add device ID for SpeedUp SU9800 usb 3g modem
  irqchip: spear_shirq: Fix interrupt offset
  iio: of_iio_channel_get_by_name() returns non-null pointers for error legs
  staging: iio/ad7291: fix error code in ad7291_probe()
  usb: gadget: f_fs: fix NULL pointer dereference when there are no strings
  usb: musb: ux500: don't propagate the OF node
  KVM: x86: preserve the high 32-bits of the PAT register
  KVM: x86: Increase the number of fixed MTRR regs to 10
  ARM: OMAP2+: Fix parser-bug in platform muxing code
  ext4: Fix buffer double free in ext4_alloc_branch()
  x86/xen: safely map and unmap grant frames when in atomic context
  ALSA: hda - verify pin:cvt connection on preparing a stream for Intel HDMI codec
  ALSA: hda - verify pin:converter connection on unsol event for HSW and VLV
  ipvs: Fix panic due to non-linear skb
  shmem: fix splicing from a hole while it's punched
  shmem: fix faulting into a hole, not taking i_mutex
  shmem: fix faulting into a hole while it's punched
  x86_32, entry: Store badsys error code in %eax
  mm: hugetlb: fix copy_hugetlb_page_range()
  sctp: Fix sk_ack_backlog wrap-around problem
  target: Explicitly clear ramdisk_mcp backend pages
  KVM: ioapic: fix assignment of ioapic->rtc_status.pending_eoi (CVE-2014-0155)
  ACPI / PAD: call schedule() when need_resched() is true

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1356913/+subscriptions