kernel-packages team mailing list archive

[Launchpad Bug Tracker <1520200@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 3.2.0-96.136

---------------
linux (3.2.0-96.136) precise; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1521325

  [ Andy Whitcroft ]

  * [Packaging] control -- make element ordering deterministic
    - LP: #1516686
  * [Packaging] control -- prepare for new kernel-wedge semantics
    - LP: #1516686

  [ Upstream Kernel Changes ]

  * Revert "KVM: x86: vmx: avoid guest->host DOS by intercepting #AC"
  * Revert "KVM: MMU: fix validation of mmio page fault"
    - LP: #1520200
  * module: Fix locking in symbol_put_addr()
    - LP: #1520200
  * regmap: debugfs: Ensure we don't underflow when printing access masks
    - LP: #1520200
  * regmap: debugfs: Don't bother actually printing when calculating max
    length
    - LP: #1520200
  * ath9k: declare required extra tx headroom
    - LP: #1520200
  * m68k: Define asmlinkage_protect
    - LP: #1520200
  * x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when
    sanitizing map
    - LP: #1520200
  * UBI: Validate data_size
    - LP: #1520200
  * UBI: return ENOSPC if no enough space available
    - LP: #1520200
  * MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
    - LP: #1520200
  * x86/process: Add proper bound checks in 64bit get_wchan()
    - LP: #1520200
  * genirq: Fix race in register_irq_proc()
    - LP: #1520200
  * mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy
    a fault
    - LP: #1520200
  * Do not fall back to SMBWriteX in set_file_size error cases
    - LP: #1520200
  * md/raid0: update queue parameter in a safer location.
    - LP: #1520200
  * md/raid0: apply base queue limits *before* disk_stack_limits
    - LP: #1520200
  * clocksource: Fix abs() usage w/ 64bit values
    - LP: #1520200
  * iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
    - LP: #1520200
  * USB: Add reset-resume quirk for two Plantronics usb headphones.
    - LP: #1520200
  * usb: Add device quirk for Logitech PTZ cameras
    - LP: #1520200
  * tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
    - LP: #1520200
  * drivers/tty: require read access for controlling terminal
    - LP: #1520200
  * ppp: don't override sk->sk_state in pppoe_flush_dev()
    - LP: #1520200
  * iwlwifi: dvm: fix D3 firmware PN programming
    - LP: #1520200
  * ALSA: synth: Fix conflicting OSS device registration on AWE32
    - LP: #1520200
  * sched/core: Fix TASK_DEAD race in finish_task_switch()
    - LP: #1520200
  * 3w-9xxx: don't unmap bounce buffered commands
    - LP: #1520200
  * xen-blkfront: check for null drvdata in blkback_changed
    (XenbusStateClosing)
    - LP: #1520200
  * ALSA: hda - Fix inverted internal mic on Lenovo G50-80
    - LP: #1504778, #1520200
  * crypto: ahash - ensure statesize is non-zero
    - LP: #1520200
  * iommu/vt-d: fix range computation when making room for large pages
    - LP: #1520200
  * xhci: don't finish a TD if we get a short transfer event mid TD
    - LP: #1520200
  * xhci: handle no ping response error properly
    - LP: #1520200
  * xhci: Switch Intel Lynx Point LP ports to EHCI on shutdown.
    - LP: #1520200
  * xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
    - LP: #1520200
  * crypto: api - Only abort operations on fatal signal
    - LP: #1520200
  * ASoC: wm8904: Correct number of EQ registers
    - LP: #1520200
  * IB/cm: Fix rb-tree duplicate free and use-after-free
    - LP: #1520200
  * drm/nouveau/gem: return only valid domain when there's only one
    - LP: #1520200
  * powerpc/rtas: Validate rtas.entry before calling enter_rtas()
    - LP: #1520200
  * mm: make sendfile(2) killable
    - LP: #1520200
  * ppp: fix pppoe_dev deletion condition in pppoe_release()
    - LP: #1520200
  * dm btree remove: fix a bug when rebalancing nodes after removal
    - LP: #1520200
  * dm btree: fix leak of bufio-backed block in btree_split_beneath error
    path
    - LP: #1520200
  * md/raid1: ensure device failure recorded before write request returns.
    - LP: #1520200
  * md/raid1: don't clear bitmap bit when bad-block-list write fails.
    - LP: #1520200
  * md/raid10: ensure device failure recorded before write request returns.
    - LP: #1520200
  * md/raid10: don't clear bitmap bit when bad-block-list write fails.
    - LP: #1520200
  * mvsas: Fix NULL pointer dereference in mvs_slot_task_free
    - LP: #1520200
  * sched: declare pid_alive as inline
    - LP: #1520200
  * net: add length argument to skb_copy_and_csum_datagram_iovec
    - LP: #1520200
  * skbuff: Fix skb checksum flag on skb pull
    - LP: #1520200
  * skbuff: Fix skb checksum partial check.
    - LP: #1520200
  * ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
    - LP: #1520200
  * asix: Don't reset PHY on if_up for ASIX 88772
    - LP: #1520200
  * asix: Do full reset during ax88772_bind
    - LP: #1520200
  * Failing to send a CLOSE if file is opened WRONLY and server reboots on
    a 4.x mount
    - LP: #1520200
  * KVM: x86: work around infinite loop in microcode when #AC is delivered
    - LP: #1520200
  * KEYS: Fix race between key destruction and finding a keyring by name
    - LP: #1520200
  * KEYS: Fix crash when attempt to garbage collect an uninstantiated
    keyring
    - LP: #1520200
  * Linux 3.2.73
    - LP: #1520200
  * KVM: svm: unconditionally intercept #DB
    - LP: #1520184
    - CVE-2015-8104

 -- Brad Figg <brad.figg@xxxxxxxxxxxxx>  Mon, 30 Nov 2015 12:52:43 -0800

** Changed in: linux (Ubuntu Precise)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-8104

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1520200

Title:
  Precise update to 3.2.73 stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Precise:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from Linus' tree or in a minimally
         backported form of that patch. The 3.2.73 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches are in the 3.2.73 stable release:

  Revert "KVM: MMU: fix validation of mmio page fault"
  module: Fix locking in symbol_put_addr()
  regmap: debugfs: Ensure we don't underflow when printing access masks
  regmap: debugfs: Don't bother actually printing when calculating max length
  ath9k: declare required extra tx headroom
  m68k: Define asmlinkage_protect
  x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map
  UBI: Validate data_size
  UBI: return ENOSPC if no enough space available
  MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
  x86/process: Add proper bound checks in 64bit get_wchan()
  genirq: Fix race in register_irq_proc()
  mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault
  Do not fall back to SMBWriteX in set_file_size error cases
  md/raid0: update queue parameter in a safer location.
  md/raid0: apply base queue limits *before* disk_stack_limits
  clocksource: Fix abs() usage w/ 64bit values
  iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
  USB: Add reset-resume quirk for two Plantronics usb headphones.
  usb: Add device quirk for Logitech PTZ cameras
  tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
  drivers/tty: require read access for controlling terminal
  ppp: don't override sk->sk_state in pppoe_flush_dev()
  iwlwifi: dvm: fix D3 firmware PN programming
  ALSA: synth: Fix conflicting OSS device registration on AWE32
  sched/core: Fix TASK_DEAD race in finish_task_switch()
  3w-9xxx: don't unmap bounce buffered commands
  xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing)
  ALSA: hda - Fix inverted internal mic on Lenovo G50-80
  crypto: ahash - ensure statesize is non-zero
  iommu/vt-d: fix range computation when making room for large pages
  xhci: don't finish a TD if we get a short transfer event mid TD
  xhci: handle no ping response error properly
  xhci: Switch Intel Lynx Point LP ports to EHCI on shutdown.
  xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
  crypto: api - Only abort operations on fatal signal
  ASoC: wm8904: Correct number of EQ registers
  IB/cm: Fix rb-tree duplicate free and use-after-free
  drm/nouveau/gem: return only valid domain when there's only one
  powerpc/rtas: Validate rtas.entry before calling enter_rtas()
  mm: make sendfile(2) killable
  ppp: fix pppoe_dev deletion condition in pppoe_release()
  dm btree remove: fix a bug when rebalancing nodes after removal
  dm btree: fix leak of bufio-backed block in btree_split_beneath error path
  md/raid1: ensure device failure recorded before write request returns.
  md/raid1: don't clear bitmap bit when bad-block-list write fails.
  md/raid10: ensure device failure recorded before write request returns.
  md/raid10: don't clear bitmap bit when bad-block-list write fails.
  mvsas: Fix NULL pointer dereference in mvs_slot_task_free
  sched: declare pid_alive as inline
  net: add length argument to skb_copy_and_csum_datagram_iovec
  skbuff: Fix skb checksum flag on skb pull
  skbuff: Fix skb checksum partial check.
  ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
  asix: Don't reset PHY on if_up for ASIX 88772
  asix: Do full reset during ax88772_bind
  Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount
  KVM: x86: work around infinite loop in microcode when #AC is delivered
  KEYS: Fix race between key destruction and finding a keyring by name
  KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
  Linux 3.2.73

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1520200/+subscriptions