kernel-packages team mailing list archive

[Launchpad Bug Tracker <1519106@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 3.19.0-41.46

---------------
linux (3.19.0-41.46) vivid; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1522918

  [ Upstream Kernel Changes ]

  * Revert "dm: fix AB-BA deadlock in __dm_destroy()"
    - LP: #1522766
  * dm: fix AB-BA deadlock in __dm_destroy()
    - LP: #1522766

linux (3.19.0-40.45) vivid; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1522786

  [ Andy Whitcroft ]

  * [Packaging] control -- prepare for new kernel-wedge semantics
    - LP: #1516686
  * [Debian] rebuild should only trigger for non-linux packages
    - LP: #1498862, #1516686
  * [Tests] gcc-multilib does not exist on ppc64el
    - LP: #1515541

  [ Joseph Salisbury ]

  * SAUCE: scsi_sysfs: protect against double execution of
    __scsi_remove_device()
    - LP: #1509029

  [ Luis Henriques ]

  * [Config] updateconfigs after 3.19.8-ckt10 stable update

  [ Upstream Kernel Changes ]

  * Revert "ARM64: unwind: Fix PC calculation"
    - LP: #1520309
  * Revert "md: allow a partially recovered device to be hot-added to an
    array."
    - LP: #1520309
  * tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
    - LP: #1512815
  * HID: rmi: Print the firmware id of the touchpad
    - LP: #1515503
  * HID: rmi: Add functions for writing to registers
    - LP: #1515503
  * HID: rmi: Disable scanning if the device is not a wake source
    - LP: #1515503
  * HID: rmi: Set F01 interrupt enable register when not set
    - LP: #1515503
  * be2net: log link status
    - LP: #1513980
  * xhci: Workaround to get Intel xHCI reset working more reliably
  * Drivers: hv: hv_balloon: refuse to balloon below the floor
    - LP: #1294283
  * Drivers: hv: hv_balloon: survive ballooning request with num_pages=0
    - LP: #1294283
  * Drivers: hv: hv_balloon: correctly handle val.freeram<num_pages case
    - LP: #1294283
  * Drivers: hv: hv_balloon: correctly handle num_pages>INT_MAX case
    - LP: #1294283
  * Drivers: hv: balloon: check if ha_region_mutex was acquired in
    MEM_CANCEL_ONLINE case
    - LP: #1294283
  * mm: meminit: make __early_pfn_to_nid SMP-safe and introduce
    meminit_pfn_in_nid
    - LP: #1294283
  * mm: meminit: inline some helper functions
    - LP: #1294283
  * mm, meminit: allow early_pfn_to_nid to be used during runtime
    - LP: #1294283
  * mm: initialize hotplugged pages as reserved
    - LP: #1294283
  * gut proc_register() a bit
    - LP: #1519106
  * arm: factor out mmap ASLR into mmap_rnd
    - LP: #1518483
  * x86: standardize mmap_rnd() usage
    - LP: #1518483
  * arm64: standardize mmap_rnd() usage
    - LP: #1518483
  * mips: extract logic for mmap_rnd()
    - LP: #1518483
  * powerpc: standardize mmap_rnd() usage
    - LP: #1518483
  * s390: standardize mmap_rnd() usage
    - LP: #1518483
  * mm: expose arch_mmap_rnd when available
    - LP: #1518483
  * s390: redefine randomize_et_dyn for ELF_ET_DYN_BASE
    - LP: #1518483
  * mm: split ET_DYN ASLR from mmap ASLR
    - LP: #1518483
  * mm: fold arch_randomize_brk into ARCH_HAS_ELF_RANDOMIZE
    - LP: #1518483
  * isdn_ppp: Add checks for allocation failure in isdn_ppp_open()
    - LP: #1520309
  * ppp, slip: Validate VJ compression slot parameters completely
    - LP: #1520309
  * [media] media/vivid-osd: fix info leak in ioctl
    - LP: #1520309
  * staging/dgnc: fix info leak in ioctl
    - LP: #1520309
  * tools lib traceevent: Fix string handling in heterogeneous arch
    environments
    - LP: #1520309
  * perf tools: Fix copying of /proc/kcore
    - LP: #1520309
  * m68k: Define asmlinkage_protect
    - LP: #1520309
  * UBI: Validate data_size
    - LP: #1520309
  * UBI: return ENOSPC if no enough space available
    - LP: #1520309
  * drm/radeon: Restore LCD backlight level on resume (>= R5xx)
    - LP: #1520309
  * drm/radeon: move bl encoder assignment into bl init
    - LP: #1520309
  * drm/radeon: fix dpms when driver backlight control is disabled
    - LP: #1520309
  * MIPS: dma-default: Fix 32-bit fall back to GFP_DMA
    - LP: #1520309
  * MIPS: CPS: Stop dangling delay slot from has_mt.
    - LP: #1520309
  * MIPS: CPS: Don't include MT code in non-MT kernels.
    - LP: #1520309
  * MIPS: CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT
    - LP: #1520309
  * x86/asm/entry: Create and use a 'TOP_OF_KERNEL_STACK_PADDING' macro
    - LP: #1520309
  * x86/process: Add proper bound checks in 64bit get_wchan()
    - LP: #1520309
  * drm/qxl: recreate the primary surface when the bo is not primary
    - LP: #1520309
  * genirq: Fix race in register_irq_proc()
    - LP: #1520309
  * x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at
    runtime, instead of top-down
    - LP: #1520309
  * KVM: nSVM: Check for NRIPS support before updating control field
    - LP: #1520309
  * Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS
    - LP: #1520309
  * mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy
    a fault
    - LP: #1520309
  * drm/dp/mst: fixup handling hotplug on port removal.
    - LP: #1520309
  * drm/dp/mst: drop cancel work sync in the mstb destroy path (v2)
    - LP: #1520309
  * x86/kexec: Fix kexec crash in syscall kexec_file_load()
    - LP: #1520309
  * x86/mm: Set NX on gap between __ex_table and rodata
    - LP: #1520309
  * md/raid0: update queue parameter in a safer location.
    - LP: #1520309
  * md/raid0: apply base queue limits *before* disk_stack_limits
    - LP: #1520309
  * arm64: ftrace: fix function_graph tracer panic
    - LP: #1520309
  * clocksource: Fix abs() usage w/ 64bit values
    - LP: #1520309
  * dmaengine: dw: properly read DWC_PARAMS register
    - LP: #1520309
  * mm/slab: fix unexpected index mapping result of
    kmalloc_size(INDEX_NODE+1)
    - LP: #1520309
  * regmap: debugfs: Ensure we don't underflow when printing access masks
    - LP: #1520309
  * regmap: debugfs: Don't bother actually printing when calculating max
    length
    - LP: #1520309
  * mtd: nand: sunxi: fix OOB handling in ->write_xxx() functions
    - LP: #1520309
  * mtd: nand: sunxi: fix sunxi_nand_chips_cleanup()
    - LP: #1520309
  * ARM: dts: fix usb pin control for imx-rex dts
    - LP: #1520309
  * ASoC: db1200: Fix DAI link format for db1300 and db1550
    - LP: #1520309
  * x86/xen: Support kexec/kdump in HVM guests by doing a soft reset
    - LP: #1520309
  * x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when
    sanitizing map
    - LP: #1520309
  * s390/boot/decompression: disable floating point in decompressor
    - LP: #1520309
  * svcrdma: handle rdma read with a non-zero initial page offset
    - LP: #1520309
  * ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe
    - LP: #1520309
  * dm: fix AB-BA deadlock in __dm_destroy()
    - LP: #1520309
  * [SMB3] Do not fall back to SMBWriteX in set_file_size error cases
    - LP: #1520309
  * clk: ti: fix dual-registration of uart4_ick
    - LP: #1520309
  * ASoC: dwc: correct irq clear method
    - LP: #1520309
  * dm raid: fix round up of default region size
    - LP: #1520309
  * ALSA: hda: Add dock support for ThinkPad T550
    - LP: #1520309
  * ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1
    - LP: #1520309
  * USB: Add reset-resume quirk for two Plantronics usb headphones.
    - LP: #1520309
  * usb: Add device quirk for Logitech PTZ cameras
    - LP: #1520309
  * serial: 8250: add uart_config entry for PORT_RT2880
    - LP: #1520309
  * drivers/tty: require read access for controlling terminal
    - LP: #1520309
  * staging: speakup: fix speakup-r regression
    - LP: #1520309
  * ALSA: synth: Fix conflicting OSS device registration on AWE32
    - LP: #1520309
  * arm64: readahead: fault retry breaks mmap file read random detection
    - LP: #1520309
  * ASoC: tas2552: Correct the Speaker Driver Playback Volume (PGA_GAIN)
    - LP: #1520309
  * ASoC: tas2552: fix dBscale-min declaration
    - LP: #1520309
  * sched/core: Fix TASK_DEAD race in finish_task_switch()
    - LP: #1520309
  * dm cache: fix NULL pointer when switching from cleaner policy
    - LP: #1520309
  * 3w-9xxx: don't unmap bounce buffered commands
    - LP: #1520309
  * workqueue: make sure delayed work run in local cpu
    - LP: #1520309
  * drm/radeon: add pm sysfs files late
    - LP: #1520309
  * cxl: Fix number of allocated pages in SPA
    - LP: #1520309
  * crypto: sparc - initialize blkcipher.ivsize
    - LP: #1520309
  * drm: Fix locking for sysfs dpms file
    - LP: #1520309
  * drm/nouveau/fbcon: take runpm reference when userspace has an open fd
    - LP: #1520309
  * crypto: ahash - ensure statesize is non-zero
    - LP: #1520309
  * dm thin: fix missing pool reference count decrement in pool_ctr error
    path
    - LP: #1520309
  * btrfs: check unsupported filters in balance arguments
    - LP: #1520309
  * btrfs: fix use after free iterating extrefs
    - LP: #1520309
  * drm/dp/mst: make mst i2c transfer code more robust.
    - LP: #1520309
  * i2c: rcar: enable RuntimePM before registering to the core
    - LP: #1520309
  * i2c: s3c2410: enable RuntimePM before registering to the core
    - LP: #1520309
  * i2c: designware-platdrv: enable RuntimePM before registering to the
    core
    - LP: #1520309
  * memcg: convert threshold to bytes
    - LP: #1520309
  * i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348
    - LP: #1520309
  * pinctrl: imx25: ensure that a pin with id i is at position i in the
    info array
    - LP: #1520309
  * l2tp: protect tunnel->del_work by ref_count
    - LP: #1520309
  * af_unix: Convert the unix_sk macro to an inline function for type
    safety
    - LP: #1520309
  * af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag
    - LP: #1520309
  * net/unix: fix logic about sk_peek_offset
    - LP: #1520309
  * skbuff: Fix skb checksum flag on skb pull
    - LP: #1520309
  * skbuff: Fix skb checksum partial check.
    - LP: #1520309
  * net: add pfmemalloc check in sk_add_backlog()
    - LP: #1520309
  * ppp: don't override sk->sk_state in pppoe_flush_dev()
    - LP: #1520309
  * ovs: do not allocate memory from offline numa node
    - LP: #1520309
  * ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
    - LP: #1520309
  * netlink: Trim skb to alloc size to avoid MSG_TRUNC
    - LP: #1520309
  * ath9k: declare required extra tx headroom
    - LP: #1520309
  * iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
    - LP: #1520309
  * iwlwifi: dvm: fix D3 firmware PN programming
    - LP: #1520309
  * iwlwifi: mvm: fix D3 firmware PN programming
    - LP: #1520309
  * iwlwifi: mvm: clear csa countdown when AP is stopped
    - LP: #1520309
  * iwlwifi: fix firmware filename for 3160
    - LP: #1520309
  * iwlwifi: mvm: init card correctly on ctkill exit check
    - LP: #1520309
  * ARM: orion: Fix DSA platform device after mvmdio conversion
    - LP: #1520309
  * xen-blkfront: check for null drvdata in blkback_changed
    (XenbusStateClosing)
    - LP: #1520309
  * iio: mxs-lradc: Fix temperature offset
    - LP: #1520309
  * ARM: dts: Fix audio card detection on Peach boards
    - LP: #1520309
  * ALSA: hda - Fix inverted internal mic on Lenovo G50-80
    - LP: #1504778, #1520309
  * drm/i915: Flush pipecontrol post-sync writes
    - LP: #1520309
  * drm/i915: Restore lost DPLL register write on gen2-4
    - LP: #1520309
  * drm/i915: Deny wrapping an userptr into a framebuffer
    - LP: #1520309
  * iommu/vt-d: fix range computation when making room for large pages
    - LP: #1520309
  * x86/efi: Fix multiple GOP device support
    - LP: #1520309
  * ASoC: Add info callback for SX_TLV controls
    - LP: #1520309
  * xhci: don't finish a TD if we get a short transfer event mid TD
    - LP: #1520309
  * xhci: handle no ping response error properly
    - LP: #1520309
  * xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
    - LP: #1520309
  * ASoC: wm8904: Correct number of EQ registers
    - LP: #1520309
  * drm: fix mutex leak in drm_dp_get_mst_branch_device
    - LP: #1520309
  * drm/nouveau/gem: return only valid domain when there's only one
    - LP: #1520309
  * powerpc/rtas: Validate rtas.entry before calling enter_rtas()
    - LP: #1520309
  * [media] si2168: Bounds check firmware
    - LP: #1520309
  * mm: make sendfile(2) killable
    - LP: #1520309
  * fault-inject: fix inverted interval/probability values in printk
    - LP: #1520309
  * rbd: fix double free on rbd_dev->header_name
    - LP: #1520309
  * rbd: don't leak parent_spec in rbd_dev_probe_parent()
    - LP: #1520309
  * rbd: prevent kernel stack blow up on rbd map
    - LP: #1520309
  * dm btree remove: fix a bug when rebalancing nodes after removal
    - LP: #1520309
  * dm btree: fix leak of bufio-backed block in btree_split_beneath error
    path
    - LP: #1520309
  * bpf: fix panic in SO_GET_FILTER with native ebpf programs
    - LP: #1520309
  * ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on
    - LP: #1520309
  * IB/cm: Fix rb-tree duplicate free and use-after-free
    - LP: #1520309
  * module: Fix locking in symbol_put_addr()
    - LP: #1520309
  * PCI: Prevent out of bounds access in numa_node override
    - LP: #1520309
  * ovl: use O_LARGEFILE in ovl_copy_up()
    - LP: #1520309
  * ovl: fix dentry reference leak
    - LP: #1520309
  * crypto: api - Only abort operations on fatal signal
    - LP: #1520309
  * md/raid1: submit_bio_wait() returns 0 on success
    - LP: #1520309
  * md/raid10: submit_bio_wait() returns 0 on success
    - LP: #1520309
  * iommu/amd: Don't clear DTE flags when modifying it
    - LP: #1520309
  * i2c: mv64xxx: really allow I2C offloading
    - LP: #1520309
  * drm/radeon: don't try to recreate sysfs entries on resume
    - LP: #1520309
  * mvsas: Fix NULL pointer dereference in mvs_slot_task_free
    - LP: #1520309
  * arm64: compat: fix stxr failure case in SWP emulation
    - LP: #1520309
  * rbd: require stable pages if message data CRCs are enabled
    - LP: #1520309
  * md/raid5: fix locking in handle_stripe_clean_event()
    - LP: #1520309
  * net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes
    - LP: #1520309
  * ipv6: Fix IPsec pre-encap fragmentation check
    - LP: #1520309
  * ipv6: gre: support SIT encapsulation
    - LP: #1520309
  * ppp: fix pppoe_dev deletion condition in pppoe_release()
    - LP: #1520309
  * Linux 3.19.8-ckt10
    - LP: #1520309
  * megaraid_sas: Do not use PAGE_SIZE for max_sectors
    - LP: #1475166
  * KVM: svm: unconditionally intercept #DB
    - LP: #1520184
    - CVE-2015-8104

 -- Luis Henriques <luis.henriques@xxxxxxxxxxxxx>  Fri, 04 Dec 2015
17:31:09 +0000

** Changed in: linux (Ubuntu Vivid)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-8104

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1519106

Title:
  Unprivileged lxc container fails to start due to error mounting proc

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Vivid:
  Fix Released

Bug description:
  == SRU Justification ==

  Impact: Unprivileged lxc containers fail to start whenever a
  filesystem is mounted on /proc/fs/nfsd.

  Fix: Cherry pick upstream commit
  d443b9fd56e85c0e58d10b75cf5eb38e0b2c4c02.

  Regression Potential: This commit modifies proc_register so that
  callers must set the proc_fops and/or proc_iops before calling rather
  that proc_register assigning them based on the type of inode passed.
  All call sites in 3.19 match exactly with those upstream at the time
  the patch was merged, except for proc_create_mount_point which is the
  call site causing this issue. Which is to say that there is no
  functional change for any proc inodes except for the ones which can
  cause this problem, therefore there should be little potential for
  regression.

  ---

  Unprivileged lxc containers fail to start in some instances under
  vivid:

        lxc-start 1448306932.775 ERROR    lxc_utils - utils.c:safe_mount:1686 - Operation not permitted - Failed to mount proc onto /usr/lib/x86_64-linux-gnu/lxc/proc
        lxc-start 1448306932.775 ERROR    lxc_conf - conf.c:lxc_mount_auto_mounts:828 - Operation not permitted - error mounting proc on /usr/lib/x86_64-linux-gnu/lxc/proc flags 14

  The failure is caused by the backport of
  7236c85e1be51a9e25ba0f6e087a66ca89605a49 "mnt: Update fs_fully_visible
  to test for permanently empty directories." The backport itself is
  correct but some of its assumptions are not met to do a change which
  happened after 3.19. This causes /proc/fs/nfsd to fail the "directory
  is permanently empty" test, and when the nfsd fs another filesystem is
  mounted on that directory it causes the mount of proc in the container
  to fail. The fix is to bakcport
  d443b9fd56e85c0e58d10b75cf5eb38e0b2c4c02 "gut proc_register() a bit"
  as well.

  ProblemType: Bug
  DistroRelease: Ubuntu 15.04
  Package: linux-image-3.19.0-33-generic 3.19.0-33.38
  ProcVersionSignature: User Name 3.19.0-33.38-generic 3.19.8-ckt7
  Uname: Linux 3.19.0-33-generic x86_64
  AlsaDevices:
   total 0
   crw-rw---- 1 root audio 116,  1 Nov 23 21:22 seq
   crw-rw---- 1 root audio 116, 33 Nov 23 21:22 timer
  AplayDevices: Error: [Errno 2] No such file or directory: 'aplay'
  ApportVersion: 2.17.2-0ubuntu1.8
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord'
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: command ['iw', 'reg', 'get'] failed with exit code 1: nl80211 not found.
  Date: Mon Nov 23 21:24:16 2015
  IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig'
  Lsusb: Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  MachineType: QEMU Standard PC (i440FX + PIIX, 1996)
  PciMultimedia:

  ProcEnviron:
   TERM=xterm
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  ProcFB:

  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.19.0-33-generic root=UUID=63d8816d-53d7-4318-b873-2cfe367b957a ro console=tty1 console=ttyS0
  RelatedPackageVersions:
   linux-restricted-modules-3.19.0-33-generic N/A
   linux-backports-modules-3.19.0-33-generic  N/A
   linux-firmware                             1.143.7
  RfKill: Error: [Errno 2] No such file or directory: 'rfkill'
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 01/01/2011
  dmi.bios.vendor: Bochs
  dmi.bios.version: Bochs
  dmi.chassis.type: 1
  dmi.chassis.vendor: Bochs
  dmi.modalias: dmi:bvnBochs:bvrBochs:bd01/01/2011:svnQEMU:pnStandardPC(i440FX+PIIX,1996):pvrpc-i440fx-trusty:cvnBochs:ct1:cvr:
  dmi.product.name: Standard PC (i440FX + PIIX, 1996)
  dmi.product.version: pc-i440fx-trusty
  dmi.sys.vendor: QEMU

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1519106/+subscriptions