← Back to team overview

kernel-packages team mailing list archive

[Bug 1538756] Re: Trusty update to v3.13.11-ckt33 stable release

 

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The v3.13.11-ckt33 upstream stable
+        patch set is now available. It should be included in the Ubuntu
+        kernel as well.
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The v3.13.11-ckt33 upstream stable
-        patch set is now available. It should be included in the Ubuntu
-        kernel as well.
+        git://kernel.ubuntu.com/ubuntu/linux.git
  
-        git://kernel.ubuntu.com/ubuntu/linux.git
+     TEST CASE: TBD
  
-     TEST CASE: TBD
+        The following patches from the v3.13.11-ckt33 stable release
+ shall be applied:
  
-        The following patches from the v3.13.11-ckt33 stable release
- shall be applied:
+ Linux 3.13.11-ckt33
+ Revert "[stable-only] net: add length argument to skb_copy_and_csum_datagram_iovec"
+ net: possible use after free in dst_release
+ include/linux/mmdebug.h: should include linux/bug.h
+ net: phy: mdio-mux: Check return value of mdiobus_alloc()
+ qlcnic: fix a timeout loop
+ sh_eth: fix TX buffer byte-swapping
+ mISDN: fix a loop count
+ pinctrl: bcm2835: Fix initial value for direction_output
+ ser_gigaset: fix deallocation of platform device structure
+ net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration
+ ipv6/addrlabel: fix ip6addrlbl_get()
+ kvm: x86: only channel 0 of the i8254 is linked to the HPET
+ firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6
+ vmstat: allocate vmstat_wq before it is used
+ ftrace/module: Call clean up function when module init fails early
+ dts: vt8500: Add SDHC node to DTS file for WM8650
+ async_tx: use GFP_NOWAIT rather than GFP_IO
+ tracing: Fix setting of start_index in find_next()
+ ftrace/scripts: Fix incorrect use of sprintf in recordmcount
+ mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()
+ ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz
+ ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2)
+ parisc: Fix syscall restarts
+ x86/mce: Ensure offline CPUs don't participate in rendezvous process
+ USB: fix invalid memory access in hub_activate()
+ USB: ipaq.c: fix a timeout loop
+ s390/dis: Fix handling of format specifiers
+ ALSA: hda - Set SKL+ hda controller power at freeze() and thaw()
+ ARC: dw2 unwind: Ignore CIE version !=1 gracefully instead of bailing
+ ARC: dw2 unwind: Reinstante unwinding out of modules
+ ftrace/scripts: Have recordmcount copy the object file
+ scripts: recordmcount: break hardlinks
+ spi: fix parent-device reference leak
+ ARM: 8471/1: need to save/restore arm register(r11) when it is corrupted
+ ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly
+ genirq: Prevent chip buslock deadlock
+ tty: Fix GPF in flush_to_ldisc()
+ n_tty: Fix poll() after buffer-limited eof push read
+ sh64: fix __NR_fgetxattr
+ drivers/base/memory.c: prohibit offlining of memory blocks with missing sections
+ mm: hugetlb: call huge_pte_alloc() only if ptep is null
+ mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress
+ parisc iommu: fix panic due to trying to allocate too large region
+ powercap / RAPL: fix BIOS lock check
+ USB: add quirk for devices with broken LPM
+ xhci: fix usb2 resume timing and races.
+ ses: fix additional element traversal bug
+ vgaarb: fix signal handling in vga_get()
+ ses: Fix problems with simple enclosures
+ dm btree: fix bufio buffer leaks in dm_btree_del() error path
+ rfkill: copy the name into the rfkill struct
+ KVM: PPC: Book3S HV: Prohibit setting illegal transaction state in MSR
+ ipmi: move timer init to before irq is setup
+ dm space map metadata: fix ref counting bug when bootstrapping a new space map
+ dm thin metadata: fix bug when taking a metadata snapshot
+ crypto: skcipher - Copy iv from desc even for 0-len walks
+ radeon/cik: Fix GFX IB test on Big-Endian
+ 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
+ virtio: fix memory leak of virtio ida cache layers
+ ALSA: hda - Add inverted dmic for Packard Bell DOTS
+ ALSA: rme96: Fix unexpected volume reset after rate changes
+ usb: xhci: fix config fail of FS hub behind a HS hub with MTT
+ SCSI: Fix NULL pointer dereference in runtime PM
+ dm btree: fix leak of bufio-backed block in btree_split_sibling error path
+ usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message
+ USB: whci-hcd: add check for dma mapping error
+ usb: core : hub: Fix BOS 'NULL pointer' kernel panic
+ irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB
+ staging: lustre: echo_copy.._lsm() dereferences userland pointers directly
+ sata_sil: disable trim
+ AHCI: Fix softreset failed issue of Port Multiplier
+ i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs
+ drm/ttm: Fixed a read/write lock imbalance
+ jbd2: Fix unreclaimed pages after truncate in data=journal mode
+ ext4: Fix handling of extended tv_sec
+ USB: serial: Another Infineon flash loader USB ID
+ USB: cdc_acm: Ignore Infineon Flash Loader utility
+ USB: cp210x: Remove CP2110 ID from compatibility list
+ iio: fix some warning messages
+ usb: gadget: pxa27x: fix suspend callback
+ fuse: break infinite loop in fuse_fill_write_pages()
+ net: ipmr: fix static mfc/dev leaks on table destruction
+ efi: Disable interrupts around EFI calls, not in the epilog/prolog calls
+ tools: Add a "make all" rule
+ KEYS: Fix race between read and revoke
+ af_unix: Revert 'lock_interruptible' in stream receive code
+ bluetooth: Validate socket address length in sco_sock_bind().
+ pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
+ sh_eth: fix kernel oops in skb_put()
+ net: add validation for the socket syscall protocol argument
+ ipv6: sctp: clone options to avoid use after free
+ sctp: update the netstamp_needed counter when copying sockets
+ sctp: use the same clock as if sock source timestamps were on
+ atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
+ gre6: allow to update all parameters via rtnl
+ ip6mr: call del_timer_sync() in ip6mr_free_table()
+ ARC: Fix silly typo in MAINTAINERS file

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1538756

Title:
  Trusty update to v3.13.11-ckt33 stable release

Status in linux package in Ubuntu:
  New
Status in linux source package in Trusty:
  New

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The v3.13.11-ckt33 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://kernel.ubuntu.com/ubuntu/linux.git

      TEST CASE: TBD

         The following patches from the v3.13.11-ckt33 stable release
  shall be applied:

  Linux 3.13.11-ckt33
  Revert "[stable-only] net: add length argument to skb_copy_and_csum_datagram_iovec"
  net: possible use after free in dst_release
  include/linux/mmdebug.h: should include linux/bug.h
  net: phy: mdio-mux: Check return value of mdiobus_alloc()
  qlcnic: fix a timeout loop
  sh_eth: fix TX buffer byte-swapping
  mISDN: fix a loop count
  pinctrl: bcm2835: Fix initial value for direction_output
  ser_gigaset: fix deallocation of platform device structure
  net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration
  ipv6/addrlabel: fix ip6addrlbl_get()
  kvm: x86: only channel 0 of the i8254 is linked to the HPET
  firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6
  vmstat: allocate vmstat_wq before it is used
  ftrace/module: Call clean up function when module init fails early
  dts: vt8500: Add SDHC node to DTS file for WM8650
  async_tx: use GFP_NOWAIT rather than GFP_IO
  tracing: Fix setting of start_index in find_next()
  ftrace/scripts: Fix incorrect use of sprintf in recordmcount
  mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()
  ASoC: arizona: Fix bclk for sample rates that are multiple of 4kHz
  ALSA: hda/realtek - Fix silent headphone output on MacPro 4,1 (v2)
  parisc: Fix syscall restarts
  x86/mce: Ensure offline CPUs don't participate in rendezvous process
  USB: fix invalid memory access in hub_activate()
  USB: ipaq.c: fix a timeout loop
  s390/dis: Fix handling of format specifiers
  ALSA: hda - Set SKL+ hda controller power at freeze() and thaw()
  ARC: dw2 unwind: Ignore CIE version !=1 gracefully instead of bailing
  ARC: dw2 unwind: Reinstante unwinding out of modules
  ftrace/scripts: Have recordmcount copy the object file
  scripts: recordmcount: break hardlinks
  spi: fix parent-device reference leak
  ARM: 8471/1: need to save/restore arm register(r11) when it is corrupted
  ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly
  genirq: Prevent chip buslock deadlock
  tty: Fix GPF in flush_to_ldisc()
  n_tty: Fix poll() after buffer-limited eof push read
  sh64: fix __NR_fgetxattr
  drivers/base/memory.c: prohibit offlining of memory blocks with missing sections
  mm: hugetlb: call huge_pte_alloc() only if ptep is null
  mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress
  parisc iommu: fix panic due to trying to allocate too large region
  powercap / RAPL: fix BIOS lock check
  USB: add quirk for devices with broken LPM
  xhci: fix usb2 resume timing and races.
  ses: fix additional element traversal bug
  vgaarb: fix signal handling in vga_get()
  ses: Fix problems with simple enclosures
  dm btree: fix bufio buffer leaks in dm_btree_del() error path
  rfkill: copy the name into the rfkill struct
  KVM: PPC: Book3S HV: Prohibit setting illegal transaction state in MSR
  ipmi: move timer init to before irq is setup
  dm space map metadata: fix ref counting bug when bootstrapping a new space map
  dm thin metadata: fix bug when taking a metadata snapshot
  crypto: skcipher - Copy iv from desc even for 0-len walks
  radeon/cik: Fix GFX IB test on Big-Endian
  9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
  virtio: fix memory leak of virtio ida cache layers
  ALSA: hda - Add inverted dmic for Packard Bell DOTS
  ALSA: rme96: Fix unexpected volume reset after rate changes
  usb: xhci: fix config fail of FS hub behind a HS hub with MTT
  SCSI: Fix NULL pointer dereference in runtime PM
  dm btree: fix leak of bufio-backed block in btree_split_sibling error path
  usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message
  USB: whci-hcd: add check for dma mapping error
  usb: core : hub: Fix BOS 'NULL pointer' kernel panic
  irqchip/versatile-fpga: Fix PCI IRQ mapping on Versatile PB
  staging: lustre: echo_copy.._lsm() dereferences userland pointers directly
  sata_sil: disable trim
  AHCI: Fix softreset failed issue of Port Multiplier
  i2c: mv64xxx: The n clockdiv factor is 0 based on sunxi SoCs
  drm/ttm: Fixed a read/write lock imbalance
  jbd2: Fix unreclaimed pages after truncate in data=journal mode
  ext4: Fix handling of extended tv_sec
  USB: serial: Another Infineon flash loader USB ID
  USB: cdc_acm: Ignore Infineon Flash Loader utility
  USB: cp210x: Remove CP2110 ID from compatibility list
  iio: fix some warning messages
  usb: gadget: pxa27x: fix suspend callback
  fuse: break infinite loop in fuse_fill_write_pages()
  net: ipmr: fix static mfc/dev leaks on table destruction
  efi: Disable interrupts around EFI calls, not in the epilog/prolog calls
  tools: Add a "make all" rule
  KEYS: Fix race between read and revoke
  af_unix: Revert 'lock_interruptible' in stream receive code
  bluetooth: Validate socket address length in sco_sock_bind().
  pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
  sh_eth: fix kernel oops in skb_put()
  net: add validation for the socket syscall protocol argument
  ipv6: sctp: clone options to avoid use after free
  sctp: update the netstamp_needed counter when copying sockets
  sctp: use the same clock as if sock source timestamps were on
  atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
  gre6: allow to update all parameters via rtnl
  ip6mr: call del_timer_sync() in ip6mr_free_table()
  ARC: Fix silly typo in MAINTAINERS file

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1538756/+subscriptions


References