← Back to team overview

kernel-packages team mailing list archive

[Bug 1552180] Re: Trusty update to 3.16.7-ckt25 stable release


** Changed in: linux-lts-utopic (Ubuntu Trusty)
       Status: New => Fix Committed

You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-lts-utopic in Ubuntu.

  Trusty update to 3.16.7-ckt25 stable release

Status in linux-lts-utopic package in Ubuntu:
Status in linux-lts-utopic source package in Trusty:
  Fix Committed

Bug description:
  SRU Justification

         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The 3.16.7-ckt25 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.



         The following patches from the 3.16.7-ckt25 stable release
  shall be applied:

  [media] usbvision fix overflow of interfaces array
  [media] usbvision: fix leak of usb_dev on failure paths in usbvision_probe()
  [media] usbvision: fix crash on detecting device with invalid configuration
  tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
  USB: serial: visor: fix crash on detecting device without write_urbs
  ASN.1: Fix non-match detection failure on data overrun
  qeth: initialize net_device with carrier off
  iw_cxgb3: Fix incorrectly returning error on success
  EVM: Use crypto_memneq() for digest comparisons
  ALSA: usb-audio: avoid freeing umidi object twice
  iio: adis_buffer: Fix out-of-bounds memory access
  KVM: PPC: Fix emulation of H_SET_DABR/X on POWER8
  x86/irq: Call chip->irq_set_affinity in proper context
  ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot()
  usb: cdc-acm: handle unlinked urb in acm read callback
  usb: cdc-acm: send zero packet for intel 7260 modem
  cdc-acm:exclude Samsung phone 04e8:685d
  usb: hub: do not clear BOS field during reset device
  USB: cp210x: add ID for IAI USB to RS485 adaptor
  USB: visor: fix null-deref at probe
  USB: serial: option: Adding support for Telit LE922
  ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
  ALSA: seq: Degrade the error message for too many opens
  USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
  USB: option: fix Cinterion AHxx enumeration
  ALSA: compress: Disable GET_CODEC_CAPS ioctl for some architectures
  ALSA: usb-audio: Fix TEAC UD-501/UD-503/NT-503 usb delay
  virtio_pci: fix use after free on release
  ALSA: bebob: Use a signed return type for get_formation_index
  arm64: errata: Add -mpc-relative-literal-loads to build flags
  powerpc/eeh: Fix PE location code
  SCSI: fix crashes in sd and sr runtime PM
  n_tty: Fix unsafe reference to "other" ldisc
  staging/speakup: Use tty_ldisc_ref() for paste kworker
  ALSA: dummy: Disable switching timer backend via sysfs
  drm/vmwgfx: respect 'nomodeset'
  x86/mm/pat: Avoid truncation when converting cpa->numpages to address
  perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed
  perf hists: Fix HISTC_MEM_DCACHELINE width setting
  powerpc/perf: Remove PPMU_HAS_SSLOT flag for Power8
  vmstat: explicitly schedule per-cpu work on the CPU we need it to run on
  Revert "workqueue: make sure delayed work run in local cpu"
  umount: Do not allow unmounting rootfs.
  crypto: algif_skcipher - Require setkey before accept(2)
  crypto: algif_skcipher - Add nokey compatibility path
  crypto: algif_hash - Require setkey before accept(2)
  crypto: skcipher - Add crypto_skcipher_has_setkey
  crypto: algif_skcipher - Add key check exception for cipher_null
  crypto: algif_hash - Remove custom release parent function
  crypto: algif_skcipher - Remove custom release parent function
  crypto: algif_hash - Fix race condition in hash_check_key
  crypto: algif_skcipher - Fix race condition in skcipher_check_key
  iio: add HAS_IOMEM dependency to VF610_ADC
  iio: dac: mcp4725: set iio name property in sysfs
  ASoC: rt5645: fix the shift bit of IN1 boost
  cgroup: make sure a parent css isn't offlined before its children
  PCI/AER: Flush workqueue on device remove to avoid use-after-free
  libata: disable forced PORTS_IMPL for >= AHCI 1.3
  mac80211: Requeue work after scan complete for all VIF types.
  rfkill: fix rfkill_fop_read wait_event usage
  crypto: shash - Fix has_key setting
  drm/i915/dp: fall back to 18 bpp when sink capability is unknown
  target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
  crypto: algif_hash - wait for crypto_ahash_init() to complete
  iio: inkern: fix a NULL dereference on error
  iio: pressure: mpl115: fix temperature offset sign
  intel_scu_ipcutil: underflow in scu_reg_access()
  ALSA: seq: Fix race at closing in virmidi driver
  ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
  ALSA: pcm: Fix potential deadlock in OSS emulation
  ALSA: seq: Fix yet another races among ALSA timer accesses
  ALSA: timer: Code cleanup
  ALSA: timer: Fix link corruption due to double start or stop
  libata: fix sff host state machine locking while polling
  MIPS: Fix buffer overflow in syscall_get_arguments()
  cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
  ASoC: dpcm: fix the BE state on hw_free
  module: wrapper for symbol name.
  ALSA: hda - Add fixup for Mac Mini 7,1 model
  ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
  ALSA: rawmidi: Fix race at copying & updating the position
  ALSA: seq: Fix lockdep warnings due to double mutex locks
  drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
  radix-tree: fix race in gang lookup
  Revert "xhci: don't finish a TD if we get a short-transfer event mid TD"
  usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
  xhci: Fix list corruption in urb dequeue at host removal
  [media] tda1004x: only update the frontend properties if locked
  ALSA: timer: Fix leftover link at closing
  [media] saa7134-alsa: Only frees registered sound cards
  Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
  scsi_dh_rdac: always retry MODE SELECT on command lock violation
  SCSI: Add Marvell Console to VPD blacklist
  drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
  ALSA: hda - Fix static checker warning in patch_hdmi.c
  Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo"
  dump_stack: avoid potential deadlocks
  mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress
  ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup
  mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
  radix-tree: fix oops after radix_tree_iter_retry
  crypto: user - lock crypto_alg_list on alg dump
  serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
  pty: fix possible use after free of tty->driver_data
  pty: make sure super_block is still valid in final /dev/tty close
  ALSA: hda - Fix speaker output from VAIO AiO machines
  klist: fix starting point removed bug in klist iterators
  ALSA: dummy: Implement timer backend switching more safely
  ALSA: timer: Fix wrong instance passed to slave callbacks
  ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
  ALSA: timer: Fix race between stop and interrupt
  ALSA: timer: Fix race at concurrent reads
  phy: twl4030-usb: Relase usb phy on unload
  ahci: Intel DNV device IDs SATA
  workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
  drm/radeon: hold reference to fences in radeon_sa_bo_new
  ARM: 8519/1: ICST: try other dividends than 1
  btrfs: properly set the termination value of ctx->pos in readdir
  net: phy: Fix phy_mac_interrupt()
  af_unix: fix struct pid memory leak
  pptp: fix illegal memory access caused by multiple bind()s
  sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
  netlink: not trim skb for mmaped socket when dump
  unix: correctly track in-flight fds in sending process user_struct
  ipv6: fix a lockdep splat
  sctp: translate network order to host order when users get a hmacid
  IB/mlx5: Fix RC transport send queue overhead computation
  pipe: limit the per-user amount of pages allocated in pipes
  drm/vmwgfx: Fix an fb unlocking bug
  net: phy: fix PHY_RUNNING in phy_state_machine
  net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS
  Linux 3.16.7-ckt25

To manage notifications about this bug go to: