kernel-packages team mailing list archive

[Kamal Mostafa <kamal@xxxxxxxxxxxxx>]

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The v3.13.11-ckt36 upstream stable
+        patch set is now available. It should be included in the Ubuntu
+        kernel as well.
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The v3.13.11-ckt36 upstream stable
-        patch set is now available. It should be included in the Ubuntu
-        kernel as well.
+        git://kernel.ubuntu.com/ubuntu/linux.git
  
-        git://kernel.ubuntu.com/ubuntu/linux.git
+     TEST CASE: TBD
  
-     TEST CASE: TBD
+        The following patches from the v3.13.11-ckt36 stable release
+ shall be applied:
  
-        The following patches from the v3.13.11-ckt36 stable release
- shall be applied:
+ Linux 3.13.11-ckt36
+ pipe: limit the per-user amount of pages allocated in pipes
+ af_unix: Don't set err in unix_stream_read_generic unless there was an error
+ net/mlx4_en: Choose time-stamping shift value according to HW frequency
+ ipv4: fix memory leaks in ip_cmsg_send() callers
+ bonding: Fix ARP monitor validation
+ sctp: Fix port hash table size computation
+ unix_diag: fix incorrect sign extension in unix_lookup_by_ino
+ rtnl: RTM_GETNETCONF: fix wrong return value
+ pppoe: fix reference counting in PPPoE proxy
+ net/mlx4_en: Count HW buffer overrun only once
+ qmi_wwan: add "4G LTE usb-modem U901"
+ af_unix: Guard against other == sk in unix_dgram_sendmsg
+ sctp: translate network order to host order when users get a hmacid
+ net:Add sysctl_max_skb_frags
+ unix: correctly track in-flight fds in sending process user_struct
+ ipv6: fix a lockdep splat
+ net/ipv6: add sysctl option accept_ra_min_hop_limit
+ ipv6/udp: use sticky pktinfo egress ifindex on connect()
+ sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
+ pptp: fix illegal memory access caused by multiple bind()s
+ af_unix: fix struct pid memory leak
+ tcp: fix NULL deref in tcp_v4_send_ack()
+ net: dp83640: Fix tx timestamp overflow handling.
+ af_iucv: Validate socket address length in iucv_sock_bind()
+ do_last(): don't let a bogus return value from ->open() et.al. to confuse us
+ hpfs: don't truncate the file when delete fails
+ KVM: x86: MMU: fix ubsan index-out-of-range warning
+ libceph: don't bail early from try_read() when skipping a message
+ tracing: Fix showing function event in available_events
+ KVM: async_pf: do not warn on page allocation failures
+ sunrpc/cache: fix off-by-one in qword_get()
+ can: ems_usb: Fix possible tx overflow
+ drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE
+ kernel/resource.c: fix muxed resource handling in __request_region()
+ ext4: fix crashes in dioread_nolock mode
+ ext4: fix bh->b_state corruption
+ hwmon: (ads1015) Handle negative conversion values correctly
+ USB: option: add "4G LTE usb-modem U901"
+ USB: cp210x: add IDs for GE B650V3 and B850V3 boards
+ USB: option: add support for SIM7100E
+ NFSv4: Fix a dentry leak on alias use
+ drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
+ drm/radeon: use post-decrement in error handling
+ ALSA: seq: Fix double port list deletion
+ tracing: Fix freak link error caused by branch tracer
+ tracepoints: Do not trace when cpu is offline
+ dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
+ ALSA: seq: Fix leak of pool buffer at concurrent writes
+ ALSA: seq: Drop superfluous error/debug messages after malloc failures
+ xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted.
+ xen/pciback: Save the number of MSI-X entries to be copied later.
+ xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
+ bio: return EINTR if copying to user space got interrupted
+ ext4: don't read blocks from disk after extents being swapped
+ ext4: fix potential integer overflow
+ btrfs: properly set the termination value of ctx->pos in readdir
+ ARM: 8519/1: ICST: try other dividends than 1
+ s390/dasd: fix refcount for PAV reassignment
+ s390/dasd: prevent incorrect length error under z/VM after PAV changes
+ cifs: fix erroneous return value
+ workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
+ ahci: Intel DNV device IDs SATA
+ drm/i915: fix error path in intel_setup_gmbus()
+ phy: twl4030-usb: Relase usb phy on unload
+ ALSA: timer: Fix race at concurrent reads
+ ALSA: timer: Fix race between stop and interrupt
+ nfs: fix nfs_size_to_loff_t
+ ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
+ ALSA: timer: Fix wrong instance passed to slave callbacks
+ powerpc: Fix dedotify for binutils >= 2.26
+ ALSA: dummy: Implement timer backend switching more safely
+ klist: fix starting point removed bug in klist iterators
+ ALSA: hda - Fix speaker output from VAIO AiO machines
+ pty: make sure super_block is still valid in final /dev/tty close
+ pty: fix possible use after free of tty->driver_data
+ serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
+ crypto: user - lock crypto_alg_list on alg dump
+ radix-tree: fix oops after radix_tree_iter_retry
+ mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
+ ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup
+ mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress
+ dump_stack: avoid potential deadlocks
+ ALSA: hda - Fix static checker warning in patch_hdmi.c
+ drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
+ SCSI: Add Marvell Console to VPD blacklist
+ scsi_dh_rdac: always retry MODE SELECT on command lock violation
+ Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
+ [media] saa7134-alsa: Only frees registered sound cards
+ ALSA: timer: Fix leftover link at closing
+ [media] tda1004x: only update the frontend properties if locked
+ target: Fix race with SCF_SEND_DELAYED_TAS handling
+ target: Fix remote-port TMR ABORT + se_cmd fabric stop
+ target: Fix TAS handling for multi-session se_node_acls
+ target: Fix LUN_RESET active I/O handling for ACK_KREF
+ target: Fix LUN_RESET active TMR descriptor handling
+ target: Add TFO->abort_task for aborted task resources release
+ target: Fix Task Aborted Status (TAS) handling
+ xhci: Fix list corruption in urb dequeue at host removal
+ usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
+ radix-tree: fix race in gang lookup
+ drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
+ ALSA: seq: Fix lockdep warnings due to double mutex locks
+ ALSA: rawmidi: Fix race at copying & updating the position
+ ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
+ ALSA: Move EXPORT_SYMBOL() in appropriate places
+ ALSA: hda - Add fixup for Mac Mini 7,1 model
+ module: wrapper for symbol name.
+ ASoC: dpcm: fix the BE state on hw_free
+ cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
+ libata: fix sff host state machine locking while polling
+ ALSA: timer: Fix link corruption due to double start or stop
+ ALSA: seq: Fix yet another races among ALSA timer accesses
+ ALSA: pcm: Fix potential deadlock in OSS emulation
+ ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
+ ALSA: seq: Fix race at closing in virmidi driver
+ intel_scu_ipcutil: underflow in scu_reg_access()
+ iio: inkern: fix a NULL dereference on error
+ crypto: algif_hash - wait for crypto_ahash_init() to complete
+ target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
+ drm/i915/dp: fall back to 18 bpp when sink capability is unknown
+ crypto: shash - Fix has_key setting
+ rfkill: fix rfkill_fop_read wait_event usage
+ mac80211: Requeue work after scan complete for all VIF types.
+ mac80211: start_next_roc only if scan was actually running
+ libata: disable forced PORTS_IMPL for >= AHCI 1.3
+ PCI/AER: Flush workqueue on device remove to avoid use-after-free
+ iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
+ iio: dac: mcp4725: set iio name property in sysfs
+ x86/entry/compat: Add missing CLAC to entry_INT80_32
+ EVM: Use crypto_memneq() for digest comparisons
+ iw_cxgb3: Fix incorrectly returning error on success

** Changed in: linux (Ubuntu Trusty)
       Status: New => Fix Committed

** Changed in: linux (Ubuntu Trusty)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1557191

Title:
  Trusty update to v3.13.11-ckt36 stable release

Status in linux package in Ubuntu:
  New
Status in linux source package in Trusty:
  Fix Committed

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The v3.13.11-ckt36 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://kernel.ubuntu.com/ubuntu/linux.git

      TEST CASE: TBD

         The following patches from the v3.13.11-ckt36 stable release
  shall be applied:

  Linux 3.13.11-ckt36
  pipe: limit the per-user amount of pages allocated in pipes
  af_unix: Don't set err in unix_stream_read_generic unless there was an error
  net/mlx4_en: Choose time-stamping shift value according to HW frequency
  ipv4: fix memory leaks in ip_cmsg_send() callers
  bonding: Fix ARP monitor validation
  sctp: Fix port hash table size computation
  unix_diag: fix incorrect sign extension in unix_lookup_by_ino
  rtnl: RTM_GETNETCONF: fix wrong return value
  pppoe: fix reference counting in PPPoE proxy
  net/mlx4_en: Count HW buffer overrun only once
  qmi_wwan: add "4G LTE usb-modem U901"
  af_unix: Guard against other == sk in unix_dgram_sendmsg
  sctp: translate network order to host order when users get a hmacid
  net:Add sysctl_max_skb_frags
  unix: correctly track in-flight fds in sending process user_struct
  ipv6: fix a lockdep splat
  net/ipv6: add sysctl option accept_ra_min_hop_limit
  ipv6/udp: use sticky pktinfo egress ifindex on connect()
  sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
  pptp: fix illegal memory access caused by multiple bind()s
  af_unix: fix struct pid memory leak
  tcp: fix NULL deref in tcp_v4_send_ack()
  net: dp83640: Fix tx timestamp overflow handling.
  af_iucv: Validate socket address length in iucv_sock_bind()
  do_last(): don't let a bogus return value from ->open() et.al. to confuse us
  hpfs: don't truncate the file when delete fails
  KVM: x86: MMU: fix ubsan index-out-of-range warning
  libceph: don't bail early from try_read() when skipping a message
  tracing: Fix showing function event in available_events
  KVM: async_pf: do not warn on page allocation failures
  sunrpc/cache: fix off-by-one in qword_get()
  can: ems_usb: Fix possible tx overflow
  drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE
  kernel/resource.c: fix muxed resource handling in __request_region()
  ext4: fix crashes in dioread_nolock mode
  ext4: fix bh->b_state corruption
  hwmon: (ads1015) Handle negative conversion values correctly
  USB: option: add "4G LTE usb-modem U901"
  USB: cp210x: add IDs for GE B650V3 and B850V3 boards
  USB: option: add support for SIM7100E
  NFSv4: Fix a dentry leak on alias use
  drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
  drm/radeon: use post-decrement in error handling
  ALSA: seq: Fix double port list deletion
  tracing: Fix freak link error caused by branch tracer
  tracepoints: Do not trace when cpu is offline
  dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
  ALSA: seq: Fix leak of pool buffer at concurrent writes
  ALSA: seq: Drop superfluous error/debug messages after malloc failures
  xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted.
  xen/pciback: Save the number of MSI-X entries to be copied later.
  xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
  bio: return EINTR if copying to user space got interrupted
  ext4: don't read blocks from disk after extents being swapped
  ext4: fix potential integer overflow
  btrfs: properly set the termination value of ctx->pos in readdir
  ARM: 8519/1: ICST: try other dividends than 1
  s390/dasd: fix refcount for PAV reassignment
  s390/dasd: prevent incorrect length error under z/VM after PAV changes
  cifs: fix erroneous return value
  workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
  ahci: Intel DNV device IDs SATA
  drm/i915: fix error path in intel_setup_gmbus()
  phy: twl4030-usb: Relase usb phy on unload
  ALSA: timer: Fix race at concurrent reads
  ALSA: timer: Fix race between stop and interrupt
  nfs: fix nfs_size_to_loff_t
  ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
  ALSA: timer: Fix wrong instance passed to slave callbacks
  powerpc: Fix dedotify for binutils >= 2.26
  ALSA: dummy: Implement timer backend switching more safely
  klist: fix starting point removed bug in klist iterators
  ALSA: hda - Fix speaker output from VAIO AiO machines
  pty: make sure super_block is still valid in final /dev/tty close
  pty: fix possible use after free of tty->driver_data
  serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
  crypto: user - lock crypto_alg_list on alg dump
  radix-tree: fix oops after radix_tree_iter_retry
  mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
  ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup
  mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress
  dump_stack: avoid potential deadlocks
  ALSA: hda - Fix static checker warning in patch_hdmi.c
  drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
  SCSI: Add Marvell Console to VPD blacklist
  scsi_dh_rdac: always retry MODE SELECT on command lock violation
  Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
  [media] saa7134-alsa: Only frees registered sound cards
  ALSA: timer: Fix leftover link at closing
  [media] tda1004x: only update the frontend properties if locked
  target: Fix race with SCF_SEND_DELAYED_TAS handling
  target: Fix remote-port TMR ABORT + se_cmd fabric stop
  target: Fix TAS handling for multi-session se_node_acls
  target: Fix LUN_RESET active I/O handling for ACK_KREF
  target: Fix LUN_RESET active TMR descriptor handling
  target: Add TFO->abort_task for aborted task resources release
  target: Fix Task Aborted Status (TAS) handling
  xhci: Fix list corruption in urb dequeue at host removal
  usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
  radix-tree: fix race in gang lookup
  drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
  ALSA: seq: Fix lockdep warnings due to double mutex locks
  ALSA: rawmidi: Fix race at copying & updating the position
  ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
  ALSA: Move EXPORT_SYMBOL() in appropriate places
  ALSA: hda - Add fixup for Mac Mini 7,1 model
  module: wrapper for symbol name.
  ASoC: dpcm: fix the BE state on hw_free
  cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
  libata: fix sff host state machine locking while polling
  ALSA: timer: Fix link corruption due to double start or stop
  ALSA: seq: Fix yet another races among ALSA timer accesses
  ALSA: pcm: Fix potential deadlock in OSS emulation
  ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
  ALSA: seq: Fix race at closing in virmidi driver
  intel_scu_ipcutil: underflow in scu_reg_access()
  iio: inkern: fix a NULL dereference on error
  crypto: algif_hash - wait for crypto_ahash_init() to complete
  target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
  drm/i915/dp: fall back to 18 bpp when sink capability is unknown
  crypto: shash - Fix has_key setting
  rfkill: fix rfkill_fop_read wait_event usage
  mac80211: Requeue work after scan complete for all VIF types.
  mac80211: start_next_roc only if scan was actually running
  libata: disable forced PORTS_IMPL for >= AHCI 1.3
  PCI/AER: Flush workqueue on device remove to avoid use-after-free
  iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
  iio: dac: mcp4725: set iio name property in sysfs
  x86/entry/compat: Add missing CLAC to entry_INT80_32
  EVM: Use crypto_memneq() for digest comparisons
  iw_cxgb3: Fix incorrectly returning error on success

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1557191/+subscriptions