kernel-packages team mailing list archive

Thread
Date
[Bug 1552180] Re: Trusty update to 3.16.7-ckt25 stable release

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1552180@xxxxxxxxxxxxxxxxxx>
Date: Tue, 05 Apr 2016 08:52:23 -0000
Reply-to: Bug 1552180 <1552180@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
This bug was fixed in the package linux-lts-utopic -
3.16.0-69.89~14.04.1

---------------
linux-lts-utopic (3.16.0-69.89~14.04.1) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1558760

  [ Upstream Kernel Changes ]

  * Revert "Revert "af_unix: Revert 'lock_interruptible' in stream receive
    code""

linux-lts-utopic (3.16.0-68.88~14.04.1) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1558092

  [ Upstream Kernel Changes ]

  * Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo"
    - LP: #1552180
  * Revert "af_unix: Revert 'lock_interruptible' in stream receive code"
    - LP: #1540731
  * [media] usbvision fix overflow of interfaces array
    - LP: #1552180
  * [media] usbvision: fix leak of usb_dev on failure paths in
    usbvision_probe()
    - LP: #1552180
  * [media] usbvision: fix crash on detecting device with invalid
    configuration
    - LP: #1552180
  * tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
    - LP: #1552180
  * USB: serial: visor: fix crash on detecting device without write_urbs
    - LP: #1552180
  * ASN.1: Fix non-match detection failure on data overrun
    - LP: #1552180
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1552180
  * EVM: Use crypto_memneq() for digest comparisons
    - LP: #1552180
  * iio: adis_buffer: Fix out-of-bounds memory access
    - LP: #1552180
  * KVM: PPC: Fix emulation of H_SET_DABR/X on POWER8
    - LP: #1552180
  * x86/irq: Call chip->irq_set_affinity in proper context
    - LP: #1552180
  * ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot()
    - LP: #1552180
  * usb: cdc-acm: handle unlinked urb in acm read callback
    - LP: #1552180
  * usb: cdc-acm: send zero packet for intel 7260 modem
    - LP: #1552180
  * cdc-acm:exclude Samsung phone 04e8:685d
    - LP: #1552180
  * usb: hub: do not clear BOS field during reset device
    - LP: #1552180
  * USB: cp210x: add ID for IAI USB to RS485 adaptor
    - LP: #1552180
  * USB: visor: fix null-deref at probe
    - LP: #1552180
  * USB: serial: option: Adding support for Telit LE922
    - LP: #1552180
  * ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
    - LP: #1552180
  * ALSA: seq: Degrade the error message for too many opens
    - LP: #1552180
  * USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
    - LP: #1552180
  * USB: option: fix Cinterion AHxx enumeration
    - LP: #1552180
  * ALSA: compress: Disable GET_CODEC_CAPS ioctl for some architectures
    - LP: #1552180
  * ALSA: usb-audio: Fix TEAC UD-501/UD-503/NT-503 usb delay
    - LP: #1552180
  * virtio_pci: fix use after free on release
    - LP: #1552180
  * ALSA: bebob: Use a signed return type for get_formation_index
    - LP: #1552180
  * arm64: errata: Add -mpc-relative-literal-loads to build flags
    - LP: #1533009, #1552180
  * powerpc/eeh: Fix PE location code
    - LP: #1552180
  * SCSI: fix crashes in sd and sr runtime PM
    - LP: #1552180
  * n_tty: Fix unsafe reference to "other" ldisc
    - LP: #1552180
  * staging/speakup: Use tty_ldisc_ref() for paste kworker
    - LP: #1552180
  * ALSA: dummy: Disable switching timer backend via sysfs
    - LP: #1552180
  * drm/vmwgfx: respect 'nomodeset'
    - LP: #1552180
  * x86/mm/pat: Avoid truncation when converting cpa->numpages to address
    - LP: #1552180
  * perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed
    - LP: #1552180
  * perf hists: Fix HISTC_MEM_DCACHELINE width setting
    - LP: #1552180
  * powerpc/perf: Remove PPMU_HAS_SSLOT flag for Power8
    - LP: #1552180
  * umount: Do not allow unmounting rootfs.
    - LP: #1552180
  * crypto: algif_skcipher - Require setkey before accept(2)
    - LP: #1552180
  * crypto: algif_skcipher - Add nokey compatibility path
    - LP: #1552180
  * crypto: algif_hash - Require setkey before accept(2)
    - LP: #1552180
  * crypto: skcipher - Add crypto_skcipher_has_setkey
    - LP: #1552180
  * crypto: algif_skcipher - Add key check exception for cipher_null
    - LP: #1552180
  * crypto: algif_hash - Remove custom release parent function
    - LP: #1552180
  * crypto: algif_skcipher - Remove custom release parent function
    - LP: #1552180
  * crypto: algif_hash - Fix race condition in hash_check_key
    - LP: #1552180
  * crypto: algif_skcipher - Fix race condition in skcipher_check_key
    - LP: #1552180
  * iio: add HAS_IOMEM dependency to VF610_ADC
    - LP: #1552180
  * iio: dac: mcp4725: set iio name property in sysfs
    - LP: #1552180
  * ASoC: rt5645: fix the shift bit of IN1 boost
    - LP: #1552180
  * cgroup: make sure a parent css isn't offlined before its children
    - LP: #1552180
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1552180
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1552180
  * mac80211: Requeue work after scan complete for all VIF types.
    - LP: #1552180
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1552180
  * crypto: shash - Fix has_key setting
    - LP: #1552180
  * drm/i915/dp: fall back to 18 bpp when sink capability is unknown
    - LP: #1552180
  * target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
    - LP: #1552180
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1552180
  * iio: inkern: fix a NULL dereference on error
    - LP: #1552180
  * iio: pressure: mpl115: fix temperature offset sign
    - LP: #1552180
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1552180
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1552180
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1552180
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1552180
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1552180
  * ALSA: timer: Code cleanup
    - LP: #1552180
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1552180
  * libata: fix sff host state machine locking while polling
    - LP: #1552180
  * MIPS: Fix buffer overflow in syscall_get_arguments()
    - LP: #1552180
  * cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
    - LP: #1552180
  * ASoC: dpcm: fix the BE state on hw_free
    - LP: #1552180
  * module: wrapper for symbol name.
    - LP: #1552180
  * ALSA: hda - Add fixup for Mac Mini 7,1 model
    - LP: #1552180
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1552180
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1552180
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1552180
  * drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
    - LP: #1552180
  * radix-tree: fix race in gang lookup
    - LP: #1552180
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1552180
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1552180
  * [media] tda1004x: only update the frontend properties if locked
    - LP: #1552180
  * ALSA: timer: Fix leftover link at closing
    - LP: #1552180
  * [media] saa7134-alsa: Only frees registered sound cards
    - LP: #1552180
  * Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
    - LP: #1552180
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1552180
  * SCSI: Add Marvell Console to VPD blacklist
    - LP: #1552180
  * drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
    - LP: #1552180
  * ALSA: hda - Fix static checker warning in patch_hdmi.c
    - LP: #1552180
  * dump_stack: avoid potential deadlocks
    - LP: #1552180
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1552180
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1552180
  * mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
    - LP: #1552180
  * radix-tree: fix oops after radix_tree_iter_retry
    - LP: #1552180
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1552180
  * serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
    - LP: #1552180
  * pty: fix possible use after free of tty->driver_data
    - LP: #1552180
  * pty: make sure super_block is still valid in final /dev/tty close
    - LP: #1552180
  * ALSA: hda - Fix speaker output from VAIO AiO machines
    - LP: #1552180
  * klist: fix starting point removed bug in klist iterators
    - LP: #1552180
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1552180
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1552180
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1552180
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1552180
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1552180
  * phy: twl4030-usb: Relase usb phy on unload
    - LP: #1552180
  * ahci: Intel DNV device IDs SATA
    - LP: #1552180
  * workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
    - LP: #1552180
  * drm/radeon: hold reference to fences in radeon_sa_bo_new
    - LP: #1552180
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1552180
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1552180
  * net: phy: Fix phy_mac_interrupt()
    - LP: #1552180
  * af_unix: fix struct pid memory leak
    - LP: #1552180
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1552180
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1552180
  * netlink: not trim skb for mmaped socket when dump
    - LP: #1552180
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1552180
  * ipv6: fix a lockdep splat
    - LP: #1552180
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1552180
  * IB/mlx5: Fix RC transport send queue overhead computation
    - LP: #1552180
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1552180
  * net: phy: fix PHY_RUNNING in phy_state_machine
    - LP: #1552180
  * net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS
    - LP: #1552180
  * Linux 3.16.7-ckt25
    - LP: #1552180
  * net: generic dev_disable_lro() stacked device handling
    - LP: #1547680
  * seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO
    - LP: #1496073
  * sched/numa: Fix unsafe get_task_struct() in task_numa_assign()
    - LP: #1527643
  * sched/numa: Fix use-after-free bug in the task_numa_compare
    - LP: #1527643

 -- Brad Figg <brad.figg@xxxxxxxxxxxxx>  Thu, 17 Mar 2016 12:44:45 -0700

** Changed in: linux-lts-utopic (Ubuntu Trusty)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-lts-utopic in Ubuntu.
https://bugs.launchpad.net/bugs/1552180

Title:
  Trusty update to 3.16.7-ckt25 stable release

Status in linux-lts-utopic package in Ubuntu:
  New
Status in linux-lts-utopic source package in Trusty:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The 3.16.7-ckt25 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://kernel.ubuntu.com/ubuntu/linux.git

      TEST CASE: TBD

         The following patches from the 3.16.7-ckt25 stable release
  shall be applied:

  [media] usbvision fix overflow of interfaces array
  [media] usbvision: fix leak of usb_dev on failure paths in usbvision_probe()
  [media] usbvision: fix crash on detecting device with invalid configuration
  tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
  USB: serial: visor: fix crash on detecting device without write_urbs
  ASN.1: Fix non-match detection failure on data overrun
  qeth: initialize net_device with carrier off
  iw_cxgb3: Fix incorrectly returning error on success
  EVM: Use crypto_memneq() for digest comparisons
  ALSA: usb-audio: avoid freeing umidi object twice
  iio: adis_buffer: Fix out-of-bounds memory access
  KVM: PPC: Fix emulation of H_SET_DABR/X on POWER8
  x86/irq: Call chip->irq_set_affinity in proper context
  ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot()
  usb: cdc-acm: handle unlinked urb in acm read callback
  usb: cdc-acm: send zero packet for intel 7260 modem
  cdc-acm:exclude Samsung phone 04e8:685d
  usb: hub: do not clear BOS field during reset device
  USB: cp210x: add ID for IAI USB to RS485 adaptor
  USB: visor: fix null-deref at probe
  USB: serial: option: Adding support for Telit LE922
  ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
  ALSA: seq: Degrade the error message for too many opens
  USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
  USB: option: fix Cinterion AHxx enumeration
  ALSA: compress: Disable GET_CODEC_CAPS ioctl for some architectures
  ALSA: usb-audio: Fix TEAC UD-501/UD-503/NT-503 usb delay
  virtio_pci: fix use after free on release
  ALSA: bebob: Use a signed return type for get_formation_index
  arm64: errata: Add -mpc-relative-literal-loads to build flags
  powerpc/eeh: Fix PE location code
  SCSI: fix crashes in sd and sr runtime PM
  n_tty: Fix unsafe reference to "other" ldisc
  staging/speakup: Use tty_ldisc_ref() for paste kworker
  ALSA: dummy: Disable switching timer backend via sysfs
  drm/vmwgfx: respect 'nomodeset'
  x86/mm/pat: Avoid truncation when converting cpa->numpages to address
  perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed
  perf hists: Fix HISTC_MEM_DCACHELINE width setting
  powerpc/perf: Remove PPMU_HAS_SSLOT flag for Power8
  vmstat: explicitly schedule per-cpu work on the CPU we need it to run on
  Revert "workqueue: make sure delayed work run in local cpu"
  umount: Do not allow unmounting rootfs.
  crypto: algif_skcipher - Require setkey before accept(2)
  crypto: algif_skcipher - Add nokey compatibility path
  crypto: algif_hash - Require setkey before accept(2)
  crypto: skcipher - Add crypto_skcipher_has_setkey
  crypto: algif_skcipher - Add key check exception for cipher_null
  crypto: algif_hash - Remove custom release parent function
  crypto: algif_skcipher - Remove custom release parent function
  crypto: algif_hash - Fix race condition in hash_check_key
  crypto: algif_skcipher - Fix race condition in skcipher_check_key
  iio: add HAS_IOMEM dependency to VF610_ADC
  iio: dac: mcp4725: set iio name property in sysfs
  ASoC: rt5645: fix the shift bit of IN1 boost
  cgroup: make sure a parent css isn't offlined before its children
  PCI/AER: Flush workqueue on device remove to avoid use-after-free
  libata: disable forced PORTS_IMPL for >= AHCI 1.3
  mac80211: Requeue work after scan complete for all VIF types.
  rfkill: fix rfkill_fop_read wait_event usage
  crypto: shash - Fix has_key setting
  drm/i915/dp: fall back to 18 bpp when sink capability is unknown
  target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
  crypto: algif_hash - wait for crypto_ahash_init() to complete
  iio: inkern: fix a NULL dereference on error
  iio: pressure: mpl115: fix temperature offset sign
  intel_scu_ipcutil: underflow in scu_reg_access()
  ALSA: seq: Fix race at closing in virmidi driver
  ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
  ALSA: pcm: Fix potential deadlock in OSS emulation
  ALSA: seq: Fix yet another races among ALSA timer accesses
  ALSA: timer: Code cleanup
  ALSA: timer: Fix link corruption due to double start or stop
  libata: fix sff host state machine locking while polling
  MIPS: Fix buffer overflow in syscall_get_arguments()
  cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
  ASoC: dpcm: fix the BE state on hw_free
  module: wrapper for symbol name.
  ALSA: hda - Add fixup for Mac Mini 7,1 model
  ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
  ALSA: rawmidi: Fix race at copying & updating the position
  ALSA: seq: Fix lockdep warnings due to double mutex locks
  drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
  radix-tree: fix race in gang lookup
  Revert "xhci: don't finish a TD if we get a short-transfer event mid TD"
  usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
  xhci: Fix list corruption in urb dequeue at host removal
  [media] tda1004x: only update the frontend properties if locked
  ALSA: timer: Fix leftover link at closing
  [media] saa7134-alsa: Only frees registered sound cards
  Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
  scsi_dh_rdac: always retry MODE SELECT on command lock violation
  SCSI: Add Marvell Console to VPD blacklist
  drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
  ALSA: hda - Fix static checker warning in patch_hdmi.c
  Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo"
  dump_stack: avoid potential deadlocks
  mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress
  ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup
  mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
  radix-tree: fix oops after radix_tree_iter_retry
  crypto: user - lock crypto_alg_list on alg dump
  serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
  pty: fix possible use after free of tty->driver_data
  pty: make sure super_block is still valid in final /dev/tty close
  ALSA: hda - Fix speaker output from VAIO AiO machines
  klist: fix starting point removed bug in klist iterators
  ALSA: dummy: Implement timer backend switching more safely
  ALSA: timer: Fix wrong instance passed to slave callbacks
  ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
  ALSA: timer: Fix race between stop and interrupt
  ALSA: timer: Fix race at concurrent reads
  phy: twl4030-usb: Relase usb phy on unload
  ahci: Intel DNV device IDs SATA
  workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
  drm/radeon: hold reference to fences in radeon_sa_bo_new
  ARM: 8519/1: ICST: try other dividends than 1
  btrfs: properly set the termination value of ctx->pos in readdir
  net: phy: Fix phy_mac_interrupt()
  af_unix: fix struct pid memory leak
  pptp: fix illegal memory access caused by multiple bind()s
  sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
  netlink: not trim skb for mmaped socket when dump
  unix: correctly track in-flight fds in sending process user_struct
  ipv6: fix a lockdep splat
  sctp: translate network order to host order when users get a hmacid
  IB/mlx5: Fix RC transport send queue overhead computation
  pipe: limit the per-user amount of pages allocated in pipes
  drm/vmwgfx: Fix an fb unlocking bug
  net: phy: fix PHY_RUNNING in phy_state_machine
  net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS
  Linux 3.16.7-ckt25

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-lts-utopic/+bug/1552180/+subscriptions
References

[Bug 1552180] [NEW] Trusty update to 3.16.7-ckt25 stable release
From: Luis Henriques, 2016-03-02