kernel-packages team mailing list archive

Thread
Date
[Bug 1541330] Re: ip_vti/ip6_vti is broken with a kernel 3.19 (vivid)

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1541330@xxxxxxxxxxxxxxxxxx>
Date: Tue, 05 Apr 2016 08:52:38 -0000
Reply-to: Bug 1541330 <1541330@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
This bug was fixed in the package linux-lts-vivid - 3.19.0-58.64~14.04.1

---------------
linux-lts-vivid (3.19.0-58.64~14.04.1) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1557870

  [ Upstream Kernel Changes ]

  * Revert "Revert "af_unix: Revert 'lock_interruptible' in stream receive
    code""

linux (3.19.0-57.63) vivid; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1557623

  [ Kamal Mostafa ]

  * [Config] updateconfigs after 3.19.8-ckt16 stable update

  [ Upstream Kernel Changes ]

  * Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo"
    - LP: #1556297
  * Revert "af_unix: Revert 'lock_interruptible' in stream receive code"
    - LP: #1540731
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1556297
  * EVM: Use crypto_memneq() for digest comparisons
    - LP: #1556297
  * x86/entry/compat: Add missing CLAC to entry_INT80_32
    - LP: #1556297
  * iio: add HAS_IOMEM dependency to VF610_ADC
    - LP: #1556297
  * iio: dac: mcp4725: set iio name property in sysfs
    - LP: #1556297
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1556297
  * ASoC: rt5645: fix the shift bit of IN1 boost
    - LP: #1556297
  * cgroup: make sure a parent css isn't offlined before its children
    - LP: #1556297
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1556297
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1556297
  * mac80211: Requeue work after scan complete for all VIF types.
    - LP: #1556297
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1556297
  * ARM: dts: at91: sama5d4: fix instance id of DBGU
    - LP: #1556297
  * crypto: shash - Fix has_key setting
    - LP: #1556297
  * drm/i915/dp: fall back to 18 bpp when sink capability is unknown
    - LP: #1556297
  * ALSA: usb-audio: Fix OPPO HA-1 vendor ID
    - LP: #1556297
  * ALSA: usb-audio: Add native DSD support for PS Audio NuWave DAC
    - LP: #1556297
  * target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
    - LP: #1556297
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1556297
  * iio: inkern: fix a NULL dereference on error
    - LP: #1556297
  * iio: pressure: mpl115: fix temperature offset sign
    - LP: #1556297
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1556297
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1556297
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1556297
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1556297
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1556297
  * ALSA: timer: Code cleanup
    - LP: #1556297
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1556297
  * libata: fix sff host state machine locking while polling
    - LP: #1556297
  * MIPS: Fix buffer overflow in syscall_get_arguments()
    - LP: #1556297
  * cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
    - LP: #1556297
  * drm: add helper to check for wc memory support
    - LP: #1556297
  * drm/radeon: mask out WC from BO on unsupported arches
    - LP: #1556297
  * ASoC: dpcm: fix the BE state on hw_free
    - LP: #1556297
  * module: wrapper for symbol name.
    - LP: #1556297
  * ALSA: hda - Add fixup for Mac Mini 7,1 model
    - LP: #1556297
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1556297
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1556297
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1556297
  * drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
    - LP: #1556297
  * radix-tree: fix race in gang lookup
    - LP: #1556297
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1556297
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1556297
  * target: Fix LUN_RESET active TMR descriptor handling
    - LP: #1556297
  * [media] tda1004x: only update the frontend properties if locked
    - LP: #1556297
  * ALSA: timer: Fix leftover link at closing
    - LP: #1556297
  * [media] saa7134-alsa: Only frees registered sound cards
    - LP: #1556297
  * ARM: nomadik: fix up SD/MMC DT settings
    - LP: #1556297
  * Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
    - LP: #1556297
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1556297
  * SCSI: Add Marvell Console to VPD blacklist
    - LP: #1556297
  * drm: fix missing reference counting decrease
    - LP: #1556297
  * drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
    - LP: #1556297
  * drm/dp/mst: Calculate MST PBN with 31.32 fixed point
    - LP: #1556297
  * drm/dp/mst: Reverse order of MST enable and clearing VC payload table.
    - LP: #1556297
  * drm/dp/mst: deallocate payload on port destruction
    - LP: #1556297
  * ALSA: hda - Fix static checker warning in patch_hdmi.c
    - LP: #1556297
  * dump_stack: avoid potential deadlocks
    - LP: #1556297
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1556297
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1556297
  * mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
    - LP: #1556297
  * radix-tree: fix oops after radix_tree_iter_retry
    - LP: #1556297
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1556297
  * crypto: atmel-sha - fix atmel_sha_remove()
    - LP: #1556297
  * qla2xxx: Fix stale pointer access.
    - LP: #1556297
  * serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
    - LP: #1556297
  * pty: fix possible use after free of tty->driver_data
    - LP: #1556297
  * pty: make sure super_block is still valid in final /dev/tty close
    - LP: #1556297
  * ALSA: hda - Fix speaker output from VAIO AiO machines
    - LP: #1556297
  * klist: fix starting point removed bug in klist iterators
    - LP: #1556297
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1556297
  * drm/i915/dsi: defend gpio table against out of bounds access
    - LP: #1556297
  * drm/i915/dsi: don't pass arbitrary data to sideband
    - LP: #1556297
  * powerpc: Fix dedotify for binutils >= 2.26
    - LP: #1556297
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1556297
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1556297
  * xen/scsiback: correct frontend counting
    - LP: #1556297
  * nfs: fix nfs_size_to_loff_t
    - LP: #1556297
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1556297
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1556297
  * phy: core: Fixup return value of phy_exit when !pm_runtime_enabled
    - LP: #1556297
  * phy: core: fix wrong err handle for phy_power_on
    - LP: #1556297
  * phy: twl4030-usb: Relase usb phy on unload
    - LP: #1556297
  * drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select()
    - LP: #1556297
  * drm/i915: fix error path in intel_setup_gmbus()
    - LP: #1556297
  * ahci: Intel DNV device IDs SATA
    - LP: #1556297
  * workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
    - LP: #1556297
  * drm/radeon: hold reference to fences in radeon_sa_bo_new
    - LP: #1556297
  * cifs: fix erroneous return value
    - LP: #1556297
  * s390/dasd: prevent incorrect length error under z/VM after PAV changes
    - LP: #1556297
  * s390/dasd: fix refcount for PAV reassignment
    - LP: #1556297
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1556297
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1556297
  * irqchip/gic-v3-its: Fix double ICC_EOIR write for LPI in EOImode==1
    - LP: #1556297
  * scsi: fix soft lockup in scsi_remove_target() on module removal
    - LP: #1556297
  * ext4: fix potential integer overflow
    - LP: #1556297
  * ext4: don't read blocks from disk after extents being swapped
    - LP: #1556297
  * bio: return EINTR if copying to user space got interrupted
    - LP: #1556297
  * iwlwifi: mvm: don't allow sched scans without matches to be started
    - LP: #1556297
  * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
    - LP: #1556297
  * xen/pciback: Save the number of MSI-X entries to be copied later.
    - LP: #1556297
  * xen/pcifront: Fix mysterious crashes when NUMA locality information was
    extracted.
    - LP: #1556297
  * ALSA: seq: Drop superfluous error/debug messages after malloc failures
    - LP: #1556297
  * ALSA: seq: Fix leak of pool buffer at concurrent writes
    - LP: #1556297
  * ALSA: hda - Cancel probe work instead of flush at remove
    - LP: #1556297
  * dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
    - LP: #1556297
  * tracepoints: Do not trace when cpu is offline
    - LP: #1556297
  * tracing: Fix freak link error caused by branch tracer
    - LP: #1556297
  * ALSA: seq: Fix double port list deletion
    - LP: #1556297
  * drm/radeon: use post-decrement in error handling
    - LP: #1556297
  * drm/qxl: use kmalloc_array to alloc reloc_info in
    qxl_process_single_command
    - LP: #1556297
  * drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2)
    - LP: #1556297
  * usb: dwc3: Fix assignment of EP transfer resources
    - LP: #1556297
  * NFSv4: Fix a dentry leak on alias use
    - LP: #1556297
  * ALSA: pcm: Fix rwsem deadlock for non-atomic PCM stream
    - LP: #1556297
  * USB: option: add support for SIM7100E
    - LP: #1556297
  * USB: cp210x: add IDs for GE B650V3 and B850V3 boards
    - LP: #1556297
  * USB: option: add "4G LTE usb-modem U901"
    - LP: #1556297
  * hwmon: (ads1015) Handle negative conversion values correctly
    - LP: #1556297
  * ext4: fix bh->b_state corruption
    - LP: #1556297
  * ext4: fix crashes in dioread_nolock mode
    - LP: #1556297
  * kernel/resource.c: fix muxed resource handling in __request_region()
    - LP: #1556297
  * drivers: android: correct the size of struct binder_uintptr_t for
    BC_DEAD_BINDER_DONE
    - LP: #1556297
  * can: ems_usb: Fix possible tx overflow
    - LP: #1556297
  * s390/compat: correct restore of high gprs on signal return
    - LP: #1556297
  * sunrpc/cache: fix off-by-one in qword_get()
    - LP: #1556297
  * KVM: arm/arm64: vgic: Ensure bitmaps are long enough
    - LP: #1556297
  * KVM: async_pf: do not warn on page allocation failures
    - LP: #1556297
  * tracing: Fix showing function event in available_events
    - LP: #1556297
  * libceph: don't bail early from try_read() when skipping a message
    - LP: #1556297
  * libceph: use the right footer size when skipping a message
    - LP: #1556297
  * ALSA: hda - Fixing background noise on Dell Inspiron 3162
    - LP: #1549620, #1556297
  * KVM: x86: MMU: fix ubsan index-out-of-range warning
    - LP: #1556297
  * ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2
    - LP: #1556297
  * x86/mpx: Fix off-by-one comparison with nr_registers
    - LP: #1556297
  * mm: thp: fix SMP race condition between THP page fault and
    MADV_DONTNEED
    - LP: #1556297
  * hpfs: don't truncate the file when delete fails
    - LP: #1556297
  * do_last(): don't let a bogus return value from ->open() et.al. to
    confuse us
    - LP: #1556297
  * target: Remove the unused flag SCF_ACK_KREF
    - LP: #1556297
  * target: Remove first argument of target_{get,put}_sess_cmd()
    - LP: #1556297
  * target: Fix LUN_RESET active I/O handling for ACK_KREF
    - LP: #1556297
  * target: Fix TAS handling for multi-session se_node_acls
    - LP: #1556297
  * target: Fix remote-port TMR ABORT + se_cmd fabric stop
    - LP: #1556297
  * target: Fix race with SCF_SEND_DELAYED_TAS handling
    - LP: #1556297
  * af_iucv: Validate socket address length in iucv_sock_bind()
    - LP: #1556297
  * net: dp83640: Fix tx timestamp overflow handling.
    - LP: #1556297
  * tcp: fix NULL deref in tcp_v4_send_ack()
    - LP: #1556297
  * af_unix: fix struct pid memory leak
    - LP: #1556297
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1556297
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1556297
  * ipv6/udp: use sticky pktinfo egress ifindex on connect()
    - LP: #1556297
  * net/ipv6: add sysctl option accept_ra_min_hop_limit
    - LP: #1556297
  * ipv6: addrconf: Fix recursive spin lock call
    - LP: #1556297
  * ipv6: fix a lockdep splat
    - LP: #1556297
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1556297
  * net:Add sysctl_max_skb_frags
    - LP: #1556297
  * tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs
    - LP: #1556297
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1556297
  * flow_dissector: Fix unaligned access in __skb_flow_dissector when used
    by eth_get_headlen
    - LP: #1556297
  * net: Copy inner L3 and L4 headers as unaligned on GRE TEB
    - LP: #1556297
  * bonding: Fix ARP monitor validation
    - LP: #1556297
  * ipv4: fix memory leaks in ip_cmsg_send() callers
    - LP: #1556297
  * af_unix: Guard against other == sk in unix_dgram_sendmsg
    - LP: #1556297
  * qmi_wwan: add "4G LTE usb-modem U901"
    - LP: #1556297
  * net/mlx4_en: Count HW buffer overrun only once
    - LP: #1556297
  * net/mlx4_en: Choose time-stamping shift value according to HW frequency
    - LP: #1556297
  * net/mlx4_en: Avoid changing dev->features directly in run-time
    - LP: #1556297
  * pppoe: fix reference counting in PPPoE proxy
    - LP: #1556297
  * route: check and remove route cache when we get route
    - LP: #1556297
  * rtnl: RTM_GETNETCONF: fix wrong return value
    - LP: #1556297
  * unix_diag: fix incorrect sign extension in unix_lookup_by_ino
    - LP: #1556297
  * sctp: Fix port hash table size computation
    - LP: #1556297
  * net: phy: bcm7xxx: Fix shadow mode 2 disabling
    - LP: #1556297
  * net: phy: bcm7xxx: Fix bcm7xxx_config_init() check
    - LP: #1556297
  * s390/oprofile: fix address range for asynchronous stack
    - LP: #1556297
  * s390/perf_event: fix address range for asynchronous stack
    - LP: #1556297
  * af_unix: Don't set err in unix_stream_read_generic unless there was an
    error
    - LP: #1556297
  * net: phy: Fix phy_mac_interrupt()
    - LP: #1556297
  * net: phy: fix PHY_RUNNING in phy_state_machine
    - LP: #1556297
  * net: phy: Avoid polling PHY with PHY_IGNORE_INTERRUPTS
    - LP: #1556297
  * net: phy: bcm7xxx: Fix 40nm EPHY features
    - LP: #1556297
  * netlink: not trim skb for mmaped socket when dump
    - LP: #1556297
  * ARM: dts: kirkwood: use unique machine name for ds112
    - LP: #1556297
  * s390/stacktrace: fix address ranges for asynchronous and panic stack
    - LP: #1556297
  * MAINTAINERS: Remove stale entry for BCM33xx chips
    - LP: #1556297
  * [media] exynos4-is: fix a format string bug
    - LP: #1556297
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1556297
  * Linux 3.19.8-ckt16
    - LP: #1556297
  * sched/numa: Fix use-after-free bug in the task_numa_compare
    - LP: #1527643
  * ip_vti/ip6_vti: Do not touch skb->mark on xmit
    - LP: #1541330
  * xfrm: Override skb->mark with tunnel->parm.i_key in xfrm_input
    - LP: #1541330
  * ip_vti/ip6_vti: Preserve skb->mark after rcv_cb call
    - LP: #1541330

 -- Brad Figg <brad.figg@xxxxxxxxxxxxx>  Thu, 17 Mar 2016 10:18:03 -0700

** Changed in: linux-lts-vivid (Ubuntu)
       Status: Fix Committed => Fix Released

** Changed in: linux-lts-vivid (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1541330

Title:
  ip_vti/ip6_vti is broken with a kernel 3.19 (vivid)

Status in linux package in Ubuntu:
  Fix Committed
Status in linux-lts-vivid package in Ubuntu:
  Fix Released
Status in linux source package in Vivid:
  Fix Released

Bug description:
  $ uname -a
  Linux ubuntu1404es 3.19.0-39-generic #44~14.04.1-Ubuntu SMP Wed Dec 2 10:00:35 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

  The following upstream patches are missing:
  d55c670cbc54 ip_vti/ip6_vti: Preserve skb->mark after rcv_cb call
  049f8e2e28d9 xfrm: Override skb->mark with tunnel->parm.i_key in xfrm_input
  cd5279c194f8 ip_vti/ip6_vti: Do not touch skb->mark on xmit

  http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d55c670cbc54
  http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d55c670cbc54
  http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=049f8e2e28d9

  The backport of this upstream patch
  213dd74aee76 skbuff: Do not scrub skb mark within the same name space
  http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=213dd74aee76
  in the ubuntu 3.19 kernel has introduced this regression:
  http://kernel.ubuntu.com/git/ubuntu/ubuntu-vivid.git/commit/?id=7525c2de7da1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1541330/+subscriptions
References

[Bug 1541330] [NEW] ip_vti6 is broken with a kernel 3.19 (vivid)
From: Nicolas Dichtel, 2016-02-03