kernel-packages team mailing list archive

Thread
Date
[Bug 1564815] Re: Precise update to 3.2.79 stable release

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1564815@xxxxxxxxxxxxxxxxxx>
Date: Mon, 09 May 2016 19:33:37 -0000
Reply-to: Bug 1564815 <1564815@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
This bug was fixed in the package linux - 3.2.0-102.142

---------------
linux (3.2.0-102.142) precise; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1571853

  [ Kamal Mostafa ]

  * [debian] BugLink: close LP: bugs only for Launchpad urls

  [ Upstream Kernel Changes ]

  * Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
    - LP: #1564815
  * gspca: ov534/topro: prevent a division by 0
    - LP: #1563911
  * media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
    - LP: #1563911
  * rc: allow rc modules to be loaded if rc-main is not a module
    - LP: #1563911
  * SCSI: initio: remove duplicate module device table
    - LP: #1563911
  * KVM: x86: expose MSR_TSC_AUX to userspace
    - LP: #1563911
  * KVM: x86: correctly print #AC in traces
    - LP: #1563911
  * ath9k_htc: check for underflow in ath9k_htc_rx_msg()
    - LP: #1563911
  * mtd: nand: fix ONFI parameter page layout
    - LP: #1563911
  * xhci: refuse loading if nousb is used
    - LP: #1563911
  * rtlwifi: fix memory leak for USB device
    - LP: #1563911
  * wlcore: SPI - fix spi transfer_list
    - LP: #1563911
  * wlcore/wl12xx: spi: fix oops on firmware load
    - LP: #1563911
  * EDAC: Robustify workqueues destruction
    - LP: #1563911
  * powerpc: Make value-returning atomics fully ordered
    - LP: #1563911
  * powerpc: Make {cmp}xchg* and their atomic_ versions fully ordered
    - LP: #1563911
  * asix: silence log message from oversize packet
    - LP: #1563911
  * futex: Drop refcount if requeue_pi() acquired the rtmutex
    - LP: #1563911
  * ALSA: fm801: propagate TUNER_ONLY bit when autodetected
    - LP: #1563911
  * drm/radeon: clean up fujitsu quirks
    - LP: #1563911
  * udf: limit the maximum number of indirect extents in a row
    - LP: #1563911
  * USB: cp210x: add ID for ELV Marble Sound Board 1
    - LP: #1563911
  * posix-clock: Fix return code on the poll method's error path
    - LP: #1563911
  * x86/LDT: Print the real LDT base address
    - LP: #1563911
  * rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
    - LP: #1563911
  * rtlwifi: rtl8192se: Fix module parameter initialization
    - LP: #1563911
  * rtlwifi: rtl8192ce: Fix handling of module parameters
    - LP: #1563911
  * rtlwifi: rtl8192cu: Add missing parameter setup
    - LP: #1563911
  * NFS: Fix attribute cache revalidation
    - LP: #1563911
  * Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
    - LP: #1563911
  * x86/xen: don't reset vcpu_info on a cancelled suspend
    - LP: #1563911
  * udf: Prevent buffer overrun with multi-byte characters
    - LP: #1563911
  * udf: Check output buffer length when converting name to CS0
    - LP: #1563911
  * power: test_power: correctly handle empty writes
    - LP: #1563911
  * locks: fix unlock when fcntl_setlk races with a close
    - LP: #1563911
  * dm snapshot: fix hung bios when copy error occurs
    - LP: #1563911
  * uml: fix hostfs mknod()
    - LP: #1563911
  * uml: flush stdout before forking
    - LP: #1563911
  * ipv6: tcp: add rcu locking in tcp_v6_send_synack()
    - LP: #1563911
  * x86/mm: Add barriers and document switch_mm()-vs-flush synchronization
    - LP: #1563911
  * x86/boot: Double BOOT_HEAP_SIZE to 64KB
    - LP: #1563911
  * x86/reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[]
    - LP: #1563911
  * ALSA: seq: Fix missing NULL check at remove_events ioctl
    - LP: #1563911
  * ALSA: seq: Fix race at timer setup and close
    - LP: #1563911
  * parisc: Fix __ARCH_SI_PREAMBLE_SIZE
    - LP: #1563911
  * x86/mm: Improve switch_mm() barrier comments
    - LP: #1563911
  * ALSA: timer: Fix double unlink of active_list
    - LP: #1563911
  * ALSA: timer: Fix race among timer ioctls
    - LP: #1563911
  * sparc64: fix incorrect sign extension in sys_sparc64_personality
    - LP: #1563911
  * cifs: Ratelimit kernel log messages
    - LP: #1563911
  * cifs: fix race between call_async() and reconnect()
    - LP: #1563911
  * cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
    - LP: #1563911
  * m32r: fix m32104ut_defconfig build fail
    - LP: #1563911
  * dma-debug: switch check from _text to _stext
    - LP: #1563911
  * scripts/bloat-o-meter: fix python3 syntax error
    - LP: #1563911
  * ocfs2/dlm: ignore cleaning the migration mle that is inuse
    - LP: #1563911
  * ALSA: timer: Harden slave timer list handling
    - LP: #1563911
  * memcg: only free spare array when readers are done
    - LP: #1563911
  * printk: help pr_debug and pr_devel to optimize out arguments
    - LP: #1563911
  * crypto: af_alg - Fix socket double-free when accept fails
    - LP: #1563911
  * ALSA: hrtimer: Fix stall by hrtimer_cancel()
    - LP: #1563911
  * ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode
    - LP: #1563911
  * ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode
    - LP: #1563911
  * ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0
    - LP: #1563911
  * IB/qib: fix mcast detach when qp not attached
    - LP: #1563911
  * IB/mlx4: Initialize hop_limit when creating address handle
    - LP: #1563911
  * ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with
    ocfs2_unblock_lock
    - LP: #1563911
  * crypto: algif_skcipher - Require setkey before accept(2)
    - LP: #1563911
  * crypto: af_alg - Disallow bind/setkey/... after accept(2)
    - LP: #1563911
  * crypto: af_alg - Add nokey compatibility path
    - LP: #1563911
  * crypto: algif_skcipher - Add nokey compatibility path
    - LP: #1563911
  * crypto: hash - Add crypto_ahash_has_setkey
    - LP: #1563911
  * crypto: algif_hash - Require setkey before accept(2)
    - LP: #1563911
  * crypto: skcipher - Add crypto_skcipher_has_setkey
    - LP: #1563911
  * crypto: algif_skcipher - Add key check exception for cipher_null
    - LP: #1563911
  * crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey
    path
    - LP: #1563911
  * crypto: algif_hash - Remove custom release parent function
    - LP: #1563911
  * crypto: algif_skcipher - Remove custom release parent function
    - LP: #1563911
  * crypto: af_alg - Forbid bind(2) when nokey child sockets are present
    - LP: #1563911
  * crypto: algif_hash - Fix race condition in hash_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Fix race condition in skcipher_check_key
    - LP: #1563911
  * crypto: algif_skcipher - Load TX SG list after waiting
    - LP: #1563911
  * sctp: Prevent soft lockup when sctp_accept() is called during a timeout
    event
    - LP: #1563911
  * usbvision-video: fix memory leak of alt_max_pkt_size
    - LP: #1563911
  * usbvision: fix leak of usb_dev on failure paths in usbvision_probe()
    - LP: #1563911
  * usbvision fix overflow of interfaces array
    - LP: #1563911
  * usbvision: fix crash on detecting device with invalid configuration
    - LP: #1563911
  * Linux 3.2.77
    - LP: #1563911
  * KVM: vmx: fix MPX detection
    - LP: #1563914
  * hrtimer: Handle remaining time proper for TIME_LOW_RES
    - LP: #1563914
  * timerfd: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * posix-timers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * itimers: Handle relative timers with CONFIG_TIME_LOW_RES proper
    - LP: #1563914
  * usb: cdc-acm: send zero packet for intel 7260 modem
    - LP: #1563914
  * cdc-acm:exclude Samsung phone 04e8:685d
    - LP: #1563914
  * af_unix: fix struct pid memory leak
    - LP: #1563914
  * pptp: fix illegal memory access caused by multiple bind()s
    - LP: #1563914
  * sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
    - LP: #1563914
  * USB: cp210x: add ID for IAI USB to RS485 adaptor
    - LP: #1563914
  * USB: visor: fix null-deref at probe
    - LP: #1563914
  * USB: serial: visor: fix crash on detecting device without write_urbs
    - LP: #1563914
  * USB: serial: option: Adding support for Telit LE922
    - LP: #1563914
  * ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
    - LP: #1563914
  * ALSA: seq: Degrade the error message for too many opens
    - LP: #1563914
  * USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
    - LP: #1563914
  * PCI/AER: Flush workqueue on device remove to avoid use-after-free
    - LP: #1563914
  * libata: disable forced PORTS_IMPL for >= AHCI 1.3
    - LP: #1563914
  * virtio_pci: fix use after free on release
    - LP: #1563914
  * rfkill: fix rfkill_fop_read wait_event usage
    - LP: #1563914
  * perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed
    - LP: #1563914
  * SCSI: fix crashes in sd and sr runtime PM
    - LP: #1563914
  * tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
    - LP: #1563914
  * crypto: shash - Fix has_key setting
    - LP: #1563914
  * ALSA: dummy: Disable switching timer backend via sysfs
    - LP: #1563914
  * drm/vmwgfx: respect 'nomodeset'
    - LP: #1563914
  * x86/mm/pat: Avoid truncation when converting cpa->numpages to address
    - LP: #1563914
  * crypto: algif_hash - wait for crypto_ahash_init() to complete
    - LP: #1563914
  * intel_scu_ipcutil: underflow in scu_reg_access()
    - LP: #1563914
  * ALSA: seq: Fix race at closing in virmidi driver
    - LP: #1563914
  * ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
    - LP: #1563914
  * ALSA: pcm: Fix potential deadlock in OSS emulation
    - LP: #1563914
  * ALSA: seq: Fix yet another races among ALSA timer accesses
    - LP: #1563914
  * ALSA: timer: Fix link corruption due to double start or stop
    - LP: #1563914
  * libata: fix sff host state machine locking while polling
    - LP: #1563914
  * ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
    - LP: #1563914
  * ALSA: rawmidi: Fix race at copying & updating the position
    - LP: #1563914
  * ALSA: seq: Fix lockdep warnings due to double mutex locks
    - LP: #1563914
  * usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
    - LP: #1563914
  * xhci: Fix list corruption in urb dequeue at host removal
    - LP: #1563914
  * tda1004x: only update the frontend properties if locked
    - LP: #1563914
  * ALSA: timer: Fix leftover link at closing
    - LP: #1563914
  * saa7134-alsa: Only frees registered sound cards
    - LP: #1563914
  * scsi_dh_rdac: always retry MODE SELECT on command lock violation
    - LP: #1563914
  * mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
    progress
    - LP: #1563914
  * ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery
    cleanup
    - LP: #1563914
  * crypto: user - lock crypto_alg_list on alg dump
    - LP: #1563914
  * klist: fix starting point removed bug in klist iterators
    - LP: #1563914
  * ALSA: dummy: Implement timer backend switching more safely
    - LP: #1563914
  * ALSA: timer: Fix wrong instance passed to slave callbacks
    - LP: #1563914
  * ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()
    - LP: #1563914
  * sctp: translate network order to host order when users get a hmacid
    - LP: #1563914
  * ALSA: timer: Fix race between stop and interrupt
    - LP: #1563914
  * ALSA: timer: Fix race at concurrent reads
    - LP: #1563914
  * ahci: Intel DNV device IDs SATA
    - LP: #1563914
  * ARM: 8519/1: ICST: try other dividends than 1
    - LP: #1563914
  * btrfs: properly set the termination value of ctx->pos in readdir
    - LP: #1563914
  * unix: properly account for FDs passed over unix sockets
    - LP: #1563914
  * unix: correctly track in-flight fds in sending process user_struct
    - LP: #1563914
  * pipe: limit the per-user amount of pages allocated in pipes
    - LP: #1563914
  * iw_cxgb3: Fix incorrectly returning error on success
    - LP: #1563914
  * pipe: Fix buffer offset after partially failed read
    - LP: #1563914, #1563916
    - CVE-2016-0774
  * sched: fix __sched_setscheduler() vs load balancing race
    - LP: #1563914
  * Linux 3.2.78
    - LP: #1563914
  * crypto: {blk,giv}cipher: Set has_setkey
    - LP: #1564815
  * iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
    - LP: #1564815
  * wext: fix message delay/ordering
    - LP: #1564815
  * cfg80211/wext: fix message ordering
    - LP: #1564815
  * mac80211: fix use of uninitialised values in RX aggregation
    - LP: #1564815
  * nfs: fix nfs_size_to_loff_t
    - LP: #1564815
  * drm/i915: fix error path in intel_setup_gmbus()
    - LP: #1564815
  * cifs: fix erroneous return value
    - LP: #1564815
  * s390/dasd: prevent incorrect length error under z/VM after PAV changes
    - LP: #1564815
  * s390/dasd: fix refcount for PAV reassignment
    - LP: #1564815
  * libata: fix HDIO_GET_32BIT ioctl
    - LP: #1564815
  * xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
    - LP: #1564815
  * xen/pciback: Save the number of MSI-X entries to be copied later.
    - LP: #1564815
  * xen/pcifront: Fix mysterious crashes when NUMA locality information was
    extracted.
    - LP: #1564815
  * ALSA: seq: Fix leak of pool buffer at concurrent writes
    - LP: #1564815
  * tracepoints: Do not trace when cpu is offline
    - LP: #1564815
  * tracing: Fix freak link error caused by branch tracer
    - LP: #1564815
  * ALSA: seq: Fix double port list deletion
    - LP: #1564815
  * af_unix: Don't set err in unix_stream_read_generic unless there was an
    error
    - LP: #1564815
  * af_unix: Guard against other == sk in unix_dgram_sendmsg
    - LP: #1564815
  * x86, extable: Remove open-coded exception table entries in
    arch/x86/lib/copy_user_nocache_64.S
    - LP: #1564815
  * x86/uaccess/64: Make the __copy_user_nocache() assembly code more
    readable
    - LP: #1564815
  * x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in
    __copy_user_nocache()
    - LP: #1564815
  * usb: dwc3: Fix assignment of EP transfer resources
    - LP: #1564815
  * net/mlx4_en: Count HW buffer overrun only once
    - LP: #1564815
  * USB: option: add support for SIM7100E
    - LP: #1564815
  * USB: cp210x: add IDs for GE B650V3 and B850V3 boards
    - LP: #1564815
  * USB: option: add "4G LTE usb-modem U901"
    - LP: #1564815
  * Adding Intel Lewisburg device IDs for SATA
    - LP: #1564815
  * ext4: fix bh->b_state corruption
    - LP: #1564815
  * kernel/resource.c: fix muxed resource handling in __request_region()
    - LP: #1564815
  * can: ems_usb: Fix possible tx overflow
    - LP: #1564815
  * mac80211: minstrel_ht: set default tx aggregation timeout to 0
    - LP: #1564815
  * sunrpc/cache: fix off-by-one in qword_get()
    - LP: #1564815
  * KVM: async_pf: do not warn on page allocation failures
    - LP: #1564815
  * jffs2: Fix page lock / f->sem deadlock
    - LP: #1564815
  * Fix directory hardlinks from deleted directories
    - LP: #1564815
  * libata: Align ata_device's id on a cacheline
    - LP: #1564815
  * ipr: Fix out-of-bounds null overwrite
    - LP: #1564815
  * ipr: Fix regression when loading firmware
    - LP: #1564815
  * mm: thp: fix SMP race condition between THP page fault and
    MADV_DONTNEED
    - LP: #1564815
  * hpfs: don't truncate the file when delete fails
    - LP: #1564815
  * ALSA: timer: Fix broken compat timer user status ioctl
    - LP: #1564815
  * ALSA: hdspm: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * ALSA: hdsp: Fix wrong boolean ctl value accesses
    - LP: #1564815
  * USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
    - LP: #1564815
  * ASoC: wm8958: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * ASoC: wm8994: Fix enum ctl accesses in a wrong type
    - LP: #1564815
  * USB: serial: option: add support for Quectel UC20
    - LP: #1564815
  * ALSA: seq: oss: Don't drain at closing a client
    - LP: #1564815
  * PM / sleep / x86: Fix crash on graph trace through x86 suspend
    - LP: #1564815
  * IB/core: Use GRH when the path hop-limit > 0
    - LP: #1564815
  * mld, igmp: Fix reserved tailroom calculation
    - LP: #1564815
  * MIPS: traps: Fix SIGFPE information leak from `do_ov' and
    `do_trap_or_bp'
    - LP: #1564815
  * ubi: Fix out of bounds write in volume update code
    - LP: #1564815
  * s390/mm: four page table levels vs. fork
    - LP: #1564815
  * Input: aiptek - fix crash on detecting device without endpoints
    - LP: #1564815
  * include/linux/poison.h: fix LIST_POISON{1,2} offset
    - LP: #1564815
  * HID: usbhid: fix recursive deadlock
    - LP: #1564815
  * Linux 3.2.79
    - LP: #1564815

 -- Kamal Mostafa <kamal@xxxxxxxxxxxxx>  Mon, 18 Apr 2016 14:51:21 -0700

** Changed in: linux (Ubuntu Precise)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2016-0774

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1564815

Title:
  Precise update to 3.2.79 stable release

Status in linux package in Ubuntu:
  New
Status in linux source package in Precise:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The 3.2.79 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches from the 3.2.79 stable release shall be
  applied:

  Revert "crypto: algif_skcipher - Do not dereference ctx without socket lock"
  crypto: {blk,giv}cipher: Set has_setkey
  iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
  wext: fix message delay/ordering
  cfg80211/wext: fix message ordering
  mac80211: fix use of uninitialised values in RX aggregation
  nfs: fix nfs_size_to_loff_t
  drm/i915: fix error path in intel_setup_gmbus()
  cifs: fix erroneous return value
  s390/dasd: prevent incorrect length error under z/VM after PAV changes
  s390/dasd: fix refcount for PAV reassignment
  libata: fix HDIO_GET_32BIT ioctl
  xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
  xen/pciback: Save the number of MSI-X entries to be copied later.
  xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted.
  ALSA: seq: Fix leak of pool buffer at concurrent writes
  tracepoints: Do not trace when cpu is offline
  tracing: Fix freak link error caused by branch tracer
  ALSA: seq: Fix double port list deletion
  af_unix: Don't set err in unix_stream_read_generic unless there was an error
  af_unix: Guard against other == sk in unix_dgram_sendmsg
  x86, extable: Remove open-coded exception table entries in arch/x86/lib/copy_user_nocache_64.S
  x86/uaccess/64: Make the __copy_user_nocache() assembly code more readable
  x86/uaccess/64: Handle the caching of 4-byte nocache copies properly in __copy_user_nocache()
  usb: dwc3: Fix assignment of EP transfer resources
  net/mlx4_en: Count HW buffer overrun only once
  USB: option: add support for SIM7100E
  USB: cp210x: add IDs for GE B650V3 and B850V3 boards
  USB: option: add "4G LTE usb-modem U901"
  Adding Intel Lewisburg device IDs for SATA
  ext4: fix bh->b_state corruption
  kernel/resource.c: fix muxed resource handling in __request_region()
  can: ems_usb: Fix possible tx overflow
  mac80211: minstrel_ht: set default tx aggregation timeout to 0
  sunrpc/cache: fix off-by-one in qword_get()
  KVM: async_pf: do not warn on page allocation failures
  Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
  jffs2: Fix page lock / f->sem deadlock
  Fix directory hardlinks from deleted directories
  libata: Align ata_device's id on a cacheline
  ipr: Fix out-of-bounds null overwrite
  ipr: Fix regression when loading firmware
  mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED
  hpfs: don't truncate the file when delete fails
  ALSA: timer: Fix broken compat timer user status ioctl
  ALSA: hdspm: Fix wrong boolean ctl value accesses
  ALSA: hdsp: Fix wrong boolean ctl value accesses
  USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
  ASoC: wm8958: Fix enum ctl accesses in a wrong type
  ASoC: wm8994: Fix enum ctl accesses in a wrong type
  USB: serial: option: add support for Quectel UC20
  ALSA: seq: oss: Don't drain at closing a client
  PM / sleep / x86: Fix crash on graph trace through x86 suspend
  IB/core: Use GRH when the path hop-limit > 0
  mld, igmp: Fix reserved tailroom calculation
  MIPS: traps: Fix SIGFPE information leak from `do_ov' and `do_trap_or_bp'
  ubi: Fix out of bounds write in volume update code
  Revert "drm/radeon: call hpd_irq_event on resume"
  s390/mm: four page table levels vs. fork
  Input: aiptek - fix crash on detecting device without endpoints
  include/linux/poison.h: fix LIST_POISON{1,2} offset
  HID: usbhid: fix recursive deadlock
  Linux 3.2.79

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1564815/+subscriptions
References

[Bug 1564815] [NEW] Precise update to 3.2.79 stable release
From: Luis Henriques, 2016-04-01