kernel-packages team mailing list archive

[Launchpad Bug Tracker <1576829@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 4.2.0-38.45

---------------
linux (4.2.0-38.45) wily; urgency=low

  [ Kamal Mostafa ]

  * CVE-2016-1583 (LP: #1588871)
    - ecryptfs: fix handling of directory opening
    - SAUCE: proc: prevent stacking filesystems on top
    - SAUCE: ecryptfs: forbid opening files without mmap handler
    - SAUCE: sched: panic on corrupted stack end

 -- Andy Whitcroft <apw@xxxxxxxxxxxxx>  Wed, 08 Jun 2016 22:10:39 +0100

** Changed in: linux (Ubuntu Wily)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2016-1583

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1576829

Title:
  Wily update to v4.2.8-ckt9 stable release

Status in linux package in Ubuntu:
  New
Status in linux source package in Wily:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The v4.2.8-ckt9 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.launchpad.net/~canonical-kernel/linux/+git/linux-
  stable-ckt

      TEST CASE: TBD

         The following patches from the v4.2.8-ckt9 stable release shall
  be applied:

  Linux 4.2.8-ckt9
  openvswitch: use flow protocol when recalculating ipv6 checksums
  atl2: Disable unimplemented scatter/gather feature
  net: ethernet: davinci_emac: Fix platform_data overwrite
  net: ethernet: davinci_emac: Fix Unbalanced pm_runtime_enable
  Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay
  net: bcmgenet: device stats are unsigned long
  s390/spinlock: avoid yield to non existent cpu
  pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs
  bpf/verifier: reject invalid LD_ABS | BPF_DW instruction
  net: sched: do not requeue a NULL skb
  packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
  s390/scm_blk: fix deadlock for requests != REQ_TYPE_FS
  x86 EDAC, sb_edac.c: Take account of channel hashing when needed
  x86 EDAC, sb_edac.c: Repair damage introduced when "fixing" channel address
  x86/mm/xen: Suppress hugetlbfs in PV guests
  drm: Loongson-3 doesn't fully support wc memory
  amdgpu/uvd: add uvd fw version for amdgpu
  drm/radeon: forbid mapping of userptr bo through radeon device file
  drm/amdgpu: bump the afmt limit for CZ, ST, Polaris
  drm/amdgpu: use defines for CRTCs and AMFT blocks
  drm/dp/mst: Validate port in drm_dp_payload_send_msg()
  ALSA: pcxhr: Fix missing mutex unlock
  asm-generic/futex: Re-enable preemption in futex_atomic_cmpxchg_inatomic()
  futex: Acknowledge a new waiter in counter before plist
  futex: Handle unlock_pi race gracefully
  usb: gadget: f_fs: Fix use-after-free
  drm/radeon: add a quirk for a XFX R9 270X
  powerpc: Update TM user feature bits in scan_features()
  powerpc: Update cpu_user_features2 in scan_features()
  powerpc: scan_features() updates incorrect bits for REAL_LE
  ALSA: hda/realtek - Add ALC3234 headset mode for Optiplex 9020m
  drm/i915: Use fw_domains_put_with_fifo() on HSW
  drm/i915/userptr: Hold mmref whilst calling get-user-pages
  video: ARM CLCD: runtime check for Versatile
  dm cache metadata: fix cmd_read_lock() acquiring write lock
  crypto: ccp - Prevent information leakage on export
  crypto: sha1-mb - use corrcet pointer while completing jobs
  pinctrl: mediatek: correct debounce time unit in mtk_gpio_set_debounce
  dm cache metadata: fix READ_LOCK macros and cleanup WRITE_LOCK macros
  drm/amdgpu: when suspending, if uvd/vce was running. need to cancel delay work.
  drm/radeon: fix initial connector audio value
  usb: hcd: out of bounds access in for_each_companion
  USB: uas: Add a new NO_REPORT_LUNS quirk
  xhci: fix 10 second timeout on removal of PCI hotpluggable xhci controllers
  usb: xhci: fix wild pointers in xhci_mem_cleanup
  usb: host: xhci: add a new quirk XHCI_NO_64BIT_SUPPORT
  xhci: resume USB 3 roothub first
  usb: xhci: applying XHCI_PME_STUCK_QUIRK to Intel BXT B0 host
  lib: lz4: fixed zram with lz4 on big endian machines
  dmaengine: dw: fix master selection
  ALSA: hda - Fix regression of monitor_present flag in eld proc file
  debugfs: Make automount point inodes permanently empty
  nl80211: check netlink protocol in socket release notification
  ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
  ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T460s
  netlink: don't send NETLINK_URELEASE for unbound sockets
  kvm: x86: do not leak guest xcr0 into host interrupt handlers
  assoc_array: don't call compare_object() on a node
  ALSA: usb-audio: Add a quirk for Plantronics BT300
  dmaengine: hsu: correct use of channel status register
  ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320
  s390/pci: add extra padding to function measurement block
  drm/qxl: fix cursor position with non-zero hotspot
  ARM: mvebu: Correct unit address for linksys
  ARM: OMAP2+: hwmod: Fix updating of sysconfig register
  HID: usbhid: fix inconsistent reset/resume/reset-resume behavior
  iwlwifi: pcie: lower the debug level for RSA semaphore access
  ipv6: Count in extension headers in skb->network_header
  ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
  ipv4: l2tp: fix a potential issue in l2tp_ip_recv
  tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter
  rtnl: fix msg size calculation in if_nlmsg_size()
  qmi_wwan: add "D-Link DWM-221 B1" device id
  xfrm: Fix crash observed during device unregistration and decryption
  bonding: fix bond_get_stats()
  qlge: Fix receive packets drop.
  farsync: fix off-by-one bug in fst_add_one
  macvtap: always pass ethernet header in linear
  sh_eth: fix NULL pointer dereference in sh_eth_ring_format()
  packet: validate variable length ll headers
  ax25: add link layer header validation function
  net: validate variable length ll headers
  udp6: fix UDP/IPv6 encap resubmit path
  cdc_ncm: toggle altsetting to force reset before setup
  qmi_wwan: add Sierra Wireless EM74xx device ID
  sctp: lack the check for ports in sctp_v6_cmp_addr
  net: qca_spi: clear IFF_TX_SKB_SHARING
  net: jme: fix suspend/resume on JMC260
  tunnel: Clear IPCB(skb)->opt before dst_link_failure called

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1576829/+subscriptions