kernel-packages team mailing list archive

[Tim Gardner <tim.gardner@xxxxxxxxxxxxx>]

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from Linus' tree or in a minimally
+        backported form of that patch. The 3.11.5 upstream stable
+        patch set is now available. It should be included in the Ubuntu
+        kernel as well.
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from Linus' tree or in a minimally
-        backported form of that patch. The 3.11.5 upstream stable
-        patch set is now available. It should be included in the Ubuntu
-        kernel as well.
+        git://git.kernel.org/
  
-        git://git.kernel.org/
+     TEST CASE: TBD
  
-     TEST CASE: TBD
- 
-        The following patches are in the 3.11.5 stable release:
+        The following patches are in the 3.11.5 stable release:
+ nfsd4: fix leak of inode reference on delegation failure
+ HID: fix data access in implement()
+ HID: fix unused rsize usage
+ sh_eth: fix napi_{en|dis}able() calls racing against interrupts
+ caif: Add missing braces to multiline if in cfctrl_linkup_request
+ tcp: Add missing braces to do_tcp_setsockopt
+ ipv6/exthdrs: accept tlv which includes only padding
+ net: fib: fib6_add: fix potential NULL pointer dereference
+ net: sctp: fix bug in sctp_poll for SOCK_SELECT_ERR_QUEUE
+ net: sctp: fix smatch warning in sctp_send_asconf_del_ip
+ net: fix multiqueue selection
+ net: flow_dissector: fix thoff for IPPROTO_AH
+ net_sched: htb: fix a typo in htb_change_class()
+ r8169: enforce RX_MULTI_EN for the 8168f.
+ netpoll: Should handle ETH_P_ARP other than ETH_P_IP in netpoll_neigh_reply
+ netpoll: fix NULL pointer dereference in netpoll_cleanup
+ tuntap: correctly handle error in tun_set_iff()
+ net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit
+ xen-netback: count number required slots for an skb more carefully
+ resubmit bridge: fix message_age_timer calculation
+ bridge: Clamp forward_delay when enabling STP
+ bridge: use br_port_get_rtnl within rtnl lock
+ bridge: fix NULL pointer deref of br_port_get_rcu
+ ip6_tunnels: raddr and laddr are inverted in nl msg
+ net: sctp: rfc4443: do not report ICMP redirects to user space
+ ethernet/arc/arc_emac: Fix huge delays in large file copies
+ vxlan: Avoid creating fdb entry with NULL destination
+ batman-adv: set the TAG flag for the vid passed to BLA
+ net:dccp: do not report ICMP redirects to user space
+ ip: use ip_hdr() in __ip_make_skb() to retrieve IP header
+ ip: generate unique IP identificator if local fragmentation is allowed
+ skge: fix invalid value passed to pci_unmap_sigle
+ ipv6: udp packets following an UFO enqueued packet need also be handled by UFO
+ via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)
+ IPv6 NAT: Do not drop DNATed 6to4/6rd packets
+ net: net_secret should not depend on TCP
+ ip_tunnel: Do not use stale inner_iph pointer.
+ dm9601: fix IFF_ALLMULTI handling
+ bonding: Fix broken promiscuity reference counting issue
+ ipv6: gre: correct calculation of max_headroom
+ ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put
+ ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put
+ ll_temac: Reset dma descriptors indexes on ndo_open
+ ip_tunnel: Fix a memory corruption in ip_tunnel_xmit
+ ip_tunnel_core: Change __skb_push back to skb_push
+ sit: allow to use rtnl ops on fb tunnel
+ ip6tnl: allow to use rtnl ops on fb tunnel
+ avr32: fix clockevents kernel warning
+ regulator: ti-abb: Fix bias voltage glitch in transition to bypass mode
+ fs/binfmt_elf.c: prevent a coredump with a large vm_map_count from Oopsing
+ gpio/omap: maintain GPIO and IRQ usage separately
+ gpio/omap: auto-setup a GPIO when used as an IRQ
+ ASoC: max98095: a couple array underflows
+ ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()
+ ASoC: ab8500-codec: info leak in anc_status_control_put()
+ ARM: kvm: rename cpu_reset to avoid name clash
+ ARM: mach-integrator: Add stub for pci_v3_early_init() for !CONFIG_PCI
+ iommu/arm-smmu: fix a signedness bug
+ iommu/arm-smmu: fix iommu_present() test in init
+ iommu/arm-smmu: don't enable SMMU device until probing has completed
+ powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()
+ powerpc/perf: Fix handling of FAB events
+ powerpc/tm: Switch out userspace PPR and DSCR sooner
+ powerpc/tm: Turn interrupts hard off in tm_reclaim()
+ powerpc/vio: Fix modalias_show return values
+ powerpc: Fix parameter clobber in csum_partial_copy_generic()
+ powerpc: Fix memory hotplug with sparse vmemmap
+ powerpc/sysfs: Disable writing to PURR in guest mode
+ powerpc: Restore registers on error exit from csum_partial_copy_generic()
+ fuse: wait for writeback in fuse_file_fallocate()
+ fuse: fix fallocate vs. ftruncate race
+ brcmfmac: obtain platform data upon module initialization
+ Bluetooth: Fix security level for peripheral role
+ Bluetooth: Fix encryption key size for peripheral role
+ Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.
+ Bluetooth: Add support for BCM20702A0 [0b05, 17cb]
+ Bluetooth: Introduce a new HCI_RFKILLED flag
+ Bluetooth: Fix rfkill functionality during the HCI setup stage
+ nilfs2: fix issue with race condition of competition between segments for dirty blocks
+ ipc/sem.c: fix race in sem_lock()
+ ipc,msg: prevent race with rmid in msgsnd,msgrcv
+ ipc: fix race with LSMs
+ sparc64: Fix buggy strlcpy() conversion in ldom_reboot().
+ sparc: fix ldom_reboot buffer overflow harder
+ sparc64: Remove RWSEM export leftovers
+ sparc64: Fix ITLB handler of null page
+ esp_scsi: Fix tag state corruption when autosensing.
+ sparc64: Fix off by one in trampoline TLB mapping installation loop.
+ sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall
+ sparc32: Fix exit flag passed from traced sys_sigreturn
+ mm: Fix generic hugetlb pte check return type.
+ mm/bounce.c: fix a regression where MS_SNAP_STABLE (stable pages snapshotting) was ignored
+ kernel/kmod.c: check for NULL in call_usermodehelper_exec()
+ staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice
+ NFSv4.1: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails
+ mwifiex: fix NULL pointer dereference in usb suspend handler
+ mwifiex: fix hang issue for USB chipsets
+ mwifiex: fix PCIe hs_cfg cancel cmd timeout
+ usb: chipidea: add Intel Clovertrail pci id
+ USB: serial: option: Ignore card reader interface on Huawei E1750
+ xen/hvc: allow xenboot console to be used again
+ ib_srpt: Destroy cm_id before destroying QP.
+ ib_srpt: always set response for task management
+ rtlwifi: Align private space in rtl_priv struct
+ p54usb: add USB ID for Corega WLUSB2GTST USB adapter
+ mm: avoid reinserting isolated balloon pages into LRU lists
+ iscsi-target: Only perform wait_for_tasks when performing shutdown
+ net: Update the sysctl permissions handler to test effective uid/gid
+ irq: Force hardirq exit's softirq processing on its own stack
+ drm/radeon: fix hdmi callbacks for rv6xx (incorrectly added to r520)
+ dmaengine: imx-dma: fix lockdep issue between irqhandler and tasklet
+ dmaengine: imx-dma: fix callback path in tasklet
+ dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic
+ ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler()
+ xfs: fix node forward in xfs_node_toosmall
+ drm/nouveau/bios/init: stub opcode 0xaa
+ ARM: tegra: unify Tegra's Kconfig a bit more
+ ALSA: hda - Fix GPIO for Acer Aspire 3830TG
+ ARM: multi_v7_defconfig: enable ARM_ATAG_DTB_COMPAT
+ HID: wiimote: fix FF deadlock
+ mmc: fix null pointer use in mmc_blk_remove_req
+ tile: use a more conservative __my_cpu_offset in CONFIG_PREEMPT
+ s390: fix system call restart after inferior call
+ Btrfs: reset ret in record_one_backref
+ Btrfs: change how we queue blocks for backref checking
+ Btrfs: skip subvol entries when checking if we've created a dir already
+ Btrfs: remove ourselves from the cluster list under lock
+ HID: roccat: add support for KonePureOptical v2
+ HID: add Holtek USB ID 04d9:a081 SHARKOON DarkGlider
+ HID: uhid: add devname module alias
+ HID: uhid: allocate static minor
+ net: qmi_wwan: add new Qualcomm devices
+ bcache: Fix a null ptr deref regression
+ Linux 3.11.5

** Changed in: linux (Ubuntu Saucy)
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1240072

Title:
  Saucy update to 3.11.5 stable release

Status in “linux” package in Ubuntu:
  In Progress
Status in “linux” source package in Saucy:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from Linus' tree or in a minimally
         backported form of that patch. The 3.11.5 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches are in the 3.11.5 stable release:
  nfsd4: fix leak of inode reference on delegation failure
  HID: fix data access in implement()
  HID: fix unused rsize usage
  sh_eth: fix napi_{en|dis}able() calls racing against interrupts
  caif: Add missing braces to multiline if in cfctrl_linkup_request
  tcp: Add missing braces to do_tcp_setsockopt
  ipv6/exthdrs: accept tlv which includes only padding
  net: fib: fib6_add: fix potential NULL pointer dereference
  net: sctp: fix bug in sctp_poll for SOCK_SELECT_ERR_QUEUE
  net: sctp: fix smatch warning in sctp_send_asconf_del_ip
  net: fix multiqueue selection
  net: flow_dissector: fix thoff for IPPROTO_AH
  net_sched: htb: fix a typo in htb_change_class()
  r8169: enforce RX_MULTI_EN for the 8168f.
  netpoll: Should handle ETH_P_ARP other than ETH_P_IP in netpoll_neigh_reply
  netpoll: fix NULL pointer dereference in netpoll_cleanup
  tuntap: correctly handle error in tun_set_iff()
  net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit
  xen-netback: count number required slots for an skb more carefully
  resubmit bridge: fix message_age_timer calculation
  bridge: Clamp forward_delay when enabling STP
  bridge: use br_port_get_rtnl within rtnl lock
  bridge: fix NULL pointer deref of br_port_get_rcu
  ip6_tunnels: raddr and laddr are inverted in nl msg
  net: sctp: rfc4443: do not report ICMP redirects to user space
  ethernet/arc/arc_emac: Fix huge delays in large file copies
  vxlan: Avoid creating fdb entry with NULL destination
  batman-adv: set the TAG flag for the vid passed to BLA
  net:dccp: do not report ICMP redirects to user space
  ip: use ip_hdr() in __ip_make_skb() to retrieve IP header
  ip: generate unique IP identificator if local fragmentation is allowed
  skge: fix invalid value passed to pci_unmap_sigle
  ipv6: udp packets following an UFO enqueued packet need also be handled by UFO
  via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)
  IPv6 NAT: Do not drop DNATed 6to4/6rd packets
  net: net_secret should not depend on TCP
  ip_tunnel: Do not use stale inner_iph pointer.
  dm9601: fix IFF_ALLMULTI handling
  bonding: Fix broken promiscuity reference counting issue
  ipv6: gre: correct calculation of max_headroom
  ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put
  ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put
  ll_temac: Reset dma descriptors indexes on ndo_open
  ip_tunnel: Fix a memory corruption in ip_tunnel_xmit
  ip_tunnel_core: Change __skb_push back to skb_push
  sit: allow to use rtnl ops on fb tunnel
  ip6tnl: allow to use rtnl ops on fb tunnel
  avr32: fix clockevents kernel warning
  regulator: ti-abb: Fix bias voltage glitch in transition to bypass mode
  fs/binfmt_elf.c: prevent a coredump with a large vm_map_count from Oopsing
  gpio/omap: maintain GPIO and IRQ usage separately
  gpio/omap: auto-setup a GPIO when used as an IRQ
  ASoC: max98095: a couple array underflows
  ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()
  ASoC: ab8500-codec: info leak in anc_status_control_put()
  ARM: kvm: rename cpu_reset to avoid name clash
  ARM: mach-integrator: Add stub for pci_v3_early_init() for !CONFIG_PCI
  iommu/arm-smmu: fix a signedness bug
  iommu/arm-smmu: fix iommu_present() test in init
  iommu/arm-smmu: don't enable SMMU device until probing has completed
  powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()
  powerpc/perf: Fix handling of FAB events
  powerpc/tm: Switch out userspace PPR and DSCR sooner
  powerpc/tm: Turn interrupts hard off in tm_reclaim()
  powerpc/vio: Fix modalias_show return values
  powerpc: Fix parameter clobber in csum_partial_copy_generic()
  powerpc: Fix memory hotplug with sparse vmemmap
  powerpc/sysfs: Disable writing to PURR in guest mode
  powerpc: Restore registers on error exit from csum_partial_copy_generic()
  fuse: wait for writeback in fuse_file_fallocate()
  fuse: fix fallocate vs. ftruncate race
  brcmfmac: obtain platform data upon module initialization
  Bluetooth: Fix security level for peripheral role
  Bluetooth: Fix encryption key size for peripheral role
  Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.
  Bluetooth: Add support for BCM20702A0 [0b05, 17cb]
  Bluetooth: Introduce a new HCI_RFKILLED flag
  Bluetooth: Fix rfkill functionality during the HCI setup stage
  nilfs2: fix issue with race condition of competition between segments for dirty blocks
  ipc/sem.c: fix race in sem_lock()
  ipc,msg: prevent race with rmid in msgsnd,msgrcv
  ipc: fix race with LSMs
  sparc64: Fix buggy strlcpy() conversion in ldom_reboot().
  sparc: fix ldom_reboot buffer overflow harder
  sparc64: Remove RWSEM export leftovers
  sparc64: Fix ITLB handler of null page
  esp_scsi: Fix tag state corruption when autosensing.
  sparc64: Fix off by one in trampoline TLB mapping installation loop.
  sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall
  sparc32: Fix exit flag passed from traced sys_sigreturn
  mm: Fix generic hugetlb pte check return type.
  mm/bounce.c: fix a regression where MS_SNAP_STABLE (stable pages snapshotting) was ignored
  kernel/kmod.c: check for NULL in call_usermodehelper_exec()
  staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice
  NFSv4.1: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails
  mwifiex: fix NULL pointer dereference in usb suspend handler
  mwifiex: fix hang issue for USB chipsets
  mwifiex: fix PCIe hs_cfg cancel cmd timeout
  usb: chipidea: add Intel Clovertrail pci id
  USB: serial: option: Ignore card reader interface on Huawei E1750
  xen/hvc: allow xenboot console to be used again
  ib_srpt: Destroy cm_id before destroying QP.
  ib_srpt: always set response for task management
  rtlwifi: Align private space in rtl_priv struct
  p54usb: add USB ID for Corega WLUSB2GTST USB adapter
  mm: avoid reinserting isolated balloon pages into LRU lists
  iscsi-target: Only perform wait_for_tasks when performing shutdown
  net: Update the sysctl permissions handler to test effective uid/gid
  irq: Force hardirq exit's softirq processing on its own stack
  drm/radeon: fix hdmi callbacks for rv6xx (incorrectly added to r520)
  dmaengine: imx-dma: fix lockdep issue between irqhandler and tasklet
  dmaengine: imx-dma: fix callback path in tasklet
  dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic
  ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler()
  xfs: fix node forward in xfs_node_toosmall
  drm/nouveau/bios/init: stub opcode 0xaa
  ARM: tegra: unify Tegra's Kconfig a bit more
  ALSA: hda - Fix GPIO for Acer Aspire 3830TG
  ARM: multi_v7_defconfig: enable ARM_ATAG_DTB_COMPAT
  HID: wiimote: fix FF deadlock
  mmc: fix null pointer use in mmc_blk_remove_req
  tile: use a more conservative __my_cpu_offset in CONFIG_PREEMPT
  s390: fix system call restart after inferior call
  Btrfs: reset ret in record_one_backref
  Btrfs: change how we queue blocks for backref checking
  Btrfs: skip subvol entries when checking if we've created a dir already
  Btrfs: remove ourselves from the cluster list under lock
  HID: roccat: add support for KonePureOptical v2
  HID: add Holtek USB ID 04d9:a081 SHARKOON DarkGlider
  HID: uhid: add devname module alias
  HID: uhid: allocate static minor
  net: qmi_wwan: add new Qualcomm devices
  bcache: Fix a null ptr deref regression
  Linux 3.11.5

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1240072/+subscriptions