kernel-packages team mailing list archive

[Launchpad Bug Tracker <1388952@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 3.13.0-40.69

---------------
linux (3.13.0-40.69) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - re-used previous tracking bug

  [ Upstream Kernel Changes ]

  * regmap: fix kernel hang on regmap_bulk_write with zero val_count.

linux (3.13.0-40.68) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1388943
  * SAUCE: DEP8 test to run our regression tests
    - LP: #1385330
  * SAUCE: The very first thing we should do when testing is make sure we
    are testing the correct kernel
    - LP: #1385330

  [ dann frazier ]

  * [Config] Disable CONFIG_IPMI_SI_PROBE_DEFAULTS on armhf and arm64
    - LP: #1388952

  [ Duc Dang ]

  * SAUCE: (no-up) [PCIE] APM X-Gene: Remove debug messages in MSI
    interrupt handler path.
    - LP: #1382244
  * SAUCE: (no-up) PCI: X-Gene: Fix max payload size and phantom function
    configuration
    - LP: #1386261

  [ McAulay, Alistair ]

  * SAUCE: drm/i915: Rework GPU reset sequence to match driver load & thaw
    - LP: #1384469

  [ Timo Aaltonen ]

  * SAUCE: i915_bdw: Fix cherry-pick typo
    - LP: #1384469

  [ Upstream Kernel Changes ]

  * Revert "mac80211: disable uAPSD if all ACs are under ACM"
    - LP: #1381234
  * Revert "iwlwifi: dvm: don't enable CTS to self"
    - LP: #1381234
  * Revert "lzo: properly check for overruns"
    - LP: #1387886
  * drm/i915: provide interface for audio driver to query cdclk
    - LP: #1381168
  * regulatory: add NUL to alpha2
    - LP: #1381234
  * percpu: fix pcpu_alloc_pages() failure path
    - LP: #1381234
  * percpu: perform tlb flush after pcpu_map_pages() failure
    - LP: #1381234
  * cgroup: reject cgroup names with '\n'
    - LP: #1381234
  * vfs: add d_is_dir()
    - LP: #1381234
  * CIFS: Fix directory rename error
    - LP: #1381234
  * usb: phy: twl4030-usb: Fix lost interrupts after ID pin goes down
    - LP: #1381234
  * rtlwifi: rtl8192cu: Add new ID
    - LP: #1381234
  * CIFS: Fix wrong restart readdir for SMB1
    - LP: #1381234
  * CIFS: Fix wrong filename length for SMB2
    - LP: #1381234
  * ahci: Add Device IDs for Intel 9 Series PCH
    - LP: #1381234
  * ata_piix: Add Device IDs for Intel 9 Series PCH
    - LP: #1381234
  * USB: zte_ev: fix removed PIDs
    - LP: #1381234
  * USB: ftdi_sio: add support for NOVITUS Bono E thermal printer
    - LP: #1381234
  * USB: sierra: avoid CDC class functions on "68A3" devices
    - LP: #1381234
  * USB: sierra: add 1199:68AA device ID
    - LP: #1381234
  * iommu/arm-smmu: fix programming of SMMU_CBn_TCR for stage 1
    - LP: #1381234
  * iommu/arm-smmu: remove pgtable_page_{c,d}tor()
    - LP: #1381234
  * usb: gadget: fusb300_udc.h: Fix typo in include guard
    - LP: #1381234
  * usb: phy: tegra: Avoid use of sizeof(void)
    - LP: #1381234
  * arm64: use irq_set_affinity with force=false when migrating irqs
    - LP: #1381234
  * block: Fix dev_t minor allocation lifetime
    - LP: #1381234
  * usb: dwc3: core: fix order of PM runtime calls
    - LP: #1381234
  * usb: dwc3: core: fix ordering for PHY suspend
    - LP: #1381234
  * usb: dwc3: omap: fix ordering for runtime pm calls
    - LP: #1381234
  * iommu/fsl: Fix warning resulting from adding PCI device twice
    - LP: #1381234
  * ahci: add pcid for Marvel 0x9182 controller
    - LP: #1381234
  * drm/i915: Fix EIO/wedged handling in gem fault handler
    - LP: #1381234
  * ACPI / RTC: Fix CMOS RTC opregion handler accesses to wrong addresses
    - LP: #1381234
  * drm/i915: Evict CS TLBs between batches
    - LP: #1381234
  * drm/i915: Wait for vblank before enabling the TV encoder
    - LP: #1381234
  * lockd: fix rpcbind crash on lockd startup failure
    - LP: #1381234
  * drm/radeon: fix semaphore value init
    - LP: #1381234
  * drm/radeon: add connector quirk for fujitsu board
    - LP: #1381234
  * imx-drm: ipuv3-plane: fix ipu_plane_dpms()
    - LP: #1381234
  * usb: host: xhci: fix compliance mode workaround
    - LP: #1381234
  * Input: elantech - fix detection of touchpad on ASUS s301l
    - LP: #1381234
  * USB: ftdi_sio: Add support for GE Healthcare Nemo Tracker device
    - LP: #1381234
  * uwb: init beacon cache entry before registering uwb device
    - LP: #1381234
  * nfs: fix kernel warning when removing proc entry
    - LP: #1381234
  * drm/radeon/dpm: set the thermal type properly for special configs
    - LP: #1381234
  * dm cache: fix race causing dirty blocks to be marked as clean
    - LP: #1381234
  * libceph: gracefully handle large reply messages from the mon
    - LP: #1381234
  * Input: serport - add compat handling for SPIOCSTYPE ioctl
    - LP: #1381234
  * usb: hub: take hub->hdev reference when processing from eventlist
    - LP: #1381234
  * eventpoll: fix uninitialized variable in epoll_ctl
    - LP: #1381234
  * kcmp: fix standard comparison bug
    - LP: #1381234
  * fsnotify/fdinfo: use named constants instead of hardcoded values
    - LP: #1381234
  * fs/notify: don't show f_handle if exportfs_encode_inode_fh failed
    - LP: #1381234
  * arm64: flush TLS registers during exec
    - LP: #1381234
  * storage: Add single-LUN quirk for Jaz USB Adapter
    - LP: #1381234
  * xhci: Fix null pointer dereference if xhci initialization fails
    - LP: #1381234
  * usb: xhci: Fix OOPS in xhci error handling code
    - LP: #1381234
  * xhci: fix oops when xhci resumes from hibernate with hw lpm capable
    devices
    - LP: #1381234
  * drm/ast: open key before detect chips
    - LP: #1381234
  * drm/ast: AST2000 cannot be detected correctly
    - LP: #1381234
  * futex: Unlock hb->lock in futex_wait_requeue_pi() error path
    - LP: #1381234
  * jiffies: Fix timeval conversion to jiffies
    - LP: #1381234
  * alarmtimer: Return relative times in timer_gettime
    - LP: #1381234
  * alarmtimer: Do not signal SIGEV_NONE timers
    - LP: #1381234
  * alarmtimer: Lock k_itimer during timer callback
    - LP: #1381234
  * parisc: Implement new LWS CAS supporting 64 bit operations.
    - LP: #1381234
  * don't bugger nd->seq on set_root_rcu() from follow_dotdot_rcu()
    - LP: #1381234
  * be careful with nd->inode in path_init() and follow_dotdot_rcu()
    - LP: #1381234
  * iio:inkern: fix overwritten -EPROBE_DEFER in of_iio_channel_get_by_name
    - LP: #1381234
  * iio:trigger: modify return value for iio_trigger_get
    - LP: #1381234
  * iio: accel: bma180: Fix indio_dev->trig assignment
    - LP: #1381234
  * iio: adc: ad_sigma_delta: Fix indio_dev->trig assignment
    - LP: #1381234
  * iio: hid_sensor_hub: Fix indio_dev->trig assignment
    - LP: #1381234
  * iio: st_sensors: Fix indio_dev->trig assignment
    - LP: #1381234
  * iio: gyro: itg3200: Fix indio_dev->trig assignment
    - LP: #1381234
  * iio: inv_mpu6050: Fix indio_dev->trig assignment
    - LP: #1381234
  * iio: meter: ade7758: Fix indio_dev->trig assignment
    - LP: #1381234
  * MIPS: ZBOOT: add missing <linux/string.h> include
    - LP: #1381234
  * spi: fsl: Don't use devm_kzalloc in master->setup callback
    - LP: #1381234
  * spi: dw: Don't use devm_kzalloc in master->setup callback
    - LP: #1381234
  * ARM: 8133/1: use irq_set_affinity with force=false when migrating irqs
    - LP: #1381234
  * cx18: fix kernel oops with tda8290 tuner
    - LP: #1381234
  * ASoC: davinci-mcasp: Correct rx format unit configuration
    - LP: #1381234
  * spi: sirf: enable RX_IO_DMA_INT interrupt
    - LP: #1381234
  * perf: Fix a race condition in perf_remove_from_context()
    - LP: #1381234
  * ASoC: samsung-i2s: Maintain CDCLK settings across
    i2s_{shutdown/startup}
    - LP: #1381234
  * ASoC: samsung-i2s: Check secondary DAI exists before referencing
    - LP: #1381234
  * ALSA: hda - Fix invalid pin powermap without jack detection
    - LP: #1381234
  * Input: atkbd - do not try 'deactivate' keyboard on any LG laptops
    - LP: #1381234
  * Input: i8042 - add Fujitsu U574 to no_timeout dmi table
    - LP: #1381234
  * Input: i8042 - add nomux quirk for Avatar AVIU-145A6
    - LP: #1381234
  * iio: adc: at91: don't use the last converted data register
    - LP: #1381234
  * iio:magnetometer: bugfix magnetometers gain values
    - LP: #1381234
  * drm/i915: Fix SRC_COPY width on 830/845g
    - LP: #1381234
  * Target/iser: Get isert_conn reference once got to connected_handler
    - LP: #1381234
  * Target/iser: Don't put isert_conn inside disconnected handler
    - LP: #1381234
  * ARM: 8148/1: flush TLS and thumbee register state during exec
    - LP: #1381234
  * x86, ia64: Move EFI_FB vga_default_device() initialization to
    pci_vga_fixup()
    - LP: #1381234
  * vgaarb: Don't default exclusively to first video device with mem+io
    - LP: #1381234
  * iscsi-target: Fix memory corruption in
    iscsit_logout_post_handler_diffcid
    - LP: #1381234
  * iscsi-target: avoid NULL pointer in iscsi_copy_param_list failure
    - LP: #1381234
  * NFSv4: nfs4_state_manager() vs. nfs_server_remove_lists()
    - LP: #1381234
  * NFSv4: Fix another bug in the close/open_downgrade code
    - LP: #1381234
  * drm/radeon: don't reset dma on NI/SI init
    - LP: #1381234
  * drm/radeon: don't reset sdma on CIK init
    - LP: #1381234
  * drm/radeon: don't reset dma on r6xx-evergreen init
    - LP: #1381234
  * vgaswitcheroo: add vga_switcheroo_fini_domain_pm_ops
    - LP: #1381234
  * drm/radeon/px: fix module unload
    - LP: #1381234
  * drm/nouveau/runpm: fix module unload
    - LP: #1381234
  * libiscsi: fix potential buffer overrun in __iscsi_conn_send_pdu
    - LP: #1381234
  * USB: EHCI: unlink QHs even after the controller has stopped
    - LP: #1381234
  * USB: storage: Add quirk for Adaptec USBConnect 2000 USB-to-SCSI Adapter
    - LP: #1381234
  * USB: storage: Add quirk for Ariston Technologies iConnect USB to SCSI
    adapter
    - LP: #1381234
  * USB: storage: Add quirks for Entrega/Xircom USB to SCSI converters
    - LP: #1381234
  * drm/nouveau: ltc/gf100-: fix cbc issues on certain boards
    - LP: #1381234
  * iwlwifi: increase DEFAULT_MAX_TX_POWER
    - LP: #1381234
  * iwlwifi: mvm: treat EAPOLs like mgmt frames wrt rate
    - LP: #1381234
  * workqueue: apply __WQ_ORDERED to create_singlethread_workqueue()
    - LP: #1381234
  * can: flexcan: mark TX mailbox as TX_INACTIVE
    - LP: #1381234
  * can: flexcan: correctly initialize mailboxes
    - LP: #1381234
  * can: flexcan: implement workaround for errata ERR005829
    - LP: #1381234
  * can: flexcan: put TX mailbox into TX_INACTIVE mode after tx-complete
    - LP: #1381234
  * can: at91_can: add missing prepare and unprepare of the clock
    - LP: #1381234
  * IB/qib: Correct reference counting in debugfs qp_stats
    - LP: #1381234
  * videobuf2-dma-sg: fix for wrong GFP mask to sg_alloc_table_from_pages
    - LP: #1381234
  * vb2: fix plane index sanity check in vb2_plane_cookie()
    - LP: #1381234
  * adv7604: fix inverted condition
    - LP: #1381234
  * md/raid1: intialise start_next_window for READ case to avoid hang
    - LP: #1381234
  * md/raid1: be more cautious where we read-balance during resync.
    - LP: #1381234
  * md/raid1: clean up request counts properly in close_sync()
    - LP: #1381234
  * md/raid1: make sure resync waits for conflicting writes to complete.
    - LP: #1381234
  * md/raid1: Don't use next_resync to determine how far resync has
    progressed
    - LP: #1381234
  * md/raid1: update next_resync under resync_lock.
    - LP: #1381234
  * md/raid1: count resync requests in nr_pending.
    - LP: #1381234
  * md/raid1: fix_read_error should act on all non-faulty devices.
    - LP: #1381234
  * ALSA: pcm: fix fifo_size frame calculation
    - LP: #1381234
  * Fix nasty 32-bit overflow bug in buffer i/o code.
    - LP: #1381234
  * drm/radeon/cik: use a separate counter for CP init timeout
    - LP: #1381234
  * parisc: Only use -mfast-indirect-calls option for 32-bit kernel builds
    - LP: #1381234
  * sched: Fix unreleased llc_shared_mask bit during CPU hotplug
    - LP: #1381234
  * MIPS: mcount: Adjust stack pointer for static trace in MIPS32
    - LP: #1381234
  * nilfs2: fix data loss with mmap()
    - LP: #1381234
  * ocfs2/dlm: do not get resource spinlock if lockres is new
    - LP: #1381234
  * mm, slab: initialize object alignment on cache creation
    - LP: #1381234
  * mm: softdirty: keep bit when zapping file pte
    - LP: #1381234
  * shmem: fix nlink for rename overwrite directory
    - LP: #1381234
  * ARM: 8165/1: alignment: don't break misaligned NEON load/store
    - LP: #1381234
  * ASoC: core: fix possible ZERO_SIZE_PTR pointer dereferencing error.
    - LP: #1381234
  * cpufreq: integrator: fix integrator_cpufreq_remove return type
    - LP: #1381234
  * drm/i915: Flush the PTEs after updating them before suspend
    - LP: #1381234
  * ARM: 8178/1: fix set_tls for !CONFIG_KUSER_HELPERS
    - LP: #1381234
  * md/raid5: disable 'DISCARD' by default due to safety concerns.
    - LP: #1381234
  * mm: migrate: Close race between migration completion and mprotect
    - LP: #1381234
  * mm: numa: Do not mark PTEs pte_numa when splitting huge pages
    - LP: #1381234
  * Fix problem recognizing symlinks
    - LP: #1381234
  * mm: memcontrol: do not iterate uninitialized memcgs
    - LP: #1381234
  * perf: fix perf bug in fork()
    - LP: #1381234
  * mm: page_alloc: fix zone allocation fairness on UP
    - LP: #1381234
  * init/Kconfig: Hide printk log config if CONFIG_PRINTK=n
    - LP: #1381234
  * init/Kconfig: Fix HAVE_FUTEX_CMPXCHG to not break up the EXPERT menu
    - LP: #1381234
  * genhd: fix leftover might_sleep() in blk_free_devt()
    - LP: #1381234
  * Linux 3.13.11.9
    - LP: #1381234
  * NVMe: Initialize device reference count earlier
    - LP: #1382221
  * nfs: fix duplicate proc entries
    - LP: #1376245
  * xfs: xfs_dir2_block_to_sf temp buffer allocation fails
    - LP: #1382333
  * UPSTREAM: kernel: Mark function as static in kernel/seccomp.c
    - LP: #1379020
  * ARM: 8087/1: ptrace: reload syscall number after secure_computing()
    check
    - LP: #1379020
  * seccomp: create internal mode-setting function
    - LP: #1379020
  * seccomp: extract check/assign mode helpers
    - LP: #1379020
  * seccomp: split mode setting routines
    - LP: #1379020
  * seccomp: add "seccomp" syscall
    - LP: #1379020
  * ARM: add seccomp syscall
    - LP: #1379020
  * MIPS: add seccomp syscall
    - LP: #1379020
  * sched: move no_new_privs into new atomic flags
    - LP: #1379020
  * seccomp: split filter prep from check and apply
    - LP: #1379020
  * seccomp: introduce writer locking
    - LP: #1379020
  * seccomp: allow mode setting across threads
    - LP: #1379020
  * seccomp: implement SECCOMP_FILTER_FLAG_TSYNC
    - LP: #1379020
  * seccomp: Replace BUG(!spin_is_locked()) with assert_spin_lock
    - LP: #1379020
  * fs: Add a missing permission check to do_umount
    - LP: #1383358
    - CVE-2014-7975
  * mfd: rtsx_pcr: Fix MSI enable error handling
    - LP: #1366841
  * xen/balloon: Don't continue ballooning when BP_ECANCELED is encountered
    - LP: #1304001
  * Bluetooth: Fix HCI H5 corrupted ack value
    - LP: #1387886
  * dmaengine: fix xor sources continuation
    - LP: #1387886
  * siano: add support for PCTV 77e
    - LP: #1387886
  * em28xx-v4l: give back all active video buffers to the vb2 core properly
    on streaming stop
    - LP: #1387886
  * em28xx-v4l: fix video buffer field order reporting in progressive mode
    - LP: #1387886
  * crypto: caam - fix addressing of struct member
    - LP: #1387886
  * x86, fpu: shift drop_init_fpu() from save_xstate_sig() to
    handle_signal()
    - LP: #1387886
  * x86, fpu: __restore_xstate_sig()->math_state_restore() needs
    preempt_disable()
    - LP: #1387886
  * KVM: do not bias the generation number in kvm_current_mmio_generation
    - LP: #1387886
  * kvm: fix potentially corrupt mmio cache
    - LP: #1387886
  * kvm: x86: fix stale mmio cache bug
    - LP: #1387886
  * UBIFS: fix free log space calculation
    - LP: #1387886
  * Bluetooth: Fix issue with USB suspend in btusb driver
    - LP: #1387886
  * mmc: rtsx_pci_sdmmc: fix incorrect last byte in R2 response
    - LP: #1387886
  * KVM: s390: unintended fallthrough for external call
    - LP: #1387886
  * UBI: add missing kmem_cache_free() in process_pool_aeb error path
    - LP: #1387886
  * PCI: Increase IBM ipr SAS Crocodile BARs to at least system page size
    - LP: #1387886
  * drbd: compute the end before rb_insert_augmented()
    - LP: #1387886
  * Bluetooth: Fix setting correct security level when initiating SMP
    - LP: #1387886
  * mmc: tmio: prevent endless loop in tmio_mmc_set_clock()
    - LP: #1387886
  * iwlwifi: Add missing PCI IDs for the 7260 series
    - LP: #1387886
  * media: usb: uvc: add a quirk for Dell XPS M1330 webcam
    - LP: #1387886
  * USB: serial: cp210x: added Ketra N1 wireless interface support
    - LP: #1387886
  * USB: cp210x: add support for Seluxit USB dongle
    - LP: #1387886
  * PCI: Generate uppercase hex for modalias interface class
    - LP: #1387886
  * PCI: mvebu: Fix uninitialized variable in mvebu_get_tgt_attr()
    - LP: #1387886
  * xfs: ensure WB_SYNC_ALL writeback handles partial pages correctly
    - LP: #1387886
  * v4l2-common: fix overflow in v4l_bound_align_image()
    - LP: #1387886
  * USB: Add device quirk for ASUS T100 Base Station keyboard
    - LP: #1387886
  * mei: bus: fix possible boundaries violation
    - LP: #1387886
  * firmware_class: make sure fw requests contain a name
    - LP: #1387886
  * Drivers: hv: vmbus: Cleanup vmbus_post_msg()
    - LP: #1387886
  * Drivers: hv: vmbus: Cleanup vmbus_teardown_gpadl()
    - LP: #1387886
  * Drivers: hv: vmbus: Cleanup vmbus_establish_gpadl()
    - LP: #1387886
  * Drivers: hv: vmbus: Fix a bug in vmbus_open()
    - LP: #1387886
  * Drivers: hv: vmbus: Cleanup vmbus_close_internal()
    - LP: #1387886
  * Drivers: hv: vmbus: Cleanup hv_post_message()
    - LP: #1387886
  * spi: dw-mid: respect 8 bit mode
    - LP: #1387886
  * spi: dw-mid: terminate ongoing transfers at exit
    - LP: #1387886
  * kvm: don't take vcpu mutex for obviously invalid vcpu ioctls
    - LP: #1387886
  * x86/intel/quark: Switch off CR4.PGE so TLB flush uses CR3 instead
    - LP: #1387886
  * ARM: at91: fix at91sam9263ek DT mmc pinmuxing settings
    - LP: #1387886
  * ARM: at91/PMC: don't forget to write PMC_PCDR register to disable
    clocks
    - LP: #1387886
  * Fixing lease renewal
    - LP: #1387886
  * lockd: Try to reconnect if statd has moved
    - LP: #1387886
  * qla2xxx: Use correct offset to req-q-out for reserve calculation
    - LP: #1387886
  * power: charger-manager: Fix NULL pointer exception with missing
    cm-fuel-gauge
    - LP: #1387886
  * rt2800: correct BBP1_TX_POWER_CTRL mask
    - LP: #1387886
  * regmap: fix NULL pointer dereference in _regmap_write/read
    - LP: #1387886
  * Documentation: lzo: document part of the encoding
    - LP: #1387886
  * lzo: check for length overrun in variable length encoding.
    - LP: #1387886
  * regmap: debugfs: fix possbile NULL pointer dereference
    - LP: #1387886
  * regmap: fix possible ZERO_SIZE_PTR pointer dereferencing error.
    - LP: #1387886
  * net_dma: simple removal
    - LP: #1387886
  * libata-sff: Fix controllers with no ctl port
    - LP: #1387886
  * NFSv4: Fix lock recovery when CREATE_SESSION/SETCLIENTID_CONFIRM fails
    - LP: #1387886
  * NFSv4: fix open/lock state recovery error handling
    - LP: #1387886
  * tty: omap-serial: fix division by zero
    - LP: #1387886
  * serial: 8250: Add Quark X1000 to 8250_pci.c
    - LP: #1387886
  * missing data dependency barrier in prepend_name()
    - LP: #1387886
  * be2iscsi: check ip buffer before copying
    - LP: #1387886
  * framebuffer: fix border color
    - LP: #1387886
  * framebuffer: fix screen corruption when copying
    - LP: #1387886
  * mpc85xx_edac: Make L2 interrupt shared too
    - LP: #1387886
  * NFSv4.1: Fix an NFSv4.1 state renewal regression
    - LP: #1387886
  * xen-blkback: fix leak on grant map error path
    - LP: #1387886
  * m68k: Disable/restore interrupts in hwreg_present()/hwreg_write()
    - LP: #1387886
  * ASoC: tlv320aic3x: fix PLL D configuration
    - LP: #1387886
  * dm bufio: update last_accessed when relinking a buffer
    - LP: #1387886
  * dm bufio: when done scanning return from __scan immediately
    - LP: #1387886
  * dm log userspace: fix memory leak in dm_ulog_tfr_init failure path
    - LP: #1387886
  * ecryptfs: avoid to access NULL pointer when write metadata in xattr
    - LP: #1387886
  * x86_64, entry: Filter RFLAGS.NT on entry from userspace
    - LP: #1387886
  * ASoC: soc-dapm: fix use after free
    - LP: #1387886
  * pata_serverworks: disable 64-KB DMA transfers on Broadcom OSB4 IDE
    Controller
    - LP: #1387886
  * drm/ast: Fix HW cursor image
    - LP: #1387886
  * x86: Reject x32 executables if x32 ABI not supported
    - LP: #1387886
  * kill wbuf_queued/wbuf_dwork_lock
    - LP: #1387886
  * fs: Fix theoretical division by 0 in super_cache_scan().
    - LP: #1387886
  * fs: make cont_expand_zero interruptible
    - LP: #1387886
  * fix misuses of f_count() in ppp and netlink
    - LP: #1387886
  * block: fix alignment_offset math that assumes io_min is a power-of-2
    - LP: #1387886
  * fanotify: enable close-on-exec on events' fd when requested in
    fanotify_init()
    - LP: #1387886
  * mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set
    - LP: #1387886
  * Input: i8042 - add noloop quirk for Asus X750LN
    - LP: #1387886
  * um: ubd: Fix for processes stuck in D state forever
    - LP: #1387886
  * kernel: add support for gcc 5
    - LP: #1387886
  * ALSA: emu10k1: Fix deadlock in synth voice lookup
    - LP: #1387886
  * libceph: ceph-msgr workqueue needs a resque worker
    - LP: #1387886
  * mnt: Prevent pivot_root from creating a loop in the mount tree
    - LP: #1387886
  * modules, lock around setting of MODULE_STATE_UNFORMED
    - LP: #1387886
  * virtio_pci: fix virtio spec compliance on restore
    - LP: #1387886
  * selinux: fix inode security list corruption
    - LP: #1387886
  * pstore: Fix duplicate {console,ftrace}-efi entries
    - LP: #1387886
  * futex: Ensure get_futex_key_refs() always implies a barrier
    - LP: #1387886
  * x86,kvm,vmx: Preserve CR4 across VM entry
    - LP: #1387886
  * crypto: caam - remove duplicated sg copy functions
    - LP: #1387886
  * Linux 3.13.11.10
    - LP: #1387886
  * ipmi: Turn off default probing of interfaces
    - LP: #1388952
 -- Luis Henriques <luis.henriques@xxxxxxxxxxxxx>   Thu, 13 Nov 2014 17:13:01 +0000

** Changed in: linux (Ubuntu Trusty)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-7975

** Changed in: linux (Ubuntu Utopic)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1388952

Title:
  CONFIG_IPMI_SI_PROBE_DEFAULTS should be disabled on ARM

Status in “linux” package in Ubuntu:
  Fix Committed
Status in “linux” source package in Trusty:
  Fix Released
Status in “linux” source package in Utopic:
  Fix Released
Status in “linux” source package in Vivid:
  Fix Committed

Bug description:
  [Impact]
  Causes fault which can lead to a hang or crash on ARM systems when loading the ipmi_si module.

  The ipmi_si driver includes code that probes into iospace for a KCS
  interface. This is to support platforms that don't expose this
  interface in SMBIOS/ACPI tables, and this is a defined discovery
  mechanism as per the IPMI Spec (v2.0r1, section 9.5).  However, this
  assumption is x86-centric. It is not safe to blindly probe I/O space
  on ARM platforms.

  [Test Case]
  sudo modprobe ipmi_si

  This should discover an IPMI system interface if present, or fail to
  load otherwise. But it should not cause a hang, a synchronous external
  abort, or other kernel failure.

  [Regression Risk]
  The proposed fix is only to the ARM config, so the risk to other architectures is negligible. There is a risk that there exists some system out there where this probing works - but I'm highly confident no such system exists. Existing ARM systems supported by Ubuntu either describe their IPMI/KCS interface using device-tree or do not provide one.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1388952/+subscriptions