kernel-packages team mailing list archive

[Launchpad Bug Tracker <1388952@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 3.16.0-25.33

---------------
linux (3.16.0-25.33) utopic; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1389170

  [ dann frazier ]

  * [Config] Disable CONFIG_IPMI_SI_PROBE_DEFAULTS on armhf and arm64
    - LP: #1388952

  [ Duc Dang ]

  * SAUCE: (no-up) [PCIE] APM X-Gene: Remove debug messages in MSI
    interrupt handler path.
    - LP: #1382244
  * SAUCE: (no-up) PCI: X-Gene: Fix max payload size and phantom function
    configuration
    - LP: #1386261

  [ Tim Gardner ]

  * Revert "SAUCE: (no-up) PCI: Increase BAR size quirk for IBM ipr SAS
    Crocodile adapters"
    - LP: #1387813
  * [Config] CONFIG_SOUND_OSS_CORE_PRECLAIM=n
    - LP: #1385510
  * [Debian] install usbipd
    - LP: #898003
  * [Debian] Fix linux-doc dangling symlinks
    - LP: #661306

  [ Upstream Kernel Changes ]

  * Revert "macvlan: simplify the structure port"
    - LP: #1381490
  * Revert "net/macb: add pinctrl consumer support"
    - LP: #1381490
  * Revert "lzo: properly check for overruns"
    - LP: #1387813
  * Revert "ath9k_hw: reduce ANI firstep range for older chips"
    - LP: #1387813
  * ASoC: ssm2602: do not hardcode type to SSM2602
    - LP: #1379785
  * ASoC: core: fix possible ZERO_SIZE_PTR pointer dereferencing error.
    - LP: #1379785
  * perf: fix perf bug in fork()
    - LP: #1379785
  * mm: memcontrol: do not iterate uninitialized memcgs
    - LP: #1379785
  * mm: migrate: Close race between migration completion and mprotect
    - LP: #1379785
  * i2c: qup: Fix order of runtime pm initialization
    - LP: #1379785
  * i2c: rk3x: fix 0 length write transfers
    - LP: #1379785
  * ACPI / i915: Update the condition to ignore firmware backlight change
    request
    - LP: #1379785
  * cpufreq: integrator: fix integrator_cpufreq_remove return type
    - LP: #1379785
  * cpufreq: pcc-cpufreq: Fix wait_event() under spinlock
    - LP: #1379785
  * md/raid5: disable 'DISCARD' by default due to safety concerns.
    - LP: #1379785
  * drm/i915: Flush the PTEs after updating them before suspend
    - LP: #1379785
  * Fix problem recognizing symlinks
    - LP: #1379785
  * init/Kconfig: Fix HAVE_FUTEX_CMPXCHG to not break up the EXPERT menu
    - LP: #1379785
  * ring-buffer: Fix infinite spin in reading buffer
    - LP: #1379785
  * uas: Only complain about missing sg if all other checks succeed
    - LP: #1379785
  * uas: Log a warning when we cannot use uas because the hcd lacks streams
    - LP: #1379785
  * uas: Disable uas on ASM1051 devices
    - LP: #1379785
  * uas: Add missing le16_to_cpu calls to asm1051 / asm1053 usb-id check
    - LP: #1379785
  * x86, ia64: Move EFI_FB vga_default_device() initialization to
    pci_vga_fixup()
    - LP: #1379785
  * vgaarb: Don't default exclusively to first video device with mem+io
    - LP: #1379785
  * mm, thp: move invariant bug check out of loop in __split_huge_page_map
    - LP: #1379785
  * mm: numa: Do not mark PTEs pte_numa when splitting huge pages
    - LP: #1379785
  * media: vb2: fix VBI/poll regression
    - LP: #1379785
  * jiffies: Fix timeval conversion to jiffies
    - LP: #1379785
  * Linux 3.16.5
    - LP: #1379785
  * netlink: reset network header before passing to taps
    - LP: #1381490
  * rtnetlink: fix VF info size
    - LP: #1381490
  * net: Always untag vlan-tagged traffic on input.
    - LP: #1381490
  * myri10ge: check for DMA mapping errors
    - LP: #1381490
  * tcp: don't use timestamp from repaired skb-s to calculate RTT (v2)
    - LP: #1381490
  * sit: Fix ipip6_tunnel_lookup device matching criteria
    - LP: #1381490
  * tcp: fix tcp_release_cb() to dispatch via address family for
    mtu_reduced()
    - LP: #1381490
  * tcp: fix ssthresh and undo for consecutive short FRTO episodes
    - LP: #1381490
  * net: phy: smsc: move smsc_phy_config_init reset part in a soft_reset
    function
    - LP: #1381490
  * tipc: fix message importance range check
    - LP: #1381490
  * packet: handle too big packets for PACKET_V3
    - LP: #1381490
  * bnx2x: Revert UNDI flushing mechanism
    - LP: #1381490
  * net: ipv6: fib: don't sleep inside atomic lock
    - LP: #1381490
  * openvswitch: fix panic with multiple vlan headers
    - LP: #1381490
  * vxlan: fix incorrect initializer in union vxlan_addr
    - LP: #1381490
  * net: fix checksum features handling in netif_skb_features()
    - LP: #1381490
  * ipv6: fix rtnl locking in setsockopt for anycast and multicast
    - LP: #1381490
  * l2tp: fix race while getting PMTU on PPP pseudo-wire
    - LP: #1381490
  * ipv6: restore the behavior of ipv6_sock_ac_drop()
    - LP: #1381490
  * bonding: fix div by zero while enslaving and transmitting
    - LP: #1381490
  * net: filter: fix possible use after free
    - LP: #1381490
  * bridge: Check if vlan filtering is enabled only once.
    - LP: #1381490
  * bridge: Fix br_should_learn to check vlan_enabled
    - LP: #1381490
  * net: allow macvlans to move to net namespace
    - LP: #1381490
  * macvlan: allow to enqueue broadcast pkt on virtual device
    - LP: #1381490
  * tg3: Work around HW/FW limitations with vlan encapsulated frames
    - LP: #1381490
  * tg3: Allow for recieve of full-size 8021AD frames
    - LP: #1381490
  * xfrm: Generate blackhole routes only from route lookup functions
    - LP: #1381490
  * xfrm: Generate queueing routes only from route lookup functions
    - LP: #1381490
  * ip_tunnel: Don't allow to add the same tunnel multiple times.
    - LP: #1381490
  * macvtap: Fix race between device delete and open.
    - LP: #1381490
  * net/mlx4_core: Allow not to specify probe_vf in SRIOV IB mode
    - LP: #1381490
  * net/mlx4: Correctly configure single ported VFs from the host
    - LP: #1381490
  * gro: fix aggregation for skb using frag_list
    - LP: #1381490
  * ipv6: remove rt6i_genid
    - LP: #1381490
  * hyperv: Fix a bug in netvsc_start_xmit()
    - LP: #1381490
  * ip6_gre: fix flowi6_proto value in xmit path
    - LP: #1381490
  * net: systemport: fix bcm_sysport_insert_tsb()
    - LP: #1381490
  * team: avoid race condition in scheduling delayed work
    - LP: #1381490
  * hyperv: Fix a bug in netvsc_send()
    - LP: #1381490
  * sctp: handle association restarts when the socket is closed.
    - LP: #1381490
  * net_sched: copy exts->type in tcf_exts_change()
    - LP: #1381490
  * uas: Add a quirk for rejecting ATA_12 and ATA_16 commands
    - LP: #1381490
  * uas: Add no-report-opcodes quirk
    - LP: #1381490
  * uas: Add US_FL_NO_ATA_1X quirk for Seagate (0bc2:ab20) drives
    - LP: #1381490
  * uas: Add another ASM1051 usb-id to the uas blacklist
    - LP: #1381490
  * USB: Add device quirk for ASUS T100 Base Station keyboard
    - LP: #1381490
  * USB: serial: cp210x: added Ketra N1 wireless interface support
    - LP: #1381490
  * USB: cp210x: add support for Seluxit USB dongle
    - LP: #1381490
  * usb: musb: dsps: kill OTG timer on suspend
    - LP: #1381490
  * crypto: caam - fix addressing of struct member
    - LP: #1381490
  * driver/base/node: remove unnecessary kfree of node struct from
    unregister_one_node
    - LP: #1381490
  * serial: 8250: Add Quark X1000 to 8250_pci.c
    - LP: #1381490
  * Linux 3.16.6
    - LP: #1381490
  * fs: Add a missing permission check to do_umount
    - LP: #1383358
    - CVE-2014-7975
  * deb-pkg: Add support for powerpc little endian
    - LP: #1383884
  * xen/balloon: Don't continue ballooning when BP_ECANCELED is encountered
    - LP: #1304001
  * cxl: Disable secondary hash in segment table
    - LP: #1387523
  * cxl: Refactor cxl_load_segment() and find_free_sste()
    - LP: #1387523
  * powerpc/mm: Use appropriate ESID mask in copro_calculate_slb()
    - LP: #1387523
  * cxl: Fix PSL error due to duplicate segment table entries
    - LP: #1387523
  * btrfs: wake up transaction thread from SYNC_FS ioctl
    - LP: #1387813
  * btrfs: Fix a deadlock in btrfs_dev_replace_finishing()
    - LP: #1387813
  * Btrfs: add missing compression property remove in btrfs_ioctl_setflags
    - LP: #1387813
  * Btrfs: fix up bounds checking in lseek
    - LP: #1387813
  * Btrfs: don't do async reclaim during log replay
    - LP: #1387813
  * Btrfs: try not to ENOSPC on log replay
    - LP: #1387813
  * Btrfs: cleanup error handling in build_backref_tree
    - LP: #1387813
  * Btrfs: fix build_backref_tree issue with multiple shared blocks
    - LP: #1387813
  * Btrfs: fix race in WAIT_SYNC ioctl
    - LP: #1387813
  * usb: pch_udc: usb gadget device support for Intel Quark X1000
    - LP: #1387813
  * pci_ids: Add support for Intel Quark ILB
    - LP: #1387813
  * kvm: x86: fix stale mmio cache bug
    - LP: #1387813
  * kvm: fix potentially corrupt mmio cache
    - LP: #1387813
  * KVM: do not bias the generation number in kvm_current_mmio_generation
    - LP: #1387813
  * KVM: s390: unintended fallthrough for external call
    - LP: #1387813
  * kvm: don't take vcpu mutex for obviously invalid vcpu ioctls
    - LP: #1387813
  * x86,kvm,vmx: Preserve CR4 across VM entry
    - LP: #1387813
  * x86/intel/quark: Switch off CR4.PGE so TLB flush uses CR3 instead
    - LP: #1387813
  * spi: dw-mid: respect 8 bit mode
    - LP: #1387813
  * spi: dw-mid: check that DMA was inited before exit
    - LP: #1387813
  * HID: rmi: check sanity of the incoming report
    - LP: #1387813
  * mpc85xx_edac: Make L2 interrupt shared too
    - LP: #1387813
  * regmap: debugfs: fix possbile NULL pointer dereference
    - LP: #1387813
  * regmap: fix NULL pointer dereference in _regmap_write/read
    - LP: #1387813
  * regmap: fix possible ZERO_SIZE_PTR pointer dereferencing error.
    - LP: #1387813
  * be2iscsi: check ip buffer before copying
    - LP: #1387813
  * regulator: ltc3589: fix broken voltage transitions
    - LP: #1387813
  * qla2xxx: fix kernel NULL pointer access
    - LP: #1387813
  * qla2xxx: Use correct offset to req-q-out for reserve calculation
    - LP: #1387813
  * qla2xxx: Fix shost use-after-free on device removal
    - LP: #1387813
  * dmaengine: fix xor sources continuation
    - LP: #1387813
  * firmware_class: make sure fw requests contain a name
    - LP: #1387813
  * arm64: debug: don't re-enable debug exceptions on return from el1_dbg
    - LP: #1387813
  * Drivers: hv: util: Properly pack the data for file copy functionality
    - LP: #1387813
  * Drivers: hv: vmbus: Cleanup vmbus_post_msg()
    - LP: #1387813
  * Drivers: hv: vmbus: Cleanup vmbus_teardown_gpadl()
    - LP: #1387813
  * Drivers: hv: vmbus: Cleanup vmbus_close_internal()
    - LP: #1387813
  * Drivers: hv: vmbus: Cleanup vmbus_establish_gpadl()
    - LP: #1387813
  * Drivers: hv: vmbus: Fix a bug in vmbus_open()
    - LP: #1387813
  * Drivers: hv: vmbus: Cleanup hv_post_message()
    - LP: #1387813
  * mei: bus: fix possible boundaries violation
    - LP: #1387813
  * m68k: Disable/restore interrupts in hwreg_present()/hwreg_write()
    - LP: #1387813
  * Fixing lease renewal
    - LP: #1387813
  * Documentation: lzo: document part of the encoding
    - LP: #1387813
  * lzo: check for length overrun in variable length encoding.
    - LP: #1387813
  * tty: omap-serial: fix division by zero
    - LP: #1387813
  * NFSv4: Fix lock recovery when CREATE_SESSION/SETCLIENTID_CONFIRM fails
    - LP: #1387813
  * NFSv4: fix open/lock state recovery error handling
    - LP: #1387813
  * NFSv4.1: Fix an NFSv4.1 state renewal regression
    - LP: #1387813
  * nfsd4: reserve adequate space for LOCK op
    - LP: #1387813
  * NFS: Fix an uninitialised pointer Oops in the writeback error path
    - LP: #1387813
  * NFS: Fix a bogus warning in nfs_generic_pgio
    - LP: #1387813
  * iwlwifi: mvm: disable BT Co-running by default
    - LP: #1387813
  * iwlwifi: Add missing PCI IDs for the 7260 series
    - LP: #1387813
  * spi: dw-mid: terminate ongoing transfers at exit
    - LP: #1387813
  * PCI: mvebu: Fix uninitialized variable in mvebu_get_tgt_attr()
    - LP: #1387813
  * PCI: Add missing MEM_64 mask in
    pci_assign_unassigned_bridge_resources()
    - LP: #1387813
  * PCI: Generate uppercase hex for modalias interface class
    - LP: #1387813
  * rt2800: correct BBP1_TX_POWER_CTRL mask
    - LP: #1387813
  * Bluetooth: Fix HCI H5 corrupted ack value
    - LP: #1387813
  * Bluetooth: Fix incorrect LE CoC PDU length restriction based on HCI MTU
    - LP: #1387813
  * Bluetooth: Fix issue with USB suspend in btusb driver
    - LP: #1387813
  * Bluetooth: Fix setting correct security level when initiating SMP
    - LP: #1387813
  * mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set
    - LP: #1387813
  * fanotify: enable close-on-exec on events' fd when requested in
    fanotify_init()
    - LP: #1387813
  * kernel: add support for gcc 5
    - LP: #1387813
  * rtc-cmos: fix wakeup from S5 without CONFIG_PM_SLEEP
    - LP: #1387813
  * futex: Ensure get_futex_key_refs() always implies a barrier
    - LP: #1387813
  * powerpc/iommu/ddw: Fix endianness
    - LP: #1387813
  * powerpc/eeh: Clear frozen device state in time
    - LP: #1387813
  * ima: fix fallback to use new_sync_read()
    - LP: #1387813
  * ima: provide flag to identify new empty files
    - LP: #1387813
  * arm64: compat: fix compat types affecting struct compat_elf_prpsinfo
    - LP: #1387813
  * ALSA: pcm: use the same dma mmap codepath both for arm and arm64
    - LP: #1387813
  * ALSA: bebob: Fix failure to detect source of clock for Terratec Phase
    88
    - LP: #1387813
  * ALSA: emu10k1: Fix deadlock in synth voice lookup
    - LP: #1387813
  * ALSA: ALC283 codec - Avoid pop noise on headphones during
    suspend/resume
    - LP: #1387813
  * ALSA: usb-audio: Add support for Steinberg UR22 USB interface
    - LP: #1387813
  * ALSA: hda - hdmi: Fix missing ELD change event on plug/unplug
    - LP: #1387813
  * ALSA: hda - Fix inverted LED gpio setup for Lenovo Ideapad
    - LP: #1387813
  * ALSA: hda - Add missing terminating entry to SND_HDA_PIN_QUIRK macro
    - LP: #1387813
  * ARM: at91/dt: Fix typo regarding can0_clk
    - LP: #1387813
  * ARM: at91: fix at91sam9263ek DT mmc pinmuxing settings
    - LP: #1387813
  * ARM: at91/PMC: don't forget to write PMC_PCDR register to disable
    clocks
    - LP: #1387813
  * ARM: Kirkwood: Fix DT based DSA.
    - LP: #1387813
  * ARM: mvebu: Netgear RN104: Use Hardware BCH ECC
    - LP: #1387813
  * ARM: mvebu: Netgear RN2120: Use Hardware BCH ECC
    - LP: #1387813
  * ARM: mvebu: Netgear RN102: Use Hardware BCH ECC
    - LP: #1387813
  * ARM: dts: imx28-evk: Let i2c0 run at 100kHz
    - LP: #1387813
  * ecryptfs: avoid to access NULL pointer when write metadata in xattr
    - LP: #1387813
  * xfs: ensure WB_SYNC_ALL writeback handles partial pages correctly
    - LP: #1387813
  * sparc64: Do not disable interrupts in nmi_cpu_busy()
    - LP: #1387813
  * sparc64: Fix pcr_ops initialization and usage bugs.
    - LP: #1387813
  * sparc32: dma_alloc_coherent must honour gfp flags
    - LP: #1387813
  * sparc64: sun4v TLB error power off events
    - LP: #1387813
  * sparc64: Fix corrupted thread fault code.
    - LP: #1387813
  * sparc64: find_node adjustment
    - LP: #1387813
  * sparc64: Move request_irq() from ldc_bind() to ldc_alloc()
    - LP: #1387813
  * sparc: Let memset return the address argument
    - LP: #1387813
  * sparc: bpf_jit: fix support for ldx/stx mem and SKF_AD_VLAN_TAG
    - LP: #1387813
  * sparc: bpf_jit: fix loads from negative offsets
    - LP: #1387813
  * sparc64: Fix reversed start/end in flush_tlb_kernel_range()
    - LP: #1387813
  * sparc64: Fix lockdep warnings on reboot on Ultra-5
    - LP: #1387813
  * sparc64: Fix FPU register corruption with AES crypto offload.
    - LP: #1387813
  * sparc64: Do not define thread fpregs save area as zero-length array.
    - LP: #1387813
  * sparc64: Fix hibernation code refrence to PAGE_OFFSET.
    - LP: #1387813
  * sparc64: correctly recognise M6 and M7 cpu type
    - LP: #1387813
  * sparc64: support M6 and M7 for building CPU distribution map
    - LP: #1387813
  * sparc64: cpu hardware caps support for sparc M6 and M7
    - LP: #1387813
  * sparc64: T5 PMU
    - LP: #1387813
  * sparc64: Switch to 4-level page tables.
    - LP: #1387813
  * sparc64: Define VA hole at run time, rather than at compile time.
    - LP: #1387813
  * sparc64: Adjust KTSB assembler to support larger physical addresses.
    - LP: #1387813
  * sparc64: Fix physical memory management regressions with large
    max_phys_bits.
    - LP: #1387813
  * sparc64: Use kernel page tables for vmemmap.
    - LP: #1387813
  * sparc64: Increase MAX_PHYS_ADDRESS_BITS to 53.
    - LP: #1387813
  * sparc64: Adjust vmalloc region size based upon available virtual
    address bits.
    - LP: #1387813
  * sparc64: sparse irq
    - LP: #1387813
  * sparc64: Kill unnecessary tables and increase MAX_BANKS.
    - LP: #1387813
  * sparc64: Increase size of boot string to 1024 bytes
    - LP: #1387813
  * sparc64: Fix register corruption in top-most kernel stack frame during
    boot.
    - LP: #1387813
  * sparc64: Implement __get_user_pages_fast().
    - LP: #1387813
  * PCI: Increase IBM ipr SAS Crocodile BARs to at least system page size
    - LP: #1387813
  * Linux 3.16.7
    - LP: #1387813
  * powerpc/perf/hv-24x7: Simplify catalog_read()
    - LP: #1380432
 -- Luis Henriques <luis.henriques@xxxxxxxxxxxxx>   Tue, 04 Nov 2014 10:53:55 +0000

** Changed in: linux (Ubuntu Vivid)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1388952

Title:
  CONFIG_IPMI_SI_PROBE_DEFAULTS should be disabled on ARM

Status in “linux” package in Ubuntu:
  Fix Released
Status in “linux” source package in Trusty:
  Fix Released
Status in “linux” source package in Utopic:
  Fix Released
Status in “linux” source package in Vivid:
  Fix Released

Bug description:
  [Impact]
  Causes fault which can lead to a hang or crash on ARM systems when loading the ipmi_si module.

  The ipmi_si driver includes code that probes into iospace for a KCS
  interface. This is to support platforms that don't expose this
  interface in SMBIOS/ACPI tables, and this is a defined discovery
  mechanism as per the IPMI Spec (v2.0r1, section 9.5).  However, this
  assumption is x86-centric. It is not safe to blindly probe I/O space
  on ARM platforms.

  [Test Case]
  sudo modprobe ipmi_si

  This should discover an IPMI system interface if present, or fail to
  load otherwise. But it should not cause a hang, a synchronous external
  abort, or other kernel failure.

  [Regression Risk]
  The proposed fix is only to the ARM config, so the risk to other architectures is negligible. There is a risk that there exists some system out there where this probing works - but I'm highly confident no such system exists. Existing ARM systems supported by Ubuntu either describe their IPMI/KCS interface using device-tree or do not provide one.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1388952/+subscriptions