Saucy update to v3.11.10.4 stable release

Bug #1279399 reported by Joseph Salisbury
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Medium
Joseph Salisbury
Saucy
Fix Released
Medium
Joseph Salisbury

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The v3.11.10.4 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the v3.11.10.4 stable release:

Linux 3.11.10.4
x86, cpu, amd: Add workaround for family 16h, erratum 793
xen/pvhvm: If xen_platform_pci=0 is set don't blow up (v4).
ALSA: hda/hdmi - allow PIN_OUT to be dynamically enabled
ALSA: hda - hdmi: introduce patch_nvhdmi()
usb: core: get config and string descriptors for unauthorized devices
tty/serial: at91: Handle shutdown more safely
ip6tnl: fix double free of fb_tnl_dev on exit
Revert "ip6tnl: fix use after free of fb_tnl_dev"
sit: fix double free of fb_tunnel_dev on exit
xen-netfront: fix resource leak in netfront
net: Fix memory leak if TPROXY used with TCP early demux
fib_frontend: fix possible NULL pointer dereference
ip_tunnel: clear IPCB in ip_tunnel_xmit() in case dst_link_failure() is called
s390/bpf,jit: fix 32 bit divisions, use unsigned divide instructions
bpf: do not use reciprocal divide
tcp: metrics: Avoid duplicate entries with the same destination-IP
net,via-rhine: Fix tx_timeout handling
net: avoid reference counter overflows on fib_rules in multicast forwarding
ieee802154: Fix memory leak in ieee802154_add_iface()
inet_diag: fix inet_diag_dump_icsk() timewait socket state logic
bnx2x: fix DMA unmapping of TSO split BDs
libata: disable LPM for some WD SATA-I devices
USB: pl2303: fix data corruption on termios updates
mm/mempolicy.c: fix mempolicy printing in numa_maps
powerpc: thp: Fix crash on mremap
e1000e: fix compiler warnings
e752x_edac: Fix pci_dev usage count
lib/decompressors: fix "no limit" output buffer length
drm/nouveau/bios: fix offset calculation for BMPv1 bioses
mm: hugetlbfs: fix hugetlbfs optimization
kvm: x86: fix apic_base enable check
hpfs: remember free space
parisc: fix cache-flushing
x86, x32: Correct invalid use of user timespec in the kernel
mm, oom: base root bonus on current usage
mm: don't lose the SOFT_DIRTY flag on mprotect
zram: fix race between reset and flushing pending work
target/iscsi: Fix network portal creation race
fs/compat: fix lookup_dcookie() parameter handling
fs/compat: fix parameter handling for compat readv/writev syscalls
mm: numa: initialise numa balancing after jump label initialisation
mm/page-writeback.c: fix dirty_balance_reserve subtraction from dirtyable memory
drm/radeon/dce8: workaround for atom BlankCrtc table
drm/radeon/DCE4+: clear bios scratch dpms bit (v2)
drm/radeon: fix DAC interrupt handling on DCE5+
powerpc: Make sure "cache" directory is removed when offlining cpu
drm: ast,cirrus,mgag200: use drm_can_sleep
ACPI / init: Flag use of ACPI and ACPI idioms for power supplies to regulator API
btrfs: restrict snapshotting to own subvolumes
Btrfs: handle EAGAIN case properly in btrfs_drop_snapshot()
drm/i915: Fix the offset issue for the stolen GEM objects
compat: fix sys_fanotify_mark
KVM: PPC: e500: Fix bad address type in deliver_tlb_misss()
KVM: PPC: Book3S HV: use xics_wake_cpu only when defined
vfs: Is mounted should be testing mnt_ns for NULL or error.
i915: remove pm_qos request on error
ALSA: hda - Fix silent output on MacBook Air 1,1
rtc: max8907: weekday encoding fixes
memcg: fix endless loop caused by mem_cgroup_iter
mm/memory-failure.c: shift page lock from head page to tail page after thp split
b43: fix the wrong assignment of status.freq in b43_rx()
tracing: Check if tracing is enabled in trace_puts()
mmc: sdhci-pci: Fix possibility of chip->fixes being null
drm/i915: VLV2 - Fix hotplug detect bits
ALSA: bits vs bytes bug in snd_card_create()
ore: Fix wrong math in allocation of per device BIO
IB/qib: Fix QP check when looping back to/from QP1
drm/nouveau/falcon: use vmalloc to create firwmare copies
drm/nouveau: fix m2mf copy to tiled gart
pnfs: Proper delay for NFS4ERR_RECALLCONFLICT in layout_get_done
drm/cirrus: correct register values for 16bpp
fuse: fix pipe_buf_operations
s390/uapi: fix struct statfs64 definition
arch/sh/kernel/kgdb.c: add missing #include <linux/sched.h>
intel-iommu: fix off-by-one in pagetable freeing
ASoC: wm5110: Extend SYSCLK patch file for rev D
dm space map metadata: fix bug in resizing of thin metadata
hp_accel: Add a new PnP ID HPQ6007 for new HP laptops
mfd: max77686: Fix regmap resource leak on driver remove
drm/radeon: set the full cache bit for fences on r7xx+
drm/radeon: fix surface sync in fence on cayman (v2)
drm/radeon/dpm: disable mclk switching on desktop RV770
nfs4: fix discover_server_trunking use after free
drm/radeon: disable ss on DP for DCE3.x
mmc: sdhci-pci: Fix BYT sd card getting stuck in runtime suspend
pinctrl: sunxi: Honor GPIO output initial vaules
NFSv4.1: Handle errors correctly in nfs41_walk_client_list
turbostat: Use GCC's CPUID functions to support PIC
turbostat: Don't put unprocessed uapi headers in the include path
Revert "EISA: Initialize device before its resources"
nfs: always make sure page is up-to-date before extending a write to cover the entire page
mwifiex: fix wrong 11ac bits setting in fw_cap_info
drm/mgag200: fix oops in cursor code.
virtio-scsi: Fix hotcpu_notifier use-after-free with virtscsi_freeze
md/raid5: fix long-standing problem with bitmap handling on write failure.
ARM: mvebu: update the SATA compatible string for Armada 370/XP
ata: sata_mv: fix disk hotplug for Armada 370/XP SoCs
ata: sata_mv: introduce compatible string "marvell, armada-370-sata"
KVM: x86: limit PIT timer frequency
hwmon: (k10temp) Add support for Kaveri CPUs
dm sysfs: fix a module unload race
dm: remove pointless kobject comparison in dm_get_from_kobject
powerpc: Fix the setup of CPU-to-Node mappings during CPU online
xtensa: xtfpga: fix definitions of platform devices
ARM: at91: smc: bug fix in sam9_smc_cs_read()
tracing: Have trace buffer point back to trace_array
audit: correct a type mismatch in audit_syscall_exit()
audit: reset audit backlog wait time after error recovery
usb: chipidea: udc: using MultO at TD as real mult value for ISO-TX
usb: chipidea: imx: set CI_HDRC_IMX28_WRITE_FIX for imx28
usb: chipidea: add freescale imx28 special write register method
usb: ehci: add freescale imx28 special write register method
nfs4.1: properly handle ENOTSUP in SECINFO_NO_NAME
iwlwifi: pcie: enable oscillator for L1 exit
b43legacy: Fix unload oops if firmware is not available
b43: Fix unload oops if firmware is not available
b43: Fix lockdep splat
mwifiex: add missing endian conversion for fw_tsf
rtlwifi: rtl8192cu: Add new device ID
ftrace: Fix synchronization location disabling and freeing ftrace_ops
mmc: atmel-mci: fix timeout errors in SDIO mode when using DMA
mmc: fix host release issue after discard operation
iwlwifi: mvm: fix missing cleanup in .start() error path
[media] media: s5p_mfc: remove s5p_mfc_get_node_type() function
spi/pxa2xx: initialize DMA channels to -1 to prevent inadvertent match
[media] nxt200x: increase write buffer size
ALSA: Enable CONFIG_ZONE_DMA for smaller PCI DMA masks
staging: r8712u: Set device type to wlan
bcache: Data corruption fix
staging: vt6656: CARDqGetNextTBTT correct uLowNextTBTT
drm/radeon: skip colorbuffer checking if COLOR_INFO.FORMAT is set to INVALID
radeon/pm: Guard access to rdev->pm.power_state array
ASoC: adau1701: Fix ADAU1701_SEROCTL_WORD_LEN_16 constant
ALSA: hda - Don't create duplicated ctls for loopback paths
dm space map metadata: fix extending the space map
dm space map common: make sure new space is used during extend
dm: wait until embedded kobject is released before destroying a device
serial: 8250: enable UART_BUG_NOMSR for Tegra
USB: ftdi_sio: added CS5 quirk for broken smartcard readers
ext4: avoid clearing beyond i_blocks when truncating an inline data file
USB: fix race between hub_disconnect and recursively_mark_NOTATTACHED
drm/radeon: warn users when hw_i2c is enabled (v2)
SELinux: Fix memory leak upon loading policy
dm thin: fix set_pool_mode exposed pool operation races
dm thin: fix discard support to a previously shared block
dm thin: initialize dm_thin_new_mapping returned by get_next_mapping
[media] m88rs2000: set symbol rate accurately
[media] m88rs2000: add m88rs2000_set_carrieroffset
drm/i915: Flush outstanding requests before allocating new seqno
sunrpc: don't wait for write before allowing reads from use-gss-proxy file
tpm/tpm_i2c_stm_st33: Check return code of get_burstcount
tpm/tpm_ppi: Do not compare strcmp(a,b) == -1
sunrpc: Fix infinite loop in RPC state machine
ALSA: rme9652: fix a missing comma in channel_map_9636_ds[]
USB: cypress_m8: fix ring-indicator detection and reporting
USB: Nokia 502 is an unusual device
USB: serial: add support for iBall 3.5G connect usb modem
mtd: mxc_nand: remove duplicated ecc_stats counting
slub: Fix calculation of cpu slabs
perf kvm: Fix kvm report without guestmount.
x86/efi: Fix off-by-one bug in EFI Boot Services reservation
[media] anysee: fix non-working E30 Combo Plus DVB-T
usb: xhci: Check for XHCI_PLAT in xhci_cleanup_msix()
serial: add support for 200 v3 series Titan card
serial: 8250: Fix initialisation of Quatech cards with the AMCC PCI chip
[media] dib8000: make 32 bits read atomic
[media] dib8000: fix regression with dib807x
usb: option: add new zte 3g modem pids to option driver
[SCSI] bfa: Chinook quad port 16G FC HBA claim issue
[media] it913x: Add support for Avermedia H335 id 0x0335
spi/bcm63xx: don't substract prepend length from total length
staging: vt6656: [BUG] BBvUpdatePreEDThreshold Always set sensitivity on bScanning
parport: parport_pc: remove double PCI ID for NetMos
ARM: at91: at91sam9g45: set default mmc pinctrl-names
NFSv4: OPEN must handle the NFS4ERR_IO return code correctly
rtlwifi: rtl8188ee: Fix typo in code
rtlwifi: Add missing code to PWDB statics routine
rtlwifi: rtl8192cu: Fix some code in RF handling
rtlwifi: rtl8192cu: Update the power index registers
rtlwifi: rtl8192c: Add routines to save/restore power index registers
rtlwifi: Update beacon statistics for USB driver
rtlwifi: Increase the RX queue length for USB drivers
rtlwifi: rtl8192c: Add new definitions in the dm_common header
rtlwifi: Set the link state
rtlwifi: Redo register save locations
rtlwifi: rtl8192cu: Add new firmware
rtlwifi: rtl8192c: Prevent reconnect attempts if not connected
drm/rcar-du: Update plane pitch in .mode_set_base() operation
KVM: s390: fix diagnose code extraction
ARM: 7938/1: OMAP4/highbank: Flush L2 cache before disabling
serial: amba-pl011: use port lock to guard control register access
thp: fix copy_page_rep GPF by testing is_huge_zero_pmd once only
GFS2: Increase i_writecount during gfs2_setattr_chown
mm: Make {,set}page_address() static inline if WANT_PAGE_VIRTUAL
staging: comedi: addi_apci_1032: fix subdevice type/flags bug
staging: comedi: adl_pci9111: fix incorrect irq passed to request_irq()
Revert "ACPI: Add BayTrail SoC GPIO and LPSS ACPI IDs"
perf scripting perl: Fix build error on Fedora 12
net: rds: fix per-cpu helper usage
perf/x86/amd/ibs: Fix waking up from S3 for AMD family 10h
vfs: In d_path don't call d_dname on a mount point
mm: fix crash when using XFS on loopback
nilfs2: fix segctor bug that causes file system corruption
hwmon: (coretemp) Fix truncated name of alarm attributes
md: fix problem when adding device to read-only array with bitmap.
md/raid10: fix bug when raid10 recovery fails to recover a block.
md/raid10: fix two bugs in handling of known-bad-blocks.
md/raid5: Fix possible confusion when multiple write errors occur.
drm/i915: Don't grab crtc mutexes in intel_modeset_gem_init()
drm/i915: fix DDI PLLs HW state readout code
writeback: Fix data corruption on NFS
netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helper
[SCSI] sd: Reduce buffer size for vpd request
clk: exynos5250: fix sysmmu_mfc{l,r} gate clocks
clk: samsung: exynos5250: Add CLK_IGNORE_UNUSED flag for the sysreg clock
clk: samsung: exynos4: Correct SRC_MFC register
ARM: shmobile: mackerel: Fix coherent DMA mask
ARM: shmobile: armadillo: Fix coherent DMA mask
ARM: shmobile: kzm9g: Fix coherent DMA mask
ARM: dts: exynos5250: Fix MDMA0 clock number
mm: memcg: fix race condition between memcg teardown and swapin
dm thin: always fallback the pool mode if commit fails
dm thin: switch to read-only mode if metadata space is exhausted
sfc: Maintain current frequency adjustment when applying a time offset
sfc: Stop/re-start PTP when stopping/starting the datapath.
sfc: Rate-limit log message for PTP packets without a matching timestamp event
sfc: PTP: Moderate log message on event queue overflow
sfc: Add length checks to efx_xmit_with_hwtstamp() and efx_ptp_is_ptp_tx()
ipv4: fix tunneled VM traffic over hw VXLAN/GRE GSO NIC
arc_emac: fix potential use after free
br: fix use of ->rx_handler_data in code executed on non-rx_handler path

CVE References

tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Saucy):
importance: Undecided → Medium
Changed in linux (Ubuntu):
importance: Undecided → Medium
Changed in linux (Ubuntu Saucy):
assignee: nobody → Joseph Salisbury (jsalisbury)
Changed in linux (Ubuntu):
assignee: nobody → Joseph Salisbury (jsalisbury)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (18.1 KiB)

This bug was fixed in the package linux - 3.11.0-18.32

---------------
linux (3.11.0-18.32) saucy; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1281764

  [ Bjorn Helgaas ]

  * SAUCE: Revert "EISA: Log device resources in dmesg"
    - LP: #1251816
  * SAUCE: Revert "EISA: Initialize device before its resources"
    - LP: #1251816

  [ Upstream Kernel Changes ]

  * Revert "ip6tnl: fix use after free of fb_tnl_dev"
    - LP: #1279399
  * mmc: sdhci-pci: break out definitions to header file
    - LP: #1239938
  * mmc: sdhci-pci: add support of O2Micro/BayHubTech SD hosts
    - LP: #1239938
  * kexec: add sysctl to disable kexec_load
    - LP: #1259570
  * SELinux: Fix kernel BUG on empty security contexts.
    - CVE-2014-1874
  * br: fix use of ->rx_handler_data in code executed on non-rx_handler
    path
    - LP: #1279399
  * arc_emac: fix potential use after free
    - LP: #1279399
  * ipv4: fix tunneled VM traffic over hw VXLAN/GRE GSO NIC
    - LP: #1279399
  * sfc: Add length checks to efx_xmit_with_hwtstamp() and
    efx_ptp_is_ptp_tx()
    - LP: #1279399
  * sfc: PTP: Moderate log message on event queue overflow
    - LP: #1279399
  * sfc: Rate-limit log message for PTP packets without a matching
    timestamp event
    - LP: #1279399
  * sfc: Stop/re-start PTP when stopping/starting the datapath.
    - LP: #1279399
  * sfc: Maintain current frequency adjustment when applying a time offset
    - LP: #1279399
  * dm thin: switch to read-only mode if metadata space is exhausted
    - LP: #1279399
  * dm thin: always fallback the pool mode if commit fails
    - LP: #1279399
  * mm: memcg: fix race condition between memcg teardown and swapin
    - LP: #1279399
  * ARM: dts: exynos5250: Fix MDMA0 clock number
    - LP: #1279399
  * ARM: shmobile: kzm9g: Fix coherent DMA mask
    - LP: #1279399
  * ARM: shmobile: armadillo: Fix coherent DMA mask
    - LP: #1279399
  * ARM: shmobile: mackerel: Fix coherent DMA mask
    - LP: #1279399
  * clk: samsung: exynos4: Correct SRC_MFC register
    - LP: #1279399
  * clk: samsung: exynos5250: Add CLK_IGNORE_UNUSED flag for the sysreg
    clock
    - LP: #1279399
  * clk: exynos5250: fix sysmmu_mfc{l,r} gate clocks
    - LP: #1279399
  * [SCSI] sd: Reduce buffer size for vpd request
    - LP: #1279399
  * netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helper
    - LP: #1279399
  * writeback: Fix data corruption on NFS
    - LP: #1279399
  * drm/i915: fix DDI PLLs HW state readout code
    - LP: #1279399
  * drm/i915: Don't grab crtc mutexes in intel_modeset_gem_init()
    - LP: #1279399
  * md/raid5: Fix possible confusion when multiple write errors occur.
    - LP: #1279399
  * md/raid10: fix two bugs in handling of known-bad-blocks.
    - LP: #1279399
  * md/raid10: fix bug when raid10 recovery fails to recover a block.
    - LP: #1279399
  * md: fix problem when adding device to read-only array with bitmap.
    - LP: #1279399
  * hwmon: (coretemp) Fix truncated name of alarm attributes
    - LP: #1279399
  * nilfs2: fix segctor bug that causes file system corruption
    - LP: #1279399
  * mm: fix crash when using XFS on loopback
    - LP: #1279399
  * vfs: In d...

Changed in linux (Ubuntu Saucy):
status: New → Fix Released
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.