Quantal update to 3.5.7.13 stable release

Bug #1186062 reported by Steve Conklin
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Quantal
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.5.7.13 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.5.7.13 stable release:

* Linux 3.5.7.13
* watchdog: Fix race condition in registration code
* ARM: EXYNOS5: Fix kernel dump in AFTR idle mode
* pch_dma: Use GFP_ATOMIC because called from interrupt context
* drivers/rtc/rtc-pcf2123.c: fix error return code in pcf2123_probe()
* dm thin: do not set discard_zeroes_data
* ipmi: ipmi_devintf: compat_ioctl method fails to take ipmi_mutex
* drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory overflow
* usermodehelper: check subprocess_info->path != NULL
* tracing: Fix leaks of filter preds
* timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE
* powerpc: Bring all threads online prior to migration/hibernation
* ARM: 7720/1: ARM v6/v7 cmpxchg64 shouldn't clear upper 32 bits of the old/new value
* drm/radeon: check incoming cliprects pointer
* ACPI / EC: Restart transaction even when the IBF flag set
* tick: Cleanup NOHZ per cpu data on cpu down
* iscsi-target: Fix processing of OOO commands
* ext4: limit group search loop for non-extent files
* xfrm6: release dev before returning error
* ipv6: do not clear pinet6 field
* macvlan: fix passthru mode race between dev removal and rx path
* if_cablemodem.h: Add parenthesis around ioctl macros
* 3c59x: fix PCI resource management
* 3c59x: fix freeing nonexistent resource on driver unload
* packet: tpacket_v3: do not trigger bug() on wrong header status
* bridge: fix race with topology change timer
* net: vlan,ethtool: netdev_features_t is more than 32 bit
* net: use netdev_features_t in skb_needs_linearize()
* net_sched: act_ipt forward compat with xtables
* 3c509.c: call SET_NETDEV_DEV for all device types (ISA/ISAPnP/EISA)
* sfc: Fix naming of MTD partitions for FPGA bitfiles
* tcp: force a dst refcount when prequeue packet
* net: qmi_wwan: prevent duplicate mac address on link (firmware bug workaround)
* net: qmi_wwan: fixup destination address (firmware bug workaround)
* net: qmi_wwan: fixup missing ethernet header (firmware bug workaround)
* hugetlbfs: fix mmap failure in unaligned size request
* iwlwifi: add new pci id for 6x35 series
* drm/mgag200: Fix framebuffer base address programming
* drm/mgag200: Fix writes into MGA1064_PIX_CLK_CTL register
* dm snapshot: fix error return code in snapshot_ctr
* KVM: VMX: fix halt emulation while emulating invalid guest sate
* hp_accel: Ignore the error from lis3lv02d_poweron() at resume
* ARM: OMAP: RX-51: change probe order of touchscreen and panel SPI devices
* mwifiex: fix setting of multicast filter
* mwifiex: clear is_suspended flag when interrupt is received early
* B43: Handle DMA RX descriptor underrun
* qmi_wwan/cdc_ether: add device IDs for Dell 5804 (Novatel E371) WWAN card
* ACPICA: Fix possible buffer overflow during a field unit read operation
* ALSA: HDA: Fix Oops caused by dereference NULL pointer
* xen/vcpu/pvhvm: Fix vcpu hotplugging hanging.
* nfsd4: don't allow owner override on 4.1 CLAIM_FH opens
* ath9k: fix key allocation error handling for powersave keys
* sd: fix array cache flushing bug causing performance problems
* tile: support new Tilera hypervisor
* ASoC: wm8994: missing break in wm8994_aif3_hw_params()
* audit: Syscall rules are not applied to existing processes on non-x86
* powerpc: Emulate non privileged DSCR read and write
* ext4: add check for inodes_count overflow in new resize ioctl
* cpufreq / Longhaul: Disable driver by default
* drbd: fix for deadlock when using automatic split-brain-recovery
* x86/mm: account for PGDIR_SIZE alignment
* s390: move dummy io_remap_pfn_range() to asm/pgtable.h
* drm/i915: Fix detection of base of stolen memory
* r8169: honor jumbo settings when chipset is requested to start.
* r8169: fix vlan tag read ordering.
* drm/radeon: use frac fb div on RS780/RS880
* drm/i915: ensure single initialization and cleanup of backlight device
* ARM: 7692/1: iop3xx: move IOP3XX_PERIPHERAL_VIRT_BASE
* cpufreq: exynos: Get booting freq value in exynos_cpufreq_init
* xhci: Don't warn on empty ring for suspended devices.
* kernel/audit_tree.c: tree will leak memory when failure occurs in audit_trim_trees()
* powerpc: fix numa distance for form0 device tree
* drm/radeon: disable the crtcs in mc_stop (evergreen+) (v2)
* drm/radeon: properly lock disp in mc_stop/resume for evergreen+
* autofs - remove autofs dentry mount check
* net/eth/ibmveth: Fixup retrieval of MAC address
* perf/x86/intel/lbr: Demand proper privileges for PERF_SAMPLE_BRANCH_KERNEL
* perf/x86/intel/lbr: Fix LBR filter
* drm/radeon: fix handling of v6 power tables
* drm/radeon: add new richland pci ids
* drm/radeon: add some new SI PCI ids
* drm/radeon: fix possible segfault when parsing pm tables
* drm/radeon: fix endian bugs in atom_allocate_fb_scratch()
* drm/cirrus: deal with bo reserve fail in dirty update path
* drm/ast: deal with bo reserve fail in dirty update path
* drm/mgag200: deal with bo reserve fail in dirty update path
* drm/prime: keep a reference from the handle to exported dma-buf (v6)
* x86: Eliminate irq_mis_count counted in arch_irq_stat
* ARM: u300: fix ages old copy/paste bug
* powerpc: Add isync to copy_and_flush
* drm/gma500: fix backlight hotkeys behaviour on netbooks
* ALSA: usb-audio: Fix autopm error during probing
* ALSA: snd-usb: try harder to find USB_DT_CS_ENDPOINT
* powerpc/spufs: Initialise inode->i_ino in spufs_new_inode()
* fbcon: when font is freed, clear also vc_font.data
* drm/radeon: fix typo in si_select_se_sh()
* nfsd: Decode and send 64bit time values
* i2c: xiic: must always write 16-bit words to TX_FIFO
* drm/radeon: fix hdmi mode enable on RS600/RS690/RS740
* drm/i915: Fall back to bit banging mode for DVO transmitter detection
* drm/i915: Workaround incoherence between fences and LLC across multiple CPUs
* ASoC: max98088: Fix logging of hardware revision.
* drm/radeon: cleanup properly if mmio mapping fails
* drm/radeon/evergreen+: don't enable HPD interrupts on eDP/LVDS
* ALSA: usb-audio: disable autopm for MIDI devices
* ALSA: usb: Add quirk for 192KHz recording on E-Mu devices
* drm/radeon/dce6: add missing display reg for tiling setup
* nfsd4: don't close read-write opens too soon
* mmc: atmel-mci: pio hang on block errors
* mfd: adp5520: Restore mode bits on resume
* drm/i915: Add no-lvds quirk for Fujitsu Esprimo Q900
* mmc: core: Fix bit width test failing on old eMMC cards
* nfsd: don't run get_file if nfs4_preprocess_stateid_op return error
* drm/radeon: don't use get_engine_clock() on APUs
* ARM: at91: Fix typo in restart code panic message
* mmc: at91/avr32/atmel-mci: fix DMA-channel leak on module unload
* Linux 3.5.7.12
* ARM: 7699/1: sched_clock: Add more notrace to prevent recursion
* Revert "drm/i915: GFX_MODE Flush TLB Invalidate Mode must be '1' for scanline waits"
* ipc: sysv shared memory limited to 8TiB
* tty: fix up atime/mtime mess, take three
* exec: do not abuse ->cred_guard_mutex in threadgroup_lock()
* fs/dcache.c: add cond_resched() to shrink_dcache_parent()
* inotify: invalid mask should return a error number but not set it
* md: bad block list should default to disabled.
* drivers/rtc/rtc-at91rm9200.c: fix missing iounmap
* drivers/rtc/rtc-cmos.c: don't disable hpet emulation on suspend
* arm: set the page table freeing ceiling to TASK_SIZE
* mm: allow arch code to control the user page table ceiling
* fs/fscache/stats.c: fix memory leak
* mwifiex: Call pci_release_region after calling pci_disable_device
* mwifiex: Use pci_release_region() instead of a pci_release_regions()
* ixgbe: fix EICR write in ixgbe_msix_other
* clockevents: Set dummy handler on CPU_DEAD shutdown
* gianfar: do not advertise any alarm capability.
* USB: ftdi_sio: enable two UART ports on ST Microconnect Lite
* usb-storage: CY7C68300A chips do not support Cypress ATACB
* USB: serial: option: Added support Olivetti Olicard 145
* USB: ftdi_sio: correct ST Micro Connect Lite PIDs
* rt2x00: Fix transmit power troubles on some Ralink RT30xx cards
* ext4: fix Kconfig documentation for CONFIG_EXT4_DEBUG
* ext4: fix online resizing for ext3-compat file systems
* LOCKD: Ensure that nlmclnt_block resets block->b_status after a server reboot
* iwlwifi: dvm: don't send zeroed LQ cmd
* iwlwifi: fix freeing uninitialized pointer
* usbfs: Always allow ctrl requests with USB_RECIP_ENDPOINT on the ctrl ep
* wireless: regulatory: fix channel disabling race condition
* PCI/PM: Fix fallback to PCI_D0 in pci_platform_power_transition()
* serial_core.c: add put_device() after device_find_child()
* tracing: Check return value of tracing_init_dentry()
* tracing: Reset ftrace_graph_filter_enabled if count is zero
* ext4: fix big-endian bug in metadata checksum calculations
* USB: option: add a D-Link DWM-156 variant
* tracing: Fix off-by-one on allocating stat->pages
* ARM: omap3: cpuidle: enable time keeping
* hrtimer: Fix ktime_add_ns() overflow on 32bit architectures
* hrtimer: Add expiry time overflow check in hrtimer_interrupt
* USB: add ftdi_sio USB ID for GDM Boost V1.x
* usb: chipidea: udc: fix memory leak in _ep_nuke
* NFSv4: Handle NFS4ERR_DELAY and NFS4ERR_GRACE in nfs4_open_delegation_recall
* usb: chipidea: udc: fix memory access of shared memory on armv5 machines
* ext4: fix journal callback list traversal
* jbd2: fix race between jbd2_journal_remove_checkpoint and ->j_commit_callback
* ext4/jbd2: don't wait (forever) for stale tid caused by wraparound
* usb/misc/appledisplay: Add 24" LED Cinema display
* sysfs: fix use after free in case of concurrent read/write and readdir
* Fix initialization of CMCI/CMCP interrupts
* PCI / ACPI: Don't query OSC support with all possible controls
* cgroup: fix an off-by-one bug which may trigger BUG_ON()
* Wrong asm register contraints in the kvm implementation
* Wrong asm register contraints in the futex implementation
* tracing: Fix ftrace_dump()
* tracing: Remove most or all of stack tracer stack size from stack_max_size
* tracing: Fix stack tracer with fentry use
* tracing: Use stack of calling function for stack tracer
* l2tp: fix info leak in l2tp_ip6_recvmsg()
* sparc64: Fix race in TLB batch processing.
* net: drop dst before queueing fragments
* net: fix incorrect credentials passing
* net: rate-limit warn-bad-offload splats.
* tcp: call tcp_replace_ts_recent() from tcp_ack()
* net: sctp: sctp_auth_key_put: use kzfree instead of kfree
* esp4: fix error return code in esp_output()
* tcp: Reallocate headroom if it would overflow csum_start
* tcp: incoming connections might use wrong route under synflood
* rtnetlink: Call nlmsg_parse() with correct header length
* netfilter: don't reset nf_trace in nf_reset()
* af_unix: If we don't care about credentials coallesce all messages
* bonding: IFF_BONDING is not stripped on enslave failure
* bonding: fix bonding_masters race condition in bond unloading
* atl1e: limit gso segment size to prevent generation of wrong ip length fields
* net: count hw_addr syncs so that unsync works properly.
* net IPv6 : Fix broken IPv6 routing table after loopback down-up
* cbq: incorrect processing of high limits
* tipc: fix info leaks via msg_name in recv_msg/recv_stream
* rose: fix info leak via msg_name in rose_recvmsg()
* NFC: llcp: fix info leaks via msg_name in llcp_sock_recvmsg()
* netrom: fix invalid use of sizeof in nr_recvmsg()
* netrom: fix info leak via msg_name in nr_recvmsg()
* llc: Fix missing msg_namelen update in llc_ui_recvmsg()
* iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()
* irda: Fix missing msg_namelen update in irda_recvmsg_dgram()
* caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg()
* Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg()
* Bluetooth: fix possible info leak in bt_sock_recvmsg()
* ax25: fix info leak via msg_name in ax25_recvmsg()
* atm: update msg_namelen in vcc_recvmsg()
* TTY: fix atime/mtime regression
* TTY: do not update atime/mtime on read/write
* aio: fix possible invalid memory access when DEBUG is enabled
* s390/memory hotplug: prevent offline of active memory increments
* xen/time: Fix kasprintf splat when allocating timer%d IRQ line.
* xen/smp/spinlock: Fix leakage of the spinlock interrupt line for every CPU online/offline
* xen/smp: Fix leakage of timer interrupt line for every CPU online/offline.
* perf: Fix error return code
* regulator: fixed regulator_bulk_enable unwinding code
* vm: convert mtdchar mmap to vm_iomap_memory() helper
* vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper
* vm: convert fb_mmap to vm_iomap_memory() helper
* vm: convert HPET mmap to vm_iomap_memory() helper
* vm: add vm_iomap_memory() helper function
* perf/x86: Fix offcore_rsp valid mask for SNB/IVB
* perf: Treat attr.config as u64 in perf_swevent_init()
* crypto: algif - suppress sending source address information in recvmsg
* sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s
* hfsplus: fix potential overflow in hfsplus_file_truncate()
* kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
* hugetlbfs: add swap entry check in follow_hugetlb_page()
* ARM: 7698/1: perf: fix group validation when using enable_on_exec
* ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon
* ath9k_hw: change AR9580 initvals to fix a stability issue
* can: sja1000: fix handling on dt properties on little endian systems
* can: mcp251x: add missing IRQF_ONESHOT to request_threaded_irq
* ssb: implement spurious tone avoidance
* ath9k_htc: accept 1.x firmware newer than 1.3

Steve Conklin (sconklin)
tags: added: kernel-stable-tracking-bug
description: updated
Revision history for this message
Adam Conrad (adconrad) wrote : Update Released

The verification of this Stable Release Update has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.

Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (18.4 KiB)

This bug was fixed in the package linux - 3.5.0-34.55

---------------
linux (3.5.0-34.55) quantal; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1187926

  [ Upstream Kernel Changes ]

  * iwlwifi: dvm: fix zero LQ CMD sending avoidance
    - LP: #1186932

linux (3.5.0-33.54) quantal; urgency=low

  [Steve Conklin]

  * Release Tracking Bug
    - LP: #1186271

  [ Upstream Kernel Changes ]

  * crypto: algif - suppress sending source address information in recvmsg
    - LP: #1172363
    - CVE-2013-3076
  * ax25: fix info leak via msg_name in ax25_recvmsg()
    - LP: #1172366
    - CVE-2013-3223
  * Bluetooth: fix possible info leak in bt_sock_recvmsg()
    - LP: #1172368
    - CVE-2013-3224
  * tipc: fix info leaks via msg_name in recv_msg/recv_stream
    - LP: #1172403
    - CVE-2013-3235
  * rose: fix info leak via msg_name in rose_recvmsg()
    - LP: #1172394
    - CVE-2013-3234
  * Bluetooth: RFCOMM - Fix missing msg_namelen update in
    rfcomm_sock_recvmsg()
    - LP: #1172369
    - CVE-2013-3225
  * atm: update msg_namelen in vcc_recvmsg()
    - LP: #1172365
    - CVE-2013-3222
  * iwlwifi: add new pci id for 6x35 series
    - LP: #1180256
  * ath9k_htc: accept 1.x firmware newer than 1.3
    - LP: #1186062
  * ssb: implement spurious tone avoidance
    - LP: #1186062
  * can: mcp251x: add missing IRQF_ONESHOT to request_threaded_irq
    - LP: #1186062
  * can: sja1000: fix handling on dt properties on little endian systems
    - LP: #1186062
  * ath9k_hw: change AR9580 initvals to fix a stability issue
    - LP: #1186062
  * ARM: 7696/1: Fix kexec by setting outer_cache.inv_all for Feroceon
    - LP: #1186062
  * ARM: 7698/1: perf: fix group validation when using enable_on_exec
    - LP: #1186062
  * hugetlbfs: add swap entry check in follow_hugetlb_page()
    - LP: #1186062
  * kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
    - LP: #1186062
  * hfsplus: fix potential overflow in hfsplus_file_truncate()
    - LP: #1186062
  * sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s
    - LP: #1186062
  * perf/x86: Fix offcore_rsp valid mask for SNB/IVB
    - LP: #1186062
  * vm: add vm_iomap_memory() helper function
    - LP: #1186062
  * vm: convert HPET mmap to vm_iomap_memory() helper
    - LP: #1186062
  * vm: convert fb_mmap to vm_iomap_memory() helper
    - LP: #1186062
  * vm: convert snd_pcm_lib_mmap_iomem() to vm_iomap_memory() helper
    - LP: #1186062
  * vm: convert mtdchar mmap to vm_iomap_memory() helper
    - LP: #1186062
  * regulator: fixed regulator_bulk_enable unwinding code
    - LP: #1186062
  * perf: Fix error return code
    - LP: #1186062
  * xen/smp: Fix leakage of timer interrupt line for every CPU
    online/offline.
    - LP: #1186062
  * xen/smp/spinlock: Fix leakage of the spinlock interrupt line for every
    CPU online/offline
    - LP: #1186062
  * xen/time: Fix kasprintf splat when allocating timer%d IRQ line.
    - LP: #1186062
  * s390/memory hotplug: prevent offline of active memory increments
    - LP: #1186062
  * aio: fix possible invalid memory access when DEBUG is enabled
    - LP: #1186062
  * TTY: do not update atime/mtime on read/...

Changed in linux (Ubuntu Quantal):
status: New → Fix Released
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.