Precise update to 3.2.54 stable release

Bug #1266546 reported by Brad Figg
20
This bug affects 3 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Precise
Fix Released
Undecided
Brad Figg

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.2.54 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.2.54 stable release:
            Linux 3.2.54
            mmc: block: fix a bug of error handling in MMC driver
            ftrace: Fix function graph with loading of modules
            ftrace: Check module functions being traced on reload
            ftrace: Create ftrace_hash_empty() helper routine
            ftrace: Fix ftrace hash record update with notrace
            net: flow_dissector: fail on evil iph->ihl
            xfs: underflow bug in xfs_attrlist_by_handle()
            aacraid: prevent invalid pointer dereference
            libertas: potential oops in debugfs
            ARM: 7527/1: uaccess: explicitly check __user pointer when !CPU_USE_DOMAINS
            KVM: Fix iommu map/unmap to handle memory slot moves
            KVM: perform an invalid memslot step for gpa base change
            crypto: ansi_cprng - Fix off by one error in non-block size request
            HID: multitouch: validate indexes details
            {pktgen, xfrm} Update IPv4 header total len and checksum after tranformation
            ipv6: fix possible seqlock deadlock in ip6_finish_output2
            inet: fix possible seqlock deadlocks
            af_packet: block BH in prb_shutdown_retire_blk_timer()
            packet: fix use after free race in send path when dev is released
            bridge: flush br's address entry in fdb when remove the bridge dev
            net: core: Always propagate flag changes to interfaces
            atm: idt77252: fix dev refcnt leak
            ipv6: fix leaking uninitialized port number of offender sockaddr
            net: clamp ->msg_namelen instead of returning an error
            inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions
            net: add BUG_ON if kernel advertises msg_namelen > sizeof(struct sockaddr_storage)
            net: rework recvmsg handler msg_name and msg_namelen logic
            inet: prevent leakage of uninitialized memory to user in recv syscalls
            ipv4: fix possible seqlock deadlock
            connector: improved unaligned access error fix
            isdnloop: use strlcpy() instead of strcpy()
            bonding: fix two race conditions in bond_store_updelay/downdelay
            6lowpan: Uncompression of traffic class field was incorrect
            bonding: don't permit to use ARP monitoring in 802.3ad mode
            random32: fix off-by-one in seeding requirement
            ipv6: use rt6_get_dflt_router to get default router in rt6_route_rcv
            net: Fix "ip rule delete table 256"
            um: add missing declaration of 'getrlimit()' and friends
            sched: Avoid throttle_cfs_rq() racing with period_timer stopping
            drivers/rtc/rtc-at91rm9200.c: correct alarm over day/month wrap
            selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()
            selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()
            KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367)
            KVM: Improve create VCPU parameter (CVE-2013-4587)
            futex: fix handling of read-only-mapped hugepages
            hwmon: Prevent some divide by zeros in FAN_TO_REG()
            hwmon: (w83l768ng) Fix fan speed control range
            hwmon: (w83l786ng) Fix fan speed control mode setting and reporting
            ARM: pxa: prevent PXA270 occasional reboot freezes
            ARM: pxa: tosa: fix keys mapping
            dm bufio: initialize read-only module parameters
            x86, efi: Don't use (U)EFI time services on 32 bit
            x86, build, icc: Remove uninitialized_var() from compiler-intel.h
            dm table: fail dm_table_create on dm_round_up overflow
            dm snapshot: avoid snapshot space leak on crash
            ALSA: memalloc.h - fix wrong truncation of dma_addr_t
            x86, build: Pass in additional -mno-mmx, -mno-sse options
            ARM: 7913/1: fix framepointer check in unwind_frame
            ARM: 7912/1: check stack pointer in get_wchan
            crypto: scatterwalk - Use sg_chain_ptr on chain entries
            drivers/char/i8k.c: add Dell XPLS L421X
            usb: hub: Use correct reset for wedged USB3 devices that are NOTATTACHED
            USB: cdc-acm: Added support for the Lenovo RD02-D400 USB Modem
            ASoC: wm8731: fix dsp mode configuration
            powerpc/gpio: Fix the wrong GPIO input data on MPC8572/MPC8536
            USB: pl2303: fixed handling of CS5 setting
            USB: ftdi_sio: fixed handling of unsupported CSIZE setting
            USB: mos7840: correct handling of CS5 setting
            USB: spcp8x5: correct handling of CS5 setting
            USB: option: support new huawei devices
            USB: serial: option: blacklist interface 1 for Huawei E173s-6
            enclosure: fix WARN_ON in dual path device removing
            hpsa: return 0 from driver probe function on success, not 1
            hpsa: do not discard scsi status on aborted commands
            ARM: footbridge: fix VGA initialisation
            net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
            net: smc91: fix crash regression on the versatile
            saa7164: fix return value check in saa7164_initdev()
            crypto: ccm - Fix handling of zero plaintext when computing mac
            crypto: s390 - Fix aes-xts parameter corruption
            crypto: scatterwalk - Set the chain pointer indication bit
            crypto: authenc - Find proper IV address in ablkcipher callback
            cpuset: Fix memory allocator deadlock
            Staging: tidspbridge: disable driver
            libsas: fix usage of ata_tf_to_fis
            tracing: Allow events to have NULL strings
            ALSA: hda/realtek - Set pcbeep amp for ALC668
            ALSA: hda/realtek - Add support of ALC231 codec
            irq: Enable all irqs unconditionally in irq_resume
            can: sja1000: fix {pre,post}_irq() handling and IRQ handler return value
            Staging: zram: Fix memory leak by refcount mismatch
            Staging: zram: Fix access of NULL pointer
            usb: dwc3: fix implementation of endpoint wedge
            usb: gadget: composite: reset delayed_status on reset_config
            USB: serial: fix race in generic write
            mac80211: don't attempt to reorder multicast frames
            ASoC: wm8990: Mark the register map as dirty when powering down
            powerpc/signals: Improved mark VSX not saved with small contexts fix
            ahci: add Marvell 9230 to the AHCI PCI device list
            PCI: Define macro for Marvell vendor ID
            ahci: add support for IBM Akebono platform device
            configfs: fix race between dentry put and lookup
            iscsi-target: chap auth shouldn't match username with trailing garbage
            iscsi-target: fix extract_param to handle buffer length corner case
            powerpc/signals: Mark VSX not saved with small contexts
            powerpc/pseries: Duplicate dtl entries sometimes sent to userspace
            PCI: Remove duplicate pci_disable_device() from pcie_portdrv_remove()
            NFSv4: Update list of irrecoverable errors on DELEGRETURN
            NFSv4 wait on recovery for async session errors
            avr32: fix out-of-range jump in large kernels
            avr32: setup crt for early panic()
            nfsd4: fix xdr decoding of large non-write compounds
            nfsd: make sure to balance get/put_write_access
            nfsd: split up nfsd_setattr
            dm delay: fix a possible deadlock due to shared workqueue
            setfacl removes part of ACL when setting POSIX ACLs to Samba
            radeon: workaround pinning failure on low ram gpu
            rtlwifi: rtl8192cu: Fix more pointer arithmetic errors
            drm/i915: flush cursors harder
            hwmon: (lm90) Fix max6696 alarm handling
            ARM: integrator_cp: Set LCD{0,1} enable lines when turning on CLCD
            ALSA: pcsp: Fix the order of input device unregistration
            drm/nouveau: when bailing out of a pushbuf ioctl, do not remove previous fence
            ipc, msg: fix message length check for negative values
            devpts: plug the memory leak in kill_sb
            exec/ptrace: fix get_dumpable() incorrect tests
            backlight: atmel-pwm-bl: fix gpio polarity in remove
            backlight: atmel-pwm-bl: fix reported brightness
            vsprintf: check real user/group id for %pK
            cris: media platform drivers: fix build
            x86/microcode/amd: Tone down printk(), don't treat a missing firmware file as an error
            ALSA: msnd: Avoid duplicated driver name
            prism54: set netdev type to "wlan"
            mtd: gpmi: fix kernel BUG due to racing DMA operations
            mwifiex: correct packet length for packets from SDIO interface
            rtlwifi: rtl8192de: Fix incorrect signal strength for unassociated AP
            rtlwifi: rtl8192cu: Fix incorrect signal strength for unassociated AP
            rtlwifi: rtl8192se: Fix incorrect signal strength for unassociated AP
            rtlwifi: Fix endian error in extracting packet type
            rtlwifi: rtl8192se: Fix wrong assignment
            IB/qib: Convert qib_user_sdma_pin_pages() to use get_user_pages_fast()
            IB/ipath: Convert ipath_user_sdma_pin_pages() to use get_user_pages_fast()
            SUNRPC: Fix a data corruption issue when retransmitting RPC calls
            block: fix a probe argument to blk_register_region
            loop: fix crash if blk_alloc_queue fails
            blk-core: Fix memory corruption if blkcg_init_queue fails
            block: fix race between request completion and timeout handling
            x86/apic: Disable I/O APIC before shutdown of the local APIC
            qeth: avoid buffer overflow in snmp ioctl
            mtd: m25p80: fix allocation size
            mtd: map: fixed bug in 64-bit systems
            mtd: nand: hack ONFI for non-power-of-2 dimensions
            ALSA: hda - Add support for CX20952
            PM / hibernate: Avoid overflow in hibernate_preallocate_memory()
            drm/ttm: Fix memory type compatibility check
            audit: use nlmsg_len() to get message payload length
            audit: fix info leak in AUDIT_GET requests
            audit: printk USER_AVC messages when audit isn't enabled
            crypto: s390 - Fix aes-cbc IV corruption
            KVM: IOMMU: hva align mapping page size
            ahci: Add Device IDs for Intel Wildcat Point-LP
            ASoC: ak4642: prevent un-necessary changes to SG_SL1
            ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()
            dm mpath: fix race condition between multipath_dtr and pg_init_done
            can: c_can: Fix RX message handling, handle lost message before EOB
            dm: allocate buffer for messages with small number of arguments using GFP_NOIO
            powerpc/vio: use strcpy in modalias_show
            powerpc/vio: Fix modalias_show return values
            usb: wusbcore: change WA_SEGS_MAX to a legal value
            usb: wusbcore: set the RPIPE wMaxPacketSize value correctly
            ARM: sa11x0/assabet: ensure CS2 is configured appropriately
            ALSA: 6fire: Fix probe of multiple cards
            drivers/libata: Set max sector to 65535 for Slimtype DVD A DS8A9SH drive
            ahci: disabled FBS prior to issuing software reset
            libata: Fix display of sata speed
            USB:add new zte 3g-dongle's pid to option.c
            alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't exist
            rt2x00: check if device is still available on rt2x00mac_flush()
            rt2400pci: fix RSSI read
            usb: hub: Clear Port Reset Change during init/resume
            usb: Disable USB 2.0 Link PM before device reset.
            USB: mos7840: fix tiocmget error handling
            NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk()
            selinux: correct locking in selinux_netlbl_socket_connect)

Brad Figg (brad-figg)
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Precise):
status: New → In Progress
assignee: nobody → Brad Figg (brad-figg)
Brad Figg (brad-figg)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (14.4 KiB)

This bug was fixed in the package linux - 3.2.0-59.90

---------------
linux (3.2.0-59.90) precise; urgency=low

  [ Brad Figg ]

  * UBUNTU: Disable modules checking for armel and armhf for this upload; the staging/tidspbridge has been disabled

linux (3.2.0-59.89) precise; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1266551

  [ Andy Whitcroft ]

  * [Debian] Improve tools version message
    - LP: #1257715

  [ Sergey Popovich ]

  * SAUCE: netfilter: xt_hashlimit: fix proc entry leak in netns destroy
    path
    - LP: #1256988

  [ Tim Gardner ]

  * [Config] Enable CONFIG_VT6656
    - LP: #162671

  [ Upstream Kernel Changes ]

  * netfilter: xt_recent: fix namespace destroy path
    - LP: #1256988
  * netfilter: xt_hashlimit: fix namespace destroy path
    - LP: #1256988
  * selinux: correct locking in selinux_netlbl_socket_connect)
    - LP: #1266546
  * NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk()
    - LP: #1266546
  * USB: mos7840: fix tiocmget error handling
    - LP: #1266546
  * usb: Disable USB 2.0 Link PM before device reset.
    - LP: #1266546
  * usb: hub: Clear Port Reset Change during init/resume
    - LP: #1266546
  * rt2400pci: fix RSSI read
    - LP: #1266546
  * rt2x00: check if device is still available on rt2x00mac_flush()
    - LP: #1266546
  * alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't exist
    - LP: #1266546
  * USB:add new zte 3g-dongle's pid to option.c
    - LP: #1266546
  * libata: Fix display of sata speed
    - LP: #1266546
  * ahci: disabled FBS prior to issuing software reset
    - LP: #1266546
  * drivers/libata: Set max sector to 65535 for Slimtype DVD A DS8A9SH
    drive
    - LP: #1266546
  * ALSA: 6fire: Fix probe of multiple cards
    - LP: #1266546
  * ARM: sa11x0/assabet: ensure CS2 is configured appropriately
    - LP: #1266546
  * usb: wusbcore: set the RPIPE wMaxPacketSize value correctly
    - LP: #1266546
  * usb: wusbcore: change WA_SEGS_MAX to a legal value
    - LP: #1266546
  * powerpc/vio: Fix modalias_show return values
    - LP: #1266546
  * powerpc/vio: use strcpy in modalias_show
    - LP: #1266546
  * dm: allocate buffer for messages with small number of arguments using
    GFP_NOIO
    - LP: #1266546
  * can: c_can: Fix RX message handling, handle lost message before EOB
    - LP: #1266546
  * dm mpath: fix race condition between multipath_dtr and pg_init_done
    - LP: #1266546
  * ext4: avoid bh leak in retry path of ext4_expand_extra_isize_ea()
    - LP: #1266546
  * ASoC: ak4642: prevent un-necessary changes to SG_SL1
    - LP: #1266546
  * ahci: Add Device IDs for Intel Wildcat Point-LP
    - LP: #1266546
  * KVM: IOMMU: hva align mapping page size
    - LP: #1266546
  * crypto: s390 - Fix aes-cbc IV corruption
    - LP: #1266546
  * audit: printk USER_AVC messages when audit isn't enabled
    - LP: #1266546
  * audit: fix info leak in AUDIT_GET requests
    - LP: #1266546
  * audit: use nlmsg_len() to get message payload length
    - LP: #1266546
  * drm/ttm: Fix memory type compatibility check
    - LP: #1266546
  * PM / hibernate: Avoid overflow in hibernate_preallocate_memory()
    - LP: #1266546
  * ALSA: hda - Add...

Changed in linux (Ubuntu Precise):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.