Saucy update to v3.11.10.8 stable release

Bug #1311196 reported by Joseph Salisbury
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Medium
Unassigned
Saucy
Fix Released
Medium
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The v3.11.10.8 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the v3.11.10.8 stable release:
Linux 3.11.10.8
crypto: ghash-clmulni-intel - use C implementation for setkey()
netfilter: Can't fail and free after table replacement
netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
sparc64: Make sure %pil interrupts are enabled during hypervisor yield.
sparc64: don't treat 64-bit syscall return codes as 32-bit
sparc32: fix build failure for arch_jump_label_transform
Revert "sparc64: Fix __copy_{to,from}_user_inatomic defines."
sparc: PCI: Fix incorrect address calculation of PCI Bridge windows on Simba-bridges
cpuidle: Check the result of cpuidle_get_driver() against NULL
isdnloop: several buffer overflows
isdnloop: Validate NUL-terminated strings from user.
netlink: don't compare the nul-termination in nla_strcmp
ipv6: some ipv6 statistic counters failed to disable bh
xen-netback: remove pointless clause from if statement
vhost: validate vhost_get_vq_desc return value
vhost: fix total length when packets are too short
vlan: Set hard_header_len according to available acceleration
usbnet: include wait queue head in device structure
tg3: Do not include vlan acceleration features in vlan_features
netpoll: fix the skb check in pkt_is_ns
ip6mr: fix mfc notification flags
ipmr: fix mfc notification flags
rtnetlink: fix fdb notification flags
vxlan: fix potential NULL dereference in arp_reduce()
ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment properly
ipv6: Avoid unnecessary temporary addresses being generated
net: socket: error on a negative msg_namelen
tcp: tcp_release_cb() should release socket ownership
vlan: Set correct source MAC address with TX VLAN offload enabled
ipv6: don't set DST_NOCOUNT for remotely added routes
ipv6: Fix exthdrs offload registration.
net: unix: non blocking recvmsg() should not return -EINTR
inet: frag: make sure forced eviction removes all frags
bridge: multicast: add sanity check for query source addresses
net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk
net: fix for a race condition in the inet frag code
selinux: correctly label /proc inodes in use before the policy is loaded
powernow-k6: reorder frequencies
powernow-k6: correctly initialize default parameters
powernow-k6: disable cache when changing frequency
m68k: Skip futex_atomic_cmpxchg_inatomic() test
futex: Allow architectures to skip futex_atomic_cmpxchg_inatomic() test
cpufreq: Fix timer/workqueue corruption due to double queueing
netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages
Input: cypress_ps2 - don't report as a button pads
Linux 3.11.10.7
HID:hid-lg4ff: Initialize device properties before we touch autocentering.
mmc: sdhci: fix lockdep error in tuning routine
can: flexcan: flexcan_remove(): add missing netif_napi_del()
KVM: x86: handle invalid root_hpa everywhere
x86: bpf_jit: support negative offsets
p54: clamp properly instead of just truncating
deb-pkg: Fix cross-building linux-headers package
[media] dw2102: some missing unlocks on error
[media] cx18: check for allocation failure in cx18_read_eeprom()
[media] cxusb: unlock on error in cxusb_i2c_xfer()
libceph: resend all writes after the osdmap loses the full flag
libceph: block I/O when PAUSE or FULL osd map flags are set
ASoC: max98090: make REVISION_ID readable
libceph: fix preallocation check in get_reply()
libceph: rename front to front_len in get_reply()
libceph: rename ceph_msg::front_max to front_alloc_len
ext4: atomically set inode->i_flags in ext4_set_inode_flags()
Input: mousedev - fix race when creating mixed device
x86: fix boot on uniprocessor systems
Input: synaptics - add manual min/max quirk for ThinkPad X240
Input: synaptics - add manual min/max quirk
net: mvneta: fix usage as a module on RGMII configurations
net: mvneta: rename MVNETA_GMAC2_PSC_ENABLE to MVNETA_GMAC2_PCS_ENABLE
i2c: cpm: Fix build by adding of_address.h and of_irq.h
printk: fix syslog() overflowing user buffer
net: davinci_emac: Replace devm_request_irq with request_irq
tracing: Fix array size mismatch in format string
ALSA: compress: Pass through return value of open ops callback
drm/i915: Disable stolen memory when DMAR is active
clocksource: vf_pit_timer: use complement for sched_clock reading
Fix mountpoint reference leakage in linkat
x86, fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU
Btrfs: fix data corruption when reading/updating compressed extents
PNP / ACPI: proper handling of ACPI IO/Memory resource parsing failures
memcg: reparent charges of children before processing parent
iser-target: Fix post_send_buf_count for RDMA READ/WRITE
iscsi/iser-target: Fix isert_conn->state hung shutdown issues
ARM: ignore memory below PHYS_OFFSET
ARM: 7864/1: Handle 64-bit memory in case of 32-bit phys_addr_t
iwlwifi: disable TX AMPDU by default for iwldvm
MIPS: include linux/types.h
ipc: Fix 2 bugs in msgrcv() MSG_COPY implementation
x86/amd/numa: Fix northbridge quirk to assign correct NUMA node
i2c: Remove usage of orphaned symbol OF_I2C
ACPI / sleep: Add extra checks for HW Reduced ACPI mode sleep states
vmxnet3: fix building without CONFIG_PCI_MSI
drm/radeon/cik: properly set compute ring status on disable
drm/radeon/cik: stop the sdma engines in the enable() function
drm/radeon/cik: properly set sdma ring status on disable
drm/ttm: don't oops if no invalidate_caches()
dm cache: fix access beyond end of origin device
dm cache: fix truncation bug when copying a block to/from >2TB fast device
KVM: SVM: fix cr8 intercept window
PCI: Enable INTx in pci_reenable_device() only when MSI/MSI-X not enabled
[SCSI] storvsc: NULL pointer dereference fix
vmxnet3: fix netpoll race condition
fs/proc/base.c: fix GPF in /proc/$PID/map_files
mm/compaction: break out of loop on !PageBuddy in isolate_freepages_block
ocfs2 syncs the wrong range...
[SCSI] qla2xxx: Poll during initialization for ISP25xx and ISP83xx
[SCSI] isci: correct erroneous for_each_isci_host macro
[SCSI] isci: fix reset timeout handling
ibmveth: Fix endian issues with MAC addresses
net: unix socket code abuses csum_partial
mwifiex: save and copy AP's VHT capability info correctly
mwifiex: copy AP's HT capability info correctly
mac80211: clear sequence/fragment number in QoS-null frames
iwlwifi: mvm: don't WARN when statistics are handled late
s390/dasd: hold request queue sysfs lock when calling elevator_init()
net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable
tg3: Don't check undefined error bits in RXBD
ipv6: ipv6_find_hdr restore prev functionality
sfc: check for NULL efx->ptp_data in efx_ptp_event
ipv6: reuse ip6_frag_id from ip6_ufo_append_data
virtio-net: alloc big buffers also when guest can receive UFO
neigh: recompute reachabletime before returning from neigh_periodic_work()
net-tcp: fastopen: fix high order allocations
drm/radeon: re-order firmware loading in preparation for dpm rework
x86: fix compile error due to X86_TRAP_NMI use in asm files
x86: Ignore NMIs that come in during early boot
ARM: 7991/1: sa1100: fix compile problem on Collie
ARM: fix noMMU kallsyms symbol filtering
usb: Make DELAY_INIT quirk wait 100ms between Get Configuration requests
usb: Add device quirk for Logitech HD Pro Webcams C920 and C930e
libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus SpinPoint M8 (2BA30001)
firewire: don't use PREPARE_DELAYED_WORK
powerpc: Align p_dyn, p_rela and p_st symbols
powerpc/tm: Fix crash when forking inside a transaction
drm/radeon/atom: select the proper number of lanes in transmitter setup
drm/radeon/dpm: fix typo in EVERGREEN_SMC_FIRMWARE_HEADER_softRegisters
drm/radeon: TTM must be init with cpu-visible VRAM, v2
firewire: ohci: fix probe failure with Agere/LSI controllers
firewire: ohci: beautify some macro definitions
ACPI / EC: Fix incorrect placement of __initdata
NFSv4: nfs4_stateid_is_current should return 'true' for an invalid stateid
ALSA: usb-audio: Add quirk for Logitech Webcam C500
ALSA: hda - Add missing loopback merge path for AD1884/1984 codecs
pinctrl: sunxi: use chained_irq_{enter, exit} for GIC compatibility
iscsi/iser-target: Use list_del_init for ->i_conn_node
iscsi-target: Perform release of acknowledged tags from RX context
iscsi-target: Fix iscsit_get_tpg_from_np tpg_state bug
rapidio/tsi721: fix tasklet termination in dma channel release
zram: avoid null access when fail to alloc meta
ocfs2: fix quota file corruption
mm: include VM_MIXEDMAP flag in the VM_SPECIAL list to avoid m(un)locking
tracing: Do not add event files for modules that fail tracepoints
drm/i915: Reject >165MHz modes w/ DVI monitors
drm/i915: vlv: reserve GT power context early
can: flexcan: fix transition from and to freeze mode in chip_{,un}freeze
can: flexcan: factor out transceiver {en,dis}able into seperate functions
can: flexcan: fix transition from and to low power mode in chip_{en,dis}able
can: flexcan: Check the return value from clk_prepare_enable()
can: flexcan: flexcan_open(): fix error path if flexcan_chip_start() fails
can: flexcan: fix shutdown: first disable chip, then all interrupts
drm/i915: fix pch pci device enumeration
ALSA: hda - Added inverted digital-mic handling for Acer TravelMate 8371
spi: spi-ath79: fix initial GPIO CS line setup
NFS: Fix a delegation callback race
ACPI / resources: ignore invalid ACPI device resources
mwifiex: do not advertise usb autosuspend support
firewire: net: fix use after free
mac80211: fix association to 20/40 MHz VHT networks
cpuset: fix a race condition in __cpuset_node_allowed_softwall()
cpuset: fix a locking issue in cpuset_migrate_mm()
sched: Fix double normalization of vruntime
genirq: Remove racy waitqueue_active check
iwlwifi: fix TX status for aggregated packets
iwlwifi: mvm: change of listen interval from 70 to 10
regulator: core: Replace direct ops->disable usage
regulator: core: Replace direct ops->enable usage
mac80211: don't validate unchanged AP bandwidth while tracking
ath9k: Fix ETSI compliance for AR9462 2.0
ath9k: protect tid->sched check
mwifiex: fix cmd and Tx data timeout issue for PCIe cards
mwifiex: add NULL check for PCIe Rx skb
mwifiex: clean pcie ring only when device is present
iwlwifi: dvm: clear IWL_STA_UCODE_INPROGRESS when assoc fails
mac80211: fix AP powersave TX vs. wakeup race
mac80211: send control port protocol frames to the VO queue
jiffies: Avoid undefined behavior from signed overflow
ALSA: oxygen: Xonar DG(X): modify DAC routing
ALSA: oxygen: Xonar DG(X): capture from I2S channel 1, not 2

tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
importance: Undecided → Medium
Changed in linux (Ubuntu Saucy):
importance: Undecided → Medium
description: updated
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (15.8 KiB)

This bug was fixed in the package linux - 3.11.0-22.38

---------------
linux (3.11.0-22.38) saucy; urgency=low

  [ Brad Figg ]

  * Revert "rtlwifi: Set the link state"

linux (3.11.0-22.37) saucy; urgency=low

  [ Kamal Mostafa ]

  * Merged back Ubuntu-3.11.0-20.35 security release
  * Revert "n_tty: Fix n_tty_write crash when echoing in raw mode"
    - LP: #1314762
  * Release Tracking Bug
    - LP: #1317207

  [ Tim Gardner ]

  * [Config] d-i -- add virtio_scsi to virtio-modules
    - LP: #1315462

  [ Upstream Kernel Changes ]

  * n_tty: Fix n_tty_write crash when echoing in raw mode
    - LP: #1314762
    - CVE-2014-0196
  * floppy: ignore kernel-only members in FDRAWCMD ioctl input
    - LP: #1316729
    - CVE-2014-1737
  * floppy: don't write kernel-only members to FDRAWCMD ioctl output
    - LP: #1316735
    - CVE-2014-1738

linux (3.11.0-21.35) saucy; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1313831

  [ Upstream Kernel Changes ]

  * Revert "sparc64: Fix __copy_{to,from}_user_inatomic defines."
    - LP: #1311196
  * rds: prevent dereference of a NULL device in rds_iw_laddr_check
    - LP: #1302222
    - CVE-2014-2678
  * ALSA: oxygen: Xonar DG(X): capture from I2S channel 1, not 2
    - LP: #1311196
  * ALSA: oxygen: Xonar DG(X): modify DAC routing
    - LP: #1311196
  * jiffies: Avoid undefined behavior from signed overflow
    - LP: #1311196
  * mac80211: send control port protocol frames to the VO queue
    - LP: #1311196
  * mac80211: fix AP powersave TX vs. wakeup race
    - LP: #1311196
  * iwlwifi: dvm: clear IWL_STA_UCODE_INPROGRESS when assoc fails
    - LP: #1311196
  * mwifiex: clean pcie ring only when device is present
    - LP: #1311196
  * mwifiex: add NULL check for PCIe Rx skb
    - LP: #1311196
  * mwifiex: fix cmd and Tx data timeout issue for PCIe cards
    - LP: #1311196
  * ath9k: protect tid->sched check
    - LP: #1311196
  * ath9k: Fix ETSI compliance for AR9462 2.0
    - LP: #1311196
  * mac80211: don't validate unchanged AP bandwidth while tracking
    - LP: #1311196
  * regulator: core: Replace direct ops->enable usage
    - LP: #1311196
  * regulator: core: Replace direct ops->disable usage
    - LP: #1311196
  * iwlwifi: mvm: change of listen interval from 70 to 10
    - LP: #1311196
  * iwlwifi: fix TX status for aggregated packets
    - LP: #1311196
  * genirq: Remove racy waitqueue_active check
    - LP: #1311196
  * sched: Fix double normalization of vruntime
    - LP: #1311196
  * cpuset: fix a locking issue in cpuset_migrate_mm()
    - LP: #1311196
  * cpuset: fix a race condition in __cpuset_node_allowed_softwall()
    - LP: #1311196
  * mac80211: fix association to 20/40 MHz VHT networks
    - LP: #1311196
  * firewire: net: fix use after free
    - LP: #1311196
  * mwifiex: do not advertise usb autosuspend support
    - LP: #1311196
  * ACPI / resources: ignore invalid ACPI device resources
    - LP: #1311196
  * NFS: Fix a delegation callback race
    - LP: #1311196
  * spi: spi-ath79: fix initial GPIO CS line setup
    - LP: #1311196
  * ALSA: hda - Added inverted digital-mic handling for Acer TravelMate
    8371
    - LP: #1311196
  * drm/i915: fix pch p...

Changed in linux (Ubuntu Saucy):
status: New → Fix Released
Mathew Hodson (mhodson)
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.