** Branch linked: lp:ubuntu/precise-security/linux-lts-trusty -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1347088
Title: Trusty update to 3.13.11.5 stable release Status in “linux” package in Ubuntu: Confirmed Status in “linux” source package in Trusty: Fix Released Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from Linus' tree or in a minimally backported form of that patch. The 3.13.11.5 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well. git://git.kernel.org/ TEST CASE: TBD The following patches are in the 3.13.11.5 stable release: Linux 3.13.11.5 iscsi-target: fix iscsit_del_np deadlock on unload iscsi-target: Avoid rejecting incorrect ITT for Data-Out lz4: fix another possible overrun efi-pstore: Fix an overflow on 32-bit builds iscsi-target: Explicily clear login response PDU in exception path target: Fix left-over se_lun->lun_sep pointer OOPs ALSA: hda - restore BCLK M/N values when resuming HSW/BDW display controller MIPS: MSC: Prevent out-of-bounds writes to MIPS SC ioremap'd region recordmcount/MIPS: Fix possible incorrect mcount_loc table entries in modules ALSA: usb-audio: Fix races at disconnection and PCM closing net: allwinner: emac: Add missing free_irq powerpc: Don't skip ePAPR spin-table CPUs nfs: Fix cache_validity check in nfs_write_pageuptodate() aio: fix kernel memory disclosure in io_getevents() introduced in v3.10 aio: fix aio request leak when events are reaped by userspace [CIFS] fix mount failure with broken pathnames when smb3 mount with mapchars option drm/i915: Hold the table lock whilst walking the file's idr and counting the objects in debugfs mm: fix crashes from mbind() merging vmas DMA, CMA: fix possible memory leak mm, pcp: allow restoring percpu_pagelist_fraction default kernel/watchdog.c: remove preemption restrictions when restarting lockup detector hugetlb: fix copy_hugetlb_page_range() to handle migration/hwpoisoned entry x86_32, entry: Do syscall exit work on badsys (CVE-2014-4508) lz4: ensure length does not wrap lzo: properly check for overruns ALSA: hda - hdmi: call overridden init on resume rbd: handle parent_overlap on writes correctly blkcg: fix use-after-free in __blkg_release_rcu() by making blkcg_gq refcnt an atomic_t rt2x00: fix rfkill regression on rt2500pci b43: fix frequency reported on G-PHY with /new/ firmware rt2x00: disable TKIP on USB Bluetooth: Allow change security level on ATT_CID in slave role Bluetooth: Fix locking of hdev when calling into SMP code Bluetooth: Fix indicating discovery state when canceling inquiry Bluetooth: Fix setting correct authentication information for SMP STK Bluetooth: Fix SSP acceptor just-works confirmation without MITM ALSA: control: Make sure that id->index does not overflow ALSA: control: Handle numid overflow ALSA: control: Don't access controls outside of protected regions ALSA: control: Fix replacing user controls ALSA: control: Protect user controls against concurrent access arm64/dma: Removing ARCH_HAS_DMA_GET_REQUIRED_MASK macro arm64: ptrace: fix empty registers set in prstatus of aarch32 process core arm64: uid16: fix __kernel_old_{gid,uid}_t definitions arm64: ptrace: change fs when passing kernel pointer to regset code arm64: Bug fix in stack alignment exception USB: EHCI: avoid BIOS handover on the HASEE E200 ARM: mvebu: DT: fix OpenBlocks AX3-4 RAM size drm/nouveau/kms: reference vblank for crtc during pageflip. epoll: fix use-after-free in eventpoll_release_file ACPI / ia64 / sba_iommu: Restore the working initialization ordering Revert "offb: Add palette hack for little endian" rtmutex: Plug slow unlock race iio: adc: at91: signedness bug in at91_adc_get_trigger_value_by_name() drm/i915: Reorder semaphore deadlock check drm/i915: Avoid div-by-zero when pixel_multiplier is zero drm/i915: Disable FBC by default also on Haswell and later rtmutex: Detect changes in the pi lock chain rtmutex: Handle deadlock detection smarter iio: Fix endianness issue in ak8975_read_axis() staging: iio: tsl2x7x_core: fix proximity treshold ACPI / video: Add Dell Inspiron 5737 to the blacklist ALSA: hda/realtek - Add more entry for enable HP mute led ALSA: hda/realtek - Add more entry for enable HP mute led ALSA: hda - Add quirk for external mic on Lifebook U904 evm: prohibit userspace writing 'security.evm' HMAC value hwmon: (ina2xx) Cast to s16 on shunt and current regs ALSA: compress: Cancel the optimization of compiler and fix the size of struct for all platform. dm thin: update discard_granularity to reflect the thin-pool blocksize target: Report correct response length for some commands Target/iscsi: Fix sendtargets response pdu for iser transport powerpc/perf: Ensure all EBB register state is cleared on fork() powerpc: Don't setup CPUs with bad status powerpc: Correct DSCR during TM context switch powerpc: Add AT_HWCAP2 to indicate V.CRYPTO category support fs,userns: Change inode_capable to capable_wrt_inode_uidgid watchdog: sp805: Set watchdog_device->timeout from ->set_timeout() watchdog: ath79_wdt: avoid spurious restarts on AR934x watchdog: kempld-wdt: Use the correct value when configuring the prescaler with the watchdog auditsc: audit_krule mask accesses need bounds checking NFS: populate ->net in mount data when remounting drm/nouveau/kms/nv04-nv40: fix pageflip events via special case. drm/nv50-/mc: fix kms pageflip events by reordering irq handling order. iscsi-target: Fix ABORT_TASK + connection reset iscsi_queue_req memory leak target: Use complete_all for se_cmd->t_transport_stop_comp target: Set CMD_T_ACTIVE bit for Task Management Requests Btrfs: fix double free in find_lock_delalloc_range nfsd4: fix FREE_STATEID lockowner leak Input: elantech - don't set bit 1 of reg_10 when the no_hw_res quirk is set Input: elantech - deal with clickpads reporting right button events idr: fix overflow bug during maximum ID calculation at maximum height ptrace: fix fork event messages across pid namespaces rtc: rtc-at91rm9200: fix infinite wait for ACKUPD irq mm: vmscan: clear kswapd's special reclaim powers before exiting IB/umad: Fix use-after-free on close powerpc/mm: Check paca psize is up to date for huge mappings iscsi-target: Reject mutual authentication with reflected CHAP_C rbd: use reference counts for image requests ALSA: hda/realtek - Add support of ALC891 codec powerpc: 64bit sendfile is capped at 2GB powerpc/serial: Use saner flags when creating legacy ports mm/memory-failure.c: support use of a dedicated thread to handle SIGBUS(BUS_MCEERR_AO) mm/memory-failure.c: don't let collect_procs() skip over processes for MF_ACTION_REQUIRED mm/memory-failure.c-failure: send right signal code to correct thread mm: page_alloc: use word-based accesses for get/set pageblock bitmaps memcg: do not hang on OOM when killed by userspace OOM access to memory reserves mm: vmscan: do not throttle based on pfmemalloc reserves if node has no ZONE_NORMAL kthread: fix return value of kthread_create() upon SIGKILL. hugetlb: restrict hugepage_migration_support() to x86_64 mm: fix sleeping function warning from __put_anon_vma ahci: Add Device ID for HighPoint RocketRaid 642L drm/radeon: only apply hdmi bpc pll flags when encoder mode is hdmi drm/radeon/atom: fix dithering on certain panels drm/radeon/dp: fix lane/clock setup for dp 1.2 capable devices drm/radeon: fix typo in radeon_connector_is_dp12_capable() vgaswitcheroo: switch the mux to the igp on power down when runpm is enabled Bluetooth: Fix L2CAP deadlock UBIFS: Remove incorrect assertion in shrink_tnc() ASoC: tlv320aci3x: Fix custom snd_soc_dapm_put_volsw_aic3x() function nfsd: getattr for FATTR4_WORD0_FILES_AVAIL needs the statfs buffer block: virtio_blk: don't hold spin lock during world switch MIPS: KVM: Allocate at least 16KB for exception handlers RDMA/cxgb4: Add missing padding at end of struct c4iw_create_cq_resp IB/umad: Fix error handling usb: qcserial: add additional Sierra Wireless QMI devices usb: qcserial: add Netgear AirCard 341U hv: use correct order when freeing monitor_pages mtd: pxa3xx_nand: make the driver work on big-endian systems mac80211: don't check netdev state for debugfs read/write mac80211: fix a memory leak on sta rate selection table s390/lowcore: reserve 96 bytes for IRB in lowcore usb: usbtest: fix unlink write error with pattern 1 mei: me: read H_CSR after asserting reset mei: me: drop harmful wait optimization mei: me: fix hw ready reset flow IB/ipath: Translate legacy diagpkt into newer extended diagpkt IB/qib: Fix port in pkey change event IB/mlx5: add missing padding at end of struct mlx5_ib_create_srq IB/mlx5: add missing padding at end of struct mlx5_ib_create_cq ext4: fix wrong assert in ext4_mb_normalize_request() ext4: fix zeroing of page during writeback ahci: add PCI ID for Marvell 88SE91A0 SATA Controller s390/time: cast tv_nsec to u64 prior to shift in update_vsyscall KVM: lapic: sync highest ISR to hardware apic on EOI mac80211: fix IBSS join by initializing last_scan_completed staging/mt29f_spinand: Terminate of match table iio:adc:max1363 incorrect resolutions for max11604, max11605, max11610 and max11611. CIFS: Fix memory leaks in SMB2_open [media] ivtv: Fix Oops when no firmware is loaded [media] uvcvideo: Fix clock param realtime setting SUNRPC: Fix a module reference leak in svc_handle_xprt ARM: stacktrace: avoid listing stacktrace functions in stacktrace reiserfs: call truncate_setsize under tailpack mutex mtd: eLBC NAND: fix subpage write support mtd: nand: omap: fix BCHx ecc.correct to return detected bit-flips in erased-page Target/iser: Wait for proper cleanup before unloading Target/iser: Improve cm events handling IB/srp: Fix a sporadic crash triggered by cable pulling HID: core: fix validation of report id 0 Target/iser: Fix hangs in connection teardown Target/iser: Bail from accept_np if np_thread is trying to close PM / OPP: fix incorrect OPP count handling in of_init_opp_table hpsa: add new Smart Array PCI IDs (May 2014) ACPI: Fix conflict between customized DSDT and DSDT local copy ASoC: max98090: Fix reset at resume time [media] rtl28xxu: add [1b80:d3af] Sveon STV27 [media] rtl28xxu: add [1b80:d39d] Sveon STV20 [media] rtl28xxu: add 1b80:d395 Peak DVB-T USB [media] rtl28xxu: add USB ID for Genius TVGo DVB-T03 UBIFS: fix an mmap and fsync race condition ext4: fix data integrity sync in ordered mode iwlwifi: pcie: try to get ownership several times x86, x32: Use compat shims for io_{setup,submit} Drivers: hv: balloon: Ensure pressure reports are posted regularly genirq: Sanitize spurious interrupt detection of threaded irqs x86-32, espfix: Remove filter for espfix32 due to race PCI: Add new ID for Intel GPU "spurious interrupt" quirk powerpc/pseries: Fix overwritten PE state bluetooth: hci_ldisc: fix deadlock condition builddeb: use $OBJCOPY variable instead of objcopy extcon: max8997: Fix NULL pointer exception on missing pdata extcon: max77693: Fix two NULL pointer exceptions on missing pdata mtip32xx: Fix ERO and NoSnoop values in PCIe upstream on AMD systems mtip32xx: Remove dfs_parent after pci unregister mtip32xx: Increase timeout for STANDBY IMMEDIATE command ACPICA: utstring: Check array index bound before use. usb: dwc3: gadget: clear stall when disabling endpoint NFS: Don't declare inode uptodate unless all attributes were checked introduce for_each_thread() to replace the buggy while_each_thread() netfilter: nf_nat: fix oops on netns removal igb: fix stats for i210 rx_fifo_errors Bluetooth: Fix check for connection encryption Bluetooth: Fix redundant encryption request for reauthentication ipv6: Fix regression caused by efe4208 in udp_v6_mcast_next() ALSA: usb-audio: Prevent printk ratelimiting from spamming kernel log while DEBUG not defined btrfs: fix defrag 32-bit integer overflow To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1347088/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp